<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="4289">
<package pkgid="3cb227221f04a3ec8499a8231d04d8a59c82e47152e6e023a6b4d81b166d5a51" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="150200.10.26.1"/>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1638878400">- security update
- added patches
  fix CVE-2021-20176 [bsc#1181836], processing crafted file leads to division by zero
  + ImageMagick-CVE-2021-20176.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha() in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184001">- added patches
  use png_get_eXIf_1 when available [bsc#1197147]
  + ImageMagick-missing-png_get_eXIf_1.patch</changelog>
</package>
<package pkgid="2006ee9ee6416407475dea69bda89c6adb9266b3d557aaf7c2cc7e2e3ef8a505" name="MozillaFirefox" arch="aarch64">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="5cdeefb7ccc3fcc91ab692bdc25e20720839d1164aff107374c6dd910fe3cc7a" name="MozillaFirefox" arch="ppc64le">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="64d8e8ca81e39a9d57bcfe32f1cb073d74c262d54b5cfc4db895e503cb31dff4" name="MozillaFirefox" arch="s390x">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="44f5edd1806f36cc011fefb3bf0394cef9b621ba05ec25f77bbf33586f844fc7" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="c09ca72e081d7d8271de1121bda9caa034e4a5da20956c89040b1975ede1a736" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="3a61b8b4ccae359659d5a945fb307cde059d0a244c61e4373b4787dafc601003" name="MozillaFirefox" arch="aarch64">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="39305637ea2da6b4fdee29c71383fd1ac13957dad8441e28e12f71818c5b107f" name="MozillaFirefox" arch="ppc64le">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="583916dc9edeec647747cc97cc4bf88894210980d16b014843f1e3b541367fec" name="MozillaFirefox" arch="s390x">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="1279632df277b95542bc2a578349d6831fc31e9df43d6a4651de52732416c00c" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="802a9597d830fa4c5c05dbabe0920c0aeab5bdac9051cf8c501014cf5b93abf8" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="fd566c089940493d575733907ced80bac4362d660db26e0bd30d66071fc46aa3" name="MozillaFirefox" arch="aarch64">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="4749644cd462e83e05a6ed8069011a78faa85eb6ef196f3b5ef4cee5d7f21ced" name="MozillaFirefox" arch="ppc64le">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="6ec4ae7137febf25da118c87479572ba17735558c1c7301fbc984fc6b8c66303" name="MozillaFirefox" arch="s390x">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="e022a705b8a45bbbe4236329283664b11ebc4a8326d63659bca1a0a42357dc82" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="71f9acd09803c626a981f38ccded72663c8e095342b94ca5e72e14496c228752" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="afbe22c23e3303e237820cbdcddbf37520fe539e9b76786abbee609a801bd4a9" name="MozillaFirefox" arch="aarch64">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="fd23cccdac7f92c6bbbefabacd7feaec0bde31e59a34c2e24c91157abcd28bbb" name="MozillaFirefox" arch="ppc64le">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="a308cbd0ccf520779d6af8020a5a13ee315d950c86290bf02dd3b8d9349601a6" name="MozillaFirefox" arch="s390x">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="12d7d5257c15680abedfc187797346988b22810dba61e466f22220c7da45e686" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="e1f22e5cdf61a271ba570e91d83083700ce2ee7c6b4bb221e1bc7326bfff4d74" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="3330bf5a33a60b57a026fce3944d8c12ff259e1c723ae56e01fb29da8ceaffe9" name="MozillaFirefox-branding-upstream" arch="aarch64">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="cb8c1b9921a382e9d7464c50914ac2936e12ec2d657950a06fcc9b8704b218d9" name="MozillaFirefox-branding-upstream" arch="ppc64le">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="c1d9b15ab64ee7f305387e4751d584ad47e0ab558d28809116365da8d10d1c35" name="MozillaFirefox-branding-upstream" arch="s390x">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="aee042b56de8042ee566cb2127582f9c7c79e0f691476254ee33204ff577cc07" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="ac23bf8ae7628214f63acf1fe42592fe5c9ffefb41f51dff3b8657f1c1f9529e" name="MozillaFirefox-branding-upstream" arch="aarch64">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="6e4fd1ac50b6839773d8c53ed4c4e3d83e422b03bcf23c32632acf9c84db795b" name="MozillaFirefox-branding-upstream" arch="ppc64le">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="c4a30bb835049cd2d2d0fe650accfb2fe14bd63e7093da9f0e08d4c9d1260741" name="MozillaFirefox-branding-upstream" arch="s390x">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="208ad7b09d8722299362e98ae4e42a67241b4407c0e95a125e0d022b4847b5be" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="26a3118f6a60cdd5c2dcfafe6339f8a3fb50e5a8e719f3fdcd10a6066654f780" name="MozillaFirefox-branding-upstream" arch="aarch64">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="ef66a342260af0b83293a7b66bc64f3d0d203d927557b9075b3bed6feb008153" name="MozillaFirefox-branding-upstream" arch="ppc64le">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="dbc4b01ac46a4a209bf493095dc1e28539f8ca9525f4e8f8117e6d5c5c63b9ca" name="MozillaFirefox-branding-upstream" arch="s390x">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="e3ca145ac9142966de93e88806f137a7caac8f4fea19ab42eef6d0e8200aa681" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="3f7d299216f774062e6b2ef67df948d1429c16b185f5b655ef336562f1319bb9" name="MozillaFirefox-branding-upstream" arch="aarch64">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="2b4563bcea97fd4b6a6b0ae045e747e048fd2d4507c8f5ed9836ab98fd004bf2" name="MozillaFirefox-branding-upstream" arch="ppc64le">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="e02033d54d49931da681bbaa14d441c9910a2103d02155ac72302f6ee79d795e" name="MozillaFirefox-branding-upstream" arch="s390x">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="9b7930573dff00906f8e6407eec985e79612ae8f5963649bdb48829cd23c7dc1" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="b9e5c24578449aed797a597304de59763848769c6e491beddb4deaee4138aa66" name="MozillaFirefox-devel" arch="aarch64">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="7e76df58d650db2eb485f1b4a5a89c92da27411de4dffde2277907433c1d224b" name="MozillaFirefox-devel" arch="ppc64le">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="33706794af6967169214c49c2b3ec8a1bd55cdf3698de50cd84880757ef1a8e6" name="MozillaFirefox-devel" arch="s390x">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="9a7aa2cb1ee03a0e145a191533a23a55f075184e010e485dd6241ca833a64b05" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="366c35222bdf7f2b07dbd9b1c04d6adec8f1cbf502bf8a13d74edb044c28f90f" name="MozillaFirefox-devel" arch="aarch64">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="4a86773ff8a63f80d1315991f185df70877f4a317854497b1453f93ecead4d78" name="MozillaFirefox-devel" arch="ppc64le">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="4f456a152eb266a3f1488307323faa870f955288d7616dbc7a9d2078269c6290" name="MozillaFirefox-devel" arch="s390x">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="508ef2b98956a88739c037512562a68dea81aa2d99b29aba8b6c478fcd003c1b" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="506fdf99460460cac0da1a6db5b592f6fa3dc02921a196b4e9fd524c9bb35253" name="MozillaFirefox-devel" arch="aarch64">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="2f645b58fd23a168c0d965d61e11d359c79fd0466bcd1d6e9bb61be6c62e4022" name="MozillaFirefox-devel" arch="ppc64le">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="f240a920c58e7920972c37ef9bac20b42dd8ba64837a7cc9bd8cdf0d4442cdfb" name="MozillaFirefox-devel" arch="s390x">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="f07788d1422b3b0d34932f46bcf8f5b0bb720ae93f346f33aadf87a482873a84" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="9f3e7e7542889e45d94d3ba4621180a5c65ff393bb345abdb46c68d2c59daf8c" name="MozillaFirefox-devel" arch="aarch64">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="8da4d83a925b95a7235abd423aa00e1370498fa0167bfcdbb5f9892746489f16" name="MozillaFirefox-devel" arch="ppc64le">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="fb384ec9e5c7518db310f233387bd48134735c000dcc27a96f1c5c5b7ebe3051" name="MozillaFirefox-devel" arch="s390x">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="1d8d9efb54ba2d2b3e3a13f34eac79e8135be7c0b83eee5d85ae4527e84c61ab" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="4179cc6c1bb6d57f3f310c9a533dd68fcea2febef1eb8e39df666c954c442a4c" name="MozillaFirefox-translations-common" arch="aarch64">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="bbfd27c5f64f426e049536a308980b8c3c5e52774ad0042fa95a5b9dd0e0aa18" name="MozillaFirefox-translations-common" arch="ppc64le">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="212fa6d02b347b2f0bcc567facd23dc13c902126ad9c773090e3aadbf11ac34d" name="MozillaFirefox-translations-common" arch="s390x">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="fdb66ac31679ad2cece52826a8b80c340a7a00e0edfb3e2621496baee8d0ea6e" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="728d6b4b7a4b24c636e2d556c4b68ec60a747fd21b6350456c2c794a24fe952f" name="MozillaFirefox-translations-common" arch="aarch64">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="2645a0a6bedca220be2ede640006cbdc10705fe41a2f01839d4ff9dfc3f43b59" name="MozillaFirefox-translations-common" arch="ppc64le">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="e6d518cbe6f51520a4d4597438d8f318f71ec4fba9510a69cc35eccbd9f53cfd" name="MozillaFirefox-translations-common" arch="s390x">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="10a717047f3bab9044a20be59a12c95987580c0f5344518ebeb40999e133adf2" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="0097c3e9fad4666effb0b7e11f21b22b3b0b9d0e08dd3b5753de62625979d152" name="MozillaFirefox-translations-common" arch="aarch64">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="9d8bb04687490a1ad30bd9ea9fadc378458b08c4f9d418cce07bf562dd4fd1b4" name="MozillaFirefox-translations-common" arch="ppc64le">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="20a151efc6d1a7a788d8a772265e0d56ca2f1943688a398f345c6889961113d7" name="MozillaFirefox-translations-common" arch="s390x">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="d125c236293c2eb72dd802602cd4e441a54d83afd4a52bf6d1db3d66c551463f" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="a818438eced3914650201d4247057733ec7a90795bf97c87e9ae45b4882c623d" name="MozillaFirefox-translations-common" arch="aarch64">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="6c4aacb3329aa186d335b1558c820d50c716ddf66a970391f92dfa5387607311" name="MozillaFirefox-translations-common" arch="ppc64le">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="f948d85315fe0706064521c4747dbeb8fbb55b83841dc09b0a687a2c25700041" name="MozillaFirefox-translations-common" arch="s390x">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="12622fc71b48b4fa7f8e260647dd2b40e0b78030a16f208e6deb51ac5d5a0a88" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="fc70176de752eaf4d0b4a5e49b622e0d38637e23c4a4355b78a88ffc691c2b28" name="MozillaFirefox-translations-other" arch="aarch64">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="26a985e2820a83f31b5e209d8642b37f9190be1ea286461245e970e28c4b3fe5" name="MozillaFirefox-translations-other" arch="ppc64le">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="1e12dd81101197e95beb2767fea28be433ed089117b04575884a4664c82beeda" name="MozillaFirefox-translations-other" arch="s390x">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="6d02ab5a8b50798cc30d9dd356335f87ca5e575a89329e4bea8ac8c084236050" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="91.10.0" rel="150200.152.43.1"/>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
</package>
<package pkgid="85a11133a31f885d3557cf2fed57843e24e1945b16cf6fe0ee984342919d87b9" name="MozillaFirefox-translations-other" arch="aarch64">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="a291b9f3444c7593bce50f0cf93010401254556c44b280c0a0c47c0729c92936" name="MozillaFirefox-translations-other" arch="ppc64le">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="dc554e664b5041204ae7f0ec77c2763803b6b3b99c6085ed71ee2a1f1273a05e" name="MozillaFirefox-translations-other" arch="s390x">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="c00f995d44cd158640c12157670c1afe1b22414062991897c5a6e24ab928df8a" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="91.9.0" rel="150200.152.33.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1629288000">- Firefox 91.0.1esr ESR
  * Fixed: Fixed an issue causing buttons on the tab bar to be
    resized when loading certain websites (bug 1704404)
    (bmo#1704404)
  * Fixed: Fixed an issue which caused tabs from private windows
    to be visible in non-private windows when viewing switch-to-
    tab results in the address bar panel (bug 1720369)
    (bmo#1720369)
  * Fixed: Various stability fixes
  * Fixed: Security fix
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- Re-add mozilla-silence-no-return-type.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="873a0b008fb6ad0ecefdea04e979b91946e90f3610e1dfb2a47cd10979d05559" name="MozillaFirefox-translations-other" arch="aarch64">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="c9eef35f241a7d601eaec316553a4167f8ae248a8550d1c3bfb146e46a865454" name="MozillaFirefox-translations-other" arch="ppc64le">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="53f85ec15620281a17a6577182493c2b59a4813e7a88469beb171db99cc03b64" name="MozillaFirefox-translations-other" arch="s390x">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="f56e1b6d90e374f777ed46b7704a13bcfcdb403bf12bedc65c59c2468586d68f" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="91.9.0" rel="150200.152.37.3"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060801">- Firefox Extended Support Release 91.9.0 ESR
  * Changelog placeholder. Details will be filled in, once released
    (bsc#1198970)</changelog>
</package>
<package pkgid="7122bf01abf8e89a91489f6f5d3de6ba5f2284978396a4b26062ae820f261c56" name="MozillaFirefox-translations-other" arch="aarch64">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="cb6d665e1dd897afff129413c4321015d5172b4fbe19192631f4ee9b5379f543" name="MozillaFirefox-translations-other" arch="ppc64le">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="54ec5651d4588917a94ee2976ab5ff46944089916290cf927a5e9dce69f4d512" name="MozillaFirefox-translations-other" arch="s390x">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="d80ae2c748c7c4ee8064709118823f83230efb3fcd30f4e2f62001af6c0c7abb" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="91.9.1" rel="150200.152.40.1"/>
  <changelog author="cgrobertson@suse.com" date="1631102400">- Firefox Extended Support Release 91.1.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-40 (bsc#1190269, bsc#1190274)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1
- Removed mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch
  made obsolete by upstream changes.
- Rebased patches:
    firefox-branded-icons.patch
    firefox-kde.patch
    mozilla-aarch64-startup-crash.patch
    mozilla-bmo1504834-part1.patch
    mozilla-bmo1504834-part4.patch
    mozilla-bmo1512162.patch
    mozilla-bmo1626236.patch
    mozilla-bmo849632.patch
    mozilla-kde.patch
    mozilla-ntlm-full-path.patch
    mozilla-s390-context.patch
    mozilla-sandbox-fips.patch</changelog>
  <changelog author="cgrobertson@suse.com" date="1631188800">- Added firefox-i586-conflict-typedef-error.patch
    to fix 32bit i586 compile error</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633089600">- Add mozilla-neqo-fix-fips-crash.patch to fix crash in FIPS mode
  (bsc#1190710)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633435200">- Firefox Extended Support Release 91.2.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-45 (bsc#1191332)
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    https://github.com/crossbeam-rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15,
    and Firefox ESR 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634731200">- Rebase mozilla-sandbox-fips.patch to punch another hole in the
  sandbox containment, to be able to open /proc/sys/crypto/fips_enabled
  from within the newly introduced socket process sandbox.
  This fixes bsc#1191815 and bsc#1190141
- Add a way to let users overwrite MOZ_ENABLE_WAYLAND
- Rename mozilla-neqo-fix-fips-crash.patch to mozilla-bmo1735309.patch
  and rebase to the official upstream patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1635854400">- Firefox Extended Support Release 91.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2021-49 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Firefox could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3
- Removed mozilla-bmo1735309.patch which is now upstream</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1638446400">- remove x-scheme-handler/ftp from MozillaFirefox.desktop boo#1193321</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638878400">- Firefox Extended Support Release 91.4.0 ESR
  * Fixed: Various security fixes
- Mozilla Firefox ESR 91.4.0
  MFSA 2021-53 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Firefox 95 and Firefox ESR 91.4</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1639656000">- Firefox Extended Support Release 91.4.1 ESR (bsc#1193845)
  * Fixed frequent MOZILLA_PKIX_ERROR_OCSP_RESPONSE_FOR_CERT_MISSING
    error messages when trying to connect to various microsoft.com
    domains (bmo#1745600)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641902400">- Firefox Extended Support Release 91.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1643284800">- Firefox Extended Support Release 91.5.1 ESR (bsc#1195230)
  * Fixed: Fixed an issue that allowed unexpected data to be
    submitted in some of our search telemetry (bmo#1752317)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644321600">- Firefox Extended Support Release 91.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-05 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Firefox 97 and Firefox ESR 91.6</changelog>
  <changelog author="cgrobertson@suse.com" date="1646654400">- Firefox Extended Support Release 91.6.1 ESR
  * Fixed: Security fix
- Mozilla Firefox ESR 91.6.1
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646827200">- Firefox Extended Support Release 91.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes
  MFSA 2022-10 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647345600">- Firefox Extended Support Release 91.7.1 ESR
  * Changed: Yandex and Mail.ru have been removed as optional
    search providers in the drop-down search menu in Firefox.
    If you previously installed a customized version of Firefox
    with Yandex or Mail.ru, offered through partner distribution
    channels, this release removes those customizations,
    including add-ons and default bookmarks. Where applicable,
    your browser will revert back to default settings, as offered
    by Mozilla. All other releases of Firefox remain unaffected
    by the change.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
</package>
<package pkgid="f434d65e8a3fb98633630e54322dad08c3d6876660099e0cd77baf477482c1b4" name="MozillaThunderbird" arch="aarch64">
  <version epoch="0" ver="91.9.0" rel="150200.8.68.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
</package>
<package pkgid="2a9d9277602e6e1ecaf54571436572f04f8310fbb490000ed0b99bb441483e09" name="MozillaThunderbird" arch="ppc64le">
  <version epoch="0" ver="91.9.0" rel="150200.8.68.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
</package>
<package pkgid="c07f1648fbefc0ad454db5a4d2fdc4a8a8aac50a20b19b58f1bdbf6a7dcba1e2" name="MozillaThunderbird" arch="s390x">
  <version epoch="0" ver="91.9.0" rel="150200.8.68.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
</package>
<package pkgid="01823a61a14aa9ef93f817cd27bef44cb190395c58309798ef3c38d3b67e8552" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="91.9.0" rel="150200.8.68.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
</package>
<package pkgid="6f950bce2c60e8098cf08da4c9c2c07cdd86a27e39291a46003adb93e18ac765" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="91.9.0" rel="150200.8.68.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
</package>
<package pkgid="21acb807f04a82070c3a8683b6941c62aa90ccd35241247822c11219018c3088" name="MozillaThunderbird-translations-common" arch="aarch64">
  <version epoch="0" ver="91.9.0" rel="150200.8.68.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
</package>
<package pkgid="004efe56ad6bb1c7ea17f2d85d9c74ce995ad54e7526f18d4957b88e5ca210a9" name="MozillaThunderbird-translations-common" arch="ppc64le">
  <version epoch="0" ver="91.9.0" rel="150200.8.68.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
</package>
<package pkgid="79127f486dc9da2722abaf266125f41d62fa5d6f7a7761876b24ded06db35f09" name="MozillaThunderbird-translations-common" arch="s390x">
  <version epoch="0" ver="91.9.0" rel="150200.8.68.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
</package>
<package pkgid="4253b57fbb2eed591c5eec5defa16fe66d3d288be3a3890963082b2a1e924188" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="91.9.0" rel="150200.8.68.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
</package>
<package pkgid="d99502b15e4e9afeec3835f15629716b9aa7488cab39c165b883950c385f9f1f" name="MozillaThunderbird-translations-other" arch="aarch64">
  <version epoch="0" ver="91.9.0" rel="150200.8.68.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
</package>
<package pkgid="1b609ff558fd1027e34310e0484f7304775df8765a1855aa06a7dee252548d9c" name="MozillaThunderbird-translations-other" arch="ppc64le">
  <version epoch="0" ver="91.9.0" rel="150200.8.68.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
</package>
<package pkgid="c541ec95f7de8b5802fd591183649cb89069c0d79eb70a49c34fad6f6c2aee7d" name="MozillaThunderbird-translations-other" arch="s390x">
  <version epoch="0" ver="91.9.0" rel="150200.8.68.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
</package>
<package pkgid="5467b6f85214086ba9867aebb90175b4b4aa4cd6e7646fdf7f1389adaef3f9d5" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="91.9.0" rel="150200.8.68.2"/>
  <changelog author="martin.sirringhaus@suse.com" date="1620216000">- Mozilla Thunderbird 78.8.1
  * changed: Removed the fix for bug 1689804 introduced in
    Thunderbird 78.9.0, restoring the previous behavior
  * fixed: Various security fixes
  MFSA 2021-17 (bsc#1185633)
  * CVE-2021-29950 (bmo#1673239)
    Logic issue potentially leaves key material unlocked</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1621339200">- Mozilla Thunderbird 78.10.2
  * new: Added support for importing OpenPGP keys without a
    primary secret key
  * new: Add-ons manager displays a preferences icon for mail
    extensions that include an options page
  * fixed: OpenPGP messages with a high compression ratio (over
    10x) could not be decrypted
  * fixed: Selected OpenPGP key was lost after opening the Key
    Properties dialog in Account Settings
  * fixed: Parsing some OpenPGP user IDs failed
  * fixed: Various improvements to OpenPGP partial encryption
    reminders
  * fixed: Troubleshooting information page did not display row
    labels on macOS
  * fixed: Mail toolbar buttons were too big when displaying both
    icons and text
  * fixed: Various security fixes
  MFSA 2021-22
  * CVE-2021-29957 (bmo#1673241, bsc#1186198)
    Partial protection of inline OpenPGP message not indicated
  * CVE-2021-29956 (bmo#1710290, bsc#1186199)
    Thunderbird stored OpenPGP secret keys without master
    password protection
- Mozilla Thunderbird 78.10.1
  MFSA 2021-19
  * CVE-2021-29951 (bmo#1690062, bsc#1185633)
    Thunderbird Maintenance Service could have been started or
    stopped by domain users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1623153600">- Mozilla Thunderbird 78.11
  * fixed: OpenPGP could not be disabled for an account if a key
    was previously configured
  * fixed: Recipients were unable to decrypt some messages when
    the sender had changed the message encryption from OpenPGP to
    S/MIME
  * fixed: Contacts moved between CardDAV address books were not
    synced to the new server
  * fixed: CardDAV compatibility fixes for Google Contacts
  * fixed: Folder pane had no clear indication of focus on macOS
  * fixed: Windows theme improvements
  * fixed: Various security fixes
  MFSA 2021-26 (bsc#1186696)
  * CVE-2021-29964 (bmo#1706501)
    Out of bounds-read when parsing a `WM_COPYDATA` message
  * CVE-2021-29967 (bmo#1602862, bmo#1703191, bmo#1703760,
    bmo#1704722, bmo#1706041)
    Memory safety bugs fixed in Thunderbird 78.11
- Added the new Mozilla's GPG key, expiring on 2023-05-17 to the
  mozilla.keyring file</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1626350400">- Mozilla Thunderbird 78.12
  * fixed: Sending an email containing HTML links with spaces in
    the URL sometimes resulted in broken links
  * fixed: Folder Pane display theme fixes for macOS
  * fixed: Chat account settings did not always save as expected
  * fixed: RSS feed subscriptions sometimes lost
  * fixed: Calendar: A parsing error for alarm triggers of type
    "DURATION" caused sync problems for some users
  * fixed: Various security fixes
  MFSA 2021-30 (bsc#1188275)
  * CVE-2021-29969 (bmo#1682370)
    IMAP server responses sent by a MITM prior to STARTTLS could
    be processed
  * CVE-2021-29970 (bmo#1709976)
    Use-after-free in accessibility features of a document
  * CVE-2021-30547 (bmo#1715766)
    Out of bounds write in ANGLE
  * CVE-2021-29976 (bmo#1700895, bmo#1703334, bmo#1706910,
    bmo#1711576, bmo#1714391)
    Memory safety bugs fixed in Thunderbird 78.12</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1628769600">- Mozilla Thunderbird 78.13
  * changed: WeTransfer FileLink provider removed
  * changed: The fix for bmo#1707360, from Thunderbird 78.12.0,
    was removed for causing regressions
  * fixed: OpenPGP: Homebrew's GPG Smartcard libraries not found
    on M1 Macs
  * fixed: Various security fixes
  MFSA 2021-35 (bsc#1188891)
  * CVE-2021-29986 (bmo#1696138)
    Race condition when resolving DNS names could have led to
    memory corruption
  * CVE-2021-29988 (bmo#1717922)
    Memory corruption as a result of incorrect style treatment
  * CVE-2021-29984 (bmo#1720031)
    Incorrect instruction reordering during JIT optimization
  * CVE-2021-29980 (bmo#1722204)
    Uninitialized memory in a canvas object could have led to
    memory corruption
  * CVE-2021-29985 (bmo#1722083)
    Use-after-free media channels
  * CVE-2021-29989 (bmo#1662676, bmo#1666184, bmo#1719178,
    bmo#1719998, bmo#1720568)
    Memory safety bugs fixed in Thunderbird 78.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1630670400">- Mozilla Thunderbird 91.0.3:
  * fixed: Folder icons could be overridden by linked favicons in
    HTML messages
  * fixed: Unified folders showed no messages when underlying
    folders were removed
  * fixed: Folder pane toolbar did not always persist after
    restarting Thunderbird
  * fixed: Compose window attachment pane did not close when
    disabling signing of an OpenPGP message
  * fixed: Using "Reply to List" with some list emails
    incorrectly opened a "no-reply" warning
  * fixed: Account setup UX issues with Exchange autodiscover
  * fixed: Account settings did not display non-UTF-8 server
    descriptions correctly
  * fixed: Thunderbird sometimes sent an unnecessary "SMTPUTF8",
    causing some servers to reject mail
  * fixed: No mouseover pop was displayed with event details for
    non-all-day events in the Today Pane
  * fixed: Filtering tasks in the Today Pane did not work
  * fixed: Email based event scheduling displayed the date and
    time in a format unreadable by humans
- Mozilla Thunderbird 91.0.2:
  * new: Tags are now colored in mail filter editor
  * changed: Context menu items related to OpenPGP and
    attachments are now hidden when not applicable
  * fixed: Creating a new account with manual setup failed
  * fixed: Recipient autocomplete always preferred the primary
    email address for a contact
  * fixed: LDAP performance improvements
  * fixed: Extensions listed on the Recommended Addons did not
    have a clear way to view details in a browser
  * fixed: Status checkmark on View &gt; Calendar &gt; Calendar Pane &gt;
    Show Calendar Pane was reversed
  * fixed: mid: URLs in calendar invites did not open the linked
    mail message
  * fixed: Various theme and UX fixes
- Mozilla Thunderbird 91.0.1
  MFSA 2021-37 (bsc#1189547)
  * CVE-2021-29991 (bmo#1724896)
    Header Splitting possible with HTTP/3 Responses
- appdate screenshot URL updated (by mailaender@opensuse.org)
- Mozilla Thunderbird 91.0
  * based on Mozilla's 91 ESR codebase
  * many new and changed features
    https://www.thunderbird.net/en-US/thunderbird/91.0/releasenotes/#whatsnew
  * Renamed "Add-ons" to "Add-ons and Themes" and "Options" to "Preferences"
  * Thunderbird now operates in multi-process (e10s) mode by default
  * New user interface for adding attachments
  * Enable redirect of messages
  * CardDAV address book support
- Removed obsolete patches:
  * mozilla-bmo1463035.patch
  * mozilla-ppc-altivec_static_inline.patch
  * mozilla-pipewire-0-3.patch
  * mozilla-bmo1554971.patch
- add mozilla-libavcodec58_91.patch
- removed obsolete BigEndian ICU build workaround
- updated build requirements
- Readd mozilla-silence-no-return-type.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1633521600">- Mozilla Thunderbird 91.1.2
  * Thunderbird will now warn if an S/MIME encrypted message includes
    BCC recipients
  * fixed: Message Security popup did not display all recipients
    due a missing scrollbar
  * fixed: Delivery Status Notifications were only shown for the
    first recipient
  * fixed: Composing a message from a template with attachments
    failed due to a temporary file being removed
  * fixed: Attachment sizes were no longer included on printed
    emails
  * fixed: A message sent with multiple attachments sometimes
    only sent one
  * fixed: Thunderbird sometimes attached the wrong messages when
    forwarding multiple messages by attachment
  * fixed: Thunderbird did not re-prompt for an SMTP username if
    one was not provided
  * fixed: Messages with BCC recipients that were held in the
    Outbox did not retain the BCC header when moved to the Sent
    folder
  * fixed: Thunderbird displayed reminders for events that were
    cancelled or declined
  * fixed: New Feed Account dialog did not honor dark mode
- Mozilla Thunderbird 91.1.1
  * Menu item for disabling subject encryption for a single message added
  * Printing messages that are not currently displayed is no longer
    supported, including printing multiple messages at once
  * fixed: Buttons on compose window dialogs did not have a
    visual indication of focus
  * fixed: Dropdown fields in message compose window were
    unreadable on Windows 7 with a dark theme
  * fixed: Multiple bulk mail notification warnings were
    displayed
  * fixed: Enabled/Disabled state of message filters did not
    persist as expected
  * fixed: Printing a message did not print a list of its
    attachments
  * fixed: Images attached from a web page were not sent as
    expected
  * fixed: OpenPGP public key was attached multiple times when
    forwading a message
  * fixed: Windows tray icon disappeared if Thunderbird was
    started by a shortcut with "Run" set to "Minimized"
  * fixed: Windows tray message count badge displayed the
    "unread" count instead of the "new" message count
  * fixed: Some downstream Thunderbird builds were incorrectly
    checking addons for a signature, causing all addons to be
    disabled
  * fixed: Addressbooks set up with autoconfig showed no search
    results
  * fixed: Various CardDAV setup and auto-detection fixes
  * fixed: Dates (such as birthday) stored in contacts may
    display the wrong date; a one-time manual fix may be needed
    for dates that are incorrect.
  * fixed: Attached VCards displayed as plain text when an email
    was HTML formatted
  * fixed: Mailing list names with non-ASCII characters
    incorrectly displayed with an error
  * fixed: LDAP directories were not searched for matches when
    adding recipients to an email
  * fixed: Clicking "Connect to an LDAP address book" in account
    setup opened CardDAV setup dialog
  * fixed: LDAP address books using Kerberos/GSS-API
    authentication did not authenticate
  * fixed: LDAP search queries containing non-ASCII characters
    produced no results
  * fixed: IRC server connections did not automatically retry
    after a timeout
  * fixed: Calendar event editor did not honor
    `mail.spellcheck.inline`
- MOZ_ENABLE_WAYLAND env variable now overrides automatic detection
  if already set before startup
- Mozilla Thunderbird 91.1.0
  * Thunderbird registered Accessibility Handlers using same GUIDs
    as Firefox, causing performance issues for NVDA users
  * Focus lost when reordering accounts by keyboard in the Account Manager
  * Account setup did not use provider display name for setting up
    calendars
  * Various theme and UX fixes
  MFSA 2021-41 (bsc#1190269)
  * CVE-2021-38492 (bmo#1721107)
    Navigating to `mk:` URL scheme could load Internet Explorer
  * CVE-2021-38495 (bmo#1723391, bmo#1723920, bmo#1724101,
    bmo#1724107)
    Memory safety bugs fixed in Thunderbird 91.1
- add mozilla-bmo531915.patch to fix build for i586
- Remove obsolete patch mozilla-disable-wasm-emulate-arm-unaligned-fp-access.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1634126400">- Mozilla Thunderbird 91.2
  * changed: Saving a single message as .eml now uses a unique
    filename
  * fixed: New mail notifications did not properly take
    subfolders into account
  * fixed: Decrypting binary attachments when using an external
    GnuPG configuration failed
  * fixed: Account name fields in the account manager were not
    big enough for long names
  * fixed: LDAP searches using an extensibleMatch filter returned
    no results
  * fixed: Read-only CalDAV calendars and CardDAV address books
    were not detected
  * fixed: Multipart messages containing a calendar invite did
    not display any of the human-readable alternatives
  * fixed: Some calendar days were displayed incorrectly or
    duplicated (eg. two "29th" days of a particular month)
  * fixed: Phantom event was shown at the end of each day in
    Calendar week view
  * fixed: Various security fixes
  MFSA 2021-47 (bsc#1191332)
  * CVE-2021-38502 (bmo#1733366)
    Downgrade attack on SMTP STARTTLS connections
  * CVE-2021-38496 (bmo#1725335)
    Use-after-free in MessageTask
  * CVE-2021-38497 (bmo#1726621)
    Validation message could have been overlaid on another origin
  * CVE-2021-38498 (bmo#1729642)
    Use-after-free of nsLanguageAtomService object
  * CVE-2021-32810 (bmo#1729813,
    bmo#https://github.com/crossbeam-
    rs/crossbeam/security/advisories/GHSA-pqqp-xmhj-wgcw)
    Data race in crossbeam-deque
  * CVE-2021-38500 (bmo#1725854, bmo#1728321)
    Memory safety bugs fixed in Thunderbird 91.2
  * CVE-2021-38501 (bmo#1685354, bmo#1715755, bmo#1723176)
    Memory safety bugs fixed in Thunderbird 91.2</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1636113600">- Mozilla Thunderbird 91.3
  * fixed: Default mail headers were set incorrectly when the
    value contained a colon (:)
  * fixed: Thunderbird did not send the QUIT command when closing
    an SMTP connection
  * fixed: Mail tabs could not be closed using the context menu
  * fixed: "Print" context menu was still shown when no message
    pane was displayed
  * fixed: Windows tray icon did not reappear after restarting
    Windows Explorer
  * fixed: Compose window attachment drag and drop fixes
  * fixed: Various macOS stability improvements
  * fixed: Drag and Drop area for file attachments on Windows was
    incorrect
  * fixed: CardDAV address books without a name did not work
  * fixed: Thunderbird tried to refresh disabled and manual-only
    calendars when the network state changed from offline to
    online
  * fixed: Various Calendar event dialog fixes
  * fixed: Various security fixes
  MFSA 2021-50 (bsc#1192250)
  * CVE-2021-38503 (bmo#1729517)
    iframe sandbox rules did not apply to XSLT stylesheets
  * CVE-2021-38504 (bmo#1730156)
    Use-after-free in file picker dialog
  * CVE-2021-38505 (bmo#1730194)
    Windows 10 Cloud Clipboard may have recorded sensitive user
    data
  * CVE-2021-38506 (bmo#1730750)
    Thunderbird could be coaxed into going into fullscreen mode
    without notification or warning
  * CVE-2021-38507 (bmo#1730935)
    Opportunistic Encryption in HTTP2 could be used to bypass the
    Same-Origin-Policy on services hosted on other ports
  * MOZ-2021-0008 (bmo#1667102)
    Use-after-free in HTTP2 Session object
  * CVE-2021-38508 (bmo#1366818)
    Permission Prompt could be overlaid, resulting in user
    confusion and potential spoofing
  * CVE-2021-38509 (bmo#1718571)
    Javascript alert box could have been spoofed onto an
    arbitrary domain
  * CVE-2021-38510 (bmo#1731779)
    Download Protections were bypassed by .inetloc files on Mac
    OS
  * MOZ-2021-0007 (bmo#1606864, bmo#1712671, bmo#1730048,
    bmo#1735152)
    Memory safety bugs fixed in Thunderbird ESR 91.3
- Drop unused pkgconfig(gdk-x11-2.0) BuildRequires
- Drop mozilla-neqo-fix-fips-crash.patch which is now upstream
- add mozilla-bmo1724679.patch (bmo#1724679, boo#1182863)
  fix some env variables which are enabled for any value</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638360000">- Mozilla Thunderbird 91.3.2
  * changed: Date selection in Calendar print settings widget
    changed to use mini calendar widget
  * changed: OpenPGP: Botan updated to 2.18.2; addresses
    CVE-2021-40529
  * fixed: "Repair Text Encoding" menu item did not work
  * fixed: Troubleshoot Mode menu item did not always indicate
    whether troubleshooting mode was enabled
  * fixed: Message content could be unintentionally hidden due to
    CSS class names conflicting
  * fixed: SMTP server port was reset to "0" after clicking the
    "Re-Test" button in the Account Setup wizard
  * fixed: No "Paste" option was available in the config editor
    (about:config) context menu
  * fixed: Saving a PDF attachment opened in a separate tab saved
    the email message instead
  * fixed: Opening a PDF attachment from a message in a
    standalone or compose window did move the focus to opened
    attachment
  * fixed: After restart, Thunderbird was not able to restore
    opened message tabs when the message was in a folder with
    non-ASCII characters in its name
  * fixed: The "pill" indicator was incorrectly shown when
    sending a message to newsgroup
  * fixed: When printing from Calendar, after leaving the
    "Calendar" settings, there was no way to go back
  * fixed: Month pickers in the Calendar print UI lacked
    scrollbars when the content overflowed
  * fixed: Account Manager and Addons Manager were unreadable
    when using the Dark theme
- Mozilla Thunderbird 91.3.1
  * changed: OpenPGP public keys will no longer count as an
    attachment in the message list
  * changed: Adding a search engine via URL now supported
  * changed: FileLink messages' template updated; Thunderbird
    advertisement removed
  * changed: After an update, Thunderbird will now check
    installed addons for updates
  * fixed: New mail popups were displayed while running full
    screen applications
  * fixed: Messages received with non-standard "koi8r" encoding
    were not supported
  * fixed: Various macOS stability improvements
  * fixed: PDF attachments opened in Firefox while composing an
    email
  * fixed: Addons were disabled when "Offline Settings" were set
    to "Ask me for online state (on startup)"
  * fixed: Clicking '"addons://" links in the Addons Manager
    prompted for an application to open it, rather than opening
    internally
  * fixed: The Contacts sidebar "Address Book" drop down was
    unreadable on Windows
  * fixed: vCard attachments were not shown when using "inline"
    view for attachments
  * fixed: Importing an ICS file with TODO items failed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1638964800">- Mozilla Thunderbird 91.4.0
  * fixed: IMAP startup performance improved for accounts with a
    multitude of folders
  * fixed: Thunderbird failed to send messages when configured to
    use an IPv6 SMTP server by IP address (instead of a hostname)
  * fixed: Forwarding messages with attachments sometimes failed
  * fixed: Printing multiple messages at once was not possible
  * fixed: Non-utf8 news groups were not supported
  * fixed: Thunderbird stalled after sending a message with NNTP
    and SMTP recipients
  * fixed: Using Thunderbird with multiple language packs caused
    high RAM and CPU use and sluggish performance
  * fixed: Clicking a "mailto:" started the composer with the
    default sending identity instead of a configured alternate
  * fixed: Drag and dropped text into a plain text message in the
    compose window was handled inconsistently
  * fixed: FileLink messages did not display correctly when
    viewed in Outlook
  * fixed: In account setup, after selecting an extension
    provided protocol, it was not possible to create an IMAP/POP
    account
  * fixed: Multiday selections were not cleared when changing
    week viewed
  * fixed: When creating a new event by clicking and dragging the
    mouse to create a box, the view did not auto-scroll after
    reaching the bottom
  * fixed: Calendar Invitation Panel did not scroll when multiple
    invitations were pending
  * fixed: Calendar print dialog did not have a cancel button
  * fixed: Various security fixes
  MFSA 2021-54 (bsc#1193485)
  * CVE-2021-43536 (bmo#1730120)
    URL leakage when navigating while executing asynchronous
    function
  * CVE-2021-43537 (bmo#1738237)
    Heap buffer overflow when using structured clone
  * CVE-2021-43538 (bmo#1739091)
    Missing fullscreen and pointer lock notification when
    requesting both
  * CVE-2021-43539 (bmo#1739683)
    GC rooting failure when calling wasm instance methods
  * CVE-2021-43541 (bmo#1696685)
    External protocol handler parameters were unescaped
  * CVE-2021-43542 (bmo#1723281)
    XMLHttpRequest error codes could have leaked the existence of
    an external protocol handler
  * CVE-2021-43543 (bmo#1738418)
    Bypass of CSP sandbox directive when embedding
  * CVE-2021-43545 (bmo#1720926)
    Denial of Service when using the Location API in a loop
  * CVE-2021-43546 (bmo#1737751)
    Cursor spoofing could overlay user interface when native
    cursor is zoomed
  * CVE-2021-43528 (bmo#1742579)
    JavaScript unexpectedly enabled for the composition area
  * MOZ-2021-0009 (bmo#1393362, bmo#1736046, bmo#1736751,
    bmo#1737009, bmo#1739372, bmo#1739421)
    Memory safety bugs fixed in Thunderbird 91.4.0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1641211200">- Mozilla Thunderbird 91.4.1
  * fixed: Attachments that should open in Thunderbird, such as
    ICS attachments, offered to save the file instead
  * fixed: Saving attachments from IMAP accounts where usernames
    contained special characters failed
  * fixed: Temporary files created for forwarded attachments
    sometimes had the wrong extension
  * fixed: S/MIME signatures were shown as invalid by Outlook
  * fixed: URL input boxes on content tabs erroneously displayed
    a search glass icon on macOS
  * fixed: Message bars (such as content blocking) did not use
    high contrast theme colors
  * fixed: Some messages with autocrypt headers loaded slowly,
    causing Thunderbird to hang
  * fixed: Server hostnames were cut-off in the account manager
  * fixed: Account Setup did not support non-ASCII characters in
    passwords
  * fixed: Account Setup did not always retain set values
  * fixed: Virtual folders did not retain folder selection when a
    folder name contained non-ASCII characters
  * fixed: Messages saved as "html" or "eml" did not include
    message headers
  * fixed: "Private web page" field was not included when
    exporting a contact to a vCard
  * fixed: Addons were still active after restarting Thunderbird
    in troubleshooting mode with "disable all addons" checked
  * fixed: FileLink attachments did not always display the
    FileLink provider's icon
  * fixed: FileLink privacy notifications persisted in the
    compose window after removing all FileLink attachments
  * fixed: "Loading" icon remained after a FileLink upload failed
  * fixed: Lengthy event names for multiday events did not wrap
  * fixed: Various theme and UX improvements
  * fixed: Various security fixes
  MFSA 2021-55 (bsc#1194215)
  * CVE-2021-4126 (bmo#1732310)
    OpenPGP signature status doesn't consider additional message
    content
  * CVE-2021-44538 (bmo#1744056)
    Matrix chat library libolm bundled with Thunderbird
    vulnerable to a buffer overflow</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1642420800">- Mozilla Thunderbird 91.5
  * fixed: RSS keyword labels without a configured color were
    illegible
  * fixed: Thunderbird "about:" dialog did not identify third-
    party repackaged distributions such as Flatpaks
  * fixed: Various security fixes
  MFSA 2022-03 (bsc#1194547)
  * CVE-2022-22746 (bmo#1735071)
    Calling into reportValidity could have lead to fullscreen
    window spoof
  * CVE-2022-22743 (bmo#1739220)
    Browser window spoof using fullscreen mode
  * CVE-2022-22742 (bmo#1739923)
    Out-of-bounds memory access when inserting text in edit mode
  * CVE-2022-22741 (bmo#1740389)
    Browser window spoof using fullscreen mode
  * CVE-2022-22740 (bmo#1742334)
    Use-after-free of ChannelEventQueue::mOwner
  * CVE-2022-22738 (bmo#1742382)
    Heap-buffer-overflow in blendGaussianBlur
  * CVE-2022-22737 (bmo#1745874)
    Race condition when playing audio files
  * CVE-2021-4140 (bmo#1746720)
    Iframe sandbox bypass with XSLT
  * CVE-2022-22748 (bmo#1705211)
    Spoofed origin on external protocol launch dialog
  * CVE-2022-22745 (bmo#1735856)
    Leaking cross-origin URLs through securitypolicyviolation
    event
  * CVE-2022-22744 (bmo#1737252)
    The 'Copy as curl' feature in DevTools did not fully escape
    website-controlled data, potentially leading to command
    injection
  * CVE-2022-22747 (bmo#1735028)
    Crash when handling empty pkcs7 sequence
  * CVE-2022-22739 (bmo#1744158)
    Missing throttling on external protocol launch dialog
  * CVE-2022-22751 (bmo#1664149, bmo#1737816, bmo#1739366,
    bmo#1740274, bmo#1740797, bmo#1741201, bmo#1741869,
    bmo#1743221, bmo#1743515, bmo#1745373, bmo#1746011)
    Memory safety bugs fixed in Thunderbird 91.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1644926400">- Mozilla Thunderbird 91.6
  * new: Thunderbird will now offer to send large forwarded
    attachments via FileLink
  * fixed: Partially signed unencrypted messages displayed an
    incorrect "partially encrypted" notification
  * fixed: Attachments filenames were not sanitized before saving
    to disk
  * fixed: In the attachment bar, the "Import OpenPGP Key" item
    displayed for public keys displayed an error and did not
    import the key
  * fixed: "Open with" attachment dialog did not have a selected
    radio button option
  * fixed: Various security fixes
  MFSA 2022-06 (bsc#1195682)
  * CVE-2022-22753 (bmo#1732435)
    Privilege Escalation to SYSTEM on Windows via Maintenance
    Service
  * CVE-2022-22754 (bmo#1750565)
    Extensions could have bypassed permission confirmation during
    update
  * CVE-2022-22756 (bmo#1317873)
    Drag and dropping an image could have resulted in the dropped
    object being an executable
  * CVE-2022-22759 (bmo#1739957)
    Sandboxed iframes could have executed script if the parent
    appended elements
  * CVE-2022-22760 (bmo#1740985, bmo#1748503)
    Cross-Origin responses could be distinguished between script
    and non-script content-types
  * CVE-2022-22761 (bmo#1745566)
    frame-ancestors Content Security Policy directive was not
    enforced for framed extension pages
  * CVE-2022-22763 (bmo#1740534)
    Script Execution during invalid object state
  * CVE-2022-22764 (bmo#1742682, bmo#1744165, bmo#1746545,
    bmo#1748210, bmo#1748279)
    Memory safety bugs fixed in Thunderbird 91.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1645099200">- Mozilla Thunderbird 91.6.1
  * changed: Thunderbird generated views of meeting invitations
    are now expanded by default
  * fixed: Emails were not downloading at startup under some
    conditions
  * fixed: Port numbers were not shown in "Confirm Security
    Exception" dialog for CalDAV connections
  * fixed: Various security fixes
  MFSA 2022-07 (bsc#1196072)
  * CVE-2022-0566 (bmo#1753094)
    Crafted email could trigger an out-of-bounds write</changelog>
  <changelog author="cgrobertson@suse.com" date="1646740800">- Mozilla Thunderbird 91.6.2
  * fixed: Temporary files from opened attachments were saved
    with world-readable permission
  * fixed: Various security fixes
  MFSA 2022-09 (bsc#1196809)
  * CVE-2022-26485 (bmo#1758062)
    Use-after-free in XSLT parameter processing
  * CVE-2022-26486 (bmo#1758070)
    Use-after-free in WebGPU IPC Framework</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1646913600">- Mozilla Thunderbird 91.7
  * changed: Thunderbird will use the first occurrence of headers
    that should only appear once
  * fixed: Auto-complete incorrectly changed a pasted email
    address to the primary address of a contact
  * fixed: Attachments with filename extensions that were not
    registered in MIME types could not be opened
  * fixed: Copy/Cut/Paste actions not working in Thunderbird
    Preferences
  * fixed: Improved screen reader support of displayed message
    headers
  * fixed: Various security fixes
  MFSA 2022-12 (bsc#1196900)
  * CVE-2022-26383 (bmo#1742421)
    Browser window spoof using fullscreen mode
  * CVE-2022-26384 (bmo#1744352)
    iframe allow-scripts sandbox bypass
  * CVE-2022-26387 (bmo#1752979)
    Time-of-check time-of-use bug when verifying add-on
    signatures
  * CVE-2022-26381 (bmo#1736243)
    Use-after-free in text reflows
  * CVE-2022-26386 (bmo#1752396)
    Temporary files downloaded to /tmp and accessible by other
    local users</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build TB.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649419200">- Mozilla Thunderbird 91.8
  * changed: Google accounts using password authentication will
    be migrated to OAuth2. See KB Article.
  * fixed: OpenPGP ECC keys created by Thunderbird could not be
    imported into GnuPG
  * fixed: Exporting multiple public PGP keys from Thunderbird
    was not possible
  * fixed: Replying to a newsgroup message erroneously displayed
    a "No-reply" popup warning
  * fixed: Opening `mid:` URLs on macOS failed
  * fixed: Address books stored in older formats were loaded as
    SQLite files, causing a crash
  * fixed: Replicated LDAP directories were lost after switching
    Thunderbird to "Offline"`mode
  * fixed: Importing webcals from the commandline failed if the
    URI ended with an `.ics` file extension
  * fixed: Various security fixes
  MFSA 2022-15 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1197 (bmo#1754985)
    OpenPGP revocation information was ignored
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Thunderbird 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1652097600">- Mozilla Thunderbird 91.9
  * changed: A warning is now displayed if an OpenPGP key has
    unsafe attributes that are ignored; See support article.
  * fixed: OpenPGP integration in Thunderbird 91.8.0 and 91.8.1
    did not allow SHA-1 key signatures
  * fixed: macOS disk image graphics updated
  * fixed: CalDAV calendars were marked read-only on startup
  * fixed: Task creation field on macOS incorrectly displayed a
    search icon
  * fixed: Various security fixes
  MFSA 2022-18 (bsc#1198970)
  * CVE-2022-1520 (bmo#1745019)
    Incorrect security status shown after viewing an attached
    email
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29913 (bmo#1764778)
    Speech Synthesis feature not properly disabled
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620)
    Memory safety bugs fixed in Thunderbird 91.9</changelog>
</package>
<package pkgid="0106268f1e61164d2d82fd523132a61a73b3a75bee33f4ec6815aba4394370f4" name="a52dec" arch="aarch64">
  <version epoch="0" ver="0.7.5+svn613" rel="150000.3.2.1"/>
  <changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups where rpmlint wasn't so happy</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1258804800">- update to svn from videolan</changelog>
  <changelog author="ludwig.nussel@gmx.de" date="1277035200">- provide a52dec-devel for compatibility</changelog>
  <changelog author="reddwarf@opensuse.org" date="1299067200">- run spec cleaner
- remove .la files
- add pkg-config BuildRequire so RPM can do its magic</changelog>
  <changelog author="reddwarf@opensuse.org" date="1327406400">- fix baselibs.conf
- don't install the INSTALL file
- change license tag to SPDX
- add automake, autoconf and libtool BuildRequires</changelog>
  <changelog author="i@margueirte.su" date="1415188800">- update latest svn 0.7.5+svn613</changelog>
  <changelog author="aloisio@gmx.com" date="1490097600">- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1490184000">- Add baselibs.conf as source file</changelog>
  <changelog author="jengelh@inai.de" date="1490184001">- Trim filler words from descriptions. Improve summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500120000">- Drop a52dec-compat.diff and mm_accel.h source, not needed with
  the svn checkout we are using.
- Pass --enable-shared to configure, ensure we build the shared
  library.</changelog>
</package>
<package pkgid="7dcd3b3ac0a7c3a21de0750e5b161b181bf090ab3620dfd51d1570e1a0243428" name="a52dec" arch="ppc64le">
  <version epoch="0" ver="0.7.5+svn613" rel="150000.3.2.1"/>
  <changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups where rpmlint wasn't so happy</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1258804800">- update to svn from videolan</changelog>
  <changelog author="ludwig.nussel@gmx.de" date="1277035200">- provide a52dec-devel for compatibility</changelog>
  <changelog author="reddwarf@opensuse.org" date="1299067200">- run spec cleaner
- remove .la files
- add pkg-config BuildRequire so RPM can do its magic</changelog>
  <changelog author="reddwarf@opensuse.org" date="1327406400">- fix baselibs.conf
- don't install the INSTALL file
- change license tag to SPDX
- add automake, autoconf and libtool BuildRequires</changelog>
  <changelog author="i@margueirte.su" date="1415188800">- update latest svn 0.7.5+svn613</changelog>
  <changelog author="aloisio@gmx.com" date="1490097600">- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1490184000">- Add baselibs.conf as source file</changelog>
  <changelog author="jengelh@inai.de" date="1490184001">- Trim filler words from descriptions. Improve summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500120000">- Drop a52dec-compat.diff and mm_accel.h source, not needed with
  the svn checkout we are using.
- Pass --enable-shared to configure, ensure we build the shared
  library.</changelog>
</package>
<package pkgid="a735bc4c0b6174deb94517fc7b4a2a17752cc88b879f7b0829bef5c100246610" name="a52dec" arch="s390x">
  <version epoch="0" ver="0.7.5+svn613" rel="150000.3.2.1"/>
  <changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups where rpmlint wasn't so happy</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1258804800">- update to svn from videolan</changelog>
  <changelog author="ludwig.nussel@gmx.de" date="1277035200">- provide a52dec-devel for compatibility</changelog>
  <changelog author="reddwarf@opensuse.org" date="1299067200">- run spec cleaner
- remove .la files
- add pkg-config BuildRequire so RPM can do its magic</changelog>
  <changelog author="reddwarf@opensuse.org" date="1327406400">- fix baselibs.conf
- don't install the INSTALL file
- change license tag to SPDX
- add automake, autoconf and libtool BuildRequires</changelog>
  <changelog author="i@margueirte.su" date="1415188800">- update latest svn 0.7.5+svn613</changelog>
  <changelog author="aloisio@gmx.com" date="1490097600">- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1490184000">- Add baselibs.conf as source file</changelog>
  <changelog author="jengelh@inai.de" date="1490184001">- Trim filler words from descriptions. Improve summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500120000">- Drop a52dec-compat.diff and mm_accel.h source, not needed with
  the svn checkout we are using.
- Pass --enable-shared to configure, ensure we build the shared
  library.</changelog>
</package>
<package pkgid="daf71641ecc69a3a885de7aea912fc1d2e7bdc8ad643ae74dfdd909ec82cc73d" name="a52dec" arch="src">
  <version epoch="0" ver="0.7.5+svn613" rel="150000.3.2.1"/>
  <changelog author="waldemar@links2linux.de" date="1009627200">- first build</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1022760000">- update to Version 0.7.3</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1025697600">- update to Version 0.7.4</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1044446400">- added german description
- some changes I got from Philipp Thomas &lt;pthomas@suse.de&gt;</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1045915200">- added --enable-shared</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1048593600">- changes to use Packman upload-script</changelog>
  <changelog author="detlef@dreichelt.de" date="1101211200">- changes for x86_64:
  - added CFLAGS= -fPIC</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1208692800">- splitted in different packages</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1221912000">- rename of the lib packages</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups where rpmlint wasn't so happy</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1258804800">- update to svn from videolan</changelog>
  <changelog author="ludwig.nussel@gmx.de" date="1277035200">- provide a52dec-devel for compatibility</changelog>
  <changelog author="reddwarf@opensuse.org" date="1299067200">- run spec cleaner
- remove .la files
- add pkg-config BuildRequire so RPM can do its magic</changelog>
  <changelog author="reddwarf@opensuse.org" date="1327406400">- fix baselibs.conf
- don't install the INSTALL file
- change license tag to SPDX
- add automake, autoconf and libtool BuildRequires</changelog>
  <changelog author="i@margueirte.su" date="1415188800">- update latest svn 0.7.5+svn613</changelog>
  <changelog author="aloisio@gmx.com" date="1490097600">- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1490184000">- Add baselibs.conf as source file</changelog>
  <changelog author="jengelh@inai.de" date="1490184001">- Trim filler words from descriptions. Improve summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500120000">- Drop a52dec-compat.diff and mm_accel.h source, not needed with
  the svn checkout we are using.
- Pass --enable-shared to configure, ensure we build the shared
  library.</changelog>
</package>
<package pkgid="33ef1bacfcbaef55f12162503e0f367697e6e0b2474aa3c09671958536bbe73d" name="a52dec" arch="x86_64">
  <version epoch="0" ver="0.7.5+svn613" rel="150000.3.2.1"/>
  <changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups where rpmlint wasn't so happy</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1258804800">- update to svn from videolan</changelog>
  <changelog author="ludwig.nussel@gmx.de" date="1277035200">- provide a52dec-devel for compatibility</changelog>
  <changelog author="reddwarf@opensuse.org" date="1299067200">- run spec cleaner
- remove .la files
- add pkg-config BuildRequire so RPM can do its magic</changelog>
  <changelog author="reddwarf@opensuse.org" date="1327406400">- fix baselibs.conf
- don't install the INSTALL file
- change license tag to SPDX
- add automake, autoconf and libtool BuildRequires</changelog>
  <changelog author="i@margueirte.su" date="1415188800">- update latest svn 0.7.5+svn613</changelog>
  <changelog author="aloisio@gmx.com" date="1490097600">- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1490184000">- Add baselibs.conf as source file</changelog>
  <changelog author="jengelh@inai.de" date="1490184001">- Trim filler words from descriptions. Improve summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500120000">- Drop a52dec-compat.diff and mm_accel.h source, not needed with
  the svn checkout we are using.
- Pass --enable-shared to configure, ensure we build the shared
  library.</changelog>
</package>
<package pkgid="ce8f97588132dcdbaeef6f6fdb5dd9b8fe3d05cccf6718f4c45c09806768cc6b" name="amavisd-new" arch="aarch64">
  <version epoch="0" ver="2.11.1" rel="150000.6.6.1"/>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashism in post script
- remove '-e' option of 'echo' command that may be unsupported in some
  POSIX-complete shells</changelog>
  <changelog author="p.drouand@gmail.com" date="1418731200">- Update to version 2.10.1
  + fixed a missing import of mail_addr_idn_to_ascii() and idn_to_utf8()
    when SQL is in use
  + void warnings issued by perl 5.21.5:
- Changes from version 2.10
  COMPATIBILITY
- New requirement: perl module Net::LibIDN needs to be installed.
- Uses a perl module File::LibMagic if installed, instead of spawning
  a file(1) utility.
- Support for international email relies heavily on perl to do the
  right thing in its support of Unicode, so using a reasonably recent
  version of perl is recommended. Amavisd was tested with perl 5.18
  and 5.20.1. Versions of perl older than 5.12 may cause problems
  with handling, encoding, and decoding of Unicode characters.
  It is reasonable to expect that versions 5.14 and 5.16 are fine too,
  but have not been tested extensively.
- Default log templates and notification templates have changed
  in details (like in decoding of international e-mail addresses), so
  if locally customized templates are in use these will benefit from
  updating - otherwise expect some mojibake in log and notifications.
- International domain names (IDN) encoded in ASCII-compatible encoding
  found in e-mail addresses and in Message-ID header field will be decoded
  to Unicode for presentation purposes (syslog, JSON structured log,
  notifications). This decoding does not affect a mail message itself.
- Logging via syslog expects that syslogd (or equivalent) will not
  clobber UTF-8 octets. It may be necessary to tell syslogd to accept
  C1 control characters unchanged, e.g. by adding a command line option
  "-8" to syslogd. Failing to do so may leave logged entries (like
  sender and recipient address, From, Subject) in international mail
  garbled or poorly readable in syslog.
  On FreeBSD one should add:  syslogd_flags="-8"  to /etc/rc.conf.
- Third party log parsers may need updating to accept logs with Unicode
  characters in UTF-8 encoding.
- A SMTP response to an EHLO command will now announce SMTPUTF8 capability
  by default.
  BUG FIXES
- releasing a message from an SQL quarantine was broken in version 2.9.1
  due to introduction of parent_mail_id(); patches provided by Stef Simoens
  and Gionatan Danti;
- if checking of a message was aborted prematurely (like due to a timeout
  or some fatal error), JSON log could receive a copy of a previous
  log entry;
- prevent non-ASCII non-UTF-8 octets from reaching a JSON log/report
  (which produced an invalid JSON object and Elasticsearch complaining);
- allow SMTP commands MAIL FROM and RCPT TO to accept options without
  values, as allowed by the RFC 5321 syntax;
- in delivery status notification (DSN) the field Received-From-MTA
  specified 'smtp' as mta-name-type, instead of a 'dns' as prescribed
  in RFC 3464;
- releasing from a quarantine left envelope sender address as '&lt;&gt;'
  instead of using the address found in a Return-Path header field
  of a quarantined message, while also logging a warning:
    Quarantine release $QID: missing X-Envelope-From or Return-Path
  reported by Pascal Volk;
- avoid failure in os_fingerprint or in smtp forwarding in certain cases
  where the $os_fingerprint_method or $forward_method or $notify_method
  uses an asterisk in place of a host IP address or port number.
  The reported error in os_fingerprint (reported by -ben) was:
    os_fingerprint FAILED: Insecure dependency in socket
    while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80
  and in SMTP forwarding or notification (reported by Dennis Boone):
    (!)connect to *:10025 attempt #1:
    Insecure dependency in socket while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80.
- files LDAP.ldif and LDAP.schema: added a missing attribute
  amavisDisclaimerOptions to objectClass; reported by Quanah Gibson-Mount;
  NEW FEATURES
- added support for Internationalized Email:
  * RFC 6530 - Overview and Framework for Internationalized Email
  * RFC 6531 - SMTP Extension for Internationalized Email (SMTPUTF8)
  * RFC 6532 - Internationalized Email Headers
  * RFC 6533 - Internationalized Delivery Status Notifications
  This supports UTF-8 (EAI) in SMTP/LMTP sender addresses, recipient
  addresses, and message header section. Feature parity with Postfix
  version 2.12 (support introduced in development snapshot 20140715).
  The SMTPUTF8 extension is supported by Gmail since 2014-08-05:
    http://googleblog.blogspot.com/2014/08/a-first-step-toward-more-global-email.html
- added support for Internationalized Domain Names (IDN) according
  to IDNA (RFC 5890, RFC 5891; RFC 3490);
  * A-labels in ASCII-compatible encoding of domain names are converted
    to U-labels for presentation/logging purposed;
  * U-labels are converted to A-labels when feeding a mail message
    to an MTA which does not announce support for SMTPUTF8 extension
    (instead of rejecting them as invalid mail address);
  * For lookup purposes an international domain name is converted to
    ASCII-compatible encoding when used as a query key in DNS lookups
    and in lookups into hash, list, SQL and LDAP lookup tables (but not
    in regexp table lookups). These tables are expected to contain domain
    names in their ASCII representation (ACE). For convenience of config
    files subroutines idn_to_ascii() and mail_idn_to_ascii() are available,
    which encode a Unicode domain name to ACE (like ToASCII in RFC 3490);
  * Many configuration settings may have their domain names in UTF-8.
    These will be converted to ACE automatically where necessary
    (e.g. when creating a Received and Authentication-Results header
    fields, DKIM signatures, mail addresses in notifications, ...).
    These settings include:
    $myhostname, $localhost_name, $myauthservid, $mydomain,
    notification sender and recipient mail addresses
    ($mailfrom_notify_*, $hdrfrom_notify_*, @*_admin_maps),
    domain names and selectors in DKIM signing keys (in calls
    to dkim_key() );
- delivery notifications and admin notifications now show the following
  information encoded as UTF-8 (which is a default $bdy_encoding) in the
  plain text part of the message: IDN domain names in sender and recipient
  mail addresses and Message-ID are first decoded to Unicode, Subject and
  author display names are MIME-decoded;
- 'amavisd showkeys' and 'amavisd testkeys' can now deal with IDN
  (international domain names): domain names in DNS zone comments
  end up as UTF-8, DNS labels are in ASCII (A-labels); domain names in
  calls to dkim_key() may be specified either as UTF-8 or in ASCII (ACE);
- new macro 'mail_addr_decode' takes an e-mail address as a string of
  octets, where a local part may be encoded as UTF-8, and the domain part
  may be an international domain name (IDN) consisting either of U-labels
  or A-labels or NR-LDH labels. Decodes A-labels to U-labels in domain
  name. Returns a string of logical characters (Unicode), suitable for
  notification templates. If the mail address is not a valid UTF-8 string,
  it is interpreted as ISO-8859-1 (Latin-1).
- new macro 'mail_addr_decode_octets' is like 'mail_addr_decode', except
  that the result is a string of octets, only valid as UTF-8 if the
  provided address was a valid UTF-8 (garbage-in/garbage-out);
- new macro 'header_field_octets' is like 'header_field', except that
  a result is a string of octets in UTF-8 encoding, suitable for a log
  template;
- new macro 'ip_proto_trace_all' expands into a list of information
  items from a Received header trace; each item consists of a protocol
  name (the WITH clause) and an IP address, optionally followed by a
  source port number if known;
  Example:
    ESMTP://[2001:db8::143:1]:39141 &lt; ESMTP://2001:db8::25 &lt;
    esmtps://203.0.113.172 &lt; ESMTPSA://192.168.9.9
  or:
    UTF8SMTP://[203.0.113.172]:51208 &lt; UTF8SMTPSA://192.168.9.9
- new macro 'ip_proto_trace_public' is like ip_proto_trace_all, except
  that entries with non-public IP address are excluded from the list;
  'Received' trace information in $log_verbose_templ and in notifications
  now include results from this macro call;
- new macro 'protocol' evaluates to a protocol name by which a message
  was received by amavisd, according to RFC 3848 ("Transmission Types
  Registration") and "Mail Transmission Types" / "WITH protocol types"
  IANA registration
    http://www.iana.org/assignments/mail-parameters/mail-parameters.xhtml
  e.g.: SMTP, ESMTP, ESMTPA, ESMTPS, ESMTPSA, LMTP, LMTPA, LMTPS, LMTPSA,
    UTF8SMTP, UTF8SMTPA, UTF8SMTPS, UTF8SMTPSA,
    UTF8LMTP, UTF8LMTPA, UTF8LMTPS, UTF8LMTPSA, ...
- new macro 'client_protocol' expands into a protocol name by which
  a message was received from a client by MTA; the information is passed
  from MTA to amavisd through XFORWARD PROTO SMTP protocol extension or
  through AM.PDP (milter); typical values are 'ESMTP' or 'SMTP';
- use a perl module File::LibMagic when available, instead of spawning
  a file(1) utility for classifying contents of mail parts.
  By using a direct interface to a libmagic library the startup cost
  of spawning an external process is avoided. Benchmarking shows that
  using libmagic is significantly faster especially for checking a small
  number of files - takes 4 ms for checking one file with libmagic
  vs. 27 ms with a spawned file(1); based on a patch by Markus Benning;
  OTHER
- RFC 6533: recognize a MIME type 'message/global' as similar
  to 'message/rfc822', and 'message/global-headers' as similar
  to 'text/rfc822-headers' where appropriate (e.g. in bounce killer);
- header validity check now distinguishes 'non-ASCII and invalid UTF-8'
  from 'non-ASCII but valid UTF-8' characters in a mail header section.
  By default valid UTF-8 strings in a mail header section are not treated
  as error even if mail is not flagged as international mail (SMTPUTF8),
  as these are quite common in practice. To treat non- MIME-encoded UTF-8
  in a header section as error the test can be enabled by:
    $allowed_header_tests{'utf8'} = 1;
- ORCPT attribute in SMTP 'RCPT TO' command now accepts the original
  recipient mail address in any of these encodings: utf-8-address,
  utf-8-addr-unitext, utf-8-addr-xtext, or as a legacy xtext,
  as required by RFC 6533;
- updated do_cabextract (extraction of Microsoft cabinet .cab archives)
  to recognize a slightly changed output of cabextract version 1.2;
  patch by Thomas Jarosch;
- adjusted some timeouts to leave more reserve for later stages of
  mail processing and forwarding;
- prefer sanitizing/protecting control characters as hex code (like \x7F)
  instead of octal (like \177) (e.g. in logging and DSN);
- Use dowload Url as source
- Add a requirement on perl-Net-LibIDN; new upstream dependency</changelog>
  <changelog author="wr@rosenauer.org" date="1439380800">- require perl-Convert-BinHex as otherwise startup fails with
  default installation
- file based requirement does not work
  - &gt; changed to package requirement util-linux-systemd</changelog>
  <changelog author="aj@ajaissle.de" date="1453377600">- Add amavisd-new-2.10.1-myhostname.patch:
  $myhostname is set using POSIX::uname, but expects a FQDN. This
  patch changes this behaviour to use Net::Domain::hostfqdn instead</changelog>
  <changelog author="jcnengel@gmail.com" date="1464350400">- Update to version 2.11.0
  + Bugfixes
  * delivery method was undefined when always_bcc was used;
  reported by Marieke Janssen;
  * avoid warnings issued by perl 5.21.7 and later:
  Negative repeat count does nothing at ./amavisd line 16408
  and similarly in amavisd-status;
  * releasing from an SQL quarantine failed to provide the original
  envelope sender address to a released message;
  reported, and a fix suggested by Tom Johnson and Tobias;
  * remove a stale database file __db.nanny.db on a reload or restart,
  as it can prevent a successful start when a previous start failed
  for some reason; a patch by Trent Lloyd;
  + Compatibility
  * During startup more detailed testing is performed for taint bugs of
  a module Encode and the function utf8::is_utf8(), which may produce
  warnings on old versions of perl with its old core module Encode,
  or may exit on detecting more sinister bugs in these modules.
  Note that the module Encode may be upgraded independently of perl,
  if desired;
  * with MySQL: changed character set 'utf8' to 'utf8mb4' for fields
  msgs.subject and msgs.from_addr, as previously some of the UTF-8
  characters could not be stored in a database;
  * when logging to stderr a timestamp prefix to each message is only
  still inserted if $DEBUG is true.  When $DEBUG is false each message
  is prefixed with a syslog log level in angle brackets, and a timestamp
  is omitted (for compatibility with systemd);
  * a perl module Digest::SHA is now a required module. It is a perl core
  module since perl 5.10, so it shouldn't introduce a new dependency,
  and it was a de-facto required module even previously, as it was needed
  for DKIM processing;
  + New features
  * Polished rough corners to facilitate running amavisd as a non-daemonized
  supervised process
  * A log template macro 'report_json' can now take arguments, which can
  include or exclude fields (key/values) from the JSON report object.
  Arguments to a macro are either field names (keys) to be included
  in a report, or are field names to be excluded, each prefixed with
  an exclamation mark, to produce a report with all but excluded fields.
  * Two new configuration settings are added: %smtpd_tls_server_options
  and %smtp_tls_client_options. These two associative arrays are passed
  to IO::Socket::SSL-&gt;start_SSL when establishing a server-side or a
  client-side TLS session with an MTA, and provide more control over
  a TLS session - like providing certificates and restricting ciphers.
  See documentation of a perl module IO::Socket::SSL for a list of
  all options with their descriptions and their defaults.
  * Supports receiving SMTP/LMTP connections through a HAProxy,
  recognizing 'PROXY protocol Version 1' data on the first line read,
  after a connection from HAProxy to amavisd has been established.
  Connection data (IP addresses and ports) received via this protocol
  end up replacing such data in the the Amavis::In::Connection object
  ($conn).  Set configuration variable $haproxy_target_enabled (also
  a member of policy banks) to true in order to enable this protocol.
  * redis: allow a scoped / link-local IP address specification
  (avoiding current limitation in IO::Socket::IP [rt.cpan.org #89608]);
  * the Amavis::Unpackers::Part::digest method now holds a digest (SHA1,
  hex) of a decoded (base64 or quoted-printable) MIME part contents,
  followed by a colon and a lowercased Content-Type of the MIME part.
  Canonical line endings CRLF in decoded textual parts are normalized
  to a native newline (\n) before feeding them to a digest algorithm.
  * Policy bank names in a @client_ipaddr_policy setting can now accept
  a comma-separated list of policy names to be loaded on a match
  (for loading of policy banks based on an IP address of a SMTP client).
  Whitespace around each policy name is allowed and is stripped.
  Previously only a single policy bank name was allowed in each entry
  of @client_ipaddr_policy.
  * Experimental feature: IP lookups (as implemented by lookup_ip_acl()
  and used by @client_ipaddr_policy) can now also do DNS-based lookups,
  in addition to array- and hash-based lookups.</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
  <changelog author="wr@rosenauer.org" date="1487764800">- fixed DKIM signing by recognizing ORIGINATING
  (regression in 2.11.0) (dkim-signing.diff)
  (https://lists.amavis.org/pipermail/amavis-users/2016-July/004428.html)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="varkoly@suse.com" date="1515931200">- bnc#1007149 Amavisd-milter fails to start when started via systemd
  Use fillup_only with -n amavis</changelog>
  <changelog author="varkoly@suse.com" date="1521028800">- bsc#1071932 - YaST2 Mail Server Configuration - throws Error for
  starting service amavis.
  amavisd-new should require spamassassin</changelog>
  <changelog author="varkoly@suse.com" date="1521115200">- bsc#1072122 amavisd-new should use unar instead of unrar</changelog>
  <changelog author="wr@rosenauer.org" date="1539518400">- update to version 2.11.1
  * removed a trailing dot element from @INC, as a workaround for a perl
    vulnerability CVE-2016-1238
  * amavis-services: bumping up syslog level from LOG_NOTICE to LOG_ERR
    for a message "PID &lt;pid&gt; went away", and removed redundant newlines
    from some log messages
  * safe_decode() and safe_decode_utf8(): avoid warning messages
    "Use of uninitialized value in subroutine entry"
    in Encode::MIME::Header when the $check argument is undefined
  * @sa_userconf_maps has been extended to allow loading of per-recipient
    (or per-policy bank, or global) SpamAssassin configuration set from
    LDAP. For consistency with SQL a @sa_userconf_maps entry prefixed with
    'ldap:' will load SpamAssassin configuration set using the
    load_scoreonly_ldap() method;  a patch by Atanas Karashenski
  * add some Sanesecurity.Foxhole false positives to the default
    list @virus_name_to_spam_score_maps
  * updated some comments
- update amavis-milter to version 2.6.1
  * Fixed bug when creating amavisd-new policy bank names</changelog>
  <changelog author="varkoly@suse.com" date="1647259200">- amavisd-new: Deprecated option "syslog" used in amavis.service
  (bsc#1185145)
  Remove deprecated entry</changelog>
</package>
<package pkgid="5218d74c546afc1d75d8c27e3f0ae40a595f533879117c283e129029da96a072" name="amavisd-new" arch="ppc64le">
  <version epoch="0" ver="2.11.1" rel="150000.6.6.1"/>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashism in post script
- remove '-e' option of 'echo' command that may be unsupported in some
  POSIX-complete shells</changelog>
  <changelog author="p.drouand@gmail.com" date="1418731200">- Update to version 2.10.1
  + fixed a missing import of mail_addr_idn_to_ascii() and idn_to_utf8()
    when SQL is in use
  + void warnings issued by perl 5.21.5:
- Changes from version 2.10
  COMPATIBILITY
- New requirement: perl module Net::LibIDN needs to be installed.
- Uses a perl module File::LibMagic if installed, instead of spawning
  a file(1) utility.
- Support for international email relies heavily on perl to do the
  right thing in its support of Unicode, so using a reasonably recent
  version of perl is recommended. Amavisd was tested with perl 5.18
  and 5.20.1. Versions of perl older than 5.12 may cause problems
  with handling, encoding, and decoding of Unicode characters.
  It is reasonable to expect that versions 5.14 and 5.16 are fine too,
  but have not been tested extensively.
- Default log templates and notification templates have changed
  in details (like in decoding of international e-mail addresses), so
  if locally customized templates are in use these will benefit from
  updating - otherwise expect some mojibake in log and notifications.
- International domain names (IDN) encoded in ASCII-compatible encoding
  found in e-mail addresses and in Message-ID header field will be decoded
  to Unicode for presentation purposes (syslog, JSON structured log,
  notifications). This decoding does not affect a mail message itself.
- Logging via syslog expects that syslogd (or equivalent) will not
  clobber UTF-8 octets. It may be necessary to tell syslogd to accept
  C1 control characters unchanged, e.g. by adding a command line option
  "-8" to syslogd. Failing to do so may leave logged entries (like
  sender and recipient address, From, Subject) in international mail
  garbled or poorly readable in syslog.
  On FreeBSD one should add:  syslogd_flags="-8"  to /etc/rc.conf.
- Third party log parsers may need updating to accept logs with Unicode
  characters in UTF-8 encoding.
- A SMTP response to an EHLO command will now announce SMTPUTF8 capability
  by default.
  BUG FIXES
- releasing a message from an SQL quarantine was broken in version 2.9.1
  due to introduction of parent_mail_id(); patches provided by Stef Simoens
  and Gionatan Danti;
- if checking of a message was aborted prematurely (like due to a timeout
  or some fatal error), JSON log could receive a copy of a previous
  log entry;
- prevent non-ASCII non-UTF-8 octets from reaching a JSON log/report
  (which produced an invalid JSON object and Elasticsearch complaining);
- allow SMTP commands MAIL FROM and RCPT TO to accept options without
  values, as allowed by the RFC 5321 syntax;
- in delivery status notification (DSN) the field Received-From-MTA
  specified 'smtp' as mta-name-type, instead of a 'dns' as prescribed
  in RFC 3464;
- releasing from a quarantine left envelope sender address as '&lt;&gt;'
  instead of using the address found in a Return-Path header field
  of a quarantined message, while also logging a warning:
    Quarantine release $QID: missing X-Envelope-From or Return-Path
  reported by Pascal Volk;
- avoid failure in os_fingerprint or in smtp forwarding in certain cases
  where the $os_fingerprint_method or $forward_method or $notify_method
  uses an asterisk in place of a host IP address or port number.
  The reported error in os_fingerprint (reported by -ben) was:
    os_fingerprint FAILED: Insecure dependency in socket
    while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80
  and in SMTP forwarding or notification (reported by Dennis Boone):
    (!)connect to *:10025 attempt #1:
    Insecure dependency in socket while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80.
- files LDAP.ldif and LDAP.schema: added a missing attribute
  amavisDisclaimerOptions to objectClass; reported by Quanah Gibson-Mount;
  NEW FEATURES
- added support for Internationalized Email:
  * RFC 6530 - Overview and Framework for Internationalized Email
  * RFC 6531 - SMTP Extension for Internationalized Email (SMTPUTF8)
  * RFC 6532 - Internationalized Email Headers
  * RFC 6533 - Internationalized Delivery Status Notifications
  This supports UTF-8 (EAI) in SMTP/LMTP sender addresses, recipient
  addresses, and message header section. Feature parity with Postfix
  version 2.12 (support introduced in development snapshot 20140715).
  The SMTPUTF8 extension is supported by Gmail since 2014-08-05:
    http://googleblog.blogspot.com/2014/08/a-first-step-toward-more-global-email.html
- added support for Internationalized Domain Names (IDN) according
  to IDNA (RFC 5890, RFC 5891; RFC 3490);
  * A-labels in ASCII-compatible encoding of domain names are converted
    to U-labels for presentation/logging purposed;
  * U-labels are converted to A-labels when feeding a mail message
    to an MTA which does not announce support for SMTPUTF8 extension
    (instead of rejecting them as invalid mail address);
  * For lookup purposes an international domain name is converted to
    ASCII-compatible encoding when used as a query key in DNS lookups
    and in lookups into hash, list, SQL and LDAP lookup tables (but not
    in regexp table lookups). These tables are expected to contain domain
    names in their ASCII representation (ACE). For convenience of config
    files subroutines idn_to_ascii() and mail_idn_to_ascii() are available,
    which encode a Unicode domain name to ACE (like ToASCII in RFC 3490);
  * Many configuration settings may have their domain names in UTF-8.
    These will be converted to ACE automatically where necessary
    (e.g. when creating a Received and Authentication-Results header
    fields, DKIM signatures, mail addresses in notifications, ...).
    These settings include:
    $myhostname, $localhost_name, $myauthservid, $mydomain,
    notification sender and recipient mail addresses
    ($mailfrom_notify_*, $hdrfrom_notify_*, @*_admin_maps),
    domain names and selectors in DKIM signing keys (in calls
    to dkim_key() );
- delivery notifications and admin notifications now show the following
  information encoded as UTF-8 (which is a default $bdy_encoding) in the
  plain text part of the message: IDN domain names in sender and recipient
  mail addresses and Message-ID are first decoded to Unicode, Subject and
  author display names are MIME-decoded;
- 'amavisd showkeys' and 'amavisd testkeys' can now deal with IDN
  (international domain names): domain names in DNS zone comments
  end up as UTF-8, DNS labels are in ASCII (A-labels); domain names in
  calls to dkim_key() may be specified either as UTF-8 or in ASCII (ACE);
- new macro 'mail_addr_decode' takes an e-mail address as a string of
  octets, where a local part may be encoded as UTF-8, and the domain part
  may be an international domain name (IDN) consisting either of U-labels
  or A-labels or NR-LDH labels. Decodes A-labels to U-labels in domain
  name. Returns a string of logical characters (Unicode), suitable for
  notification templates. If the mail address is not a valid UTF-8 string,
  it is interpreted as ISO-8859-1 (Latin-1).
- new macro 'mail_addr_decode_octets' is like 'mail_addr_decode', except
  that the result is a string of octets, only valid as UTF-8 if the
  provided address was a valid UTF-8 (garbage-in/garbage-out);
- new macro 'header_field_octets' is like 'header_field', except that
  a result is a string of octets in UTF-8 encoding, suitable for a log
  template;
- new macro 'ip_proto_trace_all' expands into a list of information
  items from a Received header trace; each item consists of a protocol
  name (the WITH clause) and an IP address, optionally followed by a
  source port number if known;
  Example:
    ESMTP://[2001:db8::143:1]:39141 &lt; ESMTP://2001:db8::25 &lt;
    esmtps://203.0.113.172 &lt; ESMTPSA://192.168.9.9
  or:
    UTF8SMTP://[203.0.113.172]:51208 &lt; UTF8SMTPSA://192.168.9.9
- new macro 'ip_proto_trace_public' is like ip_proto_trace_all, except
  that entries with non-public IP address are excluded from the list;
  'Received' trace information in $log_verbose_templ and in notifications
  now include results from this macro call;
- new macro 'protocol' evaluates to a protocol name by which a message
  was received by amavisd, according to RFC 3848 ("Transmission Types
  Registration") and "Mail Transmission Types" / "WITH protocol types"
  IANA registration
    http://www.iana.org/assignments/mail-parameters/mail-parameters.xhtml
  e.g.: SMTP, ESMTP, ESMTPA, ESMTPS, ESMTPSA, LMTP, LMTPA, LMTPS, LMTPSA,
    UTF8SMTP, UTF8SMTPA, UTF8SMTPS, UTF8SMTPSA,
    UTF8LMTP, UTF8LMTPA, UTF8LMTPS, UTF8LMTPSA, ...
- new macro 'client_protocol' expands into a protocol name by which
  a message was received from a client by MTA; the information is passed
  from MTA to amavisd through XFORWARD PROTO SMTP protocol extension or
  through AM.PDP (milter); typical values are 'ESMTP' or 'SMTP';
- use a perl module File::LibMagic when available, instead of spawning
  a file(1) utility for classifying contents of mail parts.
  By using a direct interface to a libmagic library the startup cost
  of spawning an external process is avoided. Benchmarking shows that
  using libmagic is significantly faster especially for checking a small
  number of files - takes 4 ms for checking one file with libmagic
  vs. 27 ms with a spawned file(1); based on a patch by Markus Benning;
  OTHER
- RFC 6533: recognize a MIME type 'message/global' as similar
  to 'message/rfc822', and 'message/global-headers' as similar
  to 'text/rfc822-headers' where appropriate (e.g. in bounce killer);
- header validity check now distinguishes 'non-ASCII and invalid UTF-8'
  from 'non-ASCII but valid UTF-8' characters in a mail header section.
  By default valid UTF-8 strings in a mail header section are not treated
  as error even if mail is not flagged as international mail (SMTPUTF8),
  as these are quite common in practice. To treat non- MIME-encoded UTF-8
  in a header section as error the test can be enabled by:
    $allowed_header_tests{'utf8'} = 1;
- ORCPT attribute in SMTP 'RCPT TO' command now accepts the original
  recipient mail address in any of these encodings: utf-8-address,
  utf-8-addr-unitext, utf-8-addr-xtext, or as a legacy xtext,
  as required by RFC 6533;
- updated do_cabextract (extraction of Microsoft cabinet .cab archives)
  to recognize a slightly changed output of cabextract version 1.2;
  patch by Thomas Jarosch;
- adjusted some timeouts to leave more reserve for later stages of
  mail processing and forwarding;
- prefer sanitizing/protecting control characters as hex code (like \x7F)
  instead of octal (like \177) (e.g. in logging and DSN);
- Use dowload Url as source
- Add a requirement on perl-Net-LibIDN; new upstream dependency</changelog>
  <changelog author="wr@rosenauer.org" date="1439380800">- require perl-Convert-BinHex as otherwise startup fails with
  default installation
- file based requirement does not work
  - &gt; changed to package requirement util-linux-systemd</changelog>
  <changelog author="aj@ajaissle.de" date="1453377600">- Add amavisd-new-2.10.1-myhostname.patch:
  $myhostname is set using POSIX::uname, but expects a FQDN. This
  patch changes this behaviour to use Net::Domain::hostfqdn instead</changelog>
  <changelog author="jcnengel@gmail.com" date="1464350400">- Update to version 2.11.0
  + Bugfixes
  * delivery method was undefined when always_bcc was used;
  reported by Marieke Janssen;
  * avoid warnings issued by perl 5.21.7 and later:
  Negative repeat count does nothing at ./amavisd line 16408
  and similarly in amavisd-status;
  * releasing from an SQL quarantine failed to provide the original
  envelope sender address to a released message;
  reported, and a fix suggested by Tom Johnson and Tobias;
  * remove a stale database file __db.nanny.db on a reload or restart,
  as it can prevent a successful start when a previous start failed
  for some reason; a patch by Trent Lloyd;
  + Compatibility
  * During startup more detailed testing is performed for taint bugs of
  a module Encode and the function utf8::is_utf8(), which may produce
  warnings on old versions of perl with its old core module Encode,
  or may exit on detecting more sinister bugs in these modules.
  Note that the module Encode may be upgraded independently of perl,
  if desired;
  * with MySQL: changed character set 'utf8' to 'utf8mb4' for fields
  msgs.subject and msgs.from_addr, as previously some of the UTF-8
  characters could not be stored in a database;
  * when logging to stderr a timestamp prefix to each message is only
  still inserted if $DEBUG is true.  When $DEBUG is false each message
  is prefixed with a syslog log level in angle brackets, and a timestamp
  is omitted (for compatibility with systemd);
  * a perl module Digest::SHA is now a required module. It is a perl core
  module since perl 5.10, so it shouldn't introduce a new dependency,
  and it was a de-facto required module even previously, as it was needed
  for DKIM processing;
  + New features
  * Polished rough corners to facilitate running amavisd as a non-daemonized
  supervised process
  * A log template macro 'report_json' can now take arguments, which can
  include or exclude fields (key/values) from the JSON report object.
  Arguments to a macro are either field names (keys) to be included
  in a report, or are field names to be excluded, each prefixed with
  an exclamation mark, to produce a report with all but excluded fields.
  * Two new configuration settings are added: %smtpd_tls_server_options
  and %smtp_tls_client_options. These two associative arrays are passed
  to IO::Socket::SSL-&gt;start_SSL when establishing a server-side or a
  client-side TLS session with an MTA, and provide more control over
  a TLS session - like providing certificates and restricting ciphers.
  See documentation of a perl module IO::Socket::SSL for a list of
  all options with their descriptions and their defaults.
  * Supports receiving SMTP/LMTP connections through a HAProxy,
  recognizing 'PROXY protocol Version 1' data on the first line read,
  after a connection from HAProxy to amavisd has been established.
  Connection data (IP addresses and ports) received via this protocol
  end up replacing such data in the the Amavis::In::Connection object
  ($conn).  Set configuration variable $haproxy_target_enabled (also
  a member of policy banks) to true in order to enable this protocol.
  * redis: allow a scoped / link-local IP address specification
  (avoiding current limitation in IO::Socket::IP [rt.cpan.org #89608]);
  * the Amavis::Unpackers::Part::digest method now holds a digest (SHA1,
  hex) of a decoded (base64 or quoted-printable) MIME part contents,
  followed by a colon and a lowercased Content-Type of the MIME part.
  Canonical line endings CRLF in decoded textual parts are normalized
  to a native newline (\n) before feeding them to a digest algorithm.
  * Policy bank names in a @client_ipaddr_policy setting can now accept
  a comma-separated list of policy names to be loaded on a match
  (for loading of policy banks based on an IP address of a SMTP client).
  Whitespace around each policy name is allowed and is stripped.
  Previously only a single policy bank name was allowed in each entry
  of @client_ipaddr_policy.
  * Experimental feature: IP lookups (as implemented by lookup_ip_acl()
  and used by @client_ipaddr_policy) can now also do DNS-based lookups,
  in addition to array- and hash-based lookups.</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
  <changelog author="wr@rosenauer.org" date="1487764800">- fixed DKIM signing by recognizing ORIGINATING
  (regression in 2.11.0) (dkim-signing.diff)
  (https://lists.amavis.org/pipermail/amavis-users/2016-July/004428.html)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="varkoly@suse.com" date="1515931200">- bnc#1007149 Amavisd-milter fails to start when started via systemd
  Use fillup_only with -n amavis</changelog>
  <changelog author="varkoly@suse.com" date="1521028800">- bsc#1071932 - YaST2 Mail Server Configuration - throws Error for
  starting service amavis.
  amavisd-new should require spamassassin</changelog>
  <changelog author="varkoly@suse.com" date="1521115200">- bsc#1072122 amavisd-new should use unar instead of unrar</changelog>
  <changelog author="wr@rosenauer.org" date="1539518400">- update to version 2.11.1
  * removed a trailing dot element from @INC, as a workaround for a perl
    vulnerability CVE-2016-1238
  * amavis-services: bumping up syslog level from LOG_NOTICE to LOG_ERR
    for a message "PID &lt;pid&gt; went away", and removed redundant newlines
    from some log messages
  * safe_decode() and safe_decode_utf8(): avoid warning messages
    "Use of uninitialized value in subroutine entry"
    in Encode::MIME::Header when the $check argument is undefined
  * @sa_userconf_maps has been extended to allow loading of per-recipient
    (or per-policy bank, or global) SpamAssassin configuration set from
    LDAP. For consistency with SQL a @sa_userconf_maps entry prefixed with
    'ldap:' will load SpamAssassin configuration set using the
    load_scoreonly_ldap() method;  a patch by Atanas Karashenski
  * add some Sanesecurity.Foxhole false positives to the default
    list @virus_name_to_spam_score_maps
  * updated some comments
- update amavis-milter to version 2.6.1
  * Fixed bug when creating amavisd-new policy bank names</changelog>
  <changelog author="varkoly@suse.com" date="1647259200">- amavisd-new: Deprecated option "syslog" used in amavis.service
  (bsc#1185145)
  Remove deprecated entry</changelog>
</package>
<package pkgid="57b22da898980e9e48963ada0568172aeb5d199d890fac053dbd5817d07cbfca" name="amavisd-new" arch="s390x">
  <version epoch="0" ver="2.11.1" rel="150000.6.6.1"/>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashism in post script
- remove '-e' option of 'echo' command that may be unsupported in some
  POSIX-complete shells</changelog>
  <changelog author="p.drouand@gmail.com" date="1418731200">- Update to version 2.10.1
  + fixed a missing import of mail_addr_idn_to_ascii() and idn_to_utf8()
    when SQL is in use
  + void warnings issued by perl 5.21.5:
- Changes from version 2.10
  COMPATIBILITY
- New requirement: perl module Net::LibIDN needs to be installed.
- Uses a perl module File::LibMagic if installed, instead of spawning
  a file(1) utility.
- Support for international email relies heavily on perl to do the
  right thing in its support of Unicode, so using a reasonably recent
  version of perl is recommended. Amavisd was tested with perl 5.18
  and 5.20.1. Versions of perl older than 5.12 may cause problems
  with handling, encoding, and decoding of Unicode characters.
  It is reasonable to expect that versions 5.14 and 5.16 are fine too,
  but have not been tested extensively.
- Default log templates and notification templates have changed
  in details (like in decoding of international e-mail addresses), so
  if locally customized templates are in use these will benefit from
  updating - otherwise expect some mojibake in log and notifications.
- International domain names (IDN) encoded in ASCII-compatible encoding
  found in e-mail addresses and in Message-ID header field will be decoded
  to Unicode for presentation purposes (syslog, JSON structured log,
  notifications). This decoding does not affect a mail message itself.
- Logging via syslog expects that syslogd (or equivalent) will not
  clobber UTF-8 octets. It may be necessary to tell syslogd to accept
  C1 control characters unchanged, e.g. by adding a command line option
  "-8" to syslogd. Failing to do so may leave logged entries (like
  sender and recipient address, From, Subject) in international mail
  garbled or poorly readable in syslog.
  On FreeBSD one should add:  syslogd_flags="-8"  to /etc/rc.conf.
- Third party log parsers may need updating to accept logs with Unicode
  characters in UTF-8 encoding.
- A SMTP response to an EHLO command will now announce SMTPUTF8 capability
  by default.
  BUG FIXES
- releasing a message from an SQL quarantine was broken in version 2.9.1
  due to introduction of parent_mail_id(); patches provided by Stef Simoens
  and Gionatan Danti;
- if checking of a message was aborted prematurely (like due to a timeout
  or some fatal error), JSON log could receive a copy of a previous
  log entry;
- prevent non-ASCII non-UTF-8 octets from reaching a JSON log/report
  (which produced an invalid JSON object and Elasticsearch complaining);
- allow SMTP commands MAIL FROM and RCPT TO to accept options without
  values, as allowed by the RFC 5321 syntax;
- in delivery status notification (DSN) the field Received-From-MTA
  specified 'smtp' as mta-name-type, instead of a 'dns' as prescribed
  in RFC 3464;
- releasing from a quarantine left envelope sender address as '&lt;&gt;'
  instead of using the address found in a Return-Path header field
  of a quarantined message, while also logging a warning:
    Quarantine release $QID: missing X-Envelope-From or Return-Path
  reported by Pascal Volk;
- avoid failure in os_fingerprint or in smtp forwarding in certain cases
  where the $os_fingerprint_method or $forward_method or $notify_method
  uses an asterisk in place of a host IP address or port number.
  The reported error in os_fingerprint (reported by -ben) was:
    os_fingerprint FAILED: Insecure dependency in socket
    while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80
  and in SMTP forwarding or notification (reported by Dennis Boone):
    (!)connect to *:10025 attempt #1:
    Insecure dependency in socket while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80.
- files LDAP.ldif and LDAP.schema: added a missing attribute
  amavisDisclaimerOptions to objectClass; reported by Quanah Gibson-Mount;
  NEW FEATURES
- added support for Internationalized Email:
  * RFC 6530 - Overview and Framework for Internationalized Email
  * RFC 6531 - SMTP Extension for Internationalized Email (SMTPUTF8)
  * RFC 6532 - Internationalized Email Headers
  * RFC 6533 - Internationalized Delivery Status Notifications
  This supports UTF-8 (EAI) in SMTP/LMTP sender addresses, recipient
  addresses, and message header section. Feature parity with Postfix
  version 2.12 (support introduced in development snapshot 20140715).
  The SMTPUTF8 extension is supported by Gmail since 2014-08-05:
    http://googleblog.blogspot.com/2014/08/a-first-step-toward-more-global-email.html
- added support for Internationalized Domain Names (IDN) according
  to IDNA (RFC 5890, RFC 5891; RFC 3490);
  * A-labels in ASCII-compatible encoding of domain names are converted
    to U-labels for presentation/logging purposed;
  * U-labels are converted to A-labels when feeding a mail message
    to an MTA which does not announce support for SMTPUTF8 extension
    (instead of rejecting them as invalid mail address);
  * For lookup purposes an international domain name is converted to
    ASCII-compatible encoding when used as a query key in DNS lookups
    and in lookups into hash, list, SQL and LDAP lookup tables (but not
    in regexp table lookups). These tables are expected to contain domain
    names in their ASCII representation (ACE). For convenience of config
    files subroutines idn_to_ascii() and mail_idn_to_ascii() are available,
    which encode a Unicode domain name to ACE (like ToASCII in RFC 3490);
  * Many configuration settings may have their domain names in UTF-8.
    These will be converted to ACE automatically where necessary
    (e.g. when creating a Received and Authentication-Results header
    fields, DKIM signatures, mail addresses in notifications, ...).
    These settings include:
    $myhostname, $localhost_name, $myauthservid, $mydomain,
    notification sender and recipient mail addresses
    ($mailfrom_notify_*, $hdrfrom_notify_*, @*_admin_maps),
    domain names and selectors in DKIM signing keys (in calls
    to dkim_key() );
- delivery notifications and admin notifications now show the following
  information encoded as UTF-8 (which is a default $bdy_encoding) in the
  plain text part of the message: IDN domain names in sender and recipient
  mail addresses and Message-ID are first decoded to Unicode, Subject and
  author display names are MIME-decoded;
- 'amavisd showkeys' and 'amavisd testkeys' can now deal with IDN
  (international domain names): domain names in DNS zone comments
  end up as UTF-8, DNS labels are in ASCII (A-labels); domain names in
  calls to dkim_key() may be specified either as UTF-8 or in ASCII (ACE);
- new macro 'mail_addr_decode' takes an e-mail address as a string of
  octets, where a local part may be encoded as UTF-8, and the domain part
  may be an international domain name (IDN) consisting either of U-labels
  or A-labels or NR-LDH labels. Decodes A-labels to U-labels in domain
  name. Returns a string of logical characters (Unicode), suitable for
  notification templates. If the mail address is not a valid UTF-8 string,
  it is interpreted as ISO-8859-1 (Latin-1).
- new macro 'mail_addr_decode_octets' is like 'mail_addr_decode', except
  that the result is a string of octets, only valid as UTF-8 if the
  provided address was a valid UTF-8 (garbage-in/garbage-out);
- new macro 'header_field_octets' is like 'header_field', except that
  a result is a string of octets in UTF-8 encoding, suitable for a log
  template;
- new macro 'ip_proto_trace_all' expands into a list of information
  items from a Received header trace; each item consists of a protocol
  name (the WITH clause) and an IP address, optionally followed by a
  source port number if known;
  Example:
    ESMTP://[2001:db8::143:1]:39141 &lt; ESMTP://2001:db8::25 &lt;
    esmtps://203.0.113.172 &lt; ESMTPSA://192.168.9.9
  or:
    UTF8SMTP://[203.0.113.172]:51208 &lt; UTF8SMTPSA://192.168.9.9
- new macro 'ip_proto_trace_public' is like ip_proto_trace_all, except
  that entries with non-public IP address are excluded from the list;
  'Received' trace information in $log_verbose_templ and in notifications
  now include results from this macro call;
- new macro 'protocol' evaluates to a protocol name by which a message
  was received by amavisd, according to RFC 3848 ("Transmission Types
  Registration") and "Mail Transmission Types" / "WITH protocol types"
  IANA registration
    http://www.iana.org/assignments/mail-parameters/mail-parameters.xhtml
  e.g.: SMTP, ESMTP, ESMTPA, ESMTPS, ESMTPSA, LMTP, LMTPA, LMTPS, LMTPSA,
    UTF8SMTP, UTF8SMTPA, UTF8SMTPS, UTF8SMTPSA,
    UTF8LMTP, UTF8LMTPA, UTF8LMTPS, UTF8LMTPSA, ...
- new macro 'client_protocol' expands into a protocol name by which
  a message was received from a client by MTA; the information is passed
  from MTA to amavisd through XFORWARD PROTO SMTP protocol extension or
  through AM.PDP (milter); typical values are 'ESMTP' or 'SMTP';
- use a perl module File::LibMagic when available, instead of spawning
  a file(1) utility for classifying contents of mail parts.
  By using a direct interface to a libmagic library the startup cost
  of spawning an external process is avoided. Benchmarking shows that
  using libmagic is significantly faster especially for checking a small
  number of files - takes 4 ms for checking one file with libmagic
  vs. 27 ms with a spawned file(1); based on a patch by Markus Benning;
  OTHER
- RFC 6533: recognize a MIME type 'message/global' as similar
  to 'message/rfc822', and 'message/global-headers' as similar
  to 'text/rfc822-headers' where appropriate (e.g. in bounce killer);
- header validity check now distinguishes 'non-ASCII and invalid UTF-8'
  from 'non-ASCII but valid UTF-8' characters in a mail header section.
  By default valid UTF-8 strings in a mail header section are not treated
  as error even if mail is not flagged as international mail (SMTPUTF8),
  as these are quite common in practice. To treat non- MIME-encoded UTF-8
  in a header section as error the test can be enabled by:
    $allowed_header_tests{'utf8'} = 1;
- ORCPT attribute in SMTP 'RCPT TO' command now accepts the original
  recipient mail address in any of these encodings: utf-8-address,
  utf-8-addr-unitext, utf-8-addr-xtext, or as a legacy xtext,
  as required by RFC 6533;
- updated do_cabextract (extraction of Microsoft cabinet .cab archives)
  to recognize a slightly changed output of cabextract version 1.2;
  patch by Thomas Jarosch;
- adjusted some timeouts to leave more reserve for later stages of
  mail processing and forwarding;
- prefer sanitizing/protecting control characters as hex code (like \x7F)
  instead of octal (like \177) (e.g. in logging and DSN);
- Use dowload Url as source
- Add a requirement on perl-Net-LibIDN; new upstream dependency</changelog>
  <changelog author="wr@rosenauer.org" date="1439380800">- require perl-Convert-BinHex as otherwise startup fails with
  default installation
- file based requirement does not work
  - &gt; changed to package requirement util-linux-systemd</changelog>
  <changelog author="aj@ajaissle.de" date="1453377600">- Add amavisd-new-2.10.1-myhostname.patch:
  $myhostname is set using POSIX::uname, but expects a FQDN. This
  patch changes this behaviour to use Net::Domain::hostfqdn instead</changelog>
  <changelog author="jcnengel@gmail.com" date="1464350400">- Update to version 2.11.0
  + Bugfixes
  * delivery method was undefined when always_bcc was used;
  reported by Marieke Janssen;
  * avoid warnings issued by perl 5.21.7 and later:
  Negative repeat count does nothing at ./amavisd line 16408
  and similarly in amavisd-status;
  * releasing from an SQL quarantine failed to provide the original
  envelope sender address to a released message;
  reported, and a fix suggested by Tom Johnson and Tobias;
  * remove a stale database file __db.nanny.db on a reload or restart,
  as it can prevent a successful start when a previous start failed
  for some reason; a patch by Trent Lloyd;
  + Compatibility
  * During startup more detailed testing is performed for taint bugs of
  a module Encode and the function utf8::is_utf8(), which may produce
  warnings on old versions of perl with its old core module Encode,
  or may exit on detecting more sinister bugs in these modules.
  Note that the module Encode may be upgraded independently of perl,
  if desired;
  * with MySQL: changed character set 'utf8' to 'utf8mb4' for fields
  msgs.subject and msgs.from_addr, as previously some of the UTF-8
  characters could not be stored in a database;
  * when logging to stderr a timestamp prefix to each message is only
  still inserted if $DEBUG is true.  When $DEBUG is false each message
  is prefixed with a syslog log level in angle brackets, and a timestamp
  is omitted (for compatibility with systemd);
  * a perl module Digest::SHA is now a required module. It is a perl core
  module since perl 5.10, so it shouldn't introduce a new dependency,
  and it was a de-facto required module even previously, as it was needed
  for DKIM processing;
  + New features
  * Polished rough corners to facilitate running amavisd as a non-daemonized
  supervised process
  * A log template macro 'report_json' can now take arguments, which can
  include or exclude fields (key/values) from the JSON report object.
  Arguments to a macro are either field names (keys) to be included
  in a report, or are field names to be excluded, each prefixed with
  an exclamation mark, to produce a report with all but excluded fields.
  * Two new configuration settings are added: %smtpd_tls_server_options
  and %smtp_tls_client_options. These two associative arrays are passed
  to IO::Socket::SSL-&gt;start_SSL when establishing a server-side or a
  client-side TLS session with an MTA, and provide more control over
  a TLS session - like providing certificates and restricting ciphers.
  See documentation of a perl module IO::Socket::SSL for a list of
  all options with their descriptions and their defaults.
  * Supports receiving SMTP/LMTP connections through a HAProxy,
  recognizing 'PROXY protocol Version 1' data on the first line read,
  after a connection from HAProxy to amavisd has been established.
  Connection data (IP addresses and ports) received via this protocol
  end up replacing such data in the the Amavis::In::Connection object
  ($conn).  Set configuration variable $haproxy_target_enabled (also
  a member of policy banks) to true in order to enable this protocol.
  * redis: allow a scoped / link-local IP address specification
  (avoiding current limitation in IO::Socket::IP [rt.cpan.org #89608]);
  * the Amavis::Unpackers::Part::digest method now holds a digest (SHA1,
  hex) of a decoded (base64 or quoted-printable) MIME part contents,
  followed by a colon and a lowercased Content-Type of the MIME part.
  Canonical line endings CRLF in decoded textual parts are normalized
  to a native newline (\n) before feeding them to a digest algorithm.
  * Policy bank names in a @client_ipaddr_policy setting can now accept
  a comma-separated list of policy names to be loaded on a match
  (for loading of policy banks based on an IP address of a SMTP client).
  Whitespace around each policy name is allowed and is stripped.
  Previously only a single policy bank name was allowed in each entry
  of @client_ipaddr_policy.
  * Experimental feature: IP lookups (as implemented by lookup_ip_acl()
  and used by @client_ipaddr_policy) can now also do DNS-based lookups,
  in addition to array- and hash-based lookups.</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
  <changelog author="wr@rosenauer.org" date="1487764800">- fixed DKIM signing by recognizing ORIGINATING
  (regression in 2.11.0) (dkim-signing.diff)
  (https://lists.amavis.org/pipermail/amavis-users/2016-July/004428.html)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="varkoly@suse.com" date="1515931200">- bnc#1007149 Amavisd-milter fails to start when started via systemd
  Use fillup_only with -n amavis</changelog>
  <changelog author="varkoly@suse.com" date="1521028800">- bsc#1071932 - YaST2 Mail Server Configuration - throws Error for
  starting service amavis.
  amavisd-new should require spamassassin</changelog>
  <changelog author="varkoly@suse.com" date="1521115200">- bsc#1072122 amavisd-new should use unar instead of unrar</changelog>
  <changelog author="wr@rosenauer.org" date="1539518400">- update to version 2.11.1
  * removed a trailing dot element from @INC, as a workaround for a perl
    vulnerability CVE-2016-1238
  * amavis-services: bumping up syslog level from LOG_NOTICE to LOG_ERR
    for a message "PID &lt;pid&gt; went away", and removed redundant newlines
    from some log messages
  * safe_decode() and safe_decode_utf8(): avoid warning messages
    "Use of uninitialized value in subroutine entry"
    in Encode::MIME::Header when the $check argument is undefined
  * @sa_userconf_maps has been extended to allow loading of per-recipient
    (or per-policy bank, or global) SpamAssassin configuration set from
    LDAP. For consistency with SQL a @sa_userconf_maps entry prefixed with
    'ldap:' will load SpamAssassin configuration set using the
    load_scoreonly_ldap() method;  a patch by Atanas Karashenski
  * add some Sanesecurity.Foxhole false positives to the default
    list @virus_name_to_spam_score_maps
  * updated some comments
- update amavis-milter to version 2.6.1
  * Fixed bug when creating amavisd-new policy bank names</changelog>
  <changelog author="varkoly@suse.com" date="1647259200">- amavisd-new: Deprecated option "syslog" used in amavis.service
  (bsc#1185145)
  Remove deprecated entry</changelog>
</package>
<package pkgid="f3287ebfc205cce70a5f2b87e7fc5e6fb3e2ee9d292a466a2026d0d2fb7c4701" name="amavisd-new" arch="src">
  <version epoch="0" ver="2.11.1" rel="150000.6.6.1"/>
  <changelog author="varkoly@suse.com" date="1380110400">- bnc#831556 - naming mismatch for amavis and systemd</changelog>
  <changelog author="opensuse@cboltz.de" date="1380801600">- fix clamd socket location (bnc#809580)</changelog>
  <changelog author="varkoly@suse.com" date="1382443200">- bnc#844575 - amavis received a change where /var/run was replaced
  with /run still /var/run is present</changelog>
  <changelog author="wr@rosenauer.org" date="1384257600">- Add real systemd support; add required macros in %post/postun sections
  and drop sysvinit support on openSUSE &gt;= 12.3</changelog>
  <changelog author="wr@rosenauer.org" date="1388577600">- add some recommended decoders (bnc#754852)
- fixed amavisd-milter invocation (bnc#809969)
- correctly set clamd socket to (/var/run/clamav/clamd-socket)
  (bnc#844575)
- some spec file cleanup including using optflags for native code</changelog>
  <changelog author="wr@rosenauer.org" date="1406462400">- update to version 2.9.1
  COMPATIBILITY
  There are no known incompatibilities between versions 2.9.0 and 2.9.1.
  Additional bugfixes and also:
  - updated decoding of RAR archives to recognize a changed format in output
    of 'unrar' utility version 5; based on a patch by amavis17(at)iotti.biz
  - avoid tempfailing a message if a redis server is down, just log the
    error and carry on;
  - some minor logging changes to facilitate troubleshooting;
- changes in 2.9
  COMPATIBILITY
  This version drops dependency on a Perl module Redis, and makes
  dependencies on modules Convert::TNEF and Convert::UUlib truly optional.
  The following change may affect third-party log parsers:
  To facilitate forensic log analysis and troubleshooting, log entries
  'FWD from' and 'SEND from' at level 1 now carry one additional
  prefixed information field which is the unique internal mail_id of
  the message, possibly followed by a parent_mail_id in parenthesis,
  No other incompatibilities with a previous version 2.8.1 are expected.
  NEW FEATURES SUMMARY
  - structured log/reporting to a Redis server in JSON format;
  - IP address reputation (uses a Redis server);
  - added two minor content categories to the major ccat CC_UNCHECKED
    (encrypted (=1) and over-limits/mail-bomb (=2) );
  - introduced a by-recipient setting %final_destiny_maps_by_ccat.
- update amavisd-milter to 1.6.0
  * New features:
    Added new amavisd-milter option -B which passes value of
    {daemon_name} milter macro as amavisd-new policy bank name.
  * Bug and compatibility fixes:
    Added amavisd-milter.spec for compilation with rpmbuild.
    Fixed typo which prevents using LDFLAGS on Debian.
    Fixed missing definition of true and false in libmilter/mfapi.h.
- upstream packages as tar.xz -&gt; added xz as BuildRequires to
  support building for older dists</changelog>
  <changelog author="ro@suse.de" date="1408190400">- add /bin/logger as prereq (util-linux split)</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashism in post script
- remove '-e' option of 'echo' command that may be unsupported in some
  POSIX-complete shells</changelog>
  <changelog author="p.drouand@gmail.com" date="1418731200">- Update to version 2.10.1
  + fixed a missing import of mail_addr_idn_to_ascii() and idn_to_utf8()
    when SQL is in use
  + void warnings issued by perl 5.21.5:
- Changes from version 2.10
  COMPATIBILITY
- New requirement: perl module Net::LibIDN needs to be installed.
- Uses a perl module File::LibMagic if installed, instead of spawning
  a file(1) utility.
- Support for international email relies heavily on perl to do the
  right thing in its support of Unicode, so using a reasonably recent
  version of perl is recommended. Amavisd was tested with perl 5.18
  and 5.20.1. Versions of perl older than 5.12 may cause problems
  with handling, encoding, and decoding of Unicode characters.
  It is reasonable to expect that versions 5.14 and 5.16 are fine too,
  but have not been tested extensively.
- Default log templates and notification templates have changed
  in details (like in decoding of international e-mail addresses), so
  if locally customized templates are in use these will benefit from
  updating - otherwise expect some mojibake in log and notifications.
- International domain names (IDN) encoded in ASCII-compatible encoding
  found in e-mail addresses and in Message-ID header field will be decoded
  to Unicode for presentation purposes (syslog, JSON structured log,
  notifications). This decoding does not affect a mail message itself.
- Logging via syslog expects that syslogd (or equivalent) will not
  clobber UTF-8 octets. It may be necessary to tell syslogd to accept
  C1 control characters unchanged, e.g. by adding a command line option
  "-8" to syslogd. Failing to do so may leave logged entries (like
  sender and recipient address, From, Subject) in international mail
  garbled or poorly readable in syslog.
  On FreeBSD one should add:  syslogd_flags="-8"  to /etc/rc.conf.
- Third party log parsers may need updating to accept logs with Unicode
  characters in UTF-8 encoding.
- A SMTP response to an EHLO command will now announce SMTPUTF8 capability
  by default.
  BUG FIXES
- releasing a message from an SQL quarantine was broken in version 2.9.1
  due to introduction of parent_mail_id(); patches provided by Stef Simoens
  and Gionatan Danti;
- if checking of a message was aborted prematurely (like due to a timeout
  or some fatal error), JSON log could receive a copy of a previous
  log entry;
- prevent non-ASCII non-UTF-8 octets from reaching a JSON log/report
  (which produced an invalid JSON object and Elasticsearch complaining);
- allow SMTP commands MAIL FROM and RCPT TO to accept options without
  values, as allowed by the RFC 5321 syntax;
- in delivery status notification (DSN) the field Received-From-MTA
  specified 'smtp' as mta-name-type, instead of a 'dns' as prescribed
  in RFC 3464;
- releasing from a quarantine left envelope sender address as '&lt;&gt;'
  instead of using the address found in a Return-Path header field
  of a quarantined message, while also logging a warning:
    Quarantine release $QID: missing X-Envelope-From or Return-Path
  reported by Pascal Volk;
- avoid failure in os_fingerprint or in smtp forwarding in certain cases
  where the $os_fingerprint_method or $forward_method or $notify_method
  uses an asterisk in place of a host IP address or port number.
  The reported error in os_fingerprint (reported by -ben) was:
    os_fingerprint FAILED: Insecure dependency in socket
    while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80
  and in SMTP forwarding or notification (reported by Dennis Boone):
    (!)connect to *:10025 attempt #1:
    Insecure dependency in socket while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80.
- files LDAP.ldif and LDAP.schema: added a missing attribute
  amavisDisclaimerOptions to objectClass; reported by Quanah Gibson-Mount;
  NEW FEATURES
- added support for Internationalized Email:
  * RFC 6530 - Overview and Framework for Internationalized Email
  * RFC 6531 - SMTP Extension for Internationalized Email (SMTPUTF8)
  * RFC 6532 - Internationalized Email Headers
  * RFC 6533 - Internationalized Delivery Status Notifications
  This supports UTF-8 (EAI) in SMTP/LMTP sender addresses, recipient
  addresses, and message header section. Feature parity with Postfix
  version 2.12 (support introduced in development snapshot 20140715).
  The SMTPUTF8 extension is supported by Gmail since 2014-08-05:
    http://googleblog.blogspot.com/2014/08/a-first-step-toward-more-global-email.html
- added support for Internationalized Domain Names (IDN) according
  to IDNA (RFC 5890, RFC 5891; RFC 3490);
  * A-labels in ASCII-compatible encoding of domain names are converted
    to U-labels for presentation/logging purposed;
  * U-labels are converted to A-labels when feeding a mail message
    to an MTA which does not announce support for SMTPUTF8 extension
    (instead of rejecting them as invalid mail address);
  * For lookup purposes an international domain name is converted to
    ASCII-compatible encoding when used as a query key in DNS lookups
    and in lookups into hash, list, SQL and LDAP lookup tables (but not
    in regexp table lookups). These tables are expected to contain domain
    names in their ASCII representation (ACE). For convenience of config
    files subroutines idn_to_ascii() and mail_idn_to_ascii() are available,
    which encode a Unicode domain name to ACE (like ToASCII in RFC 3490);
  * Many configuration settings may have their domain names in UTF-8.
    These will be converted to ACE automatically where necessary
    (e.g. when creating a Received and Authentication-Results header
    fields, DKIM signatures, mail addresses in notifications, ...).
    These settings include:
    $myhostname, $localhost_name, $myauthservid, $mydomain,
    notification sender and recipient mail addresses
    ($mailfrom_notify_*, $hdrfrom_notify_*, @*_admin_maps),
    domain names and selectors in DKIM signing keys (in calls
    to dkim_key() );
- delivery notifications and admin notifications now show the following
  information encoded as UTF-8 (which is a default $bdy_encoding) in the
  plain text part of the message: IDN domain names in sender and recipient
  mail addresses and Message-ID are first decoded to Unicode, Subject and
  author display names are MIME-decoded;
- 'amavisd showkeys' and 'amavisd testkeys' can now deal with IDN
  (international domain names): domain names in DNS zone comments
  end up as UTF-8, DNS labels are in ASCII (A-labels); domain names in
  calls to dkim_key() may be specified either as UTF-8 or in ASCII (ACE);
- new macro 'mail_addr_decode' takes an e-mail address as a string of
  octets, where a local part may be encoded as UTF-8, and the domain part
  may be an international domain name (IDN) consisting either of U-labels
  or A-labels or NR-LDH labels. Decodes A-labels to U-labels in domain
  name. Returns a string of logical characters (Unicode), suitable for
  notification templates. If the mail address is not a valid UTF-8 string,
  it is interpreted as ISO-8859-1 (Latin-1).
- new macro 'mail_addr_decode_octets' is like 'mail_addr_decode', except
  that the result is a string of octets, only valid as UTF-8 if the
  provided address was a valid UTF-8 (garbage-in/garbage-out);
- new macro 'header_field_octets' is like 'header_field', except that
  a result is a string of octets in UTF-8 encoding, suitable for a log
  template;
- new macro 'ip_proto_trace_all' expands into a list of information
  items from a Received header trace; each item consists of a protocol
  name (the WITH clause) and an IP address, optionally followed by a
  source port number if known;
  Example:
    ESMTP://[2001:db8::143:1]:39141 &lt; ESMTP://2001:db8::25 &lt;
    esmtps://203.0.113.172 &lt; ESMTPSA://192.168.9.9
  or:
    UTF8SMTP://[203.0.113.172]:51208 &lt; UTF8SMTPSA://192.168.9.9
- new macro 'ip_proto_trace_public' is like ip_proto_trace_all, except
  that entries with non-public IP address are excluded from the list;
  'Received' trace information in $log_verbose_templ and in notifications
  now include results from this macro call;
- new macro 'protocol' evaluates to a protocol name by which a message
  was received by amavisd, according to RFC 3848 ("Transmission Types
  Registration") and "Mail Transmission Types" / "WITH protocol types"
  IANA registration
    http://www.iana.org/assignments/mail-parameters/mail-parameters.xhtml
  e.g.: SMTP, ESMTP, ESMTPA, ESMTPS, ESMTPSA, LMTP, LMTPA, LMTPS, LMTPSA,
    UTF8SMTP, UTF8SMTPA, UTF8SMTPS, UTF8SMTPSA,
    UTF8LMTP, UTF8LMTPA, UTF8LMTPS, UTF8LMTPSA, ...
- new macro 'client_protocol' expands into a protocol name by which
  a message was received from a client by MTA; the information is passed
  from MTA to amavisd through XFORWARD PROTO SMTP protocol extension or
  through AM.PDP (milter); typical values are 'ESMTP' or 'SMTP';
- use a perl module File::LibMagic when available, instead of spawning
  a file(1) utility for classifying contents of mail parts.
  By using a direct interface to a libmagic library the startup cost
  of spawning an external process is avoided. Benchmarking shows that
  using libmagic is significantly faster especially for checking a small
  number of files - takes 4 ms for checking one file with libmagic
  vs. 27 ms with a spawned file(1); based on a patch by Markus Benning;
  OTHER
- RFC 6533: recognize a MIME type 'message/global' as similar
  to 'message/rfc822', and 'message/global-headers' as similar
  to 'text/rfc822-headers' where appropriate (e.g. in bounce killer);
- header validity check now distinguishes 'non-ASCII and invalid UTF-8'
  from 'non-ASCII but valid UTF-8' characters in a mail header section.
  By default valid UTF-8 strings in a mail header section are not treated
  as error even if mail is not flagged as international mail (SMTPUTF8),
  as these are quite common in practice. To treat non- MIME-encoded UTF-8
  in a header section as error the test can be enabled by:
    $allowed_header_tests{'utf8'} = 1;
- ORCPT attribute in SMTP 'RCPT TO' command now accepts the original
  recipient mail address in any of these encodings: utf-8-address,
  utf-8-addr-unitext, utf-8-addr-xtext, or as a legacy xtext,
  as required by RFC 6533;
- updated do_cabextract (extraction of Microsoft cabinet .cab archives)
  to recognize a slightly changed output of cabextract version 1.2;
  patch by Thomas Jarosch;
- adjusted some timeouts to leave more reserve for later stages of
  mail processing and forwarding;
- prefer sanitizing/protecting control characters as hex code (like \x7F)
  instead of octal (like \177) (e.g. in logging and DSN);
- Use dowload Url as source
- Add a requirement on perl-Net-LibIDN; new upstream dependency</changelog>
  <changelog author="wr@rosenauer.org" date="1439380800">- require perl-Convert-BinHex as otherwise startup fails with
  default installation
- file based requirement does not work
  - &gt; changed to package requirement util-linux-systemd</changelog>
  <changelog author="aj@ajaissle.de" date="1453377600">- Add amavisd-new-2.10.1-myhostname.patch:
  $myhostname is set using POSIX::uname, but expects a FQDN. This
  patch changes this behaviour to use Net::Domain::hostfqdn instead</changelog>
  <changelog author="jcnengel@gmail.com" date="1464350400">- Update to version 2.11.0
  + Bugfixes
  * delivery method was undefined when always_bcc was used;
  reported by Marieke Janssen;
  * avoid warnings issued by perl 5.21.7 and later:
  Negative repeat count does nothing at ./amavisd line 16408
  and similarly in amavisd-status;
  * releasing from an SQL quarantine failed to provide the original
  envelope sender address to a released message;
  reported, and a fix suggested by Tom Johnson and Tobias;
  * remove a stale database file __db.nanny.db on a reload or restart,
  as it can prevent a successful start when a previous start failed
  for some reason; a patch by Trent Lloyd;
  + Compatibility
  * During startup more detailed testing is performed for taint bugs of
  a module Encode and the function utf8::is_utf8(), which may produce
  warnings on old versions of perl with its old core module Encode,
  or may exit on detecting more sinister bugs in these modules.
  Note that the module Encode may be upgraded independently of perl,
  if desired;
  * with MySQL: changed character set 'utf8' to 'utf8mb4' for fields
  msgs.subject and msgs.from_addr, as previously some of the UTF-8
  characters could not be stored in a database;
  * when logging to stderr a timestamp prefix to each message is only
  still inserted if $DEBUG is true.  When $DEBUG is false each message
  is prefixed with a syslog log level in angle brackets, and a timestamp
  is omitted (for compatibility with systemd);
  * a perl module Digest::SHA is now a required module. It is a perl core
  module since perl 5.10, so it shouldn't introduce a new dependency,
  and it was a de-facto required module even previously, as it was needed
  for DKIM processing;
  + New features
  * Polished rough corners to facilitate running amavisd as a non-daemonized
  supervised process
  * A log template macro 'report_json' can now take arguments, which can
  include or exclude fields (key/values) from the JSON report object.
  Arguments to a macro are either field names (keys) to be included
  in a report, or are field names to be excluded, each prefixed with
  an exclamation mark, to produce a report with all but excluded fields.
  * Two new configuration settings are added: %smtpd_tls_server_options
  and %smtp_tls_client_options. These two associative arrays are passed
  to IO::Socket::SSL-&gt;start_SSL when establishing a server-side or a
  client-side TLS session with an MTA, and provide more control over
  a TLS session - like providing certificates and restricting ciphers.
  See documentation of a perl module IO::Socket::SSL for a list of
  all options with their descriptions and their defaults.
  * Supports receiving SMTP/LMTP connections through a HAProxy,
  recognizing 'PROXY protocol Version 1' data on the first line read,
  after a connection from HAProxy to amavisd has been established.
  Connection data (IP addresses and ports) received via this protocol
  end up replacing such data in the the Amavis::In::Connection object
  ($conn).  Set configuration variable $haproxy_target_enabled (also
  a member of policy banks) to true in order to enable this protocol.
  * redis: allow a scoped / link-local IP address specification
  (avoiding current limitation in IO::Socket::IP [rt.cpan.org #89608]);
  * the Amavis::Unpackers::Part::digest method now holds a digest (SHA1,
  hex) of a decoded (base64 or quoted-printable) MIME part contents,
  followed by a colon and a lowercased Content-Type of the MIME part.
  Canonical line endings CRLF in decoded textual parts are normalized
  to a native newline (\n) before feeding them to a digest algorithm.
  * Policy bank names in a @client_ipaddr_policy setting can now accept
  a comma-separated list of policy names to be loaded on a match
  (for loading of policy banks based on an IP address of a SMTP client).
  Whitespace around each policy name is allowed and is stripped.
  Previously only a single policy bank name was allowed in each entry
  of @client_ipaddr_policy.
  * Experimental feature: IP lookups (as implemented by lookup_ip_acl()
  and used by @client_ipaddr_policy) can now also do DNS-based lookups,
  in addition to array- and hash-based lookups.</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
  <changelog author="wr@rosenauer.org" date="1487764800">- fixed DKIM signing by recognizing ORIGINATING
  (regression in 2.11.0) (dkim-signing.diff)
  (https://lists.amavis.org/pipermail/amavis-users/2016-July/004428.html)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="varkoly@suse.com" date="1515931200">- bnc#1007149 Amavisd-milter fails to start when started via systemd
  Use fillup_only with -n amavis</changelog>
  <changelog author="varkoly@suse.com" date="1521028800">- bsc#1071932 - YaST2 Mail Server Configuration - throws Error for
  starting service amavis.
  amavisd-new should require spamassassin</changelog>
  <changelog author="varkoly@suse.com" date="1521115200">- bsc#1072122 amavisd-new should use unar instead of unrar</changelog>
  <changelog author="wr@rosenauer.org" date="1539518400">- update to version 2.11.1
  * removed a trailing dot element from @INC, as a workaround for a perl
    vulnerability CVE-2016-1238
  * amavis-services: bumping up syslog level from LOG_NOTICE to LOG_ERR
    for a message "PID &lt;pid&gt; went away", and removed redundant newlines
    from some log messages
  * safe_decode() and safe_decode_utf8(): avoid warning messages
    "Use of uninitialized value in subroutine entry"
    in Encode::MIME::Header when the $check argument is undefined
  * @sa_userconf_maps has been extended to allow loading of per-recipient
    (or per-policy bank, or global) SpamAssassin configuration set from
    LDAP. For consistency with SQL a @sa_userconf_maps entry prefixed with
    'ldap:' will load SpamAssassin configuration set using the
    load_scoreonly_ldap() method;  a patch by Atanas Karashenski
  * add some Sanesecurity.Foxhole false positives to the default
    list @virus_name_to_spam_score_maps
  * updated some comments
- update amavis-milter to version 2.6.1
  * Fixed bug when creating amavisd-new policy bank names</changelog>
  <changelog author="varkoly@suse.com" date="1647259200">- amavisd-new: Deprecated option "syslog" used in amavis.service
  (bsc#1185145)
  Remove deprecated entry</changelog>
</package>
<package pkgid="b1cdd83fe815c643706202cac875dec79fa63118c325637659edd7963eff5f61" name="amavisd-new" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="150000.6.6.1"/>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashism in post script
- remove '-e' option of 'echo' command that may be unsupported in some
  POSIX-complete shells</changelog>
  <changelog author="p.drouand@gmail.com" date="1418731200">- Update to version 2.10.1
  + fixed a missing import of mail_addr_idn_to_ascii() and idn_to_utf8()
    when SQL is in use
  + void warnings issued by perl 5.21.5:
- Changes from version 2.10
  COMPATIBILITY
- New requirement: perl module Net::LibIDN needs to be installed.
- Uses a perl module File::LibMagic if installed, instead of spawning
  a file(1) utility.
- Support for international email relies heavily on perl to do the
  right thing in its support of Unicode, so using a reasonably recent
  version of perl is recommended. Amavisd was tested with perl 5.18
  and 5.20.1. Versions of perl older than 5.12 may cause problems
  with handling, encoding, and decoding of Unicode characters.
  It is reasonable to expect that versions 5.14 and 5.16 are fine too,
  but have not been tested extensively.
- Default log templates and notification templates have changed
  in details (like in decoding of international e-mail addresses), so
  if locally customized templates are in use these will benefit from
  updating - otherwise expect some mojibake in log and notifications.
- International domain names (IDN) encoded in ASCII-compatible encoding
  found in e-mail addresses and in Message-ID header field will be decoded
  to Unicode for presentation purposes (syslog, JSON structured log,
  notifications). This decoding does not affect a mail message itself.
- Logging via syslog expects that syslogd (or equivalent) will not
  clobber UTF-8 octets. It may be necessary to tell syslogd to accept
  C1 control characters unchanged, e.g. by adding a command line option
  "-8" to syslogd. Failing to do so may leave logged entries (like
  sender and recipient address, From, Subject) in international mail
  garbled or poorly readable in syslog.
  On FreeBSD one should add:  syslogd_flags="-8"  to /etc/rc.conf.
- Third party log parsers may need updating to accept logs with Unicode
  characters in UTF-8 encoding.
- A SMTP response to an EHLO command will now announce SMTPUTF8 capability
  by default.
  BUG FIXES
- releasing a message from an SQL quarantine was broken in version 2.9.1
  due to introduction of parent_mail_id(); patches provided by Stef Simoens
  and Gionatan Danti;
- if checking of a message was aborted prematurely (like due to a timeout
  or some fatal error), JSON log could receive a copy of a previous
  log entry;
- prevent non-ASCII non-UTF-8 octets from reaching a JSON log/report
  (which produced an invalid JSON object and Elasticsearch complaining);
- allow SMTP commands MAIL FROM and RCPT TO to accept options without
  values, as allowed by the RFC 5321 syntax;
- in delivery status notification (DSN) the field Received-From-MTA
  specified 'smtp' as mta-name-type, instead of a 'dns' as prescribed
  in RFC 3464;
- releasing from a quarantine left envelope sender address as '&lt;&gt;'
  instead of using the address found in a Return-Path header field
  of a quarantined message, while also logging a warning:
    Quarantine release $QID: missing X-Envelope-From or Return-Path
  reported by Pascal Volk;
- avoid failure in os_fingerprint or in smtp forwarding in certain cases
  where the $os_fingerprint_method or $forward_method or $notify_method
  uses an asterisk in place of a host IP address or port number.
  The reported error in os_fingerprint (reported by -ben) was:
    os_fingerprint FAILED: Insecure dependency in socket
    while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80
  and in SMTP forwarding or notification (reported by Dennis Boone):
    (!)connect to *:10025 attempt #1:
    Insecure dependency in socket while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80.
- files LDAP.ldif and LDAP.schema: added a missing attribute
  amavisDisclaimerOptions to objectClass; reported by Quanah Gibson-Mount;
  NEW FEATURES
- added support for Internationalized Email:
  * RFC 6530 - Overview and Framework for Internationalized Email
  * RFC 6531 - SMTP Extension for Internationalized Email (SMTPUTF8)
  * RFC 6532 - Internationalized Email Headers
  * RFC 6533 - Internationalized Delivery Status Notifications
  This supports UTF-8 (EAI) in SMTP/LMTP sender addresses, recipient
  addresses, and message header section. Feature parity with Postfix
  version 2.12 (support introduced in development snapshot 20140715).
  The SMTPUTF8 extension is supported by Gmail since 2014-08-05:
    http://googleblog.blogspot.com/2014/08/a-first-step-toward-more-global-email.html
- added support for Internationalized Domain Names (IDN) according
  to IDNA (RFC 5890, RFC 5891; RFC 3490);
  * A-labels in ASCII-compatible encoding of domain names are converted
    to U-labels for presentation/logging purposed;
  * U-labels are converted to A-labels when feeding a mail message
    to an MTA which does not announce support for SMTPUTF8 extension
    (instead of rejecting them as invalid mail address);
  * For lookup purposes an international domain name is converted to
    ASCII-compatible encoding when used as a query key in DNS lookups
    and in lookups into hash, list, SQL and LDAP lookup tables (but not
    in regexp table lookups). These tables are expected to contain domain
    names in their ASCII representation (ACE). For convenience of config
    files subroutines idn_to_ascii() and mail_idn_to_ascii() are available,
    which encode a Unicode domain name to ACE (like ToASCII in RFC 3490);
  * Many configuration settings may have their domain names in UTF-8.
    These will be converted to ACE automatically where necessary
    (e.g. when creating a Received and Authentication-Results header
    fields, DKIM signatures, mail addresses in notifications, ...).
    These settings include:
    $myhostname, $localhost_name, $myauthservid, $mydomain,
    notification sender and recipient mail addresses
    ($mailfrom_notify_*, $hdrfrom_notify_*, @*_admin_maps),
    domain names and selectors in DKIM signing keys (in calls
    to dkim_key() );
- delivery notifications and admin notifications now show the following
  information encoded as UTF-8 (which is a default $bdy_encoding) in the
  plain text part of the message: IDN domain names in sender and recipient
  mail addresses and Message-ID are first decoded to Unicode, Subject and
  author display names are MIME-decoded;
- 'amavisd showkeys' and 'amavisd testkeys' can now deal with IDN
  (international domain names): domain names in DNS zone comments
  end up as UTF-8, DNS labels are in ASCII (A-labels); domain names in
  calls to dkim_key() may be specified either as UTF-8 or in ASCII (ACE);
- new macro 'mail_addr_decode' takes an e-mail address as a string of
  octets, where a local part may be encoded as UTF-8, and the domain part
  may be an international domain name (IDN) consisting either of U-labels
  or A-labels or NR-LDH labels. Decodes A-labels to U-labels in domain
  name. Returns a string of logical characters (Unicode), suitable for
  notification templates. If the mail address is not a valid UTF-8 string,
  it is interpreted as ISO-8859-1 (Latin-1).
- new macro 'mail_addr_decode_octets' is like 'mail_addr_decode', except
  that the result is a string of octets, only valid as UTF-8 if the
  provided address was a valid UTF-8 (garbage-in/garbage-out);
- new macro 'header_field_octets' is like 'header_field', except that
  a result is a string of octets in UTF-8 encoding, suitable for a log
  template;
- new macro 'ip_proto_trace_all' expands into a list of information
  items from a Received header trace; each item consists of a protocol
  name (the WITH clause) and an IP address, optionally followed by a
  source port number if known;
  Example:
    ESMTP://[2001:db8::143:1]:39141 &lt; ESMTP://2001:db8::25 &lt;
    esmtps://203.0.113.172 &lt; ESMTPSA://192.168.9.9
  or:
    UTF8SMTP://[203.0.113.172]:51208 &lt; UTF8SMTPSA://192.168.9.9
- new macro 'ip_proto_trace_public' is like ip_proto_trace_all, except
  that entries with non-public IP address are excluded from the list;
  'Received' trace information in $log_verbose_templ and in notifications
  now include results from this macro call;
- new macro 'protocol' evaluates to a protocol name by which a message
  was received by amavisd, according to RFC 3848 ("Transmission Types
  Registration") and "Mail Transmission Types" / "WITH protocol types"
  IANA registration
    http://www.iana.org/assignments/mail-parameters/mail-parameters.xhtml
  e.g.: SMTP, ESMTP, ESMTPA, ESMTPS, ESMTPSA, LMTP, LMTPA, LMTPS, LMTPSA,
    UTF8SMTP, UTF8SMTPA, UTF8SMTPS, UTF8SMTPSA,
    UTF8LMTP, UTF8LMTPA, UTF8LMTPS, UTF8LMTPSA, ...
- new macro 'client_protocol' expands into a protocol name by which
  a message was received from a client by MTA; the information is passed
  from MTA to amavisd through XFORWARD PROTO SMTP protocol extension or
  through AM.PDP (milter); typical values are 'ESMTP' or 'SMTP';
- use a perl module File::LibMagic when available, instead of spawning
  a file(1) utility for classifying contents of mail parts.
  By using a direct interface to a libmagic library the startup cost
  of spawning an external process is avoided. Benchmarking shows that
  using libmagic is significantly faster especially for checking a small
  number of files - takes 4 ms for checking one file with libmagic
  vs. 27 ms with a spawned file(1); based on a patch by Markus Benning;
  OTHER
- RFC 6533: recognize a MIME type 'message/global' as similar
  to 'message/rfc822', and 'message/global-headers' as similar
  to 'text/rfc822-headers' where appropriate (e.g. in bounce killer);
- header validity check now distinguishes 'non-ASCII and invalid UTF-8'
  from 'non-ASCII but valid UTF-8' characters in a mail header section.
  By default valid UTF-8 strings in a mail header section are not treated
  as error even if mail is not flagged as international mail (SMTPUTF8),
  as these are quite common in practice. To treat non- MIME-encoded UTF-8
  in a header section as error the test can be enabled by:
    $allowed_header_tests{'utf8'} = 1;
- ORCPT attribute in SMTP 'RCPT TO' command now accepts the original
  recipient mail address in any of these encodings: utf-8-address,
  utf-8-addr-unitext, utf-8-addr-xtext, or as a legacy xtext,
  as required by RFC 6533;
- updated do_cabextract (extraction of Microsoft cabinet .cab archives)
  to recognize a slightly changed output of cabextract version 1.2;
  patch by Thomas Jarosch;
- adjusted some timeouts to leave more reserve for later stages of
  mail processing and forwarding;
- prefer sanitizing/protecting control characters as hex code (like \x7F)
  instead of octal (like \177) (e.g. in logging and DSN);
- Use dowload Url as source
- Add a requirement on perl-Net-LibIDN; new upstream dependency</changelog>
  <changelog author="wr@rosenauer.org" date="1439380800">- require perl-Convert-BinHex as otherwise startup fails with
  default installation
- file based requirement does not work
  - &gt; changed to package requirement util-linux-systemd</changelog>
  <changelog author="aj@ajaissle.de" date="1453377600">- Add amavisd-new-2.10.1-myhostname.patch:
  $myhostname is set using POSIX::uname, but expects a FQDN. This
  patch changes this behaviour to use Net::Domain::hostfqdn instead</changelog>
  <changelog author="jcnengel@gmail.com" date="1464350400">- Update to version 2.11.0
  + Bugfixes
  * delivery method was undefined when always_bcc was used;
  reported by Marieke Janssen;
  * avoid warnings issued by perl 5.21.7 and later:
  Negative repeat count does nothing at ./amavisd line 16408
  and similarly in amavisd-status;
  * releasing from an SQL quarantine failed to provide the original
  envelope sender address to a released message;
  reported, and a fix suggested by Tom Johnson and Tobias;
  * remove a stale database file __db.nanny.db on a reload or restart,
  as it can prevent a successful start when a previous start failed
  for some reason; a patch by Trent Lloyd;
  + Compatibility
  * During startup more detailed testing is performed for taint bugs of
  a module Encode and the function utf8::is_utf8(), which may produce
  warnings on old versions of perl with its old core module Encode,
  or may exit on detecting more sinister bugs in these modules.
  Note that the module Encode may be upgraded independently of perl,
  if desired;
  * with MySQL: changed character set 'utf8' to 'utf8mb4' for fields
  msgs.subject and msgs.from_addr, as previously some of the UTF-8
  characters could not be stored in a database;
  * when logging to stderr a timestamp prefix to each message is only
  still inserted if $DEBUG is true.  When $DEBUG is false each message
  is prefixed with a syslog log level in angle brackets, and a timestamp
  is omitted (for compatibility with systemd);
  * a perl module Digest::SHA is now a required module. It is a perl core
  module since perl 5.10, so it shouldn't introduce a new dependency,
  and it was a de-facto required module even previously, as it was needed
  for DKIM processing;
  + New features
  * Polished rough corners to facilitate running amavisd as a non-daemonized
  supervised process
  * A log template macro 'report_json' can now take arguments, which can
  include or exclude fields (key/values) from the JSON report object.
  Arguments to a macro are either field names (keys) to be included
  in a report, or are field names to be excluded, each prefixed with
  an exclamation mark, to produce a report with all but excluded fields.
  * Two new configuration settings are added: %smtpd_tls_server_options
  and %smtp_tls_client_options. These two associative arrays are passed
  to IO::Socket::SSL-&gt;start_SSL when establishing a server-side or a
  client-side TLS session with an MTA, and provide more control over
  a TLS session - like providing certificates and restricting ciphers.
  See documentation of a perl module IO::Socket::SSL for a list of
  all options with their descriptions and their defaults.
  * Supports receiving SMTP/LMTP connections through a HAProxy,
  recognizing 'PROXY protocol Version 1' data on the first line read,
  after a connection from HAProxy to amavisd has been established.
  Connection data (IP addresses and ports) received via this protocol
  end up replacing such data in the the Amavis::In::Connection object
  ($conn).  Set configuration variable $haproxy_target_enabled (also
  a member of policy banks) to true in order to enable this protocol.
  * redis: allow a scoped / link-local IP address specification
  (avoiding current limitation in IO::Socket::IP [rt.cpan.org #89608]);
  * the Amavis::Unpackers::Part::digest method now holds a digest (SHA1,
  hex) of a decoded (base64 or quoted-printable) MIME part contents,
  followed by a colon and a lowercased Content-Type of the MIME part.
  Canonical line endings CRLF in decoded textual parts are normalized
  to a native newline (\n) before feeding them to a digest algorithm.
  * Policy bank names in a @client_ipaddr_policy setting can now accept
  a comma-separated list of policy names to be loaded on a match
  (for loading of policy banks based on an IP address of a SMTP client).
  Whitespace around each policy name is allowed and is stripped.
  Previously only a single policy bank name was allowed in each entry
  of @client_ipaddr_policy.
  * Experimental feature: IP lookups (as implemented by lookup_ip_acl()
  and used by @client_ipaddr_policy) can now also do DNS-based lookups,
  in addition to array- and hash-based lookups.</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
  <changelog author="wr@rosenauer.org" date="1487764800">- fixed DKIM signing by recognizing ORIGINATING
  (regression in 2.11.0) (dkim-signing.diff)
  (https://lists.amavis.org/pipermail/amavis-users/2016-July/004428.html)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="varkoly@suse.com" date="1515931200">- bnc#1007149 Amavisd-milter fails to start when started via systemd
  Use fillup_only with -n amavis</changelog>
  <changelog author="varkoly@suse.com" date="1521028800">- bsc#1071932 - YaST2 Mail Server Configuration - throws Error for
  starting service amavis.
  amavisd-new should require spamassassin</changelog>
  <changelog author="varkoly@suse.com" date="1521115200">- bsc#1072122 amavisd-new should use unar instead of unrar</changelog>
  <changelog author="wr@rosenauer.org" date="1539518400">- update to version 2.11.1
  * removed a trailing dot element from @INC, as a workaround for a perl
    vulnerability CVE-2016-1238
  * amavis-services: bumping up syslog level from LOG_NOTICE to LOG_ERR
    for a message "PID &lt;pid&gt; went away", and removed redundant newlines
    from some log messages
  * safe_decode() and safe_decode_utf8(): avoid warning messages
    "Use of uninitialized value in subroutine entry"
    in Encode::MIME::Header when the $check argument is undefined
  * @sa_userconf_maps has been extended to allow loading of per-recipient
    (or per-policy bank, or global) SpamAssassin configuration set from
    LDAP. For consistency with SQL a @sa_userconf_maps entry prefixed with
    'ldap:' will load SpamAssassin configuration set using the
    load_scoreonly_ldap() method;  a patch by Atanas Karashenski
  * add some Sanesecurity.Foxhole false positives to the default
    list @virus_name_to_spam_score_maps
  * updated some comments
- update amavis-milter to version 2.6.1
  * Fixed bug when creating amavisd-new policy bank names</changelog>
  <changelog author="varkoly@suse.com" date="1647259200">- amavisd-new: Deprecated option "syslog" used in amavis.service
  (bsc#1185145)
  Remove deprecated entry</changelog>
</package>
<package pkgid="3e21115d02b8d74e09e1caf8db8310ae5efda9e0a0631faa932e25c27ea5ec4e" name="amavisd-new-docs" arch="aarch64">
  <version epoch="0" ver="2.11.1" rel="150000.6.6.1"/>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashism in post script
- remove '-e' option of 'echo' command that may be unsupported in some
  POSIX-complete shells</changelog>
  <changelog author="p.drouand@gmail.com" date="1418731200">- Update to version 2.10.1
  + fixed a missing import of mail_addr_idn_to_ascii() and idn_to_utf8()
    when SQL is in use
  + void warnings issued by perl 5.21.5:
- Changes from version 2.10
  COMPATIBILITY
- New requirement: perl module Net::LibIDN needs to be installed.
- Uses a perl module File::LibMagic if installed, instead of spawning
  a file(1) utility.
- Support for international email relies heavily on perl to do the
  right thing in its support of Unicode, so using a reasonably recent
  version of perl is recommended. Amavisd was tested with perl 5.18
  and 5.20.1. Versions of perl older than 5.12 may cause problems
  with handling, encoding, and decoding of Unicode characters.
  It is reasonable to expect that versions 5.14 and 5.16 are fine too,
  but have not been tested extensively.
- Default log templates and notification templates have changed
  in details (like in decoding of international e-mail addresses), so
  if locally customized templates are in use these will benefit from
  updating - otherwise expect some mojibake in log and notifications.
- International domain names (IDN) encoded in ASCII-compatible encoding
  found in e-mail addresses and in Message-ID header field will be decoded
  to Unicode for presentation purposes (syslog, JSON structured log,
  notifications). This decoding does not affect a mail message itself.
- Logging via syslog expects that syslogd (or equivalent) will not
  clobber UTF-8 octets. It may be necessary to tell syslogd to accept
  C1 control characters unchanged, e.g. by adding a command line option
  "-8" to syslogd. Failing to do so may leave logged entries (like
  sender and recipient address, From, Subject) in international mail
  garbled or poorly readable in syslog.
  On FreeBSD one should add:  syslogd_flags="-8"  to /etc/rc.conf.
- Third party log parsers may need updating to accept logs with Unicode
  characters in UTF-8 encoding.
- A SMTP response to an EHLO command will now announce SMTPUTF8 capability
  by default.
  BUG FIXES
- releasing a message from an SQL quarantine was broken in version 2.9.1
  due to introduction of parent_mail_id(); patches provided by Stef Simoens
  and Gionatan Danti;
- if checking of a message was aborted prematurely (like due to a timeout
  or some fatal error), JSON log could receive a copy of a previous
  log entry;
- prevent non-ASCII non-UTF-8 octets from reaching a JSON log/report
  (which produced an invalid JSON object and Elasticsearch complaining);
- allow SMTP commands MAIL FROM and RCPT TO to accept options without
  values, as allowed by the RFC 5321 syntax;
- in delivery status notification (DSN) the field Received-From-MTA
  specified 'smtp' as mta-name-type, instead of a 'dns' as prescribed
  in RFC 3464;
- releasing from a quarantine left envelope sender address as '&lt;&gt;'
  instead of using the address found in a Return-Path header field
  of a quarantined message, while also logging a warning:
    Quarantine release $QID: missing X-Envelope-From or Return-Path
  reported by Pascal Volk;
- avoid failure in os_fingerprint or in smtp forwarding in certain cases
  where the $os_fingerprint_method or $forward_method or $notify_method
  uses an asterisk in place of a host IP address or port number.
  The reported error in os_fingerprint (reported by -ben) was:
    os_fingerprint FAILED: Insecure dependency in socket
    while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80
  and in SMTP forwarding or notification (reported by Dennis Boone):
    (!)connect to *:10025 attempt #1:
    Insecure dependency in socket while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80.
- files LDAP.ldif and LDAP.schema: added a missing attribute
  amavisDisclaimerOptions to objectClass; reported by Quanah Gibson-Mount;
  NEW FEATURES
- added support for Internationalized Email:
  * RFC 6530 - Overview and Framework for Internationalized Email
  * RFC 6531 - SMTP Extension for Internationalized Email (SMTPUTF8)
  * RFC 6532 - Internationalized Email Headers
  * RFC 6533 - Internationalized Delivery Status Notifications
  This supports UTF-8 (EAI) in SMTP/LMTP sender addresses, recipient
  addresses, and message header section. Feature parity with Postfix
  version 2.12 (support introduced in development snapshot 20140715).
  The SMTPUTF8 extension is supported by Gmail since 2014-08-05:
    http://googleblog.blogspot.com/2014/08/a-first-step-toward-more-global-email.html
- added support for Internationalized Domain Names (IDN) according
  to IDNA (RFC 5890, RFC 5891; RFC 3490);
  * A-labels in ASCII-compatible encoding of domain names are converted
    to U-labels for presentation/logging purposed;
  * U-labels are converted to A-labels when feeding a mail message
    to an MTA which does not announce support for SMTPUTF8 extension
    (instead of rejecting them as invalid mail address);
  * For lookup purposes an international domain name is converted to
    ASCII-compatible encoding when used as a query key in DNS lookups
    and in lookups into hash, list, SQL and LDAP lookup tables (but not
    in regexp table lookups). These tables are expected to contain domain
    names in their ASCII representation (ACE). For convenience of config
    files subroutines idn_to_ascii() and mail_idn_to_ascii() are available,
    which encode a Unicode domain name to ACE (like ToASCII in RFC 3490);
  * Many configuration settings may have their domain names in UTF-8.
    These will be converted to ACE automatically where necessary
    (e.g. when creating a Received and Authentication-Results header
    fields, DKIM signatures, mail addresses in notifications, ...).
    These settings include:
    $myhostname, $localhost_name, $myauthservid, $mydomain,
    notification sender and recipient mail addresses
    ($mailfrom_notify_*, $hdrfrom_notify_*, @*_admin_maps),
    domain names and selectors in DKIM signing keys (in calls
    to dkim_key() );
- delivery notifications and admin notifications now show the following
  information encoded as UTF-8 (which is a default $bdy_encoding) in the
  plain text part of the message: IDN domain names in sender and recipient
  mail addresses and Message-ID are first decoded to Unicode, Subject and
  author display names are MIME-decoded;
- 'amavisd showkeys' and 'amavisd testkeys' can now deal with IDN
  (international domain names): domain names in DNS zone comments
  end up as UTF-8, DNS labels are in ASCII (A-labels); domain names in
  calls to dkim_key() may be specified either as UTF-8 or in ASCII (ACE);
- new macro 'mail_addr_decode' takes an e-mail address as a string of
  octets, where a local part may be encoded as UTF-8, and the domain part
  may be an international domain name (IDN) consisting either of U-labels
  or A-labels or NR-LDH labels. Decodes A-labels to U-labels in domain
  name. Returns a string of logical characters (Unicode), suitable for
  notification templates. If the mail address is not a valid UTF-8 string,
  it is interpreted as ISO-8859-1 (Latin-1).
- new macro 'mail_addr_decode_octets' is like 'mail_addr_decode', except
  that the result is a string of octets, only valid as UTF-8 if the
  provided address was a valid UTF-8 (garbage-in/garbage-out);
- new macro 'header_field_octets' is like 'header_field', except that
  a result is a string of octets in UTF-8 encoding, suitable for a log
  template;
- new macro 'ip_proto_trace_all' expands into a list of information
  items from a Received header trace; each item consists of a protocol
  name (the WITH clause) and an IP address, optionally followed by a
  source port number if known;
  Example:
    ESMTP://[2001:db8::143:1]:39141 &lt; ESMTP://2001:db8::25 &lt;
    esmtps://203.0.113.172 &lt; ESMTPSA://192.168.9.9
  or:
    UTF8SMTP://[203.0.113.172]:51208 &lt; UTF8SMTPSA://192.168.9.9
- new macro 'ip_proto_trace_public' is like ip_proto_trace_all, except
  that entries with non-public IP address are excluded from the list;
  'Received' trace information in $log_verbose_templ and in notifications
  now include results from this macro call;
- new macro 'protocol' evaluates to a protocol name by which a message
  was received by amavisd, according to RFC 3848 ("Transmission Types
  Registration") and "Mail Transmission Types" / "WITH protocol types"
  IANA registration
    http://www.iana.org/assignments/mail-parameters/mail-parameters.xhtml
  e.g.: SMTP, ESMTP, ESMTPA, ESMTPS, ESMTPSA, LMTP, LMTPA, LMTPS, LMTPSA,
    UTF8SMTP, UTF8SMTPA, UTF8SMTPS, UTF8SMTPSA,
    UTF8LMTP, UTF8LMTPA, UTF8LMTPS, UTF8LMTPSA, ...
- new macro 'client_protocol' expands into a protocol name by which
  a message was received from a client by MTA; the information is passed
  from MTA to amavisd through XFORWARD PROTO SMTP protocol extension or
  through AM.PDP (milter); typical values are 'ESMTP' or 'SMTP';
- use a perl module File::LibMagic when available, instead of spawning
  a file(1) utility for classifying contents of mail parts.
  By using a direct interface to a libmagic library the startup cost
  of spawning an external process is avoided. Benchmarking shows that
  using libmagic is significantly faster especially for checking a small
  number of files - takes 4 ms for checking one file with libmagic
  vs. 27 ms with a spawned file(1); based on a patch by Markus Benning;
  OTHER
- RFC 6533: recognize a MIME type 'message/global' as similar
  to 'message/rfc822', and 'message/global-headers' as similar
  to 'text/rfc822-headers' where appropriate (e.g. in bounce killer);
- header validity check now distinguishes 'non-ASCII and invalid UTF-8'
  from 'non-ASCII but valid UTF-8' characters in a mail header section.
  By default valid UTF-8 strings in a mail header section are not treated
  as error even if mail is not flagged as international mail (SMTPUTF8),
  as these are quite common in practice. To treat non- MIME-encoded UTF-8
  in a header section as error the test can be enabled by:
    $allowed_header_tests{'utf8'} = 1;
- ORCPT attribute in SMTP 'RCPT TO' command now accepts the original
  recipient mail address in any of these encodings: utf-8-address,
  utf-8-addr-unitext, utf-8-addr-xtext, or as a legacy xtext,
  as required by RFC 6533;
- updated do_cabextract (extraction of Microsoft cabinet .cab archives)
  to recognize a slightly changed output of cabextract version 1.2;
  patch by Thomas Jarosch;
- adjusted some timeouts to leave more reserve for later stages of
  mail processing and forwarding;
- prefer sanitizing/protecting control characters as hex code (like \x7F)
  instead of octal (like \177) (e.g. in logging and DSN);
- Use dowload Url as source
- Add a requirement on perl-Net-LibIDN; new upstream dependency</changelog>
  <changelog author="wr@rosenauer.org" date="1439380800">- require perl-Convert-BinHex as otherwise startup fails with
  default installation
- file based requirement does not work
  - &gt; changed to package requirement util-linux-systemd</changelog>
  <changelog author="aj@ajaissle.de" date="1453377600">- Add amavisd-new-2.10.1-myhostname.patch:
  $myhostname is set using POSIX::uname, but expects a FQDN. This
  patch changes this behaviour to use Net::Domain::hostfqdn instead</changelog>
  <changelog author="jcnengel@gmail.com" date="1464350400">- Update to version 2.11.0
  + Bugfixes
  * delivery method was undefined when always_bcc was used;
  reported by Marieke Janssen;
  * avoid warnings issued by perl 5.21.7 and later:
  Negative repeat count does nothing at ./amavisd line 16408
  and similarly in amavisd-status;
  * releasing from an SQL quarantine failed to provide the original
  envelope sender address to a released message;
  reported, and a fix suggested by Tom Johnson and Tobias;
  * remove a stale database file __db.nanny.db on a reload or restart,
  as it can prevent a successful start when a previous start failed
  for some reason; a patch by Trent Lloyd;
  + Compatibility
  * During startup more detailed testing is performed for taint bugs of
  a module Encode and the function utf8::is_utf8(), which may produce
  warnings on old versions of perl with its old core module Encode,
  or may exit on detecting more sinister bugs in these modules.
  Note that the module Encode may be upgraded independently of perl,
  if desired;
  * with MySQL: changed character set 'utf8' to 'utf8mb4' for fields
  msgs.subject and msgs.from_addr, as previously some of the UTF-8
  characters could not be stored in a database;
  * when logging to stderr a timestamp prefix to each message is only
  still inserted if $DEBUG is true.  When $DEBUG is false each message
  is prefixed with a syslog log level in angle brackets, and a timestamp
  is omitted (for compatibility with systemd);
  * a perl module Digest::SHA is now a required module. It is a perl core
  module since perl 5.10, so it shouldn't introduce a new dependency,
  and it was a de-facto required module even previously, as it was needed
  for DKIM processing;
  + New features
  * Polished rough corners to facilitate running amavisd as a non-daemonized
  supervised process
  * A log template macro 'report_json' can now take arguments, which can
  include or exclude fields (key/values) from the JSON report object.
  Arguments to a macro are either field names (keys) to be included
  in a report, or are field names to be excluded, each prefixed with
  an exclamation mark, to produce a report with all but excluded fields.
  * Two new configuration settings are added: %smtpd_tls_server_options
  and %smtp_tls_client_options. These two associative arrays are passed
  to IO::Socket::SSL-&gt;start_SSL when establishing a server-side or a
  client-side TLS session with an MTA, and provide more control over
  a TLS session - like providing certificates and restricting ciphers.
  See documentation of a perl module IO::Socket::SSL for a list of
  all options with their descriptions and their defaults.
  * Supports receiving SMTP/LMTP connections through a HAProxy,
  recognizing 'PROXY protocol Version 1' data on the first line read,
  after a connection from HAProxy to amavisd has been established.
  Connection data (IP addresses and ports) received via this protocol
  end up replacing such data in the the Amavis::In::Connection object
  ($conn).  Set configuration variable $haproxy_target_enabled (also
  a member of policy banks) to true in order to enable this protocol.
  * redis: allow a scoped / link-local IP address specification
  (avoiding current limitation in IO::Socket::IP [rt.cpan.org #89608]);
  * the Amavis::Unpackers::Part::digest method now holds a digest (SHA1,
  hex) of a decoded (base64 or quoted-printable) MIME part contents,
  followed by a colon and a lowercased Content-Type of the MIME part.
  Canonical line endings CRLF in decoded textual parts are normalized
  to a native newline (\n) before feeding them to a digest algorithm.
  * Policy bank names in a @client_ipaddr_policy setting can now accept
  a comma-separated list of policy names to be loaded on a match
  (for loading of policy banks based on an IP address of a SMTP client).
  Whitespace around each policy name is allowed and is stripped.
  Previously only a single policy bank name was allowed in each entry
  of @client_ipaddr_policy.
  * Experimental feature: IP lookups (as implemented by lookup_ip_acl()
  and used by @client_ipaddr_policy) can now also do DNS-based lookups,
  in addition to array- and hash-based lookups.</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
  <changelog author="wr@rosenauer.org" date="1487764800">- fixed DKIM signing by recognizing ORIGINATING
  (regression in 2.11.0) (dkim-signing.diff)
  (https://lists.amavis.org/pipermail/amavis-users/2016-July/004428.html)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="varkoly@suse.com" date="1515931200">- bnc#1007149 Amavisd-milter fails to start when started via systemd
  Use fillup_only with -n amavis</changelog>
  <changelog author="varkoly@suse.com" date="1521028800">- bsc#1071932 - YaST2 Mail Server Configuration - throws Error for
  starting service amavis.
  amavisd-new should require spamassassin</changelog>
  <changelog author="varkoly@suse.com" date="1521115200">- bsc#1072122 amavisd-new should use unar instead of unrar</changelog>
  <changelog author="wr@rosenauer.org" date="1539518400">- update to version 2.11.1
  * removed a trailing dot element from @INC, as a workaround for a perl
    vulnerability CVE-2016-1238
  * amavis-services: bumping up syslog level from LOG_NOTICE to LOG_ERR
    for a message "PID &lt;pid&gt; went away", and removed redundant newlines
    from some log messages
  * safe_decode() and safe_decode_utf8(): avoid warning messages
    "Use of uninitialized value in subroutine entry"
    in Encode::MIME::Header when the $check argument is undefined
  * @sa_userconf_maps has been extended to allow loading of per-recipient
    (or per-policy bank, or global) SpamAssassin configuration set from
    LDAP. For consistency with SQL a @sa_userconf_maps entry prefixed with
    'ldap:' will load SpamAssassin configuration set using the
    load_scoreonly_ldap() method;  a patch by Atanas Karashenski
  * add some Sanesecurity.Foxhole false positives to the default
    list @virus_name_to_spam_score_maps
  * updated some comments
- update amavis-milter to version 2.6.1
  * Fixed bug when creating amavisd-new policy bank names</changelog>
  <changelog author="varkoly@suse.com" date="1647259200">- amavisd-new: Deprecated option "syslog" used in amavis.service
  (bsc#1185145)
  Remove deprecated entry</changelog>
</package>
<package pkgid="35b142c989009abae7d5978f079e3ec8753a9f0c01bc0ecee8c2fe3c33c6b1c3" name="amavisd-new-docs" arch="ppc64le">
  <version epoch="0" ver="2.11.1" rel="150000.6.6.1"/>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashism in post script
- remove '-e' option of 'echo' command that may be unsupported in some
  POSIX-complete shells</changelog>
  <changelog author="p.drouand@gmail.com" date="1418731200">- Update to version 2.10.1
  + fixed a missing import of mail_addr_idn_to_ascii() and idn_to_utf8()
    when SQL is in use
  + void warnings issued by perl 5.21.5:
- Changes from version 2.10
  COMPATIBILITY
- New requirement: perl module Net::LibIDN needs to be installed.
- Uses a perl module File::LibMagic if installed, instead of spawning
  a file(1) utility.
- Support for international email relies heavily on perl to do the
  right thing in its support of Unicode, so using a reasonably recent
  version of perl is recommended. Amavisd was tested with perl 5.18
  and 5.20.1. Versions of perl older than 5.12 may cause problems
  with handling, encoding, and decoding of Unicode characters.
  It is reasonable to expect that versions 5.14 and 5.16 are fine too,
  but have not been tested extensively.
- Default log templates and notification templates have changed
  in details (like in decoding of international e-mail addresses), so
  if locally customized templates are in use these will benefit from
  updating - otherwise expect some mojibake in log and notifications.
- International domain names (IDN) encoded in ASCII-compatible encoding
  found in e-mail addresses and in Message-ID header field will be decoded
  to Unicode for presentation purposes (syslog, JSON structured log,
  notifications). This decoding does not affect a mail message itself.
- Logging via syslog expects that syslogd (or equivalent) will not
  clobber UTF-8 octets. It may be necessary to tell syslogd to accept
  C1 control characters unchanged, e.g. by adding a command line option
  "-8" to syslogd. Failing to do so may leave logged entries (like
  sender and recipient address, From, Subject) in international mail
  garbled or poorly readable in syslog.
  On FreeBSD one should add:  syslogd_flags="-8"  to /etc/rc.conf.
- Third party log parsers may need updating to accept logs with Unicode
  characters in UTF-8 encoding.
- A SMTP response to an EHLO command will now announce SMTPUTF8 capability
  by default.
  BUG FIXES
- releasing a message from an SQL quarantine was broken in version 2.9.1
  due to introduction of parent_mail_id(); patches provided by Stef Simoens
  and Gionatan Danti;
- if checking of a message was aborted prematurely (like due to a timeout
  or some fatal error), JSON log could receive a copy of a previous
  log entry;
- prevent non-ASCII non-UTF-8 octets from reaching a JSON log/report
  (which produced an invalid JSON object and Elasticsearch complaining);
- allow SMTP commands MAIL FROM and RCPT TO to accept options without
  values, as allowed by the RFC 5321 syntax;
- in delivery status notification (DSN) the field Received-From-MTA
  specified 'smtp' as mta-name-type, instead of a 'dns' as prescribed
  in RFC 3464;
- releasing from a quarantine left envelope sender address as '&lt;&gt;'
  instead of using the address found in a Return-Path header field
  of a quarantined message, while also logging a warning:
    Quarantine release $QID: missing X-Envelope-From or Return-Path
  reported by Pascal Volk;
- avoid failure in os_fingerprint or in smtp forwarding in certain cases
  where the $os_fingerprint_method or $forward_method or $notify_method
  uses an asterisk in place of a host IP address or port number.
  The reported error in os_fingerprint (reported by -ben) was:
    os_fingerprint FAILED: Insecure dependency in socket
    while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80
  and in SMTP forwarding or notification (reported by Dennis Boone):
    (!)connect to *:10025 attempt #1:
    Insecure dependency in socket while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80.
- files LDAP.ldif and LDAP.schema: added a missing attribute
  amavisDisclaimerOptions to objectClass; reported by Quanah Gibson-Mount;
  NEW FEATURES
- added support for Internationalized Email:
  * RFC 6530 - Overview and Framework for Internationalized Email
  * RFC 6531 - SMTP Extension for Internationalized Email (SMTPUTF8)
  * RFC 6532 - Internationalized Email Headers
  * RFC 6533 - Internationalized Delivery Status Notifications
  This supports UTF-8 (EAI) in SMTP/LMTP sender addresses, recipient
  addresses, and message header section. Feature parity with Postfix
  version 2.12 (support introduced in development snapshot 20140715).
  The SMTPUTF8 extension is supported by Gmail since 2014-08-05:
    http://googleblog.blogspot.com/2014/08/a-first-step-toward-more-global-email.html
- added support for Internationalized Domain Names (IDN) according
  to IDNA (RFC 5890, RFC 5891; RFC 3490);
  * A-labels in ASCII-compatible encoding of domain names are converted
    to U-labels for presentation/logging purposed;
  * U-labels are converted to A-labels when feeding a mail message
    to an MTA which does not announce support for SMTPUTF8 extension
    (instead of rejecting them as invalid mail address);
  * For lookup purposes an international domain name is converted to
    ASCII-compatible encoding when used as a query key in DNS lookups
    and in lookups into hash, list, SQL and LDAP lookup tables (but not
    in regexp table lookups). These tables are expected to contain domain
    names in their ASCII representation (ACE). For convenience of config
    files subroutines idn_to_ascii() and mail_idn_to_ascii() are available,
    which encode a Unicode domain name to ACE (like ToASCII in RFC 3490);
  * Many configuration settings may have their domain names in UTF-8.
    These will be converted to ACE automatically where necessary
    (e.g. when creating a Received and Authentication-Results header
    fields, DKIM signatures, mail addresses in notifications, ...).
    These settings include:
    $myhostname, $localhost_name, $myauthservid, $mydomain,
    notification sender and recipient mail addresses
    ($mailfrom_notify_*, $hdrfrom_notify_*, @*_admin_maps),
    domain names and selectors in DKIM signing keys (in calls
    to dkim_key() );
- delivery notifications and admin notifications now show the following
  information encoded as UTF-8 (which is a default $bdy_encoding) in the
  plain text part of the message: IDN domain names in sender and recipient
  mail addresses and Message-ID are first decoded to Unicode, Subject and
  author display names are MIME-decoded;
- 'amavisd showkeys' and 'amavisd testkeys' can now deal with IDN
  (international domain names): domain names in DNS zone comments
  end up as UTF-8, DNS labels are in ASCII (A-labels); domain names in
  calls to dkim_key() may be specified either as UTF-8 or in ASCII (ACE);
- new macro 'mail_addr_decode' takes an e-mail address as a string of
  octets, where a local part may be encoded as UTF-8, and the domain part
  may be an international domain name (IDN) consisting either of U-labels
  or A-labels or NR-LDH labels. Decodes A-labels to U-labels in domain
  name. Returns a string of logical characters (Unicode), suitable for
  notification templates. If the mail address is not a valid UTF-8 string,
  it is interpreted as ISO-8859-1 (Latin-1).
- new macro 'mail_addr_decode_octets' is like 'mail_addr_decode', except
  that the result is a string of octets, only valid as UTF-8 if the
  provided address was a valid UTF-8 (garbage-in/garbage-out);
- new macro 'header_field_octets' is like 'header_field', except that
  a result is a string of octets in UTF-8 encoding, suitable for a log
  template;
- new macro 'ip_proto_trace_all' expands into a list of information
  items from a Received header trace; each item consists of a protocol
  name (the WITH clause) and an IP address, optionally followed by a
  source port number if known;
  Example:
    ESMTP://[2001:db8::143:1]:39141 &lt; ESMTP://2001:db8::25 &lt;
    esmtps://203.0.113.172 &lt; ESMTPSA://192.168.9.9
  or:
    UTF8SMTP://[203.0.113.172]:51208 &lt; UTF8SMTPSA://192.168.9.9
- new macro 'ip_proto_trace_public' is like ip_proto_trace_all, except
  that entries with non-public IP address are excluded from the list;
  'Received' trace information in $log_verbose_templ and in notifications
  now include results from this macro call;
- new macro 'protocol' evaluates to a protocol name by which a message
  was received by amavisd, according to RFC 3848 ("Transmission Types
  Registration") and "Mail Transmission Types" / "WITH protocol types"
  IANA registration
    http://www.iana.org/assignments/mail-parameters/mail-parameters.xhtml
  e.g.: SMTP, ESMTP, ESMTPA, ESMTPS, ESMTPSA, LMTP, LMTPA, LMTPS, LMTPSA,
    UTF8SMTP, UTF8SMTPA, UTF8SMTPS, UTF8SMTPSA,
    UTF8LMTP, UTF8LMTPA, UTF8LMTPS, UTF8LMTPSA, ...
- new macro 'client_protocol' expands into a protocol name by which
  a message was received from a client by MTA; the information is passed
  from MTA to amavisd through XFORWARD PROTO SMTP protocol extension or
  through AM.PDP (milter); typical values are 'ESMTP' or 'SMTP';
- use a perl module File::LibMagic when available, instead of spawning
  a file(1) utility for classifying contents of mail parts.
  By using a direct interface to a libmagic library the startup cost
  of spawning an external process is avoided. Benchmarking shows that
  using libmagic is significantly faster especially for checking a small
  number of files - takes 4 ms for checking one file with libmagic
  vs. 27 ms with a spawned file(1); based on a patch by Markus Benning;
  OTHER
- RFC 6533: recognize a MIME type 'message/global' as similar
  to 'message/rfc822', and 'message/global-headers' as similar
  to 'text/rfc822-headers' where appropriate (e.g. in bounce killer);
- header validity check now distinguishes 'non-ASCII and invalid UTF-8'
  from 'non-ASCII but valid UTF-8' characters in a mail header section.
  By default valid UTF-8 strings in a mail header section are not treated
  as error even if mail is not flagged as international mail (SMTPUTF8),
  as these are quite common in practice. To treat non- MIME-encoded UTF-8
  in a header section as error the test can be enabled by:
    $allowed_header_tests{'utf8'} = 1;
- ORCPT attribute in SMTP 'RCPT TO' command now accepts the original
  recipient mail address in any of these encodings: utf-8-address,
  utf-8-addr-unitext, utf-8-addr-xtext, or as a legacy xtext,
  as required by RFC 6533;
- updated do_cabextract (extraction of Microsoft cabinet .cab archives)
  to recognize a slightly changed output of cabextract version 1.2;
  patch by Thomas Jarosch;
- adjusted some timeouts to leave more reserve for later stages of
  mail processing and forwarding;
- prefer sanitizing/protecting control characters as hex code (like \x7F)
  instead of octal (like \177) (e.g. in logging and DSN);
- Use dowload Url as source
- Add a requirement on perl-Net-LibIDN; new upstream dependency</changelog>
  <changelog author="wr@rosenauer.org" date="1439380800">- require perl-Convert-BinHex as otherwise startup fails with
  default installation
- file based requirement does not work
  - &gt; changed to package requirement util-linux-systemd</changelog>
  <changelog author="aj@ajaissle.de" date="1453377600">- Add amavisd-new-2.10.1-myhostname.patch:
  $myhostname is set using POSIX::uname, but expects a FQDN. This
  patch changes this behaviour to use Net::Domain::hostfqdn instead</changelog>
  <changelog author="jcnengel@gmail.com" date="1464350400">- Update to version 2.11.0
  + Bugfixes
  * delivery method was undefined when always_bcc was used;
  reported by Marieke Janssen;
  * avoid warnings issued by perl 5.21.7 and later:
  Negative repeat count does nothing at ./amavisd line 16408
  and similarly in amavisd-status;
  * releasing from an SQL quarantine failed to provide the original
  envelope sender address to a released message;
  reported, and a fix suggested by Tom Johnson and Tobias;
  * remove a stale database file __db.nanny.db on a reload or restart,
  as it can prevent a successful start when a previous start failed
  for some reason; a patch by Trent Lloyd;
  + Compatibility
  * During startup more detailed testing is performed for taint bugs of
  a module Encode and the function utf8::is_utf8(), which may produce
  warnings on old versions of perl with its old core module Encode,
  or may exit on detecting more sinister bugs in these modules.
  Note that the module Encode may be upgraded independently of perl,
  if desired;
  * with MySQL: changed character set 'utf8' to 'utf8mb4' for fields
  msgs.subject and msgs.from_addr, as previously some of the UTF-8
  characters could not be stored in a database;
  * when logging to stderr a timestamp prefix to each message is only
  still inserted if $DEBUG is true.  When $DEBUG is false each message
  is prefixed with a syslog log level in angle brackets, and a timestamp
  is omitted (for compatibility with systemd);
  * a perl module Digest::SHA is now a required module. It is a perl core
  module since perl 5.10, so it shouldn't introduce a new dependency,
  and it was a de-facto required module even previously, as it was needed
  for DKIM processing;
  + New features
  * Polished rough corners to facilitate running amavisd as a non-daemonized
  supervised process
  * A log template macro 'report_json' can now take arguments, which can
  include or exclude fields (key/values) from the JSON report object.
  Arguments to a macro are either field names (keys) to be included
  in a report, or are field names to be excluded, each prefixed with
  an exclamation mark, to produce a report with all but excluded fields.
  * Two new configuration settings are added: %smtpd_tls_server_options
  and %smtp_tls_client_options. These two associative arrays are passed
  to IO::Socket::SSL-&gt;start_SSL when establishing a server-side or a
  client-side TLS session with an MTA, and provide more control over
  a TLS session - like providing certificates and restricting ciphers.
  See documentation of a perl module IO::Socket::SSL for a list of
  all options with their descriptions and their defaults.
  * Supports receiving SMTP/LMTP connections through a HAProxy,
  recognizing 'PROXY protocol Version 1' data on the first line read,
  after a connection from HAProxy to amavisd has been established.
  Connection data (IP addresses and ports) received via this protocol
  end up replacing such data in the the Amavis::In::Connection object
  ($conn).  Set configuration variable $haproxy_target_enabled (also
  a member of policy banks) to true in order to enable this protocol.
  * redis: allow a scoped / link-local IP address specification
  (avoiding current limitation in IO::Socket::IP [rt.cpan.org #89608]);
  * the Amavis::Unpackers::Part::digest method now holds a digest (SHA1,
  hex) of a decoded (base64 or quoted-printable) MIME part contents,
  followed by a colon and a lowercased Content-Type of the MIME part.
  Canonical line endings CRLF in decoded textual parts are normalized
  to a native newline (\n) before feeding them to a digest algorithm.
  * Policy bank names in a @client_ipaddr_policy setting can now accept
  a comma-separated list of policy names to be loaded on a match
  (for loading of policy banks based on an IP address of a SMTP client).
  Whitespace around each policy name is allowed and is stripped.
  Previously only a single policy bank name was allowed in each entry
  of @client_ipaddr_policy.
  * Experimental feature: IP lookups (as implemented by lookup_ip_acl()
  and used by @client_ipaddr_policy) can now also do DNS-based lookups,
  in addition to array- and hash-based lookups.</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
  <changelog author="wr@rosenauer.org" date="1487764800">- fixed DKIM signing by recognizing ORIGINATING
  (regression in 2.11.0) (dkim-signing.diff)
  (https://lists.amavis.org/pipermail/amavis-users/2016-July/004428.html)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="varkoly@suse.com" date="1515931200">- bnc#1007149 Amavisd-milter fails to start when started via systemd
  Use fillup_only with -n amavis</changelog>
  <changelog author="varkoly@suse.com" date="1521028800">- bsc#1071932 - YaST2 Mail Server Configuration - throws Error for
  starting service amavis.
  amavisd-new should require spamassassin</changelog>
  <changelog author="varkoly@suse.com" date="1521115200">- bsc#1072122 amavisd-new should use unar instead of unrar</changelog>
  <changelog author="wr@rosenauer.org" date="1539518400">- update to version 2.11.1
  * removed a trailing dot element from @INC, as a workaround for a perl
    vulnerability CVE-2016-1238
  * amavis-services: bumping up syslog level from LOG_NOTICE to LOG_ERR
    for a message "PID &lt;pid&gt; went away", and removed redundant newlines
    from some log messages
  * safe_decode() and safe_decode_utf8(): avoid warning messages
    "Use of uninitialized value in subroutine entry"
    in Encode::MIME::Header when the $check argument is undefined
  * @sa_userconf_maps has been extended to allow loading of per-recipient
    (or per-policy bank, or global) SpamAssassin configuration set from
    LDAP. For consistency with SQL a @sa_userconf_maps entry prefixed with
    'ldap:' will load SpamAssassin configuration set using the
    load_scoreonly_ldap() method;  a patch by Atanas Karashenski
  * add some Sanesecurity.Foxhole false positives to the default
    list @virus_name_to_spam_score_maps
  * updated some comments
- update amavis-milter to version 2.6.1
  * Fixed bug when creating amavisd-new policy bank names</changelog>
  <changelog author="varkoly@suse.com" date="1647259200">- amavisd-new: Deprecated option "syslog" used in amavis.service
  (bsc#1185145)
  Remove deprecated entry</changelog>
</package>
<package pkgid="80f4a1d51178870c66fb1fecffc203956d0434bbed4024ae8cc6e2e6dfded00d" name="amavisd-new-docs" arch="s390x">
  <version epoch="0" ver="2.11.1" rel="150000.6.6.1"/>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashism in post script
- remove '-e' option of 'echo' command that may be unsupported in some
  POSIX-complete shells</changelog>
  <changelog author="p.drouand@gmail.com" date="1418731200">- Update to version 2.10.1
  + fixed a missing import of mail_addr_idn_to_ascii() and idn_to_utf8()
    when SQL is in use
  + void warnings issued by perl 5.21.5:
- Changes from version 2.10
  COMPATIBILITY
- New requirement: perl module Net::LibIDN needs to be installed.
- Uses a perl module File::LibMagic if installed, instead of spawning
  a file(1) utility.
- Support for international email relies heavily on perl to do the
  right thing in its support of Unicode, so using a reasonably recent
  version of perl is recommended. Amavisd was tested with perl 5.18
  and 5.20.1. Versions of perl older than 5.12 may cause problems
  with handling, encoding, and decoding of Unicode characters.
  It is reasonable to expect that versions 5.14 and 5.16 are fine too,
  but have not been tested extensively.
- Default log templates and notification templates have changed
  in details (like in decoding of international e-mail addresses), so
  if locally customized templates are in use these will benefit from
  updating - otherwise expect some mojibake in log and notifications.
- International domain names (IDN) encoded in ASCII-compatible encoding
  found in e-mail addresses and in Message-ID header field will be decoded
  to Unicode for presentation purposes (syslog, JSON structured log,
  notifications). This decoding does not affect a mail message itself.
- Logging via syslog expects that syslogd (or equivalent) will not
  clobber UTF-8 octets. It may be necessary to tell syslogd to accept
  C1 control characters unchanged, e.g. by adding a command line option
  "-8" to syslogd. Failing to do so may leave logged entries (like
  sender and recipient address, From, Subject) in international mail
  garbled or poorly readable in syslog.
  On FreeBSD one should add:  syslogd_flags="-8"  to /etc/rc.conf.
- Third party log parsers may need updating to accept logs with Unicode
  characters in UTF-8 encoding.
- A SMTP response to an EHLO command will now announce SMTPUTF8 capability
  by default.
  BUG FIXES
- releasing a message from an SQL quarantine was broken in version 2.9.1
  due to introduction of parent_mail_id(); patches provided by Stef Simoens
  and Gionatan Danti;
- if checking of a message was aborted prematurely (like due to a timeout
  or some fatal error), JSON log could receive a copy of a previous
  log entry;
- prevent non-ASCII non-UTF-8 octets from reaching a JSON log/report
  (which produced an invalid JSON object and Elasticsearch complaining);
- allow SMTP commands MAIL FROM and RCPT TO to accept options without
  values, as allowed by the RFC 5321 syntax;
- in delivery status notification (DSN) the field Received-From-MTA
  specified 'smtp' as mta-name-type, instead of a 'dns' as prescribed
  in RFC 3464;
- releasing from a quarantine left envelope sender address as '&lt;&gt;'
  instead of using the address found in a Return-Path header field
  of a quarantined message, while also logging a warning:
    Quarantine release $QID: missing X-Envelope-From or Return-Path
  reported by Pascal Volk;
- avoid failure in os_fingerprint or in smtp forwarding in certain cases
  where the $os_fingerprint_method or $forward_method or $notify_method
  uses an asterisk in place of a host IP address or port number.
  The reported error in os_fingerprint (reported by -ben) was:
    os_fingerprint FAILED: Insecure dependency in socket
    while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80
  and in SMTP forwarding or notification (reported by Dennis Boone):
    (!)connect to *:10025 attempt #1:
    Insecure dependency in socket while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80.
- files LDAP.ldif and LDAP.schema: added a missing attribute
  amavisDisclaimerOptions to objectClass; reported by Quanah Gibson-Mount;
  NEW FEATURES
- added support for Internationalized Email:
  * RFC 6530 - Overview and Framework for Internationalized Email
  * RFC 6531 - SMTP Extension for Internationalized Email (SMTPUTF8)
  * RFC 6532 - Internationalized Email Headers
  * RFC 6533 - Internationalized Delivery Status Notifications
  This supports UTF-8 (EAI) in SMTP/LMTP sender addresses, recipient
  addresses, and message header section. Feature parity with Postfix
  version 2.12 (support introduced in development snapshot 20140715).
  The SMTPUTF8 extension is supported by Gmail since 2014-08-05:
    http://googleblog.blogspot.com/2014/08/a-first-step-toward-more-global-email.html
- added support for Internationalized Domain Names (IDN) according
  to IDNA (RFC 5890, RFC 5891; RFC 3490);
  * A-labels in ASCII-compatible encoding of domain names are converted
    to U-labels for presentation/logging purposed;
  * U-labels are converted to A-labels when feeding a mail message
    to an MTA which does not announce support for SMTPUTF8 extension
    (instead of rejecting them as invalid mail address);
  * For lookup purposes an international domain name is converted to
    ASCII-compatible encoding when used as a query key in DNS lookups
    and in lookups into hash, list, SQL and LDAP lookup tables (but not
    in regexp table lookups). These tables are expected to contain domain
    names in their ASCII representation (ACE). For convenience of config
    files subroutines idn_to_ascii() and mail_idn_to_ascii() are available,
    which encode a Unicode domain name to ACE (like ToASCII in RFC 3490);
  * Many configuration settings may have their domain names in UTF-8.
    These will be converted to ACE automatically where necessary
    (e.g. when creating a Received and Authentication-Results header
    fields, DKIM signatures, mail addresses in notifications, ...).
    These settings include:
    $myhostname, $localhost_name, $myauthservid, $mydomain,
    notification sender and recipient mail addresses
    ($mailfrom_notify_*, $hdrfrom_notify_*, @*_admin_maps),
    domain names and selectors in DKIM signing keys (in calls
    to dkim_key() );
- delivery notifications and admin notifications now show the following
  information encoded as UTF-8 (which is a default $bdy_encoding) in the
  plain text part of the message: IDN domain names in sender and recipient
  mail addresses and Message-ID are first decoded to Unicode, Subject and
  author display names are MIME-decoded;
- 'amavisd showkeys' and 'amavisd testkeys' can now deal with IDN
  (international domain names): domain names in DNS zone comments
  end up as UTF-8, DNS labels are in ASCII (A-labels); domain names in
  calls to dkim_key() may be specified either as UTF-8 or in ASCII (ACE);
- new macro 'mail_addr_decode' takes an e-mail address as a string of
  octets, where a local part may be encoded as UTF-8, and the domain part
  may be an international domain name (IDN) consisting either of U-labels
  or A-labels or NR-LDH labels. Decodes A-labels to U-labels in domain
  name. Returns a string of logical characters (Unicode), suitable for
  notification templates. If the mail address is not a valid UTF-8 string,
  it is interpreted as ISO-8859-1 (Latin-1).
- new macro 'mail_addr_decode_octets' is like 'mail_addr_decode', except
  that the result is a string of octets, only valid as UTF-8 if the
  provided address was a valid UTF-8 (garbage-in/garbage-out);
- new macro 'header_field_octets' is like 'header_field', except that
  a result is a string of octets in UTF-8 encoding, suitable for a log
  template;
- new macro 'ip_proto_trace_all' expands into a list of information
  items from a Received header trace; each item consists of a protocol
  name (the WITH clause) and an IP address, optionally followed by a
  source port number if known;
  Example:
    ESMTP://[2001:db8::143:1]:39141 &lt; ESMTP://2001:db8::25 &lt;
    esmtps://203.0.113.172 &lt; ESMTPSA://192.168.9.9
  or:
    UTF8SMTP://[203.0.113.172]:51208 &lt; UTF8SMTPSA://192.168.9.9
- new macro 'ip_proto_trace_public' is like ip_proto_trace_all, except
  that entries with non-public IP address are excluded from the list;
  'Received' trace information in $log_verbose_templ and in notifications
  now include results from this macro call;
- new macro 'protocol' evaluates to a protocol name by which a message
  was received by amavisd, according to RFC 3848 ("Transmission Types
  Registration") and "Mail Transmission Types" / "WITH protocol types"
  IANA registration
    http://www.iana.org/assignments/mail-parameters/mail-parameters.xhtml
  e.g.: SMTP, ESMTP, ESMTPA, ESMTPS, ESMTPSA, LMTP, LMTPA, LMTPS, LMTPSA,
    UTF8SMTP, UTF8SMTPA, UTF8SMTPS, UTF8SMTPSA,
    UTF8LMTP, UTF8LMTPA, UTF8LMTPS, UTF8LMTPSA, ...
- new macro 'client_protocol' expands into a protocol name by which
  a message was received from a client by MTA; the information is passed
  from MTA to amavisd through XFORWARD PROTO SMTP protocol extension or
  through AM.PDP (milter); typical values are 'ESMTP' or 'SMTP';
- use a perl module File::LibMagic when available, instead of spawning
  a file(1) utility for classifying contents of mail parts.
  By using a direct interface to a libmagic library the startup cost
  of spawning an external process is avoided. Benchmarking shows that
  using libmagic is significantly faster especially for checking a small
  number of files - takes 4 ms for checking one file with libmagic
  vs. 27 ms with a spawned file(1); based on a patch by Markus Benning;
  OTHER
- RFC 6533: recognize a MIME type 'message/global' as similar
  to 'message/rfc822', and 'message/global-headers' as similar
  to 'text/rfc822-headers' where appropriate (e.g. in bounce killer);
- header validity check now distinguishes 'non-ASCII and invalid UTF-8'
  from 'non-ASCII but valid UTF-8' characters in a mail header section.
  By default valid UTF-8 strings in a mail header section are not treated
  as error even if mail is not flagged as international mail (SMTPUTF8),
  as these are quite common in practice. To treat non- MIME-encoded UTF-8
  in a header section as error the test can be enabled by:
    $allowed_header_tests{'utf8'} = 1;
- ORCPT attribute in SMTP 'RCPT TO' command now accepts the original
  recipient mail address in any of these encodings: utf-8-address,
  utf-8-addr-unitext, utf-8-addr-xtext, or as a legacy xtext,
  as required by RFC 6533;
- updated do_cabextract (extraction of Microsoft cabinet .cab archives)
  to recognize a slightly changed output of cabextract version 1.2;
  patch by Thomas Jarosch;
- adjusted some timeouts to leave more reserve for later stages of
  mail processing and forwarding;
- prefer sanitizing/protecting control characters as hex code (like \x7F)
  instead of octal (like \177) (e.g. in logging and DSN);
- Use dowload Url as source
- Add a requirement on perl-Net-LibIDN; new upstream dependency</changelog>
  <changelog author="wr@rosenauer.org" date="1439380800">- require perl-Convert-BinHex as otherwise startup fails with
  default installation
- file based requirement does not work
  - &gt; changed to package requirement util-linux-systemd</changelog>
  <changelog author="aj@ajaissle.de" date="1453377600">- Add amavisd-new-2.10.1-myhostname.patch:
  $myhostname is set using POSIX::uname, but expects a FQDN. This
  patch changes this behaviour to use Net::Domain::hostfqdn instead</changelog>
  <changelog author="jcnengel@gmail.com" date="1464350400">- Update to version 2.11.0
  + Bugfixes
  * delivery method was undefined when always_bcc was used;
  reported by Marieke Janssen;
  * avoid warnings issued by perl 5.21.7 and later:
  Negative repeat count does nothing at ./amavisd line 16408
  and similarly in amavisd-status;
  * releasing from an SQL quarantine failed to provide the original
  envelope sender address to a released message;
  reported, and a fix suggested by Tom Johnson and Tobias;
  * remove a stale database file __db.nanny.db on a reload or restart,
  as it can prevent a successful start when a previous start failed
  for some reason; a patch by Trent Lloyd;
  + Compatibility
  * During startup more detailed testing is performed for taint bugs of
  a module Encode and the function utf8::is_utf8(), which may produce
  warnings on old versions of perl with its old core module Encode,
  or may exit on detecting more sinister bugs in these modules.
  Note that the module Encode may be upgraded independently of perl,
  if desired;
  * with MySQL: changed character set 'utf8' to 'utf8mb4' for fields
  msgs.subject and msgs.from_addr, as previously some of the UTF-8
  characters could not be stored in a database;
  * when logging to stderr a timestamp prefix to each message is only
  still inserted if $DEBUG is true.  When $DEBUG is false each message
  is prefixed with a syslog log level in angle brackets, and a timestamp
  is omitted (for compatibility with systemd);
  * a perl module Digest::SHA is now a required module. It is a perl core
  module since perl 5.10, so it shouldn't introduce a new dependency,
  and it was a de-facto required module even previously, as it was needed
  for DKIM processing;
  + New features
  * Polished rough corners to facilitate running amavisd as a non-daemonized
  supervised process
  * A log template macro 'report_json' can now take arguments, which can
  include or exclude fields (key/values) from the JSON report object.
  Arguments to a macro are either field names (keys) to be included
  in a report, or are field names to be excluded, each prefixed with
  an exclamation mark, to produce a report with all but excluded fields.
  * Two new configuration settings are added: %smtpd_tls_server_options
  and %smtp_tls_client_options. These two associative arrays are passed
  to IO::Socket::SSL-&gt;start_SSL when establishing a server-side or a
  client-side TLS session with an MTA, and provide more control over
  a TLS session - like providing certificates and restricting ciphers.
  See documentation of a perl module IO::Socket::SSL for a list of
  all options with their descriptions and their defaults.
  * Supports receiving SMTP/LMTP connections through a HAProxy,
  recognizing 'PROXY protocol Version 1' data on the first line read,
  after a connection from HAProxy to amavisd has been established.
  Connection data (IP addresses and ports) received via this protocol
  end up replacing such data in the the Amavis::In::Connection object
  ($conn).  Set configuration variable $haproxy_target_enabled (also
  a member of policy banks) to true in order to enable this protocol.
  * redis: allow a scoped / link-local IP address specification
  (avoiding current limitation in IO::Socket::IP [rt.cpan.org #89608]);
  * the Amavis::Unpackers::Part::digest method now holds a digest (SHA1,
  hex) of a decoded (base64 or quoted-printable) MIME part contents,
  followed by a colon and a lowercased Content-Type of the MIME part.
  Canonical line endings CRLF in decoded textual parts are normalized
  to a native newline (\n) before feeding them to a digest algorithm.
  * Policy bank names in a @client_ipaddr_policy setting can now accept
  a comma-separated list of policy names to be loaded on a match
  (for loading of policy banks based on an IP address of a SMTP client).
  Whitespace around each policy name is allowed and is stripped.
  Previously only a single policy bank name was allowed in each entry
  of @client_ipaddr_policy.
  * Experimental feature: IP lookups (as implemented by lookup_ip_acl()
  and used by @client_ipaddr_policy) can now also do DNS-based lookups,
  in addition to array- and hash-based lookups.</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
  <changelog author="wr@rosenauer.org" date="1487764800">- fixed DKIM signing by recognizing ORIGINATING
  (regression in 2.11.0) (dkim-signing.diff)
  (https://lists.amavis.org/pipermail/amavis-users/2016-July/004428.html)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="varkoly@suse.com" date="1515931200">- bnc#1007149 Amavisd-milter fails to start when started via systemd
  Use fillup_only with -n amavis</changelog>
  <changelog author="varkoly@suse.com" date="1521028800">- bsc#1071932 - YaST2 Mail Server Configuration - throws Error for
  starting service amavis.
  amavisd-new should require spamassassin</changelog>
  <changelog author="varkoly@suse.com" date="1521115200">- bsc#1072122 amavisd-new should use unar instead of unrar</changelog>
  <changelog author="wr@rosenauer.org" date="1539518400">- update to version 2.11.1
  * removed a trailing dot element from @INC, as a workaround for a perl
    vulnerability CVE-2016-1238
  * amavis-services: bumping up syslog level from LOG_NOTICE to LOG_ERR
    for a message "PID &lt;pid&gt; went away", and removed redundant newlines
    from some log messages
  * safe_decode() and safe_decode_utf8(): avoid warning messages
    "Use of uninitialized value in subroutine entry"
    in Encode::MIME::Header when the $check argument is undefined
  * @sa_userconf_maps has been extended to allow loading of per-recipient
    (or per-policy bank, or global) SpamAssassin configuration set from
    LDAP. For consistency with SQL a @sa_userconf_maps entry prefixed with
    'ldap:' will load SpamAssassin configuration set using the
    load_scoreonly_ldap() method;  a patch by Atanas Karashenski
  * add some Sanesecurity.Foxhole false positives to the default
    list @virus_name_to_spam_score_maps
  * updated some comments
- update amavis-milter to version 2.6.1
  * Fixed bug when creating amavisd-new policy bank names</changelog>
  <changelog author="varkoly@suse.com" date="1647259200">- amavisd-new: Deprecated option "syslog" used in amavis.service
  (bsc#1185145)
  Remove deprecated entry</changelog>
</package>
<package pkgid="d4bd4232f1c5224958ff2532f3af2ccc44899df24204fda2c0216ccfd80a207d" name="amavisd-new-docs" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="150000.6.6.1"/>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashism in post script
- remove '-e' option of 'echo' command that may be unsupported in some
  POSIX-complete shells</changelog>
  <changelog author="p.drouand@gmail.com" date="1418731200">- Update to version 2.10.1
  + fixed a missing import of mail_addr_idn_to_ascii() and idn_to_utf8()
    when SQL is in use
  + void warnings issued by perl 5.21.5:
- Changes from version 2.10
  COMPATIBILITY
- New requirement: perl module Net::LibIDN needs to be installed.
- Uses a perl module File::LibMagic if installed, instead of spawning
  a file(1) utility.
- Support for international email relies heavily on perl to do the
  right thing in its support of Unicode, so using a reasonably recent
  version of perl is recommended. Amavisd was tested with perl 5.18
  and 5.20.1. Versions of perl older than 5.12 may cause problems
  with handling, encoding, and decoding of Unicode characters.
  It is reasonable to expect that versions 5.14 and 5.16 are fine too,
  but have not been tested extensively.
- Default log templates and notification templates have changed
  in details (like in decoding of international e-mail addresses), so
  if locally customized templates are in use these will benefit from
  updating - otherwise expect some mojibake in log and notifications.
- International domain names (IDN) encoded in ASCII-compatible encoding
  found in e-mail addresses and in Message-ID header field will be decoded
  to Unicode for presentation purposes (syslog, JSON structured log,
  notifications). This decoding does not affect a mail message itself.
- Logging via syslog expects that syslogd (or equivalent) will not
  clobber UTF-8 octets. It may be necessary to tell syslogd to accept
  C1 control characters unchanged, e.g. by adding a command line option
  "-8" to syslogd. Failing to do so may leave logged entries (like
  sender and recipient address, From, Subject) in international mail
  garbled or poorly readable in syslog.
  On FreeBSD one should add:  syslogd_flags="-8"  to /etc/rc.conf.
- Third party log parsers may need updating to accept logs with Unicode
  characters in UTF-8 encoding.
- A SMTP response to an EHLO command will now announce SMTPUTF8 capability
  by default.
  BUG FIXES
- releasing a message from an SQL quarantine was broken in version 2.9.1
  due to introduction of parent_mail_id(); patches provided by Stef Simoens
  and Gionatan Danti;
- if checking of a message was aborted prematurely (like due to a timeout
  or some fatal error), JSON log could receive a copy of a previous
  log entry;
- prevent non-ASCII non-UTF-8 octets from reaching a JSON log/report
  (which produced an invalid JSON object and Elasticsearch complaining);
- allow SMTP commands MAIL FROM and RCPT TO to accept options without
  values, as allowed by the RFC 5321 syntax;
- in delivery status notification (DSN) the field Received-From-MTA
  specified 'smtp' as mta-name-type, instead of a 'dns' as prescribed
  in RFC 3464;
- releasing from a quarantine left envelope sender address as '&lt;&gt;'
  instead of using the address found in a Return-Path header field
  of a quarantined message, while also logging a warning:
    Quarantine release $QID: missing X-Envelope-From or Return-Path
  reported by Pascal Volk;
- avoid failure in os_fingerprint or in smtp forwarding in certain cases
  where the $os_fingerprint_method or $forward_method or $notify_method
  uses an asterisk in place of a host IP address or port number.
  The reported error in os_fingerprint (reported by -ben) was:
    os_fingerprint FAILED: Insecure dependency in socket
    while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80
  and in SMTP forwarding or notification (reported by Dennis Boone):
    (!)connect to *:10025 attempt #1:
    Insecure dependency in socket while running with -T switch
    at /usr/lib/perl/5.18/IO/Socket.pm line 80.
- files LDAP.ldif and LDAP.schema: added a missing attribute
  amavisDisclaimerOptions to objectClass; reported by Quanah Gibson-Mount;
  NEW FEATURES
- added support for Internationalized Email:
  * RFC 6530 - Overview and Framework for Internationalized Email
  * RFC 6531 - SMTP Extension for Internationalized Email (SMTPUTF8)
  * RFC 6532 - Internationalized Email Headers
  * RFC 6533 - Internationalized Delivery Status Notifications
  This supports UTF-8 (EAI) in SMTP/LMTP sender addresses, recipient
  addresses, and message header section. Feature parity with Postfix
  version 2.12 (support introduced in development snapshot 20140715).
  The SMTPUTF8 extension is supported by Gmail since 2014-08-05:
    http://googleblog.blogspot.com/2014/08/a-first-step-toward-more-global-email.html
- added support for Internationalized Domain Names (IDN) according
  to IDNA (RFC 5890, RFC 5891; RFC 3490);
  * A-labels in ASCII-compatible encoding of domain names are converted
    to U-labels for presentation/logging purposed;
  * U-labels are converted to A-labels when feeding a mail message
    to an MTA which does not announce support for SMTPUTF8 extension
    (instead of rejecting them as invalid mail address);
  * For lookup purposes an international domain name is converted to
    ASCII-compatible encoding when used as a query key in DNS lookups
    and in lookups into hash, list, SQL and LDAP lookup tables (but not
    in regexp table lookups). These tables are expected to contain domain
    names in their ASCII representation (ACE). For convenience of config
    files subroutines idn_to_ascii() and mail_idn_to_ascii() are available,
    which encode a Unicode domain name to ACE (like ToASCII in RFC 3490);
  * Many configuration settings may have their domain names in UTF-8.
    These will be converted to ACE automatically where necessary
    (e.g. when creating a Received and Authentication-Results header
    fields, DKIM signatures, mail addresses in notifications, ...).
    These settings include:
    $myhostname, $localhost_name, $myauthservid, $mydomain,
    notification sender and recipient mail addresses
    ($mailfrom_notify_*, $hdrfrom_notify_*, @*_admin_maps),
    domain names and selectors in DKIM signing keys (in calls
    to dkim_key() );
- delivery notifications and admin notifications now show the following
  information encoded as UTF-8 (which is a default $bdy_encoding) in the
  plain text part of the message: IDN domain names in sender and recipient
  mail addresses and Message-ID are first decoded to Unicode, Subject and
  author display names are MIME-decoded;
- 'amavisd showkeys' and 'amavisd testkeys' can now deal with IDN
  (international domain names): domain names in DNS zone comments
  end up as UTF-8, DNS labels are in ASCII (A-labels); domain names in
  calls to dkim_key() may be specified either as UTF-8 or in ASCII (ACE);
- new macro 'mail_addr_decode' takes an e-mail address as a string of
  octets, where a local part may be encoded as UTF-8, and the domain part
  may be an international domain name (IDN) consisting either of U-labels
  or A-labels or NR-LDH labels. Decodes A-labels to U-labels in domain
  name. Returns a string of logical characters (Unicode), suitable for
  notification templates. If the mail address is not a valid UTF-8 string,
  it is interpreted as ISO-8859-1 (Latin-1).
- new macro 'mail_addr_decode_octets' is like 'mail_addr_decode', except
  that the result is a string of octets, only valid as UTF-8 if the
  provided address was a valid UTF-8 (garbage-in/garbage-out);
- new macro 'header_field_octets' is like 'header_field', except that
  a result is a string of octets in UTF-8 encoding, suitable for a log
  template;
- new macro 'ip_proto_trace_all' expands into a list of information
  items from a Received header trace; each item consists of a protocol
  name (the WITH clause) and an IP address, optionally followed by a
  source port number if known;
  Example:
    ESMTP://[2001:db8::143:1]:39141 &lt; ESMTP://2001:db8::25 &lt;
    esmtps://203.0.113.172 &lt; ESMTPSA://192.168.9.9
  or:
    UTF8SMTP://[203.0.113.172]:51208 &lt; UTF8SMTPSA://192.168.9.9
- new macro 'ip_proto_trace_public' is like ip_proto_trace_all, except
  that entries with non-public IP address are excluded from the list;
  'Received' trace information in $log_verbose_templ and in notifications
  now include results from this macro call;
- new macro 'protocol' evaluates to a protocol name by which a message
  was received by amavisd, according to RFC 3848 ("Transmission Types
  Registration") and "Mail Transmission Types" / "WITH protocol types"
  IANA registration
    http://www.iana.org/assignments/mail-parameters/mail-parameters.xhtml
  e.g.: SMTP, ESMTP, ESMTPA, ESMTPS, ESMTPSA, LMTP, LMTPA, LMTPS, LMTPSA,
    UTF8SMTP, UTF8SMTPA, UTF8SMTPS, UTF8SMTPSA,
    UTF8LMTP, UTF8LMTPA, UTF8LMTPS, UTF8LMTPSA, ...
- new macro 'client_protocol' expands into a protocol name by which
  a message was received from a client by MTA; the information is passed
  from MTA to amavisd through XFORWARD PROTO SMTP protocol extension or
  through AM.PDP (milter); typical values are 'ESMTP' or 'SMTP';
- use a perl module File::LibMagic when available, instead of spawning
  a file(1) utility for classifying contents of mail parts.
  By using a direct interface to a libmagic library the startup cost
  of spawning an external process is avoided. Benchmarking shows that
  using libmagic is significantly faster especially for checking a small
  number of files - takes 4 ms for checking one file with libmagic
  vs. 27 ms with a spawned file(1); based on a patch by Markus Benning;
  OTHER
- RFC 6533: recognize a MIME type 'message/global' as similar
  to 'message/rfc822', and 'message/global-headers' as similar
  to 'text/rfc822-headers' where appropriate (e.g. in bounce killer);
- header validity check now distinguishes 'non-ASCII and invalid UTF-8'
  from 'non-ASCII but valid UTF-8' characters in a mail header section.
  By default valid UTF-8 strings in a mail header section are not treated
  as error even if mail is not flagged as international mail (SMTPUTF8),
  as these are quite common in practice. To treat non- MIME-encoded UTF-8
  in a header section as error the test can be enabled by:
    $allowed_header_tests{'utf8'} = 1;
- ORCPT attribute in SMTP 'RCPT TO' command now accepts the original
  recipient mail address in any of these encodings: utf-8-address,
  utf-8-addr-unitext, utf-8-addr-xtext, or as a legacy xtext,
  as required by RFC 6533;
- updated do_cabextract (extraction of Microsoft cabinet .cab archives)
  to recognize a slightly changed output of cabextract version 1.2;
  patch by Thomas Jarosch;
- adjusted some timeouts to leave more reserve for later stages of
  mail processing and forwarding;
- prefer sanitizing/protecting control characters as hex code (like \x7F)
  instead of octal (like \177) (e.g. in logging and DSN);
- Use dowload Url as source
- Add a requirement on perl-Net-LibIDN; new upstream dependency</changelog>
  <changelog author="wr@rosenauer.org" date="1439380800">- require perl-Convert-BinHex as otherwise startup fails with
  default installation
- file based requirement does not work
  - &gt; changed to package requirement util-linux-systemd</changelog>
  <changelog author="aj@ajaissle.de" date="1453377600">- Add amavisd-new-2.10.1-myhostname.patch:
  $myhostname is set using POSIX::uname, but expects a FQDN. This
  patch changes this behaviour to use Net::Domain::hostfqdn instead</changelog>
  <changelog author="jcnengel@gmail.com" date="1464350400">- Update to version 2.11.0
  + Bugfixes
  * delivery method was undefined when always_bcc was used;
  reported by Marieke Janssen;
  * avoid warnings issued by perl 5.21.7 and later:
  Negative repeat count does nothing at ./amavisd line 16408
  and similarly in amavisd-status;
  * releasing from an SQL quarantine failed to provide the original
  envelope sender address to a released message;
  reported, and a fix suggested by Tom Johnson and Tobias;
  * remove a stale database file __db.nanny.db on a reload or restart,
  as it can prevent a successful start when a previous start failed
  for some reason; a patch by Trent Lloyd;
  + Compatibility
  * During startup more detailed testing is performed for taint bugs of
  a module Encode and the function utf8::is_utf8(), which may produce
  warnings on old versions of perl with its old core module Encode,
  or may exit on detecting more sinister bugs in these modules.
  Note that the module Encode may be upgraded independently of perl,
  if desired;
  * with MySQL: changed character set 'utf8' to 'utf8mb4' for fields
  msgs.subject and msgs.from_addr, as previously some of the UTF-8
  characters could not be stored in a database;
  * when logging to stderr a timestamp prefix to each message is only
  still inserted if $DEBUG is true.  When $DEBUG is false each message
  is prefixed with a syslog log level in angle brackets, and a timestamp
  is omitted (for compatibility with systemd);
  * a perl module Digest::SHA is now a required module. It is a perl core
  module since perl 5.10, so it shouldn't introduce a new dependency,
  and it was a de-facto required module even previously, as it was needed
  for DKIM processing;
  + New features
  * Polished rough corners to facilitate running amavisd as a non-daemonized
  supervised process
  * A log template macro 'report_json' can now take arguments, which can
  include or exclude fields (key/values) from the JSON report object.
  Arguments to a macro are either field names (keys) to be included
  in a report, or are field names to be excluded, each prefixed with
  an exclamation mark, to produce a report with all but excluded fields.
  * Two new configuration settings are added: %smtpd_tls_server_options
  and %smtp_tls_client_options. These two associative arrays are passed
  to IO::Socket::SSL-&gt;start_SSL when establishing a server-side or a
  client-side TLS session with an MTA, and provide more control over
  a TLS session - like providing certificates and restricting ciphers.
  See documentation of a perl module IO::Socket::SSL for a list of
  all options with their descriptions and their defaults.
  * Supports receiving SMTP/LMTP connections through a HAProxy,
  recognizing 'PROXY protocol Version 1' data on the first line read,
  after a connection from HAProxy to amavisd has been established.
  Connection data (IP addresses and ports) received via this protocol
  end up replacing such data in the the Amavis::In::Connection object
  ($conn).  Set configuration variable $haproxy_target_enabled (also
  a member of policy banks) to true in order to enable this protocol.
  * redis: allow a scoped / link-local IP address specification
  (avoiding current limitation in IO::Socket::IP [rt.cpan.org #89608]);
  * the Amavis::Unpackers::Part::digest method now holds a digest (SHA1,
  hex) of a decoded (base64 or quoted-printable) MIME part contents,
  followed by a colon and a lowercased Content-Type of the MIME part.
  Canonical line endings CRLF in decoded textual parts are normalized
  to a native newline (\n) before feeding them to a digest algorithm.
  * Policy bank names in a @client_ipaddr_policy setting can now accept
  a comma-separated list of policy names to be loaded on a match
  (for loading of policy banks based on an IP address of a SMTP client).
  Whitespace around each policy name is allowed and is stripped.
  Previously only a single policy bank name was allowed in each entry
  of @client_ipaddr_policy.
  * Experimental feature: IP lookups (as implemented by lookup_ip_acl()
  and used by @client_ipaddr_policy) can now also do DNS-based lookups,
  in addition to array- and hash-based lookups.</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Don't require insserv if we don't need it.</changelog>
  <changelog author="wr@rosenauer.org" date="1487764800">- fixed DKIM signing by recognizing ORIGINATING
  (regression in 2.11.0) (dkim-signing.diff)
  (https://lists.amavis.org/pipermail/amavis-users/2016-July/004428.html)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="varkoly@suse.com" date="1515931200">- bnc#1007149 Amavisd-milter fails to start when started via systemd
  Use fillup_only with -n amavis</changelog>
  <changelog author="varkoly@suse.com" date="1521028800">- bsc#1071932 - YaST2 Mail Server Configuration - throws Error for
  starting service amavis.
  amavisd-new should require spamassassin</changelog>
  <changelog author="varkoly@suse.com" date="1521115200">- bsc#1072122 amavisd-new should use unar instead of unrar</changelog>
  <changelog author="wr@rosenauer.org" date="1539518400">- update to version 2.11.1
  * removed a trailing dot element from @INC, as a workaround for a perl
    vulnerability CVE-2016-1238
  * amavis-services: bumping up syslog level from LOG_NOTICE to LOG_ERR
    for a message "PID &lt;pid&gt; went away", and removed redundant newlines
    from some log messages
  * safe_decode() and safe_decode_utf8(): avoid warning messages
    "Use of uninitialized value in subroutine entry"
    in Encode::MIME::Header when the $check argument is undefined
  * @sa_userconf_maps has been extended to allow loading of per-recipient
    (or per-policy bank, or global) SpamAssassin configuration set from
    LDAP. For consistency with SQL a @sa_userconf_maps entry prefixed with
    'ldap:' will load SpamAssassin configuration set using the
    load_scoreonly_ldap() method;  a patch by Atanas Karashenski
  * add some Sanesecurity.Foxhole false positives to the default
    list @virus_name_to_spam_score_maps
  * updated some comments
- update amavis-milter to version 2.6.1
  * Fixed bug when creating amavisd-new policy bank names</changelog>
  <changelog author="varkoly@suse.com" date="1647259200">- amavisd-new: Deprecated option "syslog" used in amavis.service
  (bsc#1185145)
  Remove deprecated entry</changelog>
</package>
<package pkgid="425e1ada660b8ca29f36d853eb925fbae2c3755dd62bc226cd7a960df0596500" name="amazon-ssm-agent" arch="aarch64">
  <version epoch="0" ver="3.1.1260.0" rel="150000.5.9.2"/>
  <changelog author="sean.marlow@suse.com" date="1481889600">- Initial package 1.2.290.0 2016-07-20</changelog>
  <changelog author="sean.marlow@suse.com" date="1484827200">- Update to 2.0.663.0 2017-01-18
  - Added support for aws:softwareInventory plugin to upload
    inventory related log messages to S3
  - Added support for running Powershell on Linux
  - Added support for State Manager that automates the process of
    keeping your Amazon EC2 and hybrid infrastructure in a state that
    you define You can use State Manager to ensure that your instances
    are bootstrapped with specific software at startup, configured
    according to your security policy, joined to a Windows domain,
    or patched with specific software updates throughout their
    lifecycle
  - Added support for Systems Manager Inventory that allows you to
    specify the type of metadata to collect, the instances from
    where the metadata should be collected, and a schedule for
    metadata collection
  - Added support for installing, uninstalling, and updating AWS
    packages published by AWS
  - Added support for installing Docker on Windows and running
    Docker actions
  - Added support for Windows Server 2016
  - Added support for Windows Server Nano
  - Fixed CloudWatch crash issue
  - Fixed Domain Join to support customized OU
  - Fixed CloudWatch doesn't work with creating association from
    Console
  - Fixed SSM Agent not able to start on Windows Server 2003
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1487332800">- Update to 2.0.672.0 2017-02-17
  - Added bucket-owner-full-control ACL to S3 outputs to support
    cross-account upload
  - Standardized S3 result paths across plugins; commands append
    command-id/instance-id/plugin-name/step-id associations append
    instance-id/association-id/execution-date/plugin-name/step-id
  - step-id is the id field in plugin input if present and
    supported, otherwise the step name (in 2.0 schema documents),
    otherwise the plugin-name again
  - plugin-name and step-id have : characters removed
  - FreeBSD patches from external contributor
  - Various bug fixes</changelog>
  <changelog author="lchiquitto@suse.de" date="1488369600">- Add package to SLE-12 codestream (bsc#1017899, fate#322303)</changelog>
  <changelog author="sean.marlow@suse.com" date="1496232000">- Update to 2.0.790.0 2017-05-31 (bsc#1047581)
  - Added support for step-level preconditions
  - Added support for rate/interval based schedule expressions for
    associations
  - Added Summary and PackageID fields to inventory's
    aws:application gatherer
  - Changed inventory's aws:application gatherer to use
    win32_processor: addressWidth to detect OS architecture to
    avoid localization based errors
  - Fixed CloudWatch issue with large configuration
  - Fixed S3 upload when instance and bucket are not in the same
    region
  - Fixed bug that prevented native language AMIs (Japanese AMI)
    from launching Cloudwatch
  - Various bug fixes
- Update to 2.0.767.0 2017-05-31
  - Returning longer StandardOutput and StandardError from
    RunShellScript and RunPowerShellScript which show up in the
    results of GetCommandInvocation and the detailed output of
    ListCommandInvocation
  - Added Document v2.0 support for Run Command, which includes
    support for multiple actions of same plugin type
  - Various bug fixes
- Update to 2.0.755.0 2017-05-31
  - Fixed bugs that prevented CloudWatch from launching and allowed
    multiple instances of CloudWatch to launch on Windows
  - Various bug fixes
- Update to 2.0.730.0 2017-05-31
  - Fixed issues with agent starting before network is ready on
    systemd systems.
- Update to 2.0.716.0 2017-05-31
  - Pass proxy settings to domain join and CloudWatch
  - Added support for installing Docker on Linux
  - Removed the upper limit for the maximum number of parallel
    executing documents on the agent (previously the max was 10)
  - You can configure this number by setting the
    ?CommandWorkerLimit? attribute in amazon-ssm-agent.json file
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1503662400">- Add ssm-cli to package.
- Remove requirement on lsb-release. Agent now parses os-release
  by default.
- Use gzip archive from GitHub instead of converting to xz.
- Update to 2.0.922.0 2017-08-14 (bsc#1055766)
  + Added Raspbian support for armv6 to support Raspberry Pi
  + Various bug fixes
- Update to 2.0.913.0 2017-08-07
  + Updated golang/sys dependency to the latest
  + Increased run command document maximum execution timeout to 48 hours
  + Various bug fixes
- Update to 2.0.902.0 2017-07-31
  + Added support for uploading agent logs to CloudWatch for SSM Agent diagnostics
  + Added additional gatherers for inventory
  + Added configuration compliance support for association
  + Various bug fixes
- Update to 2.0.879.0 2017-07-26
  + Add capability to configure custom s3 endpoint for the agent
  + Various bug fixes
- Update to 2.0.847.0 2017-07-03
  + Various bug fixes
- Update to 2.0.842.0 2017-06-26
  + Added rollback support in aws:configurePackage
  + Various bug fixes
- Update to 2.0.834.0 2017-06-23
  + Various bug fixes
- Update to 2.0.805.0 2017-06-07
  + Added support for SLES (SUSE) (64-bit, v12 and above)
  + Various bug fixes
- Update to 2.0.796.0 2017-05-29
  + Linux platform version now based on os-release when available
  + Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="sean.marlow@suse.com" date="1521028800">- Update to 2.2.325.0 2018-03-07 (bsc#1085670)
  + Bug fix to change sourceHashType to be default sha256 on
    psmodule.
- Update to 2.2.257.0 2018-02-23
  + Bug fix to address an issue that can prevent the agent from
    processing associations after a restart.
- Update to 2.2.160.0 2018-01-15
  + Execute "pwsh" on linux when using runPowershellScript plugin.
- Update to 2.2.93.0 2017-11-14
  + Update to latest AWS SDK.
- Update to 2.2.58.0 2017-10-23
  + Switching to use Birdwatcher distribution service for AWS
    packages.</changelog>
  <changelog author="sean.marlow@suse.com" date="1551873600">- Update version patch.
- Update to 2.3.415.0 (2019-03-05)
  + Bug fix addressing issues in Distributor package upgrade
- Update to 2.3.372.0 (2019-03-05)
  + Bug fix to allow installation of Distributor packages that do
    not have a version name.
  + Bug fix for agent crash with message "WaitGroup is reused
    before previous Wait has returned".
- Update to 2.3.344.0 (2019-03-05)
  + Add frequent collector to detect changed inventory types and
    upload it to SSM service between two scheduled collections.
  + Change AWS Systems Manager Distributor to reduce calls to
    GetDocument by calling DescribeDocument.
  + Add exit code when ssm-cli execution fails.
  + Create ssm-user only after the control channel has been
    successfully created.
- Update to 2.3.274.0 (2019-03-05)
  + Enabled AWS Systems Manager Distributor that lets you securely
    distribute and install software packages.
  + Add support for the arm64 architecture on Amazon Linux 2,
    Ubuntu 16.04/18.04, and RHEL 7.6 to support EC2 A1 instances.
- Update to 2.3.235.0 (2019-03-05)
  + Bug fix for session manager logging on Windows
  + Bug fix for ConfigureCloudWatch plugin
  + Bug fix for update SSM agent occasionally failing due to SSM
    agent service stuck in starting state
- Update to 2.3.193.0 (2019-03-05)
  + Bug fix for past sessions occasionally stuck in terminating
    state
  + Darwin masquerades as Linux to bypass OS validation on the
    backend until official support can be added
- Update to 2.3.169.0 (2019-03-05)
  + Update managed instance role token more frequently
- Update to 2.3.136.0 (2019-03-05)
  + Bug fix for issue that GatherInventory throw out error when
    there is no Windows Update in instance
  + Add more filters when getting the Windows event logs at
    startup to improve performance
  + Add random jitter before call PutInventory in inventory
    datauploader
- Update to 2.3.117.0 (2019-03-05)
  + Bug fix for issues during process termination on instances
    where IAM policy does not grant ssmmessages permissions.
- Update to 2.3.101.0 (2019-03-05)
  + Bug fix to prevent defunct processes when creating the local
    user ssm-user.
  + Bug fix for sudoersFile permission to avoid "sudo" command
    warnings in Session Manager.
  + Disable hibernation on Windows platform if Cloudwatch
    configuration is present.
- Update to 2.3.68.0 (2019-03-05)
  + Enables the Session Manager capability that lets you manage
    your Amazon EC2 instance through an interactive one-click
    browser-based shell or through the AWS CLI.
  + Beginning this agent version, SSM Agent will create a local
    user "ssm-user" and either add it to /etc/sudoers (Linux) or
    to the Administrators group (Windows) every time the agent
    starts. The ssm-user is the default OS user when a Session
    Manager session is started, and the password for this user is
    reset on every session. You can change the permissions by
    moving the ssm-user to a less-privileged group or by changing
    the sudoers file. The ssm-user is not removed from the system
    when SSM Agent is uninstalled.
- Update to 2.3.13.0 (2019-03-05)
  + Bug fix for the SSM Agent service remaining in "Starting"
    state on Windows when unable to authenticate to the Systems
    Manager service.
- Update to 2.2.916.0 (2019-03-05)
  + Bug fix for missing cloudwatch.exe seen in SSM Agent version
    2.2.902.0
- Update to 2.2.902.0 (2019-03-05)
  + Initial support for developer builds on macOS
  + Retry sending Run Command execution results for up to 2 hours
  + More detailed error messages are returned for inventory plugin
    failures during State Manager association executions
- Update to 2.2.800.0 (2019-03-05)
  + Bug fix to clean the orchestration directory
  + Streaming AWS Systems Manager Run Command output to CloudWatch
    Logs
  + Reducing number of retries for serial port opening
  + Add retry logic to installation verification
- Update to 2.2.619.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.607.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.546.0 (2019-03-05)
  + Bug fix to retry sending document results if they couldn't
    reach the service
- Update to 2.2.493.0 (2019-03-05)
  + Added support for Ubuntu Snap packaging
  + Bug fix so that aws:downloadContent does not change permissions
    of directories
  + Bug fix to Cloudwatch plugin where StartType has duplicated
    Enabled value
- Update to 2.2.392.0 (2019-03-05)
  + Added support for agent hibernation so that Agent backs off or
    enters hibernation mode if it does not have access to the
    service
  + Various bug fixes
- Update to 2.2.355.0 (2019-03-05)
  + Fix S3Download to download from cross regions.
  + Various bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588248000">- Update to 2.3.978.0 (2020-04-08) (bsc#1170744)
  + Stop pty on receiving TerminateSession request
  + Add support for Debian arm64 architecture
  + Refactoring session log generation logic
- Update to 2.3.930.0  (2020-03-17)
  + Bug fix for CloudWatch agent version showing twice in Inventory console
  + Bug fix for retrieving minor version for CentOS7
  + Add snap appData collection for inventory in ubuntu 18
  + Add validation for contents of os release files
  + Add retry for fingerprint generation
- Update to 2.3.871.0 (2020-02-20)
  + Various bug fix for SSM Agent
- Update to 2.3.842.0 (2020-01-29)
  + Bug fix for updating document state file prior agent reboot
  + Add support to restart agent after SIGPIPE exit status
- Update to 2.3.814.0 (2020-01-16)
  + Bug fix for metadata service V2
  + Update Golang version 1.12 for travis
  + Optimize session manager retry logic
- Update to 2.3.786.0 (2019-12-19)
  + Add support for Oracle Linux v7.5 and v7.7
  + Bug fix for Inventory data provider to support special characters
  + Bug fix for SSM MDS service name
- Update to 2.3.772.0 (2019-12-13)
  + Upgrade AWS SDK
  + Add logging for fingerprint generation
- Update to 2.3.760.0 (2019-11-15)
  + Session manager supports handling of Task metadata
- Update to 2.3.758.0 (2019-11-11)
  + Add support to update SSM Distributor packages in place
- Update to 2.3.756.0 (2019-11-05)
  + Terminate port forwarding session on receiving TerminateSession flag
  + Bug fix to reload SSM client if region has not been initialize correctly
  + Bug fix for retrieval of user groups on Linux
- Update to 2.3.722.0 (2019-10-11)
  + Bug fix for the delay when registering non-EC2 on-prem instances
  + Bug fix for missing ACL when uploading logs to S3 buckets
  + Upgrade GoLang version from 1.9 to 1.12
- Update to 2.3.714.0 (2019-09-26)
  + For port forwarding session, close server connection when client drops it's connection
  + Bug fix for missing condition of rules from inventory registry
  + Update service domain information fetch logic from EC2 Metadata
- Update to 2.3.707.0 (2019-09-11)
  + Bug fix for characters dropping from session manager shell output
  + Bug fix for session manager freezing caused by non utf8 character
  + Switch the request protocol order for getting S3 Header
  + Keep port forwarding session open until session is terminated
- Update to 2.3.701.0 (2019-08-21)
  + Send platform type information in controlChannel input
- Update to 2.3.687.0 (2019-08-05)
  + Bug fix for runPowershellScript plugin on linux platform
  + Add support for document 2.x version to ssm-cli
- Update to 2.3.680.0 (2019-07-24)
  + Added a new Inventory gatherer AWS:BillingInfo which will gather the billing product ids for LicenseIncluded and Marketplace instance
- Update to 2.3.672.0 (2019-07-09)
  + Add Port plugin for SSH/SCP
  + Add support for Session Manager RunAs functionality on Linux platform
- Update to 2.3.668.0 (2019-07-01)
  + Add Session Manager InteractiveCommands plugin
  + Bug fix for log formatting issue for session manager
- Update to 2.3.662.0 (2019-06-19)
  + Bug fix for Session Manager when handling line endings on Windows platform
  + Bug fix for token validation for aws:downloadContent plugin
  + Check if log group exists before uploading Session Manager logs to CloudWatch
  + Bug fix for broken S3 urls when using custom documents
- Update to 2.3.634.0 (2019-05-28)
  + Disable appconfig to load credential from specific profile path, add EC2 credentials as the default fallback
  + Remove sudoers file creation logic if ssm-user already exists
  + Enable supplementary groups for ssm-user on Linux
- Update to 2.3.612.0 (2019-05-08)
  + Bug fix for UTF-8 encoded issue caused by locale activation on Ubuntu 16.04 instance
  + Refactor ssm-user creation logic
  + Bug fix for reporting IP address with wrong network interface
  + Update configure package document arn pattern
- Update to 2.3.542.0 (2019-04-18)
  + Bug fix for on-premises instance registration in CN region
- Update to 2.3.539.0 (2019-04-04)
  + Add support for further encryption of session data using AWS KMS
  + Bug fix for excessive instance-id fetching by document workers
- Update to 2.3.479.0 (2019-03-06)
  + Bug fix for downloading content failure caused by wrong S3 endpoint
  + Bug fix for reboot failure caused by session manager panic
  + Bug fix for session manager shell output dropping character
  + Bug fix for mgs endpoint configuration consistency
- Update to 2.3.444.0 (2019-02-10)
  + Updates to UpdateInstanceInformation call, Windows initialization
- Add patch to remove unused import
  + remove-unused-import.patch
- Refresh patches for new version
  + fix-version.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1590580800">- Update to 2.3.1205.0:
  * Updated the SSM Agent Snap to core18
  * Bug fix for expired in-progress documents being resumed
  * Bug fix for update specific files not being deleted after agent update is finished
  * Bug fix for cached manifest files not being deleted in the configurepackage plugin</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 3.0.1209.0 (bsc#1186239, bsc#1186262)
  + For detailed changes see RELEASENOTES.md
  + Drop fix-version.patch replaced by sed expression in spec file
  + Drop remove-unused-import.patch no longer included from upstream
  + Drop fix-config.patch all SUSE distros use systemd
  + Remove amazon-ssm-agent.service included in upstream source, use it
  + Move all binaries into sbin and fix the hard coded config path via sed</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624622400">- Update to version 3.0.1295.0
  + Added configurable custom identity and identity consumption order
  + Added cross-account domain join
  + Added cleanup for older versions of updater artifacts
  + Added a workaround for MacOS kernel bug that sometimes kept RunCommand from launching
  + Added a workaround for log file contention on Windows
  + Added synchronization to RunCommand service stop
  + Changed hibernation log level
  + MacOS executables are now signed
  + Removed delay in non-interactive session type</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1650456000">- Update to version 3.1.1260.0
  + Added missing check for invalid S3 path parameter
  + Added support for domain join using a non-local username
  + Fixed broken links in README.md
  + Fixed ECS Exec issue where agent was using environment variables for credentials
  + Updated Ec2Detector test to query smbios directly for system information
- from version 3.1.1208.0
  + Updated ec2detector module to use Get-CmiInstance instead of wmic.exe
  + Fixed file creation mode of ssm-agent-users sudoer file (bsc#1196556, CVE-2022-29527)
- from version 3.1.1188.0
  + Added new ec2detector module to determine if agent is on EC2
  + Added support for port forwarding to remote host
  + Added quotes around inventory parameter ValueName on Windows
  + Fix for domain join DNS IP assignments in shared directories
  + Replaced namedpipe updater test with ec2detector test
- from version 3.1.1141.0
  + Add application inventory by file for Bottlerocket
  + Fix infinite retry logic to send failed replies in MGSInteractor
  + Remove usage of io/fs package
- from version 3.1.1080.0
  + (windows only) Remove symlink scan during update
- from version 3.1.1045.0
  + Fixed sourceHash validation for aws:application document plugin
  + Added document parameter validation for values passed to target document of aws:runDocument plugin
  + (windows only) Fix process leak when legacy cloudwatch plugin is enabled
  + (windows only) Fail installation if C:\ProgramData\Amazon\SSM\ has symlinks
- from version 3.1.1004.0
  + Added platform detection for Bottlerocket OS
  + Consolidated regional endpoint generation to common endpoint module
- from version 3.1.941.0
  + Added support for Rocky linux
  + Fixed sharefile/shareprofile not being propagated to updateutil
  + Fixed incorrect darwin platform detection post BigSur
  + Fixed log flush issue in updater
  + Updated .NET dependencies for domainjoin and cloudwatch (windows only)
  + Updated go version to 1.17.6
- from version 3.1.821.0
  + Implement new core module named MessageService to start processing commands from both MGS and MDS
  * Merge functionalities from RunCommandService core module and Session core module.
  * Receive run command documents through MGS if connected and fallback to MDS otherwise.
    This functionality requires appropriate permissions for both endpoints and will be rolled
    out gradually to end users.
  * Provide filesystem based idempotency check to avoid duplicate run command document execution.
  * Increase default run command pool buffer size from 1 to 5 to load additional documents
    before-hand for processing.
  + Fix nil pointer deference panic produced in named pipe test case during agent update
  + Remove StopType concept in ssm-agent-worker and add different waits for reboot and shutdown stop
- from version 3.1.804.0
  + Add support for upstart when running get-diagnostic command using ssm-cli
  + Fix systemctl service name to support older versions of systemctl
  + Include changes to facilitate testing
  + Update DNS server selection logic for seamless domain join on linux and darwin
  + Update go version to go1.17.5
  + Update golang sys package dependency
- from version 3.1.715.0
  + Derive default directories from appconfig on Darwin
  + Set x-bit on newly-created directories
- from version 3.1.634.0
  + Fix for ssm-setup-cli to be able to select service manager without the agent being installed
- from version 3.1.630.0
  + Added greengrass component recipe for the new SystemsManagerAgent component
  + Added support for registering agent on a greengrass device
  + Added support for downloading more than 1000 objects in downloadContent
  + Fixed retry logic for onprem and s3 upload
  + Fixed unit tests when running on Mac
  + Update AWS SDK to v1.41.4
  + Update logic to retrieve platform details for Rocky Linux
- from version 3.1.501.0
  + Add diagnostics command to ssm-cli
  + Fix caching for onprem credentials
  + Additional configuration options for Seamless Domain Join
  + Gracefully exit session if group of runas user is modified
  + Skip retries for cert validation errors in S3 HEAD requests
  + Fix DNS failures on CentOS 8.2
  + Update several dependencies
- from version 3.1.459.0
  + Fixed a bug with powershell command for Inventory
- from version 3.1.426.0
  + Fixed cpu spike issue manifesting on snap
  + Fixed issue with version comparison in EC2Config update plugin
  + Fixed panic when command output was being truncated
  + Updated build to use go1.16.8
  + Removed Profile from inventory powershell commands on Windows
- from version 3.1.338.0
  + Fix to eliminate WaitGroup reuse panic triggered during agent reboot
  + Fix to include applications without UninstallString in Inventory for Windows
  + Fixed a bug where multi-plugin documents with large outputs would timeout RunCommand
  + Fixed a bug where RunCommand could delay executions for up to 15 minutes
- from version 3.1.282.0
  + Add serial port logging of AwsNitroEnclaves package version on windows during startup
  + Allow usage of existing loggroup/logstream when the user does not have create permission
  + Change service interrogate request log to debug
  + Cleanup old surveyor channel files on startup
  + Fix filehandle leak in windows leading to agent going offline
  + Fix to schedule correct next run time during orchestration directories cleanup
  + Fix to sequentially update correct runcount value in the document bookkeeping file
  + Fix a bug with version parsing EC2Config updater
  + Updated rpm packaging for fips compliance
- from version 3.1.192.0
  + Added darwin arm64 to makefile
  + Added logic to limit orchestration directory cleanup
  + Added packaging for public SSM Agent container image
  + Fixed cloudwatch endpoint for telemetry metrics requests
  + Fixed handling of Windows filepaths and mutex locks
  + Fixed agent worker handling of OS signals and termination channel requests
  + Updated datachannel retry strategy to not retry for a specific error scenario
  + Updated default gomaxproc value for Windows
  + Update build to use go1.16.6
- from version 3.1.127.0
  + Added a workaround for windows random halts
  + Fixed race condition during reboot document execution
- from version 3.1.90.0
  + Updated to version 3.1
  + Updated build to build statically linked binaries for linux 64bit
  * Minimum supported linux kernel version for linux 64bit is 3.2+
  + Fixed permissions for docker config file
  + Fixed issue with ubuntu prerm and postinst scripts
  + Fixed issue where processor stop was being called twice
- from version 3.0.1390.0
  + Added config option to delete orchestration folder
  + Added snapcraft packaging config
  + Added workaround for aws:runDocument status bug
  + Added improved handling of file closure
  + Added support for go mod and updated build to use go 1.16.4
  + Fixed bug parsing vpce s3 urls
  + Refactored use of agent identity in agent cli
  + Updated check if agent is running as windows service
  + Updated handling of session cancellation to still send output to client side
  + Updated interactive session exit code logic to match non-interactive mode
  + Updated vendor dependencies
- Update directory path for GOPATH</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1650542400">- Fix mangled ExlusiveArch field</changelog>
</package>
<package pkgid="51e139bf82ace84569217967cc5cf5070c5c5f95291f61e6e30b69797910c146" name="amazon-ssm-agent" arch="src">
  <version epoch="0" ver="3.1.1260.0" rel="150000.5.9.2"/>
  <changelog author="sean.marlow@suse.com" date="1481889600">- Initial package 1.2.290.0 2016-07-20</changelog>
  <changelog author="sean.marlow@suse.com" date="1484827200">- Update to 2.0.663.0 2017-01-18
  - Added support for aws:softwareInventory plugin to upload
    inventory related log messages to S3
  - Added support for running Powershell on Linux
  - Added support for State Manager that automates the process of
    keeping your Amazon EC2 and hybrid infrastructure in a state that
    you define You can use State Manager to ensure that your instances
    are bootstrapped with specific software at startup, configured
    according to your security policy, joined to a Windows domain,
    or patched with specific software updates throughout their
    lifecycle
  - Added support for Systems Manager Inventory that allows you to
    specify the type of metadata to collect, the instances from
    where the metadata should be collected, and a schedule for
    metadata collection
  - Added support for installing, uninstalling, and updating AWS
    packages published by AWS
  - Added support for installing Docker on Windows and running
    Docker actions
  - Added support for Windows Server 2016
  - Added support for Windows Server Nano
  - Fixed CloudWatch crash issue
  - Fixed Domain Join to support customized OU
  - Fixed CloudWatch doesn't work with creating association from
    Console
  - Fixed SSM Agent not able to start on Windows Server 2003
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1487332800">- Update to 2.0.672.0 2017-02-17
  - Added bucket-owner-full-control ACL to S3 outputs to support
    cross-account upload
  - Standardized S3 result paths across plugins; commands append
    command-id/instance-id/plugin-name/step-id associations append
    instance-id/association-id/execution-date/plugin-name/step-id
  - step-id is the id field in plugin input if present and
    supported, otherwise the step name (in 2.0 schema documents),
    otherwise the plugin-name again
  - plugin-name and step-id have : characters removed
  - FreeBSD patches from external contributor
  - Various bug fixes</changelog>
  <changelog author="lchiquitto@suse.de" date="1488369600">- Add package to SLE-12 codestream (bsc#1017899, fate#322303)</changelog>
  <changelog author="sean.marlow@suse.com" date="1496232000">- Update to 2.0.790.0 2017-05-31 (bsc#1047581)
  - Added support for step-level preconditions
  - Added support for rate/interval based schedule expressions for
    associations
  - Added Summary and PackageID fields to inventory's
    aws:application gatherer
  - Changed inventory's aws:application gatherer to use
    win32_processor: addressWidth to detect OS architecture to
    avoid localization based errors
  - Fixed CloudWatch issue with large configuration
  - Fixed S3 upload when instance and bucket are not in the same
    region
  - Fixed bug that prevented native language AMIs (Japanese AMI)
    from launching Cloudwatch
  - Various bug fixes
- Update to 2.0.767.0 2017-05-31
  - Returning longer StandardOutput and StandardError from
    RunShellScript and RunPowerShellScript which show up in the
    results of GetCommandInvocation and the detailed output of
    ListCommandInvocation
  - Added Document v2.0 support for Run Command, which includes
    support for multiple actions of same plugin type
  - Various bug fixes
- Update to 2.0.755.0 2017-05-31
  - Fixed bugs that prevented CloudWatch from launching and allowed
    multiple instances of CloudWatch to launch on Windows
  - Various bug fixes
- Update to 2.0.730.0 2017-05-31
  - Fixed issues with agent starting before network is ready on
    systemd systems.
- Update to 2.0.716.0 2017-05-31
  - Pass proxy settings to domain join and CloudWatch
  - Added support for installing Docker on Linux
  - Removed the upper limit for the maximum number of parallel
    executing documents on the agent (previously the max was 10)
  - You can configure this number by setting the
    ?CommandWorkerLimit? attribute in amazon-ssm-agent.json file
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1503662400">- Add ssm-cli to package.
- Remove requirement on lsb-release. Agent now parses os-release
  by default.
- Use gzip archive from GitHub instead of converting to xz.
- Update to 2.0.922.0 2017-08-14 (bsc#1055766)
  + Added Raspbian support for armv6 to support Raspberry Pi
  + Various bug fixes
- Update to 2.0.913.0 2017-08-07
  + Updated golang/sys dependency to the latest
  + Increased run command document maximum execution timeout to 48 hours
  + Various bug fixes
- Update to 2.0.902.0 2017-07-31
  + Added support for uploading agent logs to CloudWatch for SSM Agent diagnostics
  + Added additional gatherers for inventory
  + Added configuration compliance support for association
  + Various bug fixes
- Update to 2.0.879.0 2017-07-26
  + Add capability to configure custom s3 endpoint for the agent
  + Various bug fixes
- Update to 2.0.847.0 2017-07-03
  + Various bug fixes
- Update to 2.0.842.0 2017-06-26
  + Added rollback support in aws:configurePackage
  + Various bug fixes
- Update to 2.0.834.0 2017-06-23
  + Various bug fixes
- Update to 2.0.805.0 2017-06-07
  + Added support for SLES (SUSE) (64-bit, v12 and above)
  + Various bug fixes
- Update to 2.0.796.0 2017-05-29
  + Linux platform version now based on os-release when available
  + Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="sean.marlow@suse.com" date="1521028800">- Update to 2.2.325.0 2018-03-07 (bsc#1085670)
  + Bug fix to change sourceHashType to be default sha256 on
    psmodule.
- Update to 2.2.257.0 2018-02-23
  + Bug fix to address an issue that can prevent the agent from
    processing associations after a restart.
- Update to 2.2.160.0 2018-01-15
  + Execute "pwsh" on linux when using runPowershellScript plugin.
- Update to 2.2.93.0 2017-11-14
  + Update to latest AWS SDK.
- Update to 2.2.58.0 2017-10-23
  + Switching to use Birdwatcher distribution service for AWS
    packages.</changelog>
  <changelog author="sean.marlow@suse.com" date="1551873600">- Update version patch.
- Update to 2.3.415.0 (2019-03-05)
  + Bug fix addressing issues in Distributor package upgrade
- Update to 2.3.372.0 (2019-03-05)
  + Bug fix to allow installation of Distributor packages that do
    not have a version name.
  + Bug fix for agent crash with message "WaitGroup is reused
    before previous Wait has returned".
- Update to 2.3.344.0 (2019-03-05)
  + Add frequent collector to detect changed inventory types and
    upload it to SSM service between two scheduled collections.
  + Change AWS Systems Manager Distributor to reduce calls to
    GetDocument by calling DescribeDocument.
  + Add exit code when ssm-cli execution fails.
  + Create ssm-user only after the control channel has been
    successfully created.
- Update to 2.3.274.0 (2019-03-05)
  + Enabled AWS Systems Manager Distributor that lets you securely
    distribute and install software packages.
  + Add support for the arm64 architecture on Amazon Linux 2,
    Ubuntu 16.04/18.04, and RHEL 7.6 to support EC2 A1 instances.
- Update to 2.3.235.0 (2019-03-05)
  + Bug fix for session manager logging on Windows
  + Bug fix for ConfigureCloudWatch plugin
  + Bug fix for update SSM agent occasionally failing due to SSM
    agent service stuck in starting state
- Update to 2.3.193.0 (2019-03-05)
  + Bug fix for past sessions occasionally stuck in terminating
    state
  + Darwin masquerades as Linux to bypass OS validation on the
    backend until official support can be added
- Update to 2.3.169.0 (2019-03-05)
  + Update managed instance role token more frequently
- Update to 2.3.136.0 (2019-03-05)
  + Bug fix for issue that GatherInventory throw out error when
    there is no Windows Update in instance
  + Add more filters when getting the Windows event logs at
    startup to improve performance
  + Add random jitter before call PutInventory in inventory
    datauploader
- Update to 2.3.117.0 (2019-03-05)
  + Bug fix for issues during process termination on instances
    where IAM policy does not grant ssmmessages permissions.
- Update to 2.3.101.0 (2019-03-05)
  + Bug fix to prevent defunct processes when creating the local
    user ssm-user.
  + Bug fix for sudoersFile permission to avoid "sudo" command
    warnings in Session Manager.
  + Disable hibernation on Windows platform if Cloudwatch
    configuration is present.
- Update to 2.3.68.0 (2019-03-05)
  + Enables the Session Manager capability that lets you manage
    your Amazon EC2 instance through an interactive one-click
    browser-based shell or through the AWS CLI.
  + Beginning this agent version, SSM Agent will create a local
    user "ssm-user" and either add it to /etc/sudoers (Linux) or
    to the Administrators group (Windows) every time the agent
    starts. The ssm-user is the default OS user when a Session
    Manager session is started, and the password for this user is
    reset on every session. You can change the permissions by
    moving the ssm-user to a less-privileged group or by changing
    the sudoers file. The ssm-user is not removed from the system
    when SSM Agent is uninstalled.
- Update to 2.3.13.0 (2019-03-05)
  + Bug fix for the SSM Agent service remaining in "Starting"
    state on Windows when unable to authenticate to the Systems
    Manager service.
- Update to 2.2.916.0 (2019-03-05)
  + Bug fix for missing cloudwatch.exe seen in SSM Agent version
    2.2.902.0
- Update to 2.2.902.0 (2019-03-05)
  + Initial support for developer builds on macOS
  + Retry sending Run Command execution results for up to 2 hours
  + More detailed error messages are returned for inventory plugin
    failures during State Manager association executions
- Update to 2.2.800.0 (2019-03-05)
  + Bug fix to clean the orchestration directory
  + Streaming AWS Systems Manager Run Command output to CloudWatch
    Logs
  + Reducing number of retries for serial port opening
  + Add retry logic to installation verification
- Update to 2.2.619.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.607.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.546.0 (2019-03-05)
  + Bug fix to retry sending document results if they couldn't
    reach the service
- Update to 2.2.493.0 (2019-03-05)
  + Added support for Ubuntu Snap packaging
  + Bug fix so that aws:downloadContent does not change permissions
    of directories
  + Bug fix to Cloudwatch plugin where StartType has duplicated
    Enabled value
- Update to 2.2.392.0 (2019-03-05)
  + Added support for agent hibernation so that Agent backs off or
    enters hibernation mode if it does not have access to the
    service
  + Various bug fixes
- Update to 2.2.355.0 (2019-03-05)
  + Fix S3Download to download from cross regions.
  + Various bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588248000">- Update to 2.3.978.0 (2020-04-08) (bsc#1170744)
  + Stop pty on receiving TerminateSession request
  + Add support for Debian arm64 architecture
  + Refactoring session log generation logic
- Update to 2.3.930.0  (2020-03-17)
  + Bug fix for CloudWatch agent version showing twice in Inventory console
  + Bug fix for retrieving minor version for CentOS7
  + Add snap appData collection for inventory in ubuntu 18
  + Add validation for contents of os release files
  + Add retry for fingerprint generation
- Update to 2.3.871.0 (2020-02-20)
  + Various bug fix for SSM Agent
- Update to 2.3.842.0 (2020-01-29)
  + Bug fix for updating document state file prior agent reboot
  + Add support to restart agent after SIGPIPE exit status
- Update to 2.3.814.0 (2020-01-16)
  + Bug fix for metadata service V2
  + Update Golang version 1.12 for travis
  + Optimize session manager retry logic
- Update to 2.3.786.0 (2019-12-19)
  + Add support for Oracle Linux v7.5 and v7.7
  + Bug fix for Inventory data provider to support special characters
  + Bug fix for SSM MDS service name
- Update to 2.3.772.0 (2019-12-13)
  + Upgrade AWS SDK
  + Add logging for fingerprint generation
- Update to 2.3.760.0 (2019-11-15)
  + Session manager supports handling of Task metadata
- Update to 2.3.758.0 (2019-11-11)
  + Add support to update SSM Distributor packages in place
- Update to 2.3.756.0 (2019-11-05)
  + Terminate port forwarding session on receiving TerminateSession flag
  + Bug fix to reload SSM client if region has not been initialize correctly
  + Bug fix for retrieval of user groups on Linux
- Update to 2.3.722.0 (2019-10-11)
  + Bug fix for the delay when registering non-EC2 on-prem instances
  + Bug fix for missing ACL when uploading logs to S3 buckets
  + Upgrade GoLang version from 1.9 to 1.12
- Update to 2.3.714.0 (2019-09-26)
  + For port forwarding session, close server connection when client drops it's connection
  + Bug fix for missing condition of rules from inventory registry
  + Update service domain information fetch logic from EC2 Metadata
- Update to 2.3.707.0 (2019-09-11)
  + Bug fix for characters dropping from session manager shell output
  + Bug fix for session manager freezing caused by non utf8 character
  + Switch the request protocol order for getting S3 Header
  + Keep port forwarding session open until session is terminated
- Update to 2.3.701.0 (2019-08-21)
  + Send platform type information in controlChannel input
- Update to 2.3.687.0 (2019-08-05)
  + Bug fix for runPowershellScript plugin on linux platform
  + Add support for document 2.x version to ssm-cli
- Update to 2.3.680.0 (2019-07-24)
  + Added a new Inventory gatherer AWS:BillingInfo which will gather the billing product ids for LicenseIncluded and Marketplace instance
- Update to 2.3.672.0 (2019-07-09)
  + Add Port plugin for SSH/SCP
  + Add support for Session Manager RunAs functionality on Linux platform
- Update to 2.3.668.0 (2019-07-01)
  + Add Session Manager InteractiveCommands plugin
  + Bug fix for log formatting issue for session manager
- Update to 2.3.662.0 (2019-06-19)
  + Bug fix for Session Manager when handling line endings on Windows platform
  + Bug fix for token validation for aws:downloadContent plugin
  + Check if log group exists before uploading Session Manager logs to CloudWatch
  + Bug fix for broken S3 urls when using custom documents
- Update to 2.3.634.0 (2019-05-28)
  + Disable appconfig to load credential from specific profile path, add EC2 credentials as the default fallback
  + Remove sudoers file creation logic if ssm-user already exists
  + Enable supplementary groups for ssm-user on Linux
- Update to 2.3.612.0 (2019-05-08)
  + Bug fix for UTF-8 encoded issue caused by locale activation on Ubuntu 16.04 instance
  + Refactor ssm-user creation logic
  + Bug fix for reporting IP address with wrong network interface
  + Update configure package document arn pattern
- Update to 2.3.542.0 (2019-04-18)
  + Bug fix for on-premises instance registration in CN region
- Update to 2.3.539.0 (2019-04-04)
  + Add support for further encryption of session data using AWS KMS
  + Bug fix for excessive instance-id fetching by document workers
- Update to 2.3.479.0 (2019-03-06)
  + Bug fix for downloading content failure caused by wrong S3 endpoint
  + Bug fix for reboot failure caused by session manager panic
  + Bug fix for session manager shell output dropping character
  + Bug fix for mgs endpoint configuration consistency
- Update to 2.3.444.0 (2019-02-10)
  + Updates to UpdateInstanceInformation call, Windows initialization
- Add patch to remove unused import
  + remove-unused-import.patch
- Refresh patches for new version
  + fix-version.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1590580800">- Update to 2.3.1205.0:
  * Updated the SSM Agent Snap to core18
  * Bug fix for expired in-progress documents being resumed
  * Bug fix for update specific files not being deleted after agent update is finished
  * Bug fix for cached manifest files not being deleted in the configurepackage plugin</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 3.0.1209.0 (bsc#1186239, bsc#1186262)
  + For detailed changes see RELEASENOTES.md
  + Drop fix-version.patch replaced by sed expression in spec file
  + Drop remove-unused-import.patch no longer included from upstream
  + Drop fix-config.patch all SUSE distros use systemd
  + Remove amazon-ssm-agent.service included in upstream source, use it
  + Move all binaries into sbin and fix the hard coded config path via sed</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624622400">- Update to version 3.0.1295.0
  + Added configurable custom identity and identity consumption order
  + Added cross-account domain join
  + Added cleanup for older versions of updater artifacts
  + Added a workaround for MacOS kernel bug that sometimes kept RunCommand from launching
  + Added a workaround for log file contention on Windows
  + Added synchronization to RunCommand service stop
  + Changed hibernation log level
  + MacOS executables are now signed
  + Removed delay in non-interactive session type</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1650456000">- Update to version 3.1.1260.0
  + Added missing check for invalid S3 path parameter
  + Added support for domain join using a non-local username
  + Fixed broken links in README.md
  + Fixed ECS Exec issue where agent was using environment variables for credentials
  + Updated Ec2Detector test to query smbios directly for system information
- from version 3.1.1208.0
  + Updated ec2detector module to use Get-CmiInstance instead of wmic.exe
  + Fixed file creation mode of ssm-agent-users sudoer file (bsc#1196556, CVE-2022-29527)
- from version 3.1.1188.0
  + Added new ec2detector module to determine if agent is on EC2
  + Added support for port forwarding to remote host
  + Added quotes around inventory parameter ValueName on Windows
  + Fix for domain join DNS IP assignments in shared directories
  + Replaced namedpipe updater test with ec2detector test
- from version 3.1.1141.0
  + Add application inventory by file for Bottlerocket
  + Fix infinite retry logic to send failed replies in MGSInteractor
  + Remove usage of io/fs package
- from version 3.1.1080.0
  + (windows only) Remove symlink scan during update
- from version 3.1.1045.0
  + Fixed sourceHash validation for aws:application document plugin
  + Added document parameter validation for values passed to target document of aws:runDocument plugin
  + (windows only) Fix process leak when legacy cloudwatch plugin is enabled
  + (windows only) Fail installation if C:\ProgramData\Amazon\SSM\ has symlinks
- from version 3.1.1004.0
  + Added platform detection for Bottlerocket OS
  + Consolidated regional endpoint generation to common endpoint module
- from version 3.1.941.0
  + Added support for Rocky linux
  + Fixed sharefile/shareprofile not being propagated to updateutil
  + Fixed incorrect darwin platform detection post BigSur
  + Fixed log flush issue in updater
  + Updated .NET dependencies for domainjoin and cloudwatch (windows only)
  + Updated go version to 1.17.6
- from version 3.1.821.0
  + Implement new core module named MessageService to start processing commands from both MGS and MDS
  * Merge functionalities from RunCommandService core module and Session core module.
  * Receive run command documents through MGS if connected and fallback to MDS otherwise.
    This functionality requires appropriate permissions for both endpoints and will be rolled
    out gradually to end users.
  * Provide filesystem based idempotency check to avoid duplicate run command document execution.
  * Increase default run command pool buffer size from 1 to 5 to load additional documents
    before-hand for processing.
  + Fix nil pointer deference panic produced in named pipe test case during agent update
  + Remove StopType concept in ssm-agent-worker and add different waits for reboot and shutdown stop
- from version 3.1.804.0
  + Add support for upstart when running get-diagnostic command using ssm-cli
  + Fix systemctl service name to support older versions of systemctl
  + Include changes to facilitate testing
  + Update DNS server selection logic for seamless domain join on linux and darwin
  + Update go version to go1.17.5
  + Update golang sys package dependency
- from version 3.1.715.0
  + Derive default directories from appconfig on Darwin
  + Set x-bit on newly-created directories
- from version 3.1.634.0
  + Fix for ssm-setup-cli to be able to select service manager without the agent being installed
- from version 3.1.630.0
  + Added greengrass component recipe for the new SystemsManagerAgent component
  + Added support for registering agent on a greengrass device
  + Added support for downloading more than 1000 objects in downloadContent
  + Fixed retry logic for onprem and s3 upload
  + Fixed unit tests when running on Mac
  + Update AWS SDK to v1.41.4
  + Update logic to retrieve platform details for Rocky Linux
- from version 3.1.501.0
  + Add diagnostics command to ssm-cli
  + Fix caching for onprem credentials
  + Additional configuration options for Seamless Domain Join
  + Gracefully exit session if group of runas user is modified
  + Skip retries for cert validation errors in S3 HEAD requests
  + Fix DNS failures on CentOS 8.2
  + Update several dependencies
- from version 3.1.459.0
  + Fixed a bug with powershell command for Inventory
- from version 3.1.426.0
  + Fixed cpu spike issue manifesting on snap
  + Fixed issue with version comparison in EC2Config update plugin
  + Fixed panic when command output was being truncated
  + Updated build to use go1.16.8
  + Removed Profile from inventory powershell commands on Windows
- from version 3.1.338.0
  + Fix to eliminate WaitGroup reuse panic triggered during agent reboot
  + Fix to include applications without UninstallString in Inventory for Windows
  + Fixed a bug where multi-plugin documents with large outputs would timeout RunCommand
  + Fixed a bug where RunCommand could delay executions for up to 15 minutes
- from version 3.1.282.0
  + Add serial port logging of AwsNitroEnclaves package version on windows during startup
  + Allow usage of existing loggroup/logstream when the user does not have create permission
  + Change service interrogate request log to debug
  + Cleanup old surveyor channel files on startup
  + Fix filehandle leak in windows leading to agent going offline
  + Fix to schedule correct next run time during orchestration directories cleanup
  + Fix to sequentially update correct runcount value in the document bookkeeping file
  + Fix a bug with version parsing EC2Config updater
  + Updated rpm packaging for fips compliance
- from version 3.1.192.0
  + Added darwin arm64 to makefile
  + Added logic to limit orchestration directory cleanup
  + Added packaging for public SSM Agent container image
  + Fixed cloudwatch endpoint for telemetry metrics requests
  + Fixed handling of Windows filepaths and mutex locks
  + Fixed agent worker handling of OS signals and termination channel requests
  + Updated datachannel retry strategy to not retry for a specific error scenario
  + Updated default gomaxproc value for Windows
  + Update build to use go1.16.6
- from version 3.1.127.0
  + Added a workaround for windows random halts
  + Fixed race condition during reboot document execution
- from version 3.1.90.0
  + Updated to version 3.1
  + Updated build to build statically linked binaries for linux 64bit
  * Minimum supported linux kernel version for linux 64bit is 3.2+
  + Fixed permissions for docker config file
  + Fixed issue with ubuntu prerm and postinst scripts
  + Fixed issue where processor stop was being called twice
- from version 3.0.1390.0
  + Added config option to delete orchestration folder
  + Added snapcraft packaging config
  + Added workaround for aws:runDocument status bug
  + Added improved handling of file closure
  + Added support for go mod and updated build to use go 1.16.4
  + Fixed bug parsing vpce s3 urls
  + Refactored use of agent identity in agent cli
  + Updated check if agent is running as windows service
  + Updated handling of session cancellation to still send output to client side
  + Updated interactive session exit code logic to match non-interactive mode
  + Updated vendor dependencies
- Update directory path for GOPATH</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1650542400">- Fix mangled ExlusiveArch field</changelog>
</package>
<package pkgid="ccf31da6a0a9250ff40d264fa84b396d05fbb95a1b2a638d8fb4bba676a860de" name="amazon-ssm-agent" arch="x86_64">
  <version epoch="0" ver="3.1.1260.0" rel="150000.5.9.2"/>
  <changelog author="sean.marlow@suse.com" date="1481889600">- Initial package 1.2.290.0 2016-07-20</changelog>
  <changelog author="sean.marlow@suse.com" date="1484827200">- Update to 2.0.663.0 2017-01-18
  - Added support for aws:softwareInventory plugin to upload
    inventory related log messages to S3
  - Added support for running Powershell on Linux
  - Added support for State Manager that automates the process of
    keeping your Amazon EC2 and hybrid infrastructure in a state that
    you define You can use State Manager to ensure that your instances
    are bootstrapped with specific software at startup, configured
    according to your security policy, joined to a Windows domain,
    or patched with specific software updates throughout their
    lifecycle
  - Added support for Systems Manager Inventory that allows you to
    specify the type of metadata to collect, the instances from
    where the metadata should be collected, and a schedule for
    metadata collection
  - Added support for installing, uninstalling, and updating AWS
    packages published by AWS
  - Added support for installing Docker on Windows and running
    Docker actions
  - Added support for Windows Server 2016
  - Added support for Windows Server Nano
  - Fixed CloudWatch crash issue
  - Fixed Domain Join to support customized OU
  - Fixed CloudWatch doesn't work with creating association from
    Console
  - Fixed SSM Agent not able to start on Windows Server 2003
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1487332800">- Update to 2.0.672.0 2017-02-17
  - Added bucket-owner-full-control ACL to S3 outputs to support
    cross-account upload
  - Standardized S3 result paths across plugins; commands append
    command-id/instance-id/plugin-name/step-id associations append
    instance-id/association-id/execution-date/plugin-name/step-id
  - step-id is the id field in plugin input if present and
    supported, otherwise the step name (in 2.0 schema documents),
    otherwise the plugin-name again
  - plugin-name and step-id have : characters removed
  - FreeBSD patches from external contributor
  - Various bug fixes</changelog>
  <changelog author="lchiquitto@suse.de" date="1488369600">- Add package to SLE-12 codestream (bsc#1017899, fate#322303)</changelog>
  <changelog author="sean.marlow@suse.com" date="1496232000">- Update to 2.0.790.0 2017-05-31 (bsc#1047581)
  - Added support for step-level preconditions
  - Added support for rate/interval based schedule expressions for
    associations
  - Added Summary and PackageID fields to inventory's
    aws:application gatherer
  - Changed inventory's aws:application gatherer to use
    win32_processor: addressWidth to detect OS architecture to
    avoid localization based errors
  - Fixed CloudWatch issue with large configuration
  - Fixed S3 upload when instance and bucket are not in the same
    region
  - Fixed bug that prevented native language AMIs (Japanese AMI)
    from launching Cloudwatch
  - Various bug fixes
- Update to 2.0.767.0 2017-05-31
  - Returning longer StandardOutput and StandardError from
    RunShellScript and RunPowerShellScript which show up in the
    results of GetCommandInvocation and the detailed output of
    ListCommandInvocation
  - Added Document v2.0 support for Run Command, which includes
    support for multiple actions of same plugin type
  - Various bug fixes
- Update to 2.0.755.0 2017-05-31
  - Fixed bugs that prevented CloudWatch from launching and allowed
    multiple instances of CloudWatch to launch on Windows
  - Various bug fixes
- Update to 2.0.730.0 2017-05-31
  - Fixed issues with agent starting before network is ready on
    systemd systems.
- Update to 2.0.716.0 2017-05-31
  - Pass proxy settings to domain join and CloudWatch
  - Added support for installing Docker on Linux
  - Removed the upper limit for the maximum number of parallel
    executing documents on the agent (previously the max was 10)
  - You can configure this number by setting the
    ?CommandWorkerLimit? attribute in amazon-ssm-agent.json file
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1503662400">- Add ssm-cli to package.
- Remove requirement on lsb-release. Agent now parses os-release
  by default.
- Use gzip archive from GitHub instead of converting to xz.
- Update to 2.0.922.0 2017-08-14 (bsc#1055766)
  + Added Raspbian support for armv6 to support Raspberry Pi
  + Various bug fixes
- Update to 2.0.913.0 2017-08-07
  + Updated golang/sys dependency to the latest
  + Increased run command document maximum execution timeout to 48 hours
  + Various bug fixes
- Update to 2.0.902.0 2017-07-31
  + Added support for uploading agent logs to CloudWatch for SSM Agent diagnostics
  + Added additional gatherers for inventory
  + Added configuration compliance support for association
  + Various bug fixes
- Update to 2.0.879.0 2017-07-26
  + Add capability to configure custom s3 endpoint for the agent
  + Various bug fixes
- Update to 2.0.847.0 2017-07-03
  + Various bug fixes
- Update to 2.0.842.0 2017-06-26
  + Added rollback support in aws:configurePackage
  + Various bug fixes
- Update to 2.0.834.0 2017-06-23
  + Various bug fixes
- Update to 2.0.805.0 2017-06-07
  + Added support for SLES (SUSE) (64-bit, v12 and above)
  + Various bug fixes
- Update to 2.0.796.0 2017-05-29
  + Linux platform version now based on os-release when available
  + Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="sean.marlow@suse.com" date="1521028800">- Update to 2.2.325.0 2018-03-07 (bsc#1085670)
  + Bug fix to change sourceHashType to be default sha256 on
    psmodule.
- Update to 2.2.257.0 2018-02-23
  + Bug fix to address an issue that can prevent the agent from
    processing associations after a restart.
- Update to 2.2.160.0 2018-01-15
  + Execute "pwsh" on linux when using runPowershellScript plugin.
- Update to 2.2.93.0 2017-11-14
  + Update to latest AWS SDK.
- Update to 2.2.58.0 2017-10-23
  + Switching to use Birdwatcher distribution service for AWS
    packages.</changelog>
  <changelog author="sean.marlow@suse.com" date="1551873600">- Update version patch.
- Update to 2.3.415.0 (2019-03-05)
  + Bug fix addressing issues in Distributor package upgrade
- Update to 2.3.372.0 (2019-03-05)
  + Bug fix to allow installation of Distributor packages that do
    not have a version name.
  + Bug fix for agent crash with message "WaitGroup is reused
    before previous Wait has returned".
- Update to 2.3.344.0 (2019-03-05)
  + Add frequent collector to detect changed inventory types and
    upload it to SSM service between two scheduled collections.
  + Change AWS Systems Manager Distributor to reduce calls to
    GetDocument by calling DescribeDocument.
  + Add exit code when ssm-cli execution fails.
  + Create ssm-user only after the control channel has been
    successfully created.
- Update to 2.3.274.0 (2019-03-05)
  + Enabled AWS Systems Manager Distributor that lets you securely
    distribute and install software packages.
  + Add support for the arm64 architecture on Amazon Linux 2,
    Ubuntu 16.04/18.04, and RHEL 7.6 to support EC2 A1 instances.
- Update to 2.3.235.0 (2019-03-05)
  + Bug fix for session manager logging on Windows
  + Bug fix for ConfigureCloudWatch plugin
  + Bug fix for update SSM agent occasionally failing due to SSM
    agent service stuck in starting state
- Update to 2.3.193.0 (2019-03-05)
  + Bug fix for past sessions occasionally stuck in terminating
    state
  + Darwin masquerades as Linux to bypass OS validation on the
    backend until official support can be added
- Update to 2.3.169.0 (2019-03-05)
  + Update managed instance role token more frequently
- Update to 2.3.136.0 (2019-03-05)
  + Bug fix for issue that GatherInventory throw out error when
    there is no Windows Update in instance
  + Add more filters when getting the Windows event logs at
    startup to improve performance
  + Add random jitter before call PutInventory in inventory
    datauploader
- Update to 2.3.117.0 (2019-03-05)
  + Bug fix for issues during process termination on instances
    where IAM policy does not grant ssmmessages permissions.
- Update to 2.3.101.0 (2019-03-05)
  + Bug fix to prevent defunct processes when creating the local
    user ssm-user.
  + Bug fix for sudoersFile permission to avoid "sudo" command
    warnings in Session Manager.
  + Disable hibernation on Windows platform if Cloudwatch
    configuration is present.
- Update to 2.3.68.0 (2019-03-05)
  + Enables the Session Manager capability that lets you manage
    your Amazon EC2 instance through an interactive one-click
    browser-based shell or through the AWS CLI.
  + Beginning this agent version, SSM Agent will create a local
    user "ssm-user" and either add it to /etc/sudoers (Linux) or
    to the Administrators group (Windows) every time the agent
    starts. The ssm-user is the default OS user when a Session
    Manager session is started, and the password for this user is
    reset on every session. You can change the permissions by
    moving the ssm-user to a less-privileged group or by changing
    the sudoers file. The ssm-user is not removed from the system
    when SSM Agent is uninstalled.
- Update to 2.3.13.0 (2019-03-05)
  + Bug fix for the SSM Agent service remaining in "Starting"
    state on Windows when unable to authenticate to the Systems
    Manager service.
- Update to 2.2.916.0 (2019-03-05)
  + Bug fix for missing cloudwatch.exe seen in SSM Agent version
    2.2.902.0
- Update to 2.2.902.0 (2019-03-05)
  + Initial support for developer builds on macOS
  + Retry sending Run Command execution results for up to 2 hours
  + More detailed error messages are returned for inventory plugin
    failures during State Manager association executions
- Update to 2.2.800.0 (2019-03-05)
  + Bug fix to clean the orchestration directory
  + Streaming AWS Systems Manager Run Command output to CloudWatch
    Logs
  + Reducing number of retries for serial port opening
  + Add retry logic to installation verification
- Update to 2.2.619.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.607.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.546.0 (2019-03-05)
  + Bug fix to retry sending document results if they couldn't
    reach the service
- Update to 2.2.493.0 (2019-03-05)
  + Added support for Ubuntu Snap packaging
  + Bug fix so that aws:downloadContent does not change permissions
    of directories
  + Bug fix to Cloudwatch plugin where StartType has duplicated
    Enabled value
- Update to 2.2.392.0 (2019-03-05)
  + Added support for agent hibernation so that Agent backs off or
    enters hibernation mode if it does not have access to the
    service
  + Various bug fixes
- Update to 2.2.355.0 (2019-03-05)
  + Fix S3Download to download from cross regions.
  + Various bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588248000">- Update to 2.3.978.0 (2020-04-08) (bsc#1170744)
  + Stop pty on receiving TerminateSession request
  + Add support for Debian arm64 architecture
  + Refactoring session log generation logic
- Update to 2.3.930.0  (2020-03-17)
  + Bug fix for CloudWatch agent version showing twice in Inventory console
  + Bug fix for retrieving minor version for CentOS7
  + Add snap appData collection for inventory in ubuntu 18
  + Add validation for contents of os release files
  + Add retry for fingerprint generation
- Update to 2.3.871.0 (2020-02-20)
  + Various bug fix for SSM Agent
- Update to 2.3.842.0 (2020-01-29)
  + Bug fix for updating document state file prior agent reboot
  + Add support to restart agent after SIGPIPE exit status
- Update to 2.3.814.0 (2020-01-16)
  + Bug fix for metadata service V2
  + Update Golang version 1.12 for travis
  + Optimize session manager retry logic
- Update to 2.3.786.0 (2019-12-19)
  + Add support for Oracle Linux v7.5 and v7.7
  + Bug fix for Inventory data provider to support special characters
  + Bug fix for SSM MDS service name
- Update to 2.3.772.0 (2019-12-13)
  + Upgrade AWS SDK
  + Add logging for fingerprint generation
- Update to 2.3.760.0 (2019-11-15)
  + Session manager supports handling of Task metadata
- Update to 2.3.758.0 (2019-11-11)
  + Add support to update SSM Distributor packages in place
- Update to 2.3.756.0 (2019-11-05)
  + Terminate port forwarding session on receiving TerminateSession flag
  + Bug fix to reload SSM client if region has not been initialize correctly
  + Bug fix for retrieval of user groups on Linux
- Update to 2.3.722.0 (2019-10-11)
  + Bug fix for the delay when registering non-EC2 on-prem instances
  + Bug fix for missing ACL when uploading logs to S3 buckets
  + Upgrade GoLang version from 1.9 to 1.12
- Update to 2.3.714.0 (2019-09-26)
  + For port forwarding session, close server connection when client drops it's connection
  + Bug fix for missing condition of rules from inventory registry
  + Update service domain information fetch logic from EC2 Metadata
- Update to 2.3.707.0 (2019-09-11)
  + Bug fix for characters dropping from session manager shell output
  + Bug fix for session manager freezing caused by non utf8 character
  + Switch the request protocol order for getting S3 Header
  + Keep port forwarding session open until session is terminated
- Update to 2.3.701.0 (2019-08-21)
  + Send platform type information in controlChannel input
- Update to 2.3.687.0 (2019-08-05)
  + Bug fix for runPowershellScript plugin on linux platform
  + Add support for document 2.x version to ssm-cli
- Update to 2.3.680.0 (2019-07-24)
  + Added a new Inventory gatherer AWS:BillingInfo which will gather the billing product ids for LicenseIncluded and Marketplace instance
- Update to 2.3.672.0 (2019-07-09)
  + Add Port plugin for SSH/SCP
  + Add support for Session Manager RunAs functionality on Linux platform
- Update to 2.3.668.0 (2019-07-01)
  + Add Session Manager InteractiveCommands plugin
  + Bug fix for log formatting issue for session manager
- Update to 2.3.662.0 (2019-06-19)
  + Bug fix for Session Manager when handling line endings on Windows platform
  + Bug fix for token validation for aws:downloadContent plugin
  + Check if log group exists before uploading Session Manager logs to CloudWatch
  + Bug fix for broken S3 urls when using custom documents
- Update to 2.3.634.0 (2019-05-28)
  + Disable appconfig to load credential from specific profile path, add EC2 credentials as the default fallback
  + Remove sudoers file creation logic if ssm-user already exists
  + Enable supplementary groups for ssm-user on Linux
- Update to 2.3.612.0 (2019-05-08)
  + Bug fix for UTF-8 encoded issue caused by locale activation on Ubuntu 16.04 instance
  + Refactor ssm-user creation logic
  + Bug fix for reporting IP address with wrong network interface
  + Update configure package document arn pattern
- Update to 2.3.542.0 (2019-04-18)
  + Bug fix for on-premises instance registration in CN region
- Update to 2.3.539.0 (2019-04-04)
  + Add support for further encryption of session data using AWS KMS
  + Bug fix for excessive instance-id fetching by document workers
- Update to 2.3.479.0 (2019-03-06)
  + Bug fix for downloading content failure caused by wrong S3 endpoint
  + Bug fix for reboot failure caused by session manager panic
  + Bug fix for session manager shell output dropping character
  + Bug fix for mgs endpoint configuration consistency
- Update to 2.3.444.0 (2019-02-10)
  + Updates to UpdateInstanceInformation call, Windows initialization
- Add patch to remove unused import
  + remove-unused-import.patch
- Refresh patches for new version
  + fix-version.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1590580800">- Update to 2.3.1205.0:
  * Updated the SSM Agent Snap to core18
  * Bug fix for expired in-progress documents being resumed
  * Bug fix for update specific files not being deleted after agent update is finished
  * Bug fix for cached manifest files not being deleted in the configurepackage plugin</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 3.0.1209.0 (bsc#1186239, bsc#1186262)
  + For detailed changes see RELEASENOTES.md
  + Drop fix-version.patch replaced by sed expression in spec file
  + Drop remove-unused-import.patch no longer included from upstream
  + Drop fix-config.patch all SUSE distros use systemd
  + Remove amazon-ssm-agent.service included in upstream source, use it
  + Move all binaries into sbin and fix the hard coded config path via sed</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624622400">- Update to version 3.0.1295.0
  + Added configurable custom identity and identity consumption order
  + Added cross-account domain join
  + Added cleanup for older versions of updater artifacts
  + Added a workaround for MacOS kernel bug that sometimes kept RunCommand from launching
  + Added a workaround for log file contention on Windows
  + Added synchronization to RunCommand service stop
  + Changed hibernation log level
  + MacOS executables are now signed
  + Removed delay in non-interactive session type</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1650456000">- Update to version 3.1.1260.0
  + Added missing check for invalid S3 path parameter
  + Added support for domain join using a non-local username
  + Fixed broken links in README.md
  + Fixed ECS Exec issue where agent was using environment variables for credentials
  + Updated Ec2Detector test to query smbios directly for system information
- from version 3.1.1208.0
  + Updated ec2detector module to use Get-CmiInstance instead of wmic.exe
  + Fixed file creation mode of ssm-agent-users sudoer file (bsc#1196556, CVE-2022-29527)
- from version 3.1.1188.0
  + Added new ec2detector module to determine if agent is on EC2
  + Added support for port forwarding to remote host
  + Added quotes around inventory parameter ValueName on Windows
  + Fix for domain join DNS IP assignments in shared directories
  + Replaced namedpipe updater test with ec2detector test
- from version 3.1.1141.0
  + Add application inventory by file for Bottlerocket
  + Fix infinite retry logic to send failed replies in MGSInteractor
  + Remove usage of io/fs package
- from version 3.1.1080.0
  + (windows only) Remove symlink scan during update
- from version 3.1.1045.0
  + Fixed sourceHash validation for aws:application document plugin
  + Added document parameter validation for values passed to target document of aws:runDocument plugin
  + (windows only) Fix process leak when legacy cloudwatch plugin is enabled
  + (windows only) Fail installation if C:\ProgramData\Amazon\SSM\ has symlinks
- from version 3.1.1004.0
  + Added platform detection for Bottlerocket OS
  + Consolidated regional endpoint generation to common endpoint module
- from version 3.1.941.0
  + Added support for Rocky linux
  + Fixed sharefile/shareprofile not being propagated to updateutil
  + Fixed incorrect darwin platform detection post BigSur
  + Fixed log flush issue in updater
  + Updated .NET dependencies for domainjoin and cloudwatch (windows only)
  + Updated go version to 1.17.6
- from version 3.1.821.0
  + Implement new core module named MessageService to start processing commands from both MGS and MDS
  * Merge functionalities from RunCommandService core module and Session core module.
  * Receive run command documents through MGS if connected and fallback to MDS otherwise.
    This functionality requires appropriate permissions for both endpoints and will be rolled
    out gradually to end users.
  * Provide filesystem based idempotency check to avoid duplicate run command document execution.
  * Increase default run command pool buffer size from 1 to 5 to load additional documents
    before-hand for processing.
  + Fix nil pointer deference panic produced in named pipe test case during agent update
  + Remove StopType concept in ssm-agent-worker and add different waits for reboot and shutdown stop
- from version 3.1.804.0
  + Add support for upstart when running get-diagnostic command using ssm-cli
  + Fix systemctl service name to support older versions of systemctl
  + Include changes to facilitate testing
  + Update DNS server selection logic for seamless domain join on linux and darwin
  + Update go version to go1.17.5
  + Update golang sys package dependency
- from version 3.1.715.0
  + Derive default directories from appconfig on Darwin
  + Set x-bit on newly-created directories
- from version 3.1.634.0
  + Fix for ssm-setup-cli to be able to select service manager without the agent being installed
- from version 3.1.630.0
  + Added greengrass component recipe for the new SystemsManagerAgent component
  + Added support for registering agent on a greengrass device
  + Added support for downloading more than 1000 objects in downloadContent
  + Fixed retry logic for onprem and s3 upload
  + Fixed unit tests when running on Mac
  + Update AWS SDK to v1.41.4
  + Update logic to retrieve platform details for Rocky Linux
- from version 3.1.501.0
  + Add diagnostics command to ssm-cli
  + Fix caching for onprem credentials
  + Additional configuration options for Seamless Domain Join
  + Gracefully exit session if group of runas user is modified
  + Skip retries for cert validation errors in S3 HEAD requests
  + Fix DNS failures on CentOS 8.2
  + Update several dependencies
- from version 3.1.459.0
  + Fixed a bug with powershell command for Inventory
- from version 3.1.426.0
  + Fixed cpu spike issue manifesting on snap
  + Fixed issue with version comparison in EC2Config update plugin
  + Fixed panic when command output was being truncated
  + Updated build to use go1.16.8
  + Removed Profile from inventory powershell commands on Windows
- from version 3.1.338.0
  + Fix to eliminate WaitGroup reuse panic triggered during agent reboot
  + Fix to include applications without UninstallString in Inventory for Windows
  + Fixed a bug where multi-plugin documents with large outputs would timeout RunCommand
  + Fixed a bug where RunCommand could delay executions for up to 15 minutes
- from version 3.1.282.0
  + Add serial port logging of AwsNitroEnclaves package version on windows during startup
  + Allow usage of existing loggroup/logstream when the user does not have create permission
  + Change service interrogate request log to debug
  + Cleanup old surveyor channel files on startup
  + Fix filehandle leak in windows leading to agent going offline
  + Fix to schedule correct next run time during orchestration directories cleanup
  + Fix to sequentially update correct runcount value in the document bookkeeping file
  + Fix a bug with version parsing EC2Config updater
  + Updated rpm packaging for fips compliance
- from version 3.1.192.0
  + Added darwin arm64 to makefile
  + Added logic to limit orchestration directory cleanup
  + Added packaging for public SSM Agent container image
  + Fixed cloudwatch endpoint for telemetry metrics requests
  + Fixed handling of Windows filepaths and mutex locks
  + Fixed agent worker handling of OS signals and termination channel requests
  + Updated datachannel retry strategy to not retry for a specific error scenario
  + Updated default gomaxproc value for Windows
  + Update build to use go1.16.6
- from version 3.1.127.0
  + Added a workaround for windows random halts
  + Fixed race condition during reboot document execution
- from version 3.1.90.0
  + Updated to version 3.1
  + Updated build to build statically linked binaries for linux 64bit
  * Minimum supported linux kernel version for linux 64bit is 3.2+
  + Fixed permissions for docker config file
  + Fixed issue with ubuntu prerm and postinst scripts
  + Fixed issue where processor stop was being called twice
- from version 3.0.1390.0
  + Added config option to delete orchestration folder
  + Added snapcraft packaging config
  + Added workaround for aws:runDocument status bug
  + Added improved handling of file closure
  + Added support for go mod and updated build to use go 1.16.4
  + Fixed bug parsing vpce s3 urls
  + Refactored use of agent identity in agent cli
  + Updated check if agent is running as windows service
  + Updated handling of session cancellation to still send output to client side
  + Updated interactive session exit code logic to match non-interactive mode
  + Updated vendor dependencies
- Update directory path for GOPATH</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1650542400">- Fix mangled ExlusiveArch field</changelog>
</package>
<package pkgid="bdb195933933d68fe04f47001cabced6ab7066d962336e9fdfa9e307b1ef5dc2" name="ant" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="209a6f728459ff139aaa5deea7c4c4e25725785ce56bb2a6eb579d1e9aae37b3" name="ant" arch="src">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="f5e23bb414b97be6b667653f54a126ab2f608b1a551b86240e4bd93273e95856" name="ant-antlr" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="68366a60d7748bcade62740a352ca02ad43934250f1dceae332cfb28a318c666" name="ant-antlr" arch="src">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="d8e5a91a74a39e207641450337bacab9f24a2b917856cc51e280f39efb0674f0" name="ant-apache-bcel" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="af2654682bbb8582ab1716b2ad3cf2935f1676e54f672d2619ca75d3c9d08e39" name="ant-apache-bsf" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="71c1e2c5ef14b39a49631c259385ac5603674eef45a462f46f79d7a01186b662" name="ant-apache-log4j" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="4b2760e6aa0d61b414d6a02775ede5c7340f410fd03d4867969ff3eee57de1c0" name="ant-apache-oro" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="ea9e04369123aad228ae77fbcce3378f326778044682ab23f3146b6456714907" name="ant-apache-regexp" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="f29550da110f1e94628fc229a8cd7fa5d37db3f60b591d966f90fe400dc37af7" name="ant-apache-resolver" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="4080d4c36f41ce8932f49b433edb790a8269a6088637fce4eaabf86ede59717c" name="ant-apache-xalan2" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="1b6f6cb96bb146ea204dcdecd958a9ebe275f38794d085a570f4bc4ae675e9b9" name="ant-commons-logging" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="8677ddb10fdae4eaf2c3397afa88f1dbd3863b57aa561fdbd3f3f19aff08b1be" name="ant-commons-net" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="8cccccc7832a0dfd89d00ddaab52d62913c16041b403f8baac390ea7bde1e0ff" name="ant-imageio" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="b17760595254b468e4c1935e99d3997aa904d39843db1e53a82e4ae4332abbe2" name="ant-javamail" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="cae5586dd598a8629fe39af2dd3e9dc68c961d37180eef7f253ba740c41526d6" name="ant-jdepend" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="917f1a2286f6d69304e3286de30024a28d0fb3790d225cb31929634a2330e9e4" name="ant-jmf" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="0c466c25d4382abfee2f6ddc433cbf7bcc08477a04501a6cccdf514c55587f5b" name="ant-jsch" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="f58f06cca742b7f03fbc9782467761bd1db6ecb4b6c3cd7f09af8b2005d9eb97" name="ant-junit" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="8deaaff548a20fe85c4aca9e9dda19060987a37fa6b0a2a4f3a65c5a8c63c845" name="ant-junit" arch="src">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="5f8e7bcf63e490fe38902255da966bd5896b50ca15e23616b47d817839534fea" name="ant-junit5" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="3c3d41c558150abfb3877d608d51b29d83c5d7e1a2d8ba236898baa76edf1b3a" name="ant-junit5" arch="src">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="6a516b547ce6dd3cf12368adde5b0fb733895b193d004cafb54d63b7914cb0ad" name="ant-manual" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="27fa425f9b455fe3bf41e0b47e9a903a09dd6f60caa2e3171704c56e6a14487c" name="ant-scripts" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="ee24dab757e1db0c19aa517a8f03d7baab5904c381a5af70602e1fbc481cfb93" name="ant-swing" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="349b3520f0a2a01d83873afd49c7164c1c8f1b15b952fdec7dfb5daf9e0e0c7b" name="ant-testutil" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="0c4b3ecb07a7d5b2ae428b3aee356a2b4ceabe3d2a105b303584cc3ac2995efa" name="ant-xz" arch="noarch">
  <version epoch="0" ver="1.10.7" rel="150200.4.6.1"/>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility
- Modified patch:
  * apache-ant-1.9.9-sourcetarget.patch
  - Build with source/target 8</changelog>
  <changelog author="jsikes@suse.de" date="1535112000">- Update to 1.9.13
  * Fixes a regression in the "get" task where redirects
    from a HTTP resource to a HTTPS resource started throwing
    an exception.
    Bugzilla Report 62499
  * the new allowFilesToEscapeDest didn't work when set to false and
    archive entries contained relative paths with so many ".."
    segnments that the resulting path would go beyond the file system
    root.
    Bugzilla Report 62502, bsc#1100053, CVE-2018-10886</changelog>
  <changelog author="fstrba@suse.com" date="1539777600">- Require javapackages-local in order to generate correctly the
  maven requires and provides
- Install maven artifacts</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1540123200">- Add reproducible-build-manifest.patch: Use less detailed version
  string for manifest's "Created-by" field (boo#1110024).</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1540555200">- Update to 1.10.5 [bsc#1113136]
  * Same version as in 1.9.13 but with additional features and
    requires Java8 or higher.
  * Dropped patch to build with java8+ already fixed in this version
  - apache-ant-1.9.9-sourcetarget.patch
  * Refreshed patch:
  - apache-ant-class-path-in-manifest.patch</changelog>
  <changelog author="fstrba@suse.com" date="1540987200">- Add aliases to some maven artifacts so that packages out there
  resolve then correctly</changelog>
  <changelog author="fstrba@suse.com" date="1543233600">- Let ant-antlr provide ant-xz too, since it contains the
  corresponding jar.</changelog>
  <changelog author="fstrba@suse.com" date="1544443200">- Don't build against a particular xml-apis/xml-resolver provider,
  but against the generic virtual provider. This allows easier
  bootstrapping.
- Added patch:
  * apache-ant-xml-apis.patch
    + look for the xml-apis.jar and xml-resolver.jar when composing
    classpath; they are symlinks provided by several packages.</changelog>
  <changelog author="fstrba@suse.com" date="1549022400">- Build ant against xml-commons-apis-bootstrap and
  xml-commons-resolver-bootstrap in order to break build cycle</changelog>
  <changelog author="fstrba@suse.com" date="1549368000">- BuildRequire hamcrest for ant-junit and ant-antlr, since junit4
  depends strictly on hamcrest-core only.</changelog>
  <changelog author="fstrba@suse.com" date="1549627200">- Add compatibility links ant/ant*.jar for bootstrap build</changelog>
  <changelog author="fstrba@suse.com" date="1549627201">- Create an ant-junit5 package to build junit5 optional tasks
  when they become resolved
- Add a simple pom file for ant-bootstrap.jar</changelog>
  <changelog author="jengelh@inai.de" date="1552910400">- Make "if" statements in build recipe POSIX sh compatible.</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Require directly xerces-j2 and not its virtual provide
  jaxp_parser_impl</changelog>
  <changelog author="fstrba@suse.com" date="1569844800">- Remove references to parent poms from all artifacts and do not
  distribute the ant-parent, since we don't need it</changelog>
  <changelog author="fstrba@suse.com" date="1569931200">- Build against the new compatibility packages log4j12/log4j12-mini</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 1.10.7
- Modified patches:
  * apache-ant-bootstrap.patch
  * apache-ant-no-test-jar.patch
  * apache-ant-xml-apis.patch
  * reproducible-build-manifest.patch
    + rediff
- Fix ant-xz.jar to be non-empty and split it from the ant-antlr
  package</changelog>
  <changelog author="fstrba@suse.com" date="1579003200">- Use xml-commons-apis-bootstrap as jar in classpath instead of
  the common xml-apis jar, since we are forcing build against
  the bootstrap package</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1589544000">- Security fix: [bsc#1171696, CVE-2020-1945]
  * Insecure temporary file vulnerability
- Add patches:
  * ant-CVE-2020-1945-1.patch ant-CVE-2020-1945-2.patch
  * ant-CVE-2020-1945-3.patch ant-CVE-2020-1945-4.patch
  * ant-CVE-2020-1945-5.patch</changelog>
  <changelog author="david.anes@suse.com" date="1648468800">- Security fixes:
  * [CVE-2021-36373, bsc#1188468] excessive memory allocation when
  reading a specially crafted TAR archive
  * [CVE-2021-36374, bsc#1188469] excessive memory allocation when
  reading a specially crafted ZIP archive or a derived formats
- Add patches:
  * ant-CVE-2021-36373-and-CVE-2021-36374.patch</changelog>
</package>
<package pkgid="545cb05cfda1f55af5ee8557a01d65d54137f55b2f42319bd4528ad9ff8427ec" name="apache2-mod_auth_mellon" arch="aarch64">
  <version epoch="0" ver="0.17.0" rel="150200.5.7.1"/>
  <changelog author="kstreitova@suse.com" date="1588075200">- initial packaging</changelog>
  <changelog author="kstreitova@suse.com" date="1589198400">- replace version_path with the fixed value</changelog>
  <changelog author="kstreitova@suse.com" date="1591272000">- update mod_auth_mellon-0.16.0-env-script-interpreter.patch
  use /bin/bash instead of /usr/bin/bash</changelog>
  <changelog author="kstreitova@suse.com" date="1599739200">- Update to 0.17.0
  * New option MellonSendExpectHeader (default On) which allows to
    disable sending the Expect header in the HTTP-Artifact binding to
    improve performance when the remote party does not support this
    header.
  * Set SameSite attribute to None on on the cookietest cookie.
  * Bump default generated keysize to 3072 bits in
    mellon_create_metadata
  * Validate if the assertion ID has not been used earlier before
    creating a new session.
  * Release session cache after calling invalidate endpoint.
  * In MellonCond directives, fix a bug that setting the NC option
    would also activate substring match and that REG would activate
    REF.
  * Fix MellonCond substring match to actually match the substring on
    the attribute value</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905600">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905601">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
</package>
<package pkgid="63369427456ad4caef5de5de7a2a5c458ca16843f23042b3013d984c7b6e8e4f" name="apache2-mod_auth_mellon" arch="ppc64le">
  <version epoch="0" ver="0.17.0" rel="150200.5.7.1"/>
  <changelog author="kstreitova@suse.com" date="1588075200">- initial packaging</changelog>
  <changelog author="kstreitova@suse.com" date="1589198400">- replace version_path with the fixed value</changelog>
  <changelog author="kstreitova@suse.com" date="1591272000">- update mod_auth_mellon-0.16.0-env-script-interpreter.patch
  use /bin/bash instead of /usr/bin/bash</changelog>
  <changelog author="kstreitova@suse.com" date="1599739200">- Update to 0.17.0
  * New option MellonSendExpectHeader (default On) which allows to
    disable sending the Expect header in the HTTP-Artifact binding to
    improve performance when the remote party does not support this
    header.
  * Set SameSite attribute to None on on the cookietest cookie.
  * Bump default generated keysize to 3072 bits in
    mellon_create_metadata
  * Validate if the assertion ID has not been used earlier before
    creating a new session.
  * Release session cache after calling invalidate endpoint.
  * In MellonCond directives, fix a bug that setting the NC option
    would also activate substring match and that REG would activate
    REF.
  * Fix MellonCond substring match to actually match the substring on
    the attribute value</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905600">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905601">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
</package>
<package pkgid="1fad638b2be66dc647624d911e008c9fade06b40949e082b3416d172c5565d47" name="apache2-mod_auth_mellon" arch="s390x">
  <version epoch="0" ver="0.17.0" rel="150200.5.7.1"/>
  <changelog author="kstreitova@suse.com" date="1588075200">- initial packaging</changelog>
  <changelog author="kstreitova@suse.com" date="1589198400">- replace version_path with the fixed value</changelog>
  <changelog author="kstreitova@suse.com" date="1591272000">- update mod_auth_mellon-0.16.0-env-script-interpreter.patch
  use /bin/bash instead of /usr/bin/bash</changelog>
  <changelog author="kstreitova@suse.com" date="1599739200">- Update to 0.17.0
  * New option MellonSendExpectHeader (default On) which allows to
    disable sending the Expect header in the HTTP-Artifact binding to
    improve performance when the remote party does not support this
    header.
  * Set SameSite attribute to None on on the cookietest cookie.
  * Bump default generated keysize to 3072 bits in
    mellon_create_metadata
  * Validate if the assertion ID has not been used earlier before
    creating a new session.
  * Release session cache after calling invalidate endpoint.
  * In MellonCond directives, fix a bug that setting the NC option
    would also activate substring match and that REG would activate
    REF.
  * Fix MellonCond substring match to actually match the substring on
    the attribute value</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905600">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905601">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
</package>
<package pkgid="a58af25c76528322c7f166fad8994bd692315ba188ea7dd8a3d1d1604ca80dcf" name="apache2-mod_auth_mellon" arch="src">
  <version epoch="0" ver="0.17.0" rel="150200.5.7.1"/>
  <changelog author="kstreitova@suse.com" date="1588075200">- initial packaging</changelog>
  <changelog author="kstreitova@suse.com" date="1589198400">- replace version_path with the fixed value</changelog>
  <changelog author="kstreitova@suse.com" date="1591272000">- update mod_auth_mellon-0.16.0-env-script-interpreter.patch
  use /bin/bash instead of /usr/bin/bash</changelog>
  <changelog author="kstreitova@suse.com" date="1599739200">- Update to 0.17.0
  * New option MellonSendExpectHeader (default On) which allows to
    disable sending the Expect header in the HTTP-Artifact binding to
    improve performance when the remote party does not support this
    header.
  * Set SameSite attribute to None on on the cookietest cookie.
  * Bump default generated keysize to 3072 bits in
    mellon_create_metadata
  * Validate if the assertion ID has not been used earlier before
    creating a new session.
  * Release session cache after calling invalidate endpoint.
  * In MellonCond directives, fix a bug that setting the NC option
    would also activate substring match and that REG would activate
    REF.
  * Fix MellonCond substring match to actually match the substring on
    the attribute value</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905600">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905601">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
</package>
<package pkgid="b712cc8fed15b282a884d9d2dd0d987f9956c3fe7f337d670b42826d8928a003" name="apache2-mod_auth_mellon" arch="x86_64">
  <version epoch="0" ver="0.17.0" rel="150200.5.7.1"/>
  <changelog author="kstreitova@suse.com" date="1588075200">- initial packaging</changelog>
  <changelog author="kstreitova@suse.com" date="1589198400">- replace version_path with the fixed value</changelog>
  <changelog author="kstreitova@suse.com" date="1591272000">- update mod_auth_mellon-0.16.0-env-script-interpreter.patch
  use /bin/bash instead of /usr/bin/bash</changelog>
  <changelog author="kstreitova@suse.com" date="1599739200">- Update to 0.17.0
  * New option MellonSendExpectHeader (default On) which allows to
    disable sending the Expect header in the HTTP-Artifact binding to
    improve performance when the remote party does not support this
    header.
  * Set SameSite attribute to None on on the cookietest cookie.
  * Bump default generated keysize to 3072 bits in
    mellon_create_metadata
  * Validate if the assertion ID has not been used earlier before
    creating a new session.
  * Release session cache after calling invalidate endpoint.
  * In MellonCond directives, fix a bug that setting the NC option
    would also activate substring match and that REG would activate
    REF.
  * Fix MellonCond substring match to actually match the substring on
    the attribute value</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905600">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905601">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
</package>
<package pkgid="5a3cde485177a716bb1edd1a3d686f9cfbebb5cc5cbf687c766da815579f27e5" name="apache2-mod_auth_mellon-diagnostics" arch="aarch64">
  <version epoch="0" ver="0.17.0" rel="150200.5.7.1"/>
  <changelog author="kstreitova@suse.com" date="1588075200">- initial packaging</changelog>
  <changelog author="kstreitova@suse.com" date="1589198400">- replace version_path with the fixed value</changelog>
  <changelog author="kstreitova@suse.com" date="1591272000">- update mod_auth_mellon-0.16.0-env-script-interpreter.patch
  use /bin/bash instead of /usr/bin/bash</changelog>
  <changelog author="kstreitova@suse.com" date="1599739200">- Update to 0.17.0
  * New option MellonSendExpectHeader (default On) which allows to
    disable sending the Expect header in the HTTP-Artifact binding to
    improve performance when the remote party does not support this
    header.
  * Set SameSite attribute to None on on the cookietest cookie.
  * Bump default generated keysize to 3072 bits in
    mellon_create_metadata
  * Validate if the assertion ID has not been used earlier before
    creating a new session.
  * Release session cache after calling invalidate endpoint.
  * In MellonCond directives, fix a bug that setting the NC option
    would also activate substring match and that REG would activate
    REF.
  * Fix MellonCond substring match to actually match the substring on
    the attribute value</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905600">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905601">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
</package>
<package pkgid="f449c5b37f051a5b7f0db041c96e2c7f2c50a9fcf83ee933df211dd953e5e0f0" name="apache2-mod_auth_mellon-diagnostics" arch="ppc64le">
  <version epoch="0" ver="0.17.0" rel="150200.5.7.1"/>
  <changelog author="kstreitova@suse.com" date="1588075200">- initial packaging</changelog>
  <changelog author="kstreitova@suse.com" date="1589198400">- replace version_path with the fixed value</changelog>
  <changelog author="kstreitova@suse.com" date="1591272000">- update mod_auth_mellon-0.16.0-env-script-interpreter.patch
  use /bin/bash instead of /usr/bin/bash</changelog>
  <changelog author="kstreitova@suse.com" date="1599739200">- Update to 0.17.0
  * New option MellonSendExpectHeader (default On) which allows to
    disable sending the Expect header in the HTTP-Artifact binding to
    improve performance when the remote party does not support this
    header.
  * Set SameSite attribute to None on on the cookietest cookie.
  * Bump default generated keysize to 3072 bits in
    mellon_create_metadata
  * Validate if the assertion ID has not been used earlier before
    creating a new session.
  * Release session cache after calling invalidate endpoint.
  * In MellonCond directives, fix a bug that setting the NC option
    would also activate substring match and that REG would activate
    REF.
  * Fix MellonCond substring match to actually match the substring on
    the attribute value</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905600">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905601">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
</package>
<package pkgid="287e5bbb635b6dbc8be86977b31e1b26c69b7c13bae2f2c745fa1b03d235f37a" name="apache2-mod_auth_mellon-diagnostics" arch="s390x">
  <version epoch="0" ver="0.17.0" rel="150200.5.7.1"/>
  <changelog author="kstreitova@suse.com" date="1588075200">- initial packaging</changelog>
  <changelog author="kstreitova@suse.com" date="1589198400">- replace version_path with the fixed value</changelog>
  <changelog author="kstreitova@suse.com" date="1591272000">- update mod_auth_mellon-0.16.0-env-script-interpreter.patch
  use /bin/bash instead of /usr/bin/bash</changelog>
  <changelog author="kstreitova@suse.com" date="1599739200">- Update to 0.17.0
  * New option MellonSendExpectHeader (default On) which allows to
    disable sending the Expect header in the HTTP-Artifact binding to
    improve performance when the remote party does not support this
    header.
  * Set SameSite attribute to None on on the cookietest cookie.
  * Bump default generated keysize to 3072 bits in
    mellon_create_metadata
  * Validate if the assertion ID has not been used earlier before
    creating a new session.
  * Release session cache after calling invalidate endpoint.
  * In MellonCond directives, fix a bug that setting the NC option
    would also activate substring match and that REG would activate
    REF.
  * Fix MellonCond substring match to actually match the substring on
    the attribute value</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905600">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905601">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
</package>
<package pkgid="880d310db3995b0a5b0731c10c77a96e2f625cf2984eb942921d33eca80cb92a" name="apache2-mod_auth_mellon-diagnostics" arch="x86_64">
  <version epoch="0" ver="0.17.0" rel="150200.5.7.1"/>
  <changelog author="kstreitova@suse.com" date="1588075200">- initial packaging</changelog>
  <changelog author="kstreitova@suse.com" date="1589198400">- replace version_path with the fixed value</changelog>
  <changelog author="kstreitova@suse.com" date="1591272000">- update mod_auth_mellon-0.16.0-env-script-interpreter.patch
  use /bin/bash instead of /usr/bin/bash</changelog>
  <changelog author="kstreitova@suse.com" date="1599739200">- Update to 0.17.0
  * New option MellonSendExpectHeader (default On) which allows to
    disable sending the Expect header in the HTTP-Artifact binding to
    improve performance when the remote party does not support this
    header.
  * Set SameSite attribute to None on on the cookietest cookie.
  * Bump default generated keysize to 3072 bits in
    mellon_create_metadata
  * Validate if the assertion ID has not been used earlier before
    creating a new session.
  * Release session cache after calling invalidate endpoint.
  * In MellonCond directives, fix a bug that setting the NC option
    would also activate substring match and that REG would activate
    REF.
  * Fix MellonCond substring match to actually match the substring on
    the attribute value</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905600">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905601">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
</package>
<package pkgid="2e8a13c913be6a887195b2eb51f97062f4d97317f62dc207db684d5ff424cb14" name="apache2-mod_auth_mellon-doc" arch="aarch64">
  <version epoch="0" ver="0.17.0" rel="150200.5.7.1"/>
  <changelog author="kstreitova@suse.com" date="1588075200">- initial packaging</changelog>
  <changelog author="kstreitova@suse.com" date="1589198400">- replace version_path with the fixed value</changelog>
  <changelog author="kstreitova@suse.com" date="1591272000">- update mod_auth_mellon-0.16.0-env-script-interpreter.patch
  use /bin/bash instead of /usr/bin/bash</changelog>
  <changelog author="kstreitova@suse.com" date="1599739200">- Update to 0.17.0
  * New option MellonSendExpectHeader (default On) which allows to
    disable sending the Expect header in the HTTP-Artifact binding to
    improve performance when the remote party does not support this
    header.
  * Set SameSite attribute to None on on the cookietest cookie.
  * Bump default generated keysize to 3072 bits in
    mellon_create_metadata
  * Validate if the assertion ID has not been used earlier before
    creating a new session.
  * Release session cache after calling invalidate endpoint.
  * In MellonCond directives, fix a bug that setting the NC option
    would also activate substring match and that REG would activate
    REF.
  * Fix MellonCond substring match to actually match the substring on
    the attribute value</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905600">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905601">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
</package>
<package pkgid="08168788705ac25e17511261fbca5033ce9fb4e8fae3bc7148420d73d44c08d1" name="apache2-mod_auth_mellon-doc" arch="ppc64le">
  <version epoch="0" ver="0.17.0" rel="150200.5.7.1"/>
  <changelog author="kstreitova@suse.com" date="1588075200">- initial packaging</changelog>
  <changelog author="kstreitova@suse.com" date="1589198400">- replace version_path with the fixed value</changelog>
  <changelog author="kstreitova@suse.com" date="1591272000">- update mod_auth_mellon-0.16.0-env-script-interpreter.patch
  use /bin/bash instead of /usr/bin/bash</changelog>
  <changelog author="kstreitova@suse.com" date="1599739200">- Update to 0.17.0
  * New option MellonSendExpectHeader (default On) which allows to
    disable sending the Expect header in the HTTP-Artifact binding to
    improve performance when the remote party does not support this
    header.
  * Set SameSite attribute to None on on the cookietest cookie.
  * Bump default generated keysize to 3072 bits in
    mellon_create_metadata
  * Validate if the assertion ID has not been used earlier before
    creating a new session.
  * Release session cache after calling invalidate endpoint.
  * In MellonCond directives, fix a bug that setting the NC option
    would also activate substring match and that REG would activate
    REF.
  * Fix MellonCond substring match to actually match the substring on
    the attribute value</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905600">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905601">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
</package>
<package pkgid="b1b02413ac3641e0e12637780711ddbc8600dab35633c2000e8f0e33c2fac53f" name="apache2-mod_auth_mellon-doc" arch="s390x">
  <version epoch="0" ver="0.17.0" rel="150200.5.7.1"/>
  <changelog author="kstreitova@suse.com" date="1588075200">- initial packaging</changelog>
  <changelog author="kstreitova@suse.com" date="1589198400">- replace version_path with the fixed value</changelog>
  <changelog author="kstreitova@suse.com" date="1591272000">- update mod_auth_mellon-0.16.0-env-script-interpreter.patch
  use /bin/bash instead of /usr/bin/bash</changelog>
  <changelog author="kstreitova@suse.com" date="1599739200">- Update to 0.17.0
  * New option MellonSendExpectHeader (default On) which allows to
    disable sending the Expect header in the HTTP-Artifact binding to
    improve performance when the remote party does not support this
    header.
  * Set SameSite attribute to None on on the cookietest cookie.
  * Bump default generated keysize to 3072 bits in
    mellon_create_metadata
  * Validate if the assertion ID has not been used earlier before
    creating a new session.
  * Release session cache after calling invalidate endpoint.
  * In MellonCond directives, fix a bug that setting the NC option
    would also activate substring match and that REG would activate
    REF.
  * Fix MellonCond substring match to actually match the substring on
    the attribute value</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905600">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905601">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
</package>
<package pkgid="53f98c5ce5ddddfddc63f897931fa199ca2644fcb8a457d089dcb91a77540412" name="apache2-mod_auth_mellon-doc" arch="x86_64">
  <version epoch="0" ver="0.17.0" rel="150200.5.7.1"/>
  <changelog author="kstreitova@suse.com" date="1588075200">- initial packaging</changelog>
  <changelog author="kstreitova@suse.com" date="1589198400">- replace version_path with the fixed value</changelog>
  <changelog author="kstreitova@suse.com" date="1591272000">- update mod_auth_mellon-0.16.0-env-script-interpreter.patch
  use /bin/bash instead of /usr/bin/bash</changelog>
  <changelog author="kstreitova@suse.com" date="1599739200">- Update to 0.17.0
  * New option MellonSendExpectHeader (default On) which allows to
    disable sending the Expect header in the HTTP-Artifact binding to
    improve performance when the remote party does not support this
    header.
  * Set SameSite attribute to None on on the cookietest cookie.
  * Bump default generated keysize to 3072 bits in
    mellon_create_metadata
  * Validate if the assertion ID has not been used earlier before
    creating a new session.
  * Release session cache after calling invalidate endpoint.
  * In MellonCond directives, fix a bug that setting the NC option
    would also activate substring match and that REG would activate
    REF.
  * Fix MellonCond substring match to actually match the substring on
    the attribute value</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905600">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1627905601">- Fix CVE-2021-3639 Open Redirect vulnerability in logout URLs
  (CVE-2021-3639, bsc#1188926)
  * fix-CVE-2021-3639.patch</changelog>
</package>
<package pkgid="a59410f069aa0f56dd21e0d3cd0acf9b10090d268bd461e9be3e98c33baee8da" name="apache2-mod_php7" arch="aarch64">
  <version epoch="0" ver="7.4.25" rel="150400.4.3.1"/>
  <changelog author="suse+build@de-korte.org" date="1610539200">- install php7-cli if no sapi is selected upon php7 installation
- add conflicts with earlier version of php-cli, php-fastcgi and
  php-fpm</changelog>
  <changelog author="suse+build@de-korte.org" date="1610712000">- deleted patch (redundant cast, both sides are already signed int)
  - php-odbc-cmp-int-cast.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1610884800">- add php_cfgdir and php_extdir macros</changelog>
  <changelog author="suse+build@de-korte.org" date="1611403200">- require this PHP version of subpackages in Recommends/Suggests
- run apache-rex tests in php7:test as packages need to be build
  first (otherwise tests run with previous version)</changelog>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add versioning to php-sapi as well</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 7.4.15: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.15
- suppress warning for all flavors not equal to "" in multibuild
  % php7.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 7.4.16: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.16</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619784000">- updated to 7.4.18: This is a security bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.18</changelog>
  <changelog author="suse+build@de-korte.org" date="1620302400">- updated to 7.4.19: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 7.4.18.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 7.4.20: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.20</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 7.4.21: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.21</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 7.4.22: This is a security and bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.22</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 7.4.23: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.23</changelog>
  <changelog author="pgajdos@suse.com" date="1631707200">- added patches
  https://github.com/php/php-src/commit/b3646440b1808abf0874b6f89027ce53ec5da03f
  + php7-gd-removed-unused-constants.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
</package>
<package pkgid="c0c0c1b05895b89bbc48c52e7782f1cc257d253d2787d7a640469ba627877f52" name="apache2-mod_php7" arch="ppc64le">
  <version epoch="0" ver="7.4.25" rel="150400.4.3.1"/>
  <changelog author="suse+build@de-korte.org" date="1610539200">- install php7-cli if no sapi is selected upon php7 installation
- add conflicts with earlier version of php-cli, php-fastcgi and
  php-fpm</changelog>
  <changelog author="suse+build@de-korte.org" date="1610712000">- deleted patch (redundant cast, both sides are already signed int)
  - php-odbc-cmp-int-cast.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1610884800">- add php_cfgdir and php_extdir macros</changelog>
  <changelog author="suse+build@de-korte.org" date="1611403200">- require this PHP version of subpackages in Recommends/Suggests
- run apache-rex tests in php7:test as packages need to be build
  first (otherwise tests run with previous version)</changelog>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add versioning to php-sapi as well</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 7.4.15: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.15
- suppress warning for all flavors not equal to "" in multibuild
  % php7.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 7.4.16: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.16</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619784000">- updated to 7.4.18: This is a security bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.18</changelog>
  <changelog author="suse+build@de-korte.org" date="1620302400">- updated to 7.4.19: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 7.4.18.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 7.4.20: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.20</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 7.4.21: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.21</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 7.4.22: This is a security and bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.22</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 7.4.23: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.23</changelog>
  <changelog author="pgajdos@suse.com" date="1631707200">- added patches
  https://github.com/php/php-src/commit/b3646440b1808abf0874b6f89027ce53ec5da03f
  + php7-gd-removed-unused-constants.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
</package>
<package pkgid="ebede110ef2bc406f9033527073038f1e9cda2b817cb34190c033914b1cc3dda" name="apache2-mod_php7" arch="s390x">
  <version epoch="0" ver="7.4.25" rel="150400.4.3.1"/>
  <changelog author="suse+build@de-korte.org" date="1610539200">- install php7-cli if no sapi is selected upon php7 installation
- add conflicts with earlier version of php-cli, php-fastcgi and
  php-fpm</changelog>
  <changelog author="suse+build@de-korte.org" date="1610712000">- deleted patch (redundant cast, both sides are already signed int)
  - php-odbc-cmp-int-cast.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1610884800">- add php_cfgdir and php_extdir macros</changelog>
  <changelog author="suse+build@de-korte.org" date="1611403200">- require this PHP version of subpackages in Recommends/Suggests
- run apache-rex tests in php7:test as packages need to be build
  first (otherwise tests run with previous version)</changelog>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add versioning to php-sapi as well</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 7.4.15: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.15
- suppress warning for all flavors not equal to "" in multibuild
  % php7.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 7.4.16: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.16</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619784000">- updated to 7.4.18: This is a security bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.18</changelog>
  <changelog author="suse+build@de-korte.org" date="1620302400">- updated to 7.4.19: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 7.4.18.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 7.4.20: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.20</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 7.4.21: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.21</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 7.4.22: This is a security and bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.22</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 7.4.23: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.23</changelog>
  <changelog author="pgajdos@suse.com" date="1631707200">- added patches
  https://github.com/php/php-src/commit/b3646440b1808abf0874b6f89027ce53ec5da03f
  + php7-gd-removed-unused-constants.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
</package>
<package pkgid="db19aed545e9c1c21be56d61f0b7dc6aa1bb5d0343c79c530a8a2d5f305d6dab" name="apache2-mod_php7" arch="src">
  <version epoch="0" ver="7.4.25" rel="150400.4.3.1"/>
  <changelog author="suse+build@de-korte.org" date="1610539200">- install php7-cli if no sapi is selected upon php7 installation
- add conflicts with earlier version of php-cli, php-fastcgi and
  php-fpm</changelog>
  <changelog author="suse+build@de-korte.org" date="1610712000">- deleted patch (redundant cast, both sides are already signed int)
  - php-odbc-cmp-int-cast.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1610884800">- add php_cfgdir and php_extdir macros</changelog>
  <changelog author="suse+build@de-korte.org" date="1611403200">- require this PHP version of subpackages in Recommends/Suggests
- run apache-rex tests in php7:test as packages need to be build
  first (otherwise tests run with previous version)</changelog>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add versioning to php-sapi as well</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 7.4.15: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.15
- suppress warning for all flavors not equal to "" in multibuild
  % php7.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 7.4.16: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.16</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619784000">- updated to 7.4.18: This is a security bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.18</changelog>
  <changelog author="suse+build@de-korte.org" date="1620302400">- updated to 7.4.19: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 7.4.18.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 7.4.20: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.20</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 7.4.21: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.21</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 7.4.22: This is a security and bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.22</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 7.4.23: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.23</changelog>
  <changelog author="pgajdos@suse.com" date="1631707200">- added patches
  https://github.com/php/php-src/commit/b3646440b1808abf0874b6f89027ce53ec5da03f
  + php7-gd-removed-unused-constants.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
</package>
<package pkgid="0a65a11e0872b2bf3a464d22fe4f20b3ab31f4d2cf61a9515bd832891acc5967" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.4.25" rel="150400.4.3.1"/>
  <changelog author="suse+build@de-korte.org" date="1610539200">- install php7-cli if no sapi is selected upon php7 installation
- add conflicts with earlier version of php-cli, php-fastcgi and
  php-fpm</changelog>
  <changelog author="suse+build@de-korte.org" date="1610712000">- deleted patch (redundant cast, both sides are already signed int)
  - php-odbc-cmp-int-cast.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1610884800">- add php_cfgdir and php_extdir macros</changelog>
  <changelog author="suse+build@de-korte.org" date="1611403200">- require this PHP version of subpackages in Recommends/Suggests
- run apache-rex tests in php7:test as packages need to be build
  first (otherwise tests run with previous version)</changelog>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add versioning to php-sapi as well</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 7.4.15: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.15
- suppress warning for all flavors not equal to "" in multibuild
  % php7.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 7.4.16: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.16</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619784000">- updated to 7.4.18: This is a security bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.18</changelog>
  <changelog author="suse+build@de-korte.org" date="1620302400">- updated to 7.4.19: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 7.4.18.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 7.4.20: This is a bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.20</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 7.4.21: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.21</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 7.4.22: This is a security and bug fix release. See
  https://www.php.net/ChangeLog-7.php#7.4.22</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 7.4.23: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-7.php#7.4.23</changelog>
  <changelog author="pgajdos@suse.com" date="1631707200">- added patches
  https://github.com/php/php-src/commit/b3646440b1808abf0874b6f89027ce53ec5da03f
  + php7-gd-removed-unused-constants.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1632398400">- updated to 7.4.24: This is a security release (CVE-2021-21706)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.24</changelog>
  <changelog author="pgajdos@suse.com" date="1632744000">- previous version updates fixes also:
  CVE-2020-7068,CVE-2020-7069,CVE-2020-7070,CVE-2020-7071,
  CVE-2021-21702,CVE-2021-21704,CVE-2021-21705
  bsc#1175223,bsc#1177351,bsc#1177352,bsc#1180706,
  bsc#1182049,bsc#1188035,bsc#1188037</changelog>
  <changelog author="suse+build@de-korte.org" date="1634904000">- updated to 7.4.25: This is a security release (CVE-2021-21703)
  which also contains several bug fixes.
  See https://www.php.net/ChangeLog-7.php#7.4.25</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php7-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php7-signedness-php_filter_validate_domain.patch</changelog>
</package>
<package pkgid="41d37d36de6801b0d7ca46913caef36578b94f280f50101d99d7715a45a4194f" name="apache2-mod_php8" arch="aarch64">
  <version epoch="0" ver="8.0.10" rel="150400.4.3.1"/>
  <changelog author="suse+build@de-korte.org" date="1610539200">- install php8-cli if no sapi is selected upon php8 installation
- add conflicts with earlier version of php-cli, php-fastcgi and
  php-fpm</changelog>
  <changelog author="suse+build@de-korte.org" date="1610712000">- deleted patch (redundant cast, both sides are already signed int)
  - php-odbc-cmp-int-cast.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1610712001">- replace php8.keyring with signatures for PHP-8 release managers</changelog>
  <changelog author="suse+build@de-korte.org" date="1610971200">- add conflicts with earlier version of php-devel and php-phar
- add obsoletes for all subtargets that don't have conflicts yet
- add php_cfgdir and php_extdir macros</changelog>
  <changelog author="suse+build@de-korte.org" date="1611403200">- require this PHP version of subpackages in Recommends/Suggests
- run apache-rex tests in php8:test as packages need to be build
  first (otherwise tests run with previous version)</changelog>
  <changelog author="suse+build@de-korte.org" date="1611835200">- update contents of configuration file (still referenced php7)
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add conflicts with earlier versions of php (boo#1181292)</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 8.0.2: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.2
- suppress warning for all flavors not equal to "" in multibuild
  and obsoletes for php7
  % php8.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 8.0.3: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.3</changelog>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
</package>
<package pkgid="e8fbaeb37e28c87bc65ccfc004f5cddedb9e24c3c4c3056d51445c6fc91e0a12" name="apache2-mod_php8" arch="ppc64le">
  <version epoch="0" ver="8.0.10" rel="150400.4.3.1"/>
  <changelog author="suse+build@de-korte.org" date="1610539200">- install php8-cli if no sapi is selected upon php8 installation
- add conflicts with earlier version of php-cli, php-fastcgi and
  php-fpm</changelog>
  <changelog author="suse+build@de-korte.org" date="1610712000">- deleted patch (redundant cast, both sides are already signed int)
  - php-odbc-cmp-int-cast.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1610712001">- replace php8.keyring with signatures for PHP-8 release managers</changelog>
  <changelog author="suse+build@de-korte.org" date="1610971200">- add conflicts with earlier version of php-devel and php-phar
- add obsoletes for all subtargets that don't have conflicts yet
- add php_cfgdir and php_extdir macros</changelog>
  <changelog author="suse+build@de-korte.org" date="1611403200">- require this PHP version of subpackages in Recommends/Suggests
- run apache-rex tests in php8:test as packages need to be build
  first (otherwise tests run with previous version)</changelog>
  <changelog author="suse+build@de-korte.org" date="1611835200">- update contents of configuration file (still referenced php7)
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add conflicts with earlier versions of php (boo#1181292)</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 8.0.2: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.2
- suppress warning for all flavors not equal to "" in multibuild
  and obsoletes for php7
  % php8.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 8.0.3: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.3</changelog>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
</package>
<package pkgid="18985db90b0646b57b6143e93ba3526c7584f609f7fda67a3174744e65f6dcb8" name="apache2-mod_php8" arch="s390x">
  <version epoch="0" ver="8.0.10" rel="150400.4.3.1"/>
  <changelog author="suse+build@de-korte.org" date="1610539200">- install php8-cli if no sapi is selected upon php8 installation
- add conflicts with earlier version of php-cli, php-fastcgi and
  php-fpm</changelog>
  <changelog author="suse+build@de-korte.org" date="1610712000">- deleted patch (redundant cast, both sides are already signed int)
  - php-odbc-cmp-int-cast.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1610712001">- replace php8.keyring with signatures for PHP-8 release managers</changelog>
  <changelog author="suse+build@de-korte.org" date="1610971200">- add conflicts with earlier version of php-devel and php-phar
- add obsoletes for all subtargets that don't have conflicts yet
- add php_cfgdir and php_extdir macros</changelog>
  <changelog author="suse+build@de-korte.org" date="1611403200">- require this PHP version of subpackages in Recommends/Suggests
- run apache-rex tests in php8:test as packages need to be build
  first (otherwise tests run with previous version)</changelog>
  <changelog author="suse+build@de-korte.org" date="1611835200">- update contents of configuration file (still referenced php7)
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add conflicts with earlier versions of php (boo#1181292)</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 8.0.2: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.2
- suppress warning for all flavors not equal to "" in multibuild
  and obsoletes for php7
  % php8.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 8.0.3: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.3</changelog>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
</package>
<package pkgid="93d5989ef20cc1976c9e2ae188928f8a4640110bff4571a08e0a24cef8310727" name="apache2-mod_php8" arch="src">
  <version epoch="0" ver="8.0.10" rel="150400.4.3.1"/>
  <changelog author="suse+build@de-korte.org" date="1610539200">- install php8-cli if no sapi is selected upon php8 installation
- add conflicts with earlier version of php-cli, php-fastcgi and
  php-fpm</changelog>
  <changelog author="suse+build@de-korte.org" date="1610712000">- deleted patch (redundant cast, both sides are already signed int)
  - php-odbc-cmp-int-cast.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1610712001">- replace php8.keyring with signatures for PHP-8 release managers</changelog>
  <changelog author="suse+build@de-korte.org" date="1610971200">- add conflicts with earlier version of php-devel and php-phar
- add obsoletes for all subtargets that don't have conflicts yet
- add php_cfgdir and php_extdir macros</changelog>
  <changelog author="suse+build@de-korte.org" date="1611403200">- require this PHP version of subpackages in Recommends/Suggests
- run apache-rex tests in php8:test as packages need to be build
  first (otherwise tests run with previous version)</changelog>
  <changelog author="suse+build@de-korte.org" date="1611835200">- update contents of configuration file (still referenced php7)
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add conflicts with earlier versions of php (boo#1181292)</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 8.0.2: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.2
- suppress warning for all flavors not equal to "" in multibuild
  and obsoletes for php7
  % php8.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 8.0.3: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.3</changelog>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
</package>
<package pkgid="d8ab6a21880f1d7f273003110daf1dea12cbd755d3da848d289b02a51f62f629" name="apache2-mod_php8" arch="x86_64">
  <version epoch="0" ver="8.0.10" rel="150400.4.3.1"/>
  <changelog author="suse+build@de-korte.org" date="1610539200">- install php8-cli if no sapi is selected upon php8 installation
- add conflicts with earlier version of php-cli, php-fastcgi and
  php-fpm</changelog>
  <changelog author="suse+build@de-korte.org" date="1610712000">- deleted patch (redundant cast, both sides are already signed int)
  - php-odbc-cmp-int-cast.patch</changelog>
  <changelog author="suse+build@de-korte.org" date="1610712001">- replace php8.keyring with signatures for PHP-8 release managers</changelog>
  <changelog author="suse+build@de-korte.org" date="1610971200">- add conflicts with earlier version of php-devel and php-phar
- add obsoletes for all subtargets that don't have conflicts yet
- add php_cfgdir and php_extdir macros</changelog>
  <changelog author="suse+build@de-korte.org" date="1611403200">- require this PHP version of subpackages in Recommends/Suggests
- run apache-rex tests in php8:test as packages need to be build
  first (otherwise tests run with previous version)</changelog>
  <changelog author="suse+build@de-korte.org" date="1611835200">- update contents of configuration file (still referenced php7)
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1611921600">- add conflicts with earlier versions of php (boo#1181292)</changelog>
  <changelog author="suse+build@de-korte.org" date="1612180800">- updated to 8.0.2: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.2
- suppress warning for all flavors not equal to "" in multibuild
  and obsoletes for php7
  % php8.rpmlintrc</changelog>
  <changelog author="suse+build@de-korte.org" date="1614859200">- updated to 8.0.3: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.3</changelog>
  <changelog author="pgajdos@suse.com" date="1615291200">- &lt;IfModule mod_php.c&gt; instead of &lt;IfModule mod_php8.c&gt; [bsc#1183180]
- modified sources
  % mod_php8.conf</changelog>
  <changelog author="suse+build@de-korte.org" date="1618315200">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="suse+build@de-korte.org" date="1619697600">- updated to 8.0.5: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.5</changelog>
  <changelog author="suse+build@de-korte.org" date="1622721600">- updated to 8.0.6: This release reverts a bug related to PDO_pgsql
  that was introduced in PHP 8.0.5.</changelog>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
</package>
<package pkgid="8acecc75062313dea4b1bd3d30977166381ddcaac4278c23420a96645e502f17" name="atkmm1_6" arch="src">
  <version epoch="0" ver="2.28.0" rel="150200.3.2.1"/>
  <changelog author="vuntz@opensuse.org" date="1285588800">- Update to version 2.22.0:
  + Just increased version to show that it's an API/ABI-stable
    release.</changelog>
  <changelog author="vuntz@opensuse.org" date="1291723200">- Update to version 2.22.1:
  + Distribute the GPL in the tarball, in addition to the LGPL,
    because the Windows build uses a GPL builder tool.</changelog>
  <changelog author="vuntz@opensuse.org" date="1294574400">- Update to version 2.22.2:
  + Install m4 files needed by recent versions of gtkmm when
    building from git.</changelog>
  <changelog author="fcrozat@novell.com" date="1300881600">- Update to version 2.22.4:
  + Avoid a tarball dependency on mm-common.
- Changes from version 2.22.3:
  + a tarball regeneration due to a changed m4 macro in mm-common.</changelog>
  <changelog author="dimstar@opensuse.org" date="1304164800">- Update to version 2.22.5:
  + bgo#645669: Install the m4 files even without
  - -enable-maintainer-mode, as with other modules.
- Use source services: download_url and set_version.</changelog>
  <changelog author="vuntz@opensuse.org" date="1310040000">- Stop using source service to download the tarball, as Factory
  will move away from this.</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile
- Use %_smp_mflags for parallel build
- Add atkmm-devel to baselibs</changelog>
  <changelog author="vuntz@opensuse.org" date="1321358400">- Update to version 2.22.6:
  + Add #includes needed with the latest glibmm.</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="dimstar@opensuse.org" date="1367236800">- Update to version 2.22.7:
  + Remove the use of g_type_init() because it has been deprecated.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437825600">- Update to version 2.23.2:
  + Use (and require) C++11.
- Changes from version 2.23.1:
  + Atk:
  - Document: Add get/set_attribute() and deprecate
    get_document() and get_document_type().
  - Component: Deprecate add/remove_focus_handler, get_size() and
    get_position().
  - Add Range.
  - Table:
    . Deprecate get_column/row_at_index().
    . Add a get_at() const version and deprecate get_index_at().
  - Text:
    . Deprecate get_text_before_offset(),
    get_text_after_offset().
    . Add get_string_at_offset(), deprecating other methods for
    it.
  - Value: Deprecate get_minimum/maximum_range() in favour or
    get_range().
  + Build: Update MSVC 2005, 2008 and 2010 Projects: Add "Install"
    Project.</changelog>
  <changelog author="zaitor@opensuse.org" date="1441368000">- Update to version 2.23.3:
  + Rebuilt with latest glibmm, whose gmmproc generates C++ move
    operations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443614400">- Update to version 2.24.1:
  + Regenerate with the latest glibmm.
- Changes from version 2.24.0:
  + MSVC build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448884800">- Update to version 2.24.2:
  + Regenerate with the latest glibmm.</changelog>
  <changelog author="idonmez@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1480939200">- Rename to atkmm1_6: atkmm 2.25.x brings a new API/ABI to be used
  in GTK4 based applications.</changelog>
  <changelog author="jengelh@inai.de" date="1480939201">- rectify rpm groups</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543752000">- Update to version 2.28.0:
  + No changes, version bump only.
- Changes from version 2.24.3:
  + Fix silent builds.
  + Text: Plug memory leaks in get_text_vfunc() and
    get_selection_vfunc(). These vfuncs shall delete the returned
    character array after it has been copied to a Glib::ustring.
  + Replace the Visual Studio project files with MSVC NMake project
    files.</changelog>
</package>
<package pkgid="10c6129b47f5df585b20878ebb623ef79f6a8f91be1383c1769b27292be71d89" name="atkmm1_6-doc" arch="noarch">
  <version epoch="0" ver="2.28.0" rel="150200.3.2.1"/>
  <changelog author="dimstar@opensuse.org" date="1367236800">- Update to version 2.22.7:
  + Remove the use of g_type_init() because it has been deprecated.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437825600">- Update to version 2.23.2:
  + Use (and require) C++11.
- Changes from version 2.23.1:
  + Atk:
  - Document: Add get/set_attribute() and deprecate
    get_document() and get_document_type().
  - Component: Deprecate add/remove_focus_handler, get_size() and
    get_position().
  - Add Range.
  - Table:
    . Deprecate get_column/row_at_index().
    . Add a get_at() const version and deprecate get_index_at().
  - Text:
    . Deprecate get_text_before_offset(),
    get_text_after_offset().
    . Add get_string_at_offset(), deprecating other methods for
    it.
  - Value: Deprecate get_minimum/maximum_range() in favour or
    get_range().
  + Build: Update MSVC 2005, 2008 and 2010 Projects: Add "Install"
    Project.</changelog>
  <changelog author="zaitor@opensuse.org" date="1441368000">- Update to version 2.23.3:
  + Rebuilt with latest glibmm, whose gmmproc generates C++ move
    operations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443614400">- Update to version 2.24.1:
  + Regenerate with the latest glibmm.
- Changes from version 2.24.0:
  + MSVC build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448884800">- Update to version 2.24.2:
  + Regenerate with the latest glibmm.</changelog>
  <changelog author="idonmez@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="dimstar@opensuse.org" date="1480939200">- Rename to atkmm1_6: atkmm 2.25.x brings a new API/ABI to be used
  in GTK4 based applications.</changelog>
  <changelog author="jengelh@inai.de" date="1480939201">- rectify rpm groups</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543752000">- Update to version 2.28.0:
  + No changes, version bump only.
- Changes from version 2.24.3:
  + Fix silent builds.
  + Text: Plug memory leaks in get_text_vfunc() and
    get_selection_vfunc(). These vfuncs shall delete the returned
    character array after it has been copied to a Glib::ustring.
  + Replace the Visual Studio project files with MSVC NMake project
    files.</changelog>
</package>
<package pkgid="b4884c622297f7731e781d2abd7b502160338939b35ab151b83c727248e02571" name="autoyast2" arch="noarch">
  <version epoch="0" ver="4.4.37" rel="150400.3.3.1"/>
  <changelog author="kanderssen@suse.com" date="1635249600">- Add the "keep_unknown_lv" element to the partitioning schema
  (bsc#1191968).
- 4.4.18</changelog>
  <changelog author="jlopez@suse.com" date="1635249601">- Avoid internal error when checking signature (bsc#1192022).
- 4.4.19</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1636718400">- bsc#1192626:
  - Registration takes place always at the same point, no matter
    which installation medium is being used.
  - Adapt to the product specification API.
- Stop AutoYaST installation when registration failed on online
  medium (bsc#1188211, Josef Reidinger &lt;jreidinger@suse.com&gt;).
- 4.4.20</changelog>
  <changelog author="kanderssen@suse.com" date="1637236800">- Add support for detecting EFI boot during autoinstallation
  (jsc#SLE-18819)
- 4.4.21</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1637582400">- Do not process the &lt;add-on/&gt; section during the 2nd stage
  (bsc#1192185).
- 4.4.22</changelog>
  <changelog author="kanderssen@suse.com" date="1637841600">- During autoupgrade merge the selected product workflow in order
  to execute 2nd stage modules (bsc#1192437)
- 4.4.23</changelog>
  <changelog author="snwint@suse.com" date="1639742400">- use Y2Storage::Arch to determine whether UEFI is available (bsc#937067)
- 4.4.24</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642075200">- Properly merge the autoupgrade workflow when using the online
  medium (bsc#1192437, bsc#1194440).
- 4.4.25</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642680000">- Fix handling of add-on signature settings, introduced when fixing
  bsc#1192437 (bsc#1194881).
- 4.4.26</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642766400">- Replace references to PackageAI module with proper calls to
  Package methods (bsc#1194886).
- 4.4.27</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1643112000">- Use Package module instead of PackageSystem (bsc#1194886).
- 4.4.28</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1644235200">- Fix the profile update when using an &lt;ask/&gt; element
  (boo#1195630).
- Run the network client when listed in the semi-automatic section.
- 4.4.29</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1644840000">- The ayast_setup client imports the general settings
  (bsc#1195631).
- 4.4.30</changelog>
  <changelog author="kanderssen@suse.com" date="1645444800">- Modified init-scripts service dependencies fixing a root login
  systemd timeout when installing with ssh (bsc#1195059)
- 4.4.31</changelog>
  <changelog author="snwint@suse.com" date="1646049600">- add yast namespace to merge.xslt to fix CDATA handling (bsc#1195910)
- 4.4.32</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646308800">- Consider user selected packages as optional to not block the
  installation (bsc#1195747).
- 4.4.33</changelog>
  <changelog author="jlopez@suse.com" date="1646395200">- Avoid login while running AutoYaST init-scripts (bsc#1196594 and
  related to bsc#1195059).
- 4.4.34</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646654400">- Properly handle the "dopackages" option in the openFile
  method of the AyastSetup module (bsc#1196566).
- 4.4.35</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1648814400">- Respect general/signature-handling settings during the 2nd
  stage (bsc#1197655).
- 4.4.36</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1651579200">- Fix detection disk serial and size in the "disks" ERB helper
  (bsc#1199000).
- Fix rules validation when using a dialog (bsc#1199165).
- 4.4.37</changelog>
</package>
<package pkgid="b833c7b3eb095bef11ac326b8d3dd66889b6543d3386bc3a6c95d1dfb7a6e332" name="autoyast2" arch="src">
  <version epoch="0" ver="4.4.37" rel="150400.3.3.1"/>
  <changelog author="kanderssen@suse.com" date="1635249600">- Add the "keep_unknown_lv" element to the partitioning schema
  (bsc#1191968).
- 4.4.18</changelog>
  <changelog author="jlopez@suse.com" date="1635249601">- Avoid internal error when checking signature (bsc#1192022).
- 4.4.19</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1636718400">- bsc#1192626:
  - Registration takes place always at the same point, no matter
    which installation medium is being used.
  - Adapt to the product specification API.
- Stop AutoYaST installation when registration failed on online
  medium (bsc#1188211, Josef Reidinger &lt;jreidinger@suse.com&gt;).
- 4.4.20</changelog>
  <changelog author="kanderssen@suse.com" date="1637236800">- Add support for detecting EFI boot during autoinstallation
  (jsc#SLE-18819)
- 4.4.21</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1637582400">- Do not process the &lt;add-on/&gt; section during the 2nd stage
  (bsc#1192185).
- 4.4.22</changelog>
  <changelog author="kanderssen@suse.com" date="1637841600">- During autoupgrade merge the selected product workflow in order
  to execute 2nd stage modules (bsc#1192437)
- 4.4.23</changelog>
  <changelog author="snwint@suse.com" date="1639742400">- use Y2Storage::Arch to determine whether UEFI is available (bsc#937067)
- 4.4.24</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642075200">- Properly merge the autoupgrade workflow when using the online
  medium (bsc#1192437, bsc#1194440).
- 4.4.25</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642680000">- Fix handling of add-on signature settings, introduced when fixing
  bsc#1192437 (bsc#1194881).
- 4.4.26</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642766400">- Replace references to PackageAI module with proper calls to
  Package methods (bsc#1194886).
- 4.4.27</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1643112000">- Use Package module instead of PackageSystem (bsc#1194886).
- 4.4.28</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1644235200">- Fix the profile update when using an &lt;ask/&gt; element
  (boo#1195630).
- Run the network client when listed in the semi-automatic section.
- 4.4.29</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1644840000">- The ayast_setup client imports the general settings
  (bsc#1195631).
- 4.4.30</changelog>
  <changelog author="kanderssen@suse.com" date="1645444800">- Modified init-scripts service dependencies fixing a root login
  systemd timeout when installing with ssh (bsc#1195059)
- 4.4.31</changelog>
  <changelog author="snwint@suse.com" date="1646049600">- add yast namespace to merge.xslt to fix CDATA handling (bsc#1195910)
- 4.4.32</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646308800">- Consider user selected packages as optional to not block the
  installation (bsc#1195747).
- 4.4.33</changelog>
  <changelog author="jlopez@suse.com" date="1646395200">- Avoid login while running AutoYaST init-scripts (bsc#1196594 and
  related to bsc#1195059).
- 4.4.34</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646654400">- Properly handle the "dopackages" option in the openFile
  method of the AyastSetup module (bsc#1196566).
- 4.4.35</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1648814400">- Respect general/signature-handling settings during the 2nd
  stage (bsc#1197655).
- 4.4.36</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1651579200">- Fix detection disk serial and size in the "disks" ERB helper
  (bsc#1199000).
- Fix rules validation when using a dialog (bsc#1199165).
- 4.4.37</changelog>
</package>
<package pkgid="f1827e8110d7492b1eae0fdc627abca16efa48a5a2447233da3e0038d28af979" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="4.4.37" rel="150400.3.3.1"/>
  <changelog author="kanderssen@suse.com" date="1635249600">- Add the "keep_unknown_lv" element to the partitioning schema
  (bsc#1191968).
- 4.4.18</changelog>
  <changelog author="jlopez@suse.com" date="1635249601">- Avoid internal error when checking signature (bsc#1192022).
- 4.4.19</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1636718400">- bsc#1192626:
  - Registration takes place always at the same point, no matter
    which installation medium is being used.
  - Adapt to the product specification API.
- Stop AutoYaST installation when registration failed on online
  medium (bsc#1188211, Josef Reidinger &lt;jreidinger@suse.com&gt;).
- 4.4.20</changelog>
  <changelog author="kanderssen@suse.com" date="1637236800">- Add support for detecting EFI boot during autoinstallation
  (jsc#SLE-18819)
- 4.4.21</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1637582400">- Do not process the &lt;add-on/&gt; section during the 2nd stage
  (bsc#1192185).
- 4.4.22</changelog>
  <changelog author="kanderssen@suse.com" date="1637841600">- During autoupgrade merge the selected product workflow in order
  to execute 2nd stage modules (bsc#1192437)
- 4.4.23</changelog>
  <changelog author="snwint@suse.com" date="1639742400">- use Y2Storage::Arch to determine whether UEFI is available (bsc#937067)
- 4.4.24</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642075200">- Properly merge the autoupgrade workflow when using the online
  medium (bsc#1192437, bsc#1194440).
- 4.4.25</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642680000">- Fix handling of add-on signature settings, introduced when fixing
  bsc#1192437 (bsc#1194881).
- 4.4.26</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1642766400">- Replace references to PackageAI module with proper calls to
  Package methods (bsc#1194886).
- 4.4.27</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1643112000">- Use Package module instead of PackageSystem (bsc#1194886).
- 4.4.28</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1644235200">- Fix the profile update when using an &lt;ask/&gt; element
  (boo#1195630).
- Run the network client when listed in the semi-automatic section.
- 4.4.29</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1644840000">- The ayast_setup client imports the general settings
  (bsc#1195631).
- 4.4.30</changelog>
  <changelog author="kanderssen@suse.com" date="1645444800">- Modified init-scripts service dependencies fixing a root login
  systemd timeout when installing with ssh (bsc#1195059)
- 4.4.31</changelog>
  <changelog author="snwint@suse.com" date="1646049600">- add yast namespace to merge.xslt to fix CDATA handling (bsc#1195910)
- 4.4.32</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646308800">- Consider user selected packages as optional to not block the
  installation (bsc#1195747).
- 4.4.33</changelog>
  <changelog author="jlopez@suse.com" date="1646395200">- Avoid login while running AutoYaST init-scripts (bsc#1196594 and
  related to bsc#1195059).
- 4.4.34</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1646654400">- Properly handle the "dopackages" option in the openFile
  method of the AyastSetup module (bsc#1196566).
- 4.4.35</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1648814400">- Respect general/signature-handling settings during the 2nd
  stage (bsc#1197655).
- 4.4.36</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1651579200">- Fix detection disk serial and size in the "disks" ERB helper
  (bsc#1199000).
- Fix rules validation when using a dialog (bsc#1199165).
- 4.4.37</changelog>
</package>
<package pkgid="3cb8fbdc66e931032f4f1e46a74fce2cada5d14b5b06546e6101fccfb8efa05d" name="aws-iam-authenticator" arch="aarch64">
  <version epoch="0" ver="0.5.3" rel="150000.1.6.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1557835200">- Initial build
  + Version 0.4.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558612800">- Include in SLE-15 (fate#327747, bsc#1098521)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1621512000">- Update to version 0.5.3
  * Bump Go to 1.15 in Travis (#361)
  * Update aws sdk go v1.37.1 (#360)
  * (arn): validate partition against all partitions returned by the aws sdk (#348)
  * Document AccessKeyId from UserInfo (#332)
  * Support IPv6 listen address (#352)
  * Added user agent to AWS SDK (#359)
  * Remove Chris Hein from OWNERS (#351)
  * Add instructions for the release process (#346)
- from version 0.5.2
  * Added partition flag (#341)
  * Update link to Kops docs site (#338)
  * Security Improvements on the example yaml (#335)
  * Fix RBAC on example file: service account requires get to ConfigMap (#334)
  * Add AccessKeyID as variable for username (#337)
  * Added server side AWS account ID log redaction (#327)
- from version 0.5.1
  * Update examples/README (#317)
  * Changelog gen (#318)
  * Fix CRD mapper blocking all others because caches
    never sync and revamp backend-mode flag (#303)
  * Update aws-sdk-go to version v1.30.0 (#306)
  * Bump k8s.io/ dependencies to 1.16.8 (#305)
  * chown aws-iam-authenticator to avoid permission denied (#302)
  * Indentation and unit test improvements (#298)
  * Adding Rate limiting ec2:DescribeInstances API
    along with Batching for high TPS (#292)
  * Restrict ClusterRole to readonly IAMIdentityMapping access (#287)
  * added selector to spec and changed from extenstions to apps/v1 (#291)
  * Add AWS AccessKeyID as an extra field in UserInfo (#286)
  * Allow server port customization (#278)
- from version 0.5.0
  * Remove DNS-1123 validation of usernames and groups (#260)
  * switch to use regional sts endpoint &amp; imdsV2 (#283)
  * Add AWS Access Key ID to log (#282)
  * Require to pass in interface instead of the concrete type (#279)
  * Refactor to allow configurable backends (configmap, eks configmap, crd) (#269)
  * Update go version (#255)
  * Adding session name parameter to TokenGenerator (#272)
  * Rename prometheus metrics to match new project name (#249)
  * Remove inactive approvers, add wongma7 (#266)
  * Update aws-sdk-go to v1.23.11 (257)
  * Added go module download check (#259)
  * Updating goreleaser yaml to fix deprecated options (#252)
  * Remove deprecated language from README (#244)
  * Lowercase ARN inside doMapping and log about it (#239)
  * IAMIdentityMapping CRD Implementation (#116)
  * Adding micahhausler as approver (#237)
  * add support for passing externalID to assume role (#228)
  * Update README.md (#231)
  * Using sigs.k8s.io domain instead of github.com (#223)
  * Refactored EC2 API calls to be testable (#226)
  * Include aws request ID when logging errors (#178)
- Remove global Go project variables
- Set GO111MODULE=off to force use of vendored modules
- Update Go build paths</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1648728000">- Update in SLE-15 (bsc#1197703)</changelog>
</package>
<package pkgid="8fd3f04d3e5c030b3629e9b83614c1380b452bf1ed04296839a63c2ffd9f85a5" name="aws-iam-authenticator" arch="ppc64le">
  <version epoch="0" ver="0.5.3" rel="150000.1.6.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1557835200">- Initial build
  + Version 0.4.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558612800">- Include in SLE-15 (fate#327747, bsc#1098521)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1621512000">- Update to version 0.5.3
  * Bump Go to 1.15 in Travis (#361)
  * Update aws sdk go v1.37.1 (#360)
  * (arn): validate partition against all partitions returned by the aws sdk (#348)
  * Document AccessKeyId from UserInfo (#332)
  * Support IPv6 listen address (#352)
  * Added user agent to AWS SDK (#359)
  * Remove Chris Hein from OWNERS (#351)
  * Add instructions for the release process (#346)
- from version 0.5.2
  * Added partition flag (#341)
  * Update link to Kops docs site (#338)
  * Security Improvements on the example yaml (#335)
  * Fix RBAC on example file: service account requires get to ConfigMap (#334)
  * Add AccessKeyID as variable for username (#337)
  * Added server side AWS account ID log redaction (#327)
- from version 0.5.1
  * Update examples/README (#317)
  * Changelog gen (#318)
  * Fix CRD mapper blocking all others because caches
    never sync and revamp backend-mode flag (#303)
  * Update aws-sdk-go to version v1.30.0 (#306)
  * Bump k8s.io/ dependencies to 1.16.8 (#305)
  * chown aws-iam-authenticator to avoid permission denied (#302)
  * Indentation and unit test improvements (#298)
  * Adding Rate limiting ec2:DescribeInstances API
    along with Batching for high TPS (#292)
  * Restrict ClusterRole to readonly IAMIdentityMapping access (#287)
  * added selector to spec and changed from extenstions to apps/v1 (#291)
  * Add AWS AccessKeyID as an extra field in UserInfo (#286)
  * Allow server port customization (#278)
- from version 0.5.0
  * Remove DNS-1123 validation of usernames and groups (#260)
  * switch to use regional sts endpoint &amp; imdsV2 (#283)
  * Add AWS Access Key ID to log (#282)
  * Require to pass in interface instead of the concrete type (#279)
  * Refactor to allow configurable backends (configmap, eks configmap, crd) (#269)
  * Update go version (#255)
  * Adding session name parameter to TokenGenerator (#272)
  * Rename prometheus metrics to match new project name (#249)
  * Remove inactive approvers, add wongma7 (#266)
  * Update aws-sdk-go to v1.23.11 (257)
  * Added go module download check (#259)
  * Updating goreleaser yaml to fix deprecated options (#252)
  * Remove deprecated language from README (#244)
  * Lowercase ARN inside doMapping and log about it (#239)
  * IAMIdentityMapping CRD Implementation (#116)
  * Adding micahhausler as approver (#237)
  * add support for passing externalID to assume role (#228)
  * Update README.md (#231)
  * Using sigs.k8s.io domain instead of github.com (#223)
  * Refactored EC2 API calls to be testable (#226)
  * Include aws request ID when logging errors (#178)
- Remove global Go project variables
- Set GO111MODULE=off to force use of vendored modules
- Update Go build paths</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1648728000">- Update in SLE-15 (bsc#1197703)</changelog>
</package>
<package pkgid="a9e9493d13d32ef5d1aebead3aaf016ce4f5753263697876c63f5425432f5921" name="aws-iam-authenticator" arch="s390x">
  <version epoch="0" ver="0.5.3" rel="150000.1.6.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1557835200">- Initial build
  + Version 0.4.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558612800">- Include in SLE-15 (fate#327747, bsc#1098521)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1621512000">- Update to version 0.5.3
  * Bump Go to 1.15 in Travis (#361)
  * Update aws sdk go v1.37.1 (#360)
  * (arn): validate partition against all partitions returned by the aws sdk (#348)
  * Document AccessKeyId from UserInfo (#332)
  * Support IPv6 listen address (#352)
  * Added user agent to AWS SDK (#359)
  * Remove Chris Hein from OWNERS (#351)
  * Add instructions for the release process (#346)
- from version 0.5.2
  * Added partition flag (#341)
  * Update link to Kops docs site (#338)
  * Security Improvements on the example yaml (#335)
  * Fix RBAC on example file: service account requires get to ConfigMap (#334)
  * Add AccessKeyID as variable for username (#337)
  * Added server side AWS account ID log redaction (#327)
- from version 0.5.1
  * Update examples/README (#317)
  * Changelog gen (#318)
  * Fix CRD mapper blocking all others because caches
    never sync and revamp backend-mode flag (#303)
  * Update aws-sdk-go to version v1.30.0 (#306)
  * Bump k8s.io/ dependencies to 1.16.8 (#305)
  * chown aws-iam-authenticator to avoid permission denied (#302)
  * Indentation and unit test improvements (#298)
  * Adding Rate limiting ec2:DescribeInstances API
    along with Batching for high TPS (#292)
  * Restrict ClusterRole to readonly IAMIdentityMapping access (#287)
  * added selector to spec and changed from extenstions to apps/v1 (#291)
  * Add AWS AccessKeyID as an extra field in UserInfo (#286)
  * Allow server port customization (#278)
- from version 0.5.0
  * Remove DNS-1123 validation of usernames and groups (#260)
  * switch to use regional sts endpoint &amp; imdsV2 (#283)
  * Add AWS Access Key ID to log (#282)
  * Require to pass in interface instead of the concrete type (#279)
  * Refactor to allow configurable backends (configmap, eks configmap, crd) (#269)
  * Update go version (#255)
  * Adding session name parameter to TokenGenerator (#272)
  * Rename prometheus metrics to match new project name (#249)
  * Remove inactive approvers, add wongma7 (#266)
  * Update aws-sdk-go to v1.23.11 (257)
  * Added go module download check (#259)
  * Updating goreleaser yaml to fix deprecated options (#252)
  * Remove deprecated language from README (#244)
  * Lowercase ARN inside doMapping and log about it (#239)
  * IAMIdentityMapping CRD Implementation (#116)
  * Adding micahhausler as approver (#237)
  * add support for passing externalID to assume role (#228)
  * Update README.md (#231)
  * Using sigs.k8s.io domain instead of github.com (#223)
  * Refactored EC2 API calls to be testable (#226)
  * Include aws request ID when logging errors (#178)
- Remove global Go project variables
- Set GO111MODULE=off to force use of vendored modules
- Update Go build paths</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1648728000">- Update in SLE-15 (bsc#1197703)</changelog>
</package>
<package pkgid="fc4a02eea496a53058911e4d2457df51e5de5ea14fdc0a05621697efbf59d28e" name="aws-iam-authenticator" arch="src">
  <version epoch="0" ver="0.5.3" rel="150000.1.6.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1557835200">- Initial build
  + Version 0.4.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558612800">- Include in SLE-15 (fate#327747, bsc#1098521)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1621512000">- Update to version 0.5.3
  * Bump Go to 1.15 in Travis (#361)
  * Update aws sdk go v1.37.1 (#360)
  * (arn): validate partition against all partitions returned by the aws sdk (#348)
  * Document AccessKeyId from UserInfo (#332)
  * Support IPv6 listen address (#352)
  * Added user agent to AWS SDK (#359)
  * Remove Chris Hein from OWNERS (#351)
  * Add instructions for the release process (#346)
- from version 0.5.2
  * Added partition flag (#341)
  * Update link to Kops docs site (#338)
  * Security Improvements on the example yaml (#335)
  * Fix RBAC on example file: service account requires get to ConfigMap (#334)
  * Add AccessKeyID as variable for username (#337)
  * Added server side AWS account ID log redaction (#327)
- from version 0.5.1
  * Update examples/README (#317)
  * Changelog gen (#318)
  * Fix CRD mapper blocking all others because caches
    never sync and revamp backend-mode flag (#303)
  * Update aws-sdk-go to version v1.30.0 (#306)
  * Bump k8s.io/ dependencies to 1.16.8 (#305)
  * chown aws-iam-authenticator to avoid permission denied (#302)
  * Indentation and unit test improvements (#298)
  * Adding Rate limiting ec2:DescribeInstances API
    along with Batching for high TPS (#292)
  * Restrict ClusterRole to readonly IAMIdentityMapping access (#287)
  * added selector to spec and changed from extenstions to apps/v1 (#291)
  * Add AWS AccessKeyID as an extra field in UserInfo (#286)
  * Allow server port customization (#278)
- from version 0.5.0
  * Remove DNS-1123 validation of usernames and groups (#260)
  * switch to use regional sts endpoint &amp; imdsV2 (#283)
  * Add AWS Access Key ID to log (#282)
  * Require to pass in interface instead of the concrete type (#279)
  * Refactor to allow configurable backends (configmap, eks configmap, crd) (#269)
  * Update go version (#255)
  * Adding session name parameter to TokenGenerator (#272)
  * Rename prometheus metrics to match new project name (#249)
  * Remove inactive approvers, add wongma7 (#266)
  * Update aws-sdk-go to v1.23.11 (257)
  * Added go module download check (#259)
  * Updating goreleaser yaml to fix deprecated options (#252)
  * Remove deprecated language from README (#244)
  * Lowercase ARN inside doMapping and log about it (#239)
  * IAMIdentityMapping CRD Implementation (#116)
  * Adding micahhausler as approver (#237)
  * add support for passing externalID to assume role (#228)
  * Update README.md (#231)
  * Using sigs.k8s.io domain instead of github.com (#223)
  * Refactored EC2 API calls to be testable (#226)
  * Include aws request ID when logging errors (#178)
- Remove global Go project variables
- Set GO111MODULE=off to force use of vendored modules
- Update Go build paths</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1648728000">- Update in SLE-15 (bsc#1197703)</changelog>
</package>
<package pkgid="858579a5d95215060a1daa4fd6a08a34c9c14816f0c944b32b6cc37a6d0b338e" name="aws-iam-authenticator" arch="x86_64">
  <version epoch="0" ver="0.5.3" rel="150000.1.6.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1557835200">- Initial build
  + Version 0.4.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558612800">- Include in SLE-15 (fate#327747, bsc#1098521)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1621512000">- Update to version 0.5.3
  * Bump Go to 1.15 in Travis (#361)
  * Update aws sdk go v1.37.1 (#360)
  * (arn): validate partition against all partitions returned by the aws sdk (#348)
  * Document AccessKeyId from UserInfo (#332)
  * Support IPv6 listen address (#352)
  * Added user agent to AWS SDK (#359)
  * Remove Chris Hein from OWNERS (#351)
  * Add instructions for the release process (#346)
- from version 0.5.2
  * Added partition flag (#341)
  * Update link to Kops docs site (#338)
  * Security Improvements on the example yaml (#335)
  * Fix RBAC on example file: service account requires get to ConfigMap (#334)
  * Add AccessKeyID as variable for username (#337)
  * Added server side AWS account ID log redaction (#327)
- from version 0.5.1
  * Update examples/README (#317)
  * Changelog gen (#318)
  * Fix CRD mapper blocking all others because caches
    never sync and revamp backend-mode flag (#303)
  * Update aws-sdk-go to version v1.30.0 (#306)
  * Bump k8s.io/ dependencies to 1.16.8 (#305)
  * chown aws-iam-authenticator to avoid permission denied (#302)
  * Indentation and unit test improvements (#298)
  * Adding Rate limiting ec2:DescribeInstances API
    along with Batching for high TPS (#292)
  * Restrict ClusterRole to readonly IAMIdentityMapping access (#287)
  * added selector to spec and changed from extenstions to apps/v1 (#291)
  * Add AWS AccessKeyID as an extra field in UserInfo (#286)
  * Allow server port customization (#278)
- from version 0.5.0
  * Remove DNS-1123 validation of usernames and groups (#260)
  * switch to use regional sts endpoint &amp; imdsV2 (#283)
  * Add AWS Access Key ID to log (#282)
  * Require to pass in interface instead of the concrete type (#279)
  * Refactor to allow configurable backends (configmap, eks configmap, crd) (#269)
  * Update go version (#255)
  * Adding session name parameter to TokenGenerator (#272)
  * Rename prometheus metrics to match new project name (#249)
  * Remove inactive approvers, add wongma7 (#266)
  * Update aws-sdk-go to v1.23.11 (257)
  * Added go module download check (#259)
  * Updating goreleaser yaml to fix deprecated options (#252)
  * Remove deprecated language from README (#244)
  * Lowercase ARN inside doMapping and log about it (#239)
  * IAMIdentityMapping CRD Implementation (#116)
  * Adding micahhausler as approver (#237)
  * add support for passing externalID to assume role (#228)
  * Update README.md (#231)
  * Using sigs.k8s.io domain instead of github.com (#223)
  * Refactored EC2 API calls to be testable (#226)
  * Include aws request ID when logging errors (#178)
- Remove global Go project variables
- Set GO111MODULE=off to force use of vendored modules
- Update Go build paths</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1648728000">- Update in SLE-15 (bsc#1197703)</changelog>
</package>
<package pkgid="ad0b7af6a36be7a6a3dcca35d405f8e2ae7a0fdc29f8e07568eed0d218448d4c" name="binutils" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="e46970adfc797e10578cd52040dbb161bf462e1b35ae209b1e7923acaa1a78f9" name="binutils" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="81449f296279aeda3b1652a8fa74ffda46c1a75f9cf81c5e5c2c0d195205e25f" name="binutils" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="73603bcefd4a47c8972df9888f03763253e28a030382c066dfedcfc19dd5b089" name="binutils" arch="src">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="15f2419e91416b9f6d1447fdd16083bc6cc923c300d6e415c4e8023fdd5ccece" name="binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="5342b3bf25059871189fa9b56052681757528fac7132f7e3e09c1bd97ef67534" name="binutils-devel" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="c2ea54779042a9f07580ad75f88c380541fc4b399bfae52797853df3ad41d536" name="binutils-devel" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="1fb1e57eb0440a1bba6795149edb28c6182f34c076e9f5a8f40ecdf0ce0e2a16" name="binutils-devel" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="708bf80260220cf6ea9a32bd63b3b12e8b13eafc2a6a7be1060b9d371fcc7146" name="binutils-devel" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="f78793f8f08460d72e8ccbf57ff13640c92c33bd18de21ce58a1ea30a67d8e83" name="binutils-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="cc65873fb9c31e12a490de1ca5582d404bac32927f0308dcf299b398a414d569" name="binutils-gold" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="0094923fa76c7671dbe046ebeb8641bf9cd47e39faddfe0e98406b99b062db8e" name="binutils-gold" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="82ed1aea07bfb868f957924e4f765eb9c7b2956ded396b5b820f7b434133c4e7" name="binutils-gold" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="6b9f5710de27c3e8ca34520b726a1bb7dc60cc01161007ac1d38b2e4db32ad83" name="binutils-gold" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="b61e58562ffd651f0efb0899fd313f86e57720d06a37df184264be6123fe0b62" name="bsdtar" arch="aarch64">
  <version epoch="0" ver="3.5.1" rel="150400.3.3.1"/>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="adrian@suse.de" date="1536926400">- update to version 3.3.3
  * Avoid super-linear slowdown on malformed mtree files
  * Many fixes for building with Visual Studio
  * NO_OVERWRITE doesn't change existing directory attributes
  * New support for Zstandard read and write filters
- Fixes CVE-2017-14501, CVE-2017-14502, CVE-2017-14503
- fix-CVE-2017-14166.patch is obsolete</changelog>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
</package>
<package pkgid="6cbe7a0c346725d36b1de179130c17ca4bc2ec7a198c4b6b45b8e757dd0a03b9" name="bsdtar" arch="ppc64le">
  <version epoch="0" ver="3.5.1" rel="150400.3.3.1"/>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="adrian@suse.de" date="1536926400">- update to version 3.3.3
  * Avoid super-linear slowdown on malformed mtree files
  * Many fixes for building with Visual Studio
  * NO_OVERWRITE doesn't change existing directory attributes
  * New support for Zstandard read and write filters
- Fixes CVE-2017-14501, CVE-2017-14502, CVE-2017-14503
- fix-CVE-2017-14166.patch is obsolete</changelog>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
</package>
<package pkgid="8a975041e905ff9ad90525e940aca5c8122427d2496d92c292cec7d290ab6e8b" name="bsdtar" arch="s390x">
  <version epoch="0" ver="3.5.1" rel="150400.3.3.1"/>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="adrian@suse.de" date="1536926400">- update to version 3.3.3
  * Avoid super-linear slowdown on malformed mtree files
  * Many fixes for building with Visual Studio
  * NO_OVERWRITE doesn't change existing directory attributes
  * New support for Zstandard read and write filters
- Fixes CVE-2017-14501, CVE-2017-14502, CVE-2017-14503
- fix-CVE-2017-14166.patch is obsolete</changelog>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
</package>
<package pkgid="f4f7c55c9b907bc2a5018a057d682f6b40429d7eedd94bf4b39f526c5a13cca1" name="bsdtar" arch="x86_64">
  <version epoch="0" ver="3.5.1" rel="150400.3.3.1"/>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="adrian@suse.de" date="1536926400">- update to version 3.3.3
  * Avoid super-linear slowdown on malformed mtree files
  * Many fixes for building with Visual Studio
  * NO_OVERWRITE doesn't change existing directory attributes
  * New support for Zstandard read and write filters
- Fixes CVE-2017-14501, CVE-2017-14502, CVE-2017-14503
- fix-CVE-2017-14166.patch is obsolete</changelog>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
</package>
<package pkgid="0150ee3f193242d5604936d862e62907d84ac3eba071d5397769322d7d0c74f5" name="build" arch="noarch">
  <version epoch="0" ver="20220422" rel="150200.9.1"/>
  <changelog author="adrian@suse.de" date="1580299200">- 15.2 config: temporary revert gcrypt preinstall until distro has changed
- factory config: ignore libxtables for iproute2, not needed for ip tool
- Follow upstream rpm changes in regard to logical ops
- Fix macro expansion of lines containing newlines
- add missing header file to avoid compile warnings</changelog>
  <changelog author="adrian@suse.de" date="1580472000">- fix regression in &amp;&amp; operator handling of rpm spec file parser
- Correctly expand macros defined with %global</changelog>
  <changelog author="adrian@suse.de" date="1580904000">- 15.2 config: preinstall gcrypt deps again
- Recommends for Fedora based distros
- support obsgendiff funcationality
- various smaller code cleanups
- additional test cases for spec file parsing
- various fixes for cornercases during spec file parsing</changelog>
  <changelog author="adrian@suse.de" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="adrian@suse.de" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="FSchreiner@suse.com" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="adrian@suse.de" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="adrian@suse.de" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="adrian@suse.de" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
  <changelog author="adrian@suse.de" date="1629460800">Features:
- cross architecture build support (for rpm and kiwi)
- modulemd meta data support
- pbuild to build multiple source packages
  (initial release, can not be considered stable yet)
- supporting external asset stores for source files
- support multiple post build checks placed in the directory:
  /usr/lib/build/post-build-checks/
- sccache support
- New --shell-after-fail option
- allow to disable squashfs in SimpleImage
- supporting aarch64 kernel on armv?l distributions
- kiwi: Add support for OBS-RemoteAsset and OBS-CopyToImage directives
- container: FROM scratch build support
  Improvements:
- supporting kvm builds as non-root user
- Extend stage selection support for rpm builds
- various distribution config updates
- Support "BuildFlags: cumulaterpms"
  (was done only via suse_version before)
  Fixes:
- container builds
  * support newer podman versions
  * supporting multiple containers for multi-stage builds
- Supporting URL's in Flatpak manifests
- epoch handling in debian builds
- catch more cases where a failed build is marked as host error
- fixing wrong status reporting when a job got killed
- hugetlbfs handling fixes
- try mounting selinuxfs in VM
- Also create the /sys dir when preinstalling (to satisfy dracut)
- various XML parser fixes
- and many minor ones</changelog>
  <changelog author="adrian@suse.de" date="1630324800">- fixed regression in multiline macro evaluation from 20th August release</changelog>
  <changelog author="adrian@suse.de" date="1630584000">- Fix unpacking of deb/arch archives without bsdtar</changelog>
  <changelog author="adrian@suse.de" date="1635163200">Features:
- deb zstd support (for Ubuntu 21.10)
- support KVM builds with enabled network
- modulemd support improvements
- Support a "Distmacro" directive for recipe parser-only macros
  Fixes:
- Load selinux policy when using a preinstall image
- Use the pax format for preinstall images if bsdtar is available
- Add %riscv to std_macros
- Fix combine_configs dropping newlines
  pbuild:
- Implement SCC calculation
- Improve --shell-after-build and --single options
- initial documentation of pbuild
- Bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1637841600">- renamed tumbleweed config to tumbleweed
- synced tumbleweed config changes
- initial config for Leap 15.4
- docker build environment
  * Use /.dockerenv as marker for docker environment
  * support privileged docker/nspawn mode
  * move --cap-add=SYS_ADMIN --cap-add=MKNOD to privileged mode
  * initvm: do not attempt to mount /proc and binfmt_misc handler if present
- pbuild
  * rename --hide-timestamps to --no-timestamps
  * reuse options from older builds
  * revised --single build mode
  * support ccache
- Unify ccache and sccache handling</changelog>
  <changelog author="adrian@suse.de" date="1646654400">Features:
  * download_assets: add --outdir --clean --show-dir-srcmd5 parameters
    support multiple --arch arguments
  * asset support for golang modules
  * add support for LXC 4.
  * new shortcuts for rpm building:
  - -rpm-noprep, --rpm-build-in-place, --rpm-build-in-place-noprep
    for building directly from upstream git repositories without
    any tar ball.
  * mount securityfs if not mounted by kernel-obs-build
  * collect steal time during VM builds in statistics.
  * declare armv8 and armv7 compatible
  * support OBS Debuginfo build flag for Red Hat variants
  * setup rpmmacros for all build types and earlier
  * Kiwi builds
  - Always append the profile name to kiwi container names
  * Dockerfile build
  - improve registry handling
  - initial Dockerfile.dapper support
  - support 'curl' commands in docker builds
  - strip known domains from container name
  - support container alias names
  * introducing --verbose option, currently only showing kernel
    messages.
  * support cpio creation for special files
  * handle QEMU &gt;= 6.0 on POWER9
  Changes:
  * Use git+https instead of git-https as url schema
  * add oops=panic kernel parameter
  * Updated distribution configurations (esp. Leap 15.4 and Tumbleweed)
  * new preinstallimages are using zstd by default
  * source subdirectories are used in git managed sources
  Minor improvements
  * change sccache default size limit
  * speed up improvements in
  - vm shutdown
  - rpm preinstall
  - avoid calling external commands in a loop
  - using zstd for preinstallimages
  - no more unpacking progress indicators to avoid slowdown
  - virtio handling
  * fixed vm-type=qemu
  * multiple smaller bugfixes and speed improvements</changelog>
  <changelog author="adrian@suse.de" date="1647259200">Changes:
  * pbuild: add --debug option for building debuginfo packages
  * rename --debug to --debuginfo to be more exact.
  * docu: add buildflags:ccachtype and OBS-DoNotAppendProfileToContainername
  Fixes:
  * Avoid shutdown of host when using nspawn</changelog>
  <changelog author="adrian@suse.de" date="1647345600">- regression fix from last release, avoid calling shutdown handler
  twice when building in vm</changelog>
  <changelog author="adrian@suse.de" date="1648555200">- docker: Add support for --root and --installroot global zypper options
- debian cross build support via multi-arch (obsoleting cbinstall remnants)
- Tumbleweed config synced
- documentation updates
- smaller bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1650628800">- Update SLE 15 SP4 and Leap 15.4 build config (bsc#1198740)
- Use aio=io_uring if available (bsc#1197699) (build#814)
- Add arm32 and loongarch definitions (build#808)
- Add compatibility code to initvm
- Use upstream way of binfmt argv0 preservation (bsc#1197298) (build#809)
- Add template support for Build::SimpleJSON
- minor documentation updates</changelog>
</package>
<package pkgid="3122f4aea457b66947cfca0ae43f65213361497a3cb8db9f2b53454704abf161" name="build" arch="src">
  <version epoch="0" ver="20220422" rel="150200.9.1"/>
  <changelog author="adrian@suse.de" date="1580299200">- 15.2 config: temporary revert gcrypt preinstall until distro has changed
- factory config: ignore libxtables for iproute2, not needed for ip tool
- Follow upstream rpm changes in regard to logical ops
- Fix macro expansion of lines containing newlines
- add missing header file to avoid compile warnings</changelog>
  <changelog author="adrian@suse.de" date="1580472000">- fix regression in &amp;&amp; operator handling of rpm spec file parser
- Correctly expand macros defined with %global</changelog>
  <changelog author="adrian@suse.de" date="1580904000">- 15.2 config: preinstall gcrypt deps again
- Recommends for Fedora based distros
- support obsgendiff funcationality
- various smaller code cleanups
- additional test cases for spec file parsing
- various fixes for cornercases during spec file parsing</changelog>
  <changelog author="adrian@suse.de" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="adrian@suse.de" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="FSchreiner@suse.com" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="adrian@suse.de" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="adrian@suse.de" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="adrian@suse.de" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
  <changelog author="adrian@suse.de" date="1629460800">Features:
- cross architecture build support (for rpm and kiwi)
- modulemd meta data support
- pbuild to build multiple source packages
  (initial release, can not be considered stable yet)
- supporting external asset stores for source files
- support multiple post build checks placed in the directory:
  /usr/lib/build/post-build-checks/
- sccache support
- New --shell-after-fail option
- allow to disable squashfs in SimpleImage
- supporting aarch64 kernel on armv?l distributions
- kiwi: Add support for OBS-RemoteAsset and OBS-CopyToImage directives
- container: FROM scratch build support
  Improvements:
- supporting kvm builds as non-root user
- Extend stage selection support for rpm builds
- various distribution config updates
- Support "BuildFlags: cumulaterpms"
  (was done only via suse_version before)
  Fixes:
- container builds
  * support newer podman versions
  * supporting multiple containers for multi-stage builds
- Supporting URL's in Flatpak manifests
- epoch handling in debian builds
- catch more cases where a failed build is marked as host error
- fixing wrong status reporting when a job got killed
- hugetlbfs handling fixes
- try mounting selinuxfs in VM
- Also create the /sys dir when preinstalling (to satisfy dracut)
- various XML parser fixes
- and many minor ones</changelog>
  <changelog author="adrian@suse.de" date="1630324800">- fixed regression in multiline macro evaluation from 20th August release</changelog>
  <changelog author="adrian@suse.de" date="1630584000">- Fix unpacking of deb/arch archives without bsdtar</changelog>
  <changelog author="adrian@suse.de" date="1635163200">Features:
- deb zstd support (for Ubuntu 21.10)
- support KVM builds with enabled network
- modulemd support improvements
- Support a "Distmacro" directive for recipe parser-only macros
  Fixes:
- Load selinux policy when using a preinstall image
- Use the pax format for preinstall images if bsdtar is available
- Add %riscv to std_macros
- Fix combine_configs dropping newlines
  pbuild:
- Implement SCC calculation
- Improve --shell-after-build and --single options
- initial documentation of pbuild
- Bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1637841600">- renamed tumbleweed config to tumbleweed
- synced tumbleweed config changes
- initial config for Leap 15.4
- docker build environment
  * Use /.dockerenv as marker for docker environment
  * support privileged docker/nspawn mode
  * move --cap-add=SYS_ADMIN --cap-add=MKNOD to privileged mode
  * initvm: do not attempt to mount /proc and binfmt_misc handler if present
- pbuild
  * rename --hide-timestamps to --no-timestamps
  * reuse options from older builds
  * revised --single build mode
  * support ccache
- Unify ccache and sccache handling</changelog>
  <changelog author="adrian@suse.de" date="1646654400">Features:
  * download_assets: add --outdir --clean --show-dir-srcmd5 parameters
    support multiple --arch arguments
  * asset support for golang modules
  * add support for LXC 4.
  * new shortcuts for rpm building:
  - -rpm-noprep, --rpm-build-in-place, --rpm-build-in-place-noprep
    for building directly from upstream git repositories without
    any tar ball.
  * mount securityfs if not mounted by kernel-obs-build
  * collect steal time during VM builds in statistics.
  * declare armv8 and armv7 compatible
  * support OBS Debuginfo build flag for Red Hat variants
  * setup rpmmacros for all build types and earlier
  * Kiwi builds
  - Always append the profile name to kiwi container names
  * Dockerfile build
  - improve registry handling
  - initial Dockerfile.dapper support
  - support 'curl' commands in docker builds
  - strip known domains from container name
  - support container alias names
  * introducing --verbose option, currently only showing kernel
    messages.
  * support cpio creation for special files
  * handle QEMU &gt;= 6.0 on POWER9
  Changes:
  * Use git+https instead of git-https as url schema
  * add oops=panic kernel parameter
  * Updated distribution configurations (esp. Leap 15.4 and Tumbleweed)
  * new preinstallimages are using zstd by default
  * source subdirectories are used in git managed sources
  Minor improvements
  * change sccache default size limit
  * speed up improvements in
  - vm shutdown
  - rpm preinstall
  - avoid calling external commands in a loop
  - using zstd for preinstallimages
  - no more unpacking progress indicators to avoid slowdown
  - virtio handling
  * fixed vm-type=qemu
  * multiple smaller bugfixes and speed improvements</changelog>
  <changelog author="adrian@suse.de" date="1647259200">Changes:
  * pbuild: add --debug option for building debuginfo packages
  * rename --debug to --debuginfo to be more exact.
  * docu: add buildflags:ccachtype and OBS-DoNotAppendProfileToContainername
  Fixes:
  * Avoid shutdown of host when using nspawn</changelog>
  <changelog author="adrian@suse.de" date="1647345600">- regression fix from last release, avoid calling shutdown handler
  twice when building in vm</changelog>
  <changelog author="adrian@suse.de" date="1648555200">- docker: Add support for --root and --installroot global zypper options
- debian cross build support via multi-arch (obsoleting cbinstall remnants)
- Tumbleweed config synced
- documentation updates
- smaller bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1650628800">- Update SLE 15 SP4 and Leap 15.4 build config (bsc#1198740)
- Use aio=io_uring if available (bsc#1197699) (build#814)
- Add arm32 and loongarch definitions (build#808)
- Add compatibility code to initvm
- Use upstream way of binfmt argv0 preservation (bsc#1197298) (build#809)
- Add template support for Build::SimpleJSON
- minor documentation updates</changelog>
</package>
<package pkgid="33578e5a1734dac79460ff300f518aebb941ba5da46dfbda51e43a0c454e477b" name="build-initvm-aarch64" arch="noarch">
  <version epoch="0" ver="20220422" rel="150200.9.1"/>
  <changelog author="adrian@suse.de" date="1580299200">- 15.2 config: temporary revert gcrypt preinstall until distro has changed
- factory config: ignore libxtables for iproute2, not needed for ip tool
- Follow upstream rpm changes in regard to logical ops
- Fix macro expansion of lines containing newlines
- add missing header file to avoid compile warnings</changelog>
  <changelog author="adrian@suse.de" date="1580472000">- fix regression in &amp;&amp; operator handling of rpm spec file parser
- Correctly expand macros defined with %global</changelog>
  <changelog author="adrian@suse.de" date="1580904000">- 15.2 config: preinstall gcrypt deps again
- Recommends for Fedora based distros
- support obsgendiff funcationality
- various smaller code cleanups
- additional test cases for spec file parsing
- various fixes for cornercases during spec file parsing</changelog>
  <changelog author="adrian@suse.de" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="adrian@suse.de" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="FSchreiner@suse.com" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="adrian@suse.de" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="adrian@suse.de" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="adrian@suse.de" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
  <changelog author="adrian@suse.de" date="1629460800">Features:
- cross architecture build support (for rpm and kiwi)
- modulemd meta data support
- pbuild to build multiple source packages
  (initial release, can not be considered stable yet)
- supporting external asset stores for source files
- support multiple post build checks placed in the directory:
  /usr/lib/build/post-build-checks/
- sccache support
- New --shell-after-fail option
- allow to disable squashfs in SimpleImage
- supporting aarch64 kernel on armv?l distributions
- kiwi: Add support for OBS-RemoteAsset and OBS-CopyToImage directives
- container: FROM scratch build support
  Improvements:
- supporting kvm builds as non-root user
- Extend stage selection support for rpm builds
- various distribution config updates
- Support "BuildFlags: cumulaterpms"
  (was done only via suse_version before)
  Fixes:
- container builds
  * support newer podman versions
  * supporting multiple containers for multi-stage builds
- Supporting URL's in Flatpak manifests
- epoch handling in debian builds
- catch more cases where a failed build is marked as host error
- fixing wrong status reporting when a job got killed
- hugetlbfs handling fixes
- try mounting selinuxfs in VM
- Also create the /sys dir when preinstalling (to satisfy dracut)
- various XML parser fixes
- and many minor ones</changelog>
  <changelog author="adrian@suse.de" date="1630324800">- fixed regression in multiline macro evaluation from 20th August release</changelog>
  <changelog author="adrian@suse.de" date="1630584000">- Fix unpacking of deb/arch archives without bsdtar</changelog>
  <changelog author="adrian@suse.de" date="1635163200">Features:
- deb zstd support (for Ubuntu 21.10)
- support KVM builds with enabled network
- modulemd support improvements
- Support a "Distmacro" directive for recipe parser-only macros
  Fixes:
- Load selinux policy when using a preinstall image
- Use the pax format for preinstall images if bsdtar is available
- Add %riscv to std_macros
- Fix combine_configs dropping newlines
  pbuild:
- Implement SCC calculation
- Improve --shell-after-build and --single options
- initial documentation of pbuild
- Bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1637841600">- renamed tumbleweed config to tumbleweed
- synced tumbleweed config changes
- initial config for Leap 15.4
- docker build environment
  * Use /.dockerenv as marker for docker environment
  * support privileged docker/nspawn mode
  * move --cap-add=SYS_ADMIN --cap-add=MKNOD to privileged mode
  * initvm: do not attempt to mount /proc and binfmt_misc handler if present
- pbuild
  * rename --hide-timestamps to --no-timestamps
  * reuse options from older builds
  * revised --single build mode
  * support ccache
- Unify ccache and sccache handling</changelog>
  <changelog author="adrian@suse.de" date="1646654400">Features:
  * download_assets: add --outdir --clean --show-dir-srcmd5 parameters
    support multiple --arch arguments
  * asset support for golang modules
  * add support for LXC 4.
  * new shortcuts for rpm building:
  - -rpm-noprep, --rpm-build-in-place, --rpm-build-in-place-noprep
    for building directly from upstream git repositories without
    any tar ball.
  * mount securityfs if not mounted by kernel-obs-build
  * collect steal time during VM builds in statistics.
  * declare armv8 and armv7 compatible
  * support OBS Debuginfo build flag for Red Hat variants
  * setup rpmmacros for all build types and earlier
  * Kiwi builds
  - Always append the profile name to kiwi container names
  * Dockerfile build
  - improve registry handling
  - initial Dockerfile.dapper support
  - support 'curl' commands in docker builds
  - strip known domains from container name
  - support container alias names
  * introducing --verbose option, currently only showing kernel
    messages.
  * support cpio creation for special files
  * handle QEMU &gt;= 6.0 on POWER9
  Changes:
  * Use git+https instead of git-https as url schema
  * add oops=panic kernel parameter
  * Updated distribution configurations (esp. Leap 15.4 and Tumbleweed)
  * new preinstallimages are using zstd by default
  * source subdirectories are used in git managed sources
  Minor improvements
  * change sccache default size limit
  * speed up improvements in
  - vm shutdown
  - rpm preinstall
  - avoid calling external commands in a loop
  - using zstd for preinstallimages
  - no more unpacking progress indicators to avoid slowdown
  - virtio handling
  * fixed vm-type=qemu
  * multiple smaller bugfixes and speed improvements</changelog>
  <changelog author="adrian@suse.de" date="1647259200">Changes:
  * pbuild: add --debug option for building debuginfo packages
  * rename --debug to --debuginfo to be more exact.
  * docu: add buildflags:ccachtype and OBS-DoNotAppendProfileToContainername
  Fixes:
  * Avoid shutdown of host when using nspawn</changelog>
  <changelog author="adrian@suse.de" date="1647345600">- regression fix from last release, avoid calling shutdown handler
  twice when building in vm</changelog>
  <changelog author="adrian@suse.de" date="1648555200">- docker: Add support for --root and --installroot global zypper options
- debian cross build support via multi-arch (obsoleting cbinstall remnants)
- Tumbleweed config synced
- documentation updates
- smaller bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1650628800">- Update SLE 15 SP4 and Leap 15.4 build config (bsc#1198740)
- Use aio=io_uring if available (bsc#1197699) (build#814)
- Add arm32 and loongarch definitions (build#808)
- Add compatibility code to initvm
- Use upstream way of binfmt argv0 preservation (bsc#1197298) (build#809)
- Add template support for Build::SimpleJSON
- minor documentation updates</changelog>
</package>
<package pkgid="9e813fa27f348c9fd954d0c603d175be2aa084639af0e8b13da3ee89372957ee" name="build-initvm-powerpc64le" arch="noarch">
  <version epoch="0" ver="20220422" rel="150200.9.1"/>
  <changelog author="adrian@suse.de" date="1580299200">- 15.2 config: temporary revert gcrypt preinstall until distro has changed
- factory config: ignore libxtables for iproute2, not needed for ip tool
- Follow upstream rpm changes in regard to logical ops
- Fix macro expansion of lines containing newlines
- add missing header file to avoid compile warnings</changelog>
  <changelog author="adrian@suse.de" date="1580472000">- fix regression in &amp;&amp; operator handling of rpm spec file parser
- Correctly expand macros defined with %global</changelog>
  <changelog author="adrian@suse.de" date="1580904000">- 15.2 config: preinstall gcrypt deps again
- Recommends for Fedora based distros
- support obsgendiff funcationality
- various smaller code cleanups
- additional test cases for spec file parsing
- various fixes for cornercases during spec file parsing</changelog>
  <changelog author="adrian@suse.de" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="adrian@suse.de" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="FSchreiner@suse.com" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="adrian@suse.de" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="adrian@suse.de" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="adrian@suse.de" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
  <changelog author="adrian@suse.de" date="1629460800">Features:
- cross architecture build support (for rpm and kiwi)
- modulemd meta data support
- pbuild to build multiple source packages
  (initial release, can not be considered stable yet)
- supporting external asset stores for source files
- support multiple post build checks placed in the directory:
  /usr/lib/build/post-build-checks/
- sccache support
- New --shell-after-fail option
- allow to disable squashfs in SimpleImage
- supporting aarch64 kernel on armv?l distributions
- kiwi: Add support for OBS-RemoteAsset and OBS-CopyToImage directives
- container: FROM scratch build support
  Improvements:
- supporting kvm builds as non-root user
- Extend stage selection support for rpm builds
- various distribution config updates
- Support "BuildFlags: cumulaterpms"
  (was done only via suse_version before)
  Fixes:
- container builds
  * support newer podman versions
  * supporting multiple containers for multi-stage builds
- Supporting URL's in Flatpak manifests
- epoch handling in debian builds
- catch more cases where a failed build is marked as host error
- fixing wrong status reporting when a job got killed
- hugetlbfs handling fixes
- try mounting selinuxfs in VM
- Also create the /sys dir when preinstalling (to satisfy dracut)
- various XML parser fixes
- and many minor ones</changelog>
  <changelog author="adrian@suse.de" date="1630324800">- fixed regression in multiline macro evaluation from 20th August release</changelog>
  <changelog author="adrian@suse.de" date="1630584000">- Fix unpacking of deb/arch archives without bsdtar</changelog>
  <changelog author="adrian@suse.de" date="1635163200">Features:
- deb zstd support (for Ubuntu 21.10)
- support KVM builds with enabled network
- modulemd support improvements
- Support a "Distmacro" directive for recipe parser-only macros
  Fixes:
- Load selinux policy when using a preinstall image
- Use the pax format for preinstall images if bsdtar is available
- Add %riscv to std_macros
- Fix combine_configs dropping newlines
  pbuild:
- Implement SCC calculation
- Improve --shell-after-build and --single options
- initial documentation of pbuild
- Bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1637841600">- renamed tumbleweed config to tumbleweed
- synced tumbleweed config changes
- initial config for Leap 15.4
- docker build environment
  * Use /.dockerenv as marker for docker environment
  * support privileged docker/nspawn mode
  * move --cap-add=SYS_ADMIN --cap-add=MKNOD to privileged mode
  * initvm: do not attempt to mount /proc and binfmt_misc handler if present
- pbuild
  * rename --hide-timestamps to --no-timestamps
  * reuse options from older builds
  * revised --single build mode
  * support ccache
- Unify ccache and sccache handling</changelog>
  <changelog author="adrian@suse.de" date="1646654400">Features:
  * download_assets: add --outdir --clean --show-dir-srcmd5 parameters
    support multiple --arch arguments
  * asset support for golang modules
  * add support for LXC 4.
  * new shortcuts for rpm building:
  - -rpm-noprep, --rpm-build-in-place, --rpm-build-in-place-noprep
    for building directly from upstream git repositories without
    any tar ball.
  * mount securityfs if not mounted by kernel-obs-build
  * collect steal time during VM builds in statistics.
  * declare armv8 and armv7 compatible
  * support OBS Debuginfo build flag for Red Hat variants
  * setup rpmmacros for all build types and earlier
  * Kiwi builds
  - Always append the profile name to kiwi container names
  * Dockerfile build
  - improve registry handling
  - initial Dockerfile.dapper support
  - support 'curl' commands in docker builds
  - strip known domains from container name
  - support container alias names
  * introducing --verbose option, currently only showing kernel
    messages.
  * support cpio creation for special files
  * handle QEMU &gt;= 6.0 on POWER9
  Changes:
  * Use git+https instead of git-https as url schema
  * add oops=panic kernel parameter
  * Updated distribution configurations (esp. Leap 15.4 and Tumbleweed)
  * new preinstallimages are using zstd by default
  * source subdirectories are used in git managed sources
  Minor improvements
  * change sccache default size limit
  * speed up improvements in
  - vm shutdown
  - rpm preinstall
  - avoid calling external commands in a loop
  - using zstd for preinstallimages
  - no more unpacking progress indicators to avoid slowdown
  - virtio handling
  * fixed vm-type=qemu
  * multiple smaller bugfixes and speed improvements</changelog>
  <changelog author="adrian@suse.de" date="1647259200">Changes:
  * pbuild: add --debug option for building debuginfo packages
  * rename --debug to --debuginfo to be more exact.
  * docu: add buildflags:ccachtype and OBS-DoNotAppendProfileToContainername
  Fixes:
  * Avoid shutdown of host when using nspawn</changelog>
  <changelog author="adrian@suse.de" date="1647345600">- regression fix from last release, avoid calling shutdown handler
  twice when building in vm</changelog>
  <changelog author="adrian@suse.de" date="1648555200">- docker: Add support for --root and --installroot global zypper options
- debian cross build support via multi-arch (obsoleting cbinstall remnants)
- Tumbleweed config synced
- documentation updates
- smaller bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1650628800">- Update SLE 15 SP4 and Leap 15.4 build config (bsc#1198740)
- Use aio=io_uring if available (bsc#1197699) (build#814)
- Add arm32 and loongarch definitions (build#808)
- Add compatibility code to initvm
- Use upstream way of binfmt argv0 preservation (bsc#1197298) (build#809)
- Add template support for Build::SimpleJSON
- minor documentation updates</changelog>
</package>
<package pkgid="b8f13dd16316814efceeeb68fb0b35372c5c9efb8d47fe40fc1b79cdc6494636" name="build-initvm-s390x" arch="noarch">
  <version epoch="0" ver="20220422" rel="150200.9.1"/>
  <changelog author="adrian@suse.de" date="1580299200">- 15.2 config: temporary revert gcrypt preinstall until distro has changed
- factory config: ignore libxtables for iproute2, not needed for ip tool
- Follow upstream rpm changes in regard to logical ops
- Fix macro expansion of lines containing newlines
- add missing header file to avoid compile warnings</changelog>
  <changelog author="adrian@suse.de" date="1580472000">- fix regression in &amp;&amp; operator handling of rpm spec file parser
- Correctly expand macros defined with %global</changelog>
  <changelog author="adrian@suse.de" date="1580904000">- 15.2 config: preinstall gcrypt deps again
- Recommends for Fedora based distros
- support obsgendiff funcationality
- various smaller code cleanups
- additional test cases for spec file parsing
- various fixes for cornercases during spec file parsing</changelog>
  <changelog author="adrian@suse.de" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="adrian@suse.de" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="FSchreiner@suse.com" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="adrian@suse.de" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="adrian@suse.de" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="adrian@suse.de" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
  <changelog author="adrian@suse.de" date="1629460800">Features:
- cross architecture build support (for rpm and kiwi)
- modulemd meta data support
- pbuild to build multiple source packages
  (initial release, can not be considered stable yet)
- supporting external asset stores for source files
- support multiple post build checks placed in the directory:
  /usr/lib/build/post-build-checks/
- sccache support
- New --shell-after-fail option
- allow to disable squashfs in SimpleImage
- supporting aarch64 kernel on armv?l distributions
- kiwi: Add support for OBS-RemoteAsset and OBS-CopyToImage directives
- container: FROM scratch build support
  Improvements:
- supporting kvm builds as non-root user
- Extend stage selection support for rpm builds
- various distribution config updates
- Support "BuildFlags: cumulaterpms"
  (was done only via suse_version before)
  Fixes:
- container builds
  * support newer podman versions
  * supporting multiple containers for multi-stage builds
- Supporting URL's in Flatpak manifests
- epoch handling in debian builds
- catch more cases where a failed build is marked as host error
- fixing wrong status reporting when a job got killed
- hugetlbfs handling fixes
- try mounting selinuxfs in VM
- Also create the /sys dir when preinstalling (to satisfy dracut)
- various XML parser fixes
- and many minor ones</changelog>
  <changelog author="adrian@suse.de" date="1630324800">- fixed regression in multiline macro evaluation from 20th August release</changelog>
  <changelog author="adrian@suse.de" date="1630584000">- Fix unpacking of deb/arch archives without bsdtar</changelog>
  <changelog author="adrian@suse.de" date="1635163200">Features:
- deb zstd support (for Ubuntu 21.10)
- support KVM builds with enabled network
- modulemd support improvements
- Support a "Distmacro" directive for recipe parser-only macros
  Fixes:
- Load selinux policy when using a preinstall image
- Use the pax format for preinstall images if bsdtar is available
- Add %riscv to std_macros
- Fix combine_configs dropping newlines
  pbuild:
- Implement SCC calculation
- Improve --shell-after-build and --single options
- initial documentation of pbuild
- Bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1637841600">- renamed tumbleweed config to tumbleweed
- synced tumbleweed config changes
- initial config for Leap 15.4
- docker build environment
  * Use /.dockerenv as marker for docker environment
  * support privileged docker/nspawn mode
  * move --cap-add=SYS_ADMIN --cap-add=MKNOD to privileged mode
  * initvm: do not attempt to mount /proc and binfmt_misc handler if present
- pbuild
  * rename --hide-timestamps to --no-timestamps
  * reuse options from older builds
  * revised --single build mode
  * support ccache
- Unify ccache and sccache handling</changelog>
  <changelog author="adrian@suse.de" date="1646654400">Features:
  * download_assets: add --outdir --clean --show-dir-srcmd5 parameters
    support multiple --arch arguments
  * asset support for golang modules
  * add support for LXC 4.
  * new shortcuts for rpm building:
  - -rpm-noprep, --rpm-build-in-place, --rpm-build-in-place-noprep
    for building directly from upstream git repositories without
    any tar ball.
  * mount securityfs if not mounted by kernel-obs-build
  * collect steal time during VM builds in statistics.
  * declare armv8 and armv7 compatible
  * support OBS Debuginfo build flag for Red Hat variants
  * setup rpmmacros for all build types and earlier
  * Kiwi builds
  - Always append the profile name to kiwi container names
  * Dockerfile build
  - improve registry handling
  - initial Dockerfile.dapper support
  - support 'curl' commands in docker builds
  - strip known domains from container name
  - support container alias names
  * introducing --verbose option, currently only showing kernel
    messages.
  * support cpio creation for special files
  * handle QEMU &gt;= 6.0 on POWER9
  Changes:
  * Use git+https instead of git-https as url schema
  * add oops=panic kernel parameter
  * Updated distribution configurations (esp. Leap 15.4 and Tumbleweed)
  * new preinstallimages are using zstd by default
  * source subdirectories are used in git managed sources
  Minor improvements
  * change sccache default size limit
  * speed up improvements in
  - vm shutdown
  - rpm preinstall
  - avoid calling external commands in a loop
  - using zstd for preinstallimages
  - no more unpacking progress indicators to avoid slowdown
  - virtio handling
  * fixed vm-type=qemu
  * multiple smaller bugfixes and speed improvements</changelog>
  <changelog author="adrian@suse.de" date="1647259200">Changes:
  * pbuild: add --debug option for building debuginfo packages
  * rename --debug to --debuginfo to be more exact.
  * docu: add buildflags:ccachtype and OBS-DoNotAppendProfileToContainername
  Fixes:
  * Avoid shutdown of host when using nspawn</changelog>
  <changelog author="adrian@suse.de" date="1647345600">- regression fix from last release, avoid calling shutdown handler
  twice when building in vm</changelog>
  <changelog author="adrian@suse.de" date="1648555200">- docker: Add support for --root and --installroot global zypper options
- debian cross build support via multi-arch (obsoleting cbinstall remnants)
- Tumbleweed config synced
- documentation updates
- smaller bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1650628800">- Update SLE 15 SP4 and Leap 15.4 build config (bsc#1198740)
- Use aio=io_uring if available (bsc#1197699) (build#814)
- Add arm32 and loongarch definitions (build#808)
- Add compatibility code to initvm
- Use upstream way of binfmt argv0 preservation (bsc#1197298) (build#809)
- Add template support for Build::SimpleJSON
- minor documentation updates</changelog>
</package>
<package pkgid="c95c75fe92deba4ae6bbe0b539ddb081091b4b07e2b834bc8ff06e4587d0c2c3" name="build-initvm-x86_64" arch="noarch">
  <version epoch="0" ver="20220422" rel="150200.9.1"/>
  <changelog author="adrian@suse.de" date="1580299200">- 15.2 config: temporary revert gcrypt preinstall until distro has changed
- factory config: ignore libxtables for iproute2, not needed for ip tool
- Follow upstream rpm changes in regard to logical ops
- Fix macro expansion of lines containing newlines
- add missing header file to avoid compile warnings</changelog>
  <changelog author="adrian@suse.de" date="1580472000">- fix regression in &amp;&amp; operator handling of rpm spec file parser
- Correctly expand macros defined with %global</changelog>
  <changelog author="adrian@suse.de" date="1580904000">- 15.2 config: preinstall gcrypt deps again
- Recommends for Fedora based distros
- support obsgendiff funcationality
- various smaller code cleanups
- additional test cases for spec file parsing
- various fixes for cornercases during spec file parsing</changelog>
  <changelog author="adrian@suse.de" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="adrian@suse.de" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="FSchreiner@suse.com" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="adrian@suse.de" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="adrian@suse.de" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="adrian@suse.de" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
  <changelog author="adrian@suse.de" date="1629460800">Features:
- cross architecture build support (for rpm and kiwi)
- modulemd meta data support
- pbuild to build multiple source packages
  (initial release, can not be considered stable yet)
- supporting external asset stores for source files
- support multiple post build checks placed in the directory:
  /usr/lib/build/post-build-checks/
- sccache support
- New --shell-after-fail option
- allow to disable squashfs in SimpleImage
- supporting aarch64 kernel on armv?l distributions
- kiwi: Add support for OBS-RemoteAsset and OBS-CopyToImage directives
- container: FROM scratch build support
  Improvements:
- supporting kvm builds as non-root user
- Extend stage selection support for rpm builds
- various distribution config updates
- Support "BuildFlags: cumulaterpms"
  (was done only via suse_version before)
  Fixes:
- container builds
  * support newer podman versions
  * supporting multiple containers for multi-stage builds
- Supporting URL's in Flatpak manifests
- epoch handling in debian builds
- catch more cases where a failed build is marked as host error
- fixing wrong status reporting when a job got killed
- hugetlbfs handling fixes
- try mounting selinuxfs in VM
- Also create the /sys dir when preinstalling (to satisfy dracut)
- various XML parser fixes
- and many minor ones</changelog>
  <changelog author="adrian@suse.de" date="1630324800">- fixed regression in multiline macro evaluation from 20th August release</changelog>
  <changelog author="adrian@suse.de" date="1630584000">- Fix unpacking of deb/arch archives without bsdtar</changelog>
  <changelog author="adrian@suse.de" date="1635163200">Features:
- deb zstd support (for Ubuntu 21.10)
- support KVM builds with enabled network
- modulemd support improvements
- Support a "Distmacro" directive for recipe parser-only macros
  Fixes:
- Load selinux policy when using a preinstall image
- Use the pax format for preinstall images if bsdtar is available
- Add %riscv to std_macros
- Fix combine_configs dropping newlines
  pbuild:
- Implement SCC calculation
- Improve --shell-after-build and --single options
- initial documentation of pbuild
- Bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1637841600">- renamed tumbleweed config to tumbleweed
- synced tumbleweed config changes
- initial config for Leap 15.4
- docker build environment
  * Use /.dockerenv as marker for docker environment
  * support privileged docker/nspawn mode
  * move --cap-add=SYS_ADMIN --cap-add=MKNOD to privileged mode
  * initvm: do not attempt to mount /proc and binfmt_misc handler if present
- pbuild
  * rename --hide-timestamps to --no-timestamps
  * reuse options from older builds
  * revised --single build mode
  * support ccache
- Unify ccache and sccache handling</changelog>
  <changelog author="adrian@suse.de" date="1646654400">Features:
  * download_assets: add --outdir --clean --show-dir-srcmd5 parameters
    support multiple --arch arguments
  * asset support for golang modules
  * add support for LXC 4.
  * new shortcuts for rpm building:
  - -rpm-noprep, --rpm-build-in-place, --rpm-build-in-place-noprep
    for building directly from upstream git repositories without
    any tar ball.
  * mount securityfs if not mounted by kernel-obs-build
  * collect steal time during VM builds in statistics.
  * declare armv8 and armv7 compatible
  * support OBS Debuginfo build flag for Red Hat variants
  * setup rpmmacros for all build types and earlier
  * Kiwi builds
  - Always append the profile name to kiwi container names
  * Dockerfile build
  - improve registry handling
  - initial Dockerfile.dapper support
  - support 'curl' commands in docker builds
  - strip known domains from container name
  - support container alias names
  * introducing --verbose option, currently only showing kernel
    messages.
  * support cpio creation for special files
  * handle QEMU &gt;= 6.0 on POWER9
  Changes:
  * Use git+https instead of git-https as url schema
  * add oops=panic kernel parameter
  * Updated distribution configurations (esp. Leap 15.4 and Tumbleweed)
  * new preinstallimages are using zstd by default
  * source subdirectories are used in git managed sources
  Minor improvements
  * change sccache default size limit
  * speed up improvements in
  - vm shutdown
  - rpm preinstall
  - avoid calling external commands in a loop
  - using zstd for preinstallimages
  - no more unpacking progress indicators to avoid slowdown
  - virtio handling
  * fixed vm-type=qemu
  * multiple smaller bugfixes and speed improvements</changelog>
  <changelog author="adrian@suse.de" date="1647259200">Changes:
  * pbuild: add --debug option for building debuginfo packages
  * rename --debug to --debuginfo to be more exact.
  * docu: add buildflags:ccachtype and OBS-DoNotAppendProfileToContainername
  Fixes:
  * Avoid shutdown of host when using nspawn</changelog>
  <changelog author="adrian@suse.de" date="1647345600">- regression fix from last release, avoid calling shutdown handler
  twice when building in vm</changelog>
  <changelog author="adrian@suse.de" date="1648555200">- docker: Add support for --root and --installroot global zypper options
- debian cross build support via multi-arch (obsoleting cbinstall remnants)
- Tumbleweed config synced
- documentation updates
- smaller bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1650628800">- Update SLE 15 SP4 and Leap 15.4 build config (bsc#1198740)
- Use aio=io_uring if available (bsc#1197699) (build#814)
- Add arm32 and loongarch definitions (build#808)
- Add compatibility code to initvm
- Use upstream way of binfmt argv0 preservation (bsc#1197298) (build#809)
- Add template support for Build::SimpleJSON
- minor documentation updates</changelog>
</package>
<package pkgid="f00ffb0a6975dcd1d61ffc55ab9010293fb7da425df2e203e3419f3572dcf571" name="build-mkbaselibs" arch="noarch">
  <version epoch="0" ver="20220422" rel="150200.9.1"/>
  <changelog author="adrian@suse.de" date="1580299200">- 15.2 config: temporary revert gcrypt preinstall until distro has changed
- factory config: ignore libxtables for iproute2, not needed for ip tool
- Follow upstream rpm changes in regard to logical ops
- Fix macro expansion of lines containing newlines
- add missing header file to avoid compile warnings</changelog>
  <changelog author="adrian@suse.de" date="1580472000">- fix regression in &amp;&amp; operator handling of rpm spec file parser
- Correctly expand macros defined with %global</changelog>
  <changelog author="adrian@suse.de" date="1580904000">- 15.2 config: preinstall gcrypt deps again
- Recommends for Fedora based distros
- support obsgendiff funcationality
- various smaller code cleanups
- additional test cases for spec file parsing
- various fixes for cornercases during spec file parsing</changelog>
  <changelog author="adrian@suse.de" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="adrian@suse.de" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="FSchreiner@suse.com" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="adrian@suse.de" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="adrian@suse.de" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="adrian@suse.de" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
  <changelog author="adrian@suse.de" date="1629460800">Features:
- cross architecture build support (for rpm and kiwi)
- modulemd meta data support
- pbuild to build multiple source packages
  (initial release, can not be considered stable yet)
- supporting external asset stores for source files
- support multiple post build checks placed in the directory:
  /usr/lib/build/post-build-checks/
- sccache support
- New --shell-after-fail option
- allow to disable squashfs in SimpleImage
- supporting aarch64 kernel on armv?l distributions
- kiwi: Add support for OBS-RemoteAsset and OBS-CopyToImage directives
- container: FROM scratch build support
  Improvements:
- supporting kvm builds as non-root user
- Extend stage selection support for rpm builds
- various distribution config updates
- Support "BuildFlags: cumulaterpms"
  (was done only via suse_version before)
  Fixes:
- container builds
  * support newer podman versions
  * supporting multiple containers for multi-stage builds
- Supporting URL's in Flatpak manifests
- epoch handling in debian builds
- catch more cases where a failed build is marked as host error
- fixing wrong status reporting when a job got killed
- hugetlbfs handling fixes
- try mounting selinuxfs in VM
- Also create the /sys dir when preinstalling (to satisfy dracut)
- various XML parser fixes
- and many minor ones</changelog>
  <changelog author="adrian@suse.de" date="1630324800">- fixed regression in multiline macro evaluation from 20th August release</changelog>
  <changelog author="adrian@suse.de" date="1630584000">- Fix unpacking of deb/arch archives without bsdtar</changelog>
  <changelog author="adrian@suse.de" date="1635163200">Features:
- deb zstd support (for Ubuntu 21.10)
- support KVM builds with enabled network
- modulemd support improvements
- Support a "Distmacro" directive for recipe parser-only macros
  Fixes:
- Load selinux policy when using a preinstall image
- Use the pax format for preinstall images if bsdtar is available
- Add %riscv to std_macros
- Fix combine_configs dropping newlines
  pbuild:
- Implement SCC calculation
- Improve --shell-after-build and --single options
- initial documentation of pbuild
- Bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1637841600">- renamed tumbleweed config to tumbleweed
- synced tumbleweed config changes
- initial config for Leap 15.4
- docker build environment
  * Use /.dockerenv as marker for docker environment
  * support privileged docker/nspawn mode
  * move --cap-add=SYS_ADMIN --cap-add=MKNOD to privileged mode
  * initvm: do not attempt to mount /proc and binfmt_misc handler if present
- pbuild
  * rename --hide-timestamps to --no-timestamps
  * reuse options from older builds
  * revised --single build mode
  * support ccache
- Unify ccache and sccache handling</changelog>
  <changelog author="adrian@suse.de" date="1646654400">Features:
  * download_assets: add --outdir --clean --show-dir-srcmd5 parameters
    support multiple --arch arguments
  * asset support for golang modules
  * add support for LXC 4.
  * new shortcuts for rpm building:
  - -rpm-noprep, --rpm-build-in-place, --rpm-build-in-place-noprep
    for building directly from upstream git repositories without
    any tar ball.
  * mount securityfs if not mounted by kernel-obs-build
  * collect steal time during VM builds in statistics.
  * declare armv8 and armv7 compatible
  * support OBS Debuginfo build flag for Red Hat variants
  * setup rpmmacros for all build types and earlier
  * Kiwi builds
  - Always append the profile name to kiwi container names
  * Dockerfile build
  - improve registry handling
  - initial Dockerfile.dapper support
  - support 'curl' commands in docker builds
  - strip known domains from container name
  - support container alias names
  * introducing --verbose option, currently only showing kernel
    messages.
  * support cpio creation for special files
  * handle QEMU &gt;= 6.0 on POWER9
  Changes:
  * Use git+https instead of git-https as url schema
  * add oops=panic kernel parameter
  * Updated distribution configurations (esp. Leap 15.4 and Tumbleweed)
  * new preinstallimages are using zstd by default
  * source subdirectories are used in git managed sources
  Minor improvements
  * change sccache default size limit
  * speed up improvements in
  - vm shutdown
  - rpm preinstall
  - avoid calling external commands in a loop
  - using zstd for preinstallimages
  - no more unpacking progress indicators to avoid slowdown
  - virtio handling
  * fixed vm-type=qemu
  * multiple smaller bugfixes and speed improvements</changelog>
  <changelog author="adrian@suse.de" date="1647259200">Changes:
  * pbuild: add --debug option for building debuginfo packages
  * rename --debug to --debuginfo to be more exact.
  * docu: add buildflags:ccachtype and OBS-DoNotAppendProfileToContainername
  Fixes:
  * Avoid shutdown of host when using nspawn</changelog>
  <changelog author="adrian@suse.de" date="1647345600">- regression fix from last release, avoid calling shutdown handler
  twice when building in vm</changelog>
  <changelog author="adrian@suse.de" date="1648555200">- docker: Add support for --root and --installroot global zypper options
- debian cross build support via multi-arch (obsoleting cbinstall remnants)
- Tumbleweed config synced
- documentation updates
- smaller bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1650628800">- Update SLE 15 SP4 and Leap 15.4 build config (bsc#1198740)
- Use aio=io_uring if available (bsc#1197699) (build#814)
- Add arm32 and loongarch definitions (build#808)
- Add compatibility code to initvm
- Use upstream way of binfmt argv0 preservation (bsc#1197298) (build#809)
- Add template support for Build::SimpleJSON
- minor documentation updates</changelog>
</package>
<package pkgid="a95ec5e13109fad94df6869347f16637af4a2c28821cf00723dc49b9d64e0e94" name="build-mkdrpms" arch="noarch">
  <version epoch="0" ver="20220422" rel="150200.9.1"/>
  <changelog author="adrian@suse.de" date="1580299200">- 15.2 config: temporary revert gcrypt preinstall until distro has changed
- factory config: ignore libxtables for iproute2, not needed for ip tool
- Follow upstream rpm changes in regard to logical ops
- Fix macro expansion of lines containing newlines
- add missing header file to avoid compile warnings</changelog>
  <changelog author="adrian@suse.de" date="1580472000">- fix regression in &amp;&amp; operator handling of rpm spec file parser
- Correctly expand macros defined with %global</changelog>
  <changelog author="adrian@suse.de" date="1580904000">- 15.2 config: preinstall gcrypt deps again
- Recommends for Fedora based distros
- support obsgendiff funcationality
- various smaller code cleanups
- additional test cases for spec file parsing
- various fixes for cornercases during spec file parsing</changelog>
  <changelog author="adrian@suse.de" date="1581336000">- Spec parser: add support for %elif, %elifarch, %elifos
- Support rpm's %include statement (EXPERIMENTAL, known limitations)
- Do not do vminstall expansion in expanddeps unless --vm is used</changelog>
  <changelog author="adrian@suse.de" date="1584100800">- Leap 15.2 config update (libzstd1 for rpm)
- handle obscpio extraction error as fatal
- Return correct exit code from systemd-nspawn build
- Spec parser: do not parse included files from end to start
- running disk full check also outside of VM
- run disk full check only for chroot</changelog>
  <changelog author="coolo@suse.com" date="1589716800">- enable sysrq operations on boot
- Set kvm_serial_device to virtio-serial in the fixup
- Split console arg setting code into kvm_add_console_args
- Update for zVM to make container builds work.
- Write to /proc/sys/kernel/hostname if the hostname command is not available
- Use --cgroup-manager=cgroupfs when calling podman
- Also squash by default in podman builds
- Support different interpreters in prein/postin scriptlets
- Use grep -E instead of egrep to check for the needsbinariesforbuild flag
- Use new Build::Intrepo module
- Add new Intrepo module to read/write build's internal repo format
- remove .gz from _ccache archive as it is no longer compressed
- Add support for Arch in build-recipe-kiwi
- Autodetect whether to use --pipe option of systemd-nspawn.
- Split parse_depfile() from readdeps()
- enable compression on ccache
- add bugzilla numbers for s390 workaround
- extend --ccache to generate _ccache.tar.gz and implement --pkg-ccache
- disable transparent_hugepage on s390x guests for now, causes hangs
- set buildflavor also for Build::parse</changelog>
  <changelog author="FSchreiner@suse.com" date="1595505600">- fix dependencies for Fedora 33
- Set $YAML::XS::LoadBlessed = 0 for Appimage/Snapcraft
- add a new variable to track build time needed for ccache eviction
- create folder for ccache archive to be copied before rsync
- also package pkg-config files by default into baselibs. (bsc#1172563 etc)
- Use shorter kernel flag for mitigations
- Ignore, if shutdown behavior changed by build in z/VM
- Control disk-space consumption while creating ccache archive
- cleaning ccache
- create folders before trying to copy ccache.tar
- Generate .packages and .basepackages files for docker builds</changelog>
  <changelog author="adrian@suse.de" date="1597924800">- fix factory version in config file bsc#1170956
- add missing ignores for Leap 15.2 bsc#1174854
- fix sysrq handling for KVM builds
- avoid double removal of obscpio files
- docker:
  * support builds using USER root statements
  * proper error handling when obs-docker-support gets called as
    non-root
  * helm build target support
  * support milestone handling
- support repo files without types set (SLE 15 SP2 zypp)
- add default substitute for system-packages:repo-creation
- Support recursive kiwi profile usage</changelog>
  <changelog author="adrian@suse.de" date="1598616000">- support rpmlint installed in /usr/bin/ as well
- fix local build for armv6hl
- Extract generated chart from the tarball instead of using the recipe</changelog>
  <changelog author="adrian@suse.de" date="1611144000">Features:
- initial flatpak build support added
- ccache support added
- debtransform: Add Debian revision if not present
- allow nodirindex filesystems via BuildFlags: vmfsoptions:nodirindex
- Also do rich dep handling for PreReqs
- kiwi image: configure ndb database if we install the rpm-ndb package
- Implement alternative method to specify build-ignores
  Changes:
- Ignore kiwi-image: deps when expanding image packages
  Fixes:
- Improve autonumbering of source/patch
- init_buildsystem: fix mode of /dev/full
- drop option transparent_hugepages=never on s390x
- Allow --vmdisk-filesystem-options as alias for --vm-disk-filesystem-options
- Do not add a "kiwi-packagemanager:" dependency if no package manager is defined
- debian:
  - Do not leave trailing whitespace while generating .dsc
  - Save modified version into .dsc file
  - Fail `debtransform` test if `debdiff` can't find something
  - return the unmapped arch if it is not found in the mapping hash
  - build-recipe-debootstrap: add fallback for Debian SID distro</changelog>
  <changelog author="adrian@suse.de" date="1629460800">Features:
- cross architecture build support (for rpm and kiwi)
- modulemd meta data support
- pbuild to build multiple source packages
  (initial release, can not be considered stable yet)
- supporting external asset stores for source files
- support multiple post build checks placed in the directory:
  /usr/lib/build/post-build-checks/
- sccache support
- New --shell-after-fail option
- allow to disable squashfs in SimpleImage
- supporting aarch64 kernel on armv?l distributions
- kiwi: Add support for OBS-RemoteAsset and OBS-CopyToImage directives
- container: FROM scratch build support
  Improvements:
- supporting kvm builds as non-root user
- Extend stage selection support for rpm builds
- various distribution config updates
- Support "BuildFlags: cumulaterpms"
  (was done only via suse_version before)
  Fixes:
- container builds
  * support newer podman versions
  * supporting multiple containers for multi-stage builds
- Supporting URL's in Flatpak manifests
- epoch handling in debian builds
- catch more cases where a failed build is marked as host error
- fixing wrong status reporting when a job got killed
- hugetlbfs handling fixes
- try mounting selinuxfs in VM
- Also create the /sys dir when preinstalling (to satisfy dracut)
- various XML parser fixes
- and many minor ones</changelog>
  <changelog author="adrian@suse.de" date="1630324800">- fixed regression in multiline macro evaluation from 20th August release</changelog>
  <changelog author="adrian@suse.de" date="1630584000">- Fix unpacking of deb/arch archives without bsdtar</changelog>
  <changelog author="adrian@suse.de" date="1635163200">Features:
- deb zstd support (for Ubuntu 21.10)
- support KVM builds with enabled network
- modulemd support improvements
- Support a "Distmacro" directive for recipe parser-only macros
  Fixes:
- Load selinux policy when using a preinstall image
- Use the pax format for preinstall images if bsdtar is available
- Add %riscv to std_macros
- Fix combine_configs dropping newlines
  pbuild:
- Implement SCC calculation
- Improve --shell-after-build and --single options
- initial documentation of pbuild
- Bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1637841600">- renamed tumbleweed config to tumbleweed
- synced tumbleweed config changes
- initial config for Leap 15.4
- docker build environment
  * Use /.dockerenv as marker for docker environment
  * support privileged docker/nspawn mode
  * move --cap-add=SYS_ADMIN --cap-add=MKNOD to privileged mode
  * initvm: do not attempt to mount /proc and binfmt_misc handler if present
- pbuild
  * rename --hide-timestamps to --no-timestamps
  * reuse options from older builds
  * revised --single build mode
  * support ccache
- Unify ccache and sccache handling</changelog>
  <changelog author="adrian@suse.de" date="1646654400">Features:
  * download_assets: add --outdir --clean --show-dir-srcmd5 parameters
    support multiple --arch arguments
  * asset support for golang modules
  * add support for LXC 4.
  * new shortcuts for rpm building:
  - -rpm-noprep, --rpm-build-in-place, --rpm-build-in-place-noprep
    for building directly from upstream git repositories without
    any tar ball.
  * mount securityfs if not mounted by kernel-obs-build
  * collect steal time during VM builds in statistics.
  * declare armv8 and armv7 compatible
  * support OBS Debuginfo build flag for Red Hat variants
  * setup rpmmacros for all build types and earlier
  * Kiwi builds
  - Always append the profile name to kiwi container names
  * Dockerfile build
  - improve registry handling
  - initial Dockerfile.dapper support
  - support 'curl' commands in docker builds
  - strip known domains from container name
  - support container alias names
  * introducing --verbose option, currently only showing kernel
    messages.
  * support cpio creation for special files
  * handle QEMU &gt;= 6.0 on POWER9
  Changes:
  * Use git+https instead of git-https as url schema
  * add oops=panic kernel parameter
  * Updated distribution configurations (esp. Leap 15.4 and Tumbleweed)
  * new preinstallimages are using zstd by default
  * source subdirectories are used in git managed sources
  Minor improvements
  * change sccache default size limit
  * speed up improvements in
  - vm shutdown
  - rpm preinstall
  - avoid calling external commands in a loop
  - using zstd for preinstallimages
  - no more unpacking progress indicators to avoid slowdown
  - virtio handling
  * fixed vm-type=qemu
  * multiple smaller bugfixes and speed improvements</changelog>
  <changelog author="adrian@suse.de" date="1647259200">Changes:
  * pbuild: add --debug option for building debuginfo packages
  * rename --debug to --debuginfo to be more exact.
  * docu: add buildflags:ccachtype and OBS-DoNotAppendProfileToContainername
  Fixes:
  * Avoid shutdown of host when using nspawn</changelog>
  <changelog author="adrian@suse.de" date="1647345600">- regression fix from last release, avoid calling shutdown handler
  twice when building in vm</changelog>
  <changelog author="adrian@suse.de" date="1648555200">- docker: Add support for --root and --installroot global zypper options
- debian cross build support via multi-arch (obsoleting cbinstall remnants)
- Tumbleweed config synced
- documentation updates
- smaller bugfixes</changelog>
  <changelog author="adrian@suse.de" date="1650628800">- Update SLE 15 SP4 and Leap 15.4 build config (bsc#1198740)
- Use aio=io_uring if available (bsc#1197699) (build#814)
- Add arm32 and loongarch definitions (build#808)
- Add compatibility code to initvm
- Use upstream way of binfmt argv0 preservation (bsc#1197298) (build#809)
- Add template support for Build::SimpleJSON
- minor documentation updates</changelog>
</package>
<package pkgid="b849701f5465aa1362aace4358cff21f70c8f06fa8fe7b630a6d73ee41800e1f" name="caca-utils" arch="aarch64">
  <version epoch="0" ver="0.99.beta19.git20171003" rel="150200.11.6.1"/>
  <changelog author="olaf@aepfle.de" date="1421323200">- Remove __DATE__ usage from cacaclock</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 0.99beta19
  * No changelog available
- Remove automake-1.12.patch; fixed on upstream release</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- Update libcaca-ruby_vendor_install.patch: Use RbConfig::CONFIG
  instead of Config::Config to be compatible with ruby 2.2.</changelog>
  <changelog author="dvlaeev@suse.com" date="1426852800">- Build without Mono by default
  coolo says: "We don't want mono in Factory, if somebody needs it
  it should be set explicit (with_mono) per prjconf"</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Add libcaca-ncurses6.patch: defined against a function name never
  worked, so set_escdelay was actually never used. With curses 6.0,
  though, ESCDELAY is no longer 'a variable', but a reference to a
  function, so we can't assign anything to it. We just assume that
  we always use a recent enough version of ncurses to have
  set_escdelay avaialble.</changelog>
  <changelog author="hguo@suse.com" date="1457697600">- Require imlib2-loaders in caca-utils package.
  All of the utilities fail to load any image without the dependency.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Fix URL
- Mention github repo containing more changes
- Format with spec-cleaner
- Remove support for older distros lets stick with latest only
- Remove for years disabled mono and java integration code snippets
- Use python macros to build python instead of waiting for autotools
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Switch to git repack service in order to get all the latest fixes
  * like python3 porting of the bindings
- Update to version 0.99.beta19+git20171002.da28e96:
  * img2text.c: fix width arg case in example
  * ruby: require 'caca' instead of 'caca.so'
  * Only fail the check-copyright test if more than 10 files are affected.
  * Try to run Coverity from Travis CI.
  * Add some missing breaks (thanks coverity)
  * Fix header copyright.
  * Fix a bug into the autorepeat trigger.
- Refresh patches:
  * libcaca-ruby_am_cflags.patch
  * libcaca-ruby_vendor_install.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop the py2 bindings they fail to build using rpm macros and
  somehow ingnore LD_LIBRARY_PATH, anyway provide py3 variant and
  stick with that</changelog>
  <changelog author="davejplater@gmail.com" date="1517313600">- Deleted _service and use spec file to download git version.
- Shorten version field to joliet usable length.
- Change python headers to allow bindings to build normally with
  python3.
- Use %license for license document.</changelog>
  <changelog author="josef.moellers@suse.com" date="1547553600">- Fix the size of width and height to be of size_t rather than
  unsigned int which may be too small on 64 bit architectures.
  This fixes three CVS and associated bugs.
  [CVE-2018-20545, bsc#1120584, CVE-2018-20548, bsc#1120589,
  CVE-2018-20549, bsc#1120470, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072000">- Fix the size of width and height to be of size_t rather than
  int in struct caca_dither. Re-using existing patch.
  [CVE-2018-20546, bsc#1120503, CVE-2018-20547,
  bsc#1120504, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072001">- Cast intermediate results to 64 bits to prevent overflow of
  calculations with 32-bit quentities.
  [CVE-2018-20544, bsc#1120502,
  Bug1120502-add_cast_to_prevent_overflow.patch]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1564660800">- Add Bug1143286_libcaca_configure_ac_chg_for_lto.patch
  bypass boo#1143286</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1582718400">- Refresh spec-file via spec-cleaner.
- Add Requires:toilet for caca-utils, because need for cacaclock.</changelog>
  <changelog author="josef.moellers@suse.com" date="1583841600">- The contents of libcaca-prevent-overflow.patch
  have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
  and libcaca-variable-type.patch
  [libcaca-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1646308800">- If an image has a size of 0x0, when exporting, no data is written
  and space is allocated for the header only, not taking into
  account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1651060800">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
</package>
<package pkgid="8dbe5077acfea7350ae88eead6369dbe8d15c33009e260c026af74ba77f3d246" name="caca-utils" arch="ppc64le">
  <version epoch="0" ver="0.99.beta19.git20171003" rel="150200.11.6.1"/>
  <changelog author="olaf@aepfle.de" date="1421323200">- Remove __DATE__ usage from cacaclock</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 0.99beta19
  * No changelog available
- Remove automake-1.12.patch; fixed on upstream release</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- Update libcaca-ruby_vendor_install.patch: Use RbConfig::CONFIG
  instead of Config::Config to be compatible with ruby 2.2.</changelog>
  <changelog author="dvlaeev@suse.com" date="1426852800">- Build without Mono by default
  coolo says: "We don't want mono in Factory, if somebody needs it
  it should be set explicit (with_mono) per prjconf"</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Add libcaca-ncurses6.patch: defined against a function name never
  worked, so set_escdelay was actually never used. With curses 6.0,
  though, ESCDELAY is no longer 'a variable', but a reference to a
  function, so we can't assign anything to it. We just assume that
  we always use a recent enough version of ncurses to have
  set_escdelay avaialble.</changelog>
  <changelog author="hguo@suse.com" date="1457697600">- Require imlib2-loaders in caca-utils package.
  All of the utilities fail to load any image without the dependency.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Fix URL
- Mention github repo containing more changes
- Format with spec-cleaner
- Remove support for older distros lets stick with latest only
- Remove for years disabled mono and java integration code snippets
- Use python macros to build python instead of waiting for autotools
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Switch to git repack service in order to get all the latest fixes
  * like python3 porting of the bindings
- Update to version 0.99.beta19+git20171002.da28e96:
  * img2text.c: fix width arg case in example
  * ruby: require 'caca' instead of 'caca.so'
  * Only fail the check-copyright test if more than 10 files are affected.
  * Try to run Coverity from Travis CI.
  * Add some missing breaks (thanks coverity)
  * Fix header copyright.
  * Fix a bug into the autorepeat trigger.
- Refresh patches:
  * libcaca-ruby_am_cflags.patch
  * libcaca-ruby_vendor_install.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop the py2 bindings they fail to build using rpm macros and
  somehow ingnore LD_LIBRARY_PATH, anyway provide py3 variant and
  stick with that</changelog>
  <changelog author="davejplater@gmail.com" date="1517313600">- Deleted _service and use spec file to download git version.
- Shorten version field to joliet usable length.
- Change python headers to allow bindings to build normally with
  python3.
- Use %license for license document.</changelog>
  <changelog author="josef.moellers@suse.com" date="1547553600">- Fix the size of width and height to be of size_t rather than
  unsigned int which may be too small on 64 bit architectures.
  This fixes three CVS and associated bugs.
  [CVE-2018-20545, bsc#1120584, CVE-2018-20548, bsc#1120589,
  CVE-2018-20549, bsc#1120470, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072000">- Fix the size of width and height to be of size_t rather than
  int in struct caca_dither. Re-using existing patch.
  [CVE-2018-20546, bsc#1120503, CVE-2018-20547,
  bsc#1120504, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072001">- Cast intermediate results to 64 bits to prevent overflow of
  calculations with 32-bit quentities.
  [CVE-2018-20544, bsc#1120502,
  Bug1120502-add_cast_to_prevent_overflow.patch]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1564660800">- Add Bug1143286_libcaca_configure_ac_chg_for_lto.patch
  bypass boo#1143286</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1582718400">- Refresh spec-file via spec-cleaner.
- Add Requires:toilet for caca-utils, because need for cacaclock.</changelog>
  <changelog author="josef.moellers@suse.com" date="1583841600">- The contents of libcaca-prevent-overflow.patch
  have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
  and libcaca-variable-type.patch
  [libcaca-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1646308800">- If an image has a size of 0x0, when exporting, no data is written
  and space is allocated for the header only, not taking into
  account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1651060800">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
</package>
<package pkgid="848ce2c19615178077bfcbe1297b483a50d034017ef03c61885b8c691c0069ee" name="caca-utils" arch="s390x">
  <version epoch="0" ver="0.99.beta19.git20171003" rel="150200.11.6.1"/>
  <changelog author="olaf@aepfle.de" date="1421323200">- Remove __DATE__ usage from cacaclock</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 0.99beta19
  * No changelog available
- Remove automake-1.12.patch; fixed on upstream release</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- Update libcaca-ruby_vendor_install.patch: Use RbConfig::CONFIG
  instead of Config::Config to be compatible with ruby 2.2.</changelog>
  <changelog author="dvlaeev@suse.com" date="1426852800">- Build without Mono by default
  coolo says: "We don't want mono in Factory, if somebody needs it
  it should be set explicit (with_mono) per prjconf"</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Add libcaca-ncurses6.patch: defined against a function name never
  worked, so set_escdelay was actually never used. With curses 6.0,
  though, ESCDELAY is no longer 'a variable', but a reference to a
  function, so we can't assign anything to it. We just assume that
  we always use a recent enough version of ncurses to have
  set_escdelay avaialble.</changelog>
  <changelog author="hguo@suse.com" date="1457697600">- Require imlib2-loaders in caca-utils package.
  All of the utilities fail to load any image without the dependency.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Fix URL
- Mention github repo containing more changes
- Format with spec-cleaner
- Remove support for older distros lets stick with latest only
- Remove for years disabled mono and java integration code snippets
- Use python macros to build python instead of waiting for autotools
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Switch to git repack service in order to get all the latest fixes
  * like python3 porting of the bindings
- Update to version 0.99.beta19+git20171002.da28e96:
  * img2text.c: fix width arg case in example
  * ruby: require 'caca' instead of 'caca.so'
  * Only fail the check-copyright test if more than 10 files are affected.
  * Try to run Coverity from Travis CI.
  * Add some missing breaks (thanks coverity)
  * Fix header copyright.
  * Fix a bug into the autorepeat trigger.
- Refresh patches:
  * libcaca-ruby_am_cflags.patch
  * libcaca-ruby_vendor_install.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop the py2 bindings they fail to build using rpm macros and
  somehow ingnore LD_LIBRARY_PATH, anyway provide py3 variant and
  stick with that</changelog>
  <changelog author="davejplater@gmail.com" date="1517313600">- Deleted _service and use spec file to download git version.
- Shorten version field to joliet usable length.
- Change python headers to allow bindings to build normally with
  python3.
- Use %license for license document.</changelog>
  <changelog author="josef.moellers@suse.com" date="1547553600">- Fix the size of width and height to be of size_t rather than
  unsigned int which may be too small on 64 bit architectures.
  This fixes three CVS and associated bugs.
  [CVE-2018-20545, bsc#1120584, CVE-2018-20548, bsc#1120589,
  CVE-2018-20549, bsc#1120470, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072000">- Fix the size of width and height to be of size_t rather than
  int in struct caca_dither. Re-using existing patch.
  [CVE-2018-20546, bsc#1120503, CVE-2018-20547,
  bsc#1120504, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072001">- Cast intermediate results to 64 bits to prevent overflow of
  calculations with 32-bit quentities.
  [CVE-2018-20544, bsc#1120502,
  Bug1120502-add_cast_to_prevent_overflow.patch]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1564660800">- Add Bug1143286_libcaca_configure_ac_chg_for_lto.patch
  bypass boo#1143286</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1582718400">- Refresh spec-file via spec-cleaner.
- Add Requires:toilet for caca-utils, because need for cacaclock.</changelog>
  <changelog author="josef.moellers@suse.com" date="1583841600">- The contents of libcaca-prevent-overflow.patch
  have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
  and libcaca-variable-type.patch
  [libcaca-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1646308800">- If an image has a size of 0x0, when exporting, no data is written
  and space is allocated for the header only, not taking into
  account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1651060800">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
</package>
<package pkgid="63077744b2ff07d512e9362e95f0bb585570f7e4ed82a392c7fd8169e43e918c" name="caca-utils" arch="x86_64">
  <version epoch="0" ver="0.99.beta19.git20171003" rel="150200.11.6.1"/>
  <changelog author="olaf@aepfle.de" date="1421323200">- Remove __DATE__ usage from cacaclock</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 0.99beta19
  * No changelog available
- Remove automake-1.12.patch; fixed on upstream release</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- Update libcaca-ruby_vendor_install.patch: Use RbConfig::CONFIG
  instead of Config::Config to be compatible with ruby 2.2.</changelog>
  <changelog author="dvlaeev@suse.com" date="1426852800">- Build without Mono by default
  coolo says: "We don't want mono in Factory, if somebody needs it
  it should be set explicit (with_mono) per prjconf"</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Add libcaca-ncurses6.patch: defined against a function name never
  worked, so set_escdelay was actually never used. With curses 6.0,
  though, ESCDELAY is no longer 'a variable', but a reference to a
  function, so we can't assign anything to it. We just assume that
  we always use a recent enough version of ncurses to have
  set_escdelay avaialble.</changelog>
  <changelog author="hguo@suse.com" date="1457697600">- Require imlib2-loaders in caca-utils package.
  All of the utilities fail to load any image without the dependency.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Fix URL
- Mention github repo containing more changes
- Format with spec-cleaner
- Remove support for older distros lets stick with latest only
- Remove for years disabled mono and java integration code snippets
- Use python macros to build python instead of waiting for autotools
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Switch to git repack service in order to get all the latest fixes
  * like python3 porting of the bindings
- Update to version 0.99.beta19+git20171002.da28e96:
  * img2text.c: fix width arg case in example
  * ruby: require 'caca' instead of 'caca.so'
  * Only fail the check-copyright test if more than 10 files are affected.
  * Try to run Coverity from Travis CI.
  * Add some missing breaks (thanks coverity)
  * Fix header copyright.
  * Fix a bug into the autorepeat trigger.
- Refresh patches:
  * libcaca-ruby_am_cflags.patch
  * libcaca-ruby_vendor_install.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop the py2 bindings they fail to build using rpm macros and
  somehow ingnore LD_LIBRARY_PATH, anyway provide py3 variant and
  stick with that</changelog>
  <changelog author="davejplater@gmail.com" date="1517313600">- Deleted _service and use spec file to download git version.
- Shorten version field to joliet usable length.
- Change python headers to allow bindings to build normally with
  python3.
- Use %license for license document.</changelog>
  <changelog author="josef.moellers@suse.com" date="1547553600">- Fix the size of width and height to be of size_t rather than
  unsigned int which may be too small on 64 bit architectures.
  This fixes three CVS and associated bugs.
  [CVE-2018-20545, bsc#1120584, CVE-2018-20548, bsc#1120589,
  CVE-2018-20549, bsc#1120470, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072000">- Fix the size of width and height to be of size_t rather than
  int in struct caca_dither. Re-using existing patch.
  [CVE-2018-20546, bsc#1120503, CVE-2018-20547,
  bsc#1120504, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072001">- Cast intermediate results to 64 bits to prevent overflow of
  calculations with 32-bit quentities.
  [CVE-2018-20544, bsc#1120502,
  Bug1120502-add_cast_to_prevent_overflow.patch]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1564660800">- Add Bug1143286_libcaca_configure_ac_chg_for_lto.patch
  bypass boo#1143286</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1582718400">- Refresh spec-file via spec-cleaner.
- Add Requires:toilet for caca-utils, because need for cacaclock.</changelog>
  <changelog author="josef.moellers@suse.com" date="1583841600">- The contents of libcaca-prevent-overflow.patch
  have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
  and libcaca-variable-type.patch
  [libcaca-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1646308800">- If an image has a size of 0x0, when exporting, no data is written
  and space is allocated for the header only, not taking into
  account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1651060800">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
</package>
<package pkgid="d74f91d0ea4da3afa4eccee984131629b005d915dea4fefb4a3b8e747566e976" name="cargo" arch="aarch64">
  <version epoch="0" ver="1.60.0" rel="150300.21.23.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1617019200">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="william.brown@suse.com" date="1617710400">- Update to version 1.51:
  + Language
  - [You can now parameterize items such as functions, traits, and `struct`s by constant
    values in addition to by types and lifetimes.][79135] Also known as "const generics"
    E.g. you can now write the following. Note: Only values of primitive integers,
    `bool`, or `char` types are currently permitted.
  + Compiler
  - [Added the `-Csplit-debuginfo` codegen option for macOS platforms.][79570]
    This option controls whether debug information is split across multiple files
    or packed into a single file. **Note** This option is unstable on other platforms.
  - [Added tier 3\* support for `aarch64_be-unknown-linux-gnu`,
    `aarch64-unknown-linux-gnu_ilp32`, and `aarch64_be-unknown-linux-gnu_ilp32` targets.][81455]
  - [Added tier 3 support for `i386-unknown-linux-gnu` and `i486-unknown-linux-gnu` targets.][80662]
  - [The `target-cpu=native` option will now detect individual features of CPUs.][80749]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [`Box::downcast` is now also implemented for any `dyn Any + Send + Sync` object.][80945]
  - [`str` now implements `AsMut&lt;str&gt;`.][80279]
  - [`u64` and `u128` now implement `From&lt;char&gt;`.][79502]
  - [`Error` is now implemented for `&amp;T` where `T` implements `Error`.][75180]
  - [`Poll::{map_ok, map_err}` are now implemented for `Poll&lt;Option&lt;Result&lt;T, E&gt;&gt;&gt;`.][80968]
  - [`unsigned_abs` is now implemented for all signed integer types.][80959]
  - [`io::Empty` now implements `io::Seek`.][78044]
  - [`rc::Weak&lt;T&gt;` and `sync::Weak&lt;T&gt;`'s methods such as `as_ptr` are now implemented for
    `T: ?Sized` types.][80764]
  + Stabilized APIs
  - [`Arc::decrement_strong_count`]
  - [`Arc::increment_strong_count`]
  - [`Once::call_once_force`]
  - [`Peekable::next_if_eq`]
  - [`Peekable::next_if`]
  - [`Seek::stream_position`]
  - [`array::IntoIter`]
  - [`panic::panic_any`]
  - [`ptr::addr_of!`]
  - [`ptr::addr_of_mut!`]
  - [`slice::fill_with`]
  - [`slice::split_inclusive_mut`]
  - [`slice::split_inclusive`]
  - [`slice::strip_prefix`]
  - [`slice::strip_suffix`]
  - [`str::split_inclusive`]
  - [`sync::OnceState`]
  - [`task::Wake`]
  + Cargo
  - [Added the `split-debuginfo` profile option to control the -Csplit-debuginfo
    codegen option.][cargo/9112]
  - [Added the `resolver` field to `Cargo.toml` to enable the new feature resolver
    and CLI option behavior.][cargo/8997] Version 2 of the feature resolver will try
    to avoid unifying features of dependencies where that unification could be unwanted.
    Such as using the same dependency with a `std` feature in a build scripts and
    proc-macros, while using the `no-std` feature in the final binary. See the
    [Cargo book documentation][feature-resolver@2.0] for more information on the feature.
  + Rustdoc
  - [Rustdoc will now include documentation for methods available from _nested_ `Deref` traits.][80653]
  - [You can now provide a `--default-theme` flag which sets the default theme to use for
    documentation.][79642]
    Various improvements to intra-doc links:
  - [You can link to non-path primitives such as `slice`.][80181]
  - [You can link to associated items.][74489]
  - [You can now include generic parameters when linking to items, like `Vec&lt;T&gt;`.][76934]
  + Misc
  - [You can now pass `--include-ignored` to tests (e.g. with
    `cargo test -- --include-ignored`) to include testing tests marked `#[ignore]`.][80053]
  + Compatibility Notes
  - [WASI platforms no longer use the `wasm-bindgen` ABI, and instead use the wasm32 ABI.][79998]
  - [`rustc` no longer promotes division, modulo and indexing operations to `const` that
    could fail.][80579]
  - [The minimum version of glibc for the following platforms has been bumped to version 2.31
    for the distributed artifacts.][81521]
  - `armv5te-unknown-linux-gnueabi`
  - `sparc64-unknown-linux-gnu`
  - `thumbv7neon-unknown-linux-gnueabihf`
  - `armv7-unknown-linux-gnueabi`
  - `x86_64-unknown-linux-gnux32`</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1618660800">- Add support-llvm12.patch to support building with LLVM 12.</changelog>
  <changelog author="william.brown@suse.com" date="1620388800">- Update to version 1.52:
  + Language
  - [Added the `unsafe_op_in_unsafe_fn` lint, which checks whether the unsafe code
    in an `unsafe fn` is wrapped in a `unsafe` block.][79208] This lint
    is allowed by default, and may become a warning or hard error in a
    future edition.
  - [You can now cast mutable references to arrays to a pointer of the same type as
    the element.][81479]
  + Compiler
  - [Upgraded the default LLVM to LLVM 12.][81451]
  - Added tier 3\* support for the following targets.
  - [`s390x-unknown-linux-musl`][82166]
  - [`riscv32gc-unknown-linux-musl` &amp; `riscv64gc-unknown-linux-musl`][82202]
  - [`powerpc-unknown-openbsd`][82733]
  + Libraries
  - [`OsString` now implements `Extend` and `FromIterator`.][82121]
  - [`cmp::Reverse` now has `#[repr(transparent)]` representation.][81879]
  - [`Arc&lt;impl Error&gt;` now implements `error::Error`.][80553]
  - [All integer division and remainder operations are now `const`.][80962]
  + Stabilised APIs
  - [`Arguments::as_str`]
  - [`char::MAX`]
  - [`char::REPLACEMENT_CHARACTER`]
  - [`char::UNICODE_VERSION`]
  - [`char::decode_utf16`]
  - [`char::from_digit`]
  - [`char::from_u32_unchecked`]
  - [`char::from_u32`]
  - [`slice::partition_point`]
  - [`str::rsplit_once`]
  - [`str::split_once`]
    The following previously stable APIs are now `const`.
  - [`char::len_utf8`]
  - [`char::len_utf16`]
  - [`char::to_ascii_uppercase`]
  - [`char::to_ascii_lowercase`]
  - [`char::eq_ignore_ascii_case`]
  - [`u8::to_ascii_uppercase`]
  - [`u8::to_ascii_lowercase`]
  - [`u8::eq_ignore_ascii_case`]
  + Rustdoc
  - [Rustdoc lints are now treated as a tool lint, meaning that
    lints are now prefixed with `rustdoc::` (e.g. `#[warn(rustdoc::non_autolinks)]`).][80527]
    Using the old style is still allowed, and will become a warning in
    a future release.
  - [Rustdoc now supports argument files.][82261]
  - [Rustdoc now generates smart punctuation for documentation.][79423]
  - [You can now use "task lists" in Rustdoc Markdown.][81766] E.g.
    ```markdown
  - [x] Complete
  - [ ] Todo
    ```
  + Misc
  - [You can now pass multiple filters to tests.][81356] E.g.
    `cargo test -- foo bar` will run all tests that match `foo` and `bar`.
  - [Rustup now distributes PDB symbols for the `std` library on Windows,
    allowing you to see `std` symbols when debugging.][82218]
  + Internal Only
    These changes provide no direct user facing benefits, but represent significant
    improvements to the internals and overall performance of rustc and
    related tools.
  - [Check the result cache before the DepGraph when ensuring queries][81855]
  - [Try fast_reject::simplify_type in coherence before doing full check][81744]
  - [Only store a LocalDefId in some HIR nodes][81611]
  - [Store HIR attributes in a side table][79519]
  + Compatibility Notes
  - ------------------
  - [Cargo build scripts are now forbidden from setting `RUSTC_BOOTSTRAP`.][cargo/9181]
  - [Removed support for the `x86_64-rumprun-netbsd` target.][82594]
  - [Deprecated the `x86_64-sun-solaris` target in favor of `x86_64-pc-solaris`.][82216]
  - [Rustdoc now only accepts `,`, ` `, and `\t` as delimiters for specifying
    languages in code blocks.][78429]
  - [Rustc now catches more cases of `pub_use_of_private_extern_crate`][80763]
  - [Changes in how proc macros handle whitespace may lead to panics when used
    with older `proc-macro-hack` versions. A `cargo update` should be sufficient to fix
    this in all cases.][84136]
- Remove support-llvm12.patch - feature of 1.52</changelog>
  <changelog author="william.brown@suse.com" date="1620648000">- Update to version 1.52.1:
  - This release works around broken builds on 1.52.0, which are caused by newly
    added verification. The bugs this verification detects are present in all
    Rust versions, and can trigger miscompilations in incremental builds, so
    downgrading to a prior stable version is not a fix.
  - What should a Rust programmer do in response?
  - upgrade to 1.52.1
  - deleting your incremental compilation cache (e.g. by running cargo clean)
  - forcing incremental compilation to be disabled, by setting
    CARGO_INCREMENTAL=0 in your environment or build.incremental to false in
    the config.toml.
  - For more: https://blog.rust-lang.org/2021/05/10/Rust-1.52.1.html</changelog>
  <changelog author="william.brown@suse.com" date="1624017600">- Update to version 1.53:
  + Language
  - [You can now use unicode for identifiers.][83799] This allows multilingual
    identifiers but still doesn't allow glyphs that are not considered characters
    such as `?` or `?`. More specifically you can now use any identifier that
    matches the UAX #31 "Unicode Identifier and Pattern Syntax" standard. This
    is the same standard as languages like Python, however Rust uses NFC
    normalization which may be different from other languages.
  - [You can now specify "or patterns" inside pattern matches.][79278]
    Previously you could only use `|` (OR) on complete patterns. E.g.
    ```rust
    let x = Some(2u8);
    // Before
    matches!(x, Some(1) | Some(2));
    // Now
    matches!(x, Some(1 | 2));
    ```
  - [Added the `:pat_param` `macro_rules!` matcher.][83386] This matcher
    has the same semantics as the `:pat` matcher. This is to allow `:pat`
    to change semantics to being a pattern fragment in a future edition.
  + Compiler
  - [Updated the minimum external LLVM version to LLVM 10.][83387]
  - [Added Tier 3\* support for the `wasm64-unknown-unknown` target.][80525]
  - [Improved debuginfo for closures and async functions on Windows MSVC.][83941]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [Abort messages will now forward to `android_set_abort_message` on
    Android platforms when available.][81469]
  - [`slice::IterMut&lt;'_, T&gt;` now implements `AsRef&lt;[T]&gt;`][82771]
  - [Arrays of any length now implement `IntoIterator`.][84147]
    Currently calling `.into_iter()` as a method on an array will
    return `impl Iterator&lt;Item=&amp;T&gt;`, but this may change in a
    future edition to change `Item` to `T`. Calling `IntoIterator::into_iter`
    directly on arrays will provide `impl Iterator&lt;Item=T&gt;` as expected.
  - [`leading_zeros`, and `trailing_zeros` are now available on all
    `NonZero` integer types.][84082]
  - [`{f32, f64}::from_str` now parse and print special values
    (`NaN`, `-0`) according to IEEE RFC 754.][78618]
  - [You can now index into slices using `(Bound&lt;usize&gt;, Bound&lt;usize&gt;)`.][77704]
  - [Add the `BITS` associated constant to all numeric types.][82565]
  + Cargo
  - [Cargo now supports git repositories where the default `HEAD` branch is not
    "master".][cargo/9392] This also includes a switch to the version 3 `Cargo.lock` format
    which can handle default branches correctly.
  - [macOS targets now default to `unpacked` split-debuginfo.][cargo/9298]
  - [The `authors` field is no longer included in `Cargo.toml` for new
    projects.][cargo/9282]
  + Rustdoc
  - [Added the `rustdoc::bare_urls` lint that warns when you have URLs
    without hyperlinks.][81764]
  + Compatibility Notes
  - [Implement token-based handling of attributes during expansion][82608]
  - [`Ipv4::from_str` will now reject octal format IP addresses in addition
    to rejecting hexadecimal IP addresses.][83652] The octal format can lead
    to confusion and potential security vulnerabilities and [is no
    longer recommended][ietf6943].</changelog>
  <changelog author="william.brown@suse.com" date="1624881600">- Migrate to parallel versioned rust installs.
- Remove artefacts for building rust
  * ignore-Wstring-conversion.patch</changelog>
  <changelog author="william.brown@suse.com" date="1625572800">- Revert package to be arch dependent based on reviewer feedback</changelog>
  <changelog author="dimstar@opensuse.org" date="1625572801">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
</package>
<package pkgid="15b60ae7789d68c17908455e41baf68d5a257fa00de0301e98695702f527a70d" name="cargo" arch="ppc64le">
  <version epoch="0" ver="1.60.0" rel="150300.21.23.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1617019200">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="william.brown@suse.com" date="1617710400">- Update to version 1.51:
  + Language
  - [You can now parameterize items such as functions, traits, and `struct`s by constant
    values in addition to by types and lifetimes.][79135] Also known as "const generics"
    E.g. you can now write the following. Note: Only values of primitive integers,
    `bool`, or `char` types are currently permitted.
  + Compiler
  - [Added the `-Csplit-debuginfo` codegen option for macOS platforms.][79570]
    This option controls whether debug information is split across multiple files
    or packed into a single file. **Note** This option is unstable on other platforms.
  - [Added tier 3\* support for `aarch64_be-unknown-linux-gnu`,
    `aarch64-unknown-linux-gnu_ilp32`, and `aarch64_be-unknown-linux-gnu_ilp32` targets.][81455]
  - [Added tier 3 support for `i386-unknown-linux-gnu` and `i486-unknown-linux-gnu` targets.][80662]
  - [The `target-cpu=native` option will now detect individual features of CPUs.][80749]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [`Box::downcast` is now also implemented for any `dyn Any + Send + Sync` object.][80945]
  - [`str` now implements `AsMut&lt;str&gt;`.][80279]
  - [`u64` and `u128` now implement `From&lt;char&gt;`.][79502]
  - [`Error` is now implemented for `&amp;T` where `T` implements `Error`.][75180]
  - [`Poll::{map_ok, map_err}` are now implemented for `Poll&lt;Option&lt;Result&lt;T, E&gt;&gt;&gt;`.][80968]
  - [`unsigned_abs` is now implemented for all signed integer types.][80959]
  - [`io::Empty` now implements `io::Seek`.][78044]
  - [`rc::Weak&lt;T&gt;` and `sync::Weak&lt;T&gt;`'s methods such as `as_ptr` are now implemented for
    `T: ?Sized` types.][80764]
  + Stabilized APIs
  - [`Arc::decrement_strong_count`]
  - [`Arc::increment_strong_count`]
  - [`Once::call_once_force`]
  - [`Peekable::next_if_eq`]
  - [`Peekable::next_if`]
  - [`Seek::stream_position`]
  - [`array::IntoIter`]
  - [`panic::panic_any`]
  - [`ptr::addr_of!`]
  - [`ptr::addr_of_mut!`]
  - [`slice::fill_with`]
  - [`slice::split_inclusive_mut`]
  - [`slice::split_inclusive`]
  - [`slice::strip_prefix`]
  - [`slice::strip_suffix`]
  - [`str::split_inclusive`]
  - [`sync::OnceState`]
  - [`task::Wake`]
  + Cargo
  - [Added the `split-debuginfo` profile option to control the -Csplit-debuginfo
    codegen option.][cargo/9112]
  - [Added the `resolver` field to `Cargo.toml` to enable the new feature resolver
    and CLI option behavior.][cargo/8997] Version 2 of the feature resolver will try
    to avoid unifying features of dependencies where that unification could be unwanted.
    Such as using the same dependency with a `std` feature in a build scripts and
    proc-macros, while using the `no-std` feature in the final binary. See the
    [Cargo book documentation][feature-resolver@2.0] for more information on the feature.
  + Rustdoc
  - [Rustdoc will now include documentation for methods available from _nested_ `Deref` traits.][80653]
  - [You can now provide a `--default-theme` flag which sets the default theme to use for
    documentation.][79642]
    Various improvements to intra-doc links:
  - [You can link to non-path primitives such as `slice`.][80181]
  - [You can link to associated items.][74489]
  - [You can now include generic parameters when linking to items, like `Vec&lt;T&gt;`.][76934]
  + Misc
  - [You can now pass `--include-ignored` to tests (e.g. with
    `cargo test -- --include-ignored`) to include testing tests marked `#[ignore]`.][80053]
  + Compatibility Notes
  - [WASI platforms no longer use the `wasm-bindgen` ABI, and instead use the wasm32 ABI.][79998]
  - [`rustc` no longer promotes division, modulo and indexing operations to `const` that
    could fail.][80579]
  - [The minimum version of glibc for the following platforms has been bumped to version 2.31
    for the distributed artifacts.][81521]
  - `armv5te-unknown-linux-gnueabi`
  - `sparc64-unknown-linux-gnu`
  - `thumbv7neon-unknown-linux-gnueabihf`
  - `armv7-unknown-linux-gnueabi`
  - `x86_64-unknown-linux-gnux32`</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1618660800">- Add support-llvm12.patch to support building with LLVM 12.</changelog>
  <changelog author="william.brown@suse.com" date="1620388800">- Update to version 1.52:
  + Language
  - [Added the `unsafe_op_in_unsafe_fn` lint, which checks whether the unsafe code
    in an `unsafe fn` is wrapped in a `unsafe` block.][79208] This lint
    is allowed by default, and may become a warning or hard error in a
    future edition.
  - [You can now cast mutable references to arrays to a pointer of the same type as
    the element.][81479]
  + Compiler
  - [Upgraded the default LLVM to LLVM 12.][81451]
  - Added tier 3\* support for the following targets.
  - [`s390x-unknown-linux-musl`][82166]
  - [`riscv32gc-unknown-linux-musl` &amp; `riscv64gc-unknown-linux-musl`][82202]
  - [`powerpc-unknown-openbsd`][82733]
  + Libraries
  - [`OsString` now implements `Extend` and `FromIterator`.][82121]
  - [`cmp::Reverse` now has `#[repr(transparent)]` representation.][81879]
  - [`Arc&lt;impl Error&gt;` now implements `error::Error`.][80553]
  - [All integer division and remainder operations are now `const`.][80962]
  + Stabilised APIs
  - [`Arguments::as_str`]
  - [`char::MAX`]
  - [`char::REPLACEMENT_CHARACTER`]
  - [`char::UNICODE_VERSION`]
  - [`char::decode_utf16`]
  - [`char::from_digit`]
  - [`char::from_u32_unchecked`]
  - [`char::from_u32`]
  - [`slice::partition_point`]
  - [`str::rsplit_once`]
  - [`str::split_once`]
    The following previously stable APIs are now `const`.
  - [`char::len_utf8`]
  - [`char::len_utf16`]
  - [`char::to_ascii_uppercase`]
  - [`char::to_ascii_lowercase`]
  - [`char::eq_ignore_ascii_case`]
  - [`u8::to_ascii_uppercase`]
  - [`u8::to_ascii_lowercase`]
  - [`u8::eq_ignore_ascii_case`]
  + Rustdoc
  - [Rustdoc lints are now treated as a tool lint, meaning that
    lints are now prefixed with `rustdoc::` (e.g. `#[warn(rustdoc::non_autolinks)]`).][80527]
    Using the old style is still allowed, and will become a warning in
    a future release.
  - [Rustdoc now supports argument files.][82261]
  - [Rustdoc now generates smart punctuation for documentation.][79423]
  - [You can now use "task lists" in Rustdoc Markdown.][81766] E.g.
    ```markdown
  - [x] Complete
  - [ ] Todo
    ```
  + Misc
  - [You can now pass multiple filters to tests.][81356] E.g.
    `cargo test -- foo bar` will run all tests that match `foo` and `bar`.
  - [Rustup now distributes PDB symbols for the `std` library on Windows,
    allowing you to see `std` symbols when debugging.][82218]
  + Internal Only
    These changes provide no direct user facing benefits, but represent significant
    improvements to the internals and overall performance of rustc and
    related tools.
  - [Check the result cache before the DepGraph when ensuring queries][81855]
  - [Try fast_reject::simplify_type in coherence before doing full check][81744]
  - [Only store a LocalDefId in some HIR nodes][81611]
  - [Store HIR attributes in a side table][79519]
  + Compatibility Notes
  - ------------------
  - [Cargo build scripts are now forbidden from setting `RUSTC_BOOTSTRAP`.][cargo/9181]
  - [Removed support for the `x86_64-rumprun-netbsd` target.][82594]
  - [Deprecated the `x86_64-sun-solaris` target in favor of `x86_64-pc-solaris`.][82216]
  - [Rustdoc now only accepts `,`, ` `, and `\t` as delimiters for specifying
    languages in code blocks.][78429]
  - [Rustc now catches more cases of `pub_use_of_private_extern_crate`][80763]
  - [Changes in how proc macros handle whitespace may lead to panics when used
    with older `proc-macro-hack` versions. A `cargo update` should be sufficient to fix
    this in all cases.][84136]
- Remove support-llvm12.patch - feature of 1.52</changelog>
  <changelog author="william.brown@suse.com" date="1620648000">- Update to version 1.52.1:
  - This release works around broken builds on 1.52.0, which are caused by newly
    added verification. The bugs this verification detects are present in all
    Rust versions, and can trigger miscompilations in incremental builds, so
    downgrading to a prior stable version is not a fix.
  - What should a Rust programmer do in response?
  - upgrade to 1.52.1
  - deleting your incremental compilation cache (e.g. by running cargo clean)
  - forcing incremental compilation to be disabled, by setting
    CARGO_INCREMENTAL=0 in your environment or build.incremental to false in
    the config.toml.
  - For more: https://blog.rust-lang.org/2021/05/10/Rust-1.52.1.html</changelog>
  <changelog author="william.brown@suse.com" date="1624017600">- Update to version 1.53:
  + Language
  - [You can now use unicode for identifiers.][83799] This allows multilingual
    identifiers but still doesn't allow glyphs that are not considered characters
    such as `?` or `?`. More specifically you can now use any identifier that
    matches the UAX #31 "Unicode Identifier and Pattern Syntax" standard. This
    is the same standard as languages like Python, however Rust uses NFC
    normalization which may be different from other languages.
  - [You can now specify "or patterns" inside pattern matches.][79278]
    Previously you could only use `|` (OR) on complete patterns. E.g.
    ```rust
    let x = Some(2u8);
    // Before
    matches!(x, Some(1) | Some(2));
    // Now
    matches!(x, Some(1 | 2));
    ```
  - [Added the `:pat_param` `macro_rules!` matcher.][83386] This matcher
    has the same semantics as the `:pat` matcher. This is to allow `:pat`
    to change semantics to being a pattern fragment in a future edition.
  + Compiler
  - [Updated the minimum external LLVM version to LLVM 10.][83387]
  - [Added Tier 3\* support for the `wasm64-unknown-unknown` target.][80525]
  - [Improved debuginfo for closures and async functions on Windows MSVC.][83941]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [Abort messages will now forward to `android_set_abort_message` on
    Android platforms when available.][81469]
  - [`slice::IterMut&lt;'_, T&gt;` now implements `AsRef&lt;[T]&gt;`][82771]
  - [Arrays of any length now implement `IntoIterator`.][84147]
    Currently calling `.into_iter()` as a method on an array will
    return `impl Iterator&lt;Item=&amp;T&gt;`, but this may change in a
    future edition to change `Item` to `T`. Calling `IntoIterator::into_iter`
    directly on arrays will provide `impl Iterator&lt;Item=T&gt;` as expected.
  - [`leading_zeros`, and `trailing_zeros` are now available on all
    `NonZero` integer types.][84082]
  - [`{f32, f64}::from_str` now parse and print special values
    (`NaN`, `-0`) according to IEEE RFC 754.][78618]
  - [You can now index into slices using `(Bound&lt;usize&gt;, Bound&lt;usize&gt;)`.][77704]
  - [Add the `BITS` associated constant to all numeric types.][82565]
  + Cargo
  - [Cargo now supports git repositories where the default `HEAD` branch is not
    "master".][cargo/9392] This also includes a switch to the version 3 `Cargo.lock` format
    which can handle default branches correctly.
  - [macOS targets now default to `unpacked` split-debuginfo.][cargo/9298]
  - [The `authors` field is no longer included in `Cargo.toml` for new
    projects.][cargo/9282]
  + Rustdoc
  - [Added the `rustdoc::bare_urls` lint that warns when you have URLs
    without hyperlinks.][81764]
  + Compatibility Notes
  - [Implement token-based handling of attributes during expansion][82608]
  - [`Ipv4::from_str` will now reject octal format IP addresses in addition
    to rejecting hexadecimal IP addresses.][83652] The octal format can lead
    to confusion and potential security vulnerabilities and [is no
    longer recommended][ietf6943].</changelog>
  <changelog author="william.brown@suse.com" date="1624881600">- Migrate to parallel versioned rust installs.
- Remove artefacts for building rust
  * ignore-Wstring-conversion.patch</changelog>
  <changelog author="william.brown@suse.com" date="1625572800">- Revert package to be arch dependent based on reviewer feedback</changelog>
  <changelog author="dimstar@opensuse.org" date="1625572801">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
</package>
<package pkgid="fc837d6bcf4d5ad051281dde73fbe96530694299cfe132268c894b597e4277a7" name="cargo" arch="s390x">
  <version epoch="0" ver="1.60.0" rel="150300.21.23.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1617019200">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="william.brown@suse.com" date="1617710400">- Update to version 1.51:
  + Language
  - [You can now parameterize items such as functions, traits, and `struct`s by constant
    values in addition to by types and lifetimes.][79135] Also known as "const generics"
    E.g. you can now write the following. Note: Only values of primitive integers,
    `bool`, or `char` types are currently permitted.
  + Compiler
  - [Added the `-Csplit-debuginfo` codegen option for macOS platforms.][79570]
    This option controls whether debug information is split across multiple files
    or packed into a single file. **Note** This option is unstable on other platforms.
  - [Added tier 3\* support for `aarch64_be-unknown-linux-gnu`,
    `aarch64-unknown-linux-gnu_ilp32`, and `aarch64_be-unknown-linux-gnu_ilp32` targets.][81455]
  - [Added tier 3 support for `i386-unknown-linux-gnu` and `i486-unknown-linux-gnu` targets.][80662]
  - [The `target-cpu=native` option will now detect individual features of CPUs.][80749]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [`Box::downcast` is now also implemented for any `dyn Any + Send + Sync` object.][80945]
  - [`str` now implements `AsMut&lt;str&gt;`.][80279]
  - [`u64` and `u128` now implement `From&lt;char&gt;`.][79502]
  - [`Error` is now implemented for `&amp;T` where `T` implements `Error`.][75180]
  - [`Poll::{map_ok, map_err}` are now implemented for `Poll&lt;Option&lt;Result&lt;T, E&gt;&gt;&gt;`.][80968]
  - [`unsigned_abs` is now implemented for all signed integer types.][80959]
  - [`io::Empty` now implements `io::Seek`.][78044]
  - [`rc::Weak&lt;T&gt;` and `sync::Weak&lt;T&gt;`'s methods such as `as_ptr` are now implemented for
    `T: ?Sized` types.][80764]
  + Stabilized APIs
  - [`Arc::decrement_strong_count`]
  - [`Arc::increment_strong_count`]
  - [`Once::call_once_force`]
  - [`Peekable::next_if_eq`]
  - [`Peekable::next_if`]
  - [`Seek::stream_position`]
  - [`array::IntoIter`]
  - [`panic::panic_any`]
  - [`ptr::addr_of!`]
  - [`ptr::addr_of_mut!`]
  - [`slice::fill_with`]
  - [`slice::split_inclusive_mut`]
  - [`slice::split_inclusive`]
  - [`slice::strip_prefix`]
  - [`slice::strip_suffix`]
  - [`str::split_inclusive`]
  - [`sync::OnceState`]
  - [`task::Wake`]
  + Cargo
  - [Added the `split-debuginfo` profile option to control the -Csplit-debuginfo
    codegen option.][cargo/9112]
  - [Added the `resolver` field to `Cargo.toml` to enable the new feature resolver
    and CLI option behavior.][cargo/8997] Version 2 of the feature resolver will try
    to avoid unifying features of dependencies where that unification could be unwanted.
    Such as using the same dependency with a `std` feature in a build scripts and
    proc-macros, while using the `no-std` feature in the final binary. See the
    [Cargo book documentation][feature-resolver@2.0] for more information on the feature.
  + Rustdoc
  - [Rustdoc will now include documentation for methods available from _nested_ `Deref` traits.][80653]
  - [You can now provide a `--default-theme` flag which sets the default theme to use for
    documentation.][79642]
    Various improvements to intra-doc links:
  - [You can link to non-path primitives such as `slice`.][80181]
  - [You can link to associated items.][74489]
  - [You can now include generic parameters when linking to items, like `Vec&lt;T&gt;`.][76934]
  + Misc
  - [You can now pass `--include-ignored` to tests (e.g. with
    `cargo test -- --include-ignored`) to include testing tests marked `#[ignore]`.][80053]
  + Compatibility Notes
  - [WASI platforms no longer use the `wasm-bindgen` ABI, and instead use the wasm32 ABI.][79998]
  - [`rustc` no longer promotes division, modulo and indexing operations to `const` that
    could fail.][80579]
  - [The minimum version of glibc for the following platforms has been bumped to version 2.31
    for the distributed artifacts.][81521]
  - `armv5te-unknown-linux-gnueabi`
  - `sparc64-unknown-linux-gnu`
  - `thumbv7neon-unknown-linux-gnueabihf`
  - `armv7-unknown-linux-gnueabi`
  - `x86_64-unknown-linux-gnux32`</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1618660800">- Add support-llvm12.patch to support building with LLVM 12.</changelog>
  <changelog author="william.brown@suse.com" date="1620388800">- Update to version 1.52:
  + Language
  - [Added the `unsafe_op_in_unsafe_fn` lint, which checks whether the unsafe code
    in an `unsafe fn` is wrapped in a `unsafe` block.][79208] This lint
    is allowed by default, and may become a warning or hard error in a
    future edition.
  - [You can now cast mutable references to arrays to a pointer of the same type as
    the element.][81479]
  + Compiler
  - [Upgraded the default LLVM to LLVM 12.][81451]
  - Added tier 3\* support for the following targets.
  - [`s390x-unknown-linux-musl`][82166]
  - [`riscv32gc-unknown-linux-musl` &amp; `riscv64gc-unknown-linux-musl`][82202]
  - [`powerpc-unknown-openbsd`][82733]
  + Libraries
  - [`OsString` now implements `Extend` and `FromIterator`.][82121]
  - [`cmp::Reverse` now has `#[repr(transparent)]` representation.][81879]
  - [`Arc&lt;impl Error&gt;` now implements `error::Error`.][80553]
  - [All integer division and remainder operations are now `const`.][80962]
  + Stabilised APIs
  - [`Arguments::as_str`]
  - [`char::MAX`]
  - [`char::REPLACEMENT_CHARACTER`]
  - [`char::UNICODE_VERSION`]
  - [`char::decode_utf16`]
  - [`char::from_digit`]
  - [`char::from_u32_unchecked`]
  - [`char::from_u32`]
  - [`slice::partition_point`]
  - [`str::rsplit_once`]
  - [`str::split_once`]
    The following previously stable APIs are now `const`.
  - [`char::len_utf8`]
  - [`char::len_utf16`]
  - [`char::to_ascii_uppercase`]
  - [`char::to_ascii_lowercase`]
  - [`char::eq_ignore_ascii_case`]
  - [`u8::to_ascii_uppercase`]
  - [`u8::to_ascii_lowercase`]
  - [`u8::eq_ignore_ascii_case`]
  + Rustdoc
  - [Rustdoc lints are now treated as a tool lint, meaning that
    lints are now prefixed with `rustdoc::` (e.g. `#[warn(rustdoc::non_autolinks)]`).][80527]
    Using the old style is still allowed, and will become a warning in
    a future release.
  - [Rustdoc now supports argument files.][82261]
  - [Rustdoc now generates smart punctuation for documentation.][79423]
  - [You can now use "task lists" in Rustdoc Markdown.][81766] E.g.
    ```markdown
  - [x] Complete
  - [ ] Todo
    ```
  + Misc
  - [You can now pass multiple filters to tests.][81356] E.g.
    `cargo test -- foo bar` will run all tests that match `foo` and `bar`.
  - [Rustup now distributes PDB symbols for the `std` library on Windows,
    allowing you to see `std` symbols when debugging.][82218]
  + Internal Only
    These changes provide no direct user facing benefits, but represent significant
    improvements to the internals and overall performance of rustc and
    related tools.
  - [Check the result cache before the DepGraph when ensuring queries][81855]
  - [Try fast_reject::simplify_type in coherence before doing full check][81744]
  - [Only store a LocalDefId in some HIR nodes][81611]
  - [Store HIR attributes in a side table][79519]
  + Compatibility Notes
  - ------------------
  - [Cargo build scripts are now forbidden from setting `RUSTC_BOOTSTRAP`.][cargo/9181]
  - [Removed support for the `x86_64-rumprun-netbsd` target.][82594]
  - [Deprecated the `x86_64-sun-solaris` target in favor of `x86_64-pc-solaris`.][82216]
  - [Rustdoc now only accepts `,`, ` `, and `\t` as delimiters for specifying
    languages in code blocks.][78429]
  - [Rustc now catches more cases of `pub_use_of_private_extern_crate`][80763]
  - [Changes in how proc macros handle whitespace may lead to panics when used
    with older `proc-macro-hack` versions. A `cargo update` should be sufficient to fix
    this in all cases.][84136]
- Remove support-llvm12.patch - feature of 1.52</changelog>
  <changelog author="william.brown@suse.com" date="1620648000">- Update to version 1.52.1:
  - This release works around broken builds on 1.52.0, which are caused by newly
    added verification. The bugs this verification detects are present in all
    Rust versions, and can trigger miscompilations in incremental builds, so
    downgrading to a prior stable version is not a fix.
  - What should a Rust programmer do in response?
  - upgrade to 1.52.1
  - deleting your incremental compilation cache (e.g. by running cargo clean)
  - forcing incremental compilation to be disabled, by setting
    CARGO_INCREMENTAL=0 in your environment or build.incremental to false in
    the config.toml.
  - For more: https://blog.rust-lang.org/2021/05/10/Rust-1.52.1.html</changelog>
  <changelog author="william.brown@suse.com" date="1624017600">- Update to version 1.53:
  + Language
  - [You can now use unicode for identifiers.][83799] This allows multilingual
    identifiers but still doesn't allow glyphs that are not considered characters
    such as `?` or `?`. More specifically you can now use any identifier that
    matches the UAX #31 "Unicode Identifier and Pattern Syntax" standard. This
    is the same standard as languages like Python, however Rust uses NFC
    normalization which may be different from other languages.
  - [You can now specify "or patterns" inside pattern matches.][79278]
    Previously you could only use `|` (OR) on complete patterns. E.g.
    ```rust
    let x = Some(2u8);
    // Before
    matches!(x, Some(1) | Some(2));
    // Now
    matches!(x, Some(1 | 2));
    ```
  - [Added the `:pat_param` `macro_rules!` matcher.][83386] This matcher
    has the same semantics as the `:pat` matcher. This is to allow `:pat`
    to change semantics to being a pattern fragment in a future edition.
  + Compiler
  - [Updated the minimum external LLVM version to LLVM 10.][83387]
  - [Added Tier 3\* support for the `wasm64-unknown-unknown` target.][80525]
  - [Improved debuginfo for closures and async functions on Windows MSVC.][83941]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [Abort messages will now forward to `android_set_abort_message` on
    Android platforms when available.][81469]
  - [`slice::IterMut&lt;'_, T&gt;` now implements `AsRef&lt;[T]&gt;`][82771]
  - [Arrays of any length now implement `IntoIterator`.][84147]
    Currently calling `.into_iter()` as a method on an array will
    return `impl Iterator&lt;Item=&amp;T&gt;`, but this may change in a
    future edition to change `Item` to `T`. Calling `IntoIterator::into_iter`
    directly on arrays will provide `impl Iterator&lt;Item=T&gt;` as expected.
  - [`leading_zeros`, and `trailing_zeros` are now available on all
    `NonZero` integer types.][84082]
  - [`{f32, f64}::from_str` now parse and print special values
    (`NaN`, `-0`) according to IEEE RFC 754.][78618]
  - [You can now index into slices using `(Bound&lt;usize&gt;, Bound&lt;usize&gt;)`.][77704]
  - [Add the `BITS` associated constant to all numeric types.][82565]
  + Cargo
  - [Cargo now supports git repositories where the default `HEAD` branch is not
    "master".][cargo/9392] This also includes a switch to the version 3 `Cargo.lock` format
    which can handle default branches correctly.
  - [macOS targets now default to `unpacked` split-debuginfo.][cargo/9298]
  - [The `authors` field is no longer included in `Cargo.toml` for new
    projects.][cargo/9282]
  + Rustdoc
  - [Added the `rustdoc::bare_urls` lint that warns when you have URLs
    without hyperlinks.][81764]
  + Compatibility Notes
  - [Implement token-based handling of attributes during expansion][82608]
  - [`Ipv4::from_str` will now reject octal format IP addresses in addition
    to rejecting hexadecimal IP addresses.][83652] The octal format can lead
    to confusion and potential security vulnerabilities and [is no
    longer recommended][ietf6943].</changelog>
  <changelog author="william.brown@suse.com" date="1624881600">- Migrate to parallel versioned rust installs.
- Remove artefacts for building rust
  * ignore-Wstring-conversion.patch</changelog>
  <changelog author="william.brown@suse.com" date="1625572800">- Revert package to be arch dependent based on reviewer feedback</changelog>
  <changelog author="dimstar@opensuse.org" date="1625572801">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
</package>
<package pkgid="a0232af747fa98e399f04d23963f30eae09f82f52196642da96e2fc48adf0466" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.60.0" rel="150300.21.23.1"/>
  <changelog author="opensuse-packaging@opensuse.org" date="1617019200">- Rebased patches:
  + ignore-Wstring-conversion.patch (offset / fuzz)</changelog>
  <changelog author="william.brown@suse.com" date="1617710400">- Update to version 1.51:
  + Language
  - [You can now parameterize items such as functions, traits, and `struct`s by constant
    values in addition to by types and lifetimes.][79135] Also known as "const generics"
    E.g. you can now write the following. Note: Only values of primitive integers,
    `bool`, or `char` types are currently permitted.
  + Compiler
  - [Added the `-Csplit-debuginfo` codegen option for macOS platforms.][79570]
    This option controls whether debug information is split across multiple files
    or packed into a single file. **Note** This option is unstable on other platforms.
  - [Added tier 3\* support for `aarch64_be-unknown-linux-gnu`,
    `aarch64-unknown-linux-gnu_ilp32`, and `aarch64_be-unknown-linux-gnu_ilp32` targets.][81455]
  - [Added tier 3 support for `i386-unknown-linux-gnu` and `i486-unknown-linux-gnu` targets.][80662]
  - [The `target-cpu=native` option will now detect individual features of CPUs.][80749]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [`Box::downcast` is now also implemented for any `dyn Any + Send + Sync` object.][80945]
  - [`str` now implements `AsMut&lt;str&gt;`.][80279]
  - [`u64` and `u128` now implement `From&lt;char&gt;`.][79502]
  - [`Error` is now implemented for `&amp;T` where `T` implements `Error`.][75180]
  - [`Poll::{map_ok, map_err}` are now implemented for `Poll&lt;Option&lt;Result&lt;T, E&gt;&gt;&gt;`.][80968]
  - [`unsigned_abs` is now implemented for all signed integer types.][80959]
  - [`io::Empty` now implements `io::Seek`.][78044]
  - [`rc::Weak&lt;T&gt;` and `sync::Weak&lt;T&gt;`'s methods such as `as_ptr` are now implemented for
    `T: ?Sized` types.][80764]
  + Stabilized APIs
  - [`Arc::decrement_strong_count`]
  - [`Arc::increment_strong_count`]
  - [`Once::call_once_force`]
  - [`Peekable::next_if_eq`]
  - [`Peekable::next_if`]
  - [`Seek::stream_position`]
  - [`array::IntoIter`]
  - [`panic::panic_any`]
  - [`ptr::addr_of!`]
  - [`ptr::addr_of_mut!`]
  - [`slice::fill_with`]
  - [`slice::split_inclusive_mut`]
  - [`slice::split_inclusive`]
  - [`slice::strip_prefix`]
  - [`slice::strip_suffix`]
  - [`str::split_inclusive`]
  - [`sync::OnceState`]
  - [`task::Wake`]
  + Cargo
  - [Added the `split-debuginfo` profile option to control the -Csplit-debuginfo
    codegen option.][cargo/9112]
  - [Added the `resolver` field to `Cargo.toml` to enable the new feature resolver
    and CLI option behavior.][cargo/8997] Version 2 of the feature resolver will try
    to avoid unifying features of dependencies where that unification could be unwanted.
    Such as using the same dependency with a `std` feature in a build scripts and
    proc-macros, while using the `no-std` feature in the final binary. See the
    [Cargo book documentation][feature-resolver@2.0] for more information on the feature.
  + Rustdoc
  - [Rustdoc will now include documentation for methods available from _nested_ `Deref` traits.][80653]
  - [You can now provide a `--default-theme` flag which sets the default theme to use for
    documentation.][79642]
    Various improvements to intra-doc links:
  - [You can link to non-path primitives such as `slice`.][80181]
  - [You can link to associated items.][74489]
  - [You can now include generic parameters when linking to items, like `Vec&lt;T&gt;`.][76934]
  + Misc
  - [You can now pass `--include-ignored` to tests (e.g. with
    `cargo test -- --include-ignored`) to include testing tests marked `#[ignore]`.][80053]
  + Compatibility Notes
  - [WASI platforms no longer use the `wasm-bindgen` ABI, and instead use the wasm32 ABI.][79998]
  - [`rustc` no longer promotes division, modulo and indexing operations to `const` that
    could fail.][80579]
  - [The minimum version of glibc for the following platforms has been bumped to version 2.31
    for the distributed artifacts.][81521]
  - `armv5te-unknown-linux-gnueabi`
  - `sparc64-unknown-linux-gnu`
  - `thumbv7neon-unknown-linux-gnueabihf`
  - `armv7-unknown-linux-gnueabi`
  - `x86_64-unknown-linux-gnux32`</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1618660800">- Add support-llvm12.patch to support building with LLVM 12.</changelog>
  <changelog author="william.brown@suse.com" date="1620388800">- Update to version 1.52:
  + Language
  - [Added the `unsafe_op_in_unsafe_fn` lint, which checks whether the unsafe code
    in an `unsafe fn` is wrapped in a `unsafe` block.][79208] This lint
    is allowed by default, and may become a warning or hard error in a
    future edition.
  - [You can now cast mutable references to arrays to a pointer of the same type as
    the element.][81479]
  + Compiler
  - [Upgraded the default LLVM to LLVM 12.][81451]
  - Added tier 3\* support for the following targets.
  - [`s390x-unknown-linux-musl`][82166]
  - [`riscv32gc-unknown-linux-musl` &amp; `riscv64gc-unknown-linux-musl`][82202]
  - [`powerpc-unknown-openbsd`][82733]
  + Libraries
  - [`OsString` now implements `Extend` and `FromIterator`.][82121]
  - [`cmp::Reverse` now has `#[repr(transparent)]` representation.][81879]
  - [`Arc&lt;impl Error&gt;` now implements `error::Error`.][80553]
  - [All integer division and remainder operations are now `const`.][80962]
  + Stabilised APIs
  - [`Arguments::as_str`]
  - [`char::MAX`]
  - [`char::REPLACEMENT_CHARACTER`]
  - [`char::UNICODE_VERSION`]
  - [`char::decode_utf16`]
  - [`char::from_digit`]
  - [`char::from_u32_unchecked`]
  - [`char::from_u32`]
  - [`slice::partition_point`]
  - [`str::rsplit_once`]
  - [`str::split_once`]
    The following previously stable APIs are now `const`.
  - [`char::len_utf8`]
  - [`char::len_utf16`]
  - [`char::to_ascii_uppercase`]
  - [`char::to_ascii_lowercase`]
  - [`char::eq_ignore_ascii_case`]
  - [`u8::to_ascii_uppercase`]
  - [`u8::to_ascii_lowercase`]
  - [`u8::eq_ignore_ascii_case`]
  + Rustdoc
  - [Rustdoc lints are now treated as a tool lint, meaning that
    lints are now prefixed with `rustdoc::` (e.g. `#[warn(rustdoc::non_autolinks)]`).][80527]
    Using the old style is still allowed, and will become a warning in
    a future release.
  - [Rustdoc now supports argument files.][82261]
  - [Rustdoc now generates smart punctuation for documentation.][79423]
  - [You can now use "task lists" in Rustdoc Markdown.][81766] E.g.
    ```markdown
  - [x] Complete
  - [ ] Todo
    ```
  + Misc
  - [You can now pass multiple filters to tests.][81356] E.g.
    `cargo test -- foo bar` will run all tests that match `foo` and `bar`.
  - [Rustup now distributes PDB symbols for the `std` library on Windows,
    allowing you to see `std` symbols when debugging.][82218]
  + Internal Only
    These changes provide no direct user facing benefits, but represent significant
    improvements to the internals and overall performance of rustc and
    related tools.
  - [Check the result cache before the DepGraph when ensuring queries][81855]
  - [Try fast_reject::simplify_type in coherence before doing full check][81744]
  - [Only store a LocalDefId in some HIR nodes][81611]
  - [Store HIR attributes in a side table][79519]
  + Compatibility Notes
  - ------------------
  - [Cargo build scripts are now forbidden from setting `RUSTC_BOOTSTRAP`.][cargo/9181]
  - [Removed support for the `x86_64-rumprun-netbsd` target.][82594]
  - [Deprecated the `x86_64-sun-solaris` target in favor of `x86_64-pc-solaris`.][82216]
  - [Rustdoc now only accepts `,`, ` `, and `\t` as delimiters for specifying
    languages in code blocks.][78429]
  - [Rustc now catches more cases of `pub_use_of_private_extern_crate`][80763]
  - [Changes in how proc macros handle whitespace may lead to panics when used
    with older `proc-macro-hack` versions. A `cargo update` should be sufficient to fix
    this in all cases.][84136]
- Remove support-llvm12.patch - feature of 1.52</changelog>
  <changelog author="william.brown@suse.com" date="1620648000">- Update to version 1.52.1:
  - This release works around broken builds on 1.52.0, which are caused by newly
    added verification. The bugs this verification detects are present in all
    Rust versions, and can trigger miscompilations in incremental builds, so
    downgrading to a prior stable version is not a fix.
  - What should a Rust programmer do in response?
  - upgrade to 1.52.1
  - deleting your incremental compilation cache (e.g. by running cargo clean)
  - forcing incremental compilation to be disabled, by setting
    CARGO_INCREMENTAL=0 in your environment or build.incremental to false in
    the config.toml.
  - For more: https://blog.rust-lang.org/2021/05/10/Rust-1.52.1.html</changelog>
  <changelog author="william.brown@suse.com" date="1624017600">- Update to version 1.53:
  + Language
  - [You can now use unicode for identifiers.][83799] This allows multilingual
    identifiers but still doesn't allow glyphs that are not considered characters
    such as `?` or `?`. More specifically you can now use any identifier that
    matches the UAX #31 "Unicode Identifier and Pattern Syntax" standard. This
    is the same standard as languages like Python, however Rust uses NFC
    normalization which may be different from other languages.
  - [You can now specify "or patterns" inside pattern matches.][79278]
    Previously you could only use `|` (OR) on complete patterns. E.g.
    ```rust
    let x = Some(2u8);
    // Before
    matches!(x, Some(1) | Some(2));
    // Now
    matches!(x, Some(1 | 2));
    ```
  - [Added the `:pat_param` `macro_rules!` matcher.][83386] This matcher
    has the same semantics as the `:pat` matcher. This is to allow `:pat`
    to change semantics to being a pattern fragment in a future edition.
  + Compiler
  - [Updated the minimum external LLVM version to LLVM 10.][83387]
  - [Added Tier 3\* support for the `wasm64-unknown-unknown` target.][80525]
  - [Improved debuginfo for closures and async functions on Windows MSVC.][83941]
    \* Refer to Rust's [platform support page][platform-support-doc] for more
    information on Rust's tiered platform support.
  + Libraries
  - [Abort messages will now forward to `android_set_abort_message` on
    Android platforms when available.][81469]
  - [`slice::IterMut&lt;'_, T&gt;` now implements `AsRef&lt;[T]&gt;`][82771]
  - [Arrays of any length now implement `IntoIterator`.][84147]
    Currently calling `.into_iter()` as a method on an array will
    return `impl Iterator&lt;Item=&amp;T&gt;`, but this may change in a
    future edition to change `Item` to `T`. Calling `IntoIterator::into_iter`
    directly on arrays will provide `impl Iterator&lt;Item=T&gt;` as expected.
  - [`leading_zeros`, and `trailing_zeros` are now available on all
    `NonZero` integer types.][84082]
  - [`{f32, f64}::from_str` now parse and print special values
    (`NaN`, `-0`) according to IEEE RFC 754.][78618]
  - [You can now index into slices using `(Bound&lt;usize&gt;, Bound&lt;usize&gt;)`.][77704]
  - [Add the `BITS` associated constant to all numeric types.][82565]
  + Cargo
  - [Cargo now supports git repositories where the default `HEAD` branch is not
    "master".][cargo/9392] This also includes a switch to the version 3 `Cargo.lock` format
    which can handle default branches correctly.
  - [macOS targets now default to `unpacked` split-debuginfo.][cargo/9298]
  - [The `authors` field is no longer included in `Cargo.toml` for new
    projects.][cargo/9282]
  + Rustdoc
  - [Added the `rustdoc::bare_urls` lint that warns when you have URLs
    without hyperlinks.][81764]
  + Compatibility Notes
  - [Implement token-based handling of attributes during expansion][82608]
  - [`Ipv4::from_str` will now reject octal format IP addresses in addition
    to rejecting hexadecimal IP addresses.][83652] The octal format can lead
    to confusion and potential security vulnerabilities and [is no
    longer recommended][ietf6943].</changelog>
  <changelog author="william.brown@suse.com" date="1624881600">- Migrate to parallel versioned rust installs.
- Remove artefacts for building rust
  * ignore-Wstring-conversion.patch</changelog>
  <changelog author="william.brown@suse.com" date="1625572800">- Revert package to be arch dependent based on reviewer feedback</changelog>
  <changelog author="dimstar@opensuse.org" date="1625572801">- Only install rls/README when building devtools, as otherwise this
  file would end up in no package.</changelog>
  <changelog author="william.brown@suse.com" date="1627646400">- Update to version 1.54</changelog>
  <changelog author="william.brown@suse.com" date="1629115200">- Change expression of dependency requirements to resolve zypper dup
  issues</changelog>
  <changelog author="william.brown@suse.com" date="1631275200">- Update to version 1.55</changelog>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
</package>
<package pkgid="bcb16f87c5e145ef0fa43c95b3a71c74d65e4c44af915283413e24baf3c3ff0e" name="cargo1.60" arch="aarch64">
  <version epoch="0" ver="1.60.0" rel="150300.7.6.1"/>
  <changelog author="william.brown@suse.com" date="1649419200">Version 1.60.0 (2022-04-07)
  Language
--------
- [Stabilize `#[cfg(panic = "...")]` for either `"unwind"` or `"abort"`.][93658]
- [Stabilize `#[cfg(target_has_atomic = "...")]` for each integer size and `"ptr"`.][93824]
  Compiler
--------
- [Enable combining `+crt-static` and `relocation-model=pic` on `x86_64-unknown-linux-gnu`][86374]
- [Fixes wrong `unreachable_pub` lints on nested and glob public reexport][87487]
- [Stabilize `-Z instrument-coverage` as `-C instrument-coverage`][90132]
- [Stabilize `-Z print-link-args` as `--print link-args`][91606]
- [Add new Tier 3 target `mips64-openwrt-linux-musl`\*][92300]
- [Add new Tier 3 target `armv7-unknown-linux-uclibceabi` (softfloat)\*][92383]
- [Fix invalid removal of newlines from doc comments][92357]
- [Add kernel target for RustyHermit][92670]
- [Deny mixing bin crate type with lib crate types][92933]
- [Make rustc use `RUST_BACKTRACE=full` by default][93566]
- [Upgrade to LLVM 14][93577]
  \* Refer to Rust's [platform support page][platform-support-doc] for more
  information on Rust's tiered platform support.
  Libraries
---------
- [Guarantee call order for `sort_by_cached_key`][89621]
- [Improve `Duration::try_from_secs_f32`/`f64` accuracy by directly processing exponent and mantissa][90247]
- [Make `Instant::{duration_since, elapsed, sub}` saturating][89926]
- [Remove non-monotonic clocks workarounds in `Instant::now`][89926]
- [Make `BuildHasherDefault`, `iter::Empty` and `future::Pending` covariant][92630]
  Stabilized APIs
- [`Arc::new_cyclic`][arc_new_cyclic]
- [`Rc::new_cyclic`][rc_new_cyclic]
- [`slice::EscapeAscii`][slice_escape_ascii]
- [`&lt;[u8]&gt;::escape_ascii`][slice_u8_escape_ascii]
- [`u8::escape_ascii`][u8_escape_ascii]
- [`Vec::spare_capacity_mut`][vec_spare_capacity_mut]
- [`MaybeUninit::assume_init_drop`][assume_init_drop]
- [`MaybeUninit::assume_init_read`][assume_init_read]
- [`i8::abs_diff`][i8_abs_diff]
- [`i16::abs_diff`][i16_abs_diff]
- [`i32::abs_diff`][i32_abs_diff]
- [`i64::abs_diff`][i64_abs_diff]
- [`i128::abs_diff`][i128_abs_diff]
- [`isize::abs_diff`][isize_abs_diff]
- [`u8::abs_diff`][u8_abs_diff]
- [`u16::abs_diff`][u16_abs_diff]
- [`u32::abs_diff`][u32_abs_diff]
- [`u64::abs_diff`][u64_abs_diff]
- [`u128::abs_diff`][u128_abs_diff]
- [`usize::abs_diff`][usize_abs_diff]
- [`Display for io::ErrorKind`][display_error_kind]
- [`From&lt;u8&gt; for ExitCode`][from_u8_exit_code]
- [`Not for !` (the "never" type)][not_never]
- [_Op_`Assign&lt;$t&gt; for Wrapping&lt;$t&gt;`][wrapping_assign_ops]
- [`arch::is_aarch64_feature_detected!`][is_aarch64_feature_detected]
  Cargo
-----
- [Port cargo from `toml-rs` to `toml_edit`][cargo/10086]
- [Stabilize `-Ztimings` as `--timings`][cargo/10245]
- [Stabilize namespaced and weak dependency features.][cargo/10269]
- [Accept more `cargo:rustc-link-arg-*` types from build script output.][cargo/10274]
- [cargo-new should not add ignore rule on Cargo.lock inside subdirs][cargo/10379]
  Misc
----
- [Ship docs on Tier 2 platforms by reusing the closest Tier 1 platform docs][92800]
- [Drop rustc-docs from complete profile][93742]
- [bootstrap: tidy up flag handling for llvm build][93918]
  Compatibility Notes
- [Remove compiler-rt linking hack on Android][83822]
- [Mitigations for platforms with non-monotonic clocks have been removed from
  `Instant::now`][89926]. On platforms that don't provide monotonic clocks, an
  instant is not guaranteed to be greater than an earlier instant anymore.
- [`Instant::{duration_since, elapsed, sub}` do not panic anymore on underflow,
  saturating to `0` instead][89926]. In the real world the panic happened mostly
  on platforms with buggy monotonic clock implementations rather than catching
  programming errors like reversing the start and end times. Such programming
  errors will now results in `0` rather than a panic.
- In a future release we're planning to increase the baseline requirements for
  the Linux kernel to version 3.2, and for glibc to version 2.17. We'd love
  your feedback in [PR #95026][95026].</changelog>
  <changelog author="william.brown@suse.com" date="1651060800">- Increase builder disk constraint</changelog>
  <changelog author="william.brown@suse.com" date="1652097600">- bsc#1199126 - resolve issue with rpath being embedded into rust-lld
- Support changing gcc version for leap/sle</changelog>
</package>
<package pkgid="f705ce363aa7714778921a76613249500f39e250b3f71f97c4dab76c658ffbc7" name="cargo1.60" arch="ppc64le">
  <version epoch="0" ver="1.60.0" rel="150300.7.6.1"/>
  <changelog author="william.brown@suse.com" date="1649419200">Version 1.60.0 (2022-04-07)
  Language
--------
- [Stabilize `#[cfg(panic = "...")]` for either `"unwind"` or `"abort"`.][93658]
- [Stabilize `#[cfg(target_has_atomic = "...")]` for each integer size and `"ptr"`.][93824]
  Compiler
--------
- [Enable combining `+crt-static` and `relocation-model=pic` on `x86_64-unknown-linux-gnu`][86374]
- [Fixes wrong `unreachable_pub` lints on nested and glob public reexport][87487]
- [Stabilize `-Z instrument-coverage` as `-C instrument-coverage`][90132]
- [Stabilize `-Z print-link-args` as `--print link-args`][91606]
- [Add new Tier 3 target `mips64-openwrt-linux-musl`\*][92300]
- [Add new Tier 3 target `armv7-unknown-linux-uclibceabi` (softfloat)\*][92383]
- [Fix invalid removal of newlines from doc comments][92357]
- [Add kernel target for RustyHermit][92670]
- [Deny mixing bin crate type with lib crate types][92933]
- [Make rustc use `RUST_BACKTRACE=full` by default][93566]
- [Upgrade to LLVM 14][93577]
  \* Refer to Rust's [platform support page][platform-support-doc] for more
  information on Rust's tiered platform support.
  Libraries
---------
- [Guarantee call order for `sort_by_cached_key`][89621]
- [Improve `Duration::try_from_secs_f32`/`f64` accuracy by directly processing exponent and mantissa][90247]
- [Make `Instant::{duration_since, elapsed, sub}` saturating][89926]
- [Remove non-monotonic clocks workarounds in `Instant::now`][89926]
- [Make `BuildHasherDefault`, `iter::Empty` and `future::Pending` covariant][92630]
  Stabilized APIs
- [`Arc::new_cyclic`][arc_new_cyclic]
- [`Rc::new_cyclic`][rc_new_cyclic]
- [`slice::EscapeAscii`][slice_escape_ascii]
- [`&lt;[u8]&gt;::escape_ascii`][slice_u8_escape_ascii]
- [`u8::escape_ascii`][u8_escape_ascii]
- [`Vec::spare_capacity_mut`][vec_spare_capacity_mut]
- [`MaybeUninit::assume_init_drop`][assume_init_drop]
- [`MaybeUninit::assume_init_read`][assume_init_read]
- [`i8::abs_diff`][i8_abs_diff]
- [`i16::abs_diff`][i16_abs_diff]
- [`i32::abs_diff`][i32_abs_diff]
- [`i64::abs_diff`][i64_abs_diff]
- [`i128::abs_diff`][i128_abs_diff]
- [`isize::abs_diff`][isize_abs_diff]
- [`u8::abs_diff`][u8_abs_diff]
- [`u16::abs_diff`][u16_abs_diff]
- [`u32::abs_diff`][u32_abs_diff]
- [`u64::abs_diff`][u64_abs_diff]
- [`u128::abs_diff`][u128_abs_diff]
- [`usize::abs_diff`][usize_abs_diff]
- [`Display for io::ErrorKind`][display_error_kind]
- [`From&lt;u8&gt; for ExitCode`][from_u8_exit_code]
- [`Not for !` (the "never" type)][not_never]
- [_Op_`Assign&lt;$t&gt; for Wrapping&lt;$t&gt;`][wrapping_assign_ops]
- [`arch::is_aarch64_feature_detected!`][is_aarch64_feature_detected]
  Cargo
-----
- [Port cargo from `toml-rs` to `toml_edit`][cargo/10086]
- [Stabilize `-Ztimings` as `--timings`][cargo/10245]
- [Stabilize namespaced and weak dependency features.][cargo/10269]
- [Accept more `cargo:rustc-link-arg-*` types from build script output.][cargo/10274]
- [cargo-new should not add ignore rule on Cargo.lock inside subdirs][cargo/10379]
  Misc
----
- [Ship docs on Tier 2 platforms by reusing the closest Tier 1 platform docs][92800]
- [Drop rustc-docs from complete profile][93742]
- [bootstrap: tidy up flag handling for llvm build][93918]
  Compatibility Notes
- [Remove compiler-rt linking hack on Android][83822]
- [Mitigations for platforms with non-monotonic clocks have been removed from
  `Instant::now`][89926]. On platforms that don't provide monotonic clocks, an
  instant is not guaranteed to be greater than an earlier instant anymore.
- [`Instant::{duration_since, elapsed, sub}` do not panic anymore on underflow,
  saturating to `0` instead][89926]. In the real world the panic happened mostly
  on platforms with buggy monotonic clock implementations rather than catching
  programming errors like reversing the start and end times. Such programming
  errors will now results in `0` rather than a panic.
- In a future release we're planning to increase the baseline requirements for
  the Linux kernel to version 3.2, and for glibc to version 2.17. We'd love
  your feedback in [PR #95026][95026].</changelog>
  <changelog author="william.brown@suse.com" date="1651060800">- Increase builder disk constraint</changelog>
  <changelog author="william.brown@suse.com" date="1652097600">- bsc#1199126 - resolve issue with rpath being embedded into rust-lld
- Support changing gcc version for leap/sle</changelog>
</package>
<package pkgid="cd472dd304615c7cfb0ef323ad98e5624f2eb2f8e2f3050d4b30852cc4b22239" name="cargo1.60" arch="s390x">
  <version epoch="0" ver="1.60.0" rel="150300.7.6.1"/>
  <changelog author="william.brown@suse.com" date="1649419200">Version 1.60.0 (2022-04-07)
  Language
--------
- [Stabilize `#[cfg(panic = "...")]` for either `"unwind"` or `"abort"`.][93658]
- [Stabilize `#[cfg(target_has_atomic = "...")]` for each integer size and `"ptr"`.][93824]
  Compiler
--------
- [Enable combining `+crt-static` and `relocation-model=pic` on `x86_64-unknown-linux-gnu`][86374]
- [Fixes wrong `unreachable_pub` lints on nested and glob public reexport][87487]
- [Stabilize `-Z instrument-coverage` as `-C instrument-coverage`][90132]
- [Stabilize `-Z print-link-args` as `--print link-args`][91606]
- [Add new Tier 3 target `mips64-openwrt-linux-musl`\*][92300]
- [Add new Tier 3 target `armv7-unknown-linux-uclibceabi` (softfloat)\*][92383]
- [Fix invalid removal of newlines from doc comments][92357]
- [Add kernel target for RustyHermit][92670]
- [Deny mixing bin crate type with lib crate types][92933]
- [Make rustc use `RUST_BACKTRACE=full` by default][93566]
- [Upgrade to LLVM 14][93577]
  \* Refer to Rust's [platform support page][platform-support-doc] for more
  information on Rust's tiered platform support.
  Libraries
---------
- [Guarantee call order for `sort_by_cached_key`][89621]
- [Improve `Duration::try_from_secs_f32`/`f64` accuracy by directly processing exponent and mantissa][90247]
- [Make `Instant::{duration_since, elapsed, sub}` saturating][89926]
- [Remove non-monotonic clocks workarounds in `Instant::now`][89926]
- [Make `BuildHasherDefault`, `iter::Empty` and `future::Pending` covariant][92630]
  Stabilized APIs
- [`Arc::new_cyclic`][arc_new_cyclic]
- [`Rc::new_cyclic`][rc_new_cyclic]
- [`slice::EscapeAscii`][slice_escape_ascii]
- [`&lt;[u8]&gt;::escape_ascii`][slice_u8_escape_ascii]
- [`u8::escape_ascii`][u8_escape_ascii]
- [`Vec::spare_capacity_mut`][vec_spare_capacity_mut]
- [`MaybeUninit::assume_init_drop`][assume_init_drop]
- [`MaybeUninit::assume_init_read`][assume_init_read]
- [`i8::abs_diff`][i8_abs_diff]
- [`i16::abs_diff`][i16_abs_diff]
- [`i32::abs_diff`][i32_abs_diff]
- [`i64::abs_diff`][i64_abs_diff]
- [`i128::abs_diff`][i128_abs_diff]
- [`isize::abs_diff`][isize_abs_diff]
- [`u8::abs_diff`][u8_abs_diff]
- [`u16::abs_diff`][u16_abs_diff]
- [`u32::abs_diff`][u32_abs_diff]
- [`u64::abs_diff`][u64_abs_diff]
- [`u128::abs_diff`][u128_abs_diff]
- [`usize::abs_diff`][usize_abs_diff]
- [`Display for io::ErrorKind`][display_error_kind]
- [`From&lt;u8&gt; for ExitCode`][from_u8_exit_code]
- [`Not for !` (the "never" type)][not_never]
- [_Op_`Assign&lt;$t&gt; for Wrapping&lt;$t&gt;`][wrapping_assign_ops]
- [`arch::is_aarch64_feature_detected!`][is_aarch64_feature_detected]
  Cargo
-----
- [Port cargo from `toml-rs` to `toml_edit`][cargo/10086]
- [Stabilize `-Ztimings` as `--timings`][cargo/10245]
- [Stabilize namespaced and weak dependency features.][cargo/10269]
- [Accept more `cargo:rustc-link-arg-*` types from build script output.][cargo/10274]
- [cargo-new should not add ignore rule on Cargo.lock inside subdirs][cargo/10379]
  Misc
----
- [Ship docs on Tier 2 platforms by reusing the closest Tier 1 platform docs][92800]
- [Drop rustc-docs from complete profile][93742]
- [bootstrap: tidy up flag handling for llvm build][93918]
  Compatibility Notes
- [Remove compiler-rt linking hack on Android][83822]
- [Mitigations for platforms with non-monotonic clocks have been removed from
  `Instant::now`][89926]. On platforms that don't provide monotonic clocks, an
  instant is not guaranteed to be greater than an earlier instant anymore.
- [`Instant::{duration_since, elapsed, sub}` do not panic anymore on underflow,
  saturating to `0` instead][89926]. In the real world the panic happened mostly
  on platforms with buggy monotonic clock implementations rather than catching
  programming errors like reversing the start and end times. Such programming
  errors will now results in `0` rather than a panic.
- In a future release we're planning to increase the baseline requirements for
  the Linux kernel to version 3.2, and for glibc to version 2.17. We'd love
  your feedback in [PR #95026][95026].</changelog>
  <changelog author="william.brown@suse.com" date="1651060800">- Increase builder disk constraint</changelog>
  <changelog author="william.brown@suse.com" date="1652097600">- bsc#1199126 - resolve issue with rpath being embedded into rust-lld
- Support changing gcc version for leap/sle</changelog>
</package>
<package pkgid="65824d6ccda37489621ca7fa298bc75944693c43a320ac3256b52d1b8f33c7ab" name="cargo1.60" arch="x86_64">
  <version epoch="0" ver="1.60.0" rel="150300.7.6.1"/>
  <changelog author="william.brown@suse.com" date="1649419200">Version 1.60.0 (2022-04-07)
  Language
--------
- [Stabilize `#[cfg(panic = "...")]` for either `"unwind"` or `"abort"`.][93658]
- [Stabilize `#[cfg(target_has_atomic = "...")]` for each integer size and `"ptr"`.][93824]
  Compiler
--------
- [Enable combining `+crt-static` and `relocation-model=pic` on `x86_64-unknown-linux-gnu`][86374]
- [Fixes wrong `unreachable_pub` lints on nested and glob public reexport][87487]
- [Stabilize `-Z instrument-coverage` as `-C instrument-coverage`][90132]
- [Stabilize `-Z print-link-args` as `--print link-args`][91606]
- [Add new Tier 3 target `mips64-openwrt-linux-musl`\*][92300]
- [Add new Tier 3 target `armv7-unknown-linux-uclibceabi` (softfloat)\*][92383]
- [Fix invalid removal of newlines from doc comments][92357]
- [Add kernel target for RustyHermit][92670]
- [Deny mixing bin crate type with lib crate types][92933]
- [Make rustc use `RUST_BACKTRACE=full` by default][93566]
- [Upgrade to LLVM 14][93577]
  \* Refer to Rust's [platform support page][platform-support-doc] for more
  information on Rust's tiered platform support.
  Libraries
---------
- [Guarantee call order for `sort_by_cached_key`][89621]
- [Improve `Duration::try_from_secs_f32`/`f64` accuracy by directly processing exponent and mantissa][90247]
- [Make `Instant::{duration_since, elapsed, sub}` saturating][89926]
- [Remove non-monotonic clocks workarounds in `Instant::now`][89926]
- [Make `BuildHasherDefault`, `iter::Empty` and `future::Pending` covariant][92630]
  Stabilized APIs
- [`Arc::new_cyclic`][arc_new_cyclic]
- [`Rc::new_cyclic`][rc_new_cyclic]
- [`slice::EscapeAscii`][slice_escape_ascii]
- [`&lt;[u8]&gt;::escape_ascii`][slice_u8_escape_ascii]
- [`u8::escape_ascii`][u8_escape_ascii]
- [`Vec::spare_capacity_mut`][vec_spare_capacity_mut]
- [`MaybeUninit::assume_init_drop`][assume_init_drop]
- [`MaybeUninit::assume_init_read`][assume_init_read]
- [`i8::abs_diff`][i8_abs_diff]
- [`i16::abs_diff`][i16_abs_diff]
- [`i32::abs_diff`][i32_abs_diff]
- [`i64::abs_diff`][i64_abs_diff]
- [`i128::abs_diff`][i128_abs_diff]
- [`isize::abs_diff`][isize_abs_diff]
- [`u8::abs_diff`][u8_abs_diff]
- [`u16::abs_diff`][u16_abs_diff]
- [`u32::abs_diff`][u32_abs_diff]
- [`u64::abs_diff`][u64_abs_diff]
- [`u128::abs_diff`][u128_abs_diff]
- [`usize::abs_diff`][usize_abs_diff]
- [`Display for io::ErrorKind`][display_error_kind]
- [`From&lt;u8&gt; for ExitCode`][from_u8_exit_code]
- [`Not for !` (the "never" type)][not_never]
- [_Op_`Assign&lt;$t&gt; for Wrapping&lt;$t&gt;`][wrapping_assign_ops]
- [`arch::is_aarch64_feature_detected!`][is_aarch64_feature_detected]
  Cargo
-----
- [Port cargo from `toml-rs` to `toml_edit`][cargo/10086]
- [Stabilize `-Ztimings` as `--timings`][cargo/10245]
- [Stabilize namespaced and weak dependency features.][cargo/10269]
- [Accept more `cargo:rustc-link-arg-*` types from build script output.][cargo/10274]
- [cargo-new should not add ignore rule on Cargo.lock inside subdirs][cargo/10379]
  Misc
----
- [Ship docs on Tier 2 platforms by reusing the closest Tier 1 platform docs][92800]
- [Drop rustc-docs from complete profile][93742]
- [bootstrap: tidy up flag handling for llvm build][93918]
  Compatibility Notes
- [Remove compiler-rt linking hack on Android][83822]
- [Mitigations for platforms with non-monotonic clocks have been removed from
  `Instant::now`][89926]. On platforms that don't provide monotonic clocks, an
  instant is not guaranteed to be greater than an earlier instant anymore.
- [`Instant::{duration_since, elapsed, sub}` do not panic anymore on underflow,
  saturating to `0` instead][89926]. In the real world the panic happened mostly
  on platforms with buggy monotonic clock implementations rather than catching
  programming errors like reversing the start and end times. Such programming
  errors will now results in `0` rather than a panic.
- In a future release we're planning to increase the baseline requirements for
  the Linux kernel to version 3.2, and for glibc to version 2.17. We'd love
  your feedback in [PR #95026][95026].</changelog>
  <changelog author="william.brown@suse.com" date="1651060800">- Increase builder disk constraint</changelog>
  <changelog author="william.brown@suse.com" date="1652097600">- bsc#1199126 - resolve issue with rpath being embedded into rust-lld
- Support changing gcc version for leap/sle</changelog>
</package>
<package pkgid="2d1adf5a5072e60de122d0a04e549810e5025d0458b921920c3bba420f7652f4" name="ceph" arch="src">
  <version epoch="0" ver="15.2.16.99+g96ce9b152f5" rel="150200.3.37.1"/>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
  <changelog author="ncutler@suse.com" date="1624536000">- Update _constraints: only honor physical memory, not 'any memory'
  (e.g. swap). But then, be happy with 8GB (bumping the current
  x86_64 worker pool from 16 to 64). (Dominique Leuenberger)</changelog>
  <changelog author="ncutler@suse.com" date="1626868800">- Additional bugs fixed by 15.2.13-79-g51835b62d61:
  + (bsc#1181291) mgr/cephadm: alias rgw-nfs -&gt; nfs
  + (bsc#1183561) mgr/cephadm: on ssh connection error, advice chmod 0600</changelog>
  <changelog author="ncutler@suse.com" date="1627992000">- Update to 15.2.13-85-g18a335e0360:
  + qa/tasks/salt_manager: allow gatherlogs for files in subdir
  + qa/tasks/ceph_salt: gather /var/log/ceph/cephadm.out
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) Revert "cephadm: default container_init to False"</changelog>
  <changelog author="ncutler@suse.com" date="1628683200">- Update to 15.2.14-84-gb6e5642e260:
  + rebase on top of Ceph v15.2.14 tag
    https://ceph.io/releases/v15-2-14-octopus-released/
  * (bsc#1184517) cls/rgw: look for plane entries in non-ascii plain namespace too
  * (bsc#1185246) rgw: check object locks in multi-object delete
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) mgr/cephadm: pass --container-init to "cephadm deploy" if specified
  + (bsc#1189173) mgr/dashboard: Downstream branding: Adapt latest upstream
    changes to branded navigation component</changelog>
  <changelog author="ncutler@suse.com" date="1631620800">- Update to 15.2.14-86-g25f8e6a7abf:
  + (jsc#SES-704) mgr/mgr_module.py: CLICommand: Fix parsing of kwargs arguments
    (fixes an issue caused by downstream commit "pybing/mgr/mgr_module: allow
    keyword arguments")</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 15.2.15-83-gf72054fa653:
  + rebase on top of Ceph v15.2.15 tag
    https://ceph.io/releases/v15-2-15-octopus-released/
  + (bsc#1192840) mgr/mgr_module.py: CLICommand: Fix parsing of kwargs arguments
  + re-do some downstream patches
  * patches dropped:
    "cephadm: use full qualified image names for cephadm"
    "Switch to CaaSP v4.5 container images"
    "cephadm: Update Grafana container image from 7.0.3"
  * replaced by:
    "cephadm: downstream-ify default container image paths"</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to v15.2.16
  + rebase on top of Ceph v15.2.16 tag v15.2.16
  + https://ceph.io/en/news/blog/2022/v15-2-16-octopus-released/
  + (bsc#1192838) cephadm: Fix iscsi client caps (allow mgr &lt;service status&gt; calls) - https://github.com/ceph/ceph/pull/43822 (Merged)
  + (bsc#1187748) When an RBD is mapped, it is attempted to be deployed as an OSD.
  + (bsc#1188911) OSD marked down causes wrong backfill_toofull</changelog>
  <changelog author="stefen.allen@suse.com" date="1647604800">- Update to v15.2.16-93-gafbeee1955c
  + (bsc#1196046) mgr/cephadm: try to get FQDN for configuration files</changelog>
  <changelog author="stefen.allen@suse.com" date="1648555200">- Update to v15.2.16-97-ge5eb7a74fdf
  + (pr#464) ses7: mgr/cephadm: try to get FQDN for configuration files
  + (pr#466) cephadm: infer the default container image during pull
  + (pr#444) [SES7] Notify user that there is a SES7.1 upgrade available</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v15.2.16-99-g96ce9b152f5
  + (bsc#1196733) ceph.spec.in: remove build directory during %clean</changelog>
</package>
<package pkgid="419d7e2de68b88608227f67192b9d32b825ac5d6b3eefe9210d42fb211e14aa2" name="ceph-mgr-diskprediction-cloud" arch="noarch">
  <version epoch="0" ver="15.2.16.99+g96ce9b152f5" rel="150200.3.37.1"/>
  <changelog author="ncutler@suse.com" date="1606910400">- Update to 15.2.7-689-g2c35e99e0a:
  + Rebase on tip of upstream "octopus" branch, SHA1 bf8c93ed52f9fc8b0ead7434383bfc40f78d4204
  * upstream Octopus v15.2.7 release, see https://ceph.io/releases/v15-2-7-octopus-released/
  * (bsc#1179526) rgw: during GC defer, prevent new GC enqueue
  + (bsc#1179452) mgr/insights: Test environment requires 'six'</changelog>
  <changelog author="ncutler@suse.com" date="1608120000">- Update to 15.2.7-776-g343cd10fe5:
  + Rebase on tip of upstream "octopus" branch, SHA1 1b8a634fdcd94dfb3ba650793fb1b6d09af65e05
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  + (bsc#1179016) rpm: require smartmontools on SUSE
  + (bsc#1180107) ceph-volume: pass --filter-for-batch from drive-group subcommand</changelog>
  <changelog author="ncutler@suse.com" date="1608206400">- Update to 15.2.8-80-g1f4b6229ca:
  + Rebase on tip of upstream "octopus" branch, SHA1 bdf3eebcd22d7d0b3dd4d5501bee5bac354d5b55
  * upstream Octopus v15.2.8 release, see https://ceph.io/releases/v15-2-8-octopus-released/
  * (bsc#1179802, bsc#1180155, CVE-2020-27781) cephx privilege escalation possible via
    ceph_volume_client Python interface</changelog>
  <changelog author="ncutler@suse.com" date="1614254400">- Update to 15.2.9-82-gee18977364:
  + upstream Octopus v15.2.9 release, see https://ceph.io/releases/v15-2-9-octopus-released/
  * (bsc#1179997) (CVE-2020-27839) mgr/dashboard: Use secure cookies to store JWT Token
  * (bsc#1178905) (CVE-2020-25678) Do not add sensitive information in Ceph log files
  * (bsc#1172926) mgr/orchestrator: Sort 'ceph orch device ls' by host
  * (bsc#1176390, bsc#1176679) mgr/dashboard: enable different URL for users
    of browser to Grafana
  * (bsc#1176489) mgr/cephadm: lock multithreaded access to OSDRemovalQueue
  * (bsc#1176828) cephadm: command_unit: call systemctl with verbose=True
  * (bsc#1177360) cephadm: silence "Failed to evict container" log msg
  * (bsc#1177857) mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails
  * (bsc#1178837) rgw: cls/user: set from_index for reset stats calls
  * (bsc#1178860) mgr/dashboard: Disable TLS 1.0 and 1.1
  * (bsc#1178932, bsc#1179569) cephadm: reference the last local image by digest</changelog>
  <changelog author="ncutler@suse.com" date="1614600000">- Update to 15.2.9-83-g4275378de0:
  + cephadm: fix 'inspect' and 'pull' (bsc#1182766)</changelog>
  <changelog author="ncutler@suse.com" date="1616500800">- Update to 15.2.10-81-g29303934a5:
  + upstream Octopus v15.2.10 release, see https://ceph.io/releases/v15-2-10-octopus-released/
  * bluestore: fix huge reads/writes at BlueFS (bsc#1183899)</changelog>
  <changelog author="ncutler@suse.com" date="1619179200">- Update to 15.2.11-82-g7c6356e178:
  + upstream Octopus v15.2.11 release
    see https://ceph.io/releases/v15-2-11-octopus-released/
  * (bsc#1183074) - (CVE-2021-20288) ceph: Unauthorized global_id reuse
  + cephadm: Update Grafana container image from 7.0.3 to 7.3.1</changelog>
  <changelog author="ncutler@suse.com" date="1619524800">- Update to 15.2.11-83-g8a15f484c2:
  + (bsc#1184231) cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections</changelog>
  <changelog author="ncutler@suse.com" date="1620993600">- Update to 15.2.12-83-g528da226523:
  + rebase on top of Ceph v15.2.12 tag
    https://ceph.io/releases/v15-2-12-octopus-released/
  * mgr/dashboard: fix base-href: revert it to previous approach
  * (bsc#1186021) mgr/dashboard: fix cookie injection issue (CVE-2021-3509)
  * (bsc#1186020) rgw: RGWSwiftWebsiteHandler::is_web_dir checks empty subdir_name (CVE-2021-3531)
  * (bsc#1185619) rgw: sanitize \r in s3 CORSConfiguration?s ExposeHeader (CVE-2021-3524)</changelog>
  <changelog author="ncutler@suse.com" date="1622116800">- Update to 15.2.13-79-g51835b62d61:
  + rebase on top of Ceph v15.2.13 tag
    https://ceph.io/releases/v15-2-13-octopus-released/
  * (bsc#1174526) mgr/dashboard: allow getting fresh inventory data from the orchestrator
  + drop obsolete downstream patches:
  * cephadm: add global flag --container-init
  * mgr/cephadm: append --container-init to basecommand
  * cephadm: remove container-init subparser from "deploy"</changelog>
  <changelog author="ncutler@suse.com" date="1624536000">- Update _constraints: only honor physical memory, not 'any memory'
  (e.g. swap). But then, be happy with 8GB (bumping the current
  x86_64 worker pool from 16 to 64). (Dominique Leuenberger)</changelog>
  <changelog author="ncutler@suse.com" date="1626868800">- Additional bugs fixed by 15.2.13-79-g51835b62d61:
  + (bsc#1181291) mgr/cephadm: alias rgw-nfs -&gt; nfs
  + (bsc#1183561) mgr/cephadm: on ssh connection error, advice chmod 0600</changelog>
  <changelog author="ncutler@suse.com" date="1627992000">- Update to 15.2.13-85-g18a335e0360:
  + qa/tasks/salt_manager: allow gatherlogs for files in subdir
  + qa/tasks/ceph_salt: gather /var/log/ceph/cephadm.out
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) Revert "cephadm: default container_init to False"</changelog>
  <changelog author="ncutler@suse.com" date="1628683200">- Update to 15.2.14-84-gb6e5642e260:
  + rebase on top of Ceph v15.2.14 tag
    https://ceph.io/releases/v15-2-14-octopus-released/
  * (bsc#1184517) cls/rgw: look for plane entries in non-ascii plain namespace too
  * (bsc#1185246) rgw: check object locks in multi-object delete
  + (bsc#1186348) mgr/zabbix: adapt zabbix_sender default path
  + (bsc#1188979) mgr/cephadm: pass --container-init to "cephadm deploy" if specified
  + (bsc#1189173) mgr/dashboard: Downstream branding: Adapt latest upstream
    changes to branded navigation component</changelog>
  <changelog author="ncutler@suse.com" date="1631620800">- Update to 15.2.14-86-g25f8e6a7abf:
  + (jsc#SES-704) mgr/mgr_module.py: CLICommand: Fix parsing of kwargs arguments
    (fixes an issue caused by downstream commit "pybing/mgr/mgr_module: allow
    keyword arguments")</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 15.2.15-83-gf72054fa653:
  + rebase on top of Ceph v15.2.15 tag
    https://ceph.io/releases/v15-2-15-octopus-released/
  + (bsc#1192840) mgr/mgr_module.py: CLICommand: Fix parsing of kwargs arguments
  + re-do some downstream patches
  * patches dropped:
    "cephadm: use full qualified image names for cephadm"
    "Switch to CaaSP v4.5 container images"
    "cephadm: Update Grafana container image from 7.0.3"
  * replaced by:
    "cephadm: downstream-ify default container image paths"</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to v15.2.16
  + rebase on top of Ceph v15.2.16 tag v15.2.16
  + https://ceph.io/en/news/blog/2022/v15-2-16-octopus-released/
  + (bsc#1192838) cephadm: Fix iscsi client caps (allow mgr &lt;service status&gt; calls) - https://github.com/ceph/ceph/pull/43822 (Merged)
  + (bsc#1187748) When an RBD is mapped, it is attempted to be deployed as an OSD.
  + (bsc#1188911) OSD marked down causes wrong backfill_toofull</changelog>
  <changelog author="stefen.allen@suse.com" date="1647604800">- Update to v15.2.16-93-gafbeee1955c
  + (bsc#1196046) mgr/cephadm: try to get FQDN for configuration files</changelog>
  <changelog author="stefen.allen@suse.com" date="1648555200">- Update to v15.2.16-97-ge5eb7a74fdf
  + (pr#464) ses7: mgr/cephadm: try to get FQDN for configuration files
  + (pr#466) cephadm: infer the default container image during pull
  + (pr#444) [SES7] Notify user that there is a SES7.1 upgrade available</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v15.2.16-99-g96ce9b152f5
  + (bsc#1196733) ceph.spec.in: remove build directory during %clean</changelog>
</package>
<package pkgid="5967da22f72b431701712fa0e24eab0f2ac0388677fa468a8c2b2afe7012227e" name="ckermit" arch="aarch64">
  <version epoch="0" ver="9.0.302" rel="150000.3.3.1"/>
  <changelog author="joop.boonen@opensuse.org" date="1312804800">- Build version 9.0.301</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1315828800">- Build version 9.0.302</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937600">- Reformated the ckermit spec file
  to meet the openSUSE standards</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937601">- Created a separate doc package</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937602">- Corrected the Url as the project is now hosted on
  http://www.kermitproject.org/</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1349870400">- Don't build noarch doc for sles as otherwise all
  packages will be build as noarch for sles</changelog>
  <changelog author="schwab@suse.de" date="1392206400">- decl-definition-conflict.patch: Fix conflicting declarations</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- does not seem to require openssl development.</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec-file with spec-cleaner</changelog>
  <changelog author="ro@suse.de" date="1648814400">- add patch ckermit-libio-removal.patch
  FTBFS fix build after libio removal with glibc-2.28
  (bsc#1197708, also gentoo#685096)</changelog>
</package>
<package pkgid="35d9ca69a840a2539260d37ee907b29100c9a6e2cbc8ea97788f6f2971a093d9" name="ckermit" arch="ppc64le">
  <version epoch="0" ver="9.0.302" rel="150000.3.3.1"/>
  <changelog author="joop.boonen@opensuse.org" date="1312804800">- Build version 9.0.301</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1315828800">- Build version 9.0.302</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937600">- Reformated the ckermit spec file
  to meet the openSUSE standards</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937601">- Created a separate doc package</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937602">- Corrected the Url as the project is now hosted on
  http://www.kermitproject.org/</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1349870400">- Don't build noarch doc for sles as otherwise all
  packages will be build as noarch for sles</changelog>
  <changelog author="schwab@suse.de" date="1392206400">- decl-definition-conflict.patch: Fix conflicting declarations</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- does not seem to require openssl development.</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec-file with spec-cleaner</changelog>
  <changelog author="ro@suse.de" date="1648814400">- add patch ckermit-libio-removal.patch
  FTBFS fix build after libio removal with glibc-2.28
  (bsc#1197708, also gentoo#685096)</changelog>
</package>
<package pkgid="10ccaedf8630310e465b48381faf360e4265c8958c3ac936c1b9c86a5ceaef1e" name="ckermit" arch="s390x">
  <version epoch="0" ver="9.0.302" rel="150000.3.3.1"/>
  <changelog author="joop.boonen@opensuse.org" date="1312804800">- Build version 9.0.301</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1315828800">- Build version 9.0.302</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937600">- Reformated the ckermit spec file
  to meet the openSUSE standards</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937601">- Created a separate doc package</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937602">- Corrected the Url as the project is now hosted on
  http://www.kermitproject.org/</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1349870400">- Don't build noarch doc for sles as otherwise all
  packages will be build as noarch for sles</changelog>
  <changelog author="schwab@suse.de" date="1392206400">- decl-definition-conflict.patch: Fix conflicting declarations</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- does not seem to require openssl development.</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec-file with spec-cleaner</changelog>
  <changelog author="ro@suse.de" date="1648814400">- add patch ckermit-libio-removal.patch
  FTBFS fix build after libio removal with glibc-2.28
  (bsc#1197708, also gentoo#685096)</changelog>
</package>
<package pkgid="a1c17155783b8b2117a66139633b99ac2d915ae1c2d030bc86d6bbb9d715e155" name="ckermit" arch="src">
  <version epoch="0" ver="9.0.302" rel="150000.3.3.1"/>
  <changelog author="rguenther@suse.de" date="1175256000">- add ncurses-devel BuildRequires</changelog>
  <changelog author="ro@suse.de" date="1196856000">- move /etc/skel/.kermrc to this package</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1255953600">- build version 8.0.212 pre version</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1264593600">- Build version 9.0.299 Alpha.01</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1266062400">- Build version 9.0.299 Alpha.02</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1272196800">- Build version 9.0.299 Alpha.06</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1280059200">- added a lockdev patch</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1282651200">- build version 9.0.299 Alpha.08</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1287316800">- build version 9.0.299 Alpha.09</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1304510400">- put pre 9.0 version in contrib</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1312804800">- Build version 9.0.301</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1315828800">- Build version 9.0.302</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937600">- Reformated the ckermit spec file
  to meet the openSUSE standards</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937601">- Created a separate doc package</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937602">- Corrected the Url as the project is now hosted on
  http://www.kermitproject.org/</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1349870400">- Don't build noarch doc for sles as otherwise all
  packages will be build as noarch for sles</changelog>
  <changelog author="schwab@suse.de" date="1392206400">- decl-definition-conflict.patch: Fix conflicting declarations</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- does not seem to require openssl development.</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec-file with spec-cleaner</changelog>
  <changelog author="ro@suse.de" date="1648814400">- add patch ckermit-libio-removal.patch
  FTBFS fix build after libio removal with glibc-2.28
  (bsc#1197708, also gentoo#685096)</changelog>
</package>
<package pkgid="da905573432c7931dc67b3e49a7c3293e5ca9442856e807f20e4aed21fdae650" name="ckermit" arch="x86_64">
  <version epoch="0" ver="9.0.302" rel="150000.3.3.1"/>
  <changelog author="joop.boonen@opensuse.org" date="1312804800">- Build version 9.0.301</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1315828800">- Build version 9.0.302</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937600">- Reformated the ckermit spec file
  to meet the openSUSE standards</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937601">- Created a separate doc package</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937602">- Corrected the Url as the project is now hosted on
  http://www.kermitproject.org/</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1349870400">- Don't build noarch doc for sles as otherwise all
  packages will be build as noarch for sles</changelog>
  <changelog author="schwab@suse.de" date="1392206400">- decl-definition-conflict.patch: Fix conflicting declarations</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- does not seem to require openssl development.</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec-file with spec-cleaner</changelog>
  <changelog author="ro@suse.de" date="1648814400">- add patch ckermit-libio-removal.patch
  FTBFS fix build after libio removal with glibc-2.28
  (bsc#1197708, also gentoo#685096)</changelog>
</package>
<package pkgid="ae2dde7072a2d32189a8e8305962e13abb760b3a7a52426ff63c42b7984f60f2" name="ckermit-doc" arch="noarch">
  <version epoch="0" ver="9.0.302" rel="150000.3.3.1"/>
  <changelog author="joop.boonen@opensuse.org" date="1312804800">- Build version 9.0.301</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1315828800">- Build version 9.0.302</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937600">- Reformated the ckermit spec file
  to meet the openSUSE standards</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937601">- Created a separate doc package</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1325937602">- Corrected the Url as the project is now hosted on
  http://www.kermitproject.org/</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1349870400">- Don't build noarch doc for sles as otherwise all
  packages will be build as noarch for sles</changelog>
  <changelog author="schwab@suse.de" date="1392206400">- decl-definition-conflict.patch: Fix conflicting declarations</changelog>
  <changelog author="meissner@suse.com" date="1408363200">- does not seem to require openssl development.</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec-file with spec-cleaner</changelog>
  <changelog author="ro@suse.de" date="1648814400">- add patch ckermit-libio-removal.patch
  FTBFS fix build after libio removal with glibc-2.28
  (bsc#1197708, also gentoo#685096)</changelog>
</package>
<package pkgid="291bb7ba5a7e17bc689fb6803e3caeca12d4ff3f7080f8cb997360006b5ae2c8" name="clamav" arch="aarch64">
  <version epoch="0" ver="0.103.6" rel="150000.3.38.1"/>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
</package>
<package pkgid="d45b69b5b20a3a32521e09fe207553ca271e26a5a3005e0a27c7313b08552549" name="clamav" arch="ppc64le">
  <version epoch="0" ver="0.103.6" rel="150000.3.38.1"/>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
</package>
<package pkgid="0f67c440c098cf186e0c4eb2183aba7f7ded481242c7aac5b769abf5a0ff41cc" name="clamav" arch="s390x">
  <version epoch="0" ver="0.103.6" rel="150000.3.38.1"/>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
</package>
<package pkgid="bcd3ba6c9c24fe28c8f048d0316ab25c4218d9a3bea7421204fc9370592b2113" name="clamav" arch="src">
  <version epoch="0" ver="0.103.6" rel="150000.3.38.1"/>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
</package>
<package pkgid="8fbbfe80e60cd4df178d06431066af25ffe76aaab88bee193de054de12ce14b9" name="clamav" arch="x86_64">
  <version epoch="0" ver="0.103.6" rel="150000.3.38.1"/>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
</package>
<package pkgid="40eb3b22da4de1f8ec61854fb553d10f7150181dc62654a8f8d2877674bd1e96" name="clamav-devel" arch="aarch64">
  <version epoch="0" ver="0.103.6" rel="150000.3.38.1"/>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
</package>
<package pkgid="40ad882a852031a188ce498b0bab8e4ba273588a47bd6d07eca723341a96a5b0" name="clamav-devel" arch="ppc64le">
  <version epoch="0" ver="0.103.6" rel="150000.3.38.1"/>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
</package>
<package pkgid="98125e88e67321648b7bbdc2da60f6d645d2f8cbe3570dba8a56e3b93468a79a" name="clamav-devel" arch="s390x">
  <version epoch="0" ver="0.103.6" rel="150000.3.38.1"/>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
</package>
<package pkgid="9779f79d44919af7c0a3c48545d818833ddaf21f5239426731f3ee5a606f32ed" name="clamav-devel" arch="x86_64">
  <version epoch="0" ver="0.103.6" rel="150000.3.38.1"/>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
</package>
<package pkgid="ec1d104f877c6a22ecb72e684c8719fe81caade8493f39212158ec08ea4c3381" name="clang7" arch="aarch64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="acf37b8f40ced1bc676cf7d7c0fae6f4aff90956677e09dc7fc24bf0ae36b899" name="clang7" arch="ppc64le">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="4ec6fe96a375e610614c02de1ce8d31c0e20513f58f4adb072dc575f65a4a0e3" name="clang7" arch="s390x">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="ba4801490dcc2c8a511ce557ca503b40ed35aa29c117b9edd397c3cf17e078cf" name="clang7" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="94aa764c9b97cb065a22d4863a068a272d026698ae62ae364051bf0b9b896422" name="clang7-checker" arch="aarch64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="a57914e2a72cb2772edb9c0da48b413668258f50288f6589fa1c967f61e367d3" name="clang7-checker" arch="ppc64le">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="2ea4acae4673f0149095eac7d94a58e3899e405003718a4bfb871e493cf4f38c" name="clang7-checker" arch="s390x">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="8fe8e467927f762fe67878c35f22dd4b4c787c0378597695fd0a9b867906de61" name="clang7-checker" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="cbb72d361c644ebacaae0c6fd41acd5c192c3866a41ece670a4f3de99af895b9" name="clang7-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="191d925e17b517351bb3bc5f9a94598f7a0520294d516c6986d9a2ac3196cdab" name="clang7-devel" arch="aarch64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="c6bca863a4420a905cbb32acf7545ace11244bce8b7286913e5b0ea839148c75" name="clang7-devel" arch="ppc64le">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="6f139f9f173c1023722228f0220dc6ac73fbac4173295b4f455cbd17dd18f0f3" name="clang7-devel" arch="s390x">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="4cb8bb056d2bbe95e8d954d4351ed556be323ad70dc2ffef3672324c64f32ba6" name="clang7-devel" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="c70a9c673a5c00d43f35c19e61b71ec60af5ca51e5b9a740a536d90c45355fd7" name="cluster-glue" arch="aarch64">
  <version epoch="0" ver="1.0.12+v1.git.1587474580.a5fda2bc" rel="150000.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560168000">- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)</changelog>
  <changelog author="xarbulu@suse.com" date="1587988800">- Update to version 1.0.12+v1.git.1587474580.a5fda2bc:
  * Fix EC2 stonith plugin (bsc#1169784)</changelog>
  <changelog author="varkoly@suse.com" date="1645704000">- (jsc#SLE-23490) (jsc#SLE-23491) (jsc#SLE-23492) (jsc#SLE-23494)
  IMDSv2 support in ec2 stonith agent
  * add upstream patch:
    0001-Update-external-ec2-to-support-IMDSv2.patch</changelog>
  <changelog author="varkoly@suse.com" date="1650456000">- Requesting cluster-glue bugfix (bsc#1197681)
  * Add upstream patch:
    0002-bugfix-for-comment-in-external-ec2.patch</changelog>
</package>
<package pkgid="bb058e0a025e6c5458775c9aae0d21551365572ed92d22fd458baaba89835d5a" name="cluster-glue" arch="ppc64le">
  <version epoch="0" ver="1.0.12+v1.git.1587474580.a5fda2bc" rel="150000.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560168000">- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)</changelog>
  <changelog author="xarbulu@suse.com" date="1587988800">- Update to version 1.0.12+v1.git.1587474580.a5fda2bc:
  * Fix EC2 stonith plugin (bsc#1169784)</changelog>
  <changelog author="varkoly@suse.com" date="1645704000">- (jsc#SLE-23490) (jsc#SLE-23491) (jsc#SLE-23492) (jsc#SLE-23494)
  IMDSv2 support in ec2 stonith agent
  * add upstream patch:
    0001-Update-external-ec2-to-support-IMDSv2.patch</changelog>
  <changelog author="varkoly@suse.com" date="1650456000">- Requesting cluster-glue bugfix (bsc#1197681)
  * Add upstream patch:
    0002-bugfix-for-comment-in-external-ec2.patch</changelog>
</package>
<package pkgid="e04ed8eb4de59a767aec8cb66d826b43412a696d885aa9784d3095051051b648" name="cluster-glue" arch="s390x">
  <version epoch="0" ver="1.0.12+v1.git.1587474580.a5fda2bc" rel="150000.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560168000">- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)</changelog>
  <changelog author="xarbulu@suse.com" date="1587988800">- Update to version 1.0.12+v1.git.1587474580.a5fda2bc:
  * Fix EC2 stonith plugin (bsc#1169784)</changelog>
  <changelog author="varkoly@suse.com" date="1645704000">- (jsc#SLE-23490) (jsc#SLE-23491) (jsc#SLE-23492) (jsc#SLE-23494)
  IMDSv2 support in ec2 stonith agent
  * add upstream patch:
    0001-Update-external-ec2-to-support-IMDSv2.patch</changelog>
  <changelog author="varkoly@suse.com" date="1650456000">- Requesting cluster-glue bugfix (bsc#1197681)
  * Add upstream patch:
    0002-bugfix-for-comment-in-external-ec2.patch</changelog>
</package>
<package pkgid="94ac9725ae82706b9684e33486ad5f56fe5010eb5e8eb3aa677a8f28b96da8c6" name="cluster-glue" arch="src">
  <version epoch="0" ver="1.0.12+v1.git.1587474580.a5fda2bc" rel="150000.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560168000">- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)</changelog>
  <changelog author="xarbulu@suse.com" date="1587988800">- Update to version 1.0.12+v1.git.1587474580.a5fda2bc:
  * Fix EC2 stonith plugin (bsc#1169784)</changelog>
  <changelog author="varkoly@suse.com" date="1645704000">- (jsc#SLE-23490) (jsc#SLE-23491) (jsc#SLE-23492) (jsc#SLE-23494)
  IMDSv2 support in ec2 stonith agent
  * add upstream patch:
    0001-Update-external-ec2-to-support-IMDSv2.patch</changelog>
  <changelog author="varkoly@suse.com" date="1650456000">- Requesting cluster-glue bugfix (bsc#1197681)
  * Add upstream patch:
    0002-bugfix-for-comment-in-external-ec2.patch</changelog>
</package>
<package pkgid="d9fc5b3962d9f88f7ac98480d8894cbb88e1d1c3eaab861f591d56142da6d294" name="cluster-glue" arch="x86_64">
  <version epoch="0" ver="1.0.12+v1.git.1587474580.a5fda2bc" rel="150000.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560168000">- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)</changelog>
  <changelog author="xarbulu@suse.com" date="1587988800">- Update to version 1.0.12+v1.git.1587474580.a5fda2bc:
  * Fix EC2 stonith plugin (bsc#1169784)</changelog>
  <changelog author="varkoly@suse.com" date="1645704000">- (jsc#SLE-23490) (jsc#SLE-23491) (jsc#SLE-23492) (jsc#SLE-23494)
  IMDSv2 support in ec2 stonith agent
  * add upstream patch:
    0001-Update-external-ec2-to-support-IMDSv2.patch</changelog>
  <changelog author="varkoly@suse.com" date="1650456000">- Requesting cluster-glue bugfix (bsc#1197681)
  * Add upstream patch:
    0002-bugfix-for-comment-in-external-ec2.patch</changelog>
</package>
<package pkgid="2da5851074942c962f23ad4f56f78b460a5bf9d83571c2395cab93e4945bdb92" name="cluster-md-kmp-preempt" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="150300.59.68.1"/>
  <changelog author="tzimmermann@suse.de" date="1651579200">- blacklist.conf: Append 'Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"'
- commit f314ea7</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1651579201">- bnx2x: fix napi API usage sequence (bsc#1198217).
- commit 62d4fc3</changelog>
  <changelog author="oneukum@suse.com" date="1651579202">- adm8211: fix error return code in adm8211_probe() (git-fixes).
- blacklist.conf:
- commit 88c7ed6</changelog>
  <changelog author="oneukum@suse.com" date="1651579203">- mwl8k: Fix a double Free in mwl8k_probe_hw (git-fixes).
- commit 83451f5</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579204">- drm/vmwgfx: Remove unused compile options (bsc#1152472)
- commit fdc716b</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579205">- backlight: qcom-wled: Respect enabled-strings in set_brightness (bsc#1152489)
- commit 9612dd6</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579206">- drm/cma-helper: Set VM_DONTEXPAND for mmap (bsc#1152472)
- commit dd83cfa</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579207">- drm/i915: s/JSP2/ICP2/ PCH (bsc#1152489)
- commit 20ca121</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579208">- drm/amdgpu: fix amdgpu_ras_block_late_init error handler (bsc#1152489)
- commit e9f409a</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579209">- drm/fb-helper: Mark screen buffers in system memory with (bsc#1152472)
- commit 40b57d4</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579210">- USB: hcd-pci: Use PCI_STD_NUM_BARS when checking standard BARs (bsc#1152489)
- commit 30a990e</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579211">- drm/amd/display: Fix memory leak in dcn21_clock_source_create (bsc#1152472)
- commit f640496</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579212">- blacklist.conf: Append 'drm/i915: Fix syncmap memory leak'
- commit 5ad47f2</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579213">- blacklist.conf: Append 'drm/tegra: Add back arm_iommu_detach_device()'
- commit f7fdb0f</changelog>
  <changelog author="osalvador@suse.de" date="1651579214">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit a40b3c9</changelog>
  <changelog author="ohering@suse.de" date="1651665600">- net: mana: Remove unnecessary check of cqe_type in
  mana_process_rx_cqe() (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Use struct_size() helper in
  mana_gd_create_dma_region() (bsc#1195651).
- commit c23f4de</changelog>
  <changelog author="martin.wilck@suse.com" date="1651665601">- Revert lpfc driver update to 14.2.0.1 (bsc#1198989)
- commit eb15c95</changelog>
  <changelog author="oneukum@suse.com" date="1651665602">- usb: dwc3: core: Fix tx/rx threshold settings (git-fixes).
- commit c81dcdc</changelog>
  <changelog author="oneukum@suse.com" date="1651665603">- usb: dwc3: core: Only handle soft-reset in DCTL (git-fixes).
- commit 454e4d6</changelog>
  <changelog author="oneukum@suse.com" date="1651665604">- usb: dwc3: gadget: Return proper request status (git-fixes).
- commit 73a340f</changelog>
</package>
<package pkgid="b68425bc8aacaa4caddbf1f96823b0093fab40f9263884daae834211b7bf32e2" name="cluster-md-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="150300.59.68.1"/>
  <changelog author="tzimmermann@suse.de" date="1651579200">- blacklist.conf: Append 'Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"'
- commit f314ea7</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1651579201">- bnx2x: fix napi API usage sequence (bsc#1198217).
- commit 62d4fc3</changelog>
  <changelog author="oneukum@suse.com" date="1651579202">- adm8211: fix error return code in adm8211_probe() (git-fixes).
- blacklist.conf:
- commit 88c7ed6</changelog>
  <changelog author="oneukum@suse.com" date="1651579203">- mwl8k: Fix a double Free in mwl8k_probe_hw (git-fixes).
- commit 83451f5</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579204">- drm/vmwgfx: Remove unused compile options (bsc#1152472)
- commit fdc716b</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579205">- backlight: qcom-wled: Respect enabled-strings in set_brightness (bsc#1152489)
- commit 9612dd6</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579206">- drm/cma-helper: Set VM_DONTEXPAND for mmap (bsc#1152472)
- commit dd83cfa</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579207">- drm/i915: s/JSP2/ICP2/ PCH (bsc#1152489)
- commit 20ca121</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579208">- drm/amdgpu: fix amdgpu_ras_block_late_init error handler (bsc#1152489)
- commit e9f409a</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579209">- drm/fb-helper: Mark screen buffers in system memory with (bsc#1152472)
- commit 40b57d4</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579210">- USB: hcd-pci: Use PCI_STD_NUM_BARS when checking standard BARs (bsc#1152489)
- commit 30a990e</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579211">- drm/amd/display: Fix memory leak in dcn21_clock_source_create (bsc#1152472)
- commit f640496</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579212">- blacklist.conf: Append 'drm/i915: Fix syncmap memory leak'
- commit 5ad47f2</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579213">- blacklist.conf: Append 'drm/tegra: Add back arm_iommu_detach_device()'
- commit f7fdb0f</changelog>
  <changelog author="osalvador@suse.de" date="1651579214">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit a40b3c9</changelog>
  <changelog author="ohering@suse.de" date="1651665600">- net: mana: Remove unnecessary check of cqe_type in
  mana_process_rx_cqe() (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Use struct_size() helper in
  mana_gd_create_dma_region() (bsc#1195651).
- commit c23f4de</changelog>
  <changelog author="martin.wilck@suse.com" date="1651665601">- Revert lpfc driver update to 14.2.0.1 (bsc#1198989)
- commit eb15c95</changelog>
  <changelog author="oneukum@suse.com" date="1651665602">- usb: dwc3: core: Fix tx/rx threshold settings (git-fixes).
- commit c81dcdc</changelog>
  <changelog author="oneukum@suse.com" date="1651665603">- usb: dwc3: core: Only handle soft-reset in DCTL (git-fixes).
- commit 454e4d6</changelog>
  <changelog author="oneukum@suse.com" date="1651665604">- usb: dwc3: gadget: Return proper request status (git-fixes).
- commit 73a340f</changelog>
</package>
<package pkgid="f7dc05909e3969d6b0db22572d2d48a76e49785534e90b2e4a03b752c45cfa5a" name="cogl" arch="src">
  <version epoch="0" ver="1.22.2" rel="150200.10.2.1"/>
  <changelog author="dimstar@opensuse.org" date="1377000000">- Update to version 1.15.8:
  + fix a problem with including cogl-path.h from cogl.h that
    meant only code defining COGL_ENABLE_EXPERIMENTAL_2_0_API would
    get access to the CoglPath API.</changelog>
  <changelog author="zaitor@opensuse.org" date="1378123200">- Update to version 1.15.10:
  + Added API to set the onscreen template on a CoglDisplay outside
    of the constructor.
  + Added public API to configure the layout of displays when using
    the KMS winsys.
  + Added a cogl_point_coord builtin variable for snippets which
    can be used to render point sprites in more dynamic ways.
  + cogl_texture_new_with_size now returns NULL on failure. This
    behaviour was accidentally changed in 1.14.0.
  + Fixed a problem with setting the precision specifiers on GLES2
    which was causing a lot of problems with the latest Mesa.
  + Added a ?webgl? driver to manage the differences in GLES2 when
    compiling with emscripten.
  + Fixed a bug with paths which was causing Clutter's texture-fbo
    test to crash.
  + Some issues with introspecting the cogl-pango API were fixed.
  + Added an example using point sprites.
  + Build fixes for building with MinGW32.
  + Updates to the MSVC build files.
  + Documentation fixes to the snippets API.
  + Bugs fixed: bgo#705837.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379937600">- Update to version 1.16.0:
  + MSVC build updates.
  + Correctly mark CoglAtlasTexture api as public.
  + Lots of gtk-doc/introspection annotation fixes.
  + Bugs fixed: bgo#704750.</changelog>
  <changelog author="dimstar@opensuse.org" date="1390219200">- Update to version 1.16.2:
  + YV12/I420 support in cogl-gst is fixed.
  + cogl_framebuffer_push_path_clip is fixed.
  + MSVC build updates.
  + Bugs fixed:
  - bgo#706808: "Unable to locate required kms libraries" message
    is really uninformative.
  - bgo#710135: Fix build on big endian.
  - bgo#710926: Build fails without declaration of wl_resource.
  - bgo#719582: cogl-framebuffer: Don't mark the clear clip dirty
    from the journal.
  - bgo#721450: Re-enable swap_region for mesa 10.1+
    llvmpipe / swrast.</changelog>
  <changelog author="hpj@suse.com" date="1390392000">- Add cogl-bgo709827-per-framebuffer-depth-writing-api.patch, which
  adds API to optionally disable depth buffer writing on a
  per-framebuffer basis. This allows for faster rendering when
  the depth buffer is not needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1390392001">- Update to version 1.17.2:
  + Textures are now allocated lazily. This means the textures can
    optionally be configured with extra API before data is uploaded
    to them.
  + The internal format for textures has been replaced with a
    simpler property to just set the number of components that will
    be required when sampling.
  + Depth writing can now be disabled per-framebuffer as well as on
    the CoglPipeline.
  + The interface typedefs such as CoglTexture, CoglFramebuffer and
    CoglBitmap etc are now defined as void so that it is no longer
    necessary to use type-cast macros when passing them to
    interface methods.
  + YV12/I420 support in cogl-gst is fixed.
  + Added support for red-green 2-component textures.
  + The cache of GLSL shaders is now garbage collected when it gets
    too large.
  + cogl_framebuffer_push_path_clip is fixed.
  + cogl-path is now split out into a separate library.
  + New function cogl_wayland_texture_set_region_from_shm_buffer to
    update a texture from a Wayland SHM bufffer.
  + The pkg-config files for cogl-gst and cogl-gles2 have new more
    consistent names.
  + Bugs fixed: bgo#706808, bgo#709827, bgo#710135, bgo#710926,
    bgo#712562, bgo#712830, bgo#719546, bgo#719582, bgo#720287,
    bgo#721450.
- Rename shared library subpackages, following upstreams soname
  bumps:
  + libcogl15 to libcogl19.
  + libcogl-gles2-15 to libcogl-gles2-19.
  + libcogl-pango15 to libcogl-pango19.
- Drop cogl-bgo709827-per-framebuffer-depth-writing-api.patch:
  fixed upstream.</changelog>
  <changelog author="zaitor@opensuse.org" date="1392897600">- Update to version 1.17.4:
  + Cogl-gst now ensures that sampled video fragments are always
    pre-multiplied with the alpha component.
  + Cogl-gst now has NV12 format support.
  + The cogl-basic-video-player example can now be passed an
    custom gstreamer pipeline description, as long as it contains
    a coglsink element.
  + The -experimental-2.0 pkg-config files now all depend on
    cogl-2.0-experimental instead of cogl-1.0.
  + Bugs fixed: bgo#712832, bgo#719741, bgo#722765, bgo#723530.
- Rename shared library subpackages, following upstreams soname
  bumps (also update names in baselibs.conf):
  + libcogl19 to libcogl20.
  + libcogl-gles2-19 to libcogl-gles2-20.
  + libcogl-pango15 to libcogl-pango20.
- Add 2 more "locations" to fdupes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1395576000">- Update to version 1.18.0:
  + The license has been changed to the MIT license.
  + GObject introspection support has been greatly improved.
  + Add cogl_kms_renderer_set_kms_fd to make the KMS backend use a
    non-default GPU.
  + Fix a hang in the Wayland backend if it can't find some globals
    that it needs.
  + Add cogl_gst_video_sink_get_natural_size to query a suggested
    size for a Cogl-GST sink.
  + Add API to query the EGL and GLX contexts. This is intended to
    be used to make a shared GL context.
  + Fix advertising the deprecated buffer age feature flag on EGL.
  + Add a new non-deprecated feature flag for the buffer age.
  + Fix a bug with allocating textures in Cogl-GST.
  + Fix a bug with the cogl-basic-video-player example where it
    would try to use non-existant mipmaps.
  + Fix selecting the GL driver in the SDL2 winsys.
  + Updates to the MSVC build files.
  + Bugs fixed: Get the opengl context from cogl (bgo#724992).
- Add new typelib-1_0-Cogl-2_0 and typelib-1_0-CoglPango-2_0
  subpackages.</changelog>
  <changelog author="dimstar@opensuse.org" date="1396612800">- Build wayland backend: switch build_wayland_backend to 1.
- Pass --enable-kms-egl-platform and --enable-wayland-egl-server to
  configure.
- Add pkgconfig(gbm) BuildRequires: missing dependency.</changelog>
  <changelog author="dimstar@opensuse.org" date="1404993600">- Update to version 1.18.2:
  + MSVC updates.
  + KMS improvements for use by GNOME Shell.
  + EGL backend improvement to avoid creating a dummy surface if
    driver supports EGL_KHR_surfacless_context extension.
  + cogl-x11-tfp example fixes.
  + Bugs fixed: bgo#728064, bgo#728628, bgo#728978, bgo#728979,
    bgo#730536.</changelog>
  <changelog author="fcrozat@suse.com" date="1418385600">- Disable wayland backend on SLE12.</changelog>
  <changelog author="dimstar@opensuse.org" date="1424779200">- Update to version 1.20.0:
  + Support for "quad buffer" based stereo rendering.
  + Support for Mir window system.
  + A number of updates for the Wayland support.
  + Improved vblank sync when using glXWaitForMSC.</changelog>
  <changelog author="zaitor@opensuse.org" date="1440158400">- Update to version 1.21.2:
  + Add X11-specific API for retrieving the renderer's visual.
  + Improvement to the MSVC build.
  + Support KMS drivers without page flip.
  + Do not use deprecated OpenGL API with the GL3 driver.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 1.22.0:
  + Improvements in handling errors in the KMS winsys (bgo#754540).
  + Fix crashers in Wayland and GLX winsys (bgo#754667,
    bgo#754888).</changelog>
  <changelog author="zaitor@opensuse.org" date="1445601600">- Pass --enable-cogl-gst to configure, we have clutter-gst-3.0,
  shame on us, this should have been done for Leap too.
- Add new BuildRequires needed from above change:
  - pkgconfig(gstreamer-audio-1.0)
  - pkgconfig(gstreamer-base-1.0)
  - pkgconfig(gstreamer-controller-1.0)
  - pkgconfig(gstreamer-plugins-base-1.0)
  - pkgconfig(gstreamer-tag-1.0)
  - pkgconfig(gstreamer-video-1.0)
- Package new sub-packages typelib-1_0-CoglGst-2_0 and
  gstreamer-plugins-cogl due to above change. Add Supplements:
  packageand(libcogl20:gstreamer) for gstreamer-plugins-cogl.
- Flip enable gles2 define to 1, build gles2 support.
- Add cogl-GLES-Support-glMapBufferRange.patch: ES3 provides
  glMapBufferRange as core, with the added bonus that it also
  supports read mappings. Use this where possible.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450872000">- Add cogl-fix-black-login-screen.patch: Fix black and frozen
  login screen after logout when using gdm in wayland mode and
  session in x11 mode (boo#958885, bgo#758112, bgo#756926).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1472212800">- Update to version 1.22.2:
  + Skip journal dumping if not supported (bgo#728355).
  + Support glMapBufferRange from ES3 (bgo#728355).
  + Improvements in the KMS winsys (bgo#756926, bgo#758073).
  + Require gettext 0.19 to avoid hacks (bgo#760285).
  + Respect the Wayland spec for EGL surface creation (bgo#765351).
  + Updated translations.
- Drop cogl-GLES-Support-glMapBufferRange.patch and
  cogl-fix-black-login-screen.patch: Fixed upstream.</changelog>
  <changelog author="fezhang@suse.com" date="1472472000">- Add 0001-fix-build-failure-with-Werror-undef.patch:
  Fix build failure for SLE (bgo#770533).</changelog>
  <changelog author="fezhang@suse.com" date="1505390400">- Drop the SLE12 / Leap42 build_wayland_backend conditional.</changelog>
</package>
<package pkgid="0b730e0ac8d6a131dc4f8cc6390aac565e055166eba8c6e566ba656b73e187e9" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.5.11" rel="150000.68.1"/>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1625659200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="asarai@suse.com" date="1626264000">[ This patch was only released in SLES and Leap. ]
- Add patch for GHSA-c72p-9xmj-rx3w. CVE-2021-32760 bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="asarai@suse.com" date="1626782400">- Update to containerd v1.4.8, to fix CVE-2021-32760. bsc#1188282
- Remove upstreamed patches:
  - bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
</package>
<package pkgid="7021231d2888c8ab460d2103a72abd1c2d4f686bc6e18ef2e586b311029048c8" name="containerd" arch="ppc64le">
  <version epoch="0" ver="1.5.11" rel="150000.68.1"/>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1625659200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="asarai@suse.com" date="1626264000">[ This patch was only released in SLES and Leap. ]
- Add patch for GHSA-c72p-9xmj-rx3w. CVE-2021-32760 bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="asarai@suse.com" date="1626782400">- Update to containerd v1.4.8, to fix CVE-2021-32760. bsc#1188282
- Remove upstreamed patches:
  - bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
</package>
<package pkgid="c07a0a55b3293a42c4ce888d646f468bbd278a9bb7fac1d353cc0523898de905" name="containerd" arch="s390x">
  <version epoch="0" ver="1.5.11" rel="150000.68.1"/>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1625659200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="asarai@suse.com" date="1626264000">[ This patch was only released in SLES and Leap. ]
- Add patch for GHSA-c72p-9xmj-rx3w. CVE-2021-32760 bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="asarai@suse.com" date="1626782400">- Update to containerd v1.4.8, to fix CVE-2021-32760. bsc#1188282
- Remove upstreamed patches:
  - bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
</package>
<package pkgid="b819bce8b55d9a2dc16ffc302a5f4ed3b7695a6564b599e61e634261c84e31b2" name="containerd" arch="src">
  <version epoch="0" ver="1.5.11" rel="150000.68.1"/>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1625659200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="asarai@suse.com" date="1626264000">[ This patch was only released in SLES and Leap. ]
- Add patch for GHSA-c72p-9xmj-rx3w. CVE-2021-32760 bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="asarai@suse.com" date="1626782400">- Update to containerd v1.4.8, to fix CVE-2021-32760. bsc#1188282
- Remove upstreamed patches:
  - bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
</package>
<package pkgid="eb5d6b1e457cd02a0a066c899b4bafa8133e25aacf04556c0ea1d8441aaa7262" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.5.11" rel="150000.68.1"/>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1625659200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="asarai@suse.com" date="1626264000">[ This patch was only released in SLES and Leap. ]
- Add patch for GHSA-c72p-9xmj-rx3w. CVE-2021-32760 bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="asarai@suse.com" date="1626782400">- Update to containerd v1.4.8, to fix CVE-2021-32760. bsc#1188282
- Remove upstreamed patches:
  - bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
</package>
<package pkgid="3d2a7a2cec477b3cb6e89097731345b59907d4a5182e6208cc02d2064dd9027f" name="containerd-ctr" arch="aarch64">
  <version epoch="0" ver="1.5.11" rel="150000.68.1"/>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1625659200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="asarai@suse.com" date="1626264000">[ This patch was only released in SLES and Leap. ]
- Add patch for GHSA-c72p-9xmj-rx3w. CVE-2021-32760 bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="asarai@suse.com" date="1626782400">- Update to containerd v1.4.8, to fix CVE-2021-32760. bsc#1188282
- Remove upstreamed patches:
  - bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
</package>
<package pkgid="f4a00d98082ba15b681afc157f76a75c8b7523244497f106e5efc229e3f1737b" name="containerd-ctr" arch="ppc64le">
  <version epoch="0" ver="1.5.11" rel="150000.68.1"/>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1625659200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="asarai@suse.com" date="1626264000">[ This patch was only released in SLES and Leap. ]
- Add patch for GHSA-c72p-9xmj-rx3w. CVE-2021-32760 bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="asarai@suse.com" date="1626782400">- Update to containerd v1.4.8, to fix CVE-2021-32760. bsc#1188282
- Remove upstreamed patches:
  - bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
</package>
<package pkgid="bead881ddde2370bd891107e388e88a990c126b90a68df44cf9964634de3cefc" name="containerd-ctr" arch="s390x">
  <version epoch="0" ver="1.5.11" rel="150000.68.1"/>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1625659200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="asarai@suse.com" date="1626264000">[ This patch was only released in SLES and Leap. ]
- Add patch for GHSA-c72p-9xmj-rx3w. CVE-2021-32760 bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="asarai@suse.com" date="1626782400">- Update to containerd v1.4.8, to fix CVE-2021-32760. bsc#1188282
- Remove upstreamed patches:
  - bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
</package>
<package pkgid="63389d17be8b731d12fbeaef2a00cc0af5ceb25a1b0b9e306432b68f6b01106a" name="containerd-ctr" arch="x86_64">
  <version epoch="0" ver="1.5.11" rel="150000.68.1"/>
  <changelog author="asarai@suse.com" date="1561723200">- Update to containerd v1.2.6, which is required for Docker v18.09.7-ce.
  bsc#1139649
- Remove containerd-test (it's not useful for actual testing).</changelog>
  <changelog author="asarai@suse.com" date="1570536000">- Update to containerd v1.2.10, which is required for Docker 19.03.3-ce.
  bsc#1153367 bsc#1157330</changelog>
  <changelog author="asarai@suse.com" date="1591099200">- Update to containerd v1.2.13, which is required for Docker 19.03.11-ce.
  bsc#1172377</changelog>
  <changelog author="asarai@suse.com" date="1593086400">- Use Go 1.13 for build.</changelog>
  <changelog author="asarai@suse.com" date="1600430400">- Update to containerd v1.3.7, which is required for Docker 19.03.13-ce.
  boo#1176708 bsc#1177598 CVE-2020-15157
- Refresh patches:
  * 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to containerd v1.3.9, which is needed for Docker v19.03.14-ce and
  fixes CVE-2020-15257. bsc#1178969 bsc#1180243</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Update to containerd v1.4.3, which is needed for Docker v20.10.2-ce.
  bsc#1181594
- Install the containerd-shim* binaries and stop creating
  docker-containerd-shim because that isn't used by Docker anymore.
  bsc#1183024</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal, and drop the -kubic flavour.
  bsc#1181677 bsc#1181749</changelog>
  <changelog author="asarai@suse.com" date="1615032000">- Update to containerd v1.4.4, to fix CVE-2021-21334.</changelog>
  <changelog author="asarai@suse.com" date="1618574400">- Drop long-since upstreamed patch, originally needed to fix i386 builds on
  SLES:
  - 0001-makefile-remove-emoji.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1625659200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="asarai@suse.com" date="1626264000">[ This patch was only released in SLES and Leap. ]
- Add patch for GHSA-c72p-9xmj-rx3w. CVE-2021-32760 bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="asarai@suse.com" date="1626782400">- Update to containerd v1.4.8, to fix CVE-2021-32760. bsc#1188282
- Remove upstreamed patches:
  - bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
</package>
<package pkgid="02f59401f57f9fc9bc8848b82e9791e8813887bf6547a493816bb439d1575656" name="corepack14" arch="aarch64">
  <version epoch="0" ver="14.19.1" rel="150200.15.31.1"/>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="adam.majer@suse.de" date="1608552000">- New upstream LTS version 14.15.3:
  * deps:
    + upgrade npm to 6.14.9
    + update acorn to v8.0.4
  * http2: check write not scheduled in scope destructor
  * stream: fix regression on duplex end
- versioned.patch, sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 14.15.4:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- New upstream LTS version 14.15.5:
  * deps:
    + upgrade npm to 6.14.11
    + V8: backport dfcf1e86fac0 #37245
    Note: Node.js is not believed to be vulnerable to CVE-2021-21148
  * stream,zlib: do not use _stream_* anymore
- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 14.16.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 14.16.1:
  * CVE-2020-7774: npm upgrade - Update y18n to fix Prototype-Pollution (High)
    This is a vulnerability in the y18n npm module which may be
    exploited by prototype pollution. You can read more about it in
    https://github.com/advisories/GHSA-c4w7-xm78-47vh
    (bsc#1184450)
  * deps: upgrade npm to 6.14.12
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="dmueller@suse.com" date="1622808000">- update to 14.17.0:
  * Experimental support for AbortController and AbortSignal
  * Diagnostics channel (experimental module)
  * UUID support in the crypto module
  * update ICU to 68.1
  * upgrade to libuv 1.41.0
  * deps: npm update to 6.14.13
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- add Fix-build-with-icu-69.patch: fix build with icu 69</changelog>
  <changelog author="adam.majer@suse.de" date="1623931200">- update to 14.17.1:
  * deps: update ICU to 69.1
  * errors: align source-map stacks with spec
- Fix-build-with-icu-69.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1625227200">- update to 14.17.2:
  deps: libuv upgrade - Out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
- old_icu.patch: update with upstream's patch from
  https://github.com/nodejs/node/pull/39068
- specfile cleanup</changelog>
  <changelog author="adam.majer@suse.de" date="1627905600">- update to 14.17.4:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
- old_icu.patch: merged, removed
- versioned.patch: updated
- node_modules.tar.xz: refreshed
- PR39011.patch: use localhost instead of remote for unit test</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 14.17.5:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
- cares_public_headers.patch: don't use private headers</changelog>
  <changelog author="adam.majer@suse.de" date="1636459200">- update to 14.18.1:
  * deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 14.18.0:
  * buffer:
    + introduce Blob
    + add base64url encoding option
  * child_process:
    + allow options.cwd receive a URL
    + add timeout to spawn and fork
    + allow promisified exec to be cancel
    + add 'overlapped' stdio flag
  * dns: add "tries" option to Resolve options
  * fs:
    + allow empty string for temp directory prefix
    + allow no-params fsPromises fileHandle read
    + add support for async iterators to fsPromises.writeFile
  * http2: add support for sensitive headers
  * process: add 'worker' event
  * tls: allow reading data into a static buffer
  * worker: add setEnvironmentData/getEnvironmentData
- changes in 14.17.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
    bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
    bsc#1190053, CVE-2021-39135)
- test-skip-y2038-on-32bit-time_t.patch: fix test failure when
  64-bit time_t is used on 32-bit arches
- refreshed patches: versioned.patch, flaky_test_rerun.patch
- PR39011.patch: upstreamed</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1637841600">- Fix CXXFLAGS in Tumbleweed - boo#1192824</changelog>
  <changelog author="adam.majer@suse.de" date="1639656000">- update to 14.18.2:
  * lib: fix regular expression to detect `/` and `\`
  * worker: avoid potential deadlock on NearHeapLimit
- sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1641902400">- update to 14.18.3:
  Security update fixing the following issues:
  * Improper handling of URI Subject Alternative Names (Medium)
  (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
  (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
  (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
  (CVE-2022-21824, bsc#1194514)</changelog>
  <changelog author="adam.majer@suse.de" date="1641988800">- z15-test-skip.patch: dropped, no longer required
- fix_ci_tests.patch: update tests for z15</changelog>
  <changelog author="adam.majer@suse.de" date="1645012800">- update to 14.19.0:
  * crypto: make FIPS related options always available
  * deps: deps: upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
    + CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * module: support pattern trailers
  * src: make napi_create_reference accept symbol
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch, nodejs-libpath.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">Update to 14.19.1:
  * deps: upgrade openssl sources to 1.1.1n (bsc#1196877,  CVE-2022-0778)
    Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    More details at https://www.openssl.org/news/secadv/20220315.txt
- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="32c49750395ec003ca937bcf98a5e72d9bcad35c6ce2f7f3f470138f4943b90d" name="corepack14" arch="ppc64le">
  <version epoch="0" ver="14.19.1" rel="150200.15.31.1"/>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="adam.majer@suse.de" date="1608552000">- New upstream LTS version 14.15.3:
  * deps:
    + upgrade npm to 6.14.9
    + update acorn to v8.0.4
  * http2: check write not scheduled in scope destructor
  * stream: fix regression on duplex end
- versioned.patch, sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 14.15.4:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- New upstream LTS version 14.15.5:
  * deps:
    + upgrade npm to 6.14.11
    + V8: backport dfcf1e86fac0 #37245
    Note: Node.js is not believed to be vulnerable to CVE-2021-21148
  * stream,zlib: do not use _stream_* anymore
- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 14.16.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 14.16.1:
  * CVE-2020-7774: npm upgrade - Update y18n to fix Prototype-Pollution (High)
    This is a vulnerability in the y18n npm module which may be
    exploited by prototype pollution. You can read more about it in
    https://github.com/advisories/GHSA-c4w7-xm78-47vh
    (bsc#1184450)
  * deps: upgrade npm to 6.14.12
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="dmueller@suse.com" date="1622808000">- update to 14.17.0:
  * Experimental support for AbortController and AbortSignal
  * Diagnostics channel (experimental module)
  * UUID support in the crypto module
  * update ICU to 68.1
  * upgrade to libuv 1.41.0
  * deps: npm update to 6.14.13
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- add Fix-build-with-icu-69.patch: fix build with icu 69</changelog>
  <changelog author="adam.majer@suse.de" date="1623931200">- update to 14.17.1:
  * deps: update ICU to 69.1
  * errors: align source-map stacks with spec
- Fix-build-with-icu-69.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1625227200">- update to 14.17.2:
  deps: libuv upgrade - Out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
- old_icu.patch: update with upstream's patch from
  https://github.com/nodejs/node/pull/39068
- specfile cleanup</changelog>
  <changelog author="adam.majer@suse.de" date="1627905600">- update to 14.17.4:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
- old_icu.patch: merged, removed
- versioned.patch: updated
- node_modules.tar.xz: refreshed
- PR39011.patch: use localhost instead of remote for unit test</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 14.17.5:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
- cares_public_headers.patch: don't use private headers</changelog>
  <changelog author="adam.majer@suse.de" date="1636459200">- update to 14.18.1:
  * deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 14.18.0:
  * buffer:
    + introduce Blob
    + add base64url encoding option
  * child_process:
    + allow options.cwd receive a URL
    + add timeout to spawn and fork
    + allow promisified exec to be cancel
    + add 'overlapped' stdio flag
  * dns: add "tries" option to Resolve options
  * fs:
    + allow empty string for temp directory prefix
    + allow no-params fsPromises fileHandle read
    + add support for async iterators to fsPromises.writeFile
  * http2: add support for sensitive headers
  * process: add 'worker' event
  * tls: allow reading data into a static buffer
  * worker: add setEnvironmentData/getEnvironmentData
- changes in 14.17.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
    bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
    bsc#1190053, CVE-2021-39135)
- test-skip-y2038-on-32bit-time_t.patch: fix test failure when
  64-bit time_t is used on 32-bit arches
- refreshed patches: versioned.patch, flaky_test_rerun.patch
- PR39011.patch: upstreamed</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1637841600">- Fix CXXFLAGS in Tumbleweed - boo#1192824</changelog>
  <changelog author="adam.majer@suse.de" date="1639656000">- update to 14.18.2:
  * lib: fix regular expression to detect `/` and `\`
  * worker: avoid potential deadlock on NearHeapLimit
- sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1641902400">- update to 14.18.3:
  Security update fixing the following issues:
  * Improper handling of URI Subject Alternative Names (Medium)
  (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
  (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
  (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
  (CVE-2022-21824, bsc#1194514)</changelog>
  <changelog author="adam.majer@suse.de" date="1641988800">- z15-test-skip.patch: dropped, no longer required
- fix_ci_tests.patch: update tests for z15</changelog>
  <changelog author="adam.majer@suse.de" date="1645012800">- update to 14.19.0:
  * crypto: make FIPS related options always available
  * deps: deps: upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
    + CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * module: support pattern trailers
  * src: make napi_create_reference accept symbol
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch, nodejs-libpath.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">Update to 14.19.1:
  * deps: upgrade openssl sources to 1.1.1n (bsc#1196877,  CVE-2022-0778)
    Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    More details at https://www.openssl.org/news/secadv/20220315.txt
- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="beda39dac41506ac5222e112d5a4dd288e8ef76b9b039abb5fa3d0d96d164732" name="corepack14" arch="s390x">
  <version epoch="0" ver="14.19.1" rel="150200.15.31.1"/>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="adam.majer@suse.de" date="1608552000">- New upstream LTS version 14.15.3:
  * deps:
    + upgrade npm to 6.14.9
    + update acorn to v8.0.4
  * http2: check write not scheduled in scope destructor
  * stream: fix regression on duplex end
- versioned.patch, sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 14.15.4:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- New upstream LTS version 14.15.5:
  * deps:
    + upgrade npm to 6.14.11
    + V8: backport dfcf1e86fac0 #37245
    Note: Node.js is not believed to be vulnerable to CVE-2021-21148
  * stream,zlib: do not use _stream_* anymore
- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 14.16.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 14.16.1:
  * CVE-2020-7774: npm upgrade - Update y18n to fix Prototype-Pollution (High)
    This is a vulnerability in the y18n npm module which may be
    exploited by prototype pollution. You can read more about it in
    https://github.com/advisories/GHSA-c4w7-xm78-47vh
    (bsc#1184450)
  * deps: upgrade npm to 6.14.12
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="dmueller@suse.com" date="1622808000">- update to 14.17.0:
  * Experimental support for AbortController and AbortSignal
  * Diagnostics channel (experimental module)
  * UUID support in the crypto module
  * update ICU to 68.1
  * upgrade to libuv 1.41.0
  * deps: npm update to 6.14.13
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- add Fix-build-with-icu-69.patch: fix build with icu 69</changelog>
  <changelog author="adam.majer@suse.de" date="1623931200">- update to 14.17.1:
  * deps: update ICU to 69.1
  * errors: align source-map stacks with spec
- Fix-build-with-icu-69.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1625227200">- update to 14.17.2:
  deps: libuv upgrade - Out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
- old_icu.patch: update with upstream's patch from
  https://github.com/nodejs/node/pull/39068
- specfile cleanup</changelog>
  <changelog author="adam.majer@suse.de" date="1627905600">- update to 14.17.4:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
- old_icu.patch: merged, removed
- versioned.patch: updated
- node_modules.tar.xz: refreshed
- PR39011.patch: use localhost instead of remote for unit test</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 14.17.5:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
- cares_public_headers.patch: don't use private headers</changelog>
  <changelog author="adam.majer@suse.de" date="1636459200">- update to 14.18.1:
  * deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 14.18.0:
  * buffer:
    + introduce Blob
    + add base64url encoding option
  * child_process:
    + allow options.cwd receive a URL
    + add timeout to spawn and fork
    + allow promisified exec to be cancel
    + add 'overlapped' stdio flag
  * dns: add "tries" option to Resolve options
  * fs:
    + allow empty string for temp directory prefix
    + allow no-params fsPromises fileHandle read
    + add support for async iterators to fsPromises.writeFile
  * http2: add support for sensitive headers
  * process: add 'worker' event
  * tls: allow reading data into a static buffer
  * worker: add setEnvironmentData/getEnvironmentData
- changes in 14.17.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
    bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
    bsc#1190053, CVE-2021-39135)
- test-skip-y2038-on-32bit-time_t.patch: fix test failure when
  64-bit time_t is used on 32-bit arches
- refreshed patches: versioned.patch, flaky_test_rerun.patch
- PR39011.patch: upstreamed</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1637841600">- Fix CXXFLAGS in Tumbleweed - boo#1192824</changelog>
  <changelog author="adam.majer@suse.de" date="1639656000">- update to 14.18.2:
  * lib: fix regular expression to detect `/` and `\`
  * worker: avoid potential deadlock on NearHeapLimit
- sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1641902400">- update to 14.18.3:
  Security update fixing the following issues:
  * Improper handling of URI Subject Alternative Names (Medium)
  (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
  (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
  (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
  (CVE-2022-21824, bsc#1194514)</changelog>
  <changelog author="adam.majer@suse.de" date="1641988800">- z15-test-skip.patch: dropped, no longer required
- fix_ci_tests.patch: update tests for z15</changelog>
  <changelog author="adam.majer@suse.de" date="1645012800">- update to 14.19.0:
  * crypto: make FIPS related options always available
  * deps: deps: upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
    + CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * module: support pattern trailers
  * src: make napi_create_reference accept symbol
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch, nodejs-libpath.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">Update to 14.19.1:
  * deps: upgrade openssl sources to 1.1.1n (bsc#1196877,  CVE-2022-0778)
    Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    More details at https://www.openssl.org/news/secadv/20220315.txt
- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="69b8efba79871748542095fc18bc5a3f0458d169beff035a0f6eba5127b93219" name="corepack14" arch="x86_64">
  <version epoch="0" ver="14.19.1" rel="150200.15.31.1"/>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="adam.majer@suse.de" date="1608552000">- New upstream LTS version 14.15.3:
  * deps:
    + upgrade npm to 6.14.9
    + update acorn to v8.0.4
  * http2: check write not scheduled in scope destructor
  * stream: fix regression on duplex end
- versioned.patch, sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 14.15.4:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- New upstream LTS version 14.15.5:
  * deps:
    + upgrade npm to 6.14.11
    + V8: backport dfcf1e86fac0 #37245
    Note: Node.js is not believed to be vulnerable to CVE-2021-21148
  * stream,zlib: do not use _stream_* anymore
- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 14.16.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 14.16.1:
  * CVE-2020-7774: npm upgrade - Update y18n to fix Prototype-Pollution (High)
    This is a vulnerability in the y18n npm module which may be
    exploited by prototype pollution. You can read more about it in
    https://github.com/advisories/GHSA-c4w7-xm78-47vh
    (bsc#1184450)
  * deps: upgrade npm to 6.14.12
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="dmueller@suse.com" date="1622808000">- update to 14.17.0:
  * Experimental support for AbortController and AbortSignal
  * Diagnostics channel (experimental module)
  * UUID support in the crypto module
  * update ICU to 68.1
  * upgrade to libuv 1.41.0
  * deps: npm update to 6.14.13
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- add Fix-build-with-icu-69.patch: fix build with icu 69</changelog>
  <changelog author="adam.majer@suse.de" date="1623931200">- update to 14.17.1:
  * deps: update ICU to 69.1
  * errors: align source-map stacks with spec
- Fix-build-with-icu-69.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1625227200">- update to 14.17.2:
  deps: libuv upgrade - Out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
- old_icu.patch: update with upstream's patch from
  https://github.com/nodejs/node/pull/39068
- specfile cleanup</changelog>
  <changelog author="adam.majer@suse.de" date="1627905600">- update to 14.17.4:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
- old_icu.patch: merged, removed
- versioned.patch: updated
- node_modules.tar.xz: refreshed
- PR39011.patch: use localhost instead of remote for unit test</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 14.17.5:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
- cares_public_headers.patch: don't use private headers</changelog>
  <changelog author="adam.majer@suse.de" date="1636459200">- update to 14.18.1:
  * deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 14.18.0:
  * buffer:
    + introduce Blob
    + add base64url encoding option
  * child_process:
    + allow options.cwd receive a URL
    + add timeout to spawn and fork
    + allow promisified exec to be cancel
    + add 'overlapped' stdio flag
  * dns: add "tries" option to Resolve options
  * fs:
    + allow empty string for temp directory prefix
    + allow no-params fsPromises fileHandle read
    + add support for async iterators to fsPromises.writeFile
  * http2: add support for sensitive headers
  * process: add 'worker' event
  * tls: allow reading data into a static buffer
  * worker: add setEnvironmentData/getEnvironmentData
- changes in 14.17.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
    bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
    bsc#1190053, CVE-2021-39135)
- test-skip-y2038-on-32bit-time_t.patch: fix test failure when
  64-bit time_t is used on 32-bit arches
- refreshed patches: versioned.patch, flaky_test_rerun.patch
- PR39011.patch: upstreamed</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1637841600">- Fix CXXFLAGS in Tumbleweed - boo#1192824</changelog>
  <changelog author="adam.majer@suse.de" date="1639656000">- update to 14.18.2:
  * lib: fix regular expression to detect `/` and `\`
  * worker: avoid potential deadlock on NearHeapLimit
- sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1641902400">- update to 14.18.3:
  Security update fixing the following issues:
  * Improper handling of URI Subject Alternative Names (Medium)
  (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
  (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
  (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
  (CVE-2022-21824, bsc#1194514)</changelog>
  <changelog author="adam.majer@suse.de" date="1641988800">- z15-test-skip.patch: dropped, no longer required
- fix_ci_tests.patch: update tests for z15</changelog>
  <changelog author="adam.majer@suse.de" date="1645012800">- update to 14.19.0:
  * crypto: make FIPS related options always available
  * deps: deps: upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
    + CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * module: support pattern trailers
  * src: make napi_create_reference accept symbol
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch, nodejs-libpath.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">Update to 14.19.1:
  * deps: upgrade openssl sources to 1.1.1n (bsc#1196877,  CVE-2022-0778)
    Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    More details at https://www.openssl.org/news/secadv/20220315.txt
- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="0bc0989d6720bdeebe122029a5672a045951e423c052bf805c15d2e11c39f76c" name="cpp11" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="f31f9a86387bf5153d894788542d08110cce34e8fef46d882b6af50a93462272" name="cpp11" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="7ee252532c5066b6caccc109c138981f84aedfbe90b5144e0f4435dcfa0abaa4" name="cpp11" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="662fcce5f9574a5607aef648f46ef1c9f6bc753952ec4ce012add87046364c55" name="cpp11" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="c9decedcb982dc7e1f92bfb4852b1fc0d50d5965af0f405e43ca853968d153db" name="cpp8" arch="aarch64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="ad6c8654e3450e4155a43265722a35277ebf9f74ae36c392c7622ab9bc9c1db1" name="cpp8" arch="ppc64le">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="693c56bbbbb2b7e3f6ecf530d46592f2d7a3e897c9e7e0b6101d9fdd7538e6ed" name="cpp8" arch="s390x">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="b1eda97fde0b8eb3fa2c72f5ca5e98b47dae20248c2a1676588e15316da703ec" name="cpp8" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="ee4abe27935492f4e5ceb9e15f573d38fac635b71d4c5575ce8fe960bb51a9fd" name="cross-aarch64-binutils" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="ae5425222aa20b1d79a0533d70275f074233769b226b246894e295710d603961" name="cross-aarch64-binutils" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="8ffe64e437942556b640b221176c0c9e4eec3b3d1e1569c05ac04105a3866c96" name="cross-aarch64-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="a52f1621fd5408072976e99541e409fd310f757d72b383f657c746f39eef14fe" name="cross-aarch64-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="38e30d5906b778b4036e20204e4219db7d17c33df653b2c0324491cdb7663371" name="cross-aarch64-gcc11" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="127db6dadca345d394733c1e47e22452e9295cd98a2d92004795d6e50b0c087d" name="cross-aarch64-gcc11" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="afcef4f7ae21a568e3f5b8be7e49d64b321440f8e32fb0b4996a8f063487fbe3" name="cross-aarch64-gcc11" arch="src">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="83e1f8de7c7df793dbd3653784ba8c7f21e696ce2b6afe4ee97c25c8ab123493" name="cross-aarch64-gcc11" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="761f1bdd2a7357ae767d6c0f36126da6472b7a2b9456159257e7f522699e241c" name="cross-aarch64-gcc11-bootstrap" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="6ffc50b86064b3d04c2d375fde5f79327c980fb83cc89244253d55d8a886ac03" name="cross-aarch64-gcc11-bootstrap" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="579250985f5b12b3947f0aed483af504394b2f8dd9771707f47ebfd25d6cdd48" name="cross-aarch64-gcc11-bootstrap" arch="src">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="96655b23bf9d36100ea1849f9fd0b73eb1b481ca9a4f32f6a26c4d1b0ad65c25" name="cross-aarch64-gcc11-bootstrap" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="054f042489d758f062144d30e6c84dd001d74e76ec6c847550b0e4398d2cb8ad" name="cross-aarch64-gcc11-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="6f179ca9657da92fc22400748fc45812027e1ac59e3d18228853c1e0ebcda25f" name="cross-aarch64-gcc11-icecream-backend" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="70fc94238297f06eb3aef55ea9045a434c8d3caa35e3a7c9ca570b3dce7949e3" name="cross-aarch64-gcc11-icecream-backend" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="f948eb38d4a12ea0bbb9180a64f6999cd1a6d1aa5822a9cf4b042f8640c28e7e" name="cross-arm-binutils" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="36605419fcc614d9a822ae4d6787376c1265db8dc8d8693c896917ff4b7d3263" name="cross-arm-binutils" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="77737815ffa996569b52c7bc1f5574da1f16cc75ac979f04c137bc038a2033cb" name="cross-arm-binutils" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="6c4b067b5b8586243a851f626a0ecbc631b89ad70a1f565002b477898be125c0" name="cross-arm-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="17037770f621cefbc0b8edf8b229de41db1a26b51d27e71ca94fbc2497075b2e" name="cross-arm-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="64d83038d54fe021647430537312d67bd25b5120d6f1287d44dd28784c0d7f9d" name="cross-arm-gcc11" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="316c379086b879f828277e36977c1d456956a33416bb8365127976e020487d70" name="cross-arm-gcc11" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="96a7d023cefa4cc5c6148e3cb7a59b674cce343a034fc42a0ebbd48fe99571ef" name="cross-arm-gcc11" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="95a6d27cf162c354b9d36929131831d26f4b6162d5c042ec72596c299ff1463a" name="cross-arm-gcc11" arch="src">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="4bbf907b0b5cc9658c929535779f06dfca66e59303886563e77a3e5c52e77598" name="cross-arm-gcc11" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="e1154ae51a6b92a878cbdd9cb5de99ce2a65cbc1594f8e7ae45b34473e80150f" name="cross-arm-gcc11-icecream-backend" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="e008bdbf2ce0d8ae4264b9062f6d1aba5ce86be12874e33e915df84fc70c4d57" name="cross-arm-gcc11-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="9e52ac522806762da22d323e281a5dc532cc59c9a5ca79c04e6a97148e5a9245" name="cross-arm-gcc11-icecream-backend" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="d717d5c54648a976f8e525a4226bf239a55ec31410e6afbd0e74a44051c2284c" name="cross-arm-gcc11-icecream-backend" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="5e28febfa2bf016388f7907f423fab6087f03d2305193a02b314881824d0c990" name="cross-arm-none-gcc11-bootstrap" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="f626e0c8f5938fe924a926a556c0b7c559028ef0281e8f02065e8a0528b41125" name="cross-arm-none-gcc11-bootstrap" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="7f3b7158674abbded98158d79c9ffea6cbd3a225dd4075ae0174980c4c4eab7c" name="cross-arm-none-gcc11-bootstrap" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="9e198ea2c6794d24c1ce7c837e4a83ba4a90b2c8d811e1569c8522181a815911" name="cross-arm-none-gcc11-bootstrap" arch="src">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="a988139f00bd5a86530304e6493f12972b2336d26acf7580adfa96628ab22a96" name="cross-arm-none-gcc11-bootstrap" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="ef3d5cf96cf561fbf459ea43bd0ff310c8a820c3e08a2b566d983a02ac0a83ac" name="cross-avr-binutils" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="040b224e8ef89a3a2d7333885cf81339bf57d3ea9a13d117e6d1ea5443187e2f" name="cross-avr-binutils" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="43e1b540817376cb333197ef3a32dd46efa3b22ad2de3643ebf59f38b3a5d332" name="cross-avr-binutils" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="5f8df9d0794c35aa65e4d431bd610977cb91da3e90e872e825525489e0f35676" name="cross-avr-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="2d712e94ce35a5e2410e7a65ee209c29e09e3ea1111260f266ffed6ffac22145" name="cross-avr-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="3e74804b9462c0aef76460bdde670ae99f7eb7de0aeabbaa58ddda6497fe9b73" name="cross-avr-gcc11-bootstrap" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="3ed21426896c2b00f25d746b1b7f9efc870f0a8f91427499cce6f77f74fdf120" name="cross-avr-gcc11-bootstrap" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="6aba294bf4d047f85f66cf4898fd987f25d371da2a9f3973df606d6da7e01460" name="cross-avr-gcc11-bootstrap" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="e05f28657e0457d8c69897c0e0b248dca207856c8056ff80476cf284454b5d92" name="cross-avr-gcc11-bootstrap" arch="src">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="7bde0af41e2c32062c7b5960d38d967a3cb7f07ab05b30820b875cb0bf00ec7f" name="cross-avr-gcc11-bootstrap" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="f02817ee9bc2d1c835ddf356207b947d7e9102d54497029912f9833a31a01112" name="cross-epiphany-binutils" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="8a44dcdf94850b2be897951d551813d7961d7c081b61796649a1a220f5cbfcbd" name="cross-epiphany-binutils" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="36f060fcf9be6de0516ce30f861148234ad80ac3a9fbb3dcc36e461f03620fa9" name="cross-epiphany-binutils" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="a3ab4bf2c927e792d1e53ed8464b017a59156c8133a101fe8741cfb681049868" name="cross-epiphany-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="fee34b2be47da844621269fb17262b0bfea6984ab5310bedf94773a6a60647e5" name="cross-epiphany-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="ef1f4a16403498a31f1b57d861682766279ae11dac6110a897b63925c3f12f92" name="cross-epiphany-gcc11-bootstrap" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="8c522c16167baf422515083120235b9dec70b882e5080744f6b3e5a1dd466ccf" name="cross-epiphany-gcc11-bootstrap" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="a548fd589b85d057e5c8da8796158caf862eaaa1b50d50466c14c8386fce22ba" name="cross-epiphany-gcc11-bootstrap" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="e93d50c2a250f06c97a1436c6ec899b27391d6c292457c875899b2b257456ccf" name="cross-epiphany-gcc11-bootstrap" arch="src">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="42d0844741fdae3019e85e0df1ccc3df4a5eae321971afc62feb428e107f7c66" name="cross-epiphany-gcc11-bootstrap" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="14d91755d1b886f7069a8ec24fbb4009f666ac44383a78ea4450683d6465ac9d" name="cross-hppa-binutils" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="7b18ce2c3f9eb658a7a7caeb5ccfb4304efb7c40c1e268e437746264ad67e01e" name="cross-hppa-binutils" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="458c2e72a048075fce0017c10c387223a312da3059464fce3dc8429b09920031" name="cross-hppa-binutils" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="e2f4c30d1445c9b45142430c935106d83fb287f56a40814b8e6a1eb46b8c13f0" name="cross-hppa-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="e5b1a3b189880204a0c1bd94775e0f6835c6ab297a2e29959594a605d3bd6b80" name="cross-hppa-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="35b61b1ccd5863c2a76067f6f362ed2f686c2de9d7f99a42728c5647a7ba00bd" name="cross-hppa-gcc11" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="337521f11630421ffd4dfc1e4c7be919f127a6e0b6a64758a256aa476f012c48" name="cross-hppa-gcc11" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="cc427b97f4650ea0946a25caf2881f96625e2f3253ed3083abe55bf230bd04fc" name="cross-hppa-gcc11" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="9488c30802d1280cc8445836e17ea16f58f77f9d5146dcdde949a892d3d0ffc9" name="cross-hppa-gcc11" arch="src">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="928f141704e470fc934080089ef52f6af133ea4a4696b6593d9e0e2b1a6bbb06" name="cross-hppa-gcc11" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="fad62a25ad1afc6b3765f28577bd90f1585f38ff83f8b2066cb93bd4f36a5126" name="cross-hppa-gcc11-icecream-backend" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="2854521fd4e859da5bf155f844a5685891b500cc5d9bc819ebcfcb9207c2a0f5" name="cross-hppa-gcc11-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="c17de78067c0bbae9435e0ee8e8019dcda14314c0aabea4c42e557e1c1601d17" name="cross-hppa-gcc11-icecream-backend" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="da21fb715192f2a5a2e8b6431bc8ce58332ec91addb0cc7b019210e94ce50097" name="cross-hppa-gcc11-icecream-backend" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="70cfafb19e9f595eb43370bf068398bcce94a255c252b9b7b50154f2131eefae" name="cross-hppa64-binutils" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="8a251799082b4cf54679d9f22d2c47f34f9040dc28f2506fe3b3b4cd48b58576" name="cross-hppa64-binutils" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="2ad4b9b19099411e8d3bd87ec93582c9e87557ad83b2f50fd499998849cd2d3a" name="cross-hppa64-binutils" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="d67a0da110b5d370fc4160b15983cfe0a1f99337e7e17678877a14511a7a91a4" name="cross-hppa64-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="6960b4ac2bc91ab15225069269f9603e9e7ea0c472ed79d3210f090212b07ee3" name="cross-hppa64-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="cf51f7f56c8c1f24dbee66a197c24ff94eab1bf668cdfd14b1830d06c57845d7" name="cross-i386-binutils" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="02667d39cb1c3d560099b1ec2ff428cce7b3777131316e685196fb8a27036b52" name="cross-i386-binutils" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="49f994ce380778dc35c74b7cc6956e90ecb89a4ee6a74b9a58619447615cc9cc" name="cross-i386-binutils" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="785f132cbba141e466009111e04b82dbfe7dc9c9ffa979a391f281eab6d1183f" name="cross-i386-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="7eeef3b74bf6eb7406fdbc788333094eff10d0758566438e07b0e55890359c01" name="cross-i386-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="376550d44e8da4243f8371e4400f5a70f5092c055537e8e38f878d9bcecaa0f9" name="cross-ia64-binutils" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="65fe1691eaa8dd6df849473ac67a65bcba1b74974472cab8ea0e8ffcc4dab9a6" name="cross-ia64-binutils" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="0345d2f95d9498a0ad66972b87880896a171d75010275cc8d837e98bf210934f" name="cross-ia64-binutils" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="6f50f088c52ac0da56cbeeb87cb1342ac93c137117d40648af788e6591a62a65" name="cross-ia64-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="4ffefea2edc3331c2cfe162531566ba19c7760f093db3ae0b786660f8c7810e3" name="cross-ia64-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="1366f8e7e8b6fa926271576ace67ba8993deb5f916dd1585c6ca1be429c53fd5" name="cross-m68k-binutils" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="bdc1a49cdd86265e4287b11fb8b919afbe2a167ede50c39f8bf4975033d1e09b" name="cross-m68k-binutils" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="408a6691643803ea393aabe6091a4e8ac7341d918c4e854f1848ed2c1a64b7b1" name="cross-m68k-binutils" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="aef7a8eedff6929723a17ae535846ba191b770451ca2af848214d75cf60521c0" name="cross-m68k-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="51a9210cf19a47162d4be97fc92d56a1c7318834def8637b01544263c41a57ff" name="cross-m68k-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="930b185cea468392e8a7459b17b04fd052d33f353b8ef5b9b6635e19210adca6" name="cross-m68k-gcc11" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="1086f007a3dc4ff94bcfeec8649d81db7d3af52da6ddb7e4c16d22865b51a7e6" name="cross-m68k-gcc11" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="ccf70f45f13878bb0f5d4bf9a7774a4c6ebbee90d0c7c7f1377b757b125eaeaa" name="cross-m68k-gcc11" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="21fe255b81bcd2f8b6f91009608814330ec1e20056d1cb8afd057de05a33bf2c" name="cross-m68k-gcc11" arch="src">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="b71e06f30ccd263419a9266f7655c08c6238d2a49344bbf443bde2f481132af0" name="cross-m68k-gcc11" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="2c993b44bd8b3d60fb6c0d6141959a127265f165a2cd8f4112bdab5fd5965eff" name="cross-m68k-gcc11-icecream-backend" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="0b3986ae777f4f2a9933d2d94f3fafa6c95ca5fce839c7dd068eb97a768a3471" name="cross-m68k-gcc11-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="13a40c0a9cc2fce72bd6455b69cd298a0c2ec4d66fa16f4a08975e7938c6a091" name="cross-m68k-gcc11-icecream-backend" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="4ae9faa6e67de750bb6332028a830d1cfb7a1bb5441f1b74eb438eed2d8b35ec" name="cross-m68k-gcc11-icecream-backend" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="a4326794769f62bc0589ef7c39f6cd8e16dced333acee4fab6b8b03ccff6c471" name="cross-mips-binutils" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="c3bd85036d56a3f54d7a633732fadd052f68b55de66f9d113d3dca713374459a" name="cross-mips-binutils" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="db66f554d0459db06fecc4574323d9d7f13f3de61f865fb8eefea34987c87f7f" name="cross-mips-binutils" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="4a01f248fa97bef0b6aa7e3fd7ad8185d2e253f2d27c1257d6d6c40459026a41" name="cross-mips-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="f1e096c7393be0e845265e382c6be1dcf9ca0505ebfd3bd0cd6432c72011c11a" name="cross-mips-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="418e01bc52b1a1021038638132e967213fee552f126919440a5b1680b75af9a4" name="cross-mips-gcc11" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="1163eaaa215353a6776452e58e70d5d4699eaa6d6135faf0c2d9c90cf0043089" name="cross-mips-gcc11" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="ea8cc01660cf4536c938f3688c66ce5c9c9167c3b922c40f24a38ddb66fe2abb" name="cross-mips-gcc11" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="684f5aa4c342fdc6d9edaf1480e08e47f579d6b4d7aff556d0f1e38a40c87314" name="cross-mips-gcc11" arch="src">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="28cf66553450e69de34b529ac289f3f54975212c03cfdcd580b4b35057a63aed" name="cross-mips-gcc11" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="9f94a6c65059aaa4bf27b220d43a6529ae38f613e89e43c69d5b4254dcd4b149" name="cross-mips-gcc11-icecream-backend" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="7726542652650d7ff7fab745f03df38dd3140309c86a69dcc470cc84f6474879" name="cross-mips-gcc11-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="76df2094416e1d4f188a87f45b6d10ce64df796efcd2af3483716c132cbb79a8" name="cross-mips-gcc11-icecream-backend" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="046357f1abd4e19e9572bf13ebad85e6cf82429a74a45abd19b3c169b6258b41" name="cross-mips-gcc11-icecream-backend" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="3cc4de49d48d42d76ae93fc98a985ec7663bb0f95aabde074b55d158334eb89a" name="cross-nvptx-gcc11" arch="src">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="72da84bddef89aac56666d2872cf5bfefd162534a44ea70aae86c43c830a7f8f" name="cross-nvptx-gcc11" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="40e67787cca9ca952ef8f81ab15c4b995a26b4593bf420dd02443d478880725d" name="cross-nvptx-gcc8" arch="src">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.1"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="ef5ddcf14593ade479625e2413b7bef4330ef3dfaa4b8127d8e54c94c0dc2638" name="cross-nvptx-gcc8" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.1"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="b21f8a8b43f57d83b484081ebbc71084caa96dd3603ecc5f8684e1e781ad76d8" name="cross-nvptx-newlib11-devel" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="d628fb69ef93e40d004bcbae2a1071b737128058e191cf4dde91252459181606" name="cross-nvptx-newlib8-devel" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.1"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="012a0f90e88afbd257c84f56c8a34029d56159ce8f62f4878c1b7687c7e96282" name="cross-ppc-binutils" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="221ca6e1efb0c0b149568b7949df693be59b17afcd52e48e1df9a2066948c2f8" name="cross-ppc-binutils" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="abd21d86eb3c123fb74309370e2c15970e2cb092c90a1dbce13f82b45d6a37a8" name="cross-ppc-binutils" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="cc8e54e910caa277a7e9d2059c40f7a96a7c762d05b34374adb10d1d05216f0c" name="cross-ppc-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="c38f2ff3c67801e967ead30143fb06c25fa97a2d40792d046f26fbeb7ab8e7bf" name="cross-ppc-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="e5056d7af335ca780f238efba077315927e4d12f22e4915f1dfe2226439d9607" name="cross-ppc64-binutils" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="6e7315968bc8137112e6e0d39eaa062cc558399bb5b0d9f3a5102a7e233ebd7a" name="cross-ppc64-binutils" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="6d108d3c6a72841fa5aacfd01ad9aa5e9c3c985db57a727cb94c4b877742f632" name="cross-ppc64-binutils" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="06f9fcbb9ce93f9c842c7f63fe89e26959e5a6def8ddb753a396f2edfc393722" name="cross-ppc64-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="66bede8c37c03da53cc701646cafcbc7b01b021e3a4ba75fba0552be052ea395" name="cross-ppc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="19b82cccb24cfba7c0efc918277205a770cf6d3aec5fca25439c5d379759eccd" name="cross-ppc64-gcc11" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="2f294bbfd2d8d95b0f3f99238d03dcf8a6ca457bdd0606d96dd25de93a3be50c" name="cross-ppc64-gcc11" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="23f4d59433f09f4423ec09afd7f44034eb9021ecfb55f539bb28e653a3ffa02f" name="cross-ppc64-gcc11" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="c1d2df8902c632cca722f9622c0bb698a3f43327fe7b462cf52c7d007b070445" name="cross-ppc64-gcc11" arch="src">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="576a988474d685294eaf1e297b84597d11bab1f6b670baff79ef222cf888c27b" name="cross-ppc64-gcc11" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="fde7f0c59d15aff2e1f3db049085fca282b85cc1b79d4fa90768a1b4df6ab9dd" name="cross-ppc64-gcc11-icecream-backend" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="d6480360be91c8455092faa46925fbeb524b99c2b62b82329e562f08ca641cab" name="cross-ppc64-gcc11-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="c2493bf59e4a54e1b3ac1b80738f2e45da352ab20de3220b2d2683527952c337" name="cross-ppc64-gcc11-icecream-backend" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="b1b38cdec22d089175797162138da98312653459cadd6cbd265ae53f47ac5f78" name="cross-ppc64-gcc11-icecream-backend" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="e0fd1f3bb419c0714da6f4b9c6de424dcabdbdd8d119ed5d5c6ee209c4c18137" name="cross-ppc64le-binutils" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="a9ba2ba535c47dbfef24fec3ec1ecfd080e541707412d742ac4eb933b4395401" name="cross-ppc64le-binutils" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="cc8c1069d9ef75bb7be45aac746a5bcea3a9f282b2e6d832e9864d2ce3c3f4ff" name="cross-ppc64le-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="cdd7f1fef067884e2c06119c88593f167fb81731202b7f3529947ef44face2d0" name="cross-ppc64le-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="4e2f0f8eaf734b7c74c819c7333c7d9dabe4fcc3ff6dc1ff4dd81d65d36db823" name="cross-ppc64le-gcc11" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="9f8a6b1707617064b371c7aab92019766d37121f24d8fbdc9268a6ef61484a2a" name="cross-ppc64le-gcc11" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="71964b661010eb77ab183b5b6300634c0505f76f7b5f5b52d45f127eb1793bf3" name="cross-ppc64le-gcc11" arch="src">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="bf4259ddbdd7498bcc7cd7b20a695024c0b232f349c4e5e88a1eef26ff9f7396" name="cross-ppc64le-gcc11" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="b9a09ad68aeaa690609e787241ecce8e372a1abd78531073b117a18640fd73b8" name="cross-ppc64le-gcc11-icecream-backend" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="187d113b3ee7520ef7b134900f8c3e2e43847a25acbb8a5c7ee8350afb4a92ae" name="cross-ppc64le-gcc11-icecream-backend" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="8f8dde696144cbdee2ff151b82a2f31faa6871ac15363e86aa2de575f2aa3374" name="cross-ppc64le-gcc11-icecream-backend" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="c7b8a87545b9f800e76bc39fa6e5b77f714b577ff11724c83add0e50d1f6df5f" name="cross-riscv64-binutils" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="17dc1244f798946aaf61037a452018fb607e24481daf8c1491fc9f85c93d9953" name="cross-riscv64-binutils" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="43b7d7c28eda090b25add3324b460c6fb801266359891973e06a887a5aadf06f" name="cross-riscv64-binutils" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="0ca16b57d76a71e179dc6d1629e61ad3ce2522d92db13299a54e6078e5d62d34" name="cross-riscv64-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="e1c35c5979322afc331fb375525d4387acd674912f2fdf99a1ec4236d81d02b9" name="cross-riscv64-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="3e9274d92eadd442cc1113310d684e38f76c3ace706d9770637c07aff34a6a2f" name="cross-riscv64-elf-gcc11-bootstrap" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="67442af48e3ca1606367008cfad1f63f930c0e6d97d584b262befdf23f4201b6" name="cross-riscv64-elf-gcc11-bootstrap" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="651cfb139b64463bf7416fd170a6aecb1afd0a8f655987dca93ee9d9b997c0ee" name="cross-riscv64-elf-gcc11-bootstrap" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="ee51018aa9700a0146f4a3bc318ec2685e9402a101d035ffe26d7b87fc819ac3" name="cross-riscv64-elf-gcc11-bootstrap" arch="src">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="242485762f81be3c44bf4fbf429db94c7a8a15497d75dc9f69182eeb6b6c2817" name="cross-riscv64-elf-gcc11-bootstrap" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="1349f66d930703391495e764aa419fb01e182aa765f2fa18c02ed9d52bdc5b10" name="cross-riscv64-gcc11" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="6bb281cbd5c259f8d23f4b5161b686dc535d2e94341c8619b2f2efe84b88e5b6" name="cross-riscv64-gcc11" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="5c70c871f2d8dc127ed428e627c978b795c9f6c8883c620d07b70b4b26643a3a" name="cross-riscv64-gcc11" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="0377cda7ca0949cd98854a74f9d7abdfb16c6fbba11273f13b4df3c27dfbff04" name="cross-riscv64-gcc11" arch="src">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="538c1cb07f56e1475c78c9322c2b54ed1b456652b024936245077a37d44c3e49" name="cross-riscv64-gcc11" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="d6bcf99adf1001c73db2ca0e9b829cf762fd9a4070c7866324c522e267da58e8" name="cross-riscv64-gcc11-bootstrap" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="e6394ab9e785eaf102bff1e03dd9c428e22e2dbd1b00a17e916b44aacb71214b" name="cross-riscv64-gcc11-bootstrap" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="dfbe85a8c8dd071c1077d27ee45a616e3b3320c540578f93482cc0818c6bdda0" name="cross-riscv64-gcc11-bootstrap" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="95706b77781aea407e59bd2ffa450b4475d7e90e79362a6f99e154579f986ae8" name="cross-riscv64-gcc11-bootstrap" arch="src">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="1192646daea5fc7f62470a97ac95daf1d8c1175c56a0cbca5c5518fe1cd7bdfb" name="cross-riscv64-gcc11-bootstrap" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="a912b492063d5cb5b6a63ef8e631515fd6dec61fca078c468e74209d418364b4" name="cross-riscv64-gcc11-icecream-backend" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="baf0e23bcd099856f649b9859c1b86b555964450b012117e56504da6509296e0" name="cross-riscv64-gcc11-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="3e08035b8b308ddbb95bfb4991ac339694e221954fbec98ed719f4193ddd9014" name="cross-riscv64-gcc11-icecream-backend" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="6442d0a9c505ca778426d971cb588e708228c6cf54a39a60b2e654ca657dc76f" name="cross-riscv64-gcc11-icecream-backend" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="b3f68f7a2cc463da7126024b7c8bb6eaac433c6ea057cc51d8cfccfb2724a388" name="cross-rx-binutils" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="d86aa9a71a5ffe65975d6ca2760e8815cb03b65c1f695d6bfeac685d7ed6aa75" name="cross-rx-binutils" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="09bf6d331cfd733bd0cfe65ecde5b2aa665796505d5b6d0ff7c7dad5c14ebbc2" name="cross-rx-binutils" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="148fa0dd16f4280a508bf16bed66971296d08b618d1188a882778684fb0e07df" name="cross-rx-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="fe6033b262c47ed2a7c572d1428432dcbcb49b863f69d969be05078184e956e5" name="cross-rx-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="be0f715a7b9a89bc9ca7b595da3bf4a004ced0bcfd838f55199434bd57557e18" name="cross-rx-gcc11-bootstrap" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="83520bb59eaef313ef6728ea49875d2aa9e323bb0f0b8aaaafff19521efc903b" name="cross-rx-gcc11-bootstrap" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="dc917cb18c446d0713fce48e4c325b875abb40c346676a6e58f472dcbfcda69d" name="cross-rx-gcc11-bootstrap" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="6f43b28b30ed694ae8f621288370a6b26ce33f66de0a7f81c409c0bdbfc60fe1" name="cross-rx-gcc11-bootstrap" arch="src">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="18b3dd03485b3e5858709a0dd5e859802002b935ccad8b07719ed0ca139ff7b0" name="cross-rx-gcc11-bootstrap" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="cbe5eac286c978faad00189976cdb04a352e2904be24cfc327823c4e417dcbe4" name="cross-s390-binutils" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="c7605d0a6f6023e12efd41b2ca9d5d42836dd32a839ca218e71476b0bb44705f" name="cross-s390-binutils" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="88524cd2f81a6fc5f87890f2c18ec3a1768a926902be32523a85f3d1773f7ec2" name="cross-s390-binutils" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="4388621713870d87b0396df5f2e77c23f52c3919127021a666fb979f13b7dc59" name="cross-s390-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="b99ecec1e9421f5c8078d1480b38b57cbf01c1c861b4f3aa0c1a36af92c0db68" name="cross-s390-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="a573fe8a4b2298ea887d27a6760797776b2b8b9f2b8f47b96c0ad30b0652b2c3" name="cross-s390x-binutils" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="b8623fe6f3de4ee3d0233612b1a52ac4bae8eb9a8ef172551b8f50fe94f5e74f" name="cross-s390x-binutils" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="b89a6e252d10c13be97453deba5317ba143e293ca40628723abaa6af5b8938ad" name="cross-s390x-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="f93de7b2fe21c8c0b9a30cdba3c49431a857212b797fc1e9341d5a62967e970e" name="cross-s390x-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="5e4205b46105a0947c5588fc02688231299f802faf1046148aac69f03458bf97" name="cross-s390x-gcc11" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="b4c3d8577a9dc06d7ee5703dd523e3a103d543db631c223fa3dd3bfab86ffaa4" name="cross-s390x-gcc11" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="148be2c8fb49bcbd2108dd9076aba8aa7f6ae0fc4b37b54279c618a6d9c8ab6a" name="cross-s390x-gcc11" arch="src">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="9b47f3079674171e2bd53d70d2c6c3754bb4c6fad4d83ddf86ab3866229f272d" name="cross-s390x-gcc11" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="0d4e2f9c3792f8e12a22a1aaa3dcbe84cfd24205974ac58224df5e110ffc4b42" name="cross-s390x-gcc11-icecream-backend" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="926b8c9fc538c3a1e0bcb78bff37567102bd7c0b65a126fe8997567e1a07cd37" name="cross-s390x-gcc11-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="336e89487cb057066ff39d9ec9b245fe0d3956d86a8860210bbf61d45139437c" name="cross-s390x-gcc11-icecream-backend" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="9f856e46c66513376f16a8008916e11360fdaf8037aca3964f5fc905a9740927" name="cross-sparc-binutils" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="861d01f70dda69453f24d3784ed8436f0dc1f640867dc23206c3110571c93e17" name="cross-sparc-binutils" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="748d2415e02adf4ea55dc42e5e91b6a78e4623199ecdc185fe6f0c6cb7b88aae" name="cross-sparc-binutils" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="7625ede87280bf8c82bfac14c14f5bf6404ecc0d5bce831a644099d8e77f5b38" name="cross-sparc-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="b768ab2fa26d74e6401a3caa68e15595ac20ef12f4929f5b0cfe6c7f3142de25" name="cross-sparc-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="cfb091540be6ccfbab780b62cc66509d0f350a713bae18407aed6b938c4fa37c" name="cross-sparc-gcc11" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="2edf7fdf5a755fb67bbf0e2102afce7db12dc74613a8385bd5ed512d208c780d" name="cross-sparc-gcc11" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="dcc3bb1dfa396b1444d5ba73e6015469ba132c471045a9fdb841b64456e6901c" name="cross-sparc-gcc11" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="6d86887cef4c7b6bc4e28500ddd29cc77e8f28a6cf881b13bb3682a5ca5a1838" name="cross-sparc-gcc11" arch="src">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="de8147efeec1862a8707c20f15ada19b859a56f25324f3c740052428407d96b6" name="cross-sparc-gcc11" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="b99b2174929a002e249d8e022343869287bf4ee1006dea9dcc934fea30fcee12" name="cross-sparc64-binutils" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="7f406a7a54969329de769c0d733139dbfc08cdd37508f3ad04f2679db40bab46" name="cross-sparc64-binutils" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="a8e8831f0ad3286d94e9e377b0a8827047e6fbc4416af947718a19bb28d43b42" name="cross-sparc64-binutils" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="6e28c02fcde08663d3c56685b7196f85f25167ff7fb14cb478b5548f0f35be98" name="cross-sparc64-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="4e310777964272bdd94152e2a67b0a36bc2dd0acc89b8187f0a84558c427d1fe" name="cross-sparc64-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="e7f5c969d6c59660923dd5a92e07394626a55d69f41c274a4869f0d4321e75b4" name="cross-sparc64-gcc11" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="f9ffd483a69eb6f2fb9bebcba8d750a0f4d2d82257012f37778b8e1ad615f71c" name="cross-sparc64-gcc11" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="2186e45961c864c4bf714a6f6562dc3e24ef5356f1fd614139376121970b5e8b" name="cross-sparc64-gcc11" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="ad08e485931fb01c2ab5ff27a7d3e16afa94ffb719e764990d5e4e47a490ceca" name="cross-sparc64-gcc11" arch="src">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="f72daba49959081005952fb12d42dfc8508ec7c42326672df5593da47d46761b" name="cross-sparc64-gcc11" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="3aca5792230d45051b93db5ee9604756e6d8644e0c3153b4c8366e85187fee43" name="cross-sparc64-gcc11-icecream-backend" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="17db9e591199c88f82154b0f40ea01339e7fdb70e26145281ee11cbaf857988e" name="cross-sparc64-gcc11-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="a5e7b2801bcb762a7b35a4f692f3cec66df586e62b748f6650263c748d90c99f" name="cross-sparc64-gcc11-icecream-backend" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="b96d20fa15081f21b43b9109beab298589b73343d042492ae629afb363249777" name="cross-sparc64-gcc11-icecream-backend" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="989e37c5174b5b60cbdafe242f8bfd4680d507f092b34709d44b0d3e2f3ad3bd" name="cross-sparcv9-gcc11-icecream-backend" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="4c04af6bd3f40f6a27b6ea0272a7d77ca83444df657ac0853934e36725580bc7" name="cross-sparcv9-gcc11-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="e7c1ba905cd8c108d921a9deae66109fb1dc743fe9cb14502643872276205ee6" name="cross-sparcv9-gcc11-icecream-backend" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="64bc5a8f9f9b635b94c21a91270145f211980182313babcd99f377a6808b8ca0" name="cross-sparcv9-gcc11-icecream-backend" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="d13e0f4322fa375a0fea23574b49e748a924e02c4275c1142af81fe57422685d" name="cross-spu-binutils" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="9588c764369feba30168fee5658790b11a4a7e6749cbdce944a3bd157b73af43" name="cross-spu-binutils" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="851d1355dcc2366eda9f6c1c91bff62b2ef14758633074e3ed72ee9eaf651c05" name="cross-spu-binutils" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="5a79ae6e06a85f09df9e475305013880556f43764b39924ab40770c5d5d1bb12" name="cross-spu-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="3f74bd581d4062897811e0479a7f0b5f8e84a88f6160b83aea96d777a2785abe" name="cross-spu-binutils" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="6212f2e634da254b66538b6df6a597ba779b0bc53cb890628ddfacc743978076" name="cross-x86_64-binutils" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="d002d93eb26f0e13ff13f2c40e04a3fe26c12e94f7ae2ae566d8ac5f8b1831e3" name="cross-x86_64-binutils" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="99144143437d7cf213e22d3ff4b7672875cf87a849ca138bd3f103a20a403820" name="cross-x86_64-binutils" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="8b9190081cd6e99f737d2df0cd7609444e5258cd6bf8b4475d7be80fe30eeda6" name="cross-x86_64-binutils" arch="src">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="b762f0bd639225292fad64bc88ee14fd6a809e010993916fd2b947bcf7dbd818" name="cross-x86_64-gcc11" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="1190f2ce1cfc7ae76a7a3a6692e131e0a320f51287ceee5cfe02aea2678b8704" name="cross-x86_64-gcc11" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="0f446267a3c2e45d163589d8622eec08b7142c45b077f23475ec73a27830bc74" name="cross-x86_64-gcc11" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="8d95580358a1e3e344dca479cf8fbd6f40b6f90eed281fecb5f7d3fa867fd735" name="cross-x86_64-gcc11" arch="src">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="5421846fd6f7c9dcd9f8010e8dda91b8ae67f39e7939d6e0a39e33978e983cdd" name="cross-x86_64-gcc11-icecream-backend" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="d55babe0a6f804293b2399c0f07142e1484bf1b7ddcc2e485f8ecc4e3f8b8e04" name="cross-x86_64-gcc11-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="aa707b18964d4c73f30bebb1f5bb1de134c8b5f03212ffdcdc4a55a4d5b6fcf1" name="cross-x86_64-gcc11-icecream-backend" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="53412ce5832a29297e53e1dd13bdbc1c4c01c9f542509d47b57c518bbc4523ae" name="csync" arch="aarch64">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="9fde94a4ef9695714d4848c0bd448d55a8332f8e1cdc6d79d81c9a58ab5acb6a" name="csync" arch="ppc64le">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="c91efae9020d5d1f4d430f5bf134e0ee397cdd3e0f8b27585106a1090307baec" name="csync" arch="s390x">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="e3db58f71c14db7afb92930a204d247b870b74d2d7768056e86bd25b96495eb7" name="csync" arch="src">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@suse.de" date="1214568000">- Fixed csync on PPC</changelog>
  <changelog author="anschneider@suse.de" date="1215000000">- Update to version 0.42.0 alpha4
  libcsync:
  * Added the possibility to run csync completely without a journal
  * Improved chmod calls during propagation. Most of the time we use the
    default mode and don't need to call chmod.
  * Improved the exclude list handling in the file tree walker. This
    increased the speed of the update detection.
  * Fixed csync on PPC
  * Fixed serveral small bugs
  csync:
  * Added commandline option to run csync completely without a journal</changelog>
  <changelog author="anschneider@suse.de" date="1215086400">- Set the right group for the different packages</changelog>
  <changelog author="anschneider@suse.de" date="1221048000">- Created a subpackage for each plugin and for the user guide
- Update to version 0.42.0 beta1
  libcsync:
  * Added a sftp module using libssh
  * Added user guide (just a start)
  * Added testcase for update detection
  * Added a function to parse an uri to cstdlib
  * Updated the manpage
  * Fixed some segfaults in cstdlib
  * Fixed some memory leaks
  csync:
  * Improved the auth callback</changelog>
  <changelog author="anschneider@suse.de" date="1228478400">- Update to version 0.42.0 rc1
  libcsync:
  * Reduced calls of syscall functions.
  * Added own function to create a temporary filename.
  * Fixed libsmbclient 3.0.x support.</changelog>
  <changelog author="anschneider@suse.de" date="1231416000">- Update to version 0.42.0 rc2
  * Reduced syscalls
  * Fixed a bug in the state database
  * Fixed libsmbclient support
  * Completed userguide</changelog>
  <changelog author="anschneider@suse.de" date="1231416001">- Fix loading of plugins.
- Add requires to the plugins.</changelog>
  <changelog author="anschneider@suse.de" date="1232712000">- Update to version 0.42.0 rc3
  * Added checks for unix extensions.
  * Added more documentation to the userguide.
  * Fixed loading of plugins.
  * Fixed call for deletion functions.
  * Normalize the path to &lt;hostname&gt;/&lt;path&gt; for the statedb filename.
  * More change name of client options to be more descriptive.
- Add recommends for the plugins.</changelog>
  <changelog author="anschneider@suse.de" date="1235649600">- Update to version 0.42.0
  * Small fix in the userguide.</changelog>
  <changelog author="anschneider@exsuse.de" date="1239969600">- Fix Fedora build.
- Change the way how to set CFLAGS.</changelog>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="1f0da7f1f724e63fc723e948b00d471376f2326ac80aeed5f1476093060171c2" name="csync" arch="x86_64">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="271b83fc03b51ac408d0f0d22c79245bf14b2e5ea54ee2fef8dd1bcefa638a0c" name="cups" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="0b09d7138ed5e46dda8d9d7a58ae2263a8ff4d310b653f228897422102839a6c" name="cups" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="733ccfdcceb4fa5a2ac04b821339168b0067acd0b3a01790d7cef29fc42723a7" name="cups" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="c3f34027d802079886e077747c6b0afca180c7411a68e07501e5eb4a9c2a5c21" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="79cd534d54a8d65816baffd2f7807bb73093efaf4b3ba9277a6220e8f8c700d2" name="cups" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="ed66d594535350f3e72bff833929fda5e6420e5dbab3794a91daeb4797aa640c" name="cups" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="38a5c676dec4c756af2072705861bc0e6ad7d57f4dc69c07895349c588f88600" name="cups" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="60baa2950128faf8b0c39cf91fdb0f6ca7d56bbd2993a196af2f80cf744a6e59" name="cups" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="0a4e251351438df81404f82014204ab5db8a2a7b2a0eb334684b55a3a73c921f" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="54223710969b0956bbc34a37cf01c58afc29c0d93386c03c110996d8ed09b290" name="cups" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="d883e11e00c944ca4a2527ea08ac21af076ded664d5eca9a0c6d0891387f1758" name="cups-client" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="50e554fe42bd42f8a29da26f68852af76ac7f25c8cc16e26b0d13f1eb6a167cd" name="cups-client" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="f337e874c0f1407ed654fdc5fa7e497601f04498146f62f4cca4388a105dbbe8" name="cups-client" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="9fbb79c516d9a29c99abda604681880f51ef48a9bd4d725d4955ed82468923d1" name="cups-client" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="e2808a814735c7eb74f54e8a243826330aad3e4a8dc14a3b3cdc04dc2dbff0ee" name="cups-client" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="414e7c0cbfe6c09d8116f5ea8ef7b016ccd6acde319543194885613362c8caf0" name="cups-client" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="888fe946196d76c3a4a3034420069d38002f6e612e0833ada5467569aabae230" name="cups-client" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="e60bd3b247435066e885a9215716c5412ce39c267c446ab7a049121478630ae2" name="cups-client" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="e84c3691253e49c38242045323241d2aa5fdb201c3f90762cc3909b882ac7627" name="cups-config" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="d4d0aaf8f9335203c4d493f7ceb77821a599447c9e73fd420babbfc2a4eb4c1f" name="cups-config" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="0e197424727dd26d3e99f5f3aa7bd42d989df377fac731c61e719f6fdb23b693" name="cups-config" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="21f3645344c4a201b86608e98e74f112980ab089aead5e1910d0b057c22a78ca" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="8dbc8fbe1bc31e246f3be56dc88fd44626de79ac4c6667598b58585eadff22a2" name="cups-config" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="e762c6ba2b693b54b5af124f5b8ace37819cff93ca9e2022f1d7fca2d731bd93" name="cups-config" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="fa5ccc576272474d0013923599fc7abdf00b14cd5c22e0b2e0719786d5aa1e41" name="cups-config" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="b7f8256e5f1bda13584bf814669b81a48eddb990763e143e815a3043158cc08b" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="7c2a9215c3b5a93bc59dfc5107dc72209715be64e9c9346e7d5c51ee6cfb4dd5" name="cups-ddk" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="8a23b0f7615d3970e6d16076380b09d6657dcd22a35dfdc5aa19c635cc9fa1bd" name="cups-ddk" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="da8ea573e9000b3ee0561acf2841e23ff633000ad23ee2c43517af0d2e226f87" name="cups-ddk" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="daf95b5d1d4fe319b99bc1b2e7676e044fad5801b15f1f48034094f0ebdebc31" name="cups-ddk" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="2c5073917aad05bafd0a6a94a2ba84eace5f8b011f3e294c32ecffdc3603bf0b" name="cups-ddk" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="4d8d1eedbfb5bf54f238ac29d5546062424a76c495702180d70b49852195c70e" name="cups-ddk" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="a44112a7fd4339207f41815a701df4ae4efd32ffbe220b8f69ad0e8c455095a3" name="cups-ddk" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="af0058fd7c959798c475265420df1b066ee286cbd8394fbd55ea966a66ca7028" name="cups-ddk" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="2f6dad9da1c7c1e29353a2122c0eec51f9ee37189fc0b3e328db0a29ec58651b" name="cups-devel" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="7f774b0b2447e2990dd5c8f3e69d620263c41f6132cbdc58b24ab0af4e2b7d5b" name="cups-devel" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="ddf7e211e176b56cb22c8ec6ff606002c11ef2798805d751c3c3f997f65ad526" name="cups-devel" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="2c8694135640958487ea1829d5ceae4fde1fda38bf5fcf5786ddf67efb04a834" name="cups-devel" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="7faac18e1fbdf7dbe2ef7b568328947c53fd96da1333689ff0ebc3fae8b8ed43" name="cups-devel" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="19e70fcc519cc8ca51d0649f2295ca2cdba85231f3f8b97ce08e1ad2149cbcfc" name="cups-devel" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="545e90818bd632d8f64defb0a23d16bf52f65a25dfe5e566a52378c2118c0eac" name="cups-devel" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="1a7bb77b77e40c487c754d24bef54b4250e472d128e75a4a667a663983d7491d" name="cups-devel" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="569d1370f0531072c80673684a8b4d24a01077ec2e02fdf22bc499bb75c289ef" name="cups-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="158673d9d1f093b425bd56031e58717cad8323412001b8b43d7a8c2166817e4b" name="cups-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="d15d06f3125ae09ca91004946c15645a0c4e5eb1831425a85486abb83015f5c2" name="daps" arch="noarch">
  <version epoch="0" ver="3.3.1" rel="150300.14.3.2"/>
  <changelog author="fsundermeyer@opensuse.org" date="1465992000">Stable release DAPS 2.2.0:
  * New Features:
  - new subcommand "xmlformat" prettyfies the XML sources of a
    given DC-file or ROOTID using daps-xmlformat with
    /etc/daps/docbook-xmlformat.conf.
    (Note: this command will modify the original XML sources!)
  - SVG image support for HTML builds. To use it, make sure to
    provide the images in SVG format ad reference to them as follows:
    &lt;imageobject role="html"&gt;
    &lt;imagedata fileref="&lt;SVG-FILE&gt;" format="SVG"/&gt;
    &lt;/imageobject&gt;
  - the new global switch --jobs lets you specify how many parallel
    jobs to use. The default is set to the number of CPU cores (as was
    done in previous versions).
  - all commands generating file lists (e.g. "list-srcfiles") now
    generate human readable output on STDOUT. When the output goes
    to a pipe or subshell, it will be generated as a a one-liner.
  - Debugging of XML errors has been made easier. Sometimes the error
    message of the validator only points to an xi:include line, making
    it impossible to find the real location of the error. The option
  - -novalid for the target "bigfile" will create the bigfile
    without performing a validation check on the sources. A single XML
    will be built and validated. Now the error message points to the
    exact location of the error in the bigfile. From there it should be
    easy to find the error in the original sources.
  - Verbose and debugging output now also show all profiling
    attributes set in the DC-file, plus version information for
    the sytlesheets (if available)
  - added the option --norefchecks to all output-generating targets
    ("html", "pdf", ...), "validate", "bigfile" and others. Allows
    to build/validate documents without checking internal links
    (&lt;... linkend="&lt;ID&gt;"&gt;).
  - subcommand "online-docs" now always converts the bigfile that is
    created to NovDoc. To keep the same format as the original
    sources, specify --dbnoconv. To create a DocBook4 bigfile from
    DocBook5 sources, specify --db5todb4.
  * Bugfixes:
  - #368: db4tonovdoc.xsl generates invalid NovDoc
  - #367: daps does not validate fop output
  - #366: Spellcheck trying to check the files "Cannot", "stat:", "No",
    "such", "file" ...
  - #364: DocBook5: Allow validating without checking xrefs
  - #363: Allow building a bigfile from invalid sources
  - #362: Make the number of parallel jobs configurable
  - #361: Externel xrefs are resolved to "????"
  - #360: Check Rootid fails on Debian 8.4.0
  - #356: file list output should default to pretty format
  - #354: Validate the result of online docs when it has been
    converted from DB5 to DB4 or novdoc
  - #353: Make db5 to db4 conversion default for online-docs
  - #351, #348, #342, #282: Fixes for the daps spec-file
  - #346: daps-xmlformat writes its messages into the output
  - #343: daps-init warning messages
  - #340: ePUB builds always show remarks
  - #335: on Debian, make install creates incorrect group in
    /etc/xml/config
  - #330: Enable SVG2Grayscale stylesheet to handle new color
    names
  - #305: locdrop produces no "non-trans" image tarball for a
    complete set
  - #301: SVG to PNG conversion creates very large PNGs
  - #289: Verbose / Debugging Output Should Show Profiling
    Attributes
  - #251: Write XSLT to Return xml-model PI
  - #226: Let stylesheets know which version of DAPS calls them
  - subcommand "clean-all" fails if run from within a directory
    that will be removed with that command
  - daps fails when called from a directory that no longer exists
  * Cross-Distribution Support
  - first release with full Debian/Ubuntu support--manual
    adjustments after the installation are no longer needed
    (was required in previous releases for DocBook5 support).
    Many thanks to Tomá? Ba?ant and Christoph Berg for their help!
  - GitHub checkouts now also work for Fedora/RedHat and
    Debian/Ubuntu--refer to
    https://github.com/openSUSE/daps/blob/develop/INSTALL.adoc
    for details
  - tested on Debian 8.5.0 / Fedora 23 / openSUSE 13.2 and
    Leap 42.1 / SUSE Linux Enterprise 12 / Ubuntu 16.0
  * Misc:
  - removed "daps-envconvert", a script for converting susedoc
    ENV-files to DAPS DC-files. susedoc was the predecessor of
    DAPS.
  * Documentation:
  - the documentation has _not_ been updated for this release, so
    new features mentioned above are not yet covered</changelog>
  <changelog author="fsundermeyer@opensuse.org" date="1470312000">Stable release DAPS 2.3.0:
  Just to please the SLES submission bot: bsc#992546
  * New Features:
  - Config File Parser:
    Up to now, config files (DC-files, /tec/daps/config and
    ~/.config/daps/dapsrc) have been sourced. This has been a major
    security issue, since every shell code gets executed when a file
    is being sourced. DAPS 2.3.0 now comes with a parser that fixes
    this security hole. Apart from one exception (see below) existing
    config files do _not_ need to be changed. However, the parser
    offers more flexibility, see
    https://github.com/openSUSE/daps/blob/develop/etc/config.in
    for documentation (the manuals has not been upfdated, yet).
    The only exception that requires changes in the config file is
    something like FOO="$FOO bar" To concatenate values, use "+="
    now. See the following commit for an example:
    https://github.com/openSUSE/daps/commit/7a2ce04
  - Bash Completion:
    TAB-completion for DAPS has been one of the very first feature
    requests we opened (almost five years ago). Now we finally
    managed to conquer the black Bash magic required to get it!
  - Automatically detect the DocBook 5 version: If you have
    DocBook 5.1 installed, docbookxi.rng from 5.1 will
    automatically be used as the validating schema for DocBook 5
    documents. If you rather want to use the 5.0 schema
    or a custom schema, set DOCBOOK5_RNG_URI accordingly in
    /etc/daps/config (for a system wide configuration), in
    $HOME/.config/daps/dapsrc (for a user specific configuration),
    or in the DC-file (for a document-specific configuration)
  * Bugfixes:
  - subcommand "locdrop" failed when the book did not include
    images
  - spellcheck now ignores text in &lt;replaceable&gt; tags
  - obsolete daps-susespell has been removed (replaced by
    daps ... spellcheck long ago)
  - paths starting with "~" were not always correctly resolved
  - several fixes for ePUB, among them a fix that now correctly
    chooses mediaobject entries with role="html" rather than
    choosing the first one listed ion the XML source
  - #10 : Generate TAB completion
  - #359: Drop bash 3 suppor
  - #369: Code review: Check Variable Assignments
  - #375: Issues with the xmlformat target</changelog>
  <changelog author="fs@suse.com" date="1470744000">- Increased the Java Stacksize for jing to 4096k since otherwise
  building manuals on s390x is failing, see bsc#992755</changelog>
  <changelog author="sknorr@suse.com" date="1475668800">- Try to fix broken link
- Remove SVN fetch source script</changelog>
  <changelog author="fsundermeyer@opensuse.org" date="1496145600">Stable release DAPS 2.4.0:
  * New Features:
  - added a dependency checker for DAPS (/usr/bin/daps-check-deps)
    that makes it easy to check for missing programs/packages
  - added a "--lean" parameter to PDF generation for creating PDFs
    with a reduced file size (by reducing the quality of included
    images); useful for sharing PDFs via e-mail
  - added a srylesheet for returning all IDs from an XML file
    (daps-xslt/common/get-all-xmlids.xsl)
  * Bugfixes:
  - #408: The list-file-* commands now work with ROOTIDs from all
  possible elements
  - #390: When an ID appears twice in the XML and this ID is used
  with --rootid, DAPS's error message is unhelpful
  - #365: Improved error messages on "File not found" errors
    (now tells whether the path was provided by command-line
  or config file)
  - #371: Make path to the xmlformat config file configurable
  - #372: Adjusted debian dependency list
  - #373: Check unpack-locdrop
  - #379: Output error of list-images-multisrc with
    pretty | wc option
  - #380: Proper error messages when binaries/packages are missing
  - #392: daps-xmlformat writes name of config file into output
  - SVGs were not included in ePUBs
    (https://bugzilla.suse.com/show_bug.cgi?id=1006204)
  - Setting a default value for db5_version in configure.ac
    otherwise the DB5 URN in etc/config will be set to an invalid
    value if DB5 is not installed when running make
  - fixed a few minor issues with the config file parser that was
    introduced with 2.3.0 (among them #387)
  - Increased Java stacksize for jing
  - Improved the DocBook5 -&gt; DocBook 4 (-&gt; NovDoc) conversion
  - compatibility: Debian's version of "which" does not support
    long parameters
  * Documentation:
  - Various updates to reflect changes in the code
  - #345: added documentatioon for the xmlformat subcommand
  - #362: added documentation for the --jobs option
  - #363: added documentation about building a bigfile from
    invalid sources
  - #364: added documentation for the --norefchecks option
  - #403: improved documentation about stylesheet customizing
    (also see #407)
  - #404: clarify doc about listing unused images
  - completely revised the doc (spelling, language and grammar)
  - doc is not yet 100% on par with the code, but we are getting
    closer
  * Compatibility:
  - successfully tested DAPS on Linux Mint 18.1</changelog>
  <changelog author="fsundermeyer@opensuse.org" date="1497441600">Hotfix for 2.4.0:
- fixed fatal typo in lib/daps-functions
- fixed spelling/grammar issues in error messages
  Changelog:
- merged SLE 12 and Factory Changelogs
- remove daps-dont-complain-about-deprecated-option.patch</changelog>
  <changelog author="fsundermeyer@opensuse.org" date="1497960000">- another try to get the Changelogs for openSUSE and SLES aligned
  (no code changes)</changelog>
  <changelog author="rick.salevsky@suse.com" date="1539950400">Stable release DAPS 3.0.0:
  * New Features:
  - added full support for Python3
  - added SVG support for online-docs
  - added support to build AsciiDoc documentation
  - integrated hunspell and make aspell optional
  - implement file not found for XIncludes
  * Bugfixes:
  - #419: HTML and PDF builds need different paths for Admonition
  and Callout Images
  - #322: Add --xmlonly / --imgonly switches to list-srcfiles
  - #416: DAPS Won't Built With UTF-8 Characters in XML Filenames
  - #397: Spaces in path problem
  - #469: RPMLINT complains about permissions of XSLT stylesheet
  - #464: xmlformat incorrectly formats variablelist terms
  - #466: Build issues
  - #475: Tab completion creates error
  - PDF fails when static links in build/.tmp already exist
  * Documentation:
  - Various updates to reflect changes in the code
  - Improve help text for daps-xslt</changelog>
  <changelog author="sknorr@suse.com" date="1540296000">- Workaround to make it possible to build things</changelog>
  <changelog author="fsundermeyer@opensuse.org" date="1541678400">Public/final release DAPS 3.0.0
  * New Features:
  - added support for ASCIIDOC sources
  - added support for LibreOffice Draw images (*.odg)
  - added support for specifying a config file on the command line
    (with --config)
  - added SVG support for HTML builds
  - integrated hunspell and make aspell optional
  - initial well-formedness check ignores duplicated IDs (this
    allows to have identical IDs in parts that get profiled)
  - initial well-formedness warns about missing xi:include files
  - daps-autobuild now supports building single books (via the
  - -dcfiles option)
  - DAPS prgram name and version are passed to stylesheets with
    xslt parameters "converter.name" and "converter.version"
  - implement file not found for XIncludes
  - FOP and XEP version numbers are shown in debug/verbose output
  - various improvements for the DocBook to NovDoc conversion
  - split lib/daps_functions into several files to improve speed
    and maintainability
  * Bugfixes:
  - #476: DAPS generates ODG-&gt;SVG files into images/src
  - #475: Tab completion creates error
  - #474: Potentially wrong variable assignment
  - #437: lodraw tries to convert empty SVG
  - #469: RPMLINT complains about permissions of XSLT stylesheet
  - #468: xmlwellformed script creates RPMLINT warning
  - #466: Build issues with daps-xmlwellformed
  - #464: xmlformat incorrectly formats variablelist terms
  - #462: Implement file not found for XIncludes
  - #459: By default, use the xep-daps.xml configuration from
    stylesheets
  - #457: Ship the asciidoc postprocessing stylesheet
  - #455: Transform glosslist into variablelist (NovDoc conversion)
  - #453: Cleanup stylesheet for results from ASCIIDoctor
  - #452: Make it possible to specify the ASCIIDOC doc type
  - #439: Make xmlformat more verbose in debug mode
  - #435: require java-devel &gt;= 1.8.0
  - #425: Well-formedness check fails with double occurrences
    of xml:ids
  - #424: Fix XML catalog generation
  - #422: Integrate hunspell and make aspell optional
  - #421: Show FOP and XEP version in debug/verbose output
  - #419: HTML and PDF builds need different paths for Admonition
    and Callout Images
  - #416: DAPS Won't Built With UTF-8 Characters in XML Filenames
  - #415: Add support for LibreOffice Draw files
  - #397: Spaces in path problem
  - #322: Add documentation for  --xmlonly / --imgonly switches
    for the list-srcfiles subcommand
  - #226: Let stylesheets know which version of DAPS calls them
  - #119: daps-init: also include example for set
  - show a warning when an existing PDF has a size of 0 bytes
    (usually the result of a failed FOP build)
  - PDF fails when static links in build/.tmp already exist
  - fixed DocBook identifiers in configure.ac
  - made unpack-lopcdrop more robust against non-critical issues;
    improved its debugging output
  * Documentation:
  - new guide: ASCIIDOC Quick Start
  - Various updates to reflect changes in the code
  - Improve help text for daps-xslt
  - Improve error message for IDs defined multiple times
  * Removed support for:
  - sourcing DC-files
  - help texts for deprecated daps 1.x commands
  * Misc:
  - converted Python scripts to Python 3; changed build
    dependencies to python3</changelog>
  <changelog author="fsundermeyer@opensuse.org" date="1542801600">-  Only recommend libreoffice-draw on aarch64 %{ix86} x86_64</changelog>
  <changelog author="fsundermeyer@opensuse.org" date="1543838400">- Updated license statement in spec file to SPDX 3.3 notation</changelog>
  <changelog author="fstrba@suse.com" date="1578312000">- Do not depend on xml-commons-jaxp-1.3-apis, but on generic
  xml-apis provider</changelog>
  <changelog author="dimstar@opensuse.org" date="1585828800">- Add daps-gnu-make-4.3.patch: Fix compatibility with GNU Make 4.3.</changelog>
  <changelog author="sknorr@suse.com" date="1620734400">- Stable release DAPS 3.1.0:
  * New features:
  - Allow converting AsciiDoc books with multiple parts into a
    DocBook set (`--adocset`/`ADOC_SET="yes"`)
  - Remove `dm:docmanager` during `unpack-lockdrop` when
    `--remove-dm` is used
  - Added support for DITAA diagrams as an image format (must be
    added as an external file) (#540)
  - Allow using `{daps-adoc-attribute}` from AsciiDoc sources to
    add a list of all AsciiDoc attributes used by DAPS to the
    output (#573)
  - Added `daps validate` options  `--validate-ids` (checks
    whether IDs match a basic SEO-compatible set of characters) and
    `--validate-images` (checks for missing and duplicated images)
  - Renamed `daps checklink` to `daps linkcheck` for consistency
    with `daps spellcheck` and `daps stylecheck`
  - Renamed `PDFNAME` to `OUTPUTNAME` DC file option to clarify
    its purpose
  * Removed features:
  - Removed support for the Xfig (`.fig`), PDF, and EPS image
    formats
  - Removed support for the `asciidoc` tool, DAPS now only supports
    AsciiDoctor
  - Removed support for `--xsltparam` which has been replaced by
    `--stringparam`
  - Removed `--css=none` option of `daps epub`
  - Removed `daps-auto.pl` which has been replaced by
    `daps-autobuild`
  - Removed all support for Python 2 dependencies
  * Bug fixes:
  - When AsciiDoctor outputs a warning, DAPS will now fail,
    avoiding XML issues that would crop up later (this only works
    if AsciiDoctor &gt;= 1.5.7 is used)
  - Find unresolvable AsciiDoc attribute references (such as
    `{reference}`) and error out rather than adding them to the
    output
  - When converting AsciiDoc, always unset the `imagesdir`
    attribute, so DAPS can mandate its own `images` directory
  - On successive DAPS runs, always convert AsciiDoc files to XML
    again
  - Improved default IDs generated by AsciiDoctor, to avoid leading
    underscores in IDs (#520)
  - Improved AsciiDoc `postprocess.xsl` clean-up stylesheet:
  - Rewrite `@contentwidth` to `@width`
  - Improved display of article titles
  - Fixed validation of generated abstract elements
  - Improved workarounds for `authorinitials`, `othername`,
    `lineage`
  - Output AsciiDoc `&lt;&lt;reference, title&gt;&gt;` construct as
    `title (&lt;xref linkend="reference"/&gt;)` (same for links)
  - Improved handling of slightly misused AsciiDoc block/
    example syntax that was previously converted to
    GeekoDoc-incompatible `formalpara` elements
  - Fixed updating of profiled files when an entity or the DC
    file of the source has changed
  - Only use AsciiDoctor's `--failure-level` if the version of
    AsciiDoctor is new enough to support it
  - Allowed use of AsciiDoc attributes defined on command line
    and in DC file at the same time
  - Made DAPS's default set of AsciiDoc attributes overridable
  - Internally handle `--param` the same as `--stringparam` (#589)
  - Made sure that both `index.html` and `[ROOTID].html` are
    generated during HTML builds
  - Reworked `getentityname.py` (#556)
  - Restored compatibility with Novdoc profiling stylesheet
    references
  - Avoid stumbling over empty hrefs in XIncludes during validation
  - Fixed issue where DC file parser would concatenate rather
    than overwrite values
  - Fixed issue where DC file parser would not correctly recognize
    last line of a DC file if it did not end in a newline character
    (#553)
  - Fixed issue where default entities like `&amp;mdash;` could not
    be found
  - Fixed `unpack-locdrop` runs that failed because file lists
    contained spaces rather than line breaks
  - Use `PROFOS` value during `locdrop`
  - Fixed `daps html --nostatic` build failure resulting from
    identical files error
  - Fixed GNU Make 4.3 `+=` operator compatibility
  - Added compatibility with Inkscape 1.0 command-line options
  - Set initial memory for FOP
  - Fixed path to Avalon Framework (bsc#1175214)
  - Fixed LibreOffice Draw executable name for Debian (#564)
  - Improved error message when MAIN file is missing (#494)
  - Improved error message displayed when ROOTID does not exist in
    the document (#546)
  - Show FOP warnings when running with `-vv` or higher verbosity
  - Suppressed error messages about missing `xml:base` during
    `daps linkcheck` (#558)
  - Improved message output of `daps-xmlwellformed`
  - Improved Git updating flow in `daps-autobuild`
  * Documentation:
  - Added man pages for `daps-xmlformat` and `daps-check-deps`
    (#491)
  - Added documentation for generating a DocBook set from an
    AsciiDoc book
  - Fixed typos and other minor issues throughout the documentation
  * Packaging changes:
  - Cleaned up TAR archives generated by GitHub (#489)
  - Do not make libexec XSL files executable (#492)</changelog>
  <changelog author="sknorr@suse.com" date="1620820800">- Stable release DAPS 3.1.1:
  * Bug fixes:
  - Removed error messages that appeared during command-line
    completion
  * Packaging changes:
  - Updated Spec file from OBS repo</changelog>
  <changelog author="sknorr@suse.com" date="1621598400">- Stable release DAPS 3.1.2:
  * Bug fixes:
  - Fixed issue where irrelevant XIncludes would cause validation
    errors (#617)
  * Documentation:
  - Updated installation documentation</changelog>
  <changelog author="sknorr@suse.com" date="1623326400">- Stable release DAPS 3.2.0:
  * New features:
  - Added config file compatible with xmlformat 1.9 (for the
    xmlformat version from github.com/someth2say/xmlformat)
  - Added DocBook table validation script (must be run manually
    currently)
  * Bug fixes:
  - Properly enabled `--validate-ids` and `--validate-images`
    validation options
  - For consistency/compatibility, output PDFNAME deprecation
    message to stderr
  - In AsciiDoc postprocess stylesheet, fixed handling of
    subtitles
  - Removed remaining references to Ghostscript (#614)
  * Removed features:
  - Remove `html --jsp` target that was unused for years (#609)
  - Removed the `online-docs` target and associated DocBook 5-to-4
    conversion stylesheets (#610)
  - Removed code to query SVN properties that was unused for years
    (#611)</changelog>
  <changelog author="sknorr@suse.com" date="1644235200">- Stable release DAPS 3.3.0:
  * New features:
  - DocBook table validation is now enabled by default as part of
    validation and building (#532)
  - Improved validation to always check XML validity, tables,
    images, and IDs, rather than stopping after the first issue
    occurs
  - Set up Poppins font in FOP config delivered with DAPS
  * Bug fixes:
  - Fixed validation failures occurring because `--verbose` was set
  - Fixed xml-wellformedness check to use a non-zero exit code
    when entity definitions are missing (#539)
  - Improved image check during validation to check within context
    of entire set, not just current root ID (#627)
  - Fixed output of missing/duplicated image list displayed during
    build (#634)
  - Fixed paths to entity files in `unpack-locdrop`
  - Fixed output of `daps -v` when there is no XSL-FO formatter
    installed (#622)
  - Fixed `daps spellcheck --help` output
  - Improved messages for `unpack-locdrop` and other subcommands
  * Removed features:
  - Removed unused `process-xrefs` and `checkconformance`
    stylesheets (#612)
  * Repository changes:
  - Integrated Python tooling and tests for `xml-wellformed` and
    `getentityname`</changelog>
  <changelog author="sknorr@suse.com" date="1644840000">- Stable release DAPS 3.3.1:
  * Bug fixes:
  - Added `--not-validate-tables` parameter that disables extended
    table validation to additional targets</changelog>
</package>
<package pkgid="8e3ed3e1d603f65b574569dbe73dae169a7c3f1c896d47f6084ba9456678cd30" name="daps" arch="src">
  <version epoch="0" ver="3.3.1" rel="150300.14.3.2"/>
  <changelog author="fsundermeyer@opensuse.org" date="1465992000">Stable release DAPS 2.2.0:
  * New Features:
  - new subcommand "xmlformat" prettyfies the XML sources of a
    given DC-file or ROOTID using daps-xmlformat with
    /etc/daps/docbook-xmlformat.conf.
    (Note: this command will modify the original XML sources!)
  - SVG image support for HTML builds. To use it, make sure to
    provide the images in SVG format ad reference to them as follows:
    &lt;imageobject role="html"&gt;
    &lt;imagedata fileref="&lt;SVG-FILE&gt;" format="SVG"/&gt;
    &lt;/imageobject&gt;
  - the new global switch --jobs lets you specify how many parallel
    jobs to use. The default is set to the number of CPU cores (as was
    done in previous versions).
  - all commands generating file lists (e.g. "list-srcfiles") now
    generate human readable output on STDOUT. When the output goes
    to a pipe or subshell, it will be generated as a a one-liner.
  - Debugging of XML errors has been made easier. Sometimes the error
    message of the validator only points to an xi:include line, making
    it impossible to find the real location of the error. The option
  - -novalid for the target "bigfile" will create the bigfile
    without performing a validation check on the sources. A single XML
    will be built and validated. Now the error message points to the
    exact location of the error in the bigfile. From there it should be
    easy to find the error in the original sources.
  - Verbose and debugging output now also show all profiling
    attributes set in the DC-file, plus version information for
    the sytlesheets (if available)
  - added the option --norefchecks to all output-generating targets
    ("html", "pdf", ...), "validate", "bigfile" and others. Allows
    to build/validate documents without checking internal links
    (&lt;... linkend="&lt;ID&gt;"&gt;).
  - subcommand "online-docs" now always converts the bigfile that is
    created to NovDoc. To keep the same format as the original
    sources, specify --dbnoconv. To create a DocBook4 bigfile from
    DocBook5 sources, specify --db5todb4.
  * Bugfixes:
  - #368: db4tonovdoc.xsl generates invalid NovDoc
  - #367: daps does not validate fop output
  - #366: Spellcheck trying to check the files "Cannot", "stat:", "No",
    "such", "file" ...
  - #364: DocBook5: Allow validating without checking xrefs
  - #363: Allow building a bigfile from invalid sources
  - #362: Make the number of parallel jobs configurable
  - #361: Externel xrefs are resolved to "????"
  - #360: Check Rootid fails on Debian 8.4.0
  - #356: file list output should default to pretty format
  - #354: Validate the result of online docs when it has been
    converted from DB5 to DB4 or novdoc
  - #353: Make db5 to db4 conversion default for online-docs
  - #351, #348, #342, #282: Fixes for the daps spec-file
  - #346: daps-xmlformat writes its messages into the output
  - #343: daps-init warning messages
  - #340: ePUB builds always show remarks
  - #335: on Debian, make install creates incorrect group in
    /etc/xml/config
  - #330: Enable SVG2Grayscale stylesheet to handle new color
    names
  - #305: locdrop produces no "non-trans" image tarball for a
    complete set
  - #301: SVG to PNG conversion creates very large PNGs
  - #289: Verbose / Debugging Output Should Show Profiling
    Attributes
  - #251: Write XSLT to Return xml-model PI
  - #226: Let stylesheets know which version of DAPS calls them
  - subcommand "clean-all" fails if run from within a directory
    that will be removed with that command
  - daps fails when called from a directory that no longer exists
  * Cross-Distribution Support
  - first release with full Debian/Ubuntu support--manual
    adjustments after the installation are no longer needed
    (was required in previous releases for DocBook5 support).
    Many thanks to Tomá? Ba?ant and Christoph Berg for their help!
  - GitHub checkouts now also work for Fedora/RedHat and
    Debian/Ubuntu--refer to
    https://github.com/openSUSE/daps/blob/develop/INSTALL.adoc
    for details
  - tested on Debian 8.5.0 / Fedora 23 / openSUSE 13.2 and
    Leap 42.1 / SUSE Linux Enterprise 12 / Ubuntu 16.0
  * Misc:
  - removed "daps-envconvert", a script for converting susedoc
    ENV-files to DAPS DC-files. susedoc was the predecessor of
    DAPS.
  * Documentation:
  - the documentation has _not_ been updated for this release, so
    new features mentioned above are not yet covered</changelog>
  <changelog author="fsundermeyer@opensuse.org" date="1470312000">Stable release DAPS 2.3.0:
  Just to please the SLES submission bot: bsc#992546
  * New Features:
  - Config File Parser:
    Up to now, config files (DC-files, /tec/daps/config and
    ~/.config/daps/dapsrc) have been sourced. This has been a major
    security issue, since every shell code gets executed when a file
    is being sourced. DAPS 2.3.0 now comes with a parser that fixes
    this security hole. Apart from one exception (see below) existing
    config files do _not_ need to be changed. However, the parser
    offers more flexibility, see
    https://github.com/openSUSE/daps/blob/develop/etc/config.in
    for documentation (the manuals has not been upfdated, yet).
    The only exception that requires changes in the config file is
    something like FOO="$FOO bar" To concatenate values, use "+="
    now. See the following commit for an example:
    https://github.com/openSUSE/daps/commit/7a2ce04
  - Bash Completion:
    TAB-completion for DAPS has been one of the very first feature
    requests we opened (almost five years ago). Now we finally
    managed to conquer the black Bash magic required to get it!
  - Automatically detect the DocBook 5 version: If you have
    DocBook 5.1 installed, docbookxi.rng from 5.1 will
    automatically be used as the validating schema for DocBook 5
    documents. If you rather want to use the 5.0 schema
    or a custom schema, set DOCBOOK5_RNG_URI accordingly in
    /etc/daps/config (for a system wide configuration), in
    $HOME/.config/daps/dapsrc (for a user specific configuration),
    or in the DC-file (for a document-specific configuration)
  * Bugfixes:
  - subcommand "locdrop" failed when the book did not include
    images
  - spellcheck now ignores text in &lt;replaceable&gt; tags
  - obsolete daps-susespell has been removed (replaced by
    daps ... spellcheck long ago)
  - paths starting with "~" were not always correctly resolved
  - several fixes for ePUB, among them a fix that now correctly
    chooses mediaobject entries with role="html" rather than
    choosing the first one listed ion the XML source
  - #10 : Generate TAB completion
  - #359: Drop bash 3 suppor
  - #369: Code review: Check Variable Assignments
  - #375: Issues with the xmlformat target</changelog>
  <changelog author="fs@suse.com" date="1470744000">- Increased the Java Stacksize for jing to 4096k since otherwise
  building manuals on s390x is failing, see bsc#992755</changelog>
  <changelog author="sknorr@suse.com" date="1475668800">- Try to fix broken link
- Remove SVN fetch source script</changelog>
  <changelog author="fsundermeyer@opensuse.org" date="1496145600">Stable release DAPS 2.4.0:
  * New Features:
  - added a dependency checker for DAPS (/usr/bin/daps-check-deps)
    that makes it easy to check for missing programs/packages
  - added a "--lean" parameter to PDF generation for creating PDFs
    with a reduced file size (by reducing the quality of included
    images); useful for sharing PDFs via e-mail
  - added a srylesheet for returning all IDs from an XML file
    (daps-xslt/common/get-all-xmlids.xsl)
  * Bugfixes:
  - #408: The list-file-* commands now work with ROOTIDs from all
  possible elements
  - #390: When an ID appears twice in the XML and this ID is used
  with --rootid, DAPS's error message is unhelpful
  - #365: Improved error messages on "File not found" errors
    (now tells whether the path was provided by command-line
  or config file)
  - #371: Make path to the xmlformat config file configurable
  - #372: Adjusted debian dependency list
  - #373: Check unpack-locdrop
  - #379: Output error of list-images-multisrc with
    pretty | wc option
  - #380: Proper error messages when binaries/packages are missing
  - #392: daps-xmlformat writes name of config file into output
  - SVGs were not included in ePUBs
    (https://bugzilla.suse.com/show_bug.cgi?id=1006204)
  - Setting a default value for db5_version in configure.ac
    otherwise the DB5 URN in etc/config will be set to an invalid
    value if DB5 is not installed when running make
  - fixed a few minor issues with the config file parser that was
    introduced with 2.3.0 (among them #387)
  - Increased Java stacksize for jing
  - Improved the DocBook5 -&gt; DocBook 4 (-&gt; NovDoc) conversion
  - compatibility: Debian's version of "which" does not support
    long parameters
  * Documentation:
  - Various updates to reflect changes in the code
  - #345: added documentatioon for the xmlformat subcommand
  - #362: added documentation for the --jobs option
  - #363: added documentation about building a bigfile from
    invalid sources
  - #364: added documentation for the --norefchecks option
  - #403: improved documentation about stylesheet customizing
    (also see #407)
  - #404: clarify doc about listing unused images
  - completely revised the doc (spelling, language and grammar)
  - doc is not yet 100% on par with the code, but we are getting
    closer
  * Compatibility:
  - successfully tested DAPS on Linux Mint 18.1</changelog>
  <changelog author="fsundermeyer@opensuse.org" date="1497441600">Hotfix for 2.4.0:
- fixed fatal typo in lib/daps-functions
- fixed spelling/grammar issues in error messages
  Changelog:
- merged SLE 12 and Factory Changelogs
- remove daps-dont-complain-about-deprecated-option.patch</changelog>
  <changelog author="fsundermeyer@opensuse.org" date="1497960000">- another try to get the Changelogs for openSUSE and SLES aligned
  (no code changes)</changelog>
  <changelog author="rick.salevsky@suse.com" date="1539950400">Stable release DAPS 3.0.0:
  * New Features:
  - added full support for Python3
  - added SVG support for online-docs
  - added support to build AsciiDoc documentation
  - integrated hunspell and make aspell optional
  - implement file not found for XIncludes
  * Bugfixes:
  - #419: HTML and PDF builds need different paths for Admonition
  and Callout Images
  - #322: Add --xmlonly / --imgonly switches to list-srcfiles
  - #416: DAPS Won't Built With UTF-8 Characters in XML Filenames
  - #397: Spaces in path problem
  - #469: RPMLINT complains about permissions of XSLT stylesheet
  - #464: xmlformat incorrectly formats variablelist terms
  - #466: Build issues
  - #475: Tab completion creates error
  - PDF fails when static links in build/.tmp already exist
  * Documentation:
  - Various updates to reflect changes in the code
  - Improve help text for daps-xslt</changelog>
  <changelog author="sknorr@suse.com" date="1540296000">- Workaround to make it possible to build things</changelog>
  <changelog author="fsundermeyer@opensuse.org" date="1541678400">Public/final release DAPS 3.0.0
  * New Features:
  - added support for ASCIIDOC sources
  - added support for LibreOffice Draw images (*.odg)
  - added support for specifying a config file on the command line
    (with --config)
  - added SVG support for HTML builds
  - integrated hunspell and make aspell optional
  - initial well-formedness check ignores duplicated IDs (this
    allows to have identical IDs in parts that get profiled)
  - initial well-formedness warns about missing xi:include files
  - daps-autobuild now supports building single books (via the
  - -dcfiles option)
  - DAPS prgram name and version are passed to stylesheets with
    xslt parameters "converter.name" and "converter.version"
  - implement file not found for XIncludes
  - FOP and XEP version numbers are shown in debug/verbose output
  - various improvements for the DocBook to NovDoc conversion
  - split lib/daps_functions into several files to improve speed
    and maintainability
  * Bugfixes:
  - #476: DAPS generates ODG-&gt;SVG files into images/src
  - #475: Tab completion creates error
  - #474: Potentially wrong variable assignment
  - #437: lodraw tries to convert empty SVG
  - #469: RPMLINT complains about permissions of XSLT stylesheet
  - #468: xmlwellformed script creates RPMLINT warning
  - #466: Build issues with daps-xmlwellformed
  - #464: xmlformat incorrectly formats variablelist terms
  - #462: Implement file not found for XIncludes
  - #459: By default, use the xep-daps.xml configuration from
    stylesheets
  - #457: Ship the asciidoc postprocessing stylesheet
  - #455: Transform glosslist into variablelist (NovDoc conversion)
  - #453: Cleanup stylesheet for results from ASCIIDoctor
  - #452: Make it possible to specify the ASCIIDOC doc type
  - #439: Make xmlformat more verbose in debug mode
  - #435: require java-devel &gt;= 1.8.0
  - #425: Well-formedness check fails with double occurrences
    of xml:ids
  - #424: Fix XML catalog generation
  - #422: Integrate hunspell and make aspell optional
  - #421: Show FOP and XEP version in debug/verbose output
  - #419: HTML and PDF builds need different paths for Admonition
    and Callout Images
  - #416: DAPS Won't Built With UTF-8 Characters in XML Filenames
  - #415: Add support for LibreOffice Draw files
  - #397: Spaces in path problem
  - #322: Add documentation for  --xmlonly / --imgonly switches
    for the list-srcfiles subcommand
  - #226: Let stylesheets know which version of DAPS calls them
  - #119: daps-init: also include example for set
  - show a warning when an existing PDF has a size of 0 bytes
    (usually the result of a failed FOP build)
  - PDF fails when static links in build/.tmp already exist
  - fixed DocBook identifiers in configure.ac
  - made unpack-lopcdrop more robust against non-critical issues;
    improved its debugging output
  * Documentation:
  - new guide: ASCIIDOC Quick Start
  - Various updates to reflect changes in the code
  - Improve help text for daps-xslt
  - Improve error message for IDs defined multiple times
  * Removed support for:
  - sourcing DC-files
  - help texts for deprecated daps 1.x commands
  * Misc:
  - converted Python scripts to Python 3; changed build
    dependencies to python3</changelog>
  <changelog author="fsundermeyer@opensuse.org" date="1542801600">-  Only recommend libreoffice-draw on aarch64 %{ix86} x86_64</changelog>
  <changelog author="fsundermeyer@opensuse.org" date="1543838400">- Updated license statement in spec file to SPDX 3.3 notation</changelog>
  <changelog author="fstrba@suse.com" date="1578312000">- Do not depend on xml-commons-jaxp-1.3-apis, but on generic
  xml-apis provider</changelog>
  <changelog author="dimstar@opensuse.org" date="1585828800">- Add daps-gnu-make-4.3.patch: Fix compatibility with GNU Make 4.3.</changelog>
  <changelog author="sknorr@suse.com" date="1620734400">- Stable release DAPS 3.1.0:
  * New features:
  - Allow converting AsciiDoc books with multiple parts into a
    DocBook set (`--adocset`/`ADOC_SET="yes"`)
  - Remove `dm:docmanager` during `unpack-lockdrop` when
    `--remove-dm` is used
  - Added support for DITAA diagrams as an image format (must be
    added as an external file) (#540)
  - Allow using `{daps-adoc-attribute}` from AsciiDoc sources to
    add a list of all AsciiDoc attributes used by DAPS to the
    output (#573)
  - Added `daps validate` options  `--validate-ids` (checks
    whether IDs match a basic SEO-compatible set of characters) and
    `--validate-images` (checks for missing and duplicated images)
  - Renamed `daps checklink` to `daps linkcheck` for consistency
    with `daps spellcheck` and `daps stylecheck`
  - Renamed `PDFNAME` to `OUTPUTNAME` DC file option to clarify
    its purpose
  * Removed features:
  - Removed support for the Xfig (`.fig`), PDF, and EPS image
    formats
  - Removed support for the `asciidoc` tool, DAPS now only supports
    AsciiDoctor
  - Removed support for `--xsltparam` which has been replaced by
    `--stringparam`
  - Removed `--css=none` option of `daps epub`
  - Removed `daps-auto.pl` which has been replaced by
    `daps-autobuild`
  - Removed all support for Python 2 dependencies
  * Bug fixes:
  - When AsciiDoctor outputs a warning, DAPS will now fail,
    avoiding XML issues that would crop up later (this only works
    if AsciiDoctor &gt;= 1.5.7 is used)
  - Find unresolvable AsciiDoc attribute references (such as
    `{reference}`) and error out rather than adding them to the
    output
  - When converting AsciiDoc, always unset the `imagesdir`
    attribute, so DAPS can mandate its own `images` directory
  - On successive DAPS runs, always convert AsciiDoc files to XML
    again
  - Improved default IDs generated by AsciiDoctor, to avoid leading
    underscores in IDs (#520)
  - Improved AsciiDoc `postprocess.xsl` clean-up stylesheet:
  - Rewrite `@contentwidth` to `@width`
  - Improved display of article titles
  - Fixed validation of generated abstract elements
  - Improved workarounds for `authorinitials`, `othername`,
    `lineage`
  - Output AsciiDoc `&lt;&lt;reference, title&gt;&gt;` construct as
    `title (&lt;xref linkend="reference"/&gt;)` (same for links)
  - Improved handling of slightly misused AsciiDoc block/
    example syntax that was previously converted to
    GeekoDoc-incompatible `formalpara` elements
  - Fixed updating of profiled files when an entity or the DC
    file of the source has changed
  - Only use AsciiDoctor's `--failure-level` if the version of
    AsciiDoctor is new enough to support it
  - Allowed use of AsciiDoc attributes defined on command line
    and in DC file at the same time
  - Made DAPS's default set of AsciiDoc attributes overridable
  - Internally handle `--param` the same as `--stringparam` (#589)
  - Made sure that both `index.html` and `[ROOTID].html` are
    generated during HTML builds
  - Reworked `getentityname.py` (#556)
  - Restored compatibility with Novdoc profiling stylesheet
    references
  - Avoid stumbling over empty hrefs in XIncludes during validation
  - Fixed issue where DC file parser would concatenate rather
    than overwrite values
  - Fixed issue where DC file parser would not correctly recognize
    last line of a DC file if it did not end in a newline character
    (#553)
  - Fixed issue where default entities like `&amp;mdash;` could not
    be found
  - Fixed `unpack-locdrop` runs that failed because file lists
    contained spaces rather than line breaks
  - Use `PROFOS` value during `locdrop`
  - Fixed `daps html --nostatic` build failure resulting from
    identical files error
  - Fixed GNU Make 4.3 `+=` operator compatibility
  - Added compatibility with Inkscape 1.0 command-line options
  - Set initial memory for FOP
  - Fixed path to Avalon Framework (bsc#1175214)
  - Fixed LibreOffice Draw executable name for Debian (#564)
  - Improved error message when MAIN file is missing (#494)
  - Improved error message displayed when ROOTID does not exist in
    the document (#546)
  - Show FOP warnings when running with `-vv` or higher verbosity
  - Suppressed error messages about missing `xml:base` during
    `daps linkcheck` (#558)
  - Improved message output of `daps-xmlwellformed`
  - Improved Git updating flow in `daps-autobuild`
  * Documentation:
  - Added man pages for `daps-xmlformat` and `daps-check-deps`
    (#491)
  - Added documentation for generating a DocBook set from an
    AsciiDoc book
  - Fixed typos and other minor issues throughout the documentation
  * Packaging changes:
  - Cleaned up TAR archives generated by GitHub (#489)
  - Do not make libexec XSL files executable (#492)</changelog>
  <changelog author="sknorr@suse.com" date="1620820800">- Stable release DAPS 3.1.1:
  * Bug fixes:
  - Removed error messages that appeared during command-line
    completion
  * Packaging changes:
  - Updated Spec file from OBS repo</changelog>
  <changelog author="sknorr@suse.com" date="1621598400">- Stable release DAPS 3.1.2:
  * Bug fixes:
  - Fixed issue where irrelevant XIncludes would cause validation
    errors (#617)
  * Documentation:
  - Updated installation documentation</changelog>
  <changelog author="sknorr@suse.com" date="1623326400">- Stable release DAPS 3.2.0:
  * New features:
  - Added config file compatible with xmlformat 1.9 (for the
    xmlformat version from github.com/someth2say/xmlformat)
  - Added DocBook table validation script (must be run manually
    currently)
  * Bug fixes:
  - Properly enabled `--validate-ids` and `--validate-images`
    validation options
  - For consistency/compatibility, output PDFNAME deprecation
    message to stderr
  - In AsciiDoc postprocess stylesheet, fixed handling of
    subtitles
  - Removed remaining references to Ghostscript (#614)
  * Removed features:
  - Remove `html --jsp` target that was unused for years (#609)
  - Removed the `online-docs` target and associated DocBook 5-to-4
    conversion stylesheets (#610)
  - Removed code to query SVN properties that was unused for years
    (#611)</changelog>
  <changelog author="sknorr@suse.com" date="1644235200">- Stable release DAPS 3.3.0:
  * New features:
  - DocBook table validation is now enabled by default as part of
    validation and building (#532)
  - Improved validation to always check XML validity, tables,
    images, and IDs, rather than stopping after the first issue
    occurs
  - Set up Poppins font in FOP config delivered with DAPS
  * Bug fixes:
  - Fixed validation failures occurring because `--verbose` was set
  - Fixed xml-wellformedness check to use a non-zero exit code
    when entity definitions are missing (#539)
  - Improved image check during validation to check within context
    of entire set, not just current root ID (#627)
  - Fixed output of missing/duplicated image list displayed during
    build (#634)
  - Fixed paths to entity files in `unpack-locdrop`
  - Fixed output of `daps -v` when there is no XSL-FO formatter
    installed (#622)
  - Fixed `daps spellcheck --help` output
  - Improved messages for `unpack-locdrop` and other subcommands
  * Removed features:
  - Removed unused `process-xrefs` and `checkconformance`
    stylesheets (#612)
  * Repository changes:
  - Integrated Python tooling and tests for `xml-wellformed` and
    `getentityname`</changelog>
  <changelog author="sknorr@suse.com" date="1644840000">- Stable release DAPS 3.3.1:
  * Bug fixes:
  - Added `--not-validate-tables` parameter that disables extended
    table validation to additional targets</changelog>
</package>
<package pkgid="f7bcb3007767d3ec8daa7cabb583db5cd97f765f7e1892f87802127908834153" name="dhcp" arch="aarch64">
  <version epoch="0" ver="4.3.6.P1" rel="150000.6.14.1"/>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
</package>
<package pkgid="f6470eeb3982035103330ef4e6aae9cb373c3d35a12d3418a4559aab644cd723" name="dhcp" arch="ppc64le">
  <version epoch="0" ver="4.3.6.P1" rel="150000.6.14.1"/>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
</package>
<package pkgid="df708e0c04e97e258ac1061a4c13429ba197ec4e1bbb0fba5ac075863c6638b5" name="dhcp" arch="s390x">
  <version epoch="0" ver="4.3.6.P1" rel="150000.6.14.1"/>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
</package>
<package pkgid="2360897a910b89fb50e94d22fdda431349ba9b0374415af092f83f16cf640a56" name="dhcp" arch="src">
  <version epoch="0" ver="4.3.6.P1" rel="150000.6.14.1"/>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
</package>
<package pkgid="d19ee6335212cfaba041e4c604c09feaa46225a23641376319d243a5363e6618" name="dhcp" arch="x86_64">
  <version epoch="0" ver="4.3.6.P1" rel="150000.6.14.1"/>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
</package>
<package pkgid="f9d88bd5b773e8b624139912e5005ca2c2bee259be07e81c586e3281b96f6de8" name="dhcp-client" arch="aarch64">
  <version epoch="0" ver="4.3.6.P1" rel="150000.6.14.1"/>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
</package>
<package pkgid="e9639eacdd2d081929b3eaf3052efb9e65b1809a5fc4af12af77b5cb8749fc9c" name="dhcp-client" arch="ppc64le">
  <version epoch="0" ver="4.3.6.P1" rel="150000.6.14.1"/>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
</package>
<package pkgid="307df3980ce89ba2db9a6771420d04eae84bf1ded5a9a6c2acb49dc5049c0319" name="dhcp-client" arch="s390x">
  <version epoch="0" ver="4.3.6.P1" rel="150000.6.14.1"/>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
</package>
<package pkgid="8841cd4c0d5ddee1cd52ae528c48acd47cde11424b2893fc35bf343f7b3feed8" name="dhcp-client" arch="x86_64">
  <version epoch="0" ver="4.3.6.P1" rel="150000.6.14.1"/>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
</package>
<package pkgid="987ecbf5bee6c885bf5a1ab3080afa03a05729079aa998a307bdb20ba4200e6d" name="dhcp-devel" arch="aarch64">
  <version epoch="0" ver="4.3.6.P1" rel="150000.6.14.1"/>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
</package>
<package pkgid="f66295d59808df923071e169ae0c71df2794f613d4c737c6a33e9fcd2116c21c" name="dhcp-devel" arch="ppc64le">
  <version epoch="0" ver="4.3.6.P1" rel="150000.6.14.1"/>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
</package>
<package pkgid="21773186d25de41f10d556e3d8939615877361a41b8e0e82ee122dd4a5053727" name="dhcp-devel" arch="s390x">
  <version epoch="0" ver="4.3.6.P1" rel="150000.6.14.1"/>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
</package>
<package pkgid="475819e859b87e45283b58b8c82f1362fac084e7410c4d7fab0598f0f2c1d0d0" name="dhcp-devel" arch="x86_64">
  <version epoch="0" ver="4.3.6.P1" rel="150000.6.14.1"/>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
</package>
<package pkgid="1e61852618b226ed083ea8d56e3993416fbe9b0d211015f9b0acef0e6bc8f668" name="dhcp-doc" arch="aarch64">
  <version epoch="0" ver="4.3.6.P1" rel="150000.6.14.1"/>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
</package>
<package pkgid="23090b53574954e6bea87cf25b543068b732ff8adb753720583df49b16a4f18e" name="dhcp-doc" arch="ppc64le">
  <version epoch="0" ver="4.3.6.P1" rel="150000.6.14.1"/>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
</package>
<package pkgid="e478dcfff0ba954c9f8d8e29f61e96e2b75c3508f2ce4bead31e12ecfda9b0b1" name="dhcp-doc" arch="s390x">
  <version epoch="0" ver="4.3.6.P1" rel="150000.6.14.1"/>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
</package>
<package pkgid="8677a94192ee6161160f50f1cb4024fc1bed1fa131cb25974815cfc4f6319543" name="dhcp-doc" arch="x86_64">
  <version epoch="0" ver="4.3.6.P1" rel="150000.6.14.1"/>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
</package>
<package pkgid="896e6cd0017d2135e82ac06bf54ae3fa714cfa55683df7daa92f76972a19513d" name="dhcp-relay" arch="aarch64">
  <version epoch="0" ver="4.3.6.P1" rel="150000.6.14.1"/>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
</package>
<package pkgid="44cfedead414dc80c36fca11dd168a34cb8cbdbbde715066843289809eec9100" name="dhcp-relay" arch="ppc64le">
  <version epoch="0" ver="4.3.6.P1" rel="150000.6.14.1"/>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
</package>
<package pkgid="b0c47881fd16f544dca95600babb385d30da02d558579b9b1470195d6887a528" name="dhcp-relay" arch="s390x">
  <version epoch="0" ver="4.3.6.P1" rel="150000.6.14.1"/>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
</package>
<package pkgid="17f04a69c13e3861ced8cbde6e86b83ece9a1c061dfafbd0fbe6a753a1707036" name="dhcp-relay" arch="x86_64">
  <version epoch="0" ver="4.3.6.P1" rel="150000.6.14.1"/>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
</package>
<package pkgid="322b3f99face613d582b002ee11715bdf5518521c99267d73243330ffc8b2784" name="dhcp-server" arch="aarch64">
  <version epoch="0" ver="4.3.6.P1" rel="150000.6.14.1"/>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
</package>
<package pkgid="630a93b1cdcd3f57c1a095ea0104afb774901aedb796b07fa119190c39299876" name="dhcp-server" arch="ppc64le">
  <version epoch="0" ver="4.3.6.P1" rel="150000.6.14.1"/>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
</package>
<package pkgid="d6fabe73d72e67cb598adae410aeccfdf354b08c6a3b90a7fb18943d5f621d70" name="dhcp-server" arch="s390x">
  <version epoch="0" ver="4.3.6.P1" rel="150000.6.14.1"/>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
</package>
<package pkgid="c9bd63ff26640fc7e3a6c33bd81eaab088047d1b08df4cfbc4166e6da8cbdf13" name="dhcp-server" arch="x86_64">
  <version epoch="0" ver="4.3.6.P1" rel="150000.6.14.1"/>
  <changelog author="mchandras@suse.de" date="1463659200">- Use /usr/sbin/arping instead of /sbin/arping in the dhcp scripts.
  /sbin/arping is a symlink to /usr/sbin/arping in order to ease the
  transition for the /usr merge. Newest releases of iputils may only
  install utilities in /usr/* so this dependency will no longer be valid.
  Moreover, we replace the '/sbin/arping' dependency with 'iputils'.</changelog>
  <changelog author="ralf.habacker@freenet.de" date="1470312000">- Add config file for registering dhcp server in slp (bsc#992072)</changelog>
  <changelog author="kukuk@suse.de" date="1486728000">- Require insserv only if needed
- Fix requires of client subpackage</changelog>
  <changelog author="ndas@suse.de" date="1489406400">- Relax permission of dhclient-script for libguestfs(bsc#987170)</changelog>
  <changelog author="zaitor@opensuse.org" date="1499083200">- Set all requested dhcp options on a single line, so they are
  actually requested (boo#1046969, boo#1047004).</changelog>
  <changelog author="ndas@suse.de" date="1499342400">- fixed a typo in nis-servers option name breaking the config file introduced
  in previous change to workaround issues in NetworkManager parser.
- Update to dhcp-4.3.5
  - Corrected a bug which could cause the server to sporadically crash while
    loading lease files with the lease-id-format is set to "hex".  Our thanks
    to Jay Ford, University of Iowa for reporting the issue.
    [ISC-Bugs #43185]
  - Eliminated a noisy, but otherwise harmless debug log statment that may
    appear during server startup when building with --enable-binary-leases
    and configuring multiple pools in a shared network.  Thanks to Fernando
    Soto from BlueCat Networks for reporting the issue and supplying a patch.
    [ISC-Bugs #43262]
  - Fixed util/bindvar.sh error handling.
    [ISC-Bugs #41973]
  - Correct error message in relay to use remote id length instead
    of circuit id length.
    [ISC-Bugs #42556]
  - Add logic to test directory Makefiles to avoid copying Attfile(s)
    when building within the source tree.  This eliminates a noisy but
    otherwise harmless error message when running "make check".
    [ISC-Bugs #41883]
  - Leases are now scrubbed of certain prior use information when pool
    re-balancing reassigns them from one FO peer to the other.  This
    corrects an issue where leases that were offered but not used
    by the client retained the client hostname from the original
    client. Thanks to Pavel Polacek, Jan Evangelista Purkyne University
    for reporting the issue.
    [ISC-Bugs #42008]
  - In the LDAP code and schema add some missing '6' characters to use
    the v6 instead of the v4 versions.  Thanks to Denis Taranushin for
    reporting this issue and supplying its patch.
    [ISC-Bugs #42666]
  - Correct how the pick-first-value expression is written to a lease
    file.  Previously it was written as a concat expression due to
    a cut and paste error.
    [ISC-Bugs #42253]
  - Modify the DDNS code to clean up the PTR record even if there
    are issues while cleaning up the A or AAAA records.
    [ISC-Bugs #23954]
  - Added global configuration parameter, abandon-lease-time, which determines
    the amount of time a lease remains abandoned.  The default is 84600 seconds.
    Additionaly, the server now conducts a ping check (if ping checks are
    enabled) prior to offering an abandoned lease to client.  Our thanks to
    David Zych at University of Illinois for reporting the issue and working
    with us to produce a viable solution.
    [ISC-Bugs #41815]
  - Correct handling of interface names during interface discovery. This
    addresses an issue where interface names of 15 characters in length
    could lead to crashes or interface recognition errors during startup
    of dhcpd, dhclient, and dhcrelay.
    [ISC-Bugs #42226]
  - Updates to contrib/dhcp-lease-list.pl to make it more friendly.
    The updates are: looking for the lease file in more places and skipping
    the "processing complete" output when creating machine readable
    output.  Thanks to Cameron Paine (cbp at null dot net) for the
    patch.
    [ISC-Bugs #42113]
  - When reusing a lease for dhcp-cache-threshold return the hostname
    to the original lease.  Also if the host pointer, UID or hardware address
    change don't allow reuse of the lease.
    Thanks to Michael Vincent for reporting this and helping us
    verify the problem and fix.
    [ISC-Bugs #42849]
  - Change dmalloc to use a size_t as the length argument to bring it
    in line with the call it will make to malloc().
    [ISC-Bugs #40843]
  - If the failover socket can't be bound, close it.  Otherwise if the
    user configures an incorrect address in the failover stanza the
    server will continue to open new sockets every 90 seconds until
    it runs out.
    [ISC-Bugs #42452]
  - Add DHCPv4-mode, dhcrelay command line options, "-iu" and "-id", that
    allow interfaces to be upstream or downstream respectively.  Upstream
    interfaces will accept and forward only BOOTP replies, while downstream
    interfaces will accept and forward only BOOTP requests.
    [ISC-Bugs #41547]
  - Clean up some memory references in the vendor-class construct.
    [ISC-Bugs #42984]
    [*0006-dhcp-4.3.2-dhclient-send-hostname-or-fqdn.patch,
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch,
  * 0013-dhcp-4.2.x-dhcpv6-decline-on-DAD-failure.872609.patch,
  * 0016-infiniband-support.patch,
  * 0017-server-no-success-report-before-send.919959.patch]</changelog>
  <changelog author="bwiedemann@suse.com" date="1499947200">- use .gz year instead of current one to make build reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1500033600">- Replace net-tools Requires in dhcp-client with hostname on
  suse_version &gt;= 1330 (CODE15): net-tools does no longer provide
  any tool referenced by dhclient-script, but we require hostname
  (which is also a dependency to net-tools, thus hiding the issue).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1513166400">- Drop old sysvinit support from the spec file. All the supported
  openSUSE distributions are systemd based so there isn't much point
  in keeping sysvinit support and files around.</changelog>
  <changelog author="obs@botter.cc" date="1515153600">- add PIDFile= setting to dhcrelay.service, without this systemd
  stops the service immediately after starting</changelog>
  <changelog author="ndas@suse.de" date="1516104000">- Plugs a socket descriptor leak in OMAPI(bsc#1076119, CVE-2017-3144)
  [ +0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch]</changelog>
  <changelog author="ndas@suse.de" date="1516363200">- Optimized if and when DNS client context and ports
  are initted (bsc#1073935)
  [+0022-Optimized-if-and-when-DNS-client-context-and-ports.patch]</changelog>
  <changelog author="max@suse.com" date="1520510400">- Update to dhcp-4.3.6-P1:
  * CVE-2018-5733, bsc#1083303: reference count overflow in dhcpd.
  * CVE-2018-5732, bsc#1083302: buffer overflow bug in dhclient.
  * Plugged a socket descriptor leak in OMAPI
  * The server now allows the client identifier (option 61) to own
    leases in more than one subnet concurrently [ISC-Bugs #41358].
  * When replying to a DHCPINFORM, the server will now include
    options specified at the pool scope, provided the ciaddr field
    of the DHCPINFORM is populated.
    [ISC-Bugs #43219] [ISC-Bugs #45051].
  * When memory allocation fails in a repeated way the process
    writes "Run out of memory." on the standard error and exists
    with status 1  [ISC-Bugs #32744].
  * The new lmdb (Lightning Memory DataBase) bind9 configure
    option is now disabled by default to avoid the presence of
    this library to be detected which can lead to a link failure.
    [ISC-Bugs #45069]
  * The linux interface discovery code has been modified to use
    getifaddrs() as is done for BSD and OS-X.
    [ISC-Bugs #28761] and others.
  * Fixed a bug in OMAPI that causes omshell to crash when a
    name-value pair with a zero length value is shipped in an
    object [ISC-Bugs #29108].
  * On 64-bit platforms, dhclient now generates the correct value
    for the script environment variable, "expiry", the lease
    expiry value exceeds 0x7FFFFFFF [ISC-Bugs #43326].
  * Common timer logic was modified to cap the maximum timeout
    values at 0x7FFFFFFF - 1 [ISC-Bugs #28038].
  * DHCP6 FQDN option unpacking code now correctly handles values
    that contain spaces, special, or non-printable characters.
    [ISC-Bugs #43592]
  * When running in -6 mode, dhclient can enforce the require
    option statement and will discard offered leases that do not
    contain all the required options specified in the client
    configuration [ISC-Bugs #41473].
  * Altered DHCPv4 lease time calculation to avoid roll over
    errors on 64-bit OS systems when using -1 or large values
    for default-lease-time [ISC-Bugs #41976],
  * Added --dad-wait-time parameter to dhclient [ISC-Bugs #36169].
  * The server nows checks both the address and length of a
    prefix delegation when attempting to match it to a prefix
    pool [ISC-Bugs #35378].
  * Modified DDNS support initialization such that DNS related
    ports will only be opened by the server (dhcpd) at startup
    if ddns-update-style is not "none"; by dhclient only if and
    when the it first attempts an update; and never by dhcrelay.
    [ISC-Bugs #45290] [ISC-Bugs #33377]
  * Added error logging to two memory allocation failure checks.
    [ISC-Bugs #41185]
  * Corrected a dhclient -6 issue that caused the client to crash
    with an "Impossible condition" error after de-preferencing its
    only IA binding [ISC-Bugs #44373].
  * By defining CALL_SCRIPT_ON_ONETRY_FAIL in includes/site.h,
    dhclient will now call the script with reason set to FAIL when
    run with -1 (one try) and there are no server responses.
    [ISC-bugs #18183]
  * The server now detects failover peers that are not referenced
    in at least one pool when run with the command line option for
    test mode, -T [ISC-Bugs #29892].
  * Linux script updated [ISC-bugs #19430] [ISC-bugs #18111].
  * Changed severity of the log message indicating UDP checksum
    errors in the received packets from 'info' to 'debug'.
    [ISC-bugs #41757]
  * Corrected a bug which could cause the server to sporadically
    crash while loading lease files with the lease-id-format is
    set to "hex" [ISC-Bugs #43185].
- Obsoleted patches:
  * 0011-Fixed-linux-interface-discovery-using-getifaddrs.patch
  * 0019-dhcp-4.2.4-P1-interval.patch
  * 0021-master-Plugs-a-socket-descriptor-leak-in-OMAPI.patch
  * 0022-Optimized-if-and-when-DNS-client-context-and-ports.patch</changelog>
  <changelog author="max@suse.com" date="1562587200">- bsc#1136572: Use IPv6 when called as dhclient6, dhcpd6, and
  dhcrelay6 (0021-dhcp-ip-family-symlinks.patch).</changelog>
  <changelog author="max@suse.com" date="1564660800">- bsc#1134078, CVE-2019-6470, dhcp-CVE-2019-6470.patch:
  DHCPv6 server crashes regularly.
- Add compile option --enable-secs-byteorder to avoid duplicate
  lease warnings [bsc#1089524].</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185157:
  Use /run instead of /var/run for PIDFile in dhcrelay.service.</changelog>
  <changelog author="max@suse.com" date="1622030400">- CVE-2021-25217, bsc#1186382, dhcp-CVE-2021-25217.patch: A buffer
  overrun in lease file parsing code can be used to exploit a
  common vulnerability shared by dhcpd and dhclient.</changelog>
  <changelog author="max@suse.com" date="1622116800">- Oops, when upgrading to 4.3.6-P1 in 2018 only isc_version was
  bumped, but not the RPM package version.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1198657: properly handle DHCRELAY(6)_OPTIONS.</changelog>
</package>
<package pkgid="fafc5d87bdc53460421dc29f824b076162bc7d7d1f9523fd36af317e237acead" name="dlm-kmp-preempt" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="150300.59.68.1"/>
  <changelog author="tzimmermann@suse.de" date="1651579200">- blacklist.conf: Append 'Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"'
- commit f314ea7</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1651579201">- bnx2x: fix napi API usage sequence (bsc#1198217).
- commit 62d4fc3</changelog>
  <changelog author="oneukum@suse.com" date="1651579202">- adm8211: fix error return code in adm8211_probe() (git-fixes).
- blacklist.conf:
- commit 88c7ed6</changelog>
  <changelog author="oneukum@suse.com" date="1651579203">- mwl8k: Fix a double Free in mwl8k_probe_hw (git-fixes).
- commit 83451f5</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579204">- drm/vmwgfx: Remove unused compile options (bsc#1152472)
- commit fdc716b</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579205">- backlight: qcom-wled: Respect enabled-strings in set_brightness (bsc#1152489)
- commit 9612dd6</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579206">- drm/cma-helper: Set VM_DONTEXPAND for mmap (bsc#1152472)
- commit dd83cfa</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579207">- drm/i915: s/JSP2/ICP2/ PCH (bsc#1152489)
- commit 20ca121</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579208">- drm/amdgpu: fix amdgpu_ras_block_late_init error handler (bsc#1152489)
- commit e9f409a</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579209">- drm/fb-helper: Mark screen buffers in system memory with (bsc#1152472)
- commit 40b57d4</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579210">- USB: hcd-pci: Use PCI_STD_NUM_BARS when checking standard BARs (bsc#1152489)
- commit 30a990e</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579211">- drm/amd/display: Fix memory leak in dcn21_clock_source_create (bsc#1152472)
- commit f640496</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579212">- blacklist.conf: Append 'drm/i915: Fix syncmap memory leak'
- commit 5ad47f2</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579213">- blacklist.conf: Append 'drm/tegra: Add back arm_iommu_detach_device()'
- commit f7fdb0f</changelog>
  <changelog author="osalvador@suse.de" date="1651579214">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit a40b3c9</changelog>
  <changelog author="ohering@suse.de" date="1651665600">- net: mana: Remove unnecessary check of cqe_type in
  mana_process_rx_cqe() (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Use struct_size() helper in
  mana_gd_create_dma_region() (bsc#1195651).
- commit c23f4de</changelog>
  <changelog author="martin.wilck@suse.com" date="1651665601">- Revert lpfc driver update to 14.2.0.1 (bsc#1198989)
- commit eb15c95</changelog>
  <changelog author="oneukum@suse.com" date="1651665602">- usb: dwc3: core: Fix tx/rx threshold settings (git-fixes).
- commit c81dcdc</changelog>
  <changelog author="oneukum@suse.com" date="1651665603">- usb: dwc3: core: Only handle soft-reset in DCTL (git-fixes).
- commit 454e4d6</changelog>
  <changelog author="oneukum@suse.com" date="1651665604">- usb: dwc3: gadget: Return proper request status (git-fixes).
- commit 73a340f</changelog>
</package>
<package pkgid="b539a8a28c789a68230c02053c7b60469c01ed361462779ae6b2794ea913a20d" name="dlm-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="150300.59.68.1"/>
  <changelog author="tzimmermann@suse.de" date="1651579200">- blacklist.conf: Append 'Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"'
- commit f314ea7</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1651579201">- bnx2x: fix napi API usage sequence (bsc#1198217).
- commit 62d4fc3</changelog>
  <changelog author="oneukum@suse.com" date="1651579202">- adm8211: fix error return code in adm8211_probe() (git-fixes).
- blacklist.conf:
- commit 88c7ed6</changelog>
  <changelog author="oneukum@suse.com" date="1651579203">- mwl8k: Fix a double Free in mwl8k_probe_hw (git-fixes).
- commit 83451f5</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579204">- drm/vmwgfx: Remove unused compile options (bsc#1152472)
- commit fdc716b</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579205">- backlight: qcom-wled: Respect enabled-strings in set_brightness (bsc#1152489)
- commit 9612dd6</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579206">- drm/cma-helper: Set VM_DONTEXPAND for mmap (bsc#1152472)
- commit dd83cfa</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579207">- drm/i915: s/JSP2/ICP2/ PCH (bsc#1152489)
- commit 20ca121</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579208">- drm/amdgpu: fix amdgpu_ras_block_late_init error handler (bsc#1152489)
- commit e9f409a</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579209">- drm/fb-helper: Mark screen buffers in system memory with (bsc#1152472)
- commit 40b57d4</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579210">- USB: hcd-pci: Use PCI_STD_NUM_BARS when checking standard BARs (bsc#1152489)
- commit 30a990e</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579211">- drm/amd/display: Fix memory leak in dcn21_clock_source_create (bsc#1152472)
- commit f640496</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579212">- blacklist.conf: Append 'drm/i915: Fix syncmap memory leak'
- commit 5ad47f2</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579213">- blacklist.conf: Append 'drm/tegra: Add back arm_iommu_detach_device()'
- commit f7fdb0f</changelog>
  <changelog author="osalvador@suse.de" date="1651579214">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit a40b3c9</changelog>
  <changelog author="ohering@suse.de" date="1651665600">- net: mana: Remove unnecessary check of cqe_type in
  mana_process_rx_cqe() (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Use struct_size() helper in
  mana_gd_create_dma_region() (bsc#1195651).
- commit c23f4de</changelog>
  <changelog author="martin.wilck@suse.com" date="1651665601">- Revert lpfc driver update to 14.2.0.1 (bsc#1198989)
- commit eb15c95</changelog>
  <changelog author="oneukum@suse.com" date="1651665602">- usb: dwc3: core: Fix tx/rx threshold settings (git-fixes).
- commit c81dcdc</changelog>
  <changelog author="oneukum@suse.com" date="1651665603">- usb: dwc3: core: Only handle soft-reset in DCTL (git-fixes).
- commit 454e4d6</changelog>
  <changelog author="oneukum@suse.com" date="1651665604">- usb: dwc3: gadget: Return proper request status (git-fixes).
- commit 73a340f</changelog>
</package>
<package pkgid="25f87fc42e8e779f47063fdf9527970250485d1a107decb47456246054db8ec7" name="docker" arch="aarch64">
  <version epoch="0" ver="20.10.14_ce" rel="150000.163.1"/>
  <changelog author="mrostecki@suse.com" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="rombert@apache.org" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20105&gt;. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="deca3998d95409f8fd46191485e854707e652f7bb55f91f917a79c575241811c" name="docker" arch="ppc64le">
  <version epoch="0" ver="20.10.14_ce" rel="150000.163.1"/>
  <changelog author="mrostecki@suse.com" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="rombert@apache.org" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20105&gt;. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="fb30ce9f79b5add134964a7e5a9c1c6b54859208f4e54089aa9f7e9cd95ee7e9" name="docker" arch="s390x">
  <version epoch="0" ver="20.10.14_ce" rel="150000.163.1"/>
  <changelog author="mrostecki@suse.com" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="rombert@apache.org" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20105&gt;. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="2a57834d1c823e02956fc67326b5ae47d55da422e1717c913df21faf9db28ed3" name="docker" arch="src">
  <version epoch="0" ver="20.10.14_ce" rel="150000.163.1"/>
  <changelog author="mrostecki@suse.com" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="rombert@apache.org" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20105&gt;. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="8a5df2b7966b8e8b0af040465da68be264ea6c684ee24678f4a8ae39d199a8b1" name="docker" arch="x86_64">
  <version epoch="0" ver="20.10.14_ce" rel="150000.163.1"/>
  <changelog author="mrostecki@suse.com" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="rombert@apache.org" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20105&gt;. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="a1130c50f357bd462a1f8fa71a022ff66873aa86f27646212fa76a78fb5ca514" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="20.10.14_ce" rel="150000.163.1"/>
  <changelog author="mrostecki@suse.com" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="rombert@apache.org" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20105&gt;. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="49df2ea28c1f28f07a2d818faaec70aeb0c53bd1ca83bc055e7275b7feb93a58" name="docker-fish-completion" arch="noarch">
  <version epoch="0" ver="20.10.14_ce" rel="150000.163.1"/>
  <changelog author="mrostecki@suse.com" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="rombert@apache.org" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20105&gt;. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="78157d978a70321b83daf94112fb337ee82decd7b5317946208ed42f997aedb9" name="docker-kubic" arch="aarch64">
  <version epoch="0" ver="20.10.14_ce" rel="150000.163.1"/>
  <changelog author="mrostecki@suse.com" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="rombert@apache.org" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20105&gt;. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="532e72e31e60e1e63ab9ce295e8fe70280e8faffc4bbdf186f79e28a080c1397" name="docker-kubic" arch="ppc64le">
  <version epoch="0" ver="20.10.14_ce" rel="150000.163.1"/>
  <changelog author="mrostecki@suse.com" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="rombert@apache.org" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20105&gt;. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="e6707e485a8f91c8f8e83342860eab6434bf6c1389ad04381bcb623bf4e16aa0" name="docker-kubic" arch="s390x">
  <version epoch="0" ver="20.10.14_ce" rel="150000.163.1"/>
  <changelog author="mrostecki@suse.com" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="rombert@apache.org" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20105&gt;. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="b1f3566715500ba4be20b7da7871d4396b5b2f792496f187bb47918a17a65714" name="docker-kubic" arch="src">
  <version epoch="0" ver="20.10.14_ce" rel="150000.163.1"/>
  <changelog author="mrostecki@suse.com" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="rombert@apache.org" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20105&gt;. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="23ecb04ae20f11c3c3ff923954787bd59429e0e86e7ac6524b9faf9303a7d2f0" name="docker-kubic" arch="x86_64">
  <version epoch="0" ver="20.10.14_ce" rel="150000.163.1"/>
  <changelog author="mrostecki@suse.com" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="rombert@apache.org" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20105&gt;. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="c7ca89f77ceb7a2c37cf5b77cd379fb3e7fff103b106b78995c531981546421f" name="docker-kubic-bash-completion" arch="noarch">
  <version epoch="0" ver="20.10.14_ce" rel="150000.163.1"/>
  <changelog author="mrostecki@suse.com" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="rombert@apache.org" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20105&gt;. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="d2f3e3d2dd2be55c5f5a2a9ed2627e7213a79116bccb5896e8bc4eaf46820489" name="docker-kubic-fish-completion" arch="noarch">
  <version epoch="0" ver="20.10.14_ce" rel="150000.163.1"/>
  <changelog author="mrostecki@suse.com" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="rombert@apache.org" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20105&gt;. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="0cdfa9ad4c3b4cd5cb79fd9c41bc6e0344fd0bf747fc234301c3d89419b3f6fc" name="docker-kubic-kubeadm-criconfig" arch="aarch64">
  <version epoch="0" ver="20.10.14_ce" rel="150000.163.1"/>
  <changelog author="mrostecki@suse.com" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="rombert@apache.org" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20105&gt;. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="19509f6018d92a33506a7f78601cf5baf648952d4a18d3a03a49b9702f04e133" name="docker-kubic-kubeadm-criconfig" arch="ppc64le">
  <version epoch="0" ver="20.10.14_ce" rel="150000.163.1"/>
  <changelog author="mrostecki@suse.com" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="rombert@apache.org" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20105&gt;. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="88e96f17572c47d3da69ed14918b018db8676715e25febdaa01b3abc482b0a15" name="docker-kubic-kubeadm-criconfig" arch="s390x">
  <version epoch="0" ver="20.10.14_ce" rel="150000.163.1"/>
  <changelog author="mrostecki@suse.com" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="rombert@apache.org" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20105&gt;. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="9c9c8b5f95399e79b0747ebf6eb03add9d1ca21f7b524c8f99d519cb5a28ce85" name="docker-kubic-kubeadm-criconfig" arch="x86_64">
  <version epoch="0" ver="20.10.14_ce" rel="150000.163.1"/>
  <changelog author="mrostecki@suse.com" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="rombert@apache.org" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20105&gt;. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="e25a8b7629a805ebc24290b181b347fb372c6ae88d710fa6c7aed01806b49a6e" name="docker-kubic-zsh-completion" arch="noarch">
  <version epoch="0" ver="20.10.14_ce" rel="150000.163.1"/>
  <changelog author="mrostecki@suse.com" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="rombert@apache.org" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20105&gt;. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="43cd82ba8c183bd86525f61629b0a53f9893ce6e2a524b1699eacf3ef5112d1c" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="20.10.14_ce" rel="150000.163.1"/>
  <changelog author="mrostecki@suse.com" date="1605182400">- Add a patch which makes Docker compatible with firewalld with
  nftables backend. Backport of https://github.com/moby/libnetwork/pull/2548
  (boo#1178801, SLE-16460)
  * boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="rombert@apache.org" date="1607947200">- Enable fish-completion</changelog>
  <changelog author="asarai@suse.com" date="1608552000">- Update to Docker 19.03.14-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2020-15257 bsc#1180243
  https://github.com/docker/docker-ce/releases/tag/v19.03.14</changelog>
  <changelog author="asarai@suse.com" date="1608724800">- Add Conflicts and Provides for kubic flavour of docker-fish-completion.</changelog>
  <changelog author="asarai@suse.com" date="1611921600">- Re-apply secrets fix for bsc#1065609 which appears to have been lost after it
  was fixed.
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1611921601">- Update to Docker 20.10.2-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. bsc#1181594
- Remove upstreamed patches:
  - bsc1122469-0001-apparmor-allow-readby-and-tracedby.patch
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch
- Add patches to fix build:
  + cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Since upstream has changed their source repo (again) we have to rebase all of
  our patches. While doing this, I've collapsed all patches into one branch
  per-release and thus all the patches are now just one series:
  - packaging-0001-revert-Remove-docker-prefix-for-containerd-and-runc-.patch
  + 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch
  - secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  + 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - secrets-0002-SUSE-implement-SUSE-container-secrets.patch
  + 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - private-registry-0001-Add-private-registry-mirror-support.patch
  + 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
  + 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Drop docker-runc, docker-test and docker-libnetwork packages. We now just use
  the upstream runc package (it's stable enough and Docker no longer pins git
  versions). docker-libnetwork is so unstable that it doesn't have any
  versioning scheme and so it really doesn't make sense to maintain the project
  as a separate package. bsc#1181641 bsc#1181677
- Remove no-longer-needed patch for packaging now that we've dropped
  docker-runc and docker-libnetwork.
  - 0001-PACKAGING-revert-Remove-docker-prefix-for-containerd.patch</changelog>
  <changelog author="asarai@suse.com" date="1612267201">- Update to Docker 20.10.3-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. Fixes bsc#1181732
  (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches on top of 20.10.3-ce.
  - 0002-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  + 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  - 0003-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  + 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  - 0004-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  + 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  - 0005-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1612612800">[NOTE: This update was only ever released in SLES and Leap.]
- Update Docker to 19.03.15-ce. See upstream changelog in the packaged
  /usr/share/doc/packages/docker/CHANGELOG.md. This update includes fixes for
  bsc#1181732 (CVE-2021-21284) and bsc#1181730 (CVE-2021-21285).
- Rebase patches:
  * bsc1073877-0001-apparmor-clobber-docker-default-profile-on-start.patch
- Only apply the boo#1178801 libnetwork patch to handle firewalld on openSUSE.
  It appears that SLES doesn't like the patch. bsc#1180401</changelog>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20105&gt;. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
</package>
<package pkgid="e6c33a5c4918f6ffb960c0abd1d67c2de99fbad016055e74f06ee398a8429e87" name="dpdk" arch="src">
  <version epoch="0" ver="19.11.4" rel="150300.11.1"/>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="marco.varlese@suse.com" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="jcaamano@suse.com" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="jcaamano@suse.com" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="jcaamano@suse.com" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651233600">- Thu Apr 28 2022 aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- Fri Apr  8 2022 tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
</package>
<package pkgid="0a02409ed2099eb344e2c7644011aa5c4759ab4fdefe9d94e4fc9ea571738086" name="dpdk-kmp-preempt" arch="aarch64">
  <version epoch="0" ver="19.11.4_k5.3.18_150300.59.63" rel="150300.11.1"/>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="marco.varlese@suse.com" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="jcaamano@suse.com" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="jcaamano@suse.com" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="jcaamano@suse.com" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651233600">- Thu Apr 28 2022 aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- Fri Apr  8 2022 tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
</package>
<package pkgid="0bb26f79856fddcb89d3e830e4e0309d9c78cfb4c2d3ad581de92b9cc4185add" name="dpdk-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="19.11.4_k5.3.18_150300.59.63" rel="150300.11.1"/>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="marco.varlese@suse.com" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="jcaamano@suse.com" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="jcaamano@suse.com" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="jcaamano@suse.com" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651233600">- Thu Apr 28 2022 aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- Fri Apr  8 2022 tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
</package>
<package pkgid="de753ac8abba7c2dd33a0b2e52cb834791fe916484f994058ec890b38743d3bf" name="dpdk-thunderx" arch="src">
  <version epoch="0" ver="19.11.4" rel="150300.11.1"/>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="marco.varlese@suse.com" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="jcaamano@suse.com" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="jcaamano@suse.com" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="jcaamano@suse.com" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651233600">- Thu Apr 28 2022 aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- Fri Apr  8 2022 tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
</package>
<package pkgid="0549bb722947a7cac633a3906357f2aeb07e62b76881d0b4c74f1cb607b5e307" name="dpdk-thunderx-kmp-preempt" arch="aarch64">
  <version epoch="0" ver="19.11.4_k5.3.18_150300.59.63" rel="150300.11.1"/>
  <changelog author="marco.varlese@suse.com" date="1524484800">- Update to 18.02.1
- Restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
  <changelog author="marco.varlese@suse.com" date="1529323200">- Update to 18.02.2; some of the changes are:
  * Added function to allow releasing internal EAL resources on exit
  * Added igb, ixgbe and i40e ethernet driver to support RSS with flow API
  * Updated i40e driver to support PPPoE/PPPoL2TP
  * Added MAC loopback support for i40e
  * Added support of run time determination of number of queues per i40e VF
  * Updated mlx4/mlx5 driver
  * Added NVGRE and UDP tunnels support in Solarflare network PMD
  * Added AVF (Adaptive Virtual Function) net PMD
  * Added feature supports for live migration from vhost-net to vhost-user
  * Updated the AESNI-MB PMD
  * Updated the DPAA_SEC crypto driver to support rte_security
  * Added New eventdev Ordered Packet Distribution Library (OPDL) PMD
  * Added GRO support for VxLAN-tunneled packets
- Removed 0002-dpdk-eal-ppc-rte_smp_mb.patch since incorporated
  upstream</changelog>
  <changelog author="marco.varlese@suse.com" date="1535544000">- Fixed a syntax error affecting csh environment configuration(bsc#1102310)</changelog>
  <changelog author="marco.varlese@suse.com" date="1537790400">- Fixed a problem with ABI compatibility; API/ABI compatibility is
  guaranteed by DPDK upstream community across subsequent bug-fix
  releases. However, the .spec file broke it by defining the wrong
  version which included also the bug-fix release number.
- Fixed a naming issue with library: did not reflect soname</changelog>
  <changelog author="ndas@suse.de" date="1540468800">- Enable missed MLX PMDs for SLE12SP4 (bsc#1112307)</changelog>
  <changelog author="ndas@suse.de" date="1548331200">- Update to 18.11; some of the changes are(fate#325916, fate#325951 fate#326025, fate#326992, bsc#1134968, jira#SLE-4715) :
  * Added support for using externally allocated memory in DPDK.
  * Added check for ensuring allocated memory is addressable by devices.
  * Updated the C11 memory model version of the ring library.
  * Added NXP CAAM JR PMD.
  * Added support for GEN3 devices to Intel QAT driver.
  * Added Distributed Software Eventdev PMD.
  * Updated KNI kernel module, rte_kni library, and KNI sample application.
  * Add a new sample application for vDPA.
  * Updated mlx5 driver.
  * * Improved security of PMD to prevent the NIC from getting stuck when the application misbehaves.
  * * Reworked flow engine to supported e-switch flow rules (transfer attribute).
  * * Added support for header re-write(L2-L4), VXLAN encap/decap, count, match on TCP flags and multiple flow groups with e-switch flow rules.
  * * Added support for match on metadata, VXLAN and MPLS encap/decap with flow rules.
  * * Added support for RTE_ETH_DEV_CLOSE_REMOVE flag to provide better support for representors.
  * * Added support for meson build.
  * * Fixed build issue with PPC.
  * * Added support for BlueField VF.
  * * Added support for externally allocated static memory for DMA.
  all the changes can be viwed in http://doc.dpdk.org/guides/rel_notes/release_18_11.html
  [- 0001-enic-fix-Type-punning-and-strict-aliasing-warning.patch]</changelog>
  <changelog author="ndas@suse.de" date="1550836800">- Add  0002-fix-cpu-compatibility.patch to address issue with older
  CPUs (bsc#1125961, bsc#1099474)
  [+ 0002-fix-cpu-compatibility.patch]</changelog>
  <changelog author="ndas@suse.de" date="1552046400">- remove -Wno-error=array-bounds as its no longer needed
- disable i586 build because lack of sse support</changelog>
  <changelog author="ndas@suse.de" date="1556539200">- Add missing libmnl-devel</changelog>
  <changelog author="ndas@suse.de" date="1560772800">- Minor Update to 18.11.2
  * List of fixes can be found in
    https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes</changelog>
  <changelog author="jcaamano@suse.com" date="1569844800">- Changed to multibuild (bsc#1151455).
- Added dpdk-fix-implicit-fallthrough-warning.patch to address build error with
  recent kernels (bsc#1144704).</changelog>
  <changelog author="jcaamano@suse.com" date="1574164800">- Add version to the PMD driver directory to avoid loading previous
  version drivers (bsc#1157179).
- Update to 18.11.3 (bsc#1156146). For a list of fixes check:
  * https://doc.dpdk.org/guides-18.11/rel_notes/release_18_11.html#fixes
- Add patches to fix vulnerability where malicious container can trigger
  a denial of service (CVE-2019-14818, bsc#1156146)
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
- Removed patrches already included upstream:
  * dpdk-fix-implicit-fallthrough-warning.patch</changelog>
  <changelog author="sweiberg@suse.com" date="1583150400">- Change constraint to ssse3 to fix build issues on x86_64 and i586</changelog>
  <changelog author="jcaamano@suse.com" date="1588161600">- Update to v19.11.1. For a list of changes, check:
  * https://doc.dpdk.org/guides/rel_notes/release_19_11.html#new-features
- Removed patches no longer applying to the code base:
  * 0001-vhost-fix-possible-denial-of-service-on-SET_VRING_NU.patch
  * 0002-vhost-fix-possible-denial-of-service-by-leaking-FDs.patch
  * 0002-fix-cpu-compatibility.patch
- Rebased patches:
  * 0001-fix-cpu-compatibility.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1589889600">- Add patches to fix vulnerability where malicious guest/container can
  cause resource leak resulting a Denial-of-Service, or memory corruption
  and crash, or information leak in vhost-user backend application
  (bsc#1171477, CVE-2020-10722, CVE-2020-10723, CVE-2020-10724,
  CVE-2020-10725, CVE-2020-10726).
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="dmueller@suse.com" date="1597147200">- update to v19.11.3:
    app/crypto-perf: fix display of sample test vector
    app/eventdev: check Tx adapter service ID
    app: fix usage help of options separated by dashes
    app/pipeline: fix build with gcc 10
    app: remove extra new line after link duplex
    app/testpmd: add parsing for QinQ VLAN headers
    app/testpmd: fix DCB set
    app/testpmd: fix memory failure handling for i40e DDP
    app/testpmd: fix PPPoE flow command
    app/testpmd: fix statistics after reset
    baseband/turbo_sw: fix exposed LLR decimals assumption
    bbdev: fix doxygen comments
    build: disable gcc 10 zero-length-bounds warning
    build: fix linker warnings with clang on Windows
    build: support MinGW-w64 with Meson
    buildtools: get static mlx dependencies for meson
    bus/fslmc: fix dereferencing null pointer
    bus/fslmc: fix size of qman fq descriptor
    bus/pci: fix devargs on probing again
    bus/pci: fix UIO resource access from secondary process
    bus/vmbus: fix comment spelling
    ci: fix telemetry dependency in Travis
    common/iavf: update copyright
    common/mlx5: fix build with -fno-common
    common/mlx5: fix build with rdma-core 21
    common/mlx5: fix netlink buffer allocation from stack
    common/mlx5: fix umem buffer alignment
    common/octeontx: fix gcc 9.1 ABI break
    common/qat: fix GEN3 marketing name
    contigmem: cleanup properly when load fails
    crypto/caam_jr: fix check of file descriptors
    crypto/caam_jr: fix IRQ functions return type
    crypto/ccp: fix fd leak on probe failure
    cryptodev: add asymmetric session-less feature name
    cryptodev: fix missing device id range checking
    cryptodev: fix SHA-1 digest enum comment
    crypto/kasumi: fix extern declaration
    crypto/nitrox: fix CSR register address generation
    crypto/nitrox: fix oversized device name
    crypto/octeontx2: fix build with gcc 10
    crypto/openssl: fix out-of-place encryption
    crypto/qat: fix cipher descriptor for ZUC and SNOW
    crypto/qat: support plain SHA1..SHA512 hashes
    devtools: fix symbol map change check
    doc: add i40e limitation for flow director
    doc: add NASM installation steps
    doc: fix API index
    doc: fix build issue in ABI guide
    doc: fix build with doxygen 1.8.18
    doc: fix default symbol binding in ABI guide
    doc: fix log level example in Linux guide
    doc: fix LTO config option
    doc: fix matrix CSS for recent sphinx
    doc: fix multicast filter feature announcement
    doc: fix number of failsafe sub-devices
    doc: fix reference in ABI guide
    doc: fix sphinx compatibility
    doc: fix typo in contributors guide
    doc: fix typo in contributors guide
    doc: fix typos in ABI policy
    doc: prefer https when pointing to dpdk.org
    drivers: add crypto as dependency for event drivers
    drivers/crypto: disable gcc 10 no-common errors
    drivers/crypto: fix build with make 4.3
    drivers/crypto: fix log type variables for -fno-common
    drivers: fix log type variables for -fno-common
    eal/arm64: fix precise TSC
    eal: fix C++17 compilation
    eal: fix comments spelling
    eal: fix log message print for regex
    eal: fix PRNG init with HPET enabled
    eal: fix typo in endian conversion macros
    eal/freebsd: fix queuing duplicate alarm callbacks
    eal/ppc: fix bool type after altivec include
    eal/ppc: fix build with gcc 9.3
    eal/x86: ignore gcc 10 stringop-overflow warnings
    ethdev: fix build when vtune profiling is on
    ethdev: fix spelling
    eventdev: fix probe and remove for secondary process
    event/dsw: avoid reusing previously recorded events
    event/dsw: fix enqueue burst return value
    event/dsw: remove redundant control ring poll
    event/dsw: remove unnecessary read barrier
    event/octeontx2: fix build for O1 optimization
    event/octeontx2: fix queue removal from Rx adapter
    examples/eventdev: fix build with gcc 10
    examples/eventdev: fix crash on exit
    examples/fips_validation: fix parsing of algorithms
    examples/ip_pipeline: remove check of null response
    examples/ipsec-gw: fix gcc 10 maybe-uninitialized warning
    examples/kni: fix crash during MTU set
    examples/kni: fix MTU change to setup Tx queue
    examples/l2fwd-keepalive: fix mbuf pool size
    examples/qos_sched: fix build with gcc 10
    examples: remove extra new line after link duplex
    examples/vhost_blk: fix build with gcc 10
    examples/vmdq: fix output of pools/queues
    examples/vmdq: fix RSS configuration
    examples/vm_power: drop Unix path limit redefinition
    examples/vm_power: fix build with -fno-common
    fib: fix headers for C++ support
    fix same typo in multiple places
    fix various typos found by Lintian
    ipsec: check SAD lookup error
    ipsec: fix build dependency on hash lib
    kvargs: fix buffer overflow when parsing list
    kvargs: fix invalid token parsing on FreeBSD
    kvargs: fix strcmp helper documentation
    log: fix level picked with globbing on type register
    lpm6: fix comments spelling
    lpm6: fix size of tbl8 group
    mem: fix overflow on allocation
    mem: mark pages as not accessed when freeing memory
    mem: mark pages as not accessed when reserving VA
    mempool/dpaa2: install missing header with meson
    mempool/octeontx2: fix build for gcc O1 optimization
    mempool: remove inline functions from export list
    mem: preallocate VA space in no-huge mode
    mk: fix static linkage of mlx dependency
    net/avp: fix gcc 10 maybe-uninitialized warning
    net/bnxt: do not use PMD log type
    net/bnxt: fix error log for command timeout
    net/bnxt: fix FW version query
    net/bnxt: fix HWRM command during FW reset
    net/bnxt: fix max ring count
    net/bnxt: fix memory leak during queue restart
    net/bnxt: fix number of TQM ring
    net/bnxt: fix port start failure handling
    net/bnxt: fix possible stack smashing
    net/bnxt: fix Rx ring producer index
    net/bnxt: fix storing MAC address twice
    net/bnxt: fix TQM ring context memory size
    net/bnxt: fix using RSS config struct
    net/bnxt: fix VLAN add when port is stopped
    net/bnxt: fix VNIC Rx queue count on VNIC free
    net/bnxt: use true/false for bool types
    net/dpaa2: fix 10G port negotiation
    net/dpaa2: fix congestion ID for multiple traffic classes
    net/dpaa: use dynamic log type
    net/e1000: fix port hotplug for multi-process
    net/ena/base: fix documentation of functions
    net/ena/base: fix indentation in CQ polling
    net/ena/base: fix indentation of multiple defines
    net/ena/base: fix testing for supported hash function
    net/ena/base: make allocation macros thread-safe
    net/ena/base: prevent allocation of zero sized memory
    net/ena: fix build for O1 optimization
    net/ena: set IO ring size to valid value
    net/enetc: fix Rx lock-up
    net/enic: fix flow action reordering
    net/failsafe: fix fd leak
    net/hinic: allocate IO memory with socket id
    net/hinic/base: fix PF firmware hot-active problem
    net/hinic/base: fix port start during FW hot update
    net/hinic: fix LRO
    net/hinic: fix queues resource free
    net/hinic: fix repeating cable log and length check
    net/hinic: fix snprintf length of cable info
    net/hinic: fix TSO
    net/hinic: fix Tx mbuf length while copying
    net/hns3: add free threshold in Rx
    net/hns3: add RSS hash offload to capabilities
    net/hns3: clear residual flow rules on init
    net/hns3: fix configuring illegal VLAN PVID
    net/hns3: fix configuring RSS hash when rules are flushed
    net/hns3: fix crash when flushing RSS flow rules with FLR
    net/hns3: fix default error code of command interface
    net/hns3: fix default VLAN filter configuration for PF
    net/hns3: fix mailbox opcode data type
    net/hns3: fix MSI-X interrupt during initialization
    net/hns3: fix packets offload features flags in Rx
    net/hns3: fix promiscuous mode for PF
    net/hns3: fix return value of setting VLAN offload
    net/hns3: fix return value when clearing statistics
    net/hns3: fix RSS indirection table configuration
    net/hns3: fix RSS key length
    net/hns3: fix Rx interrupt after reset
    net/hns3: fix status after repeated resets
    net/hns3: fix Tx interrupt when enabling Rx interrupt
    net/hns3: fix VLAN filter when setting promisucous mode
    net/hns3: fix VLAN PVID when configuring device
    net/hns3: reduce judgements of free Tx ring space
    net/hns3: remove one IO barrier in Rx
    net/hns3: remove unnecessary assignments in Tx
    net/hns3: replace memory barrier with data dependency order
    net/hns3: support different numbers of Rx and Tx queues
    net/hns3: support Rx interrupt
    net/i40e/base: update copyright
    net/i40e: fix flow director enabling
    net/i40e: fix flow director for ARP packets
    net/i40e: fix flow director initialisation
    net/i40e: fix flush of flow director filter
    net/i40e: fix queue region in RSS flow
    net/i40e: fix queue related exception handling
    net/i40e: fix setting L2TAG
    net/i40e: fix wild pointer
    net/i40e: fix X722 performance
    net/i40e: relax barrier in Tx
    net/i40e: relax barrier in Tx for NEON
    net/iavf: fix link speed
    net/iavf: fix setting L2TAG
    net/iavf: fix stats query error code
    net/ice: add action number check for switch
    net/ice/base: check memory pointer before copying
    net/ice/base: fix binary order for GTPU filter
    net/ice/base: fix MAC write command
    net/ice/base: fix uninitialized stack variables
    net/ice/base: minor fixes
    net/ice/base: read PSM clock frequency from register
    net/ice/base: remove unused code in switch rule
    net/ice/base: update copyright
    net/ice: change default tunnel type
    net/ice: fix crash in switch filter
    net/ice: fix hash flow crash
    net/ice: fix input set of VLAN item
    net/ice: fix RSS advanced rule
    net/ice: fix RSS for GTPU
    net/ice: fix setting L2TAG
    net/ice: fix variable initialization
    net/ice: remove bulk alloc option
    net/ice: remove unnecessary variable
    net/ice: support mark only action for flow director
    net/ipn3ke: use control thread to check link status
    net/ixgbe/base: update copyright
    net/ixgbe: check driver type in MACsec API
    net/ixgbe: fix link state timing on fiber ports
    net/ixgbe: fix link status after port reset
    net/ixgbe: fix link status inconsistencies
    net/ixgbe: fix link status synchronization on BSD
    net/ixgbe: fix resource leak after thread exits normally
    net/ixgbe: fix statistics in flow control mode
    net/memif: fix init when already connected
    net/memif: fix resource leak
    net/mlx4: fix build with -fno-common
    net/mlx4: fix drop queue error handling
    net/mlx5: add device parameter for MPRQ stride size
    net/mlx5: add multi-segment packets in MPRQ mode
    net/mlx5: enable MPRQ multi-stride operations
    net/mlx5: fix actions validation on root table
    net/mlx5: fix assert in doorbell lookup
    net/mlx5: fix assert in dynamic metadata handling
    net/mlx5: fix assert in modify converting
    net/mlx5: fix build with separate glue lib for dlopen
    net/mlx5: fix call to modify action without init item
    net/mlx5: fix counter container usage
    net/mlx5: fix crash when releasing meter table
    net/mlx5: fix CVLAN tag set in IP item translation
    net/mlx5: fix doorbell bitmap management offsets
    net/mlx5: fix gcc 10 enum-conversion warning
    net/mlx5: fix header modify action validation
    net/mlx5: fix imissed counter overflow
    net/mlx5: fix jump table leak
    net/mlx5: fix mask used for IPv6 item validation
    net/mlx5: fix matching for UDP tunnels with Verbs
    net/mlx5: fix match on empty VLAN item in DV mode
    net/mlx5: fix metadata for compressed Rx CQEs
    net/mlx5: fix meter color register consideration
    net/mlx5: fix meter suffix table leak
    net/mlx5: fix packet length assert in MPRQ
    net/mlx5: fix push VLAN action to use item info
    net/mlx5: fix RSS enablement
    net/mlx5: fix RSS key copy to TIR context
    net/mlx5: fix Tx queue release debug log timing
    net/mlx5: fix validation of push VLAN without full mask
    net/mlx5: fix validation of VXLAN/VXLAN-GPE specs
    net/mlx5: fix VLAN flow action with wildcard VLAN item
    net/mlx5: fix VLAN ID check
    net/mlx5: fix VLAN PCP item calculation
    net/mlx5: fix zero metadata action
    net/mlx5: fix zero value validation for metadata
    net/mlx5: improve logging of MPRQ selection
    net/mlx5: reduce Tx completion index memory loads
    net/mlx5: set dynamic flow metadata in Rx queues
    net/mlx5: update VLAN and encap actions validation
    net/mlx5: use open/read/close for ib stats query
    net/mvneta: do not use PMD log type
    net/mvpp2: fix build with gcc 10
    net/netvsc: avoid possible live lock
    net/netvsc: do not configure RSS if disabled
    net/netvsc: do RSS across Rx queue only
    net/netvsc: fix comment spelling
    net/netvsc: fix memory free on device close
    net/netvsc: handle Rx packets during multi-channel setup
    net/netvsc: handle Tx completions based on burst size
    net/netvsc: propagate descriptor limits from VF
    net/netvsc: remove process event optimization
    net/netvsc: split send buffers from Tx descriptors
    net/nfp: fix dangling pointer on probe failure
    net/nfp: fix log format specifiers
    net/null: fix secondary burst function selection
    net/null: remove redundant check
    net/octeontx2: disable unnecessary error interrupts
    net/octeontx2: enable error and RAS interrupt in configure
    net/octeontx2: fix buffer size assignment
    net/octeontx2: fix device configuration sequence
    net/octeontx2: fix link information for loopback port
    net/octeontx: fix dangling pointer on init failure
    net/octeontx: fix meson build for disabled drivers
    net/pfe: do not use PMD log type
    net/pfe: fix double free of MAC address
    net/qede: fix link state configuration
    net/qede: fix port reconfiguration
    net/ring: fix device pointer on allocation
    net/sfc/base: fix build when EVB is enabled
    net/sfc/base: fix manual filter delete in EF10
    net/sfc/base: handle manual and auto filter clashes in EF10
    net/sfc/base: reduce filter priorities to implemented only
    net/sfc/base: refactor filter lookup loop in EF10
    net/sfc/base: reject automatic filter creation by users
    net/sfc/base: use simpler EF10 family conditional check
    net/sfc/base: use simpler EF10 family run-time checks
    net/sfc: fix initialization error path
    net/sfc: fix promiscuous and allmulticast toggles errors
    net/sfc: fix reported promiscuous/multicast mode
    net/sfc: fix Rx queue start failure path
    net/sfc: set priority of created filters to manual
    net/softnic: fix memory leak for thread
    net/softnic: fix resource leak for pipeline
    net/tap: do not use PMD log type
    net/tap: fix check for mbuf number of segment
    net/tap: fix crash in flow destroy
    net/tap: fix fd leak on creation failure
    net/tap: fix file close on remove
    net/tap: fix mbuf and mem leak during queue release
    net/tap: fix mbuf double free when writev fails
    net/tap: fix queues fd check before close
    net/tap: fix unexpected link handler
    net/tap: remove unused assert
    net/thunderx: use dynamic log type
    net/vhost: fix potential memory leak on close
    net/virtio: do not use PMD log type
    net/virtio: fix crash when device reconnecting
    net/virtio: fix outdated comment
    net/virtio: fix unexpected event after reconnect
    net/virtio-user: fix devargs parsing
    net/vmxnet3: fix RSS setting on v4
    net/vmxnet3: handle bad host framing
    pci: accept 32-bit domain numbers
    pci: fix build on FreeBSD
    pci: fix build on ppc
    pci: reject negative values in PCI id
    pci: remove unneeded includes in public header file
    remove references to private PCI probe function
    Revert ?common/qat: fix GEN3 marketing name?
    Revert ?net/bnxt: fix number of TQM ring?
    Revert ?net/bnxt: fix TQM ring context memory size?
    security: fix crash at accessing non-implemented ops
    security: fix return types in documentation
    security: fix session counter
    security: fix verification of parameters
    service: fix crash on exit
    service: fix identification of service running on other lcore
    service: fix race condition for MT unsafe service
    service: remove rte prefix from static functions
    telemetry: fix port stats retrieval
    test/crypto: fix flag check
    test/crypto: fix statistics case
    test: fix build with gcc 10
    test/flow_classify: enable multi-sockets system
    test/ipsec: fix crash in session destroy
    test/kvargs: fix invalid cases check
    test/kvargs: fix to consider empty elements as valid
    test: load drivers when required
    test: remove redundant macro
    test: skip some subtests in no-huge mode
    timer: protect initialization with lock
    usertools: check for pci.ids in /usr/share/misc
    vfio: fix race condition with sysfs
    vfio: fix use after free with multiprocess
    vhost/crypto: add missing user protocol flag
    vhost: fix packed ring zero-copy
    vhost: fix peer close check
    vhost: fix shadowed descriptors not flushed
    vhost: fix shadow update
    vhost: fix zero-copy server mode
    vhost: handle mbuf allocation failure
    vhost: make IOTLB cache name unique among processes
    vhost: prevent zero-copy with incompatible client mode
    vhost: remove unused variable
- remove the security backport patches as they're already included
  upstream:
  * 0001-vhost-check-log-mmap-offset-and-size-overflow.patch
  * 0002-vhost-fix-vring-index-check.patch
  * 0003-vhost-crypto-validate-keys-lengths.patch
  * 0004-vhost-fix-translated-address-not-checked.patch
  * 0005-vhost-fix-potential-memory-space-leak.patch
  * 0006-vhost-fix-potential-fd-leak.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1600776000">- Update to 19.11.4. For a list of fixes check:
  https://doc.dpdk.org/guides-19.11/rel_notes/release_19_11.html#id8
- Add patch to resolve build error reported in Staging:E project
  where a kernel backport (jsc#SLE-13536) introduced backward
  incompatible changes to the API that break kni module build
  * 0001-SLE15-SP3-compatibility-patch-for-kni.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Add patches to fix vulnerability where malicious guest can harm the host
  using vhost crypto, this includes executing code in host (VM Escape),
  reading host application memory space to guest and causing partially
  denial of service in the host (bsc#1176590).
  * 0001-vhost-crypto-fix-pool-allocation.patch
  * 0002-vhost-crypto-fix-incorrect-descriptor-deduction.patch
  * 0003-vhost-crypto-fix-missed-request-check-for-copy-mode.patch
  * 0004-vhost-crypto-fix-incorrect-write-back-source.patch
  * 0005-vhost-crypto-fix-data-length-check.patch
  * 0006-vhost-crypto-fix-possible-TOCTOU-attack.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- security update
- added patches
  fix CVE-2021-3839 [bsc#1198963], dpdk: OOB write irelated to vhost communication n vhost_user_set_inflight_fd()
  + dpdk-CVE-2021-3839.patch
  fix CVE-2022-0669 [bsc#1198964], dpdk: DoS by exhausting available fd in vhost-user slave process
  + dpdk-CVE-2022-0669.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651233600">- Thu Apr 28 2022 aabdallah@suse.com:
  Fix for SG#63176, bsc#1198873: Read PCI device name as UTF strings.
- Fri Apr  8 2022 tabraham@suse.com:
  kni: allow configuring thread granularity (bsc#1195172)
- added patches
  + 0001-kni-allow-configuring-thread-granularity.patch
  + 0001-usertools-read-PCI-device-name-as-UTF-8.patch</changelog>
</package>
<package pkgid="4d89904e47eb54d91e5da63aa25129185f597dfbf42c9b4e7e52f2db358c6949" name="dtb-aarch64" arch="src">
  <version epoch="0" ver="5.3.18" rel="150300.59.68.1"/>
  <changelog author="tzimmermann@suse.de" date="1651579200">- blacklist.conf: Append 'Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"'
- commit f314ea7</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1651579201">- bnx2x: fix napi API usage sequence (bsc#1198217).
- commit 62d4fc3</changelog>
  <changelog author="oneukum@suse.com" date="1651579202">- adm8211: fix error return code in adm8211_probe() (git-fixes).
- blacklist.conf:
- commit 88c7ed6</changelog>
  <changelog author="oneukum@suse.com" date="1651579203">- mwl8k: Fix a double Free in mwl8k_probe_hw (git-fixes).
- commit 83451f5</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579204">- drm/vmwgfx: Remove unused compile options (bsc#1152472)
- commit fdc716b</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579205">- backlight: qcom-wled: Respect enabled-strings in set_brightness (bsc#1152489)
- commit 9612dd6</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579206">- drm/cma-helper: Set VM_DONTEXPAND for mmap (bsc#1152472)
- commit dd83cfa</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579207">- drm/i915: s/JSP2/ICP2/ PCH (bsc#1152489)
- commit 20ca121</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579208">- drm/amdgpu: fix amdgpu_ras_block_late_init error handler (bsc#1152489)
- commit e9f409a</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579209">- drm/fb-helper: Mark screen buffers in system memory with (bsc#1152472)
- commit 40b57d4</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579210">- USB: hcd-pci: Use PCI_STD_NUM_BARS when checking standard BARs (bsc#1152489)
- commit 30a990e</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579211">- drm/amd/display: Fix memory leak in dcn21_clock_source_create (bsc#1152472)
- commit f640496</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579212">- blacklist.conf: Append 'drm/i915: Fix syncmap memory leak'
- commit 5ad47f2</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579213">- blacklist.conf: Append 'drm/tegra: Add back arm_iommu_detach_device()'
- commit f7fdb0f</changelog>
  <changelog author="osalvador@suse.de" date="1651579214">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit a40b3c9</changelog>
  <changelog author="ohering@suse.de" date="1651665600">- net: mana: Remove unnecessary check of cqe_type in
  mana_process_rx_cqe() (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Use struct_size() helper in
  mana_gd_create_dma_region() (bsc#1195651).
- commit c23f4de</changelog>
  <changelog author="martin.wilck@suse.com" date="1651665601">- Revert lpfc driver update to 14.2.0.1 (bsc#1198989)
- commit eb15c95</changelog>
  <changelog author="oneukum@suse.com" date="1651665602">- usb: dwc3: core: Fix tx/rx threshold settings (git-fixes).
- commit c81dcdc</changelog>
  <changelog author="oneukum@suse.com" date="1651665603">- usb: dwc3: core: Only handle soft-reset in DCTL (git-fixes).
- commit 454e4d6</changelog>
  <changelog author="oneukum@suse.com" date="1651665604">- usb: dwc3: gadget: Return proper request status (git-fixes).
- commit 73a340f</changelog>
</package>
<package pkgid="0d4e470241a186b9f6023ec0e1ccfc2082fabd40894b7e3ecba9a00d13256357" name="dtb-al" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="150300.59.68.1"/>
  <changelog author="tzimmermann@suse.de" date="1651579200">- blacklist.conf: Append 'Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"'
- commit f314ea7</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1651579201">- bnx2x: fix napi API usage sequence (bsc#1198217).
- commit 62d4fc3</changelog>
  <changelog author="oneukum@suse.com" date="1651579202">- adm8211: fix error return code in adm8211_probe() (git-fixes).
- blacklist.conf:
- commit 88c7ed6</changelog>
  <changelog author="oneukum@suse.com" date="1651579203">- mwl8k: Fix a double Free in mwl8k_probe_hw (git-fixes).
- commit 83451f5</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579204">- drm/vmwgfx: Remove unused compile options (bsc#1152472)
- commit fdc716b</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579205">- backlight: qcom-wled: Respect enabled-strings in set_brightness (bsc#1152489)
- commit 9612dd6</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579206">- drm/cma-helper: Set VM_DONTEXPAND for mmap (bsc#1152472)
- commit dd83cfa</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579207">- drm/i915: s/JSP2/ICP2/ PCH (bsc#1152489)
- commit 20ca121</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579208">- drm/amdgpu: fix amdgpu_ras_block_late_init error handler (bsc#1152489)
- commit e9f409a</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579209">- drm/fb-helper: Mark screen buffers in system memory with (bsc#1152472)
- commit 40b57d4</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579210">- USB: hcd-pci: Use PCI_STD_NUM_BARS when checking standard BARs (bsc#1152489)
- commit 30a990e</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579211">- drm/amd/display: Fix memory leak in dcn21_clock_source_create (bsc#1152472)
- commit f640496</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579212">- blacklist.conf: Append 'drm/i915: Fix syncmap memory leak'
- commit 5ad47f2</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579213">- blacklist.conf: Append 'drm/tegra: Add back arm_iommu_detach_device()'
- commit f7fdb0f</changelog>
  <changelog author="osalvador@suse.de" date="1651579214">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit a40b3c9</changelog>
  <changelog author="ohering@suse.de" date="1651665600">- net: mana: Remove unnecessary check of cqe_type in
  mana_process_rx_cqe() (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Use struct_size() helper in
  mana_gd_create_dma_region() (bsc#1195651).
- commit c23f4de</changelog>
  <changelog author="martin.wilck@suse.com" date="1651665601">- Revert lpfc driver update to 14.2.0.1 (bsc#1198989)
- commit eb15c95</changelog>
  <changelog author="oneukum@suse.com" date="1651665602">- usb: dwc3: core: Fix tx/rx threshold settings (git-fixes).
- commit c81dcdc</changelog>
  <changelog author="oneukum@suse.com" date="1651665603">- usb: dwc3: core: Only handle soft-reset in DCTL (git-fixes).
- commit 454e4d6</changelog>
  <changelog author="oneukum@suse.com" date="1651665604">- usb: dwc3: gadget: Return proper request status (git-fixes).
- commit 73a340f</changelog>
</package>
<package pkgid="073abf81f1c82713a0378566123a2b9953762208dd208b4326f80dfc5c0589cb" name="dtb-zte" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="150300.59.68.1"/>
  <changelog author="tzimmermann@suse.de" date="1651579200">- blacklist.conf: Append 'Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"'
- commit f314ea7</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1651579201">- bnx2x: fix napi API usage sequence (bsc#1198217).
- commit 62d4fc3</changelog>
  <changelog author="oneukum@suse.com" date="1651579202">- adm8211: fix error return code in adm8211_probe() (git-fixes).
- blacklist.conf:
- commit 88c7ed6</changelog>
  <changelog author="oneukum@suse.com" date="1651579203">- mwl8k: Fix a double Free in mwl8k_probe_hw (git-fixes).
- commit 83451f5</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579204">- drm/vmwgfx: Remove unused compile options (bsc#1152472)
- commit fdc716b</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579205">- backlight: qcom-wled: Respect enabled-strings in set_brightness (bsc#1152489)
- commit 9612dd6</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579206">- drm/cma-helper: Set VM_DONTEXPAND for mmap (bsc#1152472)
- commit dd83cfa</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579207">- drm/i915: s/JSP2/ICP2/ PCH (bsc#1152489)
- commit 20ca121</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579208">- drm/amdgpu: fix amdgpu_ras_block_late_init error handler (bsc#1152489)
- commit e9f409a</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579209">- drm/fb-helper: Mark screen buffers in system memory with (bsc#1152472)
- commit 40b57d4</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579210">- USB: hcd-pci: Use PCI_STD_NUM_BARS when checking standard BARs (bsc#1152489)
- commit 30a990e</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579211">- drm/amd/display: Fix memory leak in dcn21_clock_source_create (bsc#1152472)
- commit f640496</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579212">- blacklist.conf: Append 'drm/i915: Fix syncmap memory leak'
- commit 5ad47f2</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579213">- blacklist.conf: Append 'drm/tegra: Add back arm_iommu_detach_device()'
- commit f7fdb0f</changelog>
  <changelog author="osalvador@suse.de" date="1651579214">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit a40b3c9</changelog>
  <changelog author="ohering@suse.de" date="1651665600">- net: mana: Remove unnecessary check of cqe_type in
  mana_process_rx_cqe() (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Use struct_size() helper in
  mana_gd_create_dma_region() (bsc#1195651).
- commit c23f4de</changelog>
  <changelog author="martin.wilck@suse.com" date="1651665601">- Revert lpfc driver update to 14.2.0.1 (bsc#1198989)
- commit eb15c95</changelog>
  <changelog author="oneukum@suse.com" date="1651665602">- usb: dwc3: core: Fix tx/rx threshold settings (git-fixes).
- commit c81dcdc</changelog>
  <changelog author="oneukum@suse.com" date="1651665603">- usb: dwc3: core: Only handle soft-reset in DCTL (git-fixes).
- commit 454e4d6</changelog>
  <changelog author="oneukum@suse.com" date="1651665604">- usb: dwc3: gadget: Return proper request status (git-fixes).
- commit 73a340f</changelog>
</package>
<package pkgid="5f6fd2e08c4a7ee2ff74cc93d354d19c64a58481d002120acccc2109c705a3b8" name="dvb-utils" arch="aarch64">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="a1ca10dd65a564fcaefb2ce310b0a8cf3f75153a8bcfa4ced0f0c96ac640eaf9" name="dvb-utils" arch="ppc64le">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="8b1945fc8332d911bf082d66b429325e9295ae96fa29e3f9fa07eeb46d933d18" name="dvb-utils" arch="s390x">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="a1d704f5966e2d12a121848a2d5f72556bd0045a9e027050e9ea00b23d443d83" name="dvb-utils" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="e8436e3ea135c173a6f4255cf40f2bfac82db762844192a95b892ea17eb065f5" name="e2fsprogs" arch="aarch64">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="6f713cdc6711f1577cffd21af622121f401b302859a780d4ac215aa85bdda814" name="e2fsprogs" arch="ppc64le">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="c93dfcffc7bf45d7f9029f68839869f3282292bb9131318842b319ec68180c70" name="e2fsprogs" arch="s390x">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="655170b29ccdcf88259d6b5a34d602bef257af6aaeedcfe58fb0a54fd1d6c812" name="e2fsprogs" arch="src">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="6b2a26e4cde352f2170e13f211b754cd6f7f593afb84a1cfba8bfb9a97f6d516" name="e2fsprogs" arch="x86_64">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="9a1bab8582812530a4b538120a58b2f35645d530fc29e6e3813c07fd2ec4117f" name="e2fsprogs-devel" arch="aarch64">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="537b753ba54e3d3caea80455737290959e30da7901d6d7f579e7260206ddc6d7" name="e2fsprogs-devel" arch="ppc64le">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="cfae8706c8edd2bd8d14ec8b2d338c3d71e85806702d655c00c74629fc7c6640" name="e2fsprogs-devel" arch="s390x">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="86584366665230f4bfbe9fbcaf38bc12696d8b6528e986d1cc6a4c14b8f24dc5" name="e2fsprogs-devel" arch="x86_64">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="0fd9ebc8849b1e164c3dda140c96fb5fb05300b4c11cbfeceed9a04f7427f26e" name="e2fsprogs-scrub" arch="aarch64">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="483032f1508fad4e7dea01ab4202f9b8e54e9165445a6444caffae67cefeac9f" name="e2fsprogs-scrub" arch="ppc64le">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="e214c6e37e8159afb3b4be78162de34e1dd66433f3eb782873a67ee5102ae988" name="e2fsprogs-scrub" arch="s390x">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="9d4567059a02ad395596e637ed272c745f212c6468a7ab0a727c8a789ff9554c" name="e2fsprogs-scrub" arch="x86_64">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="925e26c97dd1fc787d45d0ef3c14e1c717cd16b24df754c67c2c19a74d641dae" name="fbiterm" arch="aarch64">
  <version epoch="0" ver="0.5.20040304" rel="150000.5.6.1"/>
  <changelog author="pgajdos@suse.com" date="1360843200">- add bdftopcf into build requires [bnc#803276]</changelog>
  <changelog author="pgajdos@suse.com" date="1362484800">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- README.SuSE renamed to README.SUSE [bnc#889032] (internal)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414843200">- Switch to pkgconfig() buildrequires instead of using
  metapackage xorg-x11-devel</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- implict-ptsname-decl.patch: fix implicit declaration of ptsname with
  glibc &gt;= 2.24</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="schwab@suse.de" date="1502884800">- Prerequire group(tty)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Conflict libiterm1 with terminfo-iterm: terminfo-iterm is an
  alternative to xiterm, and the conflict is meant to be.</changelog>
  <changelog author="schwab@suse.de" date="1565265600">- stropts.patch: remove use of obsolete XSI STREAMS interface</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- added patches
  fix do not enable application keypad mode [bsc#1158271]
  + xiterm-no-keypad-application-mode.patch
- big thanks to Stefan Hundhammer</changelog>
</package>
<package pkgid="96fbe7b9fe11cf54c3175933e14942899dc6e57f77d40e6a6f0552acaf842757" name="fbiterm" arch="ppc64le">
  <version epoch="0" ver="0.5.20040304" rel="150000.5.6.1"/>
  <changelog author="pgajdos@suse.com" date="1360843200">- add bdftopcf into build requires [bnc#803276]</changelog>
  <changelog author="pgajdos@suse.com" date="1362484800">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- README.SuSE renamed to README.SUSE [bnc#889032] (internal)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414843200">- Switch to pkgconfig() buildrequires instead of using
  metapackage xorg-x11-devel</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- implict-ptsname-decl.patch: fix implicit declaration of ptsname with
  glibc &gt;= 2.24</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="schwab@suse.de" date="1502884800">- Prerequire group(tty)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Conflict libiterm1 with terminfo-iterm: terminfo-iterm is an
  alternative to xiterm, and the conflict is meant to be.</changelog>
  <changelog author="schwab@suse.de" date="1565265600">- stropts.patch: remove use of obsolete XSI STREAMS interface</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- added patches
  fix do not enable application keypad mode [bsc#1158271]
  + xiterm-no-keypad-application-mode.patch
- big thanks to Stefan Hundhammer</changelog>
</package>
<package pkgid="30d781fef08f4a837872324b14cc71ff14cf84392b5be1c46d787e40fab68bde" name="fbiterm" arch="s390x">
  <version epoch="0" ver="0.5.20040304" rel="150000.5.6.1"/>
  <changelog author="pgajdos@suse.com" date="1360843200">- add bdftopcf into build requires [bnc#803276]</changelog>
  <changelog author="pgajdos@suse.com" date="1362484800">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- README.SuSE renamed to README.SUSE [bnc#889032] (internal)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414843200">- Switch to pkgconfig() buildrequires instead of using
  metapackage xorg-x11-devel</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- implict-ptsname-decl.patch: fix implicit declaration of ptsname with
  glibc &gt;= 2.24</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="schwab@suse.de" date="1502884800">- Prerequire group(tty)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Conflict libiterm1 with terminfo-iterm: terminfo-iterm is an
  alternative to xiterm, and the conflict is meant to be.</changelog>
  <changelog author="schwab@suse.de" date="1565265600">- stropts.patch: remove use of obsolete XSI STREAMS interface</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- added patches
  fix do not enable application keypad mode [bsc#1158271]
  + xiterm-no-keypad-application-mode.patch
- big thanks to Stefan Hundhammer</changelog>
</package>
<package pkgid="31095adf54d4538adbe864b0a14929ed1e92c1dac63cad91c7077d590d9a7cca" name="fbiterm" arch="x86_64">
  <version epoch="0" ver="0.5.20040304" rel="150000.5.6.1"/>
  <changelog author="pgajdos@suse.com" date="1360843200">- add bdftopcf into build requires [bnc#803276]</changelog>
  <changelog author="pgajdos@suse.com" date="1362484800">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- README.SuSE renamed to README.SUSE [bnc#889032] (internal)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414843200">- Switch to pkgconfig() buildrequires instead of using
  metapackage xorg-x11-devel</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- implict-ptsname-decl.patch: fix implicit declaration of ptsname with
  glibc &gt;= 2.24</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="schwab@suse.de" date="1502884800">- Prerequire group(tty)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Conflict libiterm1 with terminfo-iterm: terminfo-iterm is an
  alternative to xiterm, and the conflict is meant to be.</changelog>
  <changelog author="schwab@suse.de" date="1565265600">- stropts.patch: remove use of obsolete XSI STREAMS interface</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- added patches
  fix do not enable application keypad mode [bsc#1158271]
  + xiterm-no-keypad-application-mode.patch
- big thanks to Stefan Hundhammer</changelog>
</package>
<package pkgid="3937b5e95c47c6d5f0c509dcc6181abb00ca44cc4bf2150bf386e9055c563a7d" name="fence-sanlock" arch="aarch64">
  <version epoch="0" ver="3.6.0" rel="150000.4.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1426939200">- Update to version 3.2.2
  * reset: native timeout
  * reset: Reduce logging noise to stderr and syslog
  * sanlock, reset: coverity fixes
- Refactor specfile to be policy compliant
- Use download Url as source
- Add xz build requires; needed as the source tarball is compressed
  with xz
- Do not provide both systemd and sysvinit support on a same system;
  it's redundant
- Add systemd backward compatibility links
- Update patchs:
  * suse-no-date-time.patch
  * suse-systemd.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1434715200">- Update to sanlock 3.2.4
  - Add conf file sanlock.conf
  - Add pkgconfig files
  - Numerous improvements and bug fixes.  For details, see
    https://git.fedorahosted.org/cgit/sanlock.git/log/</changelog>
  <changelog author="kukuk@suse.com" date="1489233600">- Add group disk as Prerequires</changelog>
  <changelog author="zren@suse.com" date="1489579200">- Update to sanlock 3.4.0
- Enable fence_sanlockd so that lvm2 can use the new lvmlocked
  feature in cluster environment
  * fix unpackaged file - /usr/sbin/rcfence_sanlockd
  * refresh suse-no-date-time.patch to cover the same issue
    in fence_sanlockd
  * adjust fence_sanlockd.init and suse-systemd.patch
- Enable sanlk-reset subpackage
- Fix "undefined symbol to io_suspend" at runtime, bsc#1030060
  suse-fix-link-errors.patch</changelog>
  <changelog author="meissner@suse.com" date="1490788800">- prerequire groupadd and useradd.</changelog>
  <changelog author="mpluskal@suse.com" date="1491220800">- Use correct permissions on unit files (bsc#1032046)</changelog>
  <changelog author="jfehlig@suse.com" date="1491220801">- Use System/Base in fence and reset subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1491220802">- spec: fix permissions on config files</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Remove redundant %if guards around %package and scriptlets.
  They are only really needed for %files.
- Replace $RPM_ shell vars by modern macros.
- Trim descriptions a little.</changelog>
  <changelog author="jfehlig@suse.com" date="1496836800">- Update to sanlock 3.5.0
  - increase open file limit to 2048
  - add option to log UTC timestamps
  - doc improvements
- Remove support for old, non-systemd distros</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jfehlig@suse.com" date="1512475200">- Update to sanlock 3.6.0
  - preserve dblock values when setting shared flag
  - fix detection of shared lease
  - fix release interference with paxos
  - retry ballot when new lver is seen
  - add a NOWAIT flag for convert</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Cleanup with spec-cleaner (only support SLE12 and newer)
- Add -fno-strict-aliasing to python subpkg
- Create rcsanlk-resetd link for the service control</changelog>
  <changelog author="tchvatal@suse.com" date="1521633601">- Add code to build with both python2 and python3 bindings with
  provided condition so we can later on optionalize python2 builds
  sanlock-python3.patch
  bsc#1076414</changelog>
  <changelog author="jfehlig@suse.com" date="1522065600">- Fix module initialization to work with both python2 and python3
  Updated sanlock-python3.patch
  bsc#1076414</changelog>
  <changelog author="jfehlig@suse.com" date="1649160000">- spec: Add libuuid as a build requirement to fix compilation on
  SLE15 SP4
  bsc#1197853</changelog>
</package>
<package pkgid="e5deaa750323f58813844720781a0274710633890e0a0e61479fab648fc217f6" name="fence-sanlock" arch="ppc64le">
  <version epoch="0" ver="3.6.0" rel="150000.4.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1426939200">- Update to version 3.2.2
  * reset: native timeout
  * reset: Reduce logging noise to stderr and syslog
  * sanlock, reset: coverity fixes
- Refactor specfile to be policy compliant
- Use download Url as source
- Add xz build requires; needed as the source tarball is compressed
  with xz
- Do not provide both systemd and sysvinit support on a same system;
  it's redundant
- Add systemd backward compatibility links
- Update patchs:
  * suse-no-date-time.patch
  * suse-systemd.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1434715200">- Update to sanlock 3.2.4
  - Add conf file sanlock.conf
  - Add pkgconfig files
  - Numerous improvements and bug fixes.  For details, see
    https://git.fedorahosted.org/cgit/sanlock.git/log/</changelog>
  <changelog author="kukuk@suse.com" date="1489233600">- Add group disk as Prerequires</changelog>
  <changelog author="zren@suse.com" date="1489579200">- Update to sanlock 3.4.0
- Enable fence_sanlockd so that lvm2 can use the new lvmlocked
  feature in cluster environment
  * fix unpackaged file - /usr/sbin/rcfence_sanlockd
  * refresh suse-no-date-time.patch to cover the same issue
    in fence_sanlockd
  * adjust fence_sanlockd.init and suse-systemd.patch
- Enable sanlk-reset subpackage
- Fix "undefined symbol to io_suspend" at runtime, bsc#1030060
  suse-fix-link-errors.patch</changelog>
  <changelog author="meissner@suse.com" date="1490788800">- prerequire groupadd and useradd.</changelog>
  <changelog author="mpluskal@suse.com" date="1491220800">- Use correct permissions on unit files (bsc#1032046)</changelog>
  <changelog author="jfehlig@suse.com" date="1491220801">- Use System/Base in fence and reset subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1491220802">- spec: fix permissions on config files</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Remove redundant %if guards around %package and scriptlets.
  They are only really needed for %files.
- Replace $RPM_ shell vars by modern macros.
- Trim descriptions a little.</changelog>
  <changelog author="jfehlig@suse.com" date="1496836800">- Update to sanlock 3.5.0
  - increase open file limit to 2048
  - add option to log UTC timestamps
  - doc improvements
- Remove support for old, non-systemd distros</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jfehlig@suse.com" date="1512475200">- Update to sanlock 3.6.0
  - preserve dblock values when setting shared flag
  - fix detection of shared lease
  - fix release interference with paxos
  - retry ballot when new lver is seen
  - add a NOWAIT flag for convert</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Cleanup with spec-cleaner (only support SLE12 and newer)
- Add -fno-strict-aliasing to python subpkg
- Create rcsanlk-resetd link for the service control</changelog>
  <changelog author="tchvatal@suse.com" date="1521633601">- Add code to build with both python2 and python3 bindings with
  provided condition so we can later on optionalize python2 builds
  sanlock-python3.patch
  bsc#1076414</changelog>
  <changelog author="jfehlig@suse.com" date="1522065600">- Fix module initialization to work with both python2 and python3
  Updated sanlock-python3.patch
  bsc#1076414</changelog>
  <changelog author="jfehlig@suse.com" date="1649160000">- spec: Add libuuid as a build requirement to fix compilation on
  SLE15 SP4
  bsc#1197853</changelog>
</package>
<package pkgid="5d25ba736a3acb1afed8a6a859e0d226803c7c7d70723e528b978f4c35fd6e41" name="fence-sanlock" arch="s390x">
  <version epoch="0" ver="3.6.0" rel="150000.4.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1426939200">- Update to version 3.2.2
  * reset: native timeout
  * reset: Reduce logging noise to stderr and syslog
  * sanlock, reset: coverity fixes
- Refactor specfile to be policy compliant
- Use download Url as source
- Add xz build requires; needed as the source tarball is compressed
  with xz
- Do not provide both systemd and sysvinit support on a same system;
  it's redundant
- Add systemd backward compatibility links
- Update patchs:
  * suse-no-date-time.patch
  * suse-systemd.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1434715200">- Update to sanlock 3.2.4
  - Add conf file sanlock.conf
  - Add pkgconfig files
  - Numerous improvements and bug fixes.  For details, see
    https://git.fedorahosted.org/cgit/sanlock.git/log/</changelog>
  <changelog author="kukuk@suse.com" date="1489233600">- Add group disk as Prerequires</changelog>
  <changelog author="zren@suse.com" date="1489579200">- Update to sanlock 3.4.0
- Enable fence_sanlockd so that lvm2 can use the new lvmlocked
  feature in cluster environment
  * fix unpackaged file - /usr/sbin/rcfence_sanlockd
  * refresh suse-no-date-time.patch to cover the same issue
    in fence_sanlockd
  * adjust fence_sanlockd.init and suse-systemd.patch
- Enable sanlk-reset subpackage
- Fix "undefined symbol to io_suspend" at runtime, bsc#1030060
  suse-fix-link-errors.patch</changelog>
  <changelog author="meissner@suse.com" date="1490788800">- prerequire groupadd and useradd.</changelog>
  <changelog author="mpluskal@suse.com" date="1491220800">- Use correct permissions on unit files (bsc#1032046)</changelog>
  <changelog author="jfehlig@suse.com" date="1491220801">- Use System/Base in fence and reset subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1491220802">- spec: fix permissions on config files</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Remove redundant %if guards around %package and scriptlets.
  They are only really needed for %files.
- Replace $RPM_ shell vars by modern macros.
- Trim descriptions a little.</changelog>
  <changelog author="jfehlig@suse.com" date="1496836800">- Update to sanlock 3.5.0
  - increase open file limit to 2048
  - add option to log UTC timestamps
  - doc improvements
- Remove support for old, non-systemd distros</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jfehlig@suse.com" date="1512475200">- Update to sanlock 3.6.0
  - preserve dblock values when setting shared flag
  - fix detection of shared lease
  - fix release interference with paxos
  - retry ballot when new lver is seen
  - add a NOWAIT flag for convert</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Cleanup with spec-cleaner (only support SLE12 and newer)
- Add -fno-strict-aliasing to python subpkg
- Create rcsanlk-resetd link for the service control</changelog>
  <changelog author="tchvatal@suse.com" date="1521633601">- Add code to build with both python2 and python3 bindings with
  provided condition so we can later on optionalize python2 builds
  sanlock-python3.patch
  bsc#1076414</changelog>
  <changelog author="jfehlig@suse.com" date="1522065600">- Fix module initialization to work with both python2 and python3
  Updated sanlock-python3.patch
  bsc#1076414</changelog>
  <changelog author="jfehlig@suse.com" date="1649160000">- spec: Add libuuid as a build requirement to fix compilation on
  SLE15 SP4
  bsc#1197853</changelog>
</package>
<package pkgid="d0da2f95c1a6994398f5961ba4c82f72abf2c5080582bb96e014abf0110075cc" name="fence-sanlock" arch="x86_64">
  <version epoch="0" ver="3.6.0" rel="150000.4.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1426939200">- Update to version 3.2.2
  * reset: native timeout
  * reset: Reduce logging noise to stderr and syslog
  * sanlock, reset: coverity fixes
- Refactor specfile to be policy compliant
- Use download Url as source
- Add xz build requires; needed as the source tarball is compressed
  with xz
- Do not provide both systemd and sysvinit support on a same system;
  it's redundant
- Add systemd backward compatibility links
- Update patchs:
  * suse-no-date-time.patch
  * suse-systemd.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1434715200">- Update to sanlock 3.2.4
  - Add conf file sanlock.conf
  - Add pkgconfig files
  - Numerous improvements and bug fixes.  For details, see
    https://git.fedorahosted.org/cgit/sanlock.git/log/</changelog>
  <changelog author="kukuk@suse.com" date="1489233600">- Add group disk as Prerequires</changelog>
  <changelog author="zren@suse.com" date="1489579200">- Update to sanlock 3.4.0
- Enable fence_sanlockd so that lvm2 can use the new lvmlocked
  feature in cluster environment
  * fix unpackaged file - /usr/sbin/rcfence_sanlockd
  * refresh suse-no-date-time.patch to cover the same issue
    in fence_sanlockd
  * adjust fence_sanlockd.init and suse-systemd.patch
- Enable sanlk-reset subpackage
- Fix "undefined symbol to io_suspend" at runtime, bsc#1030060
  suse-fix-link-errors.patch</changelog>
  <changelog author="meissner@suse.com" date="1490788800">- prerequire groupadd and useradd.</changelog>
  <changelog author="mpluskal@suse.com" date="1491220800">- Use correct permissions on unit files (bsc#1032046)</changelog>
  <changelog author="jfehlig@suse.com" date="1491220801">- Use System/Base in fence and reset subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1491220802">- spec: fix permissions on config files</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Remove redundant %if guards around %package and scriptlets.
  They are only really needed for %files.
- Replace $RPM_ shell vars by modern macros.
- Trim descriptions a little.</changelog>
  <changelog author="jfehlig@suse.com" date="1496836800">- Update to sanlock 3.5.0
  - increase open file limit to 2048
  - add option to log UTC timestamps
  - doc improvements
- Remove support for old, non-systemd distros</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jfehlig@suse.com" date="1512475200">- Update to sanlock 3.6.0
  - preserve dblock values when setting shared flag
  - fix detection of shared lease
  - fix release interference with paxos
  - retry ballot when new lver is seen
  - add a NOWAIT flag for convert</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Cleanup with spec-cleaner (only support SLE12 and newer)
- Add -fno-strict-aliasing to python subpkg
- Create rcsanlk-resetd link for the service control</changelog>
  <changelog author="tchvatal@suse.com" date="1521633601">- Add code to build with both python2 and python3 bindings with
  provided condition so we can later on optionalize python2 builds
  sanlock-python3.patch
  bsc#1076414</changelog>
  <changelog author="jfehlig@suse.com" date="1522065600">- Fix module initialization to work with both python2 and python3
  Updated sanlock-python3.patch
  bsc#1076414</changelog>
  <changelog author="jfehlig@suse.com" date="1649160000">- spec: Add libuuid as a build requirement to fix compilation on
  SLE15 SP4
  bsc#1197853</changelog>
</package>
<package pkgid="fad3b342d864047b64dd21a54f879f10673d0cb0fcd5c1af8d962e782490fd19" name="finch" arch="aarch64">
  <version epoch="0" ver="2.13.0" rel="150200.12.6.1"/>
  <changelog author="jengelh@inai.de" date="1469188800">- Drop additional pkgconfig require (already implicitly detected),
  but explicitly buildrequire it for /usr/lib/rpm/pkgconfigdeps.sh.</changelog>
  <changelog author="fezhang@suse.com" date="1479816000">- Add pidgin-sasl-skip-external.patch:
  Backport upstream commit 6106566. Makes Freenode and other
  servers that prefer SASL EXTERNAL fingerprint authentication
  work again (bsc#1009974).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481112000">- Build with GStreamer 1.x on SLE 12 SP2.
- Apply pidgin-use-default-alsa.patch for SLE 12+ only properly.
- Provide libpurple-branding-upstream for SLE 11 as well.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481198400">- Make libpurple require libpurple-branding.
- Correctly remove *.so files for plugins
  (fixes devel-file-in-non-devel-package).
- Rename libpurple-meanwhile to libpurple-plugin-sametime.
- Remove generation of a plugin list to package, simply add it all
  in %files with exclusions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489147200">- Update to version 2.12.0 (FATE#323136):
  + libpurple:
  - Fix an out of bounds memory read in
    purple_markup_unescape_entity (CVE-2017-2640, bsc#1028835).
  - Fix the use of uninitialised memory if running
    non-debug-enabled versions of glib.
  - Update AIM dev and dist ID's to new ones that were assigned
    by AOL.
  - TLS certificate verification now uses SHA-256 checksums.
  - Fix the SASL external auth for Freenode (boo#1009974).
  - Remove the MSN protocol plugin. It has been unusable and
    dormant for some time.
  - Remove the Mxit protocol plugin. The service was closed at
    the end ofSeptember 2016.
  - Remove the MySpaceIM protocol plugin. The service has been
    defunct for a long time (pidgin.im#15356).
  - Remove the Yahoo! protocol plugin. Yahoo has completely
    reimplemented their protocol, so this version is no longer
    operable as of August 5th, 2016.
  - Remove the Facebook (XMPP) account option. According to
    https://developers.facebook.com/docs/chat the XMPP Chat API
    service ended April 30th, 2015.
  - Fix gnutls certificate validation errors that mainly
    affected Google.
  + General:
  - Replace instances of d.pidgin.im with developer.pidgin.im and
    update the urls to use https (pidgin.im#17036).
  + IRC:
  - Fix an issue of messages being silently cut off at 500
    characters. Large messages are now split into parts and sent
    one by one (pidgin.im#4753).
- Rebase pidgin-nonblock-common.patch.
- Remove pidgin-sasl-skip-external.patch.
- Remove pidgin-NLD-smiley-theme.tar.bz2, deprecated.
- Remove pidgin-Tango-smiley-theme.tar.bz2, deprecated</changelog>
  <changelog author="tchvatal@suse.com" date="1500724800">- Drop dependency over silc-toolkit-devel as we want to remove
  it from the distribution</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Explicitly require python2</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510056000">- Correct the licence to GPL-2.0.</changelog>
  <changelog author="fezhang@suse.com" date="1511265600">- Add purple-import-empathy Recommends for SLE15 (FATE#322984).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Remove pidgin-crash-missing-gst-registry.patch: is useless now
  and is potentially harmful.
- Merge pidgin-nonblock-common2.patch to
  pidgin-nonblock-common.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Update pidgin-ncurses-6.0-accessors.patch to cope with ncurses
  enabling opaque-panels. Pidgin should not access internal
  structures of ncurses.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520337601">- Drop support for SLE 11 and openSUSE older than 42.x.
- Remove pidgin-gnome-keyring.patch: was only useful for SLE 11.</changelog>
  <changelog author="mgorse@suse.com" date="1520337602">- Add pidgin-2.10.11-purple-remote-python3.patch: port
  purple-remote to python 3 (bsc#1084147).
- Export PYTHON=python3 in %build.
- Adjust scripts to invoke python3, not python2.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 2.13.0:
  + libpurple:
  * Unified string comparison.
  * Properlly shell escape URI's when opening them.
  * Fix a one byte buffer overread in function
    purple_markup_linkify.
  * Fix an issue were utf8 was incorrectly truncated which could
    lead to crashes as we were potentially feeding garbage into
    glib/gtk.
  + libgnt:
  * Partially fix building against curses 6.0 with opaque
    structs set (pidgin.im#16764).
  * Fix a crash when resizing the window (pidgin.im#16680).
  + General:
  * Fix a bashism in autotools (pidgin.im#16836).
  + XMPP:
  * Show XEP-0066 OOB URLs in any message, not just headlines.
  * Fix a user after free (pidgin.im#17200).
  * Remove pipelining from BOSH connections (pidgin.im#17025).
  * Don't try to TLS already secured BOSH connections
    (pidgin.im#17270).
  + IRC:
  * Fix "Registration timeout" on SASL auth with InspIRCd
    servers (and possibly others not based on
    charybdis/ratbox/ircd-seven).
  * Fix issues with plugins that modify outgoing messages (such
    as the custom PART/QUIT feature of the IRC More plugin).
  * Fix IRC buffer handling (pidgin.im#12562).
  * Properly handle AUTHENTICATE as a normal command with server
    prefix.
  * Fix a crash caused by a use after free of the MOTD.
  * Fix an out of bounds read in irc_nick_skip_mode.
  * Fix a write of a single byte before the start of a buffer in
    irc_parse_ctcp.
  + Pidgin:
  * Better support for dark themes (pidgin.im#12572).
  * Fix IPv6 links by not escaping []'s. (pidgin.im#16391).
  * Only write buddy icons to the cache if they're not already
    cached.
  * Rejoin persistent chats after reconnect (pidgin.im#15687).
  * Make the WIN32 Transparency plugin work on all platforms
    (pidgin.im#3124).
  * Ensure search results buttons are labelled.
  * Fix matching unicode emoticons (pidgin.im#17232).
  * Correctly update mute/unmute status when the remote side
    mutes/unmutes us (pidgin.im#17273).
  * Rework the status icon blinking to not use deprecated API
    (pidgin.im#17174).
  * Do not allow adding a buddy to protocols that don't have an
    add_buddy callback.
  + Finch:
  * Fix handling of search results (pidgin.im#17238).
  + Voice &amp; Video:
  * Port backend-fs to newer api for farstream relay-info
    property (pidgin.im#17274).
- Rebase pidgin-ncurses-6.0-accessors.patch.
- Remove pidgin-2.10.11-purple-remote-python3.patch: fixed
  upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Instead of removing the libjabber.so, liboscar.so symlinks, move
  them to the devel package.</changelog>
  <changelog author="fezhang@suse.com" date="1523534400">- Add pidgin-enable-sni-gnutls.patch: Enable SNI for gnutls to
  avoid SSL handshake failure, patch written by Tiago Herrmann
  (therrmann@suse.com) (bsc#1086439, pidgin.im#17300).</changelog>
  <changelog author="dimstar@opensuse.org" date="1523966400">- Drop pkgconfig(NetworkManager) BuildRequires and Requires: this
  legacy symbol is no longer maintained and pidgin is not yet
  ready to move to libnm. As a side-effect, we no longer depend on
  NM for all situations, even if the system were to run wicked.
- Replace --enable-nm configure parameter with --disable-nm.</changelog>
  <changelog author="fezhang@suse.com" date="1571745600">- Add pidgin-Leaky-deprecation-clean-ups.patch: Fix warnings of
  deprecation of GParameter that result in build failures of
  plugins that build with -Werror (pidgin.im#17415).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624536000">- Add pidgin-add-no_proxy-support.patch: add support of no_proxy
  environment variable. (jsc#SLE-17111, pidgin.im#17518)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1652097600">- Add pidgin-CVE-2022-26491.patch: Remove _xmppconnect support
  (bsc#1199025, CVE-2022-26491).</changelog>
</package>
<package pkgid="5ff963e2e2bc0927e3f189d5a6d4cb0a66b2094fff8782626b39d3a875501ed5" name="finch" arch="ppc64le">
  <version epoch="0" ver="2.13.0" rel="150200.12.6.1"/>
  <changelog author="jengelh@inai.de" date="1469188800">- Drop additional pkgconfig require (already implicitly detected),
  but explicitly buildrequire it for /usr/lib/rpm/pkgconfigdeps.sh.</changelog>
  <changelog author="fezhang@suse.com" date="1479816000">- Add pidgin-sasl-skip-external.patch:
  Backport upstream commit 6106566. Makes Freenode and other
  servers that prefer SASL EXTERNAL fingerprint authentication
  work again (bsc#1009974).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481112000">- Build with GStreamer 1.x on SLE 12 SP2.
- Apply pidgin-use-default-alsa.patch for SLE 12+ only properly.
- Provide libpurple-branding-upstream for SLE 11 as well.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481198400">- Make libpurple require libpurple-branding.
- Correctly remove *.so files for plugins
  (fixes devel-file-in-non-devel-package).
- Rename libpurple-meanwhile to libpurple-plugin-sametime.
- Remove generation of a plugin list to package, simply add it all
  in %files with exclusions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489147200">- Update to version 2.12.0 (FATE#323136):
  + libpurple:
  - Fix an out of bounds memory read in
    purple_markup_unescape_entity (CVE-2017-2640, bsc#1028835).
  - Fix the use of uninitialised memory if running
    non-debug-enabled versions of glib.
  - Update AIM dev and dist ID's to new ones that were assigned
    by AOL.
  - TLS certificate verification now uses SHA-256 checksums.
  - Fix the SASL external auth for Freenode (boo#1009974).
  - Remove the MSN protocol plugin. It has been unusable and
    dormant for some time.
  - Remove the Mxit protocol plugin. The service was closed at
    the end ofSeptember 2016.
  - Remove the MySpaceIM protocol plugin. The service has been
    defunct for a long time (pidgin.im#15356).
  - Remove the Yahoo! protocol plugin. Yahoo has completely
    reimplemented their protocol, so this version is no longer
    operable as of August 5th, 2016.
  - Remove the Facebook (XMPP) account option. According to
    https://developers.facebook.com/docs/chat the XMPP Chat API
    service ended April 30th, 2015.
  - Fix gnutls certificate validation errors that mainly
    affected Google.
  + General:
  - Replace instances of d.pidgin.im with developer.pidgin.im and
    update the urls to use https (pidgin.im#17036).
  + IRC:
  - Fix an issue of messages being silently cut off at 500
    characters. Large messages are now split into parts and sent
    one by one (pidgin.im#4753).
- Rebase pidgin-nonblock-common.patch.
- Remove pidgin-sasl-skip-external.patch.
- Remove pidgin-NLD-smiley-theme.tar.bz2, deprecated.
- Remove pidgin-Tango-smiley-theme.tar.bz2, deprecated</changelog>
  <changelog author="tchvatal@suse.com" date="1500724800">- Drop dependency over silc-toolkit-devel as we want to remove
  it from the distribution</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Explicitly require python2</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510056000">- Correct the licence to GPL-2.0.</changelog>
  <changelog author="fezhang@suse.com" date="1511265600">- Add purple-import-empathy Recommends for SLE15 (FATE#322984).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Remove pidgin-crash-missing-gst-registry.patch: is useless now
  and is potentially harmful.
- Merge pidgin-nonblock-common2.patch to
  pidgin-nonblock-common.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Update pidgin-ncurses-6.0-accessors.patch to cope with ncurses
  enabling opaque-panels. Pidgin should not access internal
  structures of ncurses.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520337601">- Drop support for SLE 11 and openSUSE older than 42.x.
- Remove pidgin-gnome-keyring.patch: was only useful for SLE 11.</changelog>
  <changelog author="mgorse@suse.com" date="1520337602">- Add pidgin-2.10.11-purple-remote-python3.patch: port
  purple-remote to python 3 (bsc#1084147).
- Export PYTHON=python3 in %build.
- Adjust scripts to invoke python3, not python2.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 2.13.0:
  + libpurple:
  * Unified string comparison.
  * Properlly shell escape URI's when opening them.
  * Fix a one byte buffer overread in function
    purple_markup_linkify.
  * Fix an issue were utf8 was incorrectly truncated which could
    lead to crashes as we were potentially feeding garbage into
    glib/gtk.
  + libgnt:
  * Partially fix building against curses 6.0 with opaque
    structs set (pidgin.im#16764).
  * Fix a crash when resizing the window (pidgin.im#16680).
  + General:
  * Fix a bashism in autotools (pidgin.im#16836).
  + XMPP:
  * Show XEP-0066 OOB URLs in any message, not just headlines.
  * Fix a user after free (pidgin.im#17200).
  * Remove pipelining from BOSH connections (pidgin.im#17025).
  * Don't try to TLS already secured BOSH connections
    (pidgin.im#17270).
  + IRC:
  * Fix "Registration timeout" on SASL auth with InspIRCd
    servers (and possibly others not based on
    charybdis/ratbox/ircd-seven).
  * Fix issues with plugins that modify outgoing messages (such
    as the custom PART/QUIT feature of the IRC More plugin).
  * Fix IRC buffer handling (pidgin.im#12562).
  * Properly handle AUTHENTICATE as a normal command with server
    prefix.
  * Fix a crash caused by a use after free of the MOTD.
  * Fix an out of bounds read in irc_nick_skip_mode.
  * Fix a write of a single byte before the start of a buffer in
    irc_parse_ctcp.
  + Pidgin:
  * Better support for dark themes (pidgin.im#12572).
  * Fix IPv6 links by not escaping []'s. (pidgin.im#16391).
  * Only write buddy icons to the cache if they're not already
    cached.
  * Rejoin persistent chats after reconnect (pidgin.im#15687).
  * Make the WIN32 Transparency plugin work on all platforms
    (pidgin.im#3124).
  * Ensure search results buttons are labelled.
  * Fix matching unicode emoticons (pidgin.im#17232).
  * Correctly update mute/unmute status when the remote side
    mutes/unmutes us (pidgin.im#17273).
  * Rework the status icon blinking to not use deprecated API
    (pidgin.im#17174).
  * Do not allow adding a buddy to protocols that don't have an
    add_buddy callback.
  + Finch:
  * Fix handling of search results (pidgin.im#17238).
  + Voice &amp; Video:
  * Port backend-fs to newer api for farstream relay-info
    property (pidgin.im#17274).
- Rebase pidgin-ncurses-6.0-accessors.patch.
- Remove pidgin-2.10.11-purple-remote-python3.patch: fixed
  upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Instead of removing the libjabber.so, liboscar.so symlinks, move
  them to the devel package.</changelog>
  <changelog author="fezhang@suse.com" date="1523534400">- Add pidgin-enable-sni-gnutls.patch: Enable SNI for gnutls to
  avoid SSL handshake failure, patch written by Tiago Herrmann
  (therrmann@suse.com) (bsc#1086439, pidgin.im#17300).</changelog>
  <changelog author="dimstar@opensuse.org" date="1523966400">- Drop pkgconfig(NetworkManager) BuildRequires and Requires: this
  legacy symbol is no longer maintained and pidgin is not yet
  ready to move to libnm. As a side-effect, we no longer depend on
  NM for all situations, even if the system were to run wicked.
- Replace --enable-nm configure parameter with --disable-nm.</changelog>
  <changelog author="fezhang@suse.com" date="1571745600">- Add pidgin-Leaky-deprecation-clean-ups.patch: Fix warnings of
  deprecation of GParameter that result in build failures of
  plugins that build with -Werror (pidgin.im#17415).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624536000">- Add pidgin-add-no_proxy-support.patch: add support of no_proxy
  environment variable. (jsc#SLE-17111, pidgin.im#17518)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1652097600">- Add pidgin-CVE-2022-26491.patch: Remove _xmppconnect support
  (bsc#1199025, CVE-2022-26491).</changelog>
</package>
<package pkgid="c7e6ad58d49523fd4a72f10b0f3d759ec5c8e9fe4a374d19bab0ecb3c3a26323" name="finch" arch="s390x">
  <version epoch="0" ver="2.13.0" rel="150200.12.6.1"/>
  <changelog author="jengelh@inai.de" date="1469188800">- Drop additional pkgconfig require (already implicitly detected),
  but explicitly buildrequire it for /usr/lib/rpm/pkgconfigdeps.sh.</changelog>
  <changelog author="fezhang@suse.com" date="1479816000">- Add pidgin-sasl-skip-external.patch:
  Backport upstream commit 6106566. Makes Freenode and other
  servers that prefer SASL EXTERNAL fingerprint authentication
  work again (bsc#1009974).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481112000">- Build with GStreamer 1.x on SLE 12 SP2.
- Apply pidgin-use-default-alsa.patch for SLE 12+ only properly.
- Provide libpurple-branding-upstream for SLE 11 as well.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481198400">- Make libpurple require libpurple-branding.
- Correctly remove *.so files for plugins
  (fixes devel-file-in-non-devel-package).
- Rename libpurple-meanwhile to libpurple-plugin-sametime.
- Remove generation of a plugin list to package, simply add it all
  in %files with exclusions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489147200">- Update to version 2.12.0 (FATE#323136):
  + libpurple:
  - Fix an out of bounds memory read in
    purple_markup_unescape_entity (CVE-2017-2640, bsc#1028835).
  - Fix the use of uninitialised memory if running
    non-debug-enabled versions of glib.
  - Update AIM dev and dist ID's to new ones that were assigned
    by AOL.
  - TLS certificate verification now uses SHA-256 checksums.
  - Fix the SASL external auth for Freenode (boo#1009974).
  - Remove the MSN protocol plugin. It has been unusable and
    dormant for some time.
  - Remove the Mxit protocol plugin. The service was closed at
    the end ofSeptember 2016.
  - Remove the MySpaceIM protocol plugin. The service has been
    defunct for a long time (pidgin.im#15356).
  - Remove the Yahoo! protocol plugin. Yahoo has completely
    reimplemented their protocol, so this version is no longer
    operable as of August 5th, 2016.
  - Remove the Facebook (XMPP) account option. According to
    https://developers.facebook.com/docs/chat the XMPP Chat API
    service ended April 30th, 2015.
  - Fix gnutls certificate validation errors that mainly
    affected Google.
  + General:
  - Replace instances of d.pidgin.im with developer.pidgin.im and
    update the urls to use https (pidgin.im#17036).
  + IRC:
  - Fix an issue of messages being silently cut off at 500
    characters. Large messages are now split into parts and sent
    one by one (pidgin.im#4753).
- Rebase pidgin-nonblock-common.patch.
- Remove pidgin-sasl-skip-external.patch.
- Remove pidgin-NLD-smiley-theme.tar.bz2, deprecated.
- Remove pidgin-Tango-smiley-theme.tar.bz2, deprecated</changelog>
  <changelog author="tchvatal@suse.com" date="1500724800">- Drop dependency over silc-toolkit-devel as we want to remove
  it from the distribution</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Explicitly require python2</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510056000">- Correct the licence to GPL-2.0.</changelog>
  <changelog author="fezhang@suse.com" date="1511265600">- Add purple-import-empathy Recommends for SLE15 (FATE#322984).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Remove pidgin-crash-missing-gst-registry.patch: is useless now
  and is potentially harmful.
- Merge pidgin-nonblock-common2.patch to
  pidgin-nonblock-common.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Update pidgin-ncurses-6.0-accessors.patch to cope with ncurses
  enabling opaque-panels. Pidgin should not access internal
  structures of ncurses.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520337601">- Drop support for SLE 11 and openSUSE older than 42.x.
- Remove pidgin-gnome-keyring.patch: was only useful for SLE 11.</changelog>
  <changelog author="mgorse@suse.com" date="1520337602">- Add pidgin-2.10.11-purple-remote-python3.patch: port
  purple-remote to python 3 (bsc#1084147).
- Export PYTHON=python3 in %build.
- Adjust scripts to invoke python3, not python2.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 2.13.0:
  + libpurple:
  * Unified string comparison.
  * Properlly shell escape URI's when opening them.
  * Fix a one byte buffer overread in function
    purple_markup_linkify.
  * Fix an issue were utf8 was incorrectly truncated which could
    lead to crashes as we were potentially feeding garbage into
    glib/gtk.
  + libgnt:
  * Partially fix building against curses 6.0 with opaque
    structs set (pidgin.im#16764).
  * Fix a crash when resizing the window (pidgin.im#16680).
  + General:
  * Fix a bashism in autotools (pidgin.im#16836).
  + XMPP:
  * Show XEP-0066 OOB URLs in any message, not just headlines.
  * Fix a user after free (pidgin.im#17200).
  * Remove pipelining from BOSH connections (pidgin.im#17025).
  * Don't try to TLS already secured BOSH connections
    (pidgin.im#17270).
  + IRC:
  * Fix "Registration timeout" on SASL auth with InspIRCd
    servers (and possibly others not based on
    charybdis/ratbox/ircd-seven).
  * Fix issues with plugins that modify outgoing messages (such
    as the custom PART/QUIT feature of the IRC More plugin).
  * Fix IRC buffer handling (pidgin.im#12562).
  * Properly handle AUTHENTICATE as a normal command with server
    prefix.
  * Fix a crash caused by a use after free of the MOTD.
  * Fix an out of bounds read in irc_nick_skip_mode.
  * Fix a write of a single byte before the start of a buffer in
    irc_parse_ctcp.
  + Pidgin:
  * Better support for dark themes (pidgin.im#12572).
  * Fix IPv6 links by not escaping []'s. (pidgin.im#16391).
  * Only write buddy icons to the cache if they're not already
    cached.
  * Rejoin persistent chats after reconnect (pidgin.im#15687).
  * Make the WIN32 Transparency plugin work on all platforms
    (pidgin.im#3124).
  * Ensure search results buttons are labelled.
  * Fix matching unicode emoticons (pidgin.im#17232).
  * Correctly update mute/unmute status when the remote side
    mutes/unmutes us (pidgin.im#17273).
  * Rework the status icon blinking to not use deprecated API
    (pidgin.im#17174).
  * Do not allow adding a buddy to protocols that don't have an
    add_buddy callback.
  + Finch:
  * Fix handling of search results (pidgin.im#17238).
  + Voice &amp; Video:
  * Port backend-fs to newer api for farstream relay-info
    property (pidgin.im#17274).
- Rebase pidgin-ncurses-6.0-accessors.patch.
- Remove pidgin-2.10.11-purple-remote-python3.patch: fixed
  upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Instead of removing the libjabber.so, liboscar.so symlinks, move
  them to the devel package.</changelog>
  <changelog author="fezhang@suse.com" date="1523534400">- Add pidgin-enable-sni-gnutls.patch: Enable SNI for gnutls to
  avoid SSL handshake failure, patch written by Tiago Herrmann
  (therrmann@suse.com) (bsc#1086439, pidgin.im#17300).</changelog>
  <changelog author="dimstar@opensuse.org" date="1523966400">- Drop pkgconfig(NetworkManager) BuildRequires and Requires: this
  legacy symbol is no longer maintained and pidgin is not yet
  ready to move to libnm. As a side-effect, we no longer depend on
  NM for all situations, even if the system were to run wicked.
- Replace --enable-nm configure parameter with --disable-nm.</changelog>
  <changelog author="fezhang@suse.com" date="1571745600">- Add pidgin-Leaky-deprecation-clean-ups.patch: Fix warnings of
  deprecation of GParameter that result in build failures of
  plugins that build with -Werror (pidgin.im#17415).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624536000">- Add pidgin-add-no_proxy-support.patch: add support of no_proxy
  environment variable. (jsc#SLE-17111, pidgin.im#17518)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1652097600">- Add pidgin-CVE-2022-26491.patch: Remove _xmppconnect support
  (bsc#1199025, CVE-2022-26491).</changelog>
</package>
<package pkgid="817d18a3cb9cc6223f6b339b391b8b938edcecdffd7877db023367fb23306aff" name="finch" arch="x86_64">
  <version epoch="0" ver="2.13.0" rel="150200.12.6.1"/>
  <changelog author="jengelh@inai.de" date="1469188800">- Drop additional pkgconfig require (already implicitly detected),
  but explicitly buildrequire it for /usr/lib/rpm/pkgconfigdeps.sh.</changelog>
  <changelog author="fezhang@suse.com" date="1479816000">- Add pidgin-sasl-skip-external.patch:
  Backport upstream commit 6106566. Makes Freenode and other
  servers that prefer SASL EXTERNAL fingerprint authentication
  work again (bsc#1009974).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481112000">- Build with GStreamer 1.x on SLE 12 SP2.
- Apply pidgin-use-default-alsa.patch for SLE 12+ only properly.
- Provide libpurple-branding-upstream for SLE 11 as well.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481198400">- Make libpurple require libpurple-branding.
- Correctly remove *.so files for plugins
  (fixes devel-file-in-non-devel-package).
- Rename libpurple-meanwhile to libpurple-plugin-sametime.
- Remove generation of a plugin list to package, simply add it all
  in %files with exclusions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489147200">- Update to version 2.12.0 (FATE#323136):
  + libpurple:
  - Fix an out of bounds memory read in
    purple_markup_unescape_entity (CVE-2017-2640, bsc#1028835).
  - Fix the use of uninitialised memory if running
    non-debug-enabled versions of glib.
  - Update AIM dev and dist ID's to new ones that were assigned
    by AOL.
  - TLS certificate verification now uses SHA-256 checksums.
  - Fix the SASL external auth for Freenode (boo#1009974).
  - Remove the MSN protocol plugin. It has been unusable and
    dormant for some time.
  - Remove the Mxit protocol plugin. The service was closed at
    the end ofSeptember 2016.
  - Remove the MySpaceIM protocol plugin. The service has been
    defunct for a long time (pidgin.im#15356).
  - Remove the Yahoo! protocol plugin. Yahoo has completely
    reimplemented their protocol, so this version is no longer
    operable as of August 5th, 2016.
  - Remove the Facebook (XMPP) account option. According to
    https://developers.facebook.com/docs/chat the XMPP Chat API
    service ended April 30th, 2015.
  - Fix gnutls certificate validation errors that mainly
    affected Google.
  + General:
  - Replace instances of d.pidgin.im with developer.pidgin.im and
    update the urls to use https (pidgin.im#17036).
  + IRC:
  - Fix an issue of messages being silently cut off at 500
    characters. Large messages are now split into parts and sent
    one by one (pidgin.im#4753).
- Rebase pidgin-nonblock-common.patch.
- Remove pidgin-sasl-skip-external.patch.
- Remove pidgin-NLD-smiley-theme.tar.bz2, deprecated.
- Remove pidgin-Tango-smiley-theme.tar.bz2, deprecated</changelog>
  <changelog author="tchvatal@suse.com" date="1500724800">- Drop dependency over silc-toolkit-devel as we want to remove
  it from the distribution</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Explicitly require python2</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510056000">- Correct the licence to GPL-2.0.</changelog>
  <changelog author="fezhang@suse.com" date="1511265600">- Add purple-import-empathy Recommends for SLE15 (FATE#322984).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Remove pidgin-crash-missing-gst-registry.patch: is useless now
  and is potentially harmful.
- Merge pidgin-nonblock-common2.patch to
  pidgin-nonblock-common.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Update pidgin-ncurses-6.0-accessors.patch to cope with ncurses
  enabling opaque-panels. Pidgin should not access internal
  structures of ncurses.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520337601">- Drop support for SLE 11 and openSUSE older than 42.x.
- Remove pidgin-gnome-keyring.patch: was only useful for SLE 11.</changelog>
  <changelog author="mgorse@suse.com" date="1520337602">- Add pidgin-2.10.11-purple-remote-python3.patch: port
  purple-remote to python 3 (bsc#1084147).
- Export PYTHON=python3 in %build.
- Adjust scripts to invoke python3, not python2.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 2.13.0:
  + libpurple:
  * Unified string comparison.
  * Properlly shell escape URI's when opening them.
  * Fix a one byte buffer overread in function
    purple_markup_linkify.
  * Fix an issue were utf8 was incorrectly truncated which could
    lead to crashes as we were potentially feeding garbage into
    glib/gtk.
  + libgnt:
  * Partially fix building against curses 6.0 with opaque
    structs set (pidgin.im#16764).
  * Fix a crash when resizing the window (pidgin.im#16680).
  + General:
  * Fix a bashism in autotools (pidgin.im#16836).
  + XMPP:
  * Show XEP-0066 OOB URLs in any message, not just headlines.
  * Fix a user after free (pidgin.im#17200).
  * Remove pipelining from BOSH connections (pidgin.im#17025).
  * Don't try to TLS already secured BOSH connections
    (pidgin.im#17270).
  + IRC:
  * Fix "Registration timeout" on SASL auth with InspIRCd
    servers (and possibly others not based on
    charybdis/ratbox/ircd-seven).
  * Fix issues with plugins that modify outgoing messages (such
    as the custom PART/QUIT feature of the IRC More plugin).
  * Fix IRC buffer handling (pidgin.im#12562).
  * Properly handle AUTHENTICATE as a normal command with server
    prefix.
  * Fix a crash caused by a use after free of the MOTD.
  * Fix an out of bounds read in irc_nick_skip_mode.
  * Fix a write of a single byte before the start of a buffer in
    irc_parse_ctcp.
  + Pidgin:
  * Better support for dark themes (pidgin.im#12572).
  * Fix IPv6 links by not escaping []'s. (pidgin.im#16391).
  * Only write buddy icons to the cache if they're not already
    cached.
  * Rejoin persistent chats after reconnect (pidgin.im#15687).
  * Make the WIN32 Transparency plugin work on all platforms
    (pidgin.im#3124).
  * Ensure search results buttons are labelled.
  * Fix matching unicode emoticons (pidgin.im#17232).
  * Correctly update mute/unmute status when the remote side
    mutes/unmutes us (pidgin.im#17273).
  * Rework the status icon blinking to not use deprecated API
    (pidgin.im#17174).
  * Do not allow adding a buddy to protocols that don't have an
    add_buddy callback.
  + Finch:
  * Fix handling of search results (pidgin.im#17238).
  + Voice &amp; Video:
  * Port backend-fs to newer api for farstream relay-info
    property (pidgin.im#17274).
- Rebase pidgin-ncurses-6.0-accessors.patch.
- Remove pidgin-2.10.11-purple-remote-python3.patch: fixed
  upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Instead of removing the libjabber.so, liboscar.so symlinks, move
  them to the devel package.</changelog>
  <changelog author="fezhang@suse.com" date="1523534400">- Add pidgin-enable-sni-gnutls.patch: Enable SNI for gnutls to
  avoid SSL handshake failure, patch written by Tiago Herrmann
  (therrmann@suse.com) (bsc#1086439, pidgin.im#17300).</changelog>
  <changelog author="dimstar@opensuse.org" date="1523966400">- Drop pkgconfig(NetworkManager) BuildRequires and Requires: this
  legacy symbol is no longer maintained and pidgin is not yet
  ready to move to libnm. As a side-effect, we no longer depend on
  NM for all situations, even if the system were to run wicked.
- Replace --enable-nm configure parameter with --disable-nm.</changelog>
  <changelog author="fezhang@suse.com" date="1571745600">- Add pidgin-Leaky-deprecation-clean-ups.patch: Fix warnings of
  deprecation of GParameter that result in build failures of
  plugins that build with -Werror (pidgin.im#17415).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624536000">- Add pidgin-add-no_proxy-support.patch: add support of no_proxy
  environment variable. (jsc#SLE-17111, pidgin.im#17518)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1652097600">- Add pidgin-CVE-2022-26491.patch: Remove _xmppconnect support
  (bsc#1199025, CVE-2022-26491).</changelog>
</package>
<package pkgid="7a873d13f9fff246f412f489cb81c1c403ebf5269ea7fdcdba62165bca786405" name="finch-devel" arch="aarch64">
  <version epoch="0" ver="2.13.0" rel="150200.12.6.1"/>
  <changelog author="jengelh@inai.de" date="1469188800">- Drop additional pkgconfig require (already implicitly detected),
  but explicitly buildrequire it for /usr/lib/rpm/pkgconfigdeps.sh.</changelog>
  <changelog author="fezhang@suse.com" date="1479816000">- Add pidgin-sasl-skip-external.patch:
  Backport upstream commit 6106566. Makes Freenode and other
  servers that prefer SASL EXTERNAL fingerprint authentication
  work again (bsc#1009974).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481112000">- Build with GStreamer 1.x on SLE 12 SP2.
- Apply pidgin-use-default-alsa.patch for SLE 12+ only properly.
- Provide libpurple-branding-upstream for SLE 11 as well.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481198400">- Make libpurple require libpurple-branding.
- Correctly remove *.so files for plugins
  (fixes devel-file-in-non-devel-package).
- Rename libpurple-meanwhile to libpurple-plugin-sametime.
- Remove generation of a plugin list to package, simply add it all
  in %files with exclusions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489147200">- Update to version 2.12.0 (FATE#323136):
  + libpurple:
  - Fix an out of bounds memory read in
    purple_markup_unescape_entity (CVE-2017-2640, bsc#1028835).
  - Fix the use of uninitialised memory if running
    non-debug-enabled versions of glib.
  - Update AIM dev and dist ID's to new ones that were assigned
    by AOL.
  - TLS certificate verification now uses SHA-256 checksums.
  - Fix the SASL external auth for Freenode (boo#1009974).
  - Remove the MSN protocol plugin. It has been unusable and
    dormant for some time.
  - Remove the Mxit protocol plugin. The service was closed at
    the end ofSeptember 2016.
  - Remove the MySpaceIM protocol plugin. The service has been
    defunct for a long time (pidgin.im#15356).
  - Remove the Yahoo! protocol plugin. Yahoo has completely
    reimplemented their protocol, so this version is no longer
    operable as of August 5th, 2016.
  - Remove the Facebook (XMPP) account option. According to
    https://developers.facebook.com/docs/chat the XMPP Chat API
    service ended April 30th, 2015.
  - Fix gnutls certificate validation errors that mainly
    affected Google.
  + General:
  - Replace instances of d.pidgin.im with developer.pidgin.im and
    update the urls to use https (pidgin.im#17036).
  + IRC:
  - Fix an issue of messages being silently cut off at 500
    characters. Large messages are now split into parts and sent
    one by one (pidgin.im#4753).
- Rebase pidgin-nonblock-common.patch.
- Remove pidgin-sasl-skip-external.patch.
- Remove pidgin-NLD-smiley-theme.tar.bz2, deprecated.
- Remove pidgin-Tango-smiley-theme.tar.bz2, deprecated</changelog>
  <changelog author="tchvatal@suse.com" date="1500724800">- Drop dependency over silc-toolkit-devel as we want to remove
  it from the distribution</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Explicitly require python2</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510056000">- Correct the licence to GPL-2.0.</changelog>
  <changelog author="fezhang@suse.com" date="1511265600">- Add purple-import-empathy Recommends for SLE15 (FATE#322984).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Remove pidgin-crash-missing-gst-registry.patch: is useless now
  and is potentially harmful.
- Merge pidgin-nonblock-common2.patch to
  pidgin-nonblock-common.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Update pidgin-ncurses-6.0-accessors.patch to cope with ncurses
  enabling opaque-panels. Pidgin should not access internal
  structures of ncurses.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520337601">- Drop support for SLE 11 and openSUSE older than 42.x.
- Remove pidgin-gnome-keyring.patch: was only useful for SLE 11.</changelog>
  <changelog author="mgorse@suse.com" date="1520337602">- Add pidgin-2.10.11-purple-remote-python3.patch: port
  purple-remote to python 3 (bsc#1084147).
- Export PYTHON=python3 in %build.
- Adjust scripts to invoke python3, not python2.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 2.13.0:
  + libpurple:
  * Unified string comparison.
  * Properlly shell escape URI's when opening them.
  * Fix a one byte buffer overread in function
    purple_markup_linkify.
  * Fix an issue were utf8 was incorrectly truncated which could
    lead to crashes as we were potentially feeding garbage into
    glib/gtk.
  + libgnt:
  * Partially fix building against curses 6.0 with opaque
    structs set (pidgin.im#16764).
  * Fix a crash when resizing the window (pidgin.im#16680).
  + General:
  * Fix a bashism in autotools (pidgin.im#16836).
  + XMPP:
  * Show XEP-0066 OOB URLs in any message, not just headlines.
  * Fix a user after free (pidgin.im#17200).
  * Remove pipelining from BOSH connections (pidgin.im#17025).
  * Don't try to TLS already secured BOSH connections
    (pidgin.im#17270).
  + IRC:
  * Fix "Registration timeout" on SASL auth with InspIRCd
    servers (and possibly others not based on
    charybdis/ratbox/ircd-seven).
  * Fix issues with plugins that modify outgoing messages (such
    as the custom PART/QUIT feature of the IRC More plugin).
  * Fix IRC buffer handling (pidgin.im#12562).
  * Properly handle AUTHENTICATE as a normal command with server
    prefix.
  * Fix a crash caused by a use after free of the MOTD.
  * Fix an out of bounds read in irc_nick_skip_mode.
  * Fix a write of a single byte before the start of a buffer in
    irc_parse_ctcp.
  + Pidgin:
  * Better support for dark themes (pidgin.im#12572).
  * Fix IPv6 links by not escaping []'s. (pidgin.im#16391).
  * Only write buddy icons to the cache if they're not already
    cached.
  * Rejoin persistent chats after reconnect (pidgin.im#15687).
  * Make the WIN32 Transparency plugin work on all platforms
    (pidgin.im#3124).
  * Ensure search results buttons are labelled.
  * Fix matching unicode emoticons (pidgin.im#17232).
  * Correctly update mute/unmute status when the remote side
    mutes/unmutes us (pidgin.im#17273).
  * Rework the status icon blinking to not use deprecated API
    (pidgin.im#17174).
  * Do not allow adding a buddy to protocols that don't have an
    add_buddy callback.
  + Finch:
  * Fix handling of search results (pidgin.im#17238).
  + Voice &amp; Video:
  * Port backend-fs to newer api for farstream relay-info
    property (pidgin.im#17274).
- Rebase pidgin-ncurses-6.0-accessors.patch.
- Remove pidgin-2.10.11-purple-remote-python3.patch: fixed
  upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Instead of removing the libjabber.so, liboscar.so symlinks, move
  them to the devel package.</changelog>
  <changelog author="fezhang@suse.com" date="1523534400">- Add pidgin-enable-sni-gnutls.patch: Enable SNI for gnutls to
  avoid SSL handshake failure, patch written by Tiago Herrmann
  (therrmann@suse.com) (bsc#1086439, pidgin.im#17300).</changelog>
  <changelog author="dimstar@opensuse.org" date="1523966400">- Drop pkgconfig(NetworkManager) BuildRequires and Requires: this
  legacy symbol is no longer maintained and pidgin is not yet
  ready to move to libnm. As a side-effect, we no longer depend on
  NM for all situations, even if the system were to run wicked.
- Replace --enable-nm configure parameter with --disable-nm.</changelog>
  <changelog author="fezhang@suse.com" date="1571745600">- Add pidgin-Leaky-deprecation-clean-ups.patch: Fix warnings of
  deprecation of GParameter that result in build failures of
  plugins that build with -Werror (pidgin.im#17415).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624536000">- Add pidgin-add-no_proxy-support.patch: add support of no_proxy
  environment variable. (jsc#SLE-17111, pidgin.im#17518)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1652097600">- Add pidgin-CVE-2022-26491.patch: Remove _xmppconnect support
  (bsc#1199025, CVE-2022-26491).</changelog>
</package>
<package pkgid="9384bcc172dd655c1e4f873560efe9901d5ba1bacfb1f3781435fa6bc9f37641" name="finch-devel" arch="ppc64le">
  <version epoch="0" ver="2.13.0" rel="150200.12.6.1"/>
  <changelog author="jengelh@inai.de" date="1469188800">- Drop additional pkgconfig require (already implicitly detected),
  but explicitly buildrequire it for /usr/lib/rpm/pkgconfigdeps.sh.</changelog>
  <changelog author="fezhang@suse.com" date="1479816000">- Add pidgin-sasl-skip-external.patch:
  Backport upstream commit 6106566. Makes Freenode and other
  servers that prefer SASL EXTERNAL fingerprint authentication
  work again (bsc#1009974).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481112000">- Build with GStreamer 1.x on SLE 12 SP2.
- Apply pidgin-use-default-alsa.patch for SLE 12+ only properly.
- Provide libpurple-branding-upstream for SLE 11 as well.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481198400">- Make libpurple require libpurple-branding.
- Correctly remove *.so files for plugins
  (fixes devel-file-in-non-devel-package).
- Rename libpurple-meanwhile to libpurple-plugin-sametime.
- Remove generation of a plugin list to package, simply add it all
  in %files with exclusions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489147200">- Update to version 2.12.0 (FATE#323136):
  + libpurple:
  - Fix an out of bounds memory read in
    purple_markup_unescape_entity (CVE-2017-2640, bsc#1028835).
  - Fix the use of uninitialised memory if running
    non-debug-enabled versions of glib.
  - Update AIM dev and dist ID's to new ones that were assigned
    by AOL.
  - TLS certificate verification now uses SHA-256 checksums.
  - Fix the SASL external auth for Freenode (boo#1009974).
  - Remove the MSN protocol plugin. It has been unusable and
    dormant for some time.
  - Remove the Mxit protocol plugin. The service was closed at
    the end ofSeptember 2016.
  - Remove the MySpaceIM protocol plugin. The service has been
    defunct for a long time (pidgin.im#15356).
  - Remove the Yahoo! protocol plugin. Yahoo has completely
    reimplemented their protocol, so this version is no longer
    operable as of August 5th, 2016.
  - Remove the Facebook (XMPP) account option. According to
    https://developers.facebook.com/docs/chat the XMPP Chat API
    service ended April 30th, 2015.
  - Fix gnutls certificate validation errors that mainly
    affected Google.
  + General:
  - Replace instances of d.pidgin.im with developer.pidgin.im and
    update the urls to use https (pidgin.im#17036).
  + IRC:
  - Fix an issue of messages being silently cut off at 500
    characters. Large messages are now split into parts and sent
    one by one (pidgin.im#4753).
- Rebase pidgin-nonblock-common.patch.
- Remove pidgin-sasl-skip-external.patch.
- Remove pidgin-NLD-smiley-theme.tar.bz2, deprecated.
- Remove pidgin-Tango-smiley-theme.tar.bz2, deprecated</changelog>
  <changelog author="tchvatal@suse.com" date="1500724800">- Drop dependency over silc-toolkit-devel as we want to remove
  it from the distribution</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Explicitly require python2</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510056000">- Correct the licence to GPL-2.0.</changelog>
  <changelog author="fezhang@suse.com" date="1511265600">- Add purple-import-empathy Recommends for SLE15 (FATE#322984).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Remove pidgin-crash-missing-gst-registry.patch: is useless now
  and is potentially harmful.
- Merge pidgin-nonblock-common2.patch to
  pidgin-nonblock-common.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Update pidgin-ncurses-6.0-accessors.patch to cope with ncurses
  enabling opaque-panels. Pidgin should not access internal
  structures of ncurses.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520337601">- Drop support for SLE 11 and openSUSE older than 42.x.
- Remove pidgin-gnome-keyring.patch: was only useful for SLE 11.</changelog>
  <changelog author="mgorse@suse.com" date="1520337602">- Add pidgin-2.10.11-purple-remote-python3.patch: port
  purple-remote to python 3 (bsc#1084147).
- Export PYTHON=python3 in %build.
- Adjust scripts to invoke python3, not python2.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 2.13.0:
  + libpurple:
  * Unified string comparison.
  * Properlly shell escape URI's when opening them.
  * Fix a one byte buffer overread in function
    purple_markup_linkify.
  * Fix an issue were utf8 was incorrectly truncated which could
    lead to crashes as we were potentially feeding garbage into
    glib/gtk.
  + libgnt:
  * Partially fix building against curses 6.0 with opaque
    structs set (pidgin.im#16764).
  * Fix a crash when resizing the window (pidgin.im#16680).
  + General:
  * Fix a bashism in autotools (pidgin.im#16836).
  + XMPP:
  * Show XEP-0066 OOB URLs in any message, not just headlines.
  * Fix a user after free (pidgin.im#17200).
  * Remove pipelining from BOSH connections (pidgin.im#17025).
  * Don't try to TLS already secured BOSH connections
    (pidgin.im#17270).
  + IRC:
  * Fix "Registration timeout" on SASL auth with InspIRCd
    servers (and possibly others not based on
    charybdis/ratbox/ircd-seven).
  * Fix issues with plugins that modify outgoing messages (such
    as the custom PART/QUIT feature of the IRC More plugin).
  * Fix IRC buffer handling (pidgin.im#12562).
  * Properly handle AUTHENTICATE as a normal command with server
    prefix.
  * Fix a crash caused by a use after free of the MOTD.
  * Fix an out of bounds read in irc_nick_skip_mode.
  * Fix a write of a single byte before the start of a buffer in
    irc_parse_ctcp.
  + Pidgin:
  * Better support for dark themes (pidgin.im#12572).
  * Fix IPv6 links by not escaping []'s. (pidgin.im#16391).
  * Only write buddy icons to the cache if they're not already
    cached.
  * Rejoin persistent chats after reconnect (pidgin.im#15687).
  * Make the WIN32 Transparency plugin work on all platforms
    (pidgin.im#3124).
  * Ensure search results buttons are labelled.
  * Fix matching unicode emoticons (pidgin.im#17232).
  * Correctly update mute/unmute status when the remote side
    mutes/unmutes us (pidgin.im#17273).
  * Rework the status icon blinking to not use deprecated API
    (pidgin.im#17174).
  * Do not allow adding a buddy to protocols that don't have an
    add_buddy callback.
  + Finch:
  * Fix handling of search results (pidgin.im#17238).
  + Voice &amp; Video:
  * Port backend-fs to newer api for farstream relay-info
    property (pidgin.im#17274).
- Rebase pidgin-ncurses-6.0-accessors.patch.
- Remove pidgin-2.10.11-purple-remote-python3.patch: fixed
  upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Instead of removing the libjabber.so, liboscar.so symlinks, move
  them to the devel package.</changelog>
  <changelog author="fezhang@suse.com" date="1523534400">- Add pidgin-enable-sni-gnutls.patch: Enable SNI for gnutls to
  avoid SSL handshake failure, patch written by Tiago Herrmann
  (therrmann@suse.com) (bsc#1086439, pidgin.im#17300).</changelog>
  <changelog author="dimstar@opensuse.org" date="1523966400">- Drop pkgconfig(NetworkManager) BuildRequires and Requires: this
  legacy symbol is no longer maintained and pidgin is not yet
  ready to move to libnm. As a side-effect, we no longer depend on
  NM for all situations, even if the system were to run wicked.
- Replace --enable-nm configure parameter with --disable-nm.</changelog>
  <changelog author="fezhang@suse.com" date="1571745600">- Add pidgin-Leaky-deprecation-clean-ups.patch: Fix warnings of
  deprecation of GParameter that result in build failures of
  plugins that build with -Werror (pidgin.im#17415).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624536000">- Add pidgin-add-no_proxy-support.patch: add support of no_proxy
  environment variable. (jsc#SLE-17111, pidgin.im#17518)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1652097600">- Add pidgin-CVE-2022-26491.patch: Remove _xmppconnect support
  (bsc#1199025, CVE-2022-26491).</changelog>
</package>
<package pkgid="652f9b52375ccc974c9cc83e137762cbca2e6e5770a379eb57c0bd4178eba58a" name="finch-devel" arch="s390x">
  <version epoch="0" ver="2.13.0" rel="150200.12.6.1"/>
  <changelog author="jengelh@inai.de" date="1469188800">- Drop additional pkgconfig require (already implicitly detected),
  but explicitly buildrequire it for /usr/lib/rpm/pkgconfigdeps.sh.</changelog>
  <changelog author="fezhang@suse.com" date="1479816000">- Add pidgin-sasl-skip-external.patch:
  Backport upstream commit 6106566. Makes Freenode and other
  servers that prefer SASL EXTERNAL fingerprint authentication
  work again (bsc#1009974).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481112000">- Build with GStreamer 1.x on SLE 12 SP2.
- Apply pidgin-use-default-alsa.patch for SLE 12+ only properly.
- Provide libpurple-branding-upstream for SLE 11 as well.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481198400">- Make libpurple require libpurple-branding.
- Correctly remove *.so files for plugins
  (fixes devel-file-in-non-devel-package).
- Rename libpurple-meanwhile to libpurple-plugin-sametime.
- Remove generation of a plugin list to package, simply add it all
  in %files with exclusions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489147200">- Update to version 2.12.0 (FATE#323136):
  + libpurple:
  - Fix an out of bounds memory read in
    purple_markup_unescape_entity (CVE-2017-2640, bsc#1028835).
  - Fix the use of uninitialised memory if running
    non-debug-enabled versions of glib.
  - Update AIM dev and dist ID's to new ones that were assigned
    by AOL.
  - TLS certificate verification now uses SHA-256 checksums.
  - Fix the SASL external auth for Freenode (boo#1009974).
  - Remove the MSN protocol plugin. It has been unusable and
    dormant for some time.
  - Remove the Mxit protocol plugin. The service was closed at
    the end ofSeptember 2016.
  - Remove the MySpaceIM protocol plugin. The service has been
    defunct for a long time (pidgin.im#15356).
  - Remove the Yahoo! protocol plugin. Yahoo has completely
    reimplemented their protocol, so this version is no longer
    operable as of August 5th, 2016.
  - Remove the Facebook (XMPP) account option. According to
    https://developers.facebook.com/docs/chat the XMPP Chat API
    service ended April 30th, 2015.
  - Fix gnutls certificate validation errors that mainly
    affected Google.
  + General:
  - Replace instances of d.pidgin.im with developer.pidgin.im and
    update the urls to use https (pidgin.im#17036).
  + IRC:
  - Fix an issue of messages being silently cut off at 500
    characters. Large messages are now split into parts and sent
    one by one (pidgin.im#4753).
- Rebase pidgin-nonblock-common.patch.
- Remove pidgin-sasl-skip-external.patch.
- Remove pidgin-NLD-smiley-theme.tar.bz2, deprecated.
- Remove pidgin-Tango-smiley-theme.tar.bz2, deprecated</changelog>
  <changelog author="tchvatal@suse.com" date="1500724800">- Drop dependency over silc-toolkit-devel as we want to remove
  it from the distribution</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Explicitly require python2</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510056000">- Correct the licence to GPL-2.0.</changelog>
  <changelog author="fezhang@suse.com" date="1511265600">- Add purple-import-empathy Recommends for SLE15 (FATE#322984).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Remove pidgin-crash-missing-gst-registry.patch: is useless now
  and is potentially harmful.
- Merge pidgin-nonblock-common2.patch to
  pidgin-nonblock-common.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Update pidgin-ncurses-6.0-accessors.patch to cope with ncurses
  enabling opaque-panels. Pidgin should not access internal
  structures of ncurses.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520337601">- Drop support for SLE 11 and openSUSE older than 42.x.
- Remove pidgin-gnome-keyring.patch: was only useful for SLE 11.</changelog>
  <changelog author="mgorse@suse.com" date="1520337602">- Add pidgin-2.10.11-purple-remote-python3.patch: port
  purple-remote to python 3 (bsc#1084147).
- Export PYTHON=python3 in %build.
- Adjust scripts to invoke python3, not python2.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 2.13.0:
  + libpurple:
  * Unified string comparison.
  * Properlly shell escape URI's when opening them.
  * Fix a one byte buffer overread in function
    purple_markup_linkify.
  * Fix an issue were utf8 was incorrectly truncated which could
    lead to crashes as we were potentially feeding garbage into
    glib/gtk.
  + libgnt:
  * Partially fix building against curses 6.0 with opaque
    structs set (pidgin.im#16764).
  * Fix a crash when resizing the window (pidgin.im#16680).
  + General:
  * Fix a bashism in autotools (pidgin.im#16836).
  + XMPP:
  * Show XEP-0066 OOB URLs in any message, not just headlines.
  * Fix a user after free (pidgin.im#17200).
  * Remove pipelining from BOSH connections (pidgin.im#17025).
  * Don't try to TLS already secured BOSH connections
    (pidgin.im#17270).
  + IRC:
  * Fix "Registration timeout" on SASL auth with InspIRCd
    servers (and possibly others not based on
    charybdis/ratbox/ircd-seven).
  * Fix issues with plugins that modify outgoing messages (such
    as the custom PART/QUIT feature of the IRC More plugin).
  * Fix IRC buffer handling (pidgin.im#12562).
  * Properly handle AUTHENTICATE as a normal command with server
    prefix.
  * Fix a crash caused by a use after free of the MOTD.
  * Fix an out of bounds read in irc_nick_skip_mode.
  * Fix a write of a single byte before the start of a buffer in
    irc_parse_ctcp.
  + Pidgin:
  * Better support for dark themes (pidgin.im#12572).
  * Fix IPv6 links by not escaping []'s. (pidgin.im#16391).
  * Only write buddy icons to the cache if they're not already
    cached.
  * Rejoin persistent chats after reconnect (pidgin.im#15687).
  * Make the WIN32 Transparency plugin work on all platforms
    (pidgin.im#3124).
  * Ensure search results buttons are labelled.
  * Fix matching unicode emoticons (pidgin.im#17232).
  * Correctly update mute/unmute status when the remote side
    mutes/unmutes us (pidgin.im#17273).
  * Rework the status icon blinking to not use deprecated API
    (pidgin.im#17174).
  * Do not allow adding a buddy to protocols that don't have an
    add_buddy callback.
  + Finch:
  * Fix handling of search results (pidgin.im#17238).
  + Voice &amp; Video:
  * Port backend-fs to newer api for farstream relay-info
    property (pidgin.im#17274).
- Rebase pidgin-ncurses-6.0-accessors.patch.
- Remove pidgin-2.10.11-purple-remote-python3.patch: fixed
  upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Instead of removing the libjabber.so, liboscar.so symlinks, move
  them to the devel package.</changelog>
  <changelog author="fezhang@suse.com" date="1523534400">- Add pidgin-enable-sni-gnutls.patch: Enable SNI for gnutls to
  avoid SSL handshake failure, patch written by Tiago Herrmann
  (therrmann@suse.com) (bsc#1086439, pidgin.im#17300).</changelog>
  <changelog author="dimstar@opensuse.org" date="1523966400">- Drop pkgconfig(NetworkManager) BuildRequires and Requires: this
  legacy symbol is no longer maintained and pidgin is not yet
  ready to move to libnm. As a side-effect, we no longer depend on
  NM for all situations, even if the system were to run wicked.
- Replace --enable-nm configure parameter with --disable-nm.</changelog>
  <changelog author="fezhang@suse.com" date="1571745600">- Add pidgin-Leaky-deprecation-clean-ups.patch: Fix warnings of
  deprecation of GParameter that result in build failures of
  plugins that build with -Werror (pidgin.im#17415).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624536000">- Add pidgin-add-no_proxy-support.patch: add support of no_proxy
  environment variable. (jsc#SLE-17111, pidgin.im#17518)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1652097600">- Add pidgin-CVE-2022-26491.patch: Remove _xmppconnect support
  (bsc#1199025, CVE-2022-26491).</changelog>
</package>
<package pkgid="8d7a839b21e690fec8071673d980f9c4f3a2f5f95a8897697fa16321e994bbaa" name="finch-devel" arch="x86_64">
  <version epoch="0" ver="2.13.0" rel="150200.12.6.1"/>
  <changelog author="jengelh@inai.de" date="1469188800">- Drop additional pkgconfig require (already implicitly detected),
  but explicitly buildrequire it for /usr/lib/rpm/pkgconfigdeps.sh.</changelog>
  <changelog author="fezhang@suse.com" date="1479816000">- Add pidgin-sasl-skip-external.patch:
  Backport upstream commit 6106566. Makes Freenode and other
  servers that prefer SASL EXTERNAL fingerprint authentication
  work again (bsc#1009974).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481112000">- Build with GStreamer 1.x on SLE 12 SP2.
- Apply pidgin-use-default-alsa.patch for SLE 12+ only properly.
- Provide libpurple-branding-upstream for SLE 11 as well.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481198400">- Make libpurple require libpurple-branding.
- Correctly remove *.so files for plugins
  (fixes devel-file-in-non-devel-package).
- Rename libpurple-meanwhile to libpurple-plugin-sametime.
- Remove generation of a plugin list to package, simply add it all
  in %files with exclusions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489147200">- Update to version 2.12.0 (FATE#323136):
  + libpurple:
  - Fix an out of bounds memory read in
    purple_markup_unescape_entity (CVE-2017-2640, bsc#1028835).
  - Fix the use of uninitialised memory if running
    non-debug-enabled versions of glib.
  - Update AIM dev and dist ID's to new ones that were assigned
    by AOL.
  - TLS certificate verification now uses SHA-256 checksums.
  - Fix the SASL external auth for Freenode (boo#1009974).
  - Remove the MSN protocol plugin. It has been unusable and
    dormant for some time.
  - Remove the Mxit protocol plugin. The service was closed at
    the end ofSeptember 2016.
  - Remove the MySpaceIM protocol plugin. The service has been
    defunct for a long time (pidgin.im#15356).
  - Remove the Yahoo! protocol plugin. Yahoo has completely
    reimplemented their protocol, so this version is no longer
    operable as of August 5th, 2016.
  - Remove the Facebook (XMPP) account option. According to
    https://developers.facebook.com/docs/chat the XMPP Chat API
    service ended April 30th, 2015.
  - Fix gnutls certificate validation errors that mainly
    affected Google.
  + General:
  - Replace instances of d.pidgin.im with developer.pidgin.im and
    update the urls to use https (pidgin.im#17036).
  + IRC:
  - Fix an issue of messages being silently cut off at 500
    characters. Large messages are now split into parts and sent
    one by one (pidgin.im#4753).
- Rebase pidgin-nonblock-common.patch.
- Remove pidgin-sasl-skip-external.patch.
- Remove pidgin-NLD-smiley-theme.tar.bz2, deprecated.
- Remove pidgin-Tango-smiley-theme.tar.bz2, deprecated</changelog>
  <changelog author="tchvatal@suse.com" date="1500724800">- Drop dependency over silc-toolkit-devel as we want to remove
  it from the distribution</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Explicitly require python2</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510056000">- Correct the licence to GPL-2.0.</changelog>
  <changelog author="fezhang@suse.com" date="1511265600">- Add purple-import-empathy Recommends for SLE15 (FATE#322984).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Remove pidgin-crash-missing-gst-registry.patch: is useless now
  and is potentially harmful.
- Merge pidgin-nonblock-common2.patch to
  pidgin-nonblock-common.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Update pidgin-ncurses-6.0-accessors.patch to cope with ncurses
  enabling opaque-panels. Pidgin should not access internal
  structures of ncurses.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520337601">- Drop support for SLE 11 and openSUSE older than 42.x.
- Remove pidgin-gnome-keyring.patch: was only useful for SLE 11.</changelog>
  <changelog author="mgorse@suse.com" date="1520337602">- Add pidgin-2.10.11-purple-remote-python3.patch: port
  purple-remote to python 3 (bsc#1084147).
- Export PYTHON=python3 in %build.
- Adjust scripts to invoke python3, not python2.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 2.13.0:
  + libpurple:
  * Unified string comparison.
  * Properlly shell escape URI's when opening them.
  * Fix a one byte buffer overread in function
    purple_markup_linkify.
  * Fix an issue were utf8 was incorrectly truncated which could
    lead to crashes as we were potentially feeding garbage into
    glib/gtk.
  + libgnt:
  * Partially fix building against curses 6.0 with opaque
    structs set (pidgin.im#16764).
  * Fix a crash when resizing the window (pidgin.im#16680).
  + General:
  * Fix a bashism in autotools (pidgin.im#16836).
  + XMPP:
  * Show XEP-0066 OOB URLs in any message, not just headlines.
  * Fix a user after free (pidgin.im#17200).
  * Remove pipelining from BOSH connections (pidgin.im#17025).
  * Don't try to TLS already secured BOSH connections
    (pidgin.im#17270).
  + IRC:
  * Fix "Registration timeout" on SASL auth with InspIRCd
    servers (and possibly others not based on
    charybdis/ratbox/ircd-seven).
  * Fix issues with plugins that modify outgoing messages (such
    as the custom PART/QUIT feature of the IRC More plugin).
  * Fix IRC buffer handling (pidgin.im#12562).
  * Properly handle AUTHENTICATE as a normal command with server
    prefix.
  * Fix a crash caused by a use after free of the MOTD.
  * Fix an out of bounds read in irc_nick_skip_mode.
  * Fix a write of a single byte before the start of a buffer in
    irc_parse_ctcp.
  + Pidgin:
  * Better support for dark themes (pidgin.im#12572).
  * Fix IPv6 links by not escaping []'s. (pidgin.im#16391).
  * Only write buddy icons to the cache if they're not already
    cached.
  * Rejoin persistent chats after reconnect (pidgin.im#15687).
  * Make the WIN32 Transparency plugin work on all platforms
    (pidgin.im#3124).
  * Ensure search results buttons are labelled.
  * Fix matching unicode emoticons (pidgin.im#17232).
  * Correctly update mute/unmute status when the remote side
    mutes/unmutes us (pidgin.im#17273).
  * Rework the status icon blinking to not use deprecated API
    (pidgin.im#17174).
  * Do not allow adding a buddy to protocols that don't have an
    add_buddy callback.
  + Finch:
  * Fix handling of search results (pidgin.im#17238).
  + Voice &amp; Video:
  * Port backend-fs to newer api for farstream relay-info
    property (pidgin.im#17274).
- Rebase pidgin-ncurses-6.0-accessors.patch.
- Remove pidgin-2.10.11-purple-remote-python3.patch: fixed
  upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Instead of removing the libjabber.so, liboscar.so symlinks, move
  them to the devel package.</changelog>
  <changelog author="fezhang@suse.com" date="1523534400">- Add pidgin-enable-sni-gnutls.patch: Enable SNI for gnutls to
  avoid SSL handshake failure, patch written by Tiago Herrmann
  (therrmann@suse.com) (bsc#1086439, pidgin.im#17300).</changelog>
  <changelog author="dimstar@opensuse.org" date="1523966400">- Drop pkgconfig(NetworkManager) BuildRequires and Requires: this
  legacy symbol is no longer maintained and pidgin is not yet
  ready to move to libnm. As a side-effect, we no longer depend on
  NM for all situations, even if the system were to run wicked.
- Replace --enable-nm configure parameter with --disable-nm.</changelog>
  <changelog author="fezhang@suse.com" date="1571745600">- Add pidgin-Leaky-deprecation-clean-ups.patch: Fix warnings of
  deprecation of GParameter that result in build failures of
  plugins that build with -Werror (pidgin.im#17415).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624536000">- Add pidgin-add-no_proxy-support.patch: add support of no_proxy
  environment variable. (jsc#SLE-17111, pidgin.im#17518)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1652097600">- Add pidgin-CVE-2022-26491.patch: Remove _xmppconnect support
  (bsc#1199025, CVE-2022-26491).</changelog>
</package>
<package pkgid="8bbf944eb83563a90af65bf5fca8979cef3149a41eb2f18ef48950750bce6d0e" name="fribidi" arch="aarch64">
  <version epoch="0" ver="1.0.10" rel="150400.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="mliska@suse.cz" date="1575028800">- Use %make_build macros.</changelog>
  <changelog author="kieltux@gmail.com" date="1590148800">- Add no-config-h.diff - copied from Debian
  Remove HAVE_CONFIG_H from public API
- Add Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff -
  copied from Debian, CVE-2019-18397
  Truncate isolate_level to FRIBIDI_BIDI_MAX_EXPLICIT_LEVEL
- Run spec-cleaner</changelog>
  <changelog author="elimat@opensuse.org" date="1596974400">- Update to version 1.0.10:
  * Fixed various compilation problems and symbol exports necessary for
    proper compilation under windows.
- Changes from version 1.0.9:
  * A bug fix in the fribidi unicode algorithm where isolate sequences were
    not really isolated.
  * Restored mistakenly removed deprecated function
    fribidi_log2vis_get_embedding_levels()
  * autotools now generates xz archives instead of bzip2 archives
- Changes from version 1.0.8:
  * A bug fix in the fribidi unicode algorithm for multiple isolate
    sequences.
  * Fixed a potential buffer overflow for a long sequence of isolate
    overrides characters (bsc#1156260 CVE-2019-18397)
- Changes from version 1.0.7:
  * This is a minor bugfix that removes symlinks and updates the meson
    version.
- Changes from version 1.0.6:
  * This is a minor bugfix release that fixes a list of minor issues that
    have turned up during the last year.
  * Various compilation and cross compilation issues.
  * Various minor header cleanups.
  * Removed libc's bsearch for performance and portability reasons
- Run spec-cleaner
  * Remove package groups
- Drop patches fixed upstream
  * Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff
  * no-config-h.diff
  * fribidi-CVE-2019-18397.patch</changelog>
  <changelog author="mgorse@suse.com" date="1652443200">- Add fribidi-CVE-2022-25308.patch: fix a stack overflow (boo#1196147
  CVE-2022-25308).
- Add fribidi-CVE-2022-25309.patch: protect against garbage in the
  CapRTL encoder (boo#1196148 CVE-2022-25309).
- Add fribidi-CVE-2022-25310.patch: fix a SEGV in
  fribidi_remove_bidi_marks (boo#1196150 CVE-2022-25310).</changelog>
</package>
<package pkgid="b30e3a04e0fad8c810dad38785f4bd40e298c6a55548b65e848b0b595fe16962" name="fribidi" arch="ppc64le">
  <version epoch="0" ver="1.0.10" rel="150400.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="mliska@suse.cz" date="1575028800">- Use %make_build macros.</changelog>
  <changelog author="kieltux@gmail.com" date="1590148800">- Add no-config-h.diff - copied from Debian
  Remove HAVE_CONFIG_H from public API
- Add Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff -
  copied from Debian, CVE-2019-18397
  Truncate isolate_level to FRIBIDI_BIDI_MAX_EXPLICIT_LEVEL
- Run spec-cleaner</changelog>
  <changelog author="elimat@opensuse.org" date="1596974400">- Update to version 1.0.10:
  * Fixed various compilation problems and symbol exports necessary for
    proper compilation under windows.
- Changes from version 1.0.9:
  * A bug fix in the fribidi unicode algorithm where isolate sequences were
    not really isolated.
  * Restored mistakenly removed deprecated function
    fribidi_log2vis_get_embedding_levels()
  * autotools now generates xz archives instead of bzip2 archives
- Changes from version 1.0.8:
  * A bug fix in the fribidi unicode algorithm for multiple isolate
    sequences.
  * Fixed a potential buffer overflow for a long sequence of isolate
    overrides characters (bsc#1156260 CVE-2019-18397)
- Changes from version 1.0.7:
  * This is a minor bugfix that removes symlinks and updates the meson
    version.
- Changes from version 1.0.6:
  * This is a minor bugfix release that fixes a list of minor issues that
    have turned up during the last year.
  * Various compilation and cross compilation issues.
  * Various minor header cleanups.
  * Removed libc's bsearch for performance and portability reasons
- Run spec-cleaner
  * Remove package groups
- Drop patches fixed upstream
  * Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff
  * no-config-h.diff
  * fribidi-CVE-2019-18397.patch</changelog>
  <changelog author="mgorse@suse.com" date="1652443200">- Add fribidi-CVE-2022-25308.patch: fix a stack overflow (boo#1196147
  CVE-2022-25308).
- Add fribidi-CVE-2022-25309.patch: protect against garbage in the
  CapRTL encoder (boo#1196148 CVE-2022-25309).
- Add fribidi-CVE-2022-25310.patch: fix a SEGV in
  fribidi_remove_bidi_marks (boo#1196150 CVE-2022-25310).</changelog>
</package>
<package pkgid="50df2afe07606ba940777139c3d0a9c62b57ce25212faf8ac58d09f2be28aad6" name="fribidi" arch="s390x">
  <version epoch="0" ver="1.0.10" rel="150400.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="mliska@suse.cz" date="1575028800">- Use %make_build macros.</changelog>
  <changelog author="kieltux@gmail.com" date="1590148800">- Add no-config-h.diff - copied from Debian
  Remove HAVE_CONFIG_H from public API
- Add Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff -
  copied from Debian, CVE-2019-18397
  Truncate isolate_level to FRIBIDI_BIDI_MAX_EXPLICIT_LEVEL
- Run spec-cleaner</changelog>
  <changelog author="elimat@opensuse.org" date="1596974400">- Update to version 1.0.10:
  * Fixed various compilation problems and symbol exports necessary for
    proper compilation under windows.
- Changes from version 1.0.9:
  * A bug fix in the fribidi unicode algorithm where isolate sequences were
    not really isolated.
  * Restored mistakenly removed deprecated function
    fribidi_log2vis_get_embedding_levels()
  * autotools now generates xz archives instead of bzip2 archives
- Changes from version 1.0.8:
  * A bug fix in the fribidi unicode algorithm for multiple isolate
    sequences.
  * Fixed a potential buffer overflow for a long sequence of isolate
    overrides characters (bsc#1156260 CVE-2019-18397)
- Changes from version 1.0.7:
  * This is a minor bugfix that removes symlinks and updates the meson
    version.
- Changes from version 1.0.6:
  * This is a minor bugfix release that fixes a list of minor issues that
    have turned up during the last year.
  * Various compilation and cross compilation issues.
  * Various minor header cleanups.
  * Removed libc's bsearch for performance and portability reasons
- Run spec-cleaner
  * Remove package groups
- Drop patches fixed upstream
  * Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff
  * no-config-h.diff
  * fribidi-CVE-2019-18397.patch</changelog>
  <changelog author="mgorse@suse.com" date="1652443200">- Add fribidi-CVE-2022-25308.patch: fix a stack overflow (boo#1196147
  CVE-2022-25308).
- Add fribidi-CVE-2022-25309.patch: protect against garbage in the
  CapRTL encoder (boo#1196148 CVE-2022-25309).
- Add fribidi-CVE-2022-25310.patch: fix a SEGV in
  fribidi_remove_bidi_marks (boo#1196150 CVE-2022-25310).</changelog>
</package>
<package pkgid="724f0ae4158a56979a0bea2dd3a3b4d0cfdf8d1e890c19377fbb94bb7e9c0839" name="fribidi" arch="src">
  <version epoch="0" ver="1.0.10" rel="150400.3.3.1"/>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="mfabian@suse.de" date="1141128000">- add "Provides: locale(ar,he)".</changelog>
  <changelog author="crrodriguez@suse.de" date="1199620800">- update to version 0.10.9
  * Fixed type sizes when stdint.h is not available.
  * Update to Unicode Character Database 5.0.0
  * Fixed type sizes on 64-bit architectures.
- disable static libraries
- remove libtool archive with empty dependency_libs
- do not require gtk2-devel for build as it is unused
- spec file cleanups</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="olh@suse.de" date="1225368000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="olh@suse.de" date="1228910400">- use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade
  (bnc#437293)</changelog>
  <changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source</changelog>
  <changelog author="coolo@novell.com" date="1272628800">- buildrequire pkg-config to fix provides</changelog>
  <changelog author="adam@mizerski.pl" date="1296993600">- update to 0.19.2
  * Update to Unicode Character Database 5.1.0</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="mliska@suse.cz" date="1575028800">- Use %make_build macros.</changelog>
  <changelog author="kieltux@gmail.com" date="1590148800">- Add no-config-h.diff - copied from Debian
  Remove HAVE_CONFIG_H from public API
- Add Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff -
  copied from Debian, CVE-2019-18397
  Truncate isolate_level to FRIBIDI_BIDI_MAX_EXPLICIT_LEVEL
- Run spec-cleaner</changelog>
  <changelog author="elimat@opensuse.org" date="1596974400">- Update to version 1.0.10:
  * Fixed various compilation problems and symbol exports necessary for
    proper compilation under windows.
- Changes from version 1.0.9:
  * A bug fix in the fribidi unicode algorithm where isolate sequences were
    not really isolated.
  * Restored mistakenly removed deprecated function
    fribidi_log2vis_get_embedding_levels()
  * autotools now generates xz archives instead of bzip2 archives
- Changes from version 1.0.8:
  * A bug fix in the fribidi unicode algorithm for multiple isolate
    sequences.
  * Fixed a potential buffer overflow for a long sequence of isolate
    overrides characters (bsc#1156260 CVE-2019-18397)
- Changes from version 1.0.7:
  * This is a minor bugfix that removes symlinks and updates the meson
    version.
- Changes from version 1.0.6:
  * This is a minor bugfix release that fixes a list of minor issues that
    have turned up during the last year.
  * Various compilation and cross compilation issues.
  * Various minor header cleanups.
  * Removed libc's bsearch for performance and portability reasons
- Run spec-cleaner
  * Remove package groups
- Drop patches fixed upstream
  * Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff
  * no-config-h.diff
  * fribidi-CVE-2019-18397.patch</changelog>
  <changelog author="mgorse@suse.com" date="1652443200">- Add fribidi-CVE-2022-25308.patch: fix a stack overflow (boo#1196147
  CVE-2022-25308).
- Add fribidi-CVE-2022-25309.patch: protect against garbage in the
  CapRTL encoder (boo#1196148 CVE-2022-25309).
- Add fribidi-CVE-2022-25310.patch: fix a SEGV in
  fribidi_remove_bidi_marks (boo#1196150 CVE-2022-25310).</changelog>
</package>
<package pkgid="1ec7f66ef55388cd7f2012215c2968ed132a47a33ddc5cd02372d5a7d28ca7d4" name="fribidi" arch="x86_64">
  <version epoch="0" ver="1.0.10" rel="150400.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="mliska@suse.cz" date="1575028800">- Use %make_build macros.</changelog>
  <changelog author="kieltux@gmail.com" date="1590148800">- Add no-config-h.diff - copied from Debian
  Remove HAVE_CONFIG_H from public API
- Add Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff -
  copied from Debian, CVE-2019-18397
  Truncate isolate_level to FRIBIDI_BIDI_MAX_EXPLICIT_LEVEL
- Run spec-cleaner</changelog>
  <changelog author="elimat@opensuse.org" date="1596974400">- Update to version 1.0.10:
  * Fixed various compilation problems and symbol exports necessary for
    proper compilation under windows.
- Changes from version 1.0.9:
  * A bug fix in the fribidi unicode algorithm where isolate sequences were
    not really isolated.
  * Restored mistakenly removed deprecated function
    fribidi_log2vis_get_embedding_levels()
  * autotools now generates xz archives instead of bzip2 archives
- Changes from version 1.0.8:
  * A bug fix in the fribidi unicode algorithm for multiple isolate
    sequences.
  * Fixed a potential buffer overflow for a long sequence of isolate
    overrides characters (bsc#1156260 CVE-2019-18397)
- Changes from version 1.0.7:
  * This is a minor bugfix that removes symlinks and updates the meson
    version.
- Changes from version 1.0.6:
  * This is a minor bugfix release that fixes a list of minor issues that
    have turned up during the last year.
  * Various compilation and cross compilation issues.
  * Various minor header cleanups.
  * Removed libc's bsearch for performance and portability reasons
- Run spec-cleaner
  * Remove package groups
- Drop patches fixed upstream
  * Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff
  * no-config-h.diff
  * fribidi-CVE-2019-18397.patch</changelog>
  <changelog author="mgorse@suse.com" date="1652443200">- Add fribidi-CVE-2022-25308.patch: fix a stack overflow (boo#1196147
  CVE-2022-25308).
- Add fribidi-CVE-2022-25309.patch: protect against garbage in the
  CapRTL encoder (boo#1196148 CVE-2022-25309).
- Add fribidi-CVE-2022-25310.patch: fix a SEGV in
  fribidi_remove_bidi_marks (boo#1196150 CVE-2022-25310).</changelog>
</package>
<package pkgid="94e98dc4906d9f10979c916aee21e1d5c5dfed55487a585639f791219b2c039e" name="fribidi-devel" arch="aarch64">
  <version epoch="0" ver="1.0.10" rel="150400.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="mliska@suse.cz" date="1575028800">- Use %make_build macros.</changelog>
  <changelog author="kieltux@gmail.com" date="1590148800">- Add no-config-h.diff - copied from Debian
  Remove HAVE_CONFIG_H from public API
- Add Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff -
  copied from Debian, CVE-2019-18397
  Truncate isolate_level to FRIBIDI_BIDI_MAX_EXPLICIT_LEVEL
- Run spec-cleaner</changelog>
  <changelog author="elimat@opensuse.org" date="1596974400">- Update to version 1.0.10:
  * Fixed various compilation problems and symbol exports necessary for
    proper compilation under windows.
- Changes from version 1.0.9:
  * A bug fix in the fribidi unicode algorithm where isolate sequences were
    not really isolated.
  * Restored mistakenly removed deprecated function
    fribidi_log2vis_get_embedding_levels()
  * autotools now generates xz archives instead of bzip2 archives
- Changes from version 1.0.8:
  * A bug fix in the fribidi unicode algorithm for multiple isolate
    sequences.
  * Fixed a potential buffer overflow for a long sequence of isolate
    overrides characters (bsc#1156260 CVE-2019-18397)
- Changes from version 1.0.7:
  * This is a minor bugfix that removes symlinks and updates the meson
    version.
- Changes from version 1.0.6:
  * This is a minor bugfix release that fixes a list of minor issues that
    have turned up during the last year.
  * Various compilation and cross compilation issues.
  * Various minor header cleanups.
  * Removed libc's bsearch for performance and portability reasons
- Run spec-cleaner
  * Remove package groups
- Drop patches fixed upstream
  * Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff
  * no-config-h.diff
  * fribidi-CVE-2019-18397.patch</changelog>
  <changelog author="mgorse@suse.com" date="1652443200">- Add fribidi-CVE-2022-25308.patch: fix a stack overflow (boo#1196147
  CVE-2022-25308).
- Add fribidi-CVE-2022-25309.patch: protect against garbage in the
  CapRTL encoder (boo#1196148 CVE-2022-25309).
- Add fribidi-CVE-2022-25310.patch: fix a SEGV in
  fribidi_remove_bidi_marks (boo#1196150 CVE-2022-25310).</changelog>
</package>
<package pkgid="62c562cbc6e72c8c36b956bad517097e3f4d55838239b62443ed4f73c3422184" name="fribidi-devel" arch="ppc64le">
  <version epoch="0" ver="1.0.10" rel="150400.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="mliska@suse.cz" date="1575028800">- Use %make_build macros.</changelog>
  <changelog author="kieltux@gmail.com" date="1590148800">- Add no-config-h.diff - copied from Debian
  Remove HAVE_CONFIG_H from public API
- Add Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff -
  copied from Debian, CVE-2019-18397
  Truncate isolate_level to FRIBIDI_BIDI_MAX_EXPLICIT_LEVEL
- Run spec-cleaner</changelog>
  <changelog author="elimat@opensuse.org" date="1596974400">- Update to version 1.0.10:
  * Fixed various compilation problems and symbol exports necessary for
    proper compilation under windows.
- Changes from version 1.0.9:
  * A bug fix in the fribidi unicode algorithm where isolate sequences were
    not really isolated.
  * Restored mistakenly removed deprecated function
    fribidi_log2vis_get_embedding_levels()
  * autotools now generates xz archives instead of bzip2 archives
- Changes from version 1.0.8:
  * A bug fix in the fribidi unicode algorithm for multiple isolate
    sequences.
  * Fixed a potential buffer overflow for a long sequence of isolate
    overrides characters (bsc#1156260 CVE-2019-18397)
- Changes from version 1.0.7:
  * This is a minor bugfix that removes symlinks and updates the meson
    version.
- Changes from version 1.0.6:
  * This is a minor bugfix release that fixes a list of minor issues that
    have turned up during the last year.
  * Various compilation and cross compilation issues.
  * Various minor header cleanups.
  * Removed libc's bsearch for performance and portability reasons
- Run spec-cleaner
  * Remove package groups
- Drop patches fixed upstream
  * Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff
  * no-config-h.diff
  * fribidi-CVE-2019-18397.patch</changelog>
  <changelog author="mgorse@suse.com" date="1652443200">- Add fribidi-CVE-2022-25308.patch: fix a stack overflow (boo#1196147
  CVE-2022-25308).
- Add fribidi-CVE-2022-25309.patch: protect against garbage in the
  CapRTL encoder (boo#1196148 CVE-2022-25309).
- Add fribidi-CVE-2022-25310.patch: fix a SEGV in
  fribidi_remove_bidi_marks (boo#1196150 CVE-2022-25310).</changelog>
</package>
<package pkgid="0e23a1504613a79a27441f5f8eabefe23ccad3d457eb1d5dbfd3c8b9a0917977" name="fribidi-devel" arch="s390x">
  <version epoch="0" ver="1.0.10" rel="150400.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="mliska@suse.cz" date="1575028800">- Use %make_build macros.</changelog>
  <changelog author="kieltux@gmail.com" date="1590148800">- Add no-config-h.diff - copied from Debian
  Remove HAVE_CONFIG_H from public API
- Add Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff -
  copied from Debian, CVE-2019-18397
  Truncate isolate_level to FRIBIDI_BIDI_MAX_EXPLICIT_LEVEL
- Run spec-cleaner</changelog>
  <changelog author="elimat@opensuse.org" date="1596974400">- Update to version 1.0.10:
  * Fixed various compilation problems and symbol exports necessary for
    proper compilation under windows.
- Changes from version 1.0.9:
  * A bug fix in the fribidi unicode algorithm where isolate sequences were
    not really isolated.
  * Restored mistakenly removed deprecated function
    fribidi_log2vis_get_embedding_levels()
  * autotools now generates xz archives instead of bzip2 archives
- Changes from version 1.0.8:
  * A bug fix in the fribidi unicode algorithm for multiple isolate
    sequences.
  * Fixed a potential buffer overflow for a long sequence of isolate
    overrides characters (bsc#1156260 CVE-2019-18397)
- Changes from version 1.0.7:
  * This is a minor bugfix that removes symlinks and updates the meson
    version.
- Changes from version 1.0.6:
  * This is a minor bugfix release that fixes a list of minor issues that
    have turned up during the last year.
  * Various compilation and cross compilation issues.
  * Various minor header cleanups.
  * Removed libc's bsearch for performance and portability reasons
- Run spec-cleaner
  * Remove package groups
- Drop patches fixed upstream
  * Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff
  * no-config-h.diff
  * fribidi-CVE-2019-18397.patch</changelog>
  <changelog author="mgorse@suse.com" date="1652443200">- Add fribidi-CVE-2022-25308.patch: fix a stack overflow (boo#1196147
  CVE-2022-25308).
- Add fribidi-CVE-2022-25309.patch: protect against garbage in the
  CapRTL encoder (boo#1196148 CVE-2022-25309).
- Add fribidi-CVE-2022-25310.patch: fix a SEGV in
  fribidi_remove_bidi_marks (boo#1196150 CVE-2022-25310).</changelog>
</package>
<package pkgid="5a9e94b5dd6396e0b2f60e808bf06c220137e19943adf13c7ccd1d35645ab2c9" name="fribidi-devel" arch="x86_64">
  <version epoch="0" ver="1.0.10" rel="150400.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="mliska@suse.cz" date="1575028800">- Use %make_build macros.</changelog>
  <changelog author="kieltux@gmail.com" date="1590148800">- Add no-config-h.diff - copied from Debian
  Remove HAVE_CONFIG_H from public API
- Add Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff -
  copied from Debian, CVE-2019-18397
  Truncate isolate_level to FRIBIDI_BIDI_MAX_EXPLICIT_LEVEL
- Run spec-cleaner</changelog>
  <changelog author="elimat@opensuse.org" date="1596974400">- Update to version 1.0.10:
  * Fixed various compilation problems and symbol exports necessary for
    proper compilation under windows.
- Changes from version 1.0.9:
  * A bug fix in the fribidi unicode algorithm where isolate sequences were
    not really isolated.
  * Restored mistakenly removed deprecated function
    fribidi_log2vis_get_embedding_levels()
  * autotools now generates xz archives instead of bzip2 archives
- Changes from version 1.0.8:
  * A bug fix in the fribidi unicode algorithm for multiple isolate
    sequences.
  * Fixed a potential buffer overflow for a long sequence of isolate
    overrides characters (bsc#1156260 CVE-2019-18397)
- Changes from version 1.0.7:
  * This is a minor bugfix that removes symlinks and updates the meson
    version.
- Changes from version 1.0.6:
  * This is a minor bugfix release that fixes a list of minor issues that
    have turned up during the last year.
  * Various compilation and cross compilation issues.
  * Various minor header cleanups.
  * Removed libc's bsearch for performance and portability reasons
- Run spec-cleaner
  * Remove package groups
- Drop patches fixed upstream
  * Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff
  * no-config-h.diff
  * fribidi-CVE-2019-18397.patch</changelog>
  <changelog author="mgorse@suse.com" date="1652443200">- Add fribidi-CVE-2022-25308.patch: fix a stack overflow (boo#1196147
  CVE-2022-25308).
- Add fribidi-CVE-2022-25309.patch: protect against garbage in the
  CapRTL encoder (boo#1196148 CVE-2022-25309).
- Add fribidi-CVE-2022-25310.patch: fix a SEGV in
  fribidi_remove_bidi_marks (boo#1196150 CVE-2022-25310).</changelog>
</package>
<package pkgid="c57744dc9ded007485b2b6afd655f1d59982a4d2b0ed5ea7095ddcea1d9b04c6" name="gcc11" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="eb9934eb178ff424e1948ebef357fffacb398f2764733c99afc2f7ff7dbb2060" name="gcc11" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="b19be385a185f198cc84b302fb4941d690ef023eda3353b64beacc69e2d9fc0c" name="gcc11" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="2c4dd57d6b65b6779fda8965a92053eb9dc0edf79cc594050ed9d5357747c4c3" name="gcc11" arch="src">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="cf5dca9d3273b5a080f6a851456306d35537f86a6e017f05260a453d316eb5a2" name="gcc11" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="2b5baf096250202f45db5df50572d658a29d945bbb0e41b6792144e58d8a2939" name="gcc11-32bit" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="9a54608a01b7087c507c7c2df4a63db99b93eb38dd49f18b3e91338a539f2393" name="gcc11-32bit" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="8dafd7f1b702db5433663b4ef58029f5fcc2898a8435f36031dd997a77072c3d" name="gcc11-PIE" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="2938b58b65a3445a3a9a4a7dbd1abf3827bc6700b9c04b3a93dfa86faa26ef82" name="gcc11-PIE" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="84c1ab4e8a2b9b6ea3b75b55c059bee4b0a082ca334efa9567f0587e736e423e" name="gcc11-PIE" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="505336f6c6108dda1c74aa79b8270bafddea3d94d8d8f633780756cad253524f" name="gcc11-PIE" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="a0187e102008df5775c44bcc4d486ab059dedf1f74f4c660ba4091842c9473cb" name="gcc11-ada" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="ad41d35e31eea02339170c020ce453e4e2205540d27614010a8e091f73d4b4b4" name="gcc11-ada" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="0d362349ce1fbecc2c2f8d79a8a6d407c9dada8e4915d3a5cc43fd92d2d7a419" name="gcc11-ada" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="7c02034485d4d3949cce6e73cfc5a460a3b2d9ab9a29e9ad890dfdd25b9f04f1" name="gcc11-ada" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="09b70694b4772f0e1594c99e13683bd539b77bf308ae2d0562b0cab396ffae7f" name="gcc11-ada-32bit" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="5a6bc2bbbfe05b607867eef4e364ea56c1a83a3f909d48490743efaa8b8df07e" name="gcc11-ada-32bit" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="792b635e8bff4b17cf403ae4c28a7908a4469df8118b4ccdcdfbc8f718c58117" name="gcc11-c++" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="781777bfbe5db6d105a312076fa12df06ded65dfde2b2cc863ec60ab70d65d45" name="gcc11-c++" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="64ebc8cc54865b39b3f7037d1f4298ffae832ca5fa6321b28f56f67e4320fcca" name="gcc11-c++" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="e2fbfd5355ba8f0861b968591971be1e607790b42d3f1442f518e4df20555110" name="gcc11-c++" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="df1b2773955989a52e016c89f4eb22827e04c26971a661abdb19e4c0c1f16cd3" name="gcc11-c++-32bit" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="97b74910d265287a349d41808a684fe1500ff3031f29d3eaf2930b59302aadd3" name="gcc11-c++-32bit" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="51e0030bcf528857a8a92ee10ff071ea3f10a3784eaaabbf8aa36ea0de7ec5b0" name="gcc11-d" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="575a0c191236f321e82defe71515027e5c778a94e5f4eed4181ffce3a6d9a178" name="gcc11-d" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="21e3a8e1cd370b3918eb43b4cc4030c2887aeb2f0147d4ef5a5c8e56f6859d26" name="gcc11-d" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="a5974707a5e843b48881cd6337c276600a15092b5b456b5434e045ec559cd15a" name="gcc11-d-32bit" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="48b4d9985bc5119dc845aec20af5c2dd088cb58d81f032fddd465e8496e9a9eb" name="gcc11-d-32bit" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="a7327f46f4c6e4a8885e440c686785015e3b64ecf0b287368f1b7d62b50e8a53" name="gcc11-fortran" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="d8d5209fa6283983f7aeac8c664391c07dc4c6b9034bd8ddf211705be90f96d1" name="gcc11-fortran" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="6aec27a86bb10f43edd19ab586a98505d8162c94caf21d2602b2cbda578d5887" name="gcc11-fortran" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="c9cf8ad92074869263535500dc6edc2d9be8d429861c68d3b5ccb2bf050b9109" name="gcc11-fortran" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="7506f21799e1ffffe33e8a19d2537253671afbc35aa6e2d1a018e3e67f850ca1" name="gcc11-fortran-32bit" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="adb305f3e47f649c1111ea26304acacff8dd31e4507f3bbaf04819448c2a10ad" name="gcc11-fortran-32bit" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="c0bd10e2cf10d1cdd84415934d4d477c273ef6b8bc63dfeff7eae58e0bee9469" name="gcc11-go" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="3509d62a992110b2e860c2c0879b9c9d677fc8b76ddd064a5c0615a6d652af4e" name="gcc11-go" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="461da0dd53a1cf771dbeebf21e8cebdabf37767b679a1cf8ae386b46310fb605" name="gcc11-go" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="e039cb6ec9531cea20b3ca5d72b7c71b742a311d03bd0abd36d29eb2a006c29c" name="gcc11-go" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="96a5500c4c1646ab931651fbe29bb4e7bef2e279a6fe440c30fc14c7018d5955" name="gcc11-go-32bit" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="288167df734c0cae6fc55ea8af8749d2926afce1c3bb20f83eb30c6ce1845452" name="gcc11-go-32bit" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="5090ecb23fd4c31107003c94691c059db07026ac28d700b79a76a72c311c459a" name="gcc11-info" arch="noarch">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="2e29f69bb1e661c0de19a5f48561a23b0a17c9d4b7884aea818e57b1d9f894c1" name="gcc11-locale" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="9d7e68cf0f4d5360429319edb1093e9da5c51f7a2e884817085f28db5753099d" name="gcc11-locale" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="c41e9224c29f34b55b2e18c5c20fd4028b27646ebdfd5df3fc6762012682383f" name="gcc11-locale" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="8b2876a7a42b649d1bffa9216b557b0d1be1577b8677dbd8b4facef76096397d" name="gcc11-locale" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="65072938f98ebb58914a05d350b7af287af84f18488870680256dbe364ba8c95" name="gcc11-obj-c++" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="9898d3910ad24c28e9b6c96aa324a8c2a0eeae9c3d668f9d2cbd7135a9e2215d" name="gcc11-obj-c++" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="af8a586096d92e0d9c707f3033f9285073a8bc0de03771bc8ed9c663839f4051" name="gcc11-obj-c++" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="a50683f9bbc4ffe1f5b53d7e1c60ef27965b333720afa2f58746f374b5696fbd" name="gcc11-obj-c++" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="4b2c316e6a3fc1fcdb2b8dd588d6d1228f1d671b7bc2c833a8bb59a561f4cbe8" name="gcc11-obj-c++-32bit" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="202e68e58edaba90c75668a1786b5289b3bbacf222c8c06650a772083690b228" name="gcc11-obj-c++-32bit" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="4d8f23e6f2fc938598d3f813a99e5bc5ad8e1c5ef24c90b64cc3de26b16de3a1" name="gcc11-objc" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="8419d7dad16d1223271f9fa15b95cc6fb7ea3c2349625b6e0c4f29dd66b8f8bb" name="gcc11-objc" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="c21f080efaa277a971062b3806d53b7e1971edbfe457af8a49e5c39aa69aea2b" name="gcc11-objc" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="f2f04faccab05655c9152be72ddaaba2a410038b0f24dc2dc45f09a6e48ae46d" name="gcc11-objc" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="163b87c5fb8caf82203063293c9cd6ef7052ffd123849e89fda1c67d09bafba7" name="gcc11-objc-32bit" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="35ac5c38b1ff7aa006853cbd43e5c75be544d1261bad7ba5bb0b2d4d842b5373" name="gcc11-objc-32bit" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="5d00fad5b3185b6a242359c0b5b3ea1102ba801c5cdf33f9a23f0daa94763a1e" name="gcc11-testresults" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="c519f9f65aecc0a0af1ceb47e7945a3c628ac0fe89170fd95dd6dff69ec27c1e" name="gcc11-testresults" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="787cb86431b52c99878be824c23a2d4266295cfdcb0b5965495ec54dd8585106" name="gcc11-testresults" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="95c58a79dee8b32589b8a52caf88437019b73143f90943d6a7f44e4f10bb6662" name="gcc11-testresults" arch="src">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="4cacd91fdacd858f869576cca122077c2ed9faffab8c674e557d4dc22aa4f60b" name="gcc11-testresults" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="d716e8efe62425726275e302a72735a97e840f7ad97c01ad86ddfe840bf1bcaa" name="gcc8-32bit" arch="s390x">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="13a1e627889d1a419ac84df2071428dfc03ecf444f221941af933fb273983181" name="gcc8-32bit" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="4e345cddb705ed74cde7e3f3701b33f3319e07e538e2f115d194f74ecfa440f6" name="gcc8" arch="aarch64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="a476f1368bba879c632c56ddad74de566bd90bc67a2db5f6e1ac22ff814bc253" name="gcc8" arch="ppc64le">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="002c2c4094b9d1c079d39dfbd9f00761153c156835d11bd51deab348ba3b5202" name="gcc8" arch="s390x">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="4b4ecd05bf93f4831b434ab6bebeca841eb22efc4164340752f0c9e3c1c59fce" name="gcc8" arch="src">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="66012c047856840c8c210ac69dff01e36a52628e3cfb88aded3847c7ebe188a1" name="gcc8" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="5737ec4cee033d7ec85c1c05b117dd7aa973cd9d8055ce9b198b68e127eb3ffb" name="gcc8-ada-32bit" arch="s390x">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="db539ff4fc734e6ff5126fa72771a301aa3e81dd78bd375b92f2384d753005b0" name="gcc8-ada-32bit" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="bec0e894df7a7c34fcf8ef2a0ca51f9fcb1e3737a6bc02f8ae1b1346489492ee" name="gcc8-ada" arch="aarch64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="cf51999e7f8448ffe2b9515c5613f622c15201a81c60cce4f5daeb990a4cc1f9" name="gcc8-ada" arch="ppc64le">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="af123d0f7eb7d823a8df5ce5bfcbf6aad7fa4fd5465c7cb9ac8cc5eed98d8831" name="gcc8-ada" arch="s390x">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="bcef2b759f7bca953543e4b25739d92a932a54ff2bc8bbabf7387958329c8335" name="gcc8-ada" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="6291dcb68b81ba507336b772e360838f660324f73f533ed61345aafca95d32c3" name="gcc8-c++-32bit" arch="s390x">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="d32b1c92f98202e067f669a41bec3efc0cde36883f3ba1d47de875218a15b7e2" name="gcc8-c++-32bit" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="f4c2f81e8a54f61ccb16111b81191216df0670deb8b44267409e5c0729ed6e2f" name="gcc8-c++" arch="aarch64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="4c70b431725e4a3af5661c72bf7e38377fb26a8d48f4b11216e1cad2589a1548" name="gcc8-c++" arch="ppc64le">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="ce36c9870bcf4d7127e8493c166ab2f507ea29828b30efdde2c2b2a25103029f" name="gcc8-c++" arch="s390x">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="4c40fc428a5970511a1ca6a181242a538339f4d1dd9753cab719e41c28cd7299" name="gcc8-c++" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="42d2a3238fd3d2239062f26dccb3e1f1ad19d74d9f1460470b877843cc9d9a94" name="gcc8-fortran-32bit" arch="s390x">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="55302d2505bc6f56b6739a253dbf562ade07d8935fed1148777123c3121718de" name="gcc8-fortran-32bit" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="8ff6e1658d3fad5757ec4bc0681519ab43274f6abfdb150c567711dc22fc6071" name="gcc8-fortran" arch="aarch64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="806a90fcced3bf9ee88b3ac2fb7cd5f828d353fc2b45ef09a222253d4feaa896" name="gcc8-fortran" arch="ppc64le">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="89790008079f0972605fdd856ea3ce8388096f6a92c88c02538f001b19db7ee5" name="gcc8-fortran" arch="s390x">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="768cb509eb76b9878075773de0b2e1160c1b6e5c5489915e596116afbfc620e2" name="gcc8-fortran" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="7ced98f5aebaf80a301522b6f03a36c91d267010879b7a23d617009bcd5255da" name="gcc8-go-32bit" arch="s390x">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="e71f45bf59aa24215435bea901a94507b888c9deb80adf8e74460098a390d8f3" name="gcc8-go-32bit" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="bd3f792325e747e9bb8b9e4707b98c52b2f6c3e4f158d061025c38f00929e5bf" name="gcc8-go" arch="aarch64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="b64333a691a5f654cf74d0370b32b4aa0d6ceb15f70f1399641a9a159b038777" name="gcc8-go" arch="ppc64le">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="dfcca60ddb749a60581d513ed9984bd36cd37fdaf4d379ef8998773d79505d25" name="gcc8-go" arch="s390x">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="88a64ed9fe1c0adc58d323530736c9a668a7aee75a896877e6286b48c3ddc71a" name="gcc8-go" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="71658e1c14956cbe1396d682e10483089b05e52abc6eab7f76a84b6c3b9fa89b" name="gcc8-info" arch="noarch">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="26df7b5d0cefaa406dd50f2a75e0760ba074b6f79ecab178e196aae940664c66" name="gcc8-locale" arch="aarch64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="cfc91f9b521b320ce9bdd1f952687f4583763b4ab6448c2922be3fe258523172" name="gcc8-locale" arch="ppc64le">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="070d92ae6f1f9bc3798bcdad1ebbba91c7b57d7fed57fcc7732d9679617abc5b" name="gcc8-locale" arch="s390x">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="22b737e3c6537c61b3cab5a17313e3ad66961d110db81c3f55e9380bfab162c6" name="gcc8-locale" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="436603c104c5d2f195dd01729aa825bd13d8e877cc0fe45900ec3ca7abd4853a" name="gfs2-kmp-preempt" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="150300.59.68.1"/>
  <changelog author="tzimmermann@suse.de" date="1651579200">- blacklist.conf: Append 'Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"'
- commit f314ea7</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1651579201">- bnx2x: fix napi API usage sequence (bsc#1198217).
- commit 62d4fc3</changelog>
  <changelog author="oneukum@suse.com" date="1651579202">- adm8211: fix error return code in adm8211_probe() (git-fixes).
- blacklist.conf:
- commit 88c7ed6</changelog>
  <changelog author="oneukum@suse.com" date="1651579203">- mwl8k: Fix a double Free in mwl8k_probe_hw (git-fixes).
- commit 83451f5</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579204">- drm/vmwgfx: Remove unused compile options (bsc#1152472)
- commit fdc716b</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579205">- backlight: qcom-wled: Respect enabled-strings in set_brightness (bsc#1152489)
- commit 9612dd6</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579206">- drm/cma-helper: Set VM_DONTEXPAND for mmap (bsc#1152472)
- commit dd83cfa</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579207">- drm/i915: s/JSP2/ICP2/ PCH (bsc#1152489)
- commit 20ca121</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579208">- drm/amdgpu: fix amdgpu_ras_block_late_init error handler (bsc#1152489)
- commit e9f409a</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579209">- drm/fb-helper: Mark screen buffers in system memory with (bsc#1152472)
- commit 40b57d4</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579210">- USB: hcd-pci: Use PCI_STD_NUM_BARS when checking standard BARs (bsc#1152489)
- commit 30a990e</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579211">- drm/amd/display: Fix memory leak in dcn21_clock_source_create (bsc#1152472)
- commit f640496</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579212">- blacklist.conf: Append 'drm/i915: Fix syncmap memory leak'
- commit 5ad47f2</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579213">- blacklist.conf: Append 'drm/tegra: Add back arm_iommu_detach_device()'
- commit f7fdb0f</changelog>
  <changelog author="osalvador@suse.de" date="1651579214">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit a40b3c9</changelog>
  <changelog author="ohering@suse.de" date="1651665600">- net: mana: Remove unnecessary check of cqe_type in
  mana_process_rx_cqe() (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Use struct_size() helper in
  mana_gd_create_dma_region() (bsc#1195651).
- commit c23f4de</changelog>
  <changelog author="martin.wilck@suse.com" date="1651665601">- Revert lpfc driver update to 14.2.0.1 (bsc#1198989)
- commit eb15c95</changelog>
  <changelog author="oneukum@suse.com" date="1651665602">- usb: dwc3: core: Fix tx/rx threshold settings (git-fixes).
- commit c81dcdc</changelog>
  <changelog author="oneukum@suse.com" date="1651665603">- usb: dwc3: core: Only handle soft-reset in DCTL (git-fixes).
- commit 454e4d6</changelog>
  <changelog author="oneukum@suse.com" date="1651665604">- usb: dwc3: gadget: Return proper request status (git-fixes).
- commit 73a340f</changelog>
</package>
<package pkgid="4870157f73e18274f2cbfe926bca1d7c117b6167b9f0bb6c03501f6a0c09ee93" name="gfs2-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="150300.59.68.1"/>
  <changelog author="tzimmermann@suse.de" date="1651579200">- blacklist.conf: Append 'Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"'
- commit f314ea7</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1651579201">- bnx2x: fix napi API usage sequence (bsc#1198217).
- commit 62d4fc3</changelog>
  <changelog author="oneukum@suse.com" date="1651579202">- adm8211: fix error return code in adm8211_probe() (git-fixes).
- blacklist.conf:
- commit 88c7ed6</changelog>
  <changelog author="oneukum@suse.com" date="1651579203">- mwl8k: Fix a double Free in mwl8k_probe_hw (git-fixes).
- commit 83451f5</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579204">- drm/vmwgfx: Remove unused compile options (bsc#1152472)
- commit fdc716b</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579205">- backlight: qcom-wled: Respect enabled-strings in set_brightness (bsc#1152489)
- commit 9612dd6</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579206">- drm/cma-helper: Set VM_DONTEXPAND for mmap (bsc#1152472)
- commit dd83cfa</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579207">- drm/i915: s/JSP2/ICP2/ PCH (bsc#1152489)
- commit 20ca121</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579208">- drm/amdgpu: fix amdgpu_ras_block_late_init error handler (bsc#1152489)
- commit e9f409a</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579209">- drm/fb-helper: Mark screen buffers in system memory with (bsc#1152472)
- commit 40b57d4</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579210">- USB: hcd-pci: Use PCI_STD_NUM_BARS when checking standard BARs (bsc#1152489)
- commit 30a990e</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579211">- drm/amd/display: Fix memory leak in dcn21_clock_source_create (bsc#1152472)
- commit f640496</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579212">- blacklist.conf: Append 'drm/i915: Fix syncmap memory leak'
- commit 5ad47f2</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579213">- blacklist.conf: Append 'drm/tegra: Add back arm_iommu_detach_device()'
- commit f7fdb0f</changelog>
  <changelog author="osalvador@suse.de" date="1651579214">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit a40b3c9</changelog>
  <changelog author="ohering@suse.de" date="1651665600">- net: mana: Remove unnecessary check of cqe_type in
  mana_process_rx_cqe() (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Use struct_size() helper in
  mana_gd_create_dma_region() (bsc#1195651).
- commit c23f4de</changelog>
  <changelog author="martin.wilck@suse.com" date="1651665601">- Revert lpfc driver update to 14.2.0.1 (bsc#1198989)
- commit eb15c95</changelog>
  <changelog author="oneukum@suse.com" date="1651665602">- usb: dwc3: core: Fix tx/rx threshold settings (git-fixes).
- commit c81dcdc</changelog>
  <changelog author="oneukum@suse.com" date="1651665603">- usb: dwc3: core: Only handle soft-reset in DCTL (git-fixes).
- commit 454e4d6</changelog>
  <changelog author="oneukum@suse.com" date="1651665604">- usb: dwc3: gadget: Return proper request status (git-fixes).
- commit 73a340f</changelog>
</package>
<package pkgid="dd15161b31c05767bcc04b9c0b83fda3cce7062d4a35f1e8fe881bd01abfba96" name="giflib" arch="src">
  <version epoch="0" ver="5.2.1" rel="150000.4.8.1"/>
  <changelog author="jengelh@medozas.de" date="1328443200">- Remove redundant tags/sections</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1356868800">- Version 5.0.3
  * The library is now purely reentrant and thread-safe
  * Adds an EGifSetGifVersion() entry point
  * All names of exported functions now have a Gif, DGif, or EGif prefix.
- packaging changes:
  * soname is now libgif6
  * Compatibility with ancient "libungif" via rpm spec file hacks
  is no longer included, if there is any application around
  that still requires this it has to be fixed.</changelog>
  <changelog author="jengelh@inai.de" date="1357300800">- Adjust baselibs.conf for libgif6, remove libungif rpm symbols
  since they are now no longer provided.</changelog>
  <changelog author="jengelh@inai.de" date="1357905600">- Remove "Obsoletes: giflib", because libgif6 must not obsolete
  libgif4 (it would do that by way of libgif4's "Provides: giflib").</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362225600">- add giflib-automake-1_13.patch, fix build with automake-1.13.1</changelog>
  <changelog author="mmeister@suse.com" date="1364385600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="jengelh@inai.de" date="1372248000">- Update to new upstream release 5.0.4
  * Fix for a rare misrendering bug when a GIF overruns the
  decompression-code table.
- Make patches have -p1, as requested by
  http://en.opensuse.org/openSUSE:Packaging_Patches_guidelines</changelog>
  <changelog author="jengelh@inai.de" date="1377950400">- Update to new upstream release 5.0.5 (bugfix release)
  * This release sets the error return properly when a screen
  descriptor read fails, and fixes minor API documentation bugs.</changelog>
  <changelog author="jengelh@inai.de" date="1401451200">- Update to new upstream release 5.1.0
  * Minor API change to assist library wrappers in dynamic languages,
  removal of the the gif2raw utility, and various minor fix patches
  for unusual edge cases.
  * API changes to functions:
  GifErrorString returns const char *;
  EGifGetGifVersion returns const char *;
  EGifCloseFile takes another int *errorcode;
  DGifCloseFile takes another int *errorcode;</changelog>
  <changelog author="p.drouand@gmail.com" date="1421236800">- Update to version 5.1.1
  + Numerous minor fixes in getarg.c. Affects only the utilities, not the
    core library.
  + Fix SourceForge bug #59 DGifOpen can segfault if DGifGetScreenDesc fails.
  + SourceForge patch #20: In gifalloc, fix usage of realloc() in case of failure.
  + Fix SourceForge bug #61 Leak in gifsponge.
  + glibtoolize port fix for OS X.</changelog>
  <changelog author="tchvatal@suse.com" date="1421323200">- Cleanup a bit
- Remove obsolete sle10 deprecations
- Fix one tiny rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1453204800">- Update to version 5.1.2 (fixes CVE-2015-7555, bsc#960319)
  * Code Fixes
    + Code hardening using reallocarray() from OpenBSD.
    + Sanity check in giffilter catches files with malformed
  extension records. Fixes SourceForge bug #63: malformed gif
  causes segfault in giffilter.
  + Inexpensive sanity check in DGifSlurp() catches malformed files
    with  no image descriptor. Fixes SourceForge bug #64: malformed
  gif causes crash in giftool.
  + Fix SourceForge bug #66: GifDrawBoxedText8x8() modifying
    constant input parameter.
  + Bail out of GIF read on invalid pixel width. Addresses Savannah
    bug #67: invalid shift in dgif_lib.c
  + Fix SourceForge bug #69: #69 Malformed: Gif file with no
    extension block after a GRAPHICS_EXT_FUNC_CODE extension causes
  segfault (in giftext).
  + Fix SourceForge bug #71: Buffer overwrite when giffixing a
    malformed gif.
  + Fix SourceForge bug #73: Null pointer deference in gifclrmap
    (only reachable with malformed GIF).
  + Fix SourceForge bug #74: Double free in gifsponge under 5.1,1,
    for any valid gif image.
  + Fix SourceForge bug #75: GAGetArgs overflows due to uncounted
    use of va_arg.
  + Sanity check in giffix catches some malformed files. Addresses
    SourceForge bug #77: dgif_lib.c: extension processing error
- Modified patches:
  * giflib-automake-1_13.patch
  * giflib-visibility.patch
    + rediff to changed context</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 5.1.3
  * Prevent malloc randomess from causing the header output routine
  to emit a GIF89 version string even when no GIF89 features are
  present.
  * Prevent malloc randomess from producing sporadic failures by causing
  sanity checks added in 5.1.2 to misfire.
  * Bulletproof gif2rgb against 0-height images. Addressed sf#78:
  Heap overflow in gif2rgb with images of size 0, also sf#82.
  * Remove unnecessary duplicate EGifClose() in gifcolor.c. Fixes sf#83
  introduced in 5.1.2.
  * Fix sf#84: incorrect return of DGifSlurp().
- Add giflib-sf-88.patch to fix sf#88</changelog>
  <changelog author="fstrba@suse.com" date="1460462400">- Update to version 5.1.4
  * Fix SF bug #94: giflib 5 loves to fail to load images... a LOT.
  * Fix SF Bug #92: Fix buffer overread in gifbuild.
  * Fix SF Bug #93: Add bounds check in gifbuild netscape2.0 path
  * Fix SF Bug #89: Fix buffer overread in gifbuild.
- Removed patch:
  * giflib-sf-88.patch
    + Integrated upstream
- Added patch:
  * giflib-CVE-2016-3977.patch
  - Fix CVE-2016-3977: heap buffer overflow in gif2rgb
    (bsc#974847)</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Added fix-autoconf11.patch for fixing build with older autoconf,
  requires for SLE11.</changelog>
  <changelog author="bwiedemann@suse.com" date="1499256000">- Keep timestamps before patch updates them to fix build-compare</changelog>
  <changelog author="schwab@suse.de" date="1541764800">- Remove unused build requires on X libraries
- Use %license</changelog>
  <changelog author="elimat@opensuse.org" date="1594382400">- Update to version 5.2.1
  * In gifbuild.c, avoid a core dump on no color map.
  * Restore inadvertently removed library version numbers in Makefile.
- Changes in version 5.2.0
  * The undocumented and deprecated GifQuantizeBuffer() entry point
    has been moved to the util library to reduce libgif size and attack
    surface. Applications needing this function are couraged to link the
    util library or make their own copy.
  * The following obsolete utility programs are no longer installed:
    gifecho, giffilter, gifinto, gifsponge. These were either installed in
    error or have been obsolesced by modern image-transformmation tools
    like ImageMagick convert. They may be removed entirely in a future
    release.
  * Address SourceForge issue #136: Stack-buffer-overflow in gifcolor.c:84
  * Address SF bug #134: Giflib fails to slurp significant number of gifs
  * Apply SPDX convention for license tagging.
- Changes in version 5.1.9
  * The documentation directory now includes an HTMlified version of the
    GIF89 standard, and a more detailed description of how LZW compression
    is applied to GIFs.
  * Address SF bug #129: The latest version of giflib cannot be build on windows.
  * Address SF bug #126: Cannot compile giflib using c89
- Changes in version 5.1.8
  * Address SF bug #119: MemorySanitizer: FPE on unknown address (CVE-2019-15133 bsc#1146299)
  * Address SF bug #125: 5.1.7: xmlto is still required for tarball
  * Address SF bug #124: 5.1.7: ar invocation is not crosscompile compatible
  * Address SF bug #122: 5.1.7 installs manpages to wrong directory
  * Address SF bug #121: make: getversion: Command not found
  * Address SF bug #120: 5.1.7 does not build a proper library - no
- Changes in version 5.1.7
  * Correct a minor packaging error (superfluous symlinks) in the 5.1.6 tarballs.
- Changes in version 5.1.6
  * Fix library installation in the Makefile.
- Changes in version 5.1.5
  * Fix SF bug #114: Null dereferences in main() of gifclrmp
  * Fix SF bug #113: Heap Buffer Overflow-2 in function DGifDecompressLine()
    in cgif.c.  This had been assigned (CVE-2018-11490 bsc#1094832).
  * Fix SF bug #111: segmentation fault in PrintCodeBlock
  * Fix SF bug #109: Segmentation fault of giftool reading a crafted file
  * Fix SF bug #107: Floating point exception in giftext utility
  * Fix SF bug #105: heap buffer overflow in DumpScreen2RGB in gif2rgb.c:317
  * Fix SF bug #104: Ineffective bounds check in DGifSlurp
  * Fix SF bug #103: GIFLIB 5.1.4: DGifSlurp fails on empty comment
  * Fix SF bug #87: Heap buffer overflow in 5.1.2 (gif2rgb). (CVE-2016-3977 bsc#974847)
  * The horrible old autoconf build system has been removed with extreme prejudice.
    You now build this simply by running "make" from the top-level directory.
- Run spec-cleaner
- Drop patches fixed upstream:
  * giflib-visibility.patch
  * giflib-automake-1_13.patch
  * giflib-CVE-2016-3977.patch
  * fix-autoconf11.patch
- Change build system to Make only (upstream not using autoconf)</changelog>
  <changelog author="fstrba@suse.com" date="1618401600">- Added patch:
  * PIE.patch
    + build path independent objects and inherit CFLAGS from the
    build system (bsc#1184123)</changelog>
  <changelog author="olaf@aepfle.de" date="1618488000">- prep section should just extract and patch,
  further modifications have to be done in the build section</changelog>
</package>
<package pkgid="96902c3499a415a22910298e06e797073678865d42e08546634fe06a9cc3c76d" name="giflib-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="150000.4.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1421236800">- Update to version 5.1.1
  + Numerous minor fixes in getarg.c. Affects only the utilities, not the
    core library.
  + Fix SourceForge bug #59 DGifOpen can segfault if DGifGetScreenDesc fails.
  + SourceForge patch #20: In gifalloc, fix usage of realloc() in case of failure.
  + Fix SourceForge bug #61 Leak in gifsponge.
  + glibtoolize port fix for OS X.</changelog>
  <changelog author="tchvatal@suse.com" date="1421323200">- Cleanup a bit
- Remove obsolete sle10 deprecations
- Fix one tiny rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1453204800">- Update to version 5.1.2 (fixes CVE-2015-7555, bsc#960319)
  * Code Fixes
    + Code hardening using reallocarray() from OpenBSD.
    + Sanity check in giffilter catches files with malformed
  extension records. Fixes SourceForge bug #63: malformed gif
  causes segfault in giffilter.
  + Inexpensive sanity check in DGifSlurp() catches malformed files
    with  no image descriptor. Fixes SourceForge bug #64: malformed
  gif causes crash in giftool.
  + Fix SourceForge bug #66: GifDrawBoxedText8x8() modifying
    constant input parameter.
  + Bail out of GIF read on invalid pixel width. Addresses Savannah
    bug #67: invalid shift in dgif_lib.c
  + Fix SourceForge bug #69: #69 Malformed: Gif file with no
    extension block after a GRAPHICS_EXT_FUNC_CODE extension causes
  segfault (in giftext).
  + Fix SourceForge bug #71: Buffer overwrite when giffixing a
    malformed gif.
  + Fix SourceForge bug #73: Null pointer deference in gifclrmap
    (only reachable with malformed GIF).
  + Fix SourceForge bug #74: Double free in gifsponge under 5.1,1,
    for any valid gif image.
  + Fix SourceForge bug #75: GAGetArgs overflows due to uncounted
    use of va_arg.
  + Sanity check in giffix catches some malformed files. Addresses
    SourceForge bug #77: dgif_lib.c: extension processing error
- Modified patches:
  * giflib-automake-1_13.patch
  * giflib-visibility.patch
    + rediff to changed context</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 5.1.3
  * Prevent malloc randomess from causing the header output routine
  to emit a GIF89 version string even when no GIF89 features are
  present.
  * Prevent malloc randomess from producing sporadic failures by causing
  sanity checks added in 5.1.2 to misfire.
  * Bulletproof gif2rgb against 0-height images. Addressed sf#78:
  Heap overflow in gif2rgb with images of size 0, also sf#82.
  * Remove unnecessary duplicate EGifClose() in gifcolor.c. Fixes sf#83
  introduced in 5.1.2.
  * Fix sf#84: incorrect return of DGifSlurp().
- Add giflib-sf-88.patch to fix sf#88</changelog>
  <changelog author="fstrba@suse.com" date="1460462400">- Update to version 5.1.4
  * Fix SF bug #94: giflib 5 loves to fail to load images... a LOT.
  * Fix SF Bug #92: Fix buffer overread in gifbuild.
  * Fix SF Bug #93: Add bounds check in gifbuild netscape2.0 path
  * Fix SF Bug #89: Fix buffer overread in gifbuild.
- Removed patch:
  * giflib-sf-88.patch
    + Integrated upstream
- Added patch:
  * giflib-CVE-2016-3977.patch
  - Fix CVE-2016-3977: heap buffer overflow in gif2rgb
    (bsc#974847)</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Added fix-autoconf11.patch for fixing build with older autoconf,
  requires for SLE11.</changelog>
  <changelog author="bwiedemann@suse.com" date="1499256000">- Keep timestamps before patch updates them to fix build-compare</changelog>
  <changelog author="schwab@suse.de" date="1541764800">- Remove unused build requires on X libraries
- Use %license</changelog>
  <changelog author="elimat@opensuse.org" date="1594382400">- Update to version 5.2.1
  * In gifbuild.c, avoid a core dump on no color map.
  * Restore inadvertently removed library version numbers in Makefile.
- Changes in version 5.2.0
  * The undocumented and deprecated GifQuantizeBuffer() entry point
    has been moved to the util library to reduce libgif size and attack
    surface. Applications needing this function are couraged to link the
    util library or make their own copy.
  * The following obsolete utility programs are no longer installed:
    gifecho, giffilter, gifinto, gifsponge. These were either installed in
    error or have been obsolesced by modern image-transformmation tools
    like ImageMagick convert. They may be removed entirely in a future
    release.
  * Address SourceForge issue #136: Stack-buffer-overflow in gifcolor.c:84
  * Address SF bug #134: Giflib fails to slurp significant number of gifs
  * Apply SPDX convention for license tagging.
- Changes in version 5.1.9
  * The documentation directory now includes an HTMlified version of the
    GIF89 standard, and a more detailed description of how LZW compression
    is applied to GIFs.
  * Address SF bug #129: The latest version of giflib cannot be build on windows.
  * Address SF bug #126: Cannot compile giflib using c89
- Changes in version 5.1.8
  * Address SF bug #119: MemorySanitizer: FPE on unknown address (CVE-2019-15133 bsc#1146299)
  * Address SF bug #125: 5.1.7: xmlto is still required for tarball
  * Address SF bug #124: 5.1.7: ar invocation is not crosscompile compatible
  * Address SF bug #122: 5.1.7 installs manpages to wrong directory
  * Address SF bug #121: make: getversion: Command not found
  * Address SF bug #120: 5.1.7 does not build a proper library - no
- Changes in version 5.1.7
  * Correct a minor packaging error (superfluous symlinks) in the 5.1.6 tarballs.
- Changes in version 5.1.6
  * Fix library installation in the Makefile.
- Changes in version 5.1.5
  * Fix SF bug #114: Null dereferences in main() of gifclrmp
  * Fix SF bug #113: Heap Buffer Overflow-2 in function DGifDecompressLine()
    in cgif.c.  This had been assigned (CVE-2018-11490 bsc#1094832).
  * Fix SF bug #111: segmentation fault in PrintCodeBlock
  * Fix SF bug #109: Segmentation fault of giftool reading a crafted file
  * Fix SF bug #107: Floating point exception in giftext utility
  * Fix SF bug #105: heap buffer overflow in DumpScreen2RGB in gif2rgb.c:317
  * Fix SF bug #104: Ineffective bounds check in DGifSlurp
  * Fix SF bug #103: GIFLIB 5.1.4: DGifSlurp fails on empty comment
  * Fix SF bug #87: Heap buffer overflow in 5.1.2 (gif2rgb). (CVE-2016-3977 bsc#974847)
  * The horrible old autoconf build system has been removed with extreme prejudice.
    You now build this simply by running "make" from the top-level directory.
- Run spec-cleaner
- Drop patches fixed upstream:
  * giflib-visibility.patch
  * giflib-automake-1_13.patch
  * giflib-CVE-2016-3977.patch
  * fix-autoconf11.patch
- Change build system to Make only (upstream not using autoconf)</changelog>
  <changelog author="fstrba@suse.com" date="1618401600">- Added patch:
  * PIE.patch
    + build path independent objects and inherit CFLAGS from the
    build system (bsc#1184123)</changelog>
  <changelog author="olaf@aepfle.de" date="1618488000">- prep section should just extract and patch,
  further modifications have to be done in the build section</changelog>
</package>
<package pkgid="a952ca6b119a9e430bf31831ff4f20f15be046ab6f0da0adb2b559afc6df81c7" name="giflib-devel" arch="aarch64">
  <version epoch="0" ver="5.2.1" rel="150000.4.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1421236800">- Update to version 5.1.1
  + Numerous minor fixes in getarg.c. Affects only the utilities, not the
    core library.
  + Fix SourceForge bug #59 DGifOpen can segfault if DGifGetScreenDesc fails.
  + SourceForge patch #20: In gifalloc, fix usage of realloc() in case of failure.
  + Fix SourceForge bug #61 Leak in gifsponge.
  + glibtoolize port fix for OS X.</changelog>
  <changelog author="tchvatal@suse.com" date="1421323200">- Cleanup a bit
- Remove obsolete sle10 deprecations
- Fix one tiny rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1453204800">- Update to version 5.1.2 (fixes CVE-2015-7555, bsc#960319)
  * Code Fixes
    + Code hardening using reallocarray() from OpenBSD.
    + Sanity check in giffilter catches files with malformed
  extension records. Fixes SourceForge bug #63: malformed gif
  causes segfault in giffilter.
  + Inexpensive sanity check in DGifSlurp() catches malformed files
    with  no image descriptor. Fixes SourceForge bug #64: malformed
  gif causes crash in giftool.
  + Fix SourceForge bug #66: GifDrawBoxedText8x8() modifying
    constant input parameter.
  + Bail out of GIF read on invalid pixel width. Addresses Savannah
    bug #67: invalid shift in dgif_lib.c
  + Fix SourceForge bug #69: #69 Malformed: Gif file with no
    extension block after a GRAPHICS_EXT_FUNC_CODE extension causes
  segfault (in giftext).
  + Fix SourceForge bug #71: Buffer overwrite when giffixing a
    malformed gif.
  + Fix SourceForge bug #73: Null pointer deference in gifclrmap
    (only reachable with malformed GIF).
  + Fix SourceForge bug #74: Double free in gifsponge under 5.1,1,
    for any valid gif image.
  + Fix SourceForge bug #75: GAGetArgs overflows due to uncounted
    use of va_arg.
  + Sanity check in giffix catches some malformed files. Addresses
    SourceForge bug #77: dgif_lib.c: extension processing error
- Modified patches:
  * giflib-automake-1_13.patch
  * giflib-visibility.patch
    + rediff to changed context</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 5.1.3
  * Prevent malloc randomess from causing the header output routine
  to emit a GIF89 version string even when no GIF89 features are
  present.
  * Prevent malloc randomess from producing sporadic failures by causing
  sanity checks added in 5.1.2 to misfire.
  * Bulletproof gif2rgb against 0-height images. Addressed sf#78:
  Heap overflow in gif2rgb with images of size 0, also sf#82.
  * Remove unnecessary duplicate EGifClose() in gifcolor.c. Fixes sf#83
  introduced in 5.1.2.
  * Fix sf#84: incorrect return of DGifSlurp().
- Add giflib-sf-88.patch to fix sf#88</changelog>
  <changelog author="fstrba@suse.com" date="1460462400">- Update to version 5.1.4
  * Fix SF bug #94: giflib 5 loves to fail to load images... a LOT.
  * Fix SF Bug #92: Fix buffer overread in gifbuild.
  * Fix SF Bug #93: Add bounds check in gifbuild netscape2.0 path
  * Fix SF Bug #89: Fix buffer overread in gifbuild.
- Removed patch:
  * giflib-sf-88.patch
    + Integrated upstream
- Added patch:
  * giflib-CVE-2016-3977.patch
  - Fix CVE-2016-3977: heap buffer overflow in gif2rgb
    (bsc#974847)</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Added fix-autoconf11.patch for fixing build with older autoconf,
  requires for SLE11.</changelog>
  <changelog author="bwiedemann@suse.com" date="1499256000">- Keep timestamps before patch updates them to fix build-compare</changelog>
  <changelog author="schwab@suse.de" date="1541764800">- Remove unused build requires on X libraries
- Use %license</changelog>
  <changelog author="elimat@opensuse.org" date="1594382400">- Update to version 5.2.1
  * In gifbuild.c, avoid a core dump on no color map.
  * Restore inadvertently removed library version numbers in Makefile.
- Changes in version 5.2.0
  * The undocumented and deprecated GifQuantizeBuffer() entry point
    has been moved to the util library to reduce libgif size and attack
    surface. Applications needing this function are couraged to link the
    util library or make their own copy.
  * The following obsolete utility programs are no longer installed:
    gifecho, giffilter, gifinto, gifsponge. These were either installed in
    error or have been obsolesced by modern image-transformmation tools
    like ImageMagick convert. They may be removed entirely in a future
    release.
  * Address SourceForge issue #136: Stack-buffer-overflow in gifcolor.c:84
  * Address SF bug #134: Giflib fails to slurp significant number of gifs
  * Apply SPDX convention for license tagging.
- Changes in version 5.1.9
  * The documentation directory now includes an HTMlified version of the
    GIF89 standard, and a more detailed description of how LZW compression
    is applied to GIFs.
  * Address SF bug #129: The latest version of giflib cannot be build on windows.
  * Address SF bug #126: Cannot compile giflib using c89
- Changes in version 5.1.8
  * Address SF bug #119: MemorySanitizer: FPE on unknown address (CVE-2019-15133 bsc#1146299)
  * Address SF bug #125: 5.1.7: xmlto is still required for tarball
  * Address SF bug #124: 5.1.7: ar invocation is not crosscompile compatible
  * Address SF bug #122: 5.1.7 installs manpages to wrong directory
  * Address SF bug #121: make: getversion: Command not found
  * Address SF bug #120: 5.1.7 does not build a proper library - no
- Changes in version 5.1.7
  * Correct a minor packaging error (superfluous symlinks) in the 5.1.6 tarballs.
- Changes in version 5.1.6
  * Fix library installation in the Makefile.
- Changes in version 5.1.5
  * Fix SF bug #114: Null dereferences in main() of gifclrmp
  * Fix SF bug #113: Heap Buffer Overflow-2 in function DGifDecompressLine()
    in cgif.c.  This had been assigned (CVE-2018-11490 bsc#1094832).
  * Fix SF bug #111: segmentation fault in PrintCodeBlock
  * Fix SF bug #109: Segmentation fault of giftool reading a crafted file
  * Fix SF bug #107: Floating point exception in giftext utility
  * Fix SF bug #105: heap buffer overflow in DumpScreen2RGB in gif2rgb.c:317
  * Fix SF bug #104: Ineffective bounds check in DGifSlurp
  * Fix SF bug #103: GIFLIB 5.1.4: DGifSlurp fails on empty comment
  * Fix SF bug #87: Heap buffer overflow in 5.1.2 (gif2rgb). (CVE-2016-3977 bsc#974847)
  * The horrible old autoconf build system has been removed with extreme prejudice.
    You now build this simply by running "make" from the top-level directory.
- Run spec-cleaner
- Drop patches fixed upstream:
  * giflib-visibility.patch
  * giflib-automake-1_13.patch
  * giflib-CVE-2016-3977.patch
  * fix-autoconf11.patch
- Change build system to Make only (upstream not using autoconf)</changelog>
  <changelog author="fstrba@suse.com" date="1618401600">- Added patch:
  * PIE.patch
    + build path independent objects and inherit CFLAGS from the
    build system (bsc#1184123)</changelog>
  <changelog author="olaf@aepfle.de" date="1618488000">- prep section should just extract and patch,
  further modifications have to be done in the build section</changelog>
</package>
<package pkgid="9138fa888a3441f9440e9b1c0ecb6de3031bc31fac0009d99d80d74cd34b4027" name="giflib-devel" arch="ppc64le">
  <version epoch="0" ver="5.2.1" rel="150000.4.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1421236800">- Update to version 5.1.1
  + Numerous minor fixes in getarg.c. Affects only the utilities, not the
    core library.
  + Fix SourceForge bug #59 DGifOpen can segfault if DGifGetScreenDesc fails.
  + SourceForge patch #20: In gifalloc, fix usage of realloc() in case of failure.
  + Fix SourceForge bug #61 Leak in gifsponge.
  + glibtoolize port fix for OS X.</changelog>
  <changelog author="tchvatal@suse.com" date="1421323200">- Cleanup a bit
- Remove obsolete sle10 deprecations
- Fix one tiny rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1453204800">- Update to version 5.1.2 (fixes CVE-2015-7555, bsc#960319)
  * Code Fixes
    + Code hardening using reallocarray() from OpenBSD.
    + Sanity check in giffilter catches files with malformed
  extension records. Fixes SourceForge bug #63: malformed gif
  causes segfault in giffilter.
  + Inexpensive sanity check in DGifSlurp() catches malformed files
    with  no image descriptor. Fixes SourceForge bug #64: malformed
  gif causes crash in giftool.
  + Fix SourceForge bug #66: GifDrawBoxedText8x8() modifying
    constant input parameter.
  + Bail out of GIF read on invalid pixel width. Addresses Savannah
    bug #67: invalid shift in dgif_lib.c
  + Fix SourceForge bug #69: #69 Malformed: Gif file with no
    extension block after a GRAPHICS_EXT_FUNC_CODE extension causes
  segfault (in giftext).
  + Fix SourceForge bug #71: Buffer overwrite when giffixing a
    malformed gif.
  + Fix SourceForge bug #73: Null pointer deference in gifclrmap
    (only reachable with malformed GIF).
  + Fix SourceForge bug #74: Double free in gifsponge under 5.1,1,
    for any valid gif image.
  + Fix SourceForge bug #75: GAGetArgs overflows due to uncounted
    use of va_arg.
  + Sanity check in giffix catches some malformed files. Addresses
    SourceForge bug #77: dgif_lib.c: extension processing error
- Modified patches:
  * giflib-automake-1_13.patch
  * giflib-visibility.patch
    + rediff to changed context</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 5.1.3
  * Prevent malloc randomess from causing the header output routine
  to emit a GIF89 version string even when no GIF89 features are
  present.
  * Prevent malloc randomess from producing sporadic failures by causing
  sanity checks added in 5.1.2 to misfire.
  * Bulletproof gif2rgb against 0-height images. Addressed sf#78:
  Heap overflow in gif2rgb with images of size 0, also sf#82.
  * Remove unnecessary duplicate EGifClose() in gifcolor.c. Fixes sf#83
  introduced in 5.1.2.
  * Fix sf#84: incorrect return of DGifSlurp().
- Add giflib-sf-88.patch to fix sf#88</changelog>
  <changelog author="fstrba@suse.com" date="1460462400">- Update to version 5.1.4
  * Fix SF bug #94: giflib 5 loves to fail to load images... a LOT.
  * Fix SF Bug #92: Fix buffer overread in gifbuild.
  * Fix SF Bug #93: Add bounds check in gifbuild netscape2.0 path
  * Fix SF Bug #89: Fix buffer overread in gifbuild.
- Removed patch:
  * giflib-sf-88.patch
    + Integrated upstream
- Added patch:
  * giflib-CVE-2016-3977.patch
  - Fix CVE-2016-3977: heap buffer overflow in gif2rgb
    (bsc#974847)</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Added fix-autoconf11.patch for fixing build with older autoconf,
  requires for SLE11.</changelog>
  <changelog author="bwiedemann@suse.com" date="1499256000">- Keep timestamps before patch updates them to fix build-compare</changelog>
  <changelog author="schwab@suse.de" date="1541764800">- Remove unused build requires on X libraries
- Use %license</changelog>
  <changelog author="elimat@opensuse.org" date="1594382400">- Update to version 5.2.1
  * In gifbuild.c, avoid a core dump on no color map.
  * Restore inadvertently removed library version numbers in Makefile.
- Changes in version 5.2.0
  * The undocumented and deprecated GifQuantizeBuffer() entry point
    has been moved to the util library to reduce libgif size and attack
    surface. Applications needing this function are couraged to link the
    util library or make their own copy.
  * The following obsolete utility programs are no longer installed:
    gifecho, giffilter, gifinto, gifsponge. These were either installed in
    error or have been obsolesced by modern image-transformmation tools
    like ImageMagick convert. They may be removed entirely in a future
    release.
  * Address SourceForge issue #136: Stack-buffer-overflow in gifcolor.c:84
  * Address SF bug #134: Giflib fails to slurp significant number of gifs
  * Apply SPDX convention for license tagging.
- Changes in version 5.1.9
  * The documentation directory now includes an HTMlified version of the
    GIF89 standard, and a more detailed description of how LZW compression
    is applied to GIFs.
  * Address SF bug #129: The latest version of giflib cannot be build on windows.
  * Address SF bug #126: Cannot compile giflib using c89
- Changes in version 5.1.8
  * Address SF bug #119: MemorySanitizer: FPE on unknown address (CVE-2019-15133 bsc#1146299)
  * Address SF bug #125: 5.1.7: xmlto is still required for tarball
  * Address SF bug #124: 5.1.7: ar invocation is not crosscompile compatible
  * Address SF bug #122: 5.1.7 installs manpages to wrong directory
  * Address SF bug #121: make: getversion: Command not found
  * Address SF bug #120: 5.1.7 does not build a proper library - no
- Changes in version 5.1.7
  * Correct a minor packaging error (superfluous symlinks) in the 5.1.6 tarballs.
- Changes in version 5.1.6
  * Fix library installation in the Makefile.
- Changes in version 5.1.5
  * Fix SF bug #114: Null dereferences in main() of gifclrmp
  * Fix SF bug #113: Heap Buffer Overflow-2 in function DGifDecompressLine()
    in cgif.c.  This had been assigned (CVE-2018-11490 bsc#1094832).
  * Fix SF bug #111: segmentation fault in PrintCodeBlock
  * Fix SF bug #109: Segmentation fault of giftool reading a crafted file
  * Fix SF bug #107: Floating point exception in giftext utility
  * Fix SF bug #105: heap buffer overflow in DumpScreen2RGB in gif2rgb.c:317
  * Fix SF bug #104: Ineffective bounds check in DGifSlurp
  * Fix SF bug #103: GIFLIB 5.1.4: DGifSlurp fails on empty comment
  * Fix SF bug #87: Heap buffer overflow in 5.1.2 (gif2rgb). (CVE-2016-3977 bsc#974847)
  * The horrible old autoconf build system has been removed with extreme prejudice.
    You now build this simply by running "make" from the top-level directory.
- Run spec-cleaner
- Drop patches fixed upstream:
  * giflib-visibility.patch
  * giflib-automake-1_13.patch
  * giflib-CVE-2016-3977.patch
  * fix-autoconf11.patch
- Change build system to Make only (upstream not using autoconf)</changelog>
  <changelog author="fstrba@suse.com" date="1618401600">- Added patch:
  * PIE.patch
    + build path independent objects and inherit CFLAGS from the
    build system (bsc#1184123)</changelog>
  <changelog author="olaf@aepfle.de" date="1618488000">- prep section should just extract and patch,
  further modifications have to be done in the build section</changelog>
</package>
<package pkgid="d99a3522994a88fac5b80087bb78d7641c122b068f5b04d9d6e975faf3f99af1" name="giflib-devel" arch="s390x">
  <version epoch="0" ver="5.2.1" rel="150000.4.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1421236800">- Update to version 5.1.1
  + Numerous minor fixes in getarg.c. Affects only the utilities, not the
    core library.
  + Fix SourceForge bug #59 DGifOpen can segfault if DGifGetScreenDesc fails.
  + SourceForge patch #20: In gifalloc, fix usage of realloc() in case of failure.
  + Fix SourceForge bug #61 Leak in gifsponge.
  + glibtoolize port fix for OS X.</changelog>
  <changelog author="tchvatal@suse.com" date="1421323200">- Cleanup a bit
- Remove obsolete sle10 deprecations
- Fix one tiny rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1453204800">- Update to version 5.1.2 (fixes CVE-2015-7555, bsc#960319)
  * Code Fixes
    + Code hardening using reallocarray() from OpenBSD.
    + Sanity check in giffilter catches files with malformed
  extension records. Fixes SourceForge bug #63: malformed gif
  causes segfault in giffilter.
  + Inexpensive sanity check in DGifSlurp() catches malformed files
    with  no image descriptor. Fixes SourceForge bug #64: malformed
  gif causes crash in giftool.
  + Fix SourceForge bug #66: GifDrawBoxedText8x8() modifying
    constant input parameter.
  + Bail out of GIF read on invalid pixel width. Addresses Savannah
    bug #67: invalid shift in dgif_lib.c
  + Fix SourceForge bug #69: #69 Malformed: Gif file with no
    extension block after a GRAPHICS_EXT_FUNC_CODE extension causes
  segfault (in giftext).
  + Fix SourceForge bug #71: Buffer overwrite when giffixing a
    malformed gif.
  + Fix SourceForge bug #73: Null pointer deference in gifclrmap
    (only reachable with malformed GIF).
  + Fix SourceForge bug #74: Double free in gifsponge under 5.1,1,
    for any valid gif image.
  + Fix SourceForge bug #75: GAGetArgs overflows due to uncounted
    use of va_arg.
  + Sanity check in giffix catches some malformed files. Addresses
    SourceForge bug #77: dgif_lib.c: extension processing error
- Modified patches:
  * giflib-automake-1_13.patch
  * giflib-visibility.patch
    + rediff to changed context</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 5.1.3
  * Prevent malloc randomess from causing the header output routine
  to emit a GIF89 version string even when no GIF89 features are
  present.
  * Prevent malloc randomess from producing sporadic failures by causing
  sanity checks added in 5.1.2 to misfire.
  * Bulletproof gif2rgb against 0-height images. Addressed sf#78:
  Heap overflow in gif2rgb with images of size 0, also sf#82.
  * Remove unnecessary duplicate EGifClose() in gifcolor.c. Fixes sf#83
  introduced in 5.1.2.
  * Fix sf#84: incorrect return of DGifSlurp().
- Add giflib-sf-88.patch to fix sf#88</changelog>
  <changelog author="fstrba@suse.com" date="1460462400">- Update to version 5.1.4
  * Fix SF bug #94: giflib 5 loves to fail to load images... a LOT.
  * Fix SF Bug #92: Fix buffer overread in gifbuild.
  * Fix SF Bug #93: Add bounds check in gifbuild netscape2.0 path
  * Fix SF Bug #89: Fix buffer overread in gifbuild.
- Removed patch:
  * giflib-sf-88.patch
    + Integrated upstream
- Added patch:
  * giflib-CVE-2016-3977.patch
  - Fix CVE-2016-3977: heap buffer overflow in gif2rgb
    (bsc#974847)</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Added fix-autoconf11.patch for fixing build with older autoconf,
  requires for SLE11.</changelog>
  <changelog author="bwiedemann@suse.com" date="1499256000">- Keep timestamps before patch updates them to fix build-compare</changelog>
  <changelog author="schwab@suse.de" date="1541764800">- Remove unused build requires on X libraries
- Use %license</changelog>
  <changelog author="elimat@opensuse.org" date="1594382400">- Update to version 5.2.1
  * In gifbuild.c, avoid a core dump on no color map.
  * Restore inadvertently removed library version numbers in Makefile.
- Changes in version 5.2.0
  * The undocumented and deprecated GifQuantizeBuffer() entry point
    has been moved to the util library to reduce libgif size and attack
    surface. Applications needing this function are couraged to link the
    util library or make their own copy.
  * The following obsolete utility programs are no longer installed:
    gifecho, giffilter, gifinto, gifsponge. These were either installed in
    error or have been obsolesced by modern image-transformmation tools
    like ImageMagick convert. They may be removed entirely in a future
    release.
  * Address SourceForge issue #136: Stack-buffer-overflow in gifcolor.c:84
  * Address SF bug #134: Giflib fails to slurp significant number of gifs
  * Apply SPDX convention for license tagging.
- Changes in version 5.1.9
  * The documentation directory now includes an HTMlified version of the
    GIF89 standard, and a more detailed description of how LZW compression
    is applied to GIFs.
  * Address SF bug #129: The latest version of giflib cannot be build on windows.
  * Address SF bug #126: Cannot compile giflib using c89
- Changes in version 5.1.8
  * Address SF bug #119: MemorySanitizer: FPE on unknown address (CVE-2019-15133 bsc#1146299)
  * Address SF bug #125: 5.1.7: xmlto is still required for tarball
  * Address SF bug #124: 5.1.7: ar invocation is not crosscompile compatible
  * Address SF bug #122: 5.1.7 installs manpages to wrong directory
  * Address SF bug #121: make: getversion: Command not found
  * Address SF bug #120: 5.1.7 does not build a proper library - no
- Changes in version 5.1.7
  * Correct a minor packaging error (superfluous symlinks) in the 5.1.6 tarballs.
- Changes in version 5.1.6
  * Fix library installation in the Makefile.
- Changes in version 5.1.5
  * Fix SF bug #114: Null dereferences in main() of gifclrmp
  * Fix SF bug #113: Heap Buffer Overflow-2 in function DGifDecompressLine()
    in cgif.c.  This had been assigned (CVE-2018-11490 bsc#1094832).
  * Fix SF bug #111: segmentation fault in PrintCodeBlock
  * Fix SF bug #109: Segmentation fault of giftool reading a crafted file
  * Fix SF bug #107: Floating point exception in giftext utility
  * Fix SF bug #105: heap buffer overflow in DumpScreen2RGB in gif2rgb.c:317
  * Fix SF bug #104: Ineffective bounds check in DGifSlurp
  * Fix SF bug #103: GIFLIB 5.1.4: DGifSlurp fails on empty comment
  * Fix SF bug #87: Heap buffer overflow in 5.1.2 (gif2rgb). (CVE-2016-3977 bsc#974847)
  * The horrible old autoconf build system has been removed with extreme prejudice.
    You now build this simply by running "make" from the top-level directory.
- Run spec-cleaner
- Drop patches fixed upstream:
  * giflib-visibility.patch
  * giflib-automake-1_13.patch
  * giflib-CVE-2016-3977.patch
  * fix-autoconf11.patch
- Change build system to Make only (upstream not using autoconf)</changelog>
  <changelog author="fstrba@suse.com" date="1618401600">- Added patch:
  * PIE.patch
    + build path independent objects and inherit CFLAGS from the
    build system (bsc#1184123)</changelog>
  <changelog author="olaf@aepfle.de" date="1618488000">- prep section should just extract and patch,
  further modifications have to be done in the build section</changelog>
</package>
<package pkgid="f78e6c213b01e1df33043a18f64478c2f66b2ab59b32ac41abbe0d758c65f747" name="giflib-devel" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="150000.4.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1421236800">- Update to version 5.1.1
  + Numerous minor fixes in getarg.c. Affects only the utilities, not the
    core library.
  + Fix SourceForge bug #59 DGifOpen can segfault if DGifGetScreenDesc fails.
  + SourceForge patch #20: In gifalloc, fix usage of realloc() in case of failure.
  + Fix SourceForge bug #61 Leak in gifsponge.
  + glibtoolize port fix for OS X.</changelog>
  <changelog author="tchvatal@suse.com" date="1421323200">- Cleanup a bit
- Remove obsolete sle10 deprecations
- Fix one tiny rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1453204800">- Update to version 5.1.2 (fixes CVE-2015-7555, bsc#960319)
  * Code Fixes
    + Code hardening using reallocarray() from OpenBSD.
    + Sanity check in giffilter catches files with malformed
  extension records. Fixes SourceForge bug #63: malformed gif
  causes segfault in giffilter.
  + Inexpensive sanity check in DGifSlurp() catches malformed files
    with  no image descriptor. Fixes SourceForge bug #64: malformed
  gif causes crash in giftool.
  + Fix SourceForge bug #66: GifDrawBoxedText8x8() modifying
    constant input parameter.
  + Bail out of GIF read on invalid pixel width. Addresses Savannah
    bug #67: invalid shift in dgif_lib.c
  + Fix SourceForge bug #69: #69 Malformed: Gif file with no
    extension block after a GRAPHICS_EXT_FUNC_CODE extension causes
  segfault (in giftext).
  + Fix SourceForge bug #71: Buffer overwrite when giffixing a
    malformed gif.
  + Fix SourceForge bug #73: Null pointer deference in gifclrmap
    (only reachable with malformed GIF).
  + Fix SourceForge bug #74: Double free in gifsponge under 5.1,1,
    for any valid gif image.
  + Fix SourceForge bug #75: GAGetArgs overflows due to uncounted
    use of va_arg.
  + Sanity check in giffix catches some malformed files. Addresses
    SourceForge bug #77: dgif_lib.c: extension processing error
- Modified patches:
  * giflib-automake-1_13.patch
  * giflib-visibility.patch
    + rediff to changed context</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 5.1.3
  * Prevent malloc randomess from causing the header output routine
  to emit a GIF89 version string even when no GIF89 features are
  present.
  * Prevent malloc randomess from producing sporadic failures by causing
  sanity checks added in 5.1.2 to misfire.
  * Bulletproof gif2rgb against 0-height images. Addressed sf#78:
  Heap overflow in gif2rgb with images of size 0, also sf#82.
  * Remove unnecessary duplicate EGifClose() in gifcolor.c. Fixes sf#83
  introduced in 5.1.2.
  * Fix sf#84: incorrect return of DGifSlurp().
- Add giflib-sf-88.patch to fix sf#88</changelog>
  <changelog author="fstrba@suse.com" date="1460462400">- Update to version 5.1.4
  * Fix SF bug #94: giflib 5 loves to fail to load images... a LOT.
  * Fix SF Bug #92: Fix buffer overread in gifbuild.
  * Fix SF Bug #93: Add bounds check in gifbuild netscape2.0 path
  * Fix SF Bug #89: Fix buffer overread in gifbuild.
- Removed patch:
  * giflib-sf-88.patch
    + Integrated upstream
- Added patch:
  * giflib-CVE-2016-3977.patch
  - Fix CVE-2016-3977: heap buffer overflow in gif2rgb
    (bsc#974847)</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Added fix-autoconf11.patch for fixing build with older autoconf,
  requires for SLE11.</changelog>
  <changelog author="bwiedemann@suse.com" date="1499256000">- Keep timestamps before patch updates them to fix build-compare</changelog>
  <changelog author="schwab@suse.de" date="1541764800">- Remove unused build requires on X libraries
- Use %license</changelog>
  <changelog author="elimat@opensuse.org" date="1594382400">- Update to version 5.2.1
  * In gifbuild.c, avoid a core dump on no color map.
  * Restore inadvertently removed library version numbers in Makefile.
- Changes in version 5.2.0
  * The undocumented and deprecated GifQuantizeBuffer() entry point
    has been moved to the util library to reduce libgif size and attack
    surface. Applications needing this function are couraged to link the
    util library or make their own copy.
  * The following obsolete utility programs are no longer installed:
    gifecho, giffilter, gifinto, gifsponge. These were either installed in
    error or have been obsolesced by modern image-transformmation tools
    like ImageMagick convert. They may be removed entirely in a future
    release.
  * Address SourceForge issue #136: Stack-buffer-overflow in gifcolor.c:84
  * Address SF bug #134: Giflib fails to slurp significant number of gifs
  * Apply SPDX convention for license tagging.
- Changes in version 5.1.9
  * The documentation directory now includes an HTMlified version of the
    GIF89 standard, and a more detailed description of how LZW compression
    is applied to GIFs.
  * Address SF bug #129: The latest version of giflib cannot be build on windows.
  * Address SF bug #126: Cannot compile giflib using c89
- Changes in version 5.1.8
  * Address SF bug #119: MemorySanitizer: FPE on unknown address (CVE-2019-15133 bsc#1146299)
  * Address SF bug #125: 5.1.7: xmlto is still required for tarball
  * Address SF bug #124: 5.1.7: ar invocation is not crosscompile compatible
  * Address SF bug #122: 5.1.7 installs manpages to wrong directory
  * Address SF bug #121: make: getversion: Command not found
  * Address SF bug #120: 5.1.7 does not build a proper library - no
- Changes in version 5.1.7
  * Correct a minor packaging error (superfluous symlinks) in the 5.1.6 tarballs.
- Changes in version 5.1.6
  * Fix library installation in the Makefile.
- Changes in version 5.1.5
  * Fix SF bug #114: Null dereferences in main() of gifclrmp
  * Fix SF bug #113: Heap Buffer Overflow-2 in function DGifDecompressLine()
    in cgif.c.  This had been assigned (CVE-2018-11490 bsc#1094832).
  * Fix SF bug #111: segmentation fault in PrintCodeBlock
  * Fix SF bug #109: Segmentation fault of giftool reading a crafted file
  * Fix SF bug #107: Floating point exception in giftext utility
  * Fix SF bug #105: heap buffer overflow in DumpScreen2RGB in gif2rgb.c:317
  * Fix SF bug #104: Ineffective bounds check in DGifSlurp
  * Fix SF bug #103: GIFLIB 5.1.4: DGifSlurp fails on empty comment
  * Fix SF bug #87: Heap buffer overflow in 5.1.2 (gif2rgb). (CVE-2016-3977 bsc#974847)
  * The horrible old autoconf build system has been removed with extreme prejudice.
    You now build this simply by running "make" from the top-level directory.
- Run spec-cleaner
- Drop patches fixed upstream:
  * giflib-visibility.patch
  * giflib-automake-1_13.patch
  * giflib-CVE-2016-3977.patch
  * fix-autoconf11.patch
- Change build system to Make only (upstream not using autoconf)</changelog>
  <changelog author="fstrba@suse.com" date="1618401600">- Added patch:
  * PIE.patch
    + build path independent objects and inherit CFLAGS from the
    build system (bsc#1184123)</changelog>
  <changelog author="olaf@aepfle.de" date="1618488000">- prep section should just extract and patch,
  further modifications have to be done in the build section</changelog>
</package>
<package pkgid="8b3b2e07a1c60f456db119ae51d53ba01b0d6e26d612b9004e263e38cf7686fa" name="giflib-progs" arch="aarch64">
  <version epoch="0" ver="5.2.1" rel="150000.4.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1421236800">- Update to version 5.1.1
  + Numerous minor fixes in getarg.c. Affects only the utilities, not the
    core library.
  + Fix SourceForge bug #59 DGifOpen can segfault if DGifGetScreenDesc fails.
  + SourceForge patch #20: In gifalloc, fix usage of realloc() in case of failure.
  + Fix SourceForge bug #61 Leak in gifsponge.
  + glibtoolize port fix for OS X.</changelog>
  <changelog author="tchvatal@suse.com" date="1421323200">- Cleanup a bit
- Remove obsolete sle10 deprecations
- Fix one tiny rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1453204800">- Update to version 5.1.2 (fixes CVE-2015-7555, bsc#960319)
  * Code Fixes
    + Code hardening using reallocarray() from OpenBSD.
    + Sanity check in giffilter catches files with malformed
  extension records. Fixes SourceForge bug #63: malformed gif
  causes segfault in giffilter.
  + Inexpensive sanity check in DGifSlurp() catches malformed files
    with  no image descriptor. Fixes SourceForge bug #64: malformed
  gif causes crash in giftool.
  + Fix SourceForge bug #66: GifDrawBoxedText8x8() modifying
    constant input parameter.
  + Bail out of GIF read on invalid pixel width. Addresses Savannah
    bug #67: invalid shift in dgif_lib.c
  + Fix SourceForge bug #69: #69 Malformed: Gif file with no
    extension block after a GRAPHICS_EXT_FUNC_CODE extension causes
  segfault (in giftext).
  + Fix SourceForge bug #71: Buffer overwrite when giffixing a
    malformed gif.
  + Fix SourceForge bug #73: Null pointer deference in gifclrmap
    (only reachable with malformed GIF).
  + Fix SourceForge bug #74: Double free in gifsponge under 5.1,1,
    for any valid gif image.
  + Fix SourceForge bug #75: GAGetArgs overflows due to uncounted
    use of va_arg.
  + Sanity check in giffix catches some malformed files. Addresses
    SourceForge bug #77: dgif_lib.c: extension processing error
- Modified patches:
  * giflib-automake-1_13.patch
  * giflib-visibility.patch
    + rediff to changed context</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 5.1.3
  * Prevent malloc randomess from causing the header output routine
  to emit a GIF89 version string even when no GIF89 features are
  present.
  * Prevent malloc randomess from producing sporadic failures by causing
  sanity checks added in 5.1.2 to misfire.
  * Bulletproof gif2rgb against 0-height images. Addressed sf#78:
  Heap overflow in gif2rgb with images of size 0, also sf#82.
  * Remove unnecessary duplicate EGifClose() in gifcolor.c. Fixes sf#83
  introduced in 5.1.2.
  * Fix sf#84: incorrect return of DGifSlurp().
- Add giflib-sf-88.patch to fix sf#88</changelog>
  <changelog author="fstrba@suse.com" date="1460462400">- Update to version 5.1.4
  * Fix SF bug #94: giflib 5 loves to fail to load images... a LOT.
  * Fix SF Bug #92: Fix buffer overread in gifbuild.
  * Fix SF Bug #93: Add bounds check in gifbuild netscape2.0 path
  * Fix SF Bug #89: Fix buffer overread in gifbuild.
- Removed patch:
  * giflib-sf-88.patch
    + Integrated upstream
- Added patch:
  * giflib-CVE-2016-3977.patch
  - Fix CVE-2016-3977: heap buffer overflow in gif2rgb
    (bsc#974847)</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Added fix-autoconf11.patch for fixing build with older autoconf,
  requires for SLE11.</changelog>
  <changelog author="bwiedemann@suse.com" date="1499256000">- Keep timestamps before patch updates them to fix build-compare</changelog>
  <changelog author="schwab@suse.de" date="1541764800">- Remove unused build requires on X libraries
- Use %license</changelog>
  <changelog author="elimat@opensuse.org" date="1594382400">- Update to version 5.2.1
  * In gifbuild.c, avoid a core dump on no color map.
  * Restore inadvertently removed library version numbers in Makefile.
- Changes in version 5.2.0
  * The undocumented and deprecated GifQuantizeBuffer() entry point
    has been moved to the util library to reduce libgif size and attack
    surface. Applications needing this function are couraged to link the
    util library or make their own copy.
  * The following obsolete utility programs are no longer installed:
    gifecho, giffilter, gifinto, gifsponge. These were either installed in
    error or have been obsolesced by modern image-transformmation tools
    like ImageMagick convert. They may be removed entirely in a future
    release.
  * Address SourceForge issue #136: Stack-buffer-overflow in gifcolor.c:84
  * Address SF bug #134: Giflib fails to slurp significant number of gifs
  * Apply SPDX convention for license tagging.
- Changes in version 5.1.9
  * The documentation directory now includes an HTMlified version of the
    GIF89 standard, and a more detailed description of how LZW compression
    is applied to GIFs.
  * Address SF bug #129: The latest version of giflib cannot be build on windows.
  * Address SF bug #126: Cannot compile giflib using c89
- Changes in version 5.1.8
  * Address SF bug #119: MemorySanitizer: FPE on unknown address (CVE-2019-15133 bsc#1146299)
  * Address SF bug #125: 5.1.7: xmlto is still required for tarball
  * Address SF bug #124: 5.1.7: ar invocation is not crosscompile compatible
  * Address SF bug #122: 5.1.7 installs manpages to wrong directory
  * Address SF bug #121: make: getversion: Command not found
  * Address SF bug #120: 5.1.7 does not build a proper library - no
- Changes in version 5.1.7
  * Correct a minor packaging error (superfluous symlinks) in the 5.1.6 tarballs.
- Changes in version 5.1.6
  * Fix library installation in the Makefile.
- Changes in version 5.1.5
  * Fix SF bug #114: Null dereferences in main() of gifclrmp
  * Fix SF bug #113: Heap Buffer Overflow-2 in function DGifDecompressLine()
    in cgif.c.  This had been assigned (CVE-2018-11490 bsc#1094832).
  * Fix SF bug #111: segmentation fault in PrintCodeBlock
  * Fix SF bug #109: Segmentation fault of giftool reading a crafted file
  * Fix SF bug #107: Floating point exception in giftext utility
  * Fix SF bug #105: heap buffer overflow in DumpScreen2RGB in gif2rgb.c:317
  * Fix SF bug #104: Ineffective bounds check in DGifSlurp
  * Fix SF bug #103: GIFLIB 5.1.4: DGifSlurp fails on empty comment
  * Fix SF bug #87: Heap buffer overflow in 5.1.2 (gif2rgb). (CVE-2016-3977 bsc#974847)
  * The horrible old autoconf build system has been removed with extreme prejudice.
    You now build this simply by running "make" from the top-level directory.
- Run spec-cleaner
- Drop patches fixed upstream:
  * giflib-visibility.patch
  * giflib-automake-1_13.patch
  * giflib-CVE-2016-3977.patch
  * fix-autoconf11.patch
- Change build system to Make only (upstream not using autoconf)</changelog>
  <changelog author="fstrba@suse.com" date="1618401600">- Added patch:
  * PIE.patch
    + build path independent objects and inherit CFLAGS from the
    build system (bsc#1184123)</changelog>
  <changelog author="olaf@aepfle.de" date="1618488000">- prep section should just extract and patch,
  further modifications have to be done in the build section</changelog>
</package>
<package pkgid="104d13a24e821c835b33b87c0c8c67c815eedf167bb59de17deea6275c676d22" name="giflib-progs" arch="ppc64le">
  <version epoch="0" ver="5.2.1" rel="150000.4.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1421236800">- Update to version 5.1.1
  + Numerous minor fixes in getarg.c. Affects only the utilities, not the
    core library.
  + Fix SourceForge bug #59 DGifOpen can segfault if DGifGetScreenDesc fails.
  + SourceForge patch #20: In gifalloc, fix usage of realloc() in case of failure.
  + Fix SourceForge bug #61 Leak in gifsponge.
  + glibtoolize port fix for OS X.</changelog>
  <changelog author="tchvatal@suse.com" date="1421323200">- Cleanup a bit
- Remove obsolete sle10 deprecations
- Fix one tiny rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1453204800">- Update to version 5.1.2 (fixes CVE-2015-7555, bsc#960319)
  * Code Fixes
    + Code hardening using reallocarray() from OpenBSD.
    + Sanity check in giffilter catches files with malformed
  extension records. Fixes SourceForge bug #63: malformed gif
  causes segfault in giffilter.
  + Inexpensive sanity check in DGifSlurp() catches malformed files
    with  no image descriptor. Fixes SourceForge bug #64: malformed
  gif causes crash in giftool.
  + Fix SourceForge bug #66: GifDrawBoxedText8x8() modifying
    constant input parameter.
  + Bail out of GIF read on invalid pixel width. Addresses Savannah
    bug #67: invalid shift in dgif_lib.c
  + Fix SourceForge bug #69: #69 Malformed: Gif file with no
    extension block after a GRAPHICS_EXT_FUNC_CODE extension causes
  segfault (in giftext).
  + Fix SourceForge bug #71: Buffer overwrite when giffixing a
    malformed gif.
  + Fix SourceForge bug #73: Null pointer deference in gifclrmap
    (only reachable with malformed GIF).
  + Fix SourceForge bug #74: Double free in gifsponge under 5.1,1,
    for any valid gif image.
  + Fix SourceForge bug #75: GAGetArgs overflows due to uncounted
    use of va_arg.
  + Sanity check in giffix catches some malformed files. Addresses
    SourceForge bug #77: dgif_lib.c: extension processing error
- Modified patches:
  * giflib-automake-1_13.patch
  * giflib-visibility.patch
    + rediff to changed context</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 5.1.3
  * Prevent malloc randomess from causing the header output routine
  to emit a GIF89 version string even when no GIF89 features are
  present.
  * Prevent malloc randomess from producing sporadic failures by causing
  sanity checks added in 5.1.2 to misfire.
  * Bulletproof gif2rgb against 0-height images. Addressed sf#78:
  Heap overflow in gif2rgb with images of size 0, also sf#82.
  * Remove unnecessary duplicate EGifClose() in gifcolor.c. Fixes sf#83
  introduced in 5.1.2.
  * Fix sf#84: incorrect return of DGifSlurp().
- Add giflib-sf-88.patch to fix sf#88</changelog>
  <changelog author="fstrba@suse.com" date="1460462400">- Update to version 5.1.4
  * Fix SF bug #94: giflib 5 loves to fail to load images... a LOT.
  * Fix SF Bug #92: Fix buffer overread in gifbuild.
  * Fix SF Bug #93: Add bounds check in gifbuild netscape2.0 path
  * Fix SF Bug #89: Fix buffer overread in gifbuild.
- Removed patch:
  * giflib-sf-88.patch
    + Integrated upstream
- Added patch:
  * giflib-CVE-2016-3977.patch
  - Fix CVE-2016-3977: heap buffer overflow in gif2rgb
    (bsc#974847)</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Added fix-autoconf11.patch for fixing build with older autoconf,
  requires for SLE11.</changelog>
  <changelog author="bwiedemann@suse.com" date="1499256000">- Keep timestamps before patch updates them to fix build-compare</changelog>
  <changelog author="schwab@suse.de" date="1541764800">- Remove unused build requires on X libraries
- Use %license</changelog>
  <changelog author="elimat@opensuse.org" date="1594382400">- Update to version 5.2.1
  * In gifbuild.c, avoid a core dump on no color map.
  * Restore inadvertently removed library version numbers in Makefile.
- Changes in version 5.2.0
  * The undocumented and deprecated GifQuantizeBuffer() entry point
    has been moved to the util library to reduce libgif size and attack
    surface. Applications needing this function are couraged to link the
    util library or make their own copy.
  * The following obsolete utility programs are no longer installed:
    gifecho, giffilter, gifinto, gifsponge. These were either installed in
    error or have been obsolesced by modern image-transformmation tools
    like ImageMagick convert. They may be removed entirely in a future
    release.
  * Address SourceForge issue #136: Stack-buffer-overflow in gifcolor.c:84
  * Address SF bug #134: Giflib fails to slurp significant number of gifs
  * Apply SPDX convention for license tagging.
- Changes in version 5.1.9
  * The documentation directory now includes an HTMlified version of the
    GIF89 standard, and a more detailed description of how LZW compression
    is applied to GIFs.
  * Address SF bug #129: The latest version of giflib cannot be build on windows.
  * Address SF bug #126: Cannot compile giflib using c89
- Changes in version 5.1.8
  * Address SF bug #119: MemorySanitizer: FPE on unknown address (CVE-2019-15133 bsc#1146299)
  * Address SF bug #125: 5.1.7: xmlto is still required for tarball
  * Address SF bug #124: 5.1.7: ar invocation is not crosscompile compatible
  * Address SF bug #122: 5.1.7 installs manpages to wrong directory
  * Address SF bug #121: make: getversion: Command not found
  * Address SF bug #120: 5.1.7 does not build a proper library - no
- Changes in version 5.1.7
  * Correct a minor packaging error (superfluous symlinks) in the 5.1.6 tarballs.
- Changes in version 5.1.6
  * Fix library installation in the Makefile.
- Changes in version 5.1.5
  * Fix SF bug #114: Null dereferences in main() of gifclrmp
  * Fix SF bug #113: Heap Buffer Overflow-2 in function DGifDecompressLine()
    in cgif.c.  This had been assigned (CVE-2018-11490 bsc#1094832).
  * Fix SF bug #111: segmentation fault in PrintCodeBlock
  * Fix SF bug #109: Segmentation fault of giftool reading a crafted file
  * Fix SF bug #107: Floating point exception in giftext utility
  * Fix SF bug #105: heap buffer overflow in DumpScreen2RGB in gif2rgb.c:317
  * Fix SF bug #104: Ineffective bounds check in DGifSlurp
  * Fix SF bug #103: GIFLIB 5.1.4: DGifSlurp fails on empty comment
  * Fix SF bug #87: Heap buffer overflow in 5.1.2 (gif2rgb). (CVE-2016-3977 bsc#974847)
  * The horrible old autoconf build system has been removed with extreme prejudice.
    You now build this simply by running "make" from the top-level directory.
- Run spec-cleaner
- Drop patches fixed upstream:
  * giflib-visibility.patch
  * giflib-automake-1_13.patch
  * giflib-CVE-2016-3977.patch
  * fix-autoconf11.patch
- Change build system to Make only (upstream not using autoconf)</changelog>
  <changelog author="fstrba@suse.com" date="1618401600">- Added patch:
  * PIE.patch
    + build path independent objects and inherit CFLAGS from the
    build system (bsc#1184123)</changelog>
  <changelog author="olaf@aepfle.de" date="1618488000">- prep section should just extract and patch,
  further modifications have to be done in the build section</changelog>
</package>
<package pkgid="adb8bae3fd44515e0243ef076c02ab583f141a8da642694947ac7c5d48ac87a8" name="giflib-progs" arch="s390x">
  <version epoch="0" ver="5.2.1" rel="150000.4.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1421236800">- Update to version 5.1.1
  + Numerous minor fixes in getarg.c. Affects only the utilities, not the
    core library.
  + Fix SourceForge bug #59 DGifOpen can segfault if DGifGetScreenDesc fails.
  + SourceForge patch #20: In gifalloc, fix usage of realloc() in case of failure.
  + Fix SourceForge bug #61 Leak in gifsponge.
  + glibtoolize port fix for OS X.</changelog>
  <changelog author="tchvatal@suse.com" date="1421323200">- Cleanup a bit
- Remove obsolete sle10 deprecations
- Fix one tiny rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1453204800">- Update to version 5.1.2 (fixes CVE-2015-7555, bsc#960319)
  * Code Fixes
    + Code hardening using reallocarray() from OpenBSD.
    + Sanity check in giffilter catches files with malformed
  extension records. Fixes SourceForge bug #63: malformed gif
  causes segfault in giffilter.
  + Inexpensive sanity check in DGifSlurp() catches malformed files
    with  no image descriptor. Fixes SourceForge bug #64: malformed
  gif causes crash in giftool.
  + Fix SourceForge bug #66: GifDrawBoxedText8x8() modifying
    constant input parameter.
  + Bail out of GIF read on invalid pixel width. Addresses Savannah
    bug #67: invalid shift in dgif_lib.c
  + Fix SourceForge bug #69: #69 Malformed: Gif file with no
    extension block after a GRAPHICS_EXT_FUNC_CODE extension causes
  segfault (in giftext).
  + Fix SourceForge bug #71: Buffer overwrite when giffixing a
    malformed gif.
  + Fix SourceForge bug #73: Null pointer deference in gifclrmap
    (only reachable with malformed GIF).
  + Fix SourceForge bug #74: Double free in gifsponge under 5.1,1,
    for any valid gif image.
  + Fix SourceForge bug #75: GAGetArgs overflows due to uncounted
    use of va_arg.
  + Sanity check in giffix catches some malformed files. Addresses
    SourceForge bug #77: dgif_lib.c: extension processing error
- Modified patches:
  * giflib-automake-1_13.patch
  * giflib-visibility.patch
    + rediff to changed context</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 5.1.3
  * Prevent malloc randomess from causing the header output routine
  to emit a GIF89 version string even when no GIF89 features are
  present.
  * Prevent malloc randomess from producing sporadic failures by causing
  sanity checks added in 5.1.2 to misfire.
  * Bulletproof gif2rgb against 0-height images. Addressed sf#78:
  Heap overflow in gif2rgb with images of size 0, also sf#82.
  * Remove unnecessary duplicate EGifClose() in gifcolor.c. Fixes sf#83
  introduced in 5.1.2.
  * Fix sf#84: incorrect return of DGifSlurp().
- Add giflib-sf-88.patch to fix sf#88</changelog>
  <changelog author="fstrba@suse.com" date="1460462400">- Update to version 5.1.4
  * Fix SF bug #94: giflib 5 loves to fail to load images... a LOT.
  * Fix SF Bug #92: Fix buffer overread in gifbuild.
  * Fix SF Bug #93: Add bounds check in gifbuild netscape2.0 path
  * Fix SF Bug #89: Fix buffer overread in gifbuild.
- Removed patch:
  * giflib-sf-88.patch
    + Integrated upstream
- Added patch:
  * giflib-CVE-2016-3977.patch
  - Fix CVE-2016-3977: heap buffer overflow in gif2rgb
    (bsc#974847)</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Added fix-autoconf11.patch for fixing build with older autoconf,
  requires for SLE11.</changelog>
  <changelog author="bwiedemann@suse.com" date="1499256000">- Keep timestamps before patch updates them to fix build-compare</changelog>
  <changelog author="schwab@suse.de" date="1541764800">- Remove unused build requires on X libraries
- Use %license</changelog>
  <changelog author="elimat@opensuse.org" date="1594382400">- Update to version 5.2.1
  * In gifbuild.c, avoid a core dump on no color map.
  * Restore inadvertently removed library version numbers in Makefile.
- Changes in version 5.2.0
  * The undocumented and deprecated GifQuantizeBuffer() entry point
    has been moved to the util library to reduce libgif size and attack
    surface. Applications needing this function are couraged to link the
    util library or make their own copy.
  * The following obsolete utility programs are no longer installed:
    gifecho, giffilter, gifinto, gifsponge. These were either installed in
    error or have been obsolesced by modern image-transformmation tools
    like ImageMagick convert. They may be removed entirely in a future
    release.
  * Address SourceForge issue #136: Stack-buffer-overflow in gifcolor.c:84
  * Address SF bug #134: Giflib fails to slurp significant number of gifs
  * Apply SPDX convention for license tagging.
- Changes in version 5.1.9
  * The documentation directory now includes an HTMlified version of the
    GIF89 standard, and a more detailed description of how LZW compression
    is applied to GIFs.
  * Address SF bug #129: The latest version of giflib cannot be build on windows.
  * Address SF bug #126: Cannot compile giflib using c89
- Changes in version 5.1.8
  * Address SF bug #119: MemorySanitizer: FPE on unknown address (CVE-2019-15133 bsc#1146299)
  * Address SF bug #125: 5.1.7: xmlto is still required for tarball
  * Address SF bug #124: 5.1.7: ar invocation is not crosscompile compatible
  * Address SF bug #122: 5.1.7 installs manpages to wrong directory
  * Address SF bug #121: make: getversion: Command not found
  * Address SF bug #120: 5.1.7 does not build a proper library - no
- Changes in version 5.1.7
  * Correct a minor packaging error (superfluous symlinks) in the 5.1.6 tarballs.
- Changes in version 5.1.6
  * Fix library installation in the Makefile.
- Changes in version 5.1.5
  * Fix SF bug #114: Null dereferences in main() of gifclrmp
  * Fix SF bug #113: Heap Buffer Overflow-2 in function DGifDecompressLine()
    in cgif.c.  This had been assigned (CVE-2018-11490 bsc#1094832).
  * Fix SF bug #111: segmentation fault in PrintCodeBlock
  * Fix SF bug #109: Segmentation fault of giftool reading a crafted file
  * Fix SF bug #107: Floating point exception in giftext utility
  * Fix SF bug #105: heap buffer overflow in DumpScreen2RGB in gif2rgb.c:317
  * Fix SF bug #104: Ineffective bounds check in DGifSlurp
  * Fix SF bug #103: GIFLIB 5.1.4: DGifSlurp fails on empty comment
  * Fix SF bug #87: Heap buffer overflow in 5.1.2 (gif2rgb). (CVE-2016-3977 bsc#974847)
  * The horrible old autoconf build system has been removed with extreme prejudice.
    You now build this simply by running "make" from the top-level directory.
- Run spec-cleaner
- Drop patches fixed upstream:
  * giflib-visibility.patch
  * giflib-automake-1_13.patch
  * giflib-CVE-2016-3977.patch
  * fix-autoconf11.patch
- Change build system to Make only (upstream not using autoconf)</changelog>
  <changelog author="fstrba@suse.com" date="1618401600">- Added patch:
  * PIE.patch
    + build path independent objects and inherit CFLAGS from the
    build system (bsc#1184123)</changelog>
  <changelog author="olaf@aepfle.de" date="1618488000">- prep section should just extract and patch,
  further modifications have to be done in the build section</changelog>
</package>
<package pkgid="a4b1e7b275f19928001acfede85358a0c7c0666c186bbd6c06f736b54fc4e612" name="giflib-progs" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="150000.4.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1421236800">- Update to version 5.1.1
  + Numerous minor fixes in getarg.c. Affects only the utilities, not the
    core library.
  + Fix SourceForge bug #59 DGifOpen can segfault if DGifGetScreenDesc fails.
  + SourceForge patch #20: In gifalloc, fix usage of realloc() in case of failure.
  + Fix SourceForge bug #61 Leak in gifsponge.
  + glibtoolize port fix for OS X.</changelog>
  <changelog author="tchvatal@suse.com" date="1421323200">- Cleanup a bit
- Remove obsolete sle10 deprecations
- Fix one tiny rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1453204800">- Update to version 5.1.2 (fixes CVE-2015-7555, bsc#960319)
  * Code Fixes
    + Code hardening using reallocarray() from OpenBSD.
    + Sanity check in giffilter catches files with malformed
  extension records. Fixes SourceForge bug #63: malformed gif
  causes segfault in giffilter.
  + Inexpensive sanity check in DGifSlurp() catches malformed files
    with  no image descriptor. Fixes SourceForge bug #64: malformed
  gif causes crash in giftool.
  + Fix SourceForge bug #66: GifDrawBoxedText8x8() modifying
    constant input parameter.
  + Bail out of GIF read on invalid pixel width. Addresses Savannah
    bug #67: invalid shift in dgif_lib.c
  + Fix SourceForge bug #69: #69 Malformed: Gif file with no
    extension block after a GRAPHICS_EXT_FUNC_CODE extension causes
  segfault (in giftext).
  + Fix SourceForge bug #71: Buffer overwrite when giffixing a
    malformed gif.
  + Fix SourceForge bug #73: Null pointer deference in gifclrmap
    (only reachable with malformed GIF).
  + Fix SourceForge bug #74: Double free in gifsponge under 5.1,1,
    for any valid gif image.
  + Fix SourceForge bug #75: GAGetArgs overflows due to uncounted
    use of va_arg.
  + Sanity check in giffix catches some malformed files. Addresses
    SourceForge bug #77: dgif_lib.c: extension processing error
- Modified patches:
  * giflib-automake-1_13.patch
  * giflib-visibility.patch
    + rediff to changed context</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 5.1.3
  * Prevent malloc randomess from causing the header output routine
  to emit a GIF89 version string even when no GIF89 features are
  present.
  * Prevent malloc randomess from producing sporadic failures by causing
  sanity checks added in 5.1.2 to misfire.
  * Bulletproof gif2rgb against 0-height images. Addressed sf#78:
  Heap overflow in gif2rgb with images of size 0, also sf#82.
  * Remove unnecessary duplicate EGifClose() in gifcolor.c. Fixes sf#83
  introduced in 5.1.2.
  * Fix sf#84: incorrect return of DGifSlurp().
- Add giflib-sf-88.patch to fix sf#88</changelog>
  <changelog author="fstrba@suse.com" date="1460462400">- Update to version 5.1.4
  * Fix SF bug #94: giflib 5 loves to fail to load images... a LOT.
  * Fix SF Bug #92: Fix buffer overread in gifbuild.
  * Fix SF Bug #93: Add bounds check in gifbuild netscape2.0 path
  * Fix SF Bug #89: Fix buffer overread in gifbuild.
- Removed patch:
  * giflib-sf-88.patch
    + Integrated upstream
- Added patch:
  * giflib-CVE-2016-3977.patch
  - Fix CVE-2016-3977: heap buffer overflow in gif2rgb
    (bsc#974847)</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Added fix-autoconf11.patch for fixing build with older autoconf,
  requires for SLE11.</changelog>
  <changelog author="bwiedemann@suse.com" date="1499256000">- Keep timestamps before patch updates them to fix build-compare</changelog>
  <changelog author="schwab@suse.de" date="1541764800">- Remove unused build requires on X libraries
- Use %license</changelog>
  <changelog author="elimat@opensuse.org" date="1594382400">- Update to version 5.2.1
  * In gifbuild.c, avoid a core dump on no color map.
  * Restore inadvertently removed library version numbers in Makefile.
- Changes in version 5.2.0
  * The undocumented and deprecated GifQuantizeBuffer() entry point
    has been moved to the util library to reduce libgif size and attack
    surface. Applications needing this function are couraged to link the
    util library or make their own copy.
  * The following obsolete utility programs are no longer installed:
    gifecho, giffilter, gifinto, gifsponge. These were either installed in
    error or have been obsolesced by modern image-transformmation tools
    like ImageMagick convert. They may be removed entirely in a future
    release.
  * Address SourceForge issue #136: Stack-buffer-overflow in gifcolor.c:84
  * Address SF bug #134: Giflib fails to slurp significant number of gifs
  * Apply SPDX convention for license tagging.
- Changes in version 5.1.9
  * The documentation directory now includes an HTMlified version of the
    GIF89 standard, and a more detailed description of how LZW compression
    is applied to GIFs.
  * Address SF bug #129: The latest version of giflib cannot be build on windows.
  * Address SF bug #126: Cannot compile giflib using c89
- Changes in version 5.1.8
  * Address SF bug #119: MemorySanitizer: FPE on unknown address (CVE-2019-15133 bsc#1146299)
  * Address SF bug #125: 5.1.7: xmlto is still required for tarball
  * Address SF bug #124: 5.1.7: ar invocation is not crosscompile compatible
  * Address SF bug #122: 5.1.7 installs manpages to wrong directory
  * Address SF bug #121: make: getversion: Command not found
  * Address SF bug #120: 5.1.7 does not build a proper library - no
- Changes in version 5.1.7
  * Correct a minor packaging error (superfluous symlinks) in the 5.1.6 tarballs.
- Changes in version 5.1.6
  * Fix library installation in the Makefile.
- Changes in version 5.1.5
  * Fix SF bug #114: Null dereferences in main() of gifclrmp
  * Fix SF bug #113: Heap Buffer Overflow-2 in function DGifDecompressLine()
    in cgif.c.  This had been assigned (CVE-2018-11490 bsc#1094832).
  * Fix SF bug #111: segmentation fault in PrintCodeBlock
  * Fix SF bug #109: Segmentation fault of giftool reading a crafted file
  * Fix SF bug #107: Floating point exception in giftext utility
  * Fix SF bug #105: heap buffer overflow in DumpScreen2RGB in gif2rgb.c:317
  * Fix SF bug #104: Ineffective bounds check in DGifSlurp
  * Fix SF bug #103: GIFLIB 5.1.4: DGifSlurp fails on empty comment
  * Fix SF bug #87: Heap buffer overflow in 5.1.2 (gif2rgb). (CVE-2016-3977 bsc#974847)
  * The horrible old autoconf build system has been removed with extreme prejudice.
    You now build this simply by running "make" from the top-level directory.
- Run spec-cleaner
- Drop patches fixed upstream:
  * giflib-visibility.patch
  * giflib-automake-1_13.patch
  * giflib-CVE-2016-3977.patch
  * fix-autoconf11.patch
- Change build system to Make only (upstream not using autoconf)</changelog>
  <changelog author="fstrba@suse.com" date="1618401600">- Added patch:
  * PIE.patch
    + build path independent objects and inherit CFLAGS from the
    build system (bsc#1184123)</changelog>
  <changelog author="olaf@aepfle.de" date="1618488000">- prep section should just extract and patch,
  further modifications have to be done in the build section</changelog>
</package>
<package pkgid="35942558c5da5d21770e9afffc7541fd3151cd51c37d3d5de456e667c38bf7ef" name="git" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="026dc3e90d284b359c14617950de30d75bf3239de0430ef6a7593fd806289e23" name="git" arch="ppc64le">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="bbb19f8cdeadc62ec1b1eb0efaa12d20f91067267613683eceeded2169862f5c" name="git" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="d6a3badd3f96cc9576fc2e81411f44566f3bdc8cee3b9e819306cd1040d2dc37" name="git" arch="src">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="87d9ea55b3a160cdde9deb456e2de32c232195cf54b83bb846c3bbcd8afc1a7e" name="git" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="1d3e0d1d1efa36d643ab9f1fe3bef7b104a1d7fb715d14fd5c5b7acaad210058" name="git-arch" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="ce40452b051be38ff01f62689e44f2db17d2006991b70bedb1484e897f9fa318" name="git-arch" arch="ppc64le">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="732d0b48fb40449ff0f3e18dac2600327976fef39a46cd957a7483841d2d8c7b" name="git-arch" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="5d411f26edc1e7cdf2f51d6b6d33e504004ae5a3c9a63604d5d9bebdd614cfd8" name="git-arch" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="a95668cdfa7f9aec2adfa2738887362dce8c033fd051284976a2838954ff895d" name="git-core" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="36b8321cc409de4be2e2c1aa8ee14cbad868bdbe8c69f9cb1feb806ee917af32" name="git-core" arch="ppc64le">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="494183b2fb2cb723a13e88f1d1cbbfd6f52eb7c59533e8d8995c8993745b9307" name="git-core" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="2d90899542fd4b2ee28a2c6cde1d7cadf9023b174c0ec2f30eede5140d2bafdd" name="git-core" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="f3a91d9922174ea23d27d8920124cad977303ab14b528782b454d3467210d693" name="git-credential-gnome-keyring" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="3a76a195f4d6c3b275d41cbb934f8d28e5bd886f6635ffa6445f5c7cf02180aa" name="git-credential-gnome-keyring" arch="ppc64le">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="9bfa4fee9958189873b91372de18831d47b61832a2253434b9917b3d129bf33e" name="git-credential-gnome-keyring" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="79d97de4784ca01b176e291db0a48e8c00aea41616bbf03dcd5caeed24b9d3b7" name="git-credential-gnome-keyring" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="25e4a1492c5a74333f72a1f4d531676c3a436c0ad9140dffbd11271d18fd29c7" name="git-credential-libsecret" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="ad87848d494f5c22b12a4b79ce0206d9d161c4310e72ef28dac3b5e79e5fa1cb" name="git-credential-libsecret" arch="ppc64le">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="8ce4248862da0951fe5e0f85f1eb8736c4236dfde700dbeb2e2c26f2361a6d05" name="git-credential-libsecret" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="799ad70a28a870bcec7cb5db58ae094507663fcb88791649d28d340a87b061d2" name="git-credential-libsecret" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="61aaa5dcb1ef0bd7439c2caedf8a0ee8e85f3e95faad3b2892bfe81bd52fc4a1" name="git-cvs" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="ea927e2bb3e6f7072e6458d6e72e943e0c35e4b9899d20b39cd48dea2a2367a8" name="git-cvs" arch="ppc64le">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="1b8d5d51df19cd197fc6eff9f42c08a17958543c5000575bba3f834f3d0e47a7" name="git-cvs" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="490548aa6d2f720648a1599f23dd7a8190d53101c65a5b725815c646935544b6" name="git-cvs" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="e445b59ab8d865d3e35e913a5f935a637d451e7c5962bbc1d10f8c3be2b11077" name="git-daemon" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="fc0031e9760484c8301edb6f29b4d3e1e29b1e485a739488986addcf512384b5" name="git-daemon" arch="ppc64le">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="a6d7e6b12a7c2958d6e0bd9ee07fcd3a50bb70dbc33874598e18b56f26ddaa65" name="git-daemon" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="8073953a12ca3b60e350963f82c58957f4722a1fba83f14b37033af7ba99a31e" name="git-daemon" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="a9f41f129b9e25ab649e9a15f5ec1b5b99c4c87b86a9c650067d84c53f6a2ba1" name="git-doc" arch="noarch">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="967666135cd6d99d318e6eb5266cae5a81ec78b53f0a6a3b72d09a0aafb5b96a" name="git-email" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="ac04f850926c233540fa0443db986915e5d645707c43d74a675e28cecef8837b" name="git-email" arch="ppc64le">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="a0a274bccaaf3d7af1798ed99e64cf25e0adcd792dea4cc8fd4fb52a559fc5ad" name="git-email" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="81a760f1affc140a402970d2aa6df5864bac6483cf9e7d45df1e575e6eaf72f6" name="git-email" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="6b8021290698f58b73b960921f54acf071da09aca010860e566b6ec6ee0da4fd" name="git-gui" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="64ae5304f07966ac8c04fc3573bc40ad8c9acaba923160e95325f30e922539dd" name="git-gui" arch="ppc64le">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="8e06205d8ed88f6b21c6b2a56c2ce4435b95f2a7a2565feecfa2bfc8f3fcffea" name="git-gui" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="6753cca3818d3603dacf4436b75d1ef38c400a166a47b23cc623fcbe3e66d14c" name="git-gui" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="e65a8226de23c8b1c279eaa95988d63a1b6d3564c284f013239032c4de168893" name="git-p4" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="c7807a58096e5640ffc3aa48bf56cfe87ba588887429abda437ccde8f037b22a" name="git-p4" arch="ppc64le">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="d8cea6bd8de0549751067bbe3969264bf17746945a7f577392dfd69cf28afd91" name="git-p4" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="a7d952be26d353909dd9d75eea830f6cfb61132ce6e5bf0d662880f5f23ea0b2" name="git-p4" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="cc93f774550777e9f7b1f9fd8872c0d38b30385e053841f69816996c5a0677bf" name="git-svn" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="2d15aea61a0abc9ebefa4df71b1b33e5278350a26117de390dc9b1800eeb6bfb" name="git-svn" arch="ppc64le">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="8c7292840aa862ad249d7e4dc0cd77ef4ff81b0874e24ecaaf6666a02f84cd32" name="git-svn" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="ba0813755e57c37f9462eb551b0a7bfd19f1eeff4056137e5eaf649b5e0b73c7" name="git-svn" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="de8c2d81773c495d6876d6a150b9693e7f9e553b90091c3c2618140d38c5bf09" name="git-web" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="6e254ea57c2d7c4f5ae79a206fa0f40e29c4216486476ee345738a531010f272" name="git-web" arch="ppc64le">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="b57ddf6afa1c053b463182f68f20762a813cc18cab6e67e08b98a9cc4d907566" name="git-web" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="3332293ece1d544803e5bff2356185d9ed0406b8b8366e71e0ec4135c42549d9" name="git-web" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="04c9fb55fa7e663ef193f8318c82ad456324c0c28f2c04739c4b8cb18f1f8c5f" name="gitk" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="5bde5d5068df4c713f58ddb1bdb7d02a5690a332ec66b9df769878f15be2c835" name="gitk" arch="ppc64le">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="699040d267694a08b83f1fb5872d3e5e6a4094891aa0caa6a834b58e9f97e059" name="gitk" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="d0261493b1ce6839a56cdfb4f5b04df129258f4dea6154de843bf753b997a96e" name="gitk" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="1b6b3a215da9822fd3174d8544f91e4366961721cc1ee0bd2d18fd53820ca959" name="glib2" arch="src">
  <version epoch="0" ver="2.62.6" rel="150200.3.9.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1560254400">- Update to version 2.60.4:
  + Fixes to improved network status detection with NetworkManager.
  + Leak fixes to some `glib-genmarshal` generated code.
  + Further fixes to the Happy Eyeballs (RFC 8305) implementation.
  + File system permissions fix to clamp down permissions in a
    small time window when copying files (CVE-2019-12450).
  + Bugs fixed: glgo#GNOME/GLib#1755, glgo#GNOME/GLib#1788,
    glgo#GNOME/GLib#1792, glgo#GNOME/GLib#1793,
    glgo#GNOME/GLib#1795, glgo#GNOME/GLib!865, glgo#GNOME/GLib!878.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562673600">- Update to version 2.60.5:
  + Fix implicit use of the `GKeyfileSettingsBackend`.
  + Fix opening a URI using the ?Open URI? portal.
  + Bugs fixed: glgo#GNOME/GLib!910, glgo#GNOME/GLib!949,
    glgo#GNOME/GLib!956, glgo#GNOME/GLib!958, glgo#GNOME/GLib!969,
    glgo#GNOME/GLib!977.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563019200">- Add glib2-keyfile-handle-filename-being-null.patch: key file:
  Handle filename being NULL (glgo#GNOME/GLib!1825,
  glgo#GNOME/GLib#984).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563969600">- Update to version 2.60.6:
  + Fix various bugs with use of the `GKeyfileSettingsBackend`
    within flatpaks (glgo#GNOME/GLib!984, glgo#GNOME/GLib!985,
    glgo#GNOME/GLib#1825).
  + Bugs fixed: glgo#GNOME/GLib!993, glgo#GNOME/GLib!984,
    glgo#GNOME/GLib!985.
- Drop glib2-keyfile-handle-filename-being-null.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567425600">- Update to version 2.60.7:
  + Bugs fixed: glgo#GNOME/GLib#1819, glgo#GNOME/GLib#1847,
    glgo#GNOME/GLib!1012, glgo#GNOME/GLib!1013,
    glgo#GNOME/GLib!1061, glgo#GNOME/GLib!1065,
    glgo#GNOME/GLib!1081.</changelog>
  <changelog author="dimstar@opensuse.org" date="1567425601">- Update to version 2.61.2:
  + Add various new array functions (#236, #269, #373).
  + Rework how D-Bus connections are closed/unreffed when
    `g_test_dbus_down()` is called. Tests which leak a
    `GDBusConnection` may now time out and abort, rather than
    silently leaking. (#787)
  + Add a deprecation macro for GLib macros, and use it;
    third-party uses of long-deprecated GLib macros may now start
    causing warnings. (#1060).
  + Deprecate `GTime` and `GTimeVal`, and various functions which
    use them. Use `GDateTime` and `guint64` UNIX timestamps
    instead.
  + Stop using `G_DISABLE_DEPRECATED` to allow disabling
    deprecation warnings; third-party code should now be using
    `GLIB_VERSION_{MIN_REQUIRED, MAX_ALLOWED}` to control symbol
    usage.
  + Improve `GNetworkMonitor` detection of offline states (#1788).
  + Fix CVE-2019-12450, wide permissions of files when copying
    using GIO.
- Changes from version 2.61.1:
  + Upgrade to Unicode Character Database v12.1.
  + Improve network availability detection with NetworkManager to
    treat lower levels of connectivity as having reduced
    availability.
- Changes from version 2.61.0:
  + Add coloured output support to `gdbus introspect.
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 2.61.3:
  + Support setting thread name on BSD systems.
  + Install previously-uninstalled headers for public
    `GNativeSocketAddress` object.
  + Very initial support for Windows apps (UWP).
  + Add various new valgrind suppressions to `glib.supp`.
  + Bugs fixed: glgo#GNOME/GLib!83, glgo#GNOME/GLib!512,
    glgo#GNOME/GLib!873, glgo#GNOME/GLib!905, glgo#GNOME/GLib!1057,
    glgo#GNOME/GLib!1309, glgo#GNOME/GLib!1620,
    glgo#GNOME/GLib!1761, glgo#GNOME/GLib!1803,
    glgo#GNOME/GLib!1819, glgo#GNOME/GLib!1852,
    glgo#GNOME/GLib!1854, glgo#GNOME/GLib!1860,
    glgo#GNOME/GLib!1863, glgo#GNOME/GLib!1867,
    glgo#GNOME/GLib!1870, glgo#GNOME/GLib!1879,
    glgo#GNOME/GLib!1880, glgo#GNOME/GLib!1881,
    glgo#GNOME/GLib!1002, glgo#GNOME/GLib!1011,
    glgo#GNOME/GLib!1015, glgo#GNOME/GLib!1016,
    glgo#GNOME/GLib!1017, glgo#GNOME/GLib!1023,
    glgo#GNOME/GLib!1026, glgo#GNOME/GLib!1027,
    glgo#GNOME/GLib!1031, glgo#GNOME/GLib!1032,
    glgo#GNOME/GLib!1033, glgo#GNOME/GLib!1034,
    glgo#GNOME/GLib!1036, glgo#GNOME/GLib!1037,
    glgo#GNOME/GLib!1044, glgo#GNOME/GLib!1049,
    glgo#GNOME/GLib!1050, glgo#GNOME/GLib!1054,
    glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1059,
    glgo#GNOME/GLib!1066, glgo#GNOME/GLib!1068,
    glgo#GNOME/GLib!1071, glgo#GNOME/GLib!1074,
    glgo#GNOME/GLib!1075.</changelog>
  <changelog author="luke@ljones.dev" date="1567684801">- Update to version 2.62.0:
  + Fix new `GFileInfo` APIs to work when
    `G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried.
  + Bugs fixed: glgo#GNOME/GLib#487, glgo#GNOME/GLib!1084,
    glgo#GNOME/GLib!1086,glgo#GNOME/GLib!1087.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570190400">- Update to version 2.62.1:
  + Fix regression in g_file_copy() when passing
    `G_FILE_COPY_TARGET_DEFAULT_PERMS` flag; the destination
    permissions would be private rather than following the process?
    umask.
  + Several `GDateTime` parsing fixes.
  + Always build the tests if installed-tests are enabled, so that
    the tests can actually be installed.
  + Bugs fixed: glgo#GNOME/GLib#174, glgo#GNOME/GLib#1865,
    glgo#GNOME/GLib#1875, glgo#GNOME/GLib#1887,
    glgo#GNOME/GLib#1888, glgo#GNOME/GLib!1021,
    glgo#GNOME/GLib!1094, glgo#GNOME/GLib!1101,
    glgo#GNOME/GLib!1102, glgo#GNOME/GLib!1103,
    glgo#GNOME/GLib!1127, glgo#GNOME/GLib!1128,
    glgo#GNOME/GLib!1140, glgo#GNOME/GLib!1141,
    glgo#GNOME/GLib!1142.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="mgorse@suse.com" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1614772800">- Add glib2-CVE-2021-27219-add-g_memdup2.patch: g_memdup takes a
  guint as parameter and sometimes leads into an integer overflow,
  so add a g_memdup2 function which uses gsize to replace it.
  (bsc#1182362, glgo#GNOME/glib!1927, glgo#GNOME/glib!1933,
  glgo#GNOME/glib!1943)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1614859200">- Add glib2-CVE-2021-27218.patch: g_byte_array_new_take takes a
  gsize as length but stores in a guint, this patch will refuse if
  the length is larger than guint. (bsc#1182328,
  glgo#GNOME/glib!1944)</changelog>
  <changelog author="mgorse@suse.com" date="1649851200">- Add glib2-CVE-2021-28153.patch: fix CREATE_REPLACE_DESTINATION
  with symlinks (boo#1183533 glgo#GNOME/glib#2325 CVE-2021-28153).</changelog>
</package>
<package pkgid="04941f4714e00344248315aa7ad8e9950948f6deb8a51cf310817412a6d59439" name="glib2-tests" arch="aarch64">
  <version epoch="0" ver="2.62.6" rel="150200.3.9.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1560254400">- Update to version 2.60.4:
  + Fixes to improved network status detection with NetworkManager.
  + Leak fixes to some `glib-genmarshal` generated code.
  + Further fixes to the Happy Eyeballs (RFC 8305) implementation.
  + File system permissions fix to clamp down permissions in a
    small time window when copying files (CVE-2019-12450).
  + Bugs fixed: glgo#GNOME/GLib#1755, glgo#GNOME/GLib#1788,
    glgo#GNOME/GLib#1792, glgo#GNOME/GLib#1793,
    glgo#GNOME/GLib#1795, glgo#GNOME/GLib!865, glgo#GNOME/GLib!878.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562673600">- Update to version 2.60.5:
  + Fix implicit use of the `GKeyfileSettingsBackend`.
  + Fix opening a URI using the ?Open URI? portal.
  + Bugs fixed: glgo#GNOME/GLib!910, glgo#GNOME/GLib!949,
    glgo#GNOME/GLib!956, glgo#GNOME/GLib!958, glgo#GNOME/GLib!969,
    glgo#GNOME/GLib!977.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563019200">- Add glib2-keyfile-handle-filename-being-null.patch: key file:
  Handle filename being NULL (glgo#GNOME/GLib!1825,
  glgo#GNOME/GLib#984).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563969600">- Update to version 2.60.6:
  + Fix various bugs with use of the `GKeyfileSettingsBackend`
    within flatpaks (glgo#GNOME/GLib!984, glgo#GNOME/GLib!985,
    glgo#GNOME/GLib#1825).
  + Bugs fixed: glgo#GNOME/GLib!993, glgo#GNOME/GLib!984,
    glgo#GNOME/GLib!985.
- Drop glib2-keyfile-handle-filename-being-null.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567425600">- Update to version 2.60.7:
  + Bugs fixed: glgo#GNOME/GLib#1819, glgo#GNOME/GLib#1847,
    glgo#GNOME/GLib!1012, glgo#GNOME/GLib!1013,
    glgo#GNOME/GLib!1061, glgo#GNOME/GLib!1065,
    glgo#GNOME/GLib!1081.</changelog>
  <changelog author="dimstar@opensuse.org" date="1567425601">- Update to version 2.61.2:
  + Add various new array functions (#236, #269, #373).
  + Rework how D-Bus connections are closed/unreffed when
    `g_test_dbus_down()` is called. Tests which leak a
    `GDBusConnection` may now time out and abort, rather than
    silently leaking. (#787)
  + Add a deprecation macro for GLib macros, and use it;
    third-party uses of long-deprecated GLib macros may now start
    causing warnings. (#1060).
  + Deprecate `GTime` and `GTimeVal`, and various functions which
    use them. Use `GDateTime` and `guint64` UNIX timestamps
    instead.
  + Stop using `G_DISABLE_DEPRECATED` to allow disabling
    deprecation warnings; third-party code should now be using
    `GLIB_VERSION_{MIN_REQUIRED, MAX_ALLOWED}` to control symbol
    usage.
  + Improve `GNetworkMonitor` detection of offline states (#1788).
  + Fix CVE-2019-12450, wide permissions of files when copying
    using GIO.
- Changes from version 2.61.1:
  + Upgrade to Unicode Character Database v12.1.
  + Improve network availability detection with NetworkManager to
    treat lower levels of connectivity as having reduced
    availability.
- Changes from version 2.61.0:
  + Add coloured output support to `gdbus introspect.
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 2.61.3:
  + Support setting thread name on BSD systems.
  + Install previously-uninstalled headers for public
    `GNativeSocketAddress` object.
  + Very initial support for Windows apps (UWP).
  + Add various new valgrind suppressions to `glib.supp`.
  + Bugs fixed: glgo#GNOME/GLib!83, glgo#GNOME/GLib!512,
    glgo#GNOME/GLib!873, glgo#GNOME/GLib!905, glgo#GNOME/GLib!1057,
    glgo#GNOME/GLib!1309, glgo#GNOME/GLib!1620,
    glgo#GNOME/GLib!1761, glgo#GNOME/GLib!1803,
    glgo#GNOME/GLib!1819, glgo#GNOME/GLib!1852,
    glgo#GNOME/GLib!1854, glgo#GNOME/GLib!1860,
    glgo#GNOME/GLib!1863, glgo#GNOME/GLib!1867,
    glgo#GNOME/GLib!1870, glgo#GNOME/GLib!1879,
    glgo#GNOME/GLib!1880, glgo#GNOME/GLib!1881,
    glgo#GNOME/GLib!1002, glgo#GNOME/GLib!1011,
    glgo#GNOME/GLib!1015, glgo#GNOME/GLib!1016,
    glgo#GNOME/GLib!1017, glgo#GNOME/GLib!1023,
    glgo#GNOME/GLib!1026, glgo#GNOME/GLib!1027,
    glgo#GNOME/GLib!1031, glgo#GNOME/GLib!1032,
    glgo#GNOME/GLib!1033, glgo#GNOME/GLib!1034,
    glgo#GNOME/GLib!1036, glgo#GNOME/GLib!1037,
    glgo#GNOME/GLib!1044, glgo#GNOME/GLib!1049,
    glgo#GNOME/GLib!1050, glgo#GNOME/GLib!1054,
    glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1059,
    glgo#GNOME/GLib!1066, glgo#GNOME/GLib!1068,
    glgo#GNOME/GLib!1071, glgo#GNOME/GLib!1074,
    glgo#GNOME/GLib!1075.</changelog>
  <changelog author="luke@ljones.dev" date="1567684801">- Update to version 2.62.0:
  + Fix new `GFileInfo` APIs to work when
    `G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried.
  + Bugs fixed: glgo#GNOME/GLib#487, glgo#GNOME/GLib!1084,
    glgo#GNOME/GLib!1086,glgo#GNOME/GLib!1087.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570190400">- Update to version 2.62.1:
  + Fix regression in g_file_copy() when passing
    `G_FILE_COPY_TARGET_DEFAULT_PERMS` flag; the destination
    permissions would be private rather than following the process?
    umask.
  + Several `GDateTime` parsing fixes.
  + Always build the tests if installed-tests are enabled, so that
    the tests can actually be installed.
  + Bugs fixed: glgo#GNOME/GLib#174, glgo#GNOME/GLib#1865,
    glgo#GNOME/GLib#1875, glgo#GNOME/GLib#1887,
    glgo#GNOME/GLib#1888, glgo#GNOME/GLib!1021,
    glgo#GNOME/GLib!1094, glgo#GNOME/GLib!1101,
    glgo#GNOME/GLib!1102, glgo#GNOME/GLib!1103,
    glgo#GNOME/GLib!1127, glgo#GNOME/GLib!1128,
    glgo#GNOME/GLib!1140, glgo#GNOME/GLib!1141,
    glgo#GNOME/GLib!1142.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="mgorse@suse.com" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1614772800">- Add glib2-CVE-2021-27219-add-g_memdup2.patch: g_memdup takes a
  guint as parameter and sometimes leads into an integer overflow,
  so add a g_memdup2 function which uses gsize to replace it.
  (bsc#1182362, glgo#GNOME/glib!1927, glgo#GNOME/glib!1933,
  glgo#GNOME/glib!1943)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1614859200">- Add glib2-CVE-2021-27218.patch: g_byte_array_new_take takes a
  gsize as length but stores in a guint, this patch will refuse if
  the length is larger than guint. (bsc#1182328,
  glgo#GNOME/glib!1944)</changelog>
  <changelog author="mgorse@suse.com" date="1649851200">- Add glib2-CVE-2021-28153.patch: fix CREATE_REPLACE_DESTINATION
  with symlinks (boo#1183533 glgo#GNOME/glib#2325 CVE-2021-28153).</changelog>
</package>
<package pkgid="50a82fb69bb0e31298cadba8221096f3b5c5d2c014eeccb8531cd35661593ea5" name="glib2-tests" arch="ppc64le">
  <version epoch="0" ver="2.62.6" rel="150200.3.9.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1560254400">- Update to version 2.60.4:
  + Fixes to improved network status detection with NetworkManager.
  + Leak fixes to some `glib-genmarshal` generated code.
  + Further fixes to the Happy Eyeballs (RFC 8305) implementation.
  + File system permissions fix to clamp down permissions in a
    small time window when copying files (CVE-2019-12450).
  + Bugs fixed: glgo#GNOME/GLib#1755, glgo#GNOME/GLib#1788,
    glgo#GNOME/GLib#1792, glgo#GNOME/GLib#1793,
    glgo#GNOME/GLib#1795, glgo#GNOME/GLib!865, glgo#GNOME/GLib!878.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562673600">- Update to version 2.60.5:
  + Fix implicit use of the `GKeyfileSettingsBackend`.
  + Fix opening a URI using the ?Open URI? portal.
  + Bugs fixed: glgo#GNOME/GLib!910, glgo#GNOME/GLib!949,
    glgo#GNOME/GLib!956, glgo#GNOME/GLib!958, glgo#GNOME/GLib!969,
    glgo#GNOME/GLib!977.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563019200">- Add glib2-keyfile-handle-filename-being-null.patch: key file:
  Handle filename being NULL (glgo#GNOME/GLib!1825,
  glgo#GNOME/GLib#984).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563969600">- Update to version 2.60.6:
  + Fix various bugs with use of the `GKeyfileSettingsBackend`
    within flatpaks (glgo#GNOME/GLib!984, glgo#GNOME/GLib!985,
    glgo#GNOME/GLib#1825).
  + Bugs fixed: glgo#GNOME/GLib!993, glgo#GNOME/GLib!984,
    glgo#GNOME/GLib!985.
- Drop glib2-keyfile-handle-filename-being-null.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567425600">- Update to version 2.60.7:
  + Bugs fixed: glgo#GNOME/GLib#1819, glgo#GNOME/GLib#1847,
    glgo#GNOME/GLib!1012, glgo#GNOME/GLib!1013,
    glgo#GNOME/GLib!1061, glgo#GNOME/GLib!1065,
    glgo#GNOME/GLib!1081.</changelog>
  <changelog author="dimstar@opensuse.org" date="1567425601">- Update to version 2.61.2:
  + Add various new array functions (#236, #269, #373).
  + Rework how D-Bus connections are closed/unreffed when
    `g_test_dbus_down()` is called. Tests which leak a
    `GDBusConnection` may now time out and abort, rather than
    silently leaking. (#787)
  + Add a deprecation macro for GLib macros, and use it;
    third-party uses of long-deprecated GLib macros may now start
    causing warnings. (#1060).
  + Deprecate `GTime` and `GTimeVal`, and various functions which
    use them. Use `GDateTime` and `guint64` UNIX timestamps
    instead.
  + Stop using `G_DISABLE_DEPRECATED` to allow disabling
    deprecation warnings; third-party code should now be using
    `GLIB_VERSION_{MIN_REQUIRED, MAX_ALLOWED}` to control symbol
    usage.
  + Improve `GNetworkMonitor` detection of offline states (#1788).
  + Fix CVE-2019-12450, wide permissions of files when copying
    using GIO.
- Changes from version 2.61.1:
  + Upgrade to Unicode Character Database v12.1.
  + Improve network availability detection with NetworkManager to
    treat lower levels of connectivity as having reduced
    availability.
- Changes from version 2.61.0:
  + Add coloured output support to `gdbus introspect.
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 2.61.3:
  + Support setting thread name on BSD systems.
  + Install previously-uninstalled headers for public
    `GNativeSocketAddress` object.
  + Very initial support for Windows apps (UWP).
  + Add various new valgrind suppressions to `glib.supp`.
  + Bugs fixed: glgo#GNOME/GLib!83, glgo#GNOME/GLib!512,
    glgo#GNOME/GLib!873, glgo#GNOME/GLib!905, glgo#GNOME/GLib!1057,
    glgo#GNOME/GLib!1309, glgo#GNOME/GLib!1620,
    glgo#GNOME/GLib!1761, glgo#GNOME/GLib!1803,
    glgo#GNOME/GLib!1819, glgo#GNOME/GLib!1852,
    glgo#GNOME/GLib!1854, glgo#GNOME/GLib!1860,
    glgo#GNOME/GLib!1863, glgo#GNOME/GLib!1867,
    glgo#GNOME/GLib!1870, glgo#GNOME/GLib!1879,
    glgo#GNOME/GLib!1880, glgo#GNOME/GLib!1881,
    glgo#GNOME/GLib!1002, glgo#GNOME/GLib!1011,
    glgo#GNOME/GLib!1015, glgo#GNOME/GLib!1016,
    glgo#GNOME/GLib!1017, glgo#GNOME/GLib!1023,
    glgo#GNOME/GLib!1026, glgo#GNOME/GLib!1027,
    glgo#GNOME/GLib!1031, glgo#GNOME/GLib!1032,
    glgo#GNOME/GLib!1033, glgo#GNOME/GLib!1034,
    glgo#GNOME/GLib!1036, glgo#GNOME/GLib!1037,
    glgo#GNOME/GLib!1044, glgo#GNOME/GLib!1049,
    glgo#GNOME/GLib!1050, glgo#GNOME/GLib!1054,
    glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1059,
    glgo#GNOME/GLib!1066, glgo#GNOME/GLib!1068,
    glgo#GNOME/GLib!1071, glgo#GNOME/GLib!1074,
    glgo#GNOME/GLib!1075.</changelog>
  <changelog author="luke@ljones.dev" date="1567684801">- Update to version 2.62.0:
  + Fix new `GFileInfo` APIs to work when
    `G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried.
  + Bugs fixed: glgo#GNOME/GLib#487, glgo#GNOME/GLib!1084,
    glgo#GNOME/GLib!1086,glgo#GNOME/GLib!1087.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570190400">- Update to version 2.62.1:
  + Fix regression in g_file_copy() when passing
    `G_FILE_COPY_TARGET_DEFAULT_PERMS` flag; the destination
    permissions would be private rather than following the process?
    umask.
  + Several `GDateTime` parsing fixes.
  + Always build the tests if installed-tests are enabled, so that
    the tests can actually be installed.
  + Bugs fixed: glgo#GNOME/GLib#174, glgo#GNOME/GLib#1865,
    glgo#GNOME/GLib#1875, glgo#GNOME/GLib#1887,
    glgo#GNOME/GLib#1888, glgo#GNOME/GLib!1021,
    glgo#GNOME/GLib!1094, glgo#GNOME/GLib!1101,
    glgo#GNOME/GLib!1102, glgo#GNOME/GLib!1103,
    glgo#GNOME/GLib!1127, glgo#GNOME/GLib!1128,
    glgo#GNOME/GLib!1140, glgo#GNOME/GLib!1141,
    glgo#GNOME/GLib!1142.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="mgorse@suse.com" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1614772800">- Add glib2-CVE-2021-27219-add-g_memdup2.patch: g_memdup takes a
  guint as parameter and sometimes leads into an integer overflow,
  so add a g_memdup2 function which uses gsize to replace it.
  (bsc#1182362, glgo#GNOME/glib!1927, glgo#GNOME/glib!1933,
  glgo#GNOME/glib!1943)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1614859200">- Add glib2-CVE-2021-27218.patch: g_byte_array_new_take takes a
  gsize as length but stores in a guint, this patch will refuse if
  the length is larger than guint. (bsc#1182328,
  glgo#GNOME/glib!1944)</changelog>
  <changelog author="mgorse@suse.com" date="1649851200">- Add glib2-CVE-2021-28153.patch: fix CREATE_REPLACE_DESTINATION
  with symlinks (boo#1183533 glgo#GNOME/glib#2325 CVE-2021-28153).</changelog>
</package>
<package pkgid="5443abc070ebef532e719de3f2497a48aba4f4aa70550d3dce19f244ebd2a7cc" name="glib2-tests" arch="s390x">
  <version epoch="0" ver="2.62.6" rel="150200.3.9.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1560254400">- Update to version 2.60.4:
  + Fixes to improved network status detection with NetworkManager.
  + Leak fixes to some `glib-genmarshal` generated code.
  + Further fixes to the Happy Eyeballs (RFC 8305) implementation.
  + File system permissions fix to clamp down permissions in a
    small time window when copying files (CVE-2019-12450).
  + Bugs fixed: glgo#GNOME/GLib#1755, glgo#GNOME/GLib#1788,
    glgo#GNOME/GLib#1792, glgo#GNOME/GLib#1793,
    glgo#GNOME/GLib#1795, glgo#GNOME/GLib!865, glgo#GNOME/GLib!878.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562673600">- Update to version 2.60.5:
  + Fix implicit use of the `GKeyfileSettingsBackend`.
  + Fix opening a URI using the ?Open URI? portal.
  + Bugs fixed: glgo#GNOME/GLib!910, glgo#GNOME/GLib!949,
    glgo#GNOME/GLib!956, glgo#GNOME/GLib!958, glgo#GNOME/GLib!969,
    glgo#GNOME/GLib!977.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563019200">- Add glib2-keyfile-handle-filename-being-null.patch: key file:
  Handle filename being NULL (glgo#GNOME/GLib!1825,
  glgo#GNOME/GLib#984).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563969600">- Update to version 2.60.6:
  + Fix various bugs with use of the `GKeyfileSettingsBackend`
    within flatpaks (glgo#GNOME/GLib!984, glgo#GNOME/GLib!985,
    glgo#GNOME/GLib#1825).
  + Bugs fixed: glgo#GNOME/GLib!993, glgo#GNOME/GLib!984,
    glgo#GNOME/GLib!985.
- Drop glib2-keyfile-handle-filename-being-null.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567425600">- Update to version 2.60.7:
  + Bugs fixed: glgo#GNOME/GLib#1819, glgo#GNOME/GLib#1847,
    glgo#GNOME/GLib!1012, glgo#GNOME/GLib!1013,
    glgo#GNOME/GLib!1061, glgo#GNOME/GLib!1065,
    glgo#GNOME/GLib!1081.</changelog>
  <changelog author="dimstar@opensuse.org" date="1567425601">- Update to version 2.61.2:
  + Add various new array functions (#236, #269, #373).
  + Rework how D-Bus connections are closed/unreffed when
    `g_test_dbus_down()` is called. Tests which leak a
    `GDBusConnection` may now time out and abort, rather than
    silently leaking. (#787)
  + Add a deprecation macro for GLib macros, and use it;
    third-party uses of long-deprecated GLib macros may now start
    causing warnings. (#1060).
  + Deprecate `GTime` and `GTimeVal`, and various functions which
    use them. Use `GDateTime` and `guint64` UNIX timestamps
    instead.
  + Stop using `G_DISABLE_DEPRECATED` to allow disabling
    deprecation warnings; third-party code should now be using
    `GLIB_VERSION_{MIN_REQUIRED, MAX_ALLOWED}` to control symbol
    usage.
  + Improve `GNetworkMonitor` detection of offline states (#1788).
  + Fix CVE-2019-12450, wide permissions of files when copying
    using GIO.
- Changes from version 2.61.1:
  + Upgrade to Unicode Character Database v12.1.
  + Improve network availability detection with NetworkManager to
    treat lower levels of connectivity as having reduced
    availability.
- Changes from version 2.61.0:
  + Add coloured output support to `gdbus introspect.
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 2.61.3:
  + Support setting thread name on BSD systems.
  + Install previously-uninstalled headers for public
    `GNativeSocketAddress` object.
  + Very initial support for Windows apps (UWP).
  + Add various new valgrind suppressions to `glib.supp`.
  + Bugs fixed: glgo#GNOME/GLib!83, glgo#GNOME/GLib!512,
    glgo#GNOME/GLib!873, glgo#GNOME/GLib!905, glgo#GNOME/GLib!1057,
    glgo#GNOME/GLib!1309, glgo#GNOME/GLib!1620,
    glgo#GNOME/GLib!1761, glgo#GNOME/GLib!1803,
    glgo#GNOME/GLib!1819, glgo#GNOME/GLib!1852,
    glgo#GNOME/GLib!1854, glgo#GNOME/GLib!1860,
    glgo#GNOME/GLib!1863, glgo#GNOME/GLib!1867,
    glgo#GNOME/GLib!1870, glgo#GNOME/GLib!1879,
    glgo#GNOME/GLib!1880, glgo#GNOME/GLib!1881,
    glgo#GNOME/GLib!1002, glgo#GNOME/GLib!1011,
    glgo#GNOME/GLib!1015, glgo#GNOME/GLib!1016,
    glgo#GNOME/GLib!1017, glgo#GNOME/GLib!1023,
    glgo#GNOME/GLib!1026, glgo#GNOME/GLib!1027,
    glgo#GNOME/GLib!1031, glgo#GNOME/GLib!1032,
    glgo#GNOME/GLib!1033, glgo#GNOME/GLib!1034,
    glgo#GNOME/GLib!1036, glgo#GNOME/GLib!1037,
    glgo#GNOME/GLib!1044, glgo#GNOME/GLib!1049,
    glgo#GNOME/GLib!1050, glgo#GNOME/GLib!1054,
    glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1059,
    glgo#GNOME/GLib!1066, glgo#GNOME/GLib!1068,
    glgo#GNOME/GLib!1071, glgo#GNOME/GLib!1074,
    glgo#GNOME/GLib!1075.</changelog>
  <changelog author="luke@ljones.dev" date="1567684801">- Update to version 2.62.0:
  + Fix new `GFileInfo` APIs to work when
    `G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried.
  + Bugs fixed: glgo#GNOME/GLib#487, glgo#GNOME/GLib!1084,
    glgo#GNOME/GLib!1086,glgo#GNOME/GLib!1087.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570190400">- Update to version 2.62.1:
  + Fix regression in g_file_copy() when passing
    `G_FILE_COPY_TARGET_DEFAULT_PERMS` flag; the destination
    permissions would be private rather than following the process?
    umask.
  + Several `GDateTime` parsing fixes.
  + Always build the tests if installed-tests are enabled, so that
    the tests can actually be installed.
  + Bugs fixed: glgo#GNOME/GLib#174, glgo#GNOME/GLib#1865,
    glgo#GNOME/GLib#1875, glgo#GNOME/GLib#1887,
    glgo#GNOME/GLib#1888, glgo#GNOME/GLib!1021,
    glgo#GNOME/GLib!1094, glgo#GNOME/GLib!1101,
    glgo#GNOME/GLib!1102, glgo#GNOME/GLib!1103,
    glgo#GNOME/GLib!1127, glgo#GNOME/GLib!1128,
    glgo#GNOME/GLib!1140, glgo#GNOME/GLib!1141,
    glgo#GNOME/GLib!1142.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="mgorse@suse.com" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1614772800">- Add glib2-CVE-2021-27219-add-g_memdup2.patch: g_memdup takes a
  guint as parameter and sometimes leads into an integer overflow,
  so add a g_memdup2 function which uses gsize to replace it.
  (bsc#1182362, glgo#GNOME/glib!1927, glgo#GNOME/glib!1933,
  glgo#GNOME/glib!1943)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1614859200">- Add glib2-CVE-2021-27218.patch: g_byte_array_new_take takes a
  gsize as length but stores in a guint, this patch will refuse if
  the length is larger than guint. (bsc#1182328,
  glgo#GNOME/glib!1944)</changelog>
  <changelog author="mgorse@suse.com" date="1649851200">- Add glib2-CVE-2021-28153.patch: fix CREATE_REPLACE_DESTINATION
  with symlinks (boo#1183533 glgo#GNOME/glib#2325 CVE-2021-28153).</changelog>
</package>
<package pkgid="7af109e1da17ab747bcd6158bef673392bc1312838b501e2f17453a3bac00273" name="glib2-tests" arch="x86_64">
  <version epoch="0" ver="2.62.6" rel="150200.3.9.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1560254400">- Update to version 2.60.4:
  + Fixes to improved network status detection with NetworkManager.
  + Leak fixes to some `glib-genmarshal` generated code.
  + Further fixes to the Happy Eyeballs (RFC 8305) implementation.
  + File system permissions fix to clamp down permissions in a
    small time window when copying files (CVE-2019-12450).
  + Bugs fixed: glgo#GNOME/GLib#1755, glgo#GNOME/GLib#1788,
    glgo#GNOME/GLib#1792, glgo#GNOME/GLib#1793,
    glgo#GNOME/GLib#1795, glgo#GNOME/GLib!865, glgo#GNOME/GLib!878.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562673600">- Update to version 2.60.5:
  + Fix implicit use of the `GKeyfileSettingsBackend`.
  + Fix opening a URI using the ?Open URI? portal.
  + Bugs fixed: glgo#GNOME/GLib!910, glgo#GNOME/GLib!949,
    glgo#GNOME/GLib!956, glgo#GNOME/GLib!958, glgo#GNOME/GLib!969,
    glgo#GNOME/GLib!977.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563019200">- Add glib2-keyfile-handle-filename-being-null.patch: key file:
  Handle filename being NULL (glgo#GNOME/GLib!1825,
  glgo#GNOME/GLib#984).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563969600">- Update to version 2.60.6:
  + Fix various bugs with use of the `GKeyfileSettingsBackend`
    within flatpaks (glgo#GNOME/GLib!984, glgo#GNOME/GLib!985,
    glgo#GNOME/GLib#1825).
  + Bugs fixed: glgo#GNOME/GLib!993, glgo#GNOME/GLib!984,
    glgo#GNOME/GLib!985.
- Drop glib2-keyfile-handle-filename-being-null.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567425600">- Update to version 2.60.7:
  + Bugs fixed: glgo#GNOME/GLib#1819, glgo#GNOME/GLib#1847,
    glgo#GNOME/GLib!1012, glgo#GNOME/GLib!1013,
    glgo#GNOME/GLib!1061, glgo#GNOME/GLib!1065,
    glgo#GNOME/GLib!1081.</changelog>
  <changelog author="dimstar@opensuse.org" date="1567425601">- Update to version 2.61.2:
  + Add various new array functions (#236, #269, #373).
  + Rework how D-Bus connections are closed/unreffed when
    `g_test_dbus_down()` is called. Tests which leak a
    `GDBusConnection` may now time out and abort, rather than
    silently leaking. (#787)
  + Add a deprecation macro for GLib macros, and use it;
    third-party uses of long-deprecated GLib macros may now start
    causing warnings. (#1060).
  + Deprecate `GTime` and `GTimeVal`, and various functions which
    use them. Use `GDateTime` and `guint64` UNIX timestamps
    instead.
  + Stop using `G_DISABLE_DEPRECATED` to allow disabling
    deprecation warnings; third-party code should now be using
    `GLIB_VERSION_{MIN_REQUIRED, MAX_ALLOWED}` to control symbol
    usage.
  + Improve `GNetworkMonitor` detection of offline states (#1788).
  + Fix CVE-2019-12450, wide permissions of files when copying
    using GIO.
- Changes from version 2.61.1:
  + Upgrade to Unicode Character Database v12.1.
  + Improve network availability detection with NetworkManager to
    treat lower levels of connectivity as having reduced
    availability.
- Changes from version 2.61.0:
  + Add coloured output support to `gdbus introspect.
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 2.61.3:
  + Support setting thread name on BSD systems.
  + Install previously-uninstalled headers for public
    `GNativeSocketAddress` object.
  + Very initial support for Windows apps (UWP).
  + Add various new valgrind suppressions to `glib.supp`.
  + Bugs fixed: glgo#GNOME/GLib!83, glgo#GNOME/GLib!512,
    glgo#GNOME/GLib!873, glgo#GNOME/GLib!905, glgo#GNOME/GLib!1057,
    glgo#GNOME/GLib!1309, glgo#GNOME/GLib!1620,
    glgo#GNOME/GLib!1761, glgo#GNOME/GLib!1803,
    glgo#GNOME/GLib!1819, glgo#GNOME/GLib!1852,
    glgo#GNOME/GLib!1854, glgo#GNOME/GLib!1860,
    glgo#GNOME/GLib!1863, glgo#GNOME/GLib!1867,
    glgo#GNOME/GLib!1870, glgo#GNOME/GLib!1879,
    glgo#GNOME/GLib!1880, glgo#GNOME/GLib!1881,
    glgo#GNOME/GLib!1002, glgo#GNOME/GLib!1011,
    glgo#GNOME/GLib!1015, glgo#GNOME/GLib!1016,
    glgo#GNOME/GLib!1017, glgo#GNOME/GLib!1023,
    glgo#GNOME/GLib!1026, glgo#GNOME/GLib!1027,
    glgo#GNOME/GLib!1031, glgo#GNOME/GLib!1032,
    glgo#GNOME/GLib!1033, glgo#GNOME/GLib!1034,
    glgo#GNOME/GLib!1036, glgo#GNOME/GLib!1037,
    glgo#GNOME/GLib!1044, glgo#GNOME/GLib!1049,
    glgo#GNOME/GLib!1050, glgo#GNOME/GLib!1054,
    glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1059,
    glgo#GNOME/GLib!1066, glgo#GNOME/GLib!1068,
    glgo#GNOME/GLib!1071, glgo#GNOME/GLib!1074,
    glgo#GNOME/GLib!1075.</changelog>
  <changelog author="luke@ljones.dev" date="1567684801">- Update to version 2.62.0:
  + Fix new `GFileInfo` APIs to work when
    `G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried.
  + Bugs fixed: glgo#GNOME/GLib#487, glgo#GNOME/GLib!1084,
    glgo#GNOME/GLib!1086,glgo#GNOME/GLib!1087.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570190400">- Update to version 2.62.1:
  + Fix regression in g_file_copy() when passing
    `G_FILE_COPY_TARGET_DEFAULT_PERMS` flag; the destination
    permissions would be private rather than following the process?
    umask.
  + Several `GDateTime` parsing fixes.
  + Always build the tests if installed-tests are enabled, so that
    the tests can actually be installed.
  + Bugs fixed: glgo#GNOME/GLib#174, glgo#GNOME/GLib#1865,
    glgo#GNOME/GLib#1875, glgo#GNOME/GLib#1887,
    glgo#GNOME/GLib#1888, glgo#GNOME/GLib!1021,
    glgo#GNOME/GLib!1094, glgo#GNOME/GLib!1101,
    glgo#GNOME/GLib!1102, glgo#GNOME/GLib!1103,
    glgo#GNOME/GLib!1127, glgo#GNOME/GLib!1128,
    glgo#GNOME/GLib!1140, glgo#GNOME/GLib!1141,
    glgo#GNOME/GLib!1142.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="mgorse@suse.com" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1614772800">- Add glib2-CVE-2021-27219-add-g_memdup2.patch: g_memdup takes a
  guint as parameter and sometimes leads into an integer overflow,
  so add a g_memdup2 function which uses gsize to replace it.
  (bsc#1182362, glgo#GNOME/glib!1927, glgo#GNOME/glib!1933,
  glgo#GNOME/glib!1943)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1614859200">- Add glib2-CVE-2021-27218.patch: g_byte_array_new_take takes a
  gsize as length but stores in a guint, this patch will refuse if
  the length is larger than guint. (bsc#1182328,
  glgo#GNOME/glib!1944)</changelog>
  <changelog author="mgorse@suse.com" date="1649851200">- Add glib2-CVE-2021-28153.patch: fix CREATE_REPLACE_DESTINATION
  with symlinks (boo#1183533 glgo#GNOME/glib#2325 CVE-2021-28153).</changelog>
</package>
<package pkgid="80e0c9352aae2e9f39ae65aa79eba5c5fecbb74656997dcaba748a161488a084" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="285bbebd68d378ca3bd2d2e9bdb9af34a6b5b6a9a0c89027bf78b7b280d9dcdd" name="glibc" arch="ppc64le">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="29fa8d140f96599a53a468f53b5770fea2f26f10fb2ea798d4424e9d667a611c" name="glibc" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="4b28884f3d25d17a9472722c9f4c263be96168f2454c0f6c15b4131b43c5f325" name="glibc" arch="src">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="f4b8f9ec22e92241162e019e4d7a7251c830fc2f9e8fb31d2bd49c1e8b748d43" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="1e29def0578202f8bf30a388d479484221abfb514bb451e773161e6b23c39ebb" name="glibc-32bit" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="c833720fbd2333afbeca5c834e769eb974f755f34b4d8d08f788cc4f82775e05" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="4ae4905b86f8718da20cf32851ccbdff3729ad6a1a1787d1dd7e43bfba9e20dc" name="glibc-devel" arch="ppc64le">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="b998a8a990a2c5dfe44b8741073efbd8de75a57fe8d2e95c7c91b3944a7ec038" name="glibc-devel" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="ee807574ed0d0e9a3da83cd37b6184f7d080c7cfa9f8c764e985ef3f1cd1b091" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="533daff139af3fdd65e6fce8d13b72e77d735248cb8cdeba01bb4c4423822a11" name="glibc-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="4605f1e30acf1d5d0f6e535a583a36b18b646545886525dbc5e774ade6e46003" name="glibc-devel-static" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="3b1f017ce85f0eddaaf2d7306434d618da546aab449b9b2774f14fe7f39b10cb" name="glibc-devel-static" arch="ppc64le">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="115697dab4bced45f0d5431abed5ef5377bb95af01d459a7fa5b0f785644faa0" name="glibc-devel-static" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="8abd8a0ce7cd613551545eedc57396625e1196fec6374413b00d9cc723e8ef27" name="glibc-devel-static" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="0ef94f7effac215bba9f42cca8b1dd10dfd4469be837abcecabcce8319855880" name="glibc-devel-static-32bit" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="db42e957627c826c8850aa2c14d1490a27db42b7179941cf4c2faa122a2834be" name="glibc-extra" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="c81cc5a690fa12ddc4e68f0b3f91860f5d391cebbcdf4f951a78d20fedcab206" name="glibc-extra" arch="ppc64le">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="408fe8224de783dd9622d4b9e8986aa810255056b371993c0a15bb95b729cf4e" name="glibc-extra" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="158cf004a77e8b3ce54c81b373f7bde01697ef14417d76972793ebeafbc5a1a8" name="glibc-extra" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="921d4d353b9f4318a04021a46ef42ce13098c572dc3f7f9f04ecf6527fbeb4cc" name="glibc-html" arch="noarch">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="4e97100c25885768dec711d8bad13de333a7ec5fbb763c0daccaae295c4fc295" name="glibc-i18ndata" arch="noarch">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="563067a90b5c961edbbaca73d3a9fe5d05307c43e9bfb3df62199b737282e5ff" name="glibc-info" arch="noarch">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="ab6e7f5992ffa303dbe55350c6c361113befbc1af44849d957dd30cedaea80ec" name="glibc-lang" arch="noarch">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="3bf24326e0afec60d12493d04de7e36242b6c3d576d03ae045bd9ae1102ab182" name="glibc-locale" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="baf34782f187712e454d322702d01021d1b626c1ea0494b040636bf7f7ec624c" name="glibc-locale" arch="ppc64le">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="e6bacda9630296a63d16f4fc74e19348be4cc5d2ed05b88bb2f9d22140ca9da4" name="glibc-locale" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="43cad1b1e38ae9a82b7c7c8e8f49118f6c51ab5868436a46b41d7bf13c21b458" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="0db6ce5f81ccaa6ed0a2b9aa9b8e1a6490e37a14b4ac06dae9e8b1e85c131420" name="glibc-locale-base" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="d09cf97e365b9a75eb8c4b591c8f64f746d9ea4081cbbca30f988f81b7d460d1" name="glibc-locale-base" arch="ppc64le">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="fc54f9ac3fff7fab0b6cee31fb6726cc22428be5f0c21be7ce86b0f824d9db78" name="glibc-locale-base" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="dd7553bbee872e8a362719dcaa7abcb9175c1b4e549eb1255efd5d884c91588e" name="glibc-locale-base" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="61efa5565a2f4c4d121b59157f25b68bbbc81c4b1f47d684c610e309618d1d83" name="glibc-locale-base-32bit" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="9f7dd46a98cf8055c9703e368dd992bd14ca25331365e7bac59ffa656a80896f" name="glibc-profile" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="5168f1e26ac83e3a8035fdb74e398d54c14b79f73cf43e21ce400af47c983b76" name="glibc-profile" arch="ppc64le">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="c9a0abaff8bc7521b9c3ba4d68ab3ac99f0817faef5b0ff6ef971ae56fb7f23d" name="glibc-profile" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="a8c7aeae4ac231c0d1f06d9115ef758980c3d9f810abfd83eb251603b77bc6f8" name="glibc-profile" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="62ca230f8c200026b51f82b92a6280ed3cd9588200ee4dae673218b76ebb3898" name="glibc-profile-32bit" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="3b1d3a3abfacc2215d2128ce40e1e04271fc7ad19780a90ee0396fcd398397bd" name="glibc-utils" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.26.1"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="9fc18b00e478d56efc130ab7fb6c2986af386be6b7bc597048c67bb435d1d5bd" name="glibc-utils" arch="ppc64le">
  <version epoch="0" ver="2.31" rel="150300.26.1"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="a5c8a5208e68bcdad9c6b8c66ccee533806c624b915a95f6e8187a2ef63ba296" name="glibc-utils" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.26.1"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="a388cfc37b0be1db40875b0a6d9961a893445d1de47c04ebe12ca3f785ba0ca0" name="glibc-utils" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.26.1"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="4594ae8d48097dc0d485c4a339f5f679ffcf3fdc03e4c8bde906bfbbedf518e6" name="glibc-utils-32bit" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.26.1"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="24ef4420164aa4ce8af17bb194d7668b6c4100efb6100dc9528b24981c478e59" name="glibc-utils-src" arch="src">
  <version epoch="0" ver="2.31" rel="150300.26.1"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="f737d702106a44eda621380ad56355c40ba85d6ca24207d408792b2f3f04e0c7" name="go" arch="aarch64">
  <version epoch="0" ver="1.18" rel="150000.3.23.1"/>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1537963200">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
</package>
<package pkgid="2a6663c72a7be98c23cdddc135d3a8f219aa1f4ba423f025e780aa22282948d1" name="go" arch="ppc64le">
  <version epoch="0" ver="1.18" rel="150000.3.23.1"/>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1537963200">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
</package>
<package pkgid="2d1e6b052dd05c1a519fc6bb4fd8c8855487036e2cbb64763c36776bd88adc4f" name="go" arch="s390x">
  <version epoch="0" ver="1.18" rel="150000.3.23.1"/>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1537963200">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
</package>
<package pkgid="131bfc6e1a5b75f9545923e49d04dd4b4b340b091698481e197dc2c9be5a7ade" name="go" arch="src">
  <version epoch="0" ver="1.18" rel="150000.3.23.1"/>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1537963200">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
</package>
<package pkgid="9e048ea74a9cf430e2edb9010ab053b08215d494f506b1c04b495d845caddef1" name="go" arch="x86_64">
  <version epoch="0" ver="1.18" rel="150000.3.23.1"/>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1537963200">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
</package>
<package pkgid="d4426481b6effdfa5b345db8165f44fd10bc22f0e545a8b0597d6a341880e9e8" name="go-doc" arch="aarch64">
  <version epoch="0" ver="1.18" rel="150000.3.23.1"/>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1537963200">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
</package>
<package pkgid="c9a91768fd96fc16c066c2cf0707c5598c55d16d2498f7ecf53d792b59355ba9" name="go-doc" arch="ppc64le">
  <version epoch="0" ver="1.18" rel="150000.3.23.1"/>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1537963200">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
</package>
<package pkgid="22f1b2ac1f971d9e1dea91aa735cb801f480a1ed69346da6c81ce1aca767a615" name="go-doc" arch="s390x">
  <version epoch="0" ver="1.18" rel="150000.3.23.1"/>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1537963200">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
</package>
<package pkgid="47929507a7ec914613f611ec9947ce946a026ec6427ca207f3795126ed9d386f" name="go-doc" arch="x86_64">
  <version epoch="0" ver="1.18" rel="150000.3.23.1"/>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1537963200">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
</package>
<package pkgid="c85b3ac006acaec5e4fc16265afd5726dda1257ac060cf865de2a026352b17e2" name="go-race" arch="aarch64">
  <version epoch="0" ver="1.18" rel="150000.3.23.1"/>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1537963200">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
</package>
<package pkgid="e4441346d4378893050d5537c260ca7f7d181876c921dc8d300a2a2e8a69df39" name="go-race" arch="x86_64">
  <version epoch="0" ver="1.18" rel="150000.3.23.1"/>
  <changelog author="duyizhaozj321@yahoo.com" date="1535371200">- Update to version 1.10.4:
  * go1.10.4 (released 2018/08/24) includes fixes to the go command,
    linker, and the net/http, mime/multipart, ld/macho, bytes, and
    strings packages. See the Go 1.10.4 milestone on our issue
    tracker for details.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1537963200">- Update to version 1.11:
  * Most of its changes are in the implementation of the toolchain,
    runtime, and libraries. As always, the release maintains the
    Go 1 promise of compatibility. We expect almost all Go programs
    to continue to compile and run as before.
  * For more details check: https://golang.org/doc/go1.11
- Use gcc8 instead of gcc7 for Factory/Tumbleweed.
- Update compiler-rt TSAN binary: the precompiled versions of
  LLVM's compiler-rt has updated to commit
  fe2c72c59aa7f4afa45e3f65a5d16a374b6cce26 in go1.11 source.
- Remove patch:
  * fix-sanitizer-build-against-latest-glibc.patch: upstream fixed.
- Add patch:
  * gcc8-go.patch: use gcc8 instead of gcc7 for Factory/Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
</package>
<package pkgid="7e0fd87865d3b008a2342ffbc045cbcefcb6dfae1a1b51294583ce8b0e2b1ee5" name="go1.17" arch="aarch64">
  <version epoch="0" ver="1.17.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.17.10 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  and the crypto/x509 and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52439 syscall: Faccessat checks wrong group
  * go#51858 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#52095 cmd/compile: fails to compile very long files starting go1.17
  * go#52148 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52306 sync: TestWaitGroupMisuse2 is flaky
  * go#52374 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52455 net/http/httptest: race in Close
  * go#52705 net: TestDialCancel is not compatible with new macOS ARM64 builders</changelog>
</package>
<package pkgid="89054a967d8804eef7c250bc2e0f31c21537b76338048c06bc0fef7bed50ec0c" name="go1.17" arch="ppc64le">
  <version epoch="0" ver="1.17.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.17.10 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  and the crypto/x509 and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52439 syscall: Faccessat checks wrong group
  * go#51858 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#52095 cmd/compile: fails to compile very long files starting go1.17
  * go#52148 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52306 sync: TestWaitGroupMisuse2 is flaky
  * go#52374 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52455 net/http/httptest: race in Close
  * go#52705 net: TestDialCancel is not compatible with new macOS ARM64 builders</changelog>
</package>
<package pkgid="eb80a8f4171cd400b6cec172141d3dff47dd2af55559b425b0400b4cf9e50949" name="go1.17" arch="s390x">
  <version epoch="0" ver="1.17.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.17.10 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  and the crypto/x509 and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52439 syscall: Faccessat checks wrong group
  * go#51858 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#52095 cmd/compile: fails to compile very long files starting go1.17
  * go#52148 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52306 sync: TestWaitGroupMisuse2 is flaky
  * go#52374 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52455 net/http/httptest: race in Close
  * go#52705 net: TestDialCancel is not compatible with new macOS ARM64 builders</changelog>
</package>
<package pkgid="17445682063a6807b69fa8d0b0b26577b24338a7f15ed34b6145b507ee2448d0" name="go1.17" arch="src">
  <version epoch="0" ver="1.17.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.17.10 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  and the crypto/x509 and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52439 syscall: Faccessat checks wrong group
  * go#51858 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#52095 cmd/compile: fails to compile very long files starting go1.17
  * go#52148 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52306 sync: TestWaitGroupMisuse2 is flaky
  * go#52374 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52455 net/http/httptest: race in Close
  * go#52705 net: TestDialCancel is not compatible with new macOS ARM64 builders</changelog>
</package>
<package pkgid="15d79711f7b3f3fe72710f5666344397853547b91f2fca7fdec6696880a689b5" name="go1.17" arch="x86_64">
  <version epoch="0" ver="1.17.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.17.10 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  and the crypto/x509 and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52439 syscall: Faccessat checks wrong group
  * go#51858 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#52095 cmd/compile: fails to compile very long files starting go1.17
  * go#52148 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52306 sync: TestWaitGroupMisuse2 is flaky
  * go#52374 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52455 net/http/httptest: race in Close
  * go#52705 net: TestDialCancel is not compatible with new macOS ARM64 builders</changelog>
</package>
<package pkgid="4fba424a9b201766c03fdd7e7796ff3285af1edb376d75f7389f8f03612f06d5" name="go1.17" arch="aarch64">
  <version epoch="0" ver="1.17.11" rel="150000.1.37.1"/>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.17.10 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  and the crypto/x509 and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52439 syscall: Faccessat checks wrong group
  * go#51858 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#52095 cmd/compile: fails to compile very long files starting go1.17
  * go#52148 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52306 sync: TestWaitGroupMisuse2 is flaky
  * go#52374 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52455 net/http/httptest: race in Close
  * go#52705 net: TestDialCancel is not compatible with new macOS ARM64 builders</changelog>
  <changelog author="jkowalczyk@suse.com" date="1654084800">- go1.17.11 (released 2022-06-01) includes security fixes to the
  crypto/rand, crypto/tls, os/exec, and path/filepath packages, as
  well as bug fixes to the crypto/tls package.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-30634 CVE-2022-30629 CVE-2022-30580 CVE-2022-29804
  * boo#1200134 go#52561 CVE-2022-30634
  * go#52932 crypto/rand: Read hangs when passed buffer larger than 1&lt;&lt;32 - 1
  * boo#1200135 go#52814 CVE-2022-30629
  * go#52832 crypto/tls: randomly generate ticket_age_add
  * boo#1200136 go#52574 CVE-2022-30580
  * go#53056 os/exec: Cmd.{Run,Start} should fail if Cmd.Path is unset
  * boo#1200137 go#52476 CVE-2022-29804
  * go#52478 path/filepath: Clean(.\c:) returns c: on Windows
  * go#52790 crypto/tls: 500% increase in allocations from (*tls.Conn).Read in go 1.17
  * go#52826 runtime: TestGcSys is still flaky
  * go#53042 misc/cgo/testsanitizers: occasional hangs in TestTSAN/tsan12
  * go#53049 runtime: TestGdbBacktrace failures due to GDB "internal-error: wait returned unexpected status 0x0"
  * go#53114 misc/cgo/testsanitizers: deadlock in TestTSAN/tsan11</changelog>
</package>
<package pkgid="8b63594c74b8edd90f569952f64f695b9b46b18119b006ea670a2a71b69c19c0" name="go1.17" arch="ppc64le">
  <version epoch="0" ver="1.17.11" rel="150000.1.37.1"/>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.17.10 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  and the crypto/x509 and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52439 syscall: Faccessat checks wrong group
  * go#51858 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#52095 cmd/compile: fails to compile very long files starting go1.17
  * go#52148 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52306 sync: TestWaitGroupMisuse2 is flaky
  * go#52374 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52455 net/http/httptest: race in Close
  * go#52705 net: TestDialCancel is not compatible with new macOS ARM64 builders</changelog>
  <changelog author="jkowalczyk@suse.com" date="1654084800">- go1.17.11 (released 2022-06-01) includes security fixes to the
  crypto/rand, crypto/tls, os/exec, and path/filepath packages, as
  well as bug fixes to the crypto/tls package.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-30634 CVE-2022-30629 CVE-2022-30580 CVE-2022-29804
  * boo#1200134 go#52561 CVE-2022-30634
  * go#52932 crypto/rand: Read hangs when passed buffer larger than 1&lt;&lt;32 - 1
  * boo#1200135 go#52814 CVE-2022-30629
  * go#52832 crypto/tls: randomly generate ticket_age_add
  * boo#1200136 go#52574 CVE-2022-30580
  * go#53056 os/exec: Cmd.{Run,Start} should fail if Cmd.Path is unset
  * boo#1200137 go#52476 CVE-2022-29804
  * go#52478 path/filepath: Clean(.\c:) returns c: on Windows
  * go#52790 crypto/tls: 500% increase in allocations from (*tls.Conn).Read in go 1.17
  * go#52826 runtime: TestGcSys is still flaky
  * go#53042 misc/cgo/testsanitizers: occasional hangs in TestTSAN/tsan12
  * go#53049 runtime: TestGdbBacktrace failures due to GDB "internal-error: wait returned unexpected status 0x0"
  * go#53114 misc/cgo/testsanitizers: deadlock in TestTSAN/tsan11</changelog>
</package>
<package pkgid="769acadd4b50c451118ca74fa9478eac76b0a746f88222502192bc014006a281" name="go1.17" arch="s390x">
  <version epoch="0" ver="1.17.11" rel="150000.1.37.1"/>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.17.10 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  and the crypto/x509 and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52439 syscall: Faccessat checks wrong group
  * go#51858 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#52095 cmd/compile: fails to compile very long files starting go1.17
  * go#52148 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52306 sync: TestWaitGroupMisuse2 is flaky
  * go#52374 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52455 net/http/httptest: race in Close
  * go#52705 net: TestDialCancel is not compatible with new macOS ARM64 builders</changelog>
  <changelog author="jkowalczyk@suse.com" date="1654084800">- go1.17.11 (released 2022-06-01) includes security fixes to the
  crypto/rand, crypto/tls, os/exec, and path/filepath packages, as
  well as bug fixes to the crypto/tls package.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-30634 CVE-2022-30629 CVE-2022-30580 CVE-2022-29804
  * boo#1200134 go#52561 CVE-2022-30634
  * go#52932 crypto/rand: Read hangs when passed buffer larger than 1&lt;&lt;32 - 1
  * boo#1200135 go#52814 CVE-2022-30629
  * go#52832 crypto/tls: randomly generate ticket_age_add
  * boo#1200136 go#52574 CVE-2022-30580
  * go#53056 os/exec: Cmd.{Run,Start} should fail if Cmd.Path is unset
  * boo#1200137 go#52476 CVE-2022-29804
  * go#52478 path/filepath: Clean(.\c:) returns c: on Windows
  * go#52790 crypto/tls: 500% increase in allocations from (*tls.Conn).Read in go 1.17
  * go#52826 runtime: TestGcSys is still flaky
  * go#53042 misc/cgo/testsanitizers: occasional hangs in TestTSAN/tsan12
  * go#53049 runtime: TestGdbBacktrace failures due to GDB "internal-error: wait returned unexpected status 0x0"
  * go#53114 misc/cgo/testsanitizers: deadlock in TestTSAN/tsan11</changelog>
</package>
<package pkgid="05b3faebe7d90997600a352c752eff44a181925e258e7575f6cfad40439545c2" name="go1.17" arch="src">
  <version epoch="0" ver="1.17.11" rel="150000.1.37.1"/>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.17.10 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  and the crypto/x509 and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52439 syscall: Faccessat checks wrong group
  * go#51858 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#52095 cmd/compile: fails to compile very long files starting go1.17
  * go#52148 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52306 sync: TestWaitGroupMisuse2 is flaky
  * go#52374 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52455 net/http/httptest: race in Close
  * go#52705 net: TestDialCancel is not compatible with new macOS ARM64 builders</changelog>
  <changelog author="jkowalczyk@suse.com" date="1654084800">- go1.17.11 (released 2022-06-01) includes security fixes to the
  crypto/rand, crypto/tls, os/exec, and path/filepath packages, as
  well as bug fixes to the crypto/tls package.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-30634 CVE-2022-30629 CVE-2022-30580 CVE-2022-29804
  * boo#1200134 go#52561 CVE-2022-30634
  * go#52932 crypto/rand: Read hangs when passed buffer larger than 1&lt;&lt;32 - 1
  * boo#1200135 go#52814 CVE-2022-30629
  * go#52832 crypto/tls: randomly generate ticket_age_add
  * boo#1200136 go#52574 CVE-2022-30580
  * go#53056 os/exec: Cmd.{Run,Start} should fail if Cmd.Path is unset
  * boo#1200137 go#52476 CVE-2022-29804
  * go#52478 path/filepath: Clean(.\c:) returns c: on Windows
  * go#52790 crypto/tls: 500% increase in allocations from (*tls.Conn).Read in go 1.17
  * go#52826 runtime: TestGcSys is still flaky
  * go#53042 misc/cgo/testsanitizers: occasional hangs in TestTSAN/tsan12
  * go#53049 runtime: TestGdbBacktrace failures due to GDB "internal-error: wait returned unexpected status 0x0"
  * go#53114 misc/cgo/testsanitizers: deadlock in TestTSAN/tsan11</changelog>
</package>
<package pkgid="b056639c8dc7586fee004373c21de3d4865c93d98ba4e1fe8fa60bef3996db63" name="go1.17" arch="x86_64">
  <version epoch="0" ver="1.17.11" rel="150000.1.37.1"/>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.17.10 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  and the crypto/x509 and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52439 syscall: Faccessat checks wrong group
  * go#51858 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#52095 cmd/compile: fails to compile very long files starting go1.17
  * go#52148 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52306 sync: TestWaitGroupMisuse2 is flaky
  * go#52374 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52455 net/http/httptest: race in Close
  * go#52705 net: TestDialCancel is not compatible with new macOS ARM64 builders</changelog>
  <changelog author="jkowalczyk@suse.com" date="1654084800">- go1.17.11 (released 2022-06-01) includes security fixes to the
  crypto/rand, crypto/tls, os/exec, and path/filepath packages, as
  well as bug fixes to the crypto/tls package.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-30634 CVE-2022-30629 CVE-2022-30580 CVE-2022-29804
  * boo#1200134 go#52561 CVE-2022-30634
  * go#52932 crypto/rand: Read hangs when passed buffer larger than 1&lt;&lt;32 - 1
  * boo#1200135 go#52814 CVE-2022-30629
  * go#52832 crypto/tls: randomly generate ticket_age_add
  * boo#1200136 go#52574 CVE-2022-30580
  * go#53056 os/exec: Cmd.{Run,Start} should fail if Cmd.Path is unset
  * boo#1200137 go#52476 CVE-2022-29804
  * go#52478 path/filepath: Clean(.\c:) returns c: on Windows
  * go#52790 crypto/tls: 500% increase in allocations from (*tls.Conn).Read in go 1.17
  * go#52826 runtime: TestGcSys is still flaky
  * go#53042 misc/cgo/testsanitizers: occasional hangs in TestTSAN/tsan12
  * go#53049 runtime: TestGdbBacktrace failures due to GDB "internal-error: wait returned unexpected status 0x0"
  * go#53114 misc/cgo/testsanitizers: deadlock in TestTSAN/tsan11</changelog>
</package>
<package pkgid="211d7c55b65b53536ba506ac012d951e1b493b76ec9f656570e108b5755e3cf0" name="go1.17" arch="aarch64">
  <version epoch="0" ver="1.17.9" rel="150000.1.28.1"/>
  <changelog author="jkowalczyk@suse.com" date="1623326400">- go1.17beta1 (released 2021-06-10) is a beta version of go1.17 cut
  from the master branch at the revision tagged go1.17beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
</package>
<package pkgid="358e797839f4c493afd5f7d93b8d9a0ab666aea7805fffc9c65828983165ceaa" name="go1.17" arch="ppc64le">
  <version epoch="0" ver="1.17.9" rel="150000.1.28.1"/>
  <changelog author="jkowalczyk@suse.com" date="1623326400">- go1.17beta1 (released 2021-06-10) is a beta version of go1.17 cut
  from the master branch at the revision tagged go1.17beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
</package>
<package pkgid="3f1070f397bb3b24eac6a883199ffad0acb57e58175d3788585f6c79c03f2c20" name="go1.17" arch="s390x">
  <version epoch="0" ver="1.17.9" rel="150000.1.28.1"/>
  <changelog author="jkowalczyk@suse.com" date="1623326400">- go1.17beta1 (released 2021-06-10) is a beta version of go1.17 cut
  from the master branch at the revision tagged go1.17beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
</package>
<package pkgid="4bdf63b2c4dbfb67a14037b63945e135cfd254aa662fd25de6378156271f1a4a" name="go1.17" arch="src">
  <version epoch="0" ver="1.17.9" rel="150000.1.28.1"/>
  <changelog author="jkowalczyk@suse.com" date="1623326400">- go1.17beta1 (released 2021-06-10) is a beta version of go1.17 cut
  from the master branch at the revision tagged go1.17beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
</package>
<package pkgid="ea2997786ffc9b8b4ce0ca91d3d3e12fffcf9156f9bc0fe54c8e899a87e2478d" name="go1.17" arch="x86_64">
  <version epoch="0" ver="1.17.9" rel="150000.1.28.1"/>
  <changelog author="jkowalczyk@suse.com" date="1623326400">- go1.17beta1 (released 2021-06-10) is a beta version of go1.17 cut
  from the master branch at the revision tagged go1.17beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
</package>
<package pkgid="46bfc4e850b606a95a8519e870ae3bcf9fbae4a83add84f4af50d90f4b37a548" name="go1.17" arch="aarch64">
  <version epoch="0" ver="1.17.9" rel="150000.1.31.1"/>
  <changelog author="jkowalczyk@suse.com" date="1623326400">- go1.17beta1 (released 2021-06-10) is a beta version of go1.17 cut
  from the master branch at the revision tagged go1.17beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
</package>
<package pkgid="80831811f7884d31d12d0550c386a1c16eb5bcb53ccc5092a08b92bd4d2ed1aa" name="go1.17" arch="ppc64le">
  <version epoch="0" ver="1.17.9" rel="150000.1.31.1"/>
  <changelog author="jkowalczyk@suse.com" date="1623326400">- go1.17beta1 (released 2021-06-10) is a beta version of go1.17 cut
  from the master branch at the revision tagged go1.17beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
</package>
<package pkgid="45436176917773cbf79cdfe0db028d4c439d3bd399c33f7cdd842986308060f2" name="go1.17" arch="s390x">
  <version epoch="0" ver="1.17.9" rel="150000.1.31.1"/>
  <changelog author="jkowalczyk@suse.com" date="1623326400">- go1.17beta1 (released 2021-06-10) is a beta version of go1.17 cut
  from the master branch at the revision tagged go1.17beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
</package>
<package pkgid="985223db979cf4f214492b527ee6eb87a1819e56af79102872c58eeac3a79bb6" name="go1.17" arch="src">
  <version epoch="0" ver="1.17.9" rel="150000.1.31.1"/>
  <changelog author="jkowalczyk@suse.com" date="1623326400">- go1.17beta1 (released 2021-06-10) is a beta version of go1.17 cut
  from the master branch at the revision tagged go1.17beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
</package>
<package pkgid="01b7727ae76a6700ffa0d2d0d680a3dc5b5f60ff9708cea7f385784f83a1c9bc" name="go1.17" arch="x86_64">
  <version epoch="0" ver="1.17.9" rel="150000.1.31.1"/>
  <changelog author="jkowalczyk@suse.com" date="1623326400">- go1.17beta1 (released 2021-06-10) is a beta version of go1.17 cut
  from the master branch at the revision tagged go1.17beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
</package>
<package pkgid="bc2662c7eae8d589f82b57f2823786d8a2752964976d7009993ed1198d0c4233" name="go1.17-doc" arch="aarch64">
  <version epoch="0" ver="1.17.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.17.10 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  and the crypto/x509 and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52439 syscall: Faccessat checks wrong group
  * go#51858 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#52095 cmd/compile: fails to compile very long files starting go1.17
  * go#52148 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52306 sync: TestWaitGroupMisuse2 is flaky
  * go#52374 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52455 net/http/httptest: race in Close
  * go#52705 net: TestDialCancel is not compatible with new macOS ARM64 builders</changelog>
</package>
<package pkgid="c2d9cb38ac6257c78501c861a5975ccff0871987121683b312c35dc8caf21b16" name="go1.17-doc" arch="ppc64le">
  <version epoch="0" ver="1.17.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.17.10 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  and the crypto/x509 and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52439 syscall: Faccessat checks wrong group
  * go#51858 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#52095 cmd/compile: fails to compile very long files starting go1.17
  * go#52148 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52306 sync: TestWaitGroupMisuse2 is flaky
  * go#52374 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52455 net/http/httptest: race in Close
  * go#52705 net: TestDialCancel is not compatible with new macOS ARM64 builders</changelog>
</package>
<package pkgid="26a047b71dd399908cd1c306df9caf3bae7467d71556cd02b292402c64272da6" name="go1.17-doc" arch="s390x">
  <version epoch="0" ver="1.17.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.17.10 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  and the crypto/x509 and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52439 syscall: Faccessat checks wrong group
  * go#51858 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#52095 cmd/compile: fails to compile very long files starting go1.17
  * go#52148 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52306 sync: TestWaitGroupMisuse2 is flaky
  * go#52374 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52455 net/http/httptest: race in Close
  * go#52705 net: TestDialCancel is not compatible with new macOS ARM64 builders</changelog>
</package>
<package pkgid="d778d54e87061e345ae6bba50a634fa3f5fd7ed220e52b81d06cbbd0c6323d50" name="go1.17-doc" arch="x86_64">
  <version epoch="0" ver="1.17.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.17.10 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  and the crypto/x509 and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52439 syscall: Faccessat checks wrong group
  * go#51858 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#52095 cmd/compile: fails to compile very long files starting go1.17
  * go#52148 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52306 sync: TestWaitGroupMisuse2 is flaky
  * go#52374 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52455 net/http/httptest: race in Close
  * go#52705 net: TestDialCancel is not compatible with new macOS ARM64 builders</changelog>
</package>
<package pkgid="d4ea01e0becca31d6cc48faecc38e09a7be7e640e52b00bfe88b01c22c83ee6e" name="go1.17-doc" arch="aarch64">
  <version epoch="0" ver="1.17.11" rel="150000.1.37.1"/>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.17.10 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  and the crypto/x509 and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52439 syscall: Faccessat checks wrong group
  * go#51858 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#52095 cmd/compile: fails to compile very long files starting go1.17
  * go#52148 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52306 sync: TestWaitGroupMisuse2 is flaky
  * go#52374 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52455 net/http/httptest: race in Close
  * go#52705 net: TestDialCancel is not compatible with new macOS ARM64 builders</changelog>
  <changelog author="jkowalczyk@suse.com" date="1654084800">- go1.17.11 (released 2022-06-01) includes security fixes to the
  crypto/rand, crypto/tls, os/exec, and path/filepath packages, as
  well as bug fixes to the crypto/tls package.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-30634 CVE-2022-30629 CVE-2022-30580 CVE-2022-29804
  * boo#1200134 go#52561 CVE-2022-30634
  * go#52932 crypto/rand: Read hangs when passed buffer larger than 1&lt;&lt;32 - 1
  * boo#1200135 go#52814 CVE-2022-30629
  * go#52832 crypto/tls: randomly generate ticket_age_add
  * boo#1200136 go#52574 CVE-2022-30580
  * go#53056 os/exec: Cmd.{Run,Start} should fail if Cmd.Path is unset
  * boo#1200137 go#52476 CVE-2022-29804
  * go#52478 path/filepath: Clean(.\c:) returns c: on Windows
  * go#52790 crypto/tls: 500% increase in allocations from (*tls.Conn).Read in go 1.17
  * go#52826 runtime: TestGcSys is still flaky
  * go#53042 misc/cgo/testsanitizers: occasional hangs in TestTSAN/tsan12
  * go#53049 runtime: TestGdbBacktrace failures due to GDB "internal-error: wait returned unexpected status 0x0"
  * go#53114 misc/cgo/testsanitizers: deadlock in TestTSAN/tsan11</changelog>
</package>
<package pkgid="e8e2cb326cee2afbc5633dd66afbb34f6f462b9c852b5643d9a8d1621cba207a" name="go1.17-doc" arch="ppc64le">
  <version epoch="0" ver="1.17.11" rel="150000.1.37.1"/>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.17.10 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  and the crypto/x509 and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52439 syscall: Faccessat checks wrong group
  * go#51858 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#52095 cmd/compile: fails to compile very long files starting go1.17
  * go#52148 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52306 sync: TestWaitGroupMisuse2 is flaky
  * go#52374 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52455 net/http/httptest: race in Close
  * go#52705 net: TestDialCancel is not compatible with new macOS ARM64 builders</changelog>
  <changelog author="jkowalczyk@suse.com" date="1654084800">- go1.17.11 (released 2022-06-01) includes security fixes to the
  crypto/rand, crypto/tls, os/exec, and path/filepath packages, as
  well as bug fixes to the crypto/tls package.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-30634 CVE-2022-30629 CVE-2022-30580 CVE-2022-29804
  * boo#1200134 go#52561 CVE-2022-30634
  * go#52932 crypto/rand: Read hangs when passed buffer larger than 1&lt;&lt;32 - 1
  * boo#1200135 go#52814 CVE-2022-30629
  * go#52832 crypto/tls: randomly generate ticket_age_add
  * boo#1200136 go#52574 CVE-2022-30580
  * go#53056 os/exec: Cmd.{Run,Start} should fail if Cmd.Path is unset
  * boo#1200137 go#52476 CVE-2022-29804
  * go#52478 path/filepath: Clean(.\c:) returns c: on Windows
  * go#52790 crypto/tls: 500% increase in allocations from (*tls.Conn).Read in go 1.17
  * go#52826 runtime: TestGcSys is still flaky
  * go#53042 misc/cgo/testsanitizers: occasional hangs in TestTSAN/tsan12
  * go#53049 runtime: TestGdbBacktrace failures due to GDB "internal-error: wait returned unexpected status 0x0"
  * go#53114 misc/cgo/testsanitizers: deadlock in TestTSAN/tsan11</changelog>
</package>
<package pkgid="f36a58235bf244d35a72e2e5866ff285e2ea0d718af3c664b1f14a7dbd41c4a6" name="go1.17-doc" arch="s390x">
  <version epoch="0" ver="1.17.11" rel="150000.1.37.1"/>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.17.10 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  and the crypto/x509 and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52439 syscall: Faccessat checks wrong group
  * go#51858 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#52095 cmd/compile: fails to compile very long files starting go1.17
  * go#52148 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52306 sync: TestWaitGroupMisuse2 is flaky
  * go#52374 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52455 net/http/httptest: race in Close
  * go#52705 net: TestDialCancel is not compatible with new macOS ARM64 builders</changelog>
  <changelog author="jkowalczyk@suse.com" date="1654084800">- go1.17.11 (released 2022-06-01) includes security fixes to the
  crypto/rand, crypto/tls, os/exec, and path/filepath packages, as
  well as bug fixes to the crypto/tls package.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-30634 CVE-2022-30629 CVE-2022-30580 CVE-2022-29804
  * boo#1200134 go#52561 CVE-2022-30634
  * go#52932 crypto/rand: Read hangs when passed buffer larger than 1&lt;&lt;32 - 1
  * boo#1200135 go#52814 CVE-2022-30629
  * go#52832 crypto/tls: randomly generate ticket_age_add
  * boo#1200136 go#52574 CVE-2022-30580
  * go#53056 os/exec: Cmd.{Run,Start} should fail if Cmd.Path is unset
  * boo#1200137 go#52476 CVE-2022-29804
  * go#52478 path/filepath: Clean(.\c:) returns c: on Windows
  * go#52790 crypto/tls: 500% increase in allocations from (*tls.Conn).Read in go 1.17
  * go#52826 runtime: TestGcSys is still flaky
  * go#53042 misc/cgo/testsanitizers: occasional hangs in TestTSAN/tsan12
  * go#53049 runtime: TestGdbBacktrace failures due to GDB "internal-error: wait returned unexpected status 0x0"
  * go#53114 misc/cgo/testsanitizers: deadlock in TestTSAN/tsan11</changelog>
</package>
<package pkgid="122d5a84dfa0ad7f675c75dbf1fba0adb3b797faa0abb5ba790aaac4c1767a79" name="go1.17-doc" arch="x86_64">
  <version epoch="0" ver="1.17.11" rel="150000.1.37.1"/>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.17.10 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  and the crypto/x509 and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52439 syscall: Faccessat checks wrong group
  * go#51858 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#52095 cmd/compile: fails to compile very long files starting go1.17
  * go#52148 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52306 sync: TestWaitGroupMisuse2 is flaky
  * go#52374 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52455 net/http/httptest: race in Close
  * go#52705 net: TestDialCancel is not compatible with new macOS ARM64 builders</changelog>
  <changelog author="jkowalczyk@suse.com" date="1654084800">- go1.17.11 (released 2022-06-01) includes security fixes to the
  crypto/rand, crypto/tls, os/exec, and path/filepath packages, as
  well as bug fixes to the crypto/tls package.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-30634 CVE-2022-30629 CVE-2022-30580 CVE-2022-29804
  * boo#1200134 go#52561 CVE-2022-30634
  * go#52932 crypto/rand: Read hangs when passed buffer larger than 1&lt;&lt;32 - 1
  * boo#1200135 go#52814 CVE-2022-30629
  * go#52832 crypto/tls: randomly generate ticket_age_add
  * boo#1200136 go#52574 CVE-2022-30580
  * go#53056 os/exec: Cmd.{Run,Start} should fail if Cmd.Path is unset
  * boo#1200137 go#52476 CVE-2022-29804
  * go#52478 path/filepath: Clean(.\c:) returns c: on Windows
  * go#52790 crypto/tls: 500% increase in allocations from (*tls.Conn).Read in go 1.17
  * go#52826 runtime: TestGcSys is still flaky
  * go#53042 misc/cgo/testsanitizers: occasional hangs in TestTSAN/tsan12
  * go#53049 runtime: TestGdbBacktrace failures due to GDB "internal-error: wait returned unexpected status 0x0"
  * go#53114 misc/cgo/testsanitizers: deadlock in TestTSAN/tsan11</changelog>
</package>
<package pkgid="48b42bb12474a34828b966870dc600ec78f478dbc531875b6adbf8acf0a82d33" name="go1.17-doc" arch="aarch64">
  <version epoch="0" ver="1.17.9" rel="150000.1.28.1"/>
  <changelog author="jkowalczyk@suse.com" date="1623326400">- go1.17beta1 (released 2021-06-10) is a beta version of go1.17 cut
  from the master branch at the revision tagged go1.17beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
</package>
<package pkgid="91ce8c044872f17dac003bb7e6731ba6162e6795c8bf629d8fc0b228309ca105" name="go1.17-doc" arch="ppc64le">
  <version epoch="0" ver="1.17.9" rel="150000.1.28.1"/>
  <changelog author="jkowalczyk@suse.com" date="1623326400">- go1.17beta1 (released 2021-06-10) is a beta version of go1.17 cut
  from the master branch at the revision tagged go1.17beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
</package>
<package pkgid="9c4b6fe8754424e8988f79d2ff7b762a01fd6b574d6ef00390a0167bf9501180" name="go1.17-doc" arch="s390x">
  <version epoch="0" ver="1.17.9" rel="150000.1.28.1"/>
  <changelog author="jkowalczyk@suse.com" date="1623326400">- go1.17beta1 (released 2021-06-10) is a beta version of go1.17 cut
  from the master branch at the revision tagged go1.17beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
</package>
<package pkgid="ea7342d3012bb91b7902f875275e51ef9a29ea8c7ae033c5c75de14dfe6dfbba" name="go1.17-doc" arch="x86_64">
  <version epoch="0" ver="1.17.9" rel="150000.1.28.1"/>
  <changelog author="jkowalczyk@suse.com" date="1623326400">- go1.17beta1 (released 2021-06-10) is a beta version of go1.17 cut
  from the master branch at the revision tagged go1.17beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
</package>
<package pkgid="f7cdbba9cc82418ce336f3686a20540765f02f3dd99a353b2db3e08bddc45429" name="go1.17-doc" arch="aarch64">
  <version epoch="0" ver="1.17.9" rel="150000.1.31.1"/>
  <changelog author="jkowalczyk@suse.com" date="1623326400">- go1.17beta1 (released 2021-06-10) is a beta version of go1.17 cut
  from the master branch at the revision tagged go1.17beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
</package>
<package pkgid="eab61b5720fa950601a0c13a320ba81fea2e1107fc1199fe150e10c3626113d7" name="go1.17-doc" arch="ppc64le">
  <version epoch="0" ver="1.17.9" rel="150000.1.31.1"/>
  <changelog author="jkowalczyk@suse.com" date="1623326400">- go1.17beta1 (released 2021-06-10) is a beta version of go1.17 cut
  from the master branch at the revision tagged go1.17beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
</package>
<package pkgid="3bf27059ac310a56a56df6d1571a41e42ce503cfdbaa4fbcc06be0a023b82fef" name="go1.17-doc" arch="s390x">
  <version epoch="0" ver="1.17.9" rel="150000.1.31.1"/>
  <changelog author="jkowalczyk@suse.com" date="1623326400">- go1.17beta1 (released 2021-06-10) is a beta version of go1.17 cut
  from the master branch at the revision tagged go1.17beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
</package>
<package pkgid="d4399e81b072ca12ff41246afda383406e4dc6d62cf7f53a68c9bd0651f5edfd" name="go1.17-doc" arch="x86_64">
  <version epoch="0" ver="1.17.9" rel="150000.1.31.1"/>
  <changelog author="jkowalczyk@suse.com" date="1623326400">- go1.17beta1 (released 2021-06-10) is a beta version of go1.17 cut
  from the master branch at the revision tagged go1.17beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
</package>
<package pkgid="db98e1d648d385c2dda56ff4d413cde199351f0e7136c78436b541cf253e3d7a" name="go1.17-race" arch="aarch64">
  <version epoch="0" ver="1.17.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.17.10 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  and the crypto/x509 and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52439 syscall: Faccessat checks wrong group
  * go#51858 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#52095 cmd/compile: fails to compile very long files starting go1.17
  * go#52148 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52306 sync: TestWaitGroupMisuse2 is flaky
  * go#52374 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52455 net/http/httptest: race in Close
  * go#52705 net: TestDialCancel is not compatible with new macOS ARM64 builders</changelog>
</package>
<package pkgid="a65c7b7af179362d407bea3afcb4263072dd8fde83d76ebe968bf0676bdad394" name="go1.17-race" arch="x86_64">
  <version epoch="0" ver="1.17.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.17.10 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  and the crypto/x509 and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52439 syscall: Faccessat checks wrong group
  * go#51858 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#52095 cmd/compile: fails to compile very long files starting go1.17
  * go#52148 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52306 sync: TestWaitGroupMisuse2 is flaky
  * go#52374 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52455 net/http/httptest: race in Close
  * go#52705 net: TestDialCancel is not compatible with new macOS ARM64 builders</changelog>
</package>
<package pkgid="3ac5256a8953006eaadec5e4904cbb49468b843d5e829369b96e7f5fd28bde08" name="go1.17-race" arch="aarch64">
  <version epoch="0" ver="1.17.11" rel="150000.1.37.1"/>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.17.10 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  and the crypto/x509 and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52439 syscall: Faccessat checks wrong group
  * go#51858 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#52095 cmd/compile: fails to compile very long files starting go1.17
  * go#52148 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52306 sync: TestWaitGroupMisuse2 is flaky
  * go#52374 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52455 net/http/httptest: race in Close
  * go#52705 net: TestDialCancel is not compatible with new macOS ARM64 builders</changelog>
  <changelog author="jkowalczyk@suse.com" date="1654084800">- go1.17.11 (released 2022-06-01) includes security fixes to the
  crypto/rand, crypto/tls, os/exec, and path/filepath packages, as
  well as bug fixes to the crypto/tls package.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-30634 CVE-2022-30629 CVE-2022-30580 CVE-2022-29804
  * boo#1200134 go#52561 CVE-2022-30634
  * go#52932 crypto/rand: Read hangs when passed buffer larger than 1&lt;&lt;32 - 1
  * boo#1200135 go#52814 CVE-2022-30629
  * go#52832 crypto/tls: randomly generate ticket_age_add
  * boo#1200136 go#52574 CVE-2022-30580
  * go#53056 os/exec: Cmd.{Run,Start} should fail if Cmd.Path is unset
  * boo#1200137 go#52476 CVE-2022-29804
  * go#52478 path/filepath: Clean(.\c:) returns c: on Windows
  * go#52790 crypto/tls: 500% increase in allocations from (*tls.Conn).Read in go 1.17
  * go#52826 runtime: TestGcSys is still flaky
  * go#53042 misc/cgo/testsanitizers: occasional hangs in TestTSAN/tsan12
  * go#53049 runtime: TestGdbBacktrace failures due to GDB "internal-error: wait returned unexpected status 0x0"
  * go#53114 misc/cgo/testsanitizers: deadlock in TestTSAN/tsan11</changelog>
</package>
<package pkgid="6f9ef7d69cdbd40ab4a75533fc760c73cf097c4abcd8f964dd92c9e39c2973ab" name="go1.17-race" arch="x86_64">
  <version epoch="0" ver="1.17.11" rel="150000.1.37.1"/>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.17.10 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  and the crypto/x509 and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52439 syscall: Faccessat checks wrong group
  * go#51858 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#52095 cmd/compile: fails to compile very long files starting go1.17
  * go#52148 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52306 sync: TestWaitGroupMisuse2 is flaky
  * go#52374 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52455 net/http/httptest: race in Close
  * go#52705 net: TestDialCancel is not compatible with new macOS ARM64 builders</changelog>
  <changelog author="jkowalczyk@suse.com" date="1654084800">- go1.17.11 (released 2022-06-01) includes security fixes to the
  crypto/rand, crypto/tls, os/exec, and path/filepath packages, as
  well as bug fixes to the crypto/tls package.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-30634 CVE-2022-30629 CVE-2022-30580 CVE-2022-29804
  * boo#1200134 go#52561 CVE-2022-30634
  * go#52932 crypto/rand: Read hangs when passed buffer larger than 1&lt;&lt;32 - 1
  * boo#1200135 go#52814 CVE-2022-30629
  * go#52832 crypto/tls: randomly generate ticket_age_add
  * boo#1200136 go#52574 CVE-2022-30580
  * go#53056 os/exec: Cmd.{Run,Start} should fail if Cmd.Path is unset
  * boo#1200137 go#52476 CVE-2022-29804
  * go#52478 path/filepath: Clean(.\c:) returns c: on Windows
  * go#52790 crypto/tls: 500% increase in allocations from (*tls.Conn).Read in go 1.17
  * go#52826 runtime: TestGcSys is still flaky
  * go#53042 misc/cgo/testsanitizers: occasional hangs in TestTSAN/tsan12
  * go#53049 runtime: TestGdbBacktrace failures due to GDB "internal-error: wait returned unexpected status 0x0"
  * go#53114 misc/cgo/testsanitizers: deadlock in TestTSAN/tsan11</changelog>
</package>
<package pkgid="6a288ac45278559c99c0e95752e9a8c0b2a75d422d9df035219bca7dfb160e9a" name="go1.17-race" arch="aarch64">
  <version epoch="0" ver="1.17.9" rel="150000.1.28.1"/>
  <changelog author="jkowalczyk@suse.com" date="1623326400">- go1.17beta1 (released 2021-06-10) is a beta version of go1.17 cut
  from the master branch at the revision tagged go1.17beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
</package>
<package pkgid="c83d9ea45a7a1fb76036dc94aca17d13a80c5be6c08bf7bf06dbf7dc6a4dab7f" name="go1.17-race" arch="x86_64">
  <version epoch="0" ver="1.17.9" rel="150000.1.28.1"/>
  <changelog author="jkowalczyk@suse.com" date="1623326400">- go1.17beta1 (released 2021-06-10) is a beta version of go1.17 cut
  from the master branch at the revision tagged go1.17beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
</package>
<package pkgid="902ea94e090547ba8ee9158e20ace854fe58a6eb85dcf8181c73a9895cd84ada" name="go1.17-race" arch="aarch64">
  <version epoch="0" ver="1.17.9" rel="150000.1.31.1"/>
  <changelog author="jkowalczyk@suse.com" date="1623326400">- go1.17beta1 (released 2021-06-10) is a beta version of go1.17 cut
  from the master branch at the revision tagged go1.17beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
</package>
<package pkgid="f2e1e81022bc0312e4ecb6ab6df3ce2e8ce9ef6bcfe33d45fc492778d9e22a3e" name="go1.17-race" arch="x86_64">
  <version epoch="0" ver="1.17.9" rel="150000.1.31.1"/>
  <changelog author="jkowalczyk@suse.com" date="1623326400">- go1.17beta1 (released 2021-06-10) is a beta version of go1.17 cut
  from the master branch at the revision tagged go1.17beta1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1626177600">- go1.17rc1 (released 2021-07-13) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc1.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1627905600">- go1.17rc2 (released 2021-08-02) is a release candidate version of
  go1.17 cut from the master branch at the revision tagged
  go1.17rc2.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1628769600">- Add bash scripts used by go tool commands to provide a more
  complete cross-compiling go toolchain install.
  * Fixes "go tool dist list" error "all.bash does not exist"
  * Added to packaging:
    /usr/lib64/go/1.17/lib/time/update.bash (already packaged)
    /usr/lib64/go/1.17/src/all.bash
    /usr/lib64/go/1.17/src/bootstrap.bash
    /usr/lib64/go/1.17/src/buildall.bash
    /usr/lib64/go/1.17/src/clean.bash
    /usr/lib64/go/1.17/src/cmp.bash
    /usr/lib64/go/1.17/src/make.bash
    /usr/lib64/go/1.17/src/race.bash
    /usr/lib64/go/1.17/src/run.bash
    /usr/share/go/1.17/src/all.bash
    /usr/share/go/1.17/src/bootstrap.bash
    /usr/share/go/1.17/src/buildall.bash
    /usr/share/go/1.17/src/clean.bash
    /usr/share/go/1.17/src/cmd/compile/internal/ssa/gen/cover.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkerrors.bash
    /usr/share/go/1.17/src/cmd/vendor/golang.org/x/sys/windows/mkknownfolderids.bash
    /usr/share/go/1.17/src/cmp.bash
    /usr/share/go/1.17/src/internal/trace/mkcanned.bash
    /usr/share/go/1.17/src/make.bash
    /usr/share/go/1.17/src/race.bash
    /usr/share/go/1.17/src/run.bash</changelog>
  <changelog author="jkowalczyk@suse.com" date="1629201600">- go1.17 (released 2021-08-16) is a major release of Go.
  go1.17.x minor releases will be provided through August 2022.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Most changes are in the implementation of the toolchain, runtime,
  and libraries. As always, the release maintains the Go 1 promise
  of compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1190649 go1.17 release tracking
  * See release notes https://golang.org/doc/go1.17. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * The compiler now implements a new way of passing function
    arguments and results using registers instead of the
    stack. Benchmarks for a representative set of Go packages and
    programs show performance improvements of about 5%, and a
    typical reduction in binary size of about 2%. This is currently
    enabled for Linux, macOS, and Windows on the 64-bit x86
    architecture (the linux/amd64, darwin/amd64, and windows/amd64
    ports). This change does not affect the functionality of any
    safe Go code and is designed to have no impact on most assembly
    code.
  * When the linker uses external linking mode, which is the
    default when linking a program that uses cgo, and the linker is
    invoked with a -I option, the option will now be passed to the
    external linker as a -Wl,--dynamic-linker option.
  * The runtime/cgo package now provides a new facility that allows
    to turn any Go values to a safe representation that can be used
    to pass values between C and Go safely. See runtime/cgo.Handle
    for more information.
  * ARM64 Go programs now maintain stack frame pointers on the
    64-bit ARM architecture on all operating systems. Previously,
    stack frame pointers were only enabled on Linux, macOS, and
    iOS.
  * Pruned module graphs in go 1.17 modules: If a module specifies
    go 1.17 or higher, the module graph includes only the immediate
    dependencies of other go 1.17 modules, not their full
    transitive dependencies. To convert the go.mod file for an
    existing module to Go 1.17 without changing the selected
    versions of its dependencies, run: go mod tidy -go=1.17
    By default, go mod tidy verifies that the selected versions of
    dependencies relevant to the main module are the same versions
    that would be used by the prior Go release (Go 1.16 for a
    module that specifies go 1.17), and preserves the go.sum
    entries needed by that release even for dependencies that are
    not normally needed by other commands.
    The -compat flag allows that version to be overridden to
    support older (or only newer) versions, up to the version
    specified by the go directive in the go.mod file. To tidy a go
    1.17 module for Go 1.17 only, without saving checksums for (or
    checking for consistency with) Go 1.16: go mod tidy
  - compat=1.17
    Note that even if the main module is tidied with -compat=1.17,
    users who require the module from a go 1.16 or earlier module
    will still be able to use it, provided that the packages use
    only compatible language and library features.
    The go mod graph subcommand also supports the -go flag, which
    causes it to report the graph as seen by the indicated Go
    version, showing dependencies that may otherwise be pruned out.
  * Module deprecation comments: Module authors may deprecate a
    module by adding a // Deprecated: comment to go.mod, then
    tagging a new version. go get now prints a warning if a module
    needed to build packages named on the command line is
    deprecated. go list -m -u prints deprecations for all
    dependencies (use -f or -json to show the full message). The go
    command considers different major versions to be distinct
    modules, so this mechanism may be used, for example, to provide
    users with migration instructions for a new major version.
  * go get -insecure flag is deprecated and has been removed. To
    permit the use of insecure schemes when fetching dependencies,
    please use the GOINSECURE environment variable. The -insecure
    flag also bypassed module sum validation, use GOPRIVATE or
    GONOSUMDB if you need that functionality. See go help
    environment for details.
  * go get prints a deprecation warning when installing commands
    outside the main module (without the -d flag). go install
    cmd@version should be used instead to install a command at a
    specific version, using a suffix like @latest or @v1.2.3. In Go
    1.18, the -d flag will always be enabled, and go get will only
    be used to change dependencies in go.mod.
  * go.mod files missing go directives: If the main module's go.mod
    file does not contain a go directive and the go command cannot
    update the go.mod file, the go command now assumes go 1.11
    instead of the current release. (go mod init has added go
    directives automatically since Go 1.12.)
    If a module dependency lacks an explicit go.mod file, or its
    go.mod file does not contain a go directive, the go command now
    assumes go 1.16 for that dependency instead of the current
    release. (Dependencies developed in GOPATH mode may lack a
    go.mod file, and the vendor/modules.txt has to date never
    recorded the go versions indicated by dependencies' go.mod
    files.)
  * vendor contents: If the main module specifies go 1.17 or
    higher, go mod vendor now annotates vendor/modules.txt with the
    go version indicated by each vendored module in its own go.mod
    file. The annotated version is used when building the module's
    packages from vendored source code.
    If the main module specifies go 1.17 or higher, go mod vendor
    now omits go.mod and go.sum files for vendored dependencies,
    which can otherwise interfere with the ability of the go
    command to identify the correct module root when invoked within
    the vendor tree.
  * Password prompts: The go command by default now suppresses SSH
    password prompts and Git Credential Manager prompts when
    fetching Git repositories using SSH, as it already did
    previously for other Git password prompts. Users authenticating
    to private Git repos with password-protected SSH may configure
    an ssh-agent to enable the go command to use password-protected
    SSH keys.
  * go mod download: When go mod download is invoked without
    arguments, it will no longer save sums for downloaded module
    content to go.sum. It may still make changes to go.mod and
    go.sum needed to load the build list. This is the same as the
    behavior in Go 1.15. To save sums for all modules, use:
    go mod download all
  * The go command now understands //go:build lines and prefers
    them over // +build lines. The new syntax uses boolean
    expressions, just like Go, and should be less error-prone. As
    of this release, the new syntax is fully supported, and all Go
    files should be updated to have both forms with the same
    meaning. To aid in migration, gofmt now automatically
    synchronizes the two forms. For more details on the syntax and
    migration plan, see https://golang.org/design/draft-gobuild.
  * go run now accepts arguments with version suffixes (for
    example, go run example.com/cmd@v1.0.0). This causes go run to
    build and run packages in module-aware mode, ignoring the
    go.mod file in the current directory or any parent directory,
    if there is one. This is useful for running executables without
    installing them or without changing dependencies of the current
    module.
  * The format of stack traces from the runtime (printed when an
    uncaught panic occurs, or when runtime.Stack is called) is
    improved.
  * TLS strict ALPN: When Config.NextProtos is set, servers now
    enforce that there is an overlap between the configured
    protocols and the ALPN protocols advertised by the client, if
    any. If there is no mutually supported protocol, the connection
    is closed with the no_application_protocol alert, as required
    by RFC 7301. This helps mitigate the ALPACA cross-protocol
    attack. As an exception, when the value "h2" is included in the
    server's Config.NextProtos, HTTP/1.1 clients will be allowed to
    connect as if they didn't support ALPN. See issue go#46310 for
    more information.
  * crypto/ed25519: The crypto/ed25519 package has been rewritten,
    and all operations are now approximately twice as fast on amd64
    and arm64. The observable behavior has not otherwise changed.
  * crypto/elliptic: CurveParams methods now automatically invoke
    faster and safer dedicated implementations for known curves
    (P-224, P-256, and P-521) when available. Note that this is a
    best-effort approach and applications should avoid using the
    generic, not constant-time CurveParams methods and instead use
    dedicated Curve implementations such as P256. The P521 curve
    implementation has been rewritten using code generated by the
    fiat-crypto project, which is based on a formally-verified
    model of the arithmetic operations. It is now constant-time and
    three times faster on amd64 and arm64. The observable behavior
    has not otherwise changed.
  * crypto/tls: The new Conn.HandshakeContext method allows the
    user to control cancellation of an in-progress TLS
    handshake. The provided context is accessible from various
    callbacks through the new ClientHelloInfo.Context and
    CertificateRequestInfo.Context methods. Canceling the context
    after the handshake has finished has no effect.
    Cipher suite ordering is now handled entirely by the crypto/tls
    package. Currently, cipher suites are sorted based on their
    security, performance, and hardware support taking into account
    both the local and peer's hardware. The order of the
    Config.CipherSuites field is now ignored, as well as the
    Config.PreferServerCipherSuites field. Note that
    Config.CipherSuites still allows applications to choose what
    TLS 1.0?1.2 cipher suites to enable.
    The 3DES cipher suites have been moved to InsecureCipherSuites
    due to fundamental block size-related weakness. They are still
    enabled by default but only as a last resort, thanks to the
    cipher suite ordering change above.
    Beginning in the next release, Go 1.18, the Config.MinVersion
    for crypto/tls clients will default to TLS 1.2, disabling TLS
    1.0 and TLS 1.1 by default. Applications will be able to
    override the change by explicitly setting
    Config.MinVersion. This will not affect crypto/tls servers.
  * crypto/x509: CreateCertificate now returns an error if the
    provided private key doesn't match the parent's public key, if
    any. The resulting certificate would have failed to verify.
  * crypto/x509: The temporary GODEBUG=x509ignoreCN=0 flag has been
    removed.
  * crypto/x509: ParseCertificate has been rewritten, and now
    consumes ~70% fewer resources. The observable behavior has not
    otherwise changed, except for error messages.
  * crypto/x509: Beginning in the next release, Go 1.18,
    crypto/x509 will reject certificates signed with the SHA-1 hash
    function. This doesn't apply to self-signed root
    certificates. Practical attacks against SHA-1 have been
    demonstrated in 2017 and publicly trusted Certificate
    Authorities have not issued SHA-1 certificates since 2015.
  * go/build: The new Context.ToolTags field holds the build tags
    appropriate to the current Go toolchain configuration.
  * net/http package now uses the new (*tls.Conn).HandshakeContext
    with the Request context when performing TLS handshakes in the
    client or server.
  * syscall: On Unix-like systems, the process group of a child
    process is now set with signals blocked. This avoids sending a
    SIGTTOU to the child when the parent is in a background process
    group.
  * time: The new Time.IsDST method can be used to check whether
    the time is in Daylight Savings Time in its configured
    location.
  * time: The new Time.UnixMilli and Time.UnixMicro methods return
    the number of milliseconds and microseconds elapsed since
    January 1, 1970 UTC respectively.
  * time: The new UnixMilli and UnixMicro functions return the
    local Time corresponding to the given Unix time.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1631275200">- go1.17.1 (released 2021-09-09) includes a security fix to the
  archive/zip package, as well as bug fixes to the compiler,
  linker, the go command, and to the crypto/rand, embed, go/types,
  html/template, and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-39293
  * boo#1190589 go#47801 CVE-2021-39293
  * go#47986 archive/zip: overflow in preallocation check can cause OOM panic
  * go#48156 cmd/go: get panics with "can't find reason for requirement on"
  * go#48102 cmd/compile: panic during export method expression
  * go#48082 go/types: panic in error reporting for invalid use of "init"
  * go#47857 cmd/go: module dependencies not updated with go get -u in 1.17
  * go#47854 go/types: incorrect type reported for comma-err C functions (manifests itself in IDEs)
  * go#47814 crypto/rand: getentropy is not available on iOS
  * go#47782 cmd/link: wrong dynamic linker path when cross-compiling to OpenBSD
  * go#47754 embed: 1.17 rejects types with underlying type []byte
  * go#47692 x/net/http2: server sends RST_STREAM w/ PROTOCOL_ERROR to clients it incorrectly believes have violated max advertised num streams</changelog>
  <changelog author="jkowalczyk@suse.com" date="1633694400">- go1.17.2 (released 2021-10-07) includes a security fix to the
  linker and misc/wasm directory, as well as bug fixes to the
  compiler, the runtime, the go command, and to the time and
  text/template packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-38297
  * boo#1191468 go#48797 CVE-2021-38297
  * go#48800 security: fix CVE-2021-38297 misc/wasm, cmd/link: do not let command line args overwrite global data
  * go#48561 cmd/compile: unsafe.Add bug when adding uint8 value to a pointer
  * go#48444 text/template: should t.init() be executed before t.muTmpl.Lock() in AddParseTree() method?
  * go#48177 time: output does not respect comma as millisecond separator
  * go#47859 time: timer reset sometimes ignored, causing delayed ticks
  * go#47756 cmd/go: mod tidy -go=1.17 should move indirect dependencies to the second require part</changelog>
  <changelog author="jkowalczyk@suse.com" date="1636027200">- go1.17.3 (released 2021-11-04) includes security fixes to the
  archive/zip and debug/macho packages, as well as bug fixes to the
  compiler, linker, runtime, the go command, the misc/wasm
  directory, and to the net/http and syscall packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-41771 CVE-2021-41772
  * boo#1192377 go#48990 CVE-2021-41771
  * go#48992 debug/macho: invalid dynamic symbol table command can cause panic
  * boo#1192378 go#48085 CVE-2021-41772
  * go#48252 archive/zip: Reader.Open panics on empty string
  * go#49199 cmd/go: go list all breaks in //go:build-only repos
  * go#49154 misc/wasm, cmd/link: Go 1.17.2 causes WASM builds to throw command line too long with many environment variables
  * go#49086 cmd/link: -buildmode=pie -linkshared panic at runtime
  * go#49077 x/net/http2: backport critical fixes
  * go#49010 net,runtime: apparent deadlock in (*net.conn).Close and runtime.netpollblock on arm64 platforms
  * go#48823 x/net/http2: client can hang forever if headers' size exceeds connection's buffer size and server hangs past request time
  * go#48650 x/net/http2: pool deadlock
  * go#48479 cmd/compile: 64 bits shifts on arm get wrong results
  * go#48475 cmd/compile: incorrect arm/arm64 simplification rules
  * go#48075 syscall: SysProcAttr{ NoInheritHandles: true } broken in 1.17 on Windows</changelog>
  <changelog author="jkowalczyk@suse.com" date="1638532800">- go1.17.4 (released 2021-12-02) includes fixes to the compiler,
  linker, runtime, and the go/types, net/http, and time packages.
  Refs boo#1190649 go1.17 release tracking
  * go#49911 x/net/http2: frequent failures in TestClientConnCloseAtBody
  * go#49909 x/net/ipv6: TestPacketConnReadWriteMulticast{UDP,ICMP} failing with "i/o timeout" on OpenBSD 6.8 and 7.0
  * go#49905 x/net/http2: Client doesn't send body until ExpectContinueTimeout expires
  * go#49868 syscall: ntdll.dll errors in rtlGetNtVersionNumbers via os.StartProcess
  * go#49729 runtime: "fatal error: unexpected signal during runtime execution" in cmd/go tests on darwin-amd64-race running macOS 12.0
  * go#49662 x/net/http2: TestUnreadFlowControlReturned_Server failures with stream error "NO_ERROR" since 2021-10-05
  * go#49624 net/http: Possible HTTP/2 busy loop regression in Go 1.17.3
  * go#49568 net/http: server responds with Transfer-Encoding: identity
  * go#49561 x/net/http2: setting Request.Close doesn't close TCP connections
  * go#49559 net/http: HTTP/2 response body Close method sometimes returns spurious context cancelation error (1.17.3 regression)
  * go#49511 cmd/compile: init info of OAS node in a select case is being dropped
  * go#49479 runtime: "morestack on g0" in x/perf/storage/app on windows/arm64
  * go#49407 time: ParseInLocation error
  * go#49392 cmd/compile: internal compiler error: Expand calls interface data problem
  * go#49369 runtime: time goes backwards on windows-arm64 (frequent TestGcLastTime failures)
  * go#49129 cmd/compile: internal compiler error: can't find source for b12-&gt;b4: v31 = MOVBload &lt;bool&gt; v14 v1 : DX
  * go#48825 go/types, types2: stack overflow in hasVarSize for invalid type</changelog>
  <changelog author="jkowalczyk@suse.com" date="1639051200">- go1.17.5 (released 2021-12-09) includes security fixes to the
  syscall and net/http packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2021-44716 CVE-2021-44717
  * boo#1193598 go#50057 CVE-2021-44717
  * go#50067 syscall: don?t close fd 0 on ForkExec error
  * boo#1193597 go#50058 CVE-2021-44716
  * go#50065 net/http: limit growth of header canonicalization cache</changelog>
  <changelog author="jkowalczyk@suse.com" date="1641470400">- go1.17.6 (released 2022-01-06) includes fixes to the compiler,
  linker, runtime, and the crypto/x509, net/http, and reflect
  packages.
  Refs boo#1190649 go1.17 release tracking
  * go#50165 crypto/x509: error parsing large ASN.1 identifiers
  * go#50073 runtime: race detector SIGABRT or SIGSEGV on macOS Monterey
  * go#49961 reflect: segmentation violation while using html/template
  * go#49921 x/net/http2: http.Server.WriteTimeout does not fire if the http2 stream's window is out of space.
  * go#49413 cmd/compile: internal compiler error: Op...LECall and OpDereference have mismatched mem
  * go#48116 runtime: mallocs cause "base outside usable address space" panic when running on iOS 14</changelog>
  <changelog author="jkowalczyk@suse.com" date="1644494400">- go1.17.7 (released 2022-02-10) includes security fixes to the
  crypto/elliptic, math/big packages and to the go command, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  and the debug/macho, debug/pe, and net/http/httptest packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-23806 CVE-2022-23772 CVE-2022-23773
  * boo#1195838 go#50974 CVE-2022-23806
  * go#50978 crypto/elliptic: IsOnCurve returns true for invalid field elements
  * boo#1195835 go#50699 CVE-2022-23772
  * go#50701 math/big: Rat.SetString may consume large amount of RAM and crash
  * boo#1195834 go#35671 CVE-2022-23773
  * go#50687 cmd/go: do not treat branches with semantic-version names as releases
  * go#50942 cmd/asm: "compile: loop" compiler bug?
  * go#50867 cmd/compile: incorrect use of CMN on arm64
  * go#50812 cmd/go: remove bitbucket VCS probing
  * go#50781 runtime: incorrect frame information in traceback traversal may hang the process.
  * go#50722 debug/pe: reading debug_info section of PE files that use the DWARF5 form DW_FORM_line_strp causes error
  * go#50683 cmd/compile: MOVWreg missing sign-extension following a Copy from a floating-point LoadReg
  * go#50586 net/http/httptest: add fipsonly compliant certificate in for NewTLSServer(), for dev.boringcrypto branch
  * go#50297 cmd/link: does not set section type of .init_array correctly
  * go#50246 runtime: intermittent os/exec.Command.Start() Hang on Darwin in Presence of "plugin" Package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add missing .bin binary test data to packaging.
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="jkowalczyk@suse.com" date="1646308800">- go1.17.8 (released 2022-03-03) includes a security fix to the
  regexp/syntax package, as well as bug fixes to the compiler,
  runtime, the go command, and the crypto/x509, and net packages.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24921
  * boo#1196732 go#51112 CVE-2022-24921
  * go#51118 regexp: stack overflow (process exit) handling deeply nested regexp
  * go#51332 cmd/go/internal/modfetch: erroneously resolves a v2+incompatible version when a v2/go.mod file exists
  * go#51199 cmd/compile: "runtime: bad pointer in frame" in riscv64 with complier optimizations
  * go#51162 net: use EDNS to increase DNS packet size [freeze exception]
  * go#50734 runtime/metrics: time histogram sub-bucket ranges are off by a factor of two
  * go#51000 crypto/x509: invalid RDNSequence: invalid attribute value: unsupported string type: 18</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647000000">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.17.9 (released 2022-04-12) includes security fixes to the
  crypto/elliptic and encoding/pem packages, as well as bug fixes
  to the linker and runtime.
  Refs boo#1190649 go1.17 release tracking
  CVE-2022-24675 CVE-2022-28327
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52036 encoding/pem: stack overflow
  * boo#1198424 go#52075 CVE-2022-28327
  * go#52076 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * go#51736 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51696 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51458 runtime: finalizer call has wrong frame size
  * go#50611 internal/poll: deadlock in Read on arm64 when an FD is closed</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
</package>
<package pkgid="8bfc69d489809e4ab9f05d2e5de748c8a36ac06a40e937fb8f575f75ff00fb18" name="go1.18" arch="aarch64">
  <version epoch="0" ver="1.18.1" rel="150000.1.11.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
</package>
<package pkgid="87bfb108f97732dc25eefce756bf7461b70a06c8b9bff59e10ceee65d4025694" name="go1.18" arch="ppc64le">
  <version epoch="0" ver="1.18.1" rel="150000.1.11.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
</package>
<package pkgid="d5c7a055073c42ea51c9949ec905055af979191199e4d4ef4b3ac93b1e6c5ecf" name="go1.18" arch="s390x">
  <version epoch="0" ver="1.18.1" rel="150000.1.11.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
</package>
<package pkgid="f51fd04710c6f6b1a32bf46f7cda519df817b28609548c0c3893ed8faca885c5" name="go1.18" arch="src">
  <version epoch="0" ver="1.18.1" rel="150000.1.11.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
</package>
<package pkgid="b6ccf6c9a314602f4e431010ba8743089139e7adda64f99c960e20b9551b9af9" name="go1.18" arch="x86_64">
  <version epoch="0" ver="1.18.1" rel="150000.1.11.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
</package>
<package pkgid="b7b5b5ecfc09d15107b752ae9e6057aabfdf70255ca52a3052ca889977259fbc" name="go1.18" arch="aarch64">
  <version epoch="0" ver="1.18.1" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
</package>
<package pkgid="17ad1747dcdc82ebe9ed6f9ed5924affa2578233e44b226a3fe796a4a5e8ab6d" name="go1.18" arch="ppc64le">
  <version epoch="0" ver="1.18.1" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
</package>
<package pkgid="d14810d489ee7bea9df1333bd56fc882dc9224445203bf091fa9edd171d10102" name="go1.18" arch="s390x">
  <version epoch="0" ver="1.18.1" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
</package>
<package pkgid="6c07b99e392ed1f77313be2ac15210a763f56265ca4433fe5fc4ac0c44d3d720" name="go1.18" arch="src">
  <version epoch="0" ver="1.18.1" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
</package>
<package pkgid="60aa32c2e54119251486e4e6a9740661684d6232ee8987a727535a9826bd3253" name="go1.18" arch="x86_64">
  <version epoch="0" ver="1.18.1" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
</package>
<package pkgid="be0228bc99b04340958b935b66bdd4646e87b0e100c1661ef0af6b67581a23ab" name="go1.18" arch="aarch64">
  <version epoch="0" ver="1.18.2" rel="150000.1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.18.2 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  the go command, and the crypto/x509, go/types, net/http/httptest,
  reflect, and sync/atomic packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52440 syscall: Faccessat checks wrong group
  * go#51738 runtime: wrong type assertion result when using generic types
  * go#51798 cmd/go: add (and default to) -buildvcs=auto
  * go#51859 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#51897 net/http/httptest: race in Close
  * go#52028 go/types: documentation on instance de-duplication is unclear about guarantees
  * go#52149 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52244 go/types, types2: go generic assert compile escape
  * go#52305 runtime: doAllThreadsSyscall has an unaligned atomic load on 32-bit architectures
  * go#52366 cmd/compile/internal/ssa: occurred the wrong rewrite cycle detection
  * go#52375 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52386 reflect: can set map elem with string key of a different string type
  * go#52441 cmd/compile: incorrect handling of iota in 1.18
  * go#52468 cmd/go: go run -mod=mod [files...] does not update go.mod and go.sum
  * go#52558 cmd/compile: cannot convert v (variable of type *Bar[T]) to type *Foo[T]
  * go#52606 cmd/compile: internal compiler error: weird package in name: .dict0 =&gt; .dict0 from "", not "test/p"
  * go#52615 sync/atomic: compare and swap of inconsistently typed values with uninitialized Value
  * go#52691 cmd/compile: generic function appears to use incorrect type descriptor
  * go#52699 runtime: support debugCall on arm64
  * go#52706 net: TestDialCancel is not compatible with new macOS ARM64 builders
  * go#52804 go/types: NewMethodSet doesn't terminate for recursively embedded generics</changelog>
</package>
<package pkgid="2f2c823b1ea1db966585bd3f3c8bd43fa4a7c0d3dd43feedb4bbb9695a979075" name="go1.18" arch="ppc64le">
  <version epoch="0" ver="1.18.2" rel="150000.1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.18.2 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  the go command, and the crypto/x509, go/types, net/http/httptest,
  reflect, and sync/atomic packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52440 syscall: Faccessat checks wrong group
  * go#51738 runtime: wrong type assertion result when using generic types
  * go#51798 cmd/go: add (and default to) -buildvcs=auto
  * go#51859 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#51897 net/http/httptest: race in Close
  * go#52028 go/types: documentation on instance de-duplication is unclear about guarantees
  * go#52149 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52244 go/types, types2: go generic assert compile escape
  * go#52305 runtime: doAllThreadsSyscall has an unaligned atomic load on 32-bit architectures
  * go#52366 cmd/compile/internal/ssa: occurred the wrong rewrite cycle detection
  * go#52375 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52386 reflect: can set map elem with string key of a different string type
  * go#52441 cmd/compile: incorrect handling of iota in 1.18
  * go#52468 cmd/go: go run -mod=mod [files...] does not update go.mod and go.sum
  * go#52558 cmd/compile: cannot convert v (variable of type *Bar[T]) to type *Foo[T]
  * go#52606 cmd/compile: internal compiler error: weird package in name: .dict0 =&gt; .dict0 from "", not "test/p"
  * go#52615 sync/atomic: compare and swap of inconsistently typed values with uninitialized Value
  * go#52691 cmd/compile: generic function appears to use incorrect type descriptor
  * go#52699 runtime: support debugCall on arm64
  * go#52706 net: TestDialCancel is not compatible with new macOS ARM64 builders
  * go#52804 go/types: NewMethodSet doesn't terminate for recursively embedded generics</changelog>
</package>
<package pkgid="79a1972721dc179e0b8ebb9915c3b877087816d579dce7ea96a5e82ad4aaa53a" name="go1.18" arch="s390x">
  <version epoch="0" ver="1.18.2" rel="150000.1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.18.2 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  the go command, and the crypto/x509, go/types, net/http/httptest,
  reflect, and sync/atomic packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52440 syscall: Faccessat checks wrong group
  * go#51738 runtime: wrong type assertion result when using generic types
  * go#51798 cmd/go: add (and default to) -buildvcs=auto
  * go#51859 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#51897 net/http/httptest: race in Close
  * go#52028 go/types: documentation on instance de-duplication is unclear about guarantees
  * go#52149 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52244 go/types, types2: go generic assert compile escape
  * go#52305 runtime: doAllThreadsSyscall has an unaligned atomic load on 32-bit architectures
  * go#52366 cmd/compile/internal/ssa: occurred the wrong rewrite cycle detection
  * go#52375 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52386 reflect: can set map elem with string key of a different string type
  * go#52441 cmd/compile: incorrect handling of iota in 1.18
  * go#52468 cmd/go: go run -mod=mod [files...] does not update go.mod and go.sum
  * go#52558 cmd/compile: cannot convert v (variable of type *Bar[T]) to type *Foo[T]
  * go#52606 cmd/compile: internal compiler error: weird package in name: .dict0 =&gt; .dict0 from "", not "test/p"
  * go#52615 sync/atomic: compare and swap of inconsistently typed values with uninitialized Value
  * go#52691 cmd/compile: generic function appears to use incorrect type descriptor
  * go#52699 runtime: support debugCall on arm64
  * go#52706 net: TestDialCancel is not compatible with new macOS ARM64 builders
  * go#52804 go/types: NewMethodSet doesn't terminate for recursively embedded generics</changelog>
</package>
<package pkgid="00e25bba50cf63a870932091a11110ad4758ecbef8385dbfee77a5f035e42e5d" name="go1.18" arch="src">
  <version epoch="0" ver="1.18.2" rel="150000.1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.18.2 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  the go command, and the crypto/x509, go/types, net/http/httptest,
  reflect, and sync/atomic packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52440 syscall: Faccessat checks wrong group
  * go#51738 runtime: wrong type assertion result when using generic types
  * go#51798 cmd/go: add (and default to) -buildvcs=auto
  * go#51859 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#51897 net/http/httptest: race in Close
  * go#52028 go/types: documentation on instance de-duplication is unclear about guarantees
  * go#52149 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52244 go/types, types2: go generic assert compile escape
  * go#52305 runtime: doAllThreadsSyscall has an unaligned atomic load on 32-bit architectures
  * go#52366 cmd/compile/internal/ssa: occurred the wrong rewrite cycle detection
  * go#52375 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52386 reflect: can set map elem with string key of a different string type
  * go#52441 cmd/compile: incorrect handling of iota in 1.18
  * go#52468 cmd/go: go run -mod=mod [files...] does not update go.mod and go.sum
  * go#52558 cmd/compile: cannot convert v (variable of type *Bar[T]) to type *Foo[T]
  * go#52606 cmd/compile: internal compiler error: weird package in name: .dict0 =&gt; .dict0 from "", not "test/p"
  * go#52615 sync/atomic: compare and swap of inconsistently typed values with uninitialized Value
  * go#52691 cmd/compile: generic function appears to use incorrect type descriptor
  * go#52699 runtime: support debugCall on arm64
  * go#52706 net: TestDialCancel is not compatible with new macOS ARM64 builders
  * go#52804 go/types: NewMethodSet doesn't terminate for recursively embedded generics</changelog>
</package>
<package pkgid="47fad55c3a65681c9ab24525387921fe6c6c5346c24b7ae062bc2203a80b86f0" name="go1.18" arch="x86_64">
  <version epoch="0" ver="1.18.2" rel="150000.1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.18.2 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  the go command, and the crypto/x509, go/types, net/http/httptest,
  reflect, and sync/atomic packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52440 syscall: Faccessat checks wrong group
  * go#51738 runtime: wrong type assertion result when using generic types
  * go#51798 cmd/go: add (and default to) -buildvcs=auto
  * go#51859 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#51897 net/http/httptest: race in Close
  * go#52028 go/types: documentation on instance de-duplication is unclear about guarantees
  * go#52149 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52244 go/types, types2: go generic assert compile escape
  * go#52305 runtime: doAllThreadsSyscall has an unaligned atomic load on 32-bit architectures
  * go#52366 cmd/compile/internal/ssa: occurred the wrong rewrite cycle detection
  * go#52375 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52386 reflect: can set map elem with string key of a different string type
  * go#52441 cmd/compile: incorrect handling of iota in 1.18
  * go#52468 cmd/go: go run -mod=mod [files...] does not update go.mod and go.sum
  * go#52558 cmd/compile: cannot convert v (variable of type *Bar[T]) to type *Foo[T]
  * go#52606 cmd/compile: internal compiler error: weird package in name: .dict0 =&gt; .dict0 from "", not "test/p"
  * go#52615 sync/atomic: compare and swap of inconsistently typed values with uninitialized Value
  * go#52691 cmd/compile: generic function appears to use incorrect type descriptor
  * go#52699 runtime: support debugCall on arm64
  * go#52706 net: TestDialCancel is not compatible with new macOS ARM64 builders
  * go#52804 go/types: NewMethodSet doesn't terminate for recursively embedded generics</changelog>
</package>
<package pkgid="8da150c5dd5f5c8a7cba9952eaf594b713b997fcdbd1e0871d57d4979e0d3dab" name="go1.18" arch="aarch64">
  <version epoch="0" ver="1.18.3" rel="150000.1.20.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.18.2 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  the go command, and the crypto/x509, go/types, net/http/httptest,
  reflect, and sync/atomic packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52440 syscall: Faccessat checks wrong group
  * go#51738 runtime: wrong type assertion result when using generic types
  * go#51798 cmd/go: add (and default to) -buildvcs=auto
  * go#51859 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#51897 net/http/httptest: race in Close
  * go#52028 go/types: documentation on instance de-duplication is unclear about guarantees
  * go#52149 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52244 go/types, types2: go generic assert compile escape
  * go#52305 runtime: doAllThreadsSyscall has an unaligned atomic load on 32-bit architectures
  * go#52366 cmd/compile/internal/ssa: occurred the wrong rewrite cycle detection
  * go#52375 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52386 reflect: can set map elem with string key of a different string type
  * go#52441 cmd/compile: incorrect handling of iota in 1.18
  * go#52468 cmd/go: go run -mod=mod [files...] does not update go.mod and go.sum
  * go#52558 cmd/compile: cannot convert v (variable of type *Bar[T]) to type *Foo[T]
  * go#52606 cmd/compile: internal compiler error: weird package in name: .dict0 =&gt; .dict0 from "", not "test/p"
  * go#52615 sync/atomic: compare and swap of inconsistently typed values with uninitialized Value
  * go#52691 cmd/compile: generic function appears to use incorrect type descriptor
  * go#52699 runtime: support debugCall on arm64
  * go#52706 net: TestDialCancel is not compatible with new macOS ARM64 builders
  * go#52804 go/types: NewMethodSet doesn't terminate for recursively embedded generics</changelog>
  <changelog author="jkowalczyk@suse.com" date="1654084800">- go1.18.3 (released 2022-06-01) includes security fixes to the
  crypto/rand, crypto/tls, os/exec, and path/filepath packages, as
  well as bug fixes to the compiler, and the crypto/tls and
  text/template/parse packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-30634 CVE-2022-30629 CVE-2022-30580 CVE-2022-29804
  * boo#1200134 go#52561 CVE-2022-30634
  * go#52933 crypto/rand: Read hangs when passed buffer larger than 1&lt;&lt;32 - 1
  * boo#1200135 go#52814 CVE-2022-30629
  * go#52833 crypto/tls: randomly generate ticket_age_add
  * boo#1200136 go#52574 CVE-2022-30580
  * go#53057 os/exec: Cmd.{Run,Start} should fail if Cmd.Path is unset
  * boo#1200137 go#52476 CVE-2022-29804
  * go#52479 path/filepath: Clean(.\c:) returns c: on Windows
  * go#51849 cmd/compile: crash on pointer conversion in call to mapaccess2
  * go#52242 cmd/compile: compiler crash on valid code
  * go#52286 cmd/compile: compiler crash with "Dictionary should have already been generated"
  * go#52791 crypto/tls: 500% increase in allocations from (*tls.Conn).Read in go 1.17
  * go#52878 text/template: break/continue require no whitespace around them
  * go#53043 misc/cgo/testsanitizers: occasional hangs in TestTSAN/tsan12
  * go#53115 misc/cgo/testsanitizers: deadlock in TestTSAN/tsan11</changelog>
</package>
<package pkgid="708fc056bc22c3e88fee4c50c526bf2fe11e2ed01bd0fddde6126ce7486575ee" name="go1.18" arch="ppc64le">
  <version epoch="0" ver="1.18.3" rel="150000.1.20.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.18.2 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  the go command, and the crypto/x509, go/types, net/http/httptest,
  reflect, and sync/atomic packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52440 syscall: Faccessat checks wrong group
  * go#51738 runtime: wrong type assertion result when using generic types
  * go#51798 cmd/go: add (and default to) -buildvcs=auto
  * go#51859 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#51897 net/http/httptest: race in Close
  * go#52028 go/types: documentation on instance de-duplication is unclear about guarantees
  * go#52149 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52244 go/types, types2: go generic assert compile escape
  * go#52305 runtime: doAllThreadsSyscall has an unaligned atomic load on 32-bit architectures
  * go#52366 cmd/compile/internal/ssa: occurred the wrong rewrite cycle detection
  * go#52375 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52386 reflect: can set map elem with string key of a different string type
  * go#52441 cmd/compile: incorrect handling of iota in 1.18
  * go#52468 cmd/go: go run -mod=mod [files...] does not update go.mod and go.sum
  * go#52558 cmd/compile: cannot convert v (variable of type *Bar[T]) to type *Foo[T]
  * go#52606 cmd/compile: internal compiler error: weird package in name: .dict0 =&gt; .dict0 from "", not "test/p"
  * go#52615 sync/atomic: compare and swap of inconsistently typed values with uninitialized Value
  * go#52691 cmd/compile: generic function appears to use incorrect type descriptor
  * go#52699 runtime: support debugCall on arm64
  * go#52706 net: TestDialCancel is not compatible with new macOS ARM64 builders
  * go#52804 go/types: NewMethodSet doesn't terminate for recursively embedded generics</changelog>
  <changelog author="jkowalczyk@suse.com" date="1654084800">- go1.18.3 (released 2022-06-01) includes security fixes to the
  crypto/rand, crypto/tls, os/exec, and path/filepath packages, as
  well as bug fixes to the compiler, and the crypto/tls and
  text/template/parse packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-30634 CVE-2022-30629 CVE-2022-30580 CVE-2022-29804
  * boo#1200134 go#52561 CVE-2022-30634
  * go#52933 crypto/rand: Read hangs when passed buffer larger than 1&lt;&lt;32 - 1
  * boo#1200135 go#52814 CVE-2022-30629
  * go#52833 crypto/tls: randomly generate ticket_age_add
  * boo#1200136 go#52574 CVE-2022-30580
  * go#53057 os/exec: Cmd.{Run,Start} should fail if Cmd.Path is unset
  * boo#1200137 go#52476 CVE-2022-29804
  * go#52479 path/filepath: Clean(.\c:) returns c: on Windows
  * go#51849 cmd/compile: crash on pointer conversion in call to mapaccess2
  * go#52242 cmd/compile: compiler crash on valid code
  * go#52286 cmd/compile: compiler crash with "Dictionary should have already been generated"
  * go#52791 crypto/tls: 500% increase in allocations from (*tls.Conn).Read in go 1.17
  * go#52878 text/template: break/continue require no whitespace around them
  * go#53043 misc/cgo/testsanitizers: occasional hangs in TestTSAN/tsan12
  * go#53115 misc/cgo/testsanitizers: deadlock in TestTSAN/tsan11</changelog>
</package>
<package pkgid="647f105e8c20eb989c4ab8b3f75e95c365bb667e23a12691e7332d9fdc9da441" name="go1.18" arch="s390x">
  <version epoch="0" ver="1.18.3" rel="150000.1.20.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.18.2 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  the go command, and the crypto/x509, go/types, net/http/httptest,
  reflect, and sync/atomic packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52440 syscall: Faccessat checks wrong group
  * go#51738 runtime: wrong type assertion result when using generic types
  * go#51798 cmd/go: add (and default to) -buildvcs=auto
  * go#51859 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#51897 net/http/httptest: race in Close
  * go#52028 go/types: documentation on instance de-duplication is unclear about guarantees
  * go#52149 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52244 go/types, types2: go generic assert compile escape
  * go#52305 runtime: doAllThreadsSyscall has an unaligned atomic load on 32-bit architectures
  * go#52366 cmd/compile/internal/ssa: occurred the wrong rewrite cycle detection
  * go#52375 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52386 reflect: can set map elem with string key of a different string type
  * go#52441 cmd/compile: incorrect handling of iota in 1.18
  * go#52468 cmd/go: go run -mod=mod [files...] does not update go.mod and go.sum
  * go#52558 cmd/compile: cannot convert v (variable of type *Bar[T]) to type *Foo[T]
  * go#52606 cmd/compile: internal compiler error: weird package in name: .dict0 =&gt; .dict0 from "", not "test/p"
  * go#52615 sync/atomic: compare and swap of inconsistently typed values with uninitialized Value
  * go#52691 cmd/compile: generic function appears to use incorrect type descriptor
  * go#52699 runtime: support debugCall on arm64
  * go#52706 net: TestDialCancel is not compatible with new macOS ARM64 builders
  * go#52804 go/types: NewMethodSet doesn't terminate for recursively embedded generics</changelog>
  <changelog author="jkowalczyk@suse.com" date="1654084800">- go1.18.3 (released 2022-06-01) includes security fixes to the
  crypto/rand, crypto/tls, os/exec, and path/filepath packages, as
  well as bug fixes to the compiler, and the crypto/tls and
  text/template/parse packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-30634 CVE-2022-30629 CVE-2022-30580 CVE-2022-29804
  * boo#1200134 go#52561 CVE-2022-30634
  * go#52933 crypto/rand: Read hangs when passed buffer larger than 1&lt;&lt;32 - 1
  * boo#1200135 go#52814 CVE-2022-30629
  * go#52833 crypto/tls: randomly generate ticket_age_add
  * boo#1200136 go#52574 CVE-2022-30580
  * go#53057 os/exec: Cmd.{Run,Start} should fail if Cmd.Path is unset
  * boo#1200137 go#52476 CVE-2022-29804
  * go#52479 path/filepath: Clean(.\c:) returns c: on Windows
  * go#51849 cmd/compile: crash on pointer conversion in call to mapaccess2
  * go#52242 cmd/compile: compiler crash on valid code
  * go#52286 cmd/compile: compiler crash with "Dictionary should have already been generated"
  * go#52791 crypto/tls: 500% increase in allocations from (*tls.Conn).Read in go 1.17
  * go#52878 text/template: break/continue require no whitespace around them
  * go#53043 misc/cgo/testsanitizers: occasional hangs in TestTSAN/tsan12
  * go#53115 misc/cgo/testsanitizers: deadlock in TestTSAN/tsan11</changelog>
</package>
<package pkgid="f3b0fcdc23cce0955005bbf3e398efee8e6b17e6fea46b5cf258080cc555c7ed" name="go1.18" arch="src">
  <version epoch="0" ver="1.18.3" rel="150000.1.20.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.18.2 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  the go command, and the crypto/x509, go/types, net/http/httptest,
  reflect, and sync/atomic packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52440 syscall: Faccessat checks wrong group
  * go#51738 runtime: wrong type assertion result when using generic types
  * go#51798 cmd/go: add (and default to) -buildvcs=auto
  * go#51859 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#51897 net/http/httptest: race in Close
  * go#52028 go/types: documentation on instance de-duplication is unclear about guarantees
  * go#52149 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52244 go/types, types2: go generic assert compile escape
  * go#52305 runtime: doAllThreadsSyscall has an unaligned atomic load on 32-bit architectures
  * go#52366 cmd/compile/internal/ssa: occurred the wrong rewrite cycle detection
  * go#52375 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52386 reflect: can set map elem with string key of a different string type
  * go#52441 cmd/compile: incorrect handling of iota in 1.18
  * go#52468 cmd/go: go run -mod=mod [files...] does not update go.mod and go.sum
  * go#52558 cmd/compile: cannot convert v (variable of type *Bar[T]) to type *Foo[T]
  * go#52606 cmd/compile: internal compiler error: weird package in name: .dict0 =&gt; .dict0 from "", not "test/p"
  * go#52615 sync/atomic: compare and swap of inconsistently typed values with uninitialized Value
  * go#52691 cmd/compile: generic function appears to use incorrect type descriptor
  * go#52699 runtime: support debugCall on arm64
  * go#52706 net: TestDialCancel is not compatible with new macOS ARM64 builders
  * go#52804 go/types: NewMethodSet doesn't terminate for recursively embedded generics</changelog>
  <changelog author="jkowalczyk@suse.com" date="1654084800">- go1.18.3 (released 2022-06-01) includes security fixes to the
  crypto/rand, crypto/tls, os/exec, and path/filepath packages, as
  well as bug fixes to the compiler, and the crypto/tls and
  text/template/parse packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-30634 CVE-2022-30629 CVE-2022-30580 CVE-2022-29804
  * boo#1200134 go#52561 CVE-2022-30634
  * go#52933 crypto/rand: Read hangs when passed buffer larger than 1&lt;&lt;32 - 1
  * boo#1200135 go#52814 CVE-2022-30629
  * go#52833 crypto/tls: randomly generate ticket_age_add
  * boo#1200136 go#52574 CVE-2022-30580
  * go#53057 os/exec: Cmd.{Run,Start} should fail if Cmd.Path is unset
  * boo#1200137 go#52476 CVE-2022-29804
  * go#52479 path/filepath: Clean(.\c:) returns c: on Windows
  * go#51849 cmd/compile: crash on pointer conversion in call to mapaccess2
  * go#52242 cmd/compile: compiler crash on valid code
  * go#52286 cmd/compile: compiler crash with "Dictionary should have already been generated"
  * go#52791 crypto/tls: 500% increase in allocations from (*tls.Conn).Read in go 1.17
  * go#52878 text/template: break/continue require no whitespace around them
  * go#53043 misc/cgo/testsanitizers: occasional hangs in TestTSAN/tsan12
  * go#53115 misc/cgo/testsanitizers: deadlock in TestTSAN/tsan11</changelog>
</package>
<package pkgid="37015052040b1a051eda78e3e5c09a1f3aee8dd9f8aacf3a09a8162db5e83c21" name="go1.18" arch="x86_64">
  <version epoch="0" ver="1.18.3" rel="150000.1.20.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.18.2 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  the go command, and the crypto/x509, go/types, net/http/httptest,
  reflect, and sync/atomic packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52440 syscall: Faccessat checks wrong group
  * go#51738 runtime: wrong type assertion result when using generic types
  * go#51798 cmd/go: add (and default to) -buildvcs=auto
  * go#51859 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#51897 net/http/httptest: race in Close
  * go#52028 go/types: documentation on instance de-duplication is unclear about guarantees
  * go#52149 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52244 go/types, types2: go generic assert compile escape
  * go#52305 runtime: doAllThreadsSyscall has an unaligned atomic load on 32-bit architectures
  * go#52366 cmd/compile/internal/ssa: occurred the wrong rewrite cycle detection
  * go#52375 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52386 reflect: can set map elem with string key of a different string type
  * go#52441 cmd/compile: incorrect handling of iota in 1.18
  * go#52468 cmd/go: go run -mod=mod [files...] does not update go.mod and go.sum
  * go#52558 cmd/compile: cannot convert v (variable of type *Bar[T]) to type *Foo[T]
  * go#52606 cmd/compile: internal compiler error: weird package in name: .dict0 =&gt; .dict0 from "", not "test/p"
  * go#52615 sync/atomic: compare and swap of inconsistently typed values with uninitialized Value
  * go#52691 cmd/compile: generic function appears to use incorrect type descriptor
  * go#52699 runtime: support debugCall on arm64
  * go#52706 net: TestDialCancel is not compatible with new macOS ARM64 builders
  * go#52804 go/types: NewMethodSet doesn't terminate for recursively embedded generics</changelog>
  <changelog author="jkowalczyk@suse.com" date="1654084800">- go1.18.3 (released 2022-06-01) includes security fixes to the
  crypto/rand, crypto/tls, os/exec, and path/filepath packages, as
  well as bug fixes to the compiler, and the crypto/tls and
  text/template/parse packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-30634 CVE-2022-30629 CVE-2022-30580 CVE-2022-29804
  * boo#1200134 go#52561 CVE-2022-30634
  * go#52933 crypto/rand: Read hangs when passed buffer larger than 1&lt;&lt;32 - 1
  * boo#1200135 go#52814 CVE-2022-30629
  * go#52833 crypto/tls: randomly generate ticket_age_add
  * boo#1200136 go#52574 CVE-2022-30580
  * go#53057 os/exec: Cmd.{Run,Start} should fail if Cmd.Path is unset
  * boo#1200137 go#52476 CVE-2022-29804
  * go#52479 path/filepath: Clean(.\c:) returns c: on Windows
  * go#51849 cmd/compile: crash on pointer conversion in call to mapaccess2
  * go#52242 cmd/compile: compiler crash on valid code
  * go#52286 cmd/compile: compiler crash with "Dictionary should have already been generated"
  * go#52791 crypto/tls: 500% increase in allocations from (*tls.Conn).Read in go 1.17
  * go#52878 text/template: break/continue require no whitespace around them
  * go#53043 misc/cgo/testsanitizers: occasional hangs in TestTSAN/tsan12
  * go#53115 misc/cgo/testsanitizers: deadlock in TestTSAN/tsan11</changelog>
</package>
<package pkgid="868912f07ce0177f35f8b2d507ee8f52a35e8e2f153e084d5bc043efdf648b4c" name="go1.18-doc" arch="aarch64">
  <version epoch="0" ver="1.18.1" rel="150000.1.11.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
</package>
<package pkgid="a98b80108d6cc2a6f9b33f6079d66f77e565717716c4345bb909f704618eaffd" name="go1.18-doc" arch="ppc64le">
  <version epoch="0" ver="1.18.1" rel="150000.1.11.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
</package>
<package pkgid="2dbbf0f359e638541c69cd400b9f6d7e66910f9284edf88feb49db660d8150a3" name="go1.18-doc" arch="s390x">
  <version epoch="0" ver="1.18.1" rel="150000.1.11.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
</package>
<package pkgid="0614bf64df65466d839fba5eabcc1c4eed51a34d3d8d5dc8b989b65b61692efb" name="go1.18-doc" arch="x86_64">
  <version epoch="0" ver="1.18.1" rel="150000.1.11.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
</package>
<package pkgid="589d823fdec89f4b8f62df649383a6360893c0956b2dd8294177214b781276c5" name="go1.18-doc" arch="aarch64">
  <version epoch="0" ver="1.18.1" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
</package>
<package pkgid="ec8f9b58a1ff9159dbd07e0333aac4ea522bd3b7c1c63c11a119212fb32835d8" name="go1.18-doc" arch="ppc64le">
  <version epoch="0" ver="1.18.1" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
</package>
<package pkgid="5e516079c5d42ab3541184d85cddc3783c3e9ab16ec80df958322a7d6ba78fbf" name="go1.18-doc" arch="s390x">
  <version epoch="0" ver="1.18.1" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
</package>
<package pkgid="63c460c058e4625db79055d64265b74001e6d1fb266fa2741018057ed6d399cc" name="go1.18-doc" arch="x86_64">
  <version epoch="0" ver="1.18.1" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
</package>
<package pkgid="bc81b32db882b293472d18ecd37c2f7202f8b8020fe68ab0a19835af4a4cbaeb" name="go1.18-doc" arch="aarch64">
  <version epoch="0" ver="1.18.2" rel="150000.1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.18.2 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  the go command, and the crypto/x509, go/types, net/http/httptest,
  reflect, and sync/atomic packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52440 syscall: Faccessat checks wrong group
  * go#51738 runtime: wrong type assertion result when using generic types
  * go#51798 cmd/go: add (and default to) -buildvcs=auto
  * go#51859 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#51897 net/http/httptest: race in Close
  * go#52028 go/types: documentation on instance de-duplication is unclear about guarantees
  * go#52149 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52244 go/types, types2: go generic assert compile escape
  * go#52305 runtime: doAllThreadsSyscall has an unaligned atomic load on 32-bit architectures
  * go#52366 cmd/compile/internal/ssa: occurred the wrong rewrite cycle detection
  * go#52375 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52386 reflect: can set map elem with string key of a different string type
  * go#52441 cmd/compile: incorrect handling of iota in 1.18
  * go#52468 cmd/go: go run -mod=mod [files...] does not update go.mod and go.sum
  * go#52558 cmd/compile: cannot convert v (variable of type *Bar[T]) to type *Foo[T]
  * go#52606 cmd/compile: internal compiler error: weird package in name: .dict0 =&gt; .dict0 from "", not "test/p"
  * go#52615 sync/atomic: compare and swap of inconsistently typed values with uninitialized Value
  * go#52691 cmd/compile: generic function appears to use incorrect type descriptor
  * go#52699 runtime: support debugCall on arm64
  * go#52706 net: TestDialCancel is not compatible with new macOS ARM64 builders
  * go#52804 go/types: NewMethodSet doesn't terminate for recursively embedded generics</changelog>
</package>
<package pkgid="dd98a9192c6fddc83fcbc2dce6609d6b3462442c0e0c2bf809be28db902436e7" name="go1.18-doc" arch="ppc64le">
  <version epoch="0" ver="1.18.2" rel="150000.1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.18.2 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  the go command, and the crypto/x509, go/types, net/http/httptest,
  reflect, and sync/atomic packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52440 syscall: Faccessat checks wrong group
  * go#51738 runtime: wrong type assertion result when using generic types
  * go#51798 cmd/go: add (and default to) -buildvcs=auto
  * go#51859 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#51897 net/http/httptest: race in Close
  * go#52028 go/types: documentation on instance de-duplication is unclear about guarantees
  * go#52149 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52244 go/types, types2: go generic assert compile escape
  * go#52305 runtime: doAllThreadsSyscall has an unaligned atomic load on 32-bit architectures
  * go#52366 cmd/compile/internal/ssa: occurred the wrong rewrite cycle detection
  * go#52375 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52386 reflect: can set map elem with string key of a different string type
  * go#52441 cmd/compile: incorrect handling of iota in 1.18
  * go#52468 cmd/go: go run -mod=mod [files...] does not update go.mod and go.sum
  * go#52558 cmd/compile: cannot convert v (variable of type *Bar[T]) to type *Foo[T]
  * go#52606 cmd/compile: internal compiler error: weird package in name: .dict0 =&gt; .dict0 from "", not "test/p"
  * go#52615 sync/atomic: compare and swap of inconsistently typed values with uninitialized Value
  * go#52691 cmd/compile: generic function appears to use incorrect type descriptor
  * go#52699 runtime: support debugCall on arm64
  * go#52706 net: TestDialCancel is not compatible with new macOS ARM64 builders
  * go#52804 go/types: NewMethodSet doesn't terminate for recursively embedded generics</changelog>
</package>
<package pkgid="bb4db59bf7192170aea838b5a18eb816511c8602c83f06974826ac212ba7c8ad" name="go1.18-doc" arch="s390x">
  <version epoch="0" ver="1.18.2" rel="150000.1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.18.2 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  the go command, and the crypto/x509, go/types, net/http/httptest,
  reflect, and sync/atomic packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52440 syscall: Faccessat checks wrong group
  * go#51738 runtime: wrong type assertion result when using generic types
  * go#51798 cmd/go: add (and default to) -buildvcs=auto
  * go#51859 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#51897 net/http/httptest: race in Close
  * go#52028 go/types: documentation on instance de-duplication is unclear about guarantees
  * go#52149 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52244 go/types, types2: go generic assert compile escape
  * go#52305 runtime: doAllThreadsSyscall has an unaligned atomic load on 32-bit architectures
  * go#52366 cmd/compile/internal/ssa: occurred the wrong rewrite cycle detection
  * go#52375 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52386 reflect: can set map elem with string key of a different string type
  * go#52441 cmd/compile: incorrect handling of iota in 1.18
  * go#52468 cmd/go: go run -mod=mod [files...] does not update go.mod and go.sum
  * go#52558 cmd/compile: cannot convert v (variable of type *Bar[T]) to type *Foo[T]
  * go#52606 cmd/compile: internal compiler error: weird package in name: .dict0 =&gt; .dict0 from "", not "test/p"
  * go#52615 sync/atomic: compare and swap of inconsistently typed values with uninitialized Value
  * go#52691 cmd/compile: generic function appears to use incorrect type descriptor
  * go#52699 runtime: support debugCall on arm64
  * go#52706 net: TestDialCancel is not compatible with new macOS ARM64 builders
  * go#52804 go/types: NewMethodSet doesn't terminate for recursively embedded generics</changelog>
</package>
<package pkgid="b8f0e9052eb2f6751d3103bdbdce9cbb14b7ba37ba1a7b0bc1216b5dbf40b7e8" name="go1.18-doc" arch="x86_64">
  <version epoch="0" ver="1.18.2" rel="150000.1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.18.2 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  the go command, and the crypto/x509, go/types, net/http/httptest,
  reflect, and sync/atomic packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52440 syscall: Faccessat checks wrong group
  * go#51738 runtime: wrong type assertion result when using generic types
  * go#51798 cmd/go: add (and default to) -buildvcs=auto
  * go#51859 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#51897 net/http/httptest: race in Close
  * go#52028 go/types: documentation on instance de-duplication is unclear about guarantees
  * go#52149 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52244 go/types, types2: go generic assert compile escape
  * go#52305 runtime: doAllThreadsSyscall has an unaligned atomic load on 32-bit architectures
  * go#52366 cmd/compile/internal/ssa: occurred the wrong rewrite cycle detection
  * go#52375 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52386 reflect: can set map elem with string key of a different string type
  * go#52441 cmd/compile: incorrect handling of iota in 1.18
  * go#52468 cmd/go: go run -mod=mod [files...] does not update go.mod and go.sum
  * go#52558 cmd/compile: cannot convert v (variable of type *Bar[T]) to type *Foo[T]
  * go#52606 cmd/compile: internal compiler error: weird package in name: .dict0 =&gt; .dict0 from "", not "test/p"
  * go#52615 sync/atomic: compare and swap of inconsistently typed values with uninitialized Value
  * go#52691 cmd/compile: generic function appears to use incorrect type descriptor
  * go#52699 runtime: support debugCall on arm64
  * go#52706 net: TestDialCancel is not compatible with new macOS ARM64 builders
  * go#52804 go/types: NewMethodSet doesn't terminate for recursively embedded generics</changelog>
</package>
<package pkgid="e7e5ff2183bab3616fa75c53b46e7ecbfdb3ece72a9c969ef7e755786b24e1e7" name="go1.18-doc" arch="aarch64">
  <version epoch="0" ver="1.18.3" rel="150000.1.20.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.18.2 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  the go command, and the crypto/x509, go/types, net/http/httptest,
  reflect, and sync/atomic packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52440 syscall: Faccessat checks wrong group
  * go#51738 runtime: wrong type assertion result when using generic types
  * go#51798 cmd/go: add (and default to) -buildvcs=auto
  * go#51859 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#51897 net/http/httptest: race in Close
  * go#52028 go/types: documentation on instance de-duplication is unclear about guarantees
  * go#52149 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52244 go/types, types2: go generic assert compile escape
  * go#52305 runtime: doAllThreadsSyscall has an unaligned atomic load on 32-bit architectures
  * go#52366 cmd/compile/internal/ssa: occurred the wrong rewrite cycle detection
  * go#52375 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52386 reflect: can set map elem with string key of a different string type
  * go#52441 cmd/compile: incorrect handling of iota in 1.18
  * go#52468 cmd/go: go run -mod=mod [files...] does not update go.mod and go.sum
  * go#52558 cmd/compile: cannot convert v (variable of type *Bar[T]) to type *Foo[T]
  * go#52606 cmd/compile: internal compiler error: weird package in name: .dict0 =&gt; .dict0 from "", not "test/p"
  * go#52615 sync/atomic: compare and swap of inconsistently typed values with uninitialized Value
  * go#52691 cmd/compile: generic function appears to use incorrect type descriptor
  * go#52699 runtime: support debugCall on arm64
  * go#52706 net: TestDialCancel is not compatible with new macOS ARM64 builders
  * go#52804 go/types: NewMethodSet doesn't terminate for recursively embedded generics</changelog>
  <changelog author="jkowalczyk@suse.com" date="1654084800">- go1.18.3 (released 2022-06-01) includes security fixes to the
  crypto/rand, crypto/tls, os/exec, and path/filepath packages, as
  well as bug fixes to the compiler, and the crypto/tls and
  text/template/parse packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-30634 CVE-2022-30629 CVE-2022-30580 CVE-2022-29804
  * boo#1200134 go#52561 CVE-2022-30634
  * go#52933 crypto/rand: Read hangs when passed buffer larger than 1&lt;&lt;32 - 1
  * boo#1200135 go#52814 CVE-2022-30629
  * go#52833 crypto/tls: randomly generate ticket_age_add
  * boo#1200136 go#52574 CVE-2022-30580
  * go#53057 os/exec: Cmd.{Run,Start} should fail if Cmd.Path is unset
  * boo#1200137 go#52476 CVE-2022-29804
  * go#52479 path/filepath: Clean(.\c:) returns c: on Windows
  * go#51849 cmd/compile: crash on pointer conversion in call to mapaccess2
  * go#52242 cmd/compile: compiler crash on valid code
  * go#52286 cmd/compile: compiler crash with "Dictionary should have already been generated"
  * go#52791 crypto/tls: 500% increase in allocations from (*tls.Conn).Read in go 1.17
  * go#52878 text/template: break/continue require no whitespace around them
  * go#53043 misc/cgo/testsanitizers: occasional hangs in TestTSAN/tsan12
  * go#53115 misc/cgo/testsanitizers: deadlock in TestTSAN/tsan11</changelog>
</package>
<package pkgid="20444174b1491cde3eb1ceb8cb91000b8f6d666f30431997e2a18696d74dcef2" name="go1.18-doc" arch="ppc64le">
  <version epoch="0" ver="1.18.3" rel="150000.1.20.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.18.2 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  the go command, and the crypto/x509, go/types, net/http/httptest,
  reflect, and sync/atomic packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52440 syscall: Faccessat checks wrong group
  * go#51738 runtime: wrong type assertion result when using generic types
  * go#51798 cmd/go: add (and default to) -buildvcs=auto
  * go#51859 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#51897 net/http/httptest: race in Close
  * go#52028 go/types: documentation on instance de-duplication is unclear about guarantees
  * go#52149 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52244 go/types, types2: go generic assert compile escape
  * go#52305 runtime: doAllThreadsSyscall has an unaligned atomic load on 32-bit architectures
  * go#52366 cmd/compile/internal/ssa: occurred the wrong rewrite cycle detection
  * go#52375 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52386 reflect: can set map elem with string key of a different string type
  * go#52441 cmd/compile: incorrect handling of iota in 1.18
  * go#52468 cmd/go: go run -mod=mod [files...] does not update go.mod and go.sum
  * go#52558 cmd/compile: cannot convert v (variable of type *Bar[T]) to type *Foo[T]
  * go#52606 cmd/compile: internal compiler error: weird package in name: .dict0 =&gt; .dict0 from "", not "test/p"
  * go#52615 sync/atomic: compare and swap of inconsistently typed values with uninitialized Value
  * go#52691 cmd/compile: generic function appears to use incorrect type descriptor
  * go#52699 runtime: support debugCall on arm64
  * go#52706 net: TestDialCancel is not compatible with new macOS ARM64 builders
  * go#52804 go/types: NewMethodSet doesn't terminate for recursively embedded generics</changelog>
  <changelog author="jkowalczyk@suse.com" date="1654084800">- go1.18.3 (released 2022-06-01) includes security fixes to the
  crypto/rand, crypto/tls, os/exec, and path/filepath packages, as
  well as bug fixes to the compiler, and the crypto/tls and
  text/template/parse packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-30634 CVE-2022-30629 CVE-2022-30580 CVE-2022-29804
  * boo#1200134 go#52561 CVE-2022-30634
  * go#52933 crypto/rand: Read hangs when passed buffer larger than 1&lt;&lt;32 - 1
  * boo#1200135 go#52814 CVE-2022-30629
  * go#52833 crypto/tls: randomly generate ticket_age_add
  * boo#1200136 go#52574 CVE-2022-30580
  * go#53057 os/exec: Cmd.{Run,Start} should fail if Cmd.Path is unset
  * boo#1200137 go#52476 CVE-2022-29804
  * go#52479 path/filepath: Clean(.\c:) returns c: on Windows
  * go#51849 cmd/compile: crash on pointer conversion in call to mapaccess2
  * go#52242 cmd/compile: compiler crash on valid code
  * go#52286 cmd/compile: compiler crash with "Dictionary should have already been generated"
  * go#52791 crypto/tls: 500% increase in allocations from (*tls.Conn).Read in go 1.17
  * go#52878 text/template: break/continue require no whitespace around them
  * go#53043 misc/cgo/testsanitizers: occasional hangs in TestTSAN/tsan12
  * go#53115 misc/cgo/testsanitizers: deadlock in TestTSAN/tsan11</changelog>
</package>
<package pkgid="5352555c935e90b11fc5feb6dd07b8c904a76f9954956b025554b7d259d13c83" name="go1.18-doc" arch="s390x">
  <version epoch="0" ver="1.18.3" rel="150000.1.20.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.18.2 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  the go command, and the crypto/x509, go/types, net/http/httptest,
  reflect, and sync/atomic packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52440 syscall: Faccessat checks wrong group
  * go#51738 runtime: wrong type assertion result when using generic types
  * go#51798 cmd/go: add (and default to) -buildvcs=auto
  * go#51859 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#51897 net/http/httptest: race in Close
  * go#52028 go/types: documentation on instance de-duplication is unclear about guarantees
  * go#52149 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52244 go/types, types2: go generic assert compile escape
  * go#52305 runtime: doAllThreadsSyscall has an unaligned atomic load on 32-bit architectures
  * go#52366 cmd/compile/internal/ssa: occurred the wrong rewrite cycle detection
  * go#52375 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52386 reflect: can set map elem with string key of a different string type
  * go#52441 cmd/compile: incorrect handling of iota in 1.18
  * go#52468 cmd/go: go run -mod=mod [files...] does not update go.mod and go.sum
  * go#52558 cmd/compile: cannot convert v (variable of type *Bar[T]) to type *Foo[T]
  * go#52606 cmd/compile: internal compiler error: weird package in name: .dict0 =&gt; .dict0 from "", not "test/p"
  * go#52615 sync/atomic: compare and swap of inconsistently typed values with uninitialized Value
  * go#52691 cmd/compile: generic function appears to use incorrect type descriptor
  * go#52699 runtime: support debugCall on arm64
  * go#52706 net: TestDialCancel is not compatible with new macOS ARM64 builders
  * go#52804 go/types: NewMethodSet doesn't terminate for recursively embedded generics</changelog>
  <changelog author="jkowalczyk@suse.com" date="1654084800">- go1.18.3 (released 2022-06-01) includes security fixes to the
  crypto/rand, crypto/tls, os/exec, and path/filepath packages, as
  well as bug fixes to the compiler, and the crypto/tls and
  text/template/parse packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-30634 CVE-2022-30629 CVE-2022-30580 CVE-2022-29804
  * boo#1200134 go#52561 CVE-2022-30634
  * go#52933 crypto/rand: Read hangs when passed buffer larger than 1&lt;&lt;32 - 1
  * boo#1200135 go#52814 CVE-2022-30629
  * go#52833 crypto/tls: randomly generate ticket_age_add
  * boo#1200136 go#52574 CVE-2022-30580
  * go#53057 os/exec: Cmd.{Run,Start} should fail if Cmd.Path is unset
  * boo#1200137 go#52476 CVE-2022-29804
  * go#52479 path/filepath: Clean(.\c:) returns c: on Windows
  * go#51849 cmd/compile: crash on pointer conversion in call to mapaccess2
  * go#52242 cmd/compile: compiler crash on valid code
  * go#52286 cmd/compile: compiler crash with "Dictionary should have already been generated"
  * go#52791 crypto/tls: 500% increase in allocations from (*tls.Conn).Read in go 1.17
  * go#52878 text/template: break/continue require no whitespace around them
  * go#53043 misc/cgo/testsanitizers: occasional hangs in TestTSAN/tsan12
  * go#53115 misc/cgo/testsanitizers: deadlock in TestTSAN/tsan11</changelog>
</package>
<package pkgid="98f0fc242ea6686ccb1c2caa879261d50d11f7964a59f8612528414beb8e8d86" name="go1.18-doc" arch="x86_64">
  <version epoch="0" ver="1.18.3" rel="150000.1.20.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.18.2 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  the go command, and the crypto/x509, go/types, net/http/httptest,
  reflect, and sync/atomic packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52440 syscall: Faccessat checks wrong group
  * go#51738 runtime: wrong type assertion result when using generic types
  * go#51798 cmd/go: add (and default to) -buildvcs=auto
  * go#51859 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#51897 net/http/httptest: race in Close
  * go#52028 go/types: documentation on instance de-duplication is unclear about guarantees
  * go#52149 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52244 go/types, types2: go generic assert compile escape
  * go#52305 runtime: doAllThreadsSyscall has an unaligned atomic load on 32-bit architectures
  * go#52366 cmd/compile/internal/ssa: occurred the wrong rewrite cycle detection
  * go#52375 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52386 reflect: can set map elem with string key of a different string type
  * go#52441 cmd/compile: incorrect handling of iota in 1.18
  * go#52468 cmd/go: go run -mod=mod [files...] does not update go.mod and go.sum
  * go#52558 cmd/compile: cannot convert v (variable of type *Bar[T]) to type *Foo[T]
  * go#52606 cmd/compile: internal compiler error: weird package in name: .dict0 =&gt; .dict0 from "", not "test/p"
  * go#52615 sync/atomic: compare and swap of inconsistently typed values with uninitialized Value
  * go#52691 cmd/compile: generic function appears to use incorrect type descriptor
  * go#52699 runtime: support debugCall on arm64
  * go#52706 net: TestDialCancel is not compatible with new macOS ARM64 builders
  * go#52804 go/types: NewMethodSet doesn't terminate for recursively embedded generics</changelog>
  <changelog author="jkowalczyk@suse.com" date="1654084800">- go1.18.3 (released 2022-06-01) includes security fixes to the
  crypto/rand, crypto/tls, os/exec, and path/filepath packages, as
  well as bug fixes to the compiler, and the crypto/tls and
  text/template/parse packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-30634 CVE-2022-30629 CVE-2022-30580 CVE-2022-29804
  * boo#1200134 go#52561 CVE-2022-30634
  * go#52933 crypto/rand: Read hangs when passed buffer larger than 1&lt;&lt;32 - 1
  * boo#1200135 go#52814 CVE-2022-30629
  * go#52833 crypto/tls: randomly generate ticket_age_add
  * boo#1200136 go#52574 CVE-2022-30580
  * go#53057 os/exec: Cmd.{Run,Start} should fail if Cmd.Path is unset
  * boo#1200137 go#52476 CVE-2022-29804
  * go#52479 path/filepath: Clean(.\c:) returns c: on Windows
  * go#51849 cmd/compile: crash on pointer conversion in call to mapaccess2
  * go#52242 cmd/compile: compiler crash on valid code
  * go#52286 cmd/compile: compiler crash with "Dictionary should have already been generated"
  * go#52791 crypto/tls: 500% increase in allocations from (*tls.Conn).Read in go 1.17
  * go#52878 text/template: break/continue require no whitespace around them
  * go#53043 misc/cgo/testsanitizers: occasional hangs in TestTSAN/tsan12
  * go#53115 misc/cgo/testsanitizers: deadlock in TestTSAN/tsan11</changelog>
</package>
<package pkgid="b07bea32925a99cdaf11e2a76207f85f062749c52e7293dde18b9f9ecb9ff672" name="go1.18-race" arch="aarch64">
  <version epoch="0" ver="1.18.1" rel="150000.1.11.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
</package>
<package pkgid="060afb4eb31857de99096b6a4a4dcbe2214b5b80f6558ad7331cb9c9f8cf7726" name="go1.18-race" arch="x86_64">
  <version epoch="0" ver="1.18.1" rel="150000.1.11.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
</package>
<package pkgid="58f652e3ba61e8838ad879c294d4d9fcdd861c3a6aa26a63a3b2f7f4062d5588" name="go1.18-race" arch="aarch64">
  <version epoch="0" ver="1.18.1" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
</package>
<package pkgid="6a0cb564439bfb989ce541868ff7207e8223d96db5cad8d710d20d57b19b7237" name="go1.18-race" arch="x86_64">
  <version epoch="0" ver="1.18.1" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
</package>
<package pkgid="d80c419d27230e4fc09228b412b3b56e84890bcaef180b531d43819978d6ed9e" name="go1.18-race" arch="aarch64">
  <version epoch="0" ver="1.18.2" rel="150000.1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.18.2 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  the go command, and the crypto/x509, go/types, net/http/httptest,
  reflect, and sync/atomic packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52440 syscall: Faccessat checks wrong group
  * go#51738 runtime: wrong type assertion result when using generic types
  * go#51798 cmd/go: add (and default to) -buildvcs=auto
  * go#51859 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#51897 net/http/httptest: race in Close
  * go#52028 go/types: documentation on instance de-duplication is unclear about guarantees
  * go#52149 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52244 go/types, types2: go generic assert compile escape
  * go#52305 runtime: doAllThreadsSyscall has an unaligned atomic load on 32-bit architectures
  * go#52366 cmd/compile/internal/ssa: occurred the wrong rewrite cycle detection
  * go#52375 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52386 reflect: can set map elem with string key of a different string type
  * go#52441 cmd/compile: incorrect handling of iota in 1.18
  * go#52468 cmd/go: go run -mod=mod [files...] does not update go.mod and go.sum
  * go#52558 cmd/compile: cannot convert v (variable of type *Bar[T]) to type *Foo[T]
  * go#52606 cmd/compile: internal compiler error: weird package in name: .dict0 =&gt; .dict0 from "", not "test/p"
  * go#52615 sync/atomic: compare and swap of inconsistently typed values with uninitialized Value
  * go#52691 cmd/compile: generic function appears to use incorrect type descriptor
  * go#52699 runtime: support debugCall on arm64
  * go#52706 net: TestDialCancel is not compatible with new macOS ARM64 builders
  * go#52804 go/types: NewMethodSet doesn't terminate for recursively embedded generics</changelog>
</package>
<package pkgid="5c8be3f8cfd5b418a5d7db01275e11e5adc4c32dd34b6463828db37df250d29c" name="go1.18-race" arch="x86_64">
  <version epoch="0" ver="1.18.2" rel="150000.1.17.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.18.2 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  the go command, and the crypto/x509, go/types, net/http/httptest,
  reflect, and sync/atomic packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52440 syscall: Faccessat checks wrong group
  * go#51738 runtime: wrong type assertion result when using generic types
  * go#51798 cmd/go: add (and default to) -buildvcs=auto
  * go#51859 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#51897 net/http/httptest: race in Close
  * go#52028 go/types: documentation on instance de-duplication is unclear about guarantees
  * go#52149 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52244 go/types, types2: go generic assert compile escape
  * go#52305 runtime: doAllThreadsSyscall has an unaligned atomic load on 32-bit architectures
  * go#52366 cmd/compile/internal/ssa: occurred the wrong rewrite cycle detection
  * go#52375 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52386 reflect: can set map elem with string key of a different string type
  * go#52441 cmd/compile: incorrect handling of iota in 1.18
  * go#52468 cmd/go: go run -mod=mod [files...] does not update go.mod and go.sum
  * go#52558 cmd/compile: cannot convert v (variable of type *Bar[T]) to type *Foo[T]
  * go#52606 cmd/compile: internal compiler error: weird package in name: .dict0 =&gt; .dict0 from "", not "test/p"
  * go#52615 sync/atomic: compare and swap of inconsistently typed values with uninitialized Value
  * go#52691 cmd/compile: generic function appears to use incorrect type descriptor
  * go#52699 runtime: support debugCall on arm64
  * go#52706 net: TestDialCancel is not compatible with new macOS ARM64 builders
  * go#52804 go/types: NewMethodSet doesn't terminate for recursively embedded generics</changelog>
</package>
<package pkgid="1cff578e00360c2faba5fd640426c24a8bc83fdddd80265c2d8630603952831f" name="go1.18-race" arch="aarch64">
  <version epoch="0" ver="1.18.3" rel="150000.1.20.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.18.2 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  the go command, and the crypto/x509, go/types, net/http/httptest,
  reflect, and sync/atomic packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52440 syscall: Faccessat checks wrong group
  * go#51738 runtime: wrong type assertion result when using generic types
  * go#51798 cmd/go: add (and default to) -buildvcs=auto
  * go#51859 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#51897 net/http/httptest: race in Close
  * go#52028 go/types: documentation on instance de-duplication is unclear about guarantees
  * go#52149 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52244 go/types, types2: go generic assert compile escape
  * go#52305 runtime: doAllThreadsSyscall has an unaligned atomic load on 32-bit architectures
  * go#52366 cmd/compile/internal/ssa: occurred the wrong rewrite cycle detection
  * go#52375 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52386 reflect: can set map elem with string key of a different string type
  * go#52441 cmd/compile: incorrect handling of iota in 1.18
  * go#52468 cmd/go: go run -mod=mod [files...] does not update go.mod and go.sum
  * go#52558 cmd/compile: cannot convert v (variable of type *Bar[T]) to type *Foo[T]
  * go#52606 cmd/compile: internal compiler error: weird package in name: .dict0 =&gt; .dict0 from "", not "test/p"
  * go#52615 sync/atomic: compare and swap of inconsistently typed values with uninitialized Value
  * go#52691 cmd/compile: generic function appears to use incorrect type descriptor
  * go#52699 runtime: support debugCall on arm64
  * go#52706 net: TestDialCancel is not compatible with new macOS ARM64 builders
  * go#52804 go/types: NewMethodSet doesn't terminate for recursively embedded generics</changelog>
  <changelog author="jkowalczyk@suse.com" date="1654084800">- go1.18.3 (released 2022-06-01) includes security fixes to the
  crypto/rand, crypto/tls, os/exec, and path/filepath packages, as
  well as bug fixes to the compiler, and the crypto/tls and
  text/template/parse packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-30634 CVE-2022-30629 CVE-2022-30580 CVE-2022-29804
  * boo#1200134 go#52561 CVE-2022-30634
  * go#52933 crypto/rand: Read hangs when passed buffer larger than 1&lt;&lt;32 - 1
  * boo#1200135 go#52814 CVE-2022-30629
  * go#52833 crypto/tls: randomly generate ticket_age_add
  * boo#1200136 go#52574 CVE-2022-30580
  * go#53057 os/exec: Cmd.{Run,Start} should fail if Cmd.Path is unset
  * boo#1200137 go#52476 CVE-2022-29804
  * go#52479 path/filepath: Clean(.\c:) returns c: on Windows
  * go#51849 cmd/compile: crash on pointer conversion in call to mapaccess2
  * go#52242 cmd/compile: compiler crash on valid code
  * go#52286 cmd/compile: compiler crash with "Dictionary should have already been generated"
  * go#52791 crypto/tls: 500% increase in allocations from (*tls.Conn).Read in go 1.17
  * go#52878 text/template: break/continue require no whitespace around them
  * go#53043 misc/cgo/testsanitizers: occasional hangs in TestTSAN/tsan12
  * go#53115 misc/cgo/testsanitizers: deadlock in TestTSAN/tsan11</changelog>
</package>
<package pkgid="2b4a4fb6cd7d3dd1c3e082903f5bccada193152b40ac35bc2bf34170dfca5aaf" name="go1.18-race" arch="x86_64">
  <version epoch="0" ver="1.18.3" rel="150000.1.20.1"/>
  <changelog author="jkowalczyk@suse.com" date="1639483200">- go1.18beta1 (released 2021-12-14) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1643630400">- go1.18beta2 (released 2022-01-31) is a beta version of go1.18 cut
  from the master branch at the revision tagged go1.18beta2.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645099200">- go1.18rc1 (released 2022-02-16) is a release candidate version of
  go1.18 cut from the master branch at the revision tagged
  go1.18rc1.
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1645185600">- Add .bin assembler pattern table file and test data to packaging.
  * Error manifests building some Go applications as:
    src/crypto/elliptic/p256_asm.go:24:12:
    pattern p256_asm_table.bin: no matching files found
  * A Quick Guide to Go's Assembler https://go.dev/doc/asm
  * New assembler pattern file added to packaging with mode 644:
    src/crypto/elliptic/p256_asm_table.bin
  * Existing test data files added to packaging with mode 644:
    src/compress/bzip2/testdata/pass-random2.bin
    src/compress/bzip2/testdata/pass-random1.bin
    src/debug/dwarf/testdata/line-gcc-win.bin</changelog>
  <changelog author="dmueller@suse.com" date="1646827200">- add dont-force-gold-on-arm64.patch (bsc#1183043)
- drop binutils-gold dependency</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647345600">- go1.18 (released 2022-03-15) is a major release of Go.
  go1.18.x minor releases will be provided through February 2023.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  Go 1.18 is a significant release, including changes to the
  language, implementation of the toolchain, runtime, and
  libraries. Go 1.18 arrives seven months after Go 1.17. As always,
  the release maintains the Go 1 promise of compatibility. We
  expect almost all Go programs to continue to compile and run as
  before.
  Refs boo#1193742 go1.18 release tracking
  * See release notes https://golang.org/doc/go1.18. Excerpts
    relevant to OBS environment and for SUSE/openSUSE follow:
  * Go 1.18 includes an implementation of generic features as
    described by the Type Parameters Proposal. This includes major
    but fully backward-compatible changes to the language.
  * The Go 1.18 compiler now correctly reports declared but not
    used errors for variables that are set inside a function
    literal but are never used. Before Go 1.18, the compiler did
    not report an error in such cases. This fixes long-outstanding
    compiler issue go#8560.
  * The Go 1.18 compiler now reports an overflow when passing a
    rune constant expression such as '1' &lt;&lt; 32 as an argument to
    the predeclared functions print and println, consistent with
    the behavior of user-defined functions. Before Go 1.18, the
    compiler did not report an error in such cases but silently
    accepted such constant arguments if they fit into an
    int64. Since go vet always pointed out this error, the number
    of affected programs is likely very small.
  * AMD64: Go 1.18 introduces the new GOAMD64 environment variable,
    which selects at compile time a minimum target version of the
    AMD64 architecture. Allowed values are v1, v2, v3, or v4. Each
    higher level requires, and takes advantage of, additional
    processor features. A detailed description can be found
    here. The GOAMD64 environment variable defaults to v1.
  * RISC-V: The 64-bit RISC-V architecture on Linux (the
    linux/riscv64 port) now supports the c-archive and c-shared
    build modes.
  * Linux: Go 1.18 requires Linux kernel version 2.6.32 or later.
  * Fuzzing: Go 1.18 includes an implementation of fuzzing as
    described by the fuzzing proposal. See the fuzzing landing page
    to get started. Please be aware that fuzzing can consume a lot
    of memory and may impact your machine?s performance while it
    runs.
  * go get: go get no longer builds or installs packages in
    module-aware mode. go get is now dedicated to adjusting
    dependencies in go.mod. Effectively, the -d flag is always
    enabled. To install the latest version of an executable outside
    the context of the current module, use go install
    example.com/cmd@latest. Any version query may be used instead
    of latest. This form of go install was added in Go 1.16, so
    projects supporting older versions may need to provide install
    instructions for both go install and go get. go get now reports
    an error when used outside a module, since there is no go.mod
    file to update. In GOPATH mode (with GO111MODULE=off), go get
    still builds and installs packages, as before.
  * Automatic go.mod and go.sum updates: The go mod graph, go mod
    vendor, go mod verify, and go mod why subcommands no longer
    automatically update the go.mod and go.sum files. (Those files
    can be updated explicitly using go get, go mod tidy, or go mod
    download.)
  * go version: The go command now embeds version control
    information in binaries. It includes the currently checked-out
    revision, commit time, and a flag indicating whether edited or
    untracked files are present. Version control information is
    embedded if the go command is invoked in a directory within a
    Git, Mercurial, Fossil, or Bazaar repository, and the main
    package and its containing main module are in the same
    repository. This information may be omitted using the flag
  - buildvcs=false. Additionally, the go command embeds
    information about the build, including build and tool tags (set
    with -tags), compiler, assembler, and linker flags (like
  - gcflags), whether cgo was enabled, and if it was, the values
    of the cgo environment variables (like CGO_CFLAGS). Both VCS
    and build information may be read together with module
    information using go version -m file or
    runtime/debug.ReadBuildInfo (for the currently running binary)
    or the new debug/buildinfo package. The underlying data format
    of the embedded build information can change with new go
    releases, so an older version of go may not handle the build
    information produced with a newer version of go. To read the
    version information from a binary built with go 1.18, use the
    go version command and the debug/buildinfo package from go
    1.18+.
  * go mod download: If the main module's go.mod file specifies go
    1.17 or higher, go mod download without arguments now downloads
    source code for only the modules explicitly required in the
    main module's go.mod file. (In a go 1.17 or higher module, that
    set already includes all dependencies needed to build the
    packages and tests in the main module.) To also download source
    code for transitive dependencies, use go mod download all.
  * go mod vendor: The go mod vendor subcommand now supports a -o
    flag to set the output directory. (Other go commands still read
    from the vendor directory at the module root when loading
    packages with -mod=vendor, so the main use for this flag is for
    third-party tools that need to collect package source code.)
  * go mod tidy: The go mod tidy command now retains additional
    checksums in the go.sum file for modules whose source code is
    needed to verify that each imported package is provided by only
    one module in the build list. Because this condition is rare
    and failure to apply it results in a build error, this change
    is not conditioned on the go version in the main module's
    go.mod file.
  * go work: The go command now supports a "Workspace" mode. If a
    go.work file is found in the working directory or a parent
    directory, or one is specified using the GOWORK environment
    variable, it will put the go command into workspace mode. In
    workspace mode, the go.work file will be used to determine the
    set of main modules used as the roots for module resolution,
    instead of using the normally-found go.mod file to specify the
    single main module. For more information see the go work
    documentation.
  * go build -asan: The go build command and related commands now
    support an -asan flag that enables interoperation with C (or
    C++) code compiled with the address sanitizer (C compiler
    option -fsanitize=address).
  * //go:build lines: Go 1.17 introduced //go:build lines as a more
    readable way to write build constraints, instead of // +build
    lines. As of Go 1.17, gofmt adds //go:build lines to match
    existing +build lines and keeps them in sync, while go vet
    diagnoses when they are out of sync. Since the release of Go
    1.18 marks the end of support for Go 1.16, all supported
    versions of Go now understand //go:build lines. In Go 1.18, go
    fix now removes the now-obsolete // +build lines in modules
    declaring go 1.17 or later in their go.mod files. For more
    information, see https://go.dev/design/draft-gobuild.
  * go vet: The vet tool is updated to support generic code. In
    most cases, it reports an error in generic code whenever it
    would report an error in the equivalent non-generic code after
    substituting for type parameters with a type from their type
    set.
  * go vet: The cmd/vet checkers copylock, printf, sortslice,
    testinggoroutine, and tests have all had moderate precision
    improvements to handle additional code patterns. This may lead
    to newly reported errors in existing packages.
  * Runtime: The garbage collector now includes non-heap sources of
    garbage collector work (e.g., stack scanning) when determining
    how frequently to run. As a result, garbage collector overhead
    is more predictable when these sources are significant. For
    most applications these changes will be negligible; however,
    some Go applications may now use less memory and spend more
    time on garbage collection, or vice versa, than before. The
    intended workaround is to tweak GOGC where necessary. The
    runtime now returns memory to the operating system more
    efficiently and has been tuned to work more aggressively as a
    result.
  * Compiler: Go 1.17 implemented a new way of passing function
    arguments and results using registers instead of the stack on
    64-bit x86 architecture on selected operating systems. Go 1.18
    expands the supported platforms to include 64-bit ARM
    (GOARCH=arm64), big- and little-endian 64-bit PowerPC
    (GOARCH=ppc64, ppc64le), as well as 64-bit x86 architecture
    (GOARCH=amd64) on all operating systems. On 64-bit ARM and
    64-bit PowerPC systems, benchmarking shows typical performance
    improvements of 10% or more. As mentioned in the Go 1.17
    release notes, this change does not affect the functionality of
    any safe Go code and is designed to have no impact on most
    assembly code. See the Go 1.17 release notes for more details.
  * Compiler: The compiler now can inline functions that contain
    range loops or labeled for loops.
  * Compiler: The new -asan compiler option supports the new go
    command -asan option.
  * Compiler: Because the compiler's type checker was replaced in
    its entirety to support generics, some error messages now may
    use different wording than before. In some cases, pre-Go 1.18
    error messages provided more detail or were phrased in a more
    helpful way. We intend to address these cases in Go
    1.19. Because of changes in the compiler related to supporting
    generics, the Go 1.18 compile speed can be roughly 15% slower
    than the Go 1.17 compile speed. The execution time of the
    compiled code is not affected. We intend to improve the speed
    of the compiler in Go 1.19.
  * Linker: The linker emits far fewer relocations. As a result,
    most codebases will link faster, require less memory to link,
    and generate smaller binaries. Tools that process Go binaries
    should use Go 1.18's debug/gosym package to transparently
    handle both old and new binaries.
  * Linker: The new -asan linker option supports the new go command
  - asan option.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go now
    looks first for $HOME/go1.17 or $HOME/sdk/go1.17 before falling
    back to $HOME/go1.4. We intend for Go 1.19 to require Go 1.17
    or later for bootstrap, and this change should make the
    transition smoother. For more details, see go#44505.
  * The new debug/buildinfo package provides access to module
    versions, version control information, and build flags embedded
    in executable files built by the go command. The same
    information is also available via runtime/debug.ReadBuildInfo
    for the currently running binary and via go version -m on the
    command line.
  * The new net/netip package defines a new IP address type,
    Addr. Compared to the existing net.IP type, the netip.Addr type
    takes less memory, is immutable, and is comparable so it
    supports == and can be used as a map key.
  * TLS 1.0 and 1.1 disabled by default client-side: If
    Config.MinVersion is not set, it now defaults to TLS 1.2 for
    client connections. Any safely up-to-date server is expected to
    support TLS 1.2, and browsers have required it since 2020. TLS
    1.0 and 1.1 are still supported by setting Config.MinVersion to
    VersionTLS10. The server-side default is unchanged at TLS
    1.0. The default can be temporarily reverted to TLS 1.0 by
    setting the GODEBUG=tls10default=1 environment variable. This
    option will be removed in Go 1.19.
  * Rejecting SHA-1 certificates: crypto/x509 will now reject
    certificates signed with the SHA-1 hash function. This doesn't
    apply to self-signed root certificates. Practical attacks
    against SHA-1 have been demonstrated since 2017 and publicly
    trusted Certificate Authorities have not issued SHA-1
    certificates since 2015. This can be temporarily reverted by
    setting the GODEBUG=x509sha1=1 environment variable. This
    option will be removed in Go 1.19.
  * crypto/elliptic The P224, P384, and P521 curve implementations
    are now all backed by code generated by the addchain and
    fiat-crypto projects, the latter of which is based on a
    formally-verified model of the arithmetic operations. They now
    use safer complete formulas and internal APIs. P-224 and P-384
    are now approximately four times faster. All specific curve
    implementations are now constant-time. Operating on invalid
    curve points (those for which the IsOnCurve method returns
    false, and which are never returned by Unmarshal or a Curve
    method operating on a valid point) has always been undefined
    behavior, can lead to key recovery attacks, and is now
    unsupported by the new backend. If an invalid point is supplied
    to a P224, P384, or P521 method, that method will now return a
    random point. The behavior might change to an explicit panic in
    a future release.
  * crypto/tls: The new Conn.NetConn method allows access to the
    underlying net.Conn.
  * crypto/x509: Certificate.Verify now uses platform APIs to
    verify certificate validity on macOS and iOS when it is called
    with a nil VerifyOpts.Roots or when using the root pool
    returned from SystemCertPool. SystemCertPool is now available
    on Windows.
  * crypto/x509: CertPool.Subjects is deprecated. On Windows,
    macOS, and iOS the CertPool returned by SystemCertPool will
    return a pool which does not include system roots in the slice
    returned by Subjects, as a static list can't appropriately
    represent the platform policies and might not be available at
    all from the platform APIs.
  * crypto/x509: Support for signing certificates using signature
    algorithms that depend on the MD5 and SHA-1 hashes (MD5WithRSA,
    SHA1WithRSA, and ECDSAWithSHA1) may be removed in Go 1.19.
  * net/http: When looking up a domain name containing non-ASCII
    characters, the Unicode-to-ASCII conversion is now done in
    accordance with Nontransitional Processing as defined in the
    Unicode IDNA Compatibility Processing standard (UTS #46). The
    interpretation of four distinct runes are changed: ß, ?,
    zero-width joiner U+200D, and zero-width non-joiner
    U+200C. Nontransitional Processing is consistent with most
    applications and web browsers.
  * os/user: User.GroupIds now uses a Go native implementation when
    cgo is not available.
  * runtime/debug: The BuildInfo struct has two new fields,
    containing additional information about how the binary was
    built: GoVersion holds the version of Go used to build the
    binary. Settings is a slice of BuildSettings structs holding
    key/value pairs describing the build.
  * runtime/pprof: The CPU profiler now uses per-thread timers on
    Linux. This increases the maximum CPU usage that a profile can
    observe, and reduces some forms of bias.
  * syscall: The new function SyscallN has been introduced for
    Windows, allowing for calls with arbitrary number of arguments.
    As a result, Syscall, Syscall6, Syscall9, Syscall12, Syscall15,
    and Syscall18 are deprecated in favor of SyscallN.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1647691200">- Add %define go_label as a configurable Go toolchain directory
  * go_label can be used to package multiple Go toolchains with
    the same go_api
  * go_label should be defined as go_api with an optional suffix
    e.g. %{go_api} or %{go_api}-foo
  * Default go_label = go_api makes no changes to package layout</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332800">- For SLE-12 set gcc_go_version to 8 to bootstrap using gcc8-go.
  gcc6-go and gcc7-go no longer successfully bootstrap go1.17 or
  go1.18 on SLE-12 aarch64 ppc64le or s390x.
  * gcc6-go fails with errors e.g. libnoder.a(_go_.o):(.toc+0x0):
    undefined reference to `__go_pimt__I4_DiagFrN4_boolee3</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649332801">- Template gcc-go.patch to substitute gcc_go_version and eliminate
  multiple similar patches each with hardcoded gcc go binary name.
  gcc-go.patch inserts gcc-go binary name e.g. go-8 to compensate
  for current lack of gcc-go update-alternatives usage.
  * add gcc-go.patch
  * drop gcc6-go.patch
  * drop gcc7-go.patch</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649764800">- go1.18.1 (released 2022-04-12) includes security fixes to the
  crypto/elliptic, crypto/x509, and encoding/pem packages, as well
  as bug fixes to the compiler, linker, runtime, the go command,
  vet, and the bytes, crypto/x509, and go/types packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-24675 CVE-2022-28327 CVE-2022-27536
  * boo#1198423 go#51853 CVE-2022-24675
  * go#52037 encoding/pem: stack overflow
    boo#1198424 go#52075 CVE-2022-28327
  * go#52077 crypto/elliptic: generic P-256 panic when scalar has too many leading zeroes
  * boo#1198427 go#51759 CVE-2022-27536
  * go#51763 crypto/x509: Certificate.Verify crash on macOS with Go 1.18
  * go#52140 cmd/go: go work use -r panics when given a directory that does not exist
  * go#52119 go/types, cmd/compile: type set overlapping implementation for interface types might be not correct
  * go#52032 go/types: spurious diagnostics for untyped shift operands with GoVersion &lt; go1.13
  * go#52007 go/types, types2: scope is unset on receivers of instantiated methods
  * go#51874 cmd/go: Segfault on ppc64le during Go 1.18 build on Alpine Linux
  * go#51855 cmd/compile: internal compiler error: panic: runtime error: index out of range [0] with length 0
  * go#51852 crypto/x509: reject SHA-1 signatures in Verify
  * go#51847 cmd/compile: cannot import "package" (type parameter bound more than once)
  * go#51846 cmd/compile: internal compiler error: walkExpr: switch 1 unknown op RECOVER
  * go#51796 bytes: Trim returns empty slice instead of nil in 1.18
  * go#51767 cmd/go: "go test" seems to now require git due to -buildvcs
  * go#51764 cmd/go: go work use panics when given a file
  * go#51741 cmd/cgo: pointer to incomplete C type is mangled when passed through interface type and generic type assert
  * go#51737 plugin: tls handshake panic: unreachable method called. linker bug?
  * go#51727 cmd/vet, go/types: go vet crash when using self-recursive anonymous types in constraints
  * go#51697 runtime: some tests fails on Windows with CGO_ENABLED=0
  * go#51669 cmd/compile: irgen uses wrong dict param to generate code for getting dict type
  * go#51665 go/types, types2: gopls crash in recordTypeAndValue</changelog>
  <changelog author="mliska@suse.cz" date="1651492800">- Remove remaining use of gold linker when bootstrapping with
  gccgo. The binutils-gold package will be removed in the future.
  * History: go1.8.3 2017-06-18 added conditional if gccgo defined
    BuildRequires: binutils-gold for arches other than s390x
  * No information available why binutils-gold was used initially
  * Unrelated to upstream recent hardcoded gold dependency for ARM</changelog>
  <changelog author="jkowalczyk@suse.com" date="1652184000">- go1.18.2 (released 2022-05-10) includes security fixes to the
  syscall package, as well as bug fixes to the compiler, runtime,
  the go command, and the crypto/x509, go/types, net/http/httptest,
  reflect, and sync/atomic packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-29526
  * boo#1199413 go#52313 CVE-2022-29526
  * go#52440 syscall: Faccessat checks wrong group
  * go#51738 runtime: wrong type assertion result when using generic types
  * go#51798 cmd/go: add (and default to) -buildvcs=auto
  * go#51859 crypto/x509: x509 certificate with issuerUniqueID and/or subjectUniqueID parse error
  * go#51897 net/http/httptest: race in Close
  * go#52028 go/types: documentation on instance de-duplication is unclear about guarantees
  * go#52149 syscall: TestGroupCleanupUserNamespace failure on linux-s390x-ibm
  * go#52244 go/types, types2: go generic assert compile escape
  * go#52305 runtime: doAllThreadsSyscall has an unaligned atomic load on 32-bit architectures
  * go#52366 cmd/compile/internal/ssa: occurred the wrong rewrite cycle detection
  * go#52375 runtime: executable compiled under Go 1.17.7 will occasionally wedge
  * go#52386 reflect: can set map elem with string key of a different string type
  * go#52441 cmd/compile: incorrect handling of iota in 1.18
  * go#52468 cmd/go: go run -mod=mod [files...] does not update go.mod and go.sum
  * go#52558 cmd/compile: cannot convert v (variable of type *Bar[T]) to type *Foo[T]
  * go#52606 cmd/compile: internal compiler error: weird package in name: .dict0 =&gt; .dict0 from "", not "test/p"
  * go#52615 sync/atomic: compare and swap of inconsistently typed values with uninitialized Value
  * go#52691 cmd/compile: generic function appears to use incorrect type descriptor
  * go#52699 runtime: support debugCall on arm64
  * go#52706 net: TestDialCancel is not compatible with new macOS ARM64 builders
  * go#52804 go/types: NewMethodSet doesn't terminate for recursively embedded generics</changelog>
  <changelog author="jkowalczyk@suse.com" date="1654084800">- go1.18.3 (released 2022-06-01) includes security fixes to the
  crypto/rand, crypto/tls, os/exec, and path/filepath packages, as
  well as bug fixes to the compiler, and the crypto/tls and
  text/template/parse packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-30634 CVE-2022-30629 CVE-2022-30580 CVE-2022-29804
  * boo#1200134 go#52561 CVE-2022-30634
  * go#52933 crypto/rand: Read hangs when passed buffer larger than 1&lt;&lt;32 - 1
  * boo#1200135 go#52814 CVE-2022-30629
  * go#52833 crypto/tls: randomly generate ticket_age_add
  * boo#1200136 go#52574 CVE-2022-30580
  * go#53057 os/exec: Cmd.{Run,Start} should fail if Cmd.Path is unset
  * boo#1200137 go#52476 CVE-2022-29804
  * go#52479 path/filepath: Clean(.\c:) returns c: on Windows
  * go#51849 cmd/compile: crash on pointer conversion in call to mapaccess2
  * go#52242 cmd/compile: compiler crash on valid code
  * go#52286 cmd/compile: compiler crash with "Dictionary should have already been generated"
  * go#52791 crypto/tls: 500% increase in allocations from (*tls.Conn).Read in go 1.17
  * go#52878 text/template: break/continue require no whitespace around them
  * go#53043 misc/cgo/testsanitizers: occasional hangs in TestTSAN/tsan12
  * go#53115 misc/cgo/testsanitizers: deadlock in TestTSAN/tsan11</changelog>
</package>
<package pkgid="4a5994fd235951b327d44f1c9b166bf06536decd7e6f705e26694940ddaf7979" name="golang-github-prometheus-prometheus" arch="aarch64">
  <version epoch="0" ver="2.32.1" rel="150100.4.9.2"/>
  <changelog author="mrostecki@opensuse.org" date="1574251200">- Remove firewalld files. They are installed in the main firewalld
  package.</changelog>
  <changelog author="jan.fajerski@suse.com" date="1574337600">- Remove prometheus.firewall.xml source file</changelog>
  <changelog author="jcavalheiro@suse.com" date="1574683200">- Patch macros on spec file to support builds on SLE 12</changelog>
  <changelog author="witold.bedyk@suse.com" date="1580126400">- Update to Prometheus 2.11.2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1589371200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch:
  + Adapt service discovery to the new Uyuni API endpoints
  + Modified spec file: force golang 1.12 to fix build issues in SLE15SP2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591185600">- Update change log and spec file
  + Modified spec file: default to golang 1.14 to avoid "have choice" build issues in OBS.
  + Rebase and update patches for version 2.18.0
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Update to 2.18.0
  + Features
  * Tracing: Added experimental Jaeger support #7148
  + Changes
  * Federation: Only use local TSDB for federation (ignore remote read). #7096
  * Rules: `rule_evaluations_total` and `rule_evaluation_failures_total` have a `rule_group` label now. #7094
  + Enhancements
  * TSDB: Significantly reduce WAL size kept around after a block cut. #7098
  * Discovery: Add `architecture` meta label for EC2. #7000
  + Bug fixes
  * UI: Fixed wrong MinTime reported by /status. #7182
  * React UI: Fixed multiselect legend on OSX. #6880
  * Remote Write: Fixed blocked resharding edge case. #7122
  * Remote Write: Fixed remote write not updating on relabel configs change. #7073
- Changes from 2.17.2
  + Bug fixes
  * Federation: Register federation metrics #7081
  * PromQL: Fix panic in parser error handling #7132
  * Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
  * TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
  * TSDB: Make isolation more robust to panics in web handlers #7129 #7136
- Changes from 2.17.1
  + Bug fixes
  * TSDB: Fix query performance regression that increased memory and CPU usage #7051
- Changes from 2.17.0
  + Features
  * TSDB: Support isolation #6841
  * This release implements isolation in TSDB. API queries and recording rules are
    guaranteed to only see full scrapes and full recording rules. This comes with a
    certain overhead in resource usage. Depending on the situation, there might be
    some increase in memory usage, CPU usage, or query latency.
  + Enhancements
  * PromQL: Allow more keywords as metric names #6933
  * React UI: Add normalization of localhost URLs in targets page #6794
  * Remote read: Read from remote storage concurrently #6770
  * Rules: Mark deleted rule series as stale after a reload #6745
  * Scrape: Log scrape append failures as debug rather than warn #6852
  * TSDB: Improve query performance for queries that partially hit the head #6676
  * Consul SD: Expose service health as meta label #5313
  * EC2 SD: Expose EC2 instance lifecycle as meta label #6914
  * Kubernetes SD: Expose service type as meta label for K8s service role #6684
  * Kubernetes SD: Expose label_selector and field_selector #6807
  * Openstack SD: Expose hypervisor id as meta label #6962
  + Bug fixes
  * PromQL: Do not escape HTML-like chars in query log #6834 #6795
  * React UI: Fix data table matrix values #6896
  * React UI: Fix new targets page not loading when using non-ASCII characters #6892
  * Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
  * Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
  * Scrape: Prevent removal of metric names upon relabeling #6891
  * Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
  * Scrape: Fix crash when reloads are separated by two scrape intervals #7011
- Changes from 2.16.0
  + Features
  * React UI: Support local timezone on /graph #6692
  * PromQL: add absent_over_time query function #6490
  * Adding optional logging of queries to their own file #6520
  + Enhancements
  * React UI: Add support for rules page and "Xs ago" duration displays #6503
  * React UI: alerts page, replace filtering togglers tabs with checkboxes #6543
  * TSDB: Export metric for WAL write errors #6647
  * TSDB: Improve query performance for queries that only touch the most recent 2h of data. #6651
  * PromQL: Refactoring in parser errors to improve error messages #6634
  * PromQL: Support trailing commas in grouping opts #6480
  * Scrape: Reduce memory usage on reloads by reusing scrape cache #6670
  * Scrape: Add metrics to track bytes and entries in the metadata cache #6675
  * promtool: Add support for line-column numbers for invalid rules output #6533
  * Avoid restarting rule groups when it is unnecessary #6450
  + Bug fixes
  * React UI: Send cookies on fetch() on older browsers #6553
  * React UI: adopt grafana flot fix for stacked graphs #6603
  * React UI: broken graph page browser history so that back button works as expected #6659
  * TSDB: ensure compactionsSkipped metric is registered, and log proper error if one is returned from head.Init #6616
  * TSDB: return an error on ingesting series with duplicate labels #6664
  * PromQL: Fix unary operator precedence #6579
  * PromQL: Respect query.timeout even when we reach query.max-concurrency #6712
  * PromQL: Fix string and parentheses handling in engine, which affected React UI #6612
  * PromQL: Remove output labels returned by absent() if they are produced by multiple identical label matchers #6493
  * Scrape: Validate that OpenMetrics input ends with `# EOF` #6505
  * Remote read: return the correct error if configs can't be marshal'd to JSON #6622
  * Remote write: Make remote client `Store` use passed context, which can affect shutdown timing #6673
  * Remote write: Improve sharding calculation in cases where we would always be consistently behind by tracking pendingSamples #6511
  * Ensure prometheus_rule_group metrics are deleted when a rule group is removed #6693
- Changes from 2.15.2
  + Bug fixes
  * TSDB: Fixed support for TSDB blocks built with Prometheus before 2.1.0. #6564
  * TSDB: Fixed block compaction issues on Windows. #6547
- Changes from 2.15.1
  + Bug fixes
  * TSDB: Fixed race on concurrent queries against same data. #6512
- Changes from 2.15.0
  + Features
  * API: Added new endpoint for exposing per metric metadata `/metadata`. #6420 #6442
  + Changes
  * Discovery: Removed `prometheus_sd_kubernetes_cache_*` metrics. Additionally `prometheus_sd_kubernetes_workqueue_latency_seconds` and `prometheus_sd_kubernetes_workqueue_work_duration_seconds` metrics now show correct values in seconds. #6393
  * Remote write: Changed `query` label on `prometheus_remote_storage_*` metrics to `remote_name` and `url`. #6043
  + Enhancements
  * TSDB: Significantly reduced memory footprint of loaded TSDB blocks. #6418 #6461
  * TSDB: Significantly optimized what we buffer during compaction which should result in lower memory footprint during compaction. #6422 #6452 #6468 #6475
  * TSDB: Improve replay latency. #6230
  * TSDB: WAL size is now used for size based retention calculation. #5886
  * Remote read: Added query grouping and range hints to the remote read request #6401
  * Remote write: Added `prometheus_remote_storage_sent_bytes_total` counter per queue. #6344
  * promql: Improved PromQL parser performance. #6356
  * React UI: Implemented missing pages like `/targets` #6276, TSDB status page #6281 #6267 and many other fixes and performance improvements.
  * promql: Prometheus now accepts spaces between time range and square bracket. e.g `[ 5m]` #6065
  + Bug fixes
  * Config: Fixed alertmanager configuration to not miss targets when configurations are similar. #6455
  * Remote write: Value of `prometheus_remote_storage_shards_desired` gauge shows raw value of desired shards and it's updated correctly. #6378
  * Rules: Prometheus now fails the evaluation of rules and alerts where metric results collide with labels specified in `labels` field. #6469
  * API: Targets Metadata API `/targets/metadata` now accepts empty `match_targets` parameter as in the spec. #6303
- Changes from 2.14.0
  + Features
  * API: `/api/v1/status/runtimeinfo` and `/api/v1/status/buildinfo` endpoints added for use by the React UI. #6243
  * React UI: implement the new experimental React based UI. #5694 and many more
  * Can be found by under `/new`.
  * Not all pages are implemented yet.
  * Status: Cardinality statistics added to the Runtime &amp; Build Information page. #6125
  + Enhancements
  * Remote write: fix delays in remote write after a compaction. #6021
  * UI: Alerts can be filtered by state. #5758
  + Bug fixes
  * Ensure warnings from the API are escaped. #6279
  * API: lifecycle endpoints return 403 when not enabled. #6057
  * Build: Fix Solaris build. #6149
  * Promtool: Remove false duplicate rule warnings when checking rule files with alerts. #6270
  * Remote write: restore use of deduplicating logger in remote write. #6113
  * Remote write: do not reshard when unable to send samples. #6111
  * Service discovery: errors are no longer logged on context cancellation. #6116, #6133
  * UI: handle null response from API properly. #6071
- Changes from 2.13.1
  + Bug fixes
  * Fix panic in ARM builds of Prometheus. #6110
  * promql: fix potential panic in the query logger. #6094
  * Multiple errors of http: superfluous response.WriteHeader call in the logs. #6145
- Changes from 2.13.0
  + Enhancements
  * Metrics: renamed prometheus_sd_configs_failed_total to prometheus_sd_failed_configs and changed to Gauge #5254
  * Include the tsdb tool in builds. #6089
  * Service discovery: add new node address types for kubernetes. #5902
  * UI: show warnings if query have returned some warnings. #5964
  * Remote write: reduce memory usage of the series cache. #5849
  * Remote read: use remote read streaming to reduce memory usage. #5703
  * Metrics: added metrics for remote write max/min/desired shards to queue manager. #5787
  * Promtool: show the warnings during label query. #5924
  * Promtool: improve error messages when parsing bad rules. #5965
  * Promtool: more promlint rules. #5515
  + Bug fixes
  * UI: Fix a Stored DOM XSS vulnerability with query history [CVE-2019-10215](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10215). #6098
  * Promtool: fix recording inconsistency due to duplicate labels. #6026
  * UI: fixes service-discovery view when accessed from unhealthy targets. #5915
  * Metrics format: OpenMetrics parser crashes on short input. #5939
  * UI: avoid truncated Y-axis values. #6014
- Changes from 2.12.0
  + Features
  * Track currently active PromQL queries in a log file. #5794
  * Enable and provide binaries for `mips64` / `mips64le` architectures. #5792
  + Enhancements
  * Improve responsiveness of targets web UI and API endpoint. #5740
  * Improve remote write desired shards calculation. #5763
  * Flush TSDB pages more precisely. tsdb#660
  * Add `prometheus_tsdb_retention_limit_bytes` metric. tsdb#667
  * Add logging during TSDB WAL replay on startup. tsdb#662
  * Improve TSDB memory usage. tsdb#653, tsdb#643, tsdb#654, tsdb#642, tsdb#627
  + Bug fixes
  * Check for duplicate label names in remote read. #5829
  * Mark deleted rules' series as stale on next evaluation. #5759
  * Fix JavaScript error when showing warning about out-of-sync server time. #5833
  * Fix `promtool test rules` panic when providing empty `exp_labels`. #5774
  * Only check last directory when discovering checkpoint number. #5756
  * Fix error propagation in WAL watcher helper functions. #5741
  * Correctly handle empty labels from alert templates. #5845</changelog>
  <changelog author="witold.bedyk@suse.com" date="1596196800">- Update 0003-Add-Uyuni-service-discovery.patch:
  + Add support for Prometheus exporters proxy</changelog>
  <changelog author="pseidensal@suse.com" date="1598875200">- Update package with changes from `server:monitoring` bsc#1175478
  Left out removal of firewalld related configuration files as SLE-15-SP1's
  `firewalld` package does not contain prometheus configuration yet.</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update to upstream version 2.22.1
- Update packaging
  * Remove systemd and shadow hard requirements
  * use systemd-sysusers to configure the user in a dedicated 'system-user-prometheus' subpackage
  * add 'prometheus' package alias</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Uyuni: `hostname` label is now set to FQDN instead of IP
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1620129600">- Add tarball with vendor modules and web assets
- Uyuni: Read formula data from exporters map
- Uyuni: Add support for TLS targets
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.26.0
  + Changes
  * Alerting: Using Alertmanager v2 API by default. #8626
  * Prometheus/Promtool: Binaries are now printing help and usage to stdout instead of stderr. #8542
  + Features
  * Remote: Add support for AWS SigV4 auth method for remote_write. #8509
  * PromQL: Allow negative offsets. Behind --enable-feature=promql-negative-offset flag. #8487
  * UI: Add advanced auto-completion, syntax highlighting and linting to graph page query input. #8634
  + Enhancements
  * PromQL: Add last_over_time, sgn, clamp functions. #8457
  * Scrape: Add support for specifying type of Authorization header credentials with Bearer by default. #8512
  * Scrape: Add follow_redirects option to scrape configuration. #8546
  * Remote: Allow retries on HTTP 429 response code for remote_write. #8237 #8477
  * Remote: Allow configuring custom headers for remote_read. #8516
  * UI: Hitting Enter now triggers new query. #8581
  * UI: Better handling of long rule and names on the /rules and /targets pages. #8608 #8609
  * UI: Add collapse/expand all button on the /targets page. #8486
- Upgrade to upstream version 2.25.0
  + Features
  * Include a new `--enable-feature=` flag that enables experimental features.
  + Enhancements
  * Add optional name property to testgroup for better test failure output. #8440
  * Add warnings into React Panel on the Graph page. #8427
  * TSDB: Increase the number of buckets for the compaction duration metric. #8342
  * Remote: Allow passing along custom remote_write HTTP headers. #8416
  * Mixins: Scope grafana configuration. #8332
  * Kubernetes SD: Add endpoint labels metadata. #8273
  * UI: Expose total number of label pairs in head in TSDB stats page. #8343
  * TSDB: Reload blocks every minute, to detect new blocks and enforce retention more often. #8343
  + Bug fixes
  * API: Fix global URL when external address has no port. #8359
  * Deprecate unused flag --alertmanager.timeout. #8407
- Upgrade to upstream version 2.24.1
  + Enhancements
  * Cache basic authentication results to significantly improve performance of HTTP endpoints.
- Upgrade to upstream version 2.24.0
  + Features
  * Add TLS and basic authentication to HTTP endpoints. #8316
  * promtool: Add check web-config subcommand to check web config files. #8319
  * promtool: Add tsdb create-blocks-from openmetrics subcommand to backfill metrics data from an OpenMetrics file. #8084
  + Enhancements
  * HTTP API: Fast-fail queries with only empty matchers. #8288
  * HTTP API: Support matchers for labels API. #8301
  * promtool: Improve checking of URLs passed on the command line. #7956
  * SD: Expose IPv6 as a label in EC2 SD. #7086
  * SD: Reuse EC2 client, reducing frequency of requesting credentials. #8311
  * TSDB: Add logging when compaction takes more than the block time range. #8151
  * TSDB: Avoid unnecessary GC runs after compaction. #8276
- Upgrade to upstream version 2.23.0
  + Changes
  * UI: Make the React UI default. #8142
  * Remote write: The following metrics were removed/renamed in remote write. #6815
    &gt; prometheus_remote_storage_succeeded_samples_total was removed and prometheus_remote_storage_samples_total was introduced for all the samples attempted to send.
    &gt; prometheus_remote_storage_sent_bytes_total was removed and replaced with prometheus_remote_storage_samples_bytes_total and prometheus_remote_storage_metadata_bytes_total.
    &gt; prometheus_remote_storage_failed_samples_total -&gt; prometheus_remote_storage_samples_failed_total .
    &gt; prometheus_remote_storage_retried_samples_total -&gt; prometheus_remote_storage_samples_retried_total.
    &gt; prometheus_remote_storage_dropped_samples_total -&gt; prometheus_remote_storage_samples_dropped_total.
    &gt; prometheus_remote_storage_pending_samples -&gt; prometheus_remote_storage_samples_pending.
  * Remote: Do not collect non-initialized timestamp metrics. #8060
  + Enhancements
  * Remote write: Added a metric prometheus_remote_storage_max_samples_per_send for remote write. #8102
  * TSDB: Make the snapshot directory name always the same length. #8138
  * TSDB: Create a checkpoint only once at the end of all head compactions. #8067
  * TSDB: Avoid Series API from hitting the chunks. #8050
  * TSDB: Cache label name and last value when adding series during compactions making compactions faster. #8192
  * PromQL: Improved performance of Hash method making queries a bit faster. #8025
  * promtool: tsdb list now prints block sizes. #7993
  * promtool: Calculate mint and maxt per test avoiding unnecessary calculations. #8096
  * SD: Add filtering of services to Docker Swarm SD. #8074</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621425600">- Refresh patches
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.27.1 (jsc#SLE-18254)
  + Bugfix:
  * SECURITY: Fix arbitrary redirects under the /new endpoint (CVE-2021-29622, bsc#1186242)
- Upgrade to upstream version 2.27.0
  + Features:
  * Promtool: Retroactive rule evaluation functionality. #7675
  * Configuration: Environment variable expansion for external labels. Behind --enable-feature=expand-external-labels flag. #8649
  * TSDB: Add a flag(--storage.tsdb.max-block-chunk-segment-size) to control the max chunks file size of the blocks for small Prometheus instances. #8478
  * UI: Add a dark theme. #8604
  * AWS Lightsail Discovery: Add AWS Lightsail Discovery. #8693
  * Docker Discovery: Add Docker Service Discovery. #8629
  * OAuth: Allow OAuth 2.0 to be used anywhere an HTTP client is used. #8761
  * Remote Write: Send exemplars via remote write. Experimental and disabled by default. #8296
  + Enhancements:
  * Digital Ocean Discovery: Add __meta_digitalocean_vpc label. #8642
  * Scaleway Discovery: Read Scaleway secret from a file. #8643
  * Scrape: Add configurable limits for label size and count. #8777
  * UI: Add 16w and 26w time range steps. #8656
  * Templating: Enable parsing strings in humanize functions. #8682
  + Bugfixes:
  * UI: Provide errors instead of blank page on TSDB Status Page. #8654 #8659
  * TSDB: Do not panic when writing very large records to the WAL. #8790
  * TSDB: Avoid panic when mmaped memory is referenced after the file is closed. #8723
  * Scaleway Discovery: Fix nil pointer dereference. #8737
  * Consul Discovery: Restart no longer required after config update with no targets. #8766</changelog>
  <changelog author="witold.bedyk@suse.com" date="1625745600">- Provide and reload firewalld configuration only for:
  + openSUSE Leap 15.0, 15.1, 15.2
  + SUSE SLE15, SLE15 SP1, SLE15 SP2</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * prometheus.service</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642593600">- Updated patches:
  + Changed:
  * 0002-Default-settings.patch
  + Removed:
  * 0003-Add-Uyuni-service-discovery.patch
- Use obs-service-go_modules
- Upgrade to upstream version 2.32.1 (jsc#SLE-22863)
  + Bugfixes:
  * Scrape: Fix reporting metrics when sample limit is reached
    during the report. #9996
  * Scrape: Ensure that scrape interval and scrape timeout are
    always set. #10023
  * TSDB: Expose and fix bug in iterators' Seek() method. #10030
- Upgrade to upstream version 2.32.0
  + Change:
  * remote-write: Change default max retry time from 100ms to
    5 seconds. #9634
  + Features:
  * Agent: New mode of operation optimized for remote-write only
    scenarios, without local storage.
  * Promtool: Add promtool check service-discovery command. #8970
  + Enhancements:
  * Promtool: Improve test output. #8064
  * Promtool: Use kahan summation for better numerical stability.
  * Remote-write: Reuse memory for marshalling. #9412
  * Scrape: Add scrape_body_size_bytes scrape metric behind the
  - -enable-feature=extra-scrape-metrics flag. #9569
  * TSDB: Add windows arm64 support. #9703
  * TSDB: Optimize query by skipping unneeded sorting in TSDB.
  * Templates: Support int and uint as datatypes for template
    formatting. #9680
  * UI: Prefer rate over rad, delta over deg, and count over cos
    in autocomplete. #9688
  + Bugfixes:
  * TSDB: Add more size checks when writing individual sections
    in the index. #9710
  * PromQL: Make deriv() return zero values for constant series.
  * TSDB: Fix panic when checkpoint directory is empty. #9687
  * TSDB: Fix panic, out of order chunks, and race warning during
    WAL replay. #9856
  * UI: Correctly render links for targets with IPv6 addresses
    that contain a Zone ID. #9853
  * Promtool: Fix checking of authorization.credentials_file and
    bearer_token_file fields. #9883
  * Uyuni SD: Fix null pointer exception during initialization.
  * TSDB: Fix queries after a failed snapshot replay. #9980
- Upgrade to upstream version 2.31.1
  + Bugfix:
  * SD: Fix a panic when the experimental discovery manager
    receives targets during a reload. #9656
- Upgrade to upstream version 2.31.0
  + Change:
  * UI: Remove standard PromQL editor in favour of the
    codemirror-based editor. #9452
  + Features:
  * PromQL: Add trigonometric functions and atan2 binary
    operator. #9239 #9248 #9515
  * Remote: Add support for exemplar in the remote write receiver
    endpoint. #9319 #9414
  * SD: Add PuppetDB service discovery. #8883
  * SD: Add Uyuni service discovery. #8190
  * Web: Add support for security-related HTTP headers. #9546
  + Enhancements:
  * Azure SD: Add proxy_url, follow_redirects, tls_config. #9267
  * Backfill: Add --max-block-duration in promtool
    create-blocks-from rules. #9511
  * Config: Print human-readable sizes with unit instead of raw
    numbers. #9361
  * HTTP: Re-enable HTTP/2. #9398
  * Kubernetes SD: Warn user if number of endpoints exceeds
    limit. #9467
  * OAuth2: Add TLS configuration to token requests. #9550
  * PromQL: Several optimizations. #9365 #9360 #9362 #9552
  * PromQL: Make aggregations deterministic in instant queries.
  * Rules: Add the ability to limit number of alerts or series.
  * SD: Experimental discovery manager to avoid restarts upon
    reload.
  * UI: Debounce timerange setting changes. #9359
  + Bugfixes:
  * Backfill: Apply rule labels after query labels. #9421
  * Scrape: Resolve conflicts between multiple exported label
    prefixes. #9479 #9518
  * Scrape: Restart scrape loops when __scrape_interval__ is
    changed. #9551
  * TSDB: Fix memory leak in samples deletion. #9151
  * UI: Use consistent margin-bottom for all alert kinds. #9318
- Upgrade to upstream version 2.30.3
  + Bugfixes:
  * TSDB: Fix panic on failed snapshot replay. #9438
  * TSDB: Don't fail snapshot replay with exemplar storage
    disabled when the snapshot contains exemplars. #9438
- Upgrade to upstream version 2.30.2
  + Bugfix:
  * TSDB: Don't error on overlapping m-mapped chunks during WAL
    replay. #9381
- Upgrade to upstream version 2.30.1
  + Enhancements:
  * Remote Write: Redact remote write URL when used for metric
    label. #9383
  * UI: Redact remote write URL and proxy URL passwords in the
    /config page. #9408
  + Bugfixes:
  * promtool rules backfill: Prevent creation of data before the
    start time. #9339
  * promtool rules backfill: Do not query after the end time.
  * Azure SD: Fix panic when no computername is set. #9387
- Upgrade to upstream version 2.30.0
  + Features:
  * experimental TSDB: Snapshot in-memory chunks on shutdown for
    faster restarts. #7229
  * experimental Scrape: Configure scrape interval and scrape
    timeout via relabeling using __scrape_interval__ and
    __scrape_timeout__ labels respectively. #8911
  * Scrape: Add scrape_timeout_seconds and scrape_sample_limit
    metric. #9247 #9295
  + Enhancements:
  * Scrape: Add --scrape.timestamp-tolerance flag to adjust
    scrape timestamp tolerance when enabled via
  - -scrape.adjust-timestamps. #9283
  * Remote Write: Improve throughput when sending exemplars.
  * TSDB: Optimise WAL loading by removing extra map and caching
    min-time #9160
  * promtool: Speed up checking for duplicate rules. #9262/#9306
  * Scrape: Reduce allocations when parsing the metrics. #9299
  * docker_sd: Support host network mode #9125
  + Bugfixes:
  * Exemplars: Fix panic when resizing exemplar storage from 0 to
    a non-zero size. #9286
  * TSDB: Correctly decrement
    prometheus_tsdb_head_active_appenders when the append has no
    samples. #9230
  * promtool rules backfill: Return 1 if backfill was
    unsuccessful. #9303
  * promtool rules backfill: Avoid creation of overlapping
    blocks. #9324
  * config: Fix a panic when reloading configuration with a null
    relabel action. #9224
- Upgrade to upstream version 2.29.2
  + Bugfixes:
  * Fix Kubernetes SD failing to discover Ingress in
    Kubernetes v1.22. #9205
  * Fix data race in loading write-ahead-log (WAL). #9259
- Upgrade to upstream version 2.29.1
  + Bugfixes:
  * TSDB: align atomically accessed int64 to prevent panic in
    32-bit archs. #9192
- Upgrade to upstream version 2.29.0
  + Changes:
  * Promote --storage.tsdb.allow-overlapping-blocks flag to
    stable. #9117
  * Promote --storage.tsdb.retention.size flag to stable. #9004
  + Features:
  * Add Kuma service discovery. #8844
  * Add present_over_time PromQL function. #9097
  * Allow configuring exemplar storage via file and make it
    reloadable. #8974
  * UI: Allow selecting time range with mouse drag. #8977
  * promtool: Add feature flags flag --enable-feature. #8958
  * promtool: Add file_sd file validation. #8950
  + Enhancements:
  * Reduce blocking of outgoing remote write requests from series
    garbage collection. #9109
  * Improve write-ahead-log decoding performance. #9106
  * Improve append performance in TSDB by reducing mutexes usage.
  * Allow configuring max_samples_per_send for remote write
    metadata. #8959
  * Add __meta_gce_interface_ipv4_&lt;name&gt; meta label to GCE
    discovery. #8978
  * Add __meta_ec2_availability_zone_id meta label to EC2
    discovery. #8896
  * Add __meta_azure_machine_computer_name meta label to Azure
    discovery. #9112
  * Add __meta_hetzner_hcloud_labelpresent_&lt;labelname&gt; meta label
    to Hetzner discovery. #9028
  * promtool: Add compaction efficiency to promtool tsdb analyze
    reports. #8940
  * promtool: Allow configuring max block duration for
    backfilling via --max-block-duration flag. #8919
  * UI: Add sorting and filtering to flags page. #8988
  * UI: Improve alerts page rendering performance. #9005
  + Bugfixes:
  * Log when total symbol size exceeds 2^32 bytes, causing
    compaction to fail, and skip compaction. #9104
  * Fix incorrect target_limit reloading of zero value. #9120
  * Fix head GC and pending readers race condition. #9081
  * Fix timestamp handling in OpenMetrics parser. #9008
  * Fix potential duplicate metrics in /federate endpoint when
    specifying multiple matchers. #8885
  * Fix server configuration and validation for authentication
    via client cert. #9123
  * Allow start and end again as label names in PromQL queries.
    They were disallowed since the introduction of @ timestamp
    feature. #9119
- Upgrade to upstream version 2.28.1
  + Bugfixes:
  * HTTP SD: Allow charset specification in Content-Type header.
  * HTTP SD: Fix handling of disappeared target groups. #9019
  * Fix incorrect log-level handling after moving to go-kit/log.
- Upgrade to upstream version 2.28.0
  + Change:
  * UI: Make the new experimental PromQL editor the default.
  + Features:
  * Linode SD: Add Linode service discovery. #8846
  * HTTP SD: Add generic HTTP-based service discovery. #8839
  * Kubernetes SD: Allow configuring API Server access via a
    kubeconfig file. #8811
  * UI: Add exemplar display support to the graphing interface.
  * Consul SD: Add namespace support for Consul Enterprise. #8900
  + Enhancements:
  * Promtool: Allow silencing output when importing / backfilling
    data. #8917
  * Consul SD: Support reading tokens from file. #8926
  * Rules: Add a new .ExternalURL alert field templating
    variable, containing the external URL of the Prometheus
    server. #8878
  * Scrape: Add experimental body_size_limit scrape configuration
    setting to limit the allowed response body size for target
    scrapes. #8833 #8886
  * Kubernetes SD: Add ingress class name label for ingress
    discovery. #8916
  * UI: Show a startup screen with progress bar when the TSDB is
    not ready yet. #8662 #8908 #8909 #8946
  * SD: Add a target creation failure counter
    prometheus_target_sync_failed_total and improve target
    creation failure handling. #8786
  * TSDB: Improve validation of exemplar label set length. #8816
  * TSDB: Add a prometheus_tsdb_clean_start metric that indicates
    whether a TSDB lockfile from a previous run still existed
    upon startup. #8824
  + Bugfixes:
  * UI: In the experimental PromQL editor, fix autocompletion and
    parsing for special float values and improve series metadata
    fetching. #8856
  * TSDB: When merging chunks, split resulting chunks if they
    would contain more than the maximum of 120 samples. #8582
  * SD: Fix the computation of the
    prometheus_sd_discovered_targets metric when using multiple
    service discoveries. #8828</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645185600">- Require Go 1.16+
- Do not build on s390 architecture.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645531200">- Fix Firewalld configuration file location (bsc#1196300)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646654400">- Update vendor tarball with prometheus/client_golang 1.12.1
  (bsc#1196338)
  * Added 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1647604800">- Create firewalld-prometheus-config subpackage (bsc#1197042,
  jsc#SLE-24374, jsc#SLE-24375)</changelog>
  <changelog author="jgonzalez@suse.com" date="1649332800">- Build firewalld-prometheus-config only for SUSE Linux Enterprise
  15, 15.1 and 15.2, and require firewalld for it
- firewalld-prometheus-config needs to be a Recommends, not a
  Requires, as prometheus does not require it to run</changelog>
</package>
<package pkgid="0c521e97707db5348505c779c240022fafc5db5c88697d46b31672940069f5dc" name="golang-github-prometheus-prometheus" arch="ppc64le">
  <version epoch="0" ver="2.32.1" rel="150100.4.9.2"/>
  <changelog author="mrostecki@opensuse.org" date="1574251200">- Remove firewalld files. They are installed in the main firewalld
  package.</changelog>
  <changelog author="jan.fajerski@suse.com" date="1574337600">- Remove prometheus.firewall.xml source file</changelog>
  <changelog author="jcavalheiro@suse.com" date="1574683200">- Patch macros on spec file to support builds on SLE 12</changelog>
  <changelog author="witold.bedyk@suse.com" date="1580126400">- Update to Prometheus 2.11.2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1589371200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch:
  + Adapt service discovery to the new Uyuni API endpoints
  + Modified spec file: force golang 1.12 to fix build issues in SLE15SP2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591185600">- Update change log and spec file
  + Modified spec file: default to golang 1.14 to avoid "have choice" build issues in OBS.
  + Rebase and update patches for version 2.18.0
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Update to 2.18.0
  + Features
  * Tracing: Added experimental Jaeger support #7148
  + Changes
  * Federation: Only use local TSDB for federation (ignore remote read). #7096
  * Rules: `rule_evaluations_total` and `rule_evaluation_failures_total` have a `rule_group` label now. #7094
  + Enhancements
  * TSDB: Significantly reduce WAL size kept around after a block cut. #7098
  * Discovery: Add `architecture` meta label for EC2. #7000
  + Bug fixes
  * UI: Fixed wrong MinTime reported by /status. #7182
  * React UI: Fixed multiselect legend on OSX. #6880
  * Remote Write: Fixed blocked resharding edge case. #7122
  * Remote Write: Fixed remote write not updating on relabel configs change. #7073
- Changes from 2.17.2
  + Bug fixes
  * Federation: Register federation metrics #7081
  * PromQL: Fix panic in parser error handling #7132
  * Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
  * TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
  * TSDB: Make isolation more robust to panics in web handlers #7129 #7136
- Changes from 2.17.1
  + Bug fixes
  * TSDB: Fix query performance regression that increased memory and CPU usage #7051
- Changes from 2.17.0
  + Features
  * TSDB: Support isolation #6841
  * This release implements isolation in TSDB. API queries and recording rules are
    guaranteed to only see full scrapes and full recording rules. This comes with a
    certain overhead in resource usage. Depending on the situation, there might be
    some increase in memory usage, CPU usage, or query latency.
  + Enhancements
  * PromQL: Allow more keywords as metric names #6933
  * React UI: Add normalization of localhost URLs in targets page #6794
  * Remote read: Read from remote storage concurrently #6770
  * Rules: Mark deleted rule series as stale after a reload #6745
  * Scrape: Log scrape append failures as debug rather than warn #6852
  * TSDB: Improve query performance for queries that partially hit the head #6676
  * Consul SD: Expose service health as meta label #5313
  * EC2 SD: Expose EC2 instance lifecycle as meta label #6914
  * Kubernetes SD: Expose service type as meta label for K8s service role #6684
  * Kubernetes SD: Expose label_selector and field_selector #6807
  * Openstack SD: Expose hypervisor id as meta label #6962
  + Bug fixes
  * PromQL: Do not escape HTML-like chars in query log #6834 #6795
  * React UI: Fix data table matrix values #6896
  * React UI: Fix new targets page not loading when using non-ASCII characters #6892
  * Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
  * Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
  * Scrape: Prevent removal of metric names upon relabeling #6891
  * Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
  * Scrape: Fix crash when reloads are separated by two scrape intervals #7011
- Changes from 2.16.0
  + Features
  * React UI: Support local timezone on /graph #6692
  * PromQL: add absent_over_time query function #6490
  * Adding optional logging of queries to their own file #6520
  + Enhancements
  * React UI: Add support for rules page and "Xs ago" duration displays #6503
  * React UI: alerts page, replace filtering togglers tabs with checkboxes #6543
  * TSDB: Export metric for WAL write errors #6647
  * TSDB: Improve query performance for queries that only touch the most recent 2h of data. #6651
  * PromQL: Refactoring in parser errors to improve error messages #6634
  * PromQL: Support trailing commas in grouping opts #6480
  * Scrape: Reduce memory usage on reloads by reusing scrape cache #6670
  * Scrape: Add metrics to track bytes and entries in the metadata cache #6675
  * promtool: Add support for line-column numbers for invalid rules output #6533
  * Avoid restarting rule groups when it is unnecessary #6450
  + Bug fixes
  * React UI: Send cookies on fetch() on older browsers #6553
  * React UI: adopt grafana flot fix for stacked graphs #6603
  * React UI: broken graph page browser history so that back button works as expected #6659
  * TSDB: ensure compactionsSkipped metric is registered, and log proper error if one is returned from head.Init #6616
  * TSDB: return an error on ingesting series with duplicate labels #6664
  * PromQL: Fix unary operator precedence #6579
  * PromQL: Respect query.timeout even when we reach query.max-concurrency #6712
  * PromQL: Fix string and parentheses handling in engine, which affected React UI #6612
  * PromQL: Remove output labels returned by absent() if they are produced by multiple identical label matchers #6493
  * Scrape: Validate that OpenMetrics input ends with `# EOF` #6505
  * Remote read: return the correct error if configs can't be marshal'd to JSON #6622
  * Remote write: Make remote client `Store` use passed context, which can affect shutdown timing #6673
  * Remote write: Improve sharding calculation in cases where we would always be consistently behind by tracking pendingSamples #6511
  * Ensure prometheus_rule_group metrics are deleted when a rule group is removed #6693
- Changes from 2.15.2
  + Bug fixes
  * TSDB: Fixed support for TSDB blocks built with Prometheus before 2.1.0. #6564
  * TSDB: Fixed block compaction issues on Windows. #6547
- Changes from 2.15.1
  + Bug fixes
  * TSDB: Fixed race on concurrent queries against same data. #6512
- Changes from 2.15.0
  + Features
  * API: Added new endpoint for exposing per metric metadata `/metadata`. #6420 #6442
  + Changes
  * Discovery: Removed `prometheus_sd_kubernetes_cache_*` metrics. Additionally `prometheus_sd_kubernetes_workqueue_latency_seconds` and `prometheus_sd_kubernetes_workqueue_work_duration_seconds` metrics now show correct values in seconds. #6393
  * Remote write: Changed `query` label on `prometheus_remote_storage_*` metrics to `remote_name` and `url`. #6043
  + Enhancements
  * TSDB: Significantly reduced memory footprint of loaded TSDB blocks. #6418 #6461
  * TSDB: Significantly optimized what we buffer during compaction which should result in lower memory footprint during compaction. #6422 #6452 #6468 #6475
  * TSDB: Improve replay latency. #6230
  * TSDB: WAL size is now used for size based retention calculation. #5886
  * Remote read: Added query grouping and range hints to the remote read request #6401
  * Remote write: Added `prometheus_remote_storage_sent_bytes_total` counter per queue. #6344
  * promql: Improved PromQL parser performance. #6356
  * React UI: Implemented missing pages like `/targets` #6276, TSDB status page #6281 #6267 and many other fixes and performance improvements.
  * promql: Prometheus now accepts spaces between time range and square bracket. e.g `[ 5m]` #6065
  + Bug fixes
  * Config: Fixed alertmanager configuration to not miss targets when configurations are similar. #6455
  * Remote write: Value of `prometheus_remote_storage_shards_desired` gauge shows raw value of desired shards and it's updated correctly. #6378
  * Rules: Prometheus now fails the evaluation of rules and alerts where metric results collide with labels specified in `labels` field. #6469
  * API: Targets Metadata API `/targets/metadata` now accepts empty `match_targets` parameter as in the spec. #6303
- Changes from 2.14.0
  + Features
  * API: `/api/v1/status/runtimeinfo` and `/api/v1/status/buildinfo` endpoints added for use by the React UI. #6243
  * React UI: implement the new experimental React based UI. #5694 and many more
  * Can be found by under `/new`.
  * Not all pages are implemented yet.
  * Status: Cardinality statistics added to the Runtime &amp; Build Information page. #6125
  + Enhancements
  * Remote write: fix delays in remote write after a compaction. #6021
  * UI: Alerts can be filtered by state. #5758
  + Bug fixes
  * Ensure warnings from the API are escaped. #6279
  * API: lifecycle endpoints return 403 when not enabled. #6057
  * Build: Fix Solaris build. #6149
  * Promtool: Remove false duplicate rule warnings when checking rule files with alerts. #6270
  * Remote write: restore use of deduplicating logger in remote write. #6113
  * Remote write: do not reshard when unable to send samples. #6111
  * Service discovery: errors are no longer logged on context cancellation. #6116, #6133
  * UI: handle null response from API properly. #6071
- Changes from 2.13.1
  + Bug fixes
  * Fix panic in ARM builds of Prometheus. #6110
  * promql: fix potential panic in the query logger. #6094
  * Multiple errors of http: superfluous response.WriteHeader call in the logs. #6145
- Changes from 2.13.0
  + Enhancements
  * Metrics: renamed prometheus_sd_configs_failed_total to prometheus_sd_failed_configs and changed to Gauge #5254
  * Include the tsdb tool in builds. #6089
  * Service discovery: add new node address types for kubernetes. #5902
  * UI: show warnings if query have returned some warnings. #5964
  * Remote write: reduce memory usage of the series cache. #5849
  * Remote read: use remote read streaming to reduce memory usage. #5703
  * Metrics: added metrics for remote write max/min/desired shards to queue manager. #5787
  * Promtool: show the warnings during label query. #5924
  * Promtool: improve error messages when parsing bad rules. #5965
  * Promtool: more promlint rules. #5515
  + Bug fixes
  * UI: Fix a Stored DOM XSS vulnerability with query history [CVE-2019-10215](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10215). #6098
  * Promtool: fix recording inconsistency due to duplicate labels. #6026
  * UI: fixes service-discovery view when accessed from unhealthy targets. #5915
  * Metrics format: OpenMetrics parser crashes on short input. #5939
  * UI: avoid truncated Y-axis values. #6014
- Changes from 2.12.0
  + Features
  * Track currently active PromQL queries in a log file. #5794
  * Enable and provide binaries for `mips64` / `mips64le` architectures. #5792
  + Enhancements
  * Improve responsiveness of targets web UI and API endpoint. #5740
  * Improve remote write desired shards calculation. #5763
  * Flush TSDB pages more precisely. tsdb#660
  * Add `prometheus_tsdb_retention_limit_bytes` metric. tsdb#667
  * Add logging during TSDB WAL replay on startup. tsdb#662
  * Improve TSDB memory usage. tsdb#653, tsdb#643, tsdb#654, tsdb#642, tsdb#627
  + Bug fixes
  * Check for duplicate label names in remote read. #5829
  * Mark deleted rules' series as stale on next evaluation. #5759
  * Fix JavaScript error when showing warning about out-of-sync server time. #5833
  * Fix `promtool test rules` panic when providing empty `exp_labels`. #5774
  * Only check last directory when discovering checkpoint number. #5756
  * Fix error propagation in WAL watcher helper functions. #5741
  * Correctly handle empty labels from alert templates. #5845</changelog>
  <changelog author="witold.bedyk@suse.com" date="1596196800">- Update 0003-Add-Uyuni-service-discovery.patch:
  + Add support for Prometheus exporters proxy</changelog>
  <changelog author="pseidensal@suse.com" date="1598875200">- Update package with changes from `server:monitoring` bsc#1175478
  Left out removal of firewalld related configuration files as SLE-15-SP1's
  `firewalld` package does not contain prometheus configuration yet.</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update to upstream version 2.22.1
- Update packaging
  * Remove systemd and shadow hard requirements
  * use systemd-sysusers to configure the user in a dedicated 'system-user-prometheus' subpackage
  * add 'prometheus' package alias</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Uyuni: `hostname` label is now set to FQDN instead of IP
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1620129600">- Add tarball with vendor modules and web assets
- Uyuni: Read formula data from exporters map
- Uyuni: Add support for TLS targets
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.26.0
  + Changes
  * Alerting: Using Alertmanager v2 API by default. #8626
  * Prometheus/Promtool: Binaries are now printing help and usage to stdout instead of stderr. #8542
  + Features
  * Remote: Add support for AWS SigV4 auth method for remote_write. #8509
  * PromQL: Allow negative offsets. Behind --enable-feature=promql-negative-offset flag. #8487
  * UI: Add advanced auto-completion, syntax highlighting and linting to graph page query input. #8634
  + Enhancements
  * PromQL: Add last_over_time, sgn, clamp functions. #8457
  * Scrape: Add support for specifying type of Authorization header credentials with Bearer by default. #8512
  * Scrape: Add follow_redirects option to scrape configuration. #8546
  * Remote: Allow retries on HTTP 429 response code for remote_write. #8237 #8477
  * Remote: Allow configuring custom headers for remote_read. #8516
  * UI: Hitting Enter now triggers new query. #8581
  * UI: Better handling of long rule and names on the /rules and /targets pages. #8608 #8609
  * UI: Add collapse/expand all button on the /targets page. #8486
- Upgrade to upstream version 2.25.0
  + Features
  * Include a new `--enable-feature=` flag that enables experimental features.
  + Enhancements
  * Add optional name property to testgroup for better test failure output. #8440
  * Add warnings into React Panel on the Graph page. #8427
  * TSDB: Increase the number of buckets for the compaction duration metric. #8342
  * Remote: Allow passing along custom remote_write HTTP headers. #8416
  * Mixins: Scope grafana configuration. #8332
  * Kubernetes SD: Add endpoint labels metadata. #8273
  * UI: Expose total number of label pairs in head in TSDB stats page. #8343
  * TSDB: Reload blocks every minute, to detect new blocks and enforce retention more often. #8343
  + Bug fixes
  * API: Fix global URL when external address has no port. #8359
  * Deprecate unused flag --alertmanager.timeout. #8407
- Upgrade to upstream version 2.24.1
  + Enhancements
  * Cache basic authentication results to significantly improve performance of HTTP endpoints.
- Upgrade to upstream version 2.24.0
  + Features
  * Add TLS and basic authentication to HTTP endpoints. #8316
  * promtool: Add check web-config subcommand to check web config files. #8319
  * promtool: Add tsdb create-blocks-from openmetrics subcommand to backfill metrics data from an OpenMetrics file. #8084
  + Enhancements
  * HTTP API: Fast-fail queries with only empty matchers. #8288
  * HTTP API: Support matchers for labels API. #8301
  * promtool: Improve checking of URLs passed on the command line. #7956
  * SD: Expose IPv6 as a label in EC2 SD. #7086
  * SD: Reuse EC2 client, reducing frequency of requesting credentials. #8311
  * TSDB: Add logging when compaction takes more than the block time range. #8151
  * TSDB: Avoid unnecessary GC runs after compaction. #8276
- Upgrade to upstream version 2.23.0
  + Changes
  * UI: Make the React UI default. #8142
  * Remote write: The following metrics were removed/renamed in remote write. #6815
    &gt; prometheus_remote_storage_succeeded_samples_total was removed and prometheus_remote_storage_samples_total was introduced for all the samples attempted to send.
    &gt; prometheus_remote_storage_sent_bytes_total was removed and replaced with prometheus_remote_storage_samples_bytes_total and prometheus_remote_storage_metadata_bytes_total.
    &gt; prometheus_remote_storage_failed_samples_total -&gt; prometheus_remote_storage_samples_failed_total .
    &gt; prometheus_remote_storage_retried_samples_total -&gt; prometheus_remote_storage_samples_retried_total.
    &gt; prometheus_remote_storage_dropped_samples_total -&gt; prometheus_remote_storage_samples_dropped_total.
    &gt; prometheus_remote_storage_pending_samples -&gt; prometheus_remote_storage_samples_pending.
  * Remote: Do not collect non-initialized timestamp metrics. #8060
  + Enhancements
  * Remote write: Added a metric prometheus_remote_storage_max_samples_per_send for remote write. #8102
  * TSDB: Make the snapshot directory name always the same length. #8138
  * TSDB: Create a checkpoint only once at the end of all head compactions. #8067
  * TSDB: Avoid Series API from hitting the chunks. #8050
  * TSDB: Cache label name and last value when adding series during compactions making compactions faster. #8192
  * PromQL: Improved performance of Hash method making queries a bit faster. #8025
  * promtool: tsdb list now prints block sizes. #7993
  * promtool: Calculate mint and maxt per test avoiding unnecessary calculations. #8096
  * SD: Add filtering of services to Docker Swarm SD. #8074</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621425600">- Refresh patches
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.27.1 (jsc#SLE-18254)
  + Bugfix:
  * SECURITY: Fix arbitrary redirects under the /new endpoint (CVE-2021-29622, bsc#1186242)
- Upgrade to upstream version 2.27.0
  + Features:
  * Promtool: Retroactive rule evaluation functionality. #7675
  * Configuration: Environment variable expansion for external labels. Behind --enable-feature=expand-external-labels flag. #8649
  * TSDB: Add a flag(--storage.tsdb.max-block-chunk-segment-size) to control the max chunks file size of the blocks for small Prometheus instances. #8478
  * UI: Add a dark theme. #8604
  * AWS Lightsail Discovery: Add AWS Lightsail Discovery. #8693
  * Docker Discovery: Add Docker Service Discovery. #8629
  * OAuth: Allow OAuth 2.0 to be used anywhere an HTTP client is used. #8761
  * Remote Write: Send exemplars via remote write. Experimental and disabled by default. #8296
  + Enhancements:
  * Digital Ocean Discovery: Add __meta_digitalocean_vpc label. #8642
  * Scaleway Discovery: Read Scaleway secret from a file. #8643
  * Scrape: Add configurable limits for label size and count. #8777
  * UI: Add 16w and 26w time range steps. #8656
  * Templating: Enable parsing strings in humanize functions. #8682
  + Bugfixes:
  * UI: Provide errors instead of blank page on TSDB Status Page. #8654 #8659
  * TSDB: Do not panic when writing very large records to the WAL. #8790
  * TSDB: Avoid panic when mmaped memory is referenced after the file is closed. #8723
  * Scaleway Discovery: Fix nil pointer dereference. #8737
  * Consul Discovery: Restart no longer required after config update with no targets. #8766</changelog>
  <changelog author="witold.bedyk@suse.com" date="1625745600">- Provide and reload firewalld configuration only for:
  + openSUSE Leap 15.0, 15.1, 15.2
  + SUSE SLE15, SLE15 SP1, SLE15 SP2</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * prometheus.service</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642593600">- Updated patches:
  + Changed:
  * 0002-Default-settings.patch
  + Removed:
  * 0003-Add-Uyuni-service-discovery.patch
- Use obs-service-go_modules
- Upgrade to upstream version 2.32.1 (jsc#SLE-22863)
  + Bugfixes:
  * Scrape: Fix reporting metrics when sample limit is reached
    during the report. #9996
  * Scrape: Ensure that scrape interval and scrape timeout are
    always set. #10023
  * TSDB: Expose and fix bug in iterators' Seek() method. #10030
- Upgrade to upstream version 2.32.0
  + Change:
  * remote-write: Change default max retry time from 100ms to
    5 seconds. #9634
  + Features:
  * Agent: New mode of operation optimized for remote-write only
    scenarios, without local storage.
  * Promtool: Add promtool check service-discovery command. #8970
  + Enhancements:
  * Promtool: Improve test output. #8064
  * Promtool: Use kahan summation for better numerical stability.
  * Remote-write: Reuse memory for marshalling. #9412
  * Scrape: Add scrape_body_size_bytes scrape metric behind the
  - -enable-feature=extra-scrape-metrics flag. #9569
  * TSDB: Add windows arm64 support. #9703
  * TSDB: Optimize query by skipping unneeded sorting in TSDB.
  * Templates: Support int and uint as datatypes for template
    formatting. #9680
  * UI: Prefer rate over rad, delta over deg, and count over cos
    in autocomplete. #9688
  + Bugfixes:
  * TSDB: Add more size checks when writing individual sections
    in the index. #9710
  * PromQL: Make deriv() return zero values for constant series.
  * TSDB: Fix panic when checkpoint directory is empty. #9687
  * TSDB: Fix panic, out of order chunks, and race warning during
    WAL replay. #9856
  * UI: Correctly render links for targets with IPv6 addresses
    that contain a Zone ID. #9853
  * Promtool: Fix checking of authorization.credentials_file and
    bearer_token_file fields. #9883
  * Uyuni SD: Fix null pointer exception during initialization.
  * TSDB: Fix queries after a failed snapshot replay. #9980
- Upgrade to upstream version 2.31.1
  + Bugfix:
  * SD: Fix a panic when the experimental discovery manager
    receives targets during a reload. #9656
- Upgrade to upstream version 2.31.0
  + Change:
  * UI: Remove standard PromQL editor in favour of the
    codemirror-based editor. #9452
  + Features:
  * PromQL: Add trigonometric functions and atan2 binary
    operator. #9239 #9248 #9515
  * Remote: Add support for exemplar in the remote write receiver
    endpoint. #9319 #9414
  * SD: Add PuppetDB service discovery. #8883
  * SD: Add Uyuni service discovery. #8190
  * Web: Add support for security-related HTTP headers. #9546
  + Enhancements:
  * Azure SD: Add proxy_url, follow_redirects, tls_config. #9267
  * Backfill: Add --max-block-duration in promtool
    create-blocks-from rules. #9511
  * Config: Print human-readable sizes with unit instead of raw
    numbers. #9361
  * HTTP: Re-enable HTTP/2. #9398
  * Kubernetes SD: Warn user if number of endpoints exceeds
    limit. #9467
  * OAuth2: Add TLS configuration to token requests. #9550
  * PromQL: Several optimizations. #9365 #9360 #9362 #9552
  * PromQL: Make aggregations deterministic in instant queries.
  * Rules: Add the ability to limit number of alerts or series.
  * SD: Experimental discovery manager to avoid restarts upon
    reload.
  * UI: Debounce timerange setting changes. #9359
  + Bugfixes:
  * Backfill: Apply rule labels after query labels. #9421
  * Scrape: Resolve conflicts between multiple exported label
    prefixes. #9479 #9518
  * Scrape: Restart scrape loops when __scrape_interval__ is
    changed. #9551
  * TSDB: Fix memory leak in samples deletion. #9151
  * UI: Use consistent margin-bottom for all alert kinds. #9318
- Upgrade to upstream version 2.30.3
  + Bugfixes:
  * TSDB: Fix panic on failed snapshot replay. #9438
  * TSDB: Don't fail snapshot replay with exemplar storage
    disabled when the snapshot contains exemplars. #9438
- Upgrade to upstream version 2.30.2
  + Bugfix:
  * TSDB: Don't error on overlapping m-mapped chunks during WAL
    replay. #9381
- Upgrade to upstream version 2.30.1
  + Enhancements:
  * Remote Write: Redact remote write URL when used for metric
    label. #9383
  * UI: Redact remote write URL and proxy URL passwords in the
    /config page. #9408
  + Bugfixes:
  * promtool rules backfill: Prevent creation of data before the
    start time. #9339
  * promtool rules backfill: Do not query after the end time.
  * Azure SD: Fix panic when no computername is set. #9387
- Upgrade to upstream version 2.30.0
  + Features:
  * experimental TSDB: Snapshot in-memory chunks on shutdown for
    faster restarts. #7229
  * experimental Scrape: Configure scrape interval and scrape
    timeout via relabeling using __scrape_interval__ and
    __scrape_timeout__ labels respectively. #8911
  * Scrape: Add scrape_timeout_seconds and scrape_sample_limit
    metric. #9247 #9295
  + Enhancements:
  * Scrape: Add --scrape.timestamp-tolerance flag to adjust
    scrape timestamp tolerance when enabled via
  - -scrape.adjust-timestamps. #9283
  * Remote Write: Improve throughput when sending exemplars.
  * TSDB: Optimise WAL loading by removing extra map and caching
    min-time #9160
  * promtool: Speed up checking for duplicate rules. #9262/#9306
  * Scrape: Reduce allocations when parsing the metrics. #9299
  * docker_sd: Support host network mode #9125
  + Bugfixes:
  * Exemplars: Fix panic when resizing exemplar storage from 0 to
    a non-zero size. #9286
  * TSDB: Correctly decrement
    prometheus_tsdb_head_active_appenders when the append has no
    samples. #9230
  * promtool rules backfill: Return 1 if backfill was
    unsuccessful. #9303
  * promtool rules backfill: Avoid creation of overlapping
    blocks. #9324
  * config: Fix a panic when reloading configuration with a null
    relabel action. #9224
- Upgrade to upstream version 2.29.2
  + Bugfixes:
  * Fix Kubernetes SD failing to discover Ingress in
    Kubernetes v1.22. #9205
  * Fix data race in loading write-ahead-log (WAL). #9259
- Upgrade to upstream version 2.29.1
  + Bugfixes:
  * TSDB: align atomically accessed int64 to prevent panic in
    32-bit archs. #9192
- Upgrade to upstream version 2.29.0
  + Changes:
  * Promote --storage.tsdb.allow-overlapping-blocks flag to
    stable. #9117
  * Promote --storage.tsdb.retention.size flag to stable. #9004
  + Features:
  * Add Kuma service discovery. #8844
  * Add present_over_time PromQL function. #9097
  * Allow configuring exemplar storage via file and make it
    reloadable. #8974
  * UI: Allow selecting time range with mouse drag. #8977
  * promtool: Add feature flags flag --enable-feature. #8958
  * promtool: Add file_sd file validation. #8950
  + Enhancements:
  * Reduce blocking of outgoing remote write requests from series
    garbage collection. #9109
  * Improve write-ahead-log decoding performance. #9106
  * Improve append performance in TSDB by reducing mutexes usage.
  * Allow configuring max_samples_per_send for remote write
    metadata. #8959
  * Add __meta_gce_interface_ipv4_&lt;name&gt; meta label to GCE
    discovery. #8978
  * Add __meta_ec2_availability_zone_id meta label to EC2
    discovery. #8896
  * Add __meta_azure_machine_computer_name meta label to Azure
    discovery. #9112
  * Add __meta_hetzner_hcloud_labelpresent_&lt;labelname&gt; meta label
    to Hetzner discovery. #9028
  * promtool: Add compaction efficiency to promtool tsdb analyze
    reports. #8940
  * promtool: Allow configuring max block duration for
    backfilling via --max-block-duration flag. #8919
  * UI: Add sorting and filtering to flags page. #8988
  * UI: Improve alerts page rendering performance. #9005
  + Bugfixes:
  * Log when total symbol size exceeds 2^32 bytes, causing
    compaction to fail, and skip compaction. #9104
  * Fix incorrect target_limit reloading of zero value. #9120
  * Fix head GC and pending readers race condition. #9081
  * Fix timestamp handling in OpenMetrics parser. #9008
  * Fix potential duplicate metrics in /federate endpoint when
    specifying multiple matchers. #8885
  * Fix server configuration and validation for authentication
    via client cert. #9123
  * Allow start and end again as label names in PromQL queries.
    They were disallowed since the introduction of @ timestamp
    feature. #9119
- Upgrade to upstream version 2.28.1
  + Bugfixes:
  * HTTP SD: Allow charset specification in Content-Type header.
  * HTTP SD: Fix handling of disappeared target groups. #9019
  * Fix incorrect log-level handling after moving to go-kit/log.
- Upgrade to upstream version 2.28.0
  + Change:
  * UI: Make the new experimental PromQL editor the default.
  + Features:
  * Linode SD: Add Linode service discovery. #8846
  * HTTP SD: Add generic HTTP-based service discovery. #8839
  * Kubernetes SD: Allow configuring API Server access via a
    kubeconfig file. #8811
  * UI: Add exemplar display support to the graphing interface.
  * Consul SD: Add namespace support for Consul Enterprise. #8900
  + Enhancements:
  * Promtool: Allow silencing output when importing / backfilling
    data. #8917
  * Consul SD: Support reading tokens from file. #8926
  * Rules: Add a new .ExternalURL alert field templating
    variable, containing the external URL of the Prometheus
    server. #8878
  * Scrape: Add experimental body_size_limit scrape configuration
    setting to limit the allowed response body size for target
    scrapes. #8833 #8886
  * Kubernetes SD: Add ingress class name label for ingress
    discovery. #8916
  * UI: Show a startup screen with progress bar when the TSDB is
    not ready yet. #8662 #8908 #8909 #8946
  * SD: Add a target creation failure counter
    prometheus_target_sync_failed_total and improve target
    creation failure handling. #8786
  * TSDB: Improve validation of exemplar label set length. #8816
  * TSDB: Add a prometheus_tsdb_clean_start metric that indicates
    whether a TSDB lockfile from a previous run still existed
    upon startup. #8824
  + Bugfixes:
  * UI: In the experimental PromQL editor, fix autocompletion and
    parsing for special float values and improve series metadata
    fetching. #8856
  * TSDB: When merging chunks, split resulting chunks if they
    would contain more than the maximum of 120 samples. #8582
  * SD: Fix the computation of the
    prometheus_sd_discovered_targets metric when using multiple
    service discoveries. #8828</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645185600">- Require Go 1.16+
- Do not build on s390 architecture.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645531200">- Fix Firewalld configuration file location (bsc#1196300)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646654400">- Update vendor tarball with prometheus/client_golang 1.12.1
  (bsc#1196338)
  * Added 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1647604800">- Create firewalld-prometheus-config subpackage (bsc#1197042,
  jsc#SLE-24374, jsc#SLE-24375)</changelog>
  <changelog author="jgonzalez@suse.com" date="1649332800">- Build firewalld-prometheus-config only for SUSE Linux Enterprise
  15, 15.1 and 15.2, and require firewalld for it
- firewalld-prometheus-config needs to be a Recommends, not a
  Requires, as prometheus does not require it to run</changelog>
</package>
<package pkgid="6fd430c0f4b3a2b7c8b6eba65b1bc0622dcfed3786f1ca9491cc0c600fcdd2c7" name="golang-github-prometheus-prometheus" arch="s390x">
  <version epoch="0" ver="2.32.1" rel="150100.4.9.2"/>
  <changelog author="mrostecki@opensuse.org" date="1574251200">- Remove firewalld files. They are installed in the main firewalld
  package.</changelog>
  <changelog author="jan.fajerski@suse.com" date="1574337600">- Remove prometheus.firewall.xml source file</changelog>
  <changelog author="jcavalheiro@suse.com" date="1574683200">- Patch macros on spec file to support builds on SLE 12</changelog>
  <changelog author="witold.bedyk@suse.com" date="1580126400">- Update to Prometheus 2.11.2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1589371200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch:
  + Adapt service discovery to the new Uyuni API endpoints
  + Modified spec file: force golang 1.12 to fix build issues in SLE15SP2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591185600">- Update change log and spec file
  + Modified spec file: default to golang 1.14 to avoid "have choice" build issues in OBS.
  + Rebase and update patches for version 2.18.0
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Update to 2.18.0
  + Features
  * Tracing: Added experimental Jaeger support #7148
  + Changes
  * Federation: Only use local TSDB for federation (ignore remote read). #7096
  * Rules: `rule_evaluations_total` and `rule_evaluation_failures_total` have a `rule_group` label now. #7094
  + Enhancements
  * TSDB: Significantly reduce WAL size kept around after a block cut. #7098
  * Discovery: Add `architecture` meta label for EC2. #7000
  + Bug fixes
  * UI: Fixed wrong MinTime reported by /status. #7182
  * React UI: Fixed multiselect legend on OSX. #6880
  * Remote Write: Fixed blocked resharding edge case. #7122
  * Remote Write: Fixed remote write not updating on relabel configs change. #7073
- Changes from 2.17.2
  + Bug fixes
  * Federation: Register federation metrics #7081
  * PromQL: Fix panic in parser error handling #7132
  * Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
  * TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
  * TSDB: Make isolation more robust to panics in web handlers #7129 #7136
- Changes from 2.17.1
  + Bug fixes
  * TSDB: Fix query performance regression that increased memory and CPU usage #7051
- Changes from 2.17.0
  + Features
  * TSDB: Support isolation #6841
  * This release implements isolation in TSDB. API queries and recording rules are
    guaranteed to only see full scrapes and full recording rules. This comes with a
    certain overhead in resource usage. Depending on the situation, there might be
    some increase in memory usage, CPU usage, or query latency.
  + Enhancements
  * PromQL: Allow more keywords as metric names #6933
  * React UI: Add normalization of localhost URLs in targets page #6794
  * Remote read: Read from remote storage concurrently #6770
  * Rules: Mark deleted rule series as stale after a reload #6745
  * Scrape: Log scrape append failures as debug rather than warn #6852
  * TSDB: Improve query performance for queries that partially hit the head #6676
  * Consul SD: Expose service health as meta label #5313
  * EC2 SD: Expose EC2 instance lifecycle as meta label #6914
  * Kubernetes SD: Expose service type as meta label for K8s service role #6684
  * Kubernetes SD: Expose label_selector and field_selector #6807
  * Openstack SD: Expose hypervisor id as meta label #6962
  + Bug fixes
  * PromQL: Do not escape HTML-like chars in query log #6834 #6795
  * React UI: Fix data table matrix values #6896
  * React UI: Fix new targets page not loading when using non-ASCII characters #6892
  * Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
  * Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
  * Scrape: Prevent removal of metric names upon relabeling #6891
  * Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
  * Scrape: Fix crash when reloads are separated by two scrape intervals #7011
- Changes from 2.16.0
  + Features
  * React UI: Support local timezone on /graph #6692
  * PromQL: add absent_over_time query function #6490
  * Adding optional logging of queries to their own file #6520
  + Enhancements
  * React UI: Add support for rules page and "Xs ago" duration displays #6503
  * React UI: alerts page, replace filtering togglers tabs with checkboxes #6543
  * TSDB: Export metric for WAL write errors #6647
  * TSDB: Improve query performance for queries that only touch the most recent 2h of data. #6651
  * PromQL: Refactoring in parser errors to improve error messages #6634
  * PromQL: Support trailing commas in grouping opts #6480
  * Scrape: Reduce memory usage on reloads by reusing scrape cache #6670
  * Scrape: Add metrics to track bytes and entries in the metadata cache #6675
  * promtool: Add support for line-column numbers for invalid rules output #6533
  * Avoid restarting rule groups when it is unnecessary #6450
  + Bug fixes
  * React UI: Send cookies on fetch() on older browsers #6553
  * React UI: adopt grafana flot fix for stacked graphs #6603
  * React UI: broken graph page browser history so that back button works as expected #6659
  * TSDB: ensure compactionsSkipped metric is registered, and log proper error if one is returned from head.Init #6616
  * TSDB: return an error on ingesting series with duplicate labels #6664
  * PromQL: Fix unary operator precedence #6579
  * PromQL: Respect query.timeout even when we reach query.max-concurrency #6712
  * PromQL: Fix string and parentheses handling in engine, which affected React UI #6612
  * PromQL: Remove output labels returned by absent() if they are produced by multiple identical label matchers #6493
  * Scrape: Validate that OpenMetrics input ends with `# EOF` #6505
  * Remote read: return the correct error if configs can't be marshal'd to JSON #6622
  * Remote write: Make remote client `Store` use passed context, which can affect shutdown timing #6673
  * Remote write: Improve sharding calculation in cases where we would always be consistently behind by tracking pendingSamples #6511
  * Ensure prometheus_rule_group metrics are deleted when a rule group is removed #6693
- Changes from 2.15.2
  + Bug fixes
  * TSDB: Fixed support for TSDB blocks built with Prometheus before 2.1.0. #6564
  * TSDB: Fixed block compaction issues on Windows. #6547
- Changes from 2.15.1
  + Bug fixes
  * TSDB: Fixed race on concurrent queries against same data. #6512
- Changes from 2.15.0
  + Features
  * API: Added new endpoint for exposing per metric metadata `/metadata`. #6420 #6442
  + Changes
  * Discovery: Removed `prometheus_sd_kubernetes_cache_*` metrics. Additionally `prometheus_sd_kubernetes_workqueue_latency_seconds` and `prometheus_sd_kubernetes_workqueue_work_duration_seconds` metrics now show correct values in seconds. #6393
  * Remote write: Changed `query` label on `prometheus_remote_storage_*` metrics to `remote_name` and `url`. #6043
  + Enhancements
  * TSDB: Significantly reduced memory footprint of loaded TSDB blocks. #6418 #6461
  * TSDB: Significantly optimized what we buffer during compaction which should result in lower memory footprint during compaction. #6422 #6452 #6468 #6475
  * TSDB: Improve replay latency. #6230
  * TSDB: WAL size is now used for size based retention calculation. #5886
  * Remote read: Added query grouping and range hints to the remote read request #6401
  * Remote write: Added `prometheus_remote_storage_sent_bytes_total` counter per queue. #6344
  * promql: Improved PromQL parser performance. #6356
  * React UI: Implemented missing pages like `/targets` #6276, TSDB status page #6281 #6267 and many other fixes and performance improvements.
  * promql: Prometheus now accepts spaces between time range and square bracket. e.g `[ 5m]` #6065
  + Bug fixes
  * Config: Fixed alertmanager configuration to not miss targets when configurations are similar. #6455
  * Remote write: Value of `prometheus_remote_storage_shards_desired` gauge shows raw value of desired shards and it's updated correctly. #6378
  * Rules: Prometheus now fails the evaluation of rules and alerts where metric results collide with labels specified in `labels` field. #6469
  * API: Targets Metadata API `/targets/metadata` now accepts empty `match_targets` parameter as in the spec. #6303
- Changes from 2.14.0
  + Features
  * API: `/api/v1/status/runtimeinfo` and `/api/v1/status/buildinfo` endpoints added for use by the React UI. #6243
  * React UI: implement the new experimental React based UI. #5694 and many more
  * Can be found by under `/new`.
  * Not all pages are implemented yet.
  * Status: Cardinality statistics added to the Runtime &amp; Build Information page. #6125
  + Enhancements
  * Remote write: fix delays in remote write after a compaction. #6021
  * UI: Alerts can be filtered by state. #5758
  + Bug fixes
  * Ensure warnings from the API are escaped. #6279
  * API: lifecycle endpoints return 403 when not enabled. #6057
  * Build: Fix Solaris build. #6149
  * Promtool: Remove false duplicate rule warnings when checking rule files with alerts. #6270
  * Remote write: restore use of deduplicating logger in remote write. #6113
  * Remote write: do not reshard when unable to send samples. #6111
  * Service discovery: errors are no longer logged on context cancellation. #6116, #6133
  * UI: handle null response from API properly. #6071
- Changes from 2.13.1
  + Bug fixes
  * Fix panic in ARM builds of Prometheus. #6110
  * promql: fix potential panic in the query logger. #6094
  * Multiple errors of http: superfluous response.WriteHeader call in the logs. #6145
- Changes from 2.13.0
  + Enhancements
  * Metrics: renamed prometheus_sd_configs_failed_total to prometheus_sd_failed_configs and changed to Gauge #5254
  * Include the tsdb tool in builds. #6089
  * Service discovery: add new node address types for kubernetes. #5902
  * UI: show warnings if query have returned some warnings. #5964
  * Remote write: reduce memory usage of the series cache. #5849
  * Remote read: use remote read streaming to reduce memory usage. #5703
  * Metrics: added metrics for remote write max/min/desired shards to queue manager. #5787
  * Promtool: show the warnings during label query. #5924
  * Promtool: improve error messages when parsing bad rules. #5965
  * Promtool: more promlint rules. #5515
  + Bug fixes
  * UI: Fix a Stored DOM XSS vulnerability with query history [CVE-2019-10215](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10215). #6098
  * Promtool: fix recording inconsistency due to duplicate labels. #6026
  * UI: fixes service-discovery view when accessed from unhealthy targets. #5915
  * Metrics format: OpenMetrics parser crashes on short input. #5939
  * UI: avoid truncated Y-axis values. #6014
- Changes from 2.12.0
  + Features
  * Track currently active PromQL queries in a log file. #5794
  * Enable and provide binaries for `mips64` / `mips64le` architectures. #5792
  + Enhancements
  * Improve responsiveness of targets web UI and API endpoint. #5740
  * Improve remote write desired shards calculation. #5763
  * Flush TSDB pages more precisely. tsdb#660
  * Add `prometheus_tsdb_retention_limit_bytes` metric. tsdb#667
  * Add logging during TSDB WAL replay on startup. tsdb#662
  * Improve TSDB memory usage. tsdb#653, tsdb#643, tsdb#654, tsdb#642, tsdb#627
  + Bug fixes
  * Check for duplicate label names in remote read. #5829
  * Mark deleted rules' series as stale on next evaluation. #5759
  * Fix JavaScript error when showing warning about out-of-sync server time. #5833
  * Fix `promtool test rules` panic when providing empty `exp_labels`. #5774
  * Only check last directory when discovering checkpoint number. #5756
  * Fix error propagation in WAL watcher helper functions. #5741
  * Correctly handle empty labels from alert templates. #5845</changelog>
  <changelog author="witold.bedyk@suse.com" date="1596196800">- Update 0003-Add-Uyuni-service-discovery.patch:
  + Add support for Prometheus exporters proxy</changelog>
  <changelog author="pseidensal@suse.com" date="1598875200">- Update package with changes from `server:monitoring` bsc#1175478
  Left out removal of firewalld related configuration files as SLE-15-SP1's
  `firewalld` package does not contain prometheus configuration yet.</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update to upstream version 2.22.1
- Update packaging
  * Remove systemd and shadow hard requirements
  * use systemd-sysusers to configure the user in a dedicated 'system-user-prometheus' subpackage
  * add 'prometheus' package alias</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Uyuni: `hostname` label is now set to FQDN instead of IP
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1620129600">- Add tarball with vendor modules and web assets
- Uyuni: Read formula data from exporters map
- Uyuni: Add support for TLS targets
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.26.0
  + Changes
  * Alerting: Using Alertmanager v2 API by default. #8626
  * Prometheus/Promtool: Binaries are now printing help and usage to stdout instead of stderr. #8542
  + Features
  * Remote: Add support for AWS SigV4 auth method for remote_write. #8509
  * PromQL: Allow negative offsets. Behind --enable-feature=promql-negative-offset flag. #8487
  * UI: Add advanced auto-completion, syntax highlighting and linting to graph page query input. #8634
  + Enhancements
  * PromQL: Add last_over_time, sgn, clamp functions. #8457
  * Scrape: Add support for specifying type of Authorization header credentials with Bearer by default. #8512
  * Scrape: Add follow_redirects option to scrape configuration. #8546
  * Remote: Allow retries on HTTP 429 response code for remote_write. #8237 #8477
  * Remote: Allow configuring custom headers for remote_read. #8516
  * UI: Hitting Enter now triggers new query. #8581
  * UI: Better handling of long rule and names on the /rules and /targets pages. #8608 #8609
  * UI: Add collapse/expand all button on the /targets page. #8486
- Upgrade to upstream version 2.25.0
  + Features
  * Include a new `--enable-feature=` flag that enables experimental features.
  + Enhancements
  * Add optional name property to testgroup for better test failure output. #8440
  * Add warnings into React Panel on the Graph page. #8427
  * TSDB: Increase the number of buckets for the compaction duration metric. #8342
  * Remote: Allow passing along custom remote_write HTTP headers. #8416
  * Mixins: Scope grafana configuration. #8332
  * Kubernetes SD: Add endpoint labels metadata. #8273
  * UI: Expose total number of label pairs in head in TSDB stats page. #8343
  * TSDB: Reload blocks every minute, to detect new blocks and enforce retention more often. #8343
  + Bug fixes
  * API: Fix global URL when external address has no port. #8359
  * Deprecate unused flag --alertmanager.timeout. #8407
- Upgrade to upstream version 2.24.1
  + Enhancements
  * Cache basic authentication results to significantly improve performance of HTTP endpoints.
- Upgrade to upstream version 2.24.0
  + Features
  * Add TLS and basic authentication to HTTP endpoints. #8316
  * promtool: Add check web-config subcommand to check web config files. #8319
  * promtool: Add tsdb create-blocks-from openmetrics subcommand to backfill metrics data from an OpenMetrics file. #8084
  + Enhancements
  * HTTP API: Fast-fail queries with only empty matchers. #8288
  * HTTP API: Support matchers for labels API. #8301
  * promtool: Improve checking of URLs passed on the command line. #7956
  * SD: Expose IPv6 as a label in EC2 SD. #7086
  * SD: Reuse EC2 client, reducing frequency of requesting credentials. #8311
  * TSDB: Add logging when compaction takes more than the block time range. #8151
  * TSDB: Avoid unnecessary GC runs after compaction. #8276
- Upgrade to upstream version 2.23.0
  + Changes
  * UI: Make the React UI default. #8142
  * Remote write: The following metrics were removed/renamed in remote write. #6815
    &gt; prometheus_remote_storage_succeeded_samples_total was removed and prometheus_remote_storage_samples_total was introduced for all the samples attempted to send.
    &gt; prometheus_remote_storage_sent_bytes_total was removed and replaced with prometheus_remote_storage_samples_bytes_total and prometheus_remote_storage_metadata_bytes_total.
    &gt; prometheus_remote_storage_failed_samples_total -&gt; prometheus_remote_storage_samples_failed_total .
    &gt; prometheus_remote_storage_retried_samples_total -&gt; prometheus_remote_storage_samples_retried_total.
    &gt; prometheus_remote_storage_dropped_samples_total -&gt; prometheus_remote_storage_samples_dropped_total.
    &gt; prometheus_remote_storage_pending_samples -&gt; prometheus_remote_storage_samples_pending.
  * Remote: Do not collect non-initialized timestamp metrics. #8060
  + Enhancements
  * Remote write: Added a metric prometheus_remote_storage_max_samples_per_send for remote write. #8102
  * TSDB: Make the snapshot directory name always the same length. #8138
  * TSDB: Create a checkpoint only once at the end of all head compactions. #8067
  * TSDB: Avoid Series API from hitting the chunks. #8050
  * TSDB: Cache label name and last value when adding series during compactions making compactions faster. #8192
  * PromQL: Improved performance of Hash method making queries a bit faster. #8025
  * promtool: tsdb list now prints block sizes. #7993
  * promtool: Calculate mint and maxt per test avoiding unnecessary calculations. #8096
  * SD: Add filtering of services to Docker Swarm SD. #8074</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621425600">- Refresh patches
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.27.1 (jsc#SLE-18254)
  + Bugfix:
  * SECURITY: Fix arbitrary redirects under the /new endpoint (CVE-2021-29622, bsc#1186242)
- Upgrade to upstream version 2.27.0
  + Features:
  * Promtool: Retroactive rule evaluation functionality. #7675
  * Configuration: Environment variable expansion for external labels. Behind --enable-feature=expand-external-labels flag. #8649
  * TSDB: Add a flag(--storage.tsdb.max-block-chunk-segment-size) to control the max chunks file size of the blocks for small Prometheus instances. #8478
  * UI: Add a dark theme. #8604
  * AWS Lightsail Discovery: Add AWS Lightsail Discovery. #8693
  * Docker Discovery: Add Docker Service Discovery. #8629
  * OAuth: Allow OAuth 2.0 to be used anywhere an HTTP client is used. #8761
  * Remote Write: Send exemplars via remote write. Experimental and disabled by default. #8296
  + Enhancements:
  * Digital Ocean Discovery: Add __meta_digitalocean_vpc label. #8642
  * Scaleway Discovery: Read Scaleway secret from a file. #8643
  * Scrape: Add configurable limits for label size and count. #8777
  * UI: Add 16w and 26w time range steps. #8656
  * Templating: Enable parsing strings in humanize functions. #8682
  + Bugfixes:
  * UI: Provide errors instead of blank page on TSDB Status Page. #8654 #8659
  * TSDB: Do not panic when writing very large records to the WAL. #8790
  * TSDB: Avoid panic when mmaped memory is referenced after the file is closed. #8723
  * Scaleway Discovery: Fix nil pointer dereference. #8737
  * Consul Discovery: Restart no longer required after config update with no targets. #8766</changelog>
  <changelog author="witold.bedyk@suse.com" date="1625745600">- Provide and reload firewalld configuration only for:
  + openSUSE Leap 15.0, 15.1, 15.2
  + SUSE SLE15, SLE15 SP1, SLE15 SP2</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * prometheus.service</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642593600">- Updated patches:
  + Changed:
  * 0002-Default-settings.patch
  + Removed:
  * 0003-Add-Uyuni-service-discovery.patch
- Use obs-service-go_modules
- Upgrade to upstream version 2.32.1 (jsc#SLE-22863)
  + Bugfixes:
  * Scrape: Fix reporting metrics when sample limit is reached
    during the report. #9996
  * Scrape: Ensure that scrape interval and scrape timeout are
    always set. #10023
  * TSDB: Expose and fix bug in iterators' Seek() method. #10030
- Upgrade to upstream version 2.32.0
  + Change:
  * remote-write: Change default max retry time from 100ms to
    5 seconds. #9634
  + Features:
  * Agent: New mode of operation optimized for remote-write only
    scenarios, without local storage.
  * Promtool: Add promtool check service-discovery command. #8970
  + Enhancements:
  * Promtool: Improve test output. #8064
  * Promtool: Use kahan summation for better numerical stability.
  * Remote-write: Reuse memory for marshalling. #9412
  * Scrape: Add scrape_body_size_bytes scrape metric behind the
  - -enable-feature=extra-scrape-metrics flag. #9569
  * TSDB: Add windows arm64 support. #9703
  * TSDB: Optimize query by skipping unneeded sorting in TSDB.
  * Templates: Support int and uint as datatypes for template
    formatting. #9680
  * UI: Prefer rate over rad, delta over deg, and count over cos
    in autocomplete. #9688
  + Bugfixes:
  * TSDB: Add more size checks when writing individual sections
    in the index. #9710
  * PromQL: Make deriv() return zero values for constant series.
  * TSDB: Fix panic when checkpoint directory is empty. #9687
  * TSDB: Fix panic, out of order chunks, and race warning during
    WAL replay. #9856
  * UI: Correctly render links for targets with IPv6 addresses
    that contain a Zone ID. #9853
  * Promtool: Fix checking of authorization.credentials_file and
    bearer_token_file fields. #9883
  * Uyuni SD: Fix null pointer exception during initialization.
  * TSDB: Fix queries after a failed snapshot replay. #9980
- Upgrade to upstream version 2.31.1
  + Bugfix:
  * SD: Fix a panic when the experimental discovery manager
    receives targets during a reload. #9656
- Upgrade to upstream version 2.31.0
  + Change:
  * UI: Remove standard PromQL editor in favour of the
    codemirror-based editor. #9452
  + Features:
  * PromQL: Add trigonometric functions and atan2 binary
    operator. #9239 #9248 #9515
  * Remote: Add support for exemplar in the remote write receiver
    endpoint. #9319 #9414
  * SD: Add PuppetDB service discovery. #8883
  * SD: Add Uyuni service discovery. #8190
  * Web: Add support for security-related HTTP headers. #9546
  + Enhancements:
  * Azure SD: Add proxy_url, follow_redirects, tls_config. #9267
  * Backfill: Add --max-block-duration in promtool
    create-blocks-from rules. #9511
  * Config: Print human-readable sizes with unit instead of raw
    numbers. #9361
  * HTTP: Re-enable HTTP/2. #9398
  * Kubernetes SD: Warn user if number of endpoints exceeds
    limit. #9467
  * OAuth2: Add TLS configuration to token requests. #9550
  * PromQL: Several optimizations. #9365 #9360 #9362 #9552
  * PromQL: Make aggregations deterministic in instant queries.
  * Rules: Add the ability to limit number of alerts or series.
  * SD: Experimental discovery manager to avoid restarts upon
    reload.
  * UI: Debounce timerange setting changes. #9359
  + Bugfixes:
  * Backfill: Apply rule labels after query labels. #9421
  * Scrape: Resolve conflicts between multiple exported label
    prefixes. #9479 #9518
  * Scrape: Restart scrape loops when __scrape_interval__ is
    changed. #9551
  * TSDB: Fix memory leak in samples deletion. #9151
  * UI: Use consistent margin-bottom for all alert kinds. #9318
- Upgrade to upstream version 2.30.3
  + Bugfixes:
  * TSDB: Fix panic on failed snapshot replay. #9438
  * TSDB: Don't fail snapshot replay with exemplar storage
    disabled when the snapshot contains exemplars. #9438
- Upgrade to upstream version 2.30.2
  + Bugfix:
  * TSDB: Don't error on overlapping m-mapped chunks during WAL
    replay. #9381
- Upgrade to upstream version 2.30.1
  + Enhancements:
  * Remote Write: Redact remote write URL when used for metric
    label. #9383
  * UI: Redact remote write URL and proxy URL passwords in the
    /config page. #9408
  + Bugfixes:
  * promtool rules backfill: Prevent creation of data before the
    start time. #9339
  * promtool rules backfill: Do not query after the end time.
  * Azure SD: Fix panic when no computername is set. #9387
- Upgrade to upstream version 2.30.0
  + Features:
  * experimental TSDB: Snapshot in-memory chunks on shutdown for
    faster restarts. #7229
  * experimental Scrape: Configure scrape interval and scrape
    timeout via relabeling using __scrape_interval__ and
    __scrape_timeout__ labels respectively. #8911
  * Scrape: Add scrape_timeout_seconds and scrape_sample_limit
    metric. #9247 #9295
  + Enhancements:
  * Scrape: Add --scrape.timestamp-tolerance flag to adjust
    scrape timestamp tolerance when enabled via
  - -scrape.adjust-timestamps. #9283
  * Remote Write: Improve throughput when sending exemplars.
  * TSDB: Optimise WAL loading by removing extra map and caching
    min-time #9160
  * promtool: Speed up checking for duplicate rules. #9262/#9306
  * Scrape: Reduce allocations when parsing the metrics. #9299
  * docker_sd: Support host network mode #9125
  + Bugfixes:
  * Exemplars: Fix panic when resizing exemplar storage from 0 to
    a non-zero size. #9286
  * TSDB: Correctly decrement
    prometheus_tsdb_head_active_appenders when the append has no
    samples. #9230
  * promtool rules backfill: Return 1 if backfill was
    unsuccessful. #9303
  * promtool rules backfill: Avoid creation of overlapping
    blocks. #9324
  * config: Fix a panic when reloading configuration with a null
    relabel action. #9224
- Upgrade to upstream version 2.29.2
  + Bugfixes:
  * Fix Kubernetes SD failing to discover Ingress in
    Kubernetes v1.22. #9205
  * Fix data race in loading write-ahead-log (WAL). #9259
- Upgrade to upstream version 2.29.1
  + Bugfixes:
  * TSDB: align atomically accessed int64 to prevent panic in
    32-bit archs. #9192
- Upgrade to upstream version 2.29.0
  + Changes:
  * Promote --storage.tsdb.allow-overlapping-blocks flag to
    stable. #9117
  * Promote --storage.tsdb.retention.size flag to stable. #9004
  + Features:
  * Add Kuma service discovery. #8844
  * Add present_over_time PromQL function. #9097
  * Allow configuring exemplar storage via file and make it
    reloadable. #8974
  * UI: Allow selecting time range with mouse drag. #8977
  * promtool: Add feature flags flag --enable-feature. #8958
  * promtool: Add file_sd file validation. #8950
  + Enhancements:
  * Reduce blocking of outgoing remote write requests from series
    garbage collection. #9109
  * Improve write-ahead-log decoding performance. #9106
  * Improve append performance in TSDB by reducing mutexes usage.
  * Allow configuring max_samples_per_send for remote write
    metadata. #8959
  * Add __meta_gce_interface_ipv4_&lt;name&gt; meta label to GCE
    discovery. #8978
  * Add __meta_ec2_availability_zone_id meta label to EC2
    discovery. #8896
  * Add __meta_azure_machine_computer_name meta label to Azure
    discovery. #9112
  * Add __meta_hetzner_hcloud_labelpresent_&lt;labelname&gt; meta label
    to Hetzner discovery. #9028
  * promtool: Add compaction efficiency to promtool tsdb analyze
    reports. #8940
  * promtool: Allow configuring max block duration for
    backfilling via --max-block-duration flag. #8919
  * UI: Add sorting and filtering to flags page. #8988
  * UI: Improve alerts page rendering performance. #9005
  + Bugfixes:
  * Log when total symbol size exceeds 2^32 bytes, causing
    compaction to fail, and skip compaction. #9104
  * Fix incorrect target_limit reloading of zero value. #9120
  * Fix head GC and pending readers race condition. #9081
  * Fix timestamp handling in OpenMetrics parser. #9008
  * Fix potential duplicate metrics in /federate endpoint when
    specifying multiple matchers. #8885
  * Fix server configuration and validation for authentication
    via client cert. #9123
  * Allow start and end again as label names in PromQL queries.
    They were disallowed since the introduction of @ timestamp
    feature. #9119
- Upgrade to upstream version 2.28.1
  + Bugfixes:
  * HTTP SD: Allow charset specification in Content-Type header.
  * HTTP SD: Fix handling of disappeared target groups. #9019
  * Fix incorrect log-level handling after moving to go-kit/log.
- Upgrade to upstream version 2.28.0
  + Change:
  * UI: Make the new experimental PromQL editor the default.
  + Features:
  * Linode SD: Add Linode service discovery. #8846
  * HTTP SD: Add generic HTTP-based service discovery. #8839
  * Kubernetes SD: Allow configuring API Server access via a
    kubeconfig file. #8811
  * UI: Add exemplar display support to the graphing interface.
  * Consul SD: Add namespace support for Consul Enterprise. #8900
  + Enhancements:
  * Promtool: Allow silencing output when importing / backfilling
    data. #8917
  * Consul SD: Support reading tokens from file. #8926
  * Rules: Add a new .ExternalURL alert field templating
    variable, containing the external URL of the Prometheus
    server. #8878
  * Scrape: Add experimental body_size_limit scrape configuration
    setting to limit the allowed response body size for target
    scrapes. #8833 #8886
  * Kubernetes SD: Add ingress class name label for ingress
    discovery. #8916
  * UI: Show a startup screen with progress bar when the TSDB is
    not ready yet. #8662 #8908 #8909 #8946
  * SD: Add a target creation failure counter
    prometheus_target_sync_failed_total and improve target
    creation failure handling. #8786
  * TSDB: Improve validation of exemplar label set length. #8816
  * TSDB: Add a prometheus_tsdb_clean_start metric that indicates
    whether a TSDB lockfile from a previous run still existed
    upon startup. #8824
  + Bugfixes:
  * UI: In the experimental PromQL editor, fix autocompletion and
    parsing for special float values and improve series metadata
    fetching. #8856
  * TSDB: When merging chunks, split resulting chunks if they
    would contain more than the maximum of 120 samples. #8582
  * SD: Fix the computation of the
    prometheus_sd_discovered_targets metric when using multiple
    service discoveries. #8828</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645185600">- Require Go 1.16+
- Do not build on s390 architecture.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645531200">- Fix Firewalld configuration file location (bsc#1196300)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646654400">- Update vendor tarball with prometheus/client_golang 1.12.1
  (bsc#1196338)
  * Added 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1647604800">- Create firewalld-prometheus-config subpackage (bsc#1197042,
  jsc#SLE-24374, jsc#SLE-24375)</changelog>
  <changelog author="jgonzalez@suse.com" date="1649332800">- Build firewalld-prometheus-config only for SUSE Linux Enterprise
  15, 15.1 and 15.2, and require firewalld for it
- firewalld-prometheus-config needs to be a Recommends, not a
  Requires, as prometheus does not require it to run</changelog>
</package>
<package pkgid="326801950565cdcb05156a0338c133b95cd6704c3df9bbadfed68dd817a7a9dc" name="golang-github-prometheus-prometheus" arch="src">
  <version epoch="0" ver="2.32.1" rel="150100.4.9.2"/>
  <changelog author="mrostecki@opensuse.org" date="1574251200">- Remove firewalld files. They are installed in the main firewalld
  package.</changelog>
  <changelog author="jan.fajerski@suse.com" date="1574337600">- Remove prometheus.firewall.xml source file</changelog>
  <changelog author="jcavalheiro@suse.com" date="1574683200">- Patch macros on spec file to support builds on SLE 12</changelog>
  <changelog author="witold.bedyk@suse.com" date="1580126400">- Update to Prometheus 2.11.2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1589371200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch:
  + Adapt service discovery to the new Uyuni API endpoints
  + Modified spec file: force golang 1.12 to fix build issues in SLE15SP2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591185600">- Update change log and spec file
  + Modified spec file: default to golang 1.14 to avoid "have choice" build issues in OBS.
  + Rebase and update patches for version 2.18.0
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Update to 2.18.0
  + Features
  * Tracing: Added experimental Jaeger support #7148
  + Changes
  * Federation: Only use local TSDB for federation (ignore remote read). #7096
  * Rules: `rule_evaluations_total` and `rule_evaluation_failures_total` have a `rule_group` label now. #7094
  + Enhancements
  * TSDB: Significantly reduce WAL size kept around after a block cut. #7098
  * Discovery: Add `architecture` meta label for EC2. #7000
  + Bug fixes
  * UI: Fixed wrong MinTime reported by /status. #7182
  * React UI: Fixed multiselect legend on OSX. #6880
  * Remote Write: Fixed blocked resharding edge case. #7122
  * Remote Write: Fixed remote write not updating on relabel configs change. #7073
- Changes from 2.17.2
  + Bug fixes
  * Federation: Register federation metrics #7081
  * PromQL: Fix panic in parser error handling #7132
  * Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
  * TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
  * TSDB: Make isolation more robust to panics in web handlers #7129 #7136
- Changes from 2.17.1
  + Bug fixes
  * TSDB: Fix query performance regression that increased memory and CPU usage #7051
- Changes from 2.17.0
  + Features
  * TSDB: Support isolation #6841
  * This release implements isolation in TSDB. API queries and recording rules are
    guaranteed to only see full scrapes and full recording rules. This comes with a
    certain overhead in resource usage. Depending on the situation, there might be
    some increase in memory usage, CPU usage, or query latency.
  + Enhancements
  * PromQL: Allow more keywords as metric names #6933
  * React UI: Add normalization of localhost URLs in targets page #6794
  * Remote read: Read from remote storage concurrently #6770
  * Rules: Mark deleted rule series as stale after a reload #6745
  * Scrape: Log scrape append failures as debug rather than warn #6852
  * TSDB: Improve query performance for queries that partially hit the head #6676
  * Consul SD: Expose service health as meta label #5313
  * EC2 SD: Expose EC2 instance lifecycle as meta label #6914
  * Kubernetes SD: Expose service type as meta label for K8s service role #6684
  * Kubernetes SD: Expose label_selector and field_selector #6807
  * Openstack SD: Expose hypervisor id as meta label #6962
  + Bug fixes
  * PromQL: Do not escape HTML-like chars in query log #6834 #6795
  * React UI: Fix data table matrix values #6896
  * React UI: Fix new targets page not loading when using non-ASCII characters #6892
  * Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
  * Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
  * Scrape: Prevent removal of metric names upon relabeling #6891
  * Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
  * Scrape: Fix crash when reloads are separated by two scrape intervals #7011
- Changes from 2.16.0
  + Features
  * React UI: Support local timezone on /graph #6692
  * PromQL: add absent_over_time query function #6490
  * Adding optional logging of queries to their own file #6520
  + Enhancements
  * React UI: Add support for rules page and "Xs ago" duration displays #6503
  * React UI: alerts page, replace filtering togglers tabs with checkboxes #6543
  * TSDB: Export metric for WAL write errors #6647
  * TSDB: Improve query performance for queries that only touch the most recent 2h of data. #6651
  * PromQL: Refactoring in parser errors to improve error messages #6634
  * PromQL: Support trailing commas in grouping opts #6480
  * Scrape: Reduce memory usage on reloads by reusing scrape cache #6670
  * Scrape: Add metrics to track bytes and entries in the metadata cache #6675
  * promtool: Add support for line-column numbers for invalid rules output #6533
  * Avoid restarting rule groups when it is unnecessary #6450
  + Bug fixes
  * React UI: Send cookies on fetch() on older browsers #6553
  * React UI: adopt grafana flot fix for stacked graphs #6603
  * React UI: broken graph page browser history so that back button works as expected #6659
  * TSDB: ensure compactionsSkipped metric is registered, and log proper error if one is returned from head.Init #6616
  * TSDB: return an error on ingesting series with duplicate labels #6664
  * PromQL: Fix unary operator precedence #6579
  * PromQL: Respect query.timeout even when we reach query.max-concurrency #6712
  * PromQL: Fix string and parentheses handling in engine, which affected React UI #6612
  * PromQL: Remove output labels returned by absent() if they are produced by multiple identical label matchers #6493
  * Scrape: Validate that OpenMetrics input ends with `# EOF` #6505
  * Remote read: return the correct error if configs can't be marshal'd to JSON #6622
  * Remote write: Make remote client `Store` use passed context, which can affect shutdown timing #6673
  * Remote write: Improve sharding calculation in cases where we would always be consistently behind by tracking pendingSamples #6511
  * Ensure prometheus_rule_group metrics are deleted when a rule group is removed #6693
- Changes from 2.15.2
  + Bug fixes
  * TSDB: Fixed support for TSDB blocks built with Prometheus before 2.1.0. #6564
  * TSDB: Fixed block compaction issues on Windows. #6547
- Changes from 2.15.1
  + Bug fixes
  * TSDB: Fixed race on concurrent queries against same data. #6512
- Changes from 2.15.0
  + Features
  * API: Added new endpoint for exposing per metric metadata `/metadata`. #6420 #6442
  + Changes
  * Discovery: Removed `prometheus_sd_kubernetes_cache_*` metrics. Additionally `prometheus_sd_kubernetes_workqueue_latency_seconds` and `prometheus_sd_kubernetes_workqueue_work_duration_seconds` metrics now show correct values in seconds. #6393
  * Remote write: Changed `query` label on `prometheus_remote_storage_*` metrics to `remote_name` and `url`. #6043
  + Enhancements
  * TSDB: Significantly reduced memory footprint of loaded TSDB blocks. #6418 #6461
  * TSDB: Significantly optimized what we buffer during compaction which should result in lower memory footprint during compaction. #6422 #6452 #6468 #6475
  * TSDB: Improve replay latency. #6230
  * TSDB: WAL size is now used for size based retention calculation. #5886
  * Remote read: Added query grouping and range hints to the remote read request #6401
  * Remote write: Added `prometheus_remote_storage_sent_bytes_total` counter per queue. #6344
  * promql: Improved PromQL parser performance. #6356
  * React UI: Implemented missing pages like `/targets` #6276, TSDB status page #6281 #6267 and many other fixes and performance improvements.
  * promql: Prometheus now accepts spaces between time range and square bracket. e.g `[ 5m]` #6065
  + Bug fixes
  * Config: Fixed alertmanager configuration to not miss targets when configurations are similar. #6455
  * Remote write: Value of `prometheus_remote_storage_shards_desired` gauge shows raw value of desired shards and it's updated correctly. #6378
  * Rules: Prometheus now fails the evaluation of rules and alerts where metric results collide with labels specified in `labels` field. #6469
  * API: Targets Metadata API `/targets/metadata` now accepts empty `match_targets` parameter as in the spec. #6303
- Changes from 2.14.0
  + Features
  * API: `/api/v1/status/runtimeinfo` and `/api/v1/status/buildinfo` endpoints added for use by the React UI. #6243
  * React UI: implement the new experimental React based UI. #5694 and many more
  * Can be found by under `/new`.
  * Not all pages are implemented yet.
  * Status: Cardinality statistics added to the Runtime &amp; Build Information page. #6125
  + Enhancements
  * Remote write: fix delays in remote write after a compaction. #6021
  * UI: Alerts can be filtered by state. #5758
  + Bug fixes
  * Ensure warnings from the API are escaped. #6279
  * API: lifecycle endpoints return 403 when not enabled. #6057
  * Build: Fix Solaris build. #6149
  * Promtool: Remove false duplicate rule warnings when checking rule files with alerts. #6270
  * Remote write: restore use of deduplicating logger in remote write. #6113
  * Remote write: do not reshard when unable to send samples. #6111
  * Service discovery: errors are no longer logged on context cancellation. #6116, #6133
  * UI: handle null response from API properly. #6071
- Changes from 2.13.1
  + Bug fixes
  * Fix panic in ARM builds of Prometheus. #6110
  * promql: fix potential panic in the query logger. #6094
  * Multiple errors of http: superfluous response.WriteHeader call in the logs. #6145
- Changes from 2.13.0
  + Enhancements
  * Metrics: renamed prometheus_sd_configs_failed_total to prometheus_sd_failed_configs and changed to Gauge #5254
  * Include the tsdb tool in builds. #6089
  * Service discovery: add new node address types for kubernetes. #5902
  * UI: show warnings if query have returned some warnings. #5964
  * Remote write: reduce memory usage of the series cache. #5849
  * Remote read: use remote read streaming to reduce memory usage. #5703
  * Metrics: added metrics for remote write max/min/desired shards to queue manager. #5787
  * Promtool: show the warnings during label query. #5924
  * Promtool: improve error messages when parsing bad rules. #5965
  * Promtool: more promlint rules. #5515
  + Bug fixes
  * UI: Fix a Stored DOM XSS vulnerability with query history [CVE-2019-10215](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10215). #6098
  * Promtool: fix recording inconsistency due to duplicate labels. #6026
  * UI: fixes service-discovery view when accessed from unhealthy targets. #5915
  * Metrics format: OpenMetrics parser crashes on short input. #5939
  * UI: avoid truncated Y-axis values. #6014
- Changes from 2.12.0
  + Features
  * Track currently active PromQL queries in a log file. #5794
  * Enable and provide binaries for `mips64` / `mips64le` architectures. #5792
  + Enhancements
  * Improve responsiveness of targets web UI and API endpoint. #5740
  * Improve remote write desired shards calculation. #5763
  * Flush TSDB pages more precisely. tsdb#660
  * Add `prometheus_tsdb_retention_limit_bytes` metric. tsdb#667
  * Add logging during TSDB WAL replay on startup. tsdb#662
  * Improve TSDB memory usage. tsdb#653, tsdb#643, tsdb#654, tsdb#642, tsdb#627
  + Bug fixes
  * Check for duplicate label names in remote read. #5829
  * Mark deleted rules' series as stale on next evaluation. #5759
  * Fix JavaScript error when showing warning about out-of-sync server time. #5833
  * Fix `promtool test rules` panic when providing empty `exp_labels`. #5774
  * Only check last directory when discovering checkpoint number. #5756
  * Fix error propagation in WAL watcher helper functions. #5741
  * Correctly handle empty labels from alert templates. #5845</changelog>
  <changelog author="witold.bedyk@suse.com" date="1596196800">- Update 0003-Add-Uyuni-service-discovery.patch:
  + Add support for Prometheus exporters proxy</changelog>
  <changelog author="pseidensal@suse.com" date="1598875200">- Update package with changes from `server:monitoring` bsc#1175478
  Left out removal of firewalld related configuration files as SLE-15-SP1's
  `firewalld` package does not contain prometheus configuration yet.</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update to upstream version 2.22.1
- Update packaging
  * Remove systemd and shadow hard requirements
  * use systemd-sysusers to configure the user in a dedicated 'system-user-prometheus' subpackage
  * add 'prometheus' package alias</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Uyuni: `hostname` label is now set to FQDN instead of IP
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1620129600">- Add tarball with vendor modules and web assets
- Uyuni: Read formula data from exporters map
- Uyuni: Add support for TLS targets
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.26.0
  + Changes
  * Alerting: Using Alertmanager v2 API by default. #8626
  * Prometheus/Promtool: Binaries are now printing help and usage to stdout instead of stderr. #8542
  + Features
  * Remote: Add support for AWS SigV4 auth method for remote_write. #8509
  * PromQL: Allow negative offsets. Behind --enable-feature=promql-negative-offset flag. #8487
  * UI: Add advanced auto-completion, syntax highlighting and linting to graph page query input. #8634
  + Enhancements
  * PromQL: Add last_over_time, sgn, clamp functions. #8457
  * Scrape: Add support for specifying type of Authorization header credentials with Bearer by default. #8512
  * Scrape: Add follow_redirects option to scrape configuration. #8546
  * Remote: Allow retries on HTTP 429 response code for remote_write. #8237 #8477
  * Remote: Allow configuring custom headers for remote_read. #8516
  * UI: Hitting Enter now triggers new query. #8581
  * UI: Better handling of long rule and names on the /rules and /targets pages. #8608 #8609
  * UI: Add collapse/expand all button on the /targets page. #8486
- Upgrade to upstream version 2.25.0
  + Features
  * Include a new `--enable-feature=` flag that enables experimental features.
  + Enhancements
  * Add optional name property to testgroup for better test failure output. #8440
  * Add warnings into React Panel on the Graph page. #8427
  * TSDB: Increase the number of buckets for the compaction duration metric. #8342
  * Remote: Allow passing along custom remote_write HTTP headers. #8416
  * Mixins: Scope grafana configuration. #8332
  * Kubernetes SD: Add endpoint labels metadata. #8273
  * UI: Expose total number of label pairs in head in TSDB stats page. #8343
  * TSDB: Reload blocks every minute, to detect new blocks and enforce retention more often. #8343
  + Bug fixes
  * API: Fix global URL when external address has no port. #8359
  * Deprecate unused flag --alertmanager.timeout. #8407
- Upgrade to upstream version 2.24.1
  + Enhancements
  * Cache basic authentication results to significantly improve performance of HTTP endpoints.
- Upgrade to upstream version 2.24.0
  + Features
  * Add TLS and basic authentication to HTTP endpoints. #8316
  * promtool: Add check web-config subcommand to check web config files. #8319
  * promtool: Add tsdb create-blocks-from openmetrics subcommand to backfill metrics data from an OpenMetrics file. #8084
  + Enhancements
  * HTTP API: Fast-fail queries with only empty matchers. #8288
  * HTTP API: Support matchers for labels API. #8301
  * promtool: Improve checking of URLs passed on the command line. #7956
  * SD: Expose IPv6 as a label in EC2 SD. #7086
  * SD: Reuse EC2 client, reducing frequency of requesting credentials. #8311
  * TSDB: Add logging when compaction takes more than the block time range. #8151
  * TSDB: Avoid unnecessary GC runs after compaction. #8276
- Upgrade to upstream version 2.23.0
  + Changes
  * UI: Make the React UI default. #8142
  * Remote write: The following metrics were removed/renamed in remote write. #6815
    &gt; prometheus_remote_storage_succeeded_samples_total was removed and prometheus_remote_storage_samples_total was introduced for all the samples attempted to send.
    &gt; prometheus_remote_storage_sent_bytes_total was removed and replaced with prometheus_remote_storage_samples_bytes_total and prometheus_remote_storage_metadata_bytes_total.
    &gt; prometheus_remote_storage_failed_samples_total -&gt; prometheus_remote_storage_samples_failed_total .
    &gt; prometheus_remote_storage_retried_samples_total -&gt; prometheus_remote_storage_samples_retried_total.
    &gt; prometheus_remote_storage_dropped_samples_total -&gt; prometheus_remote_storage_samples_dropped_total.
    &gt; prometheus_remote_storage_pending_samples -&gt; prometheus_remote_storage_samples_pending.
  * Remote: Do not collect non-initialized timestamp metrics. #8060
  + Enhancements
  * Remote write: Added a metric prometheus_remote_storage_max_samples_per_send for remote write. #8102
  * TSDB: Make the snapshot directory name always the same length. #8138
  * TSDB: Create a checkpoint only once at the end of all head compactions. #8067
  * TSDB: Avoid Series API from hitting the chunks. #8050
  * TSDB: Cache label name and last value when adding series during compactions making compactions faster. #8192
  * PromQL: Improved performance of Hash method making queries a bit faster. #8025
  * promtool: tsdb list now prints block sizes. #7993
  * promtool: Calculate mint and maxt per test avoiding unnecessary calculations. #8096
  * SD: Add filtering of services to Docker Swarm SD. #8074</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621425600">- Refresh patches
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.27.1 (jsc#SLE-18254)
  + Bugfix:
  * SECURITY: Fix arbitrary redirects under the /new endpoint (CVE-2021-29622, bsc#1186242)
- Upgrade to upstream version 2.27.0
  + Features:
  * Promtool: Retroactive rule evaluation functionality. #7675
  * Configuration: Environment variable expansion for external labels. Behind --enable-feature=expand-external-labels flag. #8649
  * TSDB: Add a flag(--storage.tsdb.max-block-chunk-segment-size) to control the max chunks file size of the blocks for small Prometheus instances. #8478
  * UI: Add a dark theme. #8604
  * AWS Lightsail Discovery: Add AWS Lightsail Discovery. #8693
  * Docker Discovery: Add Docker Service Discovery. #8629
  * OAuth: Allow OAuth 2.0 to be used anywhere an HTTP client is used. #8761
  * Remote Write: Send exemplars via remote write. Experimental and disabled by default. #8296
  + Enhancements:
  * Digital Ocean Discovery: Add __meta_digitalocean_vpc label. #8642
  * Scaleway Discovery: Read Scaleway secret from a file. #8643
  * Scrape: Add configurable limits for label size and count. #8777
  * UI: Add 16w and 26w time range steps. #8656
  * Templating: Enable parsing strings in humanize functions. #8682
  + Bugfixes:
  * UI: Provide errors instead of blank page on TSDB Status Page. #8654 #8659
  * TSDB: Do not panic when writing very large records to the WAL. #8790
  * TSDB: Avoid panic when mmaped memory is referenced after the file is closed. #8723
  * Scaleway Discovery: Fix nil pointer dereference. #8737
  * Consul Discovery: Restart no longer required after config update with no targets. #8766</changelog>
  <changelog author="witold.bedyk@suse.com" date="1625745600">- Provide and reload firewalld configuration only for:
  + openSUSE Leap 15.0, 15.1, 15.2
  + SUSE SLE15, SLE15 SP1, SLE15 SP2</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * prometheus.service</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642593600">- Updated patches:
  + Changed:
  * 0002-Default-settings.patch
  + Removed:
  * 0003-Add-Uyuni-service-discovery.patch
- Use obs-service-go_modules
- Upgrade to upstream version 2.32.1 (jsc#SLE-22863)
  + Bugfixes:
  * Scrape: Fix reporting metrics when sample limit is reached
    during the report. #9996
  * Scrape: Ensure that scrape interval and scrape timeout are
    always set. #10023
  * TSDB: Expose and fix bug in iterators' Seek() method. #10030
- Upgrade to upstream version 2.32.0
  + Change:
  * remote-write: Change default max retry time from 100ms to
    5 seconds. #9634
  + Features:
  * Agent: New mode of operation optimized for remote-write only
    scenarios, without local storage.
  * Promtool: Add promtool check service-discovery command. #8970
  + Enhancements:
  * Promtool: Improve test output. #8064
  * Promtool: Use kahan summation for better numerical stability.
  * Remote-write: Reuse memory for marshalling. #9412
  * Scrape: Add scrape_body_size_bytes scrape metric behind the
  - -enable-feature=extra-scrape-metrics flag. #9569
  * TSDB: Add windows arm64 support. #9703
  * TSDB: Optimize query by skipping unneeded sorting in TSDB.
  * Templates: Support int and uint as datatypes for template
    formatting. #9680
  * UI: Prefer rate over rad, delta over deg, and count over cos
    in autocomplete. #9688
  + Bugfixes:
  * TSDB: Add more size checks when writing individual sections
    in the index. #9710
  * PromQL: Make deriv() return zero values for constant series.
  * TSDB: Fix panic when checkpoint directory is empty. #9687
  * TSDB: Fix panic, out of order chunks, and race warning during
    WAL replay. #9856
  * UI: Correctly render links for targets with IPv6 addresses
    that contain a Zone ID. #9853
  * Promtool: Fix checking of authorization.credentials_file and
    bearer_token_file fields. #9883
  * Uyuni SD: Fix null pointer exception during initialization.
  * TSDB: Fix queries after a failed snapshot replay. #9980
- Upgrade to upstream version 2.31.1
  + Bugfix:
  * SD: Fix a panic when the experimental discovery manager
    receives targets during a reload. #9656
- Upgrade to upstream version 2.31.0
  + Change:
  * UI: Remove standard PromQL editor in favour of the
    codemirror-based editor. #9452
  + Features:
  * PromQL: Add trigonometric functions and atan2 binary
    operator. #9239 #9248 #9515
  * Remote: Add support for exemplar in the remote write receiver
    endpoint. #9319 #9414
  * SD: Add PuppetDB service discovery. #8883
  * SD: Add Uyuni service discovery. #8190
  * Web: Add support for security-related HTTP headers. #9546
  + Enhancements:
  * Azure SD: Add proxy_url, follow_redirects, tls_config. #9267
  * Backfill: Add --max-block-duration in promtool
    create-blocks-from rules. #9511
  * Config: Print human-readable sizes with unit instead of raw
    numbers. #9361
  * HTTP: Re-enable HTTP/2. #9398
  * Kubernetes SD: Warn user if number of endpoints exceeds
    limit. #9467
  * OAuth2: Add TLS configuration to token requests. #9550
  * PromQL: Several optimizations. #9365 #9360 #9362 #9552
  * PromQL: Make aggregations deterministic in instant queries.
  * Rules: Add the ability to limit number of alerts or series.
  * SD: Experimental discovery manager to avoid restarts upon
    reload.
  * UI: Debounce timerange setting changes. #9359
  + Bugfixes:
  * Backfill: Apply rule labels after query labels. #9421
  * Scrape: Resolve conflicts between multiple exported label
    prefixes. #9479 #9518
  * Scrape: Restart scrape loops when __scrape_interval__ is
    changed. #9551
  * TSDB: Fix memory leak in samples deletion. #9151
  * UI: Use consistent margin-bottom for all alert kinds. #9318
- Upgrade to upstream version 2.30.3
  + Bugfixes:
  * TSDB: Fix panic on failed snapshot replay. #9438
  * TSDB: Don't fail snapshot replay with exemplar storage
    disabled when the snapshot contains exemplars. #9438
- Upgrade to upstream version 2.30.2
  + Bugfix:
  * TSDB: Don't error on overlapping m-mapped chunks during WAL
    replay. #9381
- Upgrade to upstream version 2.30.1
  + Enhancements:
  * Remote Write: Redact remote write URL when used for metric
    label. #9383
  * UI: Redact remote write URL and proxy URL passwords in the
    /config page. #9408
  + Bugfixes:
  * promtool rules backfill: Prevent creation of data before the
    start time. #9339
  * promtool rules backfill: Do not query after the end time.
  * Azure SD: Fix panic when no computername is set. #9387
- Upgrade to upstream version 2.30.0
  + Features:
  * experimental TSDB: Snapshot in-memory chunks on shutdown for
    faster restarts. #7229
  * experimental Scrape: Configure scrape interval and scrape
    timeout via relabeling using __scrape_interval__ and
    __scrape_timeout__ labels respectively. #8911
  * Scrape: Add scrape_timeout_seconds and scrape_sample_limit
    metric. #9247 #9295
  + Enhancements:
  * Scrape: Add --scrape.timestamp-tolerance flag to adjust
    scrape timestamp tolerance when enabled via
  - -scrape.adjust-timestamps. #9283
  * Remote Write: Improve throughput when sending exemplars.
  * TSDB: Optimise WAL loading by removing extra map and caching
    min-time #9160
  * promtool: Speed up checking for duplicate rules. #9262/#9306
  * Scrape: Reduce allocations when parsing the metrics. #9299
  * docker_sd: Support host network mode #9125
  + Bugfixes:
  * Exemplars: Fix panic when resizing exemplar storage from 0 to
    a non-zero size. #9286
  * TSDB: Correctly decrement
    prometheus_tsdb_head_active_appenders when the append has no
    samples. #9230
  * promtool rules backfill: Return 1 if backfill was
    unsuccessful. #9303
  * promtool rules backfill: Avoid creation of overlapping
    blocks. #9324
  * config: Fix a panic when reloading configuration with a null
    relabel action. #9224
- Upgrade to upstream version 2.29.2
  + Bugfixes:
  * Fix Kubernetes SD failing to discover Ingress in
    Kubernetes v1.22. #9205
  * Fix data race in loading write-ahead-log (WAL). #9259
- Upgrade to upstream version 2.29.1
  + Bugfixes:
  * TSDB: align atomically accessed int64 to prevent panic in
    32-bit archs. #9192
- Upgrade to upstream version 2.29.0
  + Changes:
  * Promote --storage.tsdb.allow-overlapping-blocks flag to
    stable. #9117
  * Promote --storage.tsdb.retention.size flag to stable. #9004
  + Features:
  * Add Kuma service discovery. #8844
  * Add present_over_time PromQL function. #9097
  * Allow configuring exemplar storage via file and make it
    reloadable. #8974
  * UI: Allow selecting time range with mouse drag. #8977
  * promtool: Add feature flags flag --enable-feature. #8958
  * promtool: Add file_sd file validation. #8950
  + Enhancements:
  * Reduce blocking of outgoing remote write requests from series
    garbage collection. #9109
  * Improve write-ahead-log decoding performance. #9106
  * Improve append performance in TSDB by reducing mutexes usage.
  * Allow configuring max_samples_per_send for remote write
    metadata. #8959
  * Add __meta_gce_interface_ipv4_&lt;name&gt; meta label to GCE
    discovery. #8978
  * Add __meta_ec2_availability_zone_id meta label to EC2
    discovery. #8896
  * Add __meta_azure_machine_computer_name meta label to Azure
    discovery. #9112
  * Add __meta_hetzner_hcloud_labelpresent_&lt;labelname&gt; meta label
    to Hetzner discovery. #9028
  * promtool: Add compaction efficiency to promtool tsdb analyze
    reports. #8940
  * promtool: Allow configuring max block duration for
    backfilling via --max-block-duration flag. #8919
  * UI: Add sorting and filtering to flags page. #8988
  * UI: Improve alerts page rendering performance. #9005
  + Bugfixes:
  * Log when total symbol size exceeds 2^32 bytes, causing
    compaction to fail, and skip compaction. #9104
  * Fix incorrect target_limit reloading of zero value. #9120
  * Fix head GC and pending readers race condition. #9081
  * Fix timestamp handling in OpenMetrics parser. #9008
  * Fix potential duplicate metrics in /federate endpoint when
    specifying multiple matchers. #8885
  * Fix server configuration and validation for authentication
    via client cert. #9123
  * Allow start and end again as label names in PromQL queries.
    They were disallowed since the introduction of @ timestamp
    feature. #9119
- Upgrade to upstream version 2.28.1
  + Bugfixes:
  * HTTP SD: Allow charset specification in Content-Type header.
  * HTTP SD: Fix handling of disappeared target groups. #9019
  * Fix incorrect log-level handling after moving to go-kit/log.
- Upgrade to upstream version 2.28.0
  + Change:
  * UI: Make the new experimental PromQL editor the default.
  + Features:
  * Linode SD: Add Linode service discovery. #8846
  * HTTP SD: Add generic HTTP-based service discovery. #8839
  * Kubernetes SD: Allow configuring API Server access via a
    kubeconfig file. #8811
  * UI: Add exemplar display support to the graphing interface.
  * Consul SD: Add namespace support for Consul Enterprise. #8900
  + Enhancements:
  * Promtool: Allow silencing output when importing / backfilling
    data. #8917
  * Consul SD: Support reading tokens from file. #8926
  * Rules: Add a new .ExternalURL alert field templating
    variable, containing the external URL of the Prometheus
    server. #8878
  * Scrape: Add experimental body_size_limit scrape configuration
    setting to limit the allowed response body size for target
    scrapes. #8833 #8886
  * Kubernetes SD: Add ingress class name label for ingress
    discovery. #8916
  * UI: Show a startup screen with progress bar when the TSDB is
    not ready yet. #8662 #8908 #8909 #8946
  * SD: Add a target creation failure counter
    prometheus_target_sync_failed_total and improve target
    creation failure handling. #8786
  * TSDB: Improve validation of exemplar label set length. #8816
  * TSDB: Add a prometheus_tsdb_clean_start metric that indicates
    whether a TSDB lockfile from a previous run still existed
    upon startup. #8824
  + Bugfixes:
  * UI: In the experimental PromQL editor, fix autocompletion and
    parsing for special float values and improve series metadata
    fetching. #8856
  * TSDB: When merging chunks, split resulting chunks if they
    would contain more than the maximum of 120 samples. #8582
  * SD: Fix the computation of the
    prometheus_sd_discovered_targets metric when using multiple
    service discoveries. #8828</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645185600">- Require Go 1.16+
- Do not build on s390 architecture.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645531200">- Fix Firewalld configuration file location (bsc#1196300)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646654400">- Update vendor tarball with prometheus/client_golang 1.12.1
  (bsc#1196338)
  * Added 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1647604800">- Create firewalld-prometheus-config subpackage (bsc#1197042,
  jsc#SLE-24374, jsc#SLE-24375)</changelog>
  <changelog author="jgonzalez@suse.com" date="1649332800">- Build firewalld-prometheus-config only for SUSE Linux Enterprise
  15, 15.1 and 15.2, and require firewalld for it
- firewalld-prometheus-config needs to be a Recommends, not a
  Requires, as prometheus does not require it to run</changelog>
</package>
<package pkgid="bd9cd15d3950cc47c069aa5dfe0b725db9064653471c3af9c690d774e35b9124" name="golang-github-prometheus-prometheus" arch="x86_64">
  <version epoch="0" ver="2.32.1" rel="150100.4.9.2"/>
  <changelog author="mrostecki@opensuse.org" date="1574251200">- Remove firewalld files. They are installed in the main firewalld
  package.</changelog>
  <changelog author="jan.fajerski@suse.com" date="1574337600">- Remove prometheus.firewall.xml source file</changelog>
  <changelog author="jcavalheiro@suse.com" date="1574683200">- Patch macros on spec file to support builds on SLE 12</changelog>
  <changelog author="witold.bedyk@suse.com" date="1580126400">- Update to Prometheus 2.11.2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1589371200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch:
  + Adapt service discovery to the new Uyuni API endpoints
  + Modified spec file: force golang 1.12 to fix build issues in SLE15SP2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591185600">- Update change log and spec file
  + Modified spec file: default to golang 1.14 to avoid "have choice" build issues in OBS.
  + Rebase and update patches for version 2.18.0
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Update to 2.18.0
  + Features
  * Tracing: Added experimental Jaeger support #7148
  + Changes
  * Federation: Only use local TSDB for federation (ignore remote read). #7096
  * Rules: `rule_evaluations_total` and `rule_evaluation_failures_total` have a `rule_group` label now. #7094
  + Enhancements
  * TSDB: Significantly reduce WAL size kept around after a block cut. #7098
  * Discovery: Add `architecture` meta label for EC2. #7000
  + Bug fixes
  * UI: Fixed wrong MinTime reported by /status. #7182
  * React UI: Fixed multiselect legend on OSX. #6880
  * Remote Write: Fixed blocked resharding edge case. #7122
  * Remote Write: Fixed remote write not updating on relabel configs change. #7073
- Changes from 2.17.2
  + Bug fixes
  * Federation: Register federation metrics #7081
  * PromQL: Fix panic in parser error handling #7132
  * Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
  * TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
  * TSDB: Make isolation more robust to panics in web handlers #7129 #7136
- Changes from 2.17.1
  + Bug fixes
  * TSDB: Fix query performance regression that increased memory and CPU usage #7051
- Changes from 2.17.0
  + Features
  * TSDB: Support isolation #6841
  * This release implements isolation in TSDB. API queries and recording rules are
    guaranteed to only see full scrapes and full recording rules. This comes with a
    certain overhead in resource usage. Depending on the situation, there might be
    some increase in memory usage, CPU usage, or query latency.
  + Enhancements
  * PromQL: Allow more keywords as metric names #6933
  * React UI: Add normalization of localhost URLs in targets page #6794
  * Remote read: Read from remote storage concurrently #6770
  * Rules: Mark deleted rule series as stale after a reload #6745
  * Scrape: Log scrape append failures as debug rather than warn #6852
  * TSDB: Improve query performance for queries that partially hit the head #6676
  * Consul SD: Expose service health as meta label #5313
  * EC2 SD: Expose EC2 instance lifecycle as meta label #6914
  * Kubernetes SD: Expose service type as meta label for K8s service role #6684
  * Kubernetes SD: Expose label_selector and field_selector #6807
  * Openstack SD: Expose hypervisor id as meta label #6962
  + Bug fixes
  * PromQL: Do not escape HTML-like chars in query log #6834 #6795
  * React UI: Fix data table matrix values #6896
  * React UI: Fix new targets page not loading when using non-ASCII characters #6892
  * Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
  * Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
  * Scrape: Prevent removal of metric names upon relabeling #6891
  * Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
  * Scrape: Fix crash when reloads are separated by two scrape intervals #7011
- Changes from 2.16.0
  + Features
  * React UI: Support local timezone on /graph #6692
  * PromQL: add absent_over_time query function #6490
  * Adding optional logging of queries to their own file #6520
  + Enhancements
  * React UI: Add support for rules page and "Xs ago" duration displays #6503
  * React UI: alerts page, replace filtering togglers tabs with checkboxes #6543
  * TSDB: Export metric for WAL write errors #6647
  * TSDB: Improve query performance for queries that only touch the most recent 2h of data. #6651
  * PromQL: Refactoring in parser errors to improve error messages #6634
  * PromQL: Support trailing commas in grouping opts #6480
  * Scrape: Reduce memory usage on reloads by reusing scrape cache #6670
  * Scrape: Add metrics to track bytes and entries in the metadata cache #6675
  * promtool: Add support for line-column numbers for invalid rules output #6533
  * Avoid restarting rule groups when it is unnecessary #6450
  + Bug fixes
  * React UI: Send cookies on fetch() on older browsers #6553
  * React UI: adopt grafana flot fix for stacked graphs #6603
  * React UI: broken graph page browser history so that back button works as expected #6659
  * TSDB: ensure compactionsSkipped metric is registered, and log proper error if one is returned from head.Init #6616
  * TSDB: return an error on ingesting series with duplicate labels #6664
  * PromQL: Fix unary operator precedence #6579
  * PromQL: Respect query.timeout even when we reach query.max-concurrency #6712
  * PromQL: Fix string and parentheses handling in engine, which affected React UI #6612
  * PromQL: Remove output labels returned by absent() if they are produced by multiple identical label matchers #6493
  * Scrape: Validate that OpenMetrics input ends with `# EOF` #6505
  * Remote read: return the correct error if configs can't be marshal'd to JSON #6622
  * Remote write: Make remote client `Store` use passed context, which can affect shutdown timing #6673
  * Remote write: Improve sharding calculation in cases where we would always be consistently behind by tracking pendingSamples #6511
  * Ensure prometheus_rule_group metrics are deleted when a rule group is removed #6693
- Changes from 2.15.2
  + Bug fixes
  * TSDB: Fixed support for TSDB blocks built with Prometheus before 2.1.0. #6564
  * TSDB: Fixed block compaction issues on Windows. #6547
- Changes from 2.15.1
  + Bug fixes
  * TSDB: Fixed race on concurrent queries against same data. #6512
- Changes from 2.15.0
  + Features
  * API: Added new endpoint for exposing per metric metadata `/metadata`. #6420 #6442
  + Changes
  * Discovery: Removed `prometheus_sd_kubernetes_cache_*` metrics. Additionally `prometheus_sd_kubernetes_workqueue_latency_seconds` and `prometheus_sd_kubernetes_workqueue_work_duration_seconds` metrics now show correct values in seconds. #6393
  * Remote write: Changed `query` label on `prometheus_remote_storage_*` metrics to `remote_name` and `url`. #6043
  + Enhancements
  * TSDB: Significantly reduced memory footprint of loaded TSDB blocks. #6418 #6461
  * TSDB: Significantly optimized what we buffer during compaction which should result in lower memory footprint during compaction. #6422 #6452 #6468 #6475
  * TSDB: Improve replay latency. #6230
  * TSDB: WAL size is now used for size based retention calculation. #5886
  * Remote read: Added query grouping and range hints to the remote read request #6401
  * Remote write: Added `prometheus_remote_storage_sent_bytes_total` counter per queue. #6344
  * promql: Improved PromQL parser performance. #6356
  * React UI: Implemented missing pages like `/targets` #6276, TSDB status page #6281 #6267 and many other fixes and performance improvements.
  * promql: Prometheus now accepts spaces between time range and square bracket. e.g `[ 5m]` #6065
  + Bug fixes
  * Config: Fixed alertmanager configuration to not miss targets when configurations are similar. #6455
  * Remote write: Value of `prometheus_remote_storage_shards_desired` gauge shows raw value of desired shards and it's updated correctly. #6378
  * Rules: Prometheus now fails the evaluation of rules and alerts where metric results collide with labels specified in `labels` field. #6469
  * API: Targets Metadata API `/targets/metadata` now accepts empty `match_targets` parameter as in the spec. #6303
- Changes from 2.14.0
  + Features
  * API: `/api/v1/status/runtimeinfo` and `/api/v1/status/buildinfo` endpoints added for use by the React UI. #6243
  * React UI: implement the new experimental React based UI. #5694 and many more
  * Can be found by under `/new`.
  * Not all pages are implemented yet.
  * Status: Cardinality statistics added to the Runtime &amp; Build Information page. #6125
  + Enhancements
  * Remote write: fix delays in remote write after a compaction. #6021
  * UI: Alerts can be filtered by state. #5758
  + Bug fixes
  * Ensure warnings from the API are escaped. #6279
  * API: lifecycle endpoints return 403 when not enabled. #6057
  * Build: Fix Solaris build. #6149
  * Promtool: Remove false duplicate rule warnings when checking rule files with alerts. #6270
  * Remote write: restore use of deduplicating logger in remote write. #6113
  * Remote write: do not reshard when unable to send samples. #6111
  * Service discovery: errors are no longer logged on context cancellation. #6116, #6133
  * UI: handle null response from API properly. #6071
- Changes from 2.13.1
  + Bug fixes
  * Fix panic in ARM builds of Prometheus. #6110
  * promql: fix potential panic in the query logger. #6094
  * Multiple errors of http: superfluous response.WriteHeader call in the logs. #6145
- Changes from 2.13.0
  + Enhancements
  * Metrics: renamed prometheus_sd_configs_failed_total to prometheus_sd_failed_configs and changed to Gauge #5254
  * Include the tsdb tool in builds. #6089
  * Service discovery: add new node address types for kubernetes. #5902
  * UI: show warnings if query have returned some warnings. #5964
  * Remote write: reduce memory usage of the series cache. #5849
  * Remote read: use remote read streaming to reduce memory usage. #5703
  * Metrics: added metrics for remote write max/min/desired shards to queue manager. #5787
  * Promtool: show the warnings during label query. #5924
  * Promtool: improve error messages when parsing bad rules. #5965
  * Promtool: more promlint rules. #5515
  + Bug fixes
  * UI: Fix a Stored DOM XSS vulnerability with query history [CVE-2019-10215](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10215). #6098
  * Promtool: fix recording inconsistency due to duplicate labels. #6026
  * UI: fixes service-discovery view when accessed from unhealthy targets. #5915
  * Metrics format: OpenMetrics parser crashes on short input. #5939
  * UI: avoid truncated Y-axis values. #6014
- Changes from 2.12.0
  + Features
  * Track currently active PromQL queries in a log file. #5794
  * Enable and provide binaries for `mips64` / `mips64le` architectures. #5792
  + Enhancements
  * Improve responsiveness of targets web UI and API endpoint. #5740
  * Improve remote write desired shards calculation. #5763
  * Flush TSDB pages more precisely. tsdb#660
  * Add `prometheus_tsdb_retention_limit_bytes` metric. tsdb#667
  * Add logging during TSDB WAL replay on startup. tsdb#662
  * Improve TSDB memory usage. tsdb#653, tsdb#643, tsdb#654, tsdb#642, tsdb#627
  + Bug fixes
  * Check for duplicate label names in remote read. #5829
  * Mark deleted rules' series as stale on next evaluation. #5759
  * Fix JavaScript error when showing warning about out-of-sync server time. #5833
  * Fix `promtool test rules` panic when providing empty `exp_labels`. #5774
  * Only check last directory when discovering checkpoint number. #5756
  * Fix error propagation in WAL watcher helper functions. #5741
  * Correctly handle empty labels from alert templates. #5845</changelog>
  <changelog author="witold.bedyk@suse.com" date="1596196800">- Update 0003-Add-Uyuni-service-discovery.patch:
  + Add support for Prometheus exporters proxy</changelog>
  <changelog author="pseidensal@suse.com" date="1598875200">- Update package with changes from `server:monitoring` bsc#1175478
  Left out removal of firewalld related configuration files as SLE-15-SP1's
  `firewalld` package does not contain prometheus configuration yet.</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update to upstream version 2.22.1
- Update packaging
  * Remove systemd and shadow hard requirements
  * use systemd-sysusers to configure the user in a dedicated 'system-user-prometheus' subpackage
  * add 'prometheus' package alias</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Uyuni: `hostname` label is now set to FQDN instead of IP
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1620129600">- Add tarball with vendor modules and web assets
- Uyuni: Read formula data from exporters map
- Uyuni: Add support for TLS targets
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.26.0
  + Changes
  * Alerting: Using Alertmanager v2 API by default. #8626
  * Prometheus/Promtool: Binaries are now printing help and usage to stdout instead of stderr. #8542
  + Features
  * Remote: Add support for AWS SigV4 auth method for remote_write. #8509
  * PromQL: Allow negative offsets. Behind --enable-feature=promql-negative-offset flag. #8487
  * UI: Add advanced auto-completion, syntax highlighting and linting to graph page query input. #8634
  + Enhancements
  * PromQL: Add last_over_time, sgn, clamp functions. #8457
  * Scrape: Add support for specifying type of Authorization header credentials with Bearer by default. #8512
  * Scrape: Add follow_redirects option to scrape configuration. #8546
  * Remote: Allow retries on HTTP 429 response code for remote_write. #8237 #8477
  * Remote: Allow configuring custom headers for remote_read. #8516
  * UI: Hitting Enter now triggers new query. #8581
  * UI: Better handling of long rule and names on the /rules and /targets pages. #8608 #8609
  * UI: Add collapse/expand all button on the /targets page. #8486
- Upgrade to upstream version 2.25.0
  + Features
  * Include a new `--enable-feature=` flag that enables experimental features.
  + Enhancements
  * Add optional name property to testgroup for better test failure output. #8440
  * Add warnings into React Panel on the Graph page. #8427
  * TSDB: Increase the number of buckets for the compaction duration metric. #8342
  * Remote: Allow passing along custom remote_write HTTP headers. #8416
  * Mixins: Scope grafana configuration. #8332
  * Kubernetes SD: Add endpoint labels metadata. #8273
  * UI: Expose total number of label pairs in head in TSDB stats page. #8343
  * TSDB: Reload blocks every minute, to detect new blocks and enforce retention more often. #8343
  + Bug fixes
  * API: Fix global URL when external address has no port. #8359
  * Deprecate unused flag --alertmanager.timeout. #8407
- Upgrade to upstream version 2.24.1
  + Enhancements
  * Cache basic authentication results to significantly improve performance of HTTP endpoints.
- Upgrade to upstream version 2.24.0
  + Features
  * Add TLS and basic authentication to HTTP endpoints. #8316
  * promtool: Add check web-config subcommand to check web config files. #8319
  * promtool: Add tsdb create-blocks-from openmetrics subcommand to backfill metrics data from an OpenMetrics file. #8084
  + Enhancements
  * HTTP API: Fast-fail queries with only empty matchers. #8288
  * HTTP API: Support matchers for labels API. #8301
  * promtool: Improve checking of URLs passed on the command line. #7956
  * SD: Expose IPv6 as a label in EC2 SD. #7086
  * SD: Reuse EC2 client, reducing frequency of requesting credentials. #8311
  * TSDB: Add logging when compaction takes more than the block time range. #8151
  * TSDB: Avoid unnecessary GC runs after compaction. #8276
- Upgrade to upstream version 2.23.0
  + Changes
  * UI: Make the React UI default. #8142
  * Remote write: The following metrics were removed/renamed in remote write. #6815
    &gt; prometheus_remote_storage_succeeded_samples_total was removed and prometheus_remote_storage_samples_total was introduced for all the samples attempted to send.
    &gt; prometheus_remote_storage_sent_bytes_total was removed and replaced with prometheus_remote_storage_samples_bytes_total and prometheus_remote_storage_metadata_bytes_total.
    &gt; prometheus_remote_storage_failed_samples_total -&gt; prometheus_remote_storage_samples_failed_total .
    &gt; prometheus_remote_storage_retried_samples_total -&gt; prometheus_remote_storage_samples_retried_total.
    &gt; prometheus_remote_storage_dropped_samples_total -&gt; prometheus_remote_storage_samples_dropped_total.
    &gt; prometheus_remote_storage_pending_samples -&gt; prometheus_remote_storage_samples_pending.
  * Remote: Do not collect non-initialized timestamp metrics. #8060
  + Enhancements
  * Remote write: Added a metric prometheus_remote_storage_max_samples_per_send for remote write. #8102
  * TSDB: Make the snapshot directory name always the same length. #8138
  * TSDB: Create a checkpoint only once at the end of all head compactions. #8067
  * TSDB: Avoid Series API from hitting the chunks. #8050
  * TSDB: Cache label name and last value when adding series during compactions making compactions faster. #8192
  * PromQL: Improved performance of Hash method making queries a bit faster. #8025
  * promtool: tsdb list now prints block sizes. #7993
  * promtool: Calculate mint and maxt per test avoiding unnecessary calculations. #8096
  * SD: Add filtering of services to Docker Swarm SD. #8074</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621425600">- Refresh patches
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.27.1 (jsc#SLE-18254)
  + Bugfix:
  * SECURITY: Fix arbitrary redirects under the /new endpoint (CVE-2021-29622, bsc#1186242)
- Upgrade to upstream version 2.27.0
  + Features:
  * Promtool: Retroactive rule evaluation functionality. #7675
  * Configuration: Environment variable expansion for external labels. Behind --enable-feature=expand-external-labels flag. #8649
  * TSDB: Add a flag(--storage.tsdb.max-block-chunk-segment-size) to control the max chunks file size of the blocks for small Prometheus instances. #8478
  * UI: Add a dark theme. #8604
  * AWS Lightsail Discovery: Add AWS Lightsail Discovery. #8693
  * Docker Discovery: Add Docker Service Discovery. #8629
  * OAuth: Allow OAuth 2.0 to be used anywhere an HTTP client is used. #8761
  * Remote Write: Send exemplars via remote write. Experimental and disabled by default. #8296
  + Enhancements:
  * Digital Ocean Discovery: Add __meta_digitalocean_vpc label. #8642
  * Scaleway Discovery: Read Scaleway secret from a file. #8643
  * Scrape: Add configurable limits for label size and count. #8777
  * UI: Add 16w and 26w time range steps. #8656
  * Templating: Enable parsing strings in humanize functions. #8682
  + Bugfixes:
  * UI: Provide errors instead of blank page on TSDB Status Page. #8654 #8659
  * TSDB: Do not panic when writing very large records to the WAL. #8790
  * TSDB: Avoid panic when mmaped memory is referenced after the file is closed. #8723
  * Scaleway Discovery: Fix nil pointer dereference. #8737
  * Consul Discovery: Restart no longer required after config update with no targets. #8766</changelog>
  <changelog author="witold.bedyk@suse.com" date="1625745600">- Provide and reload firewalld configuration only for:
  + openSUSE Leap 15.0, 15.1, 15.2
  + SUSE SLE15, SLE15 SP1, SLE15 SP2</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * prometheus.service</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642593600">- Updated patches:
  + Changed:
  * 0002-Default-settings.patch
  + Removed:
  * 0003-Add-Uyuni-service-discovery.patch
- Use obs-service-go_modules
- Upgrade to upstream version 2.32.1 (jsc#SLE-22863)
  + Bugfixes:
  * Scrape: Fix reporting metrics when sample limit is reached
    during the report. #9996
  * Scrape: Ensure that scrape interval and scrape timeout are
    always set. #10023
  * TSDB: Expose and fix bug in iterators' Seek() method. #10030
- Upgrade to upstream version 2.32.0
  + Change:
  * remote-write: Change default max retry time from 100ms to
    5 seconds. #9634
  + Features:
  * Agent: New mode of operation optimized for remote-write only
    scenarios, without local storage.
  * Promtool: Add promtool check service-discovery command. #8970
  + Enhancements:
  * Promtool: Improve test output. #8064
  * Promtool: Use kahan summation for better numerical stability.
  * Remote-write: Reuse memory for marshalling. #9412
  * Scrape: Add scrape_body_size_bytes scrape metric behind the
  - -enable-feature=extra-scrape-metrics flag. #9569
  * TSDB: Add windows arm64 support. #9703
  * TSDB: Optimize query by skipping unneeded sorting in TSDB.
  * Templates: Support int and uint as datatypes for template
    formatting. #9680
  * UI: Prefer rate over rad, delta over deg, and count over cos
    in autocomplete. #9688
  + Bugfixes:
  * TSDB: Add more size checks when writing individual sections
    in the index. #9710
  * PromQL: Make deriv() return zero values for constant series.
  * TSDB: Fix panic when checkpoint directory is empty. #9687
  * TSDB: Fix panic, out of order chunks, and race warning during
    WAL replay. #9856
  * UI: Correctly render links for targets with IPv6 addresses
    that contain a Zone ID. #9853
  * Promtool: Fix checking of authorization.credentials_file and
    bearer_token_file fields. #9883
  * Uyuni SD: Fix null pointer exception during initialization.
  * TSDB: Fix queries after a failed snapshot replay. #9980
- Upgrade to upstream version 2.31.1
  + Bugfix:
  * SD: Fix a panic when the experimental discovery manager
    receives targets during a reload. #9656
- Upgrade to upstream version 2.31.0
  + Change:
  * UI: Remove standard PromQL editor in favour of the
    codemirror-based editor. #9452
  + Features:
  * PromQL: Add trigonometric functions and atan2 binary
    operator. #9239 #9248 #9515
  * Remote: Add support for exemplar in the remote write receiver
    endpoint. #9319 #9414
  * SD: Add PuppetDB service discovery. #8883
  * SD: Add Uyuni service discovery. #8190
  * Web: Add support for security-related HTTP headers. #9546
  + Enhancements:
  * Azure SD: Add proxy_url, follow_redirects, tls_config. #9267
  * Backfill: Add --max-block-duration in promtool
    create-blocks-from rules. #9511
  * Config: Print human-readable sizes with unit instead of raw
    numbers. #9361
  * HTTP: Re-enable HTTP/2. #9398
  * Kubernetes SD: Warn user if number of endpoints exceeds
    limit. #9467
  * OAuth2: Add TLS configuration to token requests. #9550
  * PromQL: Several optimizations. #9365 #9360 #9362 #9552
  * PromQL: Make aggregations deterministic in instant queries.
  * Rules: Add the ability to limit number of alerts or series.
  * SD: Experimental discovery manager to avoid restarts upon
    reload.
  * UI: Debounce timerange setting changes. #9359
  + Bugfixes:
  * Backfill: Apply rule labels after query labels. #9421
  * Scrape: Resolve conflicts between multiple exported label
    prefixes. #9479 #9518
  * Scrape: Restart scrape loops when __scrape_interval__ is
    changed. #9551
  * TSDB: Fix memory leak in samples deletion. #9151
  * UI: Use consistent margin-bottom for all alert kinds. #9318
- Upgrade to upstream version 2.30.3
  + Bugfixes:
  * TSDB: Fix panic on failed snapshot replay. #9438
  * TSDB: Don't fail snapshot replay with exemplar storage
    disabled when the snapshot contains exemplars. #9438
- Upgrade to upstream version 2.30.2
  + Bugfix:
  * TSDB: Don't error on overlapping m-mapped chunks during WAL
    replay. #9381
- Upgrade to upstream version 2.30.1
  + Enhancements:
  * Remote Write: Redact remote write URL when used for metric
    label. #9383
  * UI: Redact remote write URL and proxy URL passwords in the
    /config page. #9408
  + Bugfixes:
  * promtool rules backfill: Prevent creation of data before the
    start time. #9339
  * promtool rules backfill: Do not query after the end time.
  * Azure SD: Fix panic when no computername is set. #9387
- Upgrade to upstream version 2.30.0
  + Features:
  * experimental TSDB: Snapshot in-memory chunks on shutdown for
    faster restarts. #7229
  * experimental Scrape: Configure scrape interval and scrape
    timeout via relabeling using __scrape_interval__ and
    __scrape_timeout__ labels respectively. #8911
  * Scrape: Add scrape_timeout_seconds and scrape_sample_limit
    metric. #9247 #9295
  + Enhancements:
  * Scrape: Add --scrape.timestamp-tolerance flag to adjust
    scrape timestamp tolerance when enabled via
  - -scrape.adjust-timestamps. #9283
  * Remote Write: Improve throughput when sending exemplars.
  * TSDB: Optimise WAL loading by removing extra map and caching
    min-time #9160
  * promtool: Speed up checking for duplicate rules. #9262/#9306
  * Scrape: Reduce allocations when parsing the metrics. #9299
  * docker_sd: Support host network mode #9125
  + Bugfixes:
  * Exemplars: Fix panic when resizing exemplar storage from 0 to
    a non-zero size. #9286
  * TSDB: Correctly decrement
    prometheus_tsdb_head_active_appenders when the append has no
    samples. #9230
  * promtool rules backfill: Return 1 if backfill was
    unsuccessful. #9303
  * promtool rules backfill: Avoid creation of overlapping
    blocks. #9324
  * config: Fix a panic when reloading configuration with a null
    relabel action. #9224
- Upgrade to upstream version 2.29.2
  + Bugfixes:
  * Fix Kubernetes SD failing to discover Ingress in
    Kubernetes v1.22. #9205
  * Fix data race in loading write-ahead-log (WAL). #9259
- Upgrade to upstream version 2.29.1
  + Bugfixes:
  * TSDB: align atomically accessed int64 to prevent panic in
    32-bit archs. #9192
- Upgrade to upstream version 2.29.0
  + Changes:
  * Promote --storage.tsdb.allow-overlapping-blocks flag to
    stable. #9117
  * Promote --storage.tsdb.retention.size flag to stable. #9004
  + Features:
  * Add Kuma service discovery. #8844
  * Add present_over_time PromQL function. #9097
  * Allow configuring exemplar storage via file and make it
    reloadable. #8974
  * UI: Allow selecting time range with mouse drag. #8977
  * promtool: Add feature flags flag --enable-feature. #8958
  * promtool: Add file_sd file validation. #8950
  + Enhancements:
  * Reduce blocking of outgoing remote write requests from series
    garbage collection. #9109
  * Improve write-ahead-log decoding performance. #9106
  * Improve append performance in TSDB by reducing mutexes usage.
  * Allow configuring max_samples_per_send for remote write
    metadata. #8959
  * Add __meta_gce_interface_ipv4_&lt;name&gt; meta label to GCE
    discovery. #8978
  * Add __meta_ec2_availability_zone_id meta label to EC2
    discovery. #8896
  * Add __meta_azure_machine_computer_name meta label to Azure
    discovery. #9112
  * Add __meta_hetzner_hcloud_labelpresent_&lt;labelname&gt; meta label
    to Hetzner discovery. #9028
  * promtool: Add compaction efficiency to promtool tsdb analyze
    reports. #8940
  * promtool: Allow configuring max block duration for
    backfilling via --max-block-duration flag. #8919
  * UI: Add sorting and filtering to flags page. #8988
  * UI: Improve alerts page rendering performance. #9005
  + Bugfixes:
  * Log when total symbol size exceeds 2^32 bytes, causing
    compaction to fail, and skip compaction. #9104
  * Fix incorrect target_limit reloading of zero value. #9120
  * Fix head GC and pending readers race condition. #9081
  * Fix timestamp handling in OpenMetrics parser. #9008
  * Fix potential duplicate metrics in /federate endpoint when
    specifying multiple matchers. #8885
  * Fix server configuration and validation for authentication
    via client cert. #9123
  * Allow start and end again as label names in PromQL queries.
    They were disallowed since the introduction of @ timestamp
    feature. #9119
- Upgrade to upstream version 2.28.1
  + Bugfixes:
  * HTTP SD: Allow charset specification in Content-Type header.
  * HTTP SD: Fix handling of disappeared target groups. #9019
  * Fix incorrect log-level handling after moving to go-kit/log.
- Upgrade to upstream version 2.28.0
  + Change:
  * UI: Make the new experimental PromQL editor the default.
  + Features:
  * Linode SD: Add Linode service discovery. #8846
  * HTTP SD: Add generic HTTP-based service discovery. #8839
  * Kubernetes SD: Allow configuring API Server access via a
    kubeconfig file. #8811
  * UI: Add exemplar display support to the graphing interface.
  * Consul SD: Add namespace support for Consul Enterprise. #8900
  + Enhancements:
  * Promtool: Allow silencing output when importing / backfilling
    data. #8917
  * Consul SD: Support reading tokens from file. #8926
  * Rules: Add a new .ExternalURL alert field templating
    variable, containing the external URL of the Prometheus
    server. #8878
  * Scrape: Add experimental body_size_limit scrape configuration
    setting to limit the allowed response body size for target
    scrapes. #8833 #8886
  * Kubernetes SD: Add ingress class name label for ingress
    discovery. #8916
  * UI: Show a startup screen with progress bar when the TSDB is
    not ready yet. #8662 #8908 #8909 #8946
  * SD: Add a target creation failure counter
    prometheus_target_sync_failed_total and improve target
    creation failure handling. #8786
  * TSDB: Improve validation of exemplar label set length. #8816
  * TSDB: Add a prometheus_tsdb_clean_start metric that indicates
    whether a TSDB lockfile from a previous run still existed
    upon startup. #8824
  + Bugfixes:
  * UI: In the experimental PromQL editor, fix autocompletion and
    parsing for special float values and improve series metadata
    fetching. #8856
  * TSDB: When merging chunks, split resulting chunks if they
    would contain more than the maximum of 120 samples. #8582
  * SD: Fix the computation of the
    prometheus_sd_discovered_targets metric when using multiple
    service discoveries. #8828</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645185600">- Require Go 1.16+
- Do not build on s390 architecture.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645531200">- Fix Firewalld configuration file location (bsc#1196300)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646654400">- Update vendor tarball with prometheus/client_golang 1.12.1
  (bsc#1196338)
  * Added 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1647604800">- Create firewalld-prometheus-config subpackage (bsc#1197042,
  jsc#SLE-24374, jsc#SLE-24375)</changelog>
  <changelog author="jgonzalez@suse.com" date="1649332800">- Build firewalld-prometheus-config only for SUSE Linux Enterprise
  15, 15.1 and 15.2, and require firewalld for it
- firewalld-prometheus-config needs to be a Recommends, not a
  Requires, as prometheus does not require it to run</changelog>
</package>
<package pkgid="f7e2a30a036310060c4380865d2cf74eeb046c8fb0ded1b81ab2a1a9dbb509b1" name="golang-github-prometheus-promu" arch="aarch64">
  <version epoch="0" ver="0.13.0" rel="150000.3.3.1"/>
  <changelog author="moio@suse.com" date="1490788800">- Initial version</changelog>
  <changelog author="kkaempf@suse.com" date="1516881600">- Update to 0.1.0</changelog>
  <changelog author="jan.fajerski@suse.com" date="1549627200">- Update to 0.2.0
  + Features:
  * Adding changes to support s390x
  * Add option to disable static linking
  * Add support for 32bit MIPS.
  * Added check_licenses Command to Promu
  + Enhancements:
  * Allow to customize nested options via env variables
  * Bump Go version to 1.11
  * Add warning if promu info is unable to determine repo info
  + Bug Fixes:
  * Fix build on SmartOS by not setting gcc's -static flag
  * Fix git repository url parsing</changelog>
  <changelog author="witold.bedyk@suse.com" date="1581076800">- Update to 0.5.0
  + Features:
  * Add support for aix/ppc64. #151
  * Fallback to git describe output if no VERSION. #130
  * Make extldflags extensible by configuration. #125
  + Enhancements:
  * cmd/release: add --timeout option. #142
  * cmd/release: create release in GitHub if none exists. #148
  * Avoid bind-mounting to allow building with a remote docker engine #95
  + Bug Fixes:
  * cmd/tarball: restore --prefix flag. #133
  * cmd/release: don't leak credentials in case of error. #136
- Use obs-service-go_modules</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615204800">- Build requires Go 1.15</changelog>
  <changelog author="ecsos@opensuse.org" date="1646308800">- Update to version 0.13.0:
  * Release 0.13.0 (jsc#SLE-24138, jsc#SLE-24139)
  * Add deprecation note to pkg directory
  * Add windows/arm64
  * Update common Prometheus files
  * Fix typo
  * Release 0.12.0
  * Simplify CGO crossbuilds
  * Update common Prometheus files
  * Release 0.11.1
  * Fix build with "linux" platform</changelog>
</package>
<package pkgid="cad94c1c207b13909db9b339cbc7f76f34b33109b38027c989a49b5813720da6" name="golang-github-prometheus-promu" arch="ppc64le">
  <version epoch="0" ver="0.13.0" rel="150000.3.3.1"/>
  <changelog author="moio@suse.com" date="1490788800">- Initial version</changelog>
  <changelog author="kkaempf@suse.com" date="1516881600">- Update to 0.1.0</changelog>
  <changelog author="jan.fajerski@suse.com" date="1549627200">- Update to 0.2.0
  + Features:
  * Adding changes to support s390x
  * Add option to disable static linking
  * Add support for 32bit MIPS.
  * Added check_licenses Command to Promu
  + Enhancements:
  * Allow to customize nested options via env variables
  * Bump Go version to 1.11
  * Add warning if promu info is unable to determine repo info
  + Bug Fixes:
  * Fix build on SmartOS by not setting gcc's -static flag
  * Fix git repository url parsing</changelog>
  <changelog author="witold.bedyk@suse.com" date="1581076800">- Update to 0.5.0
  + Features:
  * Add support for aix/ppc64. #151
  * Fallback to git describe output if no VERSION. #130
  * Make extldflags extensible by configuration. #125
  + Enhancements:
  * cmd/release: add --timeout option. #142
  * cmd/release: create release in GitHub if none exists. #148
  * Avoid bind-mounting to allow building with a remote docker engine #95
  + Bug Fixes:
  * cmd/tarball: restore --prefix flag. #133
  * cmd/release: don't leak credentials in case of error. #136
- Use obs-service-go_modules</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615204800">- Build requires Go 1.15</changelog>
  <changelog author="ecsos@opensuse.org" date="1646308800">- Update to version 0.13.0:
  * Release 0.13.0 (jsc#SLE-24138, jsc#SLE-24139)
  * Add deprecation note to pkg directory
  * Add windows/arm64
  * Update common Prometheus files
  * Fix typo
  * Release 0.12.0
  * Simplify CGO crossbuilds
  * Update common Prometheus files
  * Release 0.11.1
  * Fix build with "linux" platform</changelog>
</package>
<package pkgid="853d409c2ffb4d1354e0b86480b78e2a6a593fa894ed7ed14b2d8016bab7194f" name="golang-github-prometheus-promu" arch="s390x">
  <version epoch="0" ver="0.13.0" rel="150000.3.3.1"/>
  <changelog author="moio@suse.com" date="1490788800">- Initial version</changelog>
  <changelog author="kkaempf@suse.com" date="1516881600">- Update to 0.1.0</changelog>
  <changelog author="jan.fajerski@suse.com" date="1549627200">- Update to 0.2.0
  + Features:
  * Adding changes to support s390x
  * Add option to disable static linking
  * Add support for 32bit MIPS.
  * Added check_licenses Command to Promu
  + Enhancements:
  * Allow to customize nested options via env variables
  * Bump Go version to 1.11
  * Add warning if promu info is unable to determine repo info
  + Bug Fixes:
  * Fix build on SmartOS by not setting gcc's -static flag
  * Fix git repository url parsing</changelog>
  <changelog author="witold.bedyk@suse.com" date="1581076800">- Update to 0.5.0
  + Features:
  * Add support for aix/ppc64. #151
  * Fallback to git describe output if no VERSION. #130
  * Make extldflags extensible by configuration. #125
  + Enhancements:
  * cmd/release: add --timeout option. #142
  * cmd/release: create release in GitHub if none exists. #148
  * Avoid bind-mounting to allow building with a remote docker engine #95
  + Bug Fixes:
  * cmd/tarball: restore --prefix flag. #133
  * cmd/release: don't leak credentials in case of error. #136
- Use obs-service-go_modules</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615204800">- Build requires Go 1.15</changelog>
  <changelog author="ecsos@opensuse.org" date="1646308800">- Update to version 0.13.0:
  * Release 0.13.0 (jsc#SLE-24138, jsc#SLE-24139)
  * Add deprecation note to pkg directory
  * Add windows/arm64
  * Update common Prometheus files
  * Fix typo
  * Release 0.12.0
  * Simplify CGO crossbuilds
  * Update common Prometheus files
  * Release 0.11.1
  * Fix build with "linux" platform</changelog>
</package>
<package pkgid="2c9ea7038f4a2296b5758142b3851c193709268dc6d790816c607e41e5b03643" name="golang-github-prometheus-promu" arch="src">
  <version epoch="0" ver="0.13.0" rel="150000.3.3.1"/>
  <changelog author="moio@suse.com" date="1490788800">- Initial version</changelog>
  <changelog author="kkaempf@suse.com" date="1516881600">- Update to 0.1.0</changelog>
  <changelog author="jan.fajerski@suse.com" date="1549627200">- Update to 0.2.0
  + Features:
  * Adding changes to support s390x
  * Add option to disable static linking
  * Add support for 32bit MIPS.
  * Added check_licenses Command to Promu
  + Enhancements:
  * Allow to customize nested options via env variables
  * Bump Go version to 1.11
  * Add warning if promu info is unable to determine repo info
  + Bug Fixes:
  * Fix build on SmartOS by not setting gcc's -static flag
  * Fix git repository url parsing</changelog>
  <changelog author="witold.bedyk@suse.com" date="1581076800">- Update to 0.5.0
  + Features:
  * Add support for aix/ppc64. #151
  * Fallback to git describe output if no VERSION. #130
  * Make extldflags extensible by configuration. #125
  + Enhancements:
  * cmd/release: add --timeout option. #142
  * cmd/release: create release in GitHub if none exists. #148
  * Avoid bind-mounting to allow building with a remote docker engine #95
  + Bug Fixes:
  * cmd/tarball: restore --prefix flag. #133
  * cmd/release: don't leak credentials in case of error. #136
- Use obs-service-go_modules</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615204800">- Build requires Go 1.15</changelog>
  <changelog author="ecsos@opensuse.org" date="1646308800">- Update to version 0.13.0:
  * Release 0.13.0 (jsc#SLE-24138, jsc#SLE-24139)
  * Add deprecation note to pkg directory
  * Add windows/arm64
  * Update common Prometheus files
  * Fix typo
  * Release 0.12.0
  * Simplify CGO crossbuilds
  * Update common Prometheus files
  * Release 0.11.1
  * Fix build with "linux" platform</changelog>
</package>
<package pkgid="de0ae1656b669dda21f8b92037a6fce89ad0ed381aab3654dbdc698301669f56" name="golang-github-prometheus-promu" arch="x86_64">
  <version epoch="0" ver="0.13.0" rel="150000.3.3.1"/>
  <changelog author="moio@suse.com" date="1490788800">- Initial version</changelog>
  <changelog author="kkaempf@suse.com" date="1516881600">- Update to 0.1.0</changelog>
  <changelog author="jan.fajerski@suse.com" date="1549627200">- Update to 0.2.0
  + Features:
  * Adding changes to support s390x
  * Add option to disable static linking
  * Add support for 32bit MIPS.
  * Added check_licenses Command to Promu
  + Enhancements:
  * Allow to customize nested options via env variables
  * Bump Go version to 1.11
  * Add warning if promu info is unable to determine repo info
  + Bug Fixes:
  * Fix build on SmartOS by not setting gcc's -static flag
  * Fix git repository url parsing</changelog>
  <changelog author="witold.bedyk@suse.com" date="1581076800">- Update to 0.5.0
  + Features:
  * Add support for aix/ppc64. #151
  * Fallback to git describe output if no VERSION. #130
  * Make extldflags extensible by configuration. #125
  + Enhancements:
  * cmd/release: add --timeout option. #142
  * cmd/release: create release in GitHub if none exists. #148
  * Avoid bind-mounting to allow building with a remote docker engine #95
  + Bug Fixes:
  * cmd/tarball: restore --prefix flag. #133
  * cmd/release: don't leak credentials in case of error. #136
- Use obs-service-go_modules</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615204800">- Build requires Go 1.15</changelog>
  <changelog author="ecsos@opensuse.org" date="1646308800">- Update to version 0.13.0:
  * Release 0.13.0 (jsc#SLE-24138, jsc#SLE-24139)
  * Add deprecation note to pkg directory
  * Add windows/arm64
  * Update common Prometheus files
  * Fix typo
  * Release 0.12.0
  * Simplify CGO crossbuilds
  * Update common Prometheus files
  * Release 0.11.1
  * Fix build with "linux" platform</changelog>
</package>
<package pkgid="31266a6a9d18c3c21dc117b57f0bbd23d7f2f05d1ead10d18af5d26ce18ac423" name="gom" arch="src">
  <version epoch="0" ver="0.4" rel="150200.3.2.1"/>
  <changelog author="zaitor@opensuse.org" date="1408968000">- Initial packaging version 0.2.1</changelog>
  <changelog author="dimstar@opensuse.org" date="1424174400">- Update to version 0.3.0:
  + Update COPYING to LGPL 2.1+ to match headers.
  + Add support for batched writes.
  + Support the GLOB operator.
  + Fix stacking of filters.
  + Fix possible crashes on exit.
  + Remove "adapter" property from GomResourceGroup.
  + Fix a bug in automatic migration.
  + Fix a number of bugs related to using GOM in bindings and in
    multi-thread unsafe interpreters.
  + Make gdk-pixbuf an optional dependency.</changelog>
  <changelog author="zaitor@opensuse.org" date="1430308800">- Update to version 0.3.1:
  + Support g_autoptr() for all gom object types.
  + Add IS NULL and IS NOT NULL filters.
  + Add gom_resource_group_delete_[a]sync functions.
  + Fix crash on 64-bit systems with some compiler/compiler flags.
  + Fix saving a modified resource a second time.
  + Fix setting ID after calling gom_resource_group_write_*.
- Add a %check section and pass %{__make} test to it. Actually run
  the already enabled tests. This adds quite a bit to build time,
  but all testing we can get is good.</changelog>
  <changelog author="damjanovic.ivo@gmail.com" date="1451217600">- Updated to version 0.3.2:
  + Add missing annotation for repository object.
  + Support ordering queries.
  + Add support for creating new tables in a version.
  + Fix memory leak in GomResource.
  + Bindings:
  - Add missing annotation for repository object.
  - Add a working Python example.
  - Make ResourceGroup a sequence in Python bindings.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498132800">- Update to version 0.3.3:
  + Replace hardcoded values in pkg-config file.
  + Add a JavaScript example.
  + Remove i18n support, as there are no user-visible strings.
  + Replace autotools build system with meson.
- Add meson BuildRequires and switch autotools macros configure,
  make, make test and makeinstall to meson, meson_build, meson_test
  and meson_install following upstream switch to Meson build
  system.
- Add explicit python3-gobject BuildRequires to workaround
  build-fail, upstream expects everyone to have moved to python3 as
  default python.
- Drop intltool BuildRequires: No longer needed.
- Following the above, drop lang subpackage and macros handling
  translations, and drop gom-lang Recommends and gom Provides from
  libgom-1_0-0 subpackage. Add gom-lang Obsoletes to ease updates.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500552000">- Temp disable meson_check while we figure out why it randomly
  fails on x86_64.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries an RPM groups. Trim non-telling parts of
  descriptions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505304000">- Split out python3-gom: the python/gi binding were wrongly
  packaged as part of the -devel package.
- Run spec-cleaner: adds pkgconfig-BuildRequires.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 0.4:
  + Fix primary-keys never being monitored, which triggered crashes
    with GLib 2.63.
  + Test for invalid table names.
  + Install Python overrides in correct location.
  + Fix storage of NULL GDateTime values.
  + Fix constraints test under older versions of SQLite.</changelog>
</package>
<package pkgid="612f20487582bb99e06df0ac747ffc045aa03e8ebb7fe2795d8bd81a0892604e" name="gom-devel" arch="aarch64">
  <version epoch="0" ver="0.4" rel="150200.3.2.1"/>
  <changelog author="zaitor@opensuse.org" date="1408968000">- Initial packaging version 0.2.1</changelog>
  <changelog author="dimstar@opensuse.org" date="1424174400">- Update to version 0.3.0:
  + Update COPYING to LGPL 2.1+ to match headers.
  + Add support for batched writes.
  + Support the GLOB operator.
  + Fix stacking of filters.
  + Fix possible crashes on exit.
  + Remove "adapter" property from GomResourceGroup.
  + Fix a bug in automatic migration.
  + Fix a number of bugs related to using GOM in bindings and in
    multi-thread unsafe interpreters.
  + Make gdk-pixbuf an optional dependency.</changelog>
  <changelog author="zaitor@opensuse.org" date="1430308800">- Update to version 0.3.1:
  + Support g_autoptr() for all gom object types.
  + Add IS NULL and IS NOT NULL filters.
  + Add gom_resource_group_delete_[a]sync functions.
  + Fix crash on 64-bit systems with some compiler/compiler flags.
  + Fix saving a modified resource a second time.
  + Fix setting ID after calling gom_resource_group_write_*.
- Add a %check section and pass %{__make} test to it. Actually run
  the already enabled tests. This adds quite a bit to build time,
  but all testing we can get is good.</changelog>
  <changelog author="damjanovic.ivo@gmail.com" date="1451217600">- Updated to version 0.3.2:
  + Add missing annotation for repository object.
  + Support ordering queries.
  + Add support for creating new tables in a version.
  + Fix memory leak in GomResource.
  + Bindings:
  - Add missing annotation for repository object.
  - Add a working Python example.
  - Make ResourceGroup a sequence in Python bindings.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498132800">- Update to version 0.3.3:
  + Replace hardcoded values in pkg-config file.
  + Add a JavaScript example.
  + Remove i18n support, as there are no user-visible strings.
  + Replace autotools build system with meson.
- Add meson BuildRequires and switch autotools macros configure,
  make, make test and makeinstall to meson, meson_build, meson_test
  and meson_install following upstream switch to Meson build
  system.
- Add explicit python3-gobject BuildRequires to workaround
  build-fail, upstream expects everyone to have moved to python3 as
  default python.
- Drop intltool BuildRequires: No longer needed.
- Following the above, drop lang subpackage and macros handling
  translations, and drop gom-lang Recommends and gom Provides from
  libgom-1_0-0 subpackage. Add gom-lang Obsoletes to ease updates.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500552000">- Temp disable meson_check while we figure out why it randomly
  fails on x86_64.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries an RPM groups. Trim non-telling parts of
  descriptions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505304000">- Split out python3-gom: the python/gi binding were wrongly
  packaged as part of the -devel package.
- Run spec-cleaner: adds pkgconfig-BuildRequires.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 0.4:
  + Fix primary-keys never being monitored, which triggered crashes
    with GLib 2.63.
  + Test for invalid table names.
  + Install Python overrides in correct location.
  + Fix storage of NULL GDateTime values.
  + Fix constraints test under older versions of SQLite.</changelog>
</package>
<package pkgid="b9bbeaa6e48f04cc65aefd6f4b1b7070f9cd48839ffa209d48ea75d4f0a4862e" name="gom-devel" arch="ppc64le">
  <version epoch="0" ver="0.4" rel="150200.3.2.1"/>
  <changelog author="zaitor@opensuse.org" date="1408968000">- Initial packaging version 0.2.1</changelog>
  <changelog author="dimstar@opensuse.org" date="1424174400">- Update to version 0.3.0:
  + Update COPYING to LGPL 2.1+ to match headers.
  + Add support for batched writes.
  + Support the GLOB operator.
  + Fix stacking of filters.
  + Fix possible crashes on exit.
  + Remove "adapter" property from GomResourceGroup.
  + Fix a bug in automatic migration.
  + Fix a number of bugs related to using GOM in bindings and in
    multi-thread unsafe interpreters.
  + Make gdk-pixbuf an optional dependency.</changelog>
  <changelog author="zaitor@opensuse.org" date="1430308800">- Update to version 0.3.1:
  + Support g_autoptr() for all gom object types.
  + Add IS NULL and IS NOT NULL filters.
  + Add gom_resource_group_delete_[a]sync functions.
  + Fix crash on 64-bit systems with some compiler/compiler flags.
  + Fix saving a modified resource a second time.
  + Fix setting ID after calling gom_resource_group_write_*.
- Add a %check section and pass %{__make} test to it. Actually run
  the already enabled tests. This adds quite a bit to build time,
  but all testing we can get is good.</changelog>
  <changelog author="damjanovic.ivo@gmail.com" date="1451217600">- Updated to version 0.3.2:
  + Add missing annotation for repository object.
  + Support ordering queries.
  + Add support for creating new tables in a version.
  + Fix memory leak in GomResource.
  + Bindings:
  - Add missing annotation for repository object.
  - Add a working Python example.
  - Make ResourceGroup a sequence in Python bindings.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498132800">- Update to version 0.3.3:
  + Replace hardcoded values in pkg-config file.
  + Add a JavaScript example.
  + Remove i18n support, as there are no user-visible strings.
  + Replace autotools build system with meson.
- Add meson BuildRequires and switch autotools macros configure,
  make, make test and makeinstall to meson, meson_build, meson_test
  and meson_install following upstream switch to Meson build
  system.
- Add explicit python3-gobject BuildRequires to workaround
  build-fail, upstream expects everyone to have moved to python3 as
  default python.
- Drop intltool BuildRequires: No longer needed.
- Following the above, drop lang subpackage and macros handling
  translations, and drop gom-lang Recommends and gom Provides from
  libgom-1_0-0 subpackage. Add gom-lang Obsoletes to ease updates.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500552000">- Temp disable meson_check while we figure out why it randomly
  fails on x86_64.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries an RPM groups. Trim non-telling parts of
  descriptions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505304000">- Split out python3-gom: the python/gi binding were wrongly
  packaged as part of the -devel package.
- Run spec-cleaner: adds pkgconfig-BuildRequires.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 0.4:
  + Fix primary-keys never being monitored, which triggered crashes
    with GLib 2.63.
  + Test for invalid table names.
  + Install Python overrides in correct location.
  + Fix storage of NULL GDateTime values.
  + Fix constraints test under older versions of SQLite.</changelog>
</package>
<package pkgid="17cc09e6c3f7f72f4f67aa61d7eef6f4e7bf475023a36efe94bd29dc32d272ed" name="gom-devel" arch="s390x">
  <version epoch="0" ver="0.4" rel="150200.3.2.1"/>
  <changelog author="zaitor@opensuse.org" date="1408968000">- Initial packaging version 0.2.1</changelog>
  <changelog author="dimstar@opensuse.org" date="1424174400">- Update to version 0.3.0:
  + Update COPYING to LGPL 2.1+ to match headers.
  + Add support for batched writes.
  + Support the GLOB operator.
  + Fix stacking of filters.
  + Fix possible crashes on exit.
  + Remove "adapter" property from GomResourceGroup.
  + Fix a bug in automatic migration.
  + Fix a number of bugs related to using GOM in bindings and in
    multi-thread unsafe interpreters.
  + Make gdk-pixbuf an optional dependency.</changelog>
  <changelog author="zaitor@opensuse.org" date="1430308800">- Update to version 0.3.1:
  + Support g_autoptr() for all gom object types.
  + Add IS NULL and IS NOT NULL filters.
  + Add gom_resource_group_delete_[a]sync functions.
  + Fix crash on 64-bit systems with some compiler/compiler flags.
  + Fix saving a modified resource a second time.
  + Fix setting ID after calling gom_resource_group_write_*.
- Add a %check section and pass %{__make} test to it. Actually run
  the already enabled tests. This adds quite a bit to build time,
  but all testing we can get is good.</changelog>
  <changelog author="damjanovic.ivo@gmail.com" date="1451217600">- Updated to version 0.3.2:
  + Add missing annotation for repository object.
  + Support ordering queries.
  + Add support for creating new tables in a version.
  + Fix memory leak in GomResource.
  + Bindings:
  - Add missing annotation for repository object.
  - Add a working Python example.
  - Make ResourceGroup a sequence in Python bindings.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498132800">- Update to version 0.3.3:
  + Replace hardcoded values in pkg-config file.
  + Add a JavaScript example.
  + Remove i18n support, as there are no user-visible strings.
  + Replace autotools build system with meson.
- Add meson BuildRequires and switch autotools macros configure,
  make, make test and makeinstall to meson, meson_build, meson_test
  and meson_install following upstream switch to Meson build
  system.
- Add explicit python3-gobject BuildRequires to workaround
  build-fail, upstream expects everyone to have moved to python3 as
  default python.
- Drop intltool BuildRequires: No longer needed.
- Following the above, drop lang subpackage and macros handling
  translations, and drop gom-lang Recommends and gom Provides from
  libgom-1_0-0 subpackage. Add gom-lang Obsoletes to ease updates.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500552000">- Temp disable meson_check while we figure out why it randomly
  fails on x86_64.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries an RPM groups. Trim non-telling parts of
  descriptions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505304000">- Split out python3-gom: the python/gi binding were wrongly
  packaged as part of the -devel package.
- Run spec-cleaner: adds pkgconfig-BuildRequires.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 0.4:
  + Fix primary-keys never being monitored, which triggered crashes
    with GLib 2.63.
  + Test for invalid table names.
  + Install Python overrides in correct location.
  + Fix storage of NULL GDateTime values.
  + Fix constraints test under older versions of SQLite.</changelog>
</package>
<package pkgid="6d2e1d8977b5e5b3ba463a6bd4f0c6590d2d2fe7f36306e58bfb50a1915052ae" name="gom-devel" arch="x86_64">
  <version epoch="0" ver="0.4" rel="150200.3.2.1"/>
  <changelog author="zaitor@opensuse.org" date="1408968000">- Initial packaging version 0.2.1</changelog>
  <changelog author="dimstar@opensuse.org" date="1424174400">- Update to version 0.3.0:
  + Update COPYING to LGPL 2.1+ to match headers.
  + Add support for batched writes.
  + Support the GLOB operator.
  + Fix stacking of filters.
  + Fix possible crashes on exit.
  + Remove "adapter" property from GomResourceGroup.
  + Fix a bug in automatic migration.
  + Fix a number of bugs related to using GOM in bindings and in
    multi-thread unsafe interpreters.
  + Make gdk-pixbuf an optional dependency.</changelog>
  <changelog author="zaitor@opensuse.org" date="1430308800">- Update to version 0.3.1:
  + Support g_autoptr() for all gom object types.
  + Add IS NULL and IS NOT NULL filters.
  + Add gom_resource_group_delete_[a]sync functions.
  + Fix crash on 64-bit systems with some compiler/compiler flags.
  + Fix saving a modified resource a second time.
  + Fix setting ID after calling gom_resource_group_write_*.
- Add a %check section and pass %{__make} test to it. Actually run
  the already enabled tests. This adds quite a bit to build time,
  but all testing we can get is good.</changelog>
  <changelog author="damjanovic.ivo@gmail.com" date="1451217600">- Updated to version 0.3.2:
  + Add missing annotation for repository object.
  + Support ordering queries.
  + Add support for creating new tables in a version.
  + Fix memory leak in GomResource.
  + Bindings:
  - Add missing annotation for repository object.
  - Add a working Python example.
  - Make ResourceGroup a sequence in Python bindings.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498132800">- Update to version 0.3.3:
  + Replace hardcoded values in pkg-config file.
  + Add a JavaScript example.
  + Remove i18n support, as there are no user-visible strings.
  + Replace autotools build system with meson.
- Add meson BuildRequires and switch autotools macros configure,
  make, make test and makeinstall to meson, meson_build, meson_test
  and meson_install following upstream switch to Meson build
  system.
- Add explicit python3-gobject BuildRequires to workaround
  build-fail, upstream expects everyone to have moved to python3 as
  default python.
- Drop intltool BuildRequires: No longer needed.
- Following the above, drop lang subpackage and macros handling
  translations, and drop gom-lang Recommends and gom Provides from
  libgom-1_0-0 subpackage. Add gom-lang Obsoletes to ease updates.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500552000">- Temp disable meson_check while we figure out why it randomly
  fails on x86_64.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries an RPM groups. Trim non-telling parts of
  descriptions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505304000">- Split out python3-gom: the python/gi binding were wrongly
  packaged as part of the -devel package.
- Run spec-cleaner: adds pkgconfig-BuildRequires.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 0.4:
  + Fix primary-keys never being monitored, which triggered crashes
    with GLib 2.63.
  + Test for invalid table names.
  + Install Python overrides in correct location.
  + Fix storage of NULL GDateTime values.
  + Fix constraints test under older versions of SQLite.</changelog>
</package>
<package pkgid="37f4bf016faa15c62e0519b2b3913f80dcd2e9e875bff964274f108fdbfc1bf5" name="google-guest-agent" arch="aarch64">
  <version epoch="0" ver="20220204.00" rel="150000.1.26.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200630.00
  + Replaces google-compute-engine-init package</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200819.00 (bsc#1175740, bsc#1175741)
  * handle oslogin enable/disable cases (#70) (bsc#1175173)
  * add README (#69)
  * Fix metric for addIPForwardEntry (#68)
  * Correctly determine default route index (#67)
  * oslogin: dont add entry to pam.d/su (#66)
  * end group.conf with newline (#64)
  * Add source field in googet spec (#59)
  * Set route to metadata on interface with default route (#47)
  * fix typo in boto.cfg (#62)
- Properly handle enabling of systemd services when upgrading
  from the old google-compute-engine-init package (bsc#1174745)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601553600">- Update to version 20200929.00
  * correct varname (#75)
  * don't call dhclient -x on network setup (#77)
  * add instance id dir override (#78)
  * update agent systemd service file (#73)
  * typo, change to noadjfile (#79)
  * add gaohannk to OWNERS
  * remove illfelder from OWNERS
  * Add all license files to packages (#71)</changelog>
  <changelog author="jgleissner@suse.com" date="1603454400">- dont_overwrite_ifcfg.patch: Do not overwrite existing ifcfg files
  to allow manual configuration and compatibility with
  cloud-netconfig (bsc#1159460, bsc#1178486)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1603972800">- Update to version 20201026.00
  * remove old unused workflow files (#86)
  * fallback to IP for metadata (#82)
  * getPasswd: Check full prefix of line for username (#81)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1606219200">- Update to version 20201102.00 (bsc#1179031, bsc#1179032)
  * Only attempt to connect to snapshot service once (#88)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20201211.00
  * Require snapshot scripts to live under /etc/google/snapshots (#90)
  * Adding support for Windows user account password lengths
    between 15 and 255 characters. (#91)
  * Adding bkatyl to OWNERS (#92)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210223.01 (bsc#1183414, bsc#1183415)
  * add a match block to sshd_config for SAs (#99)
  * add ipv6 forwarded ip support (#101)
  * call restorecon on ssh host keys (#98)
  * Include startup and shutdown in preset (#96)
  * set metadata URL earlier (#94)
- Fix activation logic of systemd services (bsc#1182793)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210414.00 (bsc#1185848, bsc#1185849)
  * start sshd (#106)
  * Add systemd-networkd.service restart dependency. (#104)
  * Update error message for handleHealthCheckRequest. (#105)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 20210603.00
  * systemd-notify in agentInit (#113)
  * dont check status (#112)
- from version 20210524.00
  * more granular service restarts (#111)
- from version 20210414.00
  * (no functional changes)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626696000">- Update to version 20210707.00
  * Use IP address for calling the metadata server. (#116)
- from version 20210629.00
  * use IP for MDS (#115)</changelog>
  <changelog author="bwiedemann@suse.com" date="1627387200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1634904000">- Update to version 20211019.00
  * handle comm errors in script runner (#140)
- from version 20211015.00
  * enforce script ordering (#138)
- from version 20211014.00
  * enable ipv6 on secondary interfaces (#133)
- from version 20211013.00
  * dont open ssh tempfile exclusively (#137)
- from version 20211011.00
  * correct linux startup script order (#135)
  * Emit sshable attribute (#123)
- from version 20210908.1
  * restore line (#127)
- from version 20210908.00
  * New integ test (#124)
- from version 20210901.00
  * support enable-oslogin-sk key (#120)
  * match script logging to guest agent (#125)
- from version 20210804.00
  * Debug logging (#122)
- Refresh patches for new version
  * dont_overwrite_ifcfg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1637236800">- Update to version 20211116.00 (bsc#1193257, bsc#1193258)
  * dont duplicate logs (#146)
  * Add WantedBy network dependencies to google-guest-agent service (#136)
  * dont try dhcpv6 when not needed (#145)
  * Integration tests: instance setup (#143)
  * Integration test: test create and remove google user (#128)
  * handle comm errors in script runner (#140)
  * enforce script ordering (#138)
  * enable ipv6 on secondary interfaces (#133)
- from version 20211103.00
  * Integration tests: instance setup (#143)
- from version 20211027.00
  * Integration test: test create and remove google user (#128)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644321600">- Update to version 20220204.00 (bsc#1195437, bsc#1195438)
  * remove han from owners (#154)
  * Remove extra slash from metadata URL. (#151)
- from version 20220104.00
  * List IPv6 routes (#150)
- from version 20211228.00
  * add add or remove route integration test, utils (#147)
- from version 20211214.00
  * add malformed ssh key unit test  (#142)</changelog>
</package>
<package pkgid="b5181cd7060944b5cae1ac5352d04d12105aee9001a5165b3de2a413f6154e41" name="google-guest-agent" arch="ppc64le">
  <version epoch="0" ver="20220204.00" rel="150000.1.26.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200630.00
  + Replaces google-compute-engine-init package</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200819.00 (bsc#1175740, bsc#1175741)
  * handle oslogin enable/disable cases (#70) (bsc#1175173)
  * add README (#69)
  * Fix metric for addIPForwardEntry (#68)
  * Correctly determine default route index (#67)
  * oslogin: dont add entry to pam.d/su (#66)
  * end group.conf with newline (#64)
  * Add source field in googet spec (#59)
  * Set route to metadata on interface with default route (#47)
  * fix typo in boto.cfg (#62)
- Properly handle enabling of systemd services when upgrading
  from the old google-compute-engine-init package (bsc#1174745)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601553600">- Update to version 20200929.00
  * correct varname (#75)
  * don't call dhclient -x on network setup (#77)
  * add instance id dir override (#78)
  * update agent systemd service file (#73)
  * typo, change to noadjfile (#79)
  * add gaohannk to OWNERS
  * remove illfelder from OWNERS
  * Add all license files to packages (#71)</changelog>
  <changelog author="jgleissner@suse.com" date="1603454400">- dont_overwrite_ifcfg.patch: Do not overwrite existing ifcfg files
  to allow manual configuration and compatibility with
  cloud-netconfig (bsc#1159460, bsc#1178486)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1603972800">- Update to version 20201026.00
  * remove old unused workflow files (#86)
  * fallback to IP for metadata (#82)
  * getPasswd: Check full prefix of line for username (#81)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1606219200">- Update to version 20201102.00 (bsc#1179031, bsc#1179032)
  * Only attempt to connect to snapshot service once (#88)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20201211.00
  * Require snapshot scripts to live under /etc/google/snapshots (#90)
  * Adding support for Windows user account password lengths
    between 15 and 255 characters. (#91)
  * Adding bkatyl to OWNERS (#92)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210223.01 (bsc#1183414, bsc#1183415)
  * add a match block to sshd_config for SAs (#99)
  * add ipv6 forwarded ip support (#101)
  * call restorecon on ssh host keys (#98)
  * Include startup and shutdown in preset (#96)
  * set metadata URL earlier (#94)
- Fix activation logic of systemd services (bsc#1182793)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210414.00 (bsc#1185848, bsc#1185849)
  * start sshd (#106)
  * Add systemd-networkd.service restart dependency. (#104)
  * Update error message for handleHealthCheckRequest. (#105)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 20210603.00
  * systemd-notify in agentInit (#113)
  * dont check status (#112)
- from version 20210524.00
  * more granular service restarts (#111)
- from version 20210414.00
  * (no functional changes)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626696000">- Update to version 20210707.00
  * Use IP address for calling the metadata server. (#116)
- from version 20210629.00
  * use IP for MDS (#115)</changelog>
  <changelog author="bwiedemann@suse.com" date="1627387200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1634904000">- Update to version 20211019.00
  * handle comm errors in script runner (#140)
- from version 20211015.00
  * enforce script ordering (#138)
- from version 20211014.00
  * enable ipv6 on secondary interfaces (#133)
- from version 20211013.00
  * dont open ssh tempfile exclusively (#137)
- from version 20211011.00
  * correct linux startup script order (#135)
  * Emit sshable attribute (#123)
- from version 20210908.1
  * restore line (#127)
- from version 20210908.00
  * New integ test (#124)
- from version 20210901.00
  * support enable-oslogin-sk key (#120)
  * match script logging to guest agent (#125)
- from version 20210804.00
  * Debug logging (#122)
- Refresh patches for new version
  * dont_overwrite_ifcfg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1637236800">- Update to version 20211116.00 (bsc#1193257, bsc#1193258)
  * dont duplicate logs (#146)
  * Add WantedBy network dependencies to google-guest-agent service (#136)
  * dont try dhcpv6 when not needed (#145)
  * Integration tests: instance setup (#143)
  * Integration test: test create and remove google user (#128)
  * handle comm errors in script runner (#140)
  * enforce script ordering (#138)
  * enable ipv6 on secondary interfaces (#133)
- from version 20211103.00
  * Integration tests: instance setup (#143)
- from version 20211027.00
  * Integration test: test create and remove google user (#128)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644321600">- Update to version 20220204.00 (bsc#1195437, bsc#1195438)
  * remove han from owners (#154)
  * Remove extra slash from metadata URL. (#151)
- from version 20220104.00
  * List IPv6 routes (#150)
- from version 20211228.00
  * add add or remove route integration test, utils (#147)
- from version 20211214.00
  * add malformed ssh key unit test  (#142)</changelog>
</package>
<package pkgid="e3981845b8a7ff35fb98d03f725d7597d1bf7d23506d697d6881b4fb70626ad5" name="google-guest-agent" arch="s390x">
  <version epoch="0" ver="20220204.00" rel="150000.1.26.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200630.00
  + Replaces google-compute-engine-init package</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200819.00 (bsc#1175740, bsc#1175741)
  * handle oslogin enable/disable cases (#70) (bsc#1175173)
  * add README (#69)
  * Fix metric for addIPForwardEntry (#68)
  * Correctly determine default route index (#67)
  * oslogin: dont add entry to pam.d/su (#66)
  * end group.conf with newline (#64)
  * Add source field in googet spec (#59)
  * Set route to metadata on interface with default route (#47)
  * fix typo in boto.cfg (#62)
- Properly handle enabling of systemd services when upgrading
  from the old google-compute-engine-init package (bsc#1174745)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601553600">- Update to version 20200929.00
  * correct varname (#75)
  * don't call dhclient -x on network setup (#77)
  * add instance id dir override (#78)
  * update agent systemd service file (#73)
  * typo, change to noadjfile (#79)
  * add gaohannk to OWNERS
  * remove illfelder from OWNERS
  * Add all license files to packages (#71)</changelog>
  <changelog author="jgleissner@suse.com" date="1603454400">- dont_overwrite_ifcfg.patch: Do not overwrite existing ifcfg files
  to allow manual configuration and compatibility with
  cloud-netconfig (bsc#1159460, bsc#1178486)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1603972800">- Update to version 20201026.00
  * remove old unused workflow files (#86)
  * fallback to IP for metadata (#82)
  * getPasswd: Check full prefix of line for username (#81)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1606219200">- Update to version 20201102.00 (bsc#1179031, bsc#1179032)
  * Only attempt to connect to snapshot service once (#88)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20201211.00
  * Require snapshot scripts to live under /etc/google/snapshots (#90)
  * Adding support for Windows user account password lengths
    between 15 and 255 characters. (#91)
  * Adding bkatyl to OWNERS (#92)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210223.01 (bsc#1183414, bsc#1183415)
  * add a match block to sshd_config for SAs (#99)
  * add ipv6 forwarded ip support (#101)
  * call restorecon on ssh host keys (#98)
  * Include startup and shutdown in preset (#96)
  * set metadata URL earlier (#94)
- Fix activation logic of systemd services (bsc#1182793)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210414.00 (bsc#1185848, bsc#1185849)
  * start sshd (#106)
  * Add systemd-networkd.service restart dependency. (#104)
  * Update error message for handleHealthCheckRequest. (#105)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 20210603.00
  * systemd-notify in agentInit (#113)
  * dont check status (#112)
- from version 20210524.00
  * more granular service restarts (#111)
- from version 20210414.00
  * (no functional changes)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626696000">- Update to version 20210707.00
  * Use IP address for calling the metadata server. (#116)
- from version 20210629.00
  * use IP for MDS (#115)</changelog>
  <changelog author="bwiedemann@suse.com" date="1627387200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1634904000">- Update to version 20211019.00
  * handle comm errors in script runner (#140)
- from version 20211015.00
  * enforce script ordering (#138)
- from version 20211014.00
  * enable ipv6 on secondary interfaces (#133)
- from version 20211013.00
  * dont open ssh tempfile exclusively (#137)
- from version 20211011.00
  * correct linux startup script order (#135)
  * Emit sshable attribute (#123)
- from version 20210908.1
  * restore line (#127)
- from version 20210908.00
  * New integ test (#124)
- from version 20210901.00
  * support enable-oslogin-sk key (#120)
  * match script logging to guest agent (#125)
- from version 20210804.00
  * Debug logging (#122)
- Refresh patches for new version
  * dont_overwrite_ifcfg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1637236800">- Update to version 20211116.00 (bsc#1193257, bsc#1193258)
  * dont duplicate logs (#146)
  * Add WantedBy network dependencies to google-guest-agent service (#136)
  * dont try dhcpv6 when not needed (#145)
  * Integration tests: instance setup (#143)
  * Integration test: test create and remove google user (#128)
  * handle comm errors in script runner (#140)
  * enforce script ordering (#138)
  * enable ipv6 on secondary interfaces (#133)
- from version 20211103.00
  * Integration tests: instance setup (#143)
- from version 20211027.00
  * Integration test: test create and remove google user (#128)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644321600">- Update to version 20220204.00 (bsc#1195437, bsc#1195438)
  * remove han from owners (#154)
  * Remove extra slash from metadata URL. (#151)
- from version 20220104.00
  * List IPv6 routes (#150)
- from version 20211228.00
  * add add or remove route integration test, utils (#147)
- from version 20211214.00
  * add malformed ssh key unit test  (#142)</changelog>
</package>
<package pkgid="9fe862a9bf676dab578546b95dfab772756e3c837baa438b16c7f9bbc4f5067c" name="google-guest-agent" arch="src">
  <version epoch="0" ver="20220204.00" rel="150000.1.26.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200630.00
  + Replaces google-compute-engine-init package</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200819.00 (bsc#1175740, bsc#1175741)
  * handle oslogin enable/disable cases (#70) (bsc#1175173)
  * add README (#69)
  * Fix metric for addIPForwardEntry (#68)
  * Correctly determine default route index (#67)
  * oslogin: dont add entry to pam.d/su (#66)
  * end group.conf with newline (#64)
  * Add source field in googet spec (#59)
  * Set route to metadata on interface with default route (#47)
  * fix typo in boto.cfg (#62)
- Properly handle enabling of systemd services when upgrading
  from the old google-compute-engine-init package (bsc#1174745)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601553600">- Update to version 20200929.00
  * correct varname (#75)
  * don't call dhclient -x on network setup (#77)
  * add instance id dir override (#78)
  * update agent systemd service file (#73)
  * typo, change to noadjfile (#79)
  * add gaohannk to OWNERS
  * remove illfelder from OWNERS
  * Add all license files to packages (#71)</changelog>
  <changelog author="jgleissner@suse.com" date="1603454400">- dont_overwrite_ifcfg.patch: Do not overwrite existing ifcfg files
  to allow manual configuration and compatibility with
  cloud-netconfig (bsc#1159460, bsc#1178486)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1603972800">- Update to version 20201026.00
  * remove old unused workflow files (#86)
  * fallback to IP for metadata (#82)
  * getPasswd: Check full prefix of line for username (#81)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1606219200">- Update to version 20201102.00 (bsc#1179031, bsc#1179032)
  * Only attempt to connect to snapshot service once (#88)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20201211.00
  * Require snapshot scripts to live under /etc/google/snapshots (#90)
  * Adding support for Windows user account password lengths
    between 15 and 255 characters. (#91)
  * Adding bkatyl to OWNERS (#92)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210223.01 (bsc#1183414, bsc#1183415)
  * add a match block to sshd_config for SAs (#99)
  * add ipv6 forwarded ip support (#101)
  * call restorecon on ssh host keys (#98)
  * Include startup and shutdown in preset (#96)
  * set metadata URL earlier (#94)
- Fix activation logic of systemd services (bsc#1182793)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210414.00 (bsc#1185848, bsc#1185849)
  * start sshd (#106)
  * Add systemd-networkd.service restart dependency. (#104)
  * Update error message for handleHealthCheckRequest. (#105)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 20210603.00
  * systemd-notify in agentInit (#113)
  * dont check status (#112)
- from version 20210524.00
  * more granular service restarts (#111)
- from version 20210414.00
  * (no functional changes)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626696000">- Update to version 20210707.00
  * Use IP address for calling the metadata server. (#116)
- from version 20210629.00
  * use IP for MDS (#115)</changelog>
  <changelog author="bwiedemann@suse.com" date="1627387200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1634904000">- Update to version 20211019.00
  * handle comm errors in script runner (#140)
- from version 20211015.00
  * enforce script ordering (#138)
- from version 20211014.00
  * enable ipv6 on secondary interfaces (#133)
- from version 20211013.00
  * dont open ssh tempfile exclusively (#137)
- from version 20211011.00
  * correct linux startup script order (#135)
  * Emit sshable attribute (#123)
- from version 20210908.1
  * restore line (#127)
- from version 20210908.00
  * New integ test (#124)
- from version 20210901.00
  * support enable-oslogin-sk key (#120)
  * match script logging to guest agent (#125)
- from version 20210804.00
  * Debug logging (#122)
- Refresh patches for new version
  * dont_overwrite_ifcfg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1637236800">- Update to version 20211116.00 (bsc#1193257, bsc#1193258)
  * dont duplicate logs (#146)
  * Add WantedBy network dependencies to google-guest-agent service (#136)
  * dont try dhcpv6 when not needed (#145)
  * Integration tests: instance setup (#143)
  * Integration test: test create and remove google user (#128)
  * handle comm errors in script runner (#140)
  * enforce script ordering (#138)
  * enable ipv6 on secondary interfaces (#133)
- from version 20211103.00
  * Integration tests: instance setup (#143)
- from version 20211027.00
  * Integration test: test create and remove google user (#128)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644321600">- Update to version 20220204.00 (bsc#1195437, bsc#1195438)
  * remove han from owners (#154)
  * Remove extra slash from metadata URL. (#151)
- from version 20220104.00
  * List IPv6 routes (#150)
- from version 20211228.00
  * add add or remove route integration test, utils (#147)
- from version 20211214.00
  * add malformed ssh key unit test  (#142)</changelog>
</package>
<package pkgid="488edc57cf993ba0935be18a72155fcb18aaef283a99eaf3eab0e343c041df99" name="google-guest-agent" arch="x86_64">
  <version epoch="0" ver="20220204.00" rel="150000.1.26.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200630.00
  + Replaces google-compute-engine-init package</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200819.00 (bsc#1175740, bsc#1175741)
  * handle oslogin enable/disable cases (#70) (bsc#1175173)
  * add README (#69)
  * Fix metric for addIPForwardEntry (#68)
  * Correctly determine default route index (#67)
  * oslogin: dont add entry to pam.d/su (#66)
  * end group.conf with newline (#64)
  * Add source field in googet spec (#59)
  * Set route to metadata on interface with default route (#47)
  * fix typo in boto.cfg (#62)
- Properly handle enabling of systemd services when upgrading
  from the old google-compute-engine-init package (bsc#1174745)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1601553600">- Update to version 20200929.00
  * correct varname (#75)
  * don't call dhclient -x on network setup (#77)
  * add instance id dir override (#78)
  * update agent systemd service file (#73)
  * typo, change to noadjfile (#79)
  * add gaohannk to OWNERS
  * remove illfelder from OWNERS
  * Add all license files to packages (#71)</changelog>
  <changelog author="jgleissner@suse.com" date="1603454400">- dont_overwrite_ifcfg.patch: Do not overwrite existing ifcfg files
  to allow manual configuration and compatibility with
  cloud-netconfig (bsc#1159460, bsc#1178486)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1603972800">- Update to version 20201026.00
  * remove old unused workflow files (#86)
  * fallback to IP for metadata (#82)
  * getPasswd: Check full prefix of line for username (#81)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1606219200">- Update to version 20201102.00 (bsc#1179031, bsc#1179032)
  * Only attempt to connect to snapshot service once (#88)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20201211.00
  * Require snapshot scripts to live under /etc/google/snapshots (#90)
  * Adding support for Windows user account password lengths
    between 15 and 255 characters. (#91)
  * Adding bkatyl to OWNERS (#92)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210223.01 (bsc#1183414, bsc#1183415)
  * add a match block to sshd_config for SAs (#99)
  * add ipv6 forwarded ip support (#101)
  * call restorecon on ssh host keys (#98)
  * Include startup and shutdown in preset (#96)
  * set metadata URL earlier (#94)
- Fix activation logic of systemd services (bsc#1182793)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210414.00 (bsc#1185848, bsc#1185849)
  * start sshd (#106)
  * Add systemd-networkd.service restart dependency. (#104)
  * Update error message for handleHealthCheckRequest. (#105)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 20210603.00
  * systemd-notify in agentInit (#113)
  * dont check status (#112)
- from version 20210524.00
  * more granular service restarts (#111)
- from version 20210414.00
  * (no functional changes)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626696000">- Update to version 20210707.00
  * Use IP address for calling the metadata server. (#116)
- from version 20210629.00
  * use IP for MDS (#115)</changelog>
  <changelog author="bwiedemann@suse.com" date="1627387200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1634904000">- Update to version 20211019.00
  * handle comm errors in script runner (#140)
- from version 20211015.00
  * enforce script ordering (#138)
- from version 20211014.00
  * enable ipv6 on secondary interfaces (#133)
- from version 20211013.00
  * dont open ssh tempfile exclusively (#137)
- from version 20211011.00
  * correct linux startup script order (#135)
  * Emit sshable attribute (#123)
- from version 20210908.1
  * restore line (#127)
- from version 20210908.00
  * New integ test (#124)
- from version 20210901.00
  * support enable-oslogin-sk key (#120)
  * match script logging to guest agent (#125)
- from version 20210804.00
  * Debug logging (#122)
- Refresh patches for new version
  * dont_overwrite_ifcfg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1637236800">- Update to version 20211116.00 (bsc#1193257, bsc#1193258)
  * dont duplicate logs (#146)
  * Add WantedBy network dependencies to google-guest-agent service (#136)
  * dont try dhcpv6 when not needed (#145)
  * Integration tests: instance setup (#143)
  * Integration test: test create and remove google user (#128)
  * handle comm errors in script runner (#140)
  * enforce script ordering (#138)
  * enable ipv6 on secondary interfaces (#133)
- from version 20211103.00
  * Integration tests: instance setup (#143)
- from version 20211027.00
  * Integration test: test create and remove google user (#128)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644321600">- Update to version 20220204.00 (bsc#1195437, bsc#1195438)
  * remove han from owners (#154)
  * Remove extra slash from metadata URL. (#151)
- from version 20220104.00
  * List IPv6 routes (#150)
- from version 20211228.00
  * add add or remove route integration test, utils (#147)
- from version 20211214.00
  * add malformed ssh key unit test  (#142)</changelog>
</package>
<package pkgid="ccca62ce7eb1b6a4c72ea85bfc7d41328554278f8face09d08723b0577b95285" name="google-guest-oslogin" arch="aarch64">
  <version epoch="0" ver="20220205.00" rel="150000.1.27.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200507.00
  + Replaces google-compute-engine-oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- No post action for ssh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200819.00 (bsc#1175740, bsc#1175741)
  * deny non-2fa users (#37)
  * use asterisks instead (#39)
  * set passwords to ! (#38)
  * correct index 0 bug (#36)
  * Support security key generated OTP challenges. (#35)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200925.00 (bsc#1179031, bsc#1179032)
  * add getpwnam,getpwuid,getgrnam,getgrgid (#42)
  * Change requires to not require the python library for policycoreutils. (#44)
  * add dial and recvline (#41)
  * PR feedback
  * new client component and tests</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210108.00
  * Update logic in the cache_refresh binary (#52)
  * remove old unused workflow files (#49)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * call correct function in pwenthelper (#53)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210429.00 (bsc#1185848, bsc#1185849)
  * correct pagetoken in groupsforuser (#59)
  * resolve self groups last (#58)
  * support empty groups (#57)
  * no paginating to find groups (#56)
  * clear users vector (#55)
  * correct usage of pagetoken (#54)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 20210618.00
  * flush each group member write (#62)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626696000">- Update to version 20210707.00
  * throw exceptions in cache_refresh (#64)
- from version 20210702.00
  * Use IP address for calling the metadata server. (#63)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1628078400">- Update to version 20210728.00 (bsc#1188992, bsc#1189041)
  * JSON object cleanup (#65)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1634904000">- Update to version 20211013.00 (bsc#1193257, bsc#1193258)
  * remove deprecated binary (#79)
- from version 20211001.00
  * no message if no groups (#78)
- from version 20210907.00
  * use sigaction for signals (#76)
- from version 20210906.00
  * include cstdlib for exit (#75)
  * catch SIGPIPE in authorized_keys (#73)
- from version 20210805.00
  * fix double free in ParseJsonToKey (#70)
- from version 20210804.00
  * fix packaging for authorized_keys_sk (#68)
  * add authorized_keys_sk (#66)
- Add google_authorized_keys_sk to %files section
- Remove google_oslogin_control from %files section</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644321600">- Update to version 20220205.00 (bsc#1195437, bsc#1195438)
  * Fix build for EL9. (#82)
- from version 20211213.00
  * Reauth error (#81)
- Rename Source0 field to Source
- Update URL in Source field to point to upstream tarball</changelog>
</package>
<package pkgid="04b35608e38e0c7903f3cdf8d26f087eaef6362a6034e506cc749f436da3d1d9" name="google-guest-oslogin" arch="ppc64le">
  <version epoch="0" ver="20220205.00" rel="150000.1.27.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200507.00
  + Replaces google-compute-engine-oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- No post action for ssh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200819.00 (bsc#1175740, bsc#1175741)
  * deny non-2fa users (#37)
  * use asterisks instead (#39)
  * set passwords to ! (#38)
  * correct index 0 bug (#36)
  * Support security key generated OTP challenges. (#35)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200925.00 (bsc#1179031, bsc#1179032)
  * add getpwnam,getpwuid,getgrnam,getgrgid (#42)
  * Change requires to not require the python library for policycoreutils. (#44)
  * add dial and recvline (#41)
  * PR feedback
  * new client component and tests</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210108.00
  * Update logic in the cache_refresh binary (#52)
  * remove old unused workflow files (#49)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * call correct function in pwenthelper (#53)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210429.00 (bsc#1185848, bsc#1185849)
  * correct pagetoken in groupsforuser (#59)
  * resolve self groups last (#58)
  * support empty groups (#57)
  * no paginating to find groups (#56)
  * clear users vector (#55)
  * correct usage of pagetoken (#54)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 20210618.00
  * flush each group member write (#62)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626696000">- Update to version 20210707.00
  * throw exceptions in cache_refresh (#64)
- from version 20210702.00
  * Use IP address for calling the metadata server. (#63)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1628078400">- Update to version 20210728.00 (bsc#1188992, bsc#1189041)
  * JSON object cleanup (#65)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1634904000">- Update to version 20211013.00 (bsc#1193257, bsc#1193258)
  * remove deprecated binary (#79)
- from version 20211001.00
  * no message if no groups (#78)
- from version 20210907.00
  * use sigaction for signals (#76)
- from version 20210906.00
  * include cstdlib for exit (#75)
  * catch SIGPIPE in authorized_keys (#73)
- from version 20210805.00
  * fix double free in ParseJsonToKey (#70)
- from version 20210804.00
  * fix packaging for authorized_keys_sk (#68)
  * add authorized_keys_sk (#66)
- Add google_authorized_keys_sk to %files section
- Remove google_oslogin_control from %files section</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644321600">- Update to version 20220205.00 (bsc#1195437, bsc#1195438)
  * Fix build for EL9. (#82)
- from version 20211213.00
  * Reauth error (#81)
- Rename Source0 field to Source
- Update URL in Source field to point to upstream tarball</changelog>
</package>
<package pkgid="a882999112556629b844f58ecf956bd328f057bcb012d6983afaa8dace1e9d1c" name="google-guest-oslogin" arch="s390x">
  <version epoch="0" ver="20220205.00" rel="150000.1.27.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200507.00
  + Replaces google-compute-engine-oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- No post action for ssh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200819.00 (bsc#1175740, bsc#1175741)
  * deny non-2fa users (#37)
  * use asterisks instead (#39)
  * set passwords to ! (#38)
  * correct index 0 bug (#36)
  * Support security key generated OTP challenges. (#35)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200925.00 (bsc#1179031, bsc#1179032)
  * add getpwnam,getpwuid,getgrnam,getgrgid (#42)
  * Change requires to not require the python library for policycoreutils. (#44)
  * add dial and recvline (#41)
  * PR feedback
  * new client component and tests</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210108.00
  * Update logic in the cache_refresh binary (#52)
  * remove old unused workflow files (#49)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * call correct function in pwenthelper (#53)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210429.00 (bsc#1185848, bsc#1185849)
  * correct pagetoken in groupsforuser (#59)
  * resolve self groups last (#58)
  * support empty groups (#57)
  * no paginating to find groups (#56)
  * clear users vector (#55)
  * correct usage of pagetoken (#54)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 20210618.00
  * flush each group member write (#62)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626696000">- Update to version 20210707.00
  * throw exceptions in cache_refresh (#64)
- from version 20210702.00
  * Use IP address for calling the metadata server. (#63)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1628078400">- Update to version 20210728.00 (bsc#1188992, bsc#1189041)
  * JSON object cleanup (#65)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1634904000">- Update to version 20211013.00 (bsc#1193257, bsc#1193258)
  * remove deprecated binary (#79)
- from version 20211001.00
  * no message if no groups (#78)
- from version 20210907.00
  * use sigaction for signals (#76)
- from version 20210906.00
  * include cstdlib for exit (#75)
  * catch SIGPIPE in authorized_keys (#73)
- from version 20210805.00
  * fix double free in ParseJsonToKey (#70)
- from version 20210804.00
  * fix packaging for authorized_keys_sk (#68)
  * add authorized_keys_sk (#66)
- Add google_authorized_keys_sk to %files section
- Remove google_oslogin_control from %files section</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644321600">- Update to version 20220205.00 (bsc#1195437, bsc#1195438)
  * Fix build for EL9. (#82)
- from version 20211213.00
  * Reauth error (#81)
- Rename Source0 field to Source
- Update URL in Source field to point to upstream tarball</changelog>
</package>
<package pkgid="02b5433a1ea9530e887949b3838310bbb6bb5a2486abfd580edb9ee04e04ed1c" name="google-guest-oslogin" arch="src">
  <version epoch="0" ver="20220205.00" rel="150000.1.27.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200507.00
  + Replaces google-compute-engine-oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- No post action for ssh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200819.00 (bsc#1175740, bsc#1175741)
  * deny non-2fa users (#37)
  * use asterisks instead (#39)
  * set passwords to ! (#38)
  * correct index 0 bug (#36)
  * Support security key generated OTP challenges. (#35)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200925.00 (bsc#1179031, bsc#1179032)
  * add getpwnam,getpwuid,getgrnam,getgrgid (#42)
  * Change requires to not require the python library for policycoreutils. (#44)
  * add dial and recvline (#41)
  * PR feedback
  * new client component and tests</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210108.00
  * Update logic in the cache_refresh binary (#52)
  * remove old unused workflow files (#49)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * call correct function in pwenthelper (#53)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210429.00 (bsc#1185848, bsc#1185849)
  * correct pagetoken in groupsforuser (#59)
  * resolve self groups last (#58)
  * support empty groups (#57)
  * no paginating to find groups (#56)
  * clear users vector (#55)
  * correct usage of pagetoken (#54)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 20210618.00
  * flush each group member write (#62)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626696000">- Update to version 20210707.00
  * throw exceptions in cache_refresh (#64)
- from version 20210702.00
  * Use IP address for calling the metadata server. (#63)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1628078400">- Update to version 20210728.00 (bsc#1188992, bsc#1189041)
  * JSON object cleanup (#65)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1634904000">- Update to version 20211013.00 (bsc#1193257, bsc#1193258)
  * remove deprecated binary (#79)
- from version 20211001.00
  * no message if no groups (#78)
- from version 20210907.00
  * use sigaction for signals (#76)
- from version 20210906.00
  * include cstdlib for exit (#75)
  * catch SIGPIPE in authorized_keys (#73)
- from version 20210805.00
  * fix double free in ParseJsonToKey (#70)
- from version 20210804.00
  * fix packaging for authorized_keys_sk (#68)
  * add authorized_keys_sk (#66)
- Add google_authorized_keys_sk to %files section
- Remove google_oslogin_control from %files section</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644321600">- Update to version 20220205.00 (bsc#1195437, bsc#1195438)
  * Fix build for EL9. (#82)
- from version 20211213.00
  * Reauth error (#81)
- Rename Source0 field to Source
- Update URL in Source field to point to upstream tarball</changelog>
</package>
<package pkgid="7d26d3d0ae60c2b40bb3387718ba10437b9da14e88f94d456e3d027bfa462a62" name="google-guest-oslogin" arch="x86_64">
  <version epoch="0" ver="20220205.00" rel="150000.1.27.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1595419200">- Initial build (bsc#1174304, bsc#1174306, jsc#ECO-2099, jsc#PM-1945)
  + Version 20200507.00
  + Replaces google-compute-engine-oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1595592000">- No post action for ssh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1598356800">- Update to version 20200819.00 (bsc#1175740, bsc#1175741)
  * deny non-2fa users (#37)
  * use asterisks instead (#39)
  * set passwords to ! (#38)
  * correct index 0 bug (#36)
  * Support security key generated OTP challenges. (#35)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200925.00 (bsc#1179031, bsc#1179032)
  * add getpwnam,getpwuid,getgrnam,getgrgid (#42)
  * Change requires to not require the python library for policycoreutils. (#44)
  * add dial and recvline (#41)
  * PR feedback
  * new client component and tests</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210108.00
  * Update logic in the cache_refresh binary (#52)
  * remove old unused workflow files (#49)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * call correct function in pwenthelper (#53)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210429.00 (bsc#1185848, bsc#1185849)
  * correct pagetoken in groupsforuser (#59)
  * resolve self groups last (#58)
  * support empty groups (#57)
  * no paginating to find groups (#56)
  * clear users vector (#55)
  * correct usage of pagetoken (#54)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 20210618.00
  * flush each group member write (#62)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626696000">- Update to version 20210707.00
  * throw exceptions in cache_refresh (#64)
- from version 20210702.00
  * Use IP address for calling the metadata server. (#63)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1628078400">- Update to version 20210728.00 (bsc#1188992, bsc#1189041)
  * JSON object cleanup (#65)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1634904000">- Update to version 20211013.00 (bsc#1193257, bsc#1193258)
  * remove deprecated binary (#79)
- from version 20211001.00
  * no message if no groups (#78)
- from version 20210907.00
  * use sigaction for signals (#76)
- from version 20210906.00
  * include cstdlib for exit (#75)
  * catch SIGPIPE in authorized_keys (#73)
- from version 20210805.00
  * fix double free in ParseJsonToKey (#70)
- from version 20210804.00
  * fix packaging for authorized_keys_sk (#68)
  * add authorized_keys_sk (#66)
- Add google_authorized_keys_sk to %files section
- Remove google_oslogin_control from %files section</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644321600">- Update to version 20220205.00 (bsc#1195437, bsc#1195438)
  * Fix build for EL9. (#82)
- from version 20211213.00
  * Reauth error (#81)
- Rename Source0 field to Source
- Update URL in Source field to point to upstream tarball</changelog>
</package>
<package pkgid="bfa6b4e9f8da5ad395b8dd7b330cd889ac8742d61dd584ce1e0e390ff34af6e2" name="google-osconfig-agent" arch="aarch64">
  <version epoch="0" ver="20220209.00" rel="150000.1.17.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1600171200">- Initial build (bsc#1176427, bsc#1178249, jsc#ECO-2702, jsc#PM-2203)
  + Version 20200908.00</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200929.00
  * Merge inventory feature from development (#235)
  * Set full version during Windows build (#234)
- Remove Provides/Obsoletes for google-compute-engine-init</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1606219200">- Update to version 20201117.00 (bsc#1179031, bsc#1179032)
  * Ignore Unavailable erros on stream receive (#260)
  * Update test Windows images (#259)
  * update ReportInventory e2e test regexes (#255)
  * Don't return on a windows update error (#254)
  * use retryutil for ReportInventory calls (#253)
  * add additional debug logging for ReportInventory request payload for e2e tests (#252)
  * stop logging instance identity token as part of ReportInventory request and remove
    feature-flag setting in OSInventoryReporting e2e tests (#251)
  * complete ExecTask as no-op when the ExecStepConfig doesn't match the OS (#250)
  * Add software recipe tests for COS (#249)
  * remove feature flag for inventory reporting (#243)
  * Force yum to never colorize output (#247)
  * Add sleep after Unavailable errors for agentendpoint (#241)
  * Ensure we record epoch for rpm packages (#242)
  * Make inventory WUAUpdates call spawn a new process,
    retry on metadata unmarshal error (#239)
  * add debug logging for report inventory response (#240)
  * add initial e2e tests for inventory reporting (#237)
  * Report installed packages on COS (#236)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210112.00
  * Fix builds for ppc and s390x (#274)
  * Minor updates to tests and additional debug logging (#272)
  * Add Ubuntu 2004 to tests (#271)
  * Make sure we stop tickers (#270)
  * Drop Windows 1903 and CentOS 6 from tests (#269)
  * Pin el6 tests to last published image as it is EOL (#267)
  * support cos (#266)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * ExecResource: fix bug in return code handling (#295)
  * Fix ExecResource permissions, add logs to fetcher (#294)
  * e2e_tests: Fix ubuntu proposed family (#293)
  * e2e_tests: add proposed debian images to head tests (#292)
  * Fix exec_resource for config task, add minimal unit test (#291)
  * Change util.WriteFile to AtomicWriteFileStream (#289)
  * Merge development branch into master (#288)
  * Create util.TempFile to work nicely with Windows (#287)
  * Fix copy step write (#286)
  * Fix error on linux lock (#285)
  * Ensure we cleanup on error in AtomicWrite (#284)
  * Make writes atomic, add unused "allowDowngrades" option
    to apt, fix a few recipe issues (#283)
  * update reviewers (#282)
  * update apt package lists before running installs (#281)
  * Simplify build tags for COS package (#280)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210506.00 (bsc#1185848, bsc#1185849)
  * Add more os policy assignment examples (#348)
  * e2e_tests: enable stable tests for OSPolicies (#347)
  * Align start and end task logs (#346)
  * ConfigTask: add additional info logs (#345)
  * e2e_tests: add validation tests (#344)
  * Config Task: make sure agent respects policy mode (#343)
  * update
  * e2e_tests: readd retries to OSPolicies
  * Set minWaitDuration as a string instead of object (#341)
  * e2e_tests: Fix a few SUSE tests (#339)
  * Remove pre-release flag from config (#340)
  * e2e_tests: fixup OSPolicy tests (#338)
  * e2e_tests: unlock mutex for CreatePolicies as soon as create finishes (#337)
  * e2e_tests: Don't retry failed OSPolicy tests, fix msi test (#336)
  * Examples for os policy assignments (#334)
  * e2e_tests: increase the deadline for OSPolicy tests and only start after a zone has been secured (#335)
  * Fix panic when installing MSI (#332)
  * e2e_tests: Add test cases of installing dbe, rpm and msi packages (#333)
  * e2e_tests: add more logging
  * e2e_tests: (#330)
  * e2e_test: Add timouts to OSPolicy tests so we don't wait forever (#329)
  * Create top level directories for gcloud and console for os policy assignment examples (#328)
  * e2e_tests: Move api from an internal directory (#327)
  * Make sure we use the same test name for reruns (#326)
  * Add CONFIG_V1 capability (#325)
  * e2e_tests: reduce size of instances, use pd-balanced, rerun failed tests once (#324)
  * Only report installed packages for dpkg (#322)
  * e2e_tests: fix windows package and repository tests (#323)
  * Add top level directories for os policy examples (#321)
  * e2e_tests: move to using inventory api for inventory reporting (#320)
  * e2e_tests: add ExecResource tests (#319)
  * ExecResource: make sure we set permissions correctly for downloaded files (#318)
  * Config task: only run post check on resources that have already been evaluated (#317)
  * e2e_test: reorganize OSPolicy tests to be per Resource type (#316)
  * Set custom user agent (#299)
  * e2e_tests: check InstanceOSPoliciesCompliance for each test case, add LocalPath FileResource test (#314)
  * PackageResource: make sure to run AptUpdate prior to package install (#315)
  * Fix bugs/add more logging for OSPolicies (#313)
  * Change metadata http client to ignore http proxies (#312)
  * e2e_test: add tests for FileResource (#311)
  * Add task_type context logging (#310)
  * Fix e2e_test typo (#309)
  * Fix e2e_tests (#308)
  * Disable OSPolicies by default since it is an unreleased feature (#307)
  * e2e_tests: Add more OSPolicies package and repo tests (#306)
  * Do not enforce repo_gpgcheck in guestpolicies (#305)
  * Gather inventory 3-5min after agent start (#303)
  * e2e_tests: add OSPolicies tests for package install (#302)
  * Add helpful error log if a service account is missing (#304)
  * OSPolicies: correct apt repo extension, remove yum/zypper gpgcheck override (#301)
  * Update cos library to parse new version of packages file (#300)
  * config_task: Rework config step logic (#296)
  * e2e_test: enable serial logs in cos to support ReportInventory test (#297)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 20210621.00
  * chore: Fixing a comment. (#363)
- from version 20210617.00
  * Use exec.CommandContext so that canceling the context also
    kills any running processes (#362)
- from version 20210608.1
  * e2e_tests: point to official osconfig client library (#359)
- from version 20210608.00
  * e2e_tests: deflake tests (#358)
- from version 20210607.00
  * Fix build on some architectures (#357)
- from version 20210603.00
  * Create win-validation-powershell.yaml (#356)
- from version 20210602.00
  * Agent efficiency improvements/bugfixes/logging updates (#355)
  * e2e_tests: add tests for ExecResource output (#354)
- from version 20210525.00
  * Run fieldalignment on all structs (#353)
- from version 20210521.00
  * Config Task: add error message and ExecResource output recording (#350)
  * e2e_tests: remove Windows server 1909 and add server 20h2 (#352)
  * Added a method for logging structured data (#349)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626696000">- Update to version 20210712.1
  * Skip getting patch info when no patches are found. (#369)
- from version 20210712.00
  * Add Terraform scripts for multi-project deployments (#367)
- from version 20210709.00
  * Add examples/Terraform directory. (#366)
- from version 20210707.00
  * Fix bug in printing packages to update,
    return error for zypper patch (#365)
- from version 20210629.00
  * Add CloudOps examples for CentOS (#364)</changelog>
  <changelog author="bwiedemann@suse.com" date="1627387200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1634904000">- Update to version 20211021.00
  * Added patch report logging for Zypper. (#395)
- from version 20211012.00
  * Replace deprecated instance filters with the new filters (#394)
- from version 20211006.00
  * Added patch report log messages for Yum and Apt (#392)
- from version 20210930.00
  * Config: Add package info caching (#391)
- from version 20210928.00
  * Fixed the runWithPty function to set ctty to child's filedesc (#389)
- from version 20210927.00
  * e2e_tests: fix a test output mismatch (#390)
- from version 20210924.00
  * Fix some e2e test failures (#388)
- from version 20210923.02
  * Correctly check for folder existance in package upgrade (#387)
- from version 20210923.01
  * ReportInventory: Fix bug in deb/rpm inventory, reduce calls to append (#386)
- from version 20210923.00
  * Deprecate old config directory in favor of new cache directory (#385)
- from version 20210922.02
  * Fix rpm/deb package formating for inventory reporting (#384)
- from version 20210922.01
  * Add centos stream rocky linux and available package tests (#383)
- from version 20210922.00
  * Add more info logs, actually cleanup unmanaged repos (#382)
- from version 20210901.00
  * Add E2E tests for Windows Application (#379)
  * Return lower-case package name (#377)
  * Update Terraform scripts for multi-project deployments tutorial. (#378)
- from version 20210811.00
  * Support Windows Application Inventory (#371)
- from version 20210723.00
  * Send basic inventory with RegisterAgent (#373)
- from version 20210722.1
  * e2e_tests: move to manually generated osconfig library (#372)
- from version 20210722.00
  * Create OWNERS file for examples directory (#368)
- from version 20210719.00
  * Update Zypper patch info parsing (#370)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1638273600">- Update to version 20211117.00 (bsc#1193257, bsc#1193258)
  * Add retry logic for RegisterAgent (#404)
- from version 20211111.01
  * e2e_test: drop ubuntu 1604 image as its EOL (#403)
- from version 20211111.00
  * e2e_test: move to V1 api for OSPolicies (#397)
- from version 20211102.00
  * Fix context logging and fix label names (#400)
- from version 20211028.00
  * Add cloudops example for gcloud (#399)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644321600">- Update to version 20220204.00
  * Add DisableLocalLogging option (#413)
- from version 20220107.00
  * OS assignment example: Copy file from bucket</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644840000">- Update to version 20220209.00 (bsc#1195437, bsc#1195438)
  * Update licences, remove deprecated centos-8 tests (#414)</changelog>
</package>
<package pkgid="3f9208b43ffb8cf98d99b7da19223cd6eff4645dd87bd5cc359ba7aae7ae9218" name="google-osconfig-agent" arch="ppc64le">
  <version epoch="0" ver="20220209.00" rel="150000.1.17.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1600171200">- Initial build (bsc#1176427, bsc#1178249, jsc#ECO-2702, jsc#PM-2203)
  + Version 20200908.00</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200929.00
  * Merge inventory feature from development (#235)
  * Set full version during Windows build (#234)
- Remove Provides/Obsoletes for google-compute-engine-init</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1606219200">- Update to version 20201117.00 (bsc#1179031, bsc#1179032)
  * Ignore Unavailable erros on stream receive (#260)
  * Update test Windows images (#259)
  * update ReportInventory e2e test regexes (#255)
  * Don't return on a windows update error (#254)
  * use retryutil for ReportInventory calls (#253)
  * add additional debug logging for ReportInventory request payload for e2e tests (#252)
  * stop logging instance identity token as part of ReportInventory request and remove
    feature-flag setting in OSInventoryReporting e2e tests (#251)
  * complete ExecTask as no-op when the ExecStepConfig doesn't match the OS (#250)
  * Add software recipe tests for COS (#249)
  * remove feature flag for inventory reporting (#243)
  * Force yum to never colorize output (#247)
  * Add sleep after Unavailable errors for agentendpoint (#241)
  * Ensure we record epoch for rpm packages (#242)
  * Make inventory WUAUpdates call spawn a new process,
    retry on metadata unmarshal error (#239)
  * add debug logging for report inventory response (#240)
  * add initial e2e tests for inventory reporting (#237)
  * Report installed packages on COS (#236)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210112.00
  * Fix builds for ppc and s390x (#274)
  * Minor updates to tests and additional debug logging (#272)
  * Add Ubuntu 2004 to tests (#271)
  * Make sure we stop tickers (#270)
  * Drop Windows 1903 and CentOS 6 from tests (#269)
  * Pin el6 tests to last published image as it is EOL (#267)
  * support cos (#266)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * ExecResource: fix bug in return code handling (#295)
  * Fix ExecResource permissions, add logs to fetcher (#294)
  * e2e_tests: Fix ubuntu proposed family (#293)
  * e2e_tests: add proposed debian images to head tests (#292)
  * Fix exec_resource for config task, add minimal unit test (#291)
  * Change util.WriteFile to AtomicWriteFileStream (#289)
  * Merge development branch into master (#288)
  * Create util.TempFile to work nicely with Windows (#287)
  * Fix copy step write (#286)
  * Fix error on linux lock (#285)
  * Ensure we cleanup on error in AtomicWrite (#284)
  * Make writes atomic, add unused "allowDowngrades" option
    to apt, fix a few recipe issues (#283)
  * update reviewers (#282)
  * update apt package lists before running installs (#281)
  * Simplify build tags for COS package (#280)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210506.00 (bsc#1185848, bsc#1185849)
  * Add more os policy assignment examples (#348)
  * e2e_tests: enable stable tests for OSPolicies (#347)
  * Align start and end task logs (#346)
  * ConfigTask: add additional info logs (#345)
  * e2e_tests: add validation tests (#344)
  * Config Task: make sure agent respects policy mode (#343)
  * update
  * e2e_tests: readd retries to OSPolicies
  * Set minWaitDuration as a string instead of object (#341)
  * e2e_tests: Fix a few SUSE tests (#339)
  * Remove pre-release flag from config (#340)
  * e2e_tests: fixup OSPolicy tests (#338)
  * e2e_tests: unlock mutex for CreatePolicies as soon as create finishes (#337)
  * e2e_tests: Don't retry failed OSPolicy tests, fix msi test (#336)
  * Examples for os policy assignments (#334)
  * e2e_tests: increase the deadline for OSPolicy tests and only start after a zone has been secured (#335)
  * Fix panic when installing MSI (#332)
  * e2e_tests: Add test cases of installing dbe, rpm and msi packages (#333)
  * e2e_tests: add more logging
  * e2e_tests: (#330)
  * e2e_test: Add timouts to OSPolicy tests so we don't wait forever (#329)
  * Create top level directories for gcloud and console for os policy assignment examples (#328)
  * e2e_tests: Move api from an internal directory (#327)
  * Make sure we use the same test name for reruns (#326)
  * Add CONFIG_V1 capability (#325)
  * e2e_tests: reduce size of instances, use pd-balanced, rerun failed tests once (#324)
  * Only report installed packages for dpkg (#322)
  * e2e_tests: fix windows package and repository tests (#323)
  * Add top level directories for os policy examples (#321)
  * e2e_tests: move to using inventory api for inventory reporting (#320)
  * e2e_tests: add ExecResource tests (#319)
  * ExecResource: make sure we set permissions correctly for downloaded files (#318)
  * Config task: only run post check on resources that have already been evaluated (#317)
  * e2e_test: reorganize OSPolicy tests to be per Resource type (#316)
  * Set custom user agent (#299)
  * e2e_tests: check InstanceOSPoliciesCompliance for each test case, add LocalPath FileResource test (#314)
  * PackageResource: make sure to run AptUpdate prior to package install (#315)
  * Fix bugs/add more logging for OSPolicies (#313)
  * Change metadata http client to ignore http proxies (#312)
  * e2e_test: add tests for FileResource (#311)
  * Add task_type context logging (#310)
  * Fix e2e_test typo (#309)
  * Fix e2e_tests (#308)
  * Disable OSPolicies by default since it is an unreleased feature (#307)
  * e2e_tests: Add more OSPolicies package and repo tests (#306)
  * Do not enforce repo_gpgcheck in guestpolicies (#305)
  * Gather inventory 3-5min after agent start (#303)
  * e2e_tests: add OSPolicies tests for package install (#302)
  * Add helpful error log if a service account is missing (#304)
  * OSPolicies: correct apt repo extension, remove yum/zypper gpgcheck override (#301)
  * Update cos library to parse new version of packages file (#300)
  * config_task: Rework config step logic (#296)
  * e2e_test: enable serial logs in cos to support ReportInventory test (#297)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 20210621.00
  * chore: Fixing a comment. (#363)
- from version 20210617.00
  * Use exec.CommandContext so that canceling the context also
    kills any running processes (#362)
- from version 20210608.1
  * e2e_tests: point to official osconfig client library (#359)
- from version 20210608.00
  * e2e_tests: deflake tests (#358)
- from version 20210607.00
  * Fix build on some architectures (#357)
- from version 20210603.00
  * Create win-validation-powershell.yaml (#356)
- from version 20210602.00
  * Agent efficiency improvements/bugfixes/logging updates (#355)
  * e2e_tests: add tests for ExecResource output (#354)
- from version 20210525.00
  * Run fieldalignment on all structs (#353)
- from version 20210521.00
  * Config Task: add error message and ExecResource output recording (#350)
  * e2e_tests: remove Windows server 1909 and add server 20h2 (#352)
  * Added a method for logging structured data (#349)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626696000">- Update to version 20210712.1
  * Skip getting patch info when no patches are found. (#369)
- from version 20210712.00
  * Add Terraform scripts for multi-project deployments (#367)
- from version 20210709.00
  * Add examples/Terraform directory. (#366)
- from version 20210707.00
  * Fix bug in printing packages to update,
    return error for zypper patch (#365)
- from version 20210629.00
  * Add CloudOps examples for CentOS (#364)</changelog>
  <changelog author="bwiedemann@suse.com" date="1627387200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1634904000">- Update to version 20211021.00
  * Added patch report logging for Zypper. (#395)
- from version 20211012.00
  * Replace deprecated instance filters with the new filters (#394)
- from version 20211006.00
  * Added patch report log messages for Yum and Apt (#392)
- from version 20210930.00
  * Config: Add package info caching (#391)
- from version 20210928.00
  * Fixed the runWithPty function to set ctty to child's filedesc (#389)
- from version 20210927.00
  * e2e_tests: fix a test output mismatch (#390)
- from version 20210924.00
  * Fix some e2e test failures (#388)
- from version 20210923.02
  * Correctly check for folder existance in package upgrade (#387)
- from version 20210923.01
  * ReportInventory: Fix bug in deb/rpm inventory, reduce calls to append (#386)
- from version 20210923.00
  * Deprecate old config directory in favor of new cache directory (#385)
- from version 20210922.02
  * Fix rpm/deb package formating for inventory reporting (#384)
- from version 20210922.01
  * Add centos stream rocky linux and available package tests (#383)
- from version 20210922.00
  * Add more info logs, actually cleanup unmanaged repos (#382)
- from version 20210901.00
  * Add E2E tests for Windows Application (#379)
  * Return lower-case package name (#377)
  * Update Terraform scripts for multi-project deployments tutorial. (#378)
- from version 20210811.00
  * Support Windows Application Inventory (#371)
- from version 20210723.00
  * Send basic inventory with RegisterAgent (#373)
- from version 20210722.1
  * e2e_tests: move to manually generated osconfig library (#372)
- from version 20210722.00
  * Create OWNERS file for examples directory (#368)
- from version 20210719.00
  * Update Zypper patch info parsing (#370)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1638273600">- Update to version 20211117.00 (bsc#1193257, bsc#1193258)
  * Add retry logic for RegisterAgent (#404)
- from version 20211111.01
  * e2e_test: drop ubuntu 1604 image as its EOL (#403)
- from version 20211111.00
  * e2e_test: move to V1 api for OSPolicies (#397)
- from version 20211102.00
  * Fix context logging and fix label names (#400)
- from version 20211028.00
  * Add cloudops example for gcloud (#399)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644321600">- Update to version 20220204.00
  * Add DisableLocalLogging option (#413)
- from version 20220107.00
  * OS assignment example: Copy file from bucket</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644840000">- Update to version 20220209.00 (bsc#1195437, bsc#1195438)
  * Update licences, remove deprecated centos-8 tests (#414)</changelog>
</package>
<package pkgid="41f0b37b151d4588fa7061fccedeb5ec26aee0557376c9c29c92e1541abcde85" name="google-osconfig-agent" arch="s390x">
  <version epoch="0" ver="20220209.00" rel="150000.1.17.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1600171200">- Initial build (bsc#1176427, bsc#1178249, jsc#ECO-2702, jsc#PM-2203)
  + Version 20200908.00</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200929.00
  * Merge inventory feature from development (#235)
  * Set full version during Windows build (#234)
- Remove Provides/Obsoletes for google-compute-engine-init</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1606219200">- Update to version 20201117.00 (bsc#1179031, bsc#1179032)
  * Ignore Unavailable erros on stream receive (#260)
  * Update test Windows images (#259)
  * update ReportInventory e2e test regexes (#255)
  * Don't return on a windows update error (#254)
  * use retryutil for ReportInventory calls (#253)
  * add additional debug logging for ReportInventory request payload for e2e tests (#252)
  * stop logging instance identity token as part of ReportInventory request and remove
    feature-flag setting in OSInventoryReporting e2e tests (#251)
  * complete ExecTask as no-op when the ExecStepConfig doesn't match the OS (#250)
  * Add software recipe tests for COS (#249)
  * remove feature flag for inventory reporting (#243)
  * Force yum to never colorize output (#247)
  * Add sleep after Unavailable errors for agentendpoint (#241)
  * Ensure we record epoch for rpm packages (#242)
  * Make inventory WUAUpdates call spawn a new process,
    retry on metadata unmarshal error (#239)
  * add debug logging for report inventory response (#240)
  * add initial e2e tests for inventory reporting (#237)
  * Report installed packages on COS (#236)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210112.00
  * Fix builds for ppc and s390x (#274)
  * Minor updates to tests and additional debug logging (#272)
  * Add Ubuntu 2004 to tests (#271)
  * Make sure we stop tickers (#270)
  * Drop Windows 1903 and CentOS 6 from tests (#269)
  * Pin el6 tests to last published image as it is EOL (#267)
  * support cos (#266)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * ExecResource: fix bug in return code handling (#295)
  * Fix ExecResource permissions, add logs to fetcher (#294)
  * e2e_tests: Fix ubuntu proposed family (#293)
  * e2e_tests: add proposed debian images to head tests (#292)
  * Fix exec_resource for config task, add minimal unit test (#291)
  * Change util.WriteFile to AtomicWriteFileStream (#289)
  * Merge development branch into master (#288)
  * Create util.TempFile to work nicely with Windows (#287)
  * Fix copy step write (#286)
  * Fix error on linux lock (#285)
  * Ensure we cleanup on error in AtomicWrite (#284)
  * Make writes atomic, add unused "allowDowngrades" option
    to apt, fix a few recipe issues (#283)
  * update reviewers (#282)
  * update apt package lists before running installs (#281)
  * Simplify build tags for COS package (#280)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210506.00 (bsc#1185848, bsc#1185849)
  * Add more os policy assignment examples (#348)
  * e2e_tests: enable stable tests for OSPolicies (#347)
  * Align start and end task logs (#346)
  * ConfigTask: add additional info logs (#345)
  * e2e_tests: add validation tests (#344)
  * Config Task: make sure agent respects policy mode (#343)
  * update
  * e2e_tests: readd retries to OSPolicies
  * Set minWaitDuration as a string instead of object (#341)
  * e2e_tests: Fix a few SUSE tests (#339)
  * Remove pre-release flag from config (#340)
  * e2e_tests: fixup OSPolicy tests (#338)
  * e2e_tests: unlock mutex for CreatePolicies as soon as create finishes (#337)
  * e2e_tests: Don't retry failed OSPolicy tests, fix msi test (#336)
  * Examples for os policy assignments (#334)
  * e2e_tests: increase the deadline for OSPolicy tests and only start after a zone has been secured (#335)
  * Fix panic when installing MSI (#332)
  * e2e_tests: Add test cases of installing dbe, rpm and msi packages (#333)
  * e2e_tests: add more logging
  * e2e_tests: (#330)
  * e2e_test: Add timouts to OSPolicy tests so we don't wait forever (#329)
  * Create top level directories for gcloud and console for os policy assignment examples (#328)
  * e2e_tests: Move api from an internal directory (#327)
  * Make sure we use the same test name for reruns (#326)
  * Add CONFIG_V1 capability (#325)
  * e2e_tests: reduce size of instances, use pd-balanced, rerun failed tests once (#324)
  * Only report installed packages for dpkg (#322)
  * e2e_tests: fix windows package and repository tests (#323)
  * Add top level directories for os policy examples (#321)
  * e2e_tests: move to using inventory api for inventory reporting (#320)
  * e2e_tests: add ExecResource tests (#319)
  * ExecResource: make sure we set permissions correctly for downloaded files (#318)
  * Config task: only run post check on resources that have already been evaluated (#317)
  * e2e_test: reorganize OSPolicy tests to be per Resource type (#316)
  * Set custom user agent (#299)
  * e2e_tests: check InstanceOSPoliciesCompliance for each test case, add LocalPath FileResource test (#314)
  * PackageResource: make sure to run AptUpdate prior to package install (#315)
  * Fix bugs/add more logging for OSPolicies (#313)
  * Change metadata http client to ignore http proxies (#312)
  * e2e_test: add tests for FileResource (#311)
  * Add task_type context logging (#310)
  * Fix e2e_test typo (#309)
  * Fix e2e_tests (#308)
  * Disable OSPolicies by default since it is an unreleased feature (#307)
  * e2e_tests: Add more OSPolicies package and repo tests (#306)
  * Do not enforce repo_gpgcheck in guestpolicies (#305)
  * Gather inventory 3-5min after agent start (#303)
  * e2e_tests: add OSPolicies tests for package install (#302)
  * Add helpful error log if a service account is missing (#304)
  * OSPolicies: correct apt repo extension, remove yum/zypper gpgcheck override (#301)
  * Update cos library to parse new version of packages file (#300)
  * config_task: Rework config step logic (#296)
  * e2e_test: enable serial logs in cos to support ReportInventory test (#297)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 20210621.00
  * chore: Fixing a comment. (#363)
- from version 20210617.00
  * Use exec.CommandContext so that canceling the context also
    kills any running processes (#362)
- from version 20210608.1
  * e2e_tests: point to official osconfig client library (#359)
- from version 20210608.00
  * e2e_tests: deflake tests (#358)
- from version 20210607.00
  * Fix build on some architectures (#357)
- from version 20210603.00
  * Create win-validation-powershell.yaml (#356)
- from version 20210602.00
  * Agent efficiency improvements/bugfixes/logging updates (#355)
  * e2e_tests: add tests for ExecResource output (#354)
- from version 20210525.00
  * Run fieldalignment on all structs (#353)
- from version 20210521.00
  * Config Task: add error message and ExecResource output recording (#350)
  * e2e_tests: remove Windows server 1909 and add server 20h2 (#352)
  * Added a method for logging structured data (#349)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626696000">- Update to version 20210712.1
  * Skip getting patch info when no patches are found. (#369)
- from version 20210712.00
  * Add Terraform scripts for multi-project deployments (#367)
- from version 20210709.00
  * Add examples/Terraform directory. (#366)
- from version 20210707.00
  * Fix bug in printing packages to update,
    return error for zypper patch (#365)
- from version 20210629.00
  * Add CloudOps examples for CentOS (#364)</changelog>
  <changelog author="bwiedemann@suse.com" date="1627387200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1634904000">- Update to version 20211021.00
  * Added patch report logging for Zypper. (#395)
- from version 20211012.00
  * Replace deprecated instance filters with the new filters (#394)
- from version 20211006.00
  * Added patch report log messages for Yum and Apt (#392)
- from version 20210930.00
  * Config: Add package info caching (#391)
- from version 20210928.00
  * Fixed the runWithPty function to set ctty to child's filedesc (#389)
- from version 20210927.00
  * e2e_tests: fix a test output mismatch (#390)
- from version 20210924.00
  * Fix some e2e test failures (#388)
- from version 20210923.02
  * Correctly check for folder existance in package upgrade (#387)
- from version 20210923.01
  * ReportInventory: Fix bug in deb/rpm inventory, reduce calls to append (#386)
- from version 20210923.00
  * Deprecate old config directory in favor of new cache directory (#385)
- from version 20210922.02
  * Fix rpm/deb package formating for inventory reporting (#384)
- from version 20210922.01
  * Add centos stream rocky linux and available package tests (#383)
- from version 20210922.00
  * Add more info logs, actually cleanup unmanaged repos (#382)
- from version 20210901.00
  * Add E2E tests for Windows Application (#379)
  * Return lower-case package name (#377)
  * Update Terraform scripts for multi-project deployments tutorial. (#378)
- from version 20210811.00
  * Support Windows Application Inventory (#371)
- from version 20210723.00
  * Send basic inventory with RegisterAgent (#373)
- from version 20210722.1
  * e2e_tests: move to manually generated osconfig library (#372)
- from version 20210722.00
  * Create OWNERS file for examples directory (#368)
- from version 20210719.00
  * Update Zypper patch info parsing (#370)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1638273600">- Update to version 20211117.00 (bsc#1193257, bsc#1193258)
  * Add retry logic for RegisterAgent (#404)
- from version 20211111.01
  * e2e_test: drop ubuntu 1604 image as its EOL (#403)
- from version 20211111.00
  * e2e_test: move to V1 api for OSPolicies (#397)
- from version 20211102.00
  * Fix context logging and fix label names (#400)
- from version 20211028.00
  * Add cloudops example for gcloud (#399)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644321600">- Update to version 20220204.00
  * Add DisableLocalLogging option (#413)
- from version 20220107.00
  * OS assignment example: Copy file from bucket</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644840000">- Update to version 20220209.00 (bsc#1195437, bsc#1195438)
  * Update licences, remove deprecated centos-8 tests (#414)</changelog>
</package>
<package pkgid="0b2f3ea418c004eaa9f05dcdc395692f63f752da06848785a5014511265a569e" name="google-osconfig-agent" arch="src">
  <version epoch="0" ver="20220209.00" rel="150000.1.17.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1600171200">- Initial build (bsc#1176427, bsc#1178249, jsc#ECO-2702, jsc#PM-2203)
  + Version 20200908.00</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200929.00
  * Merge inventory feature from development (#235)
  * Set full version during Windows build (#234)
- Remove Provides/Obsoletes for google-compute-engine-init</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1606219200">- Update to version 20201117.00 (bsc#1179031, bsc#1179032)
  * Ignore Unavailable erros on stream receive (#260)
  * Update test Windows images (#259)
  * update ReportInventory e2e test regexes (#255)
  * Don't return on a windows update error (#254)
  * use retryutil for ReportInventory calls (#253)
  * add additional debug logging for ReportInventory request payload for e2e tests (#252)
  * stop logging instance identity token as part of ReportInventory request and remove
    feature-flag setting in OSInventoryReporting e2e tests (#251)
  * complete ExecTask as no-op when the ExecStepConfig doesn't match the OS (#250)
  * Add software recipe tests for COS (#249)
  * remove feature flag for inventory reporting (#243)
  * Force yum to never colorize output (#247)
  * Add sleep after Unavailable errors for agentendpoint (#241)
  * Ensure we record epoch for rpm packages (#242)
  * Make inventory WUAUpdates call spawn a new process,
    retry on metadata unmarshal error (#239)
  * add debug logging for report inventory response (#240)
  * add initial e2e tests for inventory reporting (#237)
  * Report installed packages on COS (#236)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210112.00
  * Fix builds for ppc and s390x (#274)
  * Minor updates to tests and additional debug logging (#272)
  * Add Ubuntu 2004 to tests (#271)
  * Make sure we stop tickers (#270)
  * Drop Windows 1903 and CentOS 6 from tests (#269)
  * Pin el6 tests to last published image as it is EOL (#267)
  * support cos (#266)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * ExecResource: fix bug in return code handling (#295)
  * Fix ExecResource permissions, add logs to fetcher (#294)
  * e2e_tests: Fix ubuntu proposed family (#293)
  * e2e_tests: add proposed debian images to head tests (#292)
  * Fix exec_resource for config task, add minimal unit test (#291)
  * Change util.WriteFile to AtomicWriteFileStream (#289)
  * Merge development branch into master (#288)
  * Create util.TempFile to work nicely with Windows (#287)
  * Fix copy step write (#286)
  * Fix error on linux lock (#285)
  * Ensure we cleanup on error in AtomicWrite (#284)
  * Make writes atomic, add unused "allowDowngrades" option
    to apt, fix a few recipe issues (#283)
  * update reviewers (#282)
  * update apt package lists before running installs (#281)
  * Simplify build tags for COS package (#280)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210506.00 (bsc#1185848, bsc#1185849)
  * Add more os policy assignment examples (#348)
  * e2e_tests: enable stable tests for OSPolicies (#347)
  * Align start and end task logs (#346)
  * ConfigTask: add additional info logs (#345)
  * e2e_tests: add validation tests (#344)
  * Config Task: make sure agent respects policy mode (#343)
  * update
  * e2e_tests: readd retries to OSPolicies
  * Set minWaitDuration as a string instead of object (#341)
  * e2e_tests: Fix a few SUSE tests (#339)
  * Remove pre-release flag from config (#340)
  * e2e_tests: fixup OSPolicy tests (#338)
  * e2e_tests: unlock mutex for CreatePolicies as soon as create finishes (#337)
  * e2e_tests: Don't retry failed OSPolicy tests, fix msi test (#336)
  * Examples for os policy assignments (#334)
  * e2e_tests: increase the deadline for OSPolicy tests and only start after a zone has been secured (#335)
  * Fix panic when installing MSI (#332)
  * e2e_tests: Add test cases of installing dbe, rpm and msi packages (#333)
  * e2e_tests: add more logging
  * e2e_tests: (#330)
  * e2e_test: Add timouts to OSPolicy tests so we don't wait forever (#329)
  * Create top level directories for gcloud and console for os policy assignment examples (#328)
  * e2e_tests: Move api from an internal directory (#327)
  * Make sure we use the same test name for reruns (#326)
  * Add CONFIG_V1 capability (#325)
  * e2e_tests: reduce size of instances, use pd-balanced, rerun failed tests once (#324)
  * Only report installed packages for dpkg (#322)
  * e2e_tests: fix windows package and repository tests (#323)
  * Add top level directories for os policy examples (#321)
  * e2e_tests: move to using inventory api for inventory reporting (#320)
  * e2e_tests: add ExecResource tests (#319)
  * ExecResource: make sure we set permissions correctly for downloaded files (#318)
  * Config task: only run post check on resources that have already been evaluated (#317)
  * e2e_test: reorganize OSPolicy tests to be per Resource type (#316)
  * Set custom user agent (#299)
  * e2e_tests: check InstanceOSPoliciesCompliance for each test case, add LocalPath FileResource test (#314)
  * PackageResource: make sure to run AptUpdate prior to package install (#315)
  * Fix bugs/add more logging for OSPolicies (#313)
  * Change metadata http client to ignore http proxies (#312)
  * e2e_test: add tests for FileResource (#311)
  * Add task_type context logging (#310)
  * Fix e2e_test typo (#309)
  * Fix e2e_tests (#308)
  * Disable OSPolicies by default since it is an unreleased feature (#307)
  * e2e_tests: Add more OSPolicies package and repo tests (#306)
  * Do not enforce repo_gpgcheck in guestpolicies (#305)
  * Gather inventory 3-5min after agent start (#303)
  * e2e_tests: add OSPolicies tests for package install (#302)
  * Add helpful error log if a service account is missing (#304)
  * OSPolicies: correct apt repo extension, remove yum/zypper gpgcheck override (#301)
  * Update cos library to parse new version of packages file (#300)
  * config_task: Rework config step logic (#296)
  * e2e_test: enable serial logs in cos to support ReportInventory test (#297)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 20210621.00
  * chore: Fixing a comment. (#363)
- from version 20210617.00
  * Use exec.CommandContext so that canceling the context also
    kills any running processes (#362)
- from version 20210608.1
  * e2e_tests: point to official osconfig client library (#359)
- from version 20210608.00
  * e2e_tests: deflake tests (#358)
- from version 20210607.00
  * Fix build on some architectures (#357)
- from version 20210603.00
  * Create win-validation-powershell.yaml (#356)
- from version 20210602.00
  * Agent efficiency improvements/bugfixes/logging updates (#355)
  * e2e_tests: add tests for ExecResource output (#354)
- from version 20210525.00
  * Run fieldalignment on all structs (#353)
- from version 20210521.00
  * Config Task: add error message and ExecResource output recording (#350)
  * e2e_tests: remove Windows server 1909 and add server 20h2 (#352)
  * Added a method for logging structured data (#349)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626696000">- Update to version 20210712.1
  * Skip getting patch info when no patches are found. (#369)
- from version 20210712.00
  * Add Terraform scripts for multi-project deployments (#367)
- from version 20210709.00
  * Add examples/Terraform directory. (#366)
- from version 20210707.00
  * Fix bug in printing packages to update,
    return error for zypper patch (#365)
- from version 20210629.00
  * Add CloudOps examples for CentOS (#364)</changelog>
  <changelog author="bwiedemann@suse.com" date="1627387200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1634904000">- Update to version 20211021.00
  * Added patch report logging for Zypper. (#395)
- from version 20211012.00
  * Replace deprecated instance filters with the new filters (#394)
- from version 20211006.00
  * Added patch report log messages for Yum and Apt (#392)
- from version 20210930.00
  * Config: Add package info caching (#391)
- from version 20210928.00
  * Fixed the runWithPty function to set ctty to child's filedesc (#389)
- from version 20210927.00
  * e2e_tests: fix a test output mismatch (#390)
- from version 20210924.00
  * Fix some e2e test failures (#388)
- from version 20210923.02
  * Correctly check for folder existance in package upgrade (#387)
- from version 20210923.01
  * ReportInventory: Fix bug in deb/rpm inventory, reduce calls to append (#386)
- from version 20210923.00
  * Deprecate old config directory in favor of new cache directory (#385)
- from version 20210922.02
  * Fix rpm/deb package formating for inventory reporting (#384)
- from version 20210922.01
  * Add centos stream rocky linux and available package tests (#383)
- from version 20210922.00
  * Add more info logs, actually cleanup unmanaged repos (#382)
- from version 20210901.00
  * Add E2E tests for Windows Application (#379)
  * Return lower-case package name (#377)
  * Update Terraform scripts for multi-project deployments tutorial. (#378)
- from version 20210811.00
  * Support Windows Application Inventory (#371)
- from version 20210723.00
  * Send basic inventory with RegisterAgent (#373)
- from version 20210722.1
  * e2e_tests: move to manually generated osconfig library (#372)
- from version 20210722.00
  * Create OWNERS file for examples directory (#368)
- from version 20210719.00
  * Update Zypper patch info parsing (#370)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1638273600">- Update to version 20211117.00 (bsc#1193257, bsc#1193258)
  * Add retry logic for RegisterAgent (#404)
- from version 20211111.01
  * e2e_test: drop ubuntu 1604 image as its EOL (#403)
- from version 20211111.00
  * e2e_test: move to V1 api for OSPolicies (#397)
- from version 20211102.00
  * Fix context logging and fix label names (#400)
- from version 20211028.00
  * Add cloudops example for gcloud (#399)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644321600">- Update to version 20220204.00
  * Add DisableLocalLogging option (#413)
- from version 20220107.00
  * OS assignment example: Copy file from bucket</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644840000">- Update to version 20220209.00 (bsc#1195437, bsc#1195438)
  * Update licences, remove deprecated centos-8 tests (#414)</changelog>
</package>
<package pkgid="646f7e2abc637385ade054d4fe4cb56500cb9e17576bd29b6d6c5e369631c860" name="google-osconfig-agent" arch="x86_64">
  <version epoch="0" ver="20220209.00" rel="150000.1.17.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1600171200">- Initial build (bsc#1176427, bsc#1178249, jsc#ECO-2702, jsc#PM-2203)
  + Version 20200908.00</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1602158400">- Update to version 20200929.00
  * Merge inventory feature from development (#235)
  * Set full version during Windows build (#234)
- Remove Provides/Obsoletes for google-compute-engine-init</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1606219200">- Update to version 20201117.00 (bsc#1179031, bsc#1179032)
  * Ignore Unavailable erros on stream receive (#260)
  * Update test Windows images (#259)
  * update ReportInventory e2e test regexes (#255)
  * Don't return on a windows update error (#254)
  * use retryutil for ReportInventory calls (#253)
  * add additional debug logging for ReportInventory request payload for e2e tests (#252)
  * stop logging instance identity token as part of ReportInventory request and remove
    feature-flag setting in OSInventoryReporting e2e tests (#251)
  * complete ExecTask as no-op when the ExecStepConfig doesn't match the OS (#250)
  * Add software recipe tests for COS (#249)
  * remove feature flag for inventory reporting (#243)
  * Force yum to never colorize output (#247)
  * Add sleep after Unavailable errors for agentendpoint (#241)
  * Ensure we record epoch for rpm packages (#242)
  * Make inventory WUAUpdates call spawn a new process,
    retry on metadata unmarshal error (#239)
  * add debug logging for report inventory response (#240)
  * add initial e2e tests for inventory reporting (#237)
  * Report installed packages on COS (#236)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to version 20210112.00
  * Fix builds for ppc and s390x (#274)
  * Minor updates to tests and additional debug logging (#272)
  * Add Ubuntu 2004 to tests (#271)
  * Make sure we stop tickers (#270)
  * Drop Windows 1903 and CentOS 6 from tests (#269)
  * Pin el6 tests to last published image as it is EOL (#267)
  * support cos (#266)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1617192000">- Update to version 20210316.00 (bsc#1183414, bsc#1183415)
  * ExecResource: fix bug in return code handling (#295)
  * Fix ExecResource permissions, add logs to fetcher (#294)
  * e2e_tests: Fix ubuntu proposed family (#293)
  * e2e_tests: add proposed debian images to head tests (#292)
  * Fix exec_resource for config task, add minimal unit test (#291)
  * Change util.WriteFile to AtomicWriteFileStream (#289)
  * Merge development branch into master (#288)
  * Create util.TempFile to work nicely with Windows (#287)
  * Fix copy step write (#286)
  * Fix error on linux lock (#285)
  * Ensure we cleanup on error in AtomicWrite (#284)
  * Make writes atomic, add unused "allowDowngrades" option
    to apt, fix a few recipe issues (#283)
  * update reviewers (#282)
  * update apt package lists before running installs (#281)
  * Simplify build tags for COS package (#280)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1620734400">- Update to version 20210506.00 (bsc#1185848, bsc#1185849)
  * Add more os policy assignment examples (#348)
  * e2e_tests: enable stable tests for OSPolicies (#347)
  * Align start and end task logs (#346)
  * ConfigTask: add additional info logs (#345)
  * e2e_tests: add validation tests (#344)
  * Config Task: make sure agent respects policy mode (#343)
  * update
  * e2e_tests: readd retries to OSPolicies
  * Set minWaitDuration as a string instead of object (#341)
  * e2e_tests: Fix a few SUSE tests (#339)
  * Remove pre-release flag from config (#340)
  * e2e_tests: fixup OSPolicy tests (#338)
  * e2e_tests: unlock mutex for CreatePolicies as soon as create finishes (#337)
  * e2e_tests: Don't retry failed OSPolicy tests, fix msi test (#336)
  * Examples for os policy assignments (#334)
  * e2e_tests: increase the deadline for OSPolicy tests and only start after a zone has been secured (#335)
  * Fix panic when installing MSI (#332)
  * e2e_tests: Add test cases of installing dbe, rpm and msi packages (#333)
  * e2e_tests: add more logging
  * e2e_tests: (#330)
  * e2e_test: Add timouts to OSPolicy tests so we don't wait forever (#329)
  * Create top level directories for gcloud and console for os policy assignment examples (#328)
  * e2e_tests: Move api from an internal directory (#327)
  * Make sure we use the same test name for reruns (#326)
  * Add CONFIG_V1 capability (#325)
  * e2e_tests: reduce size of instances, use pd-balanced, rerun failed tests once (#324)
  * Only report installed packages for dpkg (#322)
  * e2e_tests: fix windows package and repository tests (#323)
  * Add top level directories for os policy examples (#321)
  * e2e_tests: move to using inventory api for inventory reporting (#320)
  * e2e_tests: add ExecResource tests (#319)
  * ExecResource: make sure we set permissions correctly for downloaded files (#318)
  * Config task: only run post check on resources that have already been evaluated (#317)
  * e2e_test: reorganize OSPolicy tests to be per Resource type (#316)
  * Set custom user agent (#299)
  * e2e_tests: check InstanceOSPoliciesCompliance for each test case, add LocalPath FileResource test (#314)
  * PackageResource: make sure to run AptUpdate prior to package install (#315)
  * Fix bugs/add more logging for OSPolicies (#313)
  * Change metadata http client to ignore http proxies (#312)
  * e2e_test: add tests for FileResource (#311)
  * Add task_type context logging (#310)
  * Fix e2e_test typo (#309)
  * Fix e2e_tests (#308)
  * Disable OSPolicies by default since it is an unreleased feature (#307)
  * e2e_tests: Add more OSPolicies package and repo tests (#306)
  * Do not enforce repo_gpgcheck in guestpolicies (#305)
  * Gather inventory 3-5min after agent start (#303)
  * e2e_tests: add OSPolicies tests for package install (#302)
  * Add helpful error log if a service account is missing (#304)
  * OSPolicies: correct apt repo extension, remove yum/zypper gpgcheck override (#301)
  * Update cos library to parse new version of packages file (#300)
  * config_task: Rework config step logic (#296)
  * e2e_test: enable serial logs in cos to support ReportInventory test (#297)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 20210621.00
  * chore: Fixing a comment. (#363)
- from version 20210617.00
  * Use exec.CommandContext so that canceling the context also
    kills any running processes (#362)
- from version 20210608.1
  * e2e_tests: point to official osconfig client library (#359)
- from version 20210608.00
  * e2e_tests: deflake tests (#358)
- from version 20210607.00
  * Fix build on some architectures (#357)
- from version 20210603.00
  * Create win-validation-powershell.yaml (#356)
- from version 20210602.00
  * Agent efficiency improvements/bugfixes/logging updates (#355)
  * e2e_tests: add tests for ExecResource output (#354)
- from version 20210525.00
  * Run fieldalignment on all structs (#353)
- from version 20210521.00
  * Config Task: add error message and ExecResource output recording (#350)
  * e2e_tests: remove Windows server 1909 and add server 20h2 (#352)
  * Added a method for logging structured data (#349)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1626696000">- Update to version 20210712.1
  * Skip getting patch info when no patches are found. (#369)
- from version 20210712.00
  * Add Terraform scripts for multi-project deployments (#367)
- from version 20210709.00
  * Add examples/Terraform directory. (#366)
- from version 20210707.00
  * Fix bug in printing packages to update,
    return error for zypper patch (#365)
- from version 20210629.00
  * Add CloudOps examples for CentOS (#364)</changelog>
  <changelog author="bwiedemann@suse.com" date="1627387200">- Build with go1.15 for reproducible build results (boo#1102408)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1634904000">- Update to version 20211021.00
  * Added patch report logging for Zypper. (#395)
- from version 20211012.00
  * Replace deprecated instance filters with the new filters (#394)
- from version 20211006.00
  * Added patch report log messages for Yum and Apt (#392)
- from version 20210930.00
  * Config: Add package info caching (#391)
- from version 20210928.00
  * Fixed the runWithPty function to set ctty to child's filedesc (#389)
- from version 20210927.00
  * e2e_tests: fix a test output mismatch (#390)
- from version 20210924.00
  * Fix some e2e test failures (#388)
- from version 20210923.02
  * Correctly check for folder existance in package upgrade (#387)
- from version 20210923.01
  * ReportInventory: Fix bug in deb/rpm inventory, reduce calls to append (#386)
- from version 20210923.00
  * Deprecate old config directory in favor of new cache directory (#385)
- from version 20210922.02
  * Fix rpm/deb package formating for inventory reporting (#384)
- from version 20210922.01
  * Add centos stream rocky linux and available package tests (#383)
- from version 20210922.00
  * Add more info logs, actually cleanup unmanaged repos (#382)
- from version 20210901.00
  * Add E2E tests for Windows Application (#379)
  * Return lower-case package name (#377)
  * Update Terraform scripts for multi-project deployments tutorial. (#378)
- from version 20210811.00
  * Support Windows Application Inventory (#371)
- from version 20210723.00
  * Send basic inventory with RegisterAgent (#373)
- from version 20210722.1
  * e2e_tests: move to manually generated osconfig library (#372)
- from version 20210722.00
  * Create OWNERS file for examples directory (#368)
- from version 20210719.00
  * Update Zypper patch info parsing (#370)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1638273600">- Update to version 20211117.00 (bsc#1193257, bsc#1193258)
  * Add retry logic for RegisterAgent (#404)
- from version 20211111.01
  * e2e_test: drop ubuntu 1604 image as its EOL (#403)
- from version 20211111.00
  * e2e_test: move to V1 api for OSPolicies (#397)
- from version 20211102.00
  * Fix context logging and fix label names (#400)
- from version 20211028.00
  * Add cloudops example for gcloud (#399)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644321600">- Update to version 20220204.00
  * Add DisableLocalLogging option (#413)
- from version 20220107.00
  * OS assignment example: Copy file from bucket</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1644840000">- Update to version 20220209.00 (bsc#1195437, bsc#1195438)
  * Update licences, remove deprecated centos-8 tests (#414)</changelog>
</package>
<package pkgid="2ec79f4dcfd8bc5513e57c17d9d95115f12e4798e5bd89387f03a79806d98888" name="grafana" arch="aarch64">
  <version epoch="0" ver="8.3.5" rel="150200.3.21.1"/>
  <changelog author="egotthold@suse.com" date="1589457600">- Add instructions for patching the Grafana javascript frontend.</changelog>
  <changelog author="jcavalheiro@suse.com" date="1590321600">- Update to version 7.0.0
  * Breaking changes
  - Removed PhantomJS: PhantomJS was deprecated in Grafana v6.4 and starting from Grafana v7.0.0, all PhantomJS support has been removed. This means that Grafana no longer ships with a built-in image renderer, and we advise you to install the Grafana Image Renderer plugin.
  - Dashboard: A global minimum dashboard refresh interval is now enforced and defaults to 5 seconds.
  - Interval calculation: There is now a new option Max data points that controls the auto interval $__interval calculation. Interval was previously calculated by dividing the panel width by the time range. With the new max data points option it is now easy to set $__interval to a dynamic value that is time range agnostic. For example if you set Max data points to 10 Grafana will dynamically set $__interval by dividing the current time range by 10.
  - Datasource/Loki: Support for deprecated Loki endpoints has been removed.
  - Backend plugins: Grafana now requires backend plugins to be signed, otherwise Grafana will not load/start them. This is an additional security measure to make sure backend plugin binaries and files haven't been tampered with. Refer to Upgrade Grafana for more information.
  - @grafana/ui: Forms migration notice, see @grafana/ui changelog
  - @grafana/ui: Select API change for creating custom values, see @grafana/ui changelog
    + Deprecation warnings
  - Scripted dashboards is now deprecated. The feature is not removed but will be in a future release. We hope to address the underlying requirement of dynamic dashboards in a different way. #24059
  - The unofficial first version of backend plugins together with usage of grafana/grafana-plugin-model is now deprecated and support for that will be removed in a future release. Please refer to backend plugins documentation for information about the new officially supported backend plugins.
  * Features / Enhancements
  - Backend plugins: Log deprecation warning when using the unofficial first version of backend plugins. #24675, @marefr
  - Editor: New line on Enter, run query on Shift+Enter. #24654, @davkal
  - Loki: Allow multiple derived fields with the same name. #24437, @aocenas
  - Orgs: Add future deprecation notice. #24502, @torkelo
  * Bug Fixes
  - @grafana/toolkit: Use process.cwd() instead of PWD to get directory. #24677, @zoltanbedi
  - Admin: Makes long settings values line break in settings page. #24559, @hugohaggmark
  - Dashboard: Allow editing provisioned dashboard JSON and add confirmation when JSON is copied to dashboard. #24680, @dprokop
  - Dashboard: Fix for strange "dashboard not found" errors when opening links in dashboard settings. #24416, @torkelo
  - Dashboard: Fix so default data source is selected when data source can't be found in panel editor. #24526, @mckn
  - Dashboard: Fixed issue changing a panel from transparent back to normal in panel editor. #24483, @torkelo
  - Dashboard: Make header names reflect the field name when exporting to CSV file from the the panel inspector. #24624, @peterholmberg
  - Dashboard: Make sure side pane is displayed with tabs by default in panel editor. #24636, @dprokop
  - Data source: Fix query/annotation help content formatting. #24687, @AgnesToulet
  - Data source: Fixes async mount errors. #24579, @Estrax
  - Data source: Fixes saving a data source without failure when URL doesn't specify a protocol. #24497, @aknuds1
  - Explore/Prometheus: Show results of instant queries only in table. #24508, @ivanahuckova
  - Explore: Fix rendering of react query editors. #24593, @ivanahuckova
  - Explore: Fixes loading more logs in logs context view. #24135, @Estrax
  - Graphite: Fix schema and dedupe strategy in rollup indicators for Metrictank queries. #24685, @torkelo
  - Graphite: Makes query annotations work again. #24556, @hugohaggmark
  - Logs: Clicking "Load more" from context overlay doesn't expand log row. #24299, @kaydelaney
  - Logs: Fix total bytes process calculation. #24691, @davkal
  - Org/user/team preferences: Fixes so UI Theme can be set back to Default. #24628, @AgnesToulet
  - Plugins: Fix manifest validation. #24573, @aknuds1
  - Provisioning: Use proxy as default access mode in provisioning. #24669, @bergquist
  - Search: Fix select item when pressing enter and Grafana is served using a sub path. #24634, @tskarhed
  - Search: Save folder expanded state. #24496, @Clarity-89
  - Security: Tag value sanitization fix in OpenTSDB data source. #24539, @rotemreiss
  - Table: Do not include angular options in options when switching from angular panel. #24684, @torkelo
  - Table: Fixed persisting column resize for time series fields. #24505, @torkelo
  - Table: Fixes Cannot read property subRows of null. #24578, @hugohaggmark
  - Time picker: Fixed so you can enter a relative range in the time picker without being converted to absolute range. #24534, @mckn
  - Transformations: Make transform dropdowns not cropped. #24615, @dprokop
  - Transformations: Sort order should be preserved as entered by user when using the reduce transformation. #24494, @hugohaggmark
  - Units: Adds scale symbol for currencies with suffixed symbol. #24678, @hugohaggmark
  - Variables: Fixes filtering options with more than 1000 entries. #24614, @hugohaggmark
  - Variables: Fixes so Textbox variables read value from url. #24623, @hugohaggmark
  - Zipkin: Fix error when span contains remoteEndpoint. #24524, @aocenas
  - SAML: Switch from email to login for user login attribute mapping (Enterprise)
- Update Makefile and spec file
  * Remove phantomJS patch from Makefile
  * Fix multiline strings in Makefile
  * Exclude s390 from SLE12 builds, golang 1.14 is not built for s390</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591012800">- Update to version 7.0.1
  * Features / Enhancements
  - Datasource/CloudWatch: Makes CloudWatch Logs query history more readable. #24795, @kaydelaney
  - Download CSV: Add date and time formatting. #24992, @ryantxu
  - Table: Make last cell value visible when right aligned. #24921, @peterholmberg
  - TablePanel: Adding sort order persistance. #24705, @torkelo
  - Transformations: Display correct field name when using reduce transformation. #25068, @peterholmberg
  - Transformations: Allow custom number input for binary operations. #24752, @ryantxu
  * Bug fixes
  - Dashboard/Links: Fixes dashboard links by tags not working. #24773, @KamalGalrani
  - Dashboard/Links: Fixes open in new window for dashboard link. #24772, @KamalGalrani
  - Dashboard/Links: Variables are resolved and limits to 100. #25076, @hugohaggmark
  - DataLinks: Bring back variables interpolation in title. #24970, @dprokop
  - Datasource/CloudWatch: Field suggestions no longer limited to prefix-only. #24855, @kaydelaney
  - Explore/Table: Keep existing field types if possible. #24944, @kaydelaney
  - Explore: Fix wrap lines toggle for results of queries with filter expression. #24915, @ivanahuckova
  - Explore: fix undo in query editor. #24797, @zoltanbedi
  - Explore: fix word break in type head info. #25014, @zoltanbedi
  - Graph: Legend decimals now work as expected. #24931, @torkelo
  - LoginPage: Fix hover color for service buttons. #25009, @tskarhed
  - LogsPanel: Fix scrollbar. #24850, @ivanahuckova
  - MoveDashboard: Fix for moving dashboard caused all variables to be lost. #25005, @torkelo
  - Organize transformer: Use display name in field order comparer. #24984, @dprokop
  - Panel: shows correct panel menu items in view mode. #24912, @hugohaggmark
  - PanelEditor Fix missing labels and description if there is only single option in category. #24905, @dprokop
  - PanelEditor: Overrides name matcher still show all original field names even after Field default display name is specified. #24933, @torkelo
  - PanelInspector: Makes sure Data display options are visible. #24902, @hugohaggmark
  - PanelInspector: Hides unsupported data display options for Panel type. #24918, @hugohaggmark
  - PanelMenu: Make menu disappear on button press. #25015, @tskarhed
  - Postgres: Fix add button. #25087, @phemmer
  - Prometheus: Fix recording rules expansion. #24977, @ivanahuckova
  - Stackdriver: Fix creating Service Level Objectives (SLO) datasource query variable. #25023, @papagian</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591358400">- Update to version 7.0.3
  * Features / Enhancements
  - Stats: include all fields. #24829, @ryantxu
  - Variables: change VariableEditorList row action Icon to IconButton. #25217, @hshoff
  * Bug fixes
  - Cloudwatch: Fix dimensions of DDoSProtection. #25317, @papagian
  - Configuration: Fix env var override of sections containing hyphen. #25178, @marefr
  - Dashboard: Get panels in collapsed rows. #25079, @peterholmberg
  - Do not show alerts tab when alerting is disabled. #25285, @dprokop
  - Jaeger: fixes cascader option label duration value. #25129, @Estrax
  - Transformations: Fixed Transform tab crash &amp; no update after adding first transform. #25152, @torkelo
- Update to version 7.0.2
  * Bug fixes
  - Security: Urgent security patch release to fix CVE-2020-13379</changelog>
  <changelog author="jcavalheiro@suse.com" date="1600430400">- Update to version 7.1.5:
  * Features / Enhancements
  - Stats: Stop counting the same user multiple times.
  - Field overrides: Filter by field name using regex.
  - AzureMonitor: map more units.
  - Explore: Don't run queries on datasource change.
  - Graph: Support setting field unit &amp; override data source (automatic) unit.
  - Explore: Unification of logs/metrics/traces user interface
  - Table: JSON Cell should try to convert strings to JSON
  - Variables: enables cancel for slow query variables queries.
  - TimeZone: unify the time zone pickers to one that can rule them all.
  - Search: support URL query params.
  - Grafana-UI: Add FileUpload.
  - TablePanel: Sort numbers correctly.
  * Bug fixes
  - Alerting: remove LongToWide call in alerting.
  - AzureMonitor: fix panic introduced in 7.1.4 when unit was unspecified and alias was used.
  - Variables: Fixes issue with All variable not being resolved.
  - Templating: Fixes so texts show in picker not the values.
  - Templating: Templating: Fix undefined result when using raw interpolation format
  - TextPanel: Fix content overflowing panel boundaries.
  - StatPanel: Fix stat panel display name not showing when explicitly set.
  - Query history: Fix search filtering if null value.
  - Flux: Ensure connections to InfluxDB are closed.
  - Dashboard: Fix for viewer can enter panel edit mode by modifying url (but cannot not save anything).
  - Prometheus: Fix prom links in mixed mode.
  - Sign In Use correct url for the Sign In button.
  - StatPanel: Fixes issue with name showing for single series / field results
  - BarGauge: Fix space bug in single series mode.
  - Auth: Fix POST request failures with anonymous access
  - Templating: Fix recursive loop of template variable queries when changing ad-hoc-variable
  - Templating: Fixed recursive queries triggered when switching dashboard settings view
  - GraphPanel: Fix annotations overflowing panels.
  - Prometheus: Fix performance issue in processing of histogram labels.
  - Datasources: Handle URL parsing error.
  - Security: Use Header.Set and Header.Del for X-Grafana-User header.
  * Changes in spec file
  - Fix golang version = 1.14 to avoid dependency conflicts on some OBS projects</changelog>
  <changelog author="witold.bedyk@suse.com" date="1604577600">- Update to version 7.3.1:
  * Breaking changes
  - CloudWatch: The AWS CloudWatch data source's authentication scheme has changed. See the upgrade notes for details and how this may affect you.
  - Units: The date time units `YYYY-MM-DD HH:mm:ss` and `MM/DD/YYYY h:mm:ss a` have been renamed to `Datetime ISO` and `Datetime US` respectively.
  * Features / Enhancements
  - AzureMonitor: Support decimal (as float64) type in analytics/logs.
  - Add monitoring mixing for Grafana.
  - CloudWatch: Missing Namespace AWS/EC2CapacityReservations.
  - CloudWatch: Add support for AWS DirectConnect virtual interface metrics and add missing dimensions.
  - CloudWatch: Adding support for Amazon ElastiCache Redis metrics.
  - CloudWatch: Adding support for additional Amazon CloudFront metrics.
  - CloudWatch: Re-implement authentication.
  - Elasticsearch: Support multiple pipeline aggregations for a query.
  - Prometheus: Add time range parameters to labels API.
  - Loki: Visually distinguish error logs for LogQL2.
  - Api: Add /healthz endpoint for health checks.
  - API: Enrich add user to org endpoints with user ID in the response.
  - API: Enrich responses and improve error handling for alerting API endpoints.
  - Elasticsearch: Add support for date_nanos type.
  - Elasticsearch: Allow fields starting with underscore.
  - Elasticsearch: Increase maximum geohash aggregation precision to 12.
  - Postgres: Support request cancellation properly (Uses new backendSrv.fetch Observable request API).
  - Provisioning: Remove provisioned dashboards without parental reader.
  - API: Return ID of the deleted resource for dashboard, datasource and folder DELETE endpoints.
  - API: Support paging in the admin orgs list API.
  - API: return resource ID for auth key creation, folder permissions update and user invite complete endpoints.
  - BackendSrv: Uses credentials, deprecates withCredentials &amp; defaults to same-origin.
  - CloudWatch: Update list of AmazonMQ metrics and dimensions.
  - Cloudwatch: Add Support for external ID in assume role.
  - Cloudwatch: Add af-south-1 region.
  - DateFormats: Default ISO &amp; US formats never omit date part even if date is today (breaking change).
  - Explore: Transform prometheus query to elasticsearch query.
  - InfluxDB/Flux: Increase series limit for Flux datasource.
  - InfluxDB: exclude result and table column from Flux table results.
  - InfluxDB: return a table rather than an error when timeseries is missing time.
  - Loki: Add scopedVars support in legend formatting for repeated variables.
  - Loki: Re-introduce running of instant queries.
  - Loki: Support request cancellation properly (Uses new backendSrv.fetch Observable request API).
  - MixedDatasource: Shows retrieved data even if a data source fails.
  - Postgres: Support Unix socket for host.
  - Prometheus: Add scopedVars support in legend formatting for repeated variables.
  - Prometheus: Support request cancellation properly (Uses new backendSrv.fetch Observable request API).
  - Prometheus: add $__rate_interval variable.
  - Table: Adds column filtering.
  - grafana-cli: Add ability to read password from stdin to reset admin password.</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update packaging
  * avoid systemd and shadow hard requirements
  * Require the user from a new dedicated 'system-user-grafana' sibling package
  * avoid pinning to a specific Go version in the spec file</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- Update to version 7.3.6:
  * fixes for saml vulnerability
  * [v7.3.x] Fix: Correct panel edit uistate migration (#29413) (#29711)
  * PanelEdit: Prevent the preview pane to be resized further than window height (#28370) (#29726)
  * Fix: Migrate Panel edit uiState percentage strings to number (#29412) (#29723)
  * "Release: Updated versions in package to 7.3.5" (#29710)
  * Chore: upgrading y18n to 4.0.1 for security reasons (#29523) (#29709)
  * Panel: making sure we support all versions of chrome when detecting position of click event. (#29544) (#29708)
  * PanelEdit: making sure the correct datasource query editor is being rendered. (#29500) (#29707)
  * [v7.3.x] Auth: Add SigV4 header allowlist to reduce chances of verification issues (#29705)
  * Alerting: Use correct time series name override from frame fields (#29693) (#29698)
  * CloudWatch: namespace in search expression should be quoted if match exact is enabled #29109 (#29563) (#29687)
  * Adds go dep used by an Enterprise feature.  (#29645) (#29690)
  * instrumentation: align label name with our other projects (#29514) (#29685)
  * Instrumentation: Add examplars for request histograms (#29357) (#29682)
  * Login: Fixes typo in tooltip (#29604) (#29606)
  * fixes bug with invalid handler name for metrics (#29529) (#29532)
  * AzureMonitor: Unit MilliSeconds naming (#29399) (#29526)
  * Alarting: fix alarm messages in dingding (Fixes #29470) (#29482) (#29527)
  * Bug: trace viewer doesn't show more than 300 spans (#29377) (#29504)
  * Prometheus: don't override displayName property (#29441) (#29488)
  * resolve conflicts (#29415)
  * Drone: Upgrade build pipeline tool (#29365) (#29368)
  * Drone: Upload artifacts for release branch builds (#29297) (#29364)
  * Drone: Execute artifact publishing for both editions in parallel during release (#29362) (#29363)
  * Drone: Publish NPM packages after Storybook to avoid race condition (#29340) (#29343)
  * Docs: Fix editor role and alert notification channel description (#29301) (#29337)
  * "Release: Updated versions in package to 7.3.4" (#29336)
  * Security: Fixes minor security issue with alert notification webhooks that allowed GET &amp; DELETE requests #29330 (#29335)
  * Backport of InfluxDB: update flux library and support boolean label values #29333
  * ReleaseNotes: Update link in package.json (#29328)
  * Login: Fixes redirect url encoding issues of # %23 being unencoded after login (#29299) (#29323)
  * Drone: Upgrade build pipeline tool (#29308) (#29309)
  * Annotations: fixing so when changing annotations query links submenu will be updated. (#28990) (#29285)
  * Dashboard: Fixes kiosk state after being redirected to login page and back (#29273) (#29278)
  * Increase search limit on team add user and improve placeholder (#29258) (#29261)
  * Drone: Sync with master (#29205)
  * Drone: Fix publish-packages invocation (#29179) (#29184)
  * Chore: Upgrade grafana/build-ci-deploy image to latest Go (#29171) (#29180)
  * Table: Fix incorrect condtition for rendering table filter (#29165) (#29181)
  * DashboardLinks: will only refresh dashboard search when changing tags for link. (#29040) (#29177)
  * Drone: Upgrade build pipeline tool and build image (#29161) (#29162)
  * Release: Updated versions in package to 7.3.3 (#29126)
  * git cherry-pick -x 0f3bebb38daa488e108881ce17d4f68167a834e6 (#29155)
  * Build: support custom build tags (#28609) (#29128)
  * Revert "Graph: Fixes stacking issues like floating bars when data is not aligned  (#29051) (#29088)" (#29151)
  * Provisioning: always pin app to the sidebar when enabled (#29084) (#29146)
  * build paths in an os independent way (#29143) (#29147)
  * Chore: Upgrade Go dev tools (#29124) (#29132)
  * Automatin: set node version
  * Automation: Adding version bump action
  * Drone: Fix Drone config verification for enterprise on Windows (#29118) (#29119)
  * [v7.3.x] Drone: Verify Drone config at beginning of pipelines (#29111)
  * Test Datasource/Bug: Fixes division by zero in csv metric values scenario (#29029) (#29068)
  * [v7.3.x] StatPanel: Fixes hanging issue when all values are zero (#29087)
  * Data source proxy: Convert 401 from data source to 400 (#28962) (#29095)
  * Graph: Fixes stacking issues like floating bars when data is not aligned  (#29051) (#29088)
  * Auth: Enable more complete credential chain for SigV4 default SDK auth option (#29065) (#29086)
  * Fix for multi-value template variable for project selector (#29042) (#29054)
  * Thresholds: Fixes color assigned to null values (#29010) (#29018)
  * [v7.3.x] Chore: Bump build pipeline version (#29025)
  * Release v7.3.2 (#29024)
  * Fix conflict (#29020)
  * StatPanels: Fixes auto min max when latest value is zero (#28982) (#29007)
  * Tracing: Add setting for sampling server (#29011) (#29015)
  * Gauge: making sure threshold panel json is correct before render (#28898) (#28984)
  * Variables: make sure that we support both old and new syntax for custom variables. (#28896) (#28985)
  * Explore: Remove redundant decodeURI and fix urls (#28697) (#28963)
  * [v7.3.x] Drone: Fix docs building (#28987)
  * Alerting: Append appSubUrl to back button on channel form (#28282) (#28983)
  * Plugins: allow override when allowing unsigned plugins (#28901) (#28927)
  * CloudWatch Logs: Change what we use to measure progress (#28912) (#28964)
  * Tracing: log traceID in request logger (#28952) (#28959)
  * Panel inspect: Interpolate variables in panel inspect title (#28779) (#28801)
  * UsageStats: start tracking usage stats for tempo (#28948) (#28951)
  * Short URL: Cleanup unvisited/stale short URLs (#28867) (#28944)
  * Plugins signing: Fix docs urls (#28930) (#28934)
  * Chore: Fix spelling issue (#28904) (#28925)
  * API: replace SendLoginLogCommand with LoginHook (#28777) (#28891)
  * Elasticsearch: Exclude pipeline aggregations from order by options (#28620) (#28873)
  * Dashboards / Folders: delete related data (permissions, stars, tags, versions, annotations) when deleting a dashboard or a folder (#28826) (#28890)
  * Disable selecting enterprise plugins with no license (#28758) (#28859)
  * Tempo: fix test data source (#28836) (#28856)
  * Prometheus: fix missing labels from value (#28842) (#28855)
  * Units: added support to handle negative fractional numbers. (#28849) (#28851)
  * increase blob column size for encrypted dashboard data (#28831) (#28832)
  * Gauge: Improve font size auto sizing (#28797) (#28828)
  * Variables: Fixes URL values for dependent variables (#28798) (#28800)
  * grafana/toolkit: Extract CHANGELOG when building plugin (#28773) (#28774)
  * Templating: Custom variable edit UI, change text input into textarea  (#28312) (#28322) (#28704)
  * Cloudwatch: Fix issue with field calculation transform not working properly with Cloudwatch data (#28761) (#28775)
  * Plugin page: Fix dom validation warning (#28737) (#28741)
  * Dashboard: fix view panel mode for Safari / iOS (#28702) (#28755)
  * Fix typo in unsigned plugin warning (#28709) (#28722)
  * TableFilters: Fixes filtering with field overrides (#28690) (#28727)
  * Templating: Speeds up certain variable queries for Postgres, MySql and MSSql (#28686) (#28726)
  * Prometheus: Fix copy paste behaving as cut and paste (#28622) (#28691)</changelog>
  <changelog author="tserong@suse.com" date="1613563200">- Update to version 7.4.1:
  * "Release: Updated versions in package to 7.4.1" (#31128)
  * Transforms: Fixes Outer join issue with duplicate field names not getting the same unique field names as before  (#31121) (#31127)
  * MuxWriter: Handle error for already closed file (#31119) (#31120)
  * Logging: sourcemap transform asset urls from CDN in logged stacktraces (#31115) (#31117)
  * Exemplars: Change CTA style (#30880) (#31105)
  * test: add support for timeout to be passed in for addDatasource (#30736) (#31090)
  * Influx: Make max series limit configurable and show the limiting message if applied (#31025) (#31100)
  * Elasticsearch: fix log row context erroring out (#31088) (#31094)
  * test: update addDashboard flow for v7.4.0 changes (#31059) (#31084)
  * Usage stats: Adds source/distributor setting (#31039) (#31076)
  * DashboardLinks: Fixes crash when link has no title (#31008) (#31050)
  * Make value mappings correctly interpret numeric-like strings (#30893) (#30912)
  * Elasticsearch: Fix alias field value not being shown in query editor (#30992) (#31037)
  * BarGauge: Improvements to value sizing and table inner width calculations  (#30990) (#31032)
  * convert path to posix by default (#31045) (#31053)
  * Alerting: Fixes so notification channels are properly deleted (#31040) (#31046)
  * Drone: Fix deployment image (#31027) (#31029)
  * Graph: Fixes so graph is shown for non numeric time values (#30972) (#31014)
  * instrumentation: make the first database histogram bucket smaller (#30995) (#31001)
  * Build: Releases e2e and e2e-selectors too (#31006) (#31007)
  * TextPanel: Fixes so panel title is updated when variables change (#30884) (#31005)
  * StatPanel: Fixes issue formatting date values using unit option (#30979) (#30991)
  * Units: Fixes formatting of duration units (#30982) (#30986)
  * Elasticsearch: Show Size setting for raw_data metric (#30980) (#30983)
  * Logging: sourcemap support for frontend stacktraces (#30590) (#30976)
  * e2e: extends selector factory to plugins (#30932) (#30934)
  * Variables: Adds queryparam formatting option (#30858) (#30924)
  * Exemplars: change api to reflect latest changes (#30910) (#30915)
  * "Release: Updated versions in package to 7.4.0" (#30898)
  * DataSourceSettings: Adds info box and link to Grafana Cloud (#30891) (#30896)
  * GrafanaUI: Add a way to persistently close InfoBox (#30716) (#30895)
  * [7.4.x] AlertingNG: List saved Alert definitions in Alert Rule list (30890)(30603)
  * Alerting: Fixes alert panel header icon not showing (#30840) (#30885)
  * Plugins: Requests validator (#30445) (#30877)
  * PanelLibrary: Adds library panel meta information to dashboard json (#30770) (#30883)
  * bump grabpl version to 0.5.36 (#30874) (#30878)
  * Chore: remove __debug_bin (#30725) (#30857)
  * Grafana-ui: fixes closing modals with escape key (#30745) (#30873)
  * DashboardLinks: Support variable expression in to tooltip - Issue #30409 (#30569) (#30852)
  * Add alt text to plugin logos (#30710) (#30872)
  * InfluxDB: Add http configuration when selecting InfluxDB v2 flavor  (#30827) (#30870)
  * Prometheus: Set type of labels to string (#30831) (#30835)
  * AlertingNG: change API permissions (#30781) (#30814)
  * Grafana-ui: fixes no data message in Table component (#30821) (#30855)
  * Prometheus: Add tooltip to explain possibility to use patterns in text and title fields in annotations (#30825) (#30843)
  * Chore: add more docs annotations (#30847) (#30851)
  * BarChart: inside-align strokes, upgrade uPlot to 1.6.4. (#30806) (#30846)
  * Transforms: allow boolean in field calculations (#30802) (#30845)
  * CDN: Fixes cdn path when Grafana is under sub path (#30822) (#30823)
  * bump cypress to 6.3.0 (#30644) (#30819)
  * Expressions: Measure total transformation requests and elapsed time (#30514) (#30789)
  * Grafana-UI: Add story/docs for ErrorBoundary (#30304) (#30811)
  * [v7.4.x]: Menu: Mark menu components as internal (#30801)
  * Graph: Fixes auto decimals issue in legend and tooltip (#30628) (#30635)
  * GraphNG: Disable Plot logging by default (#30390) (#30500)
  * Storybook: Migrate card story to use controls  (#30535) (#30549)
  * GraphNG: add bar alignment option (#30499) (#30790)
  * Variables: Clears drop down state when leaving dashboard (#30810) (#30812)
  * Add missing callback dependency (#30797) (#30809)
  * GraphNG: improve behavior when switching between solid/dash/dots (#30796) (#30799)
  * Add width for Variable Editors (#30791) (#30795)
  * Panels: Fixes so panels are refreshed when scrolling past them fast (#30784) (#30792)
  * PanelEdit: Trigger refresh when changing data source (#30744) (#30767)
  * AlertingNG: Enable UI to Save Alert Definitions (#30394) (#30548)
  * CDN: Fix passing correct prefix to GetContentDeliveryURL (#30777) (#30779)
  * CDN: Adds support for serving assets over a CDN (#30691) (#30776)
  * Explore: Update styling of buttons (#30493) (#30508)
  * Loki: Append refId to logs uid (#30418) (#30537)
  * skip symlinks to directories when generating plugin manifest (#30721) (#30738)
  * Mobile: Fixes issue scrolling on mobile in chrome (#30746) (#30750)
  * BarChart: add alpha bar chart panel (#30323) (#30754)
  * Datasource: Use json-iterator configuration compatible with standard library (#30732) (#30739)
  * Variables: Fixes so text format will show All instead of custom all (#30730) (#30731)
  * AlertingNG: pause/unpause definitions via the API (#30627) (#30672)
  * PanelLibrary: better handling of deleted panels (#30709) (#30726)
  * Transform: improve the "outer join" performance/behavior (#30407) (#30722)
  * DashboardPicker: switch to promise-based debounce, return dashboard UID (#30706) (#30714)
  * Use connected GraphNG in Explore (#30707) (#30708)
  * PanelLibrary: changes casing of responses and adds meta property (#30668) (#30711)
  * DeployImage: Switch base images to Debian (#30684) (#30699)
  * Trace: trace to logs design update (#30637) (#30702)
  * Influx: Show all datapoints for dynamically windowed flux query (#30688) (#30703)
  * ci(npm-publish): add missing github package token to env vars (#30665) (#30673)
  * Loki: Improve live tailing errors and fix Explore's logs container type errors (#30517) (#30681)
  * Grafana-UI: Fix setting default value for MultiSelect (#30671) (#30687)
  * Explore: Fix jumpy live tailing (#30650) (#30677)
  * Docs: Refer to product docs in whats new for alerting templating feature (#30652) (#30670)
  * Variables: Fixes display value when using capture groups in regex (#30636) (#30661)
  * Docs: Fix expressions enabled description (#30589) (#30651)
  * Licensing Docs: Adding license restrictions docs (#30216) (#30648)
  * DashboardSettings: fixes vertical scrolling (#30640) (#30643)
  * chore: bump redux toolkit to 1.5.0 for immer 8.0.1 vulnerability fix (#30605) (#30631)
  * Explore: Fix loading visualisation on the top of the new time series panel (#30553) (#30557)
  * Footer: Fixes layout issue in footer  (#30443) (#30494)
  * Variables: Fixes so queries work for numbers values too (#30602) (#30624)
  * Admin: Fixes so form values are filled in from backend (#30544) (#30623)
  * Docs: Update 7.4 What's New to use more correct description of alerting notification template feature (#30502) (#30614)
  * NodeGraph: Add docs (#30504) (#30613)
  * Cloud Monitoring: Fix legend naming with display name override (#30440) (#30503)
  * Expressions: Add option to disable feature (#30541) (#30558)
  * OldGraph: Fix height issue in Firefox (#30565) (#30582)
  * XY Chart: fix editor error with empty frame (no fields) (#30573) (#30577)
  * XY Chart: share legend config with timeseries (#30559) (#30566)
  * DataFrame: cache frame/field index in field state (#30529) (#30560)
  * Prometheus: Fix show query instead of Value if no __name__ and metric (#30511) (#30556)
  * Decimals: Big Improvements to auto decimals and fixes to auto decimals bug found in 7.4-beta1  (#30519) (#30550)
  * chore: update packages dependent on dot-prop to fix security vulnerability (#30432) (#30487)
  * GraphNG: uPlot 1.6.3 (fix bands not filling below 0). close #30523. (#30527) (#30528)
  * GraphNG: uPlot 1.6.2 (#30521) (#30522)
  * Chore: Upgrade grabpl version (#30486) (#30513)
  * grafana/ui: Fix internal import from grafana/data (#30439) (#30507)
  * prevent field config from being overwritten (#30437) (#30442)
  * Chore: upgrade NPM security vulnerabilities (#30397) (#30495)
  * TimeSeriesPanel: Fixed default value for gradientMode (#30484) (#30492)
  * Admin: Fixes so whole org drop down is visible when adding users to org (#30481) (#30497)
  * Chore: adds wait to e2e test (#30488) (#30490)
  * Graph: Fixes so only users with correct permissions can add annotations (#30419) (#30466)
  * Alerting: Hides threshold handle for percentual thresholds (#30431) (#30467)
  * Timeseries: only migrage point size when configured (#30461) (#30470)
  * Expressions: Fix button icon (#30444) (#30450)
  * PanelModel: Make sure the angular options are passed to react panel type changed handler (#30441) (#30451)
  * Docs: Fix img link for alert notification template (#30436) (#30447)
  * Chore: Upgrade build pipeline tool (#30456) (#30457)
  * PanelOptions: Refactoring applying panel and field options out of PanelModel and add property clean up for properties not in field config registry  (#30389) (#30438)
  * "Release: Updated versions in package to 7.4.0-beta.1" (#30427)
  * Chore: Update what's new URL (#30423)
  * GraphNG: assume uPlot's series stroke is always a function (#30416)
  * PanelLibrary: adding library panels to Dashboard Api (#30278)
  * Prettier: Fixes to files that came in after main upgrade (#30410)
  * Cloud Monitoring: Add curated dashboards for the most popular GCP services (#29930)
  * Mssql integrated security (#30369)
  * Prettier: Upgrade to 2  (#30387)
  * GraphNG: sort ascending if the values appear reversed (#30405)
  * Docs: Grafana whats new 7.4 (#30404)
  * Dashboards: Adds cheat sheet toggle to supported query editors (#28857)
  * Docs: Update timeseries-dimensions.md (#30403)
  * Alerting: Evaluate data templating in alert rule name and message (#29908)
  * Docs: Add links to 7.3 patch release notes (#30292)
  * Docs: Update _index.md (#29546)
  * Docs: Update jaeger.md (#30401)
  * Expressions: Remove feature toggle (#30316)
  * Docs: Update tempo.md (#30399)
  * Docs: Update zipkin.md (#30400)
  * services/provisioning: Various cleanup (#30396)
  * DashboardSchemas: OpenAPI Schema Generation (#30242)
  * AlertingNG: Enforce unique alert definition title (non empty)/UID per organisation (#30380)
  * Licensing: Document new v7.4 options and APIs (#30217)
  * Auth: add expired token error and update CreateToken function (#30203)
  * NodeGraph: Add node graph visualization (#29706)
  * Add jwtTokenAuth to plugin metadata schema (#30346)
  * Plugins: Force POSIX style path separators for manifest generation (#30287)
  * Add enterprise reporting fonts to gitignore (#30385)
  * Field overrides: skipping overrides for properties no longer existing in plugin (#30197)
  * NgAlerting: View query result (#30218)
  * Grafana-UI: Make Card story public (#30388)
  * Dashboard: migrate version history list (#29970)
  * Search: use Card component (#29892)
  * PanelEvents: Isolate more for old angular query editors (#30379)
  * Loki: Remove showing of unique labels with the empty string value (#30363)
  * Chore: Lint all files for no-only-tests (#30364)
  * Clears errors after running new query (#30367)
  * Prometheus: Change exemplars endpoint (#30378)
  * Explore: Fix a bug where Typeahead crashes when a large amount of ite? (#29637)
  * Circular vector: improve generics (#30375)
  * Update signing docs (#30296)
  * Email: change the year in templates (#30294)
  * grafana/ui: export TLS auth component (#30320)
  * Query Editor: avoid word wrap (#30373)
  * Transforms: add sort by transformer (#30370)
  * AlertingNG: Save alert instances (#30223)
  * GraphNG: Color series from by value scheme &amp; change to fillGradient to gradientMode  (#29893)
  * Chore: Remove not used PanelOptionsGrid component (#30358)
  * Zipkin: Remove browser access mode (#30360)
  * Jaeger: Remove browser access mode (#30349)
  * chore: bump lodash to 4.17.20 (#30359)
  * ToolbarButton: New emotion based component to replace all navbar, DashNavButton and scss styles (#30333)
  * Badge: Increase contrast, remove rocket icon for plugin beta/alpha state (#30357)
  * Licensing: Send map of environment variables to plugins (#30347)
  * Dashboards: Exit to dashboard when deleting panel from panel view / edit view (#29032)
  * Cloud Monitoring: MQL support (#26551)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0-beta1 (#30348)
  * Panel options UI: Allow collapsible categories (#30301)
  * Grafana-ui: Fix context menu item always using onClick instead of href (#30350)
  * Badge: Design improvement &amp; reduce contrast (#30328)
  * make sure stats are added horizontally and not vertically (#30106)
  * Chore(deps): Bump google.golang.org/grpc from 1.33.1 to 1.35.0 (#30342)
  * Chore(deps): Bump github.com/stretchr/testify from 1.6.1 to 1.7.0 (#30341)
  * Chore(deps): Bump github.com/google/uuid from 1.1.2 to 1.1.5 (#30340)
  * Chore(deps): Bump github.com/hashicorp/go-version from 1.2.0 to 1.2.1 (#30339)
  * Fix HTML character entity error (#30334)
  * GraphNG: fix fillBelowTo regression (#30330)
  * GraphNG: implement softMin/softMax for auto-scaling stabilization. close #979. (#30326)
  * Legend: Fixes right y-axis legend from being pushed outside the bounds of the panel (#30327)
  * Grafana-toolkit: Update component generator templates (#30306)
  * Panels: remove beta flag from stat and bargauge panels (#30324)
  * GraphNG: support fill below to (bands) (#30268)
  * grafana-cli: Fix security issue (#28888)
  * AlertingNG: Modify queries and transform endpoint to get datasource UIDs (#30297)
  * Chore: Fix missing property from ExploreGraph (#30315)
  * Prometheus: Add support for Exemplars (#28057)
  * Grafana-UI: Enhances for TimeRangePicker and TimeRangeInput (#30102)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0 (#30312)
  * Table: Fixes BarGauge cell display mode font size so that it is fixed to the default cell font size (#30303)
  * AngularGraph: Fixes issues with legend wrapping after legend refactoring (#30283)
  * Plugins: Add Open Distro to the list of data sources supported by sigv4 (#30308)
  * Chore: Moves common and response into separate packages (#30298)
  * GraphNG: remove y-axis position control from series color picker in the legend (#30302)
  * Table: migrate old-table config to new table config (#30142)
  * Elasticsearch: Support extended stats and percentiles in terms order by (#28910)
  * Docs: Update release notes index
  * GraphNG: stats in legend (#30251)
  * Grafana UI: EmptySearchResult docs (#30281)
  * Plugins: Use the includes.path (if exists) on sidebar includes links (#30291)
  * Fix spinner and broken buttons (#30286)
  * Graph: Consider reverse sorted data points on isOutsideRange check (#30289)
  * Update getting-started.md (#30257)
  * Backend: use sdk version (v0.81.0) without transform (gel) code (#29236)
  * Chore: update latest versions to 7.3.7 (#30282)
  * Loki: Fix hiding of series in table if labels have number values (#30185)
  * Loki: Lower min step to 1ms (#30135)
  * Prometheus: Improve autocomplete performance and remove disabling of dynamic label lookup (#30199)
  * Icons: Adds custom icon support ands new panel and interpolation icons (#30277)
  * ReleaseNotes: Updated changelog and release notes for 7.3.7 (#30280)
  * Grafana-ui: Allow context menu items to be open in new tab (#30141)
  * Cloud Monitoring: Convert datasource to use Dataframes (#29830)
  * GraphNG: added support to change series color from legend. (#30256)
  * AzureMonitor: rename labels for query type dropdown (#30143)
  * Decimals: Improving auto decimals logic for high numbers and scaled units  (#30262)
  * Elasticsearch: Use minimum interval for alerts (#30049)
  * TimeSeriesPanel: The new graph panel now supports y-axis value mapping #30272
  * CODEOWNERS: Make backend squad owners of backend style guidelines (#30266)
  * Auth: Add missing request headers to SigV4 middleware allowlist (#30115)
  * Grafana-UI: Add story/docs for FilterPill (#30252)
  * Grafana-UI: Add story/docs for Counter (#30253)
  * Backend style guide: Document JSON guidelines (#30267)
  * GraphNG: uPlot 1.6, hide "Show points" in Points mode, enable "dot" lineStyle (#30263)
  * Docs: Update prometheus.md (#30240)
  * Docs: Cloudwatch filter should be JSON format (#30243)
  * API: Add by UID routes for data sources  (#29884)
  * Docs: Update datasource_permissions.md (#30255)
  * Cloudwatch: Move deep link creation to the backend (#30206)
  * Metrics API: Use jsoniter for JSON encoding (#30250)
  * Add option in database config to skip migrations for faster startup. (#30146)
  * Set signed in users email correctly (#30249)
  * Drone: Upgrade build pipeline tool (#30247)
  * runRequest: Fixes issue with request time range and time range returned to panels are off causing data points to be cut off (outside) (#30227)
  * Elasticsearch: fix handling of null values in query_builder (#30234)
  * Docs: help users connect to Prometheus using SigV4 (#30232)
  * Update documentation-markdown-guide.md (#30207)
  * Update documentation-markdown-guide.md (#30235)
  * Better logging of plugin scanning errors (#30231)
  * Print Node.js and Toolkit versions (#30230)
  * Chore: bump rollup across all packages (#29486)
  * Backend style guide: Document database patterns (#30219)
  * Chore: Bump plugin-ci-alpine Docker image version (#30225)
  * Legends: Refactoring and rewrites of legend components to simplify components &amp; reuse (#30165)
  * Use Node.js 14.x in plugin CI (#30209)
  * Field overrides: extracting the field config factory into its own reusable module. (#30214)
  * LibraryPanels: adds connections (#30212)
  * PanelOptionsGroups: Only restore styles from PanelOptionsGroup (#30215)
  * Variables: Add deprecation warning for value group tags (#30160)
  * GraphNG: Hide grid for right-y axis if left x-axis exists (#30195)
  * Middleware: Add CSP support (#29740)
  * Updated image links to have newer format. (#30208)
  * Docs: Update usage-insights.md (#30150)
  * Share panel dashboard add images (#30201)
  * Update documentation-style-guide.md (#30202)
  * Docs: Fix links to transforms (#30194)
  * docs(badge): migrate story to use controls (#30180)
  * Chore(deps): Bump github.com/prometheus/common from 0.14.0 to 0.15.0 (#30188)
  * Fix alert definition routine stop (#30117)
  * Chore(deps): Bump gopkg.in/square/go-jose.v2 from 2.4.1 to 2.5.1 (#30189)
  * InlineSwitch: Minor story fix (#30186)
  * Chore(deps): Bump github.com/gosimple/slug from 1.4.2 to 1.9.0 (#30178)
  * Chore(deps): Bump github.com/fatih/color from 1.9.0 to 1.10.0 (#30183)
  * Chore(deps): Bump github.com/lib/pq from 1.3.0 to 1.9.0 (#30181)
  * Chore(deps): Bump github.com/hashicorp/go-plugin from 1.2.2 to 1.4.0 (#30175)
  * Chore(deps): Bump github.com/getsentry/sentry-go from 0.7.0 to 0.9.0 (#30171)
  * Gauge: Fixes issue with all null values cause min &amp; max to be null (#30156)
  * Links: Add underline on hover for links in NewsPanel (#30166)
  * GraphNG: Update to test dashboards (#30153)
  * CleanUp: Removed old panel options group component (#30157)
  * AngularQueryEditors: Fixes to Graphite query editor and other who refer to other queries (#30154)
  * Chore(deps): Bump github.com/robfig/cron/v3 from 3.0.0 to 3.0.1 (#30172)
  * Chore(deps): Bump github.com/urfave/cli/v2 from 2.1.1 to 2.3.0 (#30173)
  * Chore: Fix spelling issue (#30168)
  * Revise README.md. (#30145)
  * Chore(deps): Bump github.com/mattn/go-sqlite3 from 1.11.0 to 1.14.6 (#30174)
  * InlineSwitch: Added missing InlineSwitch component and fixed two places that used unaligned inline switch (#30162)
  * GraphNG: add new alpha XY Chart  (#30096)
  * Elastic: Support request cancellation properly (Uses new backendSrv.fetch Observable request API) (#30009)
  * OpenTSDB: Support request cancellation properly (#29992)
  * InfluxDB: Update Flux external link (#30158)
  * Allow dependabot to keep go packages up-to-date (#30170)
  * PluginState: Update comment
  * GraphNG: Minor polish &amp; updates to new time series panel and move it from alpha to beta (#30163)
  * Share panel dashboard (#30147)
  * GraphNG: rename "graph3" to "timeseries" panel (#30123)
  * Add info about access mode (#30137)
  * Prometheus: Remove running of duplicated metrics query (#30108)
  * Prometheus: Fix autocomplete does not work on incomplete input (#29854)
  * GraphNG: remove graph2 panel (keep the parts needed for explore) (#30124)
  * Docs: Add metadata to activating licensing page (#30140)
  * MixedDataSource: Added missing variable support flag (#30110)
  * AngularPanels: Fixes issue with some panels not rendering when going into edit mode due to no height (#30113)
  * AngularPanels: Fixes issue with discrete panel that used the initialized event (#30133)
  * Explore: Make getFieldLinksForExplore more reusable (#30134)
  * Elasticsearch: Add Support for Serial Differencing Pipeline Aggregation (#28618)
  * Angular: Fixes issue with angular directive caused by angular upgrade in master (#30114)
  * Analytics: add data source type in data-request events (#30087)
  * GraphNG: "Interpolation: Step after" test (#30127)
  * GraphNG: check cross-axis presence when auto-padding. close #30121. (#30126)
  * Alerting: improve alerting default datasource search when extracting alerts (#29993)
  * Loki: Timeseries should not produce 0-values for missing data (#30116)
  * GraphNG: support dashes (#30070)
  * GraphNG: fix spanGaps optimization in alignDataFrames(). see #30101. (#30118)
  * Alerting NG: update API to expect UIDs instead of IDs (#29896)
  * GraphNG: Overhaul of main test dashboard and update to null &amp; gaps dashboard (#30101)
  * Chore: Fix intermittent time-related test failure in explore datasource instance update (#30109)
  * QueryEditorRow: Ability to change query name (#29779)
  * Frontend: Failed to load application files message improvement IE11 (#30011)
  * Drone: Upgrade build pipeline tool (#30104)
  * Fix phrasing. (#30075)
  * Chore: Add CloudWatch HTTP API tests (#29691)
  * Elastic: Fixes so templating queries work (#30003)
  * Chore: Rewrite elasticsearch client test to standard library (#30093)
  * Chore: Rewrite tsdb influxdb test to standard library (#30091)
  * Fix default maximum lifetime  an authenticated user can be logged in (#30030)
  * Instrumentation: re-enable database wrapper feature to expose counter and histogram for database queries (#29662)
  * Docs: Update labels to fields transform (#30086)
  * GraphNG: adding possibility to toggle tooltip, graph and legend for series (#29575)
  * Chore: Rewrite tsdb cloudmonitoring test to standard library (#30090)
  * Chore: Rewrite tsdb azuremonitor time grain test to standard library (#30089)
  * Chore: Rewrite tsdb graphite test to standard library (#30088)
  * Chore: Upgrade Docker build image wrt. Go/golangci-lint/Node (#30077)
  * Usage Stats: Calculate concurrent users as a histogram (#30006)
  * Elasticsearch: Fix broken alerting when using pipeline aggregations (#29903)
  * Drone: Fix race conditions between Enterprise and Enterprise2 (#30076)
  * Chore: Rewrite models datasource cache test to standard library (#30040)
  * Plugins: prevent app plugin from rendering with wrong location (#30017)
  * Update NOTICE.md
  * Chore: Tiny typo fix `rage` -&gt; `range` (#30067)
  * Docs: loki.md: Add example of Loki data source config (#29976)
  * ReleaseNotes: Updated changelog and release notes for 7.3.6 (#30066)
  * Docs: Update usage-insights.md (#30065)
  * Docs: Update white-labeling.md (#30064)
  * Chore(deps): Bump axios from 0.19.2 to 0.21.1 (#30059)
  * Chore: Rewrite models tags test to standard library (#30041)
  * Bump actions/setup-node from v1 to v2.1.4 (#29891)
  * Build(deps): Bump ini from 1.3.5 to 1.3.7 (#29787)
  * fall back to any architecture when getting plugin's checksum #30034 (#30035)
  * Lerna: Update to 3.22.1 (#30057)
  * SeriesToRows: Fixes issue in transform so that value field is always named Value (#30054)
  * [dashboard api] manage error when data in dashboard table is not valid json (#29999)
  * use sha256 checksum instead of md5 (#30018)
  * Chore: Rewrite brute force login protection test to standard library (#29986)
  * Chore: Rewrite login auth test to standard library (#29985)
  * Chore: Rewrite models dashboards test to standard library (#30023)
  * Chore: Rewrite models dashboard acl test to standard library (#30022)
  * Chore: Rewrite models alert test to standard library (#30021)
  * Chore: Rewrite ldap login test to standard library (#29998)
  * Chore: Rewrite grafana login test to standard library (#29997)
  * Fix two ini-file typos regarding LDAP (#29843)
  * Chore: Changes source map devtool to inline-source-map (#30004)
  * Chore: Sync Enterprise go.sum (#30005)
  * Chore: Add Enterprise dependencies (#29994)
  * SQLStore: customise the limit of retrieved datasources per organisation (#29358)
  * Chore: update crewjam/saml library to the latest master (#29991)
  * Graph: Fixes so users can not add annotations in readonly dash (#29990)
  * Currency: add Vietnamese dong (VND) (#29983)
  * Drone: Update pipelines for Enterprise (#29939)
  * Remove the bus from teamgroupsync (#29810)
  * Influx: Make variable query editor input uncontrolled (#29968)
  * PanelLibrary: Add PATCH to the API (#29956)
  * PanelEvents: Isolating angular panel events into it's own event bus + more event refactoring  (#29904)
  * Bump node-notifier from 8.0.0 to 8.0.1 (#29952)
  * LDAP: Update use_ssl documentation (#29964)
  * Docs: Missing 's' on 'logs' (#29966)
  * Docs: Update opentsdb.md (#29963)
  * Docs: Minor typo correction (#29962)
  * librarypanels: Fix JSON field casing in tests (#29954)
  * TemplateSrv: Do not throw  error for an unknown format but use glob as fallback and warn in the console (#29955)
  * PanelLibrary: Adds uid and renames title to name (#29944)
  * Docs: Fix raw format variable docs (#29945)
  * RedirectResponse: Implement all of api.Response (#29946)
  * PanelLibrary: Adds get and getAll to the api (#29772)
  * Chore: Remove duplicate interpolateString test (#29941)
  * Chore: Rewrite influxdb query parser test to standard library (#29940)
  * Folders: Removes the possibility to delete the General folder (#29902)
  * Chore: Convert tsdb request test to standard library (#29936)
  * Chore: Convert tsdb interval test to standard library (#29935)
  * Docs: Update configuration.md (#29912)
  * Docs: Update organization_roles.md (#29911)
  * Docs: Update _index.md (#29918)
  * GraphNG: bring back tooltip (#29910)
  * Ng Alerting: Remove scroll and fix SplitPane limiters (#29906)
  * Dashboard: Migrating dashboard settings to react (#27561)
  * Minor correction to explanation on correct MS SQL usage. (#29889)
  * AlertingNG: Create a scheduler to evaluate alert definitions (#29305)
  * Add changelog items for 7.3.6, 7.2.3 and 6.7.5 (#29901)
  * bump stable to 7.3.6 (#29899)
  * Upgrade go deps.  (#29900)
  * Expressions: Replace query input fields with select. (#29816)
  * PanelEdit: Update UI if panel plugin changes field config (#29898)
  * Elasticsearch: Remove timeSrv dependency (#29770)
  * PanelEdit: Need new data after plugin change (#29874)
  * Chore(toolkit): disable react/prop-types for eslint config (#29888)
  * Field Config API: Add ability to hide field option or disable it from the overrides (#29879)
  * SharedQuery: Fixes shared query editor now showing queries (#29849)
  * GraphNG: support fill gradient (#29765)
  * Backend style guide: Add more guidelines (#29871)
  * Keep query keys consistent (#29855)
  * Alerting: Copy frame field labels to time series tags (#29886)
  * Update configure-docker.md (#29883)
  * Usage Stats: Introduce an interface for usage stats service (#29882)
  * DataFrame: add a writable flag to fields (#29869)
  * InlineForms: Changes to make inline forms more flexible for query editors  (#29782)
  * Usage Stats: Allow to add additional metrics to the stats (#29774)
  * Fix the broken link of XORM documentation (#29865)
  * Move colors demo under theme colors (#29873)
  * Dashboard: Increase folder name size in search dashboard (#29821)
  * MSSQL: Config UI touches (#29834)
  * QueryOptions:  Open QueryEditors: run queries after changing group options #29864
  * GraphNG: uPlot 1.5.2, dynamic stroke/fill, Flot-style hover points (#29866)
  * Variables: Fixes so numerical sortorder works for options with null values (#29846)
  * GraphNG: only initialize path builders once (#29863)
  * GraphNG: Do not set fillColor from GraphNG only opacity (#29851)
  * add an example cloudwatch resource_arns() query that uses multiple tags (ref: #29499) (#29838)
  * Backend: Remove more globals (#29644)
  * MS SQL: Fix MS SQL add data source UI issues (#29832)
  * Display palette and colors for dark and light themes in storybook (#29848)
  * Docs: Fix broken link in logs-panel (#29833)
  * Docs: Add info about typing of connected props to Redux style guide (#29842)
  * Loki: Remove unnecessary deduplication (#29421)
  * Varibles: Fixes so clicking on Selected will not include All (#29844)
  * Explore/Logs: Correctly display newlines in detected fields (#29541)
  * Link suppliers: getLinks API update (#29757)
  * Select: Changes default menu placement for Select from auto to bottom (#29837)
  * Chore: Automatically infer types for dashgrid connected components  (#29818)
  * Chore: Remove unused Loki and Cloudwatch syntax providers  (#29686)
  * Pass row (#29839)
  * GraphNG: Context menu (#29745)
  * GraphNG: Enable scale distribution configuration (#29684)
  * Explore: Improve Explore performance but removing unnecessary re-renders (#29752)
  * DashboardDS: Fixes display of long queries (#29808)
  * Sparkline: Fixes issue with sparkline that sent in custom fillColor instead of fillOpacity (#29825)
  * Chore: Disable default golangci-lint filter (#29751)
  * Update style guide with correct usage of MS SQL (#29829)
  * QueryEditor: do not auto refresh on every update (#29762)
  * Chore: remove unused datasource status enum (#29827)
  * Expressions: support ${my var} syntax (#29819)
  * Docs: Update types-options.md (#29777)
  * Chore: Enable more go-ruleguard rules (#29781)
  * GraphNG: Load uPlot path builders lazily (#29813)
  * Elasticsearch: ensure query model has timeField configured in datasource settings (#29807)
  * Chore: Use Header.Set method instead of Header.Add (#29804)
  * Allow dependabot to check actions (#28159)
  * Grafana-UI: Support optgroup for MultiSelect (#29805)
  * Sliders: Update behavior and style tweak (#29795)
  * Grafana-ui: Fix collapsible children sizing (#29776)
  * Style guide: Document avoidance of globals in Go code (#29803)
  * Chore: Rewrite opentsdb test to standard library (#29792)
  * CloudWatch: Add support for AWS DirectConnect ConnectionErrorCount metric (#29583)
  * GraphNG: uPlot 1.5.1 (#29789)
  * GraphNG: update uPlot v1.5.0 (#29763)
  * Added httpMethod to webhook (#29780)
  * @grafana-runtime: Throw error if health check fails in DataSourceWithBackend (#29743)
  * Explore: Fix remounting of query row (#29771)
  * Expressions: Add placeholders to hint on input (#29773)
  * Alerting: Next gen Alerting page (#28397)
  * GraphNG: Add test dashboard for null &amp; and gaps rendering (#29769)
  * Expressions: Field names from refId (#29755)
  * Plugins: Add support for signature manifest V2 (#29240)
  * Chore: Configure go-ruleguard via golangci-lint (#28419)
  * Move middleware context handler logic to service (#29605)
  * AlertListPanel: Add options to sort by Time(asc) and Time(desc) (#29764)
  * PanelLibrary: Adds delete Api (#29741)
  * Tracing: Release trace to logs feature (#29443)
  * ReleaseNotes: Updated changelog and release notes for 7.3.5 (#29753)
  * DataSourceSettings: Add servername field to DataSource TLS config (#29279)
  * Chore: update stable and testing versions (#29748)
  * ReleaseNotes: Updated changelog and release notes for 7.3.5 (#29744)
  * Elasticsearch: View in context feature for logs (#28764)
  * Chore: Disable gosec on certain line (#29382)
  * Logging: log frontend errors caught by ErrorBoundary, including component stack (#29345)
  * ChangePassword: improved keyboard navigation (#29567)
  * GrafanaDataSource: Fix selecting -- Grafana -- data source, broken after recent changes (#29737)
  * Docs: added version note for rename by regex transformation. (#29735)
  * @grafana/ui: Fix UI issues for cascader button dropdown and query input (#29727)
  * Docs: Update configuration.md (#29728)
  * Docs: Remove survey (#29549)
  * Logging: rate limit fronted logging endpoint (#29272)
  * API: add Status() to RedirectResponse (#29722)
  * Elasticsearch: Deprecate browser access mode (#29649)
  * Elasticsearch: Fix query initialization action (#29652)
  * PanelLibrary: Adds api and db to create Library/Shared/Reusable Panel (#29642)
  * Transformer: Rename metrics based on regex (#29281)
  * Variables: Fixes upgrade of legacy Prometheus queries (#29704)
  * Auth: Add SigV4 header allowlist to reduce chances of verification issues (#29650)
  * DataFrame: add path and description metadata (#29695)
  * Alerting: Use correct time series name override from frame fields (#29693)
  * GraphNG: fix bars migration and support color and linewidth (#29697)
  * PanelHeader: Fix panel header description inline code wrapping (#29628)
  * Bugfix 29848: Remove annotation_tag entries as part of annotations cleanup (#29534)
  * GraphNG: simple settings migration from flot panel (#29599)
  * GraphNG: replace bizcharts with uPlot for sparklines (#29632)
  * GitHubActions: Update node version in github action (#29683)
  * Adds go dep used by an Enterprise feature.  (#29645)
  * Typescript: Raise strict error limit for enterprise (#29688)
  * Remove unnecessary escaping (#29677)
  * Update getting-started-prometheus.md (#29678)
  * instrumentation: align label name with our other projects (#29514)
  * Typescript: Fixing typescript strict error, and separate check from publishing (#29679)
  * CloudWatch: namespace in search expression should be quoted if match exact is enabled #29109 (#29563)
  * Docs: Plugin schema updates (#28232)
  * RadioButton: Fix flex issue in master for radio buttons (#29664)
  * Update getting-started.md (#29670)
  * Expr: fix time unit typo in ds queries (#29668)
  * Expr: make reduction nan/null more consistent (#29665)
  * Expr: fix func argument panic (#29663)
  * Update documentation-style-guide.md (#29661)
  * Update documentation-markdown-guide.md (#29659)
  * Docs: Changed image format (#29658)
  * Expr: fix failure to execute due to OrgID (#29653)
  * GraphNG: rename "points" to "showPoints" (#29635)
  * Expressions: Restore showing expression query editor even if main data source is not mixed (#29656)
  * GraphNG: time range should match the panel timeRange (#29596)
  * Support svg embedded favicons in whitelabeling (#29436)
  * Add changelog to docs style guide (#29581)
  * Loki: Retry web socket connection when connection is closed abnormally (#29438)
  * GraphNG: Fix annotations and exemplars plugins (#29613)
  * Chore: Rewrite tsdb sql engine test to standard library (#29590)
  * GraphNG: fix and optimize spanNulls (#29633)
  * Build(deps): Bump highlight.js from 10.4.0 to 10.4.1 (#29625)
  * Cloudwatch: session cache should use UTC consistently (#29627)
  * GraphNG: rename GraphMode to DrawStyle (#29623)
  * GraphNG: add spanNulls config option (#29512)
  * Docs: add docs for concatenate transformer (#28667)
  * Stat/Gauge: expose explicit font sizing (#29476)
  * GraphNG: add gaps/nulls support to staircase &amp; smooth interpolation modes (#29593)
  * grafana/ui: Migrate Field knobs to controls (#29433)
  * Prometheus: Fix link to Prometheus graph in dashboard (#29543)
  * Build: Publish next and latest npm channels to Github (#29615)
  * Update broken aliases (#29603)
  * API: add ID to snapshot API responses (#29600)
  * Elasticsearch: Migrate queryeditor to React (#28033)
  * QueryGroup &amp; DataSourceSrv &amp; DataSourcePicker changes simplify usage, error handling and reduce duplication, support for uid (#29542)
  * Elastic: Fixes config UI issues (#29608)
  * GraphNG: Fix issues with plugins not retrieving plot instance (#29585)
  * middleware: Make scenario test functions take a testing.T argument (#29564)
  * Grafana/ui: Storybook controls understand component types (#29574)
  * Login: Fixes typo in tooltip (#29604)
  * Panel: making sure we support all versions of chrome when detecting position of click event. (#29544)
  * Chore: Rewrite sqlstore migration test to use standard library (#29589)
  * Chore: Rewrite tsdb prometheus test to standard library (#29592)
  * Security: Add gosec G304 auditing annotations (#29578)
  * Chore: Rewrite tsdb testdatasource scenarios test to standard library (#29591)
  * Docs: Add missing key to enable SigV4 for provisioning Elasticsearch data source (#29584)
  * Add Microsoft.Network/natGateways (#29479)
  * Update documentation-style-guide.md (#29586)
  * @grafana/ui: Add bell-slash to available icons (#29579)
  * Alert: Fix forwardRef warning (#29577)
  * Update documentation-style-guide.md (#29580)
  * Chore: Upgrade typescript to 4.1 (#29493)
  * PanelLibrary: Adds library_panel table (#29565)
  * Make build docker full fix (#29570)
  * Build: move canary packages to github (#29411)
  * Devenv: Add default db for influxdb (#29371)
  * Chore: Check errors from Close calls (#29562)
  * GraphNG: support auto and explicit axis width (#29553)
  * Chore: upgrading y18n to 4.0.1 for security reasons (#29523)
  * Middleware: Rewrite tests to use standard library (#29535)
  * Overrides: show category on the overrides (#29556)
  * GraphNG: Bars, Staircase, Smooth modes (#29359)
  * Docs: Fix docs sync actions (#29551)
  * Chore: Update dev guide node version for Mac (#29548)
  * Docs: Update formatting-multi-value-variables.md (#29547)
  * Arrow: toArray() on nullable values should include null values (#29520)
  * Docs: Update syntax.md (#29545)
  * NodeJS: Update to LTS (14) (#29467)
  * Docs: Update repeat-panels-or-rows.md (#29540)
  * 3 minor changes, including updating the title TOC (#29501)
  * Auth proxy: Return standard error type (#29502)
  * Data: use pre-defined output array length in vectorToArray() (#29516)
  * Dashboards: hide playlist edit functionality from viewers and snapshots link from unauthenticated users (#28992)
  * docker: use yarn to build (#29538)
  * QueryEditors: Refactoring &amp; rewriting out dependency on PanelModel (#29419)
  * Chore: skip flaky tests (#29537)
  * Graph NG: Invalidate uPlot config on timezone changes (#29531)
  * IntelliSense: Fix autocomplete and highlighting for Loki, Prometheus, Cloudwatch (#29381)
  * Variables: Fixes Textbox current value persistence (#29481)
  * OptionsEditor: simplify the options editor interfaces (#29518)
  * Icon: Changed the icon for signing in (#29530)
  * fixes bug with invalid handler name for metrics (#29529)
  * Middleware: Simplifications (#29491)
  * GraphNG: simplify effects responsible for plot updates/initialization  (#29496)
  * Alarting: fix alarm messages in dingding (Fixes #29470) (#29482)
  * PanelEdit: making sure the correct datasource query editor is being rendered. (#29500)
  * AzureMonitor: Unit MilliSeconds naming (#29399)
  * Devenv: update mysql_tests and postgres_tests blocks for allowing dynamically change of underlying docker image (#29525)
  * Chore: Enable remaining eslint-plugin-react rules (#29519)
  * Docs/Transformations: Add documentation about Binary operations in Add field from calculation (#29511)
  * Datasources: fixed long error message overflowing container (#29440)
  * docker: fix Dockerfile after Gruntfile.js removed (#29515)
  * Chore: Adds Panel Library featuretoggle (#29521)
  * Docs: Update filter-variables-with-regex.md (#29508)
  * Docs: InfluxDB_V2 datasource: adding an example on how to add InfluxQL as a datasource (#29490)
  * Loki: Add query type and line limit to query editor in dashboard (#29356)
  * Docs: Added Security Group support to Azure Auth (#29418)
  * DataLinks: Removes getDataSourceSettingsByUid from applyFieldOverrides  (#29447)
  * Bug: trace viewer doesn't show more than 300 spans (#29377)
  * Live: publish all dashboard changes to a single channel (#29474)
  * Chore: Enable eslint-plugin-react partial rules (#29428)
  * Alerting: Update alertDef.ts with more time options (#29498)
  * DataSourceSrv: Look up data source by uid and name transparently (#29449)
  * Instrumentation: Add examplars for request histograms (#29357)
  * Variables: Fixes Constant variable persistence confusion (#29407)
  * Docs: Fix broken link for plugins (#29346)
  * Prometheus: don't override displayName property (#29441)
  * Grunt: Removes grunt dependency and replaces some of its usage (#29461)
  * Transformation: added support for excluding/including rows based on their values. (#26884)
  * Chore: Enable exhaustive linter (#29458)
  * Field overrides: added matcher to match all fields within frame/query. (#28872)
  * Log: Use os.Open to open file for reading (#29483)
  * MinMax: keep global min/main in field state (#29406)
  * ReactGridLayout: Update dependency to 1.2 (#29455)
  * Jest: Upgrade to latest (#29450)
  * Chore: bump grafana-ui rollup dependencies (#29315)
  * GraphNG: use uPlot's native ms support (#29445)
  * Alerting: Add support for Sensu Go notification channel (#28012)
  * adds tracing for all bus calls that passes ctx (#29434)
  * prometheus: Improve IsAPIError's documentation (#29432)
  * ReleaseNotes: Updated changelog and release notes for 7.3.4 (#29430)
  * Elasticsearch: Fix index pattern not working with multiple base sections (#28348)
  * Plugins: Add support for includes' icon (#29416)
  * Docs: fixing frontend docs issue where enums ending up in wrong folder level. (#29429)
  * Variables: Fixes issue with upgrading legacy queries (#29375)
  * Queries: Extract queries from dashboard (#29349)
  * Docs: docker -&gt; Docker (#29331)
  * PanelEvents: Refactors and removes unnecessary events, fixes panel editor update issue when panel options change (#29414)
  * Fix: Correct panel edit uistate migration (#29413)
  * Alerting: Improve Prometheus Alert Rule error message (#29390)
  * Fix: Migrate Panel edit uiState percentage strings to number (#29412)
  * remove insecure cipher suit as default option (#29378)
  * * prometheus fix variables fetching when  customQueryParameters used #28907 (#28949)
  * Chore: Removes observableTester (#29369)
  * Chore: Adds e2e tests for Variables (#29341)
  * Fix gosec finding of unhandled errors (#29398)
  * Getting started with Grafana and MS SQL (#29401)
  * Arrow: cast timestams to Number (#29402)
  * Docs: Add Cloud content links (#29317)
  * PanelEditor: allow access to the eventBus from panel options (#29327)
  * GraphNG: support x != time in library (#29353)
  * removes unused golint file (#29391)
  * prefer server cipher suites (#29379)
  * Panels/DashList: Fix order of recent dashboards (#29366)
  * Core: Move SplitPane layout from PanelEdit. (#29266)
  * Drone: Upgrade build pipeline tool (#29365)
  * Update yarn.lock to use latest rc-util (#29313)
  * Variables: Adds description field  (#29332)
  * Chore: Update latest.json (#29351)
  * Drone: Upload artifacts for release branch builds (#29297)
  * Docs: fixing link issues in auto generated frontend docs. (#29326)
  * Drone: Execute artifact publishing for both editions in parallel during release (#29362)
  * Devenv: adding default credentials for influxdb (#29344)
  * Drone: Check CUE dashboard schemas (#29334)
  * Backend: fix IPv6 address parsing erroneous (#28585)
  * dashboard-schemas cue 3.0.0 compatible (#29352)
  * Update documentation-style-guide.md (#29354)
  * Docs: Update requirements.md (#29350)
  * ReleaseNotes: Updated changelog and release notes for 7.3.4 (#29347)
  * ReleaseNotes: Updated changelog and release notes for 7.3.4 (#29338)
  * Drone: Publish NPM packages after Storybook to avoid race condition (#29340)
  * Add an option to hide certain users in the UI (#28942)
  * Guardian: Rewrite tests from goconvey (#29292)
  * Docs: Fix editor role and alert notification channel description (#29301)
  * Docs: Improve custom Docker image instructions (#29263)
  * Security: Fixes minor security issue with alert notification webhooks that allowed GET &amp; DELETE requests #29330
  * Chore: Bump storybook to v6 (#28926)
  * ReleaseNotes: Updates release notes link in package.json (master) (#29329)
  * Docs: Accurately reflecting available variables (#29302)
  * Heatmap: Fixes issue introduced by new eventbus (#29322)
  * Dashboard Schemas (#28793)
  * devenv: Add docker load test which authenticates with API key (#28905)
  * Login: Fixes redirect url encoding issues of # %23 being unencoded after login (#29299)
  * InfluxDB: update flux library and support boolean label values (#29310)
  * Explore/Logs: Update Parsed fields to Detected fields (#28881)
  * GraphNG: Init refactorings and fixes (#29275)
  * fixing a broken relref link (#29312)
  * Drone: Upgrade build pipeline tool (#29308)
  * decreasing frontend docs threshold. (#29304)
  * Docker: update docker root group docs and docker image (#29222)
  * WebhookNotifier: Convert tests away from goconvey (#29291)
  * Annotations: fixing so when changing annotations query links submenu will be updated. (#28990)
  * [graph-ng] add temporal DataFrame alignment/outerJoin &amp; move null-asZero pass inside (#29250)
  * Dashboard: Fixes kiosk state after being redirected to login page and back (#29273)
  * make it possible to hide change password link in profile menu (#29246)
  * Theme: Add missing color type (#29265)
  * Chore: Allow reducerTester to work with every data type &amp; payload-less actions (#29241)
  * Explore/Prometheus: Update default query type option to "Both" (#28935)
  * Loki/Explore: Add query type selector (#28817)
  * Variables: New Variables are stored immediately (#29178)
  * reduce severity level to warning (#28939)
  * Units: Changes FLOP/s to FLOPS and some other rates per second units get /s suffix  (#28825)
  * Docs: Remove duplicate "Transformations overview" topics from the TOC (#29247)
  * Docs: Fixed broken relrefs and chanfed TOC entry name from Alerting to Alerts. (#29251)
  * Docs: Remove duplicate Panel overview topic.  (#29248)
  * Increase search limit on team add user and improve placeholder (#29258)
  * Fix warnings for conflicting style rules (#29249)
  * Make backwards compatible (#29212)
  * Minor cosmetic markdown tweaks in docs/cloudwatch.md (#29238)
  * Getting Started: Updated index topic, removed "what-is-grafana", and adjusted weight o? (#29216)
  * BarGauge: Fix story for BarGauge, caused knobs to show for other stories (#29232)
  * Update glossary to add hyperlinks to Explore and Transformation entries (#29217)
  * Chore: Enable errorlint linter (#29227)
  * TimeRegions: Fixed issue with time regions and tresholds due to angular js upgrade (#29229)
  * CloudWatch: Support request cancellation properly (#28865)
  * CloudMonitoring: Support request cancellation properly (#28847)
  * Chore: Handle wrapped errors (#29223)
  * Expressions: Move GEL into core as expressions (#29072)
  * Chore: remove compress:release grunt task (#29225)
  * Refactor/Explore: Inline datasource actions into initialisation (#28953)
  * Fix README typo (#29219)
  * Grafana UI: Card API refactor (#29034)
  * Plugins: Changed alertlist alert url to view instead of edit (#29060)
  * React: Upgrading react to v17, wip (#29057)
  * Gauge: Tweaks short value auto-sizing (#29197)
  * BackendSrv: support binary responseType like $http did (#29004)
  * GraphNG: update the options config (#28917)
  * Backend: Fix build (#29206)
  * Permissions: Validate against Team/User permission role update (#29101)
  * ESlint: React fixes part 1 (#29062)
  * Tests: Adds expects for observables (#28929)
  * Variables: Adds new Api that allows proper QueryEditors for Query variables (#28217)
  * Introduce eslint-plugin-react (#29053)
  * Automation: Adds GitHub release action (#29194)
  * Refactor declarative series configuration to a config builder (#29106)
  * ReleaseNotes: Updated changelog and release notes for 7.3.3 (#29189)
  * Panels: fix positioning of the header title (#29167)
  * trace user login and datasource name instead of id (#29183)
  * playlist: Improve test (#29120)
  * Drone: Fix publish-packages invocation (#29179)
  * Table: Fix incorrect condtition for rendering table filter (#29165)
  * Chore: Upgrade grafana/build-ci-deploy image to latest Go (#29171)
  * DashboardLinks: will only refresh dashboard search when changing tags for link. (#29040)
  * ReleaseNotes: Updated changelog and release notes for 7.3.3 (#29169)
  * CloudWatch: added HTTP API Gateway specific metrics and dimensions (#28780)
  * Release: Adding release notes for 7.3.3 (#29168)
  * SQL: Define primary key for tables without it (#22255)
  * changed link format from MD to HTML (#29163)
  * Backend: Rename variables for style conformance (#29097)
  * Docs: Fixes what'new menu and creates index page, adds first draft of release notes to docs (#29158)
  * Drone: Upgrade build pipeline tool and build image (#29161)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0 (#29160)
  * ReleaseNotes: Updated changelog and release notes for 7.3.3 (#29159)
  * Chore: Upgrade Go etc in build images (#29157)
  * Chore: Remove unused Go code (#28852)
  * API: Rewrite tests from goconvey (#29091)
  * Chore: Fix linting issues caught by ruleguard (#28799)
  * Fix panic when using complex dynamic URLs in app plugin routes  (#27977)
  * Snapshots: Fixes so that dashboard snapshots show data when using Stat, Gauge, BarGauge or Table panels (#29031)
  * Fix authomation text: remove hyphen (#29149)
  * respect fronted-logging.enabled flag (#29107)
  * build paths in an os independent way (#29143)
  * Provisioning: always pin app to the sidebar when enabled (#29084)
  * Automation: Adds new changelog actions (#29142)
  * Chore: Rewrite preferences test from GoConvey to stdlib and testify (#29129)
  * Chore: Upgrade Go dev tools (#29124)
  * Automation: Adding version bump action
  * DataFrames: add utility function to check if structure has changed (#29006)
  * Drone: Fix Drone config verification for enterprise on Windows (#29118)
  * Chore: Require OrgId to be specified in delete playlist command (#29117)
  * Plugin proxy: Handle URL parsing errors (#29093)
  * Drone: Verify Drone config at beginning of pipelines (#29071)
  * Legend/GraphNG: Refactoring legend types and options (#29067)
  * Doc: Update documentation-style-guide.md (#29082)
  * Chore: Bumps types for jest (#29098)
  * LogsPanel: Fix scrolling in dashboards (#28974)
  * sort alphabetically unique labels, labels and parsed fields (#29030)
  * Data source proxy: Convert 401 from data source to 400 (#28962)
  * Plugins: Implement testDatasource for Jaeger (#28916)
  * Update react-testing-library (#29061)
  * Graph: Fixes stacking issues like floating bars when data is not aligned  (#29051)
  * StatPanel: Fixes hanging issue when all values are zero (#29077)
  * Auth: Enable more complete credential chain for SigV4 default SDK auth option (#29065)
  * Chore: Convert API tests to standard Go lib (#29009)
  * Update README.md (#29075)
  * Update CODEOWNERS (#28906)
  * Enhance automation text for missing information (#29052)
  * GraphNG: Adding ticks test dashboard and improves tick spacing (#29044)
  * Chore: Migrate Dashboard List panel to React (#28607)
  * Test Datasource/Bug: Fixes division by zero in csv metric values scenario (#29029)
  * Plugins: Bring back coreplugin package (#29064)
  * Add 'EventBusName' dimension to CloudWatch 'AWS/Events' namespace (#28402)
  * CloudWatch: Add support for AWS/ClientVPN metrics and dimensions (#29055)
  * AlertingNG: manage and evaluate alert definitions via the API (#28377)
  * Fix linting issues (#28811)
  * Logging: Log frontend errors (#28073)
  * Fix for multi-value template variable for project selector (#29042)
  * Chore: Rewrite test helpers from GoConvey to stdlib (#28919)
  * GraphNG: Fixed axis measurements (#29036)
  * Fix links to logql docs (#29037)
  * latest 7.3.2 (#29041)
  * Elasticsearch: Add Moving Function Pipeline Aggregation (#28131)
  * changelog 7.3.2 (#29038)
  * MutableDataFrame: Remove unique field name constraint and values field index and unused/seldom used stuff  (#27573)
  * Fix prometheus docs related to query variable (#29027)
  * Explore: support ANSI colors in live logs (#28895)
  * Docs: Add documentation about log levels (#28975)
  * Dashboard: remove usage of Legacyforms (#28707)
  * Docs: Troubleshoot starting docker containers on Mac (#28754)
  * Elasticsearch: interpolate variables in Filters Bucket Aggregation (#28969)
  * Chore: Bump build pipeline version (#29023)
  * Annotations: Fixes error when trying to create annotation when dashboard is unsaved (#29013)
  * TraceViewer: Make sure it does not break when no trace is passed (#28909)
  * Thresholds: Fixes color assigned to null values (#29010)
  * Backend: Remove unused code (#28933)
  * Fix documentation (#28998)
  * Tracing: Add setting for sampling server (#29011)
  * Logs Panel: Fix inconsistent higlighting (#28971)
  * MySQL: Update README.md (#29003)
  * IntervalVariable: Fix variable tooltip (#28988)
  * StatPanels: Fixes auto min max when latest value is zero (#28982)
  * Chore: Fix SQL related Go variable naming (#28887)
  * MSSQL: Support request cancellation properly (Uses new backendSrv.fetch Observable request API) (#28809)
  * Variables: Fixes loading with a custom all value in url (#28958)
  * Backend: Adds route for well-known change password URL (#28788)
  * docs: fix repeated dashboards link (#29002)
  * LogsPanel: Don't show scroll bars when not needed (#28972)
  * Drone: Fix docs building (#28986)
  * StatPanel: Fixed center of values in edge case scenarios (#28968)
  * Update getting-started-prometheus.md (#28502)
  * Docs: fix relref (#28977)
  * Docs: Minor docs update
  * Docs: Another workflow docs update
  * Docs: Workflow minor edit
  * Docs: Another minor edit
  * Docs: Update PR workflow docs
  * Docs: Update bot docs
  * StatPanels: set default to last (#28617)
  * Tracing: log traceID in request logger (#28952)
  * start tracking usage stats for tempo (#28948)
  * Docs: Update bot docs
  * GrafanaBot: Update labels and commands and adds docs  (#28950)
  * Docs: updates for file-based menu (#28500)
  * Grot: Added command/label to close feature requests with standard message (#28937)
  * GraphNG: Restore focus option (#28946)
  * Docs: Fix links (#28945)
  * Short URL: Cleanup unvisited/stale short URLs (#28867)
  * GraphNG: Using new VizLayout, moving Legend into GraphNG and some other refactorings (#28913)
  * CloudWatch Logs: Change what we use to measure progress (#28912)
  * Chore: use jest without grunt (#28558)
  * Chore: Split Explore redux code into multiple sections (#28819)
  * TestData: Fix issue with numeric inputs in TestData query editor (#28936)
  * setting: Fix tests on Mac (#28886)
  * Plugins signing: Fix docs urls (#28930)
  * Field color: handling color changes when switching panel types (#28875)
  * Variables: make sure that we support both old and new syntax for custom variables. (#28896)
  * CodeEditor: added support for javascript language (#28818)
  * Update CHANGELOG.md (#28928)
  * Plugins: allow override when allowing unsigned plugins (#28901)
  * Chore: Fix spelling issue (#28904)
  * Grafana-UI: LoadingPlaceholder docs (#28874)
  * Gauge: making sure threshold panel json is correct before render (#28898)
  * Chore: Rewrite test in GoConvey to stdlib and testify (#28918)
  * Update documentation-style-guide.md (#28908)
  * Adding terms to glossary (#28884)
  * Devenv: Fix Prometheus basic auth proxy (#28889)
  * API: replace SendLoginLogCommand with LoginHook (#28777)
  * Dashboards / Folders: delete related data (permissions, stars, tags, versions, annotations) when deleting a dashboard or a folder (#28826)
  * Loki: Correct grammar in DerivedFields.tsx (#28885)
  * Docs: Update list of Enterprise plugins (#28882)
  * Live: update centrifuge and the ChannelHandler api (#28843)
  * Update share-panel.md (#28880)
  * CRLF (#28822)
  * PanelHeader: show streaming indicator (and allow unsubscribe)  (#28682)
  * Docs: Plugin signing docs (#28671)
  * Chore: Fix issues reported by staticcheck; enable stylecheck linter (#28866)
  * Elasticsearch: Filter pipeline aggregations from order by options (#28620)
  * Variables: added __user.email to global variable (#28853)
  * Fix titles case and add missing punctuation marks (#28713)
  * VizLayout: Simple viz layout component for legend placement and scaling (#28820)
  * Chore: Fix staticcheck issues (#28860)
  * Chore: Fix staticcheck issues (#28854)
  * Disable selecting enterprise plugins with no license (#28758)
  * Tempo: fix test data source (#28836)
  * Prometheus: fix missing labels from value (#28842)
  * Chore: Fix issues found by staticcheck (#28802)
  * Chore: Remove dead code (#28664)
  * Units: added support to handle negative fractional numbers. (#28849)
  * Variables: Adds variables inspection (#25214)
  * Marked: Upgrade and always sanitize by default (#28796)
  * Currency: add Philippine peso currency (PHP) (#28823)
  * Alert: Remove z-index on Alert component so that it does not overlay ontop of other content (#28834)
  * increase blob column size for encrypted dashboard data (#28831)
  * Gauge: Improve font size auto sizing (#28797)
  * grafana/toolkit: allow builds with lint warnings (#28810)
  * core and grafana/toolkit: Use latest version of grafana-eslint-conifg (#28816)
  * Icon: Replace font awesome icons where possible (#28757)
  * Remove homelinks panel (#28808)
  * StatPanels: Add new calculation option for percentage difference  (#26369)
  * Dashboard: Add Datetime local (No date if today) option in panel axes' units (#28011)
  * Variables: Adds named capture groups to variable regex (#28625)
  * Panel inspect: Interpolate variables in panel inspect title (#28779)
  * grafana/toolkit: Drop console and debugger statements by default when building plugin with toolkit (#28776)
  * Variables: Fixes URL values for dependent variables (#28798)
  * Graph: Fixes event emit function error (#28795)
  * Adds storybook integrity check to drone config (#28785)
  * Live: improve broadcast semantics and avoid double posting (#28765)
  * Events: Remove unused or unnecessary events  (#28783)
  * Docs: added code comments to frontend packages. (#28784)
  * Plugin Dockerfiles: Upgrade Go, golangci-lint, gcloud SDK (#28767)
  * Dependencies: Update angularjs to 1.8.2 (#28736)
  * EventBus: Introduces new event bus with emitter backward compatible interface (#27564)
  * ColorSchemes: Add new color scheme (#28719)
  * Docs: Add NGINX example for using websockets to Loki (#27998)
  * Docs: Made usage of config/configuration consistent #19270 (#28167)
  * Cloudwatch: Fix issue with field calculation transform not working properly with Cloudwatch data (#28761)
  * grafana/toolkit: Extract CHANGELOG when building plugin (#28773)
  * Drone: Upgrade build pipeline tool (#28769)
  * devenv: Upgrade MSSQL Docker image (#28749)
  * Docs: Add docs for InfoBox component (#28705)
  * Reoeragnization. (#28760)
  * gtime: Add ParseDuration function (#28525)
  * Explore: Remove redundant decodeURI and fix urls (#28697)
  * Dashboard: fix view panel mode for Safari / iOS (#28702)
  * Provisioning: Fixed problem with getting started panel being added to custom home dashboard (#28750)
  * LoginPage: Removed auto-capitalization from the login form (#28716)
  * Plugin page: Fix dom validation warning (#28737)
  * Migration: Remove LegacyForms from dashboard folder permissions (#28564)
  * Dependencies: Remove unused dependency (#28711)
  * AlertRuleList: Add keys to alert rule items (#28735)
  * Chore: Pin nginx base image in nginx proxy Dockerfiles (#28730)
  * Drone: Upgrade build-pipeline tool (#28728)
  * TableFilters: Fixes filtering with field overrides (#28690)
  * Templating: Speeds up certain variable queries for Postgres, MySql and MSSql (#28686)
  * Fix typo in unsigned plugin warning (#28709)
  * Chore: Convert sqlstore annotation test from GoConvey to testify (#28715)
  * updates from https://github.com/grafana/grafana/pull/28679 (#28708)
  * Chore: Add some scenario tests for Explore (#28534)
  * Update latest version to 7.3.1 (#28701)
  * Changelog update - 7.3.1 (#28699)
  * Drone: Don't build on Windows for PRs (#28663)
  * Build: changing docs docker image to prevent setting up frontend devenv. (#28670)
  * Prometheus: Fix copy paste behaving as cut and paste (#28622)
  * Loki: Fix error when some queries return zero results (#28645)
  * Chore: allow higher nodejs version than 12 (#28624)
  * TextPanel: Fixes problems where text panel would show old content (#28643)
  * PanelMenu: Fixes panel submenu not being accessible for panels close to the right edge of the screen (#28666)
  * Cloudwatch: Fix duplicate metric data (#28642)
  * Add info about CSV download for Excel in What's new article (#28661)
  * Docs: Describe pipeline aggregation changes in v7.3 (#28660)
  * Plugins: Fix descendent frontend plugin signature validation (#28638)
  * Docker:  use root group in the custom Dockerfile (#28639)
  * Bump rxjs to 6.6.3 (#28657)
  * StatPanel: Fixed value being under graph and reduced likley hood for white and dark value text mixing (#28641)
  * Table: Fix image cell mode so that it works with value mappings (#28644)
  * Build: support custom build tags (#28609)
  * Plugin signing: Fix copy on signed plugin notice (#28633)
  * Dashboard: Fix navigation from one SoloPanelPage to another one (#28578)
  * CloudWatch: Improve method name, performance optimization (#28632)
  * Developer guide: Update wrt. Windows (#28559)
  * Docs: Update graph panel for tabs (#28552)
  * update latest.json (#28603)
  * Docs: data source insights (#28542)
  * Field config API: add slider editor (#28007)
  * changelog: update for 7.3.0 (#28602)
  * Update uPlot to 1.2.2 and align timestamps config with new uPLot API (#28569)
  * Live: updated the reference to use lazy loaded Monaco in code editor. (#28597)
  * Dashboard: Allow add panel for viewers_can_edit (#28570)
  * Docs: Data source provisioning and sigV4 (#28593)
  * Docs: Additional 7.3 upgrade notes (#28592)
  * CI: Add GCC to Windows Docker image (#28562)
  * CloudWatch Logs queue and websocket support (#28176)
  * Explore/Loki: Update docs and cheatsheet (#28541)
  * Grafana-UI: Add Card component (#28216)
  * AddDatasource: Improve plugin categories (#28584)
  * StatPanel: Fixes BizChart error max: yyy should not be less than min zzz (#28587)
  * docs: a few tweaks for clarity and readability (#28579)
  * API: Reducing some api docs errors (#28575)
  * Grafana-UI: ContextMenu docs (#28508)
  * Short URL: Update last seen at when visiting a short URL (#28565)
  * Fix backend build on Windows (#28557)
  * add value prop (#28561)
  * Plugin signing: UI information (#28469)
  * Use fetch API in InfluxDB data source (#28555)
  * PanelEdit: Prevent the preview pane to be resized further than window height (#28370)
  * Docs: Update generic-oauth.md (#28517)
  * GCS image uploader: Add tests (#28521)
  * Move metrics collector queries to config (#28549)
  * Plugins: Fix plugin URL paths on Windows (#28548)
  * API: add login username in SendLoginLogCommand (#28544)
  * AzureMonitor: Support decimal (as float64) type in analytics/logs (#28480)
  * Auth: Fix SigV4 request verification step for Amazon Elasticsearch Service (#28481)
  * Grafana/ui: auto focus threshold editor input (#28360)
  * Docs: SigV4 What's New and AWS Elasticsearch documentation (#28506)
  * Drone: Upgrade build pipeline tool (#28533)
  * Drone: Refactor version branch pipeline logic (#28531)
  * Drone: Upgrade build-pipeline tool (#28520)
  * Docs: Update field color scheme docs and 7.3 what's new (#28496)
  * Templating: Custom variable edit UI, change text input into textarea  (#28312) (#28322)
  * Currency: Adds Indonesian IDR currency (#28363)
  * Chore: Fix flaky sqlstore annotation test (#28527)
  * Checkbox: Fix component sample typo (#28518)
  * Image uploader: Fix uploading of images to GCS (#26493)
  * OAuth: Support Forward OAuth Identity for backend data source plugins (#27055)
  * Updated documentation style guide  (#28488)
  * Cloud Monitoring: Fix help section for aliases (#28499)
  * Docs: what's new in enterprise 7.3 (#28472)
  * Plugins: Track plugin signing errors and expose them to the frontend (#28219)
  * Elasticsearch: Fix handling of errors when testing data source (#28498)
  * Auth: Should redirect to login when anonymous enabled and URL with different org than anonymous specified  (#28158)
  * Drone: Don't build Windows installer for version branches (#28494)
  * Docs: Grafana Enterprise auditing feature (#28356)
  * Drone: Add version branch pipeline (#28490)
  * Getting Started section rehaul (#28090)
  * Docs: Add survey content (#28446)
  * Docs: Update prometheus.md (#28483)
  * Docs: Add view settings and view stats (#28155)
  * Remove entry from 7.3.0-beta2 Changelog (#28478)
  * Circle: Remove release pipeline (#28474)
  * Update latest.json (#28476)
  * Switch default version to Graphite 1.1 (#28471)
  * Plugin page: update readme icon (#28465)
  * Chore: Update changelog (#28473)
  * Explore: parse time range fix (#28467)
  * Alerting: Log alert warnings for obsolete notifiers when extracting alerts and remove spammy error (#28162)
  * Shorten url: Unification across Explore and Dashboards (#28434)
  * Explore: Support wide data frames (#28393)
  * Docs: updated cmd to build docs locally to generate docs prior to building site. (#28371)
  * Live: support real time measurements (alpha) (#28022)
  * CloudWatch/Athena - valid metrics and dimensions. (#28436)
  * Chore: Use net.JoinHostPort (#28421)
  * Chore: Upgrade grafana-eslint to latest (#28444)
  * Fix cut off icon (#28442)
  * Docs: Add shared (#28411)
  * Loki: Visually distinguish error logs for LogQL2 (#28359)
  * Database; Remove database metric feature flag and update changelog (#28438)
  * TestData: multiple arrow requests should return multiple frames (#28417)
  * Docs: Test survey code (#28437)
  * Docs: improved github action that syncs docs to website (#28277)
  * update latest.json with latest stable version (#28433)
  * 7.2.2 changelog update (#28406)
  * plugins: Don't exit on duplicate plugin (#28390)
  * API: Query database from /api/health endpoint (#28349)
  * Chore: Fix conversion of a 64-bit integer to a lower bit size type uint (#28425)
  * Prometheus: fix parsing of infinite sample values (#28287) (#28288)
  * Chore: Rewrite some tests to use testify (#28420)
  * Plugins: do not remount app plugin on nav change (#28105)
  * App Plugins: Add backend support (#28272)
  * Chore: react hooks eslint fixes in grafana-ui (#28026)
  * ci-e2e: Add Git (#28410)
  * TestData: Remove useEffect that triggeres query on component load (#28321)
  * FieldColor: Remove inverted color scheme (#28408)
  * Chore: Set timezone for tests to non utc. (#28405)
  * Chore: fix jsdoc desc and return (#28383)
  * Docs: Fixing v51 link (#28396)
  * fixes windows crlf warning (#28346)
  * Grafana/ui: pass html attributes to segment (#28316)
  * Alerting: Return proper status code when trying to create alert notification channel with duplicate name or uid (#28043)
  * OAuth: Able to skip auto login (#28357)
  * CloudWatch: Fix custom metrics (#28391)
  * Docs: Adds basic frontend data request concepts (#28253)
  * Instrumentation: Add histogram for request duration (#28364)
  * remove status label from histogram (#28387)
  * OAuth: configurable user name attribute (#28286)
  * Component/NewsPanel: Add rel="noopener" to NewsPanel links (#28379)
  * Webpack: Split out unicons and bizcharts (#28374)
  * Explore: Fix date formatting in url for trace logs link (#28381)
  * Docs: Add activate-license (#28156)
  * Instrumentation: Add counters and histograms for database queries (#28236)
  * Docs: Make tables formatting more consistent (#28164)
  * CloudWatch: Adding support for additional Amazon CloudFront metrics (#28378)
  * Add unique ids to query editor fields (#28376)
  * Plugins: Compose filesystem paths with filepath.Join (#28375)
  * Explore: Minor tweaks to exemplars marble (#28366)
  * Instrumentation: Adds environment_info metric  (#28355)
  * AzureMonitor: Fix capitalization of NetApp 'volumes' namespace (#28369)
  * ColorSchemes: Adds more color schemes and text colors that depend on the background (#28305)
  * Automation: Update backport github action trigger (#28352)
  * Dashboard links: Places drop down list so it's always visible (#28330)
  * Docs: Add missing records from grafana-ui 7.2.1 CHANGELOG (#28302)
  * Templating: Replace all '$tag' in tag values query (#28343)
  * Docs: Add docs for valuepicker (#28327)
  * Git: Create .gitattributes for windows line endings (#28340)
  * Update auth-proxy.md (#28339)
  * area/grafana/toolkit: update e2e docker image (#28335)
  * AlertingNG: remove warn/crit from eval prototype (#28334)
  * Automation: Tweaks to more info message (#28332)
  * Loki: Run instant query only when doing metric query (#28325)
  * SAML: IdP-initiated SSO docs (#28280)
  * IssueTriage: Needs more info automation and messages (#28137)
  * GraphNG: Use AxisSide enum (#28320)
  * BackendSrv: Fixes queue countdown when unsubscribe is before response (#28323)
  * Automation: Add backport github action (#28318)
  * Build(deps): Bump http-proxy from 1.18.0 to 1.18.1 (#27507)
  * Bump handlebars from 4.4.3 to 4.7.6 (#27416)
  * Bump tree-kill from 1.2.1 to 1.2.2 (#27405)
  * Loki: Base maxDataPoints limits on query type (#28298)
  * Explore: respect min_refresh_interval (#27988)
  * Drone: Use ${DRONE_TAG} in release pipelines, since it should work (#28299)
  * Graph NG: fix toggling queries and extract Graph component from graph3 panel (#28290)
  * fix: for graph size not taking up full height or width
  * should only ignore the file in the grafana mixin root folder (#28306)
  * Drone: Fix grafana-mixin linting (#28308)
  * SQLStore: Run tests as integration tests (#28265)
  * Chore: Add cloud-middleware as code owners (#28310)
  * API: Fix short URLs (#28300)
  * CloudWatch: Add EC2CapacityReservations Namespace (#28309)
  * Jaeger: timeline collapser to show icons (#28284)
  * update latest.json with latest beta version (#28293)
  * Update changelog (#28292)
  * Docs : - Added period (#28260)
  * Add monitoring mixing for Grafana (#28285)
  * Chore: Update package.json (#28291)
  * Drone: Fix enterprise release pipeline (#28289)
  * Alerting: Append appSubUrl to back button on channel form (#28282)
- Rework package Makefile &amp; README now that Grunt is gone</changelog>
  <changelog author="tserong@suse.com" date="1613995200">- Update to version 7.4.2:
  * Make Datetime local (No date if today) working (#31274) (#31275)
  * "Release: Updated versions in package to 7.4.2" (#31272)
  * [v7.4.x] Chore: grafana-toolkit uses grafana-ui and grafana-data workspaces (#31269)
  * Snapshots: Disallow anonymous user to create snapshots (#31263) (#31266)
  * only update usagestats every 30min (#31131) (#31262)
  * Prometheus: Fix enabling of disabled queries when editing in dashboard (#31055) (#31248)
  * CloudWatch: Ensure empty query row errors are not passed to the panel (#31172) (#31245)
  * StatPanels: Fixes to palette color scheme is not cleared when loading panel (#31126) (#31246)
  * QueryEditors: Fixes issue that happens after moving queries then editing would update other queries (#31193) (#31244)
  * LibraryPanels: Disconnect before connect during dashboard save (#31235) (#31238)
  * SqlDataSources: Fixes the Show Generated SQL button in query editors (#31236) (#31239)
  * Variables: Adds back default option for data source variable (#31208) (#31232)
  * IPv6: Support host address configured with enclosing square brackets (#31226) (#31228)
  * Postgres: Fix timeGroup macro converts long intervals to invalid numbers when TimescaleDB is enabled (#31179) (#31224)
  * Remove last synchronisation field from LDAP debug view (#30984) (#31221)
  * [v7.4.x]: Sync drone config from master to stable release branch (#31213)
  * DataSourceSrv: Filter out non queryable data sources by default (#31144) (#31214)
  * Alerting: Fix modal text for deleting obsolete notifier (#31171) (#31209)
  * Variables: Fixes missing empty elements from regex filters (#31156) (#31201)
  * DashboardLinks: Fixes links always cause full page reload (#31178) (#31181)
  * DashboardListPanel: Fixes issue with folder picker always showing All and using old form styles (#31160) (#31162)
  * Permissions: Fix team and role permissions on folders/dashboards not displayed for non Grafana Admin users (#31132) (#31176)
  * Prometheus: Multiply exemplars timestamp to follow api change (#31143) (#31170)
- Added add-gotest-module.patch to fix "inconsistent vendoring" build failure</changelog>
  <changelog author="ecsos@opensuse.org" date="1618228800">- Update to version 7.5.3:
  * "Release: Updated versions in package to 7.5.3" (#32745)
  * FolderPicker: Prevent dropdown menu from disappearing off screen (#32603) (#32741)
  * Loki: Remove empty annotations tags (#32359) (#32490)
  * SingleStat: fix wrong call to getDataLinkUIModel (#32721) (#32739)
  * Prometheus: Fix instant query to run two times when exemplars enabled (#32508) (#32726)
  * Elasticsearch: Fix bucket script variable duplication in UI (#32705) (#32714)
  * Variables: Confirms selection before opening new picker (#32586) (#32710)
  * CloudWarch: Fix service quotas link (#32686) (#32689)
  * Configuration: Prevent browser hanging / crashing with large number of org users (#32546) (#32598)
  * chore: bump execa to v2.1.0 (#32543) (#32592)
  * Explore: Fix bug where navigating to explore would result in wrong query and datasource to be shown (#32558)
  * Fix broken gtime tests (#32582) (#32587)
  * resolve conflicts (#32567)
  * gtime: Make ParseInterval deterministic (#32539) (#32560)
  * Dashboard: No longer includes default datasource when externally exporting dashboard with row (#32494) (#32535)
  * TextboxVariable: Limits the length of the preview value (#32472) (#32530)
  * AdHocVariable: Adds default data source (#32470) (#32476)
  * Variables: Fixes Unsupported data format error for null values (#32480) (#32487)
  * Prometheus: align exemplars check to latest api change (#32513) (#32515)
  * "Release: Updated versions in package to 7.5.2" (#32502)
  * SigV4: Add support EC2 IAM role auth and possibility to toggle auth providers  (#32444) (#32488)
  * Set spanNulls to default (#32471) (#32486)
  * Graph: Fix setting right y-axis when standard option unit is configured (#32426) (#32442)
  * API: Return 409 on datasource version conflict (#32425) (#32433)
  * API: Return 400 on invalid Annotation requests (#32429) (#32431)
  * Variables: Fixes problem with data source variable when default ds is selected (#32384) (#32424)
  * Table: Fixes so links work for image cells (#32370) (#32410)
  * Variables: Fixes error when manually non-matching entering custom value in variable input/picker (#32390) (#32394)
  * DashboardQueryEditor: Run query after selecting source panel (#32383) (#32395)
  * API: Datasource endpoint should return 400 bad request if id and orgId is invalid (#32392) (#32397)
  * "Release: Updated versions in package to 7.5.1" (#32362)
  * MSSQL: Upgrade go-mssqldb (#32347) (#32361)
  * GraphNG: Fix tooltip displaying wrong or no data (#32312) (#32348)
  * "Release: Updated versions in package to 7.5.0" (#32308)
  * Loki: Fix text search in Label browser (#32293) (#32306)
  * Explore: Show all dataFrames in data tab in Inspector (#32161) (#32299)
  * PieChartV2: Add migration from old piechart (#32259) (#32291)
  * LibraryPanels: Adds Type and Description to DB (#32258) (#32288)
  * LibraryPanels: Prevents deletion of connected library panels (#32277) (#32284)
  * Library Panels: Add "Discard" button to panel save modal (#31647) (#32281)
  * LibraryPanels: Changes to non readonly reducer (#32193) (#32200)
  * Notifications: InfluxDB - Fix regex to include metrics with hyphen in aliases (#32224) (#32262)
  * SSE/InfluxDB: Change InfluxQL to work with server side expressions (#31691) (#32102)
  * DashboardSettings: Fixes issue with tags list not updating when changes are made (#32241) (#32247)
  * Logs: If log message missing, use empty string (#32080) (#32243)
  * CloudWatch: Use latest version of aws sdk (#32217) (#32223)
  * Release: Updated versions in package to 7.5.0-beta.2 (#32158)
  * HttpServer: Make read timeout configurable but disabled by default (#31575) (#32154)
  * GraphNG: Ignore string fields when building data for uPlot in GraphNG (#32150) (#32151)
  * Fix loading timezone info on windows (#32029) (#32149)
  * SQLStore: Close session in withDbSession (#31775) (#32108)
  * Remove datalink template suggestions for accessing specific fields when there are multiple dataframes. (#32057) (#32148)
  * GraphNG: make sure dataset and config are in sync when initializing and re-initializing uPlot (#32106) (#32125)
  * MixedDataSource: Name is updated when data source variable changes (#32090) (#32144)
  * Backport 32005 to v7.5.x #32128 (#32130)
  * Loki: Label browser UI updates (#31737) (#32119)
  * ValueMappings: Fixes value 0 not being mapped (#31924) (#31929)
  * GraphNG: Fix tooltip series color for multi data frame scenario (#32098) (#32103)
  * LibraryPanels: Improves the Get All experience (#32028) (#32093)
  * Grafana/ui: display all selected levels for selected value when searching (#32030) (#32032)
  * Exemplars: always query exemplars (#31673) (#32024)
  * [v7.5.x] TimePicker: Fixes hidden time picker shown in kiosk TV mode (#32055)
  * Chore: Collect elasticsearch version usage stats (#31787) (#32063)
  * Chore: Tidy up Go deps (#32053)
  * GraphNG: Fix PlotLegend field display name being outdated (#32064) (#32066)
  * Data proxy: Fix encoded characters in URL path should be proxied encoded (#30597) (#32060)
  * [v7.5.x] Auth: Allow soft token revocation (#32037)
  * Snapshots: Fix usage of sign in link from the snapshot page (#31986) (#32036)
  * Make master green (#32011) (#32015)
  * Query editor: avoid avoiding word wrap on query editor components (#31949) (#31982)
  * Variables: Fixes filtering in picker with null items (#31979) (#31995)
  * TooltipContainer - use resize observer instead of getClientBoundingRect (#31937) (#32003)
  * Loki: Fix autocomplete when re-editing Loki label values (#31828) (#31987)
  * Loki: Fix type errors in language_provider (#31902) (#31945)
  * PanelInspect: Interpolates variables in CSV file name (#31936) (#31977)
  * Cloudwatch: use shared library for aws auth (#29550) (#31946)
  * Tooltip: partial perf improvement (#31774) (#31837) (#31957)
  * Backport 31913 to v7.5.x (#31955)
  * Grafana/ui: fix searchable options for Cascader with options update (#31906) (#31938)
  * Variables: Do not reset description on variable type change (#31933) (#31939)
  * [v7.5.x] AnnotationList: Adds spacing to UI  (#31888) (#31894)
  * Elasticseach: Support histogram fields (#29079) (#31914)
  * Chore: upgrade eslint and fork-ts-checker-webpack-plugin (#31854) (#31896)
  * Update scripts and Dockerfiles to use Go 1.16.1 (#31881) (#31891)
  * Templating: use dashboard timerange when variables are set to refresh 'On Dashboard Load' (#31721) (#31801)
  * [v7.5.x] Tempo: Add test for backend data source (#31835) (#31882)
  * Run go mod tidy to update go.mod and go.sum (#31859)
  * Grafana/ui: display all selected levels for Cascader (#31729) (#31862)
  * CloudWatch: Consume the grafana/aws-sdk (#31807) (#31861)
  * Cloudwatch: ListMetrics API page limit (#31788) (#31851)
  * Remove invalid attribute (#31848) (#31850)
  * CloudWatch: Restrict auth provider and assume role usage according to? (#31845)
  * CloudWatch: Add support for EC2 IAM role (#31804) (#31841)
  * Loki, Prometheus: Change the placement for query type explanation (#31784) (#31819)
  * Variables: Improves inspection performance and unknown filtering (#31811) (#31813)
  * Change piechart plugin state to beta (#31797) (#31798)
  * ReduceTransform: Include series with numeric string  names (#31763) (#31794)
  * Annotations: Make the annotation clean up batch size configurable (#31487) (#31769)
  * Fix escaping in ANSI and dynamic button removal (#31731) (#31767)
  * DataLinks: Bring back single click links for Stat, Gauge and BarGauge panel (#31692) (#31718)
  * log skipped, performed and duration for migrations (#31722) (#31754)
  * Search: Make items more compact (#31734) (#31750)
  * loki_datasource: add documentation to label_format and line_format (#31710) (#31746)
  * Tempo: Convert tempo to backend data source2 (#31733)
  * Elasticsearch: Fix script fields in query editor (#31681) (#31727)
  * Elasticsearch: revert to isoWeek when resolving weekly indices (#31709) (#31717)
  * Admin: Keeps expired api keys visible in table after delete (#31636) (#31675)
  * Tempo: set authentication header properly (#31699) (#31701)
  * Tempo: convert to backend data source (#31618) (#31695)
  * Update package.json (#31672)
  * Release: Bump version to 7.5.0-beta.1 (#31664)
  * Fix whatsNewUrl version to 7.5 (#31666)
  * Chore: add alias for what's new 7.5 (#31669)
  * Docs: Update doc for PostgreSQL authentication (#31434)
  * Docs: document report template variables (#31637)
  * AzureMonitor: Add deprecation message for App Insights/Insights Analytics (#30633)
  * Color: Fixes issue where colors where reset to gray when switch panels (#31611)
  * Live: Use pure WebSocket transport (#31630)
  * Docs: Fix broken image link (#31661)
  * Docs: Add Whats new in 7.5 (#31659)
  * Docs: Fix links for 7.5 (#31658)
  * Update enterprise-configuration.md (#31656)
  * Explore/Logs: Escaping of incorrectly escaped log lines (#31352)
  * Tracing: Small improvements to trace types (#31646)
  * Update _index.md (#31645)
  * AlertingNG: code refactoring (#30787)
  * Remove pkill gpg-agent (#31169)
  * Remove format for plugin routes (#31633)
  * Library Panels: Change unsaved change detection logic (#31477)
  * CloudWatch: Added AWS Timestream Metrics and Dimensions (#31624)
  * add new metrics and dimensions (#31595)
  * fix devenv dashboard content typo (#31583)
  * DashList: Sort starred and searched dashboard alphabetically (#31605)
  * Docs: Update whats-new-in-v7-4.md (#31612)
  * SSE: Add "Classic Condition" on backend (#31511)
  * InfluxDB: Improve maxDataPoints error-message in Flux-mode, raise limits (#31259)
  * Alerting: PagerDuty: adding current state to the payload (#29270)
  * devenv: Fix typo (#31589)
  * Loki: Label browser (#30351)
  * LibraryPanels: No save modal when user is on same dashboard (#31606)
  * Bug: adding resolution for `react-use-measure` to prevent plugin tests from failing. (#31603)
  * Update node-graph.md (#31571)
  * test: pass Cypress options objects into selector wrappers (#31567)
  * Loki: Add support for alerting (#31424)
  * Tracing: Specify type of the data frame that is expected for TraceView (#31465)
  * LibraryPanels: Adds version column (#31590)
  * PieChart: Add color changing options to pie chart (#31588)
  * Explore: keep enabled/disabled state in angular based QueryEditors correctly (#31558)
  * Bring back correct legend sizing afer PlotLegend refactor (#31582)
  * Alerting: Fix bug in Discord for when name for metric value is absent (#31257)
  * LibraryPanels: Deletes library panels during folder deletion (#31572)
  * chore: bump lodash to 4.17.21 (#31549)
  * Elasticsearch: Fix impossibility to perform non-logs queries after importing queries from loki or prometheus in explore (#31518)
  * TestData: Fixes never ending annotations scenario (#31573)
  * CloudWatch: Added AWS Network Firewall metrics and dimensions (#31498)
  * propagate plugin unavailable message to UI (#31560)
  * ConfirmButton: updates story from knobs to controls (#31476)
  * Loki: Refactor line limit to use grafana/ui component (#31509)
  * LibraryPanels: Adds folder checks and permissions (#31473)
  * Add guide on custom option editors (#31254)
  * PieChart: Update text color and minor changes (#31546)
  * Grafana-data: bump markedjs to v2.x to resolve vulnerability (#31036)
  * Chore(deps): Bump google.golang.org/api from 0.39.0 to 0.40.0 (#31210)
  * PieChart: Improve piechart legend and options (#31446)
  * Chore(deps): Bump google.golang.org/grpc from 1.35.0 to 1.36.0 (#31541)
  * Chore(deps): Bump github.com/aws/aws-sdk-go from 1.37.7 to 1.37.20 (#31538)
  * Chore(deps): Bump github.com/prometheus/common from 0.17.0 to 0.18.0 (#31539)
  * Add multiselect options ui (#31501)
  * Profile: Fixes profile preferences being accessible when anonymous access was enabled (#31516)
  * Variables: Fixes error with: cannot read property length of undefined (#31458)
  * Explore: Show ANSI colored logs in logs context (#31510)
  * LogsPanel: Show all received logs  (#31505)
  * AddPanel: Design polish  (#31484)
  * TimeSeriesPanel: Remove unnecessary margin from legend  (#31467)
  * influxdb: flux: handle is-hidden (#31324)
  * Graph: Fix tooltip not showing when close to the edge of viewport  (#31493)
  * FolderPicker: Remove useNewForms from FolderPicker (#31485)
  * Add reportVariables feature toggle (#31469)
  * Grafana datasource: support multiple targets (#31495)
  * Update license-restrictions.md (#31488)
  * Docs: Derived fields links in logs detail view (#31482)
  * Docs: Add new data source links to Enterprise page (#31480)
  * Convert annotations to dataframes (#31400)
  * ReleaseNotes: Updated changelog and release notes for v7.4.2 (#31475)
  * GrafanaUI: Fixes typescript error for missing css prop (#31479)
  * Login: handle custom token creation error messages (#31283)
  * Library Panels: Don't list current panel in available panels list (#31472)
  * DashboardSettings: Migrate Link Settings to React (#31150)
  * Frontend changes for library panels feature (#30653)
  * Alerting notifier SensuGo: improvements in default message (#31428)
  * AppPlugins: Options to disable showing config page in nav (#31354)
  * add aws config (#31464)
  * Heatmap: Fix missing/wrong value in heatmap legend (#31430)
  * Chore: Fixes small typos (#31461)
  * Graphite/SSE: update graphite to work with server side expressions (#31455)
  * update the lastest version to 7.4.3 (#31457)
  * ReleaseNotes: Updated changelog and release notes for 7.4.3 (#31454)
  * AWS: Add aws plugin configuration (#31312)
  * Revert ""Release: Updated versions in package to 7.4.3" (#31444)" (#31452)
  * Remove UserSyncInfo.tsx (#31450)
  * Elasticsearch: Add word highlighting to search results (#30293)
  * Chore: Fix eslint react hook warnings in grafana-ui (#31092)
  * CloudWatch: Make it possible to specify custom api endpoint (#31402)
  * Chore: fixed incorrect naming for disable settings (#31448)
  * TraceViewer: Fix show log marker in spanbar (#30742)
  * LibraryPanels: Adds permissions to getAllHandler (#31416)
  * NamedColorsPalette: updates story from knobs to controls (#31443)
  * "Release: Updated versions in package to 7.4.3" (#31444)
  * ColorPicker: updates story from knobs to controls (#31429)
  * Streaming: Fixes an issue with time series panel and streaming data source when scrolling back from being out of view (#31431)
  * ClipboardButton: updates story from knobs to controls (#31422)
  * we should never log unhashed tokens (#31432)
  * CI: Upgrade Dockerfiles wrt. Go, Node, Debian (#31407)
  * Elasticsearch: Fix query initialization logic &amp; query transformation from Promethous/Loki (#31322)
  * Postgres: allow providing TLS/SSL certificates as text in addition to file paths (#30353)
  * CloudWatch: Added AWS Ground Station metrics and dimensions (#31362)
  * TraceViewer: Fix trace to logs icon to show in right pane (#31414)
  * add hg team as migrations code owners (#31420)
  * Remove tidy-check script (#31423)
  * InfluxDB: handle columns named "table" (#30985)
  * Prometheus: Use configured HTTP method for /series and /labels endpoints (#31401)
  * Devenv: Add gdev-influxdb2 data source (#31250)
  * Update grabpl from 0.5.38 to 0.5.42 version (#31419)
  * Move NOOP_CONTROL to storybook utils and change to a standalone file (#31421)
  * remove squadcast details from docs (#31413)
  * Add new Cloudwatch AWS/DDoSProtection metrics and dimensions (#31297)
  * Logging: add frontend logging helpers to @grafana/runtime package (#30482)
  * CallToActionCard: updates story from knobs to controls (#31393)
  * Add eu-south-1 cloudwatch region, closes #31197 (#31198)
  * Chore: Upgrade eslint packages (#31408)
  * Cascader: updates story from knobs to controls (#31399)
  * addressed issues 28763 and 30314. (#31404)
  * Added section Query a time series database by id (#31337)
  * Prometheus: Change default httpMethod for new instances to POST (#31292)
  * Data source list: Use Card component (#31326)
  * Chore: Remove gotest.tools dependency (#31391)
  * Revert "StoryBook: Introduces Grafana Controls (#31351)" (#31388)
  * Chore(deps): Bump github.com/prometheus/common from 0.15.0 to 0.17.0 (#31387)
  * AdHocVariables: Fixes crash when values are stored as numbers (#31382)
  * Chore(deps): Bump github.com/golang/mock from 1.4.4 to 1.5.0 (#31379)
  * Chore: Fix strict errors, down to 416 (#31365)
  * Chore(deps): Bump github.com/getsentry/sentry-go from 0.9.0 to 0.10.0 (#31378)
  * StoryBook: Introduces Grafana Controls (#31351)
  * ReleaseNotes: Updated changelog and release notes for 7.4.2 (#31313)
  * Theming: Support for runtime theme switching and hooks for custom themes (#31301)
  * Devenv: Remove old-versioned loki blocks and update prometheus2 block  (#31282)
  * Zipkin: Show success on test data source (#30829)
  * Update grot template (needs more info) (#31350)
  * DatasourceSrv: Fix instance retrieval when datasource variable value set to "default" (#31347)
  * TimeSeriesPanel: Fixes overlapping time axis ticks (#31332)
  * Grafana/UI: Add basic legend to the PieChart (#31278)
  * SAML: single logout only enabled in enterprise (#31325)
  * QueryEditor: handle query.hide changes in angular based query-editors (#31336)
  * DashboardLinks: Fixes another issue where dashboard links cause full page reload (#31334)
  * LibraryPanels: Syncs panel title with name (#31311)
  * Chore: Upgrade golangci-lint (#31330)
  * Add info to docs about concurrent session limits (#31333)
  * Table: Fixes issue with fixed min and auto max with bar gauge cell (#31316)
  * BarGuage: updates story from knobs to controls (#31223)
  * Docs: Clarifies how to add Key/Value pairs (#31303)
  * Usagestats: Exclude folders from total dashboard count (#31320)
  * ButtonCascader: updates story from knobs to controls (#31288)
  * test: allow check for Table as well as Graph for Explore e2e flow (#31290)
  * Grafana-UI: Update tooltip type (#31310)
  * fix 7.4.2 release note (#31299)
  * Add `--tries 3` arg when triggering e2e-tests upon releasing (#31285)
  * Chore: reduce strict errors for variables (#31241)
  * update latest release version (#31296)
  * ReleaseNotes: Updated changelog and release notes for 7.4.2 (#31291)
  * Correct name of Discord notifier tests (#31277)
  * Docs: Clarifies custom date formats for variables (#31271)
  * BigValue: updates story from knobs to controls (#31240)
  * Docs: Annotations update (#31194)
  * Introduce functions for interacting with library panels API (#30993)
  * Search: display sort metadata (#31167)
  * Folders: Editors should be able to edit name and delete folders (#31242)
  * Make Datetime local (No date if today) working (#31274)
  * UsageStats: Purpose named variables (#31264)
  * Snapshots: Disallow anonymous user to create snapshots (#31263)
  * only update usagestats every 30min (#31131)
  * Chore: grafana-toolkit uses grafana-ui and grafana-data workspaces (#30701)
  * Grafana-UI: Add id to Select to make it easier to test (#31230)
  * Prometheus: Fix enabling of disabled queries when editing in dashboard (#31055)
  * UI/Card: Fix handling of 'onClick' callback (#31225)
  * Loki: Add line limit for annotations (#31183)
  * Remove deprecated and breaking loki config field (#31227)
  * SqlDataSources: Fixes the Show Generated SQL button in query editors (#31236)
  * LibraryPanels: Disconnect before connect during dashboard save (#31235)
  * Disable Change Password for OAuth users (#27886)
  * TagsInput: Design update and component refactor (#31163)
  * Variables: Adds back default option for data source variable (#31208)
  * IPv6: Support host address configured with enclosing square brackets (#31226)
  * Postgres: Fix timeGroup macro converts long intervals to invalid numbers when TimescaleDB is enabled (#31179)
  * GraphNG: refactor core to class component (#30941)
  * Remove last synchronisation field from LDAP debug view (#30984)
  * Chore: Upgrade grafana-plugin-sdk-go to v0.88.0 (#30975)
  * Graph: Make axes unit option work even when field option unit is set (#31205)
  * AlertingNG:  Test definition  (#30886)
  * Docs: Update Influx config options (#31146)
  * WIP: Skip this call when we skip migrations (#31216)
  * use 0.1.0 (#31215)
  * DataSourceSrv: Filter out non queryable data sources by default (#31144)
  * QueryEditors: Fixes issue that happens after moving queries then editing would update other queries (#31193)
  * Chore: report eslint no-explicit-any errors to metrics (#31182)
  * Chore(deps): Bump cloud.google.com/go/storage from 1.12.0 to 1.13.0 (#31211)
  * Chore(deps): Bump xorm.io/xorm from 0.8.1 to 0.8.2 (#30773)
  * Alerting: Fix modal text for deleting obsolete notifier (#31171)
  * Chore(deps): Bump github.com/linkedin/goavro/v2 from 2.9.7 to 2.10.0 (#31204)
  * Variables: Fixes missing empty elements from regex filters (#31156)
  * StatPanels: Fixes to palette color scheme is not cleared when loading panel (#31126)
  * Fixed the typo. (#31189)
  * Docs: Rewrite preferences docs (#31154)
  * Explore/Refactor: Simplify URL handling (#29173)
  * DashboardLinks: Fixes links always cause full page reload (#31178)
  * Replace PR with Commit truncated hash when build fails (#31177)
  * Alert: update story to use controls (#31145)
  * Permissions: Fix team and role permissions on folders/dashboards not displayed for non Grafana Admin users (#31132)
  * CloudWatch: Ensure empty query row errors are not passed to the panel (#31172)
  * Update prometheus.md (#31173)
  * Variables: Extend option pickers to accept custom onChange callback (#30913)
  * Prometheus: Multiply exemplars timestamp to follow api change (#31143)
  * DashboardListPanel: Fixes issue with folder picker always showing All and using old form styles (#31160)
  * Add author name and pr number in drone pipeline notifications (#31124)
  * Prometheus: Add documentation for ad-hoc filters (#31122)
  * DataSourceSettings: Fixes add header button, it should not trigger a save &amp; test action (#31135)
  * Alerting: Fix so that sending an alert with the Alertmanager notifier doesn't fail when one of multiple configured URL's are down (#31079)
  * Chore: Update latest.json (#31139)
  * Docs: add 7.4.1 relese notes link (#31137)
  * PieChart: Progress on new core pie chart  (#28020)
  * ReleaseNotes: Updated changelog and release notes for 7.4.1 (#31133)
  * Eslint: no-duplicate-imports rule (bump grafana-eslint-config) (#30989)
  * Transforms: Fixes Outer join issue with duplicate field names not getting the same unique field names as before  (#31121)
  * MuxWriter: Handle error for already closed file (#31119)
  * Logging: sourcemap transform asset urls from CDN in logged stacktraces (#31115)
  * Search: add sort information in dashboard results (#30609)
  * area/grafana/e2e: ginstall should pull version specified (#31056)
  * Exemplars: Change CTA style (#30880)
  * Influx: Make max series limit configurable and show the limiting message if applied (#31025)
  * Docs: request security (#30937)
  * update configurePanel for 7.4.0 changes (#31093)
  * Elasticsearch: fix log row context erroring out (#31088)
  * Prometheus: Fix issues with ad-hoc filters (#30931)
  * LogsPanel: Add deduplication option for logs (#31019)
  * Drone: Make sure CDN upload is ok before pushing docker images (#31075)
  * PluginManager: Remove some global state (#31081)
  * test: update addDashboard flow for v7.4.0 changes (#31059)
  * Transformations: Fixed typo in FilterByValue transformer description. (#31078)
  * Docs: Group id should be 0 instead of 1 in Docker upgrade notes (#31074)
  * Usage stats: Adds source/distributor setting (#31039)
  * CDN: Add CDN upload step to enterprise and release pipelines (#31058)
  * Chore: Replace native select with grafana ui select  (#31030)
  * Docs: Update json-model.md (#31066)
  * Docs: Update whats-new-in-v7-4.md (#31069)
  * Added hyperlinks to Graphite documentation (#31064)
  * DashboardSettings: Update to new form styles (#31022)
  * CDN: Fixing drone CI config (#31052)
  * convert path to posix by default (#31045)
  * DashboardLinks: Fixes crash when link has no title (#31008)
  * Alerting: Fixes so notification channels are properly deleted (#31040)
  * Explore: Remove emotion error when displaying logs (#31026)
  * Elasticsearch: Fix alias field value not being shown in query editor (#30992)
  * CDN: Adds uppload to CDN step to drone CI (#30879)
  * Improved glossary (#31004)
  * BarGauge: Improvements to value sizing and table inner width calculations  (#30990)
  * Drone: Fix deployment image (#31027)
  * ColorPicker: migrated styles from sass to emotion (#30909)
  * Dashboard: Migrate general settings to react (#30914)
  * Chore(deps): Bump github.com/jung-kurt/gofpdf from 1.10.1 to 1.16.2 (#30586)
  * Chore(deps): Bump github.com/aws/aws-sdk-go from 1.36.31 to 1.37.7 (#31018)
  * Prometheus: Min step defaults to seconds when no unit is set to prevent errors when running alerts. (#30966)
  * Chore(deps): Bump github.com/magefile/mage from 1.10.0 to 1.11.0 (#31017)
  * Chore(deps): Bump github.com/grpc-ecosystem/go-grpc-middleware (#31013)
  * Graph: Fixes so graph is shown for non numeric time values (#30972)
  * CloudMonitoring: Prevent resource type variable function from crashing (#30901)
  * Chore(deps): Bump google.golang.org/api from 0.33.0 to 0.39.0 (#30971)
  * Build: Releases e2e and e2e-selectors too (#31006)
  * TextPanel: Fixes so panel title is updated when variables change (#30884)
  * Docs: Update configuration.md (login_maximum_inactive_lifetime_duration, login_maximum_lifetime_duration) (#31000)
  * instrumentation: make the first database histogram bucket smaller (#30995)
  * Grafana/UI: Remove DismissableFeatureInfoBox and replace with LocalSt? (#30988)
  * StatPanel: Fixes issue formatting date values using unit option (#30979)
  * Chore(deps): Bump actions/cache from v2 to v2.1.4 (#30973)
  * Units: Fixes formatting of duration units (#30982)
  * Elasticsearch: Show Size setting for raw_data metric (#30980)
  * Alerts: Dedupe alerts so that we do not fill the screen with the same alert messsage (#30935)
  * make sure service and slo display name is passed to segment comp (#30900)
  * assign changes in cloud datasources to the new cloud datasources team (#30645)
  * Table: Updates devenv test dashboard after change to TestData Randrom Table response (#30927)
  * Theme: Use higher order theme color variables rather then is light/dark logic (#30939)
  * Docs: Add alias for what's new in 7.4 (#30945)
  * e2e: extends selector factory to plugins (#30932)
  * Chore: Upgrade docker build image (#30820)
  * Docs: updated developer guide (#29978)
  * Alerts: Update Alert storybook to show more states (#30908)
  * Variables: Adds queryparam formatting option (#30858)
  * Chore: pad unknown values with undefined (#30808)
  * Transformers: add search to transform selection (#30854)
  * Exemplars: change api to reflect latest changes (#30910)
  * docs: use selinux relabelling on docker containers (#27685)
  * Docs: Fix bad image path for alert notification template (#30911)
  * Make value mappings correctly interpret numeric-like strings (#30893)
  * Chore: Update latest.json (#30905)
  * Docs: Update whats-new-in-v7-4.md (#30882)
  * Dashboard: Ignore changes to dashboard when the user session expires (#30897)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0 (#30902)
  * test: add support for timeout to be passed in for addDatasource (#30736)
  * increase page size and make sure the cache supports query params (#30892)
  * DataSourceSettings: Adds info box and link to Grafana Cloud (#30891)
  * OAuth: custom username docs (#28400)
  * Panels: Remove value mapping of values that have been formatted #26763 (#30868)
  * Alerting: Fixes alert panel header icon not showing (#30840)
  * AlertingNG: Edit Alert Definition (#30676)
  * Logging: sourcemap support for frontend stacktraces (#30590)
  * Added "Restart Grafana" topic. (#30844)
  * Docs: Org, Team, and User Admin (#30756)
  * bump grabpl version to 0.5.36 (#30874)
  * Plugins: Requests validator (#30445)
  * Docs: Update whats-new-in-v7-4.md (#30876)
  * Docs: Add server view folder (#30849)
  * Fixed image name and path  (#30871)
  * Grafana-ui: fixes closing modals with escape key (#30745)
  * InfluxDB: Add http configuration when selecting InfluxDB v2 flavor  (#30827)
  * TestData: Fixes issue with for ever loading state when all queries are hidden (#30861)
  * Chart/Tooltip: refactored style declaration (#30824)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0-beta1 (#30853)
  * Grafana-ui: fixes no data message in Table component (#30821)
  * grafana/ui: Update pagination component for large number of pages (#30151)
  * Alerting: Customise OK notification priorities for Pushover notifier (#30169)
  * DashboardLinks: Support variable expression in to tooltip - Issue #30409 (#30569)
  * Chore: Remove panelTime.html, closes #30097 (#30842)
  * Docs: Time series panel, bar alignment docs (#30780)
  * Chore: add more docs annotations (#30847)
  * Transforms: allow boolean in field calculations (#30802)
  * Prometheus: Add tooltip to explain possibility to use patterns in text and title fields in annotations (#30825)
  * Update prometheus.md with image link fix (#30833)
  * BarChart: inside-align strokes, upgrade uPlot to 1.6.4. (#30806)
  * Update license-expiration.md (#30839)
  * Explore rewrite (#30804)
  * Prometheus: Set type of labels to string (#30831)
  * GrafanaUI: Add a way to persistently close InfoBox (#30716)
  * Fix typo in transformer registry (#30712)
  * Elasticsearch: Display errors with text responses (#30122)
  * CDN: Fixes cdn path when Grafana is under sub path (#30822)
  * TraceViewer: Fix lazy loading (#30700)
  * FormField: migrated sass styling to emotion (#30392)
  * AlertingNG: change API permissions (#30781)
  * Variables: Clears drop down state when leaving dashboard (#30810)
  * Grafana-UI: Add story/docs for ErrorBoundary (#30304)
  * Add missing callback dependency (#30797)
  * PanelLibrary: Adds library panel meta information to dashboard json (#30770)
  * Chore(deps): Bump gonum.org/v1/gonum from 0.6.0 to 0.8.2 (#30343)
  * Chore(deps): Bump gopkg.in/yaml.v2 from 2.3.0 to 2.4.0 (#30771)
  * GraphNG: improve behavior when switching between solid/dash/dots (#30796)
  * Chore(deps): Bump github.com/hashicorp/go-hclog from 0.14.1 to 0.15.0 (#30778)
  * Add width for Variable Editors (#30791)
  * Chore: Remove warning when calling resource (#30752)
  * Auth: Use SigV4 lib from grafana-aws-sdk  (#30713)
  * Panels: Fixes so panels are refreshed when scrolling past them fast (#30784)
  * GraphNG: add bar alignment option (#30499)
  * Expressions: Measure total transformation requests and elapsed time (#30514)
  * Menu: Mark menu components as internal (#30740)
  * TableInputCSV: migrated styles from sass to emotion (#30554)
  * CDN: Fix passing correct prefix to GetContentDeliveryURL (#30777)
  * Chore(deps): Bump gopkg.in/ini.v1 from 1.57.0 to 1.62.0 (#30772)
  * CDN: Adds support for serving assets over a CDN (#30691)
  * PanelEdit: Trigger refresh when changing data source (#30744)
  * Chore: remove __debug_bin (#30725)
  * BarChart: add alpha bar chart panel (#30323)
  * Docs: Time series panel (#30690)
  * Backend Plugins: Convert test data source to use SDK contracts (#29916)
  * Docs: Update whats-new-in-v7-4.md (#30747)
  * Add link to Elasticsearch docs. (#30748)
  * Mobile: Fixes issue scrolling on mobile in chrome (#30746)
  * TagsInput: Make placeholder configurable (#30718)
  * Docs: Add config settings for fonts in reporting (#30421)
  * Add menu.yaml to .gitignore (#30743)
  * bump cypress to 6.3.0 (#30644)
  * Datasource: Use json-iterator configuration compatible with standard library (#30732)
  * AlertingNG: Update UX to use new PageToolbar component (#30680)
  * Docs: Add usage insights export feature (#30376)
  * skip symlinks to directories when generating plugin manifest (#30721)
  * PluginCiE2E: Upgrade base images (#30696)
  * Variables: Fixes so text format will show All instead of custom all (#30730)
  * PanelLibrary: better handling of deleted panels (#30709)
  * Added section "Curated dashboards for Google Cloud Monitoring" for 7.4 What's New (#30724)
  * Added "curated dashboards" information and broke down, rearranged topics. (#30659)
  * Transform: improve the "outer join" performance/behavior (#30407)
  * Add alt text to plugin logos (#30710)
  * Deleted menu.yaml file (#30717)
  * Dashboard: Top Share URL icon should share panel URL when on viewPanel page (#30000)
  * Added entry for web server. (#30715)
  * DashboardPicker: switch to promise-based debounce, return dashboard UID (#30706)
  * Use connected GraphNG in Explore (#30707)
  * Fix documentation for streaming data sources (#30704)
  * PanelLibrary: changes casing of responses and adds meta property (#30668)
  * Influx: Show all datapoints for dynamically windowed flux query (#30688)
  * Trace: trace to logs design update (#30637)
  * DeployImage: Switch base images to Debian (#30684)
  * Chore: remove CSP debug logging line (#30689)
  * Docs: 7.4 documentation for expressions (#30524)
  * PanelEdit: Get rid of last remaining usage of navbar-button (#30682)
  * Grafana-UI: Fix setting default value for MultiSelect (#30671)
  * CustomScrollbar: migrated styles from sass to emotion (#30506)
  * DashboardSettings &amp; PanelEdit: Use new PageToolbar (#30675)
  * Explore: Fix jumpy live tailing (#30650)
  * ci(npm-publish): add missing github package token to env vars (#30665)
  * PageToolbar: Extracting navbar styles &amp; layout into a modern emotion based component (#30588)
  * AlertingNG: pause/unpause definitions via the API (#30627)
  * Docs: Refer to product docs in whats new for alerting templating feature (#30652)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0-beta1 (#30666)
  * Variables: Fixes display value when using capture groups in regex (#30636)
  * Docs: Update _index.md (#30655)
  * Docs: Auditing updates (#30433)
  * Docs: add hidden_users configuration field (#30435)
  * Docs: Define TLS/SSL terminology (#30533)
  * Docs: Fix expressions enabled description (#30589)
  * Docs: Update ES screenshots (#30598)
  * Licensing Docs: Adding license restrictions docs (#30216)
  * Update documentation-style-guide.md (#30611)
  * Docs: Update queries.md (#30616)
  * chore(grafana-ui): bump storybook to 6.1.15 (#30642)
  * DashboardSettings: fixes vertical scrolling (#30640)
  * Usage Stats: Remove unused method for getting user stats (#30074)
  * Grafana/UI: Unit picker should not set a category as unit (#30638)
  * Graph: Fixes auto decimals issue in legend and tooltip (#30628)
  * AlertingNG: List saved Alert definitions in Alert Rule list (#30603)
  * chore: bump redux toolkit to 1.5.0 for immer 8.0.1 vulnerability fix (#30605)
  * Grafana/UI: Add disable prop to Segment (#30539)
  * Variables: Fixes so queries work for numbers values too (#30602)
  * Admin: Fixes so form values are filled in from backend (#30544)
  * Docs: Add new override info and add whats new 7.4 links (#30615)
  * TestData: Improve what's new in v7.4 (#30612)
  * Docs: Update 7.4 What's New to use more correct description of alerting notification template feature (#30502)
  * NodeGraph: Add docs (#30504)
  * Loki: Improve live tailing errors and fix Explore's logs container type errors (#30517)
  * TimeRangePicker: Updates components to use new ToolbarButton &amp; ButtonGroup (#30570)
  * Update styling.md guide (#30594)
  * TestData: Adding what's new in v7.4 to the devenv dashboards (#30568)
  * Chore(deps): Bump github.com/aws/aws-sdk-go from 1.35.5 to 1.36.31 (#30583)
  * Chore(deps): Bump github.com/prometheus/client_golang (#30585)
  * Chore(deps): Bump gopkg.in/macaron.v1 from 1.3.9 to 1.4.0 (#30587)
  * Chore(deps): Bump github.com/google/uuid from 1.1.5 to 1.2.0 (#30584)
  * Explore: Fix logs hover state so that it is visible and in dark mode &amp; simply hover code (#30572)
  * RefreshPicker: Fixes so valid intervals in url are visible in RefreshPicker (#30474)
  * Add documentation for Exemplars (#30317)
  * OldGraph: Fix height issue in Firefox (#30565)
  * XY Chart: fix editor error with empty frame (no fields) (#30573)
  * ButtonSelect &amp; RefreshPicker: Rewrite of components to use new emotion based ToolbarButton &amp; Menu (#30510)
  * XY Chart: share legend config with timeseries (#30559)
  * configuration.md: Document Content Security Policy options (#30413)
  * DataFrame: cache frame/field index in field state (#30529)
  * List + before -; rm old Git ref; reformat. (#30543)
  * Expressions: Add option to disable feature (#30541)
  * Explore: Fix loading visualisation on the top of the new time series panel (#30553)
  * Prometheus: Fix show query instead of Value if no __name__ and metric (#30511)
  * Decimals: Big Improvements to auto decimals and fixes to auto decimals bug found in 7.4-beta1  (#30519)
  * Postgres: Convert tests to stdlib (#30536)
  * Storybook: Migrate card story to use controls  (#30535)
  * AlertingNG: Enable UI to Save Alert Definitions (#30394)
  * Postgres: Be consistent about TLS/SSL terminology (#30532)
  * Loki: Append refId to logs uid (#30418)
  * Postgres: Fix indentation (#30531)
  * GraphNG: uPlot 1.6.3 (fix bands not filling below 0). close #30523. (#30527)
  * updates for e2e docker image (#30465)
  * GraphNG: uPlot 1.6.2 (#30521)
  * Docs: Update whats-new-in-v7-4.md (#30520)
  * Prettier: ignore build and devenv dirs (#30501)
  * Chore: Upgrade grabpl version (#30486)
  * Explore: Update styling of buttons (#30493)
  * Cloud Monitoring: Fix legend naming with display name override (#30440)
  * GraphNG: Disable Plot logging by default (#30390)
  * Admin: Fixes so whole org drop down is visible when adding users to org (#30481)
  * Docs: include Makefile option for local assets (#30455)
  * Footer: Fixes layout issue in footer  (#30443)
  * TimeSeriesPanel: Fixed default value for gradientMode (#30484)
  * Docs: fix typo in what's new doc (#30489)
  * Chore: adds wait to e2e test (#30488)
  * chore: update packages dependent on dot-prop to fix security vulnerability (#30432)
  * Dashboard: Remove Icon and change copy -&gt; Copy to clipboard in the share embedded panel modal (#30480)
  * Chore: fix spelling mistake (#30473)
  * Chore: Restrict internal imports from other packages (#30453)
  * Docs: What's new fixes and improvements (#30469)
  * Timeseries: only migrage point size when configured (#30461)
  * Alerting: Hides threshold handle for percentual thresholds (#30431)
  * Graph: Fixes so only users with correct permissions can add annotations (#30419)
  * Chore: update latest version to 7.4.0-beta1 (#30452)
  * Docs: Add whats new 7.4 links (#30463)
  * Update whats-new-in-v7-4.md (#30460)
  * docs: 7.4 what's new (Add expressions note) (#30446)
  * Chore: Upgrade build pipeline tool (#30456)
  * PanelModel: Make sure the angular options are passed to react panel type changed handler (#30441)
  * Expressions: Fix button icon (#30444)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0-beta1 (#30449)
  * Docs: Fix img link for alert notification template (#30436)
  * grafana/ui: Fix internal import from grafana/data (#30439)
  * prevent field config from being overwritten (#30437)
  * PanelOptions: Refactoring applying panel and field options out of PanelModel and add property clean up for properties not in field config registry  (#30389)
  * Dashboard: Remove template variables option from ShareModal (#30395)
  * Added doc content for variables inspector code change by Hugo (#30408)
  * Docs: update license expiration behavior for reporting (#30420)
  * Chore: use old version format in package.json (#30430)
  * Chore: upgrade NPM security vulnerabilities (#30397)
  * "Release: Updated versions in package to 7.5.0-pre.0" (#30428)
  * contribute: Add backend and configuration guidelines for PRs (#30426)
  * Chore: Update what's new URL (#30424)
- Update to version 7.4.5
  * Security: Fix API permissions issues related to team-sync CVE-2021-28146, CVE-2021-28147. (Enterprise)
  * Security: Usage insights requires signed in users CVE-2021-28148. (Enterprise)
  * Security: Do not allow editors to incorrectly bypass permissions on the default data source. CVE-2021-27962. (Enterprise)
- Drop patch add-gotest-module.patch
- Add patch drop-grafana-aws-sdk-0.3.0-module.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1618488000">- Update to version 7.5.4:
  * "Release: Updated versions in package to 7.5.4" (#32971)
  * fix(datasource_srv): prevent infinite loop where default datasource is named default (#32949) (#32967)
  * Added Azure Monitor support for Microsoft.AppConfiguration/configurationStores namespace (#32123) (#32968)
  * fix sqlite3 tx retry condition operator precedence (#32897) (#32952)
  * AzureMonitor: Add support for Virtual WAN namespaces (#32935) (#32947)
  * Plugins: Allow a non-dashboard page to be the default home page (#32926) (#32945)
  * GraphNG: uPlot 1.6.8 (#32859) (#32863)
  * Alerting: Add ability to include aliases with dashes (/) and at (@) signs in InfluxDB (#32844)
  * Prometheus: Allow exemplars endpoint in data source proxy (#32802) (#32804)
  * [v7.5.x] Table: Fixes table data links so they refer to correct row after sorting (#32758)
  * TablePanel: Makes sorting case-insensitive (#32435) (#32752)</changelog>
  <changelog author="ecsos@opensuse.org" date="1620302400">- Update to version 7.5.5:
  * "Release: Updated versions in package to 7.5.5" (#33469)
  * GraphNG: Fix exemplars window position (#33427) (#33462)
  * Remove field limitation from slack notification (#33113) (#33455)
  * Prometheus: Support POST in template variables (#33321) (#33441)
  * Instrumentation: Add success rate metrics for email notifications (#33359) (#33409)
  * Use either moment objects (for absolute times in the datepicker) or string (for relative time) (#33315) (#33406)
  * Docs: Removed type from find annotations example. (#33399) (#33403)
  * [v7.5.x]: FrontendMetrics: Adds new backend api that frontend can use to push frontend measurements and counters to prometheus (#33255)
  * Updated label for add panel. (#33285) (#33286)
  * Bug: Add git to Dockerfile.ubuntu (#33247) (#33248)
  * Docs: Sync latest master docs with 7.5.x (#33156)
  * Docs: Update getting-started-influxdb.md (#33234) (#33241)
  * Doc: Document the X-Grafana-Org-Id HTTP header (#32478) (#33239)
  * Minor Changes in Auditing.md (#31435) (#33238)
  * Docs: Add license check endpoint doc (#32987) (#33236)
  * Postgres: Fix time group macro when TimescaleDB is enabled and interval is less than a second (#33153) (#33219)
  * Docs: InfluxDB doc improvements (#32815) (#33185)
  * [v7.5.x] Loki: Pass Skip TLS Verify setting to alert queries (#33031)
  * update cla (#33181)
  * Fix inefficient regular expression (#33155) (#33159)
  * Auth: Don't clear auth token cookie when lookup token fails (#32999) (#33136)
  * Elasticsearch:  Add documentation for supported Elasticsearch query transformations (#33072) (#33128)
  * Update team.md (#33060) (#33084)
  * GE issue 1268 (#33049) (#33081)
  * Fixed some formatting issues for PRs from yesterday. (#33078) (#33079)
  * Explore: Load default data source in Explore when the provided source does not exist (#32992) (#33061)
  * Docs: Replace next with latest in aliases (#33054) (#33059)
  * Added missing link item. (#33052) (#33055)
  * Backport 33034 (#33038)
  * Docs: Backport 32916 to v7.5x  (#33008)
  * ReleaseNotes: Updated changelog and release notes for 7.5.4 (#32973) (#32998)
  * Elasticsearch: Force re-rendering of each editor row type change (#32993) (#32996)
  * Docs: Sync release branch with latest docs (#32986)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Update to version 7.5.7:
  * Updated relref to "Configuring exemplars" section (#34240) (#34243)
  * Added exemplar topic (#34147) (#34226)
  * Quota: Do not count folders towards dashboard quota (#32519) (#34025)
  * Instructions to separate emails with semicolons (#32499) (#34138)
  * Docs: Remove documentation of v8 generic OAuth feature (#34018)
  * Annotations: Prevent orphaned annotation tags cleanup when no annotations were cleaned (#33957) (#33975)
  * [GH-33898] Add missing --no-cache to Dockerfile. (#33906) (#33935)
  * ReleaseNotes: Updated changelog and release notes for 7.5.6 (#33932) (#33936)
  * Stop hoisting @icons/material (#33922)
  * Chore: fix react-color version in yarn.lock (#33914)
  * "Release: Updated versions in package to 7.5.6" (#33909)
  * Loki: fix label browser crashing when + typed (#33900) (#33901)
  * Document `hide_version` flag (#33670) (#33881)
  * Add isolation level db configuration parameter (#33830) (#33878)
  * Sanitize PromLink button (#33874) (#33876)
  * Removed content as per MarcusE's suggestion in https://github.com/grafana/grafana/issues/33822. (#33870) (#33872)
  * Docs feedback: /administration/provisioning.md (#33804) (#33842)
  * Docs: delete from high availability docs references to removed configurations related to session storage (#33827) (#33851)
  * Docs: Update _index.md (#33797) (#33799)
  * Docs: Update installation.md (#33656) (#33703)
  * GraphNG: uPlot 1.6.9 (#33598) (#33612)
  * dont consider invalid email address a failed email (#33671) (#33681)
  * InfluxDB: Improve measurement-autocomplete behavior in query editor (#33494) (#33625)
  * add template for dashboard url parameters  (#33549) (#33588)
  * Add note to Snapshot API doc to specify that user has to provide the entire dashboard model  (#33572) (#33586)
  * Update team.md (#33454) (#33536)
  * Removed duplicate file "dashboard_folder_permissions.md (#33497)
  * Document customQueryParameters for prometheus datasource provisioning (#33440) (#33495)
  * ReleaseNotes: Updated changelog and release notes for 7.5.5 (#33473) (#33492)
  * Documentation: Update developer-guide.md (#33478) (#33490)
  * add closed parenthesis to fix a hyperlink (#33471) (#33481)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1632225600">- Add patch 0001-Add-source-code-reference.patch
  * Add URL to package source code in the login page footer</changelog>
  <changelog author="ro@suse.de" date="1637150400">- Update to version 7.5.11:
  * Fix Snapshot authentication bypass (bsc#1191454, CVE-2021-39226)
  * Fix certs issue (#40002)
  * Release v7.5.11 (#124)
  * Fix static path matching issue in macaron
  * OAuth: add docs for disableAutoLogin param (#38752) (#38894)
  * Fix #747; remove 'other variables'. (#37866) (#37878)
  * Update alert docs (#33658) (#33659)
  * [7.5.x] Docs: added documentation for the "prepare time series"-transformation. (#36836)
  * cherry picked dc5778c303ca555b70e8ca8c28e95997e26ecfc1 (#36813)
  * "Release: Updated versions in package to 7.5.10" (#36792)
  * [v7.5.x] Transformations: add 'prepare time series' transformer (#36749)
  * Remove verify-drone from windows (#36775)
  * Update queries.md (#31941) (#36764)
  * Updated content to specify method to use to get keyboard shortcuts wh? (#36084) (#36087)
  * ReleaseNotes: Updated changelog and release notes for 7.5.9 (#36057) (#36077)
  * "Release: Updated versions in package to 7.5.9" (#36056)
  * Login: Fixes Unauthorized message showing when on login page or snapshot page (#35311) (#35880)
  * ReleaseNotes: Updated changelog and release notes for 7.5.8 (#35703) (#35822)
  * CI: Upgrade pipeline tool to use main (#35804)
  * CI: try to force v7.5.x instead of master (#35799)
  * CI: supports move from master to main in 7.5.x release branch (#35747)
  * "Release: Updated versions in package to 7.5.8" (#35701)
  * Chore: Bump acorn and lodash-es (#35650)
  * Snapshots: Remove dashboard links from snapshots (#35567) (#35585)
  * [v7.5.x] Datasource: Allow configuring `MaxConnsPerHost` (#35519)
  * Remove docs sync from v7.5.x (#35443)
  * "Release: Updated versions in package to 7.5.7" (#35412)
  * Add max_idle_connections_per_host to config (#35365)
  * Update go.sum to fix failing enterprise pipeline (#35353)
  * [v7.5.x] HTTP Client: Introduce `go-conntrack`  (#35321)
  * Fix Markdown syntax in enterprise/license/_index.md (#34683) (#35210)
  * Update annotations.md (#33218) (#35138)
  * Docs: Add query caching to enterprise docs page (#34751) (#35025)
  * [7.5.x] Admin: hide per role counts for licensed users (#34994)
  * cleanup shortcodes, image paths (#34827)
  * Security: Upgrade Thrift dependency (#34698) (#34702)
  * Docs: Fix Quick Start link on Geting Started Influx page (#34549) (#34603)
  * Add link to release notes v7.5.7 (#34460) (#34474)
  * Update 7.5.x landing page (#34447)
  * ReleaseNotes: Updated changelog and release notes for 7.5.7 (#34383) (#34428)
- update to 7.5.10
  * [v7.5.x] Transformations: add "prepare time series" transformer. [#36749]
- update to 7.5.9
  * Login: Fix Unauthorized message that is displayed on sign-in or snapshot page. [#35880]
- drop drop-grafana-aws-sdk-0.3.0-module.patch (upstream)</changelog>
  <changelog author="ro@suse.de" date="1637236800">- recreate tarballs using the makefile to update the
  npm and go modules required</changelog>
  <changelog author="witold.bedyk@suse.com" date="1639396800">- Update to version 7.5.12:
  * Fix markdown path traversal (#42969, bsc#1193688, CVE-2021-43813)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642680000">- Update to Go 1.17.
- Add build-time dependency on `wire`.
- Update license to GNU Affero General Public License v3.0.
- Update to version 8.3.4
  + Security:
  * GetUserInfo: return an error if no user was found
    (bsc#1194873, CVE-2022-21673)
  + Features and enhancements:
  * Alerting: Allow configuration of non-ready alertmanagers.
  * Alerting: Allow customization of Google chat message.
  * AppPlugins: Support app plugins with only default nav.
  * InfluxDB: query editor: skip fields in metadata queries.
  * Postgres/MySQL/MSSQL: Cancel in-flight SQL query if user
    cancels query in grafana.
  * Prometheus: Forward oauth tokens after prometheus datasource
    migration.
  + Bug fixes:
  * Azure Monitor: Bug fix for variable interpolations in metrics
    dropdowns.
  * Azure Monitor: Improved error messages for variable queries.
  * CloudMonitoring: Fixes broken variable queries that use group
    bys.
  * Configuration: You can now see your expired API keys if you
    have no active ones.
  * Elasticsearch: Fix handling multiple datalinks for a single
    field.
  * Export: Fix error being thrown when exporting dashboards
    using query variables that reference the default datasource.
  * ImportDashboard: Fixes issue with importing dashboard and
    name ending up in uid.
  * Login: Page no longer overflows on mobile.
  * Plugins: Set backend metadata property for core plugins.
  * Prometheus: Fill missing steps with null values.
  * Prometheus: Fix interpolation of $__rate_interval variable.
  * Prometheus: Interpolate variables with curly brackets syntax.
  * Prometheus: Respect the http-method data source setting.
  * Table: Fixes issue with field config applied to wrong fields
    when hiding columns.
  * Toolkit: Fix bug with rootUrls not being properly parsed when
    signing a private plugin.
  * Variables: Fix so data source variables are added to adhoc
    configuration.
  + Plugin development fixes &amp; changes:
  * Toolkit: Revert build config so tslib is bundled with plugins
    to prevent plugins from crashing.
- Update to version 8.3.3:
  + Features and enhancements:
  * BarChart: Use new data error view component to show actions
    in panel edit.
  * CloudMonitor: Iterate over pageToken for resources.
  * Macaron: Prevent WriteHeader invalid HTTP status code panic.
  + Bug fixes:
  * AnnoListPanel: Fix interpolation of variables in tags.
  * CloudWatch: Allow queries to have no dimensions specified.
  * CloudWatch: Fix broken queries for users migrating from
    8.2.4/8.2.5 to 8.3.0.
  * CloudWatch: Make sure MatchExact flag gets the right value.
  * Dashboards: Fix so that empty folders can be deleted from the
    manage dashboards/folders page.
  * InfluxDB: Improve handling of metadata query errors in
    InfluxQL.
  * Loki: Fix adding of ad hoc filters for queries with parser
    and line_format expressions.
  * Prometheus: Fix running of exemplar queries for non-histogram
    metrics.
  * Prometheus: Interpolate template variables in interval.
  * StateTimeline: Fix toolitp not showing when for frames with
    multiple fields.
  * TraceView: Fix virtualized scrolling when trace view is
    opened in right pane in Explore.
  * Variables: Fix repeating panels for on time range changed
    variables.
  * Variables: Fix so queryparam option works for scoped
    variables.
- Update to version 8.3.2
  + Security: Fixes CVE-2021-43813 and CVE-2021-43815.
- Update to version 8.3.1
  + Security: Fixes CVE-2021-43798.
- Update to version 8.3.0
  + Features and enhancements:
  * Alerting: Prevent folders from being deleted when they
    contain alerts.
  * Alerting: Show full preview value in tooltip.
  * BarGauge: Limit title width when name is really long.
  * CloudMonitoring: Avoid to escape regexps in filters.
  * CloudWatch: Add support for AWS Metric Insights.
  * TooltipPlugin: Remove other panels' shared tooltip in edit
    panel.
  * Visualizations: Limit y label width to 40% of visualization
    width.
  + Bug fixes:
  * Alerting: Clear alerting rule evaluation errors after
    intermittent failures.
  * Alerting: Fix refresh on legacy Alert List panel.
  * Dashboard: Fix queries for panels with non-integer widths.
  * Explore: Fix url update inconsistency.
  * Prometheus: Fix range variables interpolation for time ranges
    smaller than 1 second.
  * ValueMappings: Fixes issue with regex value mapping that only
    sets color.
- Update to version 8.3.0-beta2
  + Breaking changes:
  * Grafana 8 Alerting enabled by default for installations that
    do not use legacy alerting.
  * Keep Last State for "If execution error or timeout" when
    upgrading to Grafana 8 alerting.
  + Features and enhancements:
  * Alerting: Create DatasourceError alert if evaluation returns
    error.
  * Alerting: Make Unified Alerting enabled by default for those
    who do not use legacy alerting.
  * Alerting: Support mute timings configuration through the api
    for the embedded alert manager.
  * CloudWatch: Add missing AWS/Events metrics.
  * Docs: Add easier to find deprecation notices to certain data
    sources and to the changelog.
  * Plugins Catalog: Enable install controls based on the
    pluginAdminEnabled flag.
  * Table: Add space between values for the DefaultCell and
    JSONViewCell.
  * Tracing: Make query editors available in dashboard for Tempo
    and Zipkin.
  + Bug fixes:
  * AccessControl: Renamed orgs roles, removed fixed:orgs:reader
    introduced in beta1.
  * Azure Monitor: Add trap focus for modals in grafana/ui and
    other small a11y fixes for Azure Monitor.
  * CodeEditor: Prevent suggestions from being clipped.
  * Dashboard: Fix cache timeout persistence.
  * Datasource: Fix stable sort order of query responses.
  * Explore: Fix error in query history when removing last item.
  * Logs: Fix requesting of older logs when flipped order.
  * Prometheus: Fix running of health check query based on access
    mode.
  * TextPanel: Fix suggestions for existing panels.
  * Tracing: Fix incorrect indentations due to reoccurring
    spanIDs.
  * Tracing: Show start time of trace with milliseconds
    precision.
  * Variables: Make renamed or missing variable section
    expandable.
  + Plugin development fixes &amp; changes:
  * Select: Select menus now properly scroll during keyboard
    navigation.
- Update to version 8.3.0-beta1
  + Features and enhancements:
  * Alerting: Add UI for contact point testing with custom
    annotations and labels.
  * Alerting: Make alert state indicator in panel header work
    with Grafana 8 alerts.
  * Alerting: Option for Discord notifier to use webhook name.
  * Annotations: Deprecate AnnotationsSrv.
  * Auth: Omit all base64 paddings in JWT tokens for the JWT
    auth.
  * Azure Monitor: Clean up fields when editing Metrics.
  * AzureMonitor: Add new starter dashboards.
  * AzureMonitor: Add starter dashboard for app monitoring with
    Application Insights.
  * Barchart/Time series: Allow x axis label.
  * CLI: Improve error handling for installing plugins.
  * CloudMonitoring: Migrate to use backend plugin SDK contracts.
  * CloudWatch Logs: Add retry strategy for hitting max
    concurrent queries.
  * CloudWatch: Add AWS RoboMaker metrics and dimension.
  * CloudWatch: Add AWS Transfer metrics and dimension.
  * Dashboard: replace datasource name with a reference object.
  * Dashboards: Show logs on time series when hovering.
  * Elasticsearch: Add support for Elasticsearch 8.0 (Beta).
  * Elasticsearch: Add time zone setting to Date Histogram
    aggregation.
  * Elasticsearch: Enable full range log volume histogram.
  * Elasticsearch: Full range logs volume.
  * Explore: Allow changing the graph type.
  * Explore: Show ANSI colors when highlighting matched words in
    the logs panel.
  * Graph(old) panel: Listen to events from Time series panel.
  * Import: Load gcom dashboards from URL.
  * LibraryPanels: Improves export and import of library panels
    between orgs.
  * OAuth: Support PKCE.
  * Panel edit: Overrides now highlight correctly when searching.
  * PanelEdit: Display drag indicators on draggable sections.
  * Plugins: Refactor Plugin Management.
  * Prometheus: Add custom query parameters when creating
    PromLink url.
  * Prometheus: Remove limits on metrics, labels, and values in
    Metrics Browser.
  * StateTimeline: Share cursor with rest of the panels.
  * Tempo: Add error details when json upload fails.
  * Tempo: Add filtering for service graph query.
  * Tempo: Add links to nodes in Service Graph pointing to
    Prometheus metrics.
  * Time series/Bar chart panel: Add ability to sort series via
    legend.
  * TimeSeries: Allow multiple axes for the same unit.
  * TraceView: Allow span links defined on dataFrame.
  * Transformations: Support a rows mode in labels to fields.
  * ValueMappings: Don't apply field config defaults to time
    fields.
  * Variables: Only update panels that are impacted by variable
    change.
  + Bug fixes:
  * API: Fix dashboard quota limit for imports.
  * Alerting: Fix rule editor issues with Azure Monitor data
    source.
  * Azure monitor: Make sure alert rule editor is not enabled
    when template variables are being used.
  * CloudMonitoring: Fix annotation queries.
  * CodeEditor: Trigger the latest getSuggestions() passed to
    CodeEditor.
  * Dashboard: Remove the current panel from the list of options
    in the Dashboard datasource.
  * Encryption: Fix decrypting secrets in alerting migration.
  * InfluxDB: Fix corner case where index is too large in ALIAS
    field.
  * NavBar: Order App plugins alphabetically.
  * NodeGraph: Fix zooming sensitivity on touchpads.
  * Plugins: Add OAuth pass-through logic to api/ds/query
    endpoint.
  * Snapshots: Fix panel inspector for snapshot data.
  * Tempo: Fix basic auth password reset on adding tag.
  * ValueMapping: Fixes issue with regex mappings.
  + Plugin development fixes &amp; changes:
  * grafana/ui: Enable slider marks display.
- Update to version 8.2.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.2.6
  + Features and enhancements:
  * Security: Upgrade Docker base image to Alpine 3.14.3.
  * Security: Upgrade Go to 1.17.2.
  + Bug fixes:
  * TimeSeries: Fix fillBelowTo wrongly affecting fills of
    unrelated series.
- Update to version 8.2.5
  + Breaking changes:
  * Fix No Data behaviour in Legacy Alerting.
  + Bug fixes:
  * Alerting: Fix a bug where the metric in the evaluation string
    was not correctly populated.
  * Alerting: Fix no data behaviour in Legacy Alerting for alert
    rules using the AND operator.
  * CloudMonitoring: Ignore min and max aggregation in MQL
    queries.
  * Dashboards: 'Copy' is no longer added to new dashboard
    titles.
  * DataProxy: Fix overriding response body when response is a
    WebSocket upgrade.
  * Elasticsearch: Use field configured in query editor as field
    for date_histogram aggregations.
  * Explore: Fix running queries without a datasource property
    set.
  * InfluxDB: Fix numeric aliases in queries.
  * Plugins: Ensure consistent plugin settings list response.
  * Tempo: Fix validation of float durations.
  * Tracing: Correct tags for each span are shown.
- Update to version 8.2.4
  + Security: Fixes CVE-2021-41244.
- Update to version 8.2.3
  + Security: Fixes CVE-2021-41174.
- Update to version 8.2.2
  + Features and enhancements:
  * Annotations: We have improved tag search performance.
  * Application: You can now configure an error-template title.
  * AzureMonitor: We removed a restriction from the resource
    filter query.
  * Packaging: We removed the ProcSubset option in systemd. This
    option prevented Grafana from starting in LXC environments.
  * Prometheus: We removed the autocomplete limit for metrics.
  * Table: We improved the styling of the type icons to make them
    more distinct from column / field name.
  * ValueMappings: You can now use value mapping in stat, gauge,
    bar gauge, and pie chart visualizations.
  + Bug fixes:
  * Alerting: Fix panic when Slack's API sends unexpected
    response.
  * Alerting: The Create Alert button now appears on the
    dashboard panel when you are working with a default
    datasource.
  * Explore: We fixed the problem where the Explore log panel
    disappears when an Elasticsearch logs query returns no
    results.
  * Graph: You can now see annotation descriptions on hover.
  * Logs: The system now uses the JSON parser only if the line is
    parsed to an object.
  * Prometheus: We fixed the issue where the system did not reuse
    TCP connections when querying from Grafana alerting.
  * Prometheus: We fixed the problem that resulted in an error
    when a user created a query with a $__interval min step.
  * RowsToFields: We fixed the issue where the system was not
    properly interpreting number values.
  * Scale: We fixed how the system handles NaN percent when data
    min = data max.
  * Table panel: You can now create a filter that includes
    special characters.
- Update to version 8.2.1
  + Bug fixes:
  * Dashboard: Fix rendering of repeating panels.
  * Datasources: Fix deletion of data source if plugin is not
    found.
  * Packaging: Remove systemcallfilters sections from systemd
    unit files.
  * Prometheus: Add Headers to HTTP client options.
- Update to version 8.2.0
  + Features and enhancements:
  * AWS: Updated AWS authentication documentation.
  * Alerting: Added support Alertmanager data source for upstream
    Prometheus AM implementation.
  * Alerting: Allows more characters in label names so
    notifications are sent.
  * Alerting: Get alert rules for a dashboard or a panel using
    /api/v1/rules endpoints.
  * Annotations: Improved rendering performance of event markers.
  * CloudWatch Logs: Skip caching for log queries.
  * Explore: Added an opt-in configuration for Node Graph in
    Jaeger, Zipkin, and Tempo.
  * Packaging: Add stricter systemd unit options.
  * Prometheus: Metrics browser can now handle label values with
    special characters.
  + Bug fixes:
  * CodeEditor: Ensure that we trigger the latest onSave callback
    provided to the component.
  * DashboardList/AlertList: Fix for missing All folder value.
  + Plugin development fixes &amp; changes:
  * Plugins: Create a mock icon component to prevent console
    errors.
- Update to version 8.2.0-beta2
  + Features and enhancements:
  * AccessControl: Document new permissions restricting data
    source access.
  * TimePicker: Add fiscal years and search to time picker.
  * Alerting: Added support for Unified Alerting with Grafana HA.
  * Alerting: Added support for tune rule evaluation using
    configuration options.
  * Alerting: Cleanups alertmanager namespace from key-value
    store when disabling Grafana 8 alerts.
  * Alerting: Remove ngalert feature toggle and introduce two new
    settings for enabling Grafana 8 alerts and disabling them for
    specific organisations.
  * CloudWatch: Introduced new math expression where it is
    necessary to specify the period field.
  * InfluxDB: Added support for $__interval and $__interval_ms in
    Flux queries for alerting.
  * InfluxDB: Flux queries can use more precise start and end
    timestamps with nanosecond-precision.
  * Plugins Catalog: Make the catalog the default way to interact
    with plugins.
  * Prometheus: Removed autocomplete limit for metrics.
  + Bug fixes:
  * Alerting: Fixed an issue where the edit page crashes if you
    tried to preview an alert without a condition set.
  * Alerting: Fixed rules migration to keep existing Grafana 8
    alert rules.
  * Alerting: Fixed the silence file content generated during
    migration.
  * Analytics: Fixed an issue related to interaction event
    propagation in Azure Application Insights.
  * BarGauge: Fixed an issue where the cell color was lit even
    though there was no data.
  * BarGauge: Improved handling of streaming data.
  * CloudMonitoring: Fixed INT64 label unmarshal error.
  * ConfirmModal: Fixes confirm button focus on modal open.
  * Dashboard: Add option to generate short URL for variables
    with values containing spaces.
  * Explore: No longer hides errors containing refId property.
  * Fixed an issue that produced State timeline panel tooltip
    error when data was not in sync.
  * InfluxDB: InfluxQL query editor is set to always use
    resultFormat.
  * Loki: Fixed creating context query for logs with parsed
    labels.
  * PageToolbar: Fixed alignment of titles.
  * Plugins Catalog: Update to the list of available panels after
    an install, update or uninstall.
  * TimeSeries: Fixed an issue where the shared cursor was not
    showing when hovering over in old Graph panel.
  * Variables: Fixed issues related to change of focus or refresh
    pages when pressing enter in a text box variable input.
  * Variables: Panel no longer crash when using the adhoc
    variable in data links.
- Update to version 8.2.0-beta1
  + Features and enhancements:
  * AccessControl: Introduce new permissions to restrict access
    for reloading provisioning configuration.
  * Alerting: Add UI to edit Cortex/Loki namespace, group names,
    and group evaluation interval.
  * Alerting: Add a Test button to test contact point.
  * Alerting: Allow creating/editing recording rules for Loki and
    Cortex.
  * Alerting: Metrics should have the label org instead of user.
  * Alerting: Sort notification channels by name to make them
    easier to locate.
  * Alerting: Support org level isolation of notification
    configuration.
  * AzureMonitor: Add data links to deep link to Azure Portal
    Azure Resource Graph.
  * AzureMonitor: Add support for annotations from Azure Monitor
    Metrics and Azure Resource Graph services.
  * AzureMonitor: Show error message when subscriptions request
    fails in ConfigEditor.
  * Chore: Update to Golang 1.16.7.
  * CloudWatch Logs: Add link to X-Ray data source for trace IDs
    in logs.
  * CloudWatch Logs: Disable query path using websockets (Live)
    feature.
  * CloudWatch/Logs: Don't group dataframes for non time series
    queries.
  * Cloudwatch: Migrate queries that use multiple stats to one
    query per stat.
  * Dashboard: Keep live timeseries moving left (v2).
  * Datasources: Introduce response_limit for datasource
    responses.
  * Explore: Add filter by trace or span ID to trace to logs
    feature.
  * Explore: Download traces as JSON in Explore Inspector.
  * Explore: Reuse Dashboard's QueryRows component.
  * Explore: Support custom display label for derived fields
    buttons for Loki datasource.
  * Grafana UI: Update monaco-related dependencies.
  * Graphite: Deprecate browser access mode.
  * InfluxDB: Improve handling of intervals in alerting.
  * InfluxDB: InfluxQL query editor: Handle unusual characters in
    tag values better.
  * Jaeger: Add ability to upload JSON file for trace data.
  * LibraryElements: Enable specifying UID for new and existing
    library elements.
  * LibraryPanels: Remove library panel icon from the panel
    header so you can no longer tell that a panel is a library
    panel from the dashboard view.
  * Logs panel: Scroll to the bottom on page refresh when sorting
    in ascending order.
  * Loki: Add fuzzy search to label browser.
  * Navigation: Implement active state for items in the Sidemenu.
  * Packaging: Add stricter systemd unit options.
  * Packaging: Update PID file location from /var/run to /run.
  * Plugins: Add Hide OAuth Forward config option.
  * Postgres/MySQL/MSSQL: Add setting to limit the maximum number
    of rows processed.
  * Prometheus: Add browser access mode deprecation warning.
  * Prometheus: Add interpolation for built-in-time variables to
    backend.
  * Tempo: Add ability to upload trace data in JSON format.
  * TimeSeries/XYChart: Allow grid lines visibility control in
    XYChart and TimeSeries panels.
  * Transformations: Convert field types to time string number or
    boolean.
  * Value mappings: Add regular-expression based value mapping.
  * Zipkin: Add ability to upload trace JSON.
  + Bug fixes:
  * Admin: Prevent user from deleting user's current/active
    organization.
  * LibraryPanels: Fix library panel getting saved in the
    dashboard's folder.
  * OAuth: Make generic teams URL and JMES path configurable.
  * QueryEditor: Fix broken copy-paste for mouse middle-click
  * Thresholds: Fix undefined color in "Add threshold".
  * Timeseries: Add wide-to-long, and fix multi-frame output.
  * TooltipPlugin: Fix behavior of Shared Crosshair when Tooltip
    is set to All.
  + Plugin development fixes &amp; changes:
  * Grafana UI: Fix TS error property css is missing in type.
- Update to version 8.1.8
  + Security: Fixes CVE-2021-43798.
- Update to version 8.1.7
  + Bug fixes:
  * Alerting: Fix alerts with evaluation interval more than 30
    seconds resolving before notification.
  * Elasticsearch/Prometheus: Fix usage of proper SigV4 service
    namespace.
- Update to version 8.1.6
  + Security: Fixes CVE-2021-39226.
- Update to version 8.1.5
  + Bug fixes:
  * BarChart: Fixes panel error that happens on second refresh.
- Update to version 8.1.4
  + Features and enhancements
  * Explore: Ensure logs volume bar colors match legend colors.
  * LDAP: Search all DNs for users.
  + Bug fixes:
  * Alerting: Fix notification channel migration.
  * Annotations: Fix blank panels for queries with unknown data
    sources.
  * BarChart: Fix stale values and x axis labels.
  * Graph: Make old graph panel thresholds work even if ngalert
    is enabled.
  * InfluxDB: Fix regex to identify / as separator.
  * LibraryPanels: Fix update issues related to library panels in
    rows.
  * Variables: Fix variables not updating inside a Panel when the
    preceding Row uses "Repeat For".
- Update to version 8.1.3
  + Bug fixes
  * Alerting: Fix alert flapping in the internal alertmanager.
  * Alerting: Fix request handler failed to convert dataframe
    "results" to plugins.DataTimeSeriesSlice: input frame is not
    recognized as a time series.
  * Dashboard: Fix UIDs are not preserved when importing/creating
    dashboards thru importing .json file.
  * Dashboard: Forces panel re-render when exiting panel edit.
  * Dashboard: Prevent folder from changing when navigating to
    general settings.
  * Docker: Force use of libcrypto1.1 and libssl1.1 versions to
    fix CVE-2021-3711.
  * Elasticsearch: Fix metric names for alert queries.
  * Elasticsearch: Limit Histogram field parameter to numeric
    values.
  * Elasticsearch: Prevent pipeline aggregations to show up in
    terms order by options.
  * LibraryPanels: Prevent duplicate repeated panels from being
    created.
  * Loki: Fix ad-hoc filter in dashboard when used with parser.
  * Plugins: Track signed files + add warn log for plugin assets
    which are not signed.
  * Postgres/MySQL/MSSQL: Fix region annotations not displayed
    correctly.
  * Prometheus: Fix validate selector in metrics browser.
  * Security: Fix stylesheet injection vulnerability.
  * Security: Fix short URL vulnerability.
- Update to version 8.1.2
  + Features and enhancements:
  * AzureMonitor: Add support for PostgreSQL and MySQL Flexible
    Servers.
  * Datasource: Change HTTP status code for failed datasource
    health check to 400.
  * Explore: Add span duration to left panel in trace viewer.
  * Plugins: Use file extension allowlist when serving plugin
    assets instead of checking for UNIX executable.
  * Profiling: Add support for binding pprof server to custom
    network interfaces.
  * Search: Make search icon keyboard navigable.
  * Template variables: Keyboard navigation improvements.
  * Tooltip: Display ms within minute time range.
  + Bug fixes:
  * Alerting: Fix saving LINE contact point.
  * Annotations: Fix alerting annotation coloring.
  * Annotations: Alert annotations are now visible in the correct
    Panel.
  * Auth: Hide SigV4 config UI and disable middleware when its
    config flag is disabled.
  * Dashboard: Prevent incorrect panel layout by comparing window
    width against theme breakpoints.
  * Elasticsearch: Fix metric names for alert queries.
  * Explore: Fix showing of full log context.
  * PanelEdit: Fix 'Actual' size by passing the correct panel
    size to Dashboard.
  * Plugins: Fix TLS datasource settings.
  * Variables: Fix issue with empty drop downs on navigation.
  * Variables: Fix URL util converting false into true.
  + Plugin development fixes &amp; changes:
  * Toolkit: Fix matchMedia not found error.
- Update to version 8.1.1
  + Bug fixes:
  * CloudWatch Logs: Fix crash when no region is selected.
- Update to version 8.1.0
  + Features and enhancements:
  * Alerting: Deduplicate receivers during migration.
  * ColorPicker: Display colors as RGBA.
  * Select: Make portalling the menu opt-in, but opt-in
    everywhere.
  * TimeRangePicker: Improve accessibility.
  + Bug fixes:
  * Annotations: Correct annotations that are displayed upon page
    refresh.
  * Annotations: Fix Enabled button that disappeared from Grafana
    v8.0.6.
  * Annotations: Fix data source template variable that was not
    available for annotations.
  * AzureMonitor: Fix annotations query editor that does not
    load.
  * Geomap: Fix scale calculations.
  * GraphNG: Fix y-axis autosizing.
  * Live: Display stream rate and fix duplicate channels in list
    response.
  * Loki: Update labels in log browser when time range changes in
    dashboard.
  * NGAlert: Send resolve signal to alertmanager on alerting -&gt;
    Normal.
  * PasswordField: Prevent a password from being displayed when
    you click the Enter button.
  * Renderer: Remove debug.log file when Grafana is stopped.
  * Security: Update dependencies to fix CVE-2021-36222.
- Update to version 8.1.0-beta3
  + Features and enhancements:
  * Alerting: Support label matcher syntax in alert rule list
    filter.
  * IconButton: Put tooltip text as aria-label.
  * Live: Experimental HA with Redis.
  * UI: FileDropzone component.
  * CloudWatch: Add AWS LookoutMetrics.
  + Bug fixes:
  * Docker: Fix builds by delaying go mod verify until all
    required files are copied over.
  * Exemplars: Fix disable exemplars only on the query that
    failed.
  * SQL: Fix SQL dataframe resampling (fill mode + time
    intervals).
- Update to version 8.1.0-beta2
  + Features and enhancements:
  * Alerting: Expand the value string in alert annotations and
    labels.
  * Auth: Add Azure HTTP authentication middleware.
  * Auth: Auth: Pass user role when using the authentication
    proxy.
  * Gazetteer: Update countries.json file to allow for linking to
    3-letter country codes.
  + Bug fixes:
  * Config: Fix Docker builds by correcting formatting in
    sample.ini.
  * Explore: Fix encoding of internal URLs.
- Update to version 8.1.0-beta1
  + Features and enhancements:
  * Alerting: Add Alertmanager notifications tab.
  * Alerting: Add button to deactivate current Alertmanager
    configuration.
  * Alerting: Add toggle in Loki/Prometheus data source
    configuration to opt out of alerting UI.
  * Alerting: Allow any "evaluate for" value &gt;=0 in the alert
    rule form.
  * Alerting: Load default configuration from status endpoint, if
    Cortex Alertmanager returns empty user configuration.
  * Alerting: view to display alert rule and its underlying data.
  * Annotation panel: Release the annotation panel.
  * Annotations: Add typeahead support for tags in built-in
    annotations.
  * AzureMonitor: Add curated dashboards for Azure services.
  * AzureMonitor: Add support for deep links to Microsoft Azure
    portal for Metrics.
  * AzureMonitor: Remove support for different credentials for
    Azure Monitor Logs.
  * AzureMonitor: Support querying any Resource for Logs queries.
  * Elasticsearch: Add frozen indices search support.
  * Elasticsearch: Name fields after template variables values
    instead of their name.
  * Elasticsearch: add rate aggregation.
  * Email: Allow configuration of content types for email
    notifications.
  * Explore: Add more meta information when line limit is hit.
  * Explore: UI improvements to trace view.
  * FieldOverrides: Added support to change display name in an
    override field and have it be matched by a later rule.
  * HTTP Client: Introduce dataproxy_max_idle_connections config
    variable.
  * InfluxDB: InfluxQL: adds tags to timeseries data.
  * InfluxDB: InfluxQL: make measurement search case insensitive.
    Legacy Alerting: Replace simplejson with a struct in webhook
    notification channel.
  * Legend: Updates display name for Last (not null) to just
    Last*.
  * Logs panel: Add option to show common labels.
  * Loki: Add $__range variable.
  * Loki: Add support for "label_values(log stream selector,
    label)" in templating.
  * Loki: Add support for ad-hoc filtering in dashboard.
  * MySQL Datasource: Add timezone parameter.
  * NodeGraph: Show gradient fields in legend.
  * PanelOptions: Don't mutate panel options/field config object
    when updating.
  * PieChart: Make pie gradient more subtle to match other
    charts.
  * Prometheus: Update PromQL typeahead and highlighting.
  * Prometheus: interpolate variable for step field.
  * Provisioning: Improve validation by validating across all
    dashboard providers.
  * SQL Datasources: Allow multiple string/labels columns with
    time series.
  * Select: Portal select menu to document.body.
  * Team Sync: Add group mapping to support team sync in the
    Generic OAuth provider.
  * Tooltip: Make active series more noticeable.
  * Tracing: Add support to configure trace to logs start and end
    time.
  * Transformations: Skip merge when there is only a single data
    frame.
  * ValueMapping: Added support for mapping text to color,
    boolean values, NaN and Null. Improved UI for value mapping.
  * Visualizations: Dynamically set any config (min, max, unit,
    color, thresholds) from query results.
  * live: Add support to handle origin without a value for the
    port when matching with root_url.
  + Bug fixes:
  * Alerting: Handle marshaling Inf values.
  * AzureMonitor: Fix macro resolution for template variables.
  * AzureMonitor: Fix queries with Microsoft.NetApp/../../volumes
    resources.
  * AzureMonitor: Request and concat subsequent resource pages.
  * Bug: Fix parse duration for day.
  * Datasources: Improve error handling for error messages.
  * Explore: Correct the functionality of shift-enter shortcut
    across all uses.
  * Explore: Show all dataFrames in data tab in Inspector.
  * GraphNG: Fix Tooltip mode 'All' for XYChart.
  * Loki: Fix highlight of logs when using filter expressions
    with backticks.
  * Modal: Force modal content to overflow with scroll.
  * Plugins: Ignore symlinked folders when verifying plugin
    signature.
  + Plugin development fixes &amp; changes:
  * Toolkit: Improve error messages when tasks fail.
- Update to version 8.0.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.0.6
  + Features and enhancements:
  * Alerting: Add annotation upon alert state change.
  * Alerting: Allow space in label and annotation names.
  * InfluxDB: Improve legend labels for InfluxDB query results.
  + Bug fixes:
  * Alerting: Fix improper alert by changing the handling of
    empty labels.
  * CloudWatch/Logs: Reestablish Cloud Watch alert behavior.
  * Dashboard: Avoid migration breaking on fieldConfig without
    defaults field in folded panel.
  * DashboardList: Fix issue not re-fetching dashboard list after
    variable change.
  * Database: Fix incorrect format of isolation level
    configuration parameter for MySQL.
  * InfluxDB: Correct tag filtering on InfluxDB data.
  * Links: Fix links that caused a full page reload.
  * Live: Fix HTTP error when InfluxDB metrics have an incomplete
    or asymmetrical field set.
  * Postgres/MySQL/MSSQL: Change time field to "Time" for time
    series queries.
  * Postgres: Fix the handling of a null return value in query
    results.
  * Tempo: Show hex strings instead of uints for IDs.
  * TimeSeries: Improve tooltip positioning when tooltip
    overflows.
  * Transformations: Add 'prepare time series' transformer.
- Update to version 8.0.5
  + Features and enhancements:
  * Cloudwatch Logs: Send error down to client.
  * Folders: Return 409 Conflict status when folder already
    exists.
  * TimeSeries: Do not show series in tooltip if it's hidden in
    the viz.
  + Bug fixes:
  * AzureMonitor: Fix issue where resource group name is missing
    on the resource picker button.
  * Chore: Fix AWS auth assuming role with workspace IAM.
  * DashboardQueryRunner: Fixes unrestrained subscriptions being
    created.
  * DateFormats: Fix reading correct setting key for
    use_browser_locale.
  * Links: Fix links to other apps outside Grafana when under sub
    path.
  * Snapshots: Fix snapshot absolute time range issue.
  * Table: Fix data link color.
  * Time Series: Fix X-axis time format when tick increment is
    larger than a year.
  * Tooltip Plugin: Prevent tooltip render if field is undefined.
- Update to version 8.0.4
  + Features and enhancements:
  * Live: Rely on app url for origin check.
  * PieChart: Sort legend descending, update placeholder.
  * TimeSeries panel: Do not reinitialize plot when thresholds
    mode change.
  + Bug fixes:
  * Elasticsearch: Allow case sensitive custom options in
    date_histogram interval.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * Explore: Fix import of queries between SQL data sources.
  * InfluxDB: InfluxQL query editor: fix retention policy
    handling.
  * Loki: Send correct time range in template variable queries.
  * TimeSeries: Preserve RegExp series overrides when migrating
    from old graph panel.
- Update to version 8.0.3
  + Features and enhancements:
  * Alerting: Increase alertmanager_conf column if MySQL.
  * Time series/Bar chart panel: Handle infinite numbers as nulls
    when converting to plot array.
  * TimeSeries: Ensure series overrides that contain color are
    migrated, and migrate the previous fieldConfig when changing
    the panel type.
  * ValueMappings: Improve singlestat value mappings migration.
  + Bug fixes:
  * Annotations: Fix annotation line and marker colors.
  * AzureMonitor: Fix KQL template variable queries without
    default workspace.
  * CloudWatch/Logs: Fix missing response data for log queries.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * LibraryPanels: Fix crash in library panels list when panel
    plugin is not found.
  * LogsPanel: Fix performance drop when moving logs panel in
    dashboard.
  * Loki: Parse log levels when ANSI coloring is enabled.
  * MSSQL: Fix issue with hidden queries still being executed.
  * PanelEdit: Display the VisualizationPicker that was not
    displayed if a panel has an unknown panel plugin.
  * Plugins: Fix loading symbolically linked plugins.
  * Prometheus: Fix issue where legend name was replaced with
    name Value in stat and gauge panels.
  * State Timeline: Fix crash when hovering over panel.
- Update to version 8.0.2
  + Features and enhancements:
  * Datasource: Add support for max_conns_per_host in dataproxy
    settings.
  + Bug fixes:
  * Configuration: Fix changing org preferences in FireFox.
  * PieChart: Fix legend dimension limits.
  * Postgres/MySQL/MSSQL: Fix panic in concurrent map writes.
  * Variables: Hide default data source if missing from regex.
- Update to version 8.0.1
  + Bug fixes:
  * Alerting/SSE: Fix "count_non_null" reducer validation.
  * Cloudwatch: Fix duplicated time series.
  * Cloudwatch: Fix missing defaultRegion.
  * Dashboard: Fix Dashboard init failed error on dashboards with
    old singlestat panels in collapsed rows.
  * Datasource: Fix storing timeout option as numeric.
  * Postgres/MySQL/MSSQL: Fix annotation parsing for empty
    responses.
  * Postgres/MySQL/MSSQL: Numeric/non-string values are now
    returned from query variables.
  * Postgres: Fix an error that was thrown when the annotation
    query did not return any results.
  * StatPanel: Fix an issue with the appearance of the graph when
    switching color mode.
  * Visualizations: Fix an issue in the
    Stat/BarGauge/Gauge/PieChart panels where all values mode
    were showing the same name if they had the same value.
  + Plugin development fixes &amp; changes:
  * Toolkit: Resolve external fonts when Grafana is served from a
    sub path.
- Update to version 8.0.0
  + Breaking changes:
  * The following endpoints were deprecated for Grafana v5.0 and
    support for them has now been removed:
    GET /dashboards/db/:slug
    GET /dashboard-solo/db/:slug
    GET /api/dashboard/db/:slug
    DELETE /api/dashboards/db/:slug
  + Features and enhancements:
  * AzureMonitor: Require default subscription for workspaces()
    template variable query.
  * AzureMonitor: Use resource type display names in the UI.
  * Dashboard: Remove support for loading and deleting dashboard
    by slug.
  * InfluxDB: Deprecate direct browser access in data source.
  * VizLegend: Add a read-only property.
  + Bug fixes:
  * AzureMonitor: Fix Azure Resource Graph queries in Azure
    China.
  * Checkbox: Fix vertical layout issue with checkboxes due to
    fixed height.
  * Dashboard: Fix Table view when editing causes the panel data
    to not update.
  * Dashboard: Fix issues where unsaved-changes warning is not
    displayed.
  * Login: Fixes Unauthorized message showing when on login page
    or snapshot page.
  * NodeGraph: Fix sorting markers in grid view.
  * Short URL: Include orgId in generated short URLs.
  * Variables: Support raw values of boolean type.
- Update to version 8.0.0-beta3
  + Breaking changes:
  * The default HTTP method for Prometheus data source is now
    POST.
  + Features and enhancements:
  * API: Support folder UID in dashboards API.
  * Alerting: Add support for configuring avatar URL for the
    Discord notifier.
  * Alerting: Clarify that Threema Gateway Alerts support only
    Basic IDs.
  * Azure: Expose Azure settings to external plugins.
  * AzureMonitor: Deprecate using separate credentials for Azure
    Monitor Logs.
  * AzureMonitor: Display variables in resource picker for Azure
    Monitor Logs.
  * AzureMonitor: Hide application insights for data sources not
    using it.
  * AzureMonitor: Support querying subscriptions and resource
    groups in Azure Monitor Logs.
  * AzureMonitor: remove requirement for default subscription.
  * CloudWatch: Add Lambda@Edge Amazon CloudFront metrics.
  * CloudWatch: Add missing AWS AppSync metrics.
  * ConfirmModal: Auto focus delete button.
  * Explore: Add caching for queries that are run from logs
    navigation.
  * Loki: Add formatting for annotations.
  * Loki: Bring back processed bytes as meta information.
  * NodeGraph: Display node graph collapsed by default with trace
    view.
  * Overrides: Include a manual override option to hide something
    from visualization.
  * PieChart: Support row data in pie charts.
  * Prometheus: Update default HTTP method to POST for existing
    data sources.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  + Bug fixes:
  * Admin: Fix infinite loading edit on the profile page.
  * Color: Fix issues with random colors in string and date
    fields.
  * Dashboard: Fix issue with title or folder change has no
    effect after exiting settings view.
  * DataLinks: Fix an issue __series.name is not working in data
    link.
  * Datasource: Fix dataproxy timeout should always be applied
    for outgoing data source HTTP requests.
  * Elasticsearch: Fix NewClient not passing httpClientProvider
    to client impl.
  * Explore: Fix Browser title not updated on Navigation to
    Explore.
  * GraphNG: Remove fieldName and hideInLegend properties from
    UPlotSeriesBuilder.
  * OAuth: Fix fallback to auto_assign_org_role setting for Azure
    AD OAuth when no role claims exists.
  * PanelChrome: Fix issue with empty panel after adding a non
    data panel and coming back from panel edit.
  * StatPanel: Fix data link tooltip not showing for single
    value.
  * Table: Fix sorting for number fields.
  * Table: Have text underline for datalink, and add support for
    image datalink.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  * Transformations: Prevent FilterByValue transform from
    crashing panel edit.
- Update to version 8.0.0-beta2
  + Features and enhancements:
  * AppPlugins: Expose react-router to apps.
  * AzureMonitor: Add Azure Resource Graph.
  * AzureMonitor: Managed Identity configuration UI.
  * AzureMonitor: Token provider with support for Managed
    Identities.
  * AzureMonitor: Update Logs workspace() template variable query
    to return resource URIs.
  * BarChart: Value label sizing.
  * CloudMonitoring: Add support for preprocessing.
  * CloudWatch: Add AWS/EFS StorageBytes metric.
  * CloudWatch: Allow use of missing AWS namespaces using custom
    metrics.
  * Datasource: Shared HTTP client provider for core backend data
    sources and any data source using the data source proxy.
  * InfluxDB: InfluxQL: allow empty tag values in the query
    editor.
  * Instrumentation: Instrument incoming HTTP request with
    histograms by default.
  * Library Panels: Add name endpoint &amp; unique name validation to
    AddLibraryPanelModal.
  * Logs panel: Support details view.
  * PieChart: Always show the calculation options dropdown in the
    editor.
  * PieChart: Remove beta flag.
  * Plugins: Enforce signing for all plugins.
  * Plugins: Remove support for deprecated backend plugin
    protocol version.
  * Tempo/Jaeger: Add better display name to legend.
  * Timeline: Add time range zoom.
  * Timeline: Adds opacity &amp; line width option.
  * Timeline: Value text alignment option.
  * ValueMappings: Add duplicate action, and disable dismiss on
    backdrop click.
  * Zipkin: Add node graph view to trace response.
  + Bug fixes:
  * Annotations panel: Remove subpath from dashboard links.
  * Content Security Policy: Allow all image sources by default.
  * Content Security Policy: Relax default template wrt. loading
    of scripts, due to nonces not working.
  * Datasource: Fix tracing propagation for alert execution by
    introducing HTTP client outgoing tracing middleware.
  * InfluxDB: InfluxQL always apply time interval end.
  * Library Panels: Fixes "error while loading library panels".
  * NewsPanel: Fixes rendering issue in Safari.
  * PanelChrome: Fix queries being issued again when scrolling in
    and out of view.
  * Plugins: Fix Azure token provider cache panic and auth param
    nil value.
  * Snapshots: Fix key and deleteKey being ignored when creating
    an external snapshot.
  * Table: Fix issue with cell border not showing with colored
    background cells.
  * Table: Makes tooltip scrollable for long JSON values.
  * TimeSeries: Fix for Connected null values threshold toggle
    during panel editing.
  * Variables: Fixes inconsistent selected states on dashboard
    load.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * QueryField: Remove carriage return character from pasted text.
- Update to version 8.0.0-beta1
  + License update:
  * AGPL License: Update license from Apache 2.0 to the GNU
    Affero General Public License (AGPL).
  + Breaking changes:
  * Removes the never refresh option for Query variables.
  * Removes the experimental Tags feature for Variables.
  + Deprecations:
  * The InfoBox &amp; FeatureInfoBox are now deprecated please use
    the Alert component instead with severity info.
  + Features and enhancements:
  * API: Add org users with pagination.
  * API: Return 404 when deleting nonexistent API key.
  * API: Return query results as JSON rather than base64 encoded
    Arrow.
  * Alerting: Allow sending notification tags to Opsgenie as
    extra properties.
  * Alerts: Replaces all uses of InfoBox &amp; FeatureInfoBox with
    Alert.
  * Auth: Add support for JWT Authentication.
  * AzureMonitor: Add support for
    Microsoft.SignalRService/SignalR metrics.
  * AzureMonitor: Azure settings in Grafana server config.
  * AzureMonitor: Migrate Metrics query editor to React.
  * BarChart panel: enable series toggling via legend.
  * BarChart panel: Adds support for Tooltip in BarChartPanel.
  * PieChart panel: Change look of highlighted pie slices.
  * CloudMonitoring: Migrate config editor from angular to react.
  * CloudWatch: Add Amplify Console metrics and dimensions.
  * CloudWatch: Add missing Redshift metrics to CloudWatch data
    source.
  * CloudWatch: Add metrics for managed RabbitMQ service.
  * DashboardList: Enable templating on search tag input.
  * Datasource config: correctly remove single custom http
    header.
  * Elasticsearch: Add generic support for template variables.
  * Elasticsearch: Allow omitting field when metric supports
    inline script.
  * Elasticsearch: Allow setting a custom limit for log queries.
  * Elasticsearch: Guess field type from first non-empty value.
  * Elasticsearch: Use application/x-ndjson content type for
    multisearch requests.
  * Elasticsearch: Use semver strings to identify ES version.
  * Explore: Add logs navigation to request more logs.
  * Explore: Map Graphite queries to Loki.
  * Explore: Scroll split panes in Explore independently.
  * Explore: Wrap each panel in separate error boundary.
  * FieldDisplay: Smarter naming of stat values when visualising
    row values (all values) in stat panels.
  * Graphite: Expand metric names for variables.
  * Graphite: Handle unknown Graphite functions without breaking
    the visual editor.
  * Graphite: Show graphite functions descriptions.
  * Graphite: Support request cancellation properly (Uses new
    backendSrv.fetch Observable request API).
  * InfluxDB: Flux: Improve handling of complex
    response-structures.
  * InfluxDB: Support region annotations.
  * Inspector: Download logs for manual processing.
  * Jaeger: Add node graph view for trace.
  * Jaeger: Search traces.
  * Loki: Use data source settings for alerting queries.
  * NodeGraph: Exploration mode.
  * OAuth: Add support for empty scopes.
  * PanelChrome: New logic-less emotion based component with no
    dependency on PanelModel or DashboardModel.
  * PanelEdit: Adds a table view toggle to quickly view data in
    table form.
  * PanelEdit: Highlight matched words when searching options.
  * PanelEdit: UX improvements.
  * Plugins: PanelRenderer and simplified QueryRunner to be used
    from plugins.
  * Plugins: AuthType in route configuration and params
    interpolation.
  * Plugins: Enable plugin runtime install/uninstall
    capabilities.
  * Plugins: Support set body content in plugin routes.
  * Plugins: Introduce marketplace app.
  * Plugins: Moving the DataSourcePicker to grafana/runtime so it
    can be reused in plugins.
  * Prometheus: Add custom query params for alert and exemplars
    queries.
  * Prometheus: Use fuzzy string matching to autocomplete metric
    names and label.
  * Routing: Replace Angular routing with react-router.
  * Slack: Use chat.postMessage API by default.
  * Tempo: Search for Traces by querying Loki directly from
    Tempo.
  * Tempo: Show graph view of the trace.
  * Themes: Switch theme without reload using global shortcut.
  * TimeSeries panel: Add support for shared cursor.
  * TimeSeries panel: Do not crash the panel if there is no time
    series data in the response.
  * Variables: Do not save repeated panels, rows and scopedVars.
  * Variables: Removes experimental Tags feature.
  * Variables: Removes the never refresh option.
  * Visualizations: Unify tooltip options across visualizations.
  * Visualizations: Refactor and unify option creation between
    new visualizations.
  * Visualizations: Remove singlestat panel.
  + Bug fixes:
  * APIKeys: Fixes issue with adding first api key.
  * Alerting: Add checks for non supported units - disable
    defaulting to seconds.
  * Alerting: Fix issue where Slack notifications won't link to
    user IDs.
  * Alerting: Omit empty message in PagerDuty notifier.
  * AzureMonitor: Fix migration error from older versions of App
    Insights queries.
  * CloudWatch: Fix AWS/Connect dimensions.
  * CloudWatch: Fix broken AWS/MediaTailor dimension name.
  * Dashboards: Allow string manipulation as advanced variable
    format option.
  * DataLinks: Includes harmless extended characters like
    Cyrillic characters.
  * Drawer: Fixes title overflowing its container.
  * Explore: Fix issue when some query errors were not shown.
  * Generic OAuth: Prevent adding duplicated users.
  * Graphite: Handle invalid annotations.
  * Graphite: Fix autocomplete when tags are not available.
  * InfluxDB: Fix Cannot read property 'length' of undefined in
    when parsing response.
  * Instrumentation: Enable tracing when Jaeger host and port are
    set.
  * Instrumentation: Prefix metrics with grafana.
  * MSSQL: By default let driver choose port.
  * OAuth: Add optional strict parsing of role_attribute_path.
  * Panel: Fixes description markdown with inline code being
    rendered on newlines and full width.
  * PanelChrome: Ignore data updates &amp; errors for non data
    panels.
  * Permissions: Fix inherited folder permissions can prevent new
    permissions being added to a dashboard.
  * Plugins: Remove pre-existing plugin installs when installing
    with grafana-cli.
  * Plugins: Support installing to folders with whitespace and
    fix pluginUrl trailing and leading whitespace failures.
  * Postgres/MySQL/MSSQL: Don't return connection failure details
    to the client.
  * Postgres: Fix ms precision of interval in time group macro
    when TimescaleDB is enabled.
  * Provisioning: Use dashboard checksum field as change
    indicator.
  * SQL: Fix so that all captured errors are returned from sql
    engine.
  * Shortcuts: Fixes panel shortcuts so they always work.
  * Table: Fixes so border is visible for cells with links.
  * Variables: Clear query when data source type changes.
  * Variables: Filters out builtin variables from unknown list.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * Button: Introduce buttonStyle prop.
  * DataQueryRequest: Remove deprecated props showingGraph and
    showingTabel and exploreMode.
  * grafana/ui: Update React Hook Form to v7.
  * IconButton: Introduce variant for red and blue icon buttons.
  * Plugins: Expose the getTimeZone function to be able to get
    the current selected timeZone.
  * TagsInput: Add className to TagsInput.
  * VizLegend: Move onSeriesColorChanged to PanelContext
    (breaking change).
- Update to version 7.5.13
  + Bug fixes:
  * Alerting: Fix NoDataFound for alert rules using AND operator.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1644408000">- Update to version 8.3.5 (jsc#SLE-23439, jsc#SLE-23422)
  + Security:
  * Fixes XSS vulnerability in handling data sources
    (bsc#1195726, CVE-2022-21702)
  * Fixes cross-origin request forgery vulnerability
    (bsc#1195727, CVE-2022-21703)
  * Fixes Insecure Direct Object Reference vulnerability in Teams
    API (bsc#1195728, CVE-2022-21713)</changelog>
</package>
<package pkgid="7ba17dbe5f051d60f264a8583b0087fefc293251c2c69477889e9a00c71f58ed" name="grafana" arch="ppc64le">
  <version epoch="0" ver="8.3.5" rel="150200.3.21.1"/>
  <changelog author="egotthold@suse.com" date="1589457600">- Add instructions for patching the Grafana javascript frontend.</changelog>
  <changelog author="jcavalheiro@suse.com" date="1590321600">- Update to version 7.0.0
  * Breaking changes
  - Removed PhantomJS: PhantomJS was deprecated in Grafana v6.4 and starting from Grafana v7.0.0, all PhantomJS support has been removed. This means that Grafana no longer ships with a built-in image renderer, and we advise you to install the Grafana Image Renderer plugin.
  - Dashboard: A global minimum dashboard refresh interval is now enforced and defaults to 5 seconds.
  - Interval calculation: There is now a new option Max data points that controls the auto interval $__interval calculation. Interval was previously calculated by dividing the panel width by the time range. With the new max data points option it is now easy to set $__interval to a dynamic value that is time range agnostic. For example if you set Max data points to 10 Grafana will dynamically set $__interval by dividing the current time range by 10.
  - Datasource/Loki: Support for deprecated Loki endpoints has been removed.
  - Backend plugins: Grafana now requires backend plugins to be signed, otherwise Grafana will not load/start them. This is an additional security measure to make sure backend plugin binaries and files haven't been tampered with. Refer to Upgrade Grafana for more information.
  - @grafana/ui: Forms migration notice, see @grafana/ui changelog
  - @grafana/ui: Select API change for creating custom values, see @grafana/ui changelog
    + Deprecation warnings
  - Scripted dashboards is now deprecated. The feature is not removed but will be in a future release. We hope to address the underlying requirement of dynamic dashboards in a different way. #24059
  - The unofficial first version of backend plugins together with usage of grafana/grafana-plugin-model is now deprecated and support for that will be removed in a future release. Please refer to backend plugins documentation for information about the new officially supported backend plugins.
  * Features / Enhancements
  - Backend plugins: Log deprecation warning when using the unofficial first version of backend plugins. #24675, @marefr
  - Editor: New line on Enter, run query on Shift+Enter. #24654, @davkal
  - Loki: Allow multiple derived fields with the same name. #24437, @aocenas
  - Orgs: Add future deprecation notice. #24502, @torkelo
  * Bug Fixes
  - @grafana/toolkit: Use process.cwd() instead of PWD to get directory. #24677, @zoltanbedi
  - Admin: Makes long settings values line break in settings page. #24559, @hugohaggmark
  - Dashboard: Allow editing provisioned dashboard JSON and add confirmation when JSON is copied to dashboard. #24680, @dprokop
  - Dashboard: Fix for strange "dashboard not found" errors when opening links in dashboard settings. #24416, @torkelo
  - Dashboard: Fix so default data source is selected when data source can't be found in panel editor. #24526, @mckn
  - Dashboard: Fixed issue changing a panel from transparent back to normal in panel editor. #24483, @torkelo
  - Dashboard: Make header names reflect the field name when exporting to CSV file from the the panel inspector. #24624, @peterholmberg
  - Dashboard: Make sure side pane is displayed with tabs by default in panel editor. #24636, @dprokop
  - Data source: Fix query/annotation help content formatting. #24687, @AgnesToulet
  - Data source: Fixes async mount errors. #24579, @Estrax
  - Data source: Fixes saving a data source without failure when URL doesn't specify a protocol. #24497, @aknuds1
  - Explore/Prometheus: Show results of instant queries only in table. #24508, @ivanahuckova
  - Explore: Fix rendering of react query editors. #24593, @ivanahuckova
  - Explore: Fixes loading more logs in logs context view. #24135, @Estrax
  - Graphite: Fix schema and dedupe strategy in rollup indicators for Metrictank queries. #24685, @torkelo
  - Graphite: Makes query annotations work again. #24556, @hugohaggmark
  - Logs: Clicking "Load more" from context overlay doesn't expand log row. #24299, @kaydelaney
  - Logs: Fix total bytes process calculation. #24691, @davkal
  - Org/user/team preferences: Fixes so UI Theme can be set back to Default. #24628, @AgnesToulet
  - Plugins: Fix manifest validation. #24573, @aknuds1
  - Provisioning: Use proxy as default access mode in provisioning. #24669, @bergquist
  - Search: Fix select item when pressing enter and Grafana is served using a sub path. #24634, @tskarhed
  - Search: Save folder expanded state. #24496, @Clarity-89
  - Security: Tag value sanitization fix in OpenTSDB data source. #24539, @rotemreiss
  - Table: Do not include angular options in options when switching from angular panel. #24684, @torkelo
  - Table: Fixed persisting column resize for time series fields. #24505, @torkelo
  - Table: Fixes Cannot read property subRows of null. #24578, @hugohaggmark
  - Time picker: Fixed so you can enter a relative range in the time picker without being converted to absolute range. #24534, @mckn
  - Transformations: Make transform dropdowns not cropped. #24615, @dprokop
  - Transformations: Sort order should be preserved as entered by user when using the reduce transformation. #24494, @hugohaggmark
  - Units: Adds scale symbol for currencies with suffixed symbol. #24678, @hugohaggmark
  - Variables: Fixes filtering options with more than 1000 entries. #24614, @hugohaggmark
  - Variables: Fixes so Textbox variables read value from url. #24623, @hugohaggmark
  - Zipkin: Fix error when span contains remoteEndpoint. #24524, @aocenas
  - SAML: Switch from email to login for user login attribute mapping (Enterprise)
- Update Makefile and spec file
  * Remove phantomJS patch from Makefile
  * Fix multiline strings in Makefile
  * Exclude s390 from SLE12 builds, golang 1.14 is not built for s390</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591012800">- Update to version 7.0.1
  * Features / Enhancements
  - Datasource/CloudWatch: Makes CloudWatch Logs query history more readable. #24795, @kaydelaney
  - Download CSV: Add date and time formatting. #24992, @ryantxu
  - Table: Make last cell value visible when right aligned. #24921, @peterholmberg
  - TablePanel: Adding sort order persistance. #24705, @torkelo
  - Transformations: Display correct field name when using reduce transformation. #25068, @peterholmberg
  - Transformations: Allow custom number input for binary operations. #24752, @ryantxu
  * Bug fixes
  - Dashboard/Links: Fixes dashboard links by tags not working. #24773, @KamalGalrani
  - Dashboard/Links: Fixes open in new window for dashboard link. #24772, @KamalGalrani
  - Dashboard/Links: Variables are resolved and limits to 100. #25076, @hugohaggmark
  - DataLinks: Bring back variables interpolation in title. #24970, @dprokop
  - Datasource/CloudWatch: Field suggestions no longer limited to prefix-only. #24855, @kaydelaney
  - Explore/Table: Keep existing field types if possible. #24944, @kaydelaney
  - Explore: Fix wrap lines toggle for results of queries with filter expression. #24915, @ivanahuckova
  - Explore: fix undo in query editor. #24797, @zoltanbedi
  - Explore: fix word break in type head info. #25014, @zoltanbedi
  - Graph: Legend decimals now work as expected. #24931, @torkelo
  - LoginPage: Fix hover color for service buttons. #25009, @tskarhed
  - LogsPanel: Fix scrollbar. #24850, @ivanahuckova
  - MoveDashboard: Fix for moving dashboard caused all variables to be lost. #25005, @torkelo
  - Organize transformer: Use display name in field order comparer. #24984, @dprokop
  - Panel: shows correct panel menu items in view mode. #24912, @hugohaggmark
  - PanelEditor Fix missing labels and description if there is only single option in category. #24905, @dprokop
  - PanelEditor: Overrides name matcher still show all original field names even after Field default display name is specified. #24933, @torkelo
  - PanelInspector: Makes sure Data display options are visible. #24902, @hugohaggmark
  - PanelInspector: Hides unsupported data display options for Panel type. #24918, @hugohaggmark
  - PanelMenu: Make menu disappear on button press. #25015, @tskarhed
  - Postgres: Fix add button. #25087, @phemmer
  - Prometheus: Fix recording rules expansion. #24977, @ivanahuckova
  - Stackdriver: Fix creating Service Level Objectives (SLO) datasource query variable. #25023, @papagian</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591358400">- Update to version 7.0.3
  * Features / Enhancements
  - Stats: include all fields. #24829, @ryantxu
  - Variables: change VariableEditorList row action Icon to IconButton. #25217, @hshoff
  * Bug fixes
  - Cloudwatch: Fix dimensions of DDoSProtection. #25317, @papagian
  - Configuration: Fix env var override of sections containing hyphen. #25178, @marefr
  - Dashboard: Get panels in collapsed rows. #25079, @peterholmberg
  - Do not show alerts tab when alerting is disabled. #25285, @dprokop
  - Jaeger: fixes cascader option label duration value. #25129, @Estrax
  - Transformations: Fixed Transform tab crash &amp; no update after adding first transform. #25152, @torkelo
- Update to version 7.0.2
  * Bug fixes
  - Security: Urgent security patch release to fix CVE-2020-13379</changelog>
  <changelog author="jcavalheiro@suse.com" date="1600430400">- Update to version 7.1.5:
  * Features / Enhancements
  - Stats: Stop counting the same user multiple times.
  - Field overrides: Filter by field name using regex.
  - AzureMonitor: map more units.
  - Explore: Don't run queries on datasource change.
  - Graph: Support setting field unit &amp; override data source (automatic) unit.
  - Explore: Unification of logs/metrics/traces user interface
  - Table: JSON Cell should try to convert strings to JSON
  - Variables: enables cancel for slow query variables queries.
  - TimeZone: unify the time zone pickers to one that can rule them all.
  - Search: support URL query params.
  - Grafana-UI: Add FileUpload.
  - TablePanel: Sort numbers correctly.
  * Bug fixes
  - Alerting: remove LongToWide call in alerting.
  - AzureMonitor: fix panic introduced in 7.1.4 when unit was unspecified and alias was used.
  - Variables: Fixes issue with All variable not being resolved.
  - Templating: Fixes so texts show in picker not the values.
  - Templating: Templating: Fix undefined result when using raw interpolation format
  - TextPanel: Fix content overflowing panel boundaries.
  - StatPanel: Fix stat panel display name not showing when explicitly set.
  - Query history: Fix search filtering if null value.
  - Flux: Ensure connections to InfluxDB are closed.
  - Dashboard: Fix for viewer can enter panel edit mode by modifying url (but cannot not save anything).
  - Prometheus: Fix prom links in mixed mode.
  - Sign In Use correct url for the Sign In button.
  - StatPanel: Fixes issue with name showing for single series / field results
  - BarGauge: Fix space bug in single series mode.
  - Auth: Fix POST request failures with anonymous access
  - Templating: Fix recursive loop of template variable queries when changing ad-hoc-variable
  - Templating: Fixed recursive queries triggered when switching dashboard settings view
  - GraphPanel: Fix annotations overflowing panels.
  - Prometheus: Fix performance issue in processing of histogram labels.
  - Datasources: Handle URL parsing error.
  - Security: Use Header.Set and Header.Del for X-Grafana-User header.
  * Changes in spec file
  - Fix golang version = 1.14 to avoid dependency conflicts on some OBS projects</changelog>
  <changelog author="witold.bedyk@suse.com" date="1604577600">- Update to version 7.3.1:
  * Breaking changes
  - CloudWatch: The AWS CloudWatch data source's authentication scheme has changed. See the upgrade notes for details and how this may affect you.
  - Units: The date time units `YYYY-MM-DD HH:mm:ss` and `MM/DD/YYYY h:mm:ss a` have been renamed to `Datetime ISO` and `Datetime US` respectively.
  * Features / Enhancements
  - AzureMonitor: Support decimal (as float64) type in analytics/logs.
  - Add monitoring mixing for Grafana.
  - CloudWatch: Missing Namespace AWS/EC2CapacityReservations.
  - CloudWatch: Add support for AWS DirectConnect virtual interface metrics and add missing dimensions.
  - CloudWatch: Adding support for Amazon ElastiCache Redis metrics.
  - CloudWatch: Adding support for additional Amazon CloudFront metrics.
  - CloudWatch: Re-implement authentication.
  - Elasticsearch: Support multiple pipeline aggregations for a query.
  - Prometheus: Add time range parameters to labels API.
  - Loki: Visually distinguish error logs for LogQL2.
  - Api: Add /healthz endpoint for health checks.
  - API: Enrich add user to org endpoints with user ID in the response.
  - API: Enrich responses and improve error handling for alerting API endpoints.
  - Elasticsearch: Add support for date_nanos type.
  - Elasticsearch: Allow fields starting with underscore.
  - Elasticsearch: Increase maximum geohash aggregation precision to 12.
  - Postgres: Support request cancellation properly (Uses new backendSrv.fetch Observable request API).
  - Provisioning: Remove provisioned dashboards without parental reader.
  - API: Return ID of the deleted resource for dashboard, datasource and folder DELETE endpoints.
  - API: Support paging in the admin orgs list API.
  - API: return resource ID for auth key creation, folder permissions update and user invite complete endpoints.
  - BackendSrv: Uses credentials, deprecates withCredentials &amp; defaults to same-origin.
  - CloudWatch: Update list of AmazonMQ metrics and dimensions.
  - Cloudwatch: Add Support for external ID in assume role.
  - Cloudwatch: Add af-south-1 region.
  - DateFormats: Default ISO &amp; US formats never omit date part even if date is today (breaking change).
  - Explore: Transform prometheus query to elasticsearch query.
  - InfluxDB/Flux: Increase series limit for Flux datasource.
  - InfluxDB: exclude result and table column from Flux table results.
  - InfluxDB: return a table rather than an error when timeseries is missing time.
  - Loki: Add scopedVars support in legend formatting for repeated variables.
  - Loki: Re-introduce running of instant queries.
  - Loki: Support request cancellation properly (Uses new backendSrv.fetch Observable request API).
  - MixedDatasource: Shows retrieved data even if a data source fails.
  - Postgres: Support Unix socket for host.
  - Prometheus: Add scopedVars support in legend formatting for repeated variables.
  - Prometheus: Support request cancellation properly (Uses new backendSrv.fetch Observable request API).
  - Prometheus: add $__rate_interval variable.
  - Table: Adds column filtering.
  - grafana-cli: Add ability to read password from stdin to reset admin password.</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update packaging
  * avoid systemd and shadow hard requirements
  * Require the user from a new dedicated 'system-user-grafana' sibling package
  * avoid pinning to a specific Go version in the spec file</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- Update to version 7.3.6:
  * fixes for saml vulnerability
  * [v7.3.x] Fix: Correct panel edit uistate migration (#29413) (#29711)
  * PanelEdit: Prevent the preview pane to be resized further than window height (#28370) (#29726)
  * Fix: Migrate Panel edit uiState percentage strings to number (#29412) (#29723)
  * "Release: Updated versions in package to 7.3.5" (#29710)
  * Chore: upgrading y18n to 4.0.1 for security reasons (#29523) (#29709)
  * Panel: making sure we support all versions of chrome when detecting position of click event. (#29544) (#29708)
  * PanelEdit: making sure the correct datasource query editor is being rendered. (#29500) (#29707)
  * [v7.3.x] Auth: Add SigV4 header allowlist to reduce chances of verification issues (#29705)
  * Alerting: Use correct time series name override from frame fields (#29693) (#29698)
  * CloudWatch: namespace in search expression should be quoted if match exact is enabled #29109 (#29563) (#29687)
  * Adds go dep used by an Enterprise feature.  (#29645) (#29690)
  * instrumentation: align label name with our other projects (#29514) (#29685)
  * Instrumentation: Add examplars for request histograms (#29357) (#29682)
  * Login: Fixes typo in tooltip (#29604) (#29606)
  * fixes bug with invalid handler name for metrics (#29529) (#29532)
  * AzureMonitor: Unit MilliSeconds naming (#29399) (#29526)
  * Alarting: fix alarm messages in dingding (Fixes #29470) (#29482) (#29527)
  * Bug: trace viewer doesn't show more than 300 spans (#29377) (#29504)
  * Prometheus: don't override displayName property (#29441) (#29488)
  * resolve conflicts (#29415)
  * Drone: Upgrade build pipeline tool (#29365) (#29368)
  * Drone: Upload artifacts for release branch builds (#29297) (#29364)
  * Drone: Execute artifact publishing for both editions in parallel during release (#29362) (#29363)
  * Drone: Publish NPM packages after Storybook to avoid race condition (#29340) (#29343)
  * Docs: Fix editor role and alert notification channel description (#29301) (#29337)
  * "Release: Updated versions in package to 7.3.4" (#29336)
  * Security: Fixes minor security issue with alert notification webhooks that allowed GET &amp; DELETE requests #29330 (#29335)
  * Backport of InfluxDB: update flux library and support boolean label values #29333
  * ReleaseNotes: Update link in package.json (#29328)
  * Login: Fixes redirect url encoding issues of # %23 being unencoded after login (#29299) (#29323)
  * Drone: Upgrade build pipeline tool (#29308) (#29309)
  * Annotations: fixing so when changing annotations query links submenu will be updated. (#28990) (#29285)
  * Dashboard: Fixes kiosk state after being redirected to login page and back (#29273) (#29278)
  * Increase search limit on team add user and improve placeholder (#29258) (#29261)
  * Drone: Sync with master (#29205)
  * Drone: Fix publish-packages invocation (#29179) (#29184)
  * Chore: Upgrade grafana/build-ci-deploy image to latest Go (#29171) (#29180)
  * Table: Fix incorrect condtition for rendering table filter (#29165) (#29181)
  * DashboardLinks: will only refresh dashboard search when changing tags for link. (#29040) (#29177)
  * Drone: Upgrade build pipeline tool and build image (#29161) (#29162)
  * Release: Updated versions in package to 7.3.3 (#29126)
  * git cherry-pick -x 0f3bebb38daa488e108881ce17d4f68167a834e6 (#29155)
  * Build: support custom build tags (#28609) (#29128)
  * Revert "Graph: Fixes stacking issues like floating bars when data is not aligned  (#29051) (#29088)" (#29151)
  * Provisioning: always pin app to the sidebar when enabled (#29084) (#29146)
  * build paths in an os independent way (#29143) (#29147)
  * Chore: Upgrade Go dev tools (#29124) (#29132)
  * Automatin: set node version
  * Automation: Adding version bump action
  * Drone: Fix Drone config verification for enterprise on Windows (#29118) (#29119)
  * [v7.3.x] Drone: Verify Drone config at beginning of pipelines (#29111)
  * Test Datasource/Bug: Fixes division by zero in csv metric values scenario (#29029) (#29068)
  * [v7.3.x] StatPanel: Fixes hanging issue when all values are zero (#29087)
  * Data source proxy: Convert 401 from data source to 400 (#28962) (#29095)
  * Graph: Fixes stacking issues like floating bars when data is not aligned  (#29051) (#29088)
  * Auth: Enable more complete credential chain for SigV4 default SDK auth option (#29065) (#29086)
  * Fix for multi-value template variable for project selector (#29042) (#29054)
  * Thresholds: Fixes color assigned to null values (#29010) (#29018)
  * [v7.3.x] Chore: Bump build pipeline version (#29025)
  * Release v7.3.2 (#29024)
  * Fix conflict (#29020)
  * StatPanels: Fixes auto min max when latest value is zero (#28982) (#29007)
  * Tracing: Add setting for sampling server (#29011) (#29015)
  * Gauge: making sure threshold panel json is correct before render (#28898) (#28984)
  * Variables: make sure that we support both old and new syntax for custom variables. (#28896) (#28985)
  * Explore: Remove redundant decodeURI and fix urls (#28697) (#28963)
  * [v7.3.x] Drone: Fix docs building (#28987)
  * Alerting: Append appSubUrl to back button on channel form (#28282) (#28983)
  * Plugins: allow override when allowing unsigned plugins (#28901) (#28927)
  * CloudWatch Logs: Change what we use to measure progress (#28912) (#28964)
  * Tracing: log traceID in request logger (#28952) (#28959)
  * Panel inspect: Interpolate variables in panel inspect title (#28779) (#28801)
  * UsageStats: start tracking usage stats for tempo (#28948) (#28951)
  * Short URL: Cleanup unvisited/stale short URLs (#28867) (#28944)
  * Plugins signing: Fix docs urls (#28930) (#28934)
  * Chore: Fix spelling issue (#28904) (#28925)
  * API: replace SendLoginLogCommand with LoginHook (#28777) (#28891)
  * Elasticsearch: Exclude pipeline aggregations from order by options (#28620) (#28873)
  * Dashboards / Folders: delete related data (permissions, stars, tags, versions, annotations) when deleting a dashboard or a folder (#28826) (#28890)
  * Disable selecting enterprise plugins with no license (#28758) (#28859)
  * Tempo: fix test data source (#28836) (#28856)
  * Prometheus: fix missing labels from value (#28842) (#28855)
  * Units: added support to handle negative fractional numbers. (#28849) (#28851)
  * increase blob column size for encrypted dashboard data (#28831) (#28832)
  * Gauge: Improve font size auto sizing (#28797) (#28828)
  * Variables: Fixes URL values for dependent variables (#28798) (#28800)
  * grafana/toolkit: Extract CHANGELOG when building plugin (#28773) (#28774)
  * Templating: Custom variable edit UI, change text input into textarea  (#28312) (#28322) (#28704)
  * Cloudwatch: Fix issue with field calculation transform not working properly with Cloudwatch data (#28761) (#28775)
  * Plugin page: Fix dom validation warning (#28737) (#28741)
  * Dashboard: fix view panel mode for Safari / iOS (#28702) (#28755)
  * Fix typo in unsigned plugin warning (#28709) (#28722)
  * TableFilters: Fixes filtering with field overrides (#28690) (#28727)
  * Templating: Speeds up certain variable queries for Postgres, MySql and MSSql (#28686) (#28726)
  * Prometheus: Fix copy paste behaving as cut and paste (#28622) (#28691)</changelog>
  <changelog author="tserong@suse.com" date="1613563200">- Update to version 7.4.1:
  * "Release: Updated versions in package to 7.4.1" (#31128)
  * Transforms: Fixes Outer join issue with duplicate field names not getting the same unique field names as before  (#31121) (#31127)
  * MuxWriter: Handle error for already closed file (#31119) (#31120)
  * Logging: sourcemap transform asset urls from CDN in logged stacktraces (#31115) (#31117)
  * Exemplars: Change CTA style (#30880) (#31105)
  * test: add support for timeout to be passed in for addDatasource (#30736) (#31090)
  * Influx: Make max series limit configurable and show the limiting message if applied (#31025) (#31100)
  * Elasticsearch: fix log row context erroring out (#31088) (#31094)
  * test: update addDashboard flow for v7.4.0 changes (#31059) (#31084)
  * Usage stats: Adds source/distributor setting (#31039) (#31076)
  * DashboardLinks: Fixes crash when link has no title (#31008) (#31050)
  * Make value mappings correctly interpret numeric-like strings (#30893) (#30912)
  * Elasticsearch: Fix alias field value not being shown in query editor (#30992) (#31037)
  * BarGauge: Improvements to value sizing and table inner width calculations  (#30990) (#31032)
  * convert path to posix by default (#31045) (#31053)
  * Alerting: Fixes so notification channels are properly deleted (#31040) (#31046)
  * Drone: Fix deployment image (#31027) (#31029)
  * Graph: Fixes so graph is shown for non numeric time values (#30972) (#31014)
  * instrumentation: make the first database histogram bucket smaller (#30995) (#31001)
  * Build: Releases e2e and e2e-selectors too (#31006) (#31007)
  * TextPanel: Fixes so panel title is updated when variables change (#30884) (#31005)
  * StatPanel: Fixes issue formatting date values using unit option (#30979) (#30991)
  * Units: Fixes formatting of duration units (#30982) (#30986)
  * Elasticsearch: Show Size setting for raw_data metric (#30980) (#30983)
  * Logging: sourcemap support for frontend stacktraces (#30590) (#30976)
  * e2e: extends selector factory to plugins (#30932) (#30934)
  * Variables: Adds queryparam formatting option (#30858) (#30924)
  * Exemplars: change api to reflect latest changes (#30910) (#30915)
  * "Release: Updated versions in package to 7.4.0" (#30898)
  * DataSourceSettings: Adds info box and link to Grafana Cloud (#30891) (#30896)
  * GrafanaUI: Add a way to persistently close InfoBox (#30716) (#30895)
  * [7.4.x] AlertingNG: List saved Alert definitions in Alert Rule list (30890)(30603)
  * Alerting: Fixes alert panel header icon not showing (#30840) (#30885)
  * Plugins: Requests validator (#30445) (#30877)
  * PanelLibrary: Adds library panel meta information to dashboard json (#30770) (#30883)
  * bump grabpl version to 0.5.36 (#30874) (#30878)
  * Chore: remove __debug_bin (#30725) (#30857)
  * Grafana-ui: fixes closing modals with escape key (#30745) (#30873)
  * DashboardLinks: Support variable expression in to tooltip - Issue #30409 (#30569) (#30852)
  * Add alt text to plugin logos (#30710) (#30872)
  * InfluxDB: Add http configuration when selecting InfluxDB v2 flavor  (#30827) (#30870)
  * Prometheus: Set type of labels to string (#30831) (#30835)
  * AlertingNG: change API permissions (#30781) (#30814)
  * Grafana-ui: fixes no data message in Table component (#30821) (#30855)
  * Prometheus: Add tooltip to explain possibility to use patterns in text and title fields in annotations (#30825) (#30843)
  * Chore: add more docs annotations (#30847) (#30851)
  * BarChart: inside-align strokes, upgrade uPlot to 1.6.4. (#30806) (#30846)
  * Transforms: allow boolean in field calculations (#30802) (#30845)
  * CDN: Fixes cdn path when Grafana is under sub path (#30822) (#30823)
  * bump cypress to 6.3.0 (#30644) (#30819)
  * Expressions: Measure total transformation requests and elapsed time (#30514) (#30789)
  * Grafana-UI: Add story/docs for ErrorBoundary (#30304) (#30811)
  * [v7.4.x]: Menu: Mark menu components as internal (#30801)
  * Graph: Fixes auto decimals issue in legend and tooltip (#30628) (#30635)
  * GraphNG: Disable Plot logging by default (#30390) (#30500)
  * Storybook: Migrate card story to use controls  (#30535) (#30549)
  * GraphNG: add bar alignment option (#30499) (#30790)
  * Variables: Clears drop down state when leaving dashboard (#30810) (#30812)
  * Add missing callback dependency (#30797) (#30809)
  * GraphNG: improve behavior when switching between solid/dash/dots (#30796) (#30799)
  * Add width for Variable Editors (#30791) (#30795)
  * Panels: Fixes so panels are refreshed when scrolling past them fast (#30784) (#30792)
  * PanelEdit: Trigger refresh when changing data source (#30744) (#30767)
  * AlertingNG: Enable UI to Save Alert Definitions (#30394) (#30548)
  * CDN: Fix passing correct prefix to GetContentDeliveryURL (#30777) (#30779)
  * CDN: Adds support for serving assets over a CDN (#30691) (#30776)
  * Explore: Update styling of buttons (#30493) (#30508)
  * Loki: Append refId to logs uid (#30418) (#30537)
  * skip symlinks to directories when generating plugin manifest (#30721) (#30738)
  * Mobile: Fixes issue scrolling on mobile in chrome (#30746) (#30750)
  * BarChart: add alpha bar chart panel (#30323) (#30754)
  * Datasource: Use json-iterator configuration compatible with standard library (#30732) (#30739)
  * Variables: Fixes so text format will show All instead of custom all (#30730) (#30731)
  * AlertingNG: pause/unpause definitions via the API (#30627) (#30672)
  * PanelLibrary: better handling of deleted panels (#30709) (#30726)
  * Transform: improve the "outer join" performance/behavior (#30407) (#30722)
  * DashboardPicker: switch to promise-based debounce, return dashboard UID (#30706) (#30714)
  * Use connected GraphNG in Explore (#30707) (#30708)
  * PanelLibrary: changes casing of responses and adds meta property (#30668) (#30711)
  * DeployImage: Switch base images to Debian (#30684) (#30699)
  * Trace: trace to logs design update (#30637) (#30702)
  * Influx: Show all datapoints for dynamically windowed flux query (#30688) (#30703)
  * ci(npm-publish): add missing github package token to env vars (#30665) (#30673)
  * Loki: Improve live tailing errors and fix Explore's logs container type errors (#30517) (#30681)
  * Grafana-UI: Fix setting default value for MultiSelect (#30671) (#30687)
  * Explore: Fix jumpy live tailing (#30650) (#30677)
  * Docs: Refer to product docs in whats new for alerting templating feature (#30652) (#30670)
  * Variables: Fixes display value when using capture groups in regex (#30636) (#30661)
  * Docs: Fix expressions enabled description (#30589) (#30651)
  * Licensing Docs: Adding license restrictions docs (#30216) (#30648)
  * DashboardSettings: fixes vertical scrolling (#30640) (#30643)
  * chore: bump redux toolkit to 1.5.0 for immer 8.0.1 vulnerability fix (#30605) (#30631)
  * Explore: Fix loading visualisation on the top of the new time series panel (#30553) (#30557)
  * Footer: Fixes layout issue in footer  (#30443) (#30494)
  * Variables: Fixes so queries work for numbers values too (#30602) (#30624)
  * Admin: Fixes so form values are filled in from backend (#30544) (#30623)
  * Docs: Update 7.4 What's New to use more correct description of alerting notification template feature (#30502) (#30614)
  * NodeGraph: Add docs (#30504) (#30613)
  * Cloud Monitoring: Fix legend naming with display name override (#30440) (#30503)
  * Expressions: Add option to disable feature (#30541) (#30558)
  * OldGraph: Fix height issue in Firefox (#30565) (#30582)
  * XY Chart: fix editor error with empty frame (no fields) (#30573) (#30577)
  * XY Chart: share legend config with timeseries (#30559) (#30566)
  * DataFrame: cache frame/field index in field state (#30529) (#30560)
  * Prometheus: Fix show query instead of Value if no __name__ and metric (#30511) (#30556)
  * Decimals: Big Improvements to auto decimals and fixes to auto decimals bug found in 7.4-beta1  (#30519) (#30550)
  * chore: update packages dependent on dot-prop to fix security vulnerability (#30432) (#30487)
  * GraphNG: uPlot 1.6.3 (fix bands not filling below 0). close #30523. (#30527) (#30528)
  * GraphNG: uPlot 1.6.2 (#30521) (#30522)
  * Chore: Upgrade grabpl version (#30486) (#30513)
  * grafana/ui: Fix internal import from grafana/data (#30439) (#30507)
  * prevent field config from being overwritten (#30437) (#30442)
  * Chore: upgrade NPM security vulnerabilities (#30397) (#30495)
  * TimeSeriesPanel: Fixed default value for gradientMode (#30484) (#30492)
  * Admin: Fixes so whole org drop down is visible when adding users to org (#30481) (#30497)
  * Chore: adds wait to e2e test (#30488) (#30490)
  * Graph: Fixes so only users with correct permissions can add annotations (#30419) (#30466)
  * Alerting: Hides threshold handle for percentual thresholds (#30431) (#30467)
  * Timeseries: only migrage point size when configured (#30461) (#30470)
  * Expressions: Fix button icon (#30444) (#30450)
  * PanelModel: Make sure the angular options are passed to react panel type changed handler (#30441) (#30451)
  * Docs: Fix img link for alert notification template (#30436) (#30447)
  * Chore: Upgrade build pipeline tool (#30456) (#30457)
  * PanelOptions: Refactoring applying panel and field options out of PanelModel and add property clean up for properties not in field config registry  (#30389) (#30438)
  * "Release: Updated versions in package to 7.4.0-beta.1" (#30427)
  * Chore: Update what's new URL (#30423)
  * GraphNG: assume uPlot's series stroke is always a function (#30416)
  * PanelLibrary: adding library panels to Dashboard Api (#30278)
  * Prettier: Fixes to files that came in after main upgrade (#30410)
  * Cloud Monitoring: Add curated dashboards for the most popular GCP services (#29930)
  * Mssql integrated security (#30369)
  * Prettier: Upgrade to 2  (#30387)
  * GraphNG: sort ascending if the values appear reversed (#30405)
  * Docs: Grafana whats new 7.4 (#30404)
  * Dashboards: Adds cheat sheet toggle to supported query editors (#28857)
  * Docs: Update timeseries-dimensions.md (#30403)
  * Alerting: Evaluate data templating in alert rule name and message (#29908)
  * Docs: Add links to 7.3 patch release notes (#30292)
  * Docs: Update _index.md (#29546)
  * Docs: Update jaeger.md (#30401)
  * Expressions: Remove feature toggle (#30316)
  * Docs: Update tempo.md (#30399)
  * Docs: Update zipkin.md (#30400)
  * services/provisioning: Various cleanup (#30396)
  * DashboardSchemas: OpenAPI Schema Generation (#30242)
  * AlertingNG: Enforce unique alert definition title (non empty)/UID per organisation (#30380)
  * Licensing: Document new v7.4 options and APIs (#30217)
  * Auth: add expired token error and update CreateToken function (#30203)
  * NodeGraph: Add node graph visualization (#29706)
  * Add jwtTokenAuth to plugin metadata schema (#30346)
  * Plugins: Force POSIX style path separators for manifest generation (#30287)
  * Add enterprise reporting fonts to gitignore (#30385)
  * Field overrides: skipping overrides for properties no longer existing in plugin (#30197)
  * NgAlerting: View query result (#30218)
  * Grafana-UI: Make Card story public (#30388)
  * Dashboard: migrate version history list (#29970)
  * Search: use Card component (#29892)
  * PanelEvents: Isolate more for old angular query editors (#30379)
  * Loki: Remove showing of unique labels with the empty string value (#30363)
  * Chore: Lint all files for no-only-tests (#30364)
  * Clears errors after running new query (#30367)
  * Prometheus: Change exemplars endpoint (#30378)
  * Explore: Fix a bug where Typeahead crashes when a large amount of ite? (#29637)
  * Circular vector: improve generics (#30375)
  * Update signing docs (#30296)
  * Email: change the year in templates (#30294)
  * grafana/ui: export TLS auth component (#30320)
  * Query Editor: avoid word wrap (#30373)
  * Transforms: add sort by transformer (#30370)
  * AlertingNG: Save alert instances (#30223)
  * GraphNG: Color series from by value scheme &amp; change to fillGradient to gradientMode  (#29893)
  * Chore: Remove not used PanelOptionsGrid component (#30358)
  * Zipkin: Remove browser access mode (#30360)
  * Jaeger: Remove browser access mode (#30349)
  * chore: bump lodash to 4.17.20 (#30359)
  * ToolbarButton: New emotion based component to replace all navbar, DashNavButton and scss styles (#30333)
  * Badge: Increase contrast, remove rocket icon for plugin beta/alpha state (#30357)
  * Licensing: Send map of environment variables to plugins (#30347)
  * Dashboards: Exit to dashboard when deleting panel from panel view / edit view (#29032)
  * Cloud Monitoring: MQL support (#26551)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0-beta1 (#30348)
  * Panel options UI: Allow collapsible categories (#30301)
  * Grafana-ui: Fix context menu item always using onClick instead of href (#30350)
  * Badge: Design improvement &amp; reduce contrast (#30328)
  * make sure stats are added horizontally and not vertically (#30106)
  * Chore(deps): Bump google.golang.org/grpc from 1.33.1 to 1.35.0 (#30342)
  * Chore(deps): Bump github.com/stretchr/testify from 1.6.1 to 1.7.0 (#30341)
  * Chore(deps): Bump github.com/google/uuid from 1.1.2 to 1.1.5 (#30340)
  * Chore(deps): Bump github.com/hashicorp/go-version from 1.2.0 to 1.2.1 (#30339)
  * Fix HTML character entity error (#30334)
  * GraphNG: fix fillBelowTo regression (#30330)
  * GraphNG: implement softMin/softMax for auto-scaling stabilization. close #979. (#30326)
  * Legend: Fixes right y-axis legend from being pushed outside the bounds of the panel (#30327)
  * Grafana-toolkit: Update component generator templates (#30306)
  * Panels: remove beta flag from stat and bargauge panels (#30324)
  * GraphNG: support fill below to (bands) (#30268)
  * grafana-cli: Fix security issue (#28888)
  * AlertingNG: Modify queries and transform endpoint to get datasource UIDs (#30297)
  * Chore: Fix missing property from ExploreGraph (#30315)
  * Prometheus: Add support for Exemplars (#28057)
  * Grafana-UI: Enhances for TimeRangePicker and TimeRangeInput (#30102)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0 (#30312)
  * Table: Fixes BarGauge cell display mode font size so that it is fixed to the default cell font size (#30303)
  * AngularGraph: Fixes issues with legend wrapping after legend refactoring (#30283)
  * Plugins: Add Open Distro to the list of data sources supported by sigv4 (#30308)
  * Chore: Moves common and response into separate packages (#30298)
  * GraphNG: remove y-axis position control from series color picker in the legend (#30302)
  * Table: migrate old-table config to new table config (#30142)
  * Elasticsearch: Support extended stats and percentiles in terms order by (#28910)
  * Docs: Update release notes index
  * GraphNG: stats in legend (#30251)
  * Grafana UI: EmptySearchResult docs (#30281)
  * Plugins: Use the includes.path (if exists) on sidebar includes links (#30291)
  * Fix spinner and broken buttons (#30286)
  * Graph: Consider reverse sorted data points on isOutsideRange check (#30289)
  * Update getting-started.md (#30257)
  * Backend: use sdk version (v0.81.0) without transform (gel) code (#29236)
  * Chore: update latest versions to 7.3.7 (#30282)
  * Loki: Fix hiding of series in table if labels have number values (#30185)
  * Loki: Lower min step to 1ms (#30135)
  * Prometheus: Improve autocomplete performance and remove disabling of dynamic label lookup (#30199)
  * Icons: Adds custom icon support ands new panel and interpolation icons (#30277)
  * ReleaseNotes: Updated changelog and release notes for 7.3.7 (#30280)
  * Grafana-ui: Allow context menu items to be open in new tab (#30141)
  * Cloud Monitoring: Convert datasource to use Dataframes (#29830)
  * GraphNG: added support to change series color from legend. (#30256)
  * AzureMonitor: rename labels for query type dropdown (#30143)
  * Decimals: Improving auto decimals logic for high numbers and scaled units  (#30262)
  * Elasticsearch: Use minimum interval for alerts (#30049)
  * TimeSeriesPanel: The new graph panel now supports y-axis value mapping #30272
  * CODEOWNERS: Make backend squad owners of backend style guidelines (#30266)
  * Auth: Add missing request headers to SigV4 middleware allowlist (#30115)
  * Grafana-UI: Add story/docs for FilterPill (#30252)
  * Grafana-UI: Add story/docs for Counter (#30253)
  * Backend style guide: Document JSON guidelines (#30267)
  * GraphNG: uPlot 1.6, hide "Show points" in Points mode, enable "dot" lineStyle (#30263)
  * Docs: Update prometheus.md (#30240)
  * Docs: Cloudwatch filter should be JSON format (#30243)
  * API: Add by UID routes for data sources  (#29884)
  * Docs: Update datasource_permissions.md (#30255)
  * Cloudwatch: Move deep link creation to the backend (#30206)
  * Metrics API: Use jsoniter for JSON encoding (#30250)
  * Add option in database config to skip migrations for faster startup. (#30146)
  * Set signed in users email correctly (#30249)
  * Drone: Upgrade build pipeline tool (#30247)
  * runRequest: Fixes issue with request time range and time range returned to panels are off causing data points to be cut off (outside) (#30227)
  * Elasticsearch: fix handling of null values in query_builder (#30234)
  * Docs: help users connect to Prometheus using SigV4 (#30232)
  * Update documentation-markdown-guide.md (#30207)
  * Update documentation-markdown-guide.md (#30235)
  * Better logging of plugin scanning errors (#30231)
  * Print Node.js and Toolkit versions (#30230)
  * Chore: bump rollup across all packages (#29486)
  * Backend style guide: Document database patterns (#30219)
  * Chore: Bump plugin-ci-alpine Docker image version (#30225)
  * Legends: Refactoring and rewrites of legend components to simplify components &amp; reuse (#30165)
  * Use Node.js 14.x in plugin CI (#30209)
  * Field overrides: extracting the field config factory into its own reusable module. (#30214)
  * LibraryPanels: adds connections (#30212)
  * PanelOptionsGroups: Only restore styles from PanelOptionsGroup (#30215)
  * Variables: Add deprecation warning for value group tags (#30160)
  * GraphNG: Hide grid for right-y axis if left x-axis exists (#30195)
  * Middleware: Add CSP support (#29740)
  * Updated image links to have newer format. (#30208)
  * Docs: Update usage-insights.md (#30150)
  * Share panel dashboard add images (#30201)
  * Update documentation-style-guide.md (#30202)
  * Docs: Fix links to transforms (#30194)
  * docs(badge): migrate story to use controls (#30180)
  * Chore(deps): Bump github.com/prometheus/common from 0.14.0 to 0.15.0 (#30188)
  * Fix alert definition routine stop (#30117)
  * Chore(deps): Bump gopkg.in/square/go-jose.v2 from 2.4.1 to 2.5.1 (#30189)
  * InlineSwitch: Minor story fix (#30186)
  * Chore(deps): Bump github.com/gosimple/slug from 1.4.2 to 1.9.0 (#30178)
  * Chore(deps): Bump github.com/fatih/color from 1.9.0 to 1.10.0 (#30183)
  * Chore(deps): Bump github.com/lib/pq from 1.3.0 to 1.9.0 (#30181)
  * Chore(deps): Bump github.com/hashicorp/go-plugin from 1.2.2 to 1.4.0 (#30175)
  * Chore(deps): Bump github.com/getsentry/sentry-go from 0.7.0 to 0.9.0 (#30171)
  * Gauge: Fixes issue with all null values cause min &amp; max to be null (#30156)
  * Links: Add underline on hover for links in NewsPanel (#30166)
  * GraphNG: Update to test dashboards (#30153)
  * CleanUp: Removed old panel options group component (#30157)
  * AngularQueryEditors: Fixes to Graphite query editor and other who refer to other queries (#30154)
  * Chore(deps): Bump github.com/robfig/cron/v3 from 3.0.0 to 3.0.1 (#30172)
  * Chore(deps): Bump github.com/urfave/cli/v2 from 2.1.1 to 2.3.0 (#30173)
  * Chore: Fix spelling issue (#30168)
  * Revise README.md. (#30145)
  * Chore(deps): Bump github.com/mattn/go-sqlite3 from 1.11.0 to 1.14.6 (#30174)
  * InlineSwitch: Added missing InlineSwitch component and fixed two places that used unaligned inline switch (#30162)
  * GraphNG: add new alpha XY Chart  (#30096)
  * Elastic: Support request cancellation properly (Uses new backendSrv.fetch Observable request API) (#30009)
  * OpenTSDB: Support request cancellation properly (#29992)
  * InfluxDB: Update Flux external link (#30158)
  * Allow dependabot to keep go packages up-to-date (#30170)
  * PluginState: Update comment
  * GraphNG: Minor polish &amp; updates to new time series panel and move it from alpha to beta (#30163)
  * Share panel dashboard (#30147)
  * GraphNG: rename "graph3" to "timeseries" panel (#30123)
  * Add info about access mode (#30137)
  * Prometheus: Remove running of duplicated metrics query (#30108)
  * Prometheus: Fix autocomplete does not work on incomplete input (#29854)
  * GraphNG: remove graph2 panel (keep the parts needed for explore) (#30124)
  * Docs: Add metadata to activating licensing page (#30140)
  * MixedDataSource: Added missing variable support flag (#30110)
  * AngularPanels: Fixes issue with some panels not rendering when going into edit mode due to no height (#30113)
  * AngularPanels: Fixes issue with discrete panel that used the initialized event (#30133)
  * Explore: Make getFieldLinksForExplore more reusable (#30134)
  * Elasticsearch: Add Support for Serial Differencing Pipeline Aggregation (#28618)
  * Angular: Fixes issue with angular directive caused by angular upgrade in master (#30114)
  * Analytics: add data source type in data-request events (#30087)
  * GraphNG: "Interpolation: Step after" test (#30127)
  * GraphNG: check cross-axis presence when auto-padding. close #30121. (#30126)
  * Alerting: improve alerting default datasource search when extracting alerts (#29993)
  * Loki: Timeseries should not produce 0-values for missing data (#30116)
  * GraphNG: support dashes (#30070)
  * GraphNG: fix spanGaps optimization in alignDataFrames(). see #30101. (#30118)
  * Alerting NG: update API to expect UIDs instead of IDs (#29896)
  * GraphNG: Overhaul of main test dashboard and update to null &amp; gaps dashboard (#30101)
  * Chore: Fix intermittent time-related test failure in explore datasource instance update (#30109)
  * QueryEditorRow: Ability to change query name (#29779)
  * Frontend: Failed to load application files message improvement IE11 (#30011)
  * Drone: Upgrade build pipeline tool (#30104)
  * Fix phrasing. (#30075)
  * Chore: Add CloudWatch HTTP API tests (#29691)
  * Elastic: Fixes so templating queries work (#30003)
  * Chore: Rewrite elasticsearch client test to standard library (#30093)
  * Chore: Rewrite tsdb influxdb test to standard library (#30091)
  * Fix default maximum lifetime  an authenticated user can be logged in (#30030)
  * Instrumentation: re-enable database wrapper feature to expose counter and histogram for database queries (#29662)
  * Docs: Update labels to fields transform (#30086)
  * GraphNG: adding possibility to toggle tooltip, graph and legend for series (#29575)
  * Chore: Rewrite tsdb cloudmonitoring test to standard library (#30090)
  * Chore: Rewrite tsdb azuremonitor time grain test to standard library (#30089)
  * Chore: Rewrite tsdb graphite test to standard library (#30088)
  * Chore: Upgrade Docker build image wrt. Go/golangci-lint/Node (#30077)
  * Usage Stats: Calculate concurrent users as a histogram (#30006)
  * Elasticsearch: Fix broken alerting when using pipeline aggregations (#29903)
  * Drone: Fix race conditions between Enterprise and Enterprise2 (#30076)
  * Chore: Rewrite models datasource cache test to standard library (#30040)
  * Plugins: prevent app plugin from rendering with wrong location (#30017)
  * Update NOTICE.md
  * Chore: Tiny typo fix `rage` -&gt; `range` (#30067)
  * Docs: loki.md: Add example of Loki data source config (#29976)
  * ReleaseNotes: Updated changelog and release notes for 7.3.6 (#30066)
  * Docs: Update usage-insights.md (#30065)
  * Docs: Update white-labeling.md (#30064)
  * Chore(deps): Bump axios from 0.19.2 to 0.21.1 (#30059)
  * Chore: Rewrite models tags test to standard library (#30041)
  * Bump actions/setup-node from v1 to v2.1.4 (#29891)
  * Build(deps): Bump ini from 1.3.5 to 1.3.7 (#29787)
  * fall back to any architecture when getting plugin's checksum #30034 (#30035)
  * Lerna: Update to 3.22.1 (#30057)
  * SeriesToRows: Fixes issue in transform so that value field is always named Value (#30054)
  * [dashboard api] manage error when data in dashboard table is not valid json (#29999)
  * use sha256 checksum instead of md5 (#30018)
  * Chore: Rewrite brute force login protection test to standard library (#29986)
  * Chore: Rewrite login auth test to standard library (#29985)
  * Chore: Rewrite models dashboards test to standard library (#30023)
  * Chore: Rewrite models dashboard acl test to standard library (#30022)
  * Chore: Rewrite models alert test to standard library (#30021)
  * Chore: Rewrite ldap login test to standard library (#29998)
  * Chore: Rewrite grafana login test to standard library (#29997)
  * Fix two ini-file typos regarding LDAP (#29843)
  * Chore: Changes source map devtool to inline-source-map (#30004)
  * Chore: Sync Enterprise go.sum (#30005)
  * Chore: Add Enterprise dependencies (#29994)
  * SQLStore: customise the limit of retrieved datasources per organisation (#29358)
  * Chore: update crewjam/saml library to the latest master (#29991)
  * Graph: Fixes so users can not add annotations in readonly dash (#29990)
  * Currency: add Vietnamese dong (VND) (#29983)
  * Drone: Update pipelines for Enterprise (#29939)
  * Remove the bus from teamgroupsync (#29810)
  * Influx: Make variable query editor input uncontrolled (#29968)
  * PanelLibrary: Add PATCH to the API (#29956)
  * PanelEvents: Isolating angular panel events into it's own event bus + more event refactoring  (#29904)
  * Bump node-notifier from 8.0.0 to 8.0.1 (#29952)
  * LDAP: Update use_ssl documentation (#29964)
  * Docs: Missing 's' on 'logs' (#29966)
  * Docs: Update opentsdb.md (#29963)
  * Docs: Minor typo correction (#29962)
  * librarypanels: Fix JSON field casing in tests (#29954)
  * TemplateSrv: Do not throw  error for an unknown format but use glob as fallback and warn in the console (#29955)
  * PanelLibrary: Adds uid and renames title to name (#29944)
  * Docs: Fix raw format variable docs (#29945)
  * RedirectResponse: Implement all of api.Response (#29946)
  * PanelLibrary: Adds get and getAll to the api (#29772)
  * Chore: Remove duplicate interpolateString test (#29941)
  * Chore: Rewrite influxdb query parser test to standard library (#29940)
  * Folders: Removes the possibility to delete the General folder (#29902)
  * Chore: Convert tsdb request test to standard library (#29936)
  * Chore: Convert tsdb interval test to standard library (#29935)
  * Docs: Update configuration.md (#29912)
  * Docs: Update organization_roles.md (#29911)
  * Docs: Update _index.md (#29918)
  * GraphNG: bring back tooltip (#29910)
  * Ng Alerting: Remove scroll and fix SplitPane limiters (#29906)
  * Dashboard: Migrating dashboard settings to react (#27561)
  * Minor correction to explanation on correct MS SQL usage. (#29889)
  * AlertingNG: Create a scheduler to evaluate alert definitions (#29305)
  * Add changelog items for 7.3.6, 7.2.3 and 6.7.5 (#29901)
  * bump stable to 7.3.6 (#29899)
  * Upgrade go deps.  (#29900)
  * Expressions: Replace query input fields with select. (#29816)
  * PanelEdit: Update UI if panel plugin changes field config (#29898)
  * Elasticsearch: Remove timeSrv dependency (#29770)
  * PanelEdit: Need new data after plugin change (#29874)
  * Chore(toolkit): disable react/prop-types for eslint config (#29888)
  * Field Config API: Add ability to hide field option or disable it from the overrides (#29879)
  * SharedQuery: Fixes shared query editor now showing queries (#29849)
  * GraphNG: support fill gradient (#29765)
  * Backend style guide: Add more guidelines (#29871)
  * Keep query keys consistent (#29855)
  * Alerting: Copy frame field labels to time series tags (#29886)
  * Update configure-docker.md (#29883)
  * Usage Stats: Introduce an interface for usage stats service (#29882)
  * DataFrame: add a writable flag to fields (#29869)
  * InlineForms: Changes to make inline forms more flexible for query editors  (#29782)
  * Usage Stats: Allow to add additional metrics to the stats (#29774)
  * Fix the broken link of XORM documentation (#29865)
  * Move colors demo under theme colors (#29873)
  * Dashboard: Increase folder name size in search dashboard (#29821)
  * MSSQL: Config UI touches (#29834)
  * QueryOptions:  Open QueryEditors: run queries after changing group options #29864
  * GraphNG: uPlot 1.5.2, dynamic stroke/fill, Flot-style hover points (#29866)
  * Variables: Fixes so numerical sortorder works for options with null values (#29846)
  * GraphNG: only initialize path builders once (#29863)
  * GraphNG: Do not set fillColor from GraphNG only opacity (#29851)
  * add an example cloudwatch resource_arns() query that uses multiple tags (ref: #29499) (#29838)
  * Backend: Remove more globals (#29644)
  * MS SQL: Fix MS SQL add data source UI issues (#29832)
  * Display palette and colors for dark and light themes in storybook (#29848)
  * Docs: Fix broken link in logs-panel (#29833)
  * Docs: Add info about typing of connected props to Redux style guide (#29842)
  * Loki: Remove unnecessary deduplication (#29421)
  * Varibles: Fixes so clicking on Selected will not include All (#29844)
  * Explore/Logs: Correctly display newlines in detected fields (#29541)
  * Link suppliers: getLinks API update (#29757)
  * Select: Changes default menu placement for Select from auto to bottom (#29837)
  * Chore: Automatically infer types for dashgrid connected components  (#29818)
  * Chore: Remove unused Loki and Cloudwatch syntax providers  (#29686)
  * Pass row (#29839)
  * GraphNG: Context menu (#29745)
  * GraphNG: Enable scale distribution configuration (#29684)
  * Explore: Improve Explore performance but removing unnecessary re-renders (#29752)
  * DashboardDS: Fixes display of long queries (#29808)
  * Sparkline: Fixes issue with sparkline that sent in custom fillColor instead of fillOpacity (#29825)
  * Chore: Disable default golangci-lint filter (#29751)
  * Update style guide with correct usage of MS SQL (#29829)
  * QueryEditor: do not auto refresh on every update (#29762)
  * Chore: remove unused datasource status enum (#29827)
  * Expressions: support ${my var} syntax (#29819)
  * Docs: Update types-options.md (#29777)
  * Chore: Enable more go-ruleguard rules (#29781)
  * GraphNG: Load uPlot path builders lazily (#29813)
  * Elasticsearch: ensure query model has timeField configured in datasource settings (#29807)
  * Chore: Use Header.Set method instead of Header.Add (#29804)
  * Allow dependabot to check actions (#28159)
  * Grafana-UI: Support optgroup for MultiSelect (#29805)
  * Sliders: Update behavior and style tweak (#29795)
  * Grafana-ui: Fix collapsible children sizing (#29776)
  * Style guide: Document avoidance of globals in Go code (#29803)
  * Chore: Rewrite opentsdb test to standard library (#29792)
  * CloudWatch: Add support for AWS DirectConnect ConnectionErrorCount metric (#29583)
  * GraphNG: uPlot 1.5.1 (#29789)
  * GraphNG: update uPlot v1.5.0 (#29763)
  * Added httpMethod to webhook (#29780)
  * @grafana-runtime: Throw error if health check fails in DataSourceWithBackend (#29743)
  * Explore: Fix remounting of query row (#29771)
  * Expressions: Add placeholders to hint on input (#29773)
  * Alerting: Next gen Alerting page (#28397)
  * GraphNG: Add test dashboard for null &amp; and gaps rendering (#29769)
  * Expressions: Field names from refId (#29755)
  * Plugins: Add support for signature manifest V2 (#29240)
  * Chore: Configure go-ruleguard via golangci-lint (#28419)
  * Move middleware context handler logic to service (#29605)
  * AlertListPanel: Add options to sort by Time(asc) and Time(desc) (#29764)
  * PanelLibrary: Adds delete Api (#29741)
  * Tracing: Release trace to logs feature (#29443)
  * ReleaseNotes: Updated changelog and release notes for 7.3.5 (#29753)
  * DataSourceSettings: Add servername field to DataSource TLS config (#29279)
  * Chore: update stable and testing versions (#29748)
  * ReleaseNotes: Updated changelog and release notes for 7.3.5 (#29744)
  * Elasticsearch: View in context feature for logs (#28764)
  * Chore: Disable gosec on certain line (#29382)
  * Logging: log frontend errors caught by ErrorBoundary, including component stack (#29345)
  * ChangePassword: improved keyboard navigation (#29567)
  * GrafanaDataSource: Fix selecting -- Grafana -- data source, broken after recent changes (#29737)
  * Docs: added version note for rename by regex transformation. (#29735)
  * @grafana/ui: Fix UI issues for cascader button dropdown and query input (#29727)
  * Docs: Update configuration.md (#29728)
  * Docs: Remove survey (#29549)
  * Logging: rate limit fronted logging endpoint (#29272)
  * API: add Status() to RedirectResponse (#29722)
  * Elasticsearch: Deprecate browser access mode (#29649)
  * Elasticsearch: Fix query initialization action (#29652)
  * PanelLibrary: Adds api and db to create Library/Shared/Reusable Panel (#29642)
  * Transformer: Rename metrics based on regex (#29281)
  * Variables: Fixes upgrade of legacy Prometheus queries (#29704)
  * Auth: Add SigV4 header allowlist to reduce chances of verification issues (#29650)
  * DataFrame: add path and description metadata (#29695)
  * Alerting: Use correct time series name override from frame fields (#29693)
  * GraphNG: fix bars migration and support color and linewidth (#29697)
  * PanelHeader: Fix panel header description inline code wrapping (#29628)
  * Bugfix 29848: Remove annotation_tag entries as part of annotations cleanup (#29534)
  * GraphNG: simple settings migration from flot panel (#29599)
  * GraphNG: replace bizcharts with uPlot for sparklines (#29632)
  * GitHubActions: Update node version in github action (#29683)
  * Adds go dep used by an Enterprise feature.  (#29645)
  * Typescript: Raise strict error limit for enterprise (#29688)
  * Remove unnecessary escaping (#29677)
  * Update getting-started-prometheus.md (#29678)
  * instrumentation: align label name with our other projects (#29514)
  * Typescript: Fixing typescript strict error, and separate check from publishing (#29679)
  * CloudWatch: namespace in search expression should be quoted if match exact is enabled #29109 (#29563)
  * Docs: Plugin schema updates (#28232)
  * RadioButton: Fix flex issue in master for radio buttons (#29664)
  * Update getting-started.md (#29670)
  * Expr: fix time unit typo in ds queries (#29668)
  * Expr: make reduction nan/null more consistent (#29665)
  * Expr: fix func argument panic (#29663)
  * Update documentation-style-guide.md (#29661)
  * Update documentation-markdown-guide.md (#29659)
  * Docs: Changed image format (#29658)
  * Expr: fix failure to execute due to OrgID (#29653)
  * GraphNG: rename "points" to "showPoints" (#29635)
  * Expressions: Restore showing expression query editor even if main data source is not mixed (#29656)
  * GraphNG: time range should match the panel timeRange (#29596)
  * Support svg embedded favicons in whitelabeling (#29436)
  * Add changelog to docs style guide (#29581)
  * Loki: Retry web socket connection when connection is closed abnormally (#29438)
  * GraphNG: Fix annotations and exemplars plugins (#29613)
  * Chore: Rewrite tsdb sql engine test to standard library (#29590)
  * GraphNG: fix and optimize spanNulls (#29633)
  * Build(deps): Bump highlight.js from 10.4.0 to 10.4.1 (#29625)
  * Cloudwatch: session cache should use UTC consistently (#29627)
  * GraphNG: rename GraphMode to DrawStyle (#29623)
  * GraphNG: add spanNulls config option (#29512)
  * Docs: add docs for concatenate transformer (#28667)
  * Stat/Gauge: expose explicit font sizing (#29476)
  * GraphNG: add gaps/nulls support to staircase &amp; smooth interpolation modes (#29593)
  * grafana/ui: Migrate Field knobs to controls (#29433)
  * Prometheus: Fix link to Prometheus graph in dashboard (#29543)
  * Build: Publish next and latest npm channels to Github (#29615)
  * Update broken aliases (#29603)
  * API: add ID to snapshot API responses (#29600)
  * Elasticsearch: Migrate queryeditor to React (#28033)
  * QueryGroup &amp; DataSourceSrv &amp; DataSourcePicker changes simplify usage, error handling and reduce duplication, support for uid (#29542)
  * Elastic: Fixes config UI issues (#29608)
  * GraphNG: Fix issues with plugins not retrieving plot instance (#29585)
  * middleware: Make scenario test functions take a testing.T argument (#29564)
  * Grafana/ui: Storybook controls understand component types (#29574)
  * Login: Fixes typo in tooltip (#29604)
  * Panel: making sure we support all versions of chrome when detecting position of click event. (#29544)
  * Chore: Rewrite sqlstore migration test to use standard library (#29589)
  * Chore: Rewrite tsdb prometheus test to standard library (#29592)
  * Security: Add gosec G304 auditing annotations (#29578)
  * Chore: Rewrite tsdb testdatasource scenarios test to standard library (#29591)
  * Docs: Add missing key to enable SigV4 for provisioning Elasticsearch data source (#29584)
  * Add Microsoft.Network/natGateways (#29479)
  * Update documentation-style-guide.md (#29586)
  * @grafana/ui: Add bell-slash to available icons (#29579)
  * Alert: Fix forwardRef warning (#29577)
  * Update documentation-style-guide.md (#29580)
  * Chore: Upgrade typescript to 4.1 (#29493)
  * PanelLibrary: Adds library_panel table (#29565)
  * Make build docker full fix (#29570)
  * Build: move canary packages to github (#29411)
  * Devenv: Add default db for influxdb (#29371)
  * Chore: Check errors from Close calls (#29562)
  * GraphNG: support auto and explicit axis width (#29553)
  * Chore: upgrading y18n to 4.0.1 for security reasons (#29523)
  * Middleware: Rewrite tests to use standard library (#29535)
  * Overrides: show category on the overrides (#29556)
  * GraphNG: Bars, Staircase, Smooth modes (#29359)
  * Docs: Fix docs sync actions (#29551)
  * Chore: Update dev guide node version for Mac (#29548)
  * Docs: Update formatting-multi-value-variables.md (#29547)
  * Arrow: toArray() on nullable values should include null values (#29520)
  * Docs: Update syntax.md (#29545)
  * NodeJS: Update to LTS (14) (#29467)
  * Docs: Update repeat-panels-or-rows.md (#29540)
  * 3 minor changes, including updating the title TOC (#29501)
  * Auth proxy: Return standard error type (#29502)
  * Data: use pre-defined output array length in vectorToArray() (#29516)
  * Dashboards: hide playlist edit functionality from viewers and snapshots link from unauthenticated users (#28992)
  * docker: use yarn to build (#29538)
  * QueryEditors: Refactoring &amp; rewriting out dependency on PanelModel (#29419)
  * Chore: skip flaky tests (#29537)
  * Graph NG: Invalidate uPlot config on timezone changes (#29531)
  * IntelliSense: Fix autocomplete and highlighting for Loki, Prometheus, Cloudwatch (#29381)
  * Variables: Fixes Textbox current value persistence (#29481)
  * OptionsEditor: simplify the options editor interfaces (#29518)
  * Icon: Changed the icon for signing in (#29530)
  * fixes bug with invalid handler name for metrics (#29529)
  * Middleware: Simplifications (#29491)
  * GraphNG: simplify effects responsible for plot updates/initialization  (#29496)
  * Alarting: fix alarm messages in dingding (Fixes #29470) (#29482)
  * PanelEdit: making sure the correct datasource query editor is being rendered. (#29500)
  * AzureMonitor: Unit MilliSeconds naming (#29399)
  * Devenv: update mysql_tests and postgres_tests blocks for allowing dynamically change of underlying docker image (#29525)
  * Chore: Enable remaining eslint-plugin-react rules (#29519)
  * Docs/Transformations: Add documentation about Binary operations in Add field from calculation (#29511)
  * Datasources: fixed long error message overflowing container (#29440)
  * docker: fix Dockerfile after Gruntfile.js removed (#29515)
  * Chore: Adds Panel Library featuretoggle (#29521)
  * Docs: Update filter-variables-with-regex.md (#29508)
  * Docs: InfluxDB_V2 datasource: adding an example on how to add InfluxQL as a datasource (#29490)
  * Loki: Add query type and line limit to query editor in dashboard (#29356)
  * Docs: Added Security Group support to Azure Auth (#29418)
  * DataLinks: Removes getDataSourceSettingsByUid from applyFieldOverrides  (#29447)
  * Bug: trace viewer doesn't show more than 300 spans (#29377)
  * Live: publish all dashboard changes to a single channel (#29474)
  * Chore: Enable eslint-plugin-react partial rules (#29428)
  * Alerting: Update alertDef.ts with more time options (#29498)
  * DataSourceSrv: Look up data source by uid and name transparently (#29449)
  * Instrumentation: Add examplars for request histograms (#29357)
  * Variables: Fixes Constant variable persistence confusion (#29407)
  * Docs: Fix broken link for plugins (#29346)
  * Prometheus: don't override displayName property (#29441)
  * Grunt: Removes grunt dependency and replaces some of its usage (#29461)
  * Transformation: added support for excluding/including rows based on their values. (#26884)
  * Chore: Enable exhaustive linter (#29458)
  * Field overrides: added matcher to match all fields within frame/query. (#28872)
  * Log: Use os.Open to open file for reading (#29483)
  * MinMax: keep global min/main in field state (#29406)
  * ReactGridLayout: Update dependency to 1.2 (#29455)
  * Jest: Upgrade to latest (#29450)
  * Chore: bump grafana-ui rollup dependencies (#29315)
  * GraphNG: use uPlot's native ms support (#29445)
  * Alerting: Add support for Sensu Go notification channel (#28012)
  * adds tracing for all bus calls that passes ctx (#29434)
  * prometheus: Improve IsAPIError's documentation (#29432)
  * ReleaseNotes: Updated changelog and release notes for 7.3.4 (#29430)
  * Elasticsearch: Fix index pattern not working with multiple base sections (#28348)
  * Plugins: Add support for includes' icon (#29416)
  * Docs: fixing frontend docs issue where enums ending up in wrong folder level. (#29429)
  * Variables: Fixes issue with upgrading legacy queries (#29375)
  * Queries: Extract queries from dashboard (#29349)
  * Docs: docker -&gt; Docker (#29331)
  * PanelEvents: Refactors and removes unnecessary events, fixes panel editor update issue when panel options change (#29414)
  * Fix: Correct panel edit uistate migration (#29413)
  * Alerting: Improve Prometheus Alert Rule error message (#29390)
  * Fix: Migrate Panel edit uiState percentage strings to number (#29412)
  * remove insecure cipher suit as default option (#29378)
  * * prometheus fix variables fetching when  customQueryParameters used #28907 (#28949)
  * Chore: Removes observableTester (#29369)
  * Chore: Adds e2e tests for Variables (#29341)
  * Fix gosec finding of unhandled errors (#29398)
  * Getting started with Grafana and MS SQL (#29401)
  * Arrow: cast timestams to Number (#29402)
  * Docs: Add Cloud content links (#29317)
  * PanelEditor: allow access to the eventBus from panel options (#29327)
  * GraphNG: support x != time in library (#29353)
  * removes unused golint file (#29391)
  * prefer server cipher suites (#29379)
  * Panels/DashList: Fix order of recent dashboards (#29366)
  * Core: Move SplitPane layout from PanelEdit. (#29266)
  * Drone: Upgrade build pipeline tool (#29365)
  * Update yarn.lock to use latest rc-util (#29313)
  * Variables: Adds description field  (#29332)
  * Chore: Update latest.json (#29351)
  * Drone: Upload artifacts for release branch builds (#29297)
  * Docs: fixing link issues in auto generated frontend docs. (#29326)
  * Drone: Execute artifact publishing for both editions in parallel during release (#29362)
  * Devenv: adding default credentials for influxdb (#29344)
  * Drone: Check CUE dashboard schemas (#29334)
  * Backend: fix IPv6 address parsing erroneous (#28585)
  * dashboard-schemas cue 3.0.0 compatible (#29352)
  * Update documentation-style-guide.md (#29354)
  * Docs: Update requirements.md (#29350)
  * ReleaseNotes: Updated changelog and release notes for 7.3.4 (#29347)
  * ReleaseNotes: Updated changelog and release notes for 7.3.4 (#29338)
  * Drone: Publish NPM packages after Storybook to avoid race condition (#29340)
  * Add an option to hide certain users in the UI (#28942)
  * Guardian: Rewrite tests from goconvey (#29292)
  * Docs: Fix editor role and alert notification channel description (#29301)
  * Docs: Improve custom Docker image instructions (#29263)
  * Security: Fixes minor security issue with alert notification webhooks that allowed GET &amp; DELETE requests #29330
  * Chore: Bump storybook to v6 (#28926)
  * ReleaseNotes: Updates release notes link in package.json (master) (#29329)
  * Docs: Accurately reflecting available variables (#29302)
  * Heatmap: Fixes issue introduced by new eventbus (#29322)
  * Dashboard Schemas (#28793)
  * devenv: Add docker load test which authenticates with API key (#28905)
  * Login: Fixes redirect url encoding issues of # %23 being unencoded after login (#29299)
  * InfluxDB: update flux library and support boolean label values (#29310)
  * Explore/Logs: Update Parsed fields to Detected fields (#28881)
  * GraphNG: Init refactorings and fixes (#29275)
  * fixing a broken relref link (#29312)
  * Drone: Upgrade build pipeline tool (#29308)
  * decreasing frontend docs threshold. (#29304)
  * Docker: update docker root group docs and docker image (#29222)
  * WebhookNotifier: Convert tests away from goconvey (#29291)
  * Annotations: fixing so when changing annotations query links submenu will be updated. (#28990)
  * [graph-ng] add temporal DataFrame alignment/outerJoin &amp; move null-asZero pass inside (#29250)
  * Dashboard: Fixes kiosk state after being redirected to login page and back (#29273)
  * make it possible to hide change password link in profile menu (#29246)
  * Theme: Add missing color type (#29265)
  * Chore: Allow reducerTester to work with every data type &amp; payload-less actions (#29241)
  * Explore/Prometheus: Update default query type option to "Both" (#28935)
  * Loki/Explore: Add query type selector (#28817)
  * Variables: New Variables are stored immediately (#29178)
  * reduce severity level to warning (#28939)
  * Units: Changes FLOP/s to FLOPS and some other rates per second units get /s suffix  (#28825)
  * Docs: Remove duplicate "Transformations overview" topics from the TOC (#29247)
  * Docs: Fixed broken relrefs and chanfed TOC entry name from Alerting to Alerts. (#29251)
  * Docs: Remove duplicate Panel overview topic.  (#29248)
  * Increase search limit on team add user and improve placeholder (#29258)
  * Fix warnings for conflicting style rules (#29249)
  * Make backwards compatible (#29212)
  * Minor cosmetic markdown tweaks in docs/cloudwatch.md (#29238)
  * Getting Started: Updated index topic, removed "what-is-grafana", and adjusted weight o? (#29216)
  * BarGauge: Fix story for BarGauge, caused knobs to show for other stories (#29232)
  * Update glossary to add hyperlinks to Explore and Transformation entries (#29217)
  * Chore: Enable errorlint linter (#29227)
  * TimeRegions: Fixed issue with time regions and tresholds due to angular js upgrade (#29229)
  * CloudWatch: Support request cancellation properly (#28865)
  * CloudMonitoring: Support request cancellation properly (#28847)
  * Chore: Handle wrapped errors (#29223)
  * Expressions: Move GEL into core as expressions (#29072)
  * Chore: remove compress:release grunt task (#29225)
  * Refactor/Explore: Inline datasource actions into initialisation (#28953)
  * Fix README typo (#29219)
  * Grafana UI: Card API refactor (#29034)
  * Plugins: Changed alertlist alert url to view instead of edit (#29060)
  * React: Upgrading react to v17, wip (#29057)
  * Gauge: Tweaks short value auto-sizing (#29197)
  * BackendSrv: support binary responseType like $http did (#29004)
  * GraphNG: update the options config (#28917)
  * Backend: Fix build (#29206)
  * Permissions: Validate against Team/User permission role update (#29101)
  * ESlint: React fixes part 1 (#29062)
  * Tests: Adds expects for observables (#28929)
  * Variables: Adds new Api that allows proper QueryEditors for Query variables (#28217)
  * Introduce eslint-plugin-react (#29053)
  * Automation: Adds GitHub release action (#29194)
  * Refactor declarative series configuration to a config builder (#29106)
  * ReleaseNotes: Updated changelog and release notes for 7.3.3 (#29189)
  * Panels: fix positioning of the header title (#29167)
  * trace user login and datasource name instead of id (#29183)
  * playlist: Improve test (#29120)
  * Drone: Fix publish-packages invocation (#29179)
  * Table: Fix incorrect condtition for rendering table filter (#29165)
  * Chore: Upgrade grafana/build-ci-deploy image to latest Go (#29171)
  * DashboardLinks: will only refresh dashboard search when changing tags for link. (#29040)
  * ReleaseNotes: Updated changelog and release notes for 7.3.3 (#29169)
  * CloudWatch: added HTTP API Gateway specific metrics and dimensions (#28780)
  * Release: Adding release notes for 7.3.3 (#29168)
  * SQL: Define primary key for tables without it (#22255)
  * changed link format from MD to HTML (#29163)
  * Backend: Rename variables for style conformance (#29097)
  * Docs: Fixes what'new menu and creates index page, adds first draft of release notes to docs (#29158)
  * Drone: Upgrade build pipeline tool and build image (#29161)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0 (#29160)
  * ReleaseNotes: Updated changelog and release notes for 7.3.3 (#29159)
  * Chore: Upgrade Go etc in build images (#29157)
  * Chore: Remove unused Go code (#28852)
  * API: Rewrite tests from goconvey (#29091)
  * Chore: Fix linting issues caught by ruleguard (#28799)
  * Fix panic when using complex dynamic URLs in app plugin routes  (#27977)
  * Snapshots: Fixes so that dashboard snapshots show data when using Stat, Gauge, BarGauge or Table panels (#29031)
  * Fix authomation text: remove hyphen (#29149)
  * respect fronted-logging.enabled flag (#29107)
  * build paths in an os independent way (#29143)
  * Provisioning: always pin app to the sidebar when enabled (#29084)
  * Automation: Adds new changelog actions (#29142)
  * Chore: Rewrite preferences test from GoConvey to stdlib and testify (#29129)
  * Chore: Upgrade Go dev tools (#29124)
  * Automation: Adding version bump action
  * DataFrames: add utility function to check if structure has changed (#29006)
  * Drone: Fix Drone config verification for enterprise on Windows (#29118)
  * Chore: Require OrgId to be specified in delete playlist command (#29117)
  * Plugin proxy: Handle URL parsing errors (#29093)
  * Drone: Verify Drone config at beginning of pipelines (#29071)
  * Legend/GraphNG: Refactoring legend types and options (#29067)
  * Doc: Update documentation-style-guide.md (#29082)
  * Chore: Bumps types for jest (#29098)
  * LogsPanel: Fix scrolling in dashboards (#28974)
  * sort alphabetically unique labels, labels and parsed fields (#29030)
  * Data source proxy: Convert 401 from data source to 400 (#28962)
  * Plugins: Implement testDatasource for Jaeger (#28916)
  * Update react-testing-library (#29061)
  * Graph: Fixes stacking issues like floating bars when data is not aligned  (#29051)
  * StatPanel: Fixes hanging issue when all values are zero (#29077)
  * Auth: Enable more complete credential chain for SigV4 default SDK auth option (#29065)
  * Chore: Convert API tests to standard Go lib (#29009)
  * Update README.md (#29075)
  * Update CODEOWNERS (#28906)
  * Enhance automation text for missing information (#29052)
  * GraphNG: Adding ticks test dashboard and improves tick spacing (#29044)
  * Chore: Migrate Dashboard List panel to React (#28607)
  * Test Datasource/Bug: Fixes division by zero in csv metric values scenario (#29029)
  * Plugins: Bring back coreplugin package (#29064)
  * Add 'EventBusName' dimension to CloudWatch 'AWS/Events' namespace (#28402)
  * CloudWatch: Add support for AWS/ClientVPN metrics and dimensions (#29055)
  * AlertingNG: manage and evaluate alert definitions via the API (#28377)
  * Fix linting issues (#28811)
  * Logging: Log frontend errors (#28073)
  * Fix for multi-value template variable for project selector (#29042)
  * Chore: Rewrite test helpers from GoConvey to stdlib (#28919)
  * GraphNG: Fixed axis measurements (#29036)
  * Fix links to logql docs (#29037)
  * latest 7.3.2 (#29041)
  * Elasticsearch: Add Moving Function Pipeline Aggregation (#28131)
  * changelog 7.3.2 (#29038)
  * MutableDataFrame: Remove unique field name constraint and values field index and unused/seldom used stuff  (#27573)
  * Fix prometheus docs related to query variable (#29027)
  * Explore: support ANSI colors in live logs (#28895)
  * Docs: Add documentation about log levels (#28975)
  * Dashboard: remove usage of Legacyforms (#28707)
  * Docs: Troubleshoot starting docker containers on Mac (#28754)
  * Elasticsearch: interpolate variables in Filters Bucket Aggregation (#28969)
  * Chore: Bump build pipeline version (#29023)
  * Annotations: Fixes error when trying to create annotation when dashboard is unsaved (#29013)
  * TraceViewer: Make sure it does not break when no trace is passed (#28909)
  * Thresholds: Fixes color assigned to null values (#29010)
  * Backend: Remove unused code (#28933)
  * Fix documentation (#28998)
  * Tracing: Add setting for sampling server (#29011)
  * Logs Panel: Fix inconsistent higlighting (#28971)
  * MySQL: Update README.md (#29003)
  * IntervalVariable: Fix variable tooltip (#28988)
  * StatPanels: Fixes auto min max when latest value is zero (#28982)
  * Chore: Fix SQL related Go variable naming (#28887)
  * MSSQL: Support request cancellation properly (Uses new backendSrv.fetch Observable request API) (#28809)
  * Variables: Fixes loading with a custom all value in url (#28958)
  * Backend: Adds route for well-known change password URL (#28788)
  * docs: fix repeated dashboards link (#29002)
  * LogsPanel: Don't show scroll bars when not needed (#28972)
  * Drone: Fix docs building (#28986)
  * StatPanel: Fixed center of values in edge case scenarios (#28968)
  * Update getting-started-prometheus.md (#28502)
  * Docs: fix relref (#28977)
  * Docs: Minor docs update
  * Docs: Another workflow docs update
  * Docs: Workflow minor edit
  * Docs: Another minor edit
  * Docs: Update PR workflow docs
  * Docs: Update bot docs
  * StatPanels: set default to last (#28617)
  * Tracing: log traceID in request logger (#28952)
  * start tracking usage stats for tempo (#28948)
  * Docs: Update bot docs
  * GrafanaBot: Update labels and commands and adds docs  (#28950)
  * Docs: updates for file-based menu (#28500)
  * Grot: Added command/label to close feature requests with standard message (#28937)
  * GraphNG: Restore focus option (#28946)
  * Docs: Fix links (#28945)
  * Short URL: Cleanup unvisited/stale short URLs (#28867)
  * GraphNG: Using new VizLayout, moving Legend into GraphNG and some other refactorings (#28913)
  * CloudWatch Logs: Change what we use to measure progress (#28912)
  * Chore: use jest without grunt (#28558)
  * Chore: Split Explore redux code into multiple sections (#28819)
  * TestData: Fix issue with numeric inputs in TestData query editor (#28936)
  * setting: Fix tests on Mac (#28886)
  * Plugins signing: Fix docs urls (#28930)
  * Field color: handling color changes when switching panel types (#28875)
  * Variables: make sure that we support both old and new syntax for custom variables. (#28896)
  * CodeEditor: added support for javascript language (#28818)
  * Update CHANGELOG.md (#28928)
  * Plugins: allow override when allowing unsigned plugins (#28901)
  * Chore: Fix spelling issue (#28904)
  * Grafana-UI: LoadingPlaceholder docs (#28874)
  * Gauge: making sure threshold panel json is correct before render (#28898)
  * Chore: Rewrite test in GoConvey to stdlib and testify (#28918)
  * Update documentation-style-guide.md (#28908)
  * Adding terms to glossary (#28884)
  * Devenv: Fix Prometheus basic auth proxy (#28889)
  * API: replace SendLoginLogCommand with LoginHook (#28777)
  * Dashboards / Folders: delete related data (permissions, stars, tags, versions, annotations) when deleting a dashboard or a folder (#28826)
  * Loki: Correct grammar in DerivedFields.tsx (#28885)
  * Docs: Update list of Enterprise plugins (#28882)
  * Live: update centrifuge and the ChannelHandler api (#28843)
  * Update share-panel.md (#28880)
  * CRLF (#28822)
  * PanelHeader: show streaming indicator (and allow unsubscribe)  (#28682)
  * Docs: Plugin signing docs (#28671)
  * Chore: Fix issues reported by staticcheck; enable stylecheck linter (#28866)
  * Elasticsearch: Filter pipeline aggregations from order by options (#28620)
  * Variables: added __user.email to global variable (#28853)
  * Fix titles case and add missing punctuation marks (#28713)
  * VizLayout: Simple viz layout component for legend placement and scaling (#28820)
  * Chore: Fix staticcheck issues (#28860)
  * Chore: Fix staticcheck issues (#28854)
  * Disable selecting enterprise plugins with no license (#28758)
  * Tempo: fix test data source (#28836)
  * Prometheus: fix missing labels from value (#28842)
  * Chore: Fix issues found by staticcheck (#28802)
  * Chore: Remove dead code (#28664)
  * Units: added support to handle negative fractional numbers. (#28849)
  * Variables: Adds variables inspection (#25214)
  * Marked: Upgrade and always sanitize by default (#28796)
  * Currency: add Philippine peso currency (PHP) (#28823)
  * Alert: Remove z-index on Alert component so that it does not overlay ontop of other content (#28834)
  * increase blob column size for encrypted dashboard data (#28831)
  * Gauge: Improve font size auto sizing (#28797)
  * grafana/toolkit: allow builds with lint warnings (#28810)
  * core and grafana/toolkit: Use latest version of grafana-eslint-conifg (#28816)
  * Icon: Replace font awesome icons where possible (#28757)
  * Remove homelinks panel (#28808)
  * StatPanels: Add new calculation option for percentage difference  (#26369)
  * Dashboard: Add Datetime local (No date if today) option in panel axes' units (#28011)
  * Variables: Adds named capture groups to variable regex (#28625)
  * Panel inspect: Interpolate variables in panel inspect title (#28779)
  * grafana/toolkit: Drop console and debugger statements by default when building plugin with toolkit (#28776)
  * Variables: Fixes URL values for dependent variables (#28798)
  * Graph: Fixes event emit function error (#28795)
  * Adds storybook integrity check to drone config (#28785)
  * Live: improve broadcast semantics and avoid double posting (#28765)
  * Events: Remove unused or unnecessary events  (#28783)
  * Docs: added code comments to frontend packages. (#28784)
  * Plugin Dockerfiles: Upgrade Go, golangci-lint, gcloud SDK (#28767)
  * Dependencies: Update angularjs to 1.8.2 (#28736)
  * EventBus: Introduces new event bus with emitter backward compatible interface (#27564)
  * ColorSchemes: Add new color scheme (#28719)
  * Docs: Add NGINX example for using websockets to Loki (#27998)
  * Docs: Made usage of config/configuration consistent #19270 (#28167)
  * Cloudwatch: Fix issue with field calculation transform not working properly with Cloudwatch data (#28761)
  * grafana/toolkit: Extract CHANGELOG when building plugin (#28773)
  * Drone: Upgrade build pipeline tool (#28769)
  * devenv: Upgrade MSSQL Docker image (#28749)
  * Docs: Add docs for InfoBox component (#28705)
  * Reoeragnization. (#28760)
  * gtime: Add ParseDuration function (#28525)
  * Explore: Remove redundant decodeURI and fix urls (#28697)
  * Dashboard: fix view panel mode for Safari / iOS (#28702)
  * Provisioning: Fixed problem with getting started panel being added to custom home dashboard (#28750)
  * LoginPage: Removed auto-capitalization from the login form (#28716)
  * Plugin page: Fix dom validation warning (#28737)
  * Migration: Remove LegacyForms from dashboard folder permissions (#28564)
  * Dependencies: Remove unused dependency (#28711)
  * AlertRuleList: Add keys to alert rule items (#28735)
  * Chore: Pin nginx base image in nginx proxy Dockerfiles (#28730)
  * Drone: Upgrade build-pipeline tool (#28728)
  * TableFilters: Fixes filtering with field overrides (#28690)
  * Templating: Speeds up certain variable queries for Postgres, MySql and MSSql (#28686)
  * Fix typo in unsigned plugin warning (#28709)
  * Chore: Convert sqlstore annotation test from GoConvey to testify (#28715)
  * updates from https://github.com/grafana/grafana/pull/28679 (#28708)
  * Chore: Add some scenario tests for Explore (#28534)
  * Update latest version to 7.3.1 (#28701)
  * Changelog update - 7.3.1 (#28699)
  * Drone: Don't build on Windows for PRs (#28663)
  * Build: changing docs docker image to prevent setting up frontend devenv. (#28670)
  * Prometheus: Fix copy paste behaving as cut and paste (#28622)
  * Loki: Fix error when some queries return zero results (#28645)
  * Chore: allow higher nodejs version than 12 (#28624)
  * TextPanel: Fixes problems where text panel would show old content (#28643)
  * PanelMenu: Fixes panel submenu not being accessible for panels close to the right edge of the screen (#28666)
  * Cloudwatch: Fix duplicate metric data (#28642)
  * Add info about CSV download for Excel in What's new article (#28661)
  * Docs: Describe pipeline aggregation changes in v7.3 (#28660)
  * Plugins: Fix descendent frontend plugin signature validation (#28638)
  * Docker:  use root group in the custom Dockerfile (#28639)
  * Bump rxjs to 6.6.3 (#28657)
  * StatPanel: Fixed value being under graph and reduced likley hood for white and dark value text mixing (#28641)
  * Table: Fix image cell mode so that it works with value mappings (#28644)
  * Build: support custom build tags (#28609)
  * Plugin signing: Fix copy on signed plugin notice (#28633)
  * Dashboard: Fix navigation from one SoloPanelPage to another one (#28578)
  * CloudWatch: Improve method name, performance optimization (#28632)
  * Developer guide: Update wrt. Windows (#28559)
  * Docs: Update graph panel for tabs (#28552)
  * update latest.json (#28603)
  * Docs: data source insights (#28542)
  * Field config API: add slider editor (#28007)
  * changelog: update for 7.3.0 (#28602)
  * Update uPlot to 1.2.2 and align timestamps config with new uPLot API (#28569)
  * Live: updated the reference to use lazy loaded Monaco in code editor. (#28597)
  * Dashboard: Allow add panel for viewers_can_edit (#28570)
  * Docs: Data source provisioning and sigV4 (#28593)
  * Docs: Additional 7.3 upgrade notes (#28592)
  * CI: Add GCC to Windows Docker image (#28562)
  * CloudWatch Logs queue and websocket support (#28176)
  * Explore/Loki: Update docs and cheatsheet (#28541)
  * Grafana-UI: Add Card component (#28216)
  * AddDatasource: Improve plugin categories (#28584)
  * StatPanel: Fixes BizChart error max: yyy should not be less than min zzz (#28587)
  * docs: a few tweaks for clarity and readability (#28579)
  * API: Reducing some api docs errors (#28575)
  * Grafana-UI: ContextMenu docs (#28508)
  * Short URL: Update last seen at when visiting a short URL (#28565)
  * Fix backend build on Windows (#28557)
  * add value prop (#28561)
  * Plugin signing: UI information (#28469)
  * Use fetch API in InfluxDB data source (#28555)
  * PanelEdit: Prevent the preview pane to be resized further than window height (#28370)
  * Docs: Update generic-oauth.md (#28517)
  * GCS image uploader: Add tests (#28521)
  * Move metrics collector queries to config (#28549)
  * Plugins: Fix plugin URL paths on Windows (#28548)
  * API: add login username in SendLoginLogCommand (#28544)
  * AzureMonitor: Support decimal (as float64) type in analytics/logs (#28480)
  * Auth: Fix SigV4 request verification step for Amazon Elasticsearch Service (#28481)
  * Grafana/ui: auto focus threshold editor input (#28360)
  * Docs: SigV4 What's New and AWS Elasticsearch documentation (#28506)
  * Drone: Upgrade build pipeline tool (#28533)
  * Drone: Refactor version branch pipeline logic (#28531)
  * Drone: Upgrade build-pipeline tool (#28520)
  * Docs: Update field color scheme docs and 7.3 what's new (#28496)
  * Templating: Custom variable edit UI, change text input into textarea  (#28312) (#28322)
  * Currency: Adds Indonesian IDR currency (#28363)
  * Chore: Fix flaky sqlstore annotation test (#28527)
  * Checkbox: Fix component sample typo (#28518)
  * Image uploader: Fix uploading of images to GCS (#26493)
  * OAuth: Support Forward OAuth Identity for backend data source plugins (#27055)
  * Updated documentation style guide  (#28488)
  * Cloud Monitoring: Fix help section for aliases (#28499)
  * Docs: what's new in enterprise 7.3 (#28472)
  * Plugins: Track plugin signing errors and expose them to the frontend (#28219)
  * Elasticsearch: Fix handling of errors when testing data source (#28498)
  * Auth: Should redirect to login when anonymous enabled and URL with different org than anonymous specified  (#28158)
  * Drone: Don't build Windows installer for version branches (#28494)
  * Docs: Grafana Enterprise auditing feature (#28356)
  * Drone: Add version branch pipeline (#28490)
  * Getting Started section rehaul (#28090)
  * Docs: Add survey content (#28446)
  * Docs: Update prometheus.md (#28483)
  * Docs: Add view settings and view stats (#28155)
  * Remove entry from 7.3.0-beta2 Changelog (#28478)
  * Circle: Remove release pipeline (#28474)
  * Update latest.json (#28476)
  * Switch default version to Graphite 1.1 (#28471)
  * Plugin page: update readme icon (#28465)
  * Chore: Update changelog (#28473)
  * Explore: parse time range fix (#28467)
  * Alerting: Log alert warnings for obsolete notifiers when extracting alerts and remove spammy error (#28162)
  * Shorten url: Unification across Explore and Dashboards (#28434)
  * Explore: Support wide data frames (#28393)
  * Docs: updated cmd to build docs locally to generate docs prior to building site. (#28371)
  * Live: support real time measurements (alpha) (#28022)
  * CloudWatch/Athena - valid metrics and dimensions. (#28436)
  * Chore: Use net.JoinHostPort (#28421)
  * Chore: Upgrade grafana-eslint to latest (#28444)
  * Fix cut off icon (#28442)
  * Docs: Add shared (#28411)
  * Loki: Visually distinguish error logs for LogQL2 (#28359)
  * Database; Remove database metric feature flag and update changelog (#28438)
  * TestData: multiple arrow requests should return multiple frames (#28417)
  * Docs: Test survey code (#28437)
  * Docs: improved github action that syncs docs to website (#28277)
  * update latest.json with latest stable version (#28433)
  * 7.2.2 changelog update (#28406)
  * plugins: Don't exit on duplicate plugin (#28390)
  * API: Query database from /api/health endpoint (#28349)
  * Chore: Fix conversion of a 64-bit integer to a lower bit size type uint (#28425)
  * Prometheus: fix parsing of infinite sample values (#28287) (#28288)
  * Chore: Rewrite some tests to use testify (#28420)
  * Plugins: do not remount app plugin on nav change (#28105)
  * App Plugins: Add backend support (#28272)
  * Chore: react hooks eslint fixes in grafana-ui (#28026)
  * ci-e2e: Add Git (#28410)
  * TestData: Remove useEffect that triggeres query on component load (#28321)
  * FieldColor: Remove inverted color scheme (#28408)
  * Chore: Set timezone for tests to non utc. (#28405)
  * Chore: fix jsdoc desc and return (#28383)
  * Docs: Fixing v51 link (#28396)
  * fixes windows crlf warning (#28346)
  * Grafana/ui: pass html attributes to segment (#28316)
  * Alerting: Return proper status code when trying to create alert notification channel with duplicate name or uid (#28043)
  * OAuth: Able to skip auto login (#28357)
  * CloudWatch: Fix custom metrics (#28391)
  * Docs: Adds basic frontend data request concepts (#28253)
  * Instrumentation: Add histogram for request duration (#28364)
  * remove status label from histogram (#28387)
  * OAuth: configurable user name attribute (#28286)
  * Component/NewsPanel: Add rel="noopener" to NewsPanel links (#28379)
  * Webpack: Split out unicons and bizcharts (#28374)
  * Explore: Fix date formatting in url for trace logs link (#28381)
  * Docs: Add activate-license (#28156)
  * Instrumentation: Add counters and histograms for database queries (#28236)
  * Docs: Make tables formatting more consistent (#28164)
  * CloudWatch: Adding support for additional Amazon CloudFront metrics (#28378)
  * Add unique ids to query editor fields (#28376)
  * Plugins: Compose filesystem paths with filepath.Join (#28375)
  * Explore: Minor tweaks to exemplars marble (#28366)
  * Instrumentation: Adds environment_info metric  (#28355)
  * AzureMonitor: Fix capitalization of NetApp 'volumes' namespace (#28369)
  * ColorSchemes: Adds more color schemes and text colors that depend on the background (#28305)
  * Automation: Update backport github action trigger (#28352)
  * Dashboard links: Places drop down list so it's always visible (#28330)
  * Docs: Add missing records from grafana-ui 7.2.1 CHANGELOG (#28302)
  * Templating: Replace all '$tag' in tag values query (#28343)
  * Docs: Add docs for valuepicker (#28327)
  * Git: Create .gitattributes for windows line endings (#28340)
  * Update auth-proxy.md (#28339)
  * area/grafana/toolkit: update e2e docker image (#28335)
  * AlertingNG: remove warn/crit from eval prototype (#28334)
  * Automation: Tweaks to more info message (#28332)
  * Loki: Run instant query only when doing metric query (#28325)
  * SAML: IdP-initiated SSO docs (#28280)
  * IssueTriage: Needs more info automation and messages (#28137)
  * GraphNG: Use AxisSide enum (#28320)
  * BackendSrv: Fixes queue countdown when unsubscribe is before response (#28323)
  * Automation: Add backport github action (#28318)
  * Build(deps): Bump http-proxy from 1.18.0 to 1.18.1 (#27507)
  * Bump handlebars from 4.4.3 to 4.7.6 (#27416)
  * Bump tree-kill from 1.2.1 to 1.2.2 (#27405)
  * Loki: Base maxDataPoints limits on query type (#28298)
  * Explore: respect min_refresh_interval (#27988)
  * Drone: Use ${DRONE_TAG} in release pipelines, since it should work (#28299)
  * Graph NG: fix toggling queries and extract Graph component from graph3 panel (#28290)
  * fix: for graph size not taking up full height or width
  * should only ignore the file in the grafana mixin root folder (#28306)
  * Drone: Fix grafana-mixin linting (#28308)
  * SQLStore: Run tests as integration tests (#28265)
  * Chore: Add cloud-middleware as code owners (#28310)
  * API: Fix short URLs (#28300)
  * CloudWatch: Add EC2CapacityReservations Namespace (#28309)
  * Jaeger: timeline collapser to show icons (#28284)
  * update latest.json with latest beta version (#28293)
  * Update changelog (#28292)
  * Docs : - Added period (#28260)
  * Add monitoring mixing for Grafana (#28285)
  * Chore: Update package.json (#28291)
  * Drone: Fix enterprise release pipeline (#28289)
  * Alerting: Append appSubUrl to back button on channel form (#28282)
- Rework package Makefile &amp; README now that Grunt is gone</changelog>
  <changelog author="tserong@suse.com" date="1613995200">- Update to version 7.4.2:
  * Make Datetime local (No date if today) working (#31274) (#31275)
  * "Release: Updated versions in package to 7.4.2" (#31272)
  * [v7.4.x] Chore: grafana-toolkit uses grafana-ui and grafana-data workspaces (#31269)
  * Snapshots: Disallow anonymous user to create snapshots (#31263) (#31266)
  * only update usagestats every 30min (#31131) (#31262)
  * Prometheus: Fix enabling of disabled queries when editing in dashboard (#31055) (#31248)
  * CloudWatch: Ensure empty query row errors are not passed to the panel (#31172) (#31245)
  * StatPanels: Fixes to palette color scheme is not cleared when loading panel (#31126) (#31246)
  * QueryEditors: Fixes issue that happens after moving queries then editing would update other queries (#31193) (#31244)
  * LibraryPanels: Disconnect before connect during dashboard save (#31235) (#31238)
  * SqlDataSources: Fixes the Show Generated SQL button in query editors (#31236) (#31239)
  * Variables: Adds back default option for data source variable (#31208) (#31232)
  * IPv6: Support host address configured with enclosing square brackets (#31226) (#31228)
  * Postgres: Fix timeGroup macro converts long intervals to invalid numbers when TimescaleDB is enabled (#31179) (#31224)
  * Remove last synchronisation field from LDAP debug view (#30984) (#31221)
  * [v7.4.x]: Sync drone config from master to stable release branch (#31213)
  * DataSourceSrv: Filter out non queryable data sources by default (#31144) (#31214)
  * Alerting: Fix modal text for deleting obsolete notifier (#31171) (#31209)
  * Variables: Fixes missing empty elements from regex filters (#31156) (#31201)
  * DashboardLinks: Fixes links always cause full page reload (#31178) (#31181)
  * DashboardListPanel: Fixes issue with folder picker always showing All and using old form styles (#31160) (#31162)
  * Permissions: Fix team and role permissions on folders/dashboards not displayed for non Grafana Admin users (#31132) (#31176)
  * Prometheus: Multiply exemplars timestamp to follow api change (#31143) (#31170)
- Added add-gotest-module.patch to fix "inconsistent vendoring" build failure</changelog>
  <changelog author="ecsos@opensuse.org" date="1618228800">- Update to version 7.5.3:
  * "Release: Updated versions in package to 7.5.3" (#32745)
  * FolderPicker: Prevent dropdown menu from disappearing off screen (#32603) (#32741)
  * Loki: Remove empty annotations tags (#32359) (#32490)
  * SingleStat: fix wrong call to getDataLinkUIModel (#32721) (#32739)
  * Prometheus: Fix instant query to run two times when exemplars enabled (#32508) (#32726)
  * Elasticsearch: Fix bucket script variable duplication in UI (#32705) (#32714)
  * Variables: Confirms selection before opening new picker (#32586) (#32710)
  * CloudWarch: Fix service quotas link (#32686) (#32689)
  * Configuration: Prevent browser hanging / crashing with large number of org users (#32546) (#32598)
  * chore: bump execa to v2.1.0 (#32543) (#32592)
  * Explore: Fix bug where navigating to explore would result in wrong query and datasource to be shown (#32558)
  * Fix broken gtime tests (#32582) (#32587)
  * resolve conflicts (#32567)
  * gtime: Make ParseInterval deterministic (#32539) (#32560)
  * Dashboard: No longer includes default datasource when externally exporting dashboard with row (#32494) (#32535)
  * TextboxVariable: Limits the length of the preview value (#32472) (#32530)
  * AdHocVariable: Adds default data source (#32470) (#32476)
  * Variables: Fixes Unsupported data format error for null values (#32480) (#32487)
  * Prometheus: align exemplars check to latest api change (#32513) (#32515)
  * "Release: Updated versions in package to 7.5.2" (#32502)
  * SigV4: Add support EC2 IAM role auth and possibility to toggle auth providers  (#32444) (#32488)
  * Set spanNulls to default (#32471) (#32486)
  * Graph: Fix setting right y-axis when standard option unit is configured (#32426) (#32442)
  * API: Return 409 on datasource version conflict (#32425) (#32433)
  * API: Return 400 on invalid Annotation requests (#32429) (#32431)
  * Variables: Fixes problem with data source variable when default ds is selected (#32384) (#32424)
  * Table: Fixes so links work for image cells (#32370) (#32410)
  * Variables: Fixes error when manually non-matching entering custom value in variable input/picker (#32390) (#32394)
  * DashboardQueryEditor: Run query after selecting source panel (#32383) (#32395)
  * API: Datasource endpoint should return 400 bad request if id and orgId is invalid (#32392) (#32397)
  * "Release: Updated versions in package to 7.5.1" (#32362)
  * MSSQL: Upgrade go-mssqldb (#32347) (#32361)
  * GraphNG: Fix tooltip displaying wrong or no data (#32312) (#32348)
  * "Release: Updated versions in package to 7.5.0" (#32308)
  * Loki: Fix text search in Label browser (#32293) (#32306)
  * Explore: Show all dataFrames in data tab in Inspector (#32161) (#32299)
  * PieChartV2: Add migration from old piechart (#32259) (#32291)
  * LibraryPanels: Adds Type and Description to DB (#32258) (#32288)
  * LibraryPanels: Prevents deletion of connected library panels (#32277) (#32284)
  * Library Panels: Add "Discard" button to panel save modal (#31647) (#32281)
  * LibraryPanels: Changes to non readonly reducer (#32193) (#32200)
  * Notifications: InfluxDB - Fix regex to include metrics with hyphen in aliases (#32224) (#32262)
  * SSE/InfluxDB: Change InfluxQL to work with server side expressions (#31691) (#32102)
  * DashboardSettings: Fixes issue with tags list not updating when changes are made (#32241) (#32247)
  * Logs: If log message missing, use empty string (#32080) (#32243)
  * CloudWatch: Use latest version of aws sdk (#32217) (#32223)
  * Release: Updated versions in package to 7.5.0-beta.2 (#32158)
  * HttpServer: Make read timeout configurable but disabled by default (#31575) (#32154)
  * GraphNG: Ignore string fields when building data for uPlot in GraphNG (#32150) (#32151)
  * Fix loading timezone info on windows (#32029) (#32149)
  * SQLStore: Close session in withDbSession (#31775) (#32108)
  * Remove datalink template suggestions for accessing specific fields when there are multiple dataframes. (#32057) (#32148)
  * GraphNG: make sure dataset and config are in sync when initializing and re-initializing uPlot (#32106) (#32125)
  * MixedDataSource: Name is updated when data source variable changes (#32090) (#32144)
  * Backport 32005 to v7.5.x #32128 (#32130)
  * Loki: Label browser UI updates (#31737) (#32119)
  * ValueMappings: Fixes value 0 not being mapped (#31924) (#31929)
  * GraphNG: Fix tooltip series color for multi data frame scenario (#32098) (#32103)
  * LibraryPanels: Improves the Get All experience (#32028) (#32093)
  * Grafana/ui: display all selected levels for selected value when searching (#32030) (#32032)
  * Exemplars: always query exemplars (#31673) (#32024)
  * [v7.5.x] TimePicker: Fixes hidden time picker shown in kiosk TV mode (#32055)
  * Chore: Collect elasticsearch version usage stats (#31787) (#32063)
  * Chore: Tidy up Go deps (#32053)
  * GraphNG: Fix PlotLegend field display name being outdated (#32064) (#32066)
  * Data proxy: Fix encoded characters in URL path should be proxied encoded (#30597) (#32060)
  * [v7.5.x] Auth: Allow soft token revocation (#32037)
  * Snapshots: Fix usage of sign in link from the snapshot page (#31986) (#32036)
  * Make master green (#32011) (#32015)
  * Query editor: avoid avoiding word wrap on query editor components (#31949) (#31982)
  * Variables: Fixes filtering in picker with null items (#31979) (#31995)
  * TooltipContainer - use resize observer instead of getClientBoundingRect (#31937) (#32003)
  * Loki: Fix autocomplete when re-editing Loki label values (#31828) (#31987)
  * Loki: Fix type errors in language_provider (#31902) (#31945)
  * PanelInspect: Interpolates variables in CSV file name (#31936) (#31977)
  * Cloudwatch: use shared library for aws auth (#29550) (#31946)
  * Tooltip: partial perf improvement (#31774) (#31837) (#31957)
  * Backport 31913 to v7.5.x (#31955)
  * Grafana/ui: fix searchable options for Cascader with options update (#31906) (#31938)
  * Variables: Do not reset description on variable type change (#31933) (#31939)
  * [v7.5.x] AnnotationList: Adds spacing to UI  (#31888) (#31894)
  * Elasticseach: Support histogram fields (#29079) (#31914)
  * Chore: upgrade eslint and fork-ts-checker-webpack-plugin (#31854) (#31896)
  * Update scripts and Dockerfiles to use Go 1.16.1 (#31881) (#31891)
  * Templating: use dashboard timerange when variables are set to refresh 'On Dashboard Load' (#31721) (#31801)
  * [v7.5.x] Tempo: Add test for backend data source (#31835) (#31882)
  * Run go mod tidy to update go.mod and go.sum (#31859)
  * Grafana/ui: display all selected levels for Cascader (#31729) (#31862)
  * CloudWatch: Consume the grafana/aws-sdk (#31807) (#31861)
  * Cloudwatch: ListMetrics API page limit (#31788) (#31851)
  * Remove invalid attribute (#31848) (#31850)
  * CloudWatch: Restrict auth provider and assume role usage according to? (#31845)
  * CloudWatch: Add support for EC2 IAM role (#31804) (#31841)
  * Loki, Prometheus: Change the placement for query type explanation (#31784) (#31819)
  * Variables: Improves inspection performance and unknown filtering (#31811) (#31813)
  * Change piechart plugin state to beta (#31797) (#31798)
  * ReduceTransform: Include series with numeric string  names (#31763) (#31794)
  * Annotations: Make the annotation clean up batch size configurable (#31487) (#31769)
  * Fix escaping in ANSI and dynamic button removal (#31731) (#31767)
  * DataLinks: Bring back single click links for Stat, Gauge and BarGauge panel (#31692) (#31718)
  * log skipped, performed and duration for migrations (#31722) (#31754)
  * Search: Make items more compact (#31734) (#31750)
  * loki_datasource: add documentation to label_format and line_format (#31710) (#31746)
  * Tempo: Convert tempo to backend data source2 (#31733)
  * Elasticsearch: Fix script fields in query editor (#31681) (#31727)
  * Elasticsearch: revert to isoWeek when resolving weekly indices (#31709) (#31717)
  * Admin: Keeps expired api keys visible in table after delete (#31636) (#31675)
  * Tempo: set authentication header properly (#31699) (#31701)
  * Tempo: convert to backend data source (#31618) (#31695)
  * Update package.json (#31672)
  * Release: Bump version to 7.5.0-beta.1 (#31664)
  * Fix whatsNewUrl version to 7.5 (#31666)
  * Chore: add alias for what's new 7.5 (#31669)
  * Docs: Update doc for PostgreSQL authentication (#31434)
  * Docs: document report template variables (#31637)
  * AzureMonitor: Add deprecation message for App Insights/Insights Analytics (#30633)
  * Color: Fixes issue where colors where reset to gray when switch panels (#31611)
  * Live: Use pure WebSocket transport (#31630)
  * Docs: Fix broken image link (#31661)
  * Docs: Add Whats new in 7.5 (#31659)
  * Docs: Fix links for 7.5 (#31658)
  * Update enterprise-configuration.md (#31656)
  * Explore/Logs: Escaping of incorrectly escaped log lines (#31352)
  * Tracing: Small improvements to trace types (#31646)
  * Update _index.md (#31645)
  * AlertingNG: code refactoring (#30787)
  * Remove pkill gpg-agent (#31169)
  * Remove format for plugin routes (#31633)
  * Library Panels: Change unsaved change detection logic (#31477)
  * CloudWatch: Added AWS Timestream Metrics and Dimensions (#31624)
  * add new metrics and dimensions (#31595)
  * fix devenv dashboard content typo (#31583)
  * DashList: Sort starred and searched dashboard alphabetically (#31605)
  * Docs: Update whats-new-in-v7-4.md (#31612)
  * SSE: Add "Classic Condition" on backend (#31511)
  * InfluxDB: Improve maxDataPoints error-message in Flux-mode, raise limits (#31259)
  * Alerting: PagerDuty: adding current state to the payload (#29270)
  * devenv: Fix typo (#31589)
  * Loki: Label browser (#30351)
  * LibraryPanels: No save modal when user is on same dashboard (#31606)
  * Bug: adding resolution for `react-use-measure` to prevent plugin tests from failing. (#31603)
  * Update node-graph.md (#31571)
  * test: pass Cypress options objects into selector wrappers (#31567)
  * Loki: Add support for alerting (#31424)
  * Tracing: Specify type of the data frame that is expected for TraceView (#31465)
  * LibraryPanels: Adds version column (#31590)
  * PieChart: Add color changing options to pie chart (#31588)
  * Explore: keep enabled/disabled state in angular based QueryEditors correctly (#31558)
  * Bring back correct legend sizing afer PlotLegend refactor (#31582)
  * Alerting: Fix bug in Discord for when name for metric value is absent (#31257)
  * LibraryPanels: Deletes library panels during folder deletion (#31572)
  * chore: bump lodash to 4.17.21 (#31549)
  * Elasticsearch: Fix impossibility to perform non-logs queries after importing queries from loki or prometheus in explore (#31518)
  * TestData: Fixes never ending annotations scenario (#31573)
  * CloudWatch: Added AWS Network Firewall metrics and dimensions (#31498)
  * propagate plugin unavailable message to UI (#31560)
  * ConfirmButton: updates story from knobs to controls (#31476)
  * Loki: Refactor line limit to use grafana/ui component (#31509)
  * LibraryPanels: Adds folder checks and permissions (#31473)
  * Add guide on custom option editors (#31254)
  * PieChart: Update text color and minor changes (#31546)
  * Grafana-data: bump markedjs to v2.x to resolve vulnerability (#31036)
  * Chore(deps): Bump google.golang.org/api from 0.39.0 to 0.40.0 (#31210)
  * PieChart: Improve piechart legend and options (#31446)
  * Chore(deps): Bump google.golang.org/grpc from 1.35.0 to 1.36.0 (#31541)
  * Chore(deps): Bump github.com/aws/aws-sdk-go from 1.37.7 to 1.37.20 (#31538)
  * Chore(deps): Bump github.com/prometheus/common from 0.17.0 to 0.18.0 (#31539)
  * Add multiselect options ui (#31501)
  * Profile: Fixes profile preferences being accessible when anonymous access was enabled (#31516)
  * Variables: Fixes error with: cannot read property length of undefined (#31458)
  * Explore: Show ANSI colored logs in logs context (#31510)
  * LogsPanel: Show all received logs  (#31505)
  * AddPanel: Design polish  (#31484)
  * TimeSeriesPanel: Remove unnecessary margin from legend  (#31467)
  * influxdb: flux: handle is-hidden (#31324)
  * Graph: Fix tooltip not showing when close to the edge of viewport  (#31493)
  * FolderPicker: Remove useNewForms from FolderPicker (#31485)
  * Add reportVariables feature toggle (#31469)
  * Grafana datasource: support multiple targets (#31495)
  * Update license-restrictions.md (#31488)
  * Docs: Derived fields links in logs detail view (#31482)
  * Docs: Add new data source links to Enterprise page (#31480)
  * Convert annotations to dataframes (#31400)
  * ReleaseNotes: Updated changelog and release notes for v7.4.2 (#31475)
  * GrafanaUI: Fixes typescript error for missing css prop (#31479)
  * Login: handle custom token creation error messages (#31283)
  * Library Panels: Don't list current panel in available panels list (#31472)
  * DashboardSettings: Migrate Link Settings to React (#31150)
  * Frontend changes for library panels feature (#30653)
  * Alerting notifier SensuGo: improvements in default message (#31428)
  * AppPlugins: Options to disable showing config page in nav (#31354)
  * add aws config (#31464)
  * Heatmap: Fix missing/wrong value in heatmap legend (#31430)
  * Chore: Fixes small typos (#31461)
  * Graphite/SSE: update graphite to work with server side expressions (#31455)
  * update the lastest version to 7.4.3 (#31457)
  * ReleaseNotes: Updated changelog and release notes for 7.4.3 (#31454)
  * AWS: Add aws plugin configuration (#31312)
  * Revert ""Release: Updated versions in package to 7.4.3" (#31444)" (#31452)
  * Remove UserSyncInfo.tsx (#31450)
  * Elasticsearch: Add word highlighting to search results (#30293)
  * Chore: Fix eslint react hook warnings in grafana-ui (#31092)
  * CloudWatch: Make it possible to specify custom api endpoint (#31402)
  * Chore: fixed incorrect naming for disable settings (#31448)
  * TraceViewer: Fix show log marker in spanbar (#30742)
  * LibraryPanels: Adds permissions to getAllHandler (#31416)
  * NamedColorsPalette: updates story from knobs to controls (#31443)
  * "Release: Updated versions in package to 7.4.3" (#31444)
  * ColorPicker: updates story from knobs to controls (#31429)
  * Streaming: Fixes an issue with time series panel and streaming data source when scrolling back from being out of view (#31431)
  * ClipboardButton: updates story from knobs to controls (#31422)
  * we should never log unhashed tokens (#31432)
  * CI: Upgrade Dockerfiles wrt. Go, Node, Debian (#31407)
  * Elasticsearch: Fix query initialization logic &amp; query transformation from Promethous/Loki (#31322)
  * Postgres: allow providing TLS/SSL certificates as text in addition to file paths (#30353)
  * CloudWatch: Added AWS Ground Station metrics and dimensions (#31362)
  * TraceViewer: Fix trace to logs icon to show in right pane (#31414)
  * add hg team as migrations code owners (#31420)
  * Remove tidy-check script (#31423)
  * InfluxDB: handle columns named "table" (#30985)
  * Prometheus: Use configured HTTP method for /series and /labels endpoints (#31401)
  * Devenv: Add gdev-influxdb2 data source (#31250)
  * Update grabpl from 0.5.38 to 0.5.42 version (#31419)
  * Move NOOP_CONTROL to storybook utils and change to a standalone file (#31421)
  * remove squadcast details from docs (#31413)
  * Add new Cloudwatch AWS/DDoSProtection metrics and dimensions (#31297)
  * Logging: add frontend logging helpers to @grafana/runtime package (#30482)
  * CallToActionCard: updates story from knobs to controls (#31393)
  * Add eu-south-1 cloudwatch region, closes #31197 (#31198)
  * Chore: Upgrade eslint packages (#31408)
  * Cascader: updates story from knobs to controls (#31399)
  * addressed issues 28763 and 30314. (#31404)
  * Added section Query a time series database by id (#31337)
  * Prometheus: Change default httpMethod for new instances to POST (#31292)
  * Data source list: Use Card component (#31326)
  * Chore: Remove gotest.tools dependency (#31391)
  * Revert "StoryBook: Introduces Grafana Controls (#31351)" (#31388)
  * Chore(deps): Bump github.com/prometheus/common from 0.15.0 to 0.17.0 (#31387)
  * AdHocVariables: Fixes crash when values are stored as numbers (#31382)
  * Chore(deps): Bump github.com/golang/mock from 1.4.4 to 1.5.0 (#31379)
  * Chore: Fix strict errors, down to 416 (#31365)
  * Chore(deps): Bump github.com/getsentry/sentry-go from 0.9.0 to 0.10.0 (#31378)
  * StoryBook: Introduces Grafana Controls (#31351)
  * ReleaseNotes: Updated changelog and release notes for 7.4.2 (#31313)
  * Theming: Support for runtime theme switching and hooks for custom themes (#31301)
  * Devenv: Remove old-versioned loki blocks and update prometheus2 block  (#31282)
  * Zipkin: Show success on test data source (#30829)
  * Update grot template (needs more info) (#31350)
  * DatasourceSrv: Fix instance retrieval when datasource variable value set to "default" (#31347)
  * TimeSeriesPanel: Fixes overlapping time axis ticks (#31332)
  * Grafana/UI: Add basic legend to the PieChart (#31278)
  * SAML: single logout only enabled in enterprise (#31325)
  * QueryEditor: handle query.hide changes in angular based query-editors (#31336)
  * DashboardLinks: Fixes another issue where dashboard links cause full page reload (#31334)
  * LibraryPanels: Syncs panel title with name (#31311)
  * Chore: Upgrade golangci-lint (#31330)
  * Add info to docs about concurrent session limits (#31333)
  * Table: Fixes issue with fixed min and auto max with bar gauge cell (#31316)
  * BarGuage: updates story from knobs to controls (#31223)
  * Docs: Clarifies how to add Key/Value pairs (#31303)
  * Usagestats: Exclude folders from total dashboard count (#31320)
  * ButtonCascader: updates story from knobs to controls (#31288)
  * test: allow check for Table as well as Graph for Explore e2e flow (#31290)
  * Grafana-UI: Update tooltip type (#31310)
  * fix 7.4.2 release note (#31299)
  * Add `--tries 3` arg when triggering e2e-tests upon releasing (#31285)
  * Chore: reduce strict errors for variables (#31241)
  * update latest release version (#31296)
  * ReleaseNotes: Updated changelog and release notes for 7.4.2 (#31291)
  * Correct name of Discord notifier tests (#31277)
  * Docs: Clarifies custom date formats for variables (#31271)
  * BigValue: updates story from knobs to controls (#31240)
  * Docs: Annotations update (#31194)
  * Introduce functions for interacting with library panels API (#30993)
  * Search: display sort metadata (#31167)
  * Folders: Editors should be able to edit name and delete folders (#31242)
  * Make Datetime local (No date if today) working (#31274)
  * UsageStats: Purpose named variables (#31264)
  * Snapshots: Disallow anonymous user to create snapshots (#31263)
  * only update usagestats every 30min (#31131)
  * Chore: grafana-toolkit uses grafana-ui and grafana-data workspaces (#30701)
  * Grafana-UI: Add id to Select to make it easier to test (#31230)
  * Prometheus: Fix enabling of disabled queries when editing in dashboard (#31055)
  * UI/Card: Fix handling of 'onClick' callback (#31225)
  * Loki: Add line limit for annotations (#31183)
  * Remove deprecated and breaking loki config field (#31227)
  * SqlDataSources: Fixes the Show Generated SQL button in query editors (#31236)
  * LibraryPanels: Disconnect before connect during dashboard save (#31235)
  * Disable Change Password for OAuth users (#27886)
  * TagsInput: Design update and component refactor (#31163)
  * Variables: Adds back default option for data source variable (#31208)
  * IPv6: Support host address configured with enclosing square brackets (#31226)
  * Postgres: Fix timeGroup macro converts long intervals to invalid numbers when TimescaleDB is enabled (#31179)
  * GraphNG: refactor core to class component (#30941)
  * Remove last synchronisation field from LDAP debug view (#30984)
  * Chore: Upgrade grafana-plugin-sdk-go to v0.88.0 (#30975)
  * Graph: Make axes unit option work even when field option unit is set (#31205)
  * AlertingNG:  Test definition  (#30886)
  * Docs: Update Influx config options (#31146)
  * WIP: Skip this call when we skip migrations (#31216)
  * use 0.1.0 (#31215)
  * DataSourceSrv: Filter out non queryable data sources by default (#31144)
  * QueryEditors: Fixes issue that happens after moving queries then editing would update other queries (#31193)
  * Chore: report eslint no-explicit-any errors to metrics (#31182)
  * Chore(deps): Bump cloud.google.com/go/storage from 1.12.0 to 1.13.0 (#31211)
  * Chore(deps): Bump xorm.io/xorm from 0.8.1 to 0.8.2 (#30773)
  * Alerting: Fix modal text for deleting obsolete notifier (#31171)
  * Chore(deps): Bump github.com/linkedin/goavro/v2 from 2.9.7 to 2.10.0 (#31204)
  * Variables: Fixes missing empty elements from regex filters (#31156)
  * StatPanels: Fixes to palette color scheme is not cleared when loading panel (#31126)
  * Fixed the typo. (#31189)
  * Docs: Rewrite preferences docs (#31154)
  * Explore/Refactor: Simplify URL handling (#29173)
  * DashboardLinks: Fixes links always cause full page reload (#31178)
  * Replace PR with Commit truncated hash when build fails (#31177)
  * Alert: update story to use controls (#31145)
  * Permissions: Fix team and role permissions on folders/dashboards not displayed for non Grafana Admin users (#31132)
  * CloudWatch: Ensure empty query row errors are not passed to the panel (#31172)
  * Update prometheus.md (#31173)
  * Variables: Extend option pickers to accept custom onChange callback (#30913)
  * Prometheus: Multiply exemplars timestamp to follow api change (#31143)
  * DashboardListPanel: Fixes issue with folder picker always showing All and using old form styles (#31160)
  * Add author name and pr number in drone pipeline notifications (#31124)
  * Prometheus: Add documentation for ad-hoc filters (#31122)
  * DataSourceSettings: Fixes add header button, it should not trigger a save &amp; test action (#31135)
  * Alerting: Fix so that sending an alert with the Alertmanager notifier doesn't fail when one of multiple configured URL's are down (#31079)
  * Chore: Update latest.json (#31139)
  * Docs: add 7.4.1 relese notes link (#31137)
  * PieChart: Progress on new core pie chart  (#28020)
  * ReleaseNotes: Updated changelog and release notes for 7.4.1 (#31133)
  * Eslint: no-duplicate-imports rule (bump grafana-eslint-config) (#30989)
  * Transforms: Fixes Outer join issue with duplicate field names not getting the same unique field names as before  (#31121)
  * MuxWriter: Handle error for already closed file (#31119)
  * Logging: sourcemap transform asset urls from CDN in logged stacktraces (#31115)
  * Search: add sort information in dashboard results (#30609)
  * area/grafana/e2e: ginstall should pull version specified (#31056)
  * Exemplars: Change CTA style (#30880)
  * Influx: Make max series limit configurable and show the limiting message if applied (#31025)
  * Docs: request security (#30937)
  * update configurePanel for 7.4.0 changes (#31093)
  * Elasticsearch: fix log row context erroring out (#31088)
  * Prometheus: Fix issues with ad-hoc filters (#30931)
  * LogsPanel: Add deduplication option for logs (#31019)
  * Drone: Make sure CDN upload is ok before pushing docker images (#31075)
  * PluginManager: Remove some global state (#31081)
  * test: update addDashboard flow for v7.4.0 changes (#31059)
  * Transformations: Fixed typo in FilterByValue transformer description. (#31078)
  * Docs: Group id should be 0 instead of 1 in Docker upgrade notes (#31074)
  * Usage stats: Adds source/distributor setting (#31039)
  * CDN: Add CDN upload step to enterprise and release pipelines (#31058)
  * Chore: Replace native select with grafana ui select  (#31030)
  * Docs: Update json-model.md (#31066)
  * Docs: Update whats-new-in-v7-4.md (#31069)
  * Added hyperlinks to Graphite documentation (#31064)
  * DashboardSettings: Update to new form styles (#31022)
  * CDN: Fixing drone CI config (#31052)
  * convert path to posix by default (#31045)
  * DashboardLinks: Fixes crash when link has no title (#31008)
  * Alerting: Fixes so notification channels are properly deleted (#31040)
  * Explore: Remove emotion error when displaying logs (#31026)
  * Elasticsearch: Fix alias field value not being shown in query editor (#30992)
  * CDN: Adds uppload to CDN step to drone CI (#30879)
  * Improved glossary (#31004)
  * BarGauge: Improvements to value sizing and table inner width calculations  (#30990)
  * Drone: Fix deployment image (#31027)
  * ColorPicker: migrated styles from sass to emotion (#30909)
  * Dashboard: Migrate general settings to react (#30914)
  * Chore(deps): Bump github.com/jung-kurt/gofpdf from 1.10.1 to 1.16.2 (#30586)
  * Chore(deps): Bump github.com/aws/aws-sdk-go from 1.36.31 to 1.37.7 (#31018)
  * Prometheus: Min step defaults to seconds when no unit is set to prevent errors when running alerts. (#30966)
  * Chore(deps): Bump github.com/magefile/mage from 1.10.0 to 1.11.0 (#31017)
  * Chore(deps): Bump github.com/grpc-ecosystem/go-grpc-middleware (#31013)
  * Graph: Fixes so graph is shown for non numeric time values (#30972)
  * CloudMonitoring: Prevent resource type variable function from crashing (#30901)
  * Chore(deps): Bump google.golang.org/api from 0.33.0 to 0.39.0 (#30971)
  * Build: Releases e2e and e2e-selectors too (#31006)
  * TextPanel: Fixes so panel title is updated when variables change (#30884)
  * Docs: Update configuration.md (login_maximum_inactive_lifetime_duration, login_maximum_lifetime_duration) (#31000)
  * instrumentation: make the first database histogram bucket smaller (#30995)
  * Grafana/UI: Remove DismissableFeatureInfoBox and replace with LocalSt? (#30988)
  * StatPanel: Fixes issue formatting date values using unit option (#30979)
  * Chore(deps): Bump actions/cache from v2 to v2.1.4 (#30973)
  * Units: Fixes formatting of duration units (#30982)
  * Elasticsearch: Show Size setting for raw_data metric (#30980)
  * Alerts: Dedupe alerts so that we do not fill the screen with the same alert messsage (#30935)
  * make sure service and slo display name is passed to segment comp (#30900)
  * assign changes in cloud datasources to the new cloud datasources team (#30645)
  * Table: Updates devenv test dashboard after change to TestData Randrom Table response (#30927)
  * Theme: Use higher order theme color variables rather then is light/dark logic (#30939)
  * Docs: Add alias for what's new in 7.4 (#30945)
  * e2e: extends selector factory to plugins (#30932)
  * Chore: Upgrade docker build image (#30820)
  * Docs: updated developer guide (#29978)
  * Alerts: Update Alert storybook to show more states (#30908)
  * Variables: Adds queryparam formatting option (#30858)
  * Chore: pad unknown values with undefined (#30808)
  * Transformers: add search to transform selection (#30854)
  * Exemplars: change api to reflect latest changes (#30910)
  * docs: use selinux relabelling on docker containers (#27685)
  * Docs: Fix bad image path for alert notification template (#30911)
  * Make value mappings correctly interpret numeric-like strings (#30893)
  * Chore: Update latest.json (#30905)
  * Docs: Update whats-new-in-v7-4.md (#30882)
  * Dashboard: Ignore changes to dashboard when the user session expires (#30897)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0 (#30902)
  * test: add support for timeout to be passed in for addDatasource (#30736)
  * increase page size and make sure the cache supports query params (#30892)
  * DataSourceSettings: Adds info box and link to Grafana Cloud (#30891)
  * OAuth: custom username docs (#28400)
  * Panels: Remove value mapping of values that have been formatted #26763 (#30868)
  * Alerting: Fixes alert panel header icon not showing (#30840)
  * AlertingNG: Edit Alert Definition (#30676)
  * Logging: sourcemap support for frontend stacktraces (#30590)
  * Added "Restart Grafana" topic. (#30844)
  * Docs: Org, Team, and User Admin (#30756)
  * bump grabpl version to 0.5.36 (#30874)
  * Plugins: Requests validator (#30445)
  * Docs: Update whats-new-in-v7-4.md (#30876)
  * Docs: Add server view folder (#30849)
  * Fixed image name and path  (#30871)
  * Grafana-ui: fixes closing modals with escape key (#30745)
  * InfluxDB: Add http configuration when selecting InfluxDB v2 flavor  (#30827)
  * TestData: Fixes issue with for ever loading state when all queries are hidden (#30861)
  * Chart/Tooltip: refactored style declaration (#30824)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0-beta1 (#30853)
  * Grafana-ui: fixes no data message in Table component (#30821)
  * grafana/ui: Update pagination component for large number of pages (#30151)
  * Alerting: Customise OK notification priorities for Pushover notifier (#30169)
  * DashboardLinks: Support variable expression in to tooltip - Issue #30409 (#30569)
  * Chore: Remove panelTime.html, closes #30097 (#30842)
  * Docs: Time series panel, bar alignment docs (#30780)
  * Chore: add more docs annotations (#30847)
  * Transforms: allow boolean in field calculations (#30802)
  * Prometheus: Add tooltip to explain possibility to use patterns in text and title fields in annotations (#30825)
  * Update prometheus.md with image link fix (#30833)
  * BarChart: inside-align strokes, upgrade uPlot to 1.6.4. (#30806)
  * Update license-expiration.md (#30839)
  * Explore rewrite (#30804)
  * Prometheus: Set type of labels to string (#30831)
  * GrafanaUI: Add a way to persistently close InfoBox (#30716)
  * Fix typo in transformer registry (#30712)
  * Elasticsearch: Display errors with text responses (#30122)
  * CDN: Fixes cdn path when Grafana is under sub path (#30822)
  * TraceViewer: Fix lazy loading (#30700)
  * FormField: migrated sass styling to emotion (#30392)
  * AlertingNG: change API permissions (#30781)
  * Variables: Clears drop down state when leaving dashboard (#30810)
  * Grafana-UI: Add story/docs for ErrorBoundary (#30304)
  * Add missing callback dependency (#30797)
  * PanelLibrary: Adds library panel meta information to dashboard json (#30770)
  * Chore(deps): Bump gonum.org/v1/gonum from 0.6.0 to 0.8.2 (#30343)
  * Chore(deps): Bump gopkg.in/yaml.v2 from 2.3.0 to 2.4.0 (#30771)
  * GraphNG: improve behavior when switching between solid/dash/dots (#30796)
  * Chore(deps): Bump github.com/hashicorp/go-hclog from 0.14.1 to 0.15.0 (#30778)
  * Add width for Variable Editors (#30791)
  * Chore: Remove warning when calling resource (#30752)
  * Auth: Use SigV4 lib from grafana-aws-sdk  (#30713)
  * Panels: Fixes so panels are refreshed when scrolling past them fast (#30784)
  * GraphNG: add bar alignment option (#30499)
  * Expressions: Measure total transformation requests and elapsed time (#30514)
  * Menu: Mark menu components as internal (#30740)
  * TableInputCSV: migrated styles from sass to emotion (#30554)
  * CDN: Fix passing correct prefix to GetContentDeliveryURL (#30777)
  * Chore(deps): Bump gopkg.in/ini.v1 from 1.57.0 to 1.62.0 (#30772)
  * CDN: Adds support for serving assets over a CDN (#30691)
  * PanelEdit: Trigger refresh when changing data source (#30744)
  * Chore: remove __debug_bin (#30725)
  * BarChart: add alpha bar chart panel (#30323)
  * Docs: Time series panel (#30690)
  * Backend Plugins: Convert test data source to use SDK contracts (#29916)
  * Docs: Update whats-new-in-v7-4.md (#30747)
  * Add link to Elasticsearch docs. (#30748)
  * Mobile: Fixes issue scrolling on mobile in chrome (#30746)
  * TagsInput: Make placeholder configurable (#30718)
  * Docs: Add config settings for fonts in reporting (#30421)
  * Add menu.yaml to .gitignore (#30743)
  * bump cypress to 6.3.0 (#30644)
  * Datasource: Use json-iterator configuration compatible with standard library (#30732)
  * AlertingNG: Update UX to use new PageToolbar component (#30680)
  * Docs: Add usage insights export feature (#30376)
  * skip symlinks to directories when generating plugin manifest (#30721)
  * PluginCiE2E: Upgrade base images (#30696)
  * Variables: Fixes so text format will show All instead of custom all (#30730)
  * PanelLibrary: better handling of deleted panels (#30709)
  * Added section "Curated dashboards for Google Cloud Monitoring" for 7.4 What's New (#30724)
  * Added "curated dashboards" information and broke down, rearranged topics. (#30659)
  * Transform: improve the "outer join" performance/behavior (#30407)
  * Add alt text to plugin logos (#30710)
  * Deleted menu.yaml file (#30717)
  * Dashboard: Top Share URL icon should share panel URL when on viewPanel page (#30000)
  * Added entry for web server. (#30715)
  * DashboardPicker: switch to promise-based debounce, return dashboard UID (#30706)
  * Use connected GraphNG in Explore (#30707)
  * Fix documentation for streaming data sources (#30704)
  * PanelLibrary: changes casing of responses and adds meta property (#30668)
  * Influx: Show all datapoints for dynamically windowed flux query (#30688)
  * Trace: trace to logs design update (#30637)
  * DeployImage: Switch base images to Debian (#30684)
  * Chore: remove CSP debug logging line (#30689)
  * Docs: 7.4 documentation for expressions (#30524)
  * PanelEdit: Get rid of last remaining usage of navbar-button (#30682)
  * Grafana-UI: Fix setting default value for MultiSelect (#30671)
  * CustomScrollbar: migrated styles from sass to emotion (#30506)
  * DashboardSettings &amp; PanelEdit: Use new PageToolbar (#30675)
  * Explore: Fix jumpy live tailing (#30650)
  * ci(npm-publish): add missing github package token to env vars (#30665)
  * PageToolbar: Extracting navbar styles &amp; layout into a modern emotion based component (#30588)
  * AlertingNG: pause/unpause definitions via the API (#30627)
  * Docs: Refer to product docs in whats new for alerting templating feature (#30652)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0-beta1 (#30666)
  * Variables: Fixes display value when using capture groups in regex (#30636)
  * Docs: Update _index.md (#30655)
  * Docs: Auditing updates (#30433)
  * Docs: add hidden_users configuration field (#30435)
  * Docs: Define TLS/SSL terminology (#30533)
  * Docs: Fix expressions enabled description (#30589)
  * Docs: Update ES screenshots (#30598)
  * Licensing Docs: Adding license restrictions docs (#30216)
  * Update documentation-style-guide.md (#30611)
  * Docs: Update queries.md (#30616)
  * chore(grafana-ui): bump storybook to 6.1.15 (#30642)
  * DashboardSettings: fixes vertical scrolling (#30640)
  * Usage Stats: Remove unused method for getting user stats (#30074)
  * Grafana/UI: Unit picker should not set a category as unit (#30638)
  * Graph: Fixes auto decimals issue in legend and tooltip (#30628)
  * AlertingNG: List saved Alert definitions in Alert Rule list (#30603)
  * chore: bump redux toolkit to 1.5.0 for immer 8.0.1 vulnerability fix (#30605)
  * Grafana/UI: Add disable prop to Segment (#30539)
  * Variables: Fixes so queries work for numbers values too (#30602)
  * Admin: Fixes so form values are filled in from backend (#30544)
  * Docs: Add new override info and add whats new 7.4 links (#30615)
  * TestData: Improve what's new in v7.4 (#30612)
  * Docs: Update 7.4 What's New to use more correct description of alerting notification template feature (#30502)
  * NodeGraph: Add docs (#30504)
  * Loki: Improve live tailing errors and fix Explore's logs container type errors (#30517)
  * TimeRangePicker: Updates components to use new ToolbarButton &amp; ButtonGroup (#30570)
  * Update styling.md guide (#30594)
  * TestData: Adding what's new in v7.4 to the devenv dashboards (#30568)
  * Chore(deps): Bump github.com/aws/aws-sdk-go from 1.35.5 to 1.36.31 (#30583)
  * Chore(deps): Bump github.com/prometheus/client_golang (#30585)
  * Chore(deps): Bump gopkg.in/macaron.v1 from 1.3.9 to 1.4.0 (#30587)
  * Chore(deps): Bump github.com/google/uuid from 1.1.5 to 1.2.0 (#30584)
  * Explore: Fix logs hover state so that it is visible and in dark mode &amp; simply hover code (#30572)
  * RefreshPicker: Fixes so valid intervals in url are visible in RefreshPicker (#30474)
  * Add documentation for Exemplars (#30317)
  * OldGraph: Fix height issue in Firefox (#30565)
  * XY Chart: fix editor error with empty frame (no fields) (#30573)
  * ButtonSelect &amp; RefreshPicker: Rewrite of components to use new emotion based ToolbarButton &amp; Menu (#30510)
  * XY Chart: share legend config with timeseries (#30559)
  * configuration.md: Document Content Security Policy options (#30413)
  * DataFrame: cache frame/field index in field state (#30529)
  * List + before -; rm old Git ref; reformat. (#30543)
  * Expressions: Add option to disable feature (#30541)
  * Explore: Fix loading visualisation on the top of the new time series panel (#30553)
  * Prometheus: Fix show query instead of Value if no __name__ and metric (#30511)
  * Decimals: Big Improvements to auto decimals and fixes to auto decimals bug found in 7.4-beta1  (#30519)
  * Postgres: Convert tests to stdlib (#30536)
  * Storybook: Migrate card story to use controls  (#30535)
  * AlertingNG: Enable UI to Save Alert Definitions (#30394)
  * Postgres: Be consistent about TLS/SSL terminology (#30532)
  * Loki: Append refId to logs uid (#30418)
  * Postgres: Fix indentation (#30531)
  * GraphNG: uPlot 1.6.3 (fix bands not filling below 0). close #30523. (#30527)
  * updates for e2e docker image (#30465)
  * GraphNG: uPlot 1.6.2 (#30521)
  * Docs: Update whats-new-in-v7-4.md (#30520)
  * Prettier: ignore build and devenv dirs (#30501)
  * Chore: Upgrade grabpl version (#30486)
  * Explore: Update styling of buttons (#30493)
  * Cloud Monitoring: Fix legend naming with display name override (#30440)
  * GraphNG: Disable Plot logging by default (#30390)
  * Admin: Fixes so whole org drop down is visible when adding users to org (#30481)
  * Docs: include Makefile option for local assets (#30455)
  * Footer: Fixes layout issue in footer  (#30443)
  * TimeSeriesPanel: Fixed default value for gradientMode (#30484)
  * Docs: fix typo in what's new doc (#30489)
  * Chore: adds wait to e2e test (#30488)
  * chore: update packages dependent on dot-prop to fix security vulnerability (#30432)
  * Dashboard: Remove Icon and change copy -&gt; Copy to clipboard in the share embedded panel modal (#30480)
  * Chore: fix spelling mistake (#30473)
  * Chore: Restrict internal imports from other packages (#30453)
  * Docs: What's new fixes and improvements (#30469)
  * Timeseries: only migrage point size when configured (#30461)
  * Alerting: Hides threshold handle for percentual thresholds (#30431)
  * Graph: Fixes so only users with correct permissions can add annotations (#30419)
  * Chore: update latest version to 7.4.0-beta1 (#30452)
  * Docs: Add whats new 7.4 links (#30463)
  * Update whats-new-in-v7-4.md (#30460)
  * docs: 7.4 what's new (Add expressions note) (#30446)
  * Chore: Upgrade build pipeline tool (#30456)
  * PanelModel: Make sure the angular options are passed to react panel type changed handler (#30441)
  * Expressions: Fix button icon (#30444)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0-beta1 (#30449)
  * Docs: Fix img link for alert notification template (#30436)
  * grafana/ui: Fix internal import from grafana/data (#30439)
  * prevent field config from being overwritten (#30437)
  * PanelOptions: Refactoring applying panel and field options out of PanelModel and add property clean up for properties not in field config registry  (#30389)
  * Dashboard: Remove template variables option from ShareModal (#30395)
  * Added doc content for variables inspector code change by Hugo (#30408)
  * Docs: update license expiration behavior for reporting (#30420)
  * Chore: use old version format in package.json (#30430)
  * Chore: upgrade NPM security vulnerabilities (#30397)
  * "Release: Updated versions in package to 7.5.0-pre.0" (#30428)
  * contribute: Add backend and configuration guidelines for PRs (#30426)
  * Chore: Update what's new URL (#30424)
- Update to version 7.4.5
  * Security: Fix API permissions issues related to team-sync CVE-2021-28146, CVE-2021-28147. (Enterprise)
  * Security: Usage insights requires signed in users CVE-2021-28148. (Enterprise)
  * Security: Do not allow editors to incorrectly bypass permissions on the default data source. CVE-2021-27962. (Enterprise)
- Drop patch add-gotest-module.patch
- Add patch drop-grafana-aws-sdk-0.3.0-module.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1618488000">- Update to version 7.5.4:
  * "Release: Updated versions in package to 7.5.4" (#32971)
  * fix(datasource_srv): prevent infinite loop where default datasource is named default (#32949) (#32967)
  * Added Azure Monitor support for Microsoft.AppConfiguration/configurationStores namespace (#32123) (#32968)
  * fix sqlite3 tx retry condition operator precedence (#32897) (#32952)
  * AzureMonitor: Add support for Virtual WAN namespaces (#32935) (#32947)
  * Plugins: Allow a non-dashboard page to be the default home page (#32926) (#32945)
  * GraphNG: uPlot 1.6.8 (#32859) (#32863)
  * Alerting: Add ability to include aliases with dashes (/) and at (@) signs in InfluxDB (#32844)
  * Prometheus: Allow exemplars endpoint in data source proxy (#32802) (#32804)
  * [v7.5.x] Table: Fixes table data links so they refer to correct row after sorting (#32758)
  * TablePanel: Makes sorting case-insensitive (#32435) (#32752)</changelog>
  <changelog author="ecsos@opensuse.org" date="1620302400">- Update to version 7.5.5:
  * "Release: Updated versions in package to 7.5.5" (#33469)
  * GraphNG: Fix exemplars window position (#33427) (#33462)
  * Remove field limitation from slack notification (#33113) (#33455)
  * Prometheus: Support POST in template variables (#33321) (#33441)
  * Instrumentation: Add success rate metrics for email notifications (#33359) (#33409)
  * Use either moment objects (for absolute times in the datepicker) or string (for relative time) (#33315) (#33406)
  * Docs: Removed type from find annotations example. (#33399) (#33403)
  * [v7.5.x]: FrontendMetrics: Adds new backend api that frontend can use to push frontend measurements and counters to prometheus (#33255)
  * Updated label for add panel. (#33285) (#33286)
  * Bug: Add git to Dockerfile.ubuntu (#33247) (#33248)
  * Docs: Sync latest master docs with 7.5.x (#33156)
  * Docs: Update getting-started-influxdb.md (#33234) (#33241)
  * Doc: Document the X-Grafana-Org-Id HTTP header (#32478) (#33239)
  * Minor Changes in Auditing.md (#31435) (#33238)
  * Docs: Add license check endpoint doc (#32987) (#33236)
  * Postgres: Fix time group macro when TimescaleDB is enabled and interval is less than a second (#33153) (#33219)
  * Docs: InfluxDB doc improvements (#32815) (#33185)
  * [v7.5.x] Loki: Pass Skip TLS Verify setting to alert queries (#33031)
  * update cla (#33181)
  * Fix inefficient regular expression (#33155) (#33159)
  * Auth: Don't clear auth token cookie when lookup token fails (#32999) (#33136)
  * Elasticsearch:  Add documentation for supported Elasticsearch query transformations (#33072) (#33128)
  * Update team.md (#33060) (#33084)
  * GE issue 1268 (#33049) (#33081)
  * Fixed some formatting issues for PRs from yesterday. (#33078) (#33079)
  * Explore: Load default data source in Explore when the provided source does not exist (#32992) (#33061)
  * Docs: Replace next with latest in aliases (#33054) (#33059)
  * Added missing link item. (#33052) (#33055)
  * Backport 33034 (#33038)
  * Docs: Backport 32916 to v7.5x  (#33008)
  * ReleaseNotes: Updated changelog and release notes for 7.5.4 (#32973) (#32998)
  * Elasticsearch: Force re-rendering of each editor row type change (#32993) (#32996)
  * Docs: Sync release branch with latest docs (#32986)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Update to version 7.5.7:
  * Updated relref to "Configuring exemplars" section (#34240) (#34243)
  * Added exemplar topic (#34147) (#34226)
  * Quota: Do not count folders towards dashboard quota (#32519) (#34025)
  * Instructions to separate emails with semicolons (#32499) (#34138)
  * Docs: Remove documentation of v8 generic OAuth feature (#34018)
  * Annotations: Prevent orphaned annotation tags cleanup when no annotations were cleaned (#33957) (#33975)
  * [GH-33898] Add missing --no-cache to Dockerfile. (#33906) (#33935)
  * ReleaseNotes: Updated changelog and release notes for 7.5.6 (#33932) (#33936)
  * Stop hoisting @icons/material (#33922)
  * Chore: fix react-color version in yarn.lock (#33914)
  * "Release: Updated versions in package to 7.5.6" (#33909)
  * Loki: fix label browser crashing when + typed (#33900) (#33901)
  * Document `hide_version` flag (#33670) (#33881)
  * Add isolation level db configuration parameter (#33830) (#33878)
  * Sanitize PromLink button (#33874) (#33876)
  * Removed content as per MarcusE's suggestion in https://github.com/grafana/grafana/issues/33822. (#33870) (#33872)
  * Docs feedback: /administration/provisioning.md (#33804) (#33842)
  * Docs: delete from high availability docs references to removed configurations related to session storage (#33827) (#33851)
  * Docs: Update _index.md (#33797) (#33799)
  * Docs: Update installation.md (#33656) (#33703)
  * GraphNG: uPlot 1.6.9 (#33598) (#33612)
  * dont consider invalid email address a failed email (#33671) (#33681)
  * InfluxDB: Improve measurement-autocomplete behavior in query editor (#33494) (#33625)
  * add template for dashboard url parameters  (#33549) (#33588)
  * Add note to Snapshot API doc to specify that user has to provide the entire dashboard model  (#33572) (#33586)
  * Update team.md (#33454) (#33536)
  * Removed duplicate file "dashboard_folder_permissions.md (#33497)
  * Document customQueryParameters for prometheus datasource provisioning (#33440) (#33495)
  * ReleaseNotes: Updated changelog and release notes for 7.5.5 (#33473) (#33492)
  * Documentation: Update developer-guide.md (#33478) (#33490)
  * add closed parenthesis to fix a hyperlink (#33471) (#33481)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1632225600">- Add patch 0001-Add-source-code-reference.patch
  * Add URL to package source code in the login page footer</changelog>
  <changelog author="ro@suse.de" date="1637150400">- Update to version 7.5.11:
  * Fix Snapshot authentication bypass (bsc#1191454, CVE-2021-39226)
  * Fix certs issue (#40002)
  * Release v7.5.11 (#124)
  * Fix static path matching issue in macaron
  * OAuth: add docs for disableAutoLogin param (#38752) (#38894)
  * Fix #747; remove 'other variables'. (#37866) (#37878)
  * Update alert docs (#33658) (#33659)
  * [7.5.x] Docs: added documentation for the "prepare time series"-transformation. (#36836)
  * cherry picked dc5778c303ca555b70e8ca8c28e95997e26ecfc1 (#36813)
  * "Release: Updated versions in package to 7.5.10" (#36792)
  * [v7.5.x] Transformations: add 'prepare time series' transformer (#36749)
  * Remove verify-drone from windows (#36775)
  * Update queries.md (#31941) (#36764)
  * Updated content to specify method to use to get keyboard shortcuts wh? (#36084) (#36087)
  * ReleaseNotes: Updated changelog and release notes for 7.5.9 (#36057) (#36077)
  * "Release: Updated versions in package to 7.5.9" (#36056)
  * Login: Fixes Unauthorized message showing when on login page or snapshot page (#35311) (#35880)
  * ReleaseNotes: Updated changelog and release notes for 7.5.8 (#35703) (#35822)
  * CI: Upgrade pipeline tool to use main (#35804)
  * CI: try to force v7.5.x instead of master (#35799)
  * CI: supports move from master to main in 7.5.x release branch (#35747)
  * "Release: Updated versions in package to 7.5.8" (#35701)
  * Chore: Bump acorn and lodash-es (#35650)
  * Snapshots: Remove dashboard links from snapshots (#35567) (#35585)
  * [v7.5.x] Datasource: Allow configuring `MaxConnsPerHost` (#35519)
  * Remove docs sync from v7.5.x (#35443)
  * "Release: Updated versions in package to 7.5.7" (#35412)
  * Add max_idle_connections_per_host to config (#35365)
  * Update go.sum to fix failing enterprise pipeline (#35353)
  * [v7.5.x] HTTP Client: Introduce `go-conntrack`  (#35321)
  * Fix Markdown syntax in enterprise/license/_index.md (#34683) (#35210)
  * Update annotations.md (#33218) (#35138)
  * Docs: Add query caching to enterprise docs page (#34751) (#35025)
  * [7.5.x] Admin: hide per role counts for licensed users (#34994)
  * cleanup shortcodes, image paths (#34827)
  * Security: Upgrade Thrift dependency (#34698) (#34702)
  * Docs: Fix Quick Start link on Geting Started Influx page (#34549) (#34603)
  * Add link to release notes v7.5.7 (#34460) (#34474)
  * Update 7.5.x landing page (#34447)
  * ReleaseNotes: Updated changelog and release notes for 7.5.7 (#34383) (#34428)
- update to 7.5.10
  * [v7.5.x] Transformations: add "prepare time series" transformer. [#36749]
- update to 7.5.9
  * Login: Fix Unauthorized message that is displayed on sign-in or snapshot page. [#35880]
- drop drop-grafana-aws-sdk-0.3.0-module.patch (upstream)</changelog>
  <changelog author="ro@suse.de" date="1637236800">- recreate tarballs using the makefile to update the
  npm and go modules required</changelog>
  <changelog author="witold.bedyk@suse.com" date="1639396800">- Update to version 7.5.12:
  * Fix markdown path traversal (#42969, bsc#1193688, CVE-2021-43813)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642680000">- Update to Go 1.17.
- Add build-time dependency on `wire`.
- Update license to GNU Affero General Public License v3.0.
- Update to version 8.3.4
  + Security:
  * GetUserInfo: return an error if no user was found
    (bsc#1194873, CVE-2022-21673)
  + Features and enhancements:
  * Alerting: Allow configuration of non-ready alertmanagers.
  * Alerting: Allow customization of Google chat message.
  * AppPlugins: Support app plugins with only default nav.
  * InfluxDB: query editor: skip fields in metadata queries.
  * Postgres/MySQL/MSSQL: Cancel in-flight SQL query if user
    cancels query in grafana.
  * Prometheus: Forward oauth tokens after prometheus datasource
    migration.
  + Bug fixes:
  * Azure Monitor: Bug fix for variable interpolations in metrics
    dropdowns.
  * Azure Monitor: Improved error messages for variable queries.
  * CloudMonitoring: Fixes broken variable queries that use group
    bys.
  * Configuration: You can now see your expired API keys if you
    have no active ones.
  * Elasticsearch: Fix handling multiple datalinks for a single
    field.
  * Export: Fix error being thrown when exporting dashboards
    using query variables that reference the default datasource.
  * ImportDashboard: Fixes issue with importing dashboard and
    name ending up in uid.
  * Login: Page no longer overflows on mobile.
  * Plugins: Set backend metadata property for core plugins.
  * Prometheus: Fill missing steps with null values.
  * Prometheus: Fix interpolation of $__rate_interval variable.
  * Prometheus: Interpolate variables with curly brackets syntax.
  * Prometheus: Respect the http-method data source setting.
  * Table: Fixes issue with field config applied to wrong fields
    when hiding columns.
  * Toolkit: Fix bug with rootUrls not being properly parsed when
    signing a private plugin.
  * Variables: Fix so data source variables are added to adhoc
    configuration.
  + Plugin development fixes &amp; changes:
  * Toolkit: Revert build config so tslib is bundled with plugins
    to prevent plugins from crashing.
- Update to version 8.3.3:
  + Features and enhancements:
  * BarChart: Use new data error view component to show actions
    in panel edit.
  * CloudMonitor: Iterate over pageToken for resources.
  * Macaron: Prevent WriteHeader invalid HTTP status code panic.
  + Bug fixes:
  * AnnoListPanel: Fix interpolation of variables in tags.
  * CloudWatch: Allow queries to have no dimensions specified.
  * CloudWatch: Fix broken queries for users migrating from
    8.2.4/8.2.5 to 8.3.0.
  * CloudWatch: Make sure MatchExact flag gets the right value.
  * Dashboards: Fix so that empty folders can be deleted from the
    manage dashboards/folders page.
  * InfluxDB: Improve handling of metadata query errors in
    InfluxQL.
  * Loki: Fix adding of ad hoc filters for queries with parser
    and line_format expressions.
  * Prometheus: Fix running of exemplar queries for non-histogram
    metrics.
  * Prometheus: Interpolate template variables in interval.
  * StateTimeline: Fix toolitp not showing when for frames with
    multiple fields.
  * TraceView: Fix virtualized scrolling when trace view is
    opened in right pane in Explore.
  * Variables: Fix repeating panels for on time range changed
    variables.
  * Variables: Fix so queryparam option works for scoped
    variables.
- Update to version 8.3.2
  + Security: Fixes CVE-2021-43813 and CVE-2021-43815.
- Update to version 8.3.1
  + Security: Fixes CVE-2021-43798.
- Update to version 8.3.0
  + Features and enhancements:
  * Alerting: Prevent folders from being deleted when they
    contain alerts.
  * Alerting: Show full preview value in tooltip.
  * BarGauge: Limit title width when name is really long.
  * CloudMonitoring: Avoid to escape regexps in filters.
  * CloudWatch: Add support for AWS Metric Insights.
  * TooltipPlugin: Remove other panels' shared tooltip in edit
    panel.
  * Visualizations: Limit y label width to 40% of visualization
    width.
  + Bug fixes:
  * Alerting: Clear alerting rule evaluation errors after
    intermittent failures.
  * Alerting: Fix refresh on legacy Alert List panel.
  * Dashboard: Fix queries for panels with non-integer widths.
  * Explore: Fix url update inconsistency.
  * Prometheus: Fix range variables interpolation for time ranges
    smaller than 1 second.
  * ValueMappings: Fixes issue with regex value mapping that only
    sets color.
- Update to version 8.3.0-beta2
  + Breaking changes:
  * Grafana 8 Alerting enabled by default for installations that
    do not use legacy alerting.
  * Keep Last State for "If execution error or timeout" when
    upgrading to Grafana 8 alerting.
  + Features and enhancements:
  * Alerting: Create DatasourceError alert if evaluation returns
    error.
  * Alerting: Make Unified Alerting enabled by default for those
    who do not use legacy alerting.
  * Alerting: Support mute timings configuration through the api
    for the embedded alert manager.
  * CloudWatch: Add missing AWS/Events metrics.
  * Docs: Add easier to find deprecation notices to certain data
    sources and to the changelog.
  * Plugins Catalog: Enable install controls based on the
    pluginAdminEnabled flag.
  * Table: Add space between values for the DefaultCell and
    JSONViewCell.
  * Tracing: Make query editors available in dashboard for Tempo
    and Zipkin.
  + Bug fixes:
  * AccessControl: Renamed orgs roles, removed fixed:orgs:reader
    introduced in beta1.
  * Azure Monitor: Add trap focus for modals in grafana/ui and
    other small a11y fixes for Azure Monitor.
  * CodeEditor: Prevent suggestions from being clipped.
  * Dashboard: Fix cache timeout persistence.
  * Datasource: Fix stable sort order of query responses.
  * Explore: Fix error in query history when removing last item.
  * Logs: Fix requesting of older logs when flipped order.
  * Prometheus: Fix running of health check query based on access
    mode.
  * TextPanel: Fix suggestions for existing panels.
  * Tracing: Fix incorrect indentations due to reoccurring
    spanIDs.
  * Tracing: Show start time of trace with milliseconds
    precision.
  * Variables: Make renamed or missing variable section
    expandable.
  + Plugin development fixes &amp; changes:
  * Select: Select menus now properly scroll during keyboard
    navigation.
- Update to version 8.3.0-beta1
  + Features and enhancements:
  * Alerting: Add UI for contact point testing with custom
    annotations and labels.
  * Alerting: Make alert state indicator in panel header work
    with Grafana 8 alerts.
  * Alerting: Option for Discord notifier to use webhook name.
  * Annotations: Deprecate AnnotationsSrv.
  * Auth: Omit all base64 paddings in JWT tokens for the JWT
    auth.
  * Azure Monitor: Clean up fields when editing Metrics.
  * AzureMonitor: Add new starter dashboards.
  * AzureMonitor: Add starter dashboard for app monitoring with
    Application Insights.
  * Barchart/Time series: Allow x axis label.
  * CLI: Improve error handling for installing plugins.
  * CloudMonitoring: Migrate to use backend plugin SDK contracts.
  * CloudWatch Logs: Add retry strategy for hitting max
    concurrent queries.
  * CloudWatch: Add AWS RoboMaker metrics and dimension.
  * CloudWatch: Add AWS Transfer metrics and dimension.
  * Dashboard: replace datasource name with a reference object.
  * Dashboards: Show logs on time series when hovering.
  * Elasticsearch: Add support for Elasticsearch 8.0 (Beta).
  * Elasticsearch: Add time zone setting to Date Histogram
    aggregation.
  * Elasticsearch: Enable full range log volume histogram.
  * Elasticsearch: Full range logs volume.
  * Explore: Allow changing the graph type.
  * Explore: Show ANSI colors when highlighting matched words in
    the logs panel.
  * Graph(old) panel: Listen to events from Time series panel.
  * Import: Load gcom dashboards from URL.
  * LibraryPanels: Improves export and import of library panels
    between orgs.
  * OAuth: Support PKCE.
  * Panel edit: Overrides now highlight correctly when searching.
  * PanelEdit: Display drag indicators on draggable sections.
  * Plugins: Refactor Plugin Management.
  * Prometheus: Add custom query parameters when creating
    PromLink url.
  * Prometheus: Remove limits on metrics, labels, and values in
    Metrics Browser.
  * StateTimeline: Share cursor with rest of the panels.
  * Tempo: Add error details when json upload fails.
  * Tempo: Add filtering for service graph query.
  * Tempo: Add links to nodes in Service Graph pointing to
    Prometheus metrics.
  * Time series/Bar chart panel: Add ability to sort series via
    legend.
  * TimeSeries: Allow multiple axes for the same unit.
  * TraceView: Allow span links defined on dataFrame.
  * Transformations: Support a rows mode in labels to fields.
  * ValueMappings: Don't apply field config defaults to time
    fields.
  * Variables: Only update panels that are impacted by variable
    change.
  + Bug fixes:
  * API: Fix dashboard quota limit for imports.
  * Alerting: Fix rule editor issues with Azure Monitor data
    source.
  * Azure monitor: Make sure alert rule editor is not enabled
    when template variables are being used.
  * CloudMonitoring: Fix annotation queries.
  * CodeEditor: Trigger the latest getSuggestions() passed to
    CodeEditor.
  * Dashboard: Remove the current panel from the list of options
    in the Dashboard datasource.
  * Encryption: Fix decrypting secrets in alerting migration.
  * InfluxDB: Fix corner case where index is too large in ALIAS
    field.
  * NavBar: Order App plugins alphabetically.
  * NodeGraph: Fix zooming sensitivity on touchpads.
  * Plugins: Add OAuth pass-through logic to api/ds/query
    endpoint.
  * Snapshots: Fix panel inspector for snapshot data.
  * Tempo: Fix basic auth password reset on adding tag.
  * ValueMapping: Fixes issue with regex mappings.
  + Plugin development fixes &amp; changes:
  * grafana/ui: Enable slider marks display.
- Update to version 8.2.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.2.6
  + Features and enhancements:
  * Security: Upgrade Docker base image to Alpine 3.14.3.
  * Security: Upgrade Go to 1.17.2.
  + Bug fixes:
  * TimeSeries: Fix fillBelowTo wrongly affecting fills of
    unrelated series.
- Update to version 8.2.5
  + Breaking changes:
  * Fix No Data behaviour in Legacy Alerting.
  + Bug fixes:
  * Alerting: Fix a bug where the metric in the evaluation string
    was not correctly populated.
  * Alerting: Fix no data behaviour in Legacy Alerting for alert
    rules using the AND operator.
  * CloudMonitoring: Ignore min and max aggregation in MQL
    queries.
  * Dashboards: 'Copy' is no longer added to new dashboard
    titles.
  * DataProxy: Fix overriding response body when response is a
    WebSocket upgrade.
  * Elasticsearch: Use field configured in query editor as field
    for date_histogram aggregations.
  * Explore: Fix running queries without a datasource property
    set.
  * InfluxDB: Fix numeric aliases in queries.
  * Plugins: Ensure consistent plugin settings list response.
  * Tempo: Fix validation of float durations.
  * Tracing: Correct tags for each span are shown.
- Update to version 8.2.4
  + Security: Fixes CVE-2021-41244.
- Update to version 8.2.3
  + Security: Fixes CVE-2021-41174.
- Update to version 8.2.2
  + Features and enhancements:
  * Annotations: We have improved tag search performance.
  * Application: You can now configure an error-template title.
  * AzureMonitor: We removed a restriction from the resource
    filter query.
  * Packaging: We removed the ProcSubset option in systemd. This
    option prevented Grafana from starting in LXC environments.
  * Prometheus: We removed the autocomplete limit for metrics.
  * Table: We improved the styling of the type icons to make them
    more distinct from column / field name.
  * ValueMappings: You can now use value mapping in stat, gauge,
    bar gauge, and pie chart visualizations.
  + Bug fixes:
  * Alerting: Fix panic when Slack's API sends unexpected
    response.
  * Alerting: The Create Alert button now appears on the
    dashboard panel when you are working with a default
    datasource.
  * Explore: We fixed the problem where the Explore log panel
    disappears when an Elasticsearch logs query returns no
    results.
  * Graph: You can now see annotation descriptions on hover.
  * Logs: The system now uses the JSON parser only if the line is
    parsed to an object.
  * Prometheus: We fixed the issue where the system did not reuse
    TCP connections when querying from Grafana alerting.
  * Prometheus: We fixed the problem that resulted in an error
    when a user created a query with a $__interval min step.
  * RowsToFields: We fixed the issue where the system was not
    properly interpreting number values.
  * Scale: We fixed how the system handles NaN percent when data
    min = data max.
  * Table panel: You can now create a filter that includes
    special characters.
- Update to version 8.2.1
  + Bug fixes:
  * Dashboard: Fix rendering of repeating panels.
  * Datasources: Fix deletion of data source if plugin is not
    found.
  * Packaging: Remove systemcallfilters sections from systemd
    unit files.
  * Prometheus: Add Headers to HTTP client options.
- Update to version 8.2.0
  + Features and enhancements:
  * AWS: Updated AWS authentication documentation.
  * Alerting: Added support Alertmanager data source for upstream
    Prometheus AM implementation.
  * Alerting: Allows more characters in label names so
    notifications are sent.
  * Alerting: Get alert rules for a dashboard or a panel using
    /api/v1/rules endpoints.
  * Annotations: Improved rendering performance of event markers.
  * CloudWatch Logs: Skip caching for log queries.
  * Explore: Added an opt-in configuration for Node Graph in
    Jaeger, Zipkin, and Tempo.
  * Packaging: Add stricter systemd unit options.
  * Prometheus: Metrics browser can now handle label values with
    special characters.
  + Bug fixes:
  * CodeEditor: Ensure that we trigger the latest onSave callback
    provided to the component.
  * DashboardList/AlertList: Fix for missing All folder value.
  + Plugin development fixes &amp; changes:
  * Plugins: Create a mock icon component to prevent console
    errors.
- Update to version 8.2.0-beta2
  + Features and enhancements:
  * AccessControl: Document new permissions restricting data
    source access.
  * TimePicker: Add fiscal years and search to time picker.
  * Alerting: Added support for Unified Alerting with Grafana HA.
  * Alerting: Added support for tune rule evaluation using
    configuration options.
  * Alerting: Cleanups alertmanager namespace from key-value
    store when disabling Grafana 8 alerts.
  * Alerting: Remove ngalert feature toggle and introduce two new
    settings for enabling Grafana 8 alerts and disabling them for
    specific organisations.
  * CloudWatch: Introduced new math expression where it is
    necessary to specify the period field.
  * InfluxDB: Added support for $__interval and $__interval_ms in
    Flux queries for alerting.
  * InfluxDB: Flux queries can use more precise start and end
    timestamps with nanosecond-precision.
  * Plugins Catalog: Make the catalog the default way to interact
    with plugins.
  * Prometheus: Removed autocomplete limit for metrics.
  + Bug fixes:
  * Alerting: Fixed an issue where the edit page crashes if you
    tried to preview an alert without a condition set.
  * Alerting: Fixed rules migration to keep existing Grafana 8
    alert rules.
  * Alerting: Fixed the silence file content generated during
    migration.
  * Analytics: Fixed an issue related to interaction event
    propagation in Azure Application Insights.
  * BarGauge: Fixed an issue where the cell color was lit even
    though there was no data.
  * BarGauge: Improved handling of streaming data.
  * CloudMonitoring: Fixed INT64 label unmarshal error.
  * ConfirmModal: Fixes confirm button focus on modal open.
  * Dashboard: Add option to generate short URL for variables
    with values containing spaces.
  * Explore: No longer hides errors containing refId property.
  * Fixed an issue that produced State timeline panel tooltip
    error when data was not in sync.
  * InfluxDB: InfluxQL query editor is set to always use
    resultFormat.
  * Loki: Fixed creating context query for logs with parsed
    labels.
  * PageToolbar: Fixed alignment of titles.
  * Plugins Catalog: Update to the list of available panels after
    an install, update or uninstall.
  * TimeSeries: Fixed an issue where the shared cursor was not
    showing when hovering over in old Graph panel.
  * Variables: Fixed issues related to change of focus or refresh
    pages when pressing enter in a text box variable input.
  * Variables: Panel no longer crash when using the adhoc
    variable in data links.
- Update to version 8.2.0-beta1
  + Features and enhancements:
  * AccessControl: Introduce new permissions to restrict access
    for reloading provisioning configuration.
  * Alerting: Add UI to edit Cortex/Loki namespace, group names,
    and group evaluation interval.
  * Alerting: Add a Test button to test contact point.
  * Alerting: Allow creating/editing recording rules for Loki and
    Cortex.
  * Alerting: Metrics should have the label org instead of user.
  * Alerting: Sort notification channels by name to make them
    easier to locate.
  * Alerting: Support org level isolation of notification
    configuration.
  * AzureMonitor: Add data links to deep link to Azure Portal
    Azure Resource Graph.
  * AzureMonitor: Add support for annotations from Azure Monitor
    Metrics and Azure Resource Graph services.
  * AzureMonitor: Show error message when subscriptions request
    fails in ConfigEditor.
  * Chore: Update to Golang 1.16.7.
  * CloudWatch Logs: Add link to X-Ray data source for trace IDs
    in logs.
  * CloudWatch Logs: Disable query path using websockets (Live)
    feature.
  * CloudWatch/Logs: Don't group dataframes for non time series
    queries.
  * Cloudwatch: Migrate queries that use multiple stats to one
    query per stat.
  * Dashboard: Keep live timeseries moving left (v2).
  * Datasources: Introduce response_limit for datasource
    responses.
  * Explore: Add filter by trace or span ID to trace to logs
    feature.
  * Explore: Download traces as JSON in Explore Inspector.
  * Explore: Reuse Dashboard's QueryRows component.
  * Explore: Support custom display label for derived fields
    buttons for Loki datasource.
  * Grafana UI: Update monaco-related dependencies.
  * Graphite: Deprecate browser access mode.
  * InfluxDB: Improve handling of intervals in alerting.
  * InfluxDB: InfluxQL query editor: Handle unusual characters in
    tag values better.
  * Jaeger: Add ability to upload JSON file for trace data.
  * LibraryElements: Enable specifying UID for new and existing
    library elements.
  * LibraryPanels: Remove library panel icon from the panel
    header so you can no longer tell that a panel is a library
    panel from the dashboard view.
  * Logs panel: Scroll to the bottom on page refresh when sorting
    in ascending order.
  * Loki: Add fuzzy search to label browser.
  * Navigation: Implement active state for items in the Sidemenu.
  * Packaging: Add stricter systemd unit options.
  * Packaging: Update PID file location from /var/run to /run.
  * Plugins: Add Hide OAuth Forward config option.
  * Postgres/MySQL/MSSQL: Add setting to limit the maximum number
    of rows processed.
  * Prometheus: Add browser access mode deprecation warning.
  * Prometheus: Add interpolation for built-in-time variables to
    backend.
  * Tempo: Add ability to upload trace data in JSON format.
  * TimeSeries/XYChart: Allow grid lines visibility control in
    XYChart and TimeSeries panels.
  * Transformations: Convert field types to time string number or
    boolean.
  * Value mappings: Add regular-expression based value mapping.
  * Zipkin: Add ability to upload trace JSON.
  + Bug fixes:
  * Admin: Prevent user from deleting user's current/active
    organization.
  * LibraryPanels: Fix library panel getting saved in the
    dashboard's folder.
  * OAuth: Make generic teams URL and JMES path configurable.
  * QueryEditor: Fix broken copy-paste for mouse middle-click
  * Thresholds: Fix undefined color in "Add threshold".
  * Timeseries: Add wide-to-long, and fix multi-frame output.
  * TooltipPlugin: Fix behavior of Shared Crosshair when Tooltip
    is set to All.
  + Plugin development fixes &amp; changes:
  * Grafana UI: Fix TS error property css is missing in type.
- Update to version 8.1.8
  + Security: Fixes CVE-2021-43798.
- Update to version 8.1.7
  + Bug fixes:
  * Alerting: Fix alerts with evaluation interval more than 30
    seconds resolving before notification.
  * Elasticsearch/Prometheus: Fix usage of proper SigV4 service
    namespace.
- Update to version 8.1.6
  + Security: Fixes CVE-2021-39226.
- Update to version 8.1.5
  + Bug fixes:
  * BarChart: Fixes panel error that happens on second refresh.
- Update to version 8.1.4
  + Features and enhancements
  * Explore: Ensure logs volume bar colors match legend colors.
  * LDAP: Search all DNs for users.
  + Bug fixes:
  * Alerting: Fix notification channel migration.
  * Annotations: Fix blank panels for queries with unknown data
    sources.
  * BarChart: Fix stale values and x axis labels.
  * Graph: Make old graph panel thresholds work even if ngalert
    is enabled.
  * InfluxDB: Fix regex to identify / as separator.
  * LibraryPanels: Fix update issues related to library panels in
    rows.
  * Variables: Fix variables not updating inside a Panel when the
    preceding Row uses "Repeat For".
- Update to version 8.1.3
  + Bug fixes
  * Alerting: Fix alert flapping in the internal alertmanager.
  * Alerting: Fix request handler failed to convert dataframe
    "results" to plugins.DataTimeSeriesSlice: input frame is not
    recognized as a time series.
  * Dashboard: Fix UIDs are not preserved when importing/creating
    dashboards thru importing .json file.
  * Dashboard: Forces panel re-render when exiting panel edit.
  * Dashboard: Prevent folder from changing when navigating to
    general settings.
  * Docker: Force use of libcrypto1.1 and libssl1.1 versions to
    fix CVE-2021-3711.
  * Elasticsearch: Fix metric names for alert queries.
  * Elasticsearch: Limit Histogram field parameter to numeric
    values.
  * Elasticsearch: Prevent pipeline aggregations to show up in
    terms order by options.
  * LibraryPanels: Prevent duplicate repeated panels from being
    created.
  * Loki: Fix ad-hoc filter in dashboard when used with parser.
  * Plugins: Track signed files + add warn log for plugin assets
    which are not signed.
  * Postgres/MySQL/MSSQL: Fix region annotations not displayed
    correctly.
  * Prometheus: Fix validate selector in metrics browser.
  * Security: Fix stylesheet injection vulnerability.
  * Security: Fix short URL vulnerability.
- Update to version 8.1.2
  + Features and enhancements:
  * AzureMonitor: Add support for PostgreSQL and MySQL Flexible
    Servers.
  * Datasource: Change HTTP status code for failed datasource
    health check to 400.
  * Explore: Add span duration to left panel in trace viewer.
  * Plugins: Use file extension allowlist when serving plugin
    assets instead of checking for UNIX executable.
  * Profiling: Add support for binding pprof server to custom
    network interfaces.
  * Search: Make search icon keyboard navigable.
  * Template variables: Keyboard navigation improvements.
  * Tooltip: Display ms within minute time range.
  + Bug fixes:
  * Alerting: Fix saving LINE contact point.
  * Annotations: Fix alerting annotation coloring.
  * Annotations: Alert annotations are now visible in the correct
    Panel.
  * Auth: Hide SigV4 config UI and disable middleware when its
    config flag is disabled.
  * Dashboard: Prevent incorrect panel layout by comparing window
    width against theme breakpoints.
  * Elasticsearch: Fix metric names for alert queries.
  * Explore: Fix showing of full log context.
  * PanelEdit: Fix 'Actual' size by passing the correct panel
    size to Dashboard.
  * Plugins: Fix TLS datasource settings.
  * Variables: Fix issue with empty drop downs on navigation.
  * Variables: Fix URL util converting false into true.
  + Plugin development fixes &amp; changes:
  * Toolkit: Fix matchMedia not found error.
- Update to version 8.1.1
  + Bug fixes:
  * CloudWatch Logs: Fix crash when no region is selected.
- Update to version 8.1.0
  + Features and enhancements:
  * Alerting: Deduplicate receivers during migration.
  * ColorPicker: Display colors as RGBA.
  * Select: Make portalling the menu opt-in, but opt-in
    everywhere.
  * TimeRangePicker: Improve accessibility.
  + Bug fixes:
  * Annotations: Correct annotations that are displayed upon page
    refresh.
  * Annotations: Fix Enabled button that disappeared from Grafana
    v8.0.6.
  * Annotations: Fix data source template variable that was not
    available for annotations.
  * AzureMonitor: Fix annotations query editor that does not
    load.
  * Geomap: Fix scale calculations.
  * GraphNG: Fix y-axis autosizing.
  * Live: Display stream rate and fix duplicate channels in list
    response.
  * Loki: Update labels in log browser when time range changes in
    dashboard.
  * NGAlert: Send resolve signal to alertmanager on alerting -&gt;
    Normal.
  * PasswordField: Prevent a password from being displayed when
    you click the Enter button.
  * Renderer: Remove debug.log file when Grafana is stopped.
  * Security: Update dependencies to fix CVE-2021-36222.
- Update to version 8.1.0-beta3
  + Features and enhancements:
  * Alerting: Support label matcher syntax in alert rule list
    filter.
  * IconButton: Put tooltip text as aria-label.
  * Live: Experimental HA with Redis.
  * UI: FileDropzone component.
  * CloudWatch: Add AWS LookoutMetrics.
  + Bug fixes:
  * Docker: Fix builds by delaying go mod verify until all
    required files are copied over.
  * Exemplars: Fix disable exemplars only on the query that
    failed.
  * SQL: Fix SQL dataframe resampling (fill mode + time
    intervals).
- Update to version 8.1.0-beta2
  + Features and enhancements:
  * Alerting: Expand the value string in alert annotations and
    labels.
  * Auth: Add Azure HTTP authentication middleware.
  * Auth: Auth: Pass user role when using the authentication
    proxy.
  * Gazetteer: Update countries.json file to allow for linking to
    3-letter country codes.
  + Bug fixes:
  * Config: Fix Docker builds by correcting formatting in
    sample.ini.
  * Explore: Fix encoding of internal URLs.
- Update to version 8.1.0-beta1
  + Features and enhancements:
  * Alerting: Add Alertmanager notifications tab.
  * Alerting: Add button to deactivate current Alertmanager
    configuration.
  * Alerting: Add toggle in Loki/Prometheus data source
    configuration to opt out of alerting UI.
  * Alerting: Allow any "evaluate for" value &gt;=0 in the alert
    rule form.
  * Alerting: Load default configuration from status endpoint, if
    Cortex Alertmanager returns empty user configuration.
  * Alerting: view to display alert rule and its underlying data.
  * Annotation panel: Release the annotation panel.
  * Annotations: Add typeahead support for tags in built-in
    annotations.
  * AzureMonitor: Add curated dashboards for Azure services.
  * AzureMonitor: Add support for deep links to Microsoft Azure
    portal for Metrics.
  * AzureMonitor: Remove support for different credentials for
    Azure Monitor Logs.
  * AzureMonitor: Support querying any Resource for Logs queries.
  * Elasticsearch: Add frozen indices search support.
  * Elasticsearch: Name fields after template variables values
    instead of their name.
  * Elasticsearch: add rate aggregation.
  * Email: Allow configuration of content types for email
    notifications.
  * Explore: Add more meta information when line limit is hit.
  * Explore: UI improvements to trace view.
  * FieldOverrides: Added support to change display name in an
    override field and have it be matched by a later rule.
  * HTTP Client: Introduce dataproxy_max_idle_connections config
    variable.
  * InfluxDB: InfluxQL: adds tags to timeseries data.
  * InfluxDB: InfluxQL: make measurement search case insensitive.
    Legacy Alerting: Replace simplejson with a struct in webhook
    notification channel.
  * Legend: Updates display name for Last (not null) to just
    Last*.
  * Logs panel: Add option to show common labels.
  * Loki: Add $__range variable.
  * Loki: Add support for "label_values(log stream selector,
    label)" in templating.
  * Loki: Add support for ad-hoc filtering in dashboard.
  * MySQL Datasource: Add timezone parameter.
  * NodeGraph: Show gradient fields in legend.
  * PanelOptions: Don't mutate panel options/field config object
    when updating.
  * PieChart: Make pie gradient more subtle to match other
    charts.
  * Prometheus: Update PromQL typeahead and highlighting.
  * Prometheus: interpolate variable for step field.
  * Provisioning: Improve validation by validating across all
    dashboard providers.
  * SQL Datasources: Allow multiple string/labels columns with
    time series.
  * Select: Portal select menu to document.body.
  * Team Sync: Add group mapping to support team sync in the
    Generic OAuth provider.
  * Tooltip: Make active series more noticeable.
  * Tracing: Add support to configure trace to logs start and end
    time.
  * Transformations: Skip merge when there is only a single data
    frame.
  * ValueMapping: Added support for mapping text to color,
    boolean values, NaN and Null. Improved UI for value mapping.
  * Visualizations: Dynamically set any config (min, max, unit,
    color, thresholds) from query results.
  * live: Add support to handle origin without a value for the
    port when matching with root_url.
  + Bug fixes:
  * Alerting: Handle marshaling Inf values.
  * AzureMonitor: Fix macro resolution for template variables.
  * AzureMonitor: Fix queries with Microsoft.NetApp/../../volumes
    resources.
  * AzureMonitor: Request and concat subsequent resource pages.
  * Bug: Fix parse duration for day.
  * Datasources: Improve error handling for error messages.
  * Explore: Correct the functionality of shift-enter shortcut
    across all uses.
  * Explore: Show all dataFrames in data tab in Inspector.
  * GraphNG: Fix Tooltip mode 'All' for XYChart.
  * Loki: Fix highlight of logs when using filter expressions
    with backticks.
  * Modal: Force modal content to overflow with scroll.
  * Plugins: Ignore symlinked folders when verifying plugin
    signature.
  + Plugin development fixes &amp; changes:
  * Toolkit: Improve error messages when tasks fail.
- Update to version 8.0.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.0.6
  + Features and enhancements:
  * Alerting: Add annotation upon alert state change.
  * Alerting: Allow space in label and annotation names.
  * InfluxDB: Improve legend labels for InfluxDB query results.
  + Bug fixes:
  * Alerting: Fix improper alert by changing the handling of
    empty labels.
  * CloudWatch/Logs: Reestablish Cloud Watch alert behavior.
  * Dashboard: Avoid migration breaking on fieldConfig without
    defaults field in folded panel.
  * DashboardList: Fix issue not re-fetching dashboard list after
    variable change.
  * Database: Fix incorrect format of isolation level
    configuration parameter for MySQL.
  * InfluxDB: Correct tag filtering on InfluxDB data.
  * Links: Fix links that caused a full page reload.
  * Live: Fix HTTP error when InfluxDB metrics have an incomplete
    or asymmetrical field set.
  * Postgres/MySQL/MSSQL: Change time field to "Time" for time
    series queries.
  * Postgres: Fix the handling of a null return value in query
    results.
  * Tempo: Show hex strings instead of uints for IDs.
  * TimeSeries: Improve tooltip positioning when tooltip
    overflows.
  * Transformations: Add 'prepare time series' transformer.
- Update to version 8.0.5
  + Features and enhancements:
  * Cloudwatch Logs: Send error down to client.
  * Folders: Return 409 Conflict status when folder already
    exists.
  * TimeSeries: Do not show series in tooltip if it's hidden in
    the viz.
  + Bug fixes:
  * AzureMonitor: Fix issue where resource group name is missing
    on the resource picker button.
  * Chore: Fix AWS auth assuming role with workspace IAM.
  * DashboardQueryRunner: Fixes unrestrained subscriptions being
    created.
  * DateFormats: Fix reading correct setting key for
    use_browser_locale.
  * Links: Fix links to other apps outside Grafana when under sub
    path.
  * Snapshots: Fix snapshot absolute time range issue.
  * Table: Fix data link color.
  * Time Series: Fix X-axis time format when tick increment is
    larger than a year.
  * Tooltip Plugin: Prevent tooltip render if field is undefined.
- Update to version 8.0.4
  + Features and enhancements:
  * Live: Rely on app url for origin check.
  * PieChart: Sort legend descending, update placeholder.
  * TimeSeries panel: Do not reinitialize plot when thresholds
    mode change.
  + Bug fixes:
  * Elasticsearch: Allow case sensitive custom options in
    date_histogram interval.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * Explore: Fix import of queries between SQL data sources.
  * InfluxDB: InfluxQL query editor: fix retention policy
    handling.
  * Loki: Send correct time range in template variable queries.
  * TimeSeries: Preserve RegExp series overrides when migrating
    from old graph panel.
- Update to version 8.0.3
  + Features and enhancements:
  * Alerting: Increase alertmanager_conf column if MySQL.
  * Time series/Bar chart panel: Handle infinite numbers as nulls
    when converting to plot array.
  * TimeSeries: Ensure series overrides that contain color are
    migrated, and migrate the previous fieldConfig when changing
    the panel type.
  * ValueMappings: Improve singlestat value mappings migration.
  + Bug fixes:
  * Annotations: Fix annotation line and marker colors.
  * AzureMonitor: Fix KQL template variable queries without
    default workspace.
  * CloudWatch/Logs: Fix missing response data for log queries.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * LibraryPanels: Fix crash in library panels list when panel
    plugin is not found.
  * LogsPanel: Fix performance drop when moving logs panel in
    dashboard.
  * Loki: Parse log levels when ANSI coloring is enabled.
  * MSSQL: Fix issue with hidden queries still being executed.
  * PanelEdit: Display the VisualizationPicker that was not
    displayed if a panel has an unknown panel plugin.
  * Plugins: Fix loading symbolically linked plugins.
  * Prometheus: Fix issue where legend name was replaced with
    name Value in stat and gauge panels.
  * State Timeline: Fix crash when hovering over panel.
- Update to version 8.0.2
  + Features and enhancements:
  * Datasource: Add support for max_conns_per_host in dataproxy
    settings.
  + Bug fixes:
  * Configuration: Fix changing org preferences in FireFox.
  * PieChart: Fix legend dimension limits.
  * Postgres/MySQL/MSSQL: Fix panic in concurrent map writes.
  * Variables: Hide default data source if missing from regex.
- Update to version 8.0.1
  + Bug fixes:
  * Alerting/SSE: Fix "count_non_null" reducer validation.
  * Cloudwatch: Fix duplicated time series.
  * Cloudwatch: Fix missing defaultRegion.
  * Dashboard: Fix Dashboard init failed error on dashboards with
    old singlestat panels in collapsed rows.
  * Datasource: Fix storing timeout option as numeric.
  * Postgres/MySQL/MSSQL: Fix annotation parsing for empty
    responses.
  * Postgres/MySQL/MSSQL: Numeric/non-string values are now
    returned from query variables.
  * Postgres: Fix an error that was thrown when the annotation
    query did not return any results.
  * StatPanel: Fix an issue with the appearance of the graph when
    switching color mode.
  * Visualizations: Fix an issue in the
    Stat/BarGauge/Gauge/PieChart panels where all values mode
    were showing the same name if they had the same value.
  + Plugin development fixes &amp; changes:
  * Toolkit: Resolve external fonts when Grafana is served from a
    sub path.
- Update to version 8.0.0
  + Breaking changes:
  * The following endpoints were deprecated for Grafana v5.0 and
    support for them has now been removed:
    GET /dashboards/db/:slug
    GET /dashboard-solo/db/:slug
    GET /api/dashboard/db/:slug
    DELETE /api/dashboards/db/:slug
  + Features and enhancements:
  * AzureMonitor: Require default subscription for workspaces()
    template variable query.
  * AzureMonitor: Use resource type display names in the UI.
  * Dashboard: Remove support for loading and deleting dashboard
    by slug.
  * InfluxDB: Deprecate direct browser access in data source.
  * VizLegend: Add a read-only property.
  + Bug fixes:
  * AzureMonitor: Fix Azure Resource Graph queries in Azure
    China.
  * Checkbox: Fix vertical layout issue with checkboxes due to
    fixed height.
  * Dashboard: Fix Table view when editing causes the panel data
    to not update.
  * Dashboard: Fix issues where unsaved-changes warning is not
    displayed.
  * Login: Fixes Unauthorized message showing when on login page
    or snapshot page.
  * NodeGraph: Fix sorting markers in grid view.
  * Short URL: Include orgId in generated short URLs.
  * Variables: Support raw values of boolean type.
- Update to version 8.0.0-beta3
  + Breaking changes:
  * The default HTTP method for Prometheus data source is now
    POST.
  + Features and enhancements:
  * API: Support folder UID in dashboards API.
  * Alerting: Add support for configuring avatar URL for the
    Discord notifier.
  * Alerting: Clarify that Threema Gateway Alerts support only
    Basic IDs.
  * Azure: Expose Azure settings to external plugins.
  * AzureMonitor: Deprecate using separate credentials for Azure
    Monitor Logs.
  * AzureMonitor: Display variables in resource picker for Azure
    Monitor Logs.
  * AzureMonitor: Hide application insights for data sources not
    using it.
  * AzureMonitor: Support querying subscriptions and resource
    groups in Azure Monitor Logs.
  * AzureMonitor: remove requirement for default subscription.
  * CloudWatch: Add Lambda@Edge Amazon CloudFront metrics.
  * CloudWatch: Add missing AWS AppSync metrics.
  * ConfirmModal: Auto focus delete button.
  * Explore: Add caching for queries that are run from logs
    navigation.
  * Loki: Add formatting for annotations.
  * Loki: Bring back processed bytes as meta information.
  * NodeGraph: Display node graph collapsed by default with trace
    view.
  * Overrides: Include a manual override option to hide something
    from visualization.
  * PieChart: Support row data in pie charts.
  * Prometheus: Update default HTTP method to POST for existing
    data sources.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  + Bug fixes:
  * Admin: Fix infinite loading edit on the profile page.
  * Color: Fix issues with random colors in string and date
    fields.
  * Dashboard: Fix issue with title or folder change has no
    effect after exiting settings view.
  * DataLinks: Fix an issue __series.name is not working in data
    link.
  * Datasource: Fix dataproxy timeout should always be applied
    for outgoing data source HTTP requests.
  * Elasticsearch: Fix NewClient not passing httpClientProvider
    to client impl.
  * Explore: Fix Browser title not updated on Navigation to
    Explore.
  * GraphNG: Remove fieldName and hideInLegend properties from
    UPlotSeriesBuilder.
  * OAuth: Fix fallback to auto_assign_org_role setting for Azure
    AD OAuth when no role claims exists.
  * PanelChrome: Fix issue with empty panel after adding a non
    data panel and coming back from panel edit.
  * StatPanel: Fix data link tooltip not showing for single
    value.
  * Table: Fix sorting for number fields.
  * Table: Have text underline for datalink, and add support for
    image datalink.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  * Transformations: Prevent FilterByValue transform from
    crashing panel edit.
- Update to version 8.0.0-beta2
  + Features and enhancements:
  * AppPlugins: Expose react-router to apps.
  * AzureMonitor: Add Azure Resource Graph.
  * AzureMonitor: Managed Identity configuration UI.
  * AzureMonitor: Token provider with support for Managed
    Identities.
  * AzureMonitor: Update Logs workspace() template variable query
    to return resource URIs.
  * BarChart: Value label sizing.
  * CloudMonitoring: Add support for preprocessing.
  * CloudWatch: Add AWS/EFS StorageBytes metric.
  * CloudWatch: Allow use of missing AWS namespaces using custom
    metrics.
  * Datasource: Shared HTTP client provider for core backend data
    sources and any data source using the data source proxy.
  * InfluxDB: InfluxQL: allow empty tag values in the query
    editor.
  * Instrumentation: Instrument incoming HTTP request with
    histograms by default.
  * Library Panels: Add name endpoint &amp; unique name validation to
    AddLibraryPanelModal.
  * Logs panel: Support details view.
  * PieChart: Always show the calculation options dropdown in the
    editor.
  * PieChart: Remove beta flag.
  * Plugins: Enforce signing for all plugins.
  * Plugins: Remove support for deprecated backend plugin
    protocol version.
  * Tempo/Jaeger: Add better display name to legend.
  * Timeline: Add time range zoom.
  * Timeline: Adds opacity &amp; line width option.
  * Timeline: Value text alignment option.
  * ValueMappings: Add duplicate action, and disable dismiss on
    backdrop click.
  * Zipkin: Add node graph view to trace response.
  + Bug fixes:
  * Annotations panel: Remove subpath from dashboard links.
  * Content Security Policy: Allow all image sources by default.
  * Content Security Policy: Relax default template wrt. loading
    of scripts, due to nonces not working.
  * Datasource: Fix tracing propagation for alert execution by
    introducing HTTP client outgoing tracing middleware.
  * InfluxDB: InfluxQL always apply time interval end.
  * Library Panels: Fixes "error while loading library panels".
  * NewsPanel: Fixes rendering issue in Safari.
  * PanelChrome: Fix queries being issued again when scrolling in
    and out of view.
  * Plugins: Fix Azure token provider cache panic and auth param
    nil value.
  * Snapshots: Fix key and deleteKey being ignored when creating
    an external snapshot.
  * Table: Fix issue with cell border not showing with colored
    background cells.
  * Table: Makes tooltip scrollable for long JSON values.
  * TimeSeries: Fix for Connected null values threshold toggle
    during panel editing.
  * Variables: Fixes inconsistent selected states on dashboard
    load.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * QueryField: Remove carriage return character from pasted text.
- Update to version 8.0.0-beta1
  + License update:
  * AGPL License: Update license from Apache 2.0 to the GNU
    Affero General Public License (AGPL).
  + Breaking changes:
  * Removes the never refresh option for Query variables.
  * Removes the experimental Tags feature for Variables.
  + Deprecations:
  * The InfoBox &amp; FeatureInfoBox are now deprecated please use
    the Alert component instead with severity info.
  + Features and enhancements:
  * API: Add org users with pagination.
  * API: Return 404 when deleting nonexistent API key.
  * API: Return query results as JSON rather than base64 encoded
    Arrow.
  * Alerting: Allow sending notification tags to Opsgenie as
    extra properties.
  * Alerts: Replaces all uses of InfoBox &amp; FeatureInfoBox with
    Alert.
  * Auth: Add support for JWT Authentication.
  * AzureMonitor: Add support for
    Microsoft.SignalRService/SignalR metrics.
  * AzureMonitor: Azure settings in Grafana server config.
  * AzureMonitor: Migrate Metrics query editor to React.
  * BarChart panel: enable series toggling via legend.
  * BarChart panel: Adds support for Tooltip in BarChartPanel.
  * PieChart panel: Change look of highlighted pie slices.
  * CloudMonitoring: Migrate config editor from angular to react.
  * CloudWatch: Add Amplify Console metrics and dimensions.
  * CloudWatch: Add missing Redshift metrics to CloudWatch data
    source.
  * CloudWatch: Add metrics for managed RabbitMQ service.
  * DashboardList: Enable templating on search tag input.
  * Datasource config: correctly remove single custom http
    header.
  * Elasticsearch: Add generic support for template variables.
  * Elasticsearch: Allow omitting field when metric supports
    inline script.
  * Elasticsearch: Allow setting a custom limit for log queries.
  * Elasticsearch: Guess field type from first non-empty value.
  * Elasticsearch: Use application/x-ndjson content type for
    multisearch requests.
  * Elasticsearch: Use semver strings to identify ES version.
  * Explore: Add logs navigation to request more logs.
  * Explore: Map Graphite queries to Loki.
  * Explore: Scroll split panes in Explore independently.
  * Explore: Wrap each panel in separate error boundary.
  * FieldDisplay: Smarter naming of stat values when visualising
    row values (all values) in stat panels.
  * Graphite: Expand metric names for variables.
  * Graphite: Handle unknown Graphite functions without breaking
    the visual editor.
  * Graphite: Show graphite functions descriptions.
  * Graphite: Support request cancellation properly (Uses new
    backendSrv.fetch Observable request API).
  * InfluxDB: Flux: Improve handling of complex
    response-structures.
  * InfluxDB: Support region annotations.
  * Inspector: Download logs for manual processing.
  * Jaeger: Add node graph view for trace.
  * Jaeger: Search traces.
  * Loki: Use data source settings for alerting queries.
  * NodeGraph: Exploration mode.
  * OAuth: Add support for empty scopes.
  * PanelChrome: New logic-less emotion based component with no
    dependency on PanelModel or DashboardModel.
  * PanelEdit: Adds a table view toggle to quickly view data in
    table form.
  * PanelEdit: Highlight matched words when searching options.
  * PanelEdit: UX improvements.
  * Plugins: PanelRenderer and simplified QueryRunner to be used
    from plugins.
  * Plugins: AuthType in route configuration and params
    interpolation.
  * Plugins: Enable plugin runtime install/uninstall
    capabilities.
  * Plugins: Support set body content in plugin routes.
  * Plugins: Introduce marketplace app.
  * Plugins: Moving the DataSourcePicker to grafana/runtime so it
    can be reused in plugins.
  * Prometheus: Add custom query params for alert and exemplars
    queries.
  * Prometheus: Use fuzzy string matching to autocomplete metric
    names and label.
  * Routing: Replace Angular routing with react-router.
  * Slack: Use chat.postMessage API by default.
  * Tempo: Search for Traces by querying Loki directly from
    Tempo.
  * Tempo: Show graph view of the trace.
  * Themes: Switch theme without reload using global shortcut.
  * TimeSeries panel: Add support for shared cursor.
  * TimeSeries panel: Do not crash the panel if there is no time
    series data in the response.
  * Variables: Do not save repeated panels, rows and scopedVars.
  * Variables: Removes experimental Tags feature.
  * Variables: Removes the never refresh option.
  * Visualizations: Unify tooltip options across visualizations.
  * Visualizations: Refactor and unify option creation between
    new visualizations.
  * Visualizations: Remove singlestat panel.
  + Bug fixes:
  * APIKeys: Fixes issue with adding first api key.
  * Alerting: Add checks for non supported units - disable
    defaulting to seconds.
  * Alerting: Fix issue where Slack notifications won't link to
    user IDs.
  * Alerting: Omit empty message in PagerDuty notifier.
  * AzureMonitor: Fix migration error from older versions of App
    Insights queries.
  * CloudWatch: Fix AWS/Connect dimensions.
  * CloudWatch: Fix broken AWS/MediaTailor dimension name.
  * Dashboards: Allow string manipulation as advanced variable
    format option.
  * DataLinks: Includes harmless extended characters like
    Cyrillic characters.
  * Drawer: Fixes title overflowing its container.
  * Explore: Fix issue when some query errors were not shown.
  * Generic OAuth: Prevent adding duplicated users.
  * Graphite: Handle invalid annotations.
  * Graphite: Fix autocomplete when tags are not available.
  * InfluxDB: Fix Cannot read property 'length' of undefined in
    when parsing response.
  * Instrumentation: Enable tracing when Jaeger host and port are
    set.
  * Instrumentation: Prefix metrics with grafana.
  * MSSQL: By default let driver choose port.
  * OAuth: Add optional strict parsing of role_attribute_path.
  * Panel: Fixes description markdown with inline code being
    rendered on newlines and full width.
  * PanelChrome: Ignore data updates &amp; errors for non data
    panels.
  * Permissions: Fix inherited folder permissions can prevent new
    permissions being added to a dashboard.
  * Plugins: Remove pre-existing plugin installs when installing
    with grafana-cli.
  * Plugins: Support installing to folders with whitespace and
    fix pluginUrl trailing and leading whitespace failures.
  * Postgres/MySQL/MSSQL: Don't return connection failure details
    to the client.
  * Postgres: Fix ms precision of interval in time group macro
    when TimescaleDB is enabled.
  * Provisioning: Use dashboard checksum field as change
    indicator.
  * SQL: Fix so that all captured errors are returned from sql
    engine.
  * Shortcuts: Fixes panel shortcuts so they always work.
  * Table: Fixes so border is visible for cells with links.
  * Variables: Clear query when data source type changes.
  * Variables: Filters out builtin variables from unknown list.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * Button: Introduce buttonStyle prop.
  * DataQueryRequest: Remove deprecated props showingGraph and
    showingTabel and exploreMode.
  * grafana/ui: Update React Hook Form to v7.
  * IconButton: Introduce variant for red and blue icon buttons.
  * Plugins: Expose the getTimeZone function to be able to get
    the current selected timeZone.
  * TagsInput: Add className to TagsInput.
  * VizLegend: Move onSeriesColorChanged to PanelContext
    (breaking change).
- Update to version 7.5.13
  + Bug fixes:
  * Alerting: Fix NoDataFound for alert rules using AND operator.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1644408000">- Update to version 8.3.5 (jsc#SLE-23439, jsc#SLE-23422)
  + Security:
  * Fixes XSS vulnerability in handling data sources
    (bsc#1195726, CVE-2022-21702)
  * Fixes cross-origin request forgery vulnerability
    (bsc#1195727, CVE-2022-21703)
  * Fixes Insecure Direct Object Reference vulnerability in Teams
    API (bsc#1195728, CVE-2022-21713)</changelog>
</package>
<package pkgid="17864e5e8a485baa0925b911961cda7803ad2246ac9f14c7ed190e2df5c83eec" name="grafana" arch="s390x">
  <version epoch="0" ver="8.3.5" rel="150200.3.21.1"/>
  <changelog author="egotthold@suse.com" date="1589457600">- Add instructions for patching the Grafana javascript frontend.</changelog>
  <changelog author="jcavalheiro@suse.com" date="1590321600">- Update to version 7.0.0
  * Breaking changes
  - Removed PhantomJS: PhantomJS was deprecated in Grafana v6.4 and starting from Grafana v7.0.0, all PhantomJS support has been removed. This means that Grafana no longer ships with a built-in image renderer, and we advise you to install the Grafana Image Renderer plugin.
  - Dashboard: A global minimum dashboard refresh interval is now enforced and defaults to 5 seconds.
  - Interval calculation: There is now a new option Max data points that controls the auto interval $__interval calculation. Interval was previously calculated by dividing the panel width by the time range. With the new max data points option it is now easy to set $__interval to a dynamic value that is time range agnostic. For example if you set Max data points to 10 Grafana will dynamically set $__interval by dividing the current time range by 10.
  - Datasource/Loki: Support for deprecated Loki endpoints has been removed.
  - Backend plugins: Grafana now requires backend plugins to be signed, otherwise Grafana will not load/start them. This is an additional security measure to make sure backend plugin binaries and files haven't been tampered with. Refer to Upgrade Grafana for more information.
  - @grafana/ui: Forms migration notice, see @grafana/ui changelog
  - @grafana/ui: Select API change for creating custom values, see @grafana/ui changelog
    + Deprecation warnings
  - Scripted dashboards is now deprecated. The feature is not removed but will be in a future release. We hope to address the underlying requirement of dynamic dashboards in a different way. #24059
  - The unofficial first version of backend plugins together with usage of grafana/grafana-plugin-model is now deprecated and support for that will be removed in a future release. Please refer to backend plugins documentation for information about the new officially supported backend plugins.
  * Features / Enhancements
  - Backend plugins: Log deprecation warning when using the unofficial first version of backend plugins. #24675, @marefr
  - Editor: New line on Enter, run query on Shift+Enter. #24654, @davkal
  - Loki: Allow multiple derived fields with the same name. #24437, @aocenas
  - Orgs: Add future deprecation notice. #24502, @torkelo
  * Bug Fixes
  - @grafana/toolkit: Use process.cwd() instead of PWD to get directory. #24677, @zoltanbedi
  - Admin: Makes long settings values line break in settings page. #24559, @hugohaggmark
  - Dashboard: Allow editing provisioned dashboard JSON and add confirmation when JSON is copied to dashboard. #24680, @dprokop
  - Dashboard: Fix for strange "dashboard not found" errors when opening links in dashboard settings. #24416, @torkelo
  - Dashboard: Fix so default data source is selected when data source can't be found in panel editor. #24526, @mckn
  - Dashboard: Fixed issue changing a panel from transparent back to normal in panel editor. #24483, @torkelo
  - Dashboard: Make header names reflect the field name when exporting to CSV file from the the panel inspector. #24624, @peterholmberg
  - Dashboard: Make sure side pane is displayed with tabs by default in panel editor. #24636, @dprokop
  - Data source: Fix query/annotation help content formatting. #24687, @AgnesToulet
  - Data source: Fixes async mount errors. #24579, @Estrax
  - Data source: Fixes saving a data source without failure when URL doesn't specify a protocol. #24497, @aknuds1
  - Explore/Prometheus: Show results of instant queries only in table. #24508, @ivanahuckova
  - Explore: Fix rendering of react query editors. #24593, @ivanahuckova
  - Explore: Fixes loading more logs in logs context view. #24135, @Estrax
  - Graphite: Fix schema and dedupe strategy in rollup indicators for Metrictank queries. #24685, @torkelo
  - Graphite: Makes query annotations work again. #24556, @hugohaggmark
  - Logs: Clicking "Load more" from context overlay doesn't expand log row. #24299, @kaydelaney
  - Logs: Fix total bytes process calculation. #24691, @davkal
  - Org/user/team preferences: Fixes so UI Theme can be set back to Default. #24628, @AgnesToulet
  - Plugins: Fix manifest validation. #24573, @aknuds1
  - Provisioning: Use proxy as default access mode in provisioning. #24669, @bergquist
  - Search: Fix select item when pressing enter and Grafana is served using a sub path. #24634, @tskarhed
  - Search: Save folder expanded state. #24496, @Clarity-89
  - Security: Tag value sanitization fix in OpenTSDB data source. #24539, @rotemreiss
  - Table: Do not include angular options in options when switching from angular panel. #24684, @torkelo
  - Table: Fixed persisting column resize for time series fields. #24505, @torkelo
  - Table: Fixes Cannot read property subRows of null. #24578, @hugohaggmark
  - Time picker: Fixed so you can enter a relative range in the time picker without being converted to absolute range. #24534, @mckn
  - Transformations: Make transform dropdowns not cropped. #24615, @dprokop
  - Transformations: Sort order should be preserved as entered by user when using the reduce transformation. #24494, @hugohaggmark
  - Units: Adds scale symbol for currencies with suffixed symbol. #24678, @hugohaggmark
  - Variables: Fixes filtering options with more than 1000 entries. #24614, @hugohaggmark
  - Variables: Fixes so Textbox variables read value from url. #24623, @hugohaggmark
  - Zipkin: Fix error when span contains remoteEndpoint. #24524, @aocenas
  - SAML: Switch from email to login for user login attribute mapping (Enterprise)
- Update Makefile and spec file
  * Remove phantomJS patch from Makefile
  * Fix multiline strings in Makefile
  * Exclude s390 from SLE12 builds, golang 1.14 is not built for s390</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591012800">- Update to version 7.0.1
  * Features / Enhancements
  - Datasource/CloudWatch: Makes CloudWatch Logs query history more readable. #24795, @kaydelaney
  - Download CSV: Add date and time formatting. #24992, @ryantxu
  - Table: Make last cell value visible when right aligned. #24921, @peterholmberg
  - TablePanel: Adding sort order persistance. #24705, @torkelo
  - Transformations: Display correct field name when using reduce transformation. #25068, @peterholmberg
  - Transformations: Allow custom number input for binary operations. #24752, @ryantxu
  * Bug fixes
  - Dashboard/Links: Fixes dashboard links by tags not working. #24773, @KamalGalrani
  - Dashboard/Links: Fixes open in new window for dashboard link. #24772, @KamalGalrani
  - Dashboard/Links: Variables are resolved and limits to 100. #25076, @hugohaggmark
  - DataLinks: Bring back variables interpolation in title. #24970, @dprokop
  - Datasource/CloudWatch: Field suggestions no longer limited to prefix-only. #24855, @kaydelaney
  - Explore/Table: Keep existing field types if possible. #24944, @kaydelaney
  - Explore: Fix wrap lines toggle for results of queries with filter expression. #24915, @ivanahuckova
  - Explore: fix undo in query editor. #24797, @zoltanbedi
  - Explore: fix word break in type head info. #25014, @zoltanbedi
  - Graph: Legend decimals now work as expected. #24931, @torkelo
  - LoginPage: Fix hover color for service buttons. #25009, @tskarhed
  - LogsPanel: Fix scrollbar. #24850, @ivanahuckova
  - MoveDashboard: Fix for moving dashboard caused all variables to be lost. #25005, @torkelo
  - Organize transformer: Use display name in field order comparer. #24984, @dprokop
  - Panel: shows correct panel menu items in view mode. #24912, @hugohaggmark
  - PanelEditor Fix missing labels and description if there is only single option in category. #24905, @dprokop
  - PanelEditor: Overrides name matcher still show all original field names even after Field default display name is specified. #24933, @torkelo
  - PanelInspector: Makes sure Data display options are visible. #24902, @hugohaggmark
  - PanelInspector: Hides unsupported data display options for Panel type. #24918, @hugohaggmark
  - PanelMenu: Make menu disappear on button press. #25015, @tskarhed
  - Postgres: Fix add button. #25087, @phemmer
  - Prometheus: Fix recording rules expansion. #24977, @ivanahuckova
  - Stackdriver: Fix creating Service Level Objectives (SLO) datasource query variable. #25023, @papagian</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591358400">- Update to version 7.0.3
  * Features / Enhancements
  - Stats: include all fields. #24829, @ryantxu
  - Variables: change VariableEditorList row action Icon to IconButton. #25217, @hshoff
  * Bug fixes
  - Cloudwatch: Fix dimensions of DDoSProtection. #25317, @papagian
  - Configuration: Fix env var override of sections containing hyphen. #25178, @marefr
  - Dashboard: Get panels in collapsed rows. #25079, @peterholmberg
  - Do not show alerts tab when alerting is disabled. #25285, @dprokop
  - Jaeger: fixes cascader option label duration value. #25129, @Estrax
  - Transformations: Fixed Transform tab crash &amp; no update after adding first transform. #25152, @torkelo
- Update to version 7.0.2
  * Bug fixes
  - Security: Urgent security patch release to fix CVE-2020-13379</changelog>
  <changelog author="jcavalheiro@suse.com" date="1600430400">- Update to version 7.1.5:
  * Features / Enhancements
  - Stats: Stop counting the same user multiple times.
  - Field overrides: Filter by field name using regex.
  - AzureMonitor: map more units.
  - Explore: Don't run queries on datasource change.
  - Graph: Support setting field unit &amp; override data source (automatic) unit.
  - Explore: Unification of logs/metrics/traces user interface
  - Table: JSON Cell should try to convert strings to JSON
  - Variables: enables cancel for slow query variables queries.
  - TimeZone: unify the time zone pickers to one that can rule them all.
  - Search: support URL query params.
  - Grafana-UI: Add FileUpload.
  - TablePanel: Sort numbers correctly.
  * Bug fixes
  - Alerting: remove LongToWide call in alerting.
  - AzureMonitor: fix panic introduced in 7.1.4 when unit was unspecified and alias was used.
  - Variables: Fixes issue with All variable not being resolved.
  - Templating: Fixes so texts show in picker not the values.
  - Templating: Templating: Fix undefined result when using raw interpolation format
  - TextPanel: Fix content overflowing panel boundaries.
  - StatPanel: Fix stat panel display name not showing when explicitly set.
  - Query history: Fix search filtering if null value.
  - Flux: Ensure connections to InfluxDB are closed.
  - Dashboard: Fix for viewer can enter panel edit mode by modifying url (but cannot not save anything).
  - Prometheus: Fix prom links in mixed mode.
  - Sign In Use correct url for the Sign In button.
  - StatPanel: Fixes issue with name showing for single series / field results
  - BarGauge: Fix space bug in single series mode.
  - Auth: Fix POST request failures with anonymous access
  - Templating: Fix recursive loop of template variable queries when changing ad-hoc-variable
  - Templating: Fixed recursive queries triggered when switching dashboard settings view
  - GraphPanel: Fix annotations overflowing panels.
  - Prometheus: Fix performance issue in processing of histogram labels.
  - Datasources: Handle URL parsing error.
  - Security: Use Header.Set and Header.Del for X-Grafana-User header.
  * Changes in spec file
  - Fix golang version = 1.14 to avoid dependency conflicts on some OBS projects</changelog>
  <changelog author="witold.bedyk@suse.com" date="1604577600">- Update to version 7.3.1:
  * Breaking changes
  - CloudWatch: The AWS CloudWatch data source's authentication scheme has changed. See the upgrade notes for details and how this may affect you.
  - Units: The date time units `YYYY-MM-DD HH:mm:ss` and `MM/DD/YYYY h:mm:ss a` have been renamed to `Datetime ISO` and `Datetime US` respectively.
  * Features / Enhancements
  - AzureMonitor: Support decimal (as float64) type in analytics/logs.
  - Add monitoring mixing for Grafana.
  - CloudWatch: Missing Namespace AWS/EC2CapacityReservations.
  - CloudWatch: Add support for AWS DirectConnect virtual interface metrics and add missing dimensions.
  - CloudWatch: Adding support for Amazon ElastiCache Redis metrics.
  - CloudWatch: Adding support for additional Amazon CloudFront metrics.
  - CloudWatch: Re-implement authentication.
  - Elasticsearch: Support multiple pipeline aggregations for a query.
  - Prometheus: Add time range parameters to labels API.
  - Loki: Visually distinguish error logs for LogQL2.
  - Api: Add /healthz endpoint for health checks.
  - API: Enrich add user to org endpoints with user ID in the response.
  - API: Enrich responses and improve error handling for alerting API endpoints.
  - Elasticsearch: Add support for date_nanos type.
  - Elasticsearch: Allow fields starting with underscore.
  - Elasticsearch: Increase maximum geohash aggregation precision to 12.
  - Postgres: Support request cancellation properly (Uses new backendSrv.fetch Observable request API).
  - Provisioning: Remove provisioned dashboards without parental reader.
  - API: Return ID of the deleted resource for dashboard, datasource and folder DELETE endpoints.
  - API: Support paging in the admin orgs list API.
  - API: return resource ID for auth key creation, folder permissions update and user invite complete endpoints.
  - BackendSrv: Uses credentials, deprecates withCredentials &amp; defaults to same-origin.
  - CloudWatch: Update list of AmazonMQ metrics and dimensions.
  - Cloudwatch: Add Support for external ID in assume role.
  - Cloudwatch: Add af-south-1 region.
  - DateFormats: Default ISO &amp; US formats never omit date part even if date is today (breaking change).
  - Explore: Transform prometheus query to elasticsearch query.
  - InfluxDB/Flux: Increase series limit for Flux datasource.
  - InfluxDB: exclude result and table column from Flux table results.
  - InfluxDB: return a table rather than an error when timeseries is missing time.
  - Loki: Add scopedVars support in legend formatting for repeated variables.
  - Loki: Re-introduce running of instant queries.
  - Loki: Support request cancellation properly (Uses new backendSrv.fetch Observable request API).
  - MixedDatasource: Shows retrieved data even if a data source fails.
  - Postgres: Support Unix socket for host.
  - Prometheus: Add scopedVars support in legend formatting for repeated variables.
  - Prometheus: Support request cancellation properly (Uses new backendSrv.fetch Observable request API).
  - Prometheus: add $__rate_interval variable.
  - Table: Adds column filtering.
  - grafana-cli: Add ability to read password from stdin to reset admin password.</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update packaging
  * avoid systemd and shadow hard requirements
  * Require the user from a new dedicated 'system-user-grafana' sibling package
  * avoid pinning to a specific Go version in the spec file</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- Update to version 7.3.6:
  * fixes for saml vulnerability
  * [v7.3.x] Fix: Correct panel edit uistate migration (#29413) (#29711)
  * PanelEdit: Prevent the preview pane to be resized further than window height (#28370) (#29726)
  * Fix: Migrate Panel edit uiState percentage strings to number (#29412) (#29723)
  * "Release: Updated versions in package to 7.3.5" (#29710)
  * Chore: upgrading y18n to 4.0.1 for security reasons (#29523) (#29709)
  * Panel: making sure we support all versions of chrome when detecting position of click event. (#29544) (#29708)
  * PanelEdit: making sure the correct datasource query editor is being rendered. (#29500) (#29707)
  * [v7.3.x] Auth: Add SigV4 header allowlist to reduce chances of verification issues (#29705)
  * Alerting: Use correct time series name override from frame fields (#29693) (#29698)
  * CloudWatch: namespace in search expression should be quoted if match exact is enabled #29109 (#29563) (#29687)
  * Adds go dep used by an Enterprise feature.  (#29645) (#29690)
  * instrumentation: align label name with our other projects (#29514) (#29685)
  * Instrumentation: Add examplars for request histograms (#29357) (#29682)
  * Login: Fixes typo in tooltip (#29604) (#29606)
  * fixes bug with invalid handler name for metrics (#29529) (#29532)
  * AzureMonitor: Unit MilliSeconds naming (#29399) (#29526)
  * Alarting: fix alarm messages in dingding (Fixes #29470) (#29482) (#29527)
  * Bug: trace viewer doesn't show more than 300 spans (#29377) (#29504)
  * Prometheus: don't override displayName property (#29441) (#29488)
  * resolve conflicts (#29415)
  * Drone: Upgrade build pipeline tool (#29365) (#29368)
  * Drone: Upload artifacts for release branch builds (#29297) (#29364)
  * Drone: Execute artifact publishing for both editions in parallel during release (#29362) (#29363)
  * Drone: Publish NPM packages after Storybook to avoid race condition (#29340) (#29343)
  * Docs: Fix editor role and alert notification channel description (#29301) (#29337)
  * "Release: Updated versions in package to 7.3.4" (#29336)
  * Security: Fixes minor security issue with alert notification webhooks that allowed GET &amp; DELETE requests #29330 (#29335)
  * Backport of InfluxDB: update flux library and support boolean label values #29333
  * ReleaseNotes: Update link in package.json (#29328)
  * Login: Fixes redirect url encoding issues of # %23 being unencoded after login (#29299) (#29323)
  * Drone: Upgrade build pipeline tool (#29308) (#29309)
  * Annotations: fixing so when changing annotations query links submenu will be updated. (#28990) (#29285)
  * Dashboard: Fixes kiosk state after being redirected to login page and back (#29273) (#29278)
  * Increase search limit on team add user and improve placeholder (#29258) (#29261)
  * Drone: Sync with master (#29205)
  * Drone: Fix publish-packages invocation (#29179) (#29184)
  * Chore: Upgrade grafana/build-ci-deploy image to latest Go (#29171) (#29180)
  * Table: Fix incorrect condtition for rendering table filter (#29165) (#29181)
  * DashboardLinks: will only refresh dashboard search when changing tags for link. (#29040) (#29177)
  * Drone: Upgrade build pipeline tool and build image (#29161) (#29162)
  * Release: Updated versions in package to 7.3.3 (#29126)
  * git cherry-pick -x 0f3bebb38daa488e108881ce17d4f68167a834e6 (#29155)
  * Build: support custom build tags (#28609) (#29128)
  * Revert "Graph: Fixes stacking issues like floating bars when data is not aligned  (#29051) (#29088)" (#29151)
  * Provisioning: always pin app to the sidebar when enabled (#29084) (#29146)
  * build paths in an os independent way (#29143) (#29147)
  * Chore: Upgrade Go dev tools (#29124) (#29132)
  * Automatin: set node version
  * Automation: Adding version bump action
  * Drone: Fix Drone config verification for enterprise on Windows (#29118) (#29119)
  * [v7.3.x] Drone: Verify Drone config at beginning of pipelines (#29111)
  * Test Datasource/Bug: Fixes division by zero in csv metric values scenario (#29029) (#29068)
  * [v7.3.x] StatPanel: Fixes hanging issue when all values are zero (#29087)
  * Data source proxy: Convert 401 from data source to 400 (#28962) (#29095)
  * Graph: Fixes stacking issues like floating bars when data is not aligned  (#29051) (#29088)
  * Auth: Enable more complete credential chain for SigV4 default SDK auth option (#29065) (#29086)
  * Fix for multi-value template variable for project selector (#29042) (#29054)
  * Thresholds: Fixes color assigned to null values (#29010) (#29018)
  * [v7.3.x] Chore: Bump build pipeline version (#29025)
  * Release v7.3.2 (#29024)
  * Fix conflict (#29020)
  * StatPanels: Fixes auto min max when latest value is zero (#28982) (#29007)
  * Tracing: Add setting for sampling server (#29011) (#29015)
  * Gauge: making sure threshold panel json is correct before render (#28898) (#28984)
  * Variables: make sure that we support both old and new syntax for custom variables. (#28896) (#28985)
  * Explore: Remove redundant decodeURI and fix urls (#28697) (#28963)
  * [v7.3.x] Drone: Fix docs building (#28987)
  * Alerting: Append appSubUrl to back button on channel form (#28282) (#28983)
  * Plugins: allow override when allowing unsigned plugins (#28901) (#28927)
  * CloudWatch Logs: Change what we use to measure progress (#28912) (#28964)
  * Tracing: log traceID in request logger (#28952) (#28959)
  * Panel inspect: Interpolate variables in panel inspect title (#28779) (#28801)
  * UsageStats: start tracking usage stats for tempo (#28948) (#28951)
  * Short URL: Cleanup unvisited/stale short URLs (#28867) (#28944)
  * Plugins signing: Fix docs urls (#28930) (#28934)
  * Chore: Fix spelling issue (#28904) (#28925)
  * API: replace SendLoginLogCommand with LoginHook (#28777) (#28891)
  * Elasticsearch: Exclude pipeline aggregations from order by options (#28620) (#28873)
  * Dashboards / Folders: delete related data (permissions, stars, tags, versions, annotations) when deleting a dashboard or a folder (#28826) (#28890)
  * Disable selecting enterprise plugins with no license (#28758) (#28859)
  * Tempo: fix test data source (#28836) (#28856)
  * Prometheus: fix missing labels from value (#28842) (#28855)
  * Units: added support to handle negative fractional numbers. (#28849) (#28851)
  * increase blob column size for encrypted dashboard data (#28831) (#28832)
  * Gauge: Improve font size auto sizing (#28797) (#28828)
  * Variables: Fixes URL values for dependent variables (#28798) (#28800)
  * grafana/toolkit: Extract CHANGELOG when building plugin (#28773) (#28774)
  * Templating: Custom variable edit UI, change text input into textarea  (#28312) (#28322) (#28704)
  * Cloudwatch: Fix issue with field calculation transform not working properly with Cloudwatch data (#28761) (#28775)
  * Plugin page: Fix dom validation warning (#28737) (#28741)
  * Dashboard: fix view panel mode for Safari / iOS (#28702) (#28755)
  * Fix typo in unsigned plugin warning (#28709) (#28722)
  * TableFilters: Fixes filtering with field overrides (#28690) (#28727)
  * Templating: Speeds up certain variable queries for Postgres, MySql and MSSql (#28686) (#28726)
  * Prometheus: Fix copy paste behaving as cut and paste (#28622) (#28691)</changelog>
  <changelog author="tserong@suse.com" date="1613563200">- Update to version 7.4.1:
  * "Release: Updated versions in package to 7.4.1" (#31128)
  * Transforms: Fixes Outer join issue with duplicate field names not getting the same unique field names as before  (#31121) (#31127)
  * MuxWriter: Handle error for already closed file (#31119) (#31120)
  * Logging: sourcemap transform asset urls from CDN in logged stacktraces (#31115) (#31117)
  * Exemplars: Change CTA style (#30880) (#31105)
  * test: add support for timeout to be passed in for addDatasource (#30736) (#31090)
  * Influx: Make max series limit configurable and show the limiting message if applied (#31025) (#31100)
  * Elasticsearch: fix log row context erroring out (#31088) (#31094)
  * test: update addDashboard flow for v7.4.0 changes (#31059) (#31084)
  * Usage stats: Adds source/distributor setting (#31039) (#31076)
  * DashboardLinks: Fixes crash when link has no title (#31008) (#31050)
  * Make value mappings correctly interpret numeric-like strings (#30893) (#30912)
  * Elasticsearch: Fix alias field value not being shown in query editor (#30992) (#31037)
  * BarGauge: Improvements to value sizing and table inner width calculations  (#30990) (#31032)
  * convert path to posix by default (#31045) (#31053)
  * Alerting: Fixes so notification channels are properly deleted (#31040) (#31046)
  * Drone: Fix deployment image (#31027) (#31029)
  * Graph: Fixes so graph is shown for non numeric time values (#30972) (#31014)
  * instrumentation: make the first database histogram bucket smaller (#30995) (#31001)
  * Build: Releases e2e and e2e-selectors too (#31006) (#31007)
  * TextPanel: Fixes so panel title is updated when variables change (#30884) (#31005)
  * StatPanel: Fixes issue formatting date values using unit option (#30979) (#30991)
  * Units: Fixes formatting of duration units (#30982) (#30986)
  * Elasticsearch: Show Size setting for raw_data metric (#30980) (#30983)
  * Logging: sourcemap support for frontend stacktraces (#30590) (#30976)
  * e2e: extends selector factory to plugins (#30932) (#30934)
  * Variables: Adds queryparam formatting option (#30858) (#30924)
  * Exemplars: change api to reflect latest changes (#30910) (#30915)
  * "Release: Updated versions in package to 7.4.0" (#30898)
  * DataSourceSettings: Adds info box and link to Grafana Cloud (#30891) (#30896)
  * GrafanaUI: Add a way to persistently close InfoBox (#30716) (#30895)
  * [7.4.x] AlertingNG: List saved Alert definitions in Alert Rule list (30890)(30603)
  * Alerting: Fixes alert panel header icon not showing (#30840) (#30885)
  * Plugins: Requests validator (#30445) (#30877)
  * PanelLibrary: Adds library panel meta information to dashboard json (#30770) (#30883)
  * bump grabpl version to 0.5.36 (#30874) (#30878)
  * Chore: remove __debug_bin (#30725) (#30857)
  * Grafana-ui: fixes closing modals with escape key (#30745) (#30873)
  * DashboardLinks: Support variable expression in to tooltip - Issue #30409 (#30569) (#30852)
  * Add alt text to plugin logos (#30710) (#30872)
  * InfluxDB: Add http configuration when selecting InfluxDB v2 flavor  (#30827) (#30870)
  * Prometheus: Set type of labels to string (#30831) (#30835)
  * AlertingNG: change API permissions (#30781) (#30814)
  * Grafana-ui: fixes no data message in Table component (#30821) (#30855)
  * Prometheus: Add tooltip to explain possibility to use patterns in text and title fields in annotations (#30825) (#30843)
  * Chore: add more docs annotations (#30847) (#30851)
  * BarChart: inside-align strokes, upgrade uPlot to 1.6.4. (#30806) (#30846)
  * Transforms: allow boolean in field calculations (#30802) (#30845)
  * CDN: Fixes cdn path when Grafana is under sub path (#30822) (#30823)
  * bump cypress to 6.3.0 (#30644) (#30819)
  * Expressions: Measure total transformation requests and elapsed time (#30514) (#30789)
  * Grafana-UI: Add story/docs for ErrorBoundary (#30304) (#30811)
  * [v7.4.x]: Menu: Mark menu components as internal (#30801)
  * Graph: Fixes auto decimals issue in legend and tooltip (#30628) (#30635)
  * GraphNG: Disable Plot logging by default (#30390) (#30500)
  * Storybook: Migrate card story to use controls  (#30535) (#30549)
  * GraphNG: add bar alignment option (#30499) (#30790)
  * Variables: Clears drop down state when leaving dashboard (#30810) (#30812)
  * Add missing callback dependency (#30797) (#30809)
  * GraphNG: improve behavior when switching between solid/dash/dots (#30796) (#30799)
  * Add width for Variable Editors (#30791) (#30795)
  * Panels: Fixes so panels are refreshed when scrolling past them fast (#30784) (#30792)
  * PanelEdit: Trigger refresh when changing data source (#30744) (#30767)
  * AlertingNG: Enable UI to Save Alert Definitions (#30394) (#30548)
  * CDN: Fix passing correct prefix to GetContentDeliveryURL (#30777) (#30779)
  * CDN: Adds support for serving assets over a CDN (#30691) (#30776)
  * Explore: Update styling of buttons (#30493) (#30508)
  * Loki: Append refId to logs uid (#30418) (#30537)
  * skip symlinks to directories when generating plugin manifest (#30721) (#30738)
  * Mobile: Fixes issue scrolling on mobile in chrome (#30746) (#30750)
  * BarChart: add alpha bar chart panel (#30323) (#30754)
  * Datasource: Use json-iterator configuration compatible with standard library (#30732) (#30739)
  * Variables: Fixes so text format will show All instead of custom all (#30730) (#30731)
  * AlertingNG: pause/unpause definitions via the API (#30627) (#30672)
  * PanelLibrary: better handling of deleted panels (#30709) (#30726)
  * Transform: improve the "outer join" performance/behavior (#30407) (#30722)
  * DashboardPicker: switch to promise-based debounce, return dashboard UID (#30706) (#30714)
  * Use connected GraphNG in Explore (#30707) (#30708)
  * PanelLibrary: changes casing of responses and adds meta property (#30668) (#30711)
  * DeployImage: Switch base images to Debian (#30684) (#30699)
  * Trace: trace to logs design update (#30637) (#30702)
  * Influx: Show all datapoints for dynamically windowed flux query (#30688) (#30703)
  * ci(npm-publish): add missing github package token to env vars (#30665) (#30673)
  * Loki: Improve live tailing errors and fix Explore's logs container type errors (#30517) (#30681)
  * Grafana-UI: Fix setting default value for MultiSelect (#30671) (#30687)
  * Explore: Fix jumpy live tailing (#30650) (#30677)
  * Docs: Refer to product docs in whats new for alerting templating feature (#30652) (#30670)
  * Variables: Fixes display value when using capture groups in regex (#30636) (#30661)
  * Docs: Fix expressions enabled description (#30589) (#30651)
  * Licensing Docs: Adding license restrictions docs (#30216) (#30648)
  * DashboardSettings: fixes vertical scrolling (#30640) (#30643)
  * chore: bump redux toolkit to 1.5.0 for immer 8.0.1 vulnerability fix (#30605) (#30631)
  * Explore: Fix loading visualisation on the top of the new time series panel (#30553) (#30557)
  * Footer: Fixes layout issue in footer  (#30443) (#30494)
  * Variables: Fixes so queries work for numbers values too (#30602) (#30624)
  * Admin: Fixes so form values are filled in from backend (#30544) (#30623)
  * Docs: Update 7.4 What's New to use more correct description of alerting notification template feature (#30502) (#30614)
  * NodeGraph: Add docs (#30504) (#30613)
  * Cloud Monitoring: Fix legend naming with display name override (#30440) (#30503)
  * Expressions: Add option to disable feature (#30541) (#30558)
  * OldGraph: Fix height issue in Firefox (#30565) (#30582)
  * XY Chart: fix editor error with empty frame (no fields) (#30573) (#30577)
  * XY Chart: share legend config with timeseries (#30559) (#30566)
  * DataFrame: cache frame/field index in field state (#30529) (#30560)
  * Prometheus: Fix show query instead of Value if no __name__ and metric (#30511) (#30556)
  * Decimals: Big Improvements to auto decimals and fixes to auto decimals bug found in 7.4-beta1  (#30519) (#30550)
  * chore: update packages dependent on dot-prop to fix security vulnerability (#30432) (#30487)
  * GraphNG: uPlot 1.6.3 (fix bands not filling below 0). close #30523. (#30527) (#30528)
  * GraphNG: uPlot 1.6.2 (#30521) (#30522)
  * Chore: Upgrade grabpl version (#30486) (#30513)
  * grafana/ui: Fix internal import from grafana/data (#30439) (#30507)
  * prevent field config from being overwritten (#30437) (#30442)
  * Chore: upgrade NPM security vulnerabilities (#30397) (#30495)
  * TimeSeriesPanel: Fixed default value for gradientMode (#30484) (#30492)
  * Admin: Fixes so whole org drop down is visible when adding users to org (#30481) (#30497)
  * Chore: adds wait to e2e test (#30488) (#30490)
  * Graph: Fixes so only users with correct permissions can add annotations (#30419) (#30466)
  * Alerting: Hides threshold handle for percentual thresholds (#30431) (#30467)
  * Timeseries: only migrage point size when configured (#30461) (#30470)
  * Expressions: Fix button icon (#30444) (#30450)
  * PanelModel: Make sure the angular options are passed to react panel type changed handler (#30441) (#30451)
  * Docs: Fix img link for alert notification template (#30436) (#30447)
  * Chore: Upgrade build pipeline tool (#30456) (#30457)
  * PanelOptions: Refactoring applying panel and field options out of PanelModel and add property clean up for properties not in field config registry  (#30389) (#30438)
  * "Release: Updated versions in package to 7.4.0-beta.1" (#30427)
  * Chore: Update what's new URL (#30423)
  * GraphNG: assume uPlot's series stroke is always a function (#30416)
  * PanelLibrary: adding library panels to Dashboard Api (#30278)
  * Prettier: Fixes to files that came in after main upgrade (#30410)
  * Cloud Monitoring: Add curated dashboards for the most popular GCP services (#29930)
  * Mssql integrated security (#30369)
  * Prettier: Upgrade to 2  (#30387)
  * GraphNG: sort ascending if the values appear reversed (#30405)
  * Docs: Grafana whats new 7.4 (#30404)
  * Dashboards: Adds cheat sheet toggle to supported query editors (#28857)
  * Docs: Update timeseries-dimensions.md (#30403)
  * Alerting: Evaluate data templating in alert rule name and message (#29908)
  * Docs: Add links to 7.3 patch release notes (#30292)
  * Docs: Update _index.md (#29546)
  * Docs: Update jaeger.md (#30401)
  * Expressions: Remove feature toggle (#30316)
  * Docs: Update tempo.md (#30399)
  * Docs: Update zipkin.md (#30400)
  * services/provisioning: Various cleanup (#30396)
  * DashboardSchemas: OpenAPI Schema Generation (#30242)
  * AlertingNG: Enforce unique alert definition title (non empty)/UID per organisation (#30380)
  * Licensing: Document new v7.4 options and APIs (#30217)
  * Auth: add expired token error and update CreateToken function (#30203)
  * NodeGraph: Add node graph visualization (#29706)
  * Add jwtTokenAuth to plugin metadata schema (#30346)
  * Plugins: Force POSIX style path separators for manifest generation (#30287)
  * Add enterprise reporting fonts to gitignore (#30385)
  * Field overrides: skipping overrides for properties no longer existing in plugin (#30197)
  * NgAlerting: View query result (#30218)
  * Grafana-UI: Make Card story public (#30388)
  * Dashboard: migrate version history list (#29970)
  * Search: use Card component (#29892)
  * PanelEvents: Isolate more for old angular query editors (#30379)
  * Loki: Remove showing of unique labels with the empty string value (#30363)
  * Chore: Lint all files for no-only-tests (#30364)
  * Clears errors after running new query (#30367)
  * Prometheus: Change exemplars endpoint (#30378)
  * Explore: Fix a bug where Typeahead crashes when a large amount of ite? (#29637)
  * Circular vector: improve generics (#30375)
  * Update signing docs (#30296)
  * Email: change the year in templates (#30294)
  * grafana/ui: export TLS auth component (#30320)
  * Query Editor: avoid word wrap (#30373)
  * Transforms: add sort by transformer (#30370)
  * AlertingNG: Save alert instances (#30223)
  * GraphNG: Color series from by value scheme &amp; change to fillGradient to gradientMode  (#29893)
  * Chore: Remove not used PanelOptionsGrid component (#30358)
  * Zipkin: Remove browser access mode (#30360)
  * Jaeger: Remove browser access mode (#30349)
  * chore: bump lodash to 4.17.20 (#30359)
  * ToolbarButton: New emotion based component to replace all navbar, DashNavButton and scss styles (#30333)
  * Badge: Increase contrast, remove rocket icon for plugin beta/alpha state (#30357)
  * Licensing: Send map of environment variables to plugins (#30347)
  * Dashboards: Exit to dashboard when deleting panel from panel view / edit view (#29032)
  * Cloud Monitoring: MQL support (#26551)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0-beta1 (#30348)
  * Panel options UI: Allow collapsible categories (#30301)
  * Grafana-ui: Fix context menu item always using onClick instead of href (#30350)
  * Badge: Design improvement &amp; reduce contrast (#30328)
  * make sure stats are added horizontally and not vertically (#30106)
  * Chore(deps): Bump google.golang.org/grpc from 1.33.1 to 1.35.0 (#30342)
  * Chore(deps): Bump github.com/stretchr/testify from 1.6.1 to 1.7.0 (#30341)
  * Chore(deps): Bump github.com/google/uuid from 1.1.2 to 1.1.5 (#30340)
  * Chore(deps): Bump github.com/hashicorp/go-version from 1.2.0 to 1.2.1 (#30339)
  * Fix HTML character entity error (#30334)
  * GraphNG: fix fillBelowTo regression (#30330)
  * GraphNG: implement softMin/softMax for auto-scaling stabilization. close #979. (#30326)
  * Legend: Fixes right y-axis legend from being pushed outside the bounds of the panel (#30327)
  * Grafana-toolkit: Update component generator templates (#30306)
  * Panels: remove beta flag from stat and bargauge panels (#30324)
  * GraphNG: support fill below to (bands) (#30268)
  * grafana-cli: Fix security issue (#28888)
  * AlertingNG: Modify queries and transform endpoint to get datasource UIDs (#30297)
  * Chore: Fix missing property from ExploreGraph (#30315)
  * Prometheus: Add support for Exemplars (#28057)
  * Grafana-UI: Enhances for TimeRangePicker and TimeRangeInput (#30102)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0 (#30312)
  * Table: Fixes BarGauge cell display mode font size so that it is fixed to the default cell font size (#30303)
  * AngularGraph: Fixes issues with legend wrapping after legend refactoring (#30283)
  * Plugins: Add Open Distro to the list of data sources supported by sigv4 (#30308)
  * Chore: Moves common and response into separate packages (#30298)
  * GraphNG: remove y-axis position control from series color picker in the legend (#30302)
  * Table: migrate old-table config to new table config (#30142)
  * Elasticsearch: Support extended stats and percentiles in terms order by (#28910)
  * Docs: Update release notes index
  * GraphNG: stats in legend (#30251)
  * Grafana UI: EmptySearchResult docs (#30281)
  * Plugins: Use the includes.path (if exists) on sidebar includes links (#30291)
  * Fix spinner and broken buttons (#30286)
  * Graph: Consider reverse sorted data points on isOutsideRange check (#30289)
  * Update getting-started.md (#30257)
  * Backend: use sdk version (v0.81.0) without transform (gel) code (#29236)
  * Chore: update latest versions to 7.3.7 (#30282)
  * Loki: Fix hiding of series in table if labels have number values (#30185)
  * Loki: Lower min step to 1ms (#30135)
  * Prometheus: Improve autocomplete performance and remove disabling of dynamic label lookup (#30199)
  * Icons: Adds custom icon support ands new panel and interpolation icons (#30277)
  * ReleaseNotes: Updated changelog and release notes for 7.3.7 (#30280)
  * Grafana-ui: Allow context menu items to be open in new tab (#30141)
  * Cloud Monitoring: Convert datasource to use Dataframes (#29830)
  * GraphNG: added support to change series color from legend. (#30256)
  * AzureMonitor: rename labels for query type dropdown (#30143)
  * Decimals: Improving auto decimals logic for high numbers and scaled units  (#30262)
  * Elasticsearch: Use minimum interval for alerts (#30049)
  * TimeSeriesPanel: The new graph panel now supports y-axis value mapping #30272
  * CODEOWNERS: Make backend squad owners of backend style guidelines (#30266)
  * Auth: Add missing request headers to SigV4 middleware allowlist (#30115)
  * Grafana-UI: Add story/docs for FilterPill (#30252)
  * Grafana-UI: Add story/docs for Counter (#30253)
  * Backend style guide: Document JSON guidelines (#30267)
  * GraphNG: uPlot 1.6, hide "Show points" in Points mode, enable "dot" lineStyle (#30263)
  * Docs: Update prometheus.md (#30240)
  * Docs: Cloudwatch filter should be JSON format (#30243)
  * API: Add by UID routes for data sources  (#29884)
  * Docs: Update datasource_permissions.md (#30255)
  * Cloudwatch: Move deep link creation to the backend (#30206)
  * Metrics API: Use jsoniter for JSON encoding (#30250)
  * Add option in database config to skip migrations for faster startup. (#30146)
  * Set signed in users email correctly (#30249)
  * Drone: Upgrade build pipeline tool (#30247)
  * runRequest: Fixes issue with request time range and time range returned to panels are off causing data points to be cut off (outside) (#30227)
  * Elasticsearch: fix handling of null values in query_builder (#30234)
  * Docs: help users connect to Prometheus using SigV4 (#30232)
  * Update documentation-markdown-guide.md (#30207)
  * Update documentation-markdown-guide.md (#30235)
  * Better logging of plugin scanning errors (#30231)
  * Print Node.js and Toolkit versions (#30230)
  * Chore: bump rollup across all packages (#29486)
  * Backend style guide: Document database patterns (#30219)
  * Chore: Bump plugin-ci-alpine Docker image version (#30225)
  * Legends: Refactoring and rewrites of legend components to simplify components &amp; reuse (#30165)
  * Use Node.js 14.x in plugin CI (#30209)
  * Field overrides: extracting the field config factory into its own reusable module. (#30214)
  * LibraryPanels: adds connections (#30212)
  * PanelOptionsGroups: Only restore styles from PanelOptionsGroup (#30215)
  * Variables: Add deprecation warning for value group tags (#30160)
  * GraphNG: Hide grid for right-y axis if left x-axis exists (#30195)
  * Middleware: Add CSP support (#29740)
  * Updated image links to have newer format. (#30208)
  * Docs: Update usage-insights.md (#30150)
  * Share panel dashboard add images (#30201)
  * Update documentation-style-guide.md (#30202)
  * Docs: Fix links to transforms (#30194)
  * docs(badge): migrate story to use controls (#30180)
  * Chore(deps): Bump github.com/prometheus/common from 0.14.0 to 0.15.0 (#30188)
  * Fix alert definition routine stop (#30117)
  * Chore(deps): Bump gopkg.in/square/go-jose.v2 from 2.4.1 to 2.5.1 (#30189)
  * InlineSwitch: Minor story fix (#30186)
  * Chore(deps): Bump github.com/gosimple/slug from 1.4.2 to 1.9.0 (#30178)
  * Chore(deps): Bump github.com/fatih/color from 1.9.0 to 1.10.0 (#30183)
  * Chore(deps): Bump github.com/lib/pq from 1.3.0 to 1.9.0 (#30181)
  * Chore(deps): Bump github.com/hashicorp/go-plugin from 1.2.2 to 1.4.0 (#30175)
  * Chore(deps): Bump github.com/getsentry/sentry-go from 0.7.0 to 0.9.0 (#30171)
  * Gauge: Fixes issue with all null values cause min &amp; max to be null (#30156)
  * Links: Add underline on hover for links in NewsPanel (#30166)
  * GraphNG: Update to test dashboards (#30153)
  * CleanUp: Removed old panel options group component (#30157)
  * AngularQueryEditors: Fixes to Graphite query editor and other who refer to other queries (#30154)
  * Chore(deps): Bump github.com/robfig/cron/v3 from 3.0.0 to 3.0.1 (#30172)
  * Chore(deps): Bump github.com/urfave/cli/v2 from 2.1.1 to 2.3.0 (#30173)
  * Chore: Fix spelling issue (#30168)
  * Revise README.md. (#30145)
  * Chore(deps): Bump github.com/mattn/go-sqlite3 from 1.11.0 to 1.14.6 (#30174)
  * InlineSwitch: Added missing InlineSwitch component and fixed two places that used unaligned inline switch (#30162)
  * GraphNG: add new alpha XY Chart  (#30096)
  * Elastic: Support request cancellation properly (Uses new backendSrv.fetch Observable request API) (#30009)
  * OpenTSDB: Support request cancellation properly (#29992)
  * InfluxDB: Update Flux external link (#30158)
  * Allow dependabot to keep go packages up-to-date (#30170)
  * PluginState: Update comment
  * GraphNG: Minor polish &amp; updates to new time series panel and move it from alpha to beta (#30163)
  * Share panel dashboard (#30147)
  * GraphNG: rename "graph3" to "timeseries" panel (#30123)
  * Add info about access mode (#30137)
  * Prometheus: Remove running of duplicated metrics query (#30108)
  * Prometheus: Fix autocomplete does not work on incomplete input (#29854)
  * GraphNG: remove graph2 panel (keep the parts needed for explore) (#30124)
  * Docs: Add metadata to activating licensing page (#30140)
  * MixedDataSource: Added missing variable support flag (#30110)
  * AngularPanels: Fixes issue with some panels not rendering when going into edit mode due to no height (#30113)
  * AngularPanels: Fixes issue with discrete panel that used the initialized event (#30133)
  * Explore: Make getFieldLinksForExplore more reusable (#30134)
  * Elasticsearch: Add Support for Serial Differencing Pipeline Aggregation (#28618)
  * Angular: Fixes issue with angular directive caused by angular upgrade in master (#30114)
  * Analytics: add data source type in data-request events (#30087)
  * GraphNG: "Interpolation: Step after" test (#30127)
  * GraphNG: check cross-axis presence when auto-padding. close #30121. (#30126)
  * Alerting: improve alerting default datasource search when extracting alerts (#29993)
  * Loki: Timeseries should not produce 0-values for missing data (#30116)
  * GraphNG: support dashes (#30070)
  * GraphNG: fix spanGaps optimization in alignDataFrames(). see #30101. (#30118)
  * Alerting NG: update API to expect UIDs instead of IDs (#29896)
  * GraphNG: Overhaul of main test dashboard and update to null &amp; gaps dashboard (#30101)
  * Chore: Fix intermittent time-related test failure in explore datasource instance update (#30109)
  * QueryEditorRow: Ability to change query name (#29779)
  * Frontend: Failed to load application files message improvement IE11 (#30011)
  * Drone: Upgrade build pipeline tool (#30104)
  * Fix phrasing. (#30075)
  * Chore: Add CloudWatch HTTP API tests (#29691)
  * Elastic: Fixes so templating queries work (#30003)
  * Chore: Rewrite elasticsearch client test to standard library (#30093)
  * Chore: Rewrite tsdb influxdb test to standard library (#30091)
  * Fix default maximum lifetime  an authenticated user can be logged in (#30030)
  * Instrumentation: re-enable database wrapper feature to expose counter and histogram for database queries (#29662)
  * Docs: Update labels to fields transform (#30086)
  * GraphNG: adding possibility to toggle tooltip, graph and legend for series (#29575)
  * Chore: Rewrite tsdb cloudmonitoring test to standard library (#30090)
  * Chore: Rewrite tsdb azuremonitor time grain test to standard library (#30089)
  * Chore: Rewrite tsdb graphite test to standard library (#30088)
  * Chore: Upgrade Docker build image wrt. Go/golangci-lint/Node (#30077)
  * Usage Stats: Calculate concurrent users as a histogram (#30006)
  * Elasticsearch: Fix broken alerting when using pipeline aggregations (#29903)
  * Drone: Fix race conditions between Enterprise and Enterprise2 (#30076)
  * Chore: Rewrite models datasource cache test to standard library (#30040)
  * Plugins: prevent app plugin from rendering with wrong location (#30017)
  * Update NOTICE.md
  * Chore: Tiny typo fix `rage` -&gt; `range` (#30067)
  * Docs: loki.md: Add example of Loki data source config (#29976)
  * ReleaseNotes: Updated changelog and release notes for 7.3.6 (#30066)
  * Docs: Update usage-insights.md (#30065)
  * Docs: Update white-labeling.md (#30064)
  * Chore(deps): Bump axios from 0.19.2 to 0.21.1 (#30059)
  * Chore: Rewrite models tags test to standard library (#30041)
  * Bump actions/setup-node from v1 to v2.1.4 (#29891)
  * Build(deps): Bump ini from 1.3.5 to 1.3.7 (#29787)
  * fall back to any architecture when getting plugin's checksum #30034 (#30035)
  * Lerna: Update to 3.22.1 (#30057)
  * SeriesToRows: Fixes issue in transform so that value field is always named Value (#30054)
  * [dashboard api] manage error when data in dashboard table is not valid json (#29999)
  * use sha256 checksum instead of md5 (#30018)
  * Chore: Rewrite brute force login protection test to standard library (#29986)
  * Chore: Rewrite login auth test to standard library (#29985)
  * Chore: Rewrite models dashboards test to standard library (#30023)
  * Chore: Rewrite models dashboard acl test to standard library (#30022)
  * Chore: Rewrite models alert test to standard library (#30021)
  * Chore: Rewrite ldap login test to standard library (#29998)
  * Chore: Rewrite grafana login test to standard library (#29997)
  * Fix two ini-file typos regarding LDAP (#29843)
  * Chore: Changes source map devtool to inline-source-map (#30004)
  * Chore: Sync Enterprise go.sum (#30005)
  * Chore: Add Enterprise dependencies (#29994)
  * SQLStore: customise the limit of retrieved datasources per organisation (#29358)
  * Chore: update crewjam/saml library to the latest master (#29991)
  * Graph: Fixes so users can not add annotations in readonly dash (#29990)
  * Currency: add Vietnamese dong (VND) (#29983)
  * Drone: Update pipelines for Enterprise (#29939)
  * Remove the bus from teamgroupsync (#29810)
  * Influx: Make variable query editor input uncontrolled (#29968)
  * PanelLibrary: Add PATCH to the API (#29956)
  * PanelEvents: Isolating angular panel events into it's own event bus + more event refactoring  (#29904)
  * Bump node-notifier from 8.0.0 to 8.0.1 (#29952)
  * LDAP: Update use_ssl documentation (#29964)
  * Docs: Missing 's' on 'logs' (#29966)
  * Docs: Update opentsdb.md (#29963)
  * Docs: Minor typo correction (#29962)
  * librarypanels: Fix JSON field casing in tests (#29954)
  * TemplateSrv: Do not throw  error for an unknown format but use glob as fallback and warn in the console (#29955)
  * PanelLibrary: Adds uid and renames title to name (#29944)
  * Docs: Fix raw format variable docs (#29945)
  * RedirectResponse: Implement all of api.Response (#29946)
  * PanelLibrary: Adds get and getAll to the api (#29772)
  * Chore: Remove duplicate interpolateString test (#29941)
  * Chore: Rewrite influxdb query parser test to standard library (#29940)
  * Folders: Removes the possibility to delete the General folder (#29902)
  * Chore: Convert tsdb request test to standard library (#29936)
  * Chore: Convert tsdb interval test to standard library (#29935)
  * Docs: Update configuration.md (#29912)
  * Docs: Update organization_roles.md (#29911)
  * Docs: Update _index.md (#29918)
  * GraphNG: bring back tooltip (#29910)
  * Ng Alerting: Remove scroll and fix SplitPane limiters (#29906)
  * Dashboard: Migrating dashboard settings to react (#27561)
  * Minor correction to explanation on correct MS SQL usage. (#29889)
  * AlertingNG: Create a scheduler to evaluate alert definitions (#29305)
  * Add changelog items for 7.3.6, 7.2.3 and 6.7.5 (#29901)
  * bump stable to 7.3.6 (#29899)
  * Upgrade go deps.  (#29900)
  * Expressions: Replace query input fields with select. (#29816)
  * PanelEdit: Update UI if panel plugin changes field config (#29898)
  * Elasticsearch: Remove timeSrv dependency (#29770)
  * PanelEdit: Need new data after plugin change (#29874)
  * Chore(toolkit): disable react/prop-types for eslint config (#29888)
  * Field Config API: Add ability to hide field option or disable it from the overrides (#29879)
  * SharedQuery: Fixes shared query editor now showing queries (#29849)
  * GraphNG: support fill gradient (#29765)
  * Backend style guide: Add more guidelines (#29871)
  * Keep query keys consistent (#29855)
  * Alerting: Copy frame field labels to time series tags (#29886)
  * Update configure-docker.md (#29883)
  * Usage Stats: Introduce an interface for usage stats service (#29882)
  * DataFrame: add a writable flag to fields (#29869)
  * InlineForms: Changes to make inline forms more flexible for query editors  (#29782)
  * Usage Stats: Allow to add additional metrics to the stats (#29774)
  * Fix the broken link of XORM documentation (#29865)
  * Move colors demo under theme colors (#29873)
  * Dashboard: Increase folder name size in search dashboard (#29821)
  * MSSQL: Config UI touches (#29834)
  * QueryOptions:  Open QueryEditors: run queries after changing group options #29864
  * GraphNG: uPlot 1.5.2, dynamic stroke/fill, Flot-style hover points (#29866)
  * Variables: Fixes so numerical sortorder works for options with null values (#29846)
  * GraphNG: only initialize path builders once (#29863)
  * GraphNG: Do not set fillColor from GraphNG only opacity (#29851)
  * add an example cloudwatch resource_arns() query that uses multiple tags (ref: #29499) (#29838)
  * Backend: Remove more globals (#29644)
  * MS SQL: Fix MS SQL add data source UI issues (#29832)
  * Display palette and colors for dark and light themes in storybook (#29848)
  * Docs: Fix broken link in logs-panel (#29833)
  * Docs: Add info about typing of connected props to Redux style guide (#29842)
  * Loki: Remove unnecessary deduplication (#29421)
  * Varibles: Fixes so clicking on Selected will not include All (#29844)
  * Explore/Logs: Correctly display newlines in detected fields (#29541)
  * Link suppliers: getLinks API update (#29757)
  * Select: Changes default menu placement for Select from auto to bottom (#29837)
  * Chore: Automatically infer types for dashgrid connected components  (#29818)
  * Chore: Remove unused Loki and Cloudwatch syntax providers  (#29686)
  * Pass row (#29839)
  * GraphNG: Context menu (#29745)
  * GraphNG: Enable scale distribution configuration (#29684)
  * Explore: Improve Explore performance but removing unnecessary re-renders (#29752)
  * DashboardDS: Fixes display of long queries (#29808)
  * Sparkline: Fixes issue with sparkline that sent in custom fillColor instead of fillOpacity (#29825)
  * Chore: Disable default golangci-lint filter (#29751)
  * Update style guide with correct usage of MS SQL (#29829)
  * QueryEditor: do not auto refresh on every update (#29762)
  * Chore: remove unused datasource status enum (#29827)
  * Expressions: support ${my var} syntax (#29819)
  * Docs: Update types-options.md (#29777)
  * Chore: Enable more go-ruleguard rules (#29781)
  * GraphNG: Load uPlot path builders lazily (#29813)
  * Elasticsearch: ensure query model has timeField configured in datasource settings (#29807)
  * Chore: Use Header.Set method instead of Header.Add (#29804)
  * Allow dependabot to check actions (#28159)
  * Grafana-UI: Support optgroup for MultiSelect (#29805)
  * Sliders: Update behavior and style tweak (#29795)
  * Grafana-ui: Fix collapsible children sizing (#29776)
  * Style guide: Document avoidance of globals in Go code (#29803)
  * Chore: Rewrite opentsdb test to standard library (#29792)
  * CloudWatch: Add support for AWS DirectConnect ConnectionErrorCount metric (#29583)
  * GraphNG: uPlot 1.5.1 (#29789)
  * GraphNG: update uPlot v1.5.0 (#29763)
  * Added httpMethod to webhook (#29780)
  * @grafana-runtime: Throw error if health check fails in DataSourceWithBackend (#29743)
  * Explore: Fix remounting of query row (#29771)
  * Expressions: Add placeholders to hint on input (#29773)
  * Alerting: Next gen Alerting page (#28397)
  * GraphNG: Add test dashboard for null &amp; and gaps rendering (#29769)
  * Expressions: Field names from refId (#29755)
  * Plugins: Add support for signature manifest V2 (#29240)
  * Chore: Configure go-ruleguard via golangci-lint (#28419)
  * Move middleware context handler logic to service (#29605)
  * AlertListPanel: Add options to sort by Time(asc) and Time(desc) (#29764)
  * PanelLibrary: Adds delete Api (#29741)
  * Tracing: Release trace to logs feature (#29443)
  * ReleaseNotes: Updated changelog and release notes for 7.3.5 (#29753)
  * DataSourceSettings: Add servername field to DataSource TLS config (#29279)
  * Chore: update stable and testing versions (#29748)
  * ReleaseNotes: Updated changelog and release notes for 7.3.5 (#29744)
  * Elasticsearch: View in context feature for logs (#28764)
  * Chore: Disable gosec on certain line (#29382)
  * Logging: log frontend errors caught by ErrorBoundary, including component stack (#29345)
  * ChangePassword: improved keyboard navigation (#29567)
  * GrafanaDataSource: Fix selecting -- Grafana -- data source, broken after recent changes (#29737)
  * Docs: added version note for rename by regex transformation. (#29735)
  * @grafana/ui: Fix UI issues for cascader button dropdown and query input (#29727)
  * Docs: Update configuration.md (#29728)
  * Docs: Remove survey (#29549)
  * Logging: rate limit fronted logging endpoint (#29272)
  * API: add Status() to RedirectResponse (#29722)
  * Elasticsearch: Deprecate browser access mode (#29649)
  * Elasticsearch: Fix query initialization action (#29652)
  * PanelLibrary: Adds api and db to create Library/Shared/Reusable Panel (#29642)
  * Transformer: Rename metrics based on regex (#29281)
  * Variables: Fixes upgrade of legacy Prometheus queries (#29704)
  * Auth: Add SigV4 header allowlist to reduce chances of verification issues (#29650)
  * DataFrame: add path and description metadata (#29695)
  * Alerting: Use correct time series name override from frame fields (#29693)
  * GraphNG: fix bars migration and support color and linewidth (#29697)
  * PanelHeader: Fix panel header description inline code wrapping (#29628)
  * Bugfix 29848: Remove annotation_tag entries as part of annotations cleanup (#29534)
  * GraphNG: simple settings migration from flot panel (#29599)
  * GraphNG: replace bizcharts with uPlot for sparklines (#29632)
  * GitHubActions: Update node version in github action (#29683)
  * Adds go dep used by an Enterprise feature.  (#29645)
  * Typescript: Raise strict error limit for enterprise (#29688)
  * Remove unnecessary escaping (#29677)
  * Update getting-started-prometheus.md (#29678)
  * instrumentation: align label name with our other projects (#29514)
  * Typescript: Fixing typescript strict error, and separate check from publishing (#29679)
  * CloudWatch: namespace in search expression should be quoted if match exact is enabled #29109 (#29563)
  * Docs: Plugin schema updates (#28232)
  * RadioButton: Fix flex issue in master for radio buttons (#29664)
  * Update getting-started.md (#29670)
  * Expr: fix time unit typo in ds queries (#29668)
  * Expr: make reduction nan/null more consistent (#29665)
  * Expr: fix func argument panic (#29663)
  * Update documentation-style-guide.md (#29661)
  * Update documentation-markdown-guide.md (#29659)
  * Docs: Changed image format (#29658)
  * Expr: fix failure to execute due to OrgID (#29653)
  * GraphNG: rename "points" to "showPoints" (#29635)
  * Expressions: Restore showing expression query editor even if main data source is not mixed (#29656)
  * GraphNG: time range should match the panel timeRange (#29596)
  * Support svg embedded favicons in whitelabeling (#29436)
  * Add changelog to docs style guide (#29581)
  * Loki: Retry web socket connection when connection is closed abnormally (#29438)
  * GraphNG: Fix annotations and exemplars plugins (#29613)
  * Chore: Rewrite tsdb sql engine test to standard library (#29590)
  * GraphNG: fix and optimize spanNulls (#29633)
  * Build(deps): Bump highlight.js from 10.4.0 to 10.4.1 (#29625)
  * Cloudwatch: session cache should use UTC consistently (#29627)
  * GraphNG: rename GraphMode to DrawStyle (#29623)
  * GraphNG: add spanNulls config option (#29512)
  * Docs: add docs for concatenate transformer (#28667)
  * Stat/Gauge: expose explicit font sizing (#29476)
  * GraphNG: add gaps/nulls support to staircase &amp; smooth interpolation modes (#29593)
  * grafana/ui: Migrate Field knobs to controls (#29433)
  * Prometheus: Fix link to Prometheus graph in dashboard (#29543)
  * Build: Publish next and latest npm channels to Github (#29615)
  * Update broken aliases (#29603)
  * API: add ID to snapshot API responses (#29600)
  * Elasticsearch: Migrate queryeditor to React (#28033)
  * QueryGroup &amp; DataSourceSrv &amp; DataSourcePicker changes simplify usage, error handling and reduce duplication, support for uid (#29542)
  * Elastic: Fixes config UI issues (#29608)
  * GraphNG: Fix issues with plugins not retrieving plot instance (#29585)
  * middleware: Make scenario test functions take a testing.T argument (#29564)
  * Grafana/ui: Storybook controls understand component types (#29574)
  * Login: Fixes typo in tooltip (#29604)
  * Panel: making sure we support all versions of chrome when detecting position of click event. (#29544)
  * Chore: Rewrite sqlstore migration test to use standard library (#29589)
  * Chore: Rewrite tsdb prometheus test to standard library (#29592)
  * Security: Add gosec G304 auditing annotations (#29578)
  * Chore: Rewrite tsdb testdatasource scenarios test to standard library (#29591)
  * Docs: Add missing key to enable SigV4 for provisioning Elasticsearch data source (#29584)
  * Add Microsoft.Network/natGateways (#29479)
  * Update documentation-style-guide.md (#29586)
  * @grafana/ui: Add bell-slash to available icons (#29579)
  * Alert: Fix forwardRef warning (#29577)
  * Update documentation-style-guide.md (#29580)
  * Chore: Upgrade typescript to 4.1 (#29493)
  * PanelLibrary: Adds library_panel table (#29565)
  * Make build docker full fix (#29570)
  * Build: move canary packages to github (#29411)
  * Devenv: Add default db for influxdb (#29371)
  * Chore: Check errors from Close calls (#29562)
  * GraphNG: support auto and explicit axis width (#29553)
  * Chore: upgrading y18n to 4.0.1 for security reasons (#29523)
  * Middleware: Rewrite tests to use standard library (#29535)
  * Overrides: show category on the overrides (#29556)
  * GraphNG: Bars, Staircase, Smooth modes (#29359)
  * Docs: Fix docs sync actions (#29551)
  * Chore: Update dev guide node version for Mac (#29548)
  * Docs: Update formatting-multi-value-variables.md (#29547)
  * Arrow: toArray() on nullable values should include null values (#29520)
  * Docs: Update syntax.md (#29545)
  * NodeJS: Update to LTS (14) (#29467)
  * Docs: Update repeat-panels-or-rows.md (#29540)
  * 3 minor changes, including updating the title TOC (#29501)
  * Auth proxy: Return standard error type (#29502)
  * Data: use pre-defined output array length in vectorToArray() (#29516)
  * Dashboards: hide playlist edit functionality from viewers and snapshots link from unauthenticated users (#28992)
  * docker: use yarn to build (#29538)
  * QueryEditors: Refactoring &amp; rewriting out dependency on PanelModel (#29419)
  * Chore: skip flaky tests (#29537)
  * Graph NG: Invalidate uPlot config on timezone changes (#29531)
  * IntelliSense: Fix autocomplete and highlighting for Loki, Prometheus, Cloudwatch (#29381)
  * Variables: Fixes Textbox current value persistence (#29481)
  * OptionsEditor: simplify the options editor interfaces (#29518)
  * Icon: Changed the icon for signing in (#29530)
  * fixes bug with invalid handler name for metrics (#29529)
  * Middleware: Simplifications (#29491)
  * GraphNG: simplify effects responsible for plot updates/initialization  (#29496)
  * Alarting: fix alarm messages in dingding (Fixes #29470) (#29482)
  * PanelEdit: making sure the correct datasource query editor is being rendered. (#29500)
  * AzureMonitor: Unit MilliSeconds naming (#29399)
  * Devenv: update mysql_tests and postgres_tests blocks for allowing dynamically change of underlying docker image (#29525)
  * Chore: Enable remaining eslint-plugin-react rules (#29519)
  * Docs/Transformations: Add documentation about Binary operations in Add field from calculation (#29511)
  * Datasources: fixed long error message overflowing container (#29440)
  * docker: fix Dockerfile after Gruntfile.js removed (#29515)
  * Chore: Adds Panel Library featuretoggle (#29521)
  * Docs: Update filter-variables-with-regex.md (#29508)
  * Docs: InfluxDB_V2 datasource: adding an example on how to add InfluxQL as a datasource (#29490)
  * Loki: Add query type and line limit to query editor in dashboard (#29356)
  * Docs: Added Security Group support to Azure Auth (#29418)
  * DataLinks: Removes getDataSourceSettingsByUid from applyFieldOverrides  (#29447)
  * Bug: trace viewer doesn't show more than 300 spans (#29377)
  * Live: publish all dashboard changes to a single channel (#29474)
  * Chore: Enable eslint-plugin-react partial rules (#29428)
  * Alerting: Update alertDef.ts with more time options (#29498)
  * DataSourceSrv: Look up data source by uid and name transparently (#29449)
  * Instrumentation: Add examplars for request histograms (#29357)
  * Variables: Fixes Constant variable persistence confusion (#29407)
  * Docs: Fix broken link for plugins (#29346)
  * Prometheus: don't override displayName property (#29441)
  * Grunt: Removes grunt dependency and replaces some of its usage (#29461)
  * Transformation: added support for excluding/including rows based on their values. (#26884)
  * Chore: Enable exhaustive linter (#29458)
  * Field overrides: added matcher to match all fields within frame/query. (#28872)
  * Log: Use os.Open to open file for reading (#29483)
  * MinMax: keep global min/main in field state (#29406)
  * ReactGridLayout: Update dependency to 1.2 (#29455)
  * Jest: Upgrade to latest (#29450)
  * Chore: bump grafana-ui rollup dependencies (#29315)
  * GraphNG: use uPlot's native ms support (#29445)
  * Alerting: Add support for Sensu Go notification channel (#28012)
  * adds tracing for all bus calls that passes ctx (#29434)
  * prometheus: Improve IsAPIError's documentation (#29432)
  * ReleaseNotes: Updated changelog and release notes for 7.3.4 (#29430)
  * Elasticsearch: Fix index pattern not working with multiple base sections (#28348)
  * Plugins: Add support for includes' icon (#29416)
  * Docs: fixing frontend docs issue where enums ending up in wrong folder level. (#29429)
  * Variables: Fixes issue with upgrading legacy queries (#29375)
  * Queries: Extract queries from dashboard (#29349)
  * Docs: docker -&gt; Docker (#29331)
  * PanelEvents: Refactors and removes unnecessary events, fixes panel editor update issue when panel options change (#29414)
  * Fix: Correct panel edit uistate migration (#29413)
  * Alerting: Improve Prometheus Alert Rule error message (#29390)
  * Fix: Migrate Panel edit uiState percentage strings to number (#29412)
  * remove insecure cipher suit as default option (#29378)
  * * prometheus fix variables fetching when  customQueryParameters used #28907 (#28949)
  * Chore: Removes observableTester (#29369)
  * Chore: Adds e2e tests for Variables (#29341)
  * Fix gosec finding of unhandled errors (#29398)
  * Getting started with Grafana and MS SQL (#29401)
  * Arrow: cast timestams to Number (#29402)
  * Docs: Add Cloud content links (#29317)
  * PanelEditor: allow access to the eventBus from panel options (#29327)
  * GraphNG: support x != time in library (#29353)
  * removes unused golint file (#29391)
  * prefer server cipher suites (#29379)
  * Panels/DashList: Fix order of recent dashboards (#29366)
  * Core: Move SplitPane layout from PanelEdit. (#29266)
  * Drone: Upgrade build pipeline tool (#29365)
  * Update yarn.lock to use latest rc-util (#29313)
  * Variables: Adds description field  (#29332)
  * Chore: Update latest.json (#29351)
  * Drone: Upload artifacts for release branch builds (#29297)
  * Docs: fixing link issues in auto generated frontend docs. (#29326)
  * Drone: Execute artifact publishing for both editions in parallel during release (#29362)
  * Devenv: adding default credentials for influxdb (#29344)
  * Drone: Check CUE dashboard schemas (#29334)
  * Backend: fix IPv6 address parsing erroneous (#28585)
  * dashboard-schemas cue 3.0.0 compatible (#29352)
  * Update documentation-style-guide.md (#29354)
  * Docs: Update requirements.md (#29350)
  * ReleaseNotes: Updated changelog and release notes for 7.3.4 (#29347)
  * ReleaseNotes: Updated changelog and release notes for 7.3.4 (#29338)
  * Drone: Publish NPM packages after Storybook to avoid race condition (#29340)
  * Add an option to hide certain users in the UI (#28942)
  * Guardian: Rewrite tests from goconvey (#29292)
  * Docs: Fix editor role and alert notification channel description (#29301)
  * Docs: Improve custom Docker image instructions (#29263)
  * Security: Fixes minor security issue with alert notification webhooks that allowed GET &amp; DELETE requests #29330
  * Chore: Bump storybook to v6 (#28926)
  * ReleaseNotes: Updates release notes link in package.json (master) (#29329)
  * Docs: Accurately reflecting available variables (#29302)
  * Heatmap: Fixes issue introduced by new eventbus (#29322)
  * Dashboard Schemas (#28793)
  * devenv: Add docker load test which authenticates with API key (#28905)
  * Login: Fixes redirect url encoding issues of # %23 being unencoded after login (#29299)
  * InfluxDB: update flux library and support boolean label values (#29310)
  * Explore/Logs: Update Parsed fields to Detected fields (#28881)
  * GraphNG: Init refactorings and fixes (#29275)
  * fixing a broken relref link (#29312)
  * Drone: Upgrade build pipeline tool (#29308)
  * decreasing frontend docs threshold. (#29304)
  * Docker: update docker root group docs and docker image (#29222)
  * WebhookNotifier: Convert tests away from goconvey (#29291)
  * Annotations: fixing so when changing annotations query links submenu will be updated. (#28990)
  * [graph-ng] add temporal DataFrame alignment/outerJoin &amp; move null-asZero pass inside (#29250)
  * Dashboard: Fixes kiosk state after being redirected to login page and back (#29273)
  * make it possible to hide change password link in profile menu (#29246)
  * Theme: Add missing color type (#29265)
  * Chore: Allow reducerTester to work with every data type &amp; payload-less actions (#29241)
  * Explore/Prometheus: Update default query type option to "Both" (#28935)
  * Loki/Explore: Add query type selector (#28817)
  * Variables: New Variables are stored immediately (#29178)
  * reduce severity level to warning (#28939)
  * Units: Changes FLOP/s to FLOPS and some other rates per second units get /s suffix  (#28825)
  * Docs: Remove duplicate "Transformations overview" topics from the TOC (#29247)
  * Docs: Fixed broken relrefs and chanfed TOC entry name from Alerting to Alerts. (#29251)
  * Docs: Remove duplicate Panel overview topic.  (#29248)
  * Increase search limit on team add user and improve placeholder (#29258)
  * Fix warnings for conflicting style rules (#29249)
  * Make backwards compatible (#29212)
  * Minor cosmetic markdown tweaks in docs/cloudwatch.md (#29238)
  * Getting Started: Updated index topic, removed "what-is-grafana", and adjusted weight o? (#29216)
  * BarGauge: Fix story for BarGauge, caused knobs to show for other stories (#29232)
  * Update glossary to add hyperlinks to Explore and Transformation entries (#29217)
  * Chore: Enable errorlint linter (#29227)
  * TimeRegions: Fixed issue with time regions and tresholds due to angular js upgrade (#29229)
  * CloudWatch: Support request cancellation properly (#28865)
  * CloudMonitoring: Support request cancellation properly (#28847)
  * Chore: Handle wrapped errors (#29223)
  * Expressions: Move GEL into core as expressions (#29072)
  * Chore: remove compress:release grunt task (#29225)
  * Refactor/Explore: Inline datasource actions into initialisation (#28953)
  * Fix README typo (#29219)
  * Grafana UI: Card API refactor (#29034)
  * Plugins: Changed alertlist alert url to view instead of edit (#29060)
  * React: Upgrading react to v17, wip (#29057)
  * Gauge: Tweaks short value auto-sizing (#29197)
  * BackendSrv: support binary responseType like $http did (#29004)
  * GraphNG: update the options config (#28917)
  * Backend: Fix build (#29206)
  * Permissions: Validate against Team/User permission role update (#29101)
  * ESlint: React fixes part 1 (#29062)
  * Tests: Adds expects for observables (#28929)
  * Variables: Adds new Api that allows proper QueryEditors for Query variables (#28217)
  * Introduce eslint-plugin-react (#29053)
  * Automation: Adds GitHub release action (#29194)
  * Refactor declarative series configuration to a config builder (#29106)
  * ReleaseNotes: Updated changelog and release notes for 7.3.3 (#29189)
  * Panels: fix positioning of the header title (#29167)
  * trace user login and datasource name instead of id (#29183)
  * playlist: Improve test (#29120)
  * Drone: Fix publish-packages invocation (#29179)
  * Table: Fix incorrect condtition for rendering table filter (#29165)
  * Chore: Upgrade grafana/build-ci-deploy image to latest Go (#29171)
  * DashboardLinks: will only refresh dashboard search when changing tags for link. (#29040)
  * ReleaseNotes: Updated changelog and release notes for 7.3.3 (#29169)
  * CloudWatch: added HTTP API Gateway specific metrics and dimensions (#28780)
  * Release: Adding release notes for 7.3.3 (#29168)
  * SQL: Define primary key for tables without it (#22255)
  * changed link format from MD to HTML (#29163)
  * Backend: Rename variables for style conformance (#29097)
  * Docs: Fixes what'new menu and creates index page, adds first draft of release notes to docs (#29158)
  * Drone: Upgrade build pipeline tool and build image (#29161)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0 (#29160)
  * ReleaseNotes: Updated changelog and release notes for 7.3.3 (#29159)
  * Chore: Upgrade Go etc in build images (#29157)
  * Chore: Remove unused Go code (#28852)
  * API: Rewrite tests from goconvey (#29091)
  * Chore: Fix linting issues caught by ruleguard (#28799)
  * Fix panic when using complex dynamic URLs in app plugin routes  (#27977)
  * Snapshots: Fixes so that dashboard snapshots show data when using Stat, Gauge, BarGauge or Table panels (#29031)
  * Fix authomation text: remove hyphen (#29149)
  * respect fronted-logging.enabled flag (#29107)
  * build paths in an os independent way (#29143)
  * Provisioning: always pin app to the sidebar when enabled (#29084)
  * Automation: Adds new changelog actions (#29142)
  * Chore: Rewrite preferences test from GoConvey to stdlib and testify (#29129)
  * Chore: Upgrade Go dev tools (#29124)
  * Automation: Adding version bump action
  * DataFrames: add utility function to check if structure has changed (#29006)
  * Drone: Fix Drone config verification for enterprise on Windows (#29118)
  * Chore: Require OrgId to be specified in delete playlist command (#29117)
  * Plugin proxy: Handle URL parsing errors (#29093)
  * Drone: Verify Drone config at beginning of pipelines (#29071)
  * Legend/GraphNG: Refactoring legend types and options (#29067)
  * Doc: Update documentation-style-guide.md (#29082)
  * Chore: Bumps types for jest (#29098)
  * LogsPanel: Fix scrolling in dashboards (#28974)
  * sort alphabetically unique labels, labels and parsed fields (#29030)
  * Data source proxy: Convert 401 from data source to 400 (#28962)
  * Plugins: Implement testDatasource for Jaeger (#28916)
  * Update react-testing-library (#29061)
  * Graph: Fixes stacking issues like floating bars when data is not aligned  (#29051)
  * StatPanel: Fixes hanging issue when all values are zero (#29077)
  * Auth: Enable more complete credential chain for SigV4 default SDK auth option (#29065)
  * Chore: Convert API tests to standard Go lib (#29009)
  * Update README.md (#29075)
  * Update CODEOWNERS (#28906)
  * Enhance automation text for missing information (#29052)
  * GraphNG: Adding ticks test dashboard and improves tick spacing (#29044)
  * Chore: Migrate Dashboard List panel to React (#28607)
  * Test Datasource/Bug: Fixes division by zero in csv metric values scenario (#29029)
  * Plugins: Bring back coreplugin package (#29064)
  * Add 'EventBusName' dimension to CloudWatch 'AWS/Events' namespace (#28402)
  * CloudWatch: Add support for AWS/ClientVPN metrics and dimensions (#29055)
  * AlertingNG: manage and evaluate alert definitions via the API (#28377)
  * Fix linting issues (#28811)
  * Logging: Log frontend errors (#28073)
  * Fix for multi-value template variable for project selector (#29042)
  * Chore: Rewrite test helpers from GoConvey to stdlib (#28919)
  * GraphNG: Fixed axis measurements (#29036)
  * Fix links to logql docs (#29037)
  * latest 7.3.2 (#29041)
  * Elasticsearch: Add Moving Function Pipeline Aggregation (#28131)
  * changelog 7.3.2 (#29038)
  * MutableDataFrame: Remove unique field name constraint and values field index and unused/seldom used stuff  (#27573)
  * Fix prometheus docs related to query variable (#29027)
  * Explore: support ANSI colors in live logs (#28895)
  * Docs: Add documentation about log levels (#28975)
  * Dashboard: remove usage of Legacyforms (#28707)
  * Docs: Troubleshoot starting docker containers on Mac (#28754)
  * Elasticsearch: interpolate variables in Filters Bucket Aggregation (#28969)
  * Chore: Bump build pipeline version (#29023)
  * Annotations: Fixes error when trying to create annotation when dashboard is unsaved (#29013)
  * TraceViewer: Make sure it does not break when no trace is passed (#28909)
  * Thresholds: Fixes color assigned to null values (#29010)
  * Backend: Remove unused code (#28933)
  * Fix documentation (#28998)
  * Tracing: Add setting for sampling server (#29011)
  * Logs Panel: Fix inconsistent higlighting (#28971)
  * MySQL: Update README.md (#29003)
  * IntervalVariable: Fix variable tooltip (#28988)
  * StatPanels: Fixes auto min max when latest value is zero (#28982)
  * Chore: Fix SQL related Go variable naming (#28887)
  * MSSQL: Support request cancellation properly (Uses new backendSrv.fetch Observable request API) (#28809)
  * Variables: Fixes loading with a custom all value in url (#28958)
  * Backend: Adds route for well-known change password URL (#28788)
  * docs: fix repeated dashboards link (#29002)
  * LogsPanel: Don't show scroll bars when not needed (#28972)
  * Drone: Fix docs building (#28986)
  * StatPanel: Fixed center of values in edge case scenarios (#28968)
  * Update getting-started-prometheus.md (#28502)
  * Docs: fix relref (#28977)
  * Docs: Minor docs update
  * Docs: Another workflow docs update
  * Docs: Workflow minor edit
  * Docs: Another minor edit
  * Docs: Update PR workflow docs
  * Docs: Update bot docs
  * StatPanels: set default to last (#28617)
  * Tracing: log traceID in request logger (#28952)
  * start tracking usage stats for tempo (#28948)
  * Docs: Update bot docs
  * GrafanaBot: Update labels and commands and adds docs  (#28950)
  * Docs: updates for file-based menu (#28500)
  * Grot: Added command/label to close feature requests with standard message (#28937)
  * GraphNG: Restore focus option (#28946)
  * Docs: Fix links (#28945)
  * Short URL: Cleanup unvisited/stale short URLs (#28867)
  * GraphNG: Using new VizLayout, moving Legend into GraphNG and some other refactorings (#28913)
  * CloudWatch Logs: Change what we use to measure progress (#28912)
  * Chore: use jest without grunt (#28558)
  * Chore: Split Explore redux code into multiple sections (#28819)
  * TestData: Fix issue with numeric inputs in TestData query editor (#28936)
  * setting: Fix tests on Mac (#28886)
  * Plugins signing: Fix docs urls (#28930)
  * Field color: handling color changes when switching panel types (#28875)
  * Variables: make sure that we support both old and new syntax for custom variables. (#28896)
  * CodeEditor: added support for javascript language (#28818)
  * Update CHANGELOG.md (#28928)
  * Plugins: allow override when allowing unsigned plugins (#28901)
  * Chore: Fix spelling issue (#28904)
  * Grafana-UI: LoadingPlaceholder docs (#28874)
  * Gauge: making sure threshold panel json is correct before render (#28898)
  * Chore: Rewrite test in GoConvey to stdlib and testify (#28918)
  * Update documentation-style-guide.md (#28908)
  * Adding terms to glossary (#28884)
  * Devenv: Fix Prometheus basic auth proxy (#28889)
  * API: replace SendLoginLogCommand with LoginHook (#28777)
  * Dashboards / Folders: delete related data (permissions, stars, tags, versions, annotations) when deleting a dashboard or a folder (#28826)
  * Loki: Correct grammar in DerivedFields.tsx (#28885)
  * Docs: Update list of Enterprise plugins (#28882)
  * Live: update centrifuge and the ChannelHandler api (#28843)
  * Update share-panel.md (#28880)
  * CRLF (#28822)
  * PanelHeader: show streaming indicator (and allow unsubscribe)  (#28682)
  * Docs: Plugin signing docs (#28671)
  * Chore: Fix issues reported by staticcheck; enable stylecheck linter (#28866)
  * Elasticsearch: Filter pipeline aggregations from order by options (#28620)
  * Variables: added __user.email to global variable (#28853)
  * Fix titles case and add missing punctuation marks (#28713)
  * VizLayout: Simple viz layout component for legend placement and scaling (#28820)
  * Chore: Fix staticcheck issues (#28860)
  * Chore: Fix staticcheck issues (#28854)
  * Disable selecting enterprise plugins with no license (#28758)
  * Tempo: fix test data source (#28836)
  * Prometheus: fix missing labels from value (#28842)
  * Chore: Fix issues found by staticcheck (#28802)
  * Chore: Remove dead code (#28664)
  * Units: added support to handle negative fractional numbers. (#28849)
  * Variables: Adds variables inspection (#25214)
  * Marked: Upgrade and always sanitize by default (#28796)
  * Currency: add Philippine peso currency (PHP) (#28823)
  * Alert: Remove z-index on Alert component so that it does not overlay ontop of other content (#28834)
  * increase blob column size for encrypted dashboard data (#28831)
  * Gauge: Improve font size auto sizing (#28797)
  * grafana/toolkit: allow builds with lint warnings (#28810)
  * core and grafana/toolkit: Use latest version of grafana-eslint-conifg (#28816)
  * Icon: Replace font awesome icons where possible (#28757)
  * Remove homelinks panel (#28808)
  * StatPanels: Add new calculation option for percentage difference  (#26369)
  * Dashboard: Add Datetime local (No date if today) option in panel axes' units (#28011)
  * Variables: Adds named capture groups to variable regex (#28625)
  * Panel inspect: Interpolate variables in panel inspect title (#28779)
  * grafana/toolkit: Drop console and debugger statements by default when building plugin with toolkit (#28776)
  * Variables: Fixes URL values for dependent variables (#28798)
  * Graph: Fixes event emit function error (#28795)
  * Adds storybook integrity check to drone config (#28785)
  * Live: improve broadcast semantics and avoid double posting (#28765)
  * Events: Remove unused or unnecessary events  (#28783)
  * Docs: added code comments to frontend packages. (#28784)
  * Plugin Dockerfiles: Upgrade Go, golangci-lint, gcloud SDK (#28767)
  * Dependencies: Update angularjs to 1.8.2 (#28736)
  * EventBus: Introduces new event bus with emitter backward compatible interface (#27564)
  * ColorSchemes: Add new color scheme (#28719)
  * Docs: Add NGINX example for using websockets to Loki (#27998)
  * Docs: Made usage of config/configuration consistent #19270 (#28167)
  * Cloudwatch: Fix issue with field calculation transform not working properly with Cloudwatch data (#28761)
  * grafana/toolkit: Extract CHANGELOG when building plugin (#28773)
  * Drone: Upgrade build pipeline tool (#28769)
  * devenv: Upgrade MSSQL Docker image (#28749)
  * Docs: Add docs for InfoBox component (#28705)
  * Reoeragnization. (#28760)
  * gtime: Add ParseDuration function (#28525)
  * Explore: Remove redundant decodeURI and fix urls (#28697)
  * Dashboard: fix view panel mode for Safari / iOS (#28702)
  * Provisioning: Fixed problem with getting started panel being added to custom home dashboard (#28750)
  * LoginPage: Removed auto-capitalization from the login form (#28716)
  * Plugin page: Fix dom validation warning (#28737)
  * Migration: Remove LegacyForms from dashboard folder permissions (#28564)
  * Dependencies: Remove unused dependency (#28711)
  * AlertRuleList: Add keys to alert rule items (#28735)
  * Chore: Pin nginx base image in nginx proxy Dockerfiles (#28730)
  * Drone: Upgrade build-pipeline tool (#28728)
  * TableFilters: Fixes filtering with field overrides (#28690)
  * Templating: Speeds up certain variable queries for Postgres, MySql and MSSql (#28686)
  * Fix typo in unsigned plugin warning (#28709)
  * Chore: Convert sqlstore annotation test from GoConvey to testify (#28715)
  * updates from https://github.com/grafana/grafana/pull/28679 (#28708)
  * Chore: Add some scenario tests for Explore (#28534)
  * Update latest version to 7.3.1 (#28701)
  * Changelog update - 7.3.1 (#28699)
  * Drone: Don't build on Windows for PRs (#28663)
  * Build: changing docs docker image to prevent setting up frontend devenv. (#28670)
  * Prometheus: Fix copy paste behaving as cut and paste (#28622)
  * Loki: Fix error when some queries return zero results (#28645)
  * Chore: allow higher nodejs version than 12 (#28624)
  * TextPanel: Fixes problems where text panel would show old content (#28643)
  * PanelMenu: Fixes panel submenu not being accessible for panels close to the right edge of the screen (#28666)
  * Cloudwatch: Fix duplicate metric data (#28642)
  * Add info about CSV download for Excel in What's new article (#28661)
  * Docs: Describe pipeline aggregation changes in v7.3 (#28660)
  * Plugins: Fix descendent frontend plugin signature validation (#28638)
  * Docker:  use root group in the custom Dockerfile (#28639)
  * Bump rxjs to 6.6.3 (#28657)
  * StatPanel: Fixed value being under graph and reduced likley hood for white and dark value text mixing (#28641)
  * Table: Fix image cell mode so that it works with value mappings (#28644)
  * Build: support custom build tags (#28609)
  * Plugin signing: Fix copy on signed plugin notice (#28633)
  * Dashboard: Fix navigation from one SoloPanelPage to another one (#28578)
  * CloudWatch: Improve method name, performance optimization (#28632)
  * Developer guide: Update wrt. Windows (#28559)
  * Docs: Update graph panel for tabs (#28552)
  * update latest.json (#28603)
  * Docs: data source insights (#28542)
  * Field config API: add slider editor (#28007)
  * changelog: update for 7.3.0 (#28602)
  * Update uPlot to 1.2.2 and align timestamps config with new uPLot API (#28569)
  * Live: updated the reference to use lazy loaded Monaco in code editor. (#28597)
  * Dashboard: Allow add panel for viewers_can_edit (#28570)
  * Docs: Data source provisioning and sigV4 (#28593)
  * Docs: Additional 7.3 upgrade notes (#28592)
  * CI: Add GCC to Windows Docker image (#28562)
  * CloudWatch Logs queue and websocket support (#28176)
  * Explore/Loki: Update docs and cheatsheet (#28541)
  * Grafana-UI: Add Card component (#28216)
  * AddDatasource: Improve plugin categories (#28584)
  * StatPanel: Fixes BizChart error max: yyy should not be less than min zzz (#28587)
  * docs: a few tweaks for clarity and readability (#28579)
  * API: Reducing some api docs errors (#28575)
  * Grafana-UI: ContextMenu docs (#28508)
  * Short URL: Update last seen at when visiting a short URL (#28565)
  * Fix backend build on Windows (#28557)
  * add value prop (#28561)
  * Plugin signing: UI information (#28469)
  * Use fetch API in InfluxDB data source (#28555)
  * PanelEdit: Prevent the preview pane to be resized further than window height (#28370)
  * Docs: Update generic-oauth.md (#28517)
  * GCS image uploader: Add tests (#28521)
  * Move metrics collector queries to config (#28549)
  * Plugins: Fix plugin URL paths on Windows (#28548)
  * API: add login username in SendLoginLogCommand (#28544)
  * AzureMonitor: Support decimal (as float64) type in analytics/logs (#28480)
  * Auth: Fix SigV4 request verification step for Amazon Elasticsearch Service (#28481)
  * Grafana/ui: auto focus threshold editor input (#28360)
  * Docs: SigV4 What's New and AWS Elasticsearch documentation (#28506)
  * Drone: Upgrade build pipeline tool (#28533)
  * Drone: Refactor version branch pipeline logic (#28531)
  * Drone: Upgrade build-pipeline tool (#28520)
  * Docs: Update field color scheme docs and 7.3 what's new (#28496)
  * Templating: Custom variable edit UI, change text input into textarea  (#28312) (#28322)
  * Currency: Adds Indonesian IDR currency (#28363)
  * Chore: Fix flaky sqlstore annotation test (#28527)
  * Checkbox: Fix component sample typo (#28518)
  * Image uploader: Fix uploading of images to GCS (#26493)
  * OAuth: Support Forward OAuth Identity for backend data source plugins (#27055)
  * Updated documentation style guide  (#28488)
  * Cloud Monitoring: Fix help section for aliases (#28499)
  * Docs: what's new in enterprise 7.3 (#28472)
  * Plugins: Track plugin signing errors and expose them to the frontend (#28219)
  * Elasticsearch: Fix handling of errors when testing data source (#28498)
  * Auth: Should redirect to login when anonymous enabled and URL with different org than anonymous specified  (#28158)
  * Drone: Don't build Windows installer for version branches (#28494)
  * Docs: Grafana Enterprise auditing feature (#28356)
  * Drone: Add version branch pipeline (#28490)
  * Getting Started section rehaul (#28090)
  * Docs: Add survey content (#28446)
  * Docs: Update prometheus.md (#28483)
  * Docs: Add view settings and view stats (#28155)
  * Remove entry from 7.3.0-beta2 Changelog (#28478)
  * Circle: Remove release pipeline (#28474)
  * Update latest.json (#28476)
  * Switch default version to Graphite 1.1 (#28471)
  * Plugin page: update readme icon (#28465)
  * Chore: Update changelog (#28473)
  * Explore: parse time range fix (#28467)
  * Alerting: Log alert warnings for obsolete notifiers when extracting alerts and remove spammy error (#28162)
  * Shorten url: Unification across Explore and Dashboards (#28434)
  * Explore: Support wide data frames (#28393)
  * Docs: updated cmd to build docs locally to generate docs prior to building site. (#28371)
  * Live: support real time measurements (alpha) (#28022)
  * CloudWatch/Athena - valid metrics and dimensions. (#28436)
  * Chore: Use net.JoinHostPort (#28421)
  * Chore: Upgrade grafana-eslint to latest (#28444)
  * Fix cut off icon (#28442)
  * Docs: Add shared (#28411)
  * Loki: Visually distinguish error logs for LogQL2 (#28359)
  * Database; Remove database metric feature flag and update changelog (#28438)
  * TestData: multiple arrow requests should return multiple frames (#28417)
  * Docs: Test survey code (#28437)
  * Docs: improved github action that syncs docs to website (#28277)
  * update latest.json with latest stable version (#28433)
  * 7.2.2 changelog update (#28406)
  * plugins: Don't exit on duplicate plugin (#28390)
  * API: Query database from /api/health endpoint (#28349)
  * Chore: Fix conversion of a 64-bit integer to a lower bit size type uint (#28425)
  * Prometheus: fix parsing of infinite sample values (#28287) (#28288)
  * Chore: Rewrite some tests to use testify (#28420)
  * Plugins: do not remount app plugin on nav change (#28105)
  * App Plugins: Add backend support (#28272)
  * Chore: react hooks eslint fixes in grafana-ui (#28026)
  * ci-e2e: Add Git (#28410)
  * TestData: Remove useEffect that triggeres query on component load (#28321)
  * FieldColor: Remove inverted color scheme (#28408)
  * Chore: Set timezone for tests to non utc. (#28405)
  * Chore: fix jsdoc desc and return (#28383)
  * Docs: Fixing v51 link (#28396)
  * fixes windows crlf warning (#28346)
  * Grafana/ui: pass html attributes to segment (#28316)
  * Alerting: Return proper status code when trying to create alert notification channel with duplicate name or uid (#28043)
  * OAuth: Able to skip auto login (#28357)
  * CloudWatch: Fix custom metrics (#28391)
  * Docs: Adds basic frontend data request concepts (#28253)
  * Instrumentation: Add histogram for request duration (#28364)
  * remove status label from histogram (#28387)
  * OAuth: configurable user name attribute (#28286)
  * Component/NewsPanel: Add rel="noopener" to NewsPanel links (#28379)
  * Webpack: Split out unicons and bizcharts (#28374)
  * Explore: Fix date formatting in url for trace logs link (#28381)
  * Docs: Add activate-license (#28156)
  * Instrumentation: Add counters and histograms for database queries (#28236)
  * Docs: Make tables formatting more consistent (#28164)
  * CloudWatch: Adding support for additional Amazon CloudFront metrics (#28378)
  * Add unique ids to query editor fields (#28376)
  * Plugins: Compose filesystem paths with filepath.Join (#28375)
  * Explore: Minor tweaks to exemplars marble (#28366)
  * Instrumentation: Adds environment_info metric  (#28355)
  * AzureMonitor: Fix capitalization of NetApp 'volumes' namespace (#28369)
  * ColorSchemes: Adds more color schemes and text colors that depend on the background (#28305)
  * Automation: Update backport github action trigger (#28352)
  * Dashboard links: Places drop down list so it's always visible (#28330)
  * Docs: Add missing records from grafana-ui 7.2.1 CHANGELOG (#28302)
  * Templating: Replace all '$tag' in tag values query (#28343)
  * Docs: Add docs for valuepicker (#28327)
  * Git: Create .gitattributes for windows line endings (#28340)
  * Update auth-proxy.md (#28339)
  * area/grafana/toolkit: update e2e docker image (#28335)
  * AlertingNG: remove warn/crit from eval prototype (#28334)
  * Automation: Tweaks to more info message (#28332)
  * Loki: Run instant query only when doing metric query (#28325)
  * SAML: IdP-initiated SSO docs (#28280)
  * IssueTriage: Needs more info automation and messages (#28137)
  * GraphNG: Use AxisSide enum (#28320)
  * BackendSrv: Fixes queue countdown when unsubscribe is before response (#28323)
  * Automation: Add backport github action (#28318)
  * Build(deps): Bump http-proxy from 1.18.0 to 1.18.1 (#27507)
  * Bump handlebars from 4.4.3 to 4.7.6 (#27416)
  * Bump tree-kill from 1.2.1 to 1.2.2 (#27405)
  * Loki: Base maxDataPoints limits on query type (#28298)
  * Explore: respect min_refresh_interval (#27988)
  * Drone: Use ${DRONE_TAG} in release pipelines, since it should work (#28299)
  * Graph NG: fix toggling queries and extract Graph component from graph3 panel (#28290)
  * fix: for graph size not taking up full height or width
  * should only ignore the file in the grafana mixin root folder (#28306)
  * Drone: Fix grafana-mixin linting (#28308)
  * SQLStore: Run tests as integration tests (#28265)
  * Chore: Add cloud-middleware as code owners (#28310)
  * API: Fix short URLs (#28300)
  * CloudWatch: Add EC2CapacityReservations Namespace (#28309)
  * Jaeger: timeline collapser to show icons (#28284)
  * update latest.json with latest beta version (#28293)
  * Update changelog (#28292)
  * Docs : - Added period (#28260)
  * Add monitoring mixing for Grafana (#28285)
  * Chore: Update package.json (#28291)
  * Drone: Fix enterprise release pipeline (#28289)
  * Alerting: Append appSubUrl to back button on channel form (#28282)
- Rework package Makefile &amp; README now that Grunt is gone</changelog>
  <changelog author="tserong@suse.com" date="1613995200">- Update to version 7.4.2:
  * Make Datetime local (No date if today) working (#31274) (#31275)
  * "Release: Updated versions in package to 7.4.2" (#31272)
  * [v7.4.x] Chore: grafana-toolkit uses grafana-ui and grafana-data workspaces (#31269)
  * Snapshots: Disallow anonymous user to create snapshots (#31263) (#31266)
  * only update usagestats every 30min (#31131) (#31262)
  * Prometheus: Fix enabling of disabled queries when editing in dashboard (#31055) (#31248)
  * CloudWatch: Ensure empty query row errors are not passed to the panel (#31172) (#31245)
  * StatPanels: Fixes to palette color scheme is not cleared when loading panel (#31126) (#31246)
  * QueryEditors: Fixes issue that happens after moving queries then editing would update other queries (#31193) (#31244)
  * LibraryPanels: Disconnect before connect during dashboard save (#31235) (#31238)
  * SqlDataSources: Fixes the Show Generated SQL button in query editors (#31236) (#31239)
  * Variables: Adds back default option for data source variable (#31208) (#31232)
  * IPv6: Support host address configured with enclosing square brackets (#31226) (#31228)
  * Postgres: Fix timeGroup macro converts long intervals to invalid numbers when TimescaleDB is enabled (#31179) (#31224)
  * Remove last synchronisation field from LDAP debug view (#30984) (#31221)
  * [v7.4.x]: Sync drone config from master to stable release branch (#31213)
  * DataSourceSrv: Filter out non queryable data sources by default (#31144) (#31214)
  * Alerting: Fix modal text for deleting obsolete notifier (#31171) (#31209)
  * Variables: Fixes missing empty elements from regex filters (#31156) (#31201)
  * DashboardLinks: Fixes links always cause full page reload (#31178) (#31181)
  * DashboardListPanel: Fixes issue with folder picker always showing All and using old form styles (#31160) (#31162)
  * Permissions: Fix team and role permissions on folders/dashboards not displayed for non Grafana Admin users (#31132) (#31176)
  * Prometheus: Multiply exemplars timestamp to follow api change (#31143) (#31170)
- Added add-gotest-module.patch to fix "inconsistent vendoring" build failure</changelog>
  <changelog author="ecsos@opensuse.org" date="1618228800">- Update to version 7.5.3:
  * "Release: Updated versions in package to 7.5.3" (#32745)
  * FolderPicker: Prevent dropdown menu from disappearing off screen (#32603) (#32741)
  * Loki: Remove empty annotations tags (#32359) (#32490)
  * SingleStat: fix wrong call to getDataLinkUIModel (#32721) (#32739)
  * Prometheus: Fix instant query to run two times when exemplars enabled (#32508) (#32726)
  * Elasticsearch: Fix bucket script variable duplication in UI (#32705) (#32714)
  * Variables: Confirms selection before opening new picker (#32586) (#32710)
  * CloudWarch: Fix service quotas link (#32686) (#32689)
  * Configuration: Prevent browser hanging / crashing with large number of org users (#32546) (#32598)
  * chore: bump execa to v2.1.0 (#32543) (#32592)
  * Explore: Fix bug where navigating to explore would result in wrong query and datasource to be shown (#32558)
  * Fix broken gtime tests (#32582) (#32587)
  * resolve conflicts (#32567)
  * gtime: Make ParseInterval deterministic (#32539) (#32560)
  * Dashboard: No longer includes default datasource when externally exporting dashboard with row (#32494) (#32535)
  * TextboxVariable: Limits the length of the preview value (#32472) (#32530)
  * AdHocVariable: Adds default data source (#32470) (#32476)
  * Variables: Fixes Unsupported data format error for null values (#32480) (#32487)
  * Prometheus: align exemplars check to latest api change (#32513) (#32515)
  * "Release: Updated versions in package to 7.5.2" (#32502)
  * SigV4: Add support EC2 IAM role auth and possibility to toggle auth providers  (#32444) (#32488)
  * Set spanNulls to default (#32471) (#32486)
  * Graph: Fix setting right y-axis when standard option unit is configured (#32426) (#32442)
  * API: Return 409 on datasource version conflict (#32425) (#32433)
  * API: Return 400 on invalid Annotation requests (#32429) (#32431)
  * Variables: Fixes problem with data source variable when default ds is selected (#32384) (#32424)
  * Table: Fixes so links work for image cells (#32370) (#32410)
  * Variables: Fixes error when manually non-matching entering custom value in variable input/picker (#32390) (#32394)
  * DashboardQueryEditor: Run query after selecting source panel (#32383) (#32395)
  * API: Datasource endpoint should return 400 bad request if id and orgId is invalid (#32392) (#32397)
  * "Release: Updated versions in package to 7.5.1" (#32362)
  * MSSQL: Upgrade go-mssqldb (#32347) (#32361)
  * GraphNG: Fix tooltip displaying wrong or no data (#32312) (#32348)
  * "Release: Updated versions in package to 7.5.0" (#32308)
  * Loki: Fix text search in Label browser (#32293) (#32306)
  * Explore: Show all dataFrames in data tab in Inspector (#32161) (#32299)
  * PieChartV2: Add migration from old piechart (#32259) (#32291)
  * LibraryPanels: Adds Type and Description to DB (#32258) (#32288)
  * LibraryPanels: Prevents deletion of connected library panels (#32277) (#32284)
  * Library Panels: Add "Discard" button to panel save modal (#31647) (#32281)
  * LibraryPanels: Changes to non readonly reducer (#32193) (#32200)
  * Notifications: InfluxDB - Fix regex to include metrics with hyphen in aliases (#32224) (#32262)
  * SSE/InfluxDB: Change InfluxQL to work with server side expressions (#31691) (#32102)
  * DashboardSettings: Fixes issue with tags list not updating when changes are made (#32241) (#32247)
  * Logs: If log message missing, use empty string (#32080) (#32243)
  * CloudWatch: Use latest version of aws sdk (#32217) (#32223)
  * Release: Updated versions in package to 7.5.0-beta.2 (#32158)
  * HttpServer: Make read timeout configurable but disabled by default (#31575) (#32154)
  * GraphNG: Ignore string fields when building data for uPlot in GraphNG (#32150) (#32151)
  * Fix loading timezone info on windows (#32029) (#32149)
  * SQLStore: Close session in withDbSession (#31775) (#32108)
  * Remove datalink template suggestions for accessing specific fields when there are multiple dataframes. (#32057) (#32148)
  * GraphNG: make sure dataset and config are in sync when initializing and re-initializing uPlot (#32106) (#32125)
  * MixedDataSource: Name is updated when data source variable changes (#32090) (#32144)
  * Backport 32005 to v7.5.x #32128 (#32130)
  * Loki: Label browser UI updates (#31737) (#32119)
  * ValueMappings: Fixes value 0 not being mapped (#31924) (#31929)
  * GraphNG: Fix tooltip series color for multi data frame scenario (#32098) (#32103)
  * LibraryPanels: Improves the Get All experience (#32028) (#32093)
  * Grafana/ui: display all selected levels for selected value when searching (#32030) (#32032)
  * Exemplars: always query exemplars (#31673) (#32024)
  * [v7.5.x] TimePicker: Fixes hidden time picker shown in kiosk TV mode (#32055)
  * Chore: Collect elasticsearch version usage stats (#31787) (#32063)
  * Chore: Tidy up Go deps (#32053)
  * GraphNG: Fix PlotLegend field display name being outdated (#32064) (#32066)
  * Data proxy: Fix encoded characters in URL path should be proxied encoded (#30597) (#32060)
  * [v7.5.x] Auth: Allow soft token revocation (#32037)
  * Snapshots: Fix usage of sign in link from the snapshot page (#31986) (#32036)
  * Make master green (#32011) (#32015)
  * Query editor: avoid avoiding word wrap on query editor components (#31949) (#31982)
  * Variables: Fixes filtering in picker with null items (#31979) (#31995)
  * TooltipContainer - use resize observer instead of getClientBoundingRect (#31937) (#32003)
  * Loki: Fix autocomplete when re-editing Loki label values (#31828) (#31987)
  * Loki: Fix type errors in language_provider (#31902) (#31945)
  * PanelInspect: Interpolates variables in CSV file name (#31936) (#31977)
  * Cloudwatch: use shared library for aws auth (#29550) (#31946)
  * Tooltip: partial perf improvement (#31774) (#31837) (#31957)
  * Backport 31913 to v7.5.x (#31955)
  * Grafana/ui: fix searchable options for Cascader with options update (#31906) (#31938)
  * Variables: Do not reset description on variable type change (#31933) (#31939)
  * [v7.5.x] AnnotationList: Adds spacing to UI  (#31888) (#31894)
  * Elasticseach: Support histogram fields (#29079) (#31914)
  * Chore: upgrade eslint and fork-ts-checker-webpack-plugin (#31854) (#31896)
  * Update scripts and Dockerfiles to use Go 1.16.1 (#31881) (#31891)
  * Templating: use dashboard timerange when variables are set to refresh 'On Dashboard Load' (#31721) (#31801)
  * [v7.5.x] Tempo: Add test for backend data source (#31835) (#31882)
  * Run go mod tidy to update go.mod and go.sum (#31859)
  * Grafana/ui: display all selected levels for Cascader (#31729) (#31862)
  * CloudWatch: Consume the grafana/aws-sdk (#31807) (#31861)
  * Cloudwatch: ListMetrics API page limit (#31788) (#31851)
  * Remove invalid attribute (#31848) (#31850)
  * CloudWatch: Restrict auth provider and assume role usage according to? (#31845)
  * CloudWatch: Add support for EC2 IAM role (#31804) (#31841)
  * Loki, Prometheus: Change the placement for query type explanation (#31784) (#31819)
  * Variables: Improves inspection performance and unknown filtering (#31811) (#31813)
  * Change piechart plugin state to beta (#31797) (#31798)
  * ReduceTransform: Include series with numeric string  names (#31763) (#31794)
  * Annotations: Make the annotation clean up batch size configurable (#31487) (#31769)
  * Fix escaping in ANSI and dynamic button removal (#31731) (#31767)
  * DataLinks: Bring back single click links for Stat, Gauge and BarGauge panel (#31692) (#31718)
  * log skipped, performed and duration for migrations (#31722) (#31754)
  * Search: Make items more compact (#31734) (#31750)
  * loki_datasource: add documentation to label_format and line_format (#31710) (#31746)
  * Tempo: Convert tempo to backend data source2 (#31733)
  * Elasticsearch: Fix script fields in query editor (#31681) (#31727)
  * Elasticsearch: revert to isoWeek when resolving weekly indices (#31709) (#31717)
  * Admin: Keeps expired api keys visible in table after delete (#31636) (#31675)
  * Tempo: set authentication header properly (#31699) (#31701)
  * Tempo: convert to backend data source (#31618) (#31695)
  * Update package.json (#31672)
  * Release: Bump version to 7.5.0-beta.1 (#31664)
  * Fix whatsNewUrl version to 7.5 (#31666)
  * Chore: add alias for what's new 7.5 (#31669)
  * Docs: Update doc for PostgreSQL authentication (#31434)
  * Docs: document report template variables (#31637)
  * AzureMonitor: Add deprecation message for App Insights/Insights Analytics (#30633)
  * Color: Fixes issue where colors where reset to gray when switch panels (#31611)
  * Live: Use pure WebSocket transport (#31630)
  * Docs: Fix broken image link (#31661)
  * Docs: Add Whats new in 7.5 (#31659)
  * Docs: Fix links for 7.5 (#31658)
  * Update enterprise-configuration.md (#31656)
  * Explore/Logs: Escaping of incorrectly escaped log lines (#31352)
  * Tracing: Small improvements to trace types (#31646)
  * Update _index.md (#31645)
  * AlertingNG: code refactoring (#30787)
  * Remove pkill gpg-agent (#31169)
  * Remove format for plugin routes (#31633)
  * Library Panels: Change unsaved change detection logic (#31477)
  * CloudWatch: Added AWS Timestream Metrics and Dimensions (#31624)
  * add new metrics and dimensions (#31595)
  * fix devenv dashboard content typo (#31583)
  * DashList: Sort starred and searched dashboard alphabetically (#31605)
  * Docs: Update whats-new-in-v7-4.md (#31612)
  * SSE: Add "Classic Condition" on backend (#31511)
  * InfluxDB: Improve maxDataPoints error-message in Flux-mode, raise limits (#31259)
  * Alerting: PagerDuty: adding current state to the payload (#29270)
  * devenv: Fix typo (#31589)
  * Loki: Label browser (#30351)
  * LibraryPanels: No save modal when user is on same dashboard (#31606)
  * Bug: adding resolution for `react-use-measure` to prevent plugin tests from failing. (#31603)
  * Update node-graph.md (#31571)
  * test: pass Cypress options objects into selector wrappers (#31567)
  * Loki: Add support for alerting (#31424)
  * Tracing: Specify type of the data frame that is expected for TraceView (#31465)
  * LibraryPanels: Adds version column (#31590)
  * PieChart: Add color changing options to pie chart (#31588)
  * Explore: keep enabled/disabled state in angular based QueryEditors correctly (#31558)
  * Bring back correct legend sizing afer PlotLegend refactor (#31582)
  * Alerting: Fix bug in Discord for when name for metric value is absent (#31257)
  * LibraryPanels: Deletes library panels during folder deletion (#31572)
  * chore: bump lodash to 4.17.21 (#31549)
  * Elasticsearch: Fix impossibility to perform non-logs queries after importing queries from loki or prometheus in explore (#31518)
  * TestData: Fixes never ending annotations scenario (#31573)
  * CloudWatch: Added AWS Network Firewall metrics and dimensions (#31498)
  * propagate plugin unavailable message to UI (#31560)
  * ConfirmButton: updates story from knobs to controls (#31476)
  * Loki: Refactor line limit to use grafana/ui component (#31509)
  * LibraryPanels: Adds folder checks and permissions (#31473)
  * Add guide on custom option editors (#31254)
  * PieChart: Update text color and minor changes (#31546)
  * Grafana-data: bump markedjs to v2.x to resolve vulnerability (#31036)
  * Chore(deps): Bump google.golang.org/api from 0.39.0 to 0.40.0 (#31210)
  * PieChart: Improve piechart legend and options (#31446)
  * Chore(deps): Bump google.golang.org/grpc from 1.35.0 to 1.36.0 (#31541)
  * Chore(deps): Bump github.com/aws/aws-sdk-go from 1.37.7 to 1.37.20 (#31538)
  * Chore(deps): Bump github.com/prometheus/common from 0.17.0 to 0.18.0 (#31539)
  * Add multiselect options ui (#31501)
  * Profile: Fixes profile preferences being accessible when anonymous access was enabled (#31516)
  * Variables: Fixes error with: cannot read property length of undefined (#31458)
  * Explore: Show ANSI colored logs in logs context (#31510)
  * LogsPanel: Show all received logs  (#31505)
  * AddPanel: Design polish  (#31484)
  * TimeSeriesPanel: Remove unnecessary margin from legend  (#31467)
  * influxdb: flux: handle is-hidden (#31324)
  * Graph: Fix tooltip not showing when close to the edge of viewport  (#31493)
  * FolderPicker: Remove useNewForms from FolderPicker (#31485)
  * Add reportVariables feature toggle (#31469)
  * Grafana datasource: support multiple targets (#31495)
  * Update license-restrictions.md (#31488)
  * Docs: Derived fields links in logs detail view (#31482)
  * Docs: Add new data source links to Enterprise page (#31480)
  * Convert annotations to dataframes (#31400)
  * ReleaseNotes: Updated changelog and release notes for v7.4.2 (#31475)
  * GrafanaUI: Fixes typescript error for missing css prop (#31479)
  * Login: handle custom token creation error messages (#31283)
  * Library Panels: Don't list current panel in available panels list (#31472)
  * DashboardSettings: Migrate Link Settings to React (#31150)
  * Frontend changes for library panels feature (#30653)
  * Alerting notifier SensuGo: improvements in default message (#31428)
  * AppPlugins: Options to disable showing config page in nav (#31354)
  * add aws config (#31464)
  * Heatmap: Fix missing/wrong value in heatmap legend (#31430)
  * Chore: Fixes small typos (#31461)
  * Graphite/SSE: update graphite to work with server side expressions (#31455)
  * update the lastest version to 7.4.3 (#31457)
  * ReleaseNotes: Updated changelog and release notes for 7.4.3 (#31454)
  * AWS: Add aws plugin configuration (#31312)
  * Revert ""Release: Updated versions in package to 7.4.3" (#31444)" (#31452)
  * Remove UserSyncInfo.tsx (#31450)
  * Elasticsearch: Add word highlighting to search results (#30293)
  * Chore: Fix eslint react hook warnings in grafana-ui (#31092)
  * CloudWatch: Make it possible to specify custom api endpoint (#31402)
  * Chore: fixed incorrect naming for disable settings (#31448)
  * TraceViewer: Fix show log marker in spanbar (#30742)
  * LibraryPanels: Adds permissions to getAllHandler (#31416)
  * NamedColorsPalette: updates story from knobs to controls (#31443)
  * "Release: Updated versions in package to 7.4.3" (#31444)
  * ColorPicker: updates story from knobs to controls (#31429)
  * Streaming: Fixes an issue with time series panel and streaming data source when scrolling back from being out of view (#31431)
  * ClipboardButton: updates story from knobs to controls (#31422)
  * we should never log unhashed tokens (#31432)
  * CI: Upgrade Dockerfiles wrt. Go, Node, Debian (#31407)
  * Elasticsearch: Fix query initialization logic &amp; query transformation from Promethous/Loki (#31322)
  * Postgres: allow providing TLS/SSL certificates as text in addition to file paths (#30353)
  * CloudWatch: Added AWS Ground Station metrics and dimensions (#31362)
  * TraceViewer: Fix trace to logs icon to show in right pane (#31414)
  * add hg team as migrations code owners (#31420)
  * Remove tidy-check script (#31423)
  * InfluxDB: handle columns named "table" (#30985)
  * Prometheus: Use configured HTTP method for /series and /labels endpoints (#31401)
  * Devenv: Add gdev-influxdb2 data source (#31250)
  * Update grabpl from 0.5.38 to 0.5.42 version (#31419)
  * Move NOOP_CONTROL to storybook utils and change to a standalone file (#31421)
  * remove squadcast details from docs (#31413)
  * Add new Cloudwatch AWS/DDoSProtection metrics and dimensions (#31297)
  * Logging: add frontend logging helpers to @grafana/runtime package (#30482)
  * CallToActionCard: updates story from knobs to controls (#31393)
  * Add eu-south-1 cloudwatch region, closes #31197 (#31198)
  * Chore: Upgrade eslint packages (#31408)
  * Cascader: updates story from knobs to controls (#31399)
  * addressed issues 28763 and 30314. (#31404)
  * Added section Query a time series database by id (#31337)
  * Prometheus: Change default httpMethod for new instances to POST (#31292)
  * Data source list: Use Card component (#31326)
  * Chore: Remove gotest.tools dependency (#31391)
  * Revert "StoryBook: Introduces Grafana Controls (#31351)" (#31388)
  * Chore(deps): Bump github.com/prometheus/common from 0.15.0 to 0.17.0 (#31387)
  * AdHocVariables: Fixes crash when values are stored as numbers (#31382)
  * Chore(deps): Bump github.com/golang/mock from 1.4.4 to 1.5.0 (#31379)
  * Chore: Fix strict errors, down to 416 (#31365)
  * Chore(deps): Bump github.com/getsentry/sentry-go from 0.9.0 to 0.10.0 (#31378)
  * StoryBook: Introduces Grafana Controls (#31351)
  * ReleaseNotes: Updated changelog and release notes for 7.4.2 (#31313)
  * Theming: Support for runtime theme switching and hooks for custom themes (#31301)
  * Devenv: Remove old-versioned loki blocks and update prometheus2 block  (#31282)
  * Zipkin: Show success on test data source (#30829)
  * Update grot template (needs more info) (#31350)
  * DatasourceSrv: Fix instance retrieval when datasource variable value set to "default" (#31347)
  * TimeSeriesPanel: Fixes overlapping time axis ticks (#31332)
  * Grafana/UI: Add basic legend to the PieChart (#31278)
  * SAML: single logout only enabled in enterprise (#31325)
  * QueryEditor: handle query.hide changes in angular based query-editors (#31336)
  * DashboardLinks: Fixes another issue where dashboard links cause full page reload (#31334)
  * LibraryPanels: Syncs panel title with name (#31311)
  * Chore: Upgrade golangci-lint (#31330)
  * Add info to docs about concurrent session limits (#31333)
  * Table: Fixes issue with fixed min and auto max with bar gauge cell (#31316)
  * BarGuage: updates story from knobs to controls (#31223)
  * Docs: Clarifies how to add Key/Value pairs (#31303)
  * Usagestats: Exclude folders from total dashboard count (#31320)
  * ButtonCascader: updates story from knobs to controls (#31288)
  * test: allow check for Table as well as Graph for Explore e2e flow (#31290)
  * Grafana-UI: Update tooltip type (#31310)
  * fix 7.4.2 release note (#31299)
  * Add `--tries 3` arg when triggering e2e-tests upon releasing (#31285)
  * Chore: reduce strict errors for variables (#31241)
  * update latest release version (#31296)
  * ReleaseNotes: Updated changelog and release notes for 7.4.2 (#31291)
  * Correct name of Discord notifier tests (#31277)
  * Docs: Clarifies custom date formats for variables (#31271)
  * BigValue: updates story from knobs to controls (#31240)
  * Docs: Annotations update (#31194)
  * Introduce functions for interacting with library panels API (#30993)
  * Search: display sort metadata (#31167)
  * Folders: Editors should be able to edit name and delete folders (#31242)
  * Make Datetime local (No date if today) working (#31274)
  * UsageStats: Purpose named variables (#31264)
  * Snapshots: Disallow anonymous user to create snapshots (#31263)
  * only update usagestats every 30min (#31131)
  * Chore: grafana-toolkit uses grafana-ui and grafana-data workspaces (#30701)
  * Grafana-UI: Add id to Select to make it easier to test (#31230)
  * Prometheus: Fix enabling of disabled queries when editing in dashboard (#31055)
  * UI/Card: Fix handling of 'onClick' callback (#31225)
  * Loki: Add line limit for annotations (#31183)
  * Remove deprecated and breaking loki config field (#31227)
  * SqlDataSources: Fixes the Show Generated SQL button in query editors (#31236)
  * LibraryPanels: Disconnect before connect during dashboard save (#31235)
  * Disable Change Password for OAuth users (#27886)
  * TagsInput: Design update and component refactor (#31163)
  * Variables: Adds back default option for data source variable (#31208)
  * IPv6: Support host address configured with enclosing square brackets (#31226)
  * Postgres: Fix timeGroup macro converts long intervals to invalid numbers when TimescaleDB is enabled (#31179)
  * GraphNG: refactor core to class component (#30941)
  * Remove last synchronisation field from LDAP debug view (#30984)
  * Chore: Upgrade grafana-plugin-sdk-go to v0.88.0 (#30975)
  * Graph: Make axes unit option work even when field option unit is set (#31205)
  * AlertingNG:  Test definition  (#30886)
  * Docs: Update Influx config options (#31146)
  * WIP: Skip this call when we skip migrations (#31216)
  * use 0.1.0 (#31215)
  * DataSourceSrv: Filter out non queryable data sources by default (#31144)
  * QueryEditors: Fixes issue that happens after moving queries then editing would update other queries (#31193)
  * Chore: report eslint no-explicit-any errors to metrics (#31182)
  * Chore(deps): Bump cloud.google.com/go/storage from 1.12.0 to 1.13.0 (#31211)
  * Chore(deps): Bump xorm.io/xorm from 0.8.1 to 0.8.2 (#30773)
  * Alerting: Fix modal text for deleting obsolete notifier (#31171)
  * Chore(deps): Bump github.com/linkedin/goavro/v2 from 2.9.7 to 2.10.0 (#31204)
  * Variables: Fixes missing empty elements from regex filters (#31156)
  * StatPanels: Fixes to palette color scheme is not cleared when loading panel (#31126)
  * Fixed the typo. (#31189)
  * Docs: Rewrite preferences docs (#31154)
  * Explore/Refactor: Simplify URL handling (#29173)
  * DashboardLinks: Fixes links always cause full page reload (#31178)
  * Replace PR with Commit truncated hash when build fails (#31177)
  * Alert: update story to use controls (#31145)
  * Permissions: Fix team and role permissions on folders/dashboards not displayed for non Grafana Admin users (#31132)
  * CloudWatch: Ensure empty query row errors are not passed to the panel (#31172)
  * Update prometheus.md (#31173)
  * Variables: Extend option pickers to accept custom onChange callback (#30913)
  * Prometheus: Multiply exemplars timestamp to follow api change (#31143)
  * DashboardListPanel: Fixes issue with folder picker always showing All and using old form styles (#31160)
  * Add author name and pr number in drone pipeline notifications (#31124)
  * Prometheus: Add documentation for ad-hoc filters (#31122)
  * DataSourceSettings: Fixes add header button, it should not trigger a save &amp; test action (#31135)
  * Alerting: Fix so that sending an alert with the Alertmanager notifier doesn't fail when one of multiple configured URL's are down (#31079)
  * Chore: Update latest.json (#31139)
  * Docs: add 7.4.1 relese notes link (#31137)
  * PieChart: Progress on new core pie chart  (#28020)
  * ReleaseNotes: Updated changelog and release notes for 7.4.1 (#31133)
  * Eslint: no-duplicate-imports rule (bump grafana-eslint-config) (#30989)
  * Transforms: Fixes Outer join issue with duplicate field names not getting the same unique field names as before  (#31121)
  * MuxWriter: Handle error for already closed file (#31119)
  * Logging: sourcemap transform asset urls from CDN in logged stacktraces (#31115)
  * Search: add sort information in dashboard results (#30609)
  * area/grafana/e2e: ginstall should pull version specified (#31056)
  * Exemplars: Change CTA style (#30880)
  * Influx: Make max series limit configurable and show the limiting message if applied (#31025)
  * Docs: request security (#30937)
  * update configurePanel for 7.4.0 changes (#31093)
  * Elasticsearch: fix log row context erroring out (#31088)
  * Prometheus: Fix issues with ad-hoc filters (#30931)
  * LogsPanel: Add deduplication option for logs (#31019)
  * Drone: Make sure CDN upload is ok before pushing docker images (#31075)
  * PluginManager: Remove some global state (#31081)
  * test: update addDashboard flow for v7.4.0 changes (#31059)
  * Transformations: Fixed typo in FilterByValue transformer description. (#31078)
  * Docs: Group id should be 0 instead of 1 in Docker upgrade notes (#31074)
  * Usage stats: Adds source/distributor setting (#31039)
  * CDN: Add CDN upload step to enterprise and release pipelines (#31058)
  * Chore: Replace native select with grafana ui select  (#31030)
  * Docs: Update json-model.md (#31066)
  * Docs: Update whats-new-in-v7-4.md (#31069)
  * Added hyperlinks to Graphite documentation (#31064)
  * DashboardSettings: Update to new form styles (#31022)
  * CDN: Fixing drone CI config (#31052)
  * convert path to posix by default (#31045)
  * DashboardLinks: Fixes crash when link has no title (#31008)
  * Alerting: Fixes so notification channels are properly deleted (#31040)
  * Explore: Remove emotion error when displaying logs (#31026)
  * Elasticsearch: Fix alias field value not being shown in query editor (#30992)
  * CDN: Adds uppload to CDN step to drone CI (#30879)
  * Improved glossary (#31004)
  * BarGauge: Improvements to value sizing and table inner width calculations  (#30990)
  * Drone: Fix deployment image (#31027)
  * ColorPicker: migrated styles from sass to emotion (#30909)
  * Dashboard: Migrate general settings to react (#30914)
  * Chore(deps): Bump github.com/jung-kurt/gofpdf from 1.10.1 to 1.16.2 (#30586)
  * Chore(deps): Bump github.com/aws/aws-sdk-go from 1.36.31 to 1.37.7 (#31018)
  * Prometheus: Min step defaults to seconds when no unit is set to prevent errors when running alerts. (#30966)
  * Chore(deps): Bump github.com/magefile/mage from 1.10.0 to 1.11.0 (#31017)
  * Chore(deps): Bump github.com/grpc-ecosystem/go-grpc-middleware (#31013)
  * Graph: Fixes so graph is shown for non numeric time values (#30972)
  * CloudMonitoring: Prevent resource type variable function from crashing (#30901)
  * Chore(deps): Bump google.golang.org/api from 0.33.0 to 0.39.0 (#30971)
  * Build: Releases e2e and e2e-selectors too (#31006)
  * TextPanel: Fixes so panel title is updated when variables change (#30884)
  * Docs: Update configuration.md (login_maximum_inactive_lifetime_duration, login_maximum_lifetime_duration) (#31000)
  * instrumentation: make the first database histogram bucket smaller (#30995)
  * Grafana/UI: Remove DismissableFeatureInfoBox and replace with LocalSt? (#30988)
  * StatPanel: Fixes issue formatting date values using unit option (#30979)
  * Chore(deps): Bump actions/cache from v2 to v2.1.4 (#30973)
  * Units: Fixes formatting of duration units (#30982)
  * Elasticsearch: Show Size setting for raw_data metric (#30980)
  * Alerts: Dedupe alerts so that we do not fill the screen with the same alert messsage (#30935)
  * make sure service and slo display name is passed to segment comp (#30900)
  * assign changes in cloud datasources to the new cloud datasources team (#30645)
  * Table: Updates devenv test dashboard after change to TestData Randrom Table response (#30927)
  * Theme: Use higher order theme color variables rather then is light/dark logic (#30939)
  * Docs: Add alias for what's new in 7.4 (#30945)
  * e2e: extends selector factory to plugins (#30932)
  * Chore: Upgrade docker build image (#30820)
  * Docs: updated developer guide (#29978)
  * Alerts: Update Alert storybook to show more states (#30908)
  * Variables: Adds queryparam formatting option (#30858)
  * Chore: pad unknown values with undefined (#30808)
  * Transformers: add search to transform selection (#30854)
  * Exemplars: change api to reflect latest changes (#30910)
  * docs: use selinux relabelling on docker containers (#27685)
  * Docs: Fix bad image path for alert notification template (#30911)
  * Make value mappings correctly interpret numeric-like strings (#30893)
  * Chore: Update latest.json (#30905)
  * Docs: Update whats-new-in-v7-4.md (#30882)
  * Dashboard: Ignore changes to dashboard when the user session expires (#30897)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0 (#30902)
  * test: add support for timeout to be passed in for addDatasource (#30736)
  * increase page size and make sure the cache supports query params (#30892)
  * DataSourceSettings: Adds info box and link to Grafana Cloud (#30891)
  * OAuth: custom username docs (#28400)
  * Panels: Remove value mapping of values that have been formatted #26763 (#30868)
  * Alerting: Fixes alert panel header icon not showing (#30840)
  * AlertingNG: Edit Alert Definition (#30676)
  * Logging: sourcemap support for frontend stacktraces (#30590)
  * Added "Restart Grafana" topic. (#30844)
  * Docs: Org, Team, and User Admin (#30756)
  * bump grabpl version to 0.5.36 (#30874)
  * Plugins: Requests validator (#30445)
  * Docs: Update whats-new-in-v7-4.md (#30876)
  * Docs: Add server view folder (#30849)
  * Fixed image name and path  (#30871)
  * Grafana-ui: fixes closing modals with escape key (#30745)
  * InfluxDB: Add http configuration when selecting InfluxDB v2 flavor  (#30827)
  * TestData: Fixes issue with for ever loading state when all queries are hidden (#30861)
  * Chart/Tooltip: refactored style declaration (#30824)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0-beta1 (#30853)
  * Grafana-ui: fixes no data message in Table component (#30821)
  * grafana/ui: Update pagination component for large number of pages (#30151)
  * Alerting: Customise OK notification priorities for Pushover notifier (#30169)
  * DashboardLinks: Support variable expression in to tooltip - Issue #30409 (#30569)
  * Chore: Remove panelTime.html, closes #30097 (#30842)
  * Docs: Time series panel, bar alignment docs (#30780)
  * Chore: add more docs annotations (#30847)
  * Transforms: allow boolean in field calculations (#30802)
  * Prometheus: Add tooltip to explain possibility to use patterns in text and title fields in annotations (#30825)
  * Update prometheus.md with image link fix (#30833)
  * BarChart: inside-align strokes, upgrade uPlot to 1.6.4. (#30806)
  * Update license-expiration.md (#30839)
  * Explore rewrite (#30804)
  * Prometheus: Set type of labels to string (#30831)
  * GrafanaUI: Add a way to persistently close InfoBox (#30716)
  * Fix typo in transformer registry (#30712)
  * Elasticsearch: Display errors with text responses (#30122)
  * CDN: Fixes cdn path when Grafana is under sub path (#30822)
  * TraceViewer: Fix lazy loading (#30700)
  * FormField: migrated sass styling to emotion (#30392)
  * AlertingNG: change API permissions (#30781)
  * Variables: Clears drop down state when leaving dashboard (#30810)
  * Grafana-UI: Add story/docs for ErrorBoundary (#30304)
  * Add missing callback dependency (#30797)
  * PanelLibrary: Adds library panel meta information to dashboard json (#30770)
  * Chore(deps): Bump gonum.org/v1/gonum from 0.6.0 to 0.8.2 (#30343)
  * Chore(deps): Bump gopkg.in/yaml.v2 from 2.3.0 to 2.4.0 (#30771)
  * GraphNG: improve behavior when switching between solid/dash/dots (#30796)
  * Chore(deps): Bump github.com/hashicorp/go-hclog from 0.14.1 to 0.15.0 (#30778)
  * Add width for Variable Editors (#30791)
  * Chore: Remove warning when calling resource (#30752)
  * Auth: Use SigV4 lib from grafana-aws-sdk  (#30713)
  * Panels: Fixes so panels are refreshed when scrolling past them fast (#30784)
  * GraphNG: add bar alignment option (#30499)
  * Expressions: Measure total transformation requests and elapsed time (#30514)
  * Menu: Mark menu components as internal (#30740)
  * TableInputCSV: migrated styles from sass to emotion (#30554)
  * CDN: Fix passing correct prefix to GetContentDeliveryURL (#30777)
  * Chore(deps): Bump gopkg.in/ini.v1 from 1.57.0 to 1.62.0 (#30772)
  * CDN: Adds support for serving assets over a CDN (#30691)
  * PanelEdit: Trigger refresh when changing data source (#30744)
  * Chore: remove __debug_bin (#30725)
  * BarChart: add alpha bar chart panel (#30323)
  * Docs: Time series panel (#30690)
  * Backend Plugins: Convert test data source to use SDK contracts (#29916)
  * Docs: Update whats-new-in-v7-4.md (#30747)
  * Add link to Elasticsearch docs. (#30748)
  * Mobile: Fixes issue scrolling on mobile in chrome (#30746)
  * TagsInput: Make placeholder configurable (#30718)
  * Docs: Add config settings for fonts in reporting (#30421)
  * Add menu.yaml to .gitignore (#30743)
  * bump cypress to 6.3.0 (#30644)
  * Datasource: Use json-iterator configuration compatible with standard library (#30732)
  * AlertingNG: Update UX to use new PageToolbar component (#30680)
  * Docs: Add usage insights export feature (#30376)
  * skip symlinks to directories when generating plugin manifest (#30721)
  * PluginCiE2E: Upgrade base images (#30696)
  * Variables: Fixes so text format will show All instead of custom all (#30730)
  * PanelLibrary: better handling of deleted panels (#30709)
  * Added section "Curated dashboards for Google Cloud Monitoring" for 7.4 What's New (#30724)
  * Added "curated dashboards" information and broke down, rearranged topics. (#30659)
  * Transform: improve the "outer join" performance/behavior (#30407)
  * Add alt text to plugin logos (#30710)
  * Deleted menu.yaml file (#30717)
  * Dashboard: Top Share URL icon should share panel URL when on viewPanel page (#30000)
  * Added entry for web server. (#30715)
  * DashboardPicker: switch to promise-based debounce, return dashboard UID (#30706)
  * Use connected GraphNG in Explore (#30707)
  * Fix documentation for streaming data sources (#30704)
  * PanelLibrary: changes casing of responses and adds meta property (#30668)
  * Influx: Show all datapoints for dynamically windowed flux query (#30688)
  * Trace: trace to logs design update (#30637)
  * DeployImage: Switch base images to Debian (#30684)
  * Chore: remove CSP debug logging line (#30689)
  * Docs: 7.4 documentation for expressions (#30524)
  * PanelEdit: Get rid of last remaining usage of navbar-button (#30682)
  * Grafana-UI: Fix setting default value for MultiSelect (#30671)
  * CustomScrollbar: migrated styles from sass to emotion (#30506)
  * DashboardSettings &amp; PanelEdit: Use new PageToolbar (#30675)
  * Explore: Fix jumpy live tailing (#30650)
  * ci(npm-publish): add missing github package token to env vars (#30665)
  * PageToolbar: Extracting navbar styles &amp; layout into a modern emotion based component (#30588)
  * AlertingNG: pause/unpause definitions via the API (#30627)
  * Docs: Refer to product docs in whats new for alerting templating feature (#30652)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0-beta1 (#30666)
  * Variables: Fixes display value when using capture groups in regex (#30636)
  * Docs: Update _index.md (#30655)
  * Docs: Auditing updates (#30433)
  * Docs: add hidden_users configuration field (#30435)
  * Docs: Define TLS/SSL terminology (#30533)
  * Docs: Fix expressions enabled description (#30589)
  * Docs: Update ES screenshots (#30598)
  * Licensing Docs: Adding license restrictions docs (#30216)
  * Update documentation-style-guide.md (#30611)
  * Docs: Update queries.md (#30616)
  * chore(grafana-ui): bump storybook to 6.1.15 (#30642)
  * DashboardSettings: fixes vertical scrolling (#30640)
  * Usage Stats: Remove unused method for getting user stats (#30074)
  * Grafana/UI: Unit picker should not set a category as unit (#30638)
  * Graph: Fixes auto decimals issue in legend and tooltip (#30628)
  * AlertingNG: List saved Alert definitions in Alert Rule list (#30603)
  * chore: bump redux toolkit to 1.5.0 for immer 8.0.1 vulnerability fix (#30605)
  * Grafana/UI: Add disable prop to Segment (#30539)
  * Variables: Fixes so queries work for numbers values too (#30602)
  * Admin: Fixes so form values are filled in from backend (#30544)
  * Docs: Add new override info and add whats new 7.4 links (#30615)
  * TestData: Improve what's new in v7.4 (#30612)
  * Docs: Update 7.4 What's New to use more correct description of alerting notification template feature (#30502)
  * NodeGraph: Add docs (#30504)
  * Loki: Improve live tailing errors and fix Explore's logs container type errors (#30517)
  * TimeRangePicker: Updates components to use new ToolbarButton &amp; ButtonGroup (#30570)
  * Update styling.md guide (#30594)
  * TestData: Adding what's new in v7.4 to the devenv dashboards (#30568)
  * Chore(deps): Bump github.com/aws/aws-sdk-go from 1.35.5 to 1.36.31 (#30583)
  * Chore(deps): Bump github.com/prometheus/client_golang (#30585)
  * Chore(deps): Bump gopkg.in/macaron.v1 from 1.3.9 to 1.4.0 (#30587)
  * Chore(deps): Bump github.com/google/uuid from 1.1.5 to 1.2.0 (#30584)
  * Explore: Fix logs hover state so that it is visible and in dark mode &amp; simply hover code (#30572)
  * RefreshPicker: Fixes so valid intervals in url are visible in RefreshPicker (#30474)
  * Add documentation for Exemplars (#30317)
  * OldGraph: Fix height issue in Firefox (#30565)
  * XY Chart: fix editor error with empty frame (no fields) (#30573)
  * ButtonSelect &amp; RefreshPicker: Rewrite of components to use new emotion based ToolbarButton &amp; Menu (#30510)
  * XY Chart: share legend config with timeseries (#30559)
  * configuration.md: Document Content Security Policy options (#30413)
  * DataFrame: cache frame/field index in field state (#30529)
  * List + before -; rm old Git ref; reformat. (#30543)
  * Expressions: Add option to disable feature (#30541)
  * Explore: Fix loading visualisation on the top of the new time series panel (#30553)
  * Prometheus: Fix show query instead of Value if no __name__ and metric (#30511)
  * Decimals: Big Improvements to auto decimals and fixes to auto decimals bug found in 7.4-beta1  (#30519)
  * Postgres: Convert tests to stdlib (#30536)
  * Storybook: Migrate card story to use controls  (#30535)
  * AlertingNG: Enable UI to Save Alert Definitions (#30394)
  * Postgres: Be consistent about TLS/SSL terminology (#30532)
  * Loki: Append refId to logs uid (#30418)
  * Postgres: Fix indentation (#30531)
  * GraphNG: uPlot 1.6.3 (fix bands not filling below 0). close #30523. (#30527)
  * updates for e2e docker image (#30465)
  * GraphNG: uPlot 1.6.2 (#30521)
  * Docs: Update whats-new-in-v7-4.md (#30520)
  * Prettier: ignore build and devenv dirs (#30501)
  * Chore: Upgrade grabpl version (#30486)
  * Explore: Update styling of buttons (#30493)
  * Cloud Monitoring: Fix legend naming with display name override (#30440)
  * GraphNG: Disable Plot logging by default (#30390)
  * Admin: Fixes so whole org drop down is visible when adding users to org (#30481)
  * Docs: include Makefile option for local assets (#30455)
  * Footer: Fixes layout issue in footer  (#30443)
  * TimeSeriesPanel: Fixed default value for gradientMode (#30484)
  * Docs: fix typo in what's new doc (#30489)
  * Chore: adds wait to e2e test (#30488)
  * chore: update packages dependent on dot-prop to fix security vulnerability (#30432)
  * Dashboard: Remove Icon and change copy -&gt; Copy to clipboard in the share embedded panel modal (#30480)
  * Chore: fix spelling mistake (#30473)
  * Chore: Restrict internal imports from other packages (#30453)
  * Docs: What's new fixes and improvements (#30469)
  * Timeseries: only migrage point size when configured (#30461)
  * Alerting: Hides threshold handle for percentual thresholds (#30431)
  * Graph: Fixes so only users with correct permissions can add annotations (#30419)
  * Chore: update latest version to 7.4.0-beta1 (#30452)
  * Docs: Add whats new 7.4 links (#30463)
  * Update whats-new-in-v7-4.md (#30460)
  * docs: 7.4 what's new (Add expressions note) (#30446)
  * Chore: Upgrade build pipeline tool (#30456)
  * PanelModel: Make sure the angular options are passed to react panel type changed handler (#30441)
  * Expressions: Fix button icon (#30444)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0-beta1 (#30449)
  * Docs: Fix img link for alert notification template (#30436)
  * grafana/ui: Fix internal import from grafana/data (#30439)
  * prevent field config from being overwritten (#30437)
  * PanelOptions: Refactoring applying panel and field options out of PanelModel and add property clean up for properties not in field config registry  (#30389)
  * Dashboard: Remove template variables option from ShareModal (#30395)
  * Added doc content for variables inspector code change by Hugo (#30408)
  * Docs: update license expiration behavior for reporting (#30420)
  * Chore: use old version format in package.json (#30430)
  * Chore: upgrade NPM security vulnerabilities (#30397)
  * "Release: Updated versions in package to 7.5.0-pre.0" (#30428)
  * contribute: Add backend and configuration guidelines for PRs (#30426)
  * Chore: Update what's new URL (#30424)
- Update to version 7.4.5
  * Security: Fix API permissions issues related to team-sync CVE-2021-28146, CVE-2021-28147. (Enterprise)
  * Security: Usage insights requires signed in users CVE-2021-28148. (Enterprise)
  * Security: Do not allow editors to incorrectly bypass permissions on the default data source. CVE-2021-27962. (Enterprise)
- Drop patch add-gotest-module.patch
- Add patch drop-grafana-aws-sdk-0.3.0-module.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1618488000">- Update to version 7.5.4:
  * "Release: Updated versions in package to 7.5.4" (#32971)
  * fix(datasource_srv): prevent infinite loop where default datasource is named default (#32949) (#32967)
  * Added Azure Monitor support for Microsoft.AppConfiguration/configurationStores namespace (#32123) (#32968)
  * fix sqlite3 tx retry condition operator precedence (#32897) (#32952)
  * AzureMonitor: Add support for Virtual WAN namespaces (#32935) (#32947)
  * Plugins: Allow a non-dashboard page to be the default home page (#32926) (#32945)
  * GraphNG: uPlot 1.6.8 (#32859) (#32863)
  * Alerting: Add ability to include aliases with dashes (/) and at (@) signs in InfluxDB (#32844)
  * Prometheus: Allow exemplars endpoint in data source proxy (#32802) (#32804)
  * [v7.5.x] Table: Fixes table data links so they refer to correct row after sorting (#32758)
  * TablePanel: Makes sorting case-insensitive (#32435) (#32752)</changelog>
  <changelog author="ecsos@opensuse.org" date="1620302400">- Update to version 7.5.5:
  * "Release: Updated versions in package to 7.5.5" (#33469)
  * GraphNG: Fix exemplars window position (#33427) (#33462)
  * Remove field limitation from slack notification (#33113) (#33455)
  * Prometheus: Support POST in template variables (#33321) (#33441)
  * Instrumentation: Add success rate metrics for email notifications (#33359) (#33409)
  * Use either moment objects (for absolute times in the datepicker) or string (for relative time) (#33315) (#33406)
  * Docs: Removed type from find annotations example. (#33399) (#33403)
  * [v7.5.x]: FrontendMetrics: Adds new backend api that frontend can use to push frontend measurements and counters to prometheus (#33255)
  * Updated label for add panel. (#33285) (#33286)
  * Bug: Add git to Dockerfile.ubuntu (#33247) (#33248)
  * Docs: Sync latest master docs with 7.5.x (#33156)
  * Docs: Update getting-started-influxdb.md (#33234) (#33241)
  * Doc: Document the X-Grafana-Org-Id HTTP header (#32478) (#33239)
  * Minor Changes in Auditing.md (#31435) (#33238)
  * Docs: Add license check endpoint doc (#32987) (#33236)
  * Postgres: Fix time group macro when TimescaleDB is enabled and interval is less than a second (#33153) (#33219)
  * Docs: InfluxDB doc improvements (#32815) (#33185)
  * [v7.5.x] Loki: Pass Skip TLS Verify setting to alert queries (#33031)
  * update cla (#33181)
  * Fix inefficient regular expression (#33155) (#33159)
  * Auth: Don't clear auth token cookie when lookup token fails (#32999) (#33136)
  * Elasticsearch:  Add documentation for supported Elasticsearch query transformations (#33072) (#33128)
  * Update team.md (#33060) (#33084)
  * GE issue 1268 (#33049) (#33081)
  * Fixed some formatting issues for PRs from yesterday. (#33078) (#33079)
  * Explore: Load default data source in Explore when the provided source does not exist (#32992) (#33061)
  * Docs: Replace next with latest in aliases (#33054) (#33059)
  * Added missing link item. (#33052) (#33055)
  * Backport 33034 (#33038)
  * Docs: Backport 32916 to v7.5x  (#33008)
  * ReleaseNotes: Updated changelog and release notes for 7.5.4 (#32973) (#32998)
  * Elasticsearch: Force re-rendering of each editor row type change (#32993) (#32996)
  * Docs: Sync release branch with latest docs (#32986)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Update to version 7.5.7:
  * Updated relref to "Configuring exemplars" section (#34240) (#34243)
  * Added exemplar topic (#34147) (#34226)
  * Quota: Do not count folders towards dashboard quota (#32519) (#34025)
  * Instructions to separate emails with semicolons (#32499) (#34138)
  * Docs: Remove documentation of v8 generic OAuth feature (#34018)
  * Annotations: Prevent orphaned annotation tags cleanup when no annotations were cleaned (#33957) (#33975)
  * [GH-33898] Add missing --no-cache to Dockerfile. (#33906) (#33935)
  * ReleaseNotes: Updated changelog and release notes for 7.5.6 (#33932) (#33936)
  * Stop hoisting @icons/material (#33922)
  * Chore: fix react-color version in yarn.lock (#33914)
  * "Release: Updated versions in package to 7.5.6" (#33909)
  * Loki: fix label browser crashing when + typed (#33900) (#33901)
  * Document `hide_version` flag (#33670) (#33881)
  * Add isolation level db configuration parameter (#33830) (#33878)
  * Sanitize PromLink button (#33874) (#33876)
  * Removed content as per MarcusE's suggestion in https://github.com/grafana/grafana/issues/33822. (#33870) (#33872)
  * Docs feedback: /administration/provisioning.md (#33804) (#33842)
  * Docs: delete from high availability docs references to removed configurations related to session storage (#33827) (#33851)
  * Docs: Update _index.md (#33797) (#33799)
  * Docs: Update installation.md (#33656) (#33703)
  * GraphNG: uPlot 1.6.9 (#33598) (#33612)
  * dont consider invalid email address a failed email (#33671) (#33681)
  * InfluxDB: Improve measurement-autocomplete behavior in query editor (#33494) (#33625)
  * add template for dashboard url parameters  (#33549) (#33588)
  * Add note to Snapshot API doc to specify that user has to provide the entire dashboard model  (#33572) (#33586)
  * Update team.md (#33454) (#33536)
  * Removed duplicate file "dashboard_folder_permissions.md (#33497)
  * Document customQueryParameters for prometheus datasource provisioning (#33440) (#33495)
  * ReleaseNotes: Updated changelog and release notes for 7.5.5 (#33473) (#33492)
  * Documentation: Update developer-guide.md (#33478) (#33490)
  * add closed parenthesis to fix a hyperlink (#33471) (#33481)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1632225600">- Add patch 0001-Add-source-code-reference.patch
  * Add URL to package source code in the login page footer</changelog>
  <changelog author="ro@suse.de" date="1637150400">- Update to version 7.5.11:
  * Fix Snapshot authentication bypass (bsc#1191454, CVE-2021-39226)
  * Fix certs issue (#40002)
  * Release v7.5.11 (#124)
  * Fix static path matching issue in macaron
  * OAuth: add docs for disableAutoLogin param (#38752) (#38894)
  * Fix #747; remove 'other variables'. (#37866) (#37878)
  * Update alert docs (#33658) (#33659)
  * [7.5.x] Docs: added documentation for the "prepare time series"-transformation. (#36836)
  * cherry picked dc5778c303ca555b70e8ca8c28e95997e26ecfc1 (#36813)
  * "Release: Updated versions in package to 7.5.10" (#36792)
  * [v7.5.x] Transformations: add 'prepare time series' transformer (#36749)
  * Remove verify-drone from windows (#36775)
  * Update queries.md (#31941) (#36764)
  * Updated content to specify method to use to get keyboard shortcuts wh? (#36084) (#36087)
  * ReleaseNotes: Updated changelog and release notes for 7.5.9 (#36057) (#36077)
  * "Release: Updated versions in package to 7.5.9" (#36056)
  * Login: Fixes Unauthorized message showing when on login page or snapshot page (#35311) (#35880)
  * ReleaseNotes: Updated changelog and release notes for 7.5.8 (#35703) (#35822)
  * CI: Upgrade pipeline tool to use main (#35804)
  * CI: try to force v7.5.x instead of master (#35799)
  * CI: supports move from master to main in 7.5.x release branch (#35747)
  * "Release: Updated versions in package to 7.5.8" (#35701)
  * Chore: Bump acorn and lodash-es (#35650)
  * Snapshots: Remove dashboard links from snapshots (#35567) (#35585)
  * [v7.5.x] Datasource: Allow configuring `MaxConnsPerHost` (#35519)
  * Remove docs sync from v7.5.x (#35443)
  * "Release: Updated versions in package to 7.5.7" (#35412)
  * Add max_idle_connections_per_host to config (#35365)
  * Update go.sum to fix failing enterprise pipeline (#35353)
  * [v7.5.x] HTTP Client: Introduce `go-conntrack`  (#35321)
  * Fix Markdown syntax in enterprise/license/_index.md (#34683) (#35210)
  * Update annotations.md (#33218) (#35138)
  * Docs: Add query caching to enterprise docs page (#34751) (#35025)
  * [7.5.x] Admin: hide per role counts for licensed users (#34994)
  * cleanup shortcodes, image paths (#34827)
  * Security: Upgrade Thrift dependency (#34698) (#34702)
  * Docs: Fix Quick Start link on Geting Started Influx page (#34549) (#34603)
  * Add link to release notes v7.5.7 (#34460) (#34474)
  * Update 7.5.x landing page (#34447)
  * ReleaseNotes: Updated changelog and release notes for 7.5.7 (#34383) (#34428)
- update to 7.5.10
  * [v7.5.x] Transformations: add "prepare time series" transformer. [#36749]
- update to 7.5.9
  * Login: Fix Unauthorized message that is displayed on sign-in or snapshot page. [#35880]
- drop drop-grafana-aws-sdk-0.3.0-module.patch (upstream)</changelog>
  <changelog author="ro@suse.de" date="1637236800">- recreate tarballs using the makefile to update the
  npm and go modules required</changelog>
  <changelog author="witold.bedyk@suse.com" date="1639396800">- Update to version 7.5.12:
  * Fix markdown path traversal (#42969, bsc#1193688, CVE-2021-43813)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642680000">- Update to Go 1.17.
- Add build-time dependency on `wire`.
- Update license to GNU Affero General Public License v3.0.
- Update to version 8.3.4
  + Security:
  * GetUserInfo: return an error if no user was found
    (bsc#1194873, CVE-2022-21673)
  + Features and enhancements:
  * Alerting: Allow configuration of non-ready alertmanagers.
  * Alerting: Allow customization of Google chat message.
  * AppPlugins: Support app plugins with only default nav.
  * InfluxDB: query editor: skip fields in metadata queries.
  * Postgres/MySQL/MSSQL: Cancel in-flight SQL query if user
    cancels query in grafana.
  * Prometheus: Forward oauth tokens after prometheus datasource
    migration.
  + Bug fixes:
  * Azure Monitor: Bug fix for variable interpolations in metrics
    dropdowns.
  * Azure Monitor: Improved error messages for variable queries.
  * CloudMonitoring: Fixes broken variable queries that use group
    bys.
  * Configuration: You can now see your expired API keys if you
    have no active ones.
  * Elasticsearch: Fix handling multiple datalinks for a single
    field.
  * Export: Fix error being thrown when exporting dashboards
    using query variables that reference the default datasource.
  * ImportDashboard: Fixes issue with importing dashboard and
    name ending up in uid.
  * Login: Page no longer overflows on mobile.
  * Plugins: Set backend metadata property for core plugins.
  * Prometheus: Fill missing steps with null values.
  * Prometheus: Fix interpolation of $__rate_interval variable.
  * Prometheus: Interpolate variables with curly brackets syntax.
  * Prometheus: Respect the http-method data source setting.
  * Table: Fixes issue with field config applied to wrong fields
    when hiding columns.
  * Toolkit: Fix bug with rootUrls not being properly parsed when
    signing a private plugin.
  * Variables: Fix so data source variables are added to adhoc
    configuration.
  + Plugin development fixes &amp; changes:
  * Toolkit: Revert build config so tslib is bundled with plugins
    to prevent plugins from crashing.
- Update to version 8.3.3:
  + Features and enhancements:
  * BarChart: Use new data error view component to show actions
    in panel edit.
  * CloudMonitor: Iterate over pageToken for resources.
  * Macaron: Prevent WriteHeader invalid HTTP status code panic.
  + Bug fixes:
  * AnnoListPanel: Fix interpolation of variables in tags.
  * CloudWatch: Allow queries to have no dimensions specified.
  * CloudWatch: Fix broken queries for users migrating from
    8.2.4/8.2.5 to 8.3.0.
  * CloudWatch: Make sure MatchExact flag gets the right value.
  * Dashboards: Fix so that empty folders can be deleted from the
    manage dashboards/folders page.
  * InfluxDB: Improve handling of metadata query errors in
    InfluxQL.
  * Loki: Fix adding of ad hoc filters for queries with parser
    and line_format expressions.
  * Prometheus: Fix running of exemplar queries for non-histogram
    metrics.
  * Prometheus: Interpolate template variables in interval.
  * StateTimeline: Fix toolitp not showing when for frames with
    multiple fields.
  * TraceView: Fix virtualized scrolling when trace view is
    opened in right pane in Explore.
  * Variables: Fix repeating panels for on time range changed
    variables.
  * Variables: Fix so queryparam option works for scoped
    variables.
- Update to version 8.3.2
  + Security: Fixes CVE-2021-43813 and CVE-2021-43815.
- Update to version 8.3.1
  + Security: Fixes CVE-2021-43798.
- Update to version 8.3.0
  + Features and enhancements:
  * Alerting: Prevent folders from being deleted when they
    contain alerts.
  * Alerting: Show full preview value in tooltip.
  * BarGauge: Limit title width when name is really long.
  * CloudMonitoring: Avoid to escape regexps in filters.
  * CloudWatch: Add support for AWS Metric Insights.
  * TooltipPlugin: Remove other panels' shared tooltip in edit
    panel.
  * Visualizations: Limit y label width to 40% of visualization
    width.
  + Bug fixes:
  * Alerting: Clear alerting rule evaluation errors after
    intermittent failures.
  * Alerting: Fix refresh on legacy Alert List panel.
  * Dashboard: Fix queries for panels with non-integer widths.
  * Explore: Fix url update inconsistency.
  * Prometheus: Fix range variables interpolation for time ranges
    smaller than 1 second.
  * ValueMappings: Fixes issue with regex value mapping that only
    sets color.
- Update to version 8.3.0-beta2
  + Breaking changes:
  * Grafana 8 Alerting enabled by default for installations that
    do not use legacy alerting.
  * Keep Last State for "If execution error or timeout" when
    upgrading to Grafana 8 alerting.
  + Features and enhancements:
  * Alerting: Create DatasourceError alert if evaluation returns
    error.
  * Alerting: Make Unified Alerting enabled by default for those
    who do not use legacy alerting.
  * Alerting: Support mute timings configuration through the api
    for the embedded alert manager.
  * CloudWatch: Add missing AWS/Events metrics.
  * Docs: Add easier to find deprecation notices to certain data
    sources and to the changelog.
  * Plugins Catalog: Enable install controls based on the
    pluginAdminEnabled flag.
  * Table: Add space between values for the DefaultCell and
    JSONViewCell.
  * Tracing: Make query editors available in dashboard for Tempo
    and Zipkin.
  + Bug fixes:
  * AccessControl: Renamed orgs roles, removed fixed:orgs:reader
    introduced in beta1.
  * Azure Monitor: Add trap focus for modals in grafana/ui and
    other small a11y fixes for Azure Monitor.
  * CodeEditor: Prevent suggestions from being clipped.
  * Dashboard: Fix cache timeout persistence.
  * Datasource: Fix stable sort order of query responses.
  * Explore: Fix error in query history when removing last item.
  * Logs: Fix requesting of older logs when flipped order.
  * Prometheus: Fix running of health check query based on access
    mode.
  * TextPanel: Fix suggestions for existing panels.
  * Tracing: Fix incorrect indentations due to reoccurring
    spanIDs.
  * Tracing: Show start time of trace with milliseconds
    precision.
  * Variables: Make renamed or missing variable section
    expandable.
  + Plugin development fixes &amp; changes:
  * Select: Select menus now properly scroll during keyboard
    navigation.
- Update to version 8.3.0-beta1
  + Features and enhancements:
  * Alerting: Add UI for contact point testing with custom
    annotations and labels.
  * Alerting: Make alert state indicator in panel header work
    with Grafana 8 alerts.
  * Alerting: Option for Discord notifier to use webhook name.
  * Annotations: Deprecate AnnotationsSrv.
  * Auth: Omit all base64 paddings in JWT tokens for the JWT
    auth.
  * Azure Monitor: Clean up fields when editing Metrics.
  * AzureMonitor: Add new starter dashboards.
  * AzureMonitor: Add starter dashboard for app monitoring with
    Application Insights.
  * Barchart/Time series: Allow x axis label.
  * CLI: Improve error handling for installing plugins.
  * CloudMonitoring: Migrate to use backend plugin SDK contracts.
  * CloudWatch Logs: Add retry strategy for hitting max
    concurrent queries.
  * CloudWatch: Add AWS RoboMaker metrics and dimension.
  * CloudWatch: Add AWS Transfer metrics and dimension.
  * Dashboard: replace datasource name with a reference object.
  * Dashboards: Show logs on time series when hovering.
  * Elasticsearch: Add support for Elasticsearch 8.0 (Beta).
  * Elasticsearch: Add time zone setting to Date Histogram
    aggregation.
  * Elasticsearch: Enable full range log volume histogram.
  * Elasticsearch: Full range logs volume.
  * Explore: Allow changing the graph type.
  * Explore: Show ANSI colors when highlighting matched words in
    the logs panel.
  * Graph(old) panel: Listen to events from Time series panel.
  * Import: Load gcom dashboards from URL.
  * LibraryPanels: Improves export and import of library panels
    between orgs.
  * OAuth: Support PKCE.
  * Panel edit: Overrides now highlight correctly when searching.
  * PanelEdit: Display drag indicators on draggable sections.
  * Plugins: Refactor Plugin Management.
  * Prometheus: Add custom query parameters when creating
    PromLink url.
  * Prometheus: Remove limits on metrics, labels, and values in
    Metrics Browser.
  * StateTimeline: Share cursor with rest of the panels.
  * Tempo: Add error details when json upload fails.
  * Tempo: Add filtering for service graph query.
  * Tempo: Add links to nodes in Service Graph pointing to
    Prometheus metrics.
  * Time series/Bar chart panel: Add ability to sort series via
    legend.
  * TimeSeries: Allow multiple axes for the same unit.
  * TraceView: Allow span links defined on dataFrame.
  * Transformations: Support a rows mode in labels to fields.
  * ValueMappings: Don't apply field config defaults to time
    fields.
  * Variables: Only update panels that are impacted by variable
    change.
  + Bug fixes:
  * API: Fix dashboard quota limit for imports.
  * Alerting: Fix rule editor issues with Azure Monitor data
    source.
  * Azure monitor: Make sure alert rule editor is not enabled
    when template variables are being used.
  * CloudMonitoring: Fix annotation queries.
  * CodeEditor: Trigger the latest getSuggestions() passed to
    CodeEditor.
  * Dashboard: Remove the current panel from the list of options
    in the Dashboard datasource.
  * Encryption: Fix decrypting secrets in alerting migration.
  * InfluxDB: Fix corner case where index is too large in ALIAS
    field.
  * NavBar: Order App plugins alphabetically.
  * NodeGraph: Fix zooming sensitivity on touchpads.
  * Plugins: Add OAuth pass-through logic to api/ds/query
    endpoint.
  * Snapshots: Fix panel inspector for snapshot data.
  * Tempo: Fix basic auth password reset on adding tag.
  * ValueMapping: Fixes issue with regex mappings.
  + Plugin development fixes &amp; changes:
  * grafana/ui: Enable slider marks display.
- Update to version 8.2.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.2.6
  + Features and enhancements:
  * Security: Upgrade Docker base image to Alpine 3.14.3.
  * Security: Upgrade Go to 1.17.2.
  + Bug fixes:
  * TimeSeries: Fix fillBelowTo wrongly affecting fills of
    unrelated series.
- Update to version 8.2.5
  + Breaking changes:
  * Fix No Data behaviour in Legacy Alerting.
  + Bug fixes:
  * Alerting: Fix a bug where the metric in the evaluation string
    was not correctly populated.
  * Alerting: Fix no data behaviour in Legacy Alerting for alert
    rules using the AND operator.
  * CloudMonitoring: Ignore min and max aggregation in MQL
    queries.
  * Dashboards: 'Copy' is no longer added to new dashboard
    titles.
  * DataProxy: Fix overriding response body when response is a
    WebSocket upgrade.
  * Elasticsearch: Use field configured in query editor as field
    for date_histogram aggregations.
  * Explore: Fix running queries without a datasource property
    set.
  * InfluxDB: Fix numeric aliases in queries.
  * Plugins: Ensure consistent plugin settings list response.
  * Tempo: Fix validation of float durations.
  * Tracing: Correct tags for each span are shown.
- Update to version 8.2.4
  + Security: Fixes CVE-2021-41244.
- Update to version 8.2.3
  + Security: Fixes CVE-2021-41174.
- Update to version 8.2.2
  + Features and enhancements:
  * Annotations: We have improved tag search performance.
  * Application: You can now configure an error-template title.
  * AzureMonitor: We removed a restriction from the resource
    filter query.
  * Packaging: We removed the ProcSubset option in systemd. This
    option prevented Grafana from starting in LXC environments.
  * Prometheus: We removed the autocomplete limit for metrics.
  * Table: We improved the styling of the type icons to make them
    more distinct from column / field name.
  * ValueMappings: You can now use value mapping in stat, gauge,
    bar gauge, and pie chart visualizations.
  + Bug fixes:
  * Alerting: Fix panic when Slack's API sends unexpected
    response.
  * Alerting: The Create Alert button now appears on the
    dashboard panel when you are working with a default
    datasource.
  * Explore: We fixed the problem where the Explore log panel
    disappears when an Elasticsearch logs query returns no
    results.
  * Graph: You can now see annotation descriptions on hover.
  * Logs: The system now uses the JSON parser only if the line is
    parsed to an object.
  * Prometheus: We fixed the issue where the system did not reuse
    TCP connections when querying from Grafana alerting.
  * Prometheus: We fixed the problem that resulted in an error
    when a user created a query with a $__interval min step.
  * RowsToFields: We fixed the issue where the system was not
    properly interpreting number values.
  * Scale: We fixed how the system handles NaN percent when data
    min = data max.
  * Table panel: You can now create a filter that includes
    special characters.
- Update to version 8.2.1
  + Bug fixes:
  * Dashboard: Fix rendering of repeating panels.
  * Datasources: Fix deletion of data source if plugin is not
    found.
  * Packaging: Remove systemcallfilters sections from systemd
    unit files.
  * Prometheus: Add Headers to HTTP client options.
- Update to version 8.2.0
  + Features and enhancements:
  * AWS: Updated AWS authentication documentation.
  * Alerting: Added support Alertmanager data source for upstream
    Prometheus AM implementation.
  * Alerting: Allows more characters in label names so
    notifications are sent.
  * Alerting: Get alert rules for a dashboard or a panel using
    /api/v1/rules endpoints.
  * Annotations: Improved rendering performance of event markers.
  * CloudWatch Logs: Skip caching for log queries.
  * Explore: Added an opt-in configuration for Node Graph in
    Jaeger, Zipkin, and Tempo.
  * Packaging: Add stricter systemd unit options.
  * Prometheus: Metrics browser can now handle label values with
    special characters.
  + Bug fixes:
  * CodeEditor: Ensure that we trigger the latest onSave callback
    provided to the component.
  * DashboardList/AlertList: Fix for missing All folder value.
  + Plugin development fixes &amp; changes:
  * Plugins: Create a mock icon component to prevent console
    errors.
- Update to version 8.2.0-beta2
  + Features and enhancements:
  * AccessControl: Document new permissions restricting data
    source access.
  * TimePicker: Add fiscal years and search to time picker.
  * Alerting: Added support for Unified Alerting with Grafana HA.
  * Alerting: Added support for tune rule evaluation using
    configuration options.
  * Alerting: Cleanups alertmanager namespace from key-value
    store when disabling Grafana 8 alerts.
  * Alerting: Remove ngalert feature toggle and introduce two new
    settings for enabling Grafana 8 alerts and disabling them for
    specific organisations.
  * CloudWatch: Introduced new math expression where it is
    necessary to specify the period field.
  * InfluxDB: Added support for $__interval and $__interval_ms in
    Flux queries for alerting.
  * InfluxDB: Flux queries can use more precise start and end
    timestamps with nanosecond-precision.
  * Plugins Catalog: Make the catalog the default way to interact
    with plugins.
  * Prometheus: Removed autocomplete limit for metrics.
  + Bug fixes:
  * Alerting: Fixed an issue where the edit page crashes if you
    tried to preview an alert without a condition set.
  * Alerting: Fixed rules migration to keep existing Grafana 8
    alert rules.
  * Alerting: Fixed the silence file content generated during
    migration.
  * Analytics: Fixed an issue related to interaction event
    propagation in Azure Application Insights.
  * BarGauge: Fixed an issue where the cell color was lit even
    though there was no data.
  * BarGauge: Improved handling of streaming data.
  * CloudMonitoring: Fixed INT64 label unmarshal error.
  * ConfirmModal: Fixes confirm button focus on modal open.
  * Dashboard: Add option to generate short URL for variables
    with values containing spaces.
  * Explore: No longer hides errors containing refId property.
  * Fixed an issue that produced State timeline panel tooltip
    error when data was not in sync.
  * InfluxDB: InfluxQL query editor is set to always use
    resultFormat.
  * Loki: Fixed creating context query for logs with parsed
    labels.
  * PageToolbar: Fixed alignment of titles.
  * Plugins Catalog: Update to the list of available panels after
    an install, update or uninstall.
  * TimeSeries: Fixed an issue where the shared cursor was not
    showing when hovering over in old Graph panel.
  * Variables: Fixed issues related to change of focus or refresh
    pages when pressing enter in a text box variable input.
  * Variables: Panel no longer crash when using the adhoc
    variable in data links.
- Update to version 8.2.0-beta1
  + Features and enhancements:
  * AccessControl: Introduce new permissions to restrict access
    for reloading provisioning configuration.
  * Alerting: Add UI to edit Cortex/Loki namespace, group names,
    and group evaluation interval.
  * Alerting: Add a Test button to test contact point.
  * Alerting: Allow creating/editing recording rules for Loki and
    Cortex.
  * Alerting: Metrics should have the label org instead of user.
  * Alerting: Sort notification channels by name to make them
    easier to locate.
  * Alerting: Support org level isolation of notification
    configuration.
  * AzureMonitor: Add data links to deep link to Azure Portal
    Azure Resource Graph.
  * AzureMonitor: Add support for annotations from Azure Monitor
    Metrics and Azure Resource Graph services.
  * AzureMonitor: Show error message when subscriptions request
    fails in ConfigEditor.
  * Chore: Update to Golang 1.16.7.
  * CloudWatch Logs: Add link to X-Ray data source for trace IDs
    in logs.
  * CloudWatch Logs: Disable query path using websockets (Live)
    feature.
  * CloudWatch/Logs: Don't group dataframes for non time series
    queries.
  * Cloudwatch: Migrate queries that use multiple stats to one
    query per stat.
  * Dashboard: Keep live timeseries moving left (v2).
  * Datasources: Introduce response_limit for datasource
    responses.
  * Explore: Add filter by trace or span ID to trace to logs
    feature.
  * Explore: Download traces as JSON in Explore Inspector.
  * Explore: Reuse Dashboard's QueryRows component.
  * Explore: Support custom display label for derived fields
    buttons for Loki datasource.
  * Grafana UI: Update monaco-related dependencies.
  * Graphite: Deprecate browser access mode.
  * InfluxDB: Improve handling of intervals in alerting.
  * InfluxDB: InfluxQL query editor: Handle unusual characters in
    tag values better.
  * Jaeger: Add ability to upload JSON file for trace data.
  * LibraryElements: Enable specifying UID for new and existing
    library elements.
  * LibraryPanels: Remove library panel icon from the panel
    header so you can no longer tell that a panel is a library
    panel from the dashboard view.
  * Logs panel: Scroll to the bottom on page refresh when sorting
    in ascending order.
  * Loki: Add fuzzy search to label browser.
  * Navigation: Implement active state for items in the Sidemenu.
  * Packaging: Add stricter systemd unit options.
  * Packaging: Update PID file location from /var/run to /run.
  * Plugins: Add Hide OAuth Forward config option.
  * Postgres/MySQL/MSSQL: Add setting to limit the maximum number
    of rows processed.
  * Prometheus: Add browser access mode deprecation warning.
  * Prometheus: Add interpolation for built-in-time variables to
    backend.
  * Tempo: Add ability to upload trace data in JSON format.
  * TimeSeries/XYChart: Allow grid lines visibility control in
    XYChart and TimeSeries panels.
  * Transformations: Convert field types to time string number or
    boolean.
  * Value mappings: Add regular-expression based value mapping.
  * Zipkin: Add ability to upload trace JSON.
  + Bug fixes:
  * Admin: Prevent user from deleting user's current/active
    organization.
  * LibraryPanels: Fix library panel getting saved in the
    dashboard's folder.
  * OAuth: Make generic teams URL and JMES path configurable.
  * QueryEditor: Fix broken copy-paste for mouse middle-click
  * Thresholds: Fix undefined color in "Add threshold".
  * Timeseries: Add wide-to-long, and fix multi-frame output.
  * TooltipPlugin: Fix behavior of Shared Crosshair when Tooltip
    is set to All.
  + Plugin development fixes &amp; changes:
  * Grafana UI: Fix TS error property css is missing in type.
- Update to version 8.1.8
  + Security: Fixes CVE-2021-43798.
- Update to version 8.1.7
  + Bug fixes:
  * Alerting: Fix alerts with evaluation interval more than 30
    seconds resolving before notification.
  * Elasticsearch/Prometheus: Fix usage of proper SigV4 service
    namespace.
- Update to version 8.1.6
  + Security: Fixes CVE-2021-39226.
- Update to version 8.1.5
  + Bug fixes:
  * BarChart: Fixes panel error that happens on second refresh.
- Update to version 8.1.4
  + Features and enhancements
  * Explore: Ensure logs volume bar colors match legend colors.
  * LDAP: Search all DNs for users.
  + Bug fixes:
  * Alerting: Fix notification channel migration.
  * Annotations: Fix blank panels for queries with unknown data
    sources.
  * BarChart: Fix stale values and x axis labels.
  * Graph: Make old graph panel thresholds work even if ngalert
    is enabled.
  * InfluxDB: Fix regex to identify / as separator.
  * LibraryPanels: Fix update issues related to library panels in
    rows.
  * Variables: Fix variables not updating inside a Panel when the
    preceding Row uses "Repeat For".
- Update to version 8.1.3
  + Bug fixes
  * Alerting: Fix alert flapping in the internal alertmanager.
  * Alerting: Fix request handler failed to convert dataframe
    "results" to plugins.DataTimeSeriesSlice: input frame is not
    recognized as a time series.
  * Dashboard: Fix UIDs are not preserved when importing/creating
    dashboards thru importing .json file.
  * Dashboard: Forces panel re-render when exiting panel edit.
  * Dashboard: Prevent folder from changing when navigating to
    general settings.
  * Docker: Force use of libcrypto1.1 and libssl1.1 versions to
    fix CVE-2021-3711.
  * Elasticsearch: Fix metric names for alert queries.
  * Elasticsearch: Limit Histogram field parameter to numeric
    values.
  * Elasticsearch: Prevent pipeline aggregations to show up in
    terms order by options.
  * LibraryPanels: Prevent duplicate repeated panels from being
    created.
  * Loki: Fix ad-hoc filter in dashboard when used with parser.
  * Plugins: Track signed files + add warn log for plugin assets
    which are not signed.
  * Postgres/MySQL/MSSQL: Fix region annotations not displayed
    correctly.
  * Prometheus: Fix validate selector in metrics browser.
  * Security: Fix stylesheet injection vulnerability.
  * Security: Fix short URL vulnerability.
- Update to version 8.1.2
  + Features and enhancements:
  * AzureMonitor: Add support for PostgreSQL and MySQL Flexible
    Servers.
  * Datasource: Change HTTP status code for failed datasource
    health check to 400.
  * Explore: Add span duration to left panel in trace viewer.
  * Plugins: Use file extension allowlist when serving plugin
    assets instead of checking for UNIX executable.
  * Profiling: Add support for binding pprof server to custom
    network interfaces.
  * Search: Make search icon keyboard navigable.
  * Template variables: Keyboard navigation improvements.
  * Tooltip: Display ms within minute time range.
  + Bug fixes:
  * Alerting: Fix saving LINE contact point.
  * Annotations: Fix alerting annotation coloring.
  * Annotations: Alert annotations are now visible in the correct
    Panel.
  * Auth: Hide SigV4 config UI and disable middleware when its
    config flag is disabled.
  * Dashboard: Prevent incorrect panel layout by comparing window
    width against theme breakpoints.
  * Elasticsearch: Fix metric names for alert queries.
  * Explore: Fix showing of full log context.
  * PanelEdit: Fix 'Actual' size by passing the correct panel
    size to Dashboard.
  * Plugins: Fix TLS datasource settings.
  * Variables: Fix issue with empty drop downs on navigation.
  * Variables: Fix URL util converting false into true.
  + Plugin development fixes &amp; changes:
  * Toolkit: Fix matchMedia not found error.
- Update to version 8.1.1
  + Bug fixes:
  * CloudWatch Logs: Fix crash when no region is selected.
- Update to version 8.1.0
  + Features and enhancements:
  * Alerting: Deduplicate receivers during migration.
  * ColorPicker: Display colors as RGBA.
  * Select: Make portalling the menu opt-in, but opt-in
    everywhere.
  * TimeRangePicker: Improve accessibility.
  + Bug fixes:
  * Annotations: Correct annotations that are displayed upon page
    refresh.
  * Annotations: Fix Enabled button that disappeared from Grafana
    v8.0.6.
  * Annotations: Fix data source template variable that was not
    available for annotations.
  * AzureMonitor: Fix annotations query editor that does not
    load.
  * Geomap: Fix scale calculations.
  * GraphNG: Fix y-axis autosizing.
  * Live: Display stream rate and fix duplicate channels in list
    response.
  * Loki: Update labels in log browser when time range changes in
    dashboard.
  * NGAlert: Send resolve signal to alertmanager on alerting -&gt;
    Normal.
  * PasswordField: Prevent a password from being displayed when
    you click the Enter button.
  * Renderer: Remove debug.log file when Grafana is stopped.
  * Security: Update dependencies to fix CVE-2021-36222.
- Update to version 8.1.0-beta3
  + Features and enhancements:
  * Alerting: Support label matcher syntax in alert rule list
    filter.
  * IconButton: Put tooltip text as aria-label.
  * Live: Experimental HA with Redis.
  * UI: FileDropzone component.
  * CloudWatch: Add AWS LookoutMetrics.
  + Bug fixes:
  * Docker: Fix builds by delaying go mod verify until all
    required files are copied over.
  * Exemplars: Fix disable exemplars only on the query that
    failed.
  * SQL: Fix SQL dataframe resampling (fill mode + time
    intervals).
- Update to version 8.1.0-beta2
  + Features and enhancements:
  * Alerting: Expand the value string in alert annotations and
    labels.
  * Auth: Add Azure HTTP authentication middleware.
  * Auth: Auth: Pass user role when using the authentication
    proxy.
  * Gazetteer: Update countries.json file to allow for linking to
    3-letter country codes.
  + Bug fixes:
  * Config: Fix Docker builds by correcting formatting in
    sample.ini.
  * Explore: Fix encoding of internal URLs.
- Update to version 8.1.0-beta1
  + Features and enhancements:
  * Alerting: Add Alertmanager notifications tab.
  * Alerting: Add button to deactivate current Alertmanager
    configuration.
  * Alerting: Add toggle in Loki/Prometheus data source
    configuration to opt out of alerting UI.
  * Alerting: Allow any "evaluate for" value &gt;=0 in the alert
    rule form.
  * Alerting: Load default configuration from status endpoint, if
    Cortex Alertmanager returns empty user configuration.
  * Alerting: view to display alert rule and its underlying data.
  * Annotation panel: Release the annotation panel.
  * Annotations: Add typeahead support for tags in built-in
    annotations.
  * AzureMonitor: Add curated dashboards for Azure services.
  * AzureMonitor: Add support for deep links to Microsoft Azure
    portal for Metrics.
  * AzureMonitor: Remove support for different credentials for
    Azure Monitor Logs.
  * AzureMonitor: Support querying any Resource for Logs queries.
  * Elasticsearch: Add frozen indices search support.
  * Elasticsearch: Name fields after template variables values
    instead of their name.
  * Elasticsearch: add rate aggregation.
  * Email: Allow configuration of content types for email
    notifications.
  * Explore: Add more meta information when line limit is hit.
  * Explore: UI improvements to trace view.
  * FieldOverrides: Added support to change display name in an
    override field and have it be matched by a later rule.
  * HTTP Client: Introduce dataproxy_max_idle_connections config
    variable.
  * InfluxDB: InfluxQL: adds tags to timeseries data.
  * InfluxDB: InfluxQL: make measurement search case insensitive.
    Legacy Alerting: Replace simplejson with a struct in webhook
    notification channel.
  * Legend: Updates display name for Last (not null) to just
    Last*.
  * Logs panel: Add option to show common labels.
  * Loki: Add $__range variable.
  * Loki: Add support for "label_values(log stream selector,
    label)" in templating.
  * Loki: Add support for ad-hoc filtering in dashboard.
  * MySQL Datasource: Add timezone parameter.
  * NodeGraph: Show gradient fields in legend.
  * PanelOptions: Don't mutate panel options/field config object
    when updating.
  * PieChart: Make pie gradient more subtle to match other
    charts.
  * Prometheus: Update PromQL typeahead and highlighting.
  * Prometheus: interpolate variable for step field.
  * Provisioning: Improve validation by validating across all
    dashboard providers.
  * SQL Datasources: Allow multiple string/labels columns with
    time series.
  * Select: Portal select menu to document.body.
  * Team Sync: Add group mapping to support team sync in the
    Generic OAuth provider.
  * Tooltip: Make active series more noticeable.
  * Tracing: Add support to configure trace to logs start and end
    time.
  * Transformations: Skip merge when there is only a single data
    frame.
  * ValueMapping: Added support for mapping text to color,
    boolean values, NaN and Null. Improved UI for value mapping.
  * Visualizations: Dynamically set any config (min, max, unit,
    color, thresholds) from query results.
  * live: Add support to handle origin without a value for the
    port when matching with root_url.
  + Bug fixes:
  * Alerting: Handle marshaling Inf values.
  * AzureMonitor: Fix macro resolution for template variables.
  * AzureMonitor: Fix queries with Microsoft.NetApp/../../volumes
    resources.
  * AzureMonitor: Request and concat subsequent resource pages.
  * Bug: Fix parse duration for day.
  * Datasources: Improve error handling for error messages.
  * Explore: Correct the functionality of shift-enter shortcut
    across all uses.
  * Explore: Show all dataFrames in data tab in Inspector.
  * GraphNG: Fix Tooltip mode 'All' for XYChart.
  * Loki: Fix highlight of logs when using filter expressions
    with backticks.
  * Modal: Force modal content to overflow with scroll.
  * Plugins: Ignore symlinked folders when verifying plugin
    signature.
  + Plugin development fixes &amp; changes:
  * Toolkit: Improve error messages when tasks fail.
- Update to version 8.0.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.0.6
  + Features and enhancements:
  * Alerting: Add annotation upon alert state change.
  * Alerting: Allow space in label and annotation names.
  * InfluxDB: Improve legend labels for InfluxDB query results.
  + Bug fixes:
  * Alerting: Fix improper alert by changing the handling of
    empty labels.
  * CloudWatch/Logs: Reestablish Cloud Watch alert behavior.
  * Dashboard: Avoid migration breaking on fieldConfig without
    defaults field in folded panel.
  * DashboardList: Fix issue not re-fetching dashboard list after
    variable change.
  * Database: Fix incorrect format of isolation level
    configuration parameter for MySQL.
  * InfluxDB: Correct tag filtering on InfluxDB data.
  * Links: Fix links that caused a full page reload.
  * Live: Fix HTTP error when InfluxDB metrics have an incomplete
    or asymmetrical field set.
  * Postgres/MySQL/MSSQL: Change time field to "Time" for time
    series queries.
  * Postgres: Fix the handling of a null return value in query
    results.
  * Tempo: Show hex strings instead of uints for IDs.
  * TimeSeries: Improve tooltip positioning when tooltip
    overflows.
  * Transformations: Add 'prepare time series' transformer.
- Update to version 8.0.5
  + Features and enhancements:
  * Cloudwatch Logs: Send error down to client.
  * Folders: Return 409 Conflict status when folder already
    exists.
  * TimeSeries: Do not show series in tooltip if it's hidden in
    the viz.
  + Bug fixes:
  * AzureMonitor: Fix issue where resource group name is missing
    on the resource picker button.
  * Chore: Fix AWS auth assuming role with workspace IAM.
  * DashboardQueryRunner: Fixes unrestrained subscriptions being
    created.
  * DateFormats: Fix reading correct setting key for
    use_browser_locale.
  * Links: Fix links to other apps outside Grafana when under sub
    path.
  * Snapshots: Fix snapshot absolute time range issue.
  * Table: Fix data link color.
  * Time Series: Fix X-axis time format when tick increment is
    larger than a year.
  * Tooltip Plugin: Prevent tooltip render if field is undefined.
- Update to version 8.0.4
  + Features and enhancements:
  * Live: Rely on app url for origin check.
  * PieChart: Sort legend descending, update placeholder.
  * TimeSeries panel: Do not reinitialize plot when thresholds
    mode change.
  + Bug fixes:
  * Elasticsearch: Allow case sensitive custom options in
    date_histogram interval.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * Explore: Fix import of queries between SQL data sources.
  * InfluxDB: InfluxQL query editor: fix retention policy
    handling.
  * Loki: Send correct time range in template variable queries.
  * TimeSeries: Preserve RegExp series overrides when migrating
    from old graph panel.
- Update to version 8.0.3
  + Features and enhancements:
  * Alerting: Increase alertmanager_conf column if MySQL.
  * Time series/Bar chart panel: Handle infinite numbers as nulls
    when converting to plot array.
  * TimeSeries: Ensure series overrides that contain color are
    migrated, and migrate the previous fieldConfig when changing
    the panel type.
  * ValueMappings: Improve singlestat value mappings migration.
  + Bug fixes:
  * Annotations: Fix annotation line and marker colors.
  * AzureMonitor: Fix KQL template variable queries without
    default workspace.
  * CloudWatch/Logs: Fix missing response data for log queries.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * LibraryPanels: Fix crash in library panels list when panel
    plugin is not found.
  * LogsPanel: Fix performance drop when moving logs panel in
    dashboard.
  * Loki: Parse log levels when ANSI coloring is enabled.
  * MSSQL: Fix issue with hidden queries still being executed.
  * PanelEdit: Display the VisualizationPicker that was not
    displayed if a panel has an unknown panel plugin.
  * Plugins: Fix loading symbolically linked plugins.
  * Prometheus: Fix issue where legend name was replaced with
    name Value in stat and gauge panels.
  * State Timeline: Fix crash when hovering over panel.
- Update to version 8.0.2
  + Features and enhancements:
  * Datasource: Add support for max_conns_per_host in dataproxy
    settings.
  + Bug fixes:
  * Configuration: Fix changing org preferences in FireFox.
  * PieChart: Fix legend dimension limits.
  * Postgres/MySQL/MSSQL: Fix panic in concurrent map writes.
  * Variables: Hide default data source if missing from regex.
- Update to version 8.0.1
  + Bug fixes:
  * Alerting/SSE: Fix "count_non_null" reducer validation.
  * Cloudwatch: Fix duplicated time series.
  * Cloudwatch: Fix missing defaultRegion.
  * Dashboard: Fix Dashboard init failed error on dashboards with
    old singlestat panels in collapsed rows.
  * Datasource: Fix storing timeout option as numeric.
  * Postgres/MySQL/MSSQL: Fix annotation parsing for empty
    responses.
  * Postgres/MySQL/MSSQL: Numeric/non-string values are now
    returned from query variables.
  * Postgres: Fix an error that was thrown when the annotation
    query did not return any results.
  * StatPanel: Fix an issue with the appearance of the graph when
    switching color mode.
  * Visualizations: Fix an issue in the
    Stat/BarGauge/Gauge/PieChart panels where all values mode
    were showing the same name if they had the same value.
  + Plugin development fixes &amp; changes:
  * Toolkit: Resolve external fonts when Grafana is served from a
    sub path.
- Update to version 8.0.0
  + Breaking changes:
  * The following endpoints were deprecated for Grafana v5.0 and
    support for them has now been removed:
    GET /dashboards/db/:slug
    GET /dashboard-solo/db/:slug
    GET /api/dashboard/db/:slug
    DELETE /api/dashboards/db/:slug
  + Features and enhancements:
  * AzureMonitor: Require default subscription for workspaces()
    template variable query.
  * AzureMonitor: Use resource type display names in the UI.
  * Dashboard: Remove support for loading and deleting dashboard
    by slug.
  * InfluxDB: Deprecate direct browser access in data source.
  * VizLegend: Add a read-only property.
  + Bug fixes:
  * AzureMonitor: Fix Azure Resource Graph queries in Azure
    China.
  * Checkbox: Fix vertical layout issue with checkboxes due to
    fixed height.
  * Dashboard: Fix Table view when editing causes the panel data
    to not update.
  * Dashboard: Fix issues where unsaved-changes warning is not
    displayed.
  * Login: Fixes Unauthorized message showing when on login page
    or snapshot page.
  * NodeGraph: Fix sorting markers in grid view.
  * Short URL: Include orgId in generated short URLs.
  * Variables: Support raw values of boolean type.
- Update to version 8.0.0-beta3
  + Breaking changes:
  * The default HTTP method for Prometheus data source is now
    POST.
  + Features and enhancements:
  * API: Support folder UID in dashboards API.
  * Alerting: Add support for configuring avatar URL for the
    Discord notifier.
  * Alerting: Clarify that Threema Gateway Alerts support only
    Basic IDs.
  * Azure: Expose Azure settings to external plugins.
  * AzureMonitor: Deprecate using separate credentials for Azure
    Monitor Logs.
  * AzureMonitor: Display variables in resource picker for Azure
    Monitor Logs.
  * AzureMonitor: Hide application insights for data sources not
    using it.
  * AzureMonitor: Support querying subscriptions and resource
    groups in Azure Monitor Logs.
  * AzureMonitor: remove requirement for default subscription.
  * CloudWatch: Add Lambda@Edge Amazon CloudFront metrics.
  * CloudWatch: Add missing AWS AppSync metrics.
  * ConfirmModal: Auto focus delete button.
  * Explore: Add caching for queries that are run from logs
    navigation.
  * Loki: Add formatting for annotations.
  * Loki: Bring back processed bytes as meta information.
  * NodeGraph: Display node graph collapsed by default with trace
    view.
  * Overrides: Include a manual override option to hide something
    from visualization.
  * PieChart: Support row data in pie charts.
  * Prometheus: Update default HTTP method to POST for existing
    data sources.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  + Bug fixes:
  * Admin: Fix infinite loading edit on the profile page.
  * Color: Fix issues with random colors in string and date
    fields.
  * Dashboard: Fix issue with title or folder change has no
    effect after exiting settings view.
  * DataLinks: Fix an issue __series.name is not working in data
    link.
  * Datasource: Fix dataproxy timeout should always be applied
    for outgoing data source HTTP requests.
  * Elasticsearch: Fix NewClient not passing httpClientProvider
    to client impl.
  * Explore: Fix Browser title not updated on Navigation to
    Explore.
  * GraphNG: Remove fieldName and hideInLegend properties from
    UPlotSeriesBuilder.
  * OAuth: Fix fallback to auto_assign_org_role setting for Azure
    AD OAuth when no role claims exists.
  * PanelChrome: Fix issue with empty panel after adding a non
    data panel and coming back from panel edit.
  * StatPanel: Fix data link tooltip not showing for single
    value.
  * Table: Fix sorting for number fields.
  * Table: Have text underline for datalink, and add support for
    image datalink.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  * Transformations: Prevent FilterByValue transform from
    crashing panel edit.
- Update to version 8.0.0-beta2
  + Features and enhancements:
  * AppPlugins: Expose react-router to apps.
  * AzureMonitor: Add Azure Resource Graph.
  * AzureMonitor: Managed Identity configuration UI.
  * AzureMonitor: Token provider with support for Managed
    Identities.
  * AzureMonitor: Update Logs workspace() template variable query
    to return resource URIs.
  * BarChart: Value label sizing.
  * CloudMonitoring: Add support for preprocessing.
  * CloudWatch: Add AWS/EFS StorageBytes metric.
  * CloudWatch: Allow use of missing AWS namespaces using custom
    metrics.
  * Datasource: Shared HTTP client provider for core backend data
    sources and any data source using the data source proxy.
  * InfluxDB: InfluxQL: allow empty tag values in the query
    editor.
  * Instrumentation: Instrument incoming HTTP request with
    histograms by default.
  * Library Panels: Add name endpoint &amp; unique name validation to
    AddLibraryPanelModal.
  * Logs panel: Support details view.
  * PieChart: Always show the calculation options dropdown in the
    editor.
  * PieChart: Remove beta flag.
  * Plugins: Enforce signing for all plugins.
  * Plugins: Remove support for deprecated backend plugin
    protocol version.
  * Tempo/Jaeger: Add better display name to legend.
  * Timeline: Add time range zoom.
  * Timeline: Adds opacity &amp; line width option.
  * Timeline: Value text alignment option.
  * ValueMappings: Add duplicate action, and disable dismiss on
    backdrop click.
  * Zipkin: Add node graph view to trace response.
  + Bug fixes:
  * Annotations panel: Remove subpath from dashboard links.
  * Content Security Policy: Allow all image sources by default.
  * Content Security Policy: Relax default template wrt. loading
    of scripts, due to nonces not working.
  * Datasource: Fix tracing propagation for alert execution by
    introducing HTTP client outgoing tracing middleware.
  * InfluxDB: InfluxQL always apply time interval end.
  * Library Panels: Fixes "error while loading library panels".
  * NewsPanel: Fixes rendering issue in Safari.
  * PanelChrome: Fix queries being issued again when scrolling in
    and out of view.
  * Plugins: Fix Azure token provider cache panic and auth param
    nil value.
  * Snapshots: Fix key and deleteKey being ignored when creating
    an external snapshot.
  * Table: Fix issue with cell border not showing with colored
    background cells.
  * Table: Makes tooltip scrollable for long JSON values.
  * TimeSeries: Fix for Connected null values threshold toggle
    during panel editing.
  * Variables: Fixes inconsistent selected states on dashboard
    load.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * QueryField: Remove carriage return character from pasted text.
- Update to version 8.0.0-beta1
  + License update:
  * AGPL License: Update license from Apache 2.0 to the GNU
    Affero General Public License (AGPL).
  + Breaking changes:
  * Removes the never refresh option for Query variables.
  * Removes the experimental Tags feature for Variables.
  + Deprecations:
  * The InfoBox &amp; FeatureInfoBox are now deprecated please use
    the Alert component instead with severity info.
  + Features and enhancements:
  * API: Add org users with pagination.
  * API: Return 404 when deleting nonexistent API key.
  * API: Return query results as JSON rather than base64 encoded
    Arrow.
  * Alerting: Allow sending notification tags to Opsgenie as
    extra properties.
  * Alerts: Replaces all uses of InfoBox &amp; FeatureInfoBox with
    Alert.
  * Auth: Add support for JWT Authentication.
  * AzureMonitor: Add support for
    Microsoft.SignalRService/SignalR metrics.
  * AzureMonitor: Azure settings in Grafana server config.
  * AzureMonitor: Migrate Metrics query editor to React.
  * BarChart panel: enable series toggling via legend.
  * BarChart panel: Adds support for Tooltip in BarChartPanel.
  * PieChart panel: Change look of highlighted pie slices.
  * CloudMonitoring: Migrate config editor from angular to react.
  * CloudWatch: Add Amplify Console metrics and dimensions.
  * CloudWatch: Add missing Redshift metrics to CloudWatch data
    source.
  * CloudWatch: Add metrics for managed RabbitMQ service.
  * DashboardList: Enable templating on search tag input.
  * Datasource config: correctly remove single custom http
    header.
  * Elasticsearch: Add generic support for template variables.
  * Elasticsearch: Allow omitting field when metric supports
    inline script.
  * Elasticsearch: Allow setting a custom limit for log queries.
  * Elasticsearch: Guess field type from first non-empty value.
  * Elasticsearch: Use application/x-ndjson content type for
    multisearch requests.
  * Elasticsearch: Use semver strings to identify ES version.
  * Explore: Add logs navigation to request more logs.
  * Explore: Map Graphite queries to Loki.
  * Explore: Scroll split panes in Explore independently.
  * Explore: Wrap each panel in separate error boundary.
  * FieldDisplay: Smarter naming of stat values when visualising
    row values (all values) in stat panels.
  * Graphite: Expand metric names for variables.
  * Graphite: Handle unknown Graphite functions without breaking
    the visual editor.
  * Graphite: Show graphite functions descriptions.
  * Graphite: Support request cancellation properly (Uses new
    backendSrv.fetch Observable request API).
  * InfluxDB: Flux: Improve handling of complex
    response-structures.
  * InfluxDB: Support region annotations.
  * Inspector: Download logs for manual processing.
  * Jaeger: Add node graph view for trace.
  * Jaeger: Search traces.
  * Loki: Use data source settings for alerting queries.
  * NodeGraph: Exploration mode.
  * OAuth: Add support for empty scopes.
  * PanelChrome: New logic-less emotion based component with no
    dependency on PanelModel or DashboardModel.
  * PanelEdit: Adds a table view toggle to quickly view data in
    table form.
  * PanelEdit: Highlight matched words when searching options.
  * PanelEdit: UX improvements.
  * Plugins: PanelRenderer and simplified QueryRunner to be used
    from plugins.
  * Plugins: AuthType in route configuration and params
    interpolation.
  * Plugins: Enable plugin runtime install/uninstall
    capabilities.
  * Plugins: Support set body content in plugin routes.
  * Plugins: Introduce marketplace app.
  * Plugins: Moving the DataSourcePicker to grafana/runtime so it
    can be reused in plugins.
  * Prometheus: Add custom query params for alert and exemplars
    queries.
  * Prometheus: Use fuzzy string matching to autocomplete metric
    names and label.
  * Routing: Replace Angular routing with react-router.
  * Slack: Use chat.postMessage API by default.
  * Tempo: Search for Traces by querying Loki directly from
    Tempo.
  * Tempo: Show graph view of the trace.
  * Themes: Switch theme without reload using global shortcut.
  * TimeSeries panel: Add support for shared cursor.
  * TimeSeries panel: Do not crash the panel if there is no time
    series data in the response.
  * Variables: Do not save repeated panels, rows and scopedVars.
  * Variables: Removes experimental Tags feature.
  * Variables: Removes the never refresh option.
  * Visualizations: Unify tooltip options across visualizations.
  * Visualizations: Refactor and unify option creation between
    new visualizations.
  * Visualizations: Remove singlestat panel.
  + Bug fixes:
  * APIKeys: Fixes issue with adding first api key.
  * Alerting: Add checks for non supported units - disable
    defaulting to seconds.
  * Alerting: Fix issue where Slack notifications won't link to
    user IDs.
  * Alerting: Omit empty message in PagerDuty notifier.
  * AzureMonitor: Fix migration error from older versions of App
    Insights queries.
  * CloudWatch: Fix AWS/Connect dimensions.
  * CloudWatch: Fix broken AWS/MediaTailor dimension name.
  * Dashboards: Allow string manipulation as advanced variable
    format option.
  * DataLinks: Includes harmless extended characters like
    Cyrillic characters.
  * Drawer: Fixes title overflowing its container.
  * Explore: Fix issue when some query errors were not shown.
  * Generic OAuth: Prevent adding duplicated users.
  * Graphite: Handle invalid annotations.
  * Graphite: Fix autocomplete when tags are not available.
  * InfluxDB: Fix Cannot read property 'length' of undefined in
    when parsing response.
  * Instrumentation: Enable tracing when Jaeger host and port are
    set.
  * Instrumentation: Prefix metrics with grafana.
  * MSSQL: By default let driver choose port.
  * OAuth: Add optional strict parsing of role_attribute_path.
  * Panel: Fixes description markdown with inline code being
    rendered on newlines and full width.
  * PanelChrome: Ignore data updates &amp; errors for non data
    panels.
  * Permissions: Fix inherited folder permissions can prevent new
    permissions being added to a dashboard.
  * Plugins: Remove pre-existing plugin installs when installing
    with grafana-cli.
  * Plugins: Support installing to folders with whitespace and
    fix pluginUrl trailing and leading whitespace failures.
  * Postgres/MySQL/MSSQL: Don't return connection failure details
    to the client.
  * Postgres: Fix ms precision of interval in time group macro
    when TimescaleDB is enabled.
  * Provisioning: Use dashboard checksum field as change
    indicator.
  * SQL: Fix so that all captured errors are returned from sql
    engine.
  * Shortcuts: Fixes panel shortcuts so they always work.
  * Table: Fixes so border is visible for cells with links.
  * Variables: Clear query when data source type changes.
  * Variables: Filters out builtin variables from unknown list.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * Button: Introduce buttonStyle prop.
  * DataQueryRequest: Remove deprecated props showingGraph and
    showingTabel and exploreMode.
  * grafana/ui: Update React Hook Form to v7.
  * IconButton: Introduce variant for red and blue icon buttons.
  * Plugins: Expose the getTimeZone function to be able to get
    the current selected timeZone.
  * TagsInput: Add className to TagsInput.
  * VizLegend: Move onSeriesColorChanged to PanelContext
    (breaking change).
- Update to version 7.5.13
  + Bug fixes:
  * Alerting: Fix NoDataFound for alert rules using AND operator.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1644408000">- Update to version 8.3.5 (jsc#SLE-23439, jsc#SLE-23422)
  + Security:
  * Fixes XSS vulnerability in handling data sources
    (bsc#1195726, CVE-2022-21702)
  * Fixes cross-origin request forgery vulnerability
    (bsc#1195727, CVE-2022-21703)
  * Fixes Insecure Direct Object Reference vulnerability in Teams
    API (bsc#1195728, CVE-2022-21713)</changelog>
</package>
<package pkgid="5409aee8d546f826b22fd91dd5f421d225e7fcbd85f63a6a173fba3c891563b7" name="grafana" arch="src">
  <version epoch="0" ver="8.3.5" rel="150200.3.21.1"/>
  <changelog author="egotthold@suse.com" date="1589457600">- Add instructions for patching the Grafana javascript frontend.</changelog>
  <changelog author="jcavalheiro@suse.com" date="1590321600">- Update to version 7.0.0
  * Breaking changes
  - Removed PhantomJS: PhantomJS was deprecated in Grafana v6.4 and starting from Grafana v7.0.0, all PhantomJS support has been removed. This means that Grafana no longer ships with a built-in image renderer, and we advise you to install the Grafana Image Renderer plugin.
  - Dashboard: A global minimum dashboard refresh interval is now enforced and defaults to 5 seconds.
  - Interval calculation: There is now a new option Max data points that controls the auto interval $__interval calculation. Interval was previously calculated by dividing the panel width by the time range. With the new max data points option it is now easy to set $__interval to a dynamic value that is time range agnostic. For example if you set Max data points to 10 Grafana will dynamically set $__interval by dividing the current time range by 10.
  - Datasource/Loki: Support for deprecated Loki endpoints has been removed.
  - Backend plugins: Grafana now requires backend plugins to be signed, otherwise Grafana will not load/start them. This is an additional security measure to make sure backend plugin binaries and files haven't been tampered with. Refer to Upgrade Grafana for more information.
  - @grafana/ui: Forms migration notice, see @grafana/ui changelog
  - @grafana/ui: Select API change for creating custom values, see @grafana/ui changelog
    + Deprecation warnings
  - Scripted dashboards is now deprecated. The feature is not removed but will be in a future release. We hope to address the underlying requirement of dynamic dashboards in a different way. #24059
  - The unofficial first version of backend plugins together with usage of grafana/grafana-plugin-model is now deprecated and support for that will be removed in a future release. Please refer to backend plugins documentation for information about the new officially supported backend plugins.
  * Features / Enhancements
  - Backend plugins: Log deprecation warning when using the unofficial first version of backend plugins. #24675, @marefr
  - Editor: New line on Enter, run query on Shift+Enter. #24654, @davkal
  - Loki: Allow multiple derived fields with the same name. #24437, @aocenas
  - Orgs: Add future deprecation notice. #24502, @torkelo
  * Bug Fixes
  - @grafana/toolkit: Use process.cwd() instead of PWD to get directory. #24677, @zoltanbedi
  - Admin: Makes long settings values line break in settings page. #24559, @hugohaggmark
  - Dashboard: Allow editing provisioned dashboard JSON and add confirmation when JSON is copied to dashboard. #24680, @dprokop
  - Dashboard: Fix for strange "dashboard not found" errors when opening links in dashboard settings. #24416, @torkelo
  - Dashboard: Fix so default data source is selected when data source can't be found in panel editor. #24526, @mckn
  - Dashboard: Fixed issue changing a panel from transparent back to normal in panel editor. #24483, @torkelo
  - Dashboard: Make header names reflect the field name when exporting to CSV file from the the panel inspector. #24624, @peterholmberg
  - Dashboard: Make sure side pane is displayed with tabs by default in panel editor. #24636, @dprokop
  - Data source: Fix query/annotation help content formatting. #24687, @AgnesToulet
  - Data source: Fixes async mount errors. #24579, @Estrax
  - Data source: Fixes saving a data source without failure when URL doesn't specify a protocol. #24497, @aknuds1
  - Explore/Prometheus: Show results of instant queries only in table. #24508, @ivanahuckova
  - Explore: Fix rendering of react query editors. #24593, @ivanahuckova
  - Explore: Fixes loading more logs in logs context view. #24135, @Estrax
  - Graphite: Fix schema and dedupe strategy in rollup indicators for Metrictank queries. #24685, @torkelo
  - Graphite: Makes query annotations work again. #24556, @hugohaggmark
  - Logs: Clicking "Load more" from context overlay doesn't expand log row. #24299, @kaydelaney
  - Logs: Fix total bytes process calculation. #24691, @davkal
  - Org/user/team preferences: Fixes so UI Theme can be set back to Default. #24628, @AgnesToulet
  - Plugins: Fix manifest validation. #24573, @aknuds1
  - Provisioning: Use proxy as default access mode in provisioning. #24669, @bergquist
  - Search: Fix select item when pressing enter and Grafana is served using a sub path. #24634, @tskarhed
  - Search: Save folder expanded state. #24496, @Clarity-89
  - Security: Tag value sanitization fix in OpenTSDB data source. #24539, @rotemreiss
  - Table: Do not include angular options in options when switching from angular panel. #24684, @torkelo
  - Table: Fixed persisting column resize for time series fields. #24505, @torkelo
  - Table: Fixes Cannot read property subRows of null. #24578, @hugohaggmark
  - Time picker: Fixed so you can enter a relative range in the time picker without being converted to absolute range. #24534, @mckn
  - Transformations: Make transform dropdowns not cropped. #24615, @dprokop
  - Transformations: Sort order should be preserved as entered by user when using the reduce transformation. #24494, @hugohaggmark
  - Units: Adds scale symbol for currencies with suffixed symbol. #24678, @hugohaggmark
  - Variables: Fixes filtering options with more than 1000 entries. #24614, @hugohaggmark
  - Variables: Fixes so Textbox variables read value from url. #24623, @hugohaggmark
  - Zipkin: Fix error when span contains remoteEndpoint. #24524, @aocenas
  - SAML: Switch from email to login for user login attribute mapping (Enterprise)
- Update Makefile and spec file
  * Remove phantomJS patch from Makefile
  * Fix multiline strings in Makefile
  * Exclude s390 from SLE12 builds, golang 1.14 is not built for s390</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591012800">- Update to version 7.0.1
  * Features / Enhancements
  - Datasource/CloudWatch: Makes CloudWatch Logs query history more readable. #24795, @kaydelaney
  - Download CSV: Add date and time formatting. #24992, @ryantxu
  - Table: Make last cell value visible when right aligned. #24921, @peterholmberg
  - TablePanel: Adding sort order persistance. #24705, @torkelo
  - Transformations: Display correct field name when using reduce transformation. #25068, @peterholmberg
  - Transformations: Allow custom number input for binary operations. #24752, @ryantxu
  * Bug fixes
  - Dashboard/Links: Fixes dashboard links by tags not working. #24773, @KamalGalrani
  - Dashboard/Links: Fixes open in new window for dashboard link. #24772, @KamalGalrani
  - Dashboard/Links: Variables are resolved and limits to 100. #25076, @hugohaggmark
  - DataLinks: Bring back variables interpolation in title. #24970, @dprokop
  - Datasource/CloudWatch: Field suggestions no longer limited to prefix-only. #24855, @kaydelaney
  - Explore/Table: Keep existing field types if possible. #24944, @kaydelaney
  - Explore: Fix wrap lines toggle for results of queries with filter expression. #24915, @ivanahuckova
  - Explore: fix undo in query editor. #24797, @zoltanbedi
  - Explore: fix word break in type head info. #25014, @zoltanbedi
  - Graph: Legend decimals now work as expected. #24931, @torkelo
  - LoginPage: Fix hover color for service buttons. #25009, @tskarhed
  - LogsPanel: Fix scrollbar. #24850, @ivanahuckova
  - MoveDashboard: Fix for moving dashboard caused all variables to be lost. #25005, @torkelo
  - Organize transformer: Use display name in field order comparer. #24984, @dprokop
  - Panel: shows correct panel menu items in view mode. #24912, @hugohaggmark
  - PanelEditor Fix missing labels and description if there is only single option in category. #24905, @dprokop
  - PanelEditor: Overrides name matcher still show all original field names even after Field default display name is specified. #24933, @torkelo
  - PanelInspector: Makes sure Data display options are visible. #24902, @hugohaggmark
  - PanelInspector: Hides unsupported data display options for Panel type. #24918, @hugohaggmark
  - PanelMenu: Make menu disappear on button press. #25015, @tskarhed
  - Postgres: Fix add button. #25087, @phemmer
  - Prometheus: Fix recording rules expansion. #24977, @ivanahuckova
  - Stackdriver: Fix creating Service Level Objectives (SLO) datasource query variable. #25023, @papagian</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591358400">- Update to version 7.0.3
  * Features / Enhancements
  - Stats: include all fields. #24829, @ryantxu
  - Variables: change VariableEditorList row action Icon to IconButton. #25217, @hshoff
  * Bug fixes
  - Cloudwatch: Fix dimensions of DDoSProtection. #25317, @papagian
  - Configuration: Fix env var override of sections containing hyphen. #25178, @marefr
  - Dashboard: Get panels in collapsed rows. #25079, @peterholmberg
  - Do not show alerts tab when alerting is disabled. #25285, @dprokop
  - Jaeger: fixes cascader option label duration value. #25129, @Estrax
  - Transformations: Fixed Transform tab crash &amp; no update after adding first transform. #25152, @torkelo
- Update to version 7.0.2
  * Bug fixes
  - Security: Urgent security patch release to fix CVE-2020-13379</changelog>
  <changelog author="jcavalheiro@suse.com" date="1600430400">- Update to version 7.1.5:
  * Features / Enhancements
  - Stats: Stop counting the same user multiple times.
  - Field overrides: Filter by field name using regex.
  - AzureMonitor: map more units.
  - Explore: Don't run queries on datasource change.
  - Graph: Support setting field unit &amp; override data source (automatic) unit.
  - Explore: Unification of logs/metrics/traces user interface
  - Table: JSON Cell should try to convert strings to JSON
  - Variables: enables cancel for slow query variables queries.
  - TimeZone: unify the time zone pickers to one that can rule them all.
  - Search: support URL query params.
  - Grafana-UI: Add FileUpload.
  - TablePanel: Sort numbers correctly.
  * Bug fixes
  - Alerting: remove LongToWide call in alerting.
  - AzureMonitor: fix panic introduced in 7.1.4 when unit was unspecified and alias was used.
  - Variables: Fixes issue with All variable not being resolved.
  - Templating: Fixes so texts show in picker not the values.
  - Templating: Templating: Fix undefined result when using raw interpolation format
  - TextPanel: Fix content overflowing panel boundaries.
  - StatPanel: Fix stat panel display name not showing when explicitly set.
  - Query history: Fix search filtering if null value.
  - Flux: Ensure connections to InfluxDB are closed.
  - Dashboard: Fix for viewer can enter panel edit mode by modifying url (but cannot not save anything).
  - Prometheus: Fix prom links in mixed mode.
  - Sign In Use correct url for the Sign In button.
  - StatPanel: Fixes issue with name showing for single series / field results
  - BarGauge: Fix space bug in single series mode.
  - Auth: Fix POST request failures with anonymous access
  - Templating: Fix recursive loop of template variable queries when changing ad-hoc-variable
  - Templating: Fixed recursive queries triggered when switching dashboard settings view
  - GraphPanel: Fix annotations overflowing panels.
  - Prometheus: Fix performance issue in processing of histogram labels.
  - Datasources: Handle URL parsing error.
  - Security: Use Header.Set and Header.Del for X-Grafana-User header.
  * Changes in spec file
  - Fix golang version = 1.14 to avoid dependency conflicts on some OBS projects</changelog>
  <changelog author="witold.bedyk@suse.com" date="1604577600">- Update to version 7.3.1:
  * Breaking changes
  - CloudWatch: The AWS CloudWatch data source's authentication scheme has changed. See the upgrade notes for details and how this may affect you.
  - Units: The date time units `YYYY-MM-DD HH:mm:ss` and `MM/DD/YYYY h:mm:ss a` have been renamed to `Datetime ISO` and `Datetime US` respectively.
  * Features / Enhancements
  - AzureMonitor: Support decimal (as float64) type in analytics/logs.
  - Add monitoring mixing for Grafana.
  - CloudWatch: Missing Namespace AWS/EC2CapacityReservations.
  - CloudWatch: Add support for AWS DirectConnect virtual interface metrics and add missing dimensions.
  - CloudWatch: Adding support for Amazon ElastiCache Redis metrics.
  - CloudWatch: Adding support for additional Amazon CloudFront metrics.
  - CloudWatch: Re-implement authentication.
  - Elasticsearch: Support multiple pipeline aggregations for a query.
  - Prometheus: Add time range parameters to labels API.
  - Loki: Visually distinguish error logs for LogQL2.
  - Api: Add /healthz endpoint for health checks.
  - API: Enrich add user to org endpoints with user ID in the response.
  - API: Enrich responses and improve error handling for alerting API endpoints.
  - Elasticsearch: Add support for date_nanos type.
  - Elasticsearch: Allow fields starting with underscore.
  - Elasticsearch: Increase maximum geohash aggregation precision to 12.
  - Postgres: Support request cancellation properly (Uses new backendSrv.fetch Observable request API).
  - Provisioning: Remove provisioned dashboards without parental reader.
  - API: Return ID of the deleted resource for dashboard, datasource and folder DELETE endpoints.
  - API: Support paging in the admin orgs list API.
  - API: return resource ID for auth key creation, folder permissions update and user invite complete endpoints.
  - BackendSrv: Uses credentials, deprecates withCredentials &amp; defaults to same-origin.
  - CloudWatch: Update list of AmazonMQ metrics and dimensions.
  - Cloudwatch: Add Support for external ID in assume role.
  - Cloudwatch: Add af-south-1 region.
  - DateFormats: Default ISO &amp; US formats never omit date part even if date is today (breaking change).
  - Explore: Transform prometheus query to elasticsearch query.
  - InfluxDB/Flux: Increase series limit for Flux datasource.
  - InfluxDB: exclude result and table column from Flux table results.
  - InfluxDB: return a table rather than an error when timeseries is missing time.
  - Loki: Add scopedVars support in legend formatting for repeated variables.
  - Loki: Re-introduce running of instant queries.
  - Loki: Support request cancellation properly (Uses new backendSrv.fetch Observable request API).
  - MixedDatasource: Shows retrieved data even if a data source fails.
  - Postgres: Support Unix socket for host.
  - Prometheus: Add scopedVars support in legend formatting for repeated variables.
  - Prometheus: Support request cancellation properly (Uses new backendSrv.fetch Observable request API).
  - Prometheus: add $__rate_interval variable.
  - Table: Adds column filtering.
  - grafana-cli: Add ability to read password from stdin to reset admin password.</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update packaging
  * avoid systemd and shadow hard requirements
  * Require the user from a new dedicated 'system-user-grafana' sibling package
  * avoid pinning to a specific Go version in the spec file</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- Update to version 7.3.6:
  * fixes for saml vulnerability
  * [v7.3.x] Fix: Correct panel edit uistate migration (#29413) (#29711)
  * PanelEdit: Prevent the preview pane to be resized further than window height (#28370) (#29726)
  * Fix: Migrate Panel edit uiState percentage strings to number (#29412) (#29723)
  * "Release: Updated versions in package to 7.3.5" (#29710)
  * Chore: upgrading y18n to 4.0.1 for security reasons (#29523) (#29709)
  * Panel: making sure we support all versions of chrome when detecting position of click event. (#29544) (#29708)
  * PanelEdit: making sure the correct datasource query editor is being rendered. (#29500) (#29707)
  * [v7.3.x] Auth: Add SigV4 header allowlist to reduce chances of verification issues (#29705)
  * Alerting: Use correct time series name override from frame fields (#29693) (#29698)
  * CloudWatch: namespace in search expression should be quoted if match exact is enabled #29109 (#29563) (#29687)
  * Adds go dep used by an Enterprise feature.  (#29645) (#29690)
  * instrumentation: align label name with our other projects (#29514) (#29685)
  * Instrumentation: Add examplars for request histograms (#29357) (#29682)
  * Login: Fixes typo in tooltip (#29604) (#29606)
  * fixes bug with invalid handler name for metrics (#29529) (#29532)
  * AzureMonitor: Unit MilliSeconds naming (#29399) (#29526)
  * Alarting: fix alarm messages in dingding (Fixes #29470) (#29482) (#29527)
  * Bug: trace viewer doesn't show more than 300 spans (#29377) (#29504)
  * Prometheus: don't override displayName property (#29441) (#29488)
  * resolve conflicts (#29415)
  * Drone: Upgrade build pipeline tool (#29365) (#29368)
  * Drone: Upload artifacts for release branch builds (#29297) (#29364)
  * Drone: Execute artifact publishing for both editions in parallel during release (#29362) (#29363)
  * Drone: Publish NPM packages after Storybook to avoid race condition (#29340) (#29343)
  * Docs: Fix editor role and alert notification channel description (#29301) (#29337)
  * "Release: Updated versions in package to 7.3.4" (#29336)
  * Security: Fixes minor security issue with alert notification webhooks that allowed GET &amp; DELETE requests #29330 (#29335)
  * Backport of InfluxDB: update flux library and support boolean label values #29333
  * ReleaseNotes: Update link in package.json (#29328)
  * Login: Fixes redirect url encoding issues of # %23 being unencoded after login (#29299) (#29323)
  * Drone: Upgrade build pipeline tool (#29308) (#29309)
  * Annotations: fixing so when changing annotations query links submenu will be updated. (#28990) (#29285)
  * Dashboard: Fixes kiosk state after being redirected to login page and back (#29273) (#29278)
  * Increase search limit on team add user and improve placeholder (#29258) (#29261)
  * Drone: Sync with master (#29205)
  * Drone: Fix publish-packages invocation (#29179) (#29184)
  * Chore: Upgrade grafana/build-ci-deploy image to latest Go (#29171) (#29180)
  * Table: Fix incorrect condtition for rendering table filter (#29165) (#29181)
  * DashboardLinks: will only refresh dashboard search when changing tags for link. (#29040) (#29177)
  * Drone: Upgrade build pipeline tool and build image (#29161) (#29162)
  * Release: Updated versions in package to 7.3.3 (#29126)
  * git cherry-pick -x 0f3bebb38daa488e108881ce17d4f68167a834e6 (#29155)
  * Build: support custom build tags (#28609) (#29128)
  * Revert "Graph: Fixes stacking issues like floating bars when data is not aligned  (#29051) (#29088)" (#29151)
  * Provisioning: always pin app to the sidebar when enabled (#29084) (#29146)
  * build paths in an os independent way (#29143) (#29147)
  * Chore: Upgrade Go dev tools (#29124) (#29132)
  * Automatin: set node version
  * Automation: Adding version bump action
  * Drone: Fix Drone config verification for enterprise on Windows (#29118) (#29119)
  * [v7.3.x] Drone: Verify Drone config at beginning of pipelines (#29111)
  * Test Datasource/Bug: Fixes division by zero in csv metric values scenario (#29029) (#29068)
  * [v7.3.x] StatPanel: Fixes hanging issue when all values are zero (#29087)
  * Data source proxy: Convert 401 from data source to 400 (#28962) (#29095)
  * Graph: Fixes stacking issues like floating bars when data is not aligned  (#29051) (#29088)
  * Auth: Enable more complete credential chain for SigV4 default SDK auth option (#29065) (#29086)
  * Fix for multi-value template variable for project selector (#29042) (#29054)
  * Thresholds: Fixes color assigned to null values (#29010) (#29018)
  * [v7.3.x] Chore: Bump build pipeline version (#29025)
  * Release v7.3.2 (#29024)
  * Fix conflict (#29020)
  * StatPanels: Fixes auto min max when latest value is zero (#28982) (#29007)
  * Tracing: Add setting for sampling server (#29011) (#29015)
  * Gauge: making sure threshold panel json is correct before render (#28898) (#28984)
  * Variables: make sure that we support both old and new syntax for custom variables. (#28896) (#28985)
  * Explore: Remove redundant decodeURI and fix urls (#28697) (#28963)
  * [v7.3.x] Drone: Fix docs building (#28987)
  * Alerting: Append appSubUrl to back button on channel form (#28282) (#28983)
  * Plugins: allow override when allowing unsigned plugins (#28901) (#28927)
  * CloudWatch Logs: Change what we use to measure progress (#28912) (#28964)
  * Tracing: log traceID in request logger (#28952) (#28959)
  * Panel inspect: Interpolate variables in panel inspect title (#28779) (#28801)
  * UsageStats: start tracking usage stats for tempo (#28948) (#28951)
  * Short URL: Cleanup unvisited/stale short URLs (#28867) (#28944)
  * Plugins signing: Fix docs urls (#28930) (#28934)
  * Chore: Fix spelling issue (#28904) (#28925)
  * API: replace SendLoginLogCommand with LoginHook (#28777) (#28891)
  * Elasticsearch: Exclude pipeline aggregations from order by options (#28620) (#28873)
  * Dashboards / Folders: delete related data (permissions, stars, tags, versions, annotations) when deleting a dashboard or a folder (#28826) (#28890)
  * Disable selecting enterprise plugins with no license (#28758) (#28859)
  * Tempo: fix test data source (#28836) (#28856)
  * Prometheus: fix missing labels from value (#28842) (#28855)
  * Units: added support to handle negative fractional numbers. (#28849) (#28851)
  * increase blob column size for encrypted dashboard data (#28831) (#28832)
  * Gauge: Improve font size auto sizing (#28797) (#28828)
  * Variables: Fixes URL values for dependent variables (#28798) (#28800)
  * grafana/toolkit: Extract CHANGELOG when building plugin (#28773) (#28774)
  * Templating: Custom variable edit UI, change text input into textarea  (#28312) (#28322) (#28704)
  * Cloudwatch: Fix issue with field calculation transform not working properly with Cloudwatch data (#28761) (#28775)
  * Plugin page: Fix dom validation warning (#28737) (#28741)
  * Dashboard: fix view panel mode for Safari / iOS (#28702) (#28755)
  * Fix typo in unsigned plugin warning (#28709) (#28722)
  * TableFilters: Fixes filtering with field overrides (#28690) (#28727)
  * Templating: Speeds up certain variable queries for Postgres, MySql and MSSql (#28686) (#28726)
  * Prometheus: Fix copy paste behaving as cut and paste (#28622) (#28691)</changelog>
  <changelog author="tserong@suse.com" date="1613563200">- Update to version 7.4.1:
  * "Release: Updated versions in package to 7.4.1" (#31128)
  * Transforms: Fixes Outer join issue with duplicate field names not getting the same unique field names as before  (#31121) (#31127)
  * MuxWriter: Handle error for already closed file (#31119) (#31120)
  * Logging: sourcemap transform asset urls from CDN in logged stacktraces (#31115) (#31117)
  * Exemplars: Change CTA style (#30880) (#31105)
  * test: add support for timeout to be passed in for addDatasource (#30736) (#31090)
  * Influx: Make max series limit configurable and show the limiting message if applied (#31025) (#31100)
  * Elasticsearch: fix log row context erroring out (#31088) (#31094)
  * test: update addDashboard flow for v7.4.0 changes (#31059) (#31084)
  * Usage stats: Adds source/distributor setting (#31039) (#31076)
  * DashboardLinks: Fixes crash when link has no title (#31008) (#31050)
  * Make value mappings correctly interpret numeric-like strings (#30893) (#30912)
  * Elasticsearch: Fix alias field value not being shown in query editor (#30992) (#31037)
  * BarGauge: Improvements to value sizing and table inner width calculations  (#30990) (#31032)
  * convert path to posix by default (#31045) (#31053)
  * Alerting: Fixes so notification channels are properly deleted (#31040) (#31046)
  * Drone: Fix deployment image (#31027) (#31029)
  * Graph: Fixes so graph is shown for non numeric time values (#30972) (#31014)
  * instrumentation: make the first database histogram bucket smaller (#30995) (#31001)
  * Build: Releases e2e and e2e-selectors too (#31006) (#31007)
  * TextPanel: Fixes so panel title is updated when variables change (#30884) (#31005)
  * StatPanel: Fixes issue formatting date values using unit option (#30979) (#30991)
  * Units: Fixes formatting of duration units (#30982) (#30986)
  * Elasticsearch: Show Size setting for raw_data metric (#30980) (#30983)
  * Logging: sourcemap support for frontend stacktraces (#30590) (#30976)
  * e2e: extends selector factory to plugins (#30932) (#30934)
  * Variables: Adds queryparam formatting option (#30858) (#30924)
  * Exemplars: change api to reflect latest changes (#30910) (#30915)
  * "Release: Updated versions in package to 7.4.0" (#30898)
  * DataSourceSettings: Adds info box and link to Grafana Cloud (#30891) (#30896)
  * GrafanaUI: Add a way to persistently close InfoBox (#30716) (#30895)
  * [7.4.x] AlertingNG: List saved Alert definitions in Alert Rule list (30890)(30603)
  * Alerting: Fixes alert panel header icon not showing (#30840) (#30885)
  * Plugins: Requests validator (#30445) (#30877)
  * PanelLibrary: Adds library panel meta information to dashboard json (#30770) (#30883)
  * bump grabpl version to 0.5.36 (#30874) (#30878)
  * Chore: remove __debug_bin (#30725) (#30857)
  * Grafana-ui: fixes closing modals with escape key (#30745) (#30873)
  * DashboardLinks: Support variable expression in to tooltip - Issue #30409 (#30569) (#30852)
  * Add alt text to plugin logos (#30710) (#30872)
  * InfluxDB: Add http configuration when selecting InfluxDB v2 flavor  (#30827) (#30870)
  * Prometheus: Set type of labels to string (#30831) (#30835)
  * AlertingNG: change API permissions (#30781) (#30814)
  * Grafana-ui: fixes no data message in Table component (#30821) (#30855)
  * Prometheus: Add tooltip to explain possibility to use patterns in text and title fields in annotations (#30825) (#30843)
  * Chore: add more docs annotations (#30847) (#30851)
  * BarChart: inside-align strokes, upgrade uPlot to 1.6.4. (#30806) (#30846)
  * Transforms: allow boolean in field calculations (#30802) (#30845)
  * CDN: Fixes cdn path when Grafana is under sub path (#30822) (#30823)
  * bump cypress to 6.3.0 (#30644) (#30819)
  * Expressions: Measure total transformation requests and elapsed time (#30514) (#30789)
  * Grafana-UI: Add story/docs for ErrorBoundary (#30304) (#30811)
  * [v7.4.x]: Menu: Mark menu components as internal (#30801)
  * Graph: Fixes auto decimals issue in legend and tooltip (#30628) (#30635)
  * GraphNG: Disable Plot logging by default (#30390) (#30500)
  * Storybook: Migrate card story to use controls  (#30535) (#30549)
  * GraphNG: add bar alignment option (#30499) (#30790)
  * Variables: Clears drop down state when leaving dashboard (#30810) (#30812)
  * Add missing callback dependency (#30797) (#30809)
  * GraphNG: improve behavior when switching between solid/dash/dots (#30796) (#30799)
  * Add width for Variable Editors (#30791) (#30795)
  * Panels: Fixes so panels are refreshed when scrolling past them fast (#30784) (#30792)
  * PanelEdit: Trigger refresh when changing data source (#30744) (#30767)
  * AlertingNG: Enable UI to Save Alert Definitions (#30394) (#30548)
  * CDN: Fix passing correct prefix to GetContentDeliveryURL (#30777) (#30779)
  * CDN: Adds support for serving assets over a CDN (#30691) (#30776)
  * Explore: Update styling of buttons (#30493) (#30508)
  * Loki: Append refId to logs uid (#30418) (#30537)
  * skip symlinks to directories when generating plugin manifest (#30721) (#30738)
  * Mobile: Fixes issue scrolling on mobile in chrome (#30746) (#30750)
  * BarChart: add alpha bar chart panel (#30323) (#30754)
  * Datasource: Use json-iterator configuration compatible with standard library (#30732) (#30739)
  * Variables: Fixes so text format will show All instead of custom all (#30730) (#30731)
  * AlertingNG: pause/unpause definitions via the API (#30627) (#30672)
  * PanelLibrary: better handling of deleted panels (#30709) (#30726)
  * Transform: improve the "outer join" performance/behavior (#30407) (#30722)
  * DashboardPicker: switch to promise-based debounce, return dashboard UID (#30706) (#30714)
  * Use connected GraphNG in Explore (#30707) (#30708)
  * PanelLibrary: changes casing of responses and adds meta property (#30668) (#30711)
  * DeployImage: Switch base images to Debian (#30684) (#30699)
  * Trace: trace to logs design update (#30637) (#30702)
  * Influx: Show all datapoints for dynamically windowed flux query (#30688) (#30703)
  * ci(npm-publish): add missing github package token to env vars (#30665) (#30673)
  * Loki: Improve live tailing errors and fix Explore's logs container type errors (#30517) (#30681)
  * Grafana-UI: Fix setting default value for MultiSelect (#30671) (#30687)
  * Explore: Fix jumpy live tailing (#30650) (#30677)
  * Docs: Refer to product docs in whats new for alerting templating feature (#30652) (#30670)
  * Variables: Fixes display value when using capture groups in regex (#30636) (#30661)
  * Docs: Fix expressions enabled description (#30589) (#30651)
  * Licensing Docs: Adding license restrictions docs (#30216) (#30648)
  * DashboardSettings: fixes vertical scrolling (#30640) (#30643)
  * chore: bump redux toolkit to 1.5.0 for immer 8.0.1 vulnerability fix (#30605) (#30631)
  * Explore: Fix loading visualisation on the top of the new time series panel (#30553) (#30557)
  * Footer: Fixes layout issue in footer  (#30443) (#30494)
  * Variables: Fixes so queries work for numbers values too (#30602) (#30624)
  * Admin: Fixes so form values are filled in from backend (#30544) (#30623)
  * Docs: Update 7.4 What's New to use more correct description of alerting notification template feature (#30502) (#30614)
  * NodeGraph: Add docs (#30504) (#30613)
  * Cloud Monitoring: Fix legend naming with display name override (#30440) (#30503)
  * Expressions: Add option to disable feature (#30541) (#30558)
  * OldGraph: Fix height issue in Firefox (#30565) (#30582)
  * XY Chart: fix editor error with empty frame (no fields) (#30573) (#30577)
  * XY Chart: share legend config with timeseries (#30559) (#30566)
  * DataFrame: cache frame/field index in field state (#30529) (#30560)
  * Prometheus: Fix show query instead of Value if no __name__ and metric (#30511) (#30556)
  * Decimals: Big Improvements to auto decimals and fixes to auto decimals bug found in 7.4-beta1  (#30519) (#30550)
  * chore: update packages dependent on dot-prop to fix security vulnerability (#30432) (#30487)
  * GraphNG: uPlot 1.6.3 (fix bands not filling below 0). close #30523. (#30527) (#30528)
  * GraphNG: uPlot 1.6.2 (#30521) (#30522)
  * Chore: Upgrade grabpl version (#30486) (#30513)
  * grafana/ui: Fix internal import from grafana/data (#30439) (#30507)
  * prevent field config from being overwritten (#30437) (#30442)
  * Chore: upgrade NPM security vulnerabilities (#30397) (#30495)
  * TimeSeriesPanel: Fixed default value for gradientMode (#30484) (#30492)
  * Admin: Fixes so whole org drop down is visible when adding users to org (#30481) (#30497)
  * Chore: adds wait to e2e test (#30488) (#30490)
  * Graph: Fixes so only users with correct permissions can add annotations (#30419) (#30466)
  * Alerting: Hides threshold handle for percentual thresholds (#30431) (#30467)
  * Timeseries: only migrage point size when configured (#30461) (#30470)
  * Expressions: Fix button icon (#30444) (#30450)
  * PanelModel: Make sure the angular options are passed to react panel type changed handler (#30441) (#30451)
  * Docs: Fix img link for alert notification template (#30436) (#30447)
  * Chore: Upgrade build pipeline tool (#30456) (#30457)
  * PanelOptions: Refactoring applying panel and field options out of PanelModel and add property clean up for properties not in field config registry  (#30389) (#30438)
  * "Release: Updated versions in package to 7.4.0-beta.1" (#30427)
  * Chore: Update what's new URL (#30423)
  * GraphNG: assume uPlot's series stroke is always a function (#30416)
  * PanelLibrary: adding library panels to Dashboard Api (#30278)
  * Prettier: Fixes to files that came in after main upgrade (#30410)
  * Cloud Monitoring: Add curated dashboards for the most popular GCP services (#29930)
  * Mssql integrated security (#30369)
  * Prettier: Upgrade to 2  (#30387)
  * GraphNG: sort ascending if the values appear reversed (#30405)
  * Docs: Grafana whats new 7.4 (#30404)
  * Dashboards: Adds cheat sheet toggle to supported query editors (#28857)
  * Docs: Update timeseries-dimensions.md (#30403)
  * Alerting: Evaluate data templating in alert rule name and message (#29908)
  * Docs: Add links to 7.3 patch release notes (#30292)
  * Docs: Update _index.md (#29546)
  * Docs: Update jaeger.md (#30401)
  * Expressions: Remove feature toggle (#30316)
  * Docs: Update tempo.md (#30399)
  * Docs: Update zipkin.md (#30400)
  * services/provisioning: Various cleanup (#30396)
  * DashboardSchemas: OpenAPI Schema Generation (#30242)
  * AlertingNG: Enforce unique alert definition title (non empty)/UID per organisation (#30380)
  * Licensing: Document new v7.4 options and APIs (#30217)
  * Auth: add expired token error and update CreateToken function (#30203)
  * NodeGraph: Add node graph visualization (#29706)
  * Add jwtTokenAuth to plugin metadata schema (#30346)
  * Plugins: Force POSIX style path separators for manifest generation (#30287)
  * Add enterprise reporting fonts to gitignore (#30385)
  * Field overrides: skipping overrides for properties no longer existing in plugin (#30197)
  * NgAlerting: View query result (#30218)
  * Grafana-UI: Make Card story public (#30388)
  * Dashboard: migrate version history list (#29970)
  * Search: use Card component (#29892)
  * PanelEvents: Isolate more for old angular query editors (#30379)
  * Loki: Remove showing of unique labels with the empty string value (#30363)
  * Chore: Lint all files for no-only-tests (#30364)
  * Clears errors after running new query (#30367)
  * Prometheus: Change exemplars endpoint (#30378)
  * Explore: Fix a bug where Typeahead crashes when a large amount of ite? (#29637)
  * Circular vector: improve generics (#30375)
  * Update signing docs (#30296)
  * Email: change the year in templates (#30294)
  * grafana/ui: export TLS auth component (#30320)
  * Query Editor: avoid word wrap (#30373)
  * Transforms: add sort by transformer (#30370)
  * AlertingNG: Save alert instances (#30223)
  * GraphNG: Color series from by value scheme &amp; change to fillGradient to gradientMode  (#29893)
  * Chore: Remove not used PanelOptionsGrid component (#30358)
  * Zipkin: Remove browser access mode (#30360)
  * Jaeger: Remove browser access mode (#30349)
  * chore: bump lodash to 4.17.20 (#30359)
  * ToolbarButton: New emotion based component to replace all navbar, DashNavButton and scss styles (#30333)
  * Badge: Increase contrast, remove rocket icon for plugin beta/alpha state (#30357)
  * Licensing: Send map of environment variables to plugins (#30347)
  * Dashboards: Exit to dashboard when deleting panel from panel view / edit view (#29032)
  * Cloud Monitoring: MQL support (#26551)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0-beta1 (#30348)
  * Panel options UI: Allow collapsible categories (#30301)
  * Grafana-ui: Fix context menu item always using onClick instead of href (#30350)
  * Badge: Design improvement &amp; reduce contrast (#30328)
  * make sure stats are added horizontally and not vertically (#30106)
  * Chore(deps): Bump google.golang.org/grpc from 1.33.1 to 1.35.0 (#30342)
  * Chore(deps): Bump github.com/stretchr/testify from 1.6.1 to 1.7.0 (#30341)
  * Chore(deps): Bump github.com/google/uuid from 1.1.2 to 1.1.5 (#30340)
  * Chore(deps): Bump github.com/hashicorp/go-version from 1.2.0 to 1.2.1 (#30339)
  * Fix HTML character entity error (#30334)
  * GraphNG: fix fillBelowTo regression (#30330)
  * GraphNG: implement softMin/softMax for auto-scaling stabilization. close #979. (#30326)
  * Legend: Fixes right y-axis legend from being pushed outside the bounds of the panel (#30327)
  * Grafana-toolkit: Update component generator templates (#30306)
  * Panels: remove beta flag from stat and bargauge panels (#30324)
  * GraphNG: support fill below to (bands) (#30268)
  * grafana-cli: Fix security issue (#28888)
  * AlertingNG: Modify queries and transform endpoint to get datasource UIDs (#30297)
  * Chore: Fix missing property from ExploreGraph (#30315)
  * Prometheus: Add support for Exemplars (#28057)
  * Grafana-UI: Enhances for TimeRangePicker and TimeRangeInput (#30102)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0 (#30312)
  * Table: Fixes BarGauge cell display mode font size so that it is fixed to the default cell font size (#30303)
  * AngularGraph: Fixes issues with legend wrapping after legend refactoring (#30283)
  * Plugins: Add Open Distro to the list of data sources supported by sigv4 (#30308)
  * Chore: Moves common and response into separate packages (#30298)
  * GraphNG: remove y-axis position control from series color picker in the legend (#30302)
  * Table: migrate old-table config to new table config (#30142)
  * Elasticsearch: Support extended stats and percentiles in terms order by (#28910)
  * Docs: Update release notes index
  * GraphNG: stats in legend (#30251)
  * Grafana UI: EmptySearchResult docs (#30281)
  * Plugins: Use the includes.path (if exists) on sidebar includes links (#30291)
  * Fix spinner and broken buttons (#30286)
  * Graph: Consider reverse sorted data points on isOutsideRange check (#30289)
  * Update getting-started.md (#30257)
  * Backend: use sdk version (v0.81.0) without transform (gel) code (#29236)
  * Chore: update latest versions to 7.3.7 (#30282)
  * Loki: Fix hiding of series in table if labels have number values (#30185)
  * Loki: Lower min step to 1ms (#30135)
  * Prometheus: Improve autocomplete performance and remove disabling of dynamic label lookup (#30199)
  * Icons: Adds custom icon support ands new panel and interpolation icons (#30277)
  * ReleaseNotes: Updated changelog and release notes for 7.3.7 (#30280)
  * Grafana-ui: Allow context menu items to be open in new tab (#30141)
  * Cloud Monitoring: Convert datasource to use Dataframes (#29830)
  * GraphNG: added support to change series color from legend. (#30256)
  * AzureMonitor: rename labels for query type dropdown (#30143)
  * Decimals: Improving auto decimals logic for high numbers and scaled units  (#30262)
  * Elasticsearch: Use minimum interval for alerts (#30049)
  * TimeSeriesPanel: The new graph panel now supports y-axis value mapping #30272
  * CODEOWNERS: Make backend squad owners of backend style guidelines (#30266)
  * Auth: Add missing request headers to SigV4 middleware allowlist (#30115)
  * Grafana-UI: Add story/docs for FilterPill (#30252)
  * Grafana-UI: Add story/docs for Counter (#30253)
  * Backend style guide: Document JSON guidelines (#30267)
  * GraphNG: uPlot 1.6, hide "Show points" in Points mode, enable "dot" lineStyle (#30263)
  * Docs: Update prometheus.md (#30240)
  * Docs: Cloudwatch filter should be JSON format (#30243)
  * API: Add by UID routes for data sources  (#29884)
  * Docs: Update datasource_permissions.md (#30255)
  * Cloudwatch: Move deep link creation to the backend (#30206)
  * Metrics API: Use jsoniter for JSON encoding (#30250)
  * Add option in database config to skip migrations for faster startup. (#30146)
  * Set signed in users email correctly (#30249)
  * Drone: Upgrade build pipeline tool (#30247)
  * runRequest: Fixes issue with request time range and time range returned to panels are off causing data points to be cut off (outside) (#30227)
  * Elasticsearch: fix handling of null values in query_builder (#30234)
  * Docs: help users connect to Prometheus using SigV4 (#30232)
  * Update documentation-markdown-guide.md (#30207)
  * Update documentation-markdown-guide.md (#30235)
  * Better logging of plugin scanning errors (#30231)
  * Print Node.js and Toolkit versions (#30230)
  * Chore: bump rollup across all packages (#29486)
  * Backend style guide: Document database patterns (#30219)
  * Chore: Bump plugin-ci-alpine Docker image version (#30225)
  * Legends: Refactoring and rewrites of legend components to simplify components &amp; reuse (#30165)
  * Use Node.js 14.x in plugin CI (#30209)
  * Field overrides: extracting the field config factory into its own reusable module. (#30214)
  * LibraryPanels: adds connections (#30212)
  * PanelOptionsGroups: Only restore styles from PanelOptionsGroup (#30215)
  * Variables: Add deprecation warning for value group tags (#30160)
  * GraphNG: Hide grid for right-y axis if left x-axis exists (#30195)
  * Middleware: Add CSP support (#29740)
  * Updated image links to have newer format. (#30208)
  * Docs: Update usage-insights.md (#30150)
  * Share panel dashboard add images (#30201)
  * Update documentation-style-guide.md (#30202)
  * Docs: Fix links to transforms (#30194)
  * docs(badge): migrate story to use controls (#30180)
  * Chore(deps): Bump github.com/prometheus/common from 0.14.0 to 0.15.0 (#30188)
  * Fix alert definition routine stop (#30117)
  * Chore(deps): Bump gopkg.in/square/go-jose.v2 from 2.4.1 to 2.5.1 (#30189)
  * InlineSwitch: Minor story fix (#30186)
  * Chore(deps): Bump github.com/gosimple/slug from 1.4.2 to 1.9.0 (#30178)
  * Chore(deps): Bump github.com/fatih/color from 1.9.0 to 1.10.0 (#30183)
  * Chore(deps): Bump github.com/lib/pq from 1.3.0 to 1.9.0 (#30181)
  * Chore(deps): Bump github.com/hashicorp/go-plugin from 1.2.2 to 1.4.0 (#30175)
  * Chore(deps): Bump github.com/getsentry/sentry-go from 0.7.0 to 0.9.0 (#30171)
  * Gauge: Fixes issue with all null values cause min &amp; max to be null (#30156)
  * Links: Add underline on hover for links in NewsPanel (#30166)
  * GraphNG: Update to test dashboards (#30153)
  * CleanUp: Removed old panel options group component (#30157)
  * AngularQueryEditors: Fixes to Graphite query editor and other who refer to other queries (#30154)
  * Chore(deps): Bump github.com/robfig/cron/v3 from 3.0.0 to 3.0.1 (#30172)
  * Chore(deps): Bump github.com/urfave/cli/v2 from 2.1.1 to 2.3.0 (#30173)
  * Chore: Fix spelling issue (#30168)
  * Revise README.md. (#30145)
  * Chore(deps): Bump github.com/mattn/go-sqlite3 from 1.11.0 to 1.14.6 (#30174)
  * InlineSwitch: Added missing InlineSwitch component and fixed two places that used unaligned inline switch (#30162)
  * GraphNG: add new alpha XY Chart  (#30096)
  * Elastic: Support request cancellation properly (Uses new backendSrv.fetch Observable request API) (#30009)
  * OpenTSDB: Support request cancellation properly (#29992)
  * InfluxDB: Update Flux external link (#30158)
  * Allow dependabot to keep go packages up-to-date (#30170)
  * PluginState: Update comment
  * GraphNG: Minor polish &amp; updates to new time series panel and move it from alpha to beta (#30163)
  * Share panel dashboard (#30147)
  * GraphNG: rename "graph3" to "timeseries" panel (#30123)
  * Add info about access mode (#30137)
  * Prometheus: Remove running of duplicated metrics query (#30108)
  * Prometheus: Fix autocomplete does not work on incomplete input (#29854)
  * GraphNG: remove graph2 panel (keep the parts needed for explore) (#30124)
  * Docs: Add metadata to activating licensing page (#30140)
  * MixedDataSource: Added missing variable support flag (#30110)
  * AngularPanels: Fixes issue with some panels not rendering when going into edit mode due to no height (#30113)
  * AngularPanels: Fixes issue with discrete panel that used the initialized event (#30133)
  * Explore: Make getFieldLinksForExplore more reusable (#30134)
  * Elasticsearch: Add Support for Serial Differencing Pipeline Aggregation (#28618)
  * Angular: Fixes issue with angular directive caused by angular upgrade in master (#30114)
  * Analytics: add data source type in data-request events (#30087)
  * GraphNG: "Interpolation: Step after" test (#30127)
  * GraphNG: check cross-axis presence when auto-padding. close #30121. (#30126)
  * Alerting: improve alerting default datasource search when extracting alerts (#29993)
  * Loki: Timeseries should not produce 0-values for missing data (#30116)
  * GraphNG: support dashes (#30070)
  * GraphNG: fix spanGaps optimization in alignDataFrames(). see #30101. (#30118)
  * Alerting NG: update API to expect UIDs instead of IDs (#29896)
  * GraphNG: Overhaul of main test dashboard and update to null &amp; gaps dashboard (#30101)
  * Chore: Fix intermittent time-related test failure in explore datasource instance update (#30109)
  * QueryEditorRow: Ability to change query name (#29779)
  * Frontend: Failed to load application files message improvement IE11 (#30011)
  * Drone: Upgrade build pipeline tool (#30104)
  * Fix phrasing. (#30075)
  * Chore: Add CloudWatch HTTP API tests (#29691)
  * Elastic: Fixes so templating queries work (#30003)
  * Chore: Rewrite elasticsearch client test to standard library (#30093)
  * Chore: Rewrite tsdb influxdb test to standard library (#30091)
  * Fix default maximum lifetime  an authenticated user can be logged in (#30030)
  * Instrumentation: re-enable database wrapper feature to expose counter and histogram for database queries (#29662)
  * Docs: Update labels to fields transform (#30086)
  * GraphNG: adding possibility to toggle tooltip, graph and legend for series (#29575)
  * Chore: Rewrite tsdb cloudmonitoring test to standard library (#30090)
  * Chore: Rewrite tsdb azuremonitor time grain test to standard library (#30089)
  * Chore: Rewrite tsdb graphite test to standard library (#30088)
  * Chore: Upgrade Docker build image wrt. Go/golangci-lint/Node (#30077)
  * Usage Stats: Calculate concurrent users as a histogram (#30006)
  * Elasticsearch: Fix broken alerting when using pipeline aggregations (#29903)
  * Drone: Fix race conditions between Enterprise and Enterprise2 (#30076)
  * Chore: Rewrite models datasource cache test to standard library (#30040)
  * Plugins: prevent app plugin from rendering with wrong location (#30017)
  * Update NOTICE.md
  * Chore: Tiny typo fix `rage` -&gt; `range` (#30067)
  * Docs: loki.md: Add example of Loki data source config (#29976)
  * ReleaseNotes: Updated changelog and release notes for 7.3.6 (#30066)
  * Docs: Update usage-insights.md (#30065)
  * Docs: Update white-labeling.md (#30064)
  * Chore(deps): Bump axios from 0.19.2 to 0.21.1 (#30059)
  * Chore: Rewrite models tags test to standard library (#30041)
  * Bump actions/setup-node from v1 to v2.1.4 (#29891)
  * Build(deps): Bump ini from 1.3.5 to 1.3.7 (#29787)
  * fall back to any architecture when getting plugin's checksum #30034 (#30035)
  * Lerna: Update to 3.22.1 (#30057)
  * SeriesToRows: Fixes issue in transform so that value field is always named Value (#30054)
  * [dashboard api] manage error when data in dashboard table is not valid json (#29999)
  * use sha256 checksum instead of md5 (#30018)
  * Chore: Rewrite brute force login protection test to standard library (#29986)
  * Chore: Rewrite login auth test to standard library (#29985)
  * Chore: Rewrite models dashboards test to standard library (#30023)
  * Chore: Rewrite models dashboard acl test to standard library (#30022)
  * Chore: Rewrite models alert test to standard library (#30021)
  * Chore: Rewrite ldap login test to standard library (#29998)
  * Chore: Rewrite grafana login test to standard library (#29997)
  * Fix two ini-file typos regarding LDAP (#29843)
  * Chore: Changes source map devtool to inline-source-map (#30004)
  * Chore: Sync Enterprise go.sum (#30005)
  * Chore: Add Enterprise dependencies (#29994)
  * SQLStore: customise the limit of retrieved datasources per organisation (#29358)
  * Chore: update crewjam/saml library to the latest master (#29991)
  * Graph: Fixes so users can not add annotations in readonly dash (#29990)
  * Currency: add Vietnamese dong (VND) (#29983)
  * Drone: Update pipelines for Enterprise (#29939)
  * Remove the bus from teamgroupsync (#29810)
  * Influx: Make variable query editor input uncontrolled (#29968)
  * PanelLibrary: Add PATCH to the API (#29956)
  * PanelEvents: Isolating angular panel events into it's own event bus + more event refactoring  (#29904)
  * Bump node-notifier from 8.0.0 to 8.0.1 (#29952)
  * LDAP: Update use_ssl documentation (#29964)
  * Docs: Missing 's' on 'logs' (#29966)
  * Docs: Update opentsdb.md (#29963)
  * Docs: Minor typo correction (#29962)
  * librarypanels: Fix JSON field casing in tests (#29954)
  * TemplateSrv: Do not throw  error for an unknown format but use glob as fallback and warn in the console (#29955)
  * PanelLibrary: Adds uid and renames title to name (#29944)
  * Docs: Fix raw format variable docs (#29945)
  * RedirectResponse: Implement all of api.Response (#29946)
  * PanelLibrary: Adds get and getAll to the api (#29772)
  * Chore: Remove duplicate interpolateString test (#29941)
  * Chore: Rewrite influxdb query parser test to standard library (#29940)
  * Folders: Removes the possibility to delete the General folder (#29902)
  * Chore: Convert tsdb request test to standard library (#29936)
  * Chore: Convert tsdb interval test to standard library (#29935)
  * Docs: Update configuration.md (#29912)
  * Docs: Update organization_roles.md (#29911)
  * Docs: Update _index.md (#29918)
  * GraphNG: bring back tooltip (#29910)
  * Ng Alerting: Remove scroll and fix SplitPane limiters (#29906)
  * Dashboard: Migrating dashboard settings to react (#27561)
  * Minor correction to explanation on correct MS SQL usage. (#29889)
  * AlertingNG: Create a scheduler to evaluate alert definitions (#29305)
  * Add changelog items for 7.3.6, 7.2.3 and 6.7.5 (#29901)
  * bump stable to 7.3.6 (#29899)
  * Upgrade go deps.  (#29900)
  * Expressions: Replace query input fields with select. (#29816)
  * PanelEdit: Update UI if panel plugin changes field config (#29898)
  * Elasticsearch: Remove timeSrv dependency (#29770)
  * PanelEdit: Need new data after plugin change (#29874)
  * Chore(toolkit): disable react/prop-types for eslint config (#29888)
  * Field Config API: Add ability to hide field option or disable it from the overrides (#29879)
  * SharedQuery: Fixes shared query editor now showing queries (#29849)
  * GraphNG: support fill gradient (#29765)
  * Backend style guide: Add more guidelines (#29871)
  * Keep query keys consistent (#29855)
  * Alerting: Copy frame field labels to time series tags (#29886)
  * Update configure-docker.md (#29883)
  * Usage Stats: Introduce an interface for usage stats service (#29882)
  * DataFrame: add a writable flag to fields (#29869)
  * InlineForms: Changes to make inline forms more flexible for query editors  (#29782)
  * Usage Stats: Allow to add additional metrics to the stats (#29774)
  * Fix the broken link of XORM documentation (#29865)
  * Move colors demo under theme colors (#29873)
  * Dashboard: Increase folder name size in search dashboard (#29821)
  * MSSQL: Config UI touches (#29834)
  * QueryOptions:  Open QueryEditors: run queries after changing group options #29864
  * GraphNG: uPlot 1.5.2, dynamic stroke/fill, Flot-style hover points (#29866)
  * Variables: Fixes so numerical sortorder works for options with null values (#29846)
  * GraphNG: only initialize path builders once (#29863)
  * GraphNG: Do not set fillColor from GraphNG only opacity (#29851)
  * add an example cloudwatch resource_arns() query that uses multiple tags (ref: #29499) (#29838)
  * Backend: Remove more globals (#29644)
  * MS SQL: Fix MS SQL add data source UI issues (#29832)
  * Display palette and colors for dark and light themes in storybook (#29848)
  * Docs: Fix broken link in logs-panel (#29833)
  * Docs: Add info about typing of connected props to Redux style guide (#29842)
  * Loki: Remove unnecessary deduplication (#29421)
  * Varibles: Fixes so clicking on Selected will not include All (#29844)
  * Explore/Logs: Correctly display newlines in detected fields (#29541)
  * Link suppliers: getLinks API update (#29757)
  * Select: Changes default menu placement for Select from auto to bottom (#29837)
  * Chore: Automatically infer types for dashgrid connected components  (#29818)
  * Chore: Remove unused Loki and Cloudwatch syntax providers  (#29686)
  * Pass row (#29839)
  * GraphNG: Context menu (#29745)
  * GraphNG: Enable scale distribution configuration (#29684)
  * Explore: Improve Explore performance but removing unnecessary re-renders (#29752)
  * DashboardDS: Fixes display of long queries (#29808)
  * Sparkline: Fixes issue with sparkline that sent in custom fillColor instead of fillOpacity (#29825)
  * Chore: Disable default golangci-lint filter (#29751)
  * Update style guide with correct usage of MS SQL (#29829)
  * QueryEditor: do not auto refresh on every update (#29762)
  * Chore: remove unused datasource status enum (#29827)
  * Expressions: support ${my var} syntax (#29819)
  * Docs: Update types-options.md (#29777)
  * Chore: Enable more go-ruleguard rules (#29781)
  * GraphNG: Load uPlot path builders lazily (#29813)
  * Elasticsearch: ensure query model has timeField configured in datasource settings (#29807)
  * Chore: Use Header.Set method instead of Header.Add (#29804)
  * Allow dependabot to check actions (#28159)
  * Grafana-UI: Support optgroup for MultiSelect (#29805)
  * Sliders: Update behavior and style tweak (#29795)
  * Grafana-ui: Fix collapsible children sizing (#29776)
  * Style guide: Document avoidance of globals in Go code (#29803)
  * Chore: Rewrite opentsdb test to standard library (#29792)
  * CloudWatch: Add support for AWS DirectConnect ConnectionErrorCount metric (#29583)
  * GraphNG: uPlot 1.5.1 (#29789)
  * GraphNG: update uPlot v1.5.0 (#29763)
  * Added httpMethod to webhook (#29780)
  * @grafana-runtime: Throw error if health check fails in DataSourceWithBackend (#29743)
  * Explore: Fix remounting of query row (#29771)
  * Expressions: Add placeholders to hint on input (#29773)
  * Alerting: Next gen Alerting page (#28397)
  * GraphNG: Add test dashboard for null &amp; and gaps rendering (#29769)
  * Expressions: Field names from refId (#29755)
  * Plugins: Add support for signature manifest V2 (#29240)
  * Chore: Configure go-ruleguard via golangci-lint (#28419)
  * Move middleware context handler logic to service (#29605)
  * AlertListPanel: Add options to sort by Time(asc) and Time(desc) (#29764)
  * PanelLibrary: Adds delete Api (#29741)
  * Tracing: Release trace to logs feature (#29443)
  * ReleaseNotes: Updated changelog and release notes for 7.3.5 (#29753)
  * DataSourceSettings: Add servername field to DataSource TLS config (#29279)
  * Chore: update stable and testing versions (#29748)
  * ReleaseNotes: Updated changelog and release notes for 7.3.5 (#29744)
  * Elasticsearch: View in context feature for logs (#28764)
  * Chore: Disable gosec on certain line (#29382)
  * Logging: log frontend errors caught by ErrorBoundary, including component stack (#29345)
  * ChangePassword: improved keyboard navigation (#29567)
  * GrafanaDataSource: Fix selecting -- Grafana -- data source, broken after recent changes (#29737)
  * Docs: added version note for rename by regex transformation. (#29735)
  * @grafana/ui: Fix UI issues for cascader button dropdown and query input (#29727)
  * Docs: Update configuration.md (#29728)
  * Docs: Remove survey (#29549)
  * Logging: rate limit fronted logging endpoint (#29272)
  * API: add Status() to RedirectResponse (#29722)
  * Elasticsearch: Deprecate browser access mode (#29649)
  * Elasticsearch: Fix query initialization action (#29652)
  * PanelLibrary: Adds api and db to create Library/Shared/Reusable Panel (#29642)
  * Transformer: Rename metrics based on regex (#29281)
  * Variables: Fixes upgrade of legacy Prometheus queries (#29704)
  * Auth: Add SigV4 header allowlist to reduce chances of verification issues (#29650)
  * DataFrame: add path and description metadata (#29695)
  * Alerting: Use correct time series name override from frame fields (#29693)
  * GraphNG: fix bars migration and support color and linewidth (#29697)
  * PanelHeader: Fix panel header description inline code wrapping (#29628)
  * Bugfix 29848: Remove annotation_tag entries as part of annotations cleanup (#29534)
  * GraphNG: simple settings migration from flot panel (#29599)
  * GraphNG: replace bizcharts with uPlot for sparklines (#29632)
  * GitHubActions: Update node version in github action (#29683)
  * Adds go dep used by an Enterprise feature.  (#29645)
  * Typescript: Raise strict error limit for enterprise (#29688)
  * Remove unnecessary escaping (#29677)
  * Update getting-started-prometheus.md (#29678)
  * instrumentation: align label name with our other projects (#29514)
  * Typescript: Fixing typescript strict error, and separate check from publishing (#29679)
  * CloudWatch: namespace in search expression should be quoted if match exact is enabled #29109 (#29563)
  * Docs: Plugin schema updates (#28232)
  * RadioButton: Fix flex issue in master for radio buttons (#29664)
  * Update getting-started.md (#29670)
  * Expr: fix time unit typo in ds queries (#29668)
  * Expr: make reduction nan/null more consistent (#29665)
  * Expr: fix func argument panic (#29663)
  * Update documentation-style-guide.md (#29661)
  * Update documentation-markdown-guide.md (#29659)
  * Docs: Changed image format (#29658)
  * Expr: fix failure to execute due to OrgID (#29653)
  * GraphNG: rename "points" to "showPoints" (#29635)
  * Expressions: Restore showing expression query editor even if main data source is not mixed (#29656)
  * GraphNG: time range should match the panel timeRange (#29596)
  * Support svg embedded favicons in whitelabeling (#29436)
  * Add changelog to docs style guide (#29581)
  * Loki: Retry web socket connection when connection is closed abnormally (#29438)
  * GraphNG: Fix annotations and exemplars plugins (#29613)
  * Chore: Rewrite tsdb sql engine test to standard library (#29590)
  * GraphNG: fix and optimize spanNulls (#29633)
  * Build(deps): Bump highlight.js from 10.4.0 to 10.4.1 (#29625)
  * Cloudwatch: session cache should use UTC consistently (#29627)
  * GraphNG: rename GraphMode to DrawStyle (#29623)
  * GraphNG: add spanNulls config option (#29512)
  * Docs: add docs for concatenate transformer (#28667)
  * Stat/Gauge: expose explicit font sizing (#29476)
  * GraphNG: add gaps/nulls support to staircase &amp; smooth interpolation modes (#29593)
  * grafana/ui: Migrate Field knobs to controls (#29433)
  * Prometheus: Fix link to Prometheus graph in dashboard (#29543)
  * Build: Publish next and latest npm channels to Github (#29615)
  * Update broken aliases (#29603)
  * API: add ID to snapshot API responses (#29600)
  * Elasticsearch: Migrate queryeditor to React (#28033)
  * QueryGroup &amp; DataSourceSrv &amp; DataSourcePicker changes simplify usage, error handling and reduce duplication, support for uid (#29542)
  * Elastic: Fixes config UI issues (#29608)
  * GraphNG: Fix issues with plugins not retrieving plot instance (#29585)
  * middleware: Make scenario test functions take a testing.T argument (#29564)
  * Grafana/ui: Storybook controls understand component types (#29574)
  * Login: Fixes typo in tooltip (#29604)
  * Panel: making sure we support all versions of chrome when detecting position of click event. (#29544)
  * Chore: Rewrite sqlstore migration test to use standard library (#29589)
  * Chore: Rewrite tsdb prometheus test to standard library (#29592)
  * Security: Add gosec G304 auditing annotations (#29578)
  * Chore: Rewrite tsdb testdatasource scenarios test to standard library (#29591)
  * Docs: Add missing key to enable SigV4 for provisioning Elasticsearch data source (#29584)
  * Add Microsoft.Network/natGateways (#29479)
  * Update documentation-style-guide.md (#29586)
  * @grafana/ui: Add bell-slash to available icons (#29579)
  * Alert: Fix forwardRef warning (#29577)
  * Update documentation-style-guide.md (#29580)
  * Chore: Upgrade typescript to 4.1 (#29493)
  * PanelLibrary: Adds library_panel table (#29565)
  * Make build docker full fix (#29570)
  * Build: move canary packages to github (#29411)
  * Devenv: Add default db for influxdb (#29371)
  * Chore: Check errors from Close calls (#29562)
  * GraphNG: support auto and explicit axis width (#29553)
  * Chore: upgrading y18n to 4.0.1 for security reasons (#29523)
  * Middleware: Rewrite tests to use standard library (#29535)
  * Overrides: show category on the overrides (#29556)
  * GraphNG: Bars, Staircase, Smooth modes (#29359)
  * Docs: Fix docs sync actions (#29551)
  * Chore: Update dev guide node version for Mac (#29548)
  * Docs: Update formatting-multi-value-variables.md (#29547)
  * Arrow: toArray() on nullable values should include null values (#29520)
  * Docs: Update syntax.md (#29545)
  * NodeJS: Update to LTS (14) (#29467)
  * Docs: Update repeat-panels-or-rows.md (#29540)
  * 3 minor changes, including updating the title TOC (#29501)
  * Auth proxy: Return standard error type (#29502)
  * Data: use pre-defined output array length in vectorToArray() (#29516)
  * Dashboards: hide playlist edit functionality from viewers and snapshots link from unauthenticated users (#28992)
  * docker: use yarn to build (#29538)
  * QueryEditors: Refactoring &amp; rewriting out dependency on PanelModel (#29419)
  * Chore: skip flaky tests (#29537)
  * Graph NG: Invalidate uPlot config on timezone changes (#29531)
  * IntelliSense: Fix autocomplete and highlighting for Loki, Prometheus, Cloudwatch (#29381)
  * Variables: Fixes Textbox current value persistence (#29481)
  * OptionsEditor: simplify the options editor interfaces (#29518)
  * Icon: Changed the icon for signing in (#29530)
  * fixes bug with invalid handler name for metrics (#29529)
  * Middleware: Simplifications (#29491)
  * GraphNG: simplify effects responsible for plot updates/initialization  (#29496)
  * Alarting: fix alarm messages in dingding (Fixes #29470) (#29482)
  * PanelEdit: making sure the correct datasource query editor is being rendered. (#29500)
  * AzureMonitor: Unit MilliSeconds naming (#29399)
  * Devenv: update mysql_tests and postgres_tests blocks for allowing dynamically change of underlying docker image (#29525)
  * Chore: Enable remaining eslint-plugin-react rules (#29519)
  * Docs/Transformations: Add documentation about Binary operations in Add field from calculation (#29511)
  * Datasources: fixed long error message overflowing container (#29440)
  * docker: fix Dockerfile after Gruntfile.js removed (#29515)
  * Chore: Adds Panel Library featuretoggle (#29521)
  * Docs: Update filter-variables-with-regex.md (#29508)
  * Docs: InfluxDB_V2 datasource: adding an example on how to add InfluxQL as a datasource (#29490)
  * Loki: Add query type and line limit to query editor in dashboard (#29356)
  * Docs: Added Security Group support to Azure Auth (#29418)
  * DataLinks: Removes getDataSourceSettingsByUid from applyFieldOverrides  (#29447)
  * Bug: trace viewer doesn't show more than 300 spans (#29377)
  * Live: publish all dashboard changes to a single channel (#29474)
  * Chore: Enable eslint-plugin-react partial rules (#29428)
  * Alerting: Update alertDef.ts with more time options (#29498)
  * DataSourceSrv: Look up data source by uid and name transparently (#29449)
  * Instrumentation: Add examplars for request histograms (#29357)
  * Variables: Fixes Constant variable persistence confusion (#29407)
  * Docs: Fix broken link for plugins (#29346)
  * Prometheus: don't override displayName property (#29441)
  * Grunt: Removes grunt dependency and replaces some of its usage (#29461)
  * Transformation: added support for excluding/including rows based on their values. (#26884)
  * Chore: Enable exhaustive linter (#29458)
  * Field overrides: added matcher to match all fields within frame/query. (#28872)
  * Log: Use os.Open to open file for reading (#29483)
  * MinMax: keep global min/main in field state (#29406)
  * ReactGridLayout: Update dependency to 1.2 (#29455)
  * Jest: Upgrade to latest (#29450)
  * Chore: bump grafana-ui rollup dependencies (#29315)
  * GraphNG: use uPlot's native ms support (#29445)
  * Alerting: Add support for Sensu Go notification channel (#28012)
  * adds tracing for all bus calls that passes ctx (#29434)
  * prometheus: Improve IsAPIError's documentation (#29432)
  * ReleaseNotes: Updated changelog and release notes for 7.3.4 (#29430)
  * Elasticsearch: Fix index pattern not working with multiple base sections (#28348)
  * Plugins: Add support for includes' icon (#29416)
  * Docs: fixing frontend docs issue where enums ending up in wrong folder level. (#29429)
  * Variables: Fixes issue with upgrading legacy queries (#29375)
  * Queries: Extract queries from dashboard (#29349)
  * Docs: docker -&gt; Docker (#29331)
  * PanelEvents: Refactors and removes unnecessary events, fixes panel editor update issue when panel options change (#29414)
  * Fix: Correct panel edit uistate migration (#29413)
  * Alerting: Improve Prometheus Alert Rule error message (#29390)
  * Fix: Migrate Panel edit uiState percentage strings to number (#29412)
  * remove insecure cipher suit as default option (#29378)
  * * prometheus fix variables fetching when  customQueryParameters used #28907 (#28949)
  * Chore: Removes observableTester (#29369)
  * Chore: Adds e2e tests for Variables (#29341)
  * Fix gosec finding of unhandled errors (#29398)
  * Getting started with Grafana and MS SQL (#29401)
  * Arrow: cast timestams to Number (#29402)
  * Docs: Add Cloud content links (#29317)
  * PanelEditor: allow access to the eventBus from panel options (#29327)
  * GraphNG: support x != time in library (#29353)
  * removes unused golint file (#29391)
  * prefer server cipher suites (#29379)
  * Panels/DashList: Fix order of recent dashboards (#29366)
  * Core: Move SplitPane layout from PanelEdit. (#29266)
  * Drone: Upgrade build pipeline tool (#29365)
  * Update yarn.lock to use latest rc-util (#29313)
  * Variables: Adds description field  (#29332)
  * Chore: Update latest.json (#29351)
  * Drone: Upload artifacts for release branch builds (#29297)
  * Docs: fixing link issues in auto generated frontend docs. (#29326)
  * Drone: Execute artifact publishing for both editions in parallel during release (#29362)
  * Devenv: adding default credentials for influxdb (#29344)
  * Drone: Check CUE dashboard schemas (#29334)
  * Backend: fix IPv6 address parsing erroneous (#28585)
  * dashboard-schemas cue 3.0.0 compatible (#29352)
  * Update documentation-style-guide.md (#29354)
  * Docs: Update requirements.md (#29350)
  * ReleaseNotes: Updated changelog and release notes for 7.3.4 (#29347)
  * ReleaseNotes: Updated changelog and release notes for 7.3.4 (#29338)
  * Drone: Publish NPM packages after Storybook to avoid race condition (#29340)
  * Add an option to hide certain users in the UI (#28942)
  * Guardian: Rewrite tests from goconvey (#29292)
  * Docs: Fix editor role and alert notification channel description (#29301)
  * Docs: Improve custom Docker image instructions (#29263)
  * Security: Fixes minor security issue with alert notification webhooks that allowed GET &amp; DELETE requests #29330
  * Chore: Bump storybook to v6 (#28926)
  * ReleaseNotes: Updates release notes link in package.json (master) (#29329)
  * Docs: Accurately reflecting available variables (#29302)
  * Heatmap: Fixes issue introduced by new eventbus (#29322)
  * Dashboard Schemas (#28793)
  * devenv: Add docker load test which authenticates with API key (#28905)
  * Login: Fixes redirect url encoding issues of # %23 being unencoded after login (#29299)
  * InfluxDB: update flux library and support boolean label values (#29310)
  * Explore/Logs: Update Parsed fields to Detected fields (#28881)
  * GraphNG: Init refactorings and fixes (#29275)
  * fixing a broken relref link (#29312)
  * Drone: Upgrade build pipeline tool (#29308)
  * decreasing frontend docs threshold. (#29304)
  * Docker: update docker root group docs and docker image (#29222)
  * WebhookNotifier: Convert tests away from goconvey (#29291)
  * Annotations: fixing so when changing annotations query links submenu will be updated. (#28990)
  * [graph-ng] add temporal DataFrame alignment/outerJoin &amp; move null-asZero pass inside (#29250)
  * Dashboard: Fixes kiosk state after being redirected to login page and back (#29273)
  * make it possible to hide change password link in profile menu (#29246)
  * Theme: Add missing color type (#29265)
  * Chore: Allow reducerTester to work with every data type &amp; payload-less actions (#29241)
  * Explore/Prometheus: Update default query type option to "Both" (#28935)
  * Loki/Explore: Add query type selector (#28817)
  * Variables: New Variables are stored immediately (#29178)
  * reduce severity level to warning (#28939)
  * Units: Changes FLOP/s to FLOPS and some other rates per second units get /s suffix  (#28825)
  * Docs: Remove duplicate "Transformations overview" topics from the TOC (#29247)
  * Docs: Fixed broken relrefs and chanfed TOC entry name from Alerting to Alerts. (#29251)
  * Docs: Remove duplicate Panel overview topic.  (#29248)
  * Increase search limit on team add user and improve placeholder (#29258)
  * Fix warnings for conflicting style rules (#29249)
  * Make backwards compatible (#29212)
  * Minor cosmetic markdown tweaks in docs/cloudwatch.md (#29238)
  * Getting Started: Updated index topic, removed "what-is-grafana", and adjusted weight o? (#29216)
  * BarGauge: Fix story for BarGauge, caused knobs to show for other stories (#29232)
  * Update glossary to add hyperlinks to Explore and Transformation entries (#29217)
  * Chore: Enable errorlint linter (#29227)
  * TimeRegions: Fixed issue with time regions and tresholds due to angular js upgrade (#29229)
  * CloudWatch: Support request cancellation properly (#28865)
  * CloudMonitoring: Support request cancellation properly (#28847)
  * Chore: Handle wrapped errors (#29223)
  * Expressions: Move GEL into core as expressions (#29072)
  * Chore: remove compress:release grunt task (#29225)
  * Refactor/Explore: Inline datasource actions into initialisation (#28953)
  * Fix README typo (#29219)
  * Grafana UI: Card API refactor (#29034)
  * Plugins: Changed alertlist alert url to view instead of edit (#29060)
  * React: Upgrading react to v17, wip (#29057)
  * Gauge: Tweaks short value auto-sizing (#29197)
  * BackendSrv: support binary responseType like $http did (#29004)
  * GraphNG: update the options config (#28917)
  * Backend: Fix build (#29206)
  * Permissions: Validate against Team/User permission role update (#29101)
  * ESlint: React fixes part 1 (#29062)
  * Tests: Adds expects for observables (#28929)
  * Variables: Adds new Api that allows proper QueryEditors for Query variables (#28217)
  * Introduce eslint-plugin-react (#29053)
  * Automation: Adds GitHub release action (#29194)
  * Refactor declarative series configuration to a config builder (#29106)
  * ReleaseNotes: Updated changelog and release notes for 7.3.3 (#29189)
  * Panels: fix positioning of the header title (#29167)
  * trace user login and datasource name instead of id (#29183)
  * playlist: Improve test (#29120)
  * Drone: Fix publish-packages invocation (#29179)
  * Table: Fix incorrect condtition for rendering table filter (#29165)
  * Chore: Upgrade grafana/build-ci-deploy image to latest Go (#29171)
  * DashboardLinks: will only refresh dashboard search when changing tags for link. (#29040)
  * ReleaseNotes: Updated changelog and release notes for 7.3.3 (#29169)
  * CloudWatch: added HTTP API Gateway specific metrics and dimensions (#28780)
  * Release: Adding release notes for 7.3.3 (#29168)
  * SQL: Define primary key for tables without it (#22255)
  * changed link format from MD to HTML (#29163)
  * Backend: Rename variables for style conformance (#29097)
  * Docs: Fixes what'new menu and creates index page, adds first draft of release notes to docs (#29158)
  * Drone: Upgrade build pipeline tool and build image (#29161)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0 (#29160)
  * ReleaseNotes: Updated changelog and release notes for 7.3.3 (#29159)
  * Chore: Upgrade Go etc in build images (#29157)
  * Chore: Remove unused Go code (#28852)
  * API: Rewrite tests from goconvey (#29091)
  * Chore: Fix linting issues caught by ruleguard (#28799)
  * Fix panic when using complex dynamic URLs in app plugin routes  (#27977)
  * Snapshots: Fixes so that dashboard snapshots show data when using Stat, Gauge, BarGauge or Table panels (#29031)
  * Fix authomation text: remove hyphen (#29149)
  * respect fronted-logging.enabled flag (#29107)
  * build paths in an os independent way (#29143)
  * Provisioning: always pin app to the sidebar when enabled (#29084)
  * Automation: Adds new changelog actions (#29142)
  * Chore: Rewrite preferences test from GoConvey to stdlib and testify (#29129)
  * Chore: Upgrade Go dev tools (#29124)
  * Automation: Adding version bump action
  * DataFrames: add utility function to check if structure has changed (#29006)
  * Drone: Fix Drone config verification for enterprise on Windows (#29118)
  * Chore: Require OrgId to be specified in delete playlist command (#29117)
  * Plugin proxy: Handle URL parsing errors (#29093)
  * Drone: Verify Drone config at beginning of pipelines (#29071)
  * Legend/GraphNG: Refactoring legend types and options (#29067)
  * Doc: Update documentation-style-guide.md (#29082)
  * Chore: Bumps types for jest (#29098)
  * LogsPanel: Fix scrolling in dashboards (#28974)
  * sort alphabetically unique labels, labels and parsed fields (#29030)
  * Data source proxy: Convert 401 from data source to 400 (#28962)
  * Plugins: Implement testDatasource for Jaeger (#28916)
  * Update react-testing-library (#29061)
  * Graph: Fixes stacking issues like floating bars when data is not aligned  (#29051)
  * StatPanel: Fixes hanging issue when all values are zero (#29077)
  * Auth: Enable more complete credential chain for SigV4 default SDK auth option (#29065)
  * Chore: Convert API tests to standard Go lib (#29009)
  * Update README.md (#29075)
  * Update CODEOWNERS (#28906)
  * Enhance automation text for missing information (#29052)
  * GraphNG: Adding ticks test dashboard and improves tick spacing (#29044)
  * Chore: Migrate Dashboard List panel to React (#28607)
  * Test Datasource/Bug: Fixes division by zero in csv metric values scenario (#29029)
  * Plugins: Bring back coreplugin package (#29064)
  * Add 'EventBusName' dimension to CloudWatch 'AWS/Events' namespace (#28402)
  * CloudWatch: Add support for AWS/ClientVPN metrics and dimensions (#29055)
  * AlertingNG: manage and evaluate alert definitions via the API (#28377)
  * Fix linting issues (#28811)
  * Logging: Log frontend errors (#28073)
  * Fix for multi-value template variable for project selector (#29042)
  * Chore: Rewrite test helpers from GoConvey to stdlib (#28919)
  * GraphNG: Fixed axis measurements (#29036)
  * Fix links to logql docs (#29037)
  * latest 7.3.2 (#29041)
  * Elasticsearch: Add Moving Function Pipeline Aggregation (#28131)
  * changelog 7.3.2 (#29038)
  * MutableDataFrame: Remove unique field name constraint and values field index and unused/seldom used stuff  (#27573)
  * Fix prometheus docs related to query variable (#29027)
  * Explore: support ANSI colors in live logs (#28895)
  * Docs: Add documentation about log levels (#28975)
  * Dashboard: remove usage of Legacyforms (#28707)
  * Docs: Troubleshoot starting docker containers on Mac (#28754)
  * Elasticsearch: interpolate variables in Filters Bucket Aggregation (#28969)
  * Chore: Bump build pipeline version (#29023)
  * Annotations: Fixes error when trying to create annotation when dashboard is unsaved (#29013)
  * TraceViewer: Make sure it does not break when no trace is passed (#28909)
  * Thresholds: Fixes color assigned to null values (#29010)
  * Backend: Remove unused code (#28933)
  * Fix documentation (#28998)
  * Tracing: Add setting for sampling server (#29011)
  * Logs Panel: Fix inconsistent higlighting (#28971)
  * MySQL: Update README.md (#29003)
  * IntervalVariable: Fix variable tooltip (#28988)
  * StatPanels: Fixes auto min max when latest value is zero (#28982)
  * Chore: Fix SQL related Go variable naming (#28887)
  * MSSQL: Support request cancellation properly (Uses new backendSrv.fetch Observable request API) (#28809)
  * Variables: Fixes loading with a custom all value in url (#28958)
  * Backend: Adds route for well-known change password URL (#28788)
  * docs: fix repeated dashboards link (#29002)
  * LogsPanel: Don't show scroll bars when not needed (#28972)
  * Drone: Fix docs building (#28986)
  * StatPanel: Fixed center of values in edge case scenarios (#28968)
  * Update getting-started-prometheus.md (#28502)
  * Docs: fix relref (#28977)
  * Docs: Minor docs update
  * Docs: Another workflow docs update
  * Docs: Workflow minor edit
  * Docs: Another minor edit
  * Docs: Update PR workflow docs
  * Docs: Update bot docs
  * StatPanels: set default to last (#28617)
  * Tracing: log traceID in request logger (#28952)
  * start tracking usage stats for tempo (#28948)
  * Docs: Update bot docs
  * GrafanaBot: Update labels and commands and adds docs  (#28950)
  * Docs: updates for file-based menu (#28500)
  * Grot: Added command/label to close feature requests with standard message (#28937)
  * GraphNG: Restore focus option (#28946)
  * Docs: Fix links (#28945)
  * Short URL: Cleanup unvisited/stale short URLs (#28867)
  * GraphNG: Using new VizLayout, moving Legend into GraphNG and some other refactorings (#28913)
  * CloudWatch Logs: Change what we use to measure progress (#28912)
  * Chore: use jest without grunt (#28558)
  * Chore: Split Explore redux code into multiple sections (#28819)
  * TestData: Fix issue with numeric inputs in TestData query editor (#28936)
  * setting: Fix tests on Mac (#28886)
  * Plugins signing: Fix docs urls (#28930)
  * Field color: handling color changes when switching panel types (#28875)
  * Variables: make sure that we support both old and new syntax for custom variables. (#28896)
  * CodeEditor: added support for javascript language (#28818)
  * Update CHANGELOG.md (#28928)
  * Plugins: allow override when allowing unsigned plugins (#28901)
  * Chore: Fix spelling issue (#28904)
  * Grafana-UI: LoadingPlaceholder docs (#28874)
  * Gauge: making sure threshold panel json is correct before render (#28898)
  * Chore: Rewrite test in GoConvey to stdlib and testify (#28918)
  * Update documentation-style-guide.md (#28908)
  * Adding terms to glossary (#28884)
  * Devenv: Fix Prometheus basic auth proxy (#28889)
  * API: replace SendLoginLogCommand with LoginHook (#28777)
  * Dashboards / Folders: delete related data (permissions, stars, tags, versions, annotations) when deleting a dashboard or a folder (#28826)
  * Loki: Correct grammar in DerivedFields.tsx (#28885)
  * Docs: Update list of Enterprise plugins (#28882)
  * Live: update centrifuge and the ChannelHandler api (#28843)
  * Update share-panel.md (#28880)
  * CRLF (#28822)
  * PanelHeader: show streaming indicator (and allow unsubscribe)  (#28682)
  * Docs: Plugin signing docs (#28671)
  * Chore: Fix issues reported by staticcheck; enable stylecheck linter (#28866)
  * Elasticsearch: Filter pipeline aggregations from order by options (#28620)
  * Variables: added __user.email to global variable (#28853)
  * Fix titles case and add missing punctuation marks (#28713)
  * VizLayout: Simple viz layout component for legend placement and scaling (#28820)
  * Chore: Fix staticcheck issues (#28860)
  * Chore: Fix staticcheck issues (#28854)
  * Disable selecting enterprise plugins with no license (#28758)
  * Tempo: fix test data source (#28836)
  * Prometheus: fix missing labels from value (#28842)
  * Chore: Fix issues found by staticcheck (#28802)
  * Chore: Remove dead code (#28664)
  * Units: added support to handle negative fractional numbers. (#28849)
  * Variables: Adds variables inspection (#25214)
  * Marked: Upgrade and always sanitize by default (#28796)
  * Currency: add Philippine peso currency (PHP) (#28823)
  * Alert: Remove z-index on Alert component so that it does not overlay ontop of other content (#28834)
  * increase blob column size for encrypted dashboard data (#28831)
  * Gauge: Improve font size auto sizing (#28797)
  * grafana/toolkit: allow builds with lint warnings (#28810)
  * core and grafana/toolkit: Use latest version of grafana-eslint-conifg (#28816)
  * Icon: Replace font awesome icons where possible (#28757)
  * Remove homelinks panel (#28808)
  * StatPanels: Add new calculation option for percentage difference  (#26369)
  * Dashboard: Add Datetime local (No date if today) option in panel axes' units (#28011)
  * Variables: Adds named capture groups to variable regex (#28625)
  * Panel inspect: Interpolate variables in panel inspect title (#28779)
  * grafana/toolkit: Drop console and debugger statements by default when building plugin with toolkit (#28776)
  * Variables: Fixes URL values for dependent variables (#28798)
  * Graph: Fixes event emit function error (#28795)
  * Adds storybook integrity check to drone config (#28785)
  * Live: improve broadcast semantics and avoid double posting (#28765)
  * Events: Remove unused or unnecessary events  (#28783)
  * Docs: added code comments to frontend packages. (#28784)
  * Plugin Dockerfiles: Upgrade Go, golangci-lint, gcloud SDK (#28767)
  * Dependencies: Update angularjs to 1.8.2 (#28736)
  * EventBus: Introduces new event bus with emitter backward compatible interface (#27564)
  * ColorSchemes: Add new color scheme (#28719)
  * Docs: Add NGINX example for using websockets to Loki (#27998)
  * Docs: Made usage of config/configuration consistent #19270 (#28167)
  * Cloudwatch: Fix issue with field calculation transform not working properly with Cloudwatch data (#28761)
  * grafana/toolkit: Extract CHANGELOG when building plugin (#28773)
  * Drone: Upgrade build pipeline tool (#28769)
  * devenv: Upgrade MSSQL Docker image (#28749)
  * Docs: Add docs for InfoBox component (#28705)
  * Reoeragnization. (#28760)
  * gtime: Add ParseDuration function (#28525)
  * Explore: Remove redundant decodeURI and fix urls (#28697)
  * Dashboard: fix view panel mode for Safari / iOS (#28702)
  * Provisioning: Fixed problem with getting started panel being added to custom home dashboard (#28750)
  * LoginPage: Removed auto-capitalization from the login form (#28716)
  * Plugin page: Fix dom validation warning (#28737)
  * Migration: Remove LegacyForms from dashboard folder permissions (#28564)
  * Dependencies: Remove unused dependency (#28711)
  * AlertRuleList: Add keys to alert rule items (#28735)
  * Chore: Pin nginx base image in nginx proxy Dockerfiles (#28730)
  * Drone: Upgrade build-pipeline tool (#28728)
  * TableFilters: Fixes filtering with field overrides (#28690)
  * Templating: Speeds up certain variable queries for Postgres, MySql and MSSql (#28686)
  * Fix typo in unsigned plugin warning (#28709)
  * Chore: Convert sqlstore annotation test from GoConvey to testify (#28715)
  * updates from https://github.com/grafana/grafana/pull/28679 (#28708)
  * Chore: Add some scenario tests for Explore (#28534)
  * Update latest version to 7.3.1 (#28701)
  * Changelog update - 7.3.1 (#28699)
  * Drone: Don't build on Windows for PRs (#28663)
  * Build: changing docs docker image to prevent setting up frontend devenv. (#28670)
  * Prometheus: Fix copy paste behaving as cut and paste (#28622)
  * Loki: Fix error when some queries return zero results (#28645)
  * Chore: allow higher nodejs version than 12 (#28624)
  * TextPanel: Fixes problems where text panel would show old content (#28643)
  * PanelMenu: Fixes panel submenu not being accessible for panels close to the right edge of the screen (#28666)
  * Cloudwatch: Fix duplicate metric data (#28642)
  * Add info about CSV download for Excel in What's new article (#28661)
  * Docs: Describe pipeline aggregation changes in v7.3 (#28660)
  * Plugins: Fix descendent frontend plugin signature validation (#28638)
  * Docker:  use root group in the custom Dockerfile (#28639)
  * Bump rxjs to 6.6.3 (#28657)
  * StatPanel: Fixed value being under graph and reduced likley hood for white and dark value text mixing (#28641)
  * Table: Fix image cell mode so that it works with value mappings (#28644)
  * Build: support custom build tags (#28609)
  * Plugin signing: Fix copy on signed plugin notice (#28633)
  * Dashboard: Fix navigation from one SoloPanelPage to another one (#28578)
  * CloudWatch: Improve method name, performance optimization (#28632)
  * Developer guide: Update wrt. Windows (#28559)
  * Docs: Update graph panel for tabs (#28552)
  * update latest.json (#28603)
  * Docs: data source insights (#28542)
  * Field config API: add slider editor (#28007)
  * changelog: update for 7.3.0 (#28602)
  * Update uPlot to 1.2.2 and align timestamps config with new uPLot API (#28569)
  * Live: updated the reference to use lazy loaded Monaco in code editor. (#28597)
  * Dashboard: Allow add panel for viewers_can_edit (#28570)
  * Docs: Data source provisioning and sigV4 (#28593)
  * Docs: Additional 7.3 upgrade notes (#28592)
  * CI: Add GCC to Windows Docker image (#28562)
  * CloudWatch Logs queue and websocket support (#28176)
  * Explore/Loki: Update docs and cheatsheet (#28541)
  * Grafana-UI: Add Card component (#28216)
  * AddDatasource: Improve plugin categories (#28584)
  * StatPanel: Fixes BizChart error max: yyy should not be less than min zzz (#28587)
  * docs: a few tweaks for clarity and readability (#28579)
  * API: Reducing some api docs errors (#28575)
  * Grafana-UI: ContextMenu docs (#28508)
  * Short URL: Update last seen at when visiting a short URL (#28565)
  * Fix backend build on Windows (#28557)
  * add value prop (#28561)
  * Plugin signing: UI information (#28469)
  * Use fetch API in InfluxDB data source (#28555)
  * PanelEdit: Prevent the preview pane to be resized further than window height (#28370)
  * Docs: Update generic-oauth.md (#28517)
  * GCS image uploader: Add tests (#28521)
  * Move metrics collector queries to config (#28549)
  * Plugins: Fix plugin URL paths on Windows (#28548)
  * API: add login username in SendLoginLogCommand (#28544)
  * AzureMonitor: Support decimal (as float64) type in analytics/logs (#28480)
  * Auth: Fix SigV4 request verification step for Amazon Elasticsearch Service (#28481)
  * Grafana/ui: auto focus threshold editor input (#28360)
  * Docs: SigV4 What's New and AWS Elasticsearch documentation (#28506)
  * Drone: Upgrade build pipeline tool (#28533)
  * Drone: Refactor version branch pipeline logic (#28531)
  * Drone: Upgrade build-pipeline tool (#28520)
  * Docs: Update field color scheme docs and 7.3 what's new (#28496)
  * Templating: Custom variable edit UI, change text input into textarea  (#28312) (#28322)
  * Currency: Adds Indonesian IDR currency (#28363)
  * Chore: Fix flaky sqlstore annotation test (#28527)
  * Checkbox: Fix component sample typo (#28518)
  * Image uploader: Fix uploading of images to GCS (#26493)
  * OAuth: Support Forward OAuth Identity for backend data source plugins (#27055)
  * Updated documentation style guide  (#28488)
  * Cloud Monitoring: Fix help section for aliases (#28499)
  * Docs: what's new in enterprise 7.3 (#28472)
  * Plugins: Track plugin signing errors and expose them to the frontend (#28219)
  * Elasticsearch: Fix handling of errors when testing data source (#28498)
  * Auth: Should redirect to login when anonymous enabled and URL with different org than anonymous specified  (#28158)
  * Drone: Don't build Windows installer for version branches (#28494)
  * Docs: Grafana Enterprise auditing feature (#28356)
  * Drone: Add version branch pipeline (#28490)
  * Getting Started section rehaul (#28090)
  * Docs: Add survey content (#28446)
  * Docs: Update prometheus.md (#28483)
  * Docs: Add view settings and view stats (#28155)
  * Remove entry from 7.3.0-beta2 Changelog (#28478)
  * Circle: Remove release pipeline (#28474)
  * Update latest.json (#28476)
  * Switch default version to Graphite 1.1 (#28471)
  * Plugin page: update readme icon (#28465)
  * Chore: Update changelog (#28473)
  * Explore: parse time range fix (#28467)
  * Alerting: Log alert warnings for obsolete notifiers when extracting alerts and remove spammy error (#28162)
  * Shorten url: Unification across Explore and Dashboards (#28434)
  * Explore: Support wide data frames (#28393)
  * Docs: updated cmd to build docs locally to generate docs prior to building site. (#28371)
  * Live: support real time measurements (alpha) (#28022)
  * CloudWatch/Athena - valid metrics and dimensions. (#28436)
  * Chore: Use net.JoinHostPort (#28421)
  * Chore: Upgrade grafana-eslint to latest (#28444)
  * Fix cut off icon (#28442)
  * Docs: Add shared (#28411)
  * Loki: Visually distinguish error logs for LogQL2 (#28359)
  * Database; Remove database metric feature flag and update changelog (#28438)
  * TestData: multiple arrow requests should return multiple frames (#28417)
  * Docs: Test survey code (#28437)
  * Docs: improved github action that syncs docs to website (#28277)
  * update latest.json with latest stable version (#28433)
  * 7.2.2 changelog update (#28406)
  * plugins: Don't exit on duplicate plugin (#28390)
  * API: Query database from /api/health endpoint (#28349)
  * Chore: Fix conversion of a 64-bit integer to a lower bit size type uint (#28425)
  * Prometheus: fix parsing of infinite sample values (#28287) (#28288)
  * Chore: Rewrite some tests to use testify (#28420)
  * Plugins: do not remount app plugin on nav change (#28105)
  * App Plugins: Add backend support (#28272)
  * Chore: react hooks eslint fixes in grafana-ui (#28026)
  * ci-e2e: Add Git (#28410)
  * TestData: Remove useEffect that triggeres query on component load (#28321)
  * FieldColor: Remove inverted color scheme (#28408)
  * Chore: Set timezone for tests to non utc. (#28405)
  * Chore: fix jsdoc desc and return (#28383)
  * Docs: Fixing v51 link (#28396)
  * fixes windows crlf warning (#28346)
  * Grafana/ui: pass html attributes to segment (#28316)
  * Alerting: Return proper status code when trying to create alert notification channel with duplicate name or uid (#28043)
  * OAuth: Able to skip auto login (#28357)
  * CloudWatch: Fix custom metrics (#28391)
  * Docs: Adds basic frontend data request concepts (#28253)
  * Instrumentation: Add histogram for request duration (#28364)
  * remove status label from histogram (#28387)
  * OAuth: configurable user name attribute (#28286)
  * Component/NewsPanel: Add rel="noopener" to NewsPanel links (#28379)
  * Webpack: Split out unicons and bizcharts (#28374)
  * Explore: Fix date formatting in url for trace logs link (#28381)
  * Docs: Add activate-license (#28156)
  * Instrumentation: Add counters and histograms for database queries (#28236)
  * Docs: Make tables formatting more consistent (#28164)
  * CloudWatch: Adding support for additional Amazon CloudFront metrics (#28378)
  * Add unique ids to query editor fields (#28376)
  * Plugins: Compose filesystem paths with filepath.Join (#28375)
  * Explore: Minor tweaks to exemplars marble (#28366)
  * Instrumentation: Adds environment_info metric  (#28355)
  * AzureMonitor: Fix capitalization of NetApp 'volumes' namespace (#28369)
  * ColorSchemes: Adds more color schemes and text colors that depend on the background (#28305)
  * Automation: Update backport github action trigger (#28352)
  * Dashboard links: Places drop down list so it's always visible (#28330)
  * Docs: Add missing records from grafana-ui 7.2.1 CHANGELOG (#28302)
  * Templating: Replace all '$tag' in tag values query (#28343)
  * Docs: Add docs for valuepicker (#28327)
  * Git: Create .gitattributes for windows line endings (#28340)
  * Update auth-proxy.md (#28339)
  * area/grafana/toolkit: update e2e docker image (#28335)
  * AlertingNG: remove warn/crit from eval prototype (#28334)
  * Automation: Tweaks to more info message (#28332)
  * Loki: Run instant query only when doing metric query (#28325)
  * SAML: IdP-initiated SSO docs (#28280)
  * IssueTriage: Needs more info automation and messages (#28137)
  * GraphNG: Use AxisSide enum (#28320)
  * BackendSrv: Fixes queue countdown when unsubscribe is before response (#28323)
  * Automation: Add backport github action (#28318)
  * Build(deps): Bump http-proxy from 1.18.0 to 1.18.1 (#27507)
  * Bump handlebars from 4.4.3 to 4.7.6 (#27416)
  * Bump tree-kill from 1.2.1 to 1.2.2 (#27405)
  * Loki: Base maxDataPoints limits on query type (#28298)
  * Explore: respect min_refresh_interval (#27988)
  * Drone: Use ${DRONE_TAG} in release pipelines, since it should work (#28299)
  * Graph NG: fix toggling queries and extract Graph component from graph3 panel (#28290)
  * fix: for graph size not taking up full height or width
  * should only ignore the file in the grafana mixin root folder (#28306)
  * Drone: Fix grafana-mixin linting (#28308)
  * SQLStore: Run tests as integration tests (#28265)
  * Chore: Add cloud-middleware as code owners (#28310)
  * API: Fix short URLs (#28300)
  * CloudWatch: Add EC2CapacityReservations Namespace (#28309)
  * Jaeger: timeline collapser to show icons (#28284)
  * update latest.json with latest beta version (#28293)
  * Update changelog (#28292)
  * Docs : - Added period (#28260)
  * Add monitoring mixing for Grafana (#28285)
  * Chore: Update package.json (#28291)
  * Drone: Fix enterprise release pipeline (#28289)
  * Alerting: Append appSubUrl to back button on channel form (#28282)
- Rework package Makefile &amp; README now that Grunt is gone</changelog>
  <changelog author="tserong@suse.com" date="1613995200">- Update to version 7.4.2:
  * Make Datetime local (No date if today) working (#31274) (#31275)
  * "Release: Updated versions in package to 7.4.2" (#31272)
  * [v7.4.x] Chore: grafana-toolkit uses grafana-ui and grafana-data workspaces (#31269)
  * Snapshots: Disallow anonymous user to create snapshots (#31263) (#31266)
  * only update usagestats every 30min (#31131) (#31262)
  * Prometheus: Fix enabling of disabled queries when editing in dashboard (#31055) (#31248)
  * CloudWatch: Ensure empty query row errors are not passed to the panel (#31172) (#31245)
  * StatPanels: Fixes to palette color scheme is not cleared when loading panel (#31126) (#31246)
  * QueryEditors: Fixes issue that happens after moving queries then editing would update other queries (#31193) (#31244)
  * LibraryPanels: Disconnect before connect during dashboard save (#31235) (#31238)
  * SqlDataSources: Fixes the Show Generated SQL button in query editors (#31236) (#31239)
  * Variables: Adds back default option for data source variable (#31208) (#31232)
  * IPv6: Support host address configured with enclosing square brackets (#31226) (#31228)
  * Postgres: Fix timeGroup macro converts long intervals to invalid numbers when TimescaleDB is enabled (#31179) (#31224)
  * Remove last synchronisation field from LDAP debug view (#30984) (#31221)
  * [v7.4.x]: Sync drone config from master to stable release branch (#31213)
  * DataSourceSrv: Filter out non queryable data sources by default (#31144) (#31214)
  * Alerting: Fix modal text for deleting obsolete notifier (#31171) (#31209)
  * Variables: Fixes missing empty elements from regex filters (#31156) (#31201)
  * DashboardLinks: Fixes links always cause full page reload (#31178) (#31181)
  * DashboardListPanel: Fixes issue with folder picker always showing All and using old form styles (#31160) (#31162)
  * Permissions: Fix team and role permissions on folders/dashboards not displayed for non Grafana Admin users (#31132) (#31176)
  * Prometheus: Multiply exemplars timestamp to follow api change (#31143) (#31170)
- Added add-gotest-module.patch to fix "inconsistent vendoring" build failure</changelog>
  <changelog author="ecsos@opensuse.org" date="1618228800">- Update to version 7.5.3:
  * "Release: Updated versions in package to 7.5.3" (#32745)
  * FolderPicker: Prevent dropdown menu from disappearing off screen (#32603) (#32741)
  * Loki: Remove empty annotations tags (#32359) (#32490)
  * SingleStat: fix wrong call to getDataLinkUIModel (#32721) (#32739)
  * Prometheus: Fix instant query to run two times when exemplars enabled (#32508) (#32726)
  * Elasticsearch: Fix bucket script variable duplication in UI (#32705) (#32714)
  * Variables: Confirms selection before opening new picker (#32586) (#32710)
  * CloudWarch: Fix service quotas link (#32686) (#32689)
  * Configuration: Prevent browser hanging / crashing with large number of org users (#32546) (#32598)
  * chore: bump execa to v2.1.0 (#32543) (#32592)
  * Explore: Fix bug where navigating to explore would result in wrong query and datasource to be shown (#32558)
  * Fix broken gtime tests (#32582) (#32587)
  * resolve conflicts (#32567)
  * gtime: Make ParseInterval deterministic (#32539) (#32560)
  * Dashboard: No longer includes default datasource when externally exporting dashboard with row (#32494) (#32535)
  * TextboxVariable: Limits the length of the preview value (#32472) (#32530)
  * AdHocVariable: Adds default data source (#32470) (#32476)
  * Variables: Fixes Unsupported data format error for null values (#32480) (#32487)
  * Prometheus: align exemplars check to latest api change (#32513) (#32515)
  * "Release: Updated versions in package to 7.5.2" (#32502)
  * SigV4: Add support EC2 IAM role auth and possibility to toggle auth providers  (#32444) (#32488)
  * Set spanNulls to default (#32471) (#32486)
  * Graph: Fix setting right y-axis when standard option unit is configured (#32426) (#32442)
  * API: Return 409 on datasource version conflict (#32425) (#32433)
  * API: Return 400 on invalid Annotation requests (#32429) (#32431)
  * Variables: Fixes problem with data source variable when default ds is selected (#32384) (#32424)
  * Table: Fixes so links work for image cells (#32370) (#32410)
  * Variables: Fixes error when manually non-matching entering custom value in variable input/picker (#32390) (#32394)
  * DashboardQueryEditor: Run query after selecting source panel (#32383) (#32395)
  * API: Datasource endpoint should return 400 bad request if id and orgId is invalid (#32392) (#32397)
  * "Release: Updated versions in package to 7.5.1" (#32362)
  * MSSQL: Upgrade go-mssqldb (#32347) (#32361)
  * GraphNG: Fix tooltip displaying wrong or no data (#32312) (#32348)
  * "Release: Updated versions in package to 7.5.0" (#32308)
  * Loki: Fix text search in Label browser (#32293) (#32306)
  * Explore: Show all dataFrames in data tab in Inspector (#32161) (#32299)
  * PieChartV2: Add migration from old piechart (#32259) (#32291)
  * LibraryPanels: Adds Type and Description to DB (#32258) (#32288)
  * LibraryPanels: Prevents deletion of connected library panels (#32277) (#32284)
  * Library Panels: Add "Discard" button to panel save modal (#31647) (#32281)
  * LibraryPanels: Changes to non readonly reducer (#32193) (#32200)
  * Notifications: InfluxDB - Fix regex to include metrics with hyphen in aliases (#32224) (#32262)
  * SSE/InfluxDB: Change InfluxQL to work with server side expressions (#31691) (#32102)
  * DashboardSettings: Fixes issue with tags list not updating when changes are made (#32241) (#32247)
  * Logs: If log message missing, use empty string (#32080) (#32243)
  * CloudWatch: Use latest version of aws sdk (#32217) (#32223)
  * Release: Updated versions in package to 7.5.0-beta.2 (#32158)
  * HttpServer: Make read timeout configurable but disabled by default (#31575) (#32154)
  * GraphNG: Ignore string fields when building data for uPlot in GraphNG (#32150) (#32151)
  * Fix loading timezone info on windows (#32029) (#32149)
  * SQLStore: Close session in withDbSession (#31775) (#32108)
  * Remove datalink template suggestions for accessing specific fields when there are multiple dataframes. (#32057) (#32148)
  * GraphNG: make sure dataset and config are in sync when initializing and re-initializing uPlot (#32106) (#32125)
  * MixedDataSource: Name is updated when data source variable changes (#32090) (#32144)
  * Backport 32005 to v7.5.x #32128 (#32130)
  * Loki: Label browser UI updates (#31737) (#32119)
  * ValueMappings: Fixes value 0 not being mapped (#31924) (#31929)
  * GraphNG: Fix tooltip series color for multi data frame scenario (#32098) (#32103)
  * LibraryPanels: Improves the Get All experience (#32028) (#32093)
  * Grafana/ui: display all selected levels for selected value when searching (#32030) (#32032)
  * Exemplars: always query exemplars (#31673) (#32024)
  * [v7.5.x] TimePicker: Fixes hidden time picker shown in kiosk TV mode (#32055)
  * Chore: Collect elasticsearch version usage stats (#31787) (#32063)
  * Chore: Tidy up Go deps (#32053)
  * GraphNG: Fix PlotLegend field display name being outdated (#32064) (#32066)
  * Data proxy: Fix encoded characters in URL path should be proxied encoded (#30597) (#32060)
  * [v7.5.x] Auth: Allow soft token revocation (#32037)
  * Snapshots: Fix usage of sign in link from the snapshot page (#31986) (#32036)
  * Make master green (#32011) (#32015)
  * Query editor: avoid avoiding word wrap on query editor components (#31949) (#31982)
  * Variables: Fixes filtering in picker with null items (#31979) (#31995)
  * TooltipContainer - use resize observer instead of getClientBoundingRect (#31937) (#32003)
  * Loki: Fix autocomplete when re-editing Loki label values (#31828) (#31987)
  * Loki: Fix type errors in language_provider (#31902) (#31945)
  * PanelInspect: Interpolates variables in CSV file name (#31936) (#31977)
  * Cloudwatch: use shared library for aws auth (#29550) (#31946)
  * Tooltip: partial perf improvement (#31774) (#31837) (#31957)
  * Backport 31913 to v7.5.x (#31955)
  * Grafana/ui: fix searchable options for Cascader with options update (#31906) (#31938)
  * Variables: Do not reset description on variable type change (#31933) (#31939)
  * [v7.5.x] AnnotationList: Adds spacing to UI  (#31888) (#31894)
  * Elasticseach: Support histogram fields (#29079) (#31914)
  * Chore: upgrade eslint and fork-ts-checker-webpack-plugin (#31854) (#31896)
  * Update scripts and Dockerfiles to use Go 1.16.1 (#31881) (#31891)
  * Templating: use dashboard timerange when variables are set to refresh 'On Dashboard Load' (#31721) (#31801)
  * [v7.5.x] Tempo: Add test for backend data source (#31835) (#31882)
  * Run go mod tidy to update go.mod and go.sum (#31859)
  * Grafana/ui: display all selected levels for Cascader (#31729) (#31862)
  * CloudWatch: Consume the grafana/aws-sdk (#31807) (#31861)
  * Cloudwatch: ListMetrics API page limit (#31788) (#31851)
  * Remove invalid attribute (#31848) (#31850)
  * CloudWatch: Restrict auth provider and assume role usage according to? (#31845)
  * CloudWatch: Add support for EC2 IAM role (#31804) (#31841)
  * Loki, Prometheus: Change the placement for query type explanation (#31784) (#31819)
  * Variables: Improves inspection performance and unknown filtering (#31811) (#31813)
  * Change piechart plugin state to beta (#31797) (#31798)
  * ReduceTransform: Include series with numeric string  names (#31763) (#31794)
  * Annotations: Make the annotation clean up batch size configurable (#31487) (#31769)
  * Fix escaping in ANSI and dynamic button removal (#31731) (#31767)
  * DataLinks: Bring back single click links for Stat, Gauge and BarGauge panel (#31692) (#31718)
  * log skipped, performed and duration for migrations (#31722) (#31754)
  * Search: Make items more compact (#31734) (#31750)
  * loki_datasource: add documentation to label_format and line_format (#31710) (#31746)
  * Tempo: Convert tempo to backend data source2 (#31733)
  * Elasticsearch: Fix script fields in query editor (#31681) (#31727)
  * Elasticsearch: revert to isoWeek when resolving weekly indices (#31709) (#31717)
  * Admin: Keeps expired api keys visible in table after delete (#31636) (#31675)
  * Tempo: set authentication header properly (#31699) (#31701)
  * Tempo: convert to backend data source (#31618) (#31695)
  * Update package.json (#31672)
  * Release: Bump version to 7.5.0-beta.1 (#31664)
  * Fix whatsNewUrl version to 7.5 (#31666)
  * Chore: add alias for what's new 7.5 (#31669)
  * Docs: Update doc for PostgreSQL authentication (#31434)
  * Docs: document report template variables (#31637)
  * AzureMonitor: Add deprecation message for App Insights/Insights Analytics (#30633)
  * Color: Fixes issue where colors where reset to gray when switch panels (#31611)
  * Live: Use pure WebSocket transport (#31630)
  * Docs: Fix broken image link (#31661)
  * Docs: Add Whats new in 7.5 (#31659)
  * Docs: Fix links for 7.5 (#31658)
  * Update enterprise-configuration.md (#31656)
  * Explore/Logs: Escaping of incorrectly escaped log lines (#31352)
  * Tracing: Small improvements to trace types (#31646)
  * Update _index.md (#31645)
  * AlertingNG: code refactoring (#30787)
  * Remove pkill gpg-agent (#31169)
  * Remove format for plugin routes (#31633)
  * Library Panels: Change unsaved change detection logic (#31477)
  * CloudWatch: Added AWS Timestream Metrics and Dimensions (#31624)
  * add new metrics and dimensions (#31595)
  * fix devenv dashboard content typo (#31583)
  * DashList: Sort starred and searched dashboard alphabetically (#31605)
  * Docs: Update whats-new-in-v7-4.md (#31612)
  * SSE: Add "Classic Condition" on backend (#31511)
  * InfluxDB: Improve maxDataPoints error-message in Flux-mode, raise limits (#31259)
  * Alerting: PagerDuty: adding current state to the payload (#29270)
  * devenv: Fix typo (#31589)
  * Loki: Label browser (#30351)
  * LibraryPanels: No save modal when user is on same dashboard (#31606)
  * Bug: adding resolution for `react-use-measure` to prevent plugin tests from failing. (#31603)
  * Update node-graph.md (#31571)
  * test: pass Cypress options objects into selector wrappers (#31567)
  * Loki: Add support for alerting (#31424)
  * Tracing: Specify type of the data frame that is expected for TraceView (#31465)
  * LibraryPanels: Adds version column (#31590)
  * PieChart: Add color changing options to pie chart (#31588)
  * Explore: keep enabled/disabled state in angular based QueryEditors correctly (#31558)
  * Bring back correct legend sizing afer PlotLegend refactor (#31582)
  * Alerting: Fix bug in Discord for when name for metric value is absent (#31257)
  * LibraryPanels: Deletes library panels during folder deletion (#31572)
  * chore: bump lodash to 4.17.21 (#31549)
  * Elasticsearch: Fix impossibility to perform non-logs queries after importing queries from loki or prometheus in explore (#31518)
  * TestData: Fixes never ending annotations scenario (#31573)
  * CloudWatch: Added AWS Network Firewall metrics and dimensions (#31498)
  * propagate plugin unavailable message to UI (#31560)
  * ConfirmButton: updates story from knobs to controls (#31476)
  * Loki: Refactor line limit to use grafana/ui component (#31509)
  * LibraryPanels: Adds folder checks and permissions (#31473)
  * Add guide on custom option editors (#31254)
  * PieChart: Update text color and minor changes (#31546)
  * Grafana-data: bump markedjs to v2.x to resolve vulnerability (#31036)
  * Chore(deps): Bump google.golang.org/api from 0.39.0 to 0.40.0 (#31210)
  * PieChart: Improve piechart legend and options (#31446)
  * Chore(deps): Bump google.golang.org/grpc from 1.35.0 to 1.36.0 (#31541)
  * Chore(deps): Bump github.com/aws/aws-sdk-go from 1.37.7 to 1.37.20 (#31538)
  * Chore(deps): Bump github.com/prometheus/common from 0.17.0 to 0.18.0 (#31539)
  * Add multiselect options ui (#31501)
  * Profile: Fixes profile preferences being accessible when anonymous access was enabled (#31516)
  * Variables: Fixes error with: cannot read property length of undefined (#31458)
  * Explore: Show ANSI colored logs in logs context (#31510)
  * LogsPanel: Show all received logs  (#31505)
  * AddPanel: Design polish  (#31484)
  * TimeSeriesPanel: Remove unnecessary margin from legend  (#31467)
  * influxdb: flux: handle is-hidden (#31324)
  * Graph: Fix tooltip not showing when close to the edge of viewport  (#31493)
  * FolderPicker: Remove useNewForms from FolderPicker (#31485)
  * Add reportVariables feature toggle (#31469)
  * Grafana datasource: support multiple targets (#31495)
  * Update license-restrictions.md (#31488)
  * Docs: Derived fields links in logs detail view (#31482)
  * Docs: Add new data source links to Enterprise page (#31480)
  * Convert annotations to dataframes (#31400)
  * ReleaseNotes: Updated changelog and release notes for v7.4.2 (#31475)
  * GrafanaUI: Fixes typescript error for missing css prop (#31479)
  * Login: handle custom token creation error messages (#31283)
  * Library Panels: Don't list current panel in available panels list (#31472)
  * DashboardSettings: Migrate Link Settings to React (#31150)
  * Frontend changes for library panels feature (#30653)
  * Alerting notifier SensuGo: improvements in default message (#31428)
  * AppPlugins: Options to disable showing config page in nav (#31354)
  * add aws config (#31464)
  * Heatmap: Fix missing/wrong value in heatmap legend (#31430)
  * Chore: Fixes small typos (#31461)
  * Graphite/SSE: update graphite to work with server side expressions (#31455)
  * update the lastest version to 7.4.3 (#31457)
  * ReleaseNotes: Updated changelog and release notes for 7.4.3 (#31454)
  * AWS: Add aws plugin configuration (#31312)
  * Revert ""Release: Updated versions in package to 7.4.3" (#31444)" (#31452)
  * Remove UserSyncInfo.tsx (#31450)
  * Elasticsearch: Add word highlighting to search results (#30293)
  * Chore: Fix eslint react hook warnings in grafana-ui (#31092)
  * CloudWatch: Make it possible to specify custom api endpoint (#31402)
  * Chore: fixed incorrect naming for disable settings (#31448)
  * TraceViewer: Fix show log marker in spanbar (#30742)
  * LibraryPanels: Adds permissions to getAllHandler (#31416)
  * NamedColorsPalette: updates story from knobs to controls (#31443)
  * "Release: Updated versions in package to 7.4.3" (#31444)
  * ColorPicker: updates story from knobs to controls (#31429)
  * Streaming: Fixes an issue with time series panel and streaming data source when scrolling back from being out of view (#31431)
  * ClipboardButton: updates story from knobs to controls (#31422)
  * we should never log unhashed tokens (#31432)
  * CI: Upgrade Dockerfiles wrt. Go, Node, Debian (#31407)
  * Elasticsearch: Fix query initialization logic &amp; query transformation from Promethous/Loki (#31322)
  * Postgres: allow providing TLS/SSL certificates as text in addition to file paths (#30353)
  * CloudWatch: Added AWS Ground Station metrics and dimensions (#31362)
  * TraceViewer: Fix trace to logs icon to show in right pane (#31414)
  * add hg team as migrations code owners (#31420)
  * Remove tidy-check script (#31423)
  * InfluxDB: handle columns named "table" (#30985)
  * Prometheus: Use configured HTTP method for /series and /labels endpoints (#31401)
  * Devenv: Add gdev-influxdb2 data source (#31250)
  * Update grabpl from 0.5.38 to 0.5.42 version (#31419)
  * Move NOOP_CONTROL to storybook utils and change to a standalone file (#31421)
  * remove squadcast details from docs (#31413)
  * Add new Cloudwatch AWS/DDoSProtection metrics and dimensions (#31297)
  * Logging: add frontend logging helpers to @grafana/runtime package (#30482)
  * CallToActionCard: updates story from knobs to controls (#31393)
  * Add eu-south-1 cloudwatch region, closes #31197 (#31198)
  * Chore: Upgrade eslint packages (#31408)
  * Cascader: updates story from knobs to controls (#31399)
  * addressed issues 28763 and 30314. (#31404)
  * Added section Query a time series database by id (#31337)
  * Prometheus: Change default httpMethod for new instances to POST (#31292)
  * Data source list: Use Card component (#31326)
  * Chore: Remove gotest.tools dependency (#31391)
  * Revert "StoryBook: Introduces Grafana Controls (#31351)" (#31388)
  * Chore(deps): Bump github.com/prometheus/common from 0.15.0 to 0.17.0 (#31387)
  * AdHocVariables: Fixes crash when values are stored as numbers (#31382)
  * Chore(deps): Bump github.com/golang/mock from 1.4.4 to 1.5.0 (#31379)
  * Chore: Fix strict errors, down to 416 (#31365)
  * Chore(deps): Bump github.com/getsentry/sentry-go from 0.9.0 to 0.10.0 (#31378)
  * StoryBook: Introduces Grafana Controls (#31351)
  * ReleaseNotes: Updated changelog and release notes for 7.4.2 (#31313)
  * Theming: Support for runtime theme switching and hooks for custom themes (#31301)
  * Devenv: Remove old-versioned loki blocks and update prometheus2 block  (#31282)
  * Zipkin: Show success on test data source (#30829)
  * Update grot template (needs more info) (#31350)
  * DatasourceSrv: Fix instance retrieval when datasource variable value set to "default" (#31347)
  * TimeSeriesPanel: Fixes overlapping time axis ticks (#31332)
  * Grafana/UI: Add basic legend to the PieChart (#31278)
  * SAML: single logout only enabled in enterprise (#31325)
  * QueryEditor: handle query.hide changes in angular based query-editors (#31336)
  * DashboardLinks: Fixes another issue where dashboard links cause full page reload (#31334)
  * LibraryPanels: Syncs panel title with name (#31311)
  * Chore: Upgrade golangci-lint (#31330)
  * Add info to docs about concurrent session limits (#31333)
  * Table: Fixes issue with fixed min and auto max with bar gauge cell (#31316)
  * BarGuage: updates story from knobs to controls (#31223)
  * Docs: Clarifies how to add Key/Value pairs (#31303)
  * Usagestats: Exclude folders from total dashboard count (#31320)
  * ButtonCascader: updates story from knobs to controls (#31288)
  * test: allow check for Table as well as Graph for Explore e2e flow (#31290)
  * Grafana-UI: Update tooltip type (#31310)
  * fix 7.4.2 release note (#31299)
  * Add `--tries 3` arg when triggering e2e-tests upon releasing (#31285)
  * Chore: reduce strict errors for variables (#31241)
  * update latest release version (#31296)
  * ReleaseNotes: Updated changelog and release notes for 7.4.2 (#31291)
  * Correct name of Discord notifier tests (#31277)
  * Docs: Clarifies custom date formats for variables (#31271)
  * BigValue: updates story from knobs to controls (#31240)
  * Docs: Annotations update (#31194)
  * Introduce functions for interacting with library panels API (#30993)
  * Search: display sort metadata (#31167)
  * Folders: Editors should be able to edit name and delete folders (#31242)
  * Make Datetime local (No date if today) working (#31274)
  * UsageStats: Purpose named variables (#31264)
  * Snapshots: Disallow anonymous user to create snapshots (#31263)
  * only update usagestats every 30min (#31131)
  * Chore: grafana-toolkit uses grafana-ui and grafana-data workspaces (#30701)
  * Grafana-UI: Add id to Select to make it easier to test (#31230)
  * Prometheus: Fix enabling of disabled queries when editing in dashboard (#31055)
  * UI/Card: Fix handling of 'onClick' callback (#31225)
  * Loki: Add line limit for annotations (#31183)
  * Remove deprecated and breaking loki config field (#31227)
  * SqlDataSources: Fixes the Show Generated SQL button in query editors (#31236)
  * LibraryPanels: Disconnect before connect during dashboard save (#31235)
  * Disable Change Password for OAuth users (#27886)
  * TagsInput: Design update and component refactor (#31163)
  * Variables: Adds back default option for data source variable (#31208)
  * IPv6: Support host address configured with enclosing square brackets (#31226)
  * Postgres: Fix timeGroup macro converts long intervals to invalid numbers when TimescaleDB is enabled (#31179)
  * GraphNG: refactor core to class component (#30941)
  * Remove last synchronisation field from LDAP debug view (#30984)
  * Chore: Upgrade grafana-plugin-sdk-go to v0.88.0 (#30975)
  * Graph: Make axes unit option work even when field option unit is set (#31205)
  * AlertingNG:  Test definition  (#30886)
  * Docs: Update Influx config options (#31146)
  * WIP: Skip this call when we skip migrations (#31216)
  * use 0.1.0 (#31215)
  * DataSourceSrv: Filter out non queryable data sources by default (#31144)
  * QueryEditors: Fixes issue that happens after moving queries then editing would update other queries (#31193)
  * Chore: report eslint no-explicit-any errors to metrics (#31182)
  * Chore(deps): Bump cloud.google.com/go/storage from 1.12.0 to 1.13.0 (#31211)
  * Chore(deps): Bump xorm.io/xorm from 0.8.1 to 0.8.2 (#30773)
  * Alerting: Fix modal text for deleting obsolete notifier (#31171)
  * Chore(deps): Bump github.com/linkedin/goavro/v2 from 2.9.7 to 2.10.0 (#31204)
  * Variables: Fixes missing empty elements from regex filters (#31156)
  * StatPanels: Fixes to palette color scheme is not cleared when loading panel (#31126)
  * Fixed the typo. (#31189)
  * Docs: Rewrite preferences docs (#31154)
  * Explore/Refactor: Simplify URL handling (#29173)
  * DashboardLinks: Fixes links always cause full page reload (#31178)
  * Replace PR with Commit truncated hash when build fails (#31177)
  * Alert: update story to use controls (#31145)
  * Permissions: Fix team and role permissions on folders/dashboards not displayed for non Grafana Admin users (#31132)
  * CloudWatch: Ensure empty query row errors are not passed to the panel (#31172)
  * Update prometheus.md (#31173)
  * Variables: Extend option pickers to accept custom onChange callback (#30913)
  * Prometheus: Multiply exemplars timestamp to follow api change (#31143)
  * DashboardListPanel: Fixes issue with folder picker always showing All and using old form styles (#31160)
  * Add author name and pr number in drone pipeline notifications (#31124)
  * Prometheus: Add documentation for ad-hoc filters (#31122)
  * DataSourceSettings: Fixes add header button, it should not trigger a save &amp; test action (#31135)
  * Alerting: Fix so that sending an alert with the Alertmanager notifier doesn't fail when one of multiple configured URL's are down (#31079)
  * Chore: Update latest.json (#31139)
  * Docs: add 7.4.1 relese notes link (#31137)
  * PieChart: Progress on new core pie chart  (#28020)
  * ReleaseNotes: Updated changelog and release notes for 7.4.1 (#31133)
  * Eslint: no-duplicate-imports rule (bump grafana-eslint-config) (#30989)
  * Transforms: Fixes Outer join issue with duplicate field names not getting the same unique field names as before  (#31121)
  * MuxWriter: Handle error for already closed file (#31119)
  * Logging: sourcemap transform asset urls from CDN in logged stacktraces (#31115)
  * Search: add sort information in dashboard results (#30609)
  * area/grafana/e2e: ginstall should pull version specified (#31056)
  * Exemplars: Change CTA style (#30880)
  * Influx: Make max series limit configurable and show the limiting message if applied (#31025)
  * Docs: request security (#30937)
  * update configurePanel for 7.4.0 changes (#31093)
  * Elasticsearch: fix log row context erroring out (#31088)
  * Prometheus: Fix issues with ad-hoc filters (#30931)
  * LogsPanel: Add deduplication option for logs (#31019)
  * Drone: Make sure CDN upload is ok before pushing docker images (#31075)
  * PluginManager: Remove some global state (#31081)
  * test: update addDashboard flow for v7.4.0 changes (#31059)
  * Transformations: Fixed typo in FilterByValue transformer description. (#31078)
  * Docs: Group id should be 0 instead of 1 in Docker upgrade notes (#31074)
  * Usage stats: Adds source/distributor setting (#31039)
  * CDN: Add CDN upload step to enterprise and release pipelines (#31058)
  * Chore: Replace native select with grafana ui select  (#31030)
  * Docs: Update json-model.md (#31066)
  * Docs: Update whats-new-in-v7-4.md (#31069)
  * Added hyperlinks to Graphite documentation (#31064)
  * DashboardSettings: Update to new form styles (#31022)
  * CDN: Fixing drone CI config (#31052)
  * convert path to posix by default (#31045)
  * DashboardLinks: Fixes crash when link has no title (#31008)
  * Alerting: Fixes so notification channels are properly deleted (#31040)
  * Explore: Remove emotion error when displaying logs (#31026)
  * Elasticsearch: Fix alias field value not being shown in query editor (#30992)
  * CDN: Adds uppload to CDN step to drone CI (#30879)
  * Improved glossary (#31004)
  * BarGauge: Improvements to value sizing and table inner width calculations  (#30990)
  * Drone: Fix deployment image (#31027)
  * ColorPicker: migrated styles from sass to emotion (#30909)
  * Dashboard: Migrate general settings to react (#30914)
  * Chore(deps): Bump github.com/jung-kurt/gofpdf from 1.10.1 to 1.16.2 (#30586)
  * Chore(deps): Bump github.com/aws/aws-sdk-go from 1.36.31 to 1.37.7 (#31018)
  * Prometheus: Min step defaults to seconds when no unit is set to prevent errors when running alerts. (#30966)
  * Chore(deps): Bump github.com/magefile/mage from 1.10.0 to 1.11.0 (#31017)
  * Chore(deps): Bump github.com/grpc-ecosystem/go-grpc-middleware (#31013)
  * Graph: Fixes so graph is shown for non numeric time values (#30972)
  * CloudMonitoring: Prevent resource type variable function from crashing (#30901)
  * Chore(deps): Bump google.golang.org/api from 0.33.0 to 0.39.0 (#30971)
  * Build: Releases e2e and e2e-selectors too (#31006)
  * TextPanel: Fixes so panel title is updated when variables change (#30884)
  * Docs: Update configuration.md (login_maximum_inactive_lifetime_duration, login_maximum_lifetime_duration) (#31000)
  * instrumentation: make the first database histogram bucket smaller (#30995)
  * Grafana/UI: Remove DismissableFeatureInfoBox and replace with LocalSt? (#30988)
  * StatPanel: Fixes issue formatting date values using unit option (#30979)
  * Chore(deps): Bump actions/cache from v2 to v2.1.4 (#30973)
  * Units: Fixes formatting of duration units (#30982)
  * Elasticsearch: Show Size setting for raw_data metric (#30980)
  * Alerts: Dedupe alerts so that we do not fill the screen with the same alert messsage (#30935)
  * make sure service and slo display name is passed to segment comp (#30900)
  * assign changes in cloud datasources to the new cloud datasources team (#30645)
  * Table: Updates devenv test dashboard after change to TestData Randrom Table response (#30927)
  * Theme: Use higher order theme color variables rather then is light/dark logic (#30939)
  * Docs: Add alias for what's new in 7.4 (#30945)
  * e2e: extends selector factory to plugins (#30932)
  * Chore: Upgrade docker build image (#30820)
  * Docs: updated developer guide (#29978)
  * Alerts: Update Alert storybook to show more states (#30908)
  * Variables: Adds queryparam formatting option (#30858)
  * Chore: pad unknown values with undefined (#30808)
  * Transformers: add search to transform selection (#30854)
  * Exemplars: change api to reflect latest changes (#30910)
  * docs: use selinux relabelling on docker containers (#27685)
  * Docs: Fix bad image path for alert notification template (#30911)
  * Make value mappings correctly interpret numeric-like strings (#30893)
  * Chore: Update latest.json (#30905)
  * Docs: Update whats-new-in-v7-4.md (#30882)
  * Dashboard: Ignore changes to dashboard when the user session expires (#30897)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0 (#30902)
  * test: add support for timeout to be passed in for addDatasource (#30736)
  * increase page size and make sure the cache supports query params (#30892)
  * DataSourceSettings: Adds info box and link to Grafana Cloud (#30891)
  * OAuth: custom username docs (#28400)
  * Panels: Remove value mapping of values that have been formatted #26763 (#30868)
  * Alerting: Fixes alert panel header icon not showing (#30840)
  * AlertingNG: Edit Alert Definition (#30676)
  * Logging: sourcemap support for frontend stacktraces (#30590)
  * Added "Restart Grafana" topic. (#30844)
  * Docs: Org, Team, and User Admin (#30756)
  * bump grabpl version to 0.5.36 (#30874)
  * Plugins: Requests validator (#30445)
  * Docs: Update whats-new-in-v7-4.md (#30876)
  * Docs: Add server view folder (#30849)
  * Fixed image name and path  (#30871)
  * Grafana-ui: fixes closing modals with escape key (#30745)
  * InfluxDB: Add http configuration when selecting InfluxDB v2 flavor  (#30827)
  * TestData: Fixes issue with for ever loading state when all queries are hidden (#30861)
  * Chart/Tooltip: refactored style declaration (#30824)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0-beta1 (#30853)
  * Grafana-ui: fixes no data message in Table component (#30821)
  * grafana/ui: Update pagination component for large number of pages (#30151)
  * Alerting: Customise OK notification priorities for Pushover notifier (#30169)
  * DashboardLinks: Support variable expression in to tooltip - Issue #30409 (#30569)
  * Chore: Remove panelTime.html, closes #30097 (#30842)
  * Docs: Time series panel, bar alignment docs (#30780)
  * Chore: add more docs annotations (#30847)
  * Transforms: allow boolean in field calculations (#30802)
  * Prometheus: Add tooltip to explain possibility to use patterns in text and title fields in annotations (#30825)
  * Update prometheus.md with image link fix (#30833)
  * BarChart: inside-align strokes, upgrade uPlot to 1.6.4. (#30806)
  * Update license-expiration.md (#30839)
  * Explore rewrite (#30804)
  * Prometheus: Set type of labels to string (#30831)
  * GrafanaUI: Add a way to persistently close InfoBox (#30716)
  * Fix typo in transformer registry (#30712)
  * Elasticsearch: Display errors with text responses (#30122)
  * CDN: Fixes cdn path when Grafana is under sub path (#30822)
  * TraceViewer: Fix lazy loading (#30700)
  * FormField: migrated sass styling to emotion (#30392)
  * AlertingNG: change API permissions (#30781)
  * Variables: Clears drop down state when leaving dashboard (#30810)
  * Grafana-UI: Add story/docs for ErrorBoundary (#30304)
  * Add missing callback dependency (#30797)
  * PanelLibrary: Adds library panel meta information to dashboard json (#30770)
  * Chore(deps): Bump gonum.org/v1/gonum from 0.6.0 to 0.8.2 (#30343)
  * Chore(deps): Bump gopkg.in/yaml.v2 from 2.3.0 to 2.4.0 (#30771)
  * GraphNG: improve behavior when switching between solid/dash/dots (#30796)
  * Chore(deps): Bump github.com/hashicorp/go-hclog from 0.14.1 to 0.15.0 (#30778)
  * Add width for Variable Editors (#30791)
  * Chore: Remove warning when calling resource (#30752)
  * Auth: Use SigV4 lib from grafana-aws-sdk  (#30713)
  * Panels: Fixes so panels are refreshed when scrolling past them fast (#30784)
  * GraphNG: add bar alignment option (#30499)
  * Expressions: Measure total transformation requests and elapsed time (#30514)
  * Menu: Mark menu components as internal (#30740)
  * TableInputCSV: migrated styles from sass to emotion (#30554)
  * CDN: Fix passing correct prefix to GetContentDeliveryURL (#30777)
  * Chore(deps): Bump gopkg.in/ini.v1 from 1.57.0 to 1.62.0 (#30772)
  * CDN: Adds support for serving assets over a CDN (#30691)
  * PanelEdit: Trigger refresh when changing data source (#30744)
  * Chore: remove __debug_bin (#30725)
  * BarChart: add alpha bar chart panel (#30323)
  * Docs: Time series panel (#30690)
  * Backend Plugins: Convert test data source to use SDK contracts (#29916)
  * Docs: Update whats-new-in-v7-4.md (#30747)
  * Add link to Elasticsearch docs. (#30748)
  * Mobile: Fixes issue scrolling on mobile in chrome (#30746)
  * TagsInput: Make placeholder configurable (#30718)
  * Docs: Add config settings for fonts in reporting (#30421)
  * Add menu.yaml to .gitignore (#30743)
  * bump cypress to 6.3.0 (#30644)
  * Datasource: Use json-iterator configuration compatible with standard library (#30732)
  * AlertingNG: Update UX to use new PageToolbar component (#30680)
  * Docs: Add usage insights export feature (#30376)
  * skip symlinks to directories when generating plugin manifest (#30721)
  * PluginCiE2E: Upgrade base images (#30696)
  * Variables: Fixes so text format will show All instead of custom all (#30730)
  * PanelLibrary: better handling of deleted panels (#30709)
  * Added section "Curated dashboards for Google Cloud Monitoring" for 7.4 What's New (#30724)
  * Added "curated dashboards" information and broke down, rearranged topics. (#30659)
  * Transform: improve the "outer join" performance/behavior (#30407)
  * Add alt text to plugin logos (#30710)
  * Deleted menu.yaml file (#30717)
  * Dashboard: Top Share URL icon should share panel URL when on viewPanel page (#30000)
  * Added entry for web server. (#30715)
  * DashboardPicker: switch to promise-based debounce, return dashboard UID (#30706)
  * Use connected GraphNG in Explore (#30707)
  * Fix documentation for streaming data sources (#30704)
  * PanelLibrary: changes casing of responses and adds meta property (#30668)
  * Influx: Show all datapoints for dynamically windowed flux query (#30688)
  * Trace: trace to logs design update (#30637)
  * DeployImage: Switch base images to Debian (#30684)
  * Chore: remove CSP debug logging line (#30689)
  * Docs: 7.4 documentation for expressions (#30524)
  * PanelEdit: Get rid of last remaining usage of navbar-button (#30682)
  * Grafana-UI: Fix setting default value for MultiSelect (#30671)
  * CustomScrollbar: migrated styles from sass to emotion (#30506)
  * DashboardSettings &amp; PanelEdit: Use new PageToolbar (#30675)
  * Explore: Fix jumpy live tailing (#30650)
  * ci(npm-publish): add missing github package token to env vars (#30665)
  * PageToolbar: Extracting navbar styles &amp; layout into a modern emotion based component (#30588)
  * AlertingNG: pause/unpause definitions via the API (#30627)
  * Docs: Refer to product docs in whats new for alerting templating feature (#30652)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0-beta1 (#30666)
  * Variables: Fixes display value when using capture groups in regex (#30636)
  * Docs: Update _index.md (#30655)
  * Docs: Auditing updates (#30433)
  * Docs: add hidden_users configuration field (#30435)
  * Docs: Define TLS/SSL terminology (#30533)
  * Docs: Fix expressions enabled description (#30589)
  * Docs: Update ES screenshots (#30598)
  * Licensing Docs: Adding license restrictions docs (#30216)
  * Update documentation-style-guide.md (#30611)
  * Docs: Update queries.md (#30616)
  * chore(grafana-ui): bump storybook to 6.1.15 (#30642)
  * DashboardSettings: fixes vertical scrolling (#30640)
  * Usage Stats: Remove unused method for getting user stats (#30074)
  * Grafana/UI: Unit picker should not set a category as unit (#30638)
  * Graph: Fixes auto decimals issue in legend and tooltip (#30628)
  * AlertingNG: List saved Alert definitions in Alert Rule list (#30603)
  * chore: bump redux toolkit to 1.5.0 for immer 8.0.1 vulnerability fix (#30605)
  * Grafana/UI: Add disable prop to Segment (#30539)
  * Variables: Fixes so queries work for numbers values too (#30602)
  * Admin: Fixes so form values are filled in from backend (#30544)
  * Docs: Add new override info and add whats new 7.4 links (#30615)
  * TestData: Improve what's new in v7.4 (#30612)
  * Docs: Update 7.4 What's New to use more correct description of alerting notification template feature (#30502)
  * NodeGraph: Add docs (#30504)
  * Loki: Improve live tailing errors and fix Explore's logs container type errors (#30517)
  * TimeRangePicker: Updates components to use new ToolbarButton &amp; ButtonGroup (#30570)
  * Update styling.md guide (#30594)
  * TestData: Adding what's new in v7.4 to the devenv dashboards (#30568)
  * Chore(deps): Bump github.com/aws/aws-sdk-go from 1.35.5 to 1.36.31 (#30583)
  * Chore(deps): Bump github.com/prometheus/client_golang (#30585)
  * Chore(deps): Bump gopkg.in/macaron.v1 from 1.3.9 to 1.4.0 (#30587)
  * Chore(deps): Bump github.com/google/uuid from 1.1.5 to 1.2.0 (#30584)
  * Explore: Fix logs hover state so that it is visible and in dark mode &amp; simply hover code (#30572)
  * RefreshPicker: Fixes so valid intervals in url are visible in RefreshPicker (#30474)
  * Add documentation for Exemplars (#30317)
  * OldGraph: Fix height issue in Firefox (#30565)
  * XY Chart: fix editor error with empty frame (no fields) (#30573)
  * ButtonSelect &amp; RefreshPicker: Rewrite of components to use new emotion based ToolbarButton &amp; Menu (#30510)
  * XY Chart: share legend config with timeseries (#30559)
  * configuration.md: Document Content Security Policy options (#30413)
  * DataFrame: cache frame/field index in field state (#30529)
  * List + before -; rm old Git ref; reformat. (#30543)
  * Expressions: Add option to disable feature (#30541)
  * Explore: Fix loading visualisation on the top of the new time series panel (#30553)
  * Prometheus: Fix show query instead of Value if no __name__ and metric (#30511)
  * Decimals: Big Improvements to auto decimals and fixes to auto decimals bug found in 7.4-beta1  (#30519)
  * Postgres: Convert tests to stdlib (#30536)
  * Storybook: Migrate card story to use controls  (#30535)
  * AlertingNG: Enable UI to Save Alert Definitions (#30394)
  * Postgres: Be consistent about TLS/SSL terminology (#30532)
  * Loki: Append refId to logs uid (#30418)
  * Postgres: Fix indentation (#30531)
  * GraphNG: uPlot 1.6.3 (fix bands not filling below 0). close #30523. (#30527)
  * updates for e2e docker image (#30465)
  * GraphNG: uPlot 1.6.2 (#30521)
  * Docs: Update whats-new-in-v7-4.md (#30520)
  * Prettier: ignore build and devenv dirs (#30501)
  * Chore: Upgrade grabpl version (#30486)
  * Explore: Update styling of buttons (#30493)
  * Cloud Monitoring: Fix legend naming with display name override (#30440)
  * GraphNG: Disable Plot logging by default (#30390)
  * Admin: Fixes so whole org drop down is visible when adding users to org (#30481)
  * Docs: include Makefile option for local assets (#30455)
  * Footer: Fixes layout issue in footer  (#30443)
  * TimeSeriesPanel: Fixed default value for gradientMode (#30484)
  * Docs: fix typo in what's new doc (#30489)
  * Chore: adds wait to e2e test (#30488)
  * chore: update packages dependent on dot-prop to fix security vulnerability (#30432)
  * Dashboard: Remove Icon and change copy -&gt; Copy to clipboard in the share embedded panel modal (#30480)
  * Chore: fix spelling mistake (#30473)
  * Chore: Restrict internal imports from other packages (#30453)
  * Docs: What's new fixes and improvements (#30469)
  * Timeseries: only migrage point size when configured (#30461)
  * Alerting: Hides threshold handle for percentual thresholds (#30431)
  * Graph: Fixes so only users with correct permissions can add annotations (#30419)
  * Chore: update latest version to 7.4.0-beta1 (#30452)
  * Docs: Add whats new 7.4 links (#30463)
  * Update whats-new-in-v7-4.md (#30460)
  * docs: 7.4 what's new (Add expressions note) (#30446)
  * Chore: Upgrade build pipeline tool (#30456)
  * PanelModel: Make sure the angular options are passed to react panel type changed handler (#30441)
  * Expressions: Fix button icon (#30444)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0-beta1 (#30449)
  * Docs: Fix img link for alert notification template (#30436)
  * grafana/ui: Fix internal import from grafana/data (#30439)
  * prevent field config from being overwritten (#30437)
  * PanelOptions: Refactoring applying panel and field options out of PanelModel and add property clean up for properties not in field config registry  (#30389)
  * Dashboard: Remove template variables option from ShareModal (#30395)
  * Added doc content for variables inspector code change by Hugo (#30408)
  * Docs: update license expiration behavior for reporting (#30420)
  * Chore: use old version format in package.json (#30430)
  * Chore: upgrade NPM security vulnerabilities (#30397)
  * "Release: Updated versions in package to 7.5.0-pre.0" (#30428)
  * contribute: Add backend and configuration guidelines for PRs (#30426)
  * Chore: Update what's new URL (#30424)
- Update to version 7.4.5
  * Security: Fix API permissions issues related to team-sync CVE-2021-28146, CVE-2021-28147. (Enterprise)
  * Security: Usage insights requires signed in users CVE-2021-28148. (Enterprise)
  * Security: Do not allow editors to incorrectly bypass permissions on the default data source. CVE-2021-27962. (Enterprise)
- Drop patch add-gotest-module.patch
- Add patch drop-grafana-aws-sdk-0.3.0-module.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1618488000">- Update to version 7.5.4:
  * "Release: Updated versions in package to 7.5.4" (#32971)
  * fix(datasource_srv): prevent infinite loop where default datasource is named default (#32949) (#32967)
  * Added Azure Monitor support for Microsoft.AppConfiguration/configurationStores namespace (#32123) (#32968)
  * fix sqlite3 tx retry condition operator precedence (#32897) (#32952)
  * AzureMonitor: Add support for Virtual WAN namespaces (#32935) (#32947)
  * Plugins: Allow a non-dashboard page to be the default home page (#32926) (#32945)
  * GraphNG: uPlot 1.6.8 (#32859) (#32863)
  * Alerting: Add ability to include aliases with dashes (/) and at (@) signs in InfluxDB (#32844)
  * Prometheus: Allow exemplars endpoint in data source proxy (#32802) (#32804)
  * [v7.5.x] Table: Fixes table data links so they refer to correct row after sorting (#32758)
  * TablePanel: Makes sorting case-insensitive (#32435) (#32752)</changelog>
  <changelog author="ecsos@opensuse.org" date="1620302400">- Update to version 7.5.5:
  * "Release: Updated versions in package to 7.5.5" (#33469)
  * GraphNG: Fix exemplars window position (#33427) (#33462)
  * Remove field limitation from slack notification (#33113) (#33455)
  * Prometheus: Support POST in template variables (#33321) (#33441)
  * Instrumentation: Add success rate metrics for email notifications (#33359) (#33409)
  * Use either moment objects (for absolute times in the datepicker) or string (for relative time) (#33315) (#33406)
  * Docs: Removed type from find annotations example. (#33399) (#33403)
  * [v7.5.x]: FrontendMetrics: Adds new backend api that frontend can use to push frontend measurements and counters to prometheus (#33255)
  * Updated label for add panel. (#33285) (#33286)
  * Bug: Add git to Dockerfile.ubuntu (#33247) (#33248)
  * Docs: Sync latest master docs with 7.5.x (#33156)
  * Docs: Update getting-started-influxdb.md (#33234) (#33241)
  * Doc: Document the X-Grafana-Org-Id HTTP header (#32478) (#33239)
  * Minor Changes in Auditing.md (#31435) (#33238)
  * Docs: Add license check endpoint doc (#32987) (#33236)
  * Postgres: Fix time group macro when TimescaleDB is enabled and interval is less than a second (#33153) (#33219)
  * Docs: InfluxDB doc improvements (#32815) (#33185)
  * [v7.5.x] Loki: Pass Skip TLS Verify setting to alert queries (#33031)
  * update cla (#33181)
  * Fix inefficient regular expression (#33155) (#33159)
  * Auth: Don't clear auth token cookie when lookup token fails (#32999) (#33136)
  * Elasticsearch:  Add documentation for supported Elasticsearch query transformations (#33072) (#33128)
  * Update team.md (#33060) (#33084)
  * GE issue 1268 (#33049) (#33081)
  * Fixed some formatting issues for PRs from yesterday. (#33078) (#33079)
  * Explore: Load default data source in Explore when the provided source does not exist (#32992) (#33061)
  * Docs: Replace next with latest in aliases (#33054) (#33059)
  * Added missing link item. (#33052) (#33055)
  * Backport 33034 (#33038)
  * Docs: Backport 32916 to v7.5x  (#33008)
  * ReleaseNotes: Updated changelog and release notes for 7.5.4 (#32973) (#32998)
  * Elasticsearch: Force re-rendering of each editor row type change (#32993) (#32996)
  * Docs: Sync release branch with latest docs (#32986)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Update to version 7.5.7:
  * Updated relref to "Configuring exemplars" section (#34240) (#34243)
  * Added exemplar topic (#34147) (#34226)
  * Quota: Do not count folders towards dashboard quota (#32519) (#34025)
  * Instructions to separate emails with semicolons (#32499) (#34138)
  * Docs: Remove documentation of v8 generic OAuth feature (#34018)
  * Annotations: Prevent orphaned annotation tags cleanup when no annotations were cleaned (#33957) (#33975)
  * [GH-33898] Add missing --no-cache to Dockerfile. (#33906) (#33935)
  * ReleaseNotes: Updated changelog and release notes for 7.5.6 (#33932) (#33936)
  * Stop hoisting @icons/material (#33922)
  * Chore: fix react-color version in yarn.lock (#33914)
  * "Release: Updated versions in package to 7.5.6" (#33909)
  * Loki: fix label browser crashing when + typed (#33900) (#33901)
  * Document `hide_version` flag (#33670) (#33881)
  * Add isolation level db configuration parameter (#33830) (#33878)
  * Sanitize PromLink button (#33874) (#33876)
  * Removed content as per MarcusE's suggestion in https://github.com/grafana/grafana/issues/33822. (#33870) (#33872)
  * Docs feedback: /administration/provisioning.md (#33804) (#33842)
  * Docs: delete from high availability docs references to removed configurations related to session storage (#33827) (#33851)
  * Docs: Update _index.md (#33797) (#33799)
  * Docs: Update installation.md (#33656) (#33703)
  * GraphNG: uPlot 1.6.9 (#33598) (#33612)
  * dont consider invalid email address a failed email (#33671) (#33681)
  * InfluxDB: Improve measurement-autocomplete behavior in query editor (#33494) (#33625)
  * add template for dashboard url parameters  (#33549) (#33588)
  * Add note to Snapshot API doc to specify that user has to provide the entire dashboard model  (#33572) (#33586)
  * Update team.md (#33454) (#33536)
  * Removed duplicate file "dashboard_folder_permissions.md (#33497)
  * Document customQueryParameters for prometheus datasource provisioning (#33440) (#33495)
  * ReleaseNotes: Updated changelog and release notes for 7.5.5 (#33473) (#33492)
  * Documentation: Update developer-guide.md (#33478) (#33490)
  * add closed parenthesis to fix a hyperlink (#33471) (#33481)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1632225600">- Add patch 0001-Add-source-code-reference.patch
  * Add URL to package source code in the login page footer</changelog>
  <changelog author="ro@suse.de" date="1637150400">- Update to version 7.5.11:
  * Fix Snapshot authentication bypass (bsc#1191454, CVE-2021-39226)
  * Fix certs issue (#40002)
  * Release v7.5.11 (#124)
  * Fix static path matching issue in macaron
  * OAuth: add docs for disableAutoLogin param (#38752) (#38894)
  * Fix #747; remove 'other variables'. (#37866) (#37878)
  * Update alert docs (#33658) (#33659)
  * [7.5.x] Docs: added documentation for the "prepare time series"-transformation. (#36836)
  * cherry picked dc5778c303ca555b70e8ca8c28e95997e26ecfc1 (#36813)
  * "Release: Updated versions in package to 7.5.10" (#36792)
  * [v7.5.x] Transformations: add 'prepare time series' transformer (#36749)
  * Remove verify-drone from windows (#36775)
  * Update queries.md (#31941) (#36764)
  * Updated content to specify method to use to get keyboard shortcuts wh? (#36084) (#36087)
  * ReleaseNotes: Updated changelog and release notes for 7.5.9 (#36057) (#36077)
  * "Release: Updated versions in package to 7.5.9" (#36056)
  * Login: Fixes Unauthorized message showing when on login page or snapshot page (#35311) (#35880)
  * ReleaseNotes: Updated changelog and release notes for 7.5.8 (#35703) (#35822)
  * CI: Upgrade pipeline tool to use main (#35804)
  * CI: try to force v7.5.x instead of master (#35799)
  * CI: supports move from master to main in 7.5.x release branch (#35747)
  * "Release: Updated versions in package to 7.5.8" (#35701)
  * Chore: Bump acorn and lodash-es (#35650)
  * Snapshots: Remove dashboard links from snapshots (#35567) (#35585)
  * [v7.5.x] Datasource: Allow configuring `MaxConnsPerHost` (#35519)
  * Remove docs sync from v7.5.x (#35443)
  * "Release: Updated versions in package to 7.5.7" (#35412)
  * Add max_idle_connections_per_host to config (#35365)
  * Update go.sum to fix failing enterprise pipeline (#35353)
  * [v7.5.x] HTTP Client: Introduce `go-conntrack`  (#35321)
  * Fix Markdown syntax in enterprise/license/_index.md (#34683) (#35210)
  * Update annotations.md (#33218) (#35138)
  * Docs: Add query caching to enterprise docs page (#34751) (#35025)
  * [7.5.x] Admin: hide per role counts for licensed users (#34994)
  * cleanup shortcodes, image paths (#34827)
  * Security: Upgrade Thrift dependency (#34698) (#34702)
  * Docs: Fix Quick Start link on Geting Started Influx page (#34549) (#34603)
  * Add link to release notes v7.5.7 (#34460) (#34474)
  * Update 7.5.x landing page (#34447)
  * ReleaseNotes: Updated changelog and release notes for 7.5.7 (#34383) (#34428)
- update to 7.5.10
  * [v7.5.x] Transformations: add "prepare time series" transformer. [#36749]
- update to 7.5.9
  * Login: Fix Unauthorized message that is displayed on sign-in or snapshot page. [#35880]
- drop drop-grafana-aws-sdk-0.3.0-module.patch (upstream)</changelog>
  <changelog author="ro@suse.de" date="1637236800">- recreate tarballs using the makefile to update the
  npm and go modules required</changelog>
  <changelog author="witold.bedyk@suse.com" date="1639396800">- Update to version 7.5.12:
  * Fix markdown path traversal (#42969, bsc#1193688, CVE-2021-43813)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642680000">- Update to Go 1.17.
- Add build-time dependency on `wire`.
- Update license to GNU Affero General Public License v3.0.
- Update to version 8.3.4
  + Security:
  * GetUserInfo: return an error if no user was found
    (bsc#1194873, CVE-2022-21673)
  + Features and enhancements:
  * Alerting: Allow configuration of non-ready alertmanagers.
  * Alerting: Allow customization of Google chat message.
  * AppPlugins: Support app plugins with only default nav.
  * InfluxDB: query editor: skip fields in metadata queries.
  * Postgres/MySQL/MSSQL: Cancel in-flight SQL query if user
    cancels query in grafana.
  * Prometheus: Forward oauth tokens after prometheus datasource
    migration.
  + Bug fixes:
  * Azure Monitor: Bug fix for variable interpolations in metrics
    dropdowns.
  * Azure Monitor: Improved error messages for variable queries.
  * CloudMonitoring: Fixes broken variable queries that use group
    bys.
  * Configuration: You can now see your expired API keys if you
    have no active ones.
  * Elasticsearch: Fix handling multiple datalinks for a single
    field.
  * Export: Fix error being thrown when exporting dashboards
    using query variables that reference the default datasource.
  * ImportDashboard: Fixes issue with importing dashboard and
    name ending up in uid.
  * Login: Page no longer overflows on mobile.
  * Plugins: Set backend metadata property for core plugins.
  * Prometheus: Fill missing steps with null values.
  * Prometheus: Fix interpolation of $__rate_interval variable.
  * Prometheus: Interpolate variables with curly brackets syntax.
  * Prometheus: Respect the http-method data source setting.
  * Table: Fixes issue with field config applied to wrong fields
    when hiding columns.
  * Toolkit: Fix bug with rootUrls not being properly parsed when
    signing a private plugin.
  * Variables: Fix so data source variables are added to adhoc
    configuration.
  + Plugin development fixes &amp; changes:
  * Toolkit: Revert build config so tslib is bundled with plugins
    to prevent plugins from crashing.
- Update to version 8.3.3:
  + Features and enhancements:
  * BarChart: Use new data error view component to show actions
    in panel edit.
  * CloudMonitor: Iterate over pageToken for resources.
  * Macaron: Prevent WriteHeader invalid HTTP status code panic.
  + Bug fixes:
  * AnnoListPanel: Fix interpolation of variables in tags.
  * CloudWatch: Allow queries to have no dimensions specified.
  * CloudWatch: Fix broken queries for users migrating from
    8.2.4/8.2.5 to 8.3.0.
  * CloudWatch: Make sure MatchExact flag gets the right value.
  * Dashboards: Fix so that empty folders can be deleted from the
    manage dashboards/folders page.
  * InfluxDB: Improve handling of metadata query errors in
    InfluxQL.
  * Loki: Fix adding of ad hoc filters for queries with parser
    and line_format expressions.
  * Prometheus: Fix running of exemplar queries for non-histogram
    metrics.
  * Prometheus: Interpolate template variables in interval.
  * StateTimeline: Fix toolitp not showing when for frames with
    multiple fields.
  * TraceView: Fix virtualized scrolling when trace view is
    opened in right pane in Explore.
  * Variables: Fix repeating panels for on time range changed
    variables.
  * Variables: Fix so queryparam option works for scoped
    variables.
- Update to version 8.3.2
  + Security: Fixes CVE-2021-43813 and CVE-2021-43815.
- Update to version 8.3.1
  + Security: Fixes CVE-2021-43798.
- Update to version 8.3.0
  + Features and enhancements:
  * Alerting: Prevent folders from being deleted when they
    contain alerts.
  * Alerting: Show full preview value in tooltip.
  * BarGauge: Limit title width when name is really long.
  * CloudMonitoring: Avoid to escape regexps in filters.
  * CloudWatch: Add support for AWS Metric Insights.
  * TooltipPlugin: Remove other panels' shared tooltip in edit
    panel.
  * Visualizations: Limit y label width to 40% of visualization
    width.
  + Bug fixes:
  * Alerting: Clear alerting rule evaluation errors after
    intermittent failures.
  * Alerting: Fix refresh on legacy Alert List panel.
  * Dashboard: Fix queries for panels with non-integer widths.
  * Explore: Fix url update inconsistency.
  * Prometheus: Fix range variables interpolation for time ranges
    smaller than 1 second.
  * ValueMappings: Fixes issue with regex value mapping that only
    sets color.
- Update to version 8.3.0-beta2
  + Breaking changes:
  * Grafana 8 Alerting enabled by default for installations that
    do not use legacy alerting.
  * Keep Last State for "If execution error or timeout" when
    upgrading to Grafana 8 alerting.
  + Features and enhancements:
  * Alerting: Create DatasourceError alert if evaluation returns
    error.
  * Alerting: Make Unified Alerting enabled by default for those
    who do not use legacy alerting.
  * Alerting: Support mute timings configuration through the api
    for the embedded alert manager.
  * CloudWatch: Add missing AWS/Events metrics.
  * Docs: Add easier to find deprecation notices to certain data
    sources and to the changelog.
  * Plugins Catalog: Enable install controls based on the
    pluginAdminEnabled flag.
  * Table: Add space between values for the DefaultCell and
    JSONViewCell.
  * Tracing: Make query editors available in dashboard for Tempo
    and Zipkin.
  + Bug fixes:
  * AccessControl: Renamed orgs roles, removed fixed:orgs:reader
    introduced in beta1.
  * Azure Monitor: Add trap focus for modals in grafana/ui and
    other small a11y fixes for Azure Monitor.
  * CodeEditor: Prevent suggestions from being clipped.
  * Dashboard: Fix cache timeout persistence.
  * Datasource: Fix stable sort order of query responses.
  * Explore: Fix error in query history when removing last item.
  * Logs: Fix requesting of older logs when flipped order.
  * Prometheus: Fix running of health check query based on access
    mode.
  * TextPanel: Fix suggestions for existing panels.
  * Tracing: Fix incorrect indentations due to reoccurring
    spanIDs.
  * Tracing: Show start time of trace with milliseconds
    precision.
  * Variables: Make renamed or missing variable section
    expandable.
  + Plugin development fixes &amp; changes:
  * Select: Select menus now properly scroll during keyboard
    navigation.
- Update to version 8.3.0-beta1
  + Features and enhancements:
  * Alerting: Add UI for contact point testing with custom
    annotations and labels.
  * Alerting: Make alert state indicator in panel header work
    with Grafana 8 alerts.
  * Alerting: Option for Discord notifier to use webhook name.
  * Annotations: Deprecate AnnotationsSrv.
  * Auth: Omit all base64 paddings in JWT tokens for the JWT
    auth.
  * Azure Monitor: Clean up fields when editing Metrics.
  * AzureMonitor: Add new starter dashboards.
  * AzureMonitor: Add starter dashboard for app monitoring with
    Application Insights.
  * Barchart/Time series: Allow x axis label.
  * CLI: Improve error handling for installing plugins.
  * CloudMonitoring: Migrate to use backend plugin SDK contracts.
  * CloudWatch Logs: Add retry strategy for hitting max
    concurrent queries.
  * CloudWatch: Add AWS RoboMaker metrics and dimension.
  * CloudWatch: Add AWS Transfer metrics and dimension.
  * Dashboard: replace datasource name with a reference object.
  * Dashboards: Show logs on time series when hovering.
  * Elasticsearch: Add support for Elasticsearch 8.0 (Beta).
  * Elasticsearch: Add time zone setting to Date Histogram
    aggregation.
  * Elasticsearch: Enable full range log volume histogram.
  * Elasticsearch: Full range logs volume.
  * Explore: Allow changing the graph type.
  * Explore: Show ANSI colors when highlighting matched words in
    the logs panel.
  * Graph(old) panel: Listen to events from Time series panel.
  * Import: Load gcom dashboards from URL.
  * LibraryPanels: Improves export and import of library panels
    between orgs.
  * OAuth: Support PKCE.
  * Panel edit: Overrides now highlight correctly when searching.
  * PanelEdit: Display drag indicators on draggable sections.
  * Plugins: Refactor Plugin Management.
  * Prometheus: Add custom query parameters when creating
    PromLink url.
  * Prometheus: Remove limits on metrics, labels, and values in
    Metrics Browser.
  * StateTimeline: Share cursor with rest of the panels.
  * Tempo: Add error details when json upload fails.
  * Tempo: Add filtering for service graph query.
  * Tempo: Add links to nodes in Service Graph pointing to
    Prometheus metrics.
  * Time series/Bar chart panel: Add ability to sort series via
    legend.
  * TimeSeries: Allow multiple axes for the same unit.
  * TraceView: Allow span links defined on dataFrame.
  * Transformations: Support a rows mode in labels to fields.
  * ValueMappings: Don't apply field config defaults to time
    fields.
  * Variables: Only update panels that are impacted by variable
    change.
  + Bug fixes:
  * API: Fix dashboard quota limit for imports.
  * Alerting: Fix rule editor issues with Azure Monitor data
    source.
  * Azure monitor: Make sure alert rule editor is not enabled
    when template variables are being used.
  * CloudMonitoring: Fix annotation queries.
  * CodeEditor: Trigger the latest getSuggestions() passed to
    CodeEditor.
  * Dashboard: Remove the current panel from the list of options
    in the Dashboard datasource.
  * Encryption: Fix decrypting secrets in alerting migration.
  * InfluxDB: Fix corner case where index is too large in ALIAS
    field.
  * NavBar: Order App plugins alphabetically.
  * NodeGraph: Fix zooming sensitivity on touchpads.
  * Plugins: Add OAuth pass-through logic to api/ds/query
    endpoint.
  * Snapshots: Fix panel inspector for snapshot data.
  * Tempo: Fix basic auth password reset on adding tag.
  * ValueMapping: Fixes issue with regex mappings.
  + Plugin development fixes &amp; changes:
  * grafana/ui: Enable slider marks display.
- Update to version 8.2.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.2.6
  + Features and enhancements:
  * Security: Upgrade Docker base image to Alpine 3.14.3.
  * Security: Upgrade Go to 1.17.2.
  + Bug fixes:
  * TimeSeries: Fix fillBelowTo wrongly affecting fills of
    unrelated series.
- Update to version 8.2.5
  + Breaking changes:
  * Fix No Data behaviour in Legacy Alerting.
  + Bug fixes:
  * Alerting: Fix a bug where the metric in the evaluation string
    was not correctly populated.
  * Alerting: Fix no data behaviour in Legacy Alerting for alert
    rules using the AND operator.
  * CloudMonitoring: Ignore min and max aggregation in MQL
    queries.
  * Dashboards: 'Copy' is no longer added to new dashboard
    titles.
  * DataProxy: Fix overriding response body when response is a
    WebSocket upgrade.
  * Elasticsearch: Use field configured in query editor as field
    for date_histogram aggregations.
  * Explore: Fix running queries without a datasource property
    set.
  * InfluxDB: Fix numeric aliases in queries.
  * Plugins: Ensure consistent plugin settings list response.
  * Tempo: Fix validation of float durations.
  * Tracing: Correct tags for each span are shown.
- Update to version 8.2.4
  + Security: Fixes CVE-2021-41244.
- Update to version 8.2.3
  + Security: Fixes CVE-2021-41174.
- Update to version 8.2.2
  + Features and enhancements:
  * Annotations: We have improved tag search performance.
  * Application: You can now configure an error-template title.
  * AzureMonitor: We removed a restriction from the resource
    filter query.
  * Packaging: We removed the ProcSubset option in systemd. This
    option prevented Grafana from starting in LXC environments.
  * Prometheus: We removed the autocomplete limit for metrics.
  * Table: We improved the styling of the type icons to make them
    more distinct from column / field name.
  * ValueMappings: You can now use value mapping in stat, gauge,
    bar gauge, and pie chart visualizations.
  + Bug fixes:
  * Alerting: Fix panic when Slack's API sends unexpected
    response.
  * Alerting: The Create Alert button now appears on the
    dashboard panel when you are working with a default
    datasource.
  * Explore: We fixed the problem where the Explore log panel
    disappears when an Elasticsearch logs query returns no
    results.
  * Graph: You can now see annotation descriptions on hover.
  * Logs: The system now uses the JSON parser only if the line is
    parsed to an object.
  * Prometheus: We fixed the issue where the system did not reuse
    TCP connections when querying from Grafana alerting.
  * Prometheus: We fixed the problem that resulted in an error
    when a user created a query with a $__interval min step.
  * RowsToFields: We fixed the issue where the system was not
    properly interpreting number values.
  * Scale: We fixed how the system handles NaN percent when data
    min = data max.
  * Table panel: You can now create a filter that includes
    special characters.
- Update to version 8.2.1
  + Bug fixes:
  * Dashboard: Fix rendering of repeating panels.
  * Datasources: Fix deletion of data source if plugin is not
    found.
  * Packaging: Remove systemcallfilters sections from systemd
    unit files.
  * Prometheus: Add Headers to HTTP client options.
- Update to version 8.2.0
  + Features and enhancements:
  * AWS: Updated AWS authentication documentation.
  * Alerting: Added support Alertmanager data source for upstream
    Prometheus AM implementation.
  * Alerting: Allows more characters in label names so
    notifications are sent.
  * Alerting: Get alert rules for a dashboard or a panel using
    /api/v1/rules endpoints.
  * Annotations: Improved rendering performance of event markers.
  * CloudWatch Logs: Skip caching for log queries.
  * Explore: Added an opt-in configuration for Node Graph in
    Jaeger, Zipkin, and Tempo.
  * Packaging: Add stricter systemd unit options.
  * Prometheus: Metrics browser can now handle label values with
    special characters.
  + Bug fixes:
  * CodeEditor: Ensure that we trigger the latest onSave callback
    provided to the component.
  * DashboardList/AlertList: Fix for missing All folder value.
  + Plugin development fixes &amp; changes:
  * Plugins: Create a mock icon component to prevent console
    errors.
- Update to version 8.2.0-beta2
  + Features and enhancements:
  * AccessControl: Document new permissions restricting data
    source access.
  * TimePicker: Add fiscal years and search to time picker.
  * Alerting: Added support for Unified Alerting with Grafana HA.
  * Alerting: Added support for tune rule evaluation using
    configuration options.
  * Alerting: Cleanups alertmanager namespace from key-value
    store when disabling Grafana 8 alerts.
  * Alerting: Remove ngalert feature toggle and introduce two new
    settings for enabling Grafana 8 alerts and disabling them for
    specific organisations.
  * CloudWatch: Introduced new math expression where it is
    necessary to specify the period field.
  * InfluxDB: Added support for $__interval and $__interval_ms in
    Flux queries for alerting.
  * InfluxDB: Flux queries can use more precise start and end
    timestamps with nanosecond-precision.
  * Plugins Catalog: Make the catalog the default way to interact
    with plugins.
  * Prometheus: Removed autocomplete limit for metrics.
  + Bug fixes:
  * Alerting: Fixed an issue where the edit page crashes if you
    tried to preview an alert without a condition set.
  * Alerting: Fixed rules migration to keep existing Grafana 8
    alert rules.
  * Alerting: Fixed the silence file content generated during
    migration.
  * Analytics: Fixed an issue related to interaction event
    propagation in Azure Application Insights.
  * BarGauge: Fixed an issue where the cell color was lit even
    though there was no data.
  * BarGauge: Improved handling of streaming data.
  * CloudMonitoring: Fixed INT64 label unmarshal error.
  * ConfirmModal: Fixes confirm button focus on modal open.
  * Dashboard: Add option to generate short URL for variables
    with values containing spaces.
  * Explore: No longer hides errors containing refId property.
  * Fixed an issue that produced State timeline panel tooltip
    error when data was not in sync.
  * InfluxDB: InfluxQL query editor is set to always use
    resultFormat.
  * Loki: Fixed creating context query for logs with parsed
    labels.
  * PageToolbar: Fixed alignment of titles.
  * Plugins Catalog: Update to the list of available panels after
    an install, update or uninstall.
  * TimeSeries: Fixed an issue where the shared cursor was not
    showing when hovering over in old Graph panel.
  * Variables: Fixed issues related to change of focus or refresh
    pages when pressing enter in a text box variable input.
  * Variables: Panel no longer crash when using the adhoc
    variable in data links.
- Update to version 8.2.0-beta1
  + Features and enhancements:
  * AccessControl: Introduce new permissions to restrict access
    for reloading provisioning configuration.
  * Alerting: Add UI to edit Cortex/Loki namespace, group names,
    and group evaluation interval.
  * Alerting: Add a Test button to test contact point.
  * Alerting: Allow creating/editing recording rules for Loki and
    Cortex.
  * Alerting: Metrics should have the label org instead of user.
  * Alerting: Sort notification channels by name to make them
    easier to locate.
  * Alerting: Support org level isolation of notification
    configuration.
  * AzureMonitor: Add data links to deep link to Azure Portal
    Azure Resource Graph.
  * AzureMonitor: Add support for annotations from Azure Monitor
    Metrics and Azure Resource Graph services.
  * AzureMonitor: Show error message when subscriptions request
    fails in ConfigEditor.
  * Chore: Update to Golang 1.16.7.
  * CloudWatch Logs: Add link to X-Ray data source for trace IDs
    in logs.
  * CloudWatch Logs: Disable query path using websockets (Live)
    feature.
  * CloudWatch/Logs: Don't group dataframes for non time series
    queries.
  * Cloudwatch: Migrate queries that use multiple stats to one
    query per stat.
  * Dashboard: Keep live timeseries moving left (v2).
  * Datasources: Introduce response_limit for datasource
    responses.
  * Explore: Add filter by trace or span ID to trace to logs
    feature.
  * Explore: Download traces as JSON in Explore Inspector.
  * Explore: Reuse Dashboard's QueryRows component.
  * Explore: Support custom display label for derived fields
    buttons for Loki datasource.
  * Grafana UI: Update monaco-related dependencies.
  * Graphite: Deprecate browser access mode.
  * InfluxDB: Improve handling of intervals in alerting.
  * InfluxDB: InfluxQL query editor: Handle unusual characters in
    tag values better.
  * Jaeger: Add ability to upload JSON file for trace data.
  * LibraryElements: Enable specifying UID for new and existing
    library elements.
  * LibraryPanels: Remove library panel icon from the panel
    header so you can no longer tell that a panel is a library
    panel from the dashboard view.
  * Logs panel: Scroll to the bottom on page refresh when sorting
    in ascending order.
  * Loki: Add fuzzy search to label browser.
  * Navigation: Implement active state for items in the Sidemenu.
  * Packaging: Add stricter systemd unit options.
  * Packaging: Update PID file location from /var/run to /run.
  * Plugins: Add Hide OAuth Forward config option.
  * Postgres/MySQL/MSSQL: Add setting to limit the maximum number
    of rows processed.
  * Prometheus: Add browser access mode deprecation warning.
  * Prometheus: Add interpolation for built-in-time variables to
    backend.
  * Tempo: Add ability to upload trace data in JSON format.
  * TimeSeries/XYChart: Allow grid lines visibility control in
    XYChart and TimeSeries panels.
  * Transformations: Convert field types to time string number or
    boolean.
  * Value mappings: Add regular-expression based value mapping.
  * Zipkin: Add ability to upload trace JSON.
  + Bug fixes:
  * Admin: Prevent user from deleting user's current/active
    organization.
  * LibraryPanels: Fix library panel getting saved in the
    dashboard's folder.
  * OAuth: Make generic teams URL and JMES path configurable.
  * QueryEditor: Fix broken copy-paste for mouse middle-click
  * Thresholds: Fix undefined color in "Add threshold".
  * Timeseries: Add wide-to-long, and fix multi-frame output.
  * TooltipPlugin: Fix behavior of Shared Crosshair when Tooltip
    is set to All.
  + Plugin development fixes &amp; changes:
  * Grafana UI: Fix TS error property css is missing in type.
- Update to version 8.1.8
  + Security: Fixes CVE-2021-43798.
- Update to version 8.1.7
  + Bug fixes:
  * Alerting: Fix alerts with evaluation interval more than 30
    seconds resolving before notification.
  * Elasticsearch/Prometheus: Fix usage of proper SigV4 service
    namespace.
- Update to version 8.1.6
  + Security: Fixes CVE-2021-39226.
- Update to version 8.1.5
  + Bug fixes:
  * BarChart: Fixes panel error that happens on second refresh.
- Update to version 8.1.4
  + Features and enhancements
  * Explore: Ensure logs volume bar colors match legend colors.
  * LDAP: Search all DNs for users.
  + Bug fixes:
  * Alerting: Fix notification channel migration.
  * Annotations: Fix blank panels for queries with unknown data
    sources.
  * BarChart: Fix stale values and x axis labels.
  * Graph: Make old graph panel thresholds work even if ngalert
    is enabled.
  * InfluxDB: Fix regex to identify / as separator.
  * LibraryPanels: Fix update issues related to library panels in
    rows.
  * Variables: Fix variables not updating inside a Panel when the
    preceding Row uses "Repeat For".
- Update to version 8.1.3
  + Bug fixes
  * Alerting: Fix alert flapping in the internal alertmanager.
  * Alerting: Fix request handler failed to convert dataframe
    "results" to plugins.DataTimeSeriesSlice: input frame is not
    recognized as a time series.
  * Dashboard: Fix UIDs are not preserved when importing/creating
    dashboards thru importing .json file.
  * Dashboard: Forces panel re-render when exiting panel edit.
  * Dashboard: Prevent folder from changing when navigating to
    general settings.
  * Docker: Force use of libcrypto1.1 and libssl1.1 versions to
    fix CVE-2021-3711.
  * Elasticsearch: Fix metric names for alert queries.
  * Elasticsearch: Limit Histogram field parameter to numeric
    values.
  * Elasticsearch: Prevent pipeline aggregations to show up in
    terms order by options.
  * LibraryPanels: Prevent duplicate repeated panels from being
    created.
  * Loki: Fix ad-hoc filter in dashboard when used with parser.
  * Plugins: Track signed files + add warn log for plugin assets
    which are not signed.
  * Postgres/MySQL/MSSQL: Fix region annotations not displayed
    correctly.
  * Prometheus: Fix validate selector in metrics browser.
  * Security: Fix stylesheet injection vulnerability.
  * Security: Fix short URL vulnerability.
- Update to version 8.1.2
  + Features and enhancements:
  * AzureMonitor: Add support for PostgreSQL and MySQL Flexible
    Servers.
  * Datasource: Change HTTP status code for failed datasource
    health check to 400.
  * Explore: Add span duration to left panel in trace viewer.
  * Plugins: Use file extension allowlist when serving plugin
    assets instead of checking for UNIX executable.
  * Profiling: Add support for binding pprof server to custom
    network interfaces.
  * Search: Make search icon keyboard navigable.
  * Template variables: Keyboard navigation improvements.
  * Tooltip: Display ms within minute time range.
  + Bug fixes:
  * Alerting: Fix saving LINE contact point.
  * Annotations: Fix alerting annotation coloring.
  * Annotations: Alert annotations are now visible in the correct
    Panel.
  * Auth: Hide SigV4 config UI and disable middleware when its
    config flag is disabled.
  * Dashboard: Prevent incorrect panel layout by comparing window
    width against theme breakpoints.
  * Elasticsearch: Fix metric names for alert queries.
  * Explore: Fix showing of full log context.
  * PanelEdit: Fix 'Actual' size by passing the correct panel
    size to Dashboard.
  * Plugins: Fix TLS datasource settings.
  * Variables: Fix issue with empty drop downs on navigation.
  * Variables: Fix URL util converting false into true.
  + Plugin development fixes &amp; changes:
  * Toolkit: Fix matchMedia not found error.
- Update to version 8.1.1
  + Bug fixes:
  * CloudWatch Logs: Fix crash when no region is selected.
- Update to version 8.1.0
  + Features and enhancements:
  * Alerting: Deduplicate receivers during migration.
  * ColorPicker: Display colors as RGBA.
  * Select: Make portalling the menu opt-in, but opt-in
    everywhere.
  * TimeRangePicker: Improve accessibility.
  + Bug fixes:
  * Annotations: Correct annotations that are displayed upon page
    refresh.
  * Annotations: Fix Enabled button that disappeared from Grafana
    v8.0.6.
  * Annotations: Fix data source template variable that was not
    available for annotations.
  * AzureMonitor: Fix annotations query editor that does not
    load.
  * Geomap: Fix scale calculations.
  * GraphNG: Fix y-axis autosizing.
  * Live: Display stream rate and fix duplicate channels in list
    response.
  * Loki: Update labels in log browser when time range changes in
    dashboard.
  * NGAlert: Send resolve signal to alertmanager on alerting -&gt;
    Normal.
  * PasswordField: Prevent a password from being displayed when
    you click the Enter button.
  * Renderer: Remove debug.log file when Grafana is stopped.
  * Security: Update dependencies to fix CVE-2021-36222.
- Update to version 8.1.0-beta3
  + Features and enhancements:
  * Alerting: Support label matcher syntax in alert rule list
    filter.
  * IconButton: Put tooltip text as aria-label.
  * Live: Experimental HA with Redis.
  * UI: FileDropzone component.
  * CloudWatch: Add AWS LookoutMetrics.
  + Bug fixes:
  * Docker: Fix builds by delaying go mod verify until all
    required files are copied over.
  * Exemplars: Fix disable exemplars only on the query that
    failed.
  * SQL: Fix SQL dataframe resampling (fill mode + time
    intervals).
- Update to version 8.1.0-beta2
  + Features and enhancements:
  * Alerting: Expand the value string in alert annotations and
    labels.
  * Auth: Add Azure HTTP authentication middleware.
  * Auth: Auth: Pass user role when using the authentication
    proxy.
  * Gazetteer: Update countries.json file to allow for linking to
    3-letter country codes.
  + Bug fixes:
  * Config: Fix Docker builds by correcting formatting in
    sample.ini.
  * Explore: Fix encoding of internal URLs.
- Update to version 8.1.0-beta1
  + Features and enhancements:
  * Alerting: Add Alertmanager notifications tab.
  * Alerting: Add button to deactivate current Alertmanager
    configuration.
  * Alerting: Add toggle in Loki/Prometheus data source
    configuration to opt out of alerting UI.
  * Alerting: Allow any "evaluate for" value &gt;=0 in the alert
    rule form.
  * Alerting: Load default configuration from status endpoint, if
    Cortex Alertmanager returns empty user configuration.
  * Alerting: view to display alert rule and its underlying data.
  * Annotation panel: Release the annotation panel.
  * Annotations: Add typeahead support for tags in built-in
    annotations.
  * AzureMonitor: Add curated dashboards for Azure services.
  * AzureMonitor: Add support for deep links to Microsoft Azure
    portal for Metrics.
  * AzureMonitor: Remove support for different credentials for
    Azure Monitor Logs.
  * AzureMonitor: Support querying any Resource for Logs queries.
  * Elasticsearch: Add frozen indices search support.
  * Elasticsearch: Name fields after template variables values
    instead of their name.
  * Elasticsearch: add rate aggregation.
  * Email: Allow configuration of content types for email
    notifications.
  * Explore: Add more meta information when line limit is hit.
  * Explore: UI improvements to trace view.
  * FieldOverrides: Added support to change display name in an
    override field and have it be matched by a later rule.
  * HTTP Client: Introduce dataproxy_max_idle_connections config
    variable.
  * InfluxDB: InfluxQL: adds tags to timeseries data.
  * InfluxDB: InfluxQL: make measurement search case insensitive.
    Legacy Alerting: Replace simplejson with a struct in webhook
    notification channel.
  * Legend: Updates display name for Last (not null) to just
    Last*.
  * Logs panel: Add option to show common labels.
  * Loki: Add $__range variable.
  * Loki: Add support for "label_values(log stream selector,
    label)" in templating.
  * Loki: Add support for ad-hoc filtering in dashboard.
  * MySQL Datasource: Add timezone parameter.
  * NodeGraph: Show gradient fields in legend.
  * PanelOptions: Don't mutate panel options/field config object
    when updating.
  * PieChart: Make pie gradient more subtle to match other
    charts.
  * Prometheus: Update PromQL typeahead and highlighting.
  * Prometheus: interpolate variable for step field.
  * Provisioning: Improve validation by validating across all
    dashboard providers.
  * SQL Datasources: Allow multiple string/labels columns with
    time series.
  * Select: Portal select menu to document.body.
  * Team Sync: Add group mapping to support team sync in the
    Generic OAuth provider.
  * Tooltip: Make active series more noticeable.
  * Tracing: Add support to configure trace to logs start and end
    time.
  * Transformations: Skip merge when there is only a single data
    frame.
  * ValueMapping: Added support for mapping text to color,
    boolean values, NaN and Null. Improved UI for value mapping.
  * Visualizations: Dynamically set any config (min, max, unit,
    color, thresholds) from query results.
  * live: Add support to handle origin without a value for the
    port when matching with root_url.
  + Bug fixes:
  * Alerting: Handle marshaling Inf values.
  * AzureMonitor: Fix macro resolution for template variables.
  * AzureMonitor: Fix queries with Microsoft.NetApp/../../volumes
    resources.
  * AzureMonitor: Request and concat subsequent resource pages.
  * Bug: Fix parse duration for day.
  * Datasources: Improve error handling for error messages.
  * Explore: Correct the functionality of shift-enter shortcut
    across all uses.
  * Explore: Show all dataFrames in data tab in Inspector.
  * GraphNG: Fix Tooltip mode 'All' for XYChart.
  * Loki: Fix highlight of logs when using filter expressions
    with backticks.
  * Modal: Force modal content to overflow with scroll.
  * Plugins: Ignore symlinked folders when verifying plugin
    signature.
  + Plugin development fixes &amp; changes:
  * Toolkit: Improve error messages when tasks fail.
- Update to version 8.0.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.0.6
  + Features and enhancements:
  * Alerting: Add annotation upon alert state change.
  * Alerting: Allow space in label and annotation names.
  * InfluxDB: Improve legend labels for InfluxDB query results.
  + Bug fixes:
  * Alerting: Fix improper alert by changing the handling of
    empty labels.
  * CloudWatch/Logs: Reestablish Cloud Watch alert behavior.
  * Dashboard: Avoid migration breaking on fieldConfig without
    defaults field in folded panel.
  * DashboardList: Fix issue not re-fetching dashboard list after
    variable change.
  * Database: Fix incorrect format of isolation level
    configuration parameter for MySQL.
  * InfluxDB: Correct tag filtering on InfluxDB data.
  * Links: Fix links that caused a full page reload.
  * Live: Fix HTTP error when InfluxDB metrics have an incomplete
    or asymmetrical field set.
  * Postgres/MySQL/MSSQL: Change time field to "Time" for time
    series queries.
  * Postgres: Fix the handling of a null return value in query
    results.
  * Tempo: Show hex strings instead of uints for IDs.
  * TimeSeries: Improve tooltip positioning when tooltip
    overflows.
  * Transformations: Add 'prepare time series' transformer.
- Update to version 8.0.5
  + Features and enhancements:
  * Cloudwatch Logs: Send error down to client.
  * Folders: Return 409 Conflict status when folder already
    exists.
  * TimeSeries: Do not show series in tooltip if it's hidden in
    the viz.
  + Bug fixes:
  * AzureMonitor: Fix issue where resource group name is missing
    on the resource picker button.
  * Chore: Fix AWS auth assuming role with workspace IAM.
  * DashboardQueryRunner: Fixes unrestrained subscriptions being
    created.
  * DateFormats: Fix reading correct setting key for
    use_browser_locale.
  * Links: Fix links to other apps outside Grafana when under sub
    path.
  * Snapshots: Fix snapshot absolute time range issue.
  * Table: Fix data link color.
  * Time Series: Fix X-axis time format when tick increment is
    larger than a year.
  * Tooltip Plugin: Prevent tooltip render if field is undefined.
- Update to version 8.0.4
  + Features and enhancements:
  * Live: Rely on app url for origin check.
  * PieChart: Sort legend descending, update placeholder.
  * TimeSeries panel: Do not reinitialize plot when thresholds
    mode change.
  + Bug fixes:
  * Elasticsearch: Allow case sensitive custom options in
    date_histogram interval.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * Explore: Fix import of queries between SQL data sources.
  * InfluxDB: InfluxQL query editor: fix retention policy
    handling.
  * Loki: Send correct time range in template variable queries.
  * TimeSeries: Preserve RegExp series overrides when migrating
    from old graph panel.
- Update to version 8.0.3
  + Features and enhancements:
  * Alerting: Increase alertmanager_conf column if MySQL.
  * Time series/Bar chart panel: Handle infinite numbers as nulls
    when converting to plot array.
  * TimeSeries: Ensure series overrides that contain color are
    migrated, and migrate the previous fieldConfig when changing
    the panel type.
  * ValueMappings: Improve singlestat value mappings migration.
  + Bug fixes:
  * Annotations: Fix annotation line and marker colors.
  * AzureMonitor: Fix KQL template variable queries without
    default workspace.
  * CloudWatch/Logs: Fix missing response data for log queries.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * LibraryPanels: Fix crash in library panels list when panel
    plugin is not found.
  * LogsPanel: Fix performance drop when moving logs panel in
    dashboard.
  * Loki: Parse log levels when ANSI coloring is enabled.
  * MSSQL: Fix issue with hidden queries still being executed.
  * PanelEdit: Display the VisualizationPicker that was not
    displayed if a panel has an unknown panel plugin.
  * Plugins: Fix loading symbolically linked plugins.
  * Prometheus: Fix issue where legend name was replaced with
    name Value in stat and gauge panels.
  * State Timeline: Fix crash when hovering over panel.
- Update to version 8.0.2
  + Features and enhancements:
  * Datasource: Add support for max_conns_per_host in dataproxy
    settings.
  + Bug fixes:
  * Configuration: Fix changing org preferences in FireFox.
  * PieChart: Fix legend dimension limits.
  * Postgres/MySQL/MSSQL: Fix panic in concurrent map writes.
  * Variables: Hide default data source if missing from regex.
- Update to version 8.0.1
  + Bug fixes:
  * Alerting/SSE: Fix "count_non_null" reducer validation.
  * Cloudwatch: Fix duplicated time series.
  * Cloudwatch: Fix missing defaultRegion.
  * Dashboard: Fix Dashboard init failed error on dashboards with
    old singlestat panels in collapsed rows.
  * Datasource: Fix storing timeout option as numeric.
  * Postgres/MySQL/MSSQL: Fix annotation parsing for empty
    responses.
  * Postgres/MySQL/MSSQL: Numeric/non-string values are now
    returned from query variables.
  * Postgres: Fix an error that was thrown when the annotation
    query did not return any results.
  * StatPanel: Fix an issue with the appearance of the graph when
    switching color mode.
  * Visualizations: Fix an issue in the
    Stat/BarGauge/Gauge/PieChart panels where all values mode
    were showing the same name if they had the same value.
  + Plugin development fixes &amp; changes:
  * Toolkit: Resolve external fonts when Grafana is served from a
    sub path.
- Update to version 8.0.0
  + Breaking changes:
  * The following endpoints were deprecated for Grafana v5.0 and
    support for them has now been removed:
    GET /dashboards/db/:slug
    GET /dashboard-solo/db/:slug
    GET /api/dashboard/db/:slug
    DELETE /api/dashboards/db/:slug
  + Features and enhancements:
  * AzureMonitor: Require default subscription for workspaces()
    template variable query.
  * AzureMonitor: Use resource type display names in the UI.
  * Dashboard: Remove support for loading and deleting dashboard
    by slug.
  * InfluxDB: Deprecate direct browser access in data source.
  * VizLegend: Add a read-only property.
  + Bug fixes:
  * AzureMonitor: Fix Azure Resource Graph queries in Azure
    China.
  * Checkbox: Fix vertical layout issue with checkboxes due to
    fixed height.
  * Dashboard: Fix Table view when editing causes the panel data
    to not update.
  * Dashboard: Fix issues where unsaved-changes warning is not
    displayed.
  * Login: Fixes Unauthorized message showing when on login page
    or snapshot page.
  * NodeGraph: Fix sorting markers in grid view.
  * Short URL: Include orgId in generated short URLs.
  * Variables: Support raw values of boolean type.
- Update to version 8.0.0-beta3
  + Breaking changes:
  * The default HTTP method for Prometheus data source is now
    POST.
  + Features and enhancements:
  * API: Support folder UID in dashboards API.
  * Alerting: Add support for configuring avatar URL for the
    Discord notifier.
  * Alerting: Clarify that Threema Gateway Alerts support only
    Basic IDs.
  * Azure: Expose Azure settings to external plugins.
  * AzureMonitor: Deprecate using separate credentials for Azure
    Monitor Logs.
  * AzureMonitor: Display variables in resource picker for Azure
    Monitor Logs.
  * AzureMonitor: Hide application insights for data sources not
    using it.
  * AzureMonitor: Support querying subscriptions and resource
    groups in Azure Monitor Logs.
  * AzureMonitor: remove requirement for default subscription.
  * CloudWatch: Add Lambda@Edge Amazon CloudFront metrics.
  * CloudWatch: Add missing AWS AppSync metrics.
  * ConfirmModal: Auto focus delete button.
  * Explore: Add caching for queries that are run from logs
    navigation.
  * Loki: Add formatting for annotations.
  * Loki: Bring back processed bytes as meta information.
  * NodeGraph: Display node graph collapsed by default with trace
    view.
  * Overrides: Include a manual override option to hide something
    from visualization.
  * PieChart: Support row data in pie charts.
  * Prometheus: Update default HTTP method to POST for existing
    data sources.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  + Bug fixes:
  * Admin: Fix infinite loading edit on the profile page.
  * Color: Fix issues with random colors in string and date
    fields.
  * Dashboard: Fix issue with title or folder change has no
    effect after exiting settings view.
  * DataLinks: Fix an issue __series.name is not working in data
    link.
  * Datasource: Fix dataproxy timeout should always be applied
    for outgoing data source HTTP requests.
  * Elasticsearch: Fix NewClient not passing httpClientProvider
    to client impl.
  * Explore: Fix Browser title not updated on Navigation to
    Explore.
  * GraphNG: Remove fieldName and hideInLegend properties from
    UPlotSeriesBuilder.
  * OAuth: Fix fallback to auto_assign_org_role setting for Azure
    AD OAuth when no role claims exists.
  * PanelChrome: Fix issue with empty panel after adding a non
    data panel and coming back from panel edit.
  * StatPanel: Fix data link tooltip not showing for single
    value.
  * Table: Fix sorting for number fields.
  * Table: Have text underline for datalink, and add support for
    image datalink.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  * Transformations: Prevent FilterByValue transform from
    crashing panel edit.
- Update to version 8.0.0-beta2
  + Features and enhancements:
  * AppPlugins: Expose react-router to apps.
  * AzureMonitor: Add Azure Resource Graph.
  * AzureMonitor: Managed Identity configuration UI.
  * AzureMonitor: Token provider with support for Managed
    Identities.
  * AzureMonitor: Update Logs workspace() template variable query
    to return resource URIs.
  * BarChart: Value label sizing.
  * CloudMonitoring: Add support for preprocessing.
  * CloudWatch: Add AWS/EFS StorageBytes metric.
  * CloudWatch: Allow use of missing AWS namespaces using custom
    metrics.
  * Datasource: Shared HTTP client provider for core backend data
    sources and any data source using the data source proxy.
  * InfluxDB: InfluxQL: allow empty tag values in the query
    editor.
  * Instrumentation: Instrument incoming HTTP request with
    histograms by default.
  * Library Panels: Add name endpoint &amp; unique name validation to
    AddLibraryPanelModal.
  * Logs panel: Support details view.
  * PieChart: Always show the calculation options dropdown in the
    editor.
  * PieChart: Remove beta flag.
  * Plugins: Enforce signing for all plugins.
  * Plugins: Remove support for deprecated backend plugin
    protocol version.
  * Tempo/Jaeger: Add better display name to legend.
  * Timeline: Add time range zoom.
  * Timeline: Adds opacity &amp; line width option.
  * Timeline: Value text alignment option.
  * ValueMappings: Add duplicate action, and disable dismiss on
    backdrop click.
  * Zipkin: Add node graph view to trace response.
  + Bug fixes:
  * Annotations panel: Remove subpath from dashboard links.
  * Content Security Policy: Allow all image sources by default.
  * Content Security Policy: Relax default template wrt. loading
    of scripts, due to nonces not working.
  * Datasource: Fix tracing propagation for alert execution by
    introducing HTTP client outgoing tracing middleware.
  * InfluxDB: InfluxQL always apply time interval end.
  * Library Panels: Fixes "error while loading library panels".
  * NewsPanel: Fixes rendering issue in Safari.
  * PanelChrome: Fix queries being issued again when scrolling in
    and out of view.
  * Plugins: Fix Azure token provider cache panic and auth param
    nil value.
  * Snapshots: Fix key and deleteKey being ignored when creating
    an external snapshot.
  * Table: Fix issue with cell border not showing with colored
    background cells.
  * Table: Makes tooltip scrollable for long JSON values.
  * TimeSeries: Fix for Connected null values threshold toggle
    during panel editing.
  * Variables: Fixes inconsistent selected states on dashboard
    load.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * QueryField: Remove carriage return character from pasted text.
- Update to version 8.0.0-beta1
  + License update:
  * AGPL License: Update license from Apache 2.0 to the GNU
    Affero General Public License (AGPL).
  + Breaking changes:
  * Removes the never refresh option for Query variables.
  * Removes the experimental Tags feature for Variables.
  + Deprecations:
  * The InfoBox &amp; FeatureInfoBox are now deprecated please use
    the Alert component instead with severity info.
  + Features and enhancements:
  * API: Add org users with pagination.
  * API: Return 404 when deleting nonexistent API key.
  * API: Return query results as JSON rather than base64 encoded
    Arrow.
  * Alerting: Allow sending notification tags to Opsgenie as
    extra properties.
  * Alerts: Replaces all uses of InfoBox &amp; FeatureInfoBox with
    Alert.
  * Auth: Add support for JWT Authentication.
  * AzureMonitor: Add support for
    Microsoft.SignalRService/SignalR metrics.
  * AzureMonitor: Azure settings in Grafana server config.
  * AzureMonitor: Migrate Metrics query editor to React.
  * BarChart panel: enable series toggling via legend.
  * BarChart panel: Adds support for Tooltip in BarChartPanel.
  * PieChart panel: Change look of highlighted pie slices.
  * CloudMonitoring: Migrate config editor from angular to react.
  * CloudWatch: Add Amplify Console metrics and dimensions.
  * CloudWatch: Add missing Redshift metrics to CloudWatch data
    source.
  * CloudWatch: Add metrics for managed RabbitMQ service.
  * DashboardList: Enable templating on search tag input.
  * Datasource config: correctly remove single custom http
    header.
  * Elasticsearch: Add generic support for template variables.
  * Elasticsearch: Allow omitting field when metric supports
    inline script.
  * Elasticsearch: Allow setting a custom limit for log queries.
  * Elasticsearch: Guess field type from first non-empty value.
  * Elasticsearch: Use application/x-ndjson content type for
    multisearch requests.
  * Elasticsearch: Use semver strings to identify ES version.
  * Explore: Add logs navigation to request more logs.
  * Explore: Map Graphite queries to Loki.
  * Explore: Scroll split panes in Explore independently.
  * Explore: Wrap each panel in separate error boundary.
  * FieldDisplay: Smarter naming of stat values when visualising
    row values (all values) in stat panels.
  * Graphite: Expand metric names for variables.
  * Graphite: Handle unknown Graphite functions without breaking
    the visual editor.
  * Graphite: Show graphite functions descriptions.
  * Graphite: Support request cancellation properly (Uses new
    backendSrv.fetch Observable request API).
  * InfluxDB: Flux: Improve handling of complex
    response-structures.
  * InfluxDB: Support region annotations.
  * Inspector: Download logs for manual processing.
  * Jaeger: Add node graph view for trace.
  * Jaeger: Search traces.
  * Loki: Use data source settings for alerting queries.
  * NodeGraph: Exploration mode.
  * OAuth: Add support for empty scopes.
  * PanelChrome: New logic-less emotion based component with no
    dependency on PanelModel or DashboardModel.
  * PanelEdit: Adds a table view toggle to quickly view data in
    table form.
  * PanelEdit: Highlight matched words when searching options.
  * PanelEdit: UX improvements.
  * Plugins: PanelRenderer and simplified QueryRunner to be used
    from plugins.
  * Plugins: AuthType in route configuration and params
    interpolation.
  * Plugins: Enable plugin runtime install/uninstall
    capabilities.
  * Plugins: Support set body content in plugin routes.
  * Plugins: Introduce marketplace app.
  * Plugins: Moving the DataSourcePicker to grafana/runtime so it
    can be reused in plugins.
  * Prometheus: Add custom query params for alert and exemplars
    queries.
  * Prometheus: Use fuzzy string matching to autocomplete metric
    names and label.
  * Routing: Replace Angular routing with react-router.
  * Slack: Use chat.postMessage API by default.
  * Tempo: Search for Traces by querying Loki directly from
    Tempo.
  * Tempo: Show graph view of the trace.
  * Themes: Switch theme without reload using global shortcut.
  * TimeSeries panel: Add support for shared cursor.
  * TimeSeries panel: Do not crash the panel if there is no time
    series data in the response.
  * Variables: Do not save repeated panels, rows and scopedVars.
  * Variables: Removes experimental Tags feature.
  * Variables: Removes the never refresh option.
  * Visualizations: Unify tooltip options across visualizations.
  * Visualizations: Refactor and unify option creation between
    new visualizations.
  * Visualizations: Remove singlestat panel.
  + Bug fixes:
  * APIKeys: Fixes issue with adding first api key.
  * Alerting: Add checks for non supported units - disable
    defaulting to seconds.
  * Alerting: Fix issue where Slack notifications won't link to
    user IDs.
  * Alerting: Omit empty message in PagerDuty notifier.
  * AzureMonitor: Fix migration error from older versions of App
    Insights queries.
  * CloudWatch: Fix AWS/Connect dimensions.
  * CloudWatch: Fix broken AWS/MediaTailor dimension name.
  * Dashboards: Allow string manipulation as advanced variable
    format option.
  * DataLinks: Includes harmless extended characters like
    Cyrillic characters.
  * Drawer: Fixes title overflowing its container.
  * Explore: Fix issue when some query errors were not shown.
  * Generic OAuth: Prevent adding duplicated users.
  * Graphite: Handle invalid annotations.
  * Graphite: Fix autocomplete when tags are not available.
  * InfluxDB: Fix Cannot read property 'length' of undefined in
    when parsing response.
  * Instrumentation: Enable tracing when Jaeger host and port are
    set.
  * Instrumentation: Prefix metrics with grafana.
  * MSSQL: By default let driver choose port.
  * OAuth: Add optional strict parsing of role_attribute_path.
  * Panel: Fixes description markdown with inline code being
    rendered on newlines and full width.
  * PanelChrome: Ignore data updates &amp; errors for non data
    panels.
  * Permissions: Fix inherited folder permissions can prevent new
    permissions being added to a dashboard.
  * Plugins: Remove pre-existing plugin installs when installing
    with grafana-cli.
  * Plugins: Support installing to folders with whitespace and
    fix pluginUrl trailing and leading whitespace failures.
  * Postgres/MySQL/MSSQL: Don't return connection failure details
    to the client.
  * Postgres: Fix ms precision of interval in time group macro
    when TimescaleDB is enabled.
  * Provisioning: Use dashboard checksum field as change
    indicator.
  * SQL: Fix so that all captured errors are returned from sql
    engine.
  * Shortcuts: Fixes panel shortcuts so they always work.
  * Table: Fixes so border is visible for cells with links.
  * Variables: Clear query when data source type changes.
  * Variables: Filters out builtin variables from unknown list.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * Button: Introduce buttonStyle prop.
  * DataQueryRequest: Remove deprecated props showingGraph and
    showingTabel and exploreMode.
  * grafana/ui: Update React Hook Form to v7.
  * IconButton: Introduce variant for red and blue icon buttons.
  * Plugins: Expose the getTimeZone function to be able to get
    the current selected timeZone.
  * TagsInput: Add className to TagsInput.
  * VizLegend: Move onSeriesColorChanged to PanelContext
    (breaking change).
- Update to version 7.5.13
  + Bug fixes:
  * Alerting: Fix NoDataFound for alert rules using AND operator.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1644408000">- Update to version 8.3.5 (jsc#SLE-23439, jsc#SLE-23422)
  + Security:
  * Fixes XSS vulnerability in handling data sources
    (bsc#1195726, CVE-2022-21702)
  * Fixes cross-origin request forgery vulnerability
    (bsc#1195727, CVE-2022-21703)
  * Fixes Insecure Direct Object Reference vulnerability in Teams
    API (bsc#1195728, CVE-2022-21713)</changelog>
</package>
<package pkgid="d8c1c0044a3ad7dd9f2433b12a10d2eaae7d3be502b1719deca0f21693fab5d2" name="grafana" arch="x86_64">
  <version epoch="0" ver="8.3.5" rel="150200.3.21.1"/>
  <changelog author="egotthold@suse.com" date="1589457600">- Add instructions for patching the Grafana javascript frontend.</changelog>
  <changelog author="jcavalheiro@suse.com" date="1590321600">- Update to version 7.0.0
  * Breaking changes
  - Removed PhantomJS: PhantomJS was deprecated in Grafana v6.4 and starting from Grafana v7.0.0, all PhantomJS support has been removed. This means that Grafana no longer ships with a built-in image renderer, and we advise you to install the Grafana Image Renderer plugin.
  - Dashboard: A global minimum dashboard refresh interval is now enforced and defaults to 5 seconds.
  - Interval calculation: There is now a new option Max data points that controls the auto interval $__interval calculation. Interval was previously calculated by dividing the panel width by the time range. With the new max data points option it is now easy to set $__interval to a dynamic value that is time range agnostic. For example if you set Max data points to 10 Grafana will dynamically set $__interval by dividing the current time range by 10.
  - Datasource/Loki: Support for deprecated Loki endpoints has been removed.
  - Backend plugins: Grafana now requires backend plugins to be signed, otherwise Grafana will not load/start them. This is an additional security measure to make sure backend plugin binaries and files haven't been tampered with. Refer to Upgrade Grafana for more information.
  - @grafana/ui: Forms migration notice, see @grafana/ui changelog
  - @grafana/ui: Select API change for creating custom values, see @grafana/ui changelog
    + Deprecation warnings
  - Scripted dashboards is now deprecated. The feature is not removed but will be in a future release. We hope to address the underlying requirement of dynamic dashboards in a different way. #24059
  - The unofficial first version of backend plugins together with usage of grafana/grafana-plugin-model is now deprecated and support for that will be removed in a future release. Please refer to backend plugins documentation for information about the new officially supported backend plugins.
  * Features / Enhancements
  - Backend plugins: Log deprecation warning when using the unofficial first version of backend plugins. #24675, @marefr
  - Editor: New line on Enter, run query on Shift+Enter. #24654, @davkal
  - Loki: Allow multiple derived fields with the same name. #24437, @aocenas
  - Orgs: Add future deprecation notice. #24502, @torkelo
  * Bug Fixes
  - @grafana/toolkit: Use process.cwd() instead of PWD to get directory. #24677, @zoltanbedi
  - Admin: Makes long settings values line break in settings page. #24559, @hugohaggmark
  - Dashboard: Allow editing provisioned dashboard JSON and add confirmation when JSON is copied to dashboard. #24680, @dprokop
  - Dashboard: Fix for strange "dashboard not found" errors when opening links in dashboard settings. #24416, @torkelo
  - Dashboard: Fix so default data source is selected when data source can't be found in panel editor. #24526, @mckn
  - Dashboard: Fixed issue changing a panel from transparent back to normal in panel editor. #24483, @torkelo
  - Dashboard: Make header names reflect the field name when exporting to CSV file from the the panel inspector. #24624, @peterholmberg
  - Dashboard: Make sure side pane is displayed with tabs by default in panel editor. #24636, @dprokop
  - Data source: Fix query/annotation help content formatting. #24687, @AgnesToulet
  - Data source: Fixes async mount errors. #24579, @Estrax
  - Data source: Fixes saving a data source without failure when URL doesn't specify a protocol. #24497, @aknuds1
  - Explore/Prometheus: Show results of instant queries only in table. #24508, @ivanahuckova
  - Explore: Fix rendering of react query editors. #24593, @ivanahuckova
  - Explore: Fixes loading more logs in logs context view. #24135, @Estrax
  - Graphite: Fix schema and dedupe strategy in rollup indicators for Metrictank queries. #24685, @torkelo
  - Graphite: Makes query annotations work again. #24556, @hugohaggmark
  - Logs: Clicking "Load more" from context overlay doesn't expand log row. #24299, @kaydelaney
  - Logs: Fix total bytes process calculation. #24691, @davkal
  - Org/user/team preferences: Fixes so UI Theme can be set back to Default. #24628, @AgnesToulet
  - Plugins: Fix manifest validation. #24573, @aknuds1
  - Provisioning: Use proxy as default access mode in provisioning. #24669, @bergquist
  - Search: Fix select item when pressing enter and Grafana is served using a sub path. #24634, @tskarhed
  - Search: Save folder expanded state. #24496, @Clarity-89
  - Security: Tag value sanitization fix in OpenTSDB data source. #24539, @rotemreiss
  - Table: Do not include angular options in options when switching from angular panel. #24684, @torkelo
  - Table: Fixed persisting column resize for time series fields. #24505, @torkelo
  - Table: Fixes Cannot read property subRows of null. #24578, @hugohaggmark
  - Time picker: Fixed so you can enter a relative range in the time picker without being converted to absolute range. #24534, @mckn
  - Transformations: Make transform dropdowns not cropped. #24615, @dprokop
  - Transformations: Sort order should be preserved as entered by user when using the reduce transformation. #24494, @hugohaggmark
  - Units: Adds scale symbol for currencies with suffixed symbol. #24678, @hugohaggmark
  - Variables: Fixes filtering options with more than 1000 entries. #24614, @hugohaggmark
  - Variables: Fixes so Textbox variables read value from url. #24623, @hugohaggmark
  - Zipkin: Fix error when span contains remoteEndpoint. #24524, @aocenas
  - SAML: Switch from email to login for user login attribute mapping (Enterprise)
- Update Makefile and spec file
  * Remove phantomJS patch from Makefile
  * Fix multiline strings in Makefile
  * Exclude s390 from SLE12 builds, golang 1.14 is not built for s390</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591012800">- Update to version 7.0.1
  * Features / Enhancements
  - Datasource/CloudWatch: Makes CloudWatch Logs query history more readable. #24795, @kaydelaney
  - Download CSV: Add date and time formatting. #24992, @ryantxu
  - Table: Make last cell value visible when right aligned. #24921, @peterholmberg
  - TablePanel: Adding sort order persistance. #24705, @torkelo
  - Transformations: Display correct field name when using reduce transformation. #25068, @peterholmberg
  - Transformations: Allow custom number input for binary operations. #24752, @ryantxu
  * Bug fixes
  - Dashboard/Links: Fixes dashboard links by tags not working. #24773, @KamalGalrani
  - Dashboard/Links: Fixes open in new window for dashboard link. #24772, @KamalGalrani
  - Dashboard/Links: Variables are resolved and limits to 100. #25076, @hugohaggmark
  - DataLinks: Bring back variables interpolation in title. #24970, @dprokop
  - Datasource/CloudWatch: Field suggestions no longer limited to prefix-only. #24855, @kaydelaney
  - Explore/Table: Keep existing field types if possible. #24944, @kaydelaney
  - Explore: Fix wrap lines toggle for results of queries with filter expression. #24915, @ivanahuckova
  - Explore: fix undo in query editor. #24797, @zoltanbedi
  - Explore: fix word break in type head info. #25014, @zoltanbedi
  - Graph: Legend decimals now work as expected. #24931, @torkelo
  - LoginPage: Fix hover color for service buttons. #25009, @tskarhed
  - LogsPanel: Fix scrollbar. #24850, @ivanahuckova
  - MoveDashboard: Fix for moving dashboard caused all variables to be lost. #25005, @torkelo
  - Organize transformer: Use display name in field order comparer. #24984, @dprokop
  - Panel: shows correct panel menu items in view mode. #24912, @hugohaggmark
  - PanelEditor Fix missing labels and description if there is only single option in category. #24905, @dprokop
  - PanelEditor: Overrides name matcher still show all original field names even after Field default display name is specified. #24933, @torkelo
  - PanelInspector: Makes sure Data display options are visible. #24902, @hugohaggmark
  - PanelInspector: Hides unsupported data display options for Panel type. #24918, @hugohaggmark
  - PanelMenu: Make menu disappear on button press. #25015, @tskarhed
  - Postgres: Fix add button. #25087, @phemmer
  - Prometheus: Fix recording rules expansion. #24977, @ivanahuckova
  - Stackdriver: Fix creating Service Level Objectives (SLO) datasource query variable. #25023, @papagian</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591358400">- Update to version 7.0.3
  * Features / Enhancements
  - Stats: include all fields. #24829, @ryantxu
  - Variables: change VariableEditorList row action Icon to IconButton. #25217, @hshoff
  * Bug fixes
  - Cloudwatch: Fix dimensions of DDoSProtection. #25317, @papagian
  - Configuration: Fix env var override of sections containing hyphen. #25178, @marefr
  - Dashboard: Get panels in collapsed rows. #25079, @peterholmberg
  - Do not show alerts tab when alerting is disabled. #25285, @dprokop
  - Jaeger: fixes cascader option label duration value. #25129, @Estrax
  - Transformations: Fixed Transform tab crash &amp; no update after adding first transform. #25152, @torkelo
- Update to version 7.0.2
  * Bug fixes
  - Security: Urgent security patch release to fix CVE-2020-13379</changelog>
  <changelog author="jcavalheiro@suse.com" date="1600430400">- Update to version 7.1.5:
  * Features / Enhancements
  - Stats: Stop counting the same user multiple times.
  - Field overrides: Filter by field name using regex.
  - AzureMonitor: map more units.
  - Explore: Don't run queries on datasource change.
  - Graph: Support setting field unit &amp; override data source (automatic) unit.
  - Explore: Unification of logs/metrics/traces user interface
  - Table: JSON Cell should try to convert strings to JSON
  - Variables: enables cancel for slow query variables queries.
  - TimeZone: unify the time zone pickers to one that can rule them all.
  - Search: support URL query params.
  - Grafana-UI: Add FileUpload.
  - TablePanel: Sort numbers correctly.
  * Bug fixes
  - Alerting: remove LongToWide call in alerting.
  - AzureMonitor: fix panic introduced in 7.1.4 when unit was unspecified and alias was used.
  - Variables: Fixes issue with All variable not being resolved.
  - Templating: Fixes so texts show in picker not the values.
  - Templating: Templating: Fix undefined result when using raw interpolation format
  - TextPanel: Fix content overflowing panel boundaries.
  - StatPanel: Fix stat panel display name not showing when explicitly set.
  - Query history: Fix search filtering if null value.
  - Flux: Ensure connections to InfluxDB are closed.
  - Dashboard: Fix for viewer can enter panel edit mode by modifying url (but cannot not save anything).
  - Prometheus: Fix prom links in mixed mode.
  - Sign In Use correct url for the Sign In button.
  - StatPanel: Fixes issue with name showing for single series / field results
  - BarGauge: Fix space bug in single series mode.
  - Auth: Fix POST request failures with anonymous access
  - Templating: Fix recursive loop of template variable queries when changing ad-hoc-variable
  - Templating: Fixed recursive queries triggered when switching dashboard settings view
  - GraphPanel: Fix annotations overflowing panels.
  - Prometheus: Fix performance issue in processing of histogram labels.
  - Datasources: Handle URL parsing error.
  - Security: Use Header.Set and Header.Del for X-Grafana-User header.
  * Changes in spec file
  - Fix golang version = 1.14 to avoid dependency conflicts on some OBS projects</changelog>
  <changelog author="witold.bedyk@suse.com" date="1604577600">- Update to version 7.3.1:
  * Breaking changes
  - CloudWatch: The AWS CloudWatch data source's authentication scheme has changed. See the upgrade notes for details and how this may affect you.
  - Units: The date time units `YYYY-MM-DD HH:mm:ss` and `MM/DD/YYYY h:mm:ss a` have been renamed to `Datetime ISO` and `Datetime US` respectively.
  * Features / Enhancements
  - AzureMonitor: Support decimal (as float64) type in analytics/logs.
  - Add monitoring mixing for Grafana.
  - CloudWatch: Missing Namespace AWS/EC2CapacityReservations.
  - CloudWatch: Add support for AWS DirectConnect virtual interface metrics and add missing dimensions.
  - CloudWatch: Adding support for Amazon ElastiCache Redis metrics.
  - CloudWatch: Adding support for additional Amazon CloudFront metrics.
  - CloudWatch: Re-implement authentication.
  - Elasticsearch: Support multiple pipeline aggregations for a query.
  - Prometheus: Add time range parameters to labels API.
  - Loki: Visually distinguish error logs for LogQL2.
  - Api: Add /healthz endpoint for health checks.
  - API: Enrich add user to org endpoints with user ID in the response.
  - API: Enrich responses and improve error handling for alerting API endpoints.
  - Elasticsearch: Add support for date_nanos type.
  - Elasticsearch: Allow fields starting with underscore.
  - Elasticsearch: Increase maximum geohash aggregation precision to 12.
  - Postgres: Support request cancellation properly (Uses new backendSrv.fetch Observable request API).
  - Provisioning: Remove provisioned dashboards without parental reader.
  - API: Return ID of the deleted resource for dashboard, datasource and folder DELETE endpoints.
  - API: Support paging in the admin orgs list API.
  - API: return resource ID for auth key creation, folder permissions update and user invite complete endpoints.
  - BackendSrv: Uses credentials, deprecates withCredentials &amp; defaults to same-origin.
  - CloudWatch: Update list of AmazonMQ metrics and dimensions.
  - Cloudwatch: Add Support for external ID in assume role.
  - Cloudwatch: Add af-south-1 region.
  - DateFormats: Default ISO &amp; US formats never omit date part even if date is today (breaking change).
  - Explore: Transform prometheus query to elasticsearch query.
  - InfluxDB/Flux: Increase series limit for Flux datasource.
  - InfluxDB: exclude result and table column from Flux table results.
  - InfluxDB: return a table rather than an error when timeseries is missing time.
  - Loki: Add scopedVars support in legend formatting for repeated variables.
  - Loki: Re-introduce running of instant queries.
  - Loki: Support request cancellation properly (Uses new backendSrv.fetch Observable request API).
  - MixedDatasource: Shows retrieved data even if a data source fails.
  - Postgres: Support Unix socket for host.
  - Prometheus: Add scopedVars support in legend formatting for repeated variables.
  - Prometheus: Support request cancellation properly (Uses new backendSrv.fetch Observable request API).
  - Prometheus: add $__rate_interval variable.
  - Table: Adds column filtering.
  - grafana-cli: Add ability to read password from stdin to reset admin password.</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update packaging
  * avoid systemd and shadow hard requirements
  * Require the user from a new dedicated 'system-user-grafana' sibling package
  * avoid pinning to a specific Go version in the spec file</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- Update to version 7.3.6:
  * fixes for saml vulnerability
  * [v7.3.x] Fix: Correct panel edit uistate migration (#29413) (#29711)
  * PanelEdit: Prevent the preview pane to be resized further than window height (#28370) (#29726)
  * Fix: Migrate Panel edit uiState percentage strings to number (#29412) (#29723)
  * "Release: Updated versions in package to 7.3.5" (#29710)
  * Chore: upgrading y18n to 4.0.1 for security reasons (#29523) (#29709)
  * Panel: making sure we support all versions of chrome when detecting position of click event. (#29544) (#29708)
  * PanelEdit: making sure the correct datasource query editor is being rendered. (#29500) (#29707)
  * [v7.3.x] Auth: Add SigV4 header allowlist to reduce chances of verification issues (#29705)
  * Alerting: Use correct time series name override from frame fields (#29693) (#29698)
  * CloudWatch: namespace in search expression should be quoted if match exact is enabled #29109 (#29563) (#29687)
  * Adds go dep used by an Enterprise feature.  (#29645) (#29690)
  * instrumentation: align label name with our other projects (#29514) (#29685)
  * Instrumentation: Add examplars for request histograms (#29357) (#29682)
  * Login: Fixes typo in tooltip (#29604) (#29606)
  * fixes bug with invalid handler name for metrics (#29529) (#29532)
  * AzureMonitor: Unit MilliSeconds naming (#29399) (#29526)
  * Alarting: fix alarm messages in dingding (Fixes #29470) (#29482) (#29527)
  * Bug: trace viewer doesn't show more than 300 spans (#29377) (#29504)
  * Prometheus: don't override displayName property (#29441) (#29488)
  * resolve conflicts (#29415)
  * Drone: Upgrade build pipeline tool (#29365) (#29368)
  * Drone: Upload artifacts for release branch builds (#29297) (#29364)
  * Drone: Execute artifact publishing for both editions in parallel during release (#29362) (#29363)
  * Drone: Publish NPM packages after Storybook to avoid race condition (#29340) (#29343)
  * Docs: Fix editor role and alert notification channel description (#29301) (#29337)
  * "Release: Updated versions in package to 7.3.4" (#29336)
  * Security: Fixes minor security issue with alert notification webhooks that allowed GET &amp; DELETE requests #29330 (#29335)
  * Backport of InfluxDB: update flux library and support boolean label values #29333
  * ReleaseNotes: Update link in package.json (#29328)
  * Login: Fixes redirect url encoding issues of # %23 being unencoded after login (#29299) (#29323)
  * Drone: Upgrade build pipeline tool (#29308) (#29309)
  * Annotations: fixing so when changing annotations query links submenu will be updated. (#28990) (#29285)
  * Dashboard: Fixes kiosk state after being redirected to login page and back (#29273) (#29278)
  * Increase search limit on team add user and improve placeholder (#29258) (#29261)
  * Drone: Sync with master (#29205)
  * Drone: Fix publish-packages invocation (#29179) (#29184)
  * Chore: Upgrade grafana/build-ci-deploy image to latest Go (#29171) (#29180)
  * Table: Fix incorrect condtition for rendering table filter (#29165) (#29181)
  * DashboardLinks: will only refresh dashboard search when changing tags for link. (#29040) (#29177)
  * Drone: Upgrade build pipeline tool and build image (#29161) (#29162)
  * Release: Updated versions in package to 7.3.3 (#29126)
  * git cherry-pick -x 0f3bebb38daa488e108881ce17d4f68167a834e6 (#29155)
  * Build: support custom build tags (#28609) (#29128)
  * Revert "Graph: Fixes stacking issues like floating bars when data is not aligned  (#29051) (#29088)" (#29151)
  * Provisioning: always pin app to the sidebar when enabled (#29084) (#29146)
  * build paths in an os independent way (#29143) (#29147)
  * Chore: Upgrade Go dev tools (#29124) (#29132)
  * Automatin: set node version
  * Automation: Adding version bump action
  * Drone: Fix Drone config verification for enterprise on Windows (#29118) (#29119)
  * [v7.3.x] Drone: Verify Drone config at beginning of pipelines (#29111)
  * Test Datasource/Bug: Fixes division by zero in csv metric values scenario (#29029) (#29068)
  * [v7.3.x] StatPanel: Fixes hanging issue when all values are zero (#29087)
  * Data source proxy: Convert 401 from data source to 400 (#28962) (#29095)
  * Graph: Fixes stacking issues like floating bars when data is not aligned  (#29051) (#29088)
  * Auth: Enable more complete credential chain for SigV4 default SDK auth option (#29065) (#29086)
  * Fix for multi-value template variable for project selector (#29042) (#29054)
  * Thresholds: Fixes color assigned to null values (#29010) (#29018)
  * [v7.3.x] Chore: Bump build pipeline version (#29025)
  * Release v7.3.2 (#29024)
  * Fix conflict (#29020)
  * StatPanels: Fixes auto min max when latest value is zero (#28982) (#29007)
  * Tracing: Add setting for sampling server (#29011) (#29015)
  * Gauge: making sure threshold panel json is correct before render (#28898) (#28984)
  * Variables: make sure that we support both old and new syntax for custom variables. (#28896) (#28985)
  * Explore: Remove redundant decodeURI and fix urls (#28697) (#28963)
  * [v7.3.x] Drone: Fix docs building (#28987)
  * Alerting: Append appSubUrl to back button on channel form (#28282) (#28983)
  * Plugins: allow override when allowing unsigned plugins (#28901) (#28927)
  * CloudWatch Logs: Change what we use to measure progress (#28912) (#28964)
  * Tracing: log traceID in request logger (#28952) (#28959)
  * Panel inspect: Interpolate variables in panel inspect title (#28779) (#28801)
  * UsageStats: start tracking usage stats for tempo (#28948) (#28951)
  * Short URL: Cleanup unvisited/stale short URLs (#28867) (#28944)
  * Plugins signing: Fix docs urls (#28930) (#28934)
  * Chore: Fix spelling issue (#28904) (#28925)
  * API: replace SendLoginLogCommand with LoginHook (#28777) (#28891)
  * Elasticsearch: Exclude pipeline aggregations from order by options (#28620) (#28873)
  * Dashboards / Folders: delete related data (permissions, stars, tags, versions, annotations) when deleting a dashboard or a folder (#28826) (#28890)
  * Disable selecting enterprise plugins with no license (#28758) (#28859)
  * Tempo: fix test data source (#28836) (#28856)
  * Prometheus: fix missing labels from value (#28842) (#28855)
  * Units: added support to handle negative fractional numbers. (#28849) (#28851)
  * increase blob column size for encrypted dashboard data (#28831) (#28832)
  * Gauge: Improve font size auto sizing (#28797) (#28828)
  * Variables: Fixes URL values for dependent variables (#28798) (#28800)
  * grafana/toolkit: Extract CHANGELOG when building plugin (#28773) (#28774)
  * Templating: Custom variable edit UI, change text input into textarea  (#28312) (#28322) (#28704)
  * Cloudwatch: Fix issue with field calculation transform not working properly with Cloudwatch data (#28761) (#28775)
  * Plugin page: Fix dom validation warning (#28737) (#28741)
  * Dashboard: fix view panel mode for Safari / iOS (#28702) (#28755)
  * Fix typo in unsigned plugin warning (#28709) (#28722)
  * TableFilters: Fixes filtering with field overrides (#28690) (#28727)
  * Templating: Speeds up certain variable queries for Postgres, MySql and MSSql (#28686) (#28726)
  * Prometheus: Fix copy paste behaving as cut and paste (#28622) (#28691)</changelog>
  <changelog author="tserong@suse.com" date="1613563200">- Update to version 7.4.1:
  * "Release: Updated versions in package to 7.4.1" (#31128)
  * Transforms: Fixes Outer join issue with duplicate field names not getting the same unique field names as before  (#31121) (#31127)
  * MuxWriter: Handle error for already closed file (#31119) (#31120)
  * Logging: sourcemap transform asset urls from CDN in logged stacktraces (#31115) (#31117)
  * Exemplars: Change CTA style (#30880) (#31105)
  * test: add support for timeout to be passed in for addDatasource (#30736) (#31090)
  * Influx: Make max series limit configurable and show the limiting message if applied (#31025) (#31100)
  * Elasticsearch: fix log row context erroring out (#31088) (#31094)
  * test: update addDashboard flow for v7.4.0 changes (#31059) (#31084)
  * Usage stats: Adds source/distributor setting (#31039) (#31076)
  * DashboardLinks: Fixes crash when link has no title (#31008) (#31050)
  * Make value mappings correctly interpret numeric-like strings (#30893) (#30912)
  * Elasticsearch: Fix alias field value not being shown in query editor (#30992) (#31037)
  * BarGauge: Improvements to value sizing and table inner width calculations  (#30990) (#31032)
  * convert path to posix by default (#31045) (#31053)
  * Alerting: Fixes so notification channels are properly deleted (#31040) (#31046)
  * Drone: Fix deployment image (#31027) (#31029)
  * Graph: Fixes so graph is shown for non numeric time values (#30972) (#31014)
  * instrumentation: make the first database histogram bucket smaller (#30995) (#31001)
  * Build: Releases e2e and e2e-selectors too (#31006) (#31007)
  * TextPanel: Fixes so panel title is updated when variables change (#30884) (#31005)
  * StatPanel: Fixes issue formatting date values using unit option (#30979) (#30991)
  * Units: Fixes formatting of duration units (#30982) (#30986)
  * Elasticsearch: Show Size setting for raw_data metric (#30980) (#30983)
  * Logging: sourcemap support for frontend stacktraces (#30590) (#30976)
  * e2e: extends selector factory to plugins (#30932) (#30934)
  * Variables: Adds queryparam formatting option (#30858) (#30924)
  * Exemplars: change api to reflect latest changes (#30910) (#30915)
  * "Release: Updated versions in package to 7.4.0" (#30898)
  * DataSourceSettings: Adds info box and link to Grafana Cloud (#30891) (#30896)
  * GrafanaUI: Add a way to persistently close InfoBox (#30716) (#30895)
  * [7.4.x] AlertingNG: List saved Alert definitions in Alert Rule list (30890)(30603)
  * Alerting: Fixes alert panel header icon not showing (#30840) (#30885)
  * Plugins: Requests validator (#30445) (#30877)
  * PanelLibrary: Adds library panel meta information to dashboard json (#30770) (#30883)
  * bump grabpl version to 0.5.36 (#30874) (#30878)
  * Chore: remove __debug_bin (#30725) (#30857)
  * Grafana-ui: fixes closing modals with escape key (#30745) (#30873)
  * DashboardLinks: Support variable expression in to tooltip - Issue #30409 (#30569) (#30852)
  * Add alt text to plugin logos (#30710) (#30872)
  * InfluxDB: Add http configuration when selecting InfluxDB v2 flavor  (#30827) (#30870)
  * Prometheus: Set type of labels to string (#30831) (#30835)
  * AlertingNG: change API permissions (#30781) (#30814)
  * Grafana-ui: fixes no data message in Table component (#30821) (#30855)
  * Prometheus: Add tooltip to explain possibility to use patterns in text and title fields in annotations (#30825) (#30843)
  * Chore: add more docs annotations (#30847) (#30851)
  * BarChart: inside-align strokes, upgrade uPlot to 1.6.4. (#30806) (#30846)
  * Transforms: allow boolean in field calculations (#30802) (#30845)
  * CDN: Fixes cdn path when Grafana is under sub path (#30822) (#30823)
  * bump cypress to 6.3.0 (#30644) (#30819)
  * Expressions: Measure total transformation requests and elapsed time (#30514) (#30789)
  * Grafana-UI: Add story/docs for ErrorBoundary (#30304) (#30811)
  * [v7.4.x]: Menu: Mark menu components as internal (#30801)
  * Graph: Fixes auto decimals issue in legend and tooltip (#30628) (#30635)
  * GraphNG: Disable Plot logging by default (#30390) (#30500)
  * Storybook: Migrate card story to use controls  (#30535) (#30549)
  * GraphNG: add bar alignment option (#30499) (#30790)
  * Variables: Clears drop down state when leaving dashboard (#30810) (#30812)
  * Add missing callback dependency (#30797) (#30809)
  * GraphNG: improve behavior when switching between solid/dash/dots (#30796) (#30799)
  * Add width for Variable Editors (#30791) (#30795)
  * Panels: Fixes so panels are refreshed when scrolling past them fast (#30784) (#30792)
  * PanelEdit: Trigger refresh when changing data source (#30744) (#30767)
  * AlertingNG: Enable UI to Save Alert Definitions (#30394) (#30548)
  * CDN: Fix passing correct prefix to GetContentDeliveryURL (#30777) (#30779)
  * CDN: Adds support for serving assets over a CDN (#30691) (#30776)
  * Explore: Update styling of buttons (#30493) (#30508)
  * Loki: Append refId to logs uid (#30418) (#30537)
  * skip symlinks to directories when generating plugin manifest (#30721) (#30738)
  * Mobile: Fixes issue scrolling on mobile in chrome (#30746) (#30750)
  * BarChart: add alpha bar chart panel (#30323) (#30754)
  * Datasource: Use json-iterator configuration compatible with standard library (#30732) (#30739)
  * Variables: Fixes so text format will show All instead of custom all (#30730) (#30731)
  * AlertingNG: pause/unpause definitions via the API (#30627) (#30672)
  * PanelLibrary: better handling of deleted panels (#30709) (#30726)
  * Transform: improve the "outer join" performance/behavior (#30407) (#30722)
  * DashboardPicker: switch to promise-based debounce, return dashboard UID (#30706) (#30714)
  * Use connected GraphNG in Explore (#30707) (#30708)
  * PanelLibrary: changes casing of responses and adds meta property (#30668) (#30711)
  * DeployImage: Switch base images to Debian (#30684) (#30699)
  * Trace: trace to logs design update (#30637) (#30702)
  * Influx: Show all datapoints for dynamically windowed flux query (#30688) (#30703)
  * ci(npm-publish): add missing github package token to env vars (#30665) (#30673)
  * Loki: Improve live tailing errors and fix Explore's logs container type errors (#30517) (#30681)
  * Grafana-UI: Fix setting default value for MultiSelect (#30671) (#30687)
  * Explore: Fix jumpy live tailing (#30650) (#30677)
  * Docs: Refer to product docs in whats new for alerting templating feature (#30652) (#30670)
  * Variables: Fixes display value when using capture groups in regex (#30636) (#30661)
  * Docs: Fix expressions enabled description (#30589) (#30651)
  * Licensing Docs: Adding license restrictions docs (#30216) (#30648)
  * DashboardSettings: fixes vertical scrolling (#30640) (#30643)
  * chore: bump redux toolkit to 1.5.0 for immer 8.0.1 vulnerability fix (#30605) (#30631)
  * Explore: Fix loading visualisation on the top of the new time series panel (#30553) (#30557)
  * Footer: Fixes layout issue in footer  (#30443) (#30494)
  * Variables: Fixes so queries work for numbers values too (#30602) (#30624)
  * Admin: Fixes so form values are filled in from backend (#30544) (#30623)
  * Docs: Update 7.4 What's New to use more correct description of alerting notification template feature (#30502) (#30614)
  * NodeGraph: Add docs (#30504) (#30613)
  * Cloud Monitoring: Fix legend naming with display name override (#30440) (#30503)
  * Expressions: Add option to disable feature (#30541) (#30558)
  * OldGraph: Fix height issue in Firefox (#30565) (#30582)
  * XY Chart: fix editor error with empty frame (no fields) (#30573) (#30577)
  * XY Chart: share legend config with timeseries (#30559) (#30566)
  * DataFrame: cache frame/field index in field state (#30529) (#30560)
  * Prometheus: Fix show query instead of Value if no __name__ and metric (#30511) (#30556)
  * Decimals: Big Improvements to auto decimals and fixes to auto decimals bug found in 7.4-beta1  (#30519) (#30550)
  * chore: update packages dependent on dot-prop to fix security vulnerability (#30432) (#30487)
  * GraphNG: uPlot 1.6.3 (fix bands not filling below 0). close #30523. (#30527) (#30528)
  * GraphNG: uPlot 1.6.2 (#30521) (#30522)
  * Chore: Upgrade grabpl version (#30486) (#30513)
  * grafana/ui: Fix internal import from grafana/data (#30439) (#30507)
  * prevent field config from being overwritten (#30437) (#30442)
  * Chore: upgrade NPM security vulnerabilities (#30397) (#30495)
  * TimeSeriesPanel: Fixed default value for gradientMode (#30484) (#30492)
  * Admin: Fixes so whole org drop down is visible when adding users to org (#30481) (#30497)
  * Chore: adds wait to e2e test (#30488) (#30490)
  * Graph: Fixes so only users with correct permissions can add annotations (#30419) (#30466)
  * Alerting: Hides threshold handle for percentual thresholds (#30431) (#30467)
  * Timeseries: only migrage point size when configured (#30461) (#30470)
  * Expressions: Fix button icon (#30444) (#30450)
  * PanelModel: Make sure the angular options are passed to react panel type changed handler (#30441) (#30451)
  * Docs: Fix img link for alert notification template (#30436) (#30447)
  * Chore: Upgrade build pipeline tool (#30456) (#30457)
  * PanelOptions: Refactoring applying panel and field options out of PanelModel and add property clean up for properties not in field config registry  (#30389) (#30438)
  * "Release: Updated versions in package to 7.4.0-beta.1" (#30427)
  * Chore: Update what's new URL (#30423)
  * GraphNG: assume uPlot's series stroke is always a function (#30416)
  * PanelLibrary: adding library panels to Dashboard Api (#30278)
  * Prettier: Fixes to files that came in after main upgrade (#30410)
  * Cloud Monitoring: Add curated dashboards for the most popular GCP services (#29930)
  * Mssql integrated security (#30369)
  * Prettier: Upgrade to 2  (#30387)
  * GraphNG: sort ascending if the values appear reversed (#30405)
  * Docs: Grafana whats new 7.4 (#30404)
  * Dashboards: Adds cheat sheet toggle to supported query editors (#28857)
  * Docs: Update timeseries-dimensions.md (#30403)
  * Alerting: Evaluate data templating in alert rule name and message (#29908)
  * Docs: Add links to 7.3 patch release notes (#30292)
  * Docs: Update _index.md (#29546)
  * Docs: Update jaeger.md (#30401)
  * Expressions: Remove feature toggle (#30316)
  * Docs: Update tempo.md (#30399)
  * Docs: Update zipkin.md (#30400)
  * services/provisioning: Various cleanup (#30396)
  * DashboardSchemas: OpenAPI Schema Generation (#30242)
  * AlertingNG: Enforce unique alert definition title (non empty)/UID per organisation (#30380)
  * Licensing: Document new v7.4 options and APIs (#30217)
  * Auth: add expired token error and update CreateToken function (#30203)
  * NodeGraph: Add node graph visualization (#29706)
  * Add jwtTokenAuth to plugin metadata schema (#30346)
  * Plugins: Force POSIX style path separators for manifest generation (#30287)
  * Add enterprise reporting fonts to gitignore (#30385)
  * Field overrides: skipping overrides for properties no longer existing in plugin (#30197)
  * NgAlerting: View query result (#30218)
  * Grafana-UI: Make Card story public (#30388)
  * Dashboard: migrate version history list (#29970)
  * Search: use Card component (#29892)
  * PanelEvents: Isolate more for old angular query editors (#30379)
  * Loki: Remove showing of unique labels with the empty string value (#30363)
  * Chore: Lint all files for no-only-tests (#30364)
  * Clears errors after running new query (#30367)
  * Prometheus: Change exemplars endpoint (#30378)
  * Explore: Fix a bug where Typeahead crashes when a large amount of ite? (#29637)
  * Circular vector: improve generics (#30375)
  * Update signing docs (#30296)
  * Email: change the year in templates (#30294)
  * grafana/ui: export TLS auth component (#30320)
  * Query Editor: avoid word wrap (#30373)
  * Transforms: add sort by transformer (#30370)
  * AlertingNG: Save alert instances (#30223)
  * GraphNG: Color series from by value scheme &amp; change to fillGradient to gradientMode  (#29893)
  * Chore: Remove not used PanelOptionsGrid component (#30358)
  * Zipkin: Remove browser access mode (#30360)
  * Jaeger: Remove browser access mode (#30349)
  * chore: bump lodash to 4.17.20 (#30359)
  * ToolbarButton: New emotion based component to replace all navbar, DashNavButton and scss styles (#30333)
  * Badge: Increase contrast, remove rocket icon for plugin beta/alpha state (#30357)
  * Licensing: Send map of environment variables to plugins (#30347)
  * Dashboards: Exit to dashboard when deleting panel from panel view / edit view (#29032)
  * Cloud Monitoring: MQL support (#26551)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0-beta1 (#30348)
  * Panel options UI: Allow collapsible categories (#30301)
  * Grafana-ui: Fix context menu item always using onClick instead of href (#30350)
  * Badge: Design improvement &amp; reduce contrast (#30328)
  * make sure stats are added horizontally and not vertically (#30106)
  * Chore(deps): Bump google.golang.org/grpc from 1.33.1 to 1.35.0 (#30342)
  * Chore(deps): Bump github.com/stretchr/testify from 1.6.1 to 1.7.0 (#30341)
  * Chore(deps): Bump github.com/google/uuid from 1.1.2 to 1.1.5 (#30340)
  * Chore(deps): Bump github.com/hashicorp/go-version from 1.2.0 to 1.2.1 (#30339)
  * Fix HTML character entity error (#30334)
  * GraphNG: fix fillBelowTo regression (#30330)
  * GraphNG: implement softMin/softMax for auto-scaling stabilization. close #979. (#30326)
  * Legend: Fixes right y-axis legend from being pushed outside the bounds of the panel (#30327)
  * Grafana-toolkit: Update component generator templates (#30306)
  * Panels: remove beta flag from stat and bargauge panels (#30324)
  * GraphNG: support fill below to (bands) (#30268)
  * grafana-cli: Fix security issue (#28888)
  * AlertingNG: Modify queries and transform endpoint to get datasource UIDs (#30297)
  * Chore: Fix missing property from ExploreGraph (#30315)
  * Prometheus: Add support for Exemplars (#28057)
  * Grafana-UI: Enhances for TimeRangePicker and TimeRangeInput (#30102)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0 (#30312)
  * Table: Fixes BarGauge cell display mode font size so that it is fixed to the default cell font size (#30303)
  * AngularGraph: Fixes issues with legend wrapping after legend refactoring (#30283)
  * Plugins: Add Open Distro to the list of data sources supported by sigv4 (#30308)
  * Chore: Moves common and response into separate packages (#30298)
  * GraphNG: remove y-axis position control from series color picker in the legend (#30302)
  * Table: migrate old-table config to new table config (#30142)
  * Elasticsearch: Support extended stats and percentiles in terms order by (#28910)
  * Docs: Update release notes index
  * GraphNG: stats in legend (#30251)
  * Grafana UI: EmptySearchResult docs (#30281)
  * Plugins: Use the includes.path (if exists) on sidebar includes links (#30291)
  * Fix spinner and broken buttons (#30286)
  * Graph: Consider reverse sorted data points on isOutsideRange check (#30289)
  * Update getting-started.md (#30257)
  * Backend: use sdk version (v0.81.0) without transform (gel) code (#29236)
  * Chore: update latest versions to 7.3.7 (#30282)
  * Loki: Fix hiding of series in table if labels have number values (#30185)
  * Loki: Lower min step to 1ms (#30135)
  * Prometheus: Improve autocomplete performance and remove disabling of dynamic label lookup (#30199)
  * Icons: Adds custom icon support ands new panel and interpolation icons (#30277)
  * ReleaseNotes: Updated changelog and release notes for 7.3.7 (#30280)
  * Grafana-ui: Allow context menu items to be open in new tab (#30141)
  * Cloud Monitoring: Convert datasource to use Dataframes (#29830)
  * GraphNG: added support to change series color from legend. (#30256)
  * AzureMonitor: rename labels for query type dropdown (#30143)
  * Decimals: Improving auto decimals logic for high numbers and scaled units  (#30262)
  * Elasticsearch: Use minimum interval for alerts (#30049)
  * TimeSeriesPanel: The new graph panel now supports y-axis value mapping #30272
  * CODEOWNERS: Make backend squad owners of backend style guidelines (#30266)
  * Auth: Add missing request headers to SigV4 middleware allowlist (#30115)
  * Grafana-UI: Add story/docs for FilterPill (#30252)
  * Grafana-UI: Add story/docs for Counter (#30253)
  * Backend style guide: Document JSON guidelines (#30267)
  * GraphNG: uPlot 1.6, hide "Show points" in Points mode, enable "dot" lineStyle (#30263)
  * Docs: Update prometheus.md (#30240)
  * Docs: Cloudwatch filter should be JSON format (#30243)
  * API: Add by UID routes for data sources  (#29884)
  * Docs: Update datasource_permissions.md (#30255)
  * Cloudwatch: Move deep link creation to the backend (#30206)
  * Metrics API: Use jsoniter for JSON encoding (#30250)
  * Add option in database config to skip migrations for faster startup. (#30146)
  * Set signed in users email correctly (#30249)
  * Drone: Upgrade build pipeline tool (#30247)
  * runRequest: Fixes issue with request time range and time range returned to panels are off causing data points to be cut off (outside) (#30227)
  * Elasticsearch: fix handling of null values in query_builder (#30234)
  * Docs: help users connect to Prometheus using SigV4 (#30232)
  * Update documentation-markdown-guide.md (#30207)
  * Update documentation-markdown-guide.md (#30235)
  * Better logging of plugin scanning errors (#30231)
  * Print Node.js and Toolkit versions (#30230)
  * Chore: bump rollup across all packages (#29486)
  * Backend style guide: Document database patterns (#30219)
  * Chore: Bump plugin-ci-alpine Docker image version (#30225)
  * Legends: Refactoring and rewrites of legend components to simplify components &amp; reuse (#30165)
  * Use Node.js 14.x in plugin CI (#30209)
  * Field overrides: extracting the field config factory into its own reusable module. (#30214)
  * LibraryPanels: adds connections (#30212)
  * PanelOptionsGroups: Only restore styles from PanelOptionsGroup (#30215)
  * Variables: Add deprecation warning for value group tags (#30160)
  * GraphNG: Hide grid for right-y axis if left x-axis exists (#30195)
  * Middleware: Add CSP support (#29740)
  * Updated image links to have newer format. (#30208)
  * Docs: Update usage-insights.md (#30150)
  * Share panel dashboard add images (#30201)
  * Update documentation-style-guide.md (#30202)
  * Docs: Fix links to transforms (#30194)
  * docs(badge): migrate story to use controls (#30180)
  * Chore(deps): Bump github.com/prometheus/common from 0.14.0 to 0.15.0 (#30188)
  * Fix alert definition routine stop (#30117)
  * Chore(deps): Bump gopkg.in/square/go-jose.v2 from 2.4.1 to 2.5.1 (#30189)
  * InlineSwitch: Minor story fix (#30186)
  * Chore(deps): Bump github.com/gosimple/slug from 1.4.2 to 1.9.0 (#30178)
  * Chore(deps): Bump github.com/fatih/color from 1.9.0 to 1.10.0 (#30183)
  * Chore(deps): Bump github.com/lib/pq from 1.3.0 to 1.9.0 (#30181)
  * Chore(deps): Bump github.com/hashicorp/go-plugin from 1.2.2 to 1.4.0 (#30175)
  * Chore(deps): Bump github.com/getsentry/sentry-go from 0.7.0 to 0.9.0 (#30171)
  * Gauge: Fixes issue with all null values cause min &amp; max to be null (#30156)
  * Links: Add underline on hover for links in NewsPanel (#30166)
  * GraphNG: Update to test dashboards (#30153)
  * CleanUp: Removed old panel options group component (#30157)
  * AngularQueryEditors: Fixes to Graphite query editor and other who refer to other queries (#30154)
  * Chore(deps): Bump github.com/robfig/cron/v3 from 3.0.0 to 3.0.1 (#30172)
  * Chore(deps): Bump github.com/urfave/cli/v2 from 2.1.1 to 2.3.0 (#30173)
  * Chore: Fix spelling issue (#30168)
  * Revise README.md. (#30145)
  * Chore(deps): Bump github.com/mattn/go-sqlite3 from 1.11.0 to 1.14.6 (#30174)
  * InlineSwitch: Added missing InlineSwitch component and fixed two places that used unaligned inline switch (#30162)
  * GraphNG: add new alpha XY Chart  (#30096)
  * Elastic: Support request cancellation properly (Uses new backendSrv.fetch Observable request API) (#30009)
  * OpenTSDB: Support request cancellation properly (#29992)
  * InfluxDB: Update Flux external link (#30158)
  * Allow dependabot to keep go packages up-to-date (#30170)
  * PluginState: Update comment
  * GraphNG: Minor polish &amp; updates to new time series panel and move it from alpha to beta (#30163)
  * Share panel dashboard (#30147)
  * GraphNG: rename "graph3" to "timeseries" panel (#30123)
  * Add info about access mode (#30137)
  * Prometheus: Remove running of duplicated metrics query (#30108)
  * Prometheus: Fix autocomplete does not work on incomplete input (#29854)
  * GraphNG: remove graph2 panel (keep the parts needed for explore) (#30124)
  * Docs: Add metadata to activating licensing page (#30140)
  * MixedDataSource: Added missing variable support flag (#30110)
  * AngularPanels: Fixes issue with some panels not rendering when going into edit mode due to no height (#30113)
  * AngularPanels: Fixes issue with discrete panel that used the initialized event (#30133)
  * Explore: Make getFieldLinksForExplore more reusable (#30134)
  * Elasticsearch: Add Support for Serial Differencing Pipeline Aggregation (#28618)
  * Angular: Fixes issue with angular directive caused by angular upgrade in master (#30114)
  * Analytics: add data source type in data-request events (#30087)
  * GraphNG: "Interpolation: Step after" test (#30127)
  * GraphNG: check cross-axis presence when auto-padding. close #30121. (#30126)
  * Alerting: improve alerting default datasource search when extracting alerts (#29993)
  * Loki: Timeseries should not produce 0-values for missing data (#30116)
  * GraphNG: support dashes (#30070)
  * GraphNG: fix spanGaps optimization in alignDataFrames(). see #30101. (#30118)
  * Alerting NG: update API to expect UIDs instead of IDs (#29896)
  * GraphNG: Overhaul of main test dashboard and update to null &amp; gaps dashboard (#30101)
  * Chore: Fix intermittent time-related test failure in explore datasource instance update (#30109)
  * QueryEditorRow: Ability to change query name (#29779)
  * Frontend: Failed to load application files message improvement IE11 (#30011)
  * Drone: Upgrade build pipeline tool (#30104)
  * Fix phrasing. (#30075)
  * Chore: Add CloudWatch HTTP API tests (#29691)
  * Elastic: Fixes so templating queries work (#30003)
  * Chore: Rewrite elasticsearch client test to standard library (#30093)
  * Chore: Rewrite tsdb influxdb test to standard library (#30091)
  * Fix default maximum lifetime  an authenticated user can be logged in (#30030)
  * Instrumentation: re-enable database wrapper feature to expose counter and histogram for database queries (#29662)
  * Docs: Update labels to fields transform (#30086)
  * GraphNG: adding possibility to toggle tooltip, graph and legend for series (#29575)
  * Chore: Rewrite tsdb cloudmonitoring test to standard library (#30090)
  * Chore: Rewrite tsdb azuremonitor time grain test to standard library (#30089)
  * Chore: Rewrite tsdb graphite test to standard library (#30088)
  * Chore: Upgrade Docker build image wrt. Go/golangci-lint/Node (#30077)
  * Usage Stats: Calculate concurrent users as a histogram (#30006)
  * Elasticsearch: Fix broken alerting when using pipeline aggregations (#29903)
  * Drone: Fix race conditions between Enterprise and Enterprise2 (#30076)
  * Chore: Rewrite models datasource cache test to standard library (#30040)
  * Plugins: prevent app plugin from rendering with wrong location (#30017)
  * Update NOTICE.md
  * Chore: Tiny typo fix `rage` -&gt; `range` (#30067)
  * Docs: loki.md: Add example of Loki data source config (#29976)
  * ReleaseNotes: Updated changelog and release notes for 7.3.6 (#30066)
  * Docs: Update usage-insights.md (#30065)
  * Docs: Update white-labeling.md (#30064)
  * Chore(deps): Bump axios from 0.19.2 to 0.21.1 (#30059)
  * Chore: Rewrite models tags test to standard library (#30041)
  * Bump actions/setup-node from v1 to v2.1.4 (#29891)
  * Build(deps): Bump ini from 1.3.5 to 1.3.7 (#29787)
  * fall back to any architecture when getting plugin's checksum #30034 (#30035)
  * Lerna: Update to 3.22.1 (#30057)
  * SeriesToRows: Fixes issue in transform so that value field is always named Value (#30054)
  * [dashboard api] manage error when data in dashboard table is not valid json (#29999)
  * use sha256 checksum instead of md5 (#30018)
  * Chore: Rewrite brute force login protection test to standard library (#29986)
  * Chore: Rewrite login auth test to standard library (#29985)
  * Chore: Rewrite models dashboards test to standard library (#30023)
  * Chore: Rewrite models dashboard acl test to standard library (#30022)
  * Chore: Rewrite models alert test to standard library (#30021)
  * Chore: Rewrite ldap login test to standard library (#29998)
  * Chore: Rewrite grafana login test to standard library (#29997)
  * Fix two ini-file typos regarding LDAP (#29843)
  * Chore: Changes source map devtool to inline-source-map (#30004)
  * Chore: Sync Enterprise go.sum (#30005)
  * Chore: Add Enterprise dependencies (#29994)
  * SQLStore: customise the limit of retrieved datasources per organisation (#29358)
  * Chore: update crewjam/saml library to the latest master (#29991)
  * Graph: Fixes so users can not add annotations in readonly dash (#29990)
  * Currency: add Vietnamese dong (VND) (#29983)
  * Drone: Update pipelines for Enterprise (#29939)
  * Remove the bus from teamgroupsync (#29810)
  * Influx: Make variable query editor input uncontrolled (#29968)
  * PanelLibrary: Add PATCH to the API (#29956)
  * PanelEvents: Isolating angular panel events into it's own event bus + more event refactoring  (#29904)
  * Bump node-notifier from 8.0.0 to 8.0.1 (#29952)
  * LDAP: Update use_ssl documentation (#29964)
  * Docs: Missing 's' on 'logs' (#29966)
  * Docs: Update opentsdb.md (#29963)
  * Docs: Minor typo correction (#29962)
  * librarypanels: Fix JSON field casing in tests (#29954)
  * TemplateSrv: Do not throw  error for an unknown format but use glob as fallback and warn in the console (#29955)
  * PanelLibrary: Adds uid and renames title to name (#29944)
  * Docs: Fix raw format variable docs (#29945)
  * RedirectResponse: Implement all of api.Response (#29946)
  * PanelLibrary: Adds get and getAll to the api (#29772)
  * Chore: Remove duplicate interpolateString test (#29941)
  * Chore: Rewrite influxdb query parser test to standard library (#29940)
  * Folders: Removes the possibility to delete the General folder (#29902)
  * Chore: Convert tsdb request test to standard library (#29936)
  * Chore: Convert tsdb interval test to standard library (#29935)
  * Docs: Update configuration.md (#29912)
  * Docs: Update organization_roles.md (#29911)
  * Docs: Update _index.md (#29918)
  * GraphNG: bring back tooltip (#29910)
  * Ng Alerting: Remove scroll and fix SplitPane limiters (#29906)
  * Dashboard: Migrating dashboard settings to react (#27561)
  * Minor correction to explanation on correct MS SQL usage. (#29889)
  * AlertingNG: Create a scheduler to evaluate alert definitions (#29305)
  * Add changelog items for 7.3.6, 7.2.3 and 6.7.5 (#29901)
  * bump stable to 7.3.6 (#29899)
  * Upgrade go deps.  (#29900)
  * Expressions: Replace query input fields with select. (#29816)
  * PanelEdit: Update UI if panel plugin changes field config (#29898)
  * Elasticsearch: Remove timeSrv dependency (#29770)
  * PanelEdit: Need new data after plugin change (#29874)
  * Chore(toolkit): disable react/prop-types for eslint config (#29888)
  * Field Config API: Add ability to hide field option or disable it from the overrides (#29879)
  * SharedQuery: Fixes shared query editor now showing queries (#29849)
  * GraphNG: support fill gradient (#29765)
  * Backend style guide: Add more guidelines (#29871)
  * Keep query keys consistent (#29855)
  * Alerting: Copy frame field labels to time series tags (#29886)
  * Update configure-docker.md (#29883)
  * Usage Stats: Introduce an interface for usage stats service (#29882)
  * DataFrame: add a writable flag to fields (#29869)
  * InlineForms: Changes to make inline forms more flexible for query editors  (#29782)
  * Usage Stats: Allow to add additional metrics to the stats (#29774)
  * Fix the broken link of XORM documentation (#29865)
  * Move colors demo under theme colors (#29873)
  * Dashboard: Increase folder name size in search dashboard (#29821)
  * MSSQL: Config UI touches (#29834)
  * QueryOptions:  Open QueryEditors: run queries after changing group options #29864
  * GraphNG: uPlot 1.5.2, dynamic stroke/fill, Flot-style hover points (#29866)
  * Variables: Fixes so numerical sortorder works for options with null values (#29846)
  * GraphNG: only initialize path builders once (#29863)
  * GraphNG: Do not set fillColor from GraphNG only opacity (#29851)
  * add an example cloudwatch resource_arns() query that uses multiple tags (ref: #29499) (#29838)
  * Backend: Remove more globals (#29644)
  * MS SQL: Fix MS SQL add data source UI issues (#29832)
  * Display palette and colors for dark and light themes in storybook (#29848)
  * Docs: Fix broken link in logs-panel (#29833)
  * Docs: Add info about typing of connected props to Redux style guide (#29842)
  * Loki: Remove unnecessary deduplication (#29421)
  * Varibles: Fixes so clicking on Selected will not include All (#29844)
  * Explore/Logs: Correctly display newlines in detected fields (#29541)
  * Link suppliers: getLinks API update (#29757)
  * Select: Changes default menu placement for Select from auto to bottom (#29837)
  * Chore: Automatically infer types for dashgrid connected components  (#29818)
  * Chore: Remove unused Loki and Cloudwatch syntax providers  (#29686)
  * Pass row (#29839)
  * GraphNG: Context menu (#29745)
  * GraphNG: Enable scale distribution configuration (#29684)
  * Explore: Improve Explore performance but removing unnecessary re-renders (#29752)
  * DashboardDS: Fixes display of long queries (#29808)
  * Sparkline: Fixes issue with sparkline that sent in custom fillColor instead of fillOpacity (#29825)
  * Chore: Disable default golangci-lint filter (#29751)
  * Update style guide with correct usage of MS SQL (#29829)
  * QueryEditor: do not auto refresh on every update (#29762)
  * Chore: remove unused datasource status enum (#29827)
  * Expressions: support ${my var} syntax (#29819)
  * Docs: Update types-options.md (#29777)
  * Chore: Enable more go-ruleguard rules (#29781)
  * GraphNG: Load uPlot path builders lazily (#29813)
  * Elasticsearch: ensure query model has timeField configured in datasource settings (#29807)
  * Chore: Use Header.Set method instead of Header.Add (#29804)
  * Allow dependabot to check actions (#28159)
  * Grafana-UI: Support optgroup for MultiSelect (#29805)
  * Sliders: Update behavior and style tweak (#29795)
  * Grafana-ui: Fix collapsible children sizing (#29776)
  * Style guide: Document avoidance of globals in Go code (#29803)
  * Chore: Rewrite opentsdb test to standard library (#29792)
  * CloudWatch: Add support for AWS DirectConnect ConnectionErrorCount metric (#29583)
  * GraphNG: uPlot 1.5.1 (#29789)
  * GraphNG: update uPlot v1.5.0 (#29763)
  * Added httpMethod to webhook (#29780)
  * @grafana-runtime: Throw error if health check fails in DataSourceWithBackend (#29743)
  * Explore: Fix remounting of query row (#29771)
  * Expressions: Add placeholders to hint on input (#29773)
  * Alerting: Next gen Alerting page (#28397)
  * GraphNG: Add test dashboard for null &amp; and gaps rendering (#29769)
  * Expressions: Field names from refId (#29755)
  * Plugins: Add support for signature manifest V2 (#29240)
  * Chore: Configure go-ruleguard via golangci-lint (#28419)
  * Move middleware context handler logic to service (#29605)
  * AlertListPanel: Add options to sort by Time(asc) and Time(desc) (#29764)
  * PanelLibrary: Adds delete Api (#29741)
  * Tracing: Release trace to logs feature (#29443)
  * ReleaseNotes: Updated changelog and release notes for 7.3.5 (#29753)
  * DataSourceSettings: Add servername field to DataSource TLS config (#29279)
  * Chore: update stable and testing versions (#29748)
  * ReleaseNotes: Updated changelog and release notes for 7.3.5 (#29744)
  * Elasticsearch: View in context feature for logs (#28764)
  * Chore: Disable gosec on certain line (#29382)
  * Logging: log frontend errors caught by ErrorBoundary, including component stack (#29345)
  * ChangePassword: improved keyboard navigation (#29567)
  * GrafanaDataSource: Fix selecting -- Grafana -- data source, broken after recent changes (#29737)
  * Docs: added version note for rename by regex transformation. (#29735)
  * @grafana/ui: Fix UI issues for cascader button dropdown and query input (#29727)
  * Docs: Update configuration.md (#29728)
  * Docs: Remove survey (#29549)
  * Logging: rate limit fronted logging endpoint (#29272)
  * API: add Status() to RedirectResponse (#29722)
  * Elasticsearch: Deprecate browser access mode (#29649)
  * Elasticsearch: Fix query initialization action (#29652)
  * PanelLibrary: Adds api and db to create Library/Shared/Reusable Panel (#29642)
  * Transformer: Rename metrics based on regex (#29281)
  * Variables: Fixes upgrade of legacy Prometheus queries (#29704)
  * Auth: Add SigV4 header allowlist to reduce chances of verification issues (#29650)
  * DataFrame: add path and description metadata (#29695)
  * Alerting: Use correct time series name override from frame fields (#29693)
  * GraphNG: fix bars migration and support color and linewidth (#29697)
  * PanelHeader: Fix panel header description inline code wrapping (#29628)
  * Bugfix 29848: Remove annotation_tag entries as part of annotations cleanup (#29534)
  * GraphNG: simple settings migration from flot panel (#29599)
  * GraphNG: replace bizcharts with uPlot for sparklines (#29632)
  * GitHubActions: Update node version in github action (#29683)
  * Adds go dep used by an Enterprise feature.  (#29645)
  * Typescript: Raise strict error limit for enterprise (#29688)
  * Remove unnecessary escaping (#29677)
  * Update getting-started-prometheus.md (#29678)
  * instrumentation: align label name with our other projects (#29514)
  * Typescript: Fixing typescript strict error, and separate check from publishing (#29679)
  * CloudWatch: namespace in search expression should be quoted if match exact is enabled #29109 (#29563)
  * Docs: Plugin schema updates (#28232)
  * RadioButton: Fix flex issue in master for radio buttons (#29664)
  * Update getting-started.md (#29670)
  * Expr: fix time unit typo in ds queries (#29668)
  * Expr: make reduction nan/null more consistent (#29665)
  * Expr: fix func argument panic (#29663)
  * Update documentation-style-guide.md (#29661)
  * Update documentation-markdown-guide.md (#29659)
  * Docs: Changed image format (#29658)
  * Expr: fix failure to execute due to OrgID (#29653)
  * GraphNG: rename "points" to "showPoints" (#29635)
  * Expressions: Restore showing expression query editor even if main data source is not mixed (#29656)
  * GraphNG: time range should match the panel timeRange (#29596)
  * Support svg embedded favicons in whitelabeling (#29436)
  * Add changelog to docs style guide (#29581)
  * Loki: Retry web socket connection when connection is closed abnormally (#29438)
  * GraphNG: Fix annotations and exemplars plugins (#29613)
  * Chore: Rewrite tsdb sql engine test to standard library (#29590)
  * GraphNG: fix and optimize spanNulls (#29633)
  * Build(deps): Bump highlight.js from 10.4.0 to 10.4.1 (#29625)
  * Cloudwatch: session cache should use UTC consistently (#29627)
  * GraphNG: rename GraphMode to DrawStyle (#29623)
  * GraphNG: add spanNulls config option (#29512)
  * Docs: add docs for concatenate transformer (#28667)
  * Stat/Gauge: expose explicit font sizing (#29476)
  * GraphNG: add gaps/nulls support to staircase &amp; smooth interpolation modes (#29593)
  * grafana/ui: Migrate Field knobs to controls (#29433)
  * Prometheus: Fix link to Prometheus graph in dashboard (#29543)
  * Build: Publish next and latest npm channels to Github (#29615)
  * Update broken aliases (#29603)
  * API: add ID to snapshot API responses (#29600)
  * Elasticsearch: Migrate queryeditor to React (#28033)
  * QueryGroup &amp; DataSourceSrv &amp; DataSourcePicker changes simplify usage, error handling and reduce duplication, support for uid (#29542)
  * Elastic: Fixes config UI issues (#29608)
  * GraphNG: Fix issues with plugins not retrieving plot instance (#29585)
  * middleware: Make scenario test functions take a testing.T argument (#29564)
  * Grafana/ui: Storybook controls understand component types (#29574)
  * Login: Fixes typo in tooltip (#29604)
  * Panel: making sure we support all versions of chrome when detecting position of click event. (#29544)
  * Chore: Rewrite sqlstore migration test to use standard library (#29589)
  * Chore: Rewrite tsdb prometheus test to standard library (#29592)
  * Security: Add gosec G304 auditing annotations (#29578)
  * Chore: Rewrite tsdb testdatasource scenarios test to standard library (#29591)
  * Docs: Add missing key to enable SigV4 for provisioning Elasticsearch data source (#29584)
  * Add Microsoft.Network/natGateways (#29479)
  * Update documentation-style-guide.md (#29586)
  * @grafana/ui: Add bell-slash to available icons (#29579)
  * Alert: Fix forwardRef warning (#29577)
  * Update documentation-style-guide.md (#29580)
  * Chore: Upgrade typescript to 4.1 (#29493)
  * PanelLibrary: Adds library_panel table (#29565)
  * Make build docker full fix (#29570)
  * Build: move canary packages to github (#29411)
  * Devenv: Add default db for influxdb (#29371)
  * Chore: Check errors from Close calls (#29562)
  * GraphNG: support auto and explicit axis width (#29553)
  * Chore: upgrading y18n to 4.0.1 for security reasons (#29523)
  * Middleware: Rewrite tests to use standard library (#29535)
  * Overrides: show category on the overrides (#29556)
  * GraphNG: Bars, Staircase, Smooth modes (#29359)
  * Docs: Fix docs sync actions (#29551)
  * Chore: Update dev guide node version for Mac (#29548)
  * Docs: Update formatting-multi-value-variables.md (#29547)
  * Arrow: toArray() on nullable values should include null values (#29520)
  * Docs: Update syntax.md (#29545)
  * NodeJS: Update to LTS (14) (#29467)
  * Docs: Update repeat-panels-or-rows.md (#29540)
  * 3 minor changes, including updating the title TOC (#29501)
  * Auth proxy: Return standard error type (#29502)
  * Data: use pre-defined output array length in vectorToArray() (#29516)
  * Dashboards: hide playlist edit functionality from viewers and snapshots link from unauthenticated users (#28992)
  * docker: use yarn to build (#29538)
  * QueryEditors: Refactoring &amp; rewriting out dependency on PanelModel (#29419)
  * Chore: skip flaky tests (#29537)
  * Graph NG: Invalidate uPlot config on timezone changes (#29531)
  * IntelliSense: Fix autocomplete and highlighting for Loki, Prometheus, Cloudwatch (#29381)
  * Variables: Fixes Textbox current value persistence (#29481)
  * OptionsEditor: simplify the options editor interfaces (#29518)
  * Icon: Changed the icon for signing in (#29530)
  * fixes bug with invalid handler name for metrics (#29529)
  * Middleware: Simplifications (#29491)
  * GraphNG: simplify effects responsible for plot updates/initialization  (#29496)
  * Alarting: fix alarm messages in dingding (Fixes #29470) (#29482)
  * PanelEdit: making sure the correct datasource query editor is being rendered. (#29500)
  * AzureMonitor: Unit MilliSeconds naming (#29399)
  * Devenv: update mysql_tests and postgres_tests blocks for allowing dynamically change of underlying docker image (#29525)
  * Chore: Enable remaining eslint-plugin-react rules (#29519)
  * Docs/Transformations: Add documentation about Binary operations in Add field from calculation (#29511)
  * Datasources: fixed long error message overflowing container (#29440)
  * docker: fix Dockerfile after Gruntfile.js removed (#29515)
  * Chore: Adds Panel Library featuretoggle (#29521)
  * Docs: Update filter-variables-with-regex.md (#29508)
  * Docs: InfluxDB_V2 datasource: adding an example on how to add InfluxQL as a datasource (#29490)
  * Loki: Add query type and line limit to query editor in dashboard (#29356)
  * Docs: Added Security Group support to Azure Auth (#29418)
  * DataLinks: Removes getDataSourceSettingsByUid from applyFieldOverrides  (#29447)
  * Bug: trace viewer doesn't show more than 300 spans (#29377)
  * Live: publish all dashboard changes to a single channel (#29474)
  * Chore: Enable eslint-plugin-react partial rules (#29428)
  * Alerting: Update alertDef.ts with more time options (#29498)
  * DataSourceSrv: Look up data source by uid and name transparently (#29449)
  * Instrumentation: Add examplars for request histograms (#29357)
  * Variables: Fixes Constant variable persistence confusion (#29407)
  * Docs: Fix broken link for plugins (#29346)
  * Prometheus: don't override displayName property (#29441)
  * Grunt: Removes grunt dependency and replaces some of its usage (#29461)
  * Transformation: added support for excluding/including rows based on their values. (#26884)
  * Chore: Enable exhaustive linter (#29458)
  * Field overrides: added matcher to match all fields within frame/query. (#28872)
  * Log: Use os.Open to open file for reading (#29483)
  * MinMax: keep global min/main in field state (#29406)
  * ReactGridLayout: Update dependency to 1.2 (#29455)
  * Jest: Upgrade to latest (#29450)
  * Chore: bump grafana-ui rollup dependencies (#29315)
  * GraphNG: use uPlot's native ms support (#29445)
  * Alerting: Add support for Sensu Go notification channel (#28012)
  * adds tracing for all bus calls that passes ctx (#29434)
  * prometheus: Improve IsAPIError's documentation (#29432)
  * ReleaseNotes: Updated changelog and release notes for 7.3.4 (#29430)
  * Elasticsearch: Fix index pattern not working with multiple base sections (#28348)
  * Plugins: Add support for includes' icon (#29416)
  * Docs: fixing frontend docs issue where enums ending up in wrong folder level. (#29429)
  * Variables: Fixes issue with upgrading legacy queries (#29375)
  * Queries: Extract queries from dashboard (#29349)
  * Docs: docker -&gt; Docker (#29331)
  * PanelEvents: Refactors and removes unnecessary events, fixes panel editor update issue when panel options change (#29414)
  * Fix: Correct panel edit uistate migration (#29413)
  * Alerting: Improve Prometheus Alert Rule error message (#29390)
  * Fix: Migrate Panel edit uiState percentage strings to number (#29412)
  * remove insecure cipher suit as default option (#29378)
  * * prometheus fix variables fetching when  customQueryParameters used #28907 (#28949)
  * Chore: Removes observableTester (#29369)
  * Chore: Adds e2e tests for Variables (#29341)
  * Fix gosec finding of unhandled errors (#29398)
  * Getting started with Grafana and MS SQL (#29401)
  * Arrow: cast timestams to Number (#29402)
  * Docs: Add Cloud content links (#29317)
  * PanelEditor: allow access to the eventBus from panel options (#29327)
  * GraphNG: support x != time in library (#29353)
  * removes unused golint file (#29391)
  * prefer server cipher suites (#29379)
  * Panels/DashList: Fix order of recent dashboards (#29366)
  * Core: Move SplitPane layout from PanelEdit. (#29266)
  * Drone: Upgrade build pipeline tool (#29365)
  * Update yarn.lock to use latest rc-util (#29313)
  * Variables: Adds description field  (#29332)
  * Chore: Update latest.json (#29351)
  * Drone: Upload artifacts for release branch builds (#29297)
  * Docs: fixing link issues in auto generated frontend docs. (#29326)
  * Drone: Execute artifact publishing for both editions in parallel during release (#29362)
  * Devenv: adding default credentials for influxdb (#29344)
  * Drone: Check CUE dashboard schemas (#29334)
  * Backend: fix IPv6 address parsing erroneous (#28585)
  * dashboard-schemas cue 3.0.0 compatible (#29352)
  * Update documentation-style-guide.md (#29354)
  * Docs: Update requirements.md (#29350)
  * ReleaseNotes: Updated changelog and release notes for 7.3.4 (#29347)
  * ReleaseNotes: Updated changelog and release notes for 7.3.4 (#29338)
  * Drone: Publish NPM packages after Storybook to avoid race condition (#29340)
  * Add an option to hide certain users in the UI (#28942)
  * Guardian: Rewrite tests from goconvey (#29292)
  * Docs: Fix editor role and alert notification channel description (#29301)
  * Docs: Improve custom Docker image instructions (#29263)
  * Security: Fixes minor security issue with alert notification webhooks that allowed GET &amp; DELETE requests #29330
  * Chore: Bump storybook to v6 (#28926)
  * ReleaseNotes: Updates release notes link in package.json (master) (#29329)
  * Docs: Accurately reflecting available variables (#29302)
  * Heatmap: Fixes issue introduced by new eventbus (#29322)
  * Dashboard Schemas (#28793)
  * devenv: Add docker load test which authenticates with API key (#28905)
  * Login: Fixes redirect url encoding issues of # %23 being unencoded after login (#29299)
  * InfluxDB: update flux library and support boolean label values (#29310)
  * Explore/Logs: Update Parsed fields to Detected fields (#28881)
  * GraphNG: Init refactorings and fixes (#29275)
  * fixing a broken relref link (#29312)
  * Drone: Upgrade build pipeline tool (#29308)
  * decreasing frontend docs threshold. (#29304)
  * Docker: update docker root group docs and docker image (#29222)
  * WebhookNotifier: Convert tests away from goconvey (#29291)
  * Annotations: fixing so when changing annotations query links submenu will be updated. (#28990)
  * [graph-ng] add temporal DataFrame alignment/outerJoin &amp; move null-asZero pass inside (#29250)
  * Dashboard: Fixes kiosk state after being redirected to login page and back (#29273)
  * make it possible to hide change password link in profile menu (#29246)
  * Theme: Add missing color type (#29265)
  * Chore: Allow reducerTester to work with every data type &amp; payload-less actions (#29241)
  * Explore/Prometheus: Update default query type option to "Both" (#28935)
  * Loki/Explore: Add query type selector (#28817)
  * Variables: New Variables are stored immediately (#29178)
  * reduce severity level to warning (#28939)
  * Units: Changes FLOP/s to FLOPS and some other rates per second units get /s suffix  (#28825)
  * Docs: Remove duplicate "Transformations overview" topics from the TOC (#29247)
  * Docs: Fixed broken relrefs and chanfed TOC entry name from Alerting to Alerts. (#29251)
  * Docs: Remove duplicate Panel overview topic.  (#29248)
  * Increase search limit on team add user and improve placeholder (#29258)
  * Fix warnings for conflicting style rules (#29249)
  * Make backwards compatible (#29212)
  * Minor cosmetic markdown tweaks in docs/cloudwatch.md (#29238)
  * Getting Started: Updated index topic, removed "what-is-grafana", and adjusted weight o? (#29216)
  * BarGauge: Fix story for BarGauge, caused knobs to show for other stories (#29232)
  * Update glossary to add hyperlinks to Explore and Transformation entries (#29217)
  * Chore: Enable errorlint linter (#29227)
  * TimeRegions: Fixed issue with time regions and tresholds due to angular js upgrade (#29229)
  * CloudWatch: Support request cancellation properly (#28865)
  * CloudMonitoring: Support request cancellation properly (#28847)
  * Chore: Handle wrapped errors (#29223)
  * Expressions: Move GEL into core as expressions (#29072)
  * Chore: remove compress:release grunt task (#29225)
  * Refactor/Explore: Inline datasource actions into initialisation (#28953)
  * Fix README typo (#29219)
  * Grafana UI: Card API refactor (#29034)
  * Plugins: Changed alertlist alert url to view instead of edit (#29060)
  * React: Upgrading react to v17, wip (#29057)
  * Gauge: Tweaks short value auto-sizing (#29197)
  * BackendSrv: support binary responseType like $http did (#29004)
  * GraphNG: update the options config (#28917)
  * Backend: Fix build (#29206)
  * Permissions: Validate against Team/User permission role update (#29101)
  * ESlint: React fixes part 1 (#29062)
  * Tests: Adds expects for observables (#28929)
  * Variables: Adds new Api that allows proper QueryEditors for Query variables (#28217)
  * Introduce eslint-plugin-react (#29053)
  * Automation: Adds GitHub release action (#29194)
  * Refactor declarative series configuration to a config builder (#29106)
  * ReleaseNotes: Updated changelog and release notes for 7.3.3 (#29189)
  * Panels: fix positioning of the header title (#29167)
  * trace user login and datasource name instead of id (#29183)
  * playlist: Improve test (#29120)
  * Drone: Fix publish-packages invocation (#29179)
  * Table: Fix incorrect condtition for rendering table filter (#29165)
  * Chore: Upgrade grafana/build-ci-deploy image to latest Go (#29171)
  * DashboardLinks: will only refresh dashboard search when changing tags for link. (#29040)
  * ReleaseNotes: Updated changelog and release notes for 7.3.3 (#29169)
  * CloudWatch: added HTTP API Gateway specific metrics and dimensions (#28780)
  * Release: Adding release notes for 7.3.3 (#29168)
  * SQL: Define primary key for tables without it (#22255)
  * changed link format from MD to HTML (#29163)
  * Backend: Rename variables for style conformance (#29097)
  * Docs: Fixes what'new menu and creates index page, adds first draft of release notes to docs (#29158)
  * Drone: Upgrade build pipeline tool and build image (#29161)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0 (#29160)
  * ReleaseNotes: Updated changelog and release notes for 7.3.3 (#29159)
  * Chore: Upgrade Go etc in build images (#29157)
  * Chore: Remove unused Go code (#28852)
  * API: Rewrite tests from goconvey (#29091)
  * Chore: Fix linting issues caught by ruleguard (#28799)
  * Fix panic when using complex dynamic URLs in app plugin routes  (#27977)
  * Snapshots: Fixes so that dashboard snapshots show data when using Stat, Gauge, BarGauge or Table panels (#29031)
  * Fix authomation text: remove hyphen (#29149)
  * respect fronted-logging.enabled flag (#29107)
  * build paths in an os independent way (#29143)
  * Provisioning: always pin app to the sidebar when enabled (#29084)
  * Automation: Adds new changelog actions (#29142)
  * Chore: Rewrite preferences test from GoConvey to stdlib and testify (#29129)
  * Chore: Upgrade Go dev tools (#29124)
  * Automation: Adding version bump action
  * DataFrames: add utility function to check if structure has changed (#29006)
  * Drone: Fix Drone config verification for enterprise on Windows (#29118)
  * Chore: Require OrgId to be specified in delete playlist command (#29117)
  * Plugin proxy: Handle URL parsing errors (#29093)
  * Drone: Verify Drone config at beginning of pipelines (#29071)
  * Legend/GraphNG: Refactoring legend types and options (#29067)
  * Doc: Update documentation-style-guide.md (#29082)
  * Chore: Bumps types for jest (#29098)
  * LogsPanel: Fix scrolling in dashboards (#28974)
  * sort alphabetically unique labels, labels and parsed fields (#29030)
  * Data source proxy: Convert 401 from data source to 400 (#28962)
  * Plugins: Implement testDatasource for Jaeger (#28916)
  * Update react-testing-library (#29061)
  * Graph: Fixes stacking issues like floating bars when data is not aligned  (#29051)
  * StatPanel: Fixes hanging issue when all values are zero (#29077)
  * Auth: Enable more complete credential chain for SigV4 default SDK auth option (#29065)
  * Chore: Convert API tests to standard Go lib (#29009)
  * Update README.md (#29075)
  * Update CODEOWNERS (#28906)
  * Enhance automation text for missing information (#29052)
  * GraphNG: Adding ticks test dashboard and improves tick spacing (#29044)
  * Chore: Migrate Dashboard List panel to React (#28607)
  * Test Datasource/Bug: Fixes division by zero in csv metric values scenario (#29029)
  * Plugins: Bring back coreplugin package (#29064)
  * Add 'EventBusName' dimension to CloudWatch 'AWS/Events' namespace (#28402)
  * CloudWatch: Add support for AWS/ClientVPN metrics and dimensions (#29055)
  * AlertingNG: manage and evaluate alert definitions via the API (#28377)
  * Fix linting issues (#28811)
  * Logging: Log frontend errors (#28073)
  * Fix for multi-value template variable for project selector (#29042)
  * Chore: Rewrite test helpers from GoConvey to stdlib (#28919)
  * GraphNG: Fixed axis measurements (#29036)
  * Fix links to logql docs (#29037)
  * latest 7.3.2 (#29041)
  * Elasticsearch: Add Moving Function Pipeline Aggregation (#28131)
  * changelog 7.3.2 (#29038)
  * MutableDataFrame: Remove unique field name constraint and values field index and unused/seldom used stuff  (#27573)
  * Fix prometheus docs related to query variable (#29027)
  * Explore: support ANSI colors in live logs (#28895)
  * Docs: Add documentation about log levels (#28975)
  * Dashboard: remove usage of Legacyforms (#28707)
  * Docs: Troubleshoot starting docker containers on Mac (#28754)
  * Elasticsearch: interpolate variables in Filters Bucket Aggregation (#28969)
  * Chore: Bump build pipeline version (#29023)
  * Annotations: Fixes error when trying to create annotation when dashboard is unsaved (#29013)
  * TraceViewer: Make sure it does not break when no trace is passed (#28909)
  * Thresholds: Fixes color assigned to null values (#29010)
  * Backend: Remove unused code (#28933)
  * Fix documentation (#28998)
  * Tracing: Add setting for sampling server (#29011)
  * Logs Panel: Fix inconsistent higlighting (#28971)
  * MySQL: Update README.md (#29003)
  * IntervalVariable: Fix variable tooltip (#28988)
  * StatPanels: Fixes auto min max when latest value is zero (#28982)
  * Chore: Fix SQL related Go variable naming (#28887)
  * MSSQL: Support request cancellation properly (Uses new backendSrv.fetch Observable request API) (#28809)
  * Variables: Fixes loading with a custom all value in url (#28958)
  * Backend: Adds route for well-known change password URL (#28788)
  * docs: fix repeated dashboards link (#29002)
  * LogsPanel: Don't show scroll bars when not needed (#28972)
  * Drone: Fix docs building (#28986)
  * StatPanel: Fixed center of values in edge case scenarios (#28968)
  * Update getting-started-prometheus.md (#28502)
  * Docs: fix relref (#28977)
  * Docs: Minor docs update
  * Docs: Another workflow docs update
  * Docs: Workflow minor edit
  * Docs: Another minor edit
  * Docs: Update PR workflow docs
  * Docs: Update bot docs
  * StatPanels: set default to last (#28617)
  * Tracing: log traceID in request logger (#28952)
  * start tracking usage stats for tempo (#28948)
  * Docs: Update bot docs
  * GrafanaBot: Update labels and commands and adds docs  (#28950)
  * Docs: updates for file-based menu (#28500)
  * Grot: Added command/label to close feature requests with standard message (#28937)
  * GraphNG: Restore focus option (#28946)
  * Docs: Fix links (#28945)
  * Short URL: Cleanup unvisited/stale short URLs (#28867)
  * GraphNG: Using new VizLayout, moving Legend into GraphNG and some other refactorings (#28913)
  * CloudWatch Logs: Change what we use to measure progress (#28912)
  * Chore: use jest without grunt (#28558)
  * Chore: Split Explore redux code into multiple sections (#28819)
  * TestData: Fix issue with numeric inputs in TestData query editor (#28936)
  * setting: Fix tests on Mac (#28886)
  * Plugins signing: Fix docs urls (#28930)
  * Field color: handling color changes when switching panel types (#28875)
  * Variables: make sure that we support both old and new syntax for custom variables. (#28896)
  * CodeEditor: added support for javascript language (#28818)
  * Update CHANGELOG.md (#28928)
  * Plugins: allow override when allowing unsigned plugins (#28901)
  * Chore: Fix spelling issue (#28904)
  * Grafana-UI: LoadingPlaceholder docs (#28874)
  * Gauge: making sure threshold panel json is correct before render (#28898)
  * Chore: Rewrite test in GoConvey to stdlib and testify (#28918)
  * Update documentation-style-guide.md (#28908)
  * Adding terms to glossary (#28884)
  * Devenv: Fix Prometheus basic auth proxy (#28889)
  * API: replace SendLoginLogCommand with LoginHook (#28777)
  * Dashboards / Folders: delete related data (permissions, stars, tags, versions, annotations) when deleting a dashboard or a folder (#28826)
  * Loki: Correct grammar in DerivedFields.tsx (#28885)
  * Docs: Update list of Enterprise plugins (#28882)
  * Live: update centrifuge and the ChannelHandler api (#28843)
  * Update share-panel.md (#28880)
  * CRLF (#28822)
  * PanelHeader: show streaming indicator (and allow unsubscribe)  (#28682)
  * Docs: Plugin signing docs (#28671)
  * Chore: Fix issues reported by staticcheck; enable stylecheck linter (#28866)
  * Elasticsearch: Filter pipeline aggregations from order by options (#28620)
  * Variables: added __user.email to global variable (#28853)
  * Fix titles case and add missing punctuation marks (#28713)
  * VizLayout: Simple viz layout component for legend placement and scaling (#28820)
  * Chore: Fix staticcheck issues (#28860)
  * Chore: Fix staticcheck issues (#28854)
  * Disable selecting enterprise plugins with no license (#28758)
  * Tempo: fix test data source (#28836)
  * Prometheus: fix missing labels from value (#28842)
  * Chore: Fix issues found by staticcheck (#28802)
  * Chore: Remove dead code (#28664)
  * Units: added support to handle negative fractional numbers. (#28849)
  * Variables: Adds variables inspection (#25214)
  * Marked: Upgrade and always sanitize by default (#28796)
  * Currency: add Philippine peso currency (PHP) (#28823)
  * Alert: Remove z-index on Alert component so that it does not overlay ontop of other content (#28834)
  * increase blob column size for encrypted dashboard data (#28831)
  * Gauge: Improve font size auto sizing (#28797)
  * grafana/toolkit: allow builds with lint warnings (#28810)
  * core and grafana/toolkit: Use latest version of grafana-eslint-conifg (#28816)
  * Icon: Replace font awesome icons where possible (#28757)
  * Remove homelinks panel (#28808)
  * StatPanels: Add new calculation option for percentage difference  (#26369)
  * Dashboard: Add Datetime local (No date if today) option in panel axes' units (#28011)
  * Variables: Adds named capture groups to variable regex (#28625)
  * Panel inspect: Interpolate variables in panel inspect title (#28779)
  * grafana/toolkit: Drop console and debugger statements by default when building plugin with toolkit (#28776)
  * Variables: Fixes URL values for dependent variables (#28798)
  * Graph: Fixes event emit function error (#28795)
  * Adds storybook integrity check to drone config (#28785)
  * Live: improve broadcast semantics and avoid double posting (#28765)
  * Events: Remove unused or unnecessary events  (#28783)
  * Docs: added code comments to frontend packages. (#28784)
  * Plugin Dockerfiles: Upgrade Go, golangci-lint, gcloud SDK (#28767)
  * Dependencies: Update angularjs to 1.8.2 (#28736)
  * EventBus: Introduces new event bus with emitter backward compatible interface (#27564)
  * ColorSchemes: Add new color scheme (#28719)
  * Docs: Add NGINX example for using websockets to Loki (#27998)
  * Docs: Made usage of config/configuration consistent #19270 (#28167)
  * Cloudwatch: Fix issue with field calculation transform not working properly with Cloudwatch data (#28761)
  * grafana/toolkit: Extract CHANGELOG when building plugin (#28773)
  * Drone: Upgrade build pipeline tool (#28769)
  * devenv: Upgrade MSSQL Docker image (#28749)
  * Docs: Add docs for InfoBox component (#28705)
  * Reoeragnization. (#28760)
  * gtime: Add ParseDuration function (#28525)
  * Explore: Remove redundant decodeURI and fix urls (#28697)
  * Dashboard: fix view panel mode for Safari / iOS (#28702)
  * Provisioning: Fixed problem with getting started panel being added to custom home dashboard (#28750)
  * LoginPage: Removed auto-capitalization from the login form (#28716)
  * Plugin page: Fix dom validation warning (#28737)
  * Migration: Remove LegacyForms from dashboard folder permissions (#28564)
  * Dependencies: Remove unused dependency (#28711)
  * AlertRuleList: Add keys to alert rule items (#28735)
  * Chore: Pin nginx base image in nginx proxy Dockerfiles (#28730)
  * Drone: Upgrade build-pipeline tool (#28728)
  * TableFilters: Fixes filtering with field overrides (#28690)
  * Templating: Speeds up certain variable queries for Postgres, MySql and MSSql (#28686)
  * Fix typo in unsigned plugin warning (#28709)
  * Chore: Convert sqlstore annotation test from GoConvey to testify (#28715)
  * updates from https://github.com/grafana/grafana/pull/28679 (#28708)
  * Chore: Add some scenario tests for Explore (#28534)
  * Update latest version to 7.3.1 (#28701)
  * Changelog update - 7.3.1 (#28699)
  * Drone: Don't build on Windows for PRs (#28663)
  * Build: changing docs docker image to prevent setting up frontend devenv. (#28670)
  * Prometheus: Fix copy paste behaving as cut and paste (#28622)
  * Loki: Fix error when some queries return zero results (#28645)
  * Chore: allow higher nodejs version than 12 (#28624)
  * TextPanel: Fixes problems where text panel would show old content (#28643)
  * PanelMenu: Fixes panel submenu not being accessible for panels close to the right edge of the screen (#28666)
  * Cloudwatch: Fix duplicate metric data (#28642)
  * Add info about CSV download for Excel in What's new article (#28661)
  * Docs: Describe pipeline aggregation changes in v7.3 (#28660)
  * Plugins: Fix descendent frontend plugin signature validation (#28638)
  * Docker:  use root group in the custom Dockerfile (#28639)
  * Bump rxjs to 6.6.3 (#28657)
  * StatPanel: Fixed value being under graph and reduced likley hood for white and dark value text mixing (#28641)
  * Table: Fix image cell mode so that it works with value mappings (#28644)
  * Build: support custom build tags (#28609)
  * Plugin signing: Fix copy on signed plugin notice (#28633)
  * Dashboard: Fix navigation from one SoloPanelPage to another one (#28578)
  * CloudWatch: Improve method name, performance optimization (#28632)
  * Developer guide: Update wrt. Windows (#28559)
  * Docs: Update graph panel for tabs (#28552)
  * update latest.json (#28603)
  * Docs: data source insights (#28542)
  * Field config API: add slider editor (#28007)
  * changelog: update for 7.3.0 (#28602)
  * Update uPlot to 1.2.2 and align timestamps config with new uPLot API (#28569)
  * Live: updated the reference to use lazy loaded Monaco in code editor. (#28597)
  * Dashboard: Allow add panel for viewers_can_edit (#28570)
  * Docs: Data source provisioning and sigV4 (#28593)
  * Docs: Additional 7.3 upgrade notes (#28592)
  * CI: Add GCC to Windows Docker image (#28562)
  * CloudWatch Logs queue and websocket support (#28176)
  * Explore/Loki: Update docs and cheatsheet (#28541)
  * Grafana-UI: Add Card component (#28216)
  * AddDatasource: Improve plugin categories (#28584)
  * StatPanel: Fixes BizChart error max: yyy should not be less than min zzz (#28587)
  * docs: a few tweaks for clarity and readability (#28579)
  * API: Reducing some api docs errors (#28575)
  * Grafana-UI: ContextMenu docs (#28508)
  * Short URL: Update last seen at when visiting a short URL (#28565)
  * Fix backend build on Windows (#28557)
  * add value prop (#28561)
  * Plugin signing: UI information (#28469)
  * Use fetch API in InfluxDB data source (#28555)
  * PanelEdit: Prevent the preview pane to be resized further than window height (#28370)
  * Docs: Update generic-oauth.md (#28517)
  * GCS image uploader: Add tests (#28521)
  * Move metrics collector queries to config (#28549)
  * Plugins: Fix plugin URL paths on Windows (#28548)
  * API: add login username in SendLoginLogCommand (#28544)
  * AzureMonitor: Support decimal (as float64) type in analytics/logs (#28480)
  * Auth: Fix SigV4 request verification step for Amazon Elasticsearch Service (#28481)
  * Grafana/ui: auto focus threshold editor input (#28360)
  * Docs: SigV4 What's New and AWS Elasticsearch documentation (#28506)
  * Drone: Upgrade build pipeline tool (#28533)
  * Drone: Refactor version branch pipeline logic (#28531)
  * Drone: Upgrade build-pipeline tool (#28520)
  * Docs: Update field color scheme docs and 7.3 what's new (#28496)
  * Templating: Custom variable edit UI, change text input into textarea  (#28312) (#28322)
  * Currency: Adds Indonesian IDR currency (#28363)
  * Chore: Fix flaky sqlstore annotation test (#28527)
  * Checkbox: Fix component sample typo (#28518)
  * Image uploader: Fix uploading of images to GCS (#26493)
  * OAuth: Support Forward OAuth Identity for backend data source plugins (#27055)
  * Updated documentation style guide  (#28488)
  * Cloud Monitoring: Fix help section for aliases (#28499)
  * Docs: what's new in enterprise 7.3 (#28472)
  * Plugins: Track plugin signing errors and expose them to the frontend (#28219)
  * Elasticsearch: Fix handling of errors when testing data source (#28498)
  * Auth: Should redirect to login when anonymous enabled and URL with different org than anonymous specified  (#28158)
  * Drone: Don't build Windows installer for version branches (#28494)
  * Docs: Grafana Enterprise auditing feature (#28356)
  * Drone: Add version branch pipeline (#28490)
  * Getting Started section rehaul (#28090)
  * Docs: Add survey content (#28446)
  * Docs: Update prometheus.md (#28483)
  * Docs: Add view settings and view stats (#28155)
  * Remove entry from 7.3.0-beta2 Changelog (#28478)
  * Circle: Remove release pipeline (#28474)
  * Update latest.json (#28476)
  * Switch default version to Graphite 1.1 (#28471)
  * Plugin page: update readme icon (#28465)
  * Chore: Update changelog (#28473)
  * Explore: parse time range fix (#28467)
  * Alerting: Log alert warnings for obsolete notifiers when extracting alerts and remove spammy error (#28162)
  * Shorten url: Unification across Explore and Dashboards (#28434)
  * Explore: Support wide data frames (#28393)
  * Docs: updated cmd to build docs locally to generate docs prior to building site. (#28371)
  * Live: support real time measurements (alpha) (#28022)
  * CloudWatch/Athena - valid metrics and dimensions. (#28436)
  * Chore: Use net.JoinHostPort (#28421)
  * Chore: Upgrade grafana-eslint to latest (#28444)
  * Fix cut off icon (#28442)
  * Docs: Add shared (#28411)
  * Loki: Visually distinguish error logs for LogQL2 (#28359)
  * Database; Remove database metric feature flag and update changelog (#28438)
  * TestData: multiple arrow requests should return multiple frames (#28417)
  * Docs: Test survey code (#28437)
  * Docs: improved github action that syncs docs to website (#28277)
  * update latest.json with latest stable version (#28433)
  * 7.2.2 changelog update (#28406)
  * plugins: Don't exit on duplicate plugin (#28390)
  * API: Query database from /api/health endpoint (#28349)
  * Chore: Fix conversion of a 64-bit integer to a lower bit size type uint (#28425)
  * Prometheus: fix parsing of infinite sample values (#28287) (#28288)
  * Chore: Rewrite some tests to use testify (#28420)
  * Plugins: do not remount app plugin on nav change (#28105)
  * App Plugins: Add backend support (#28272)
  * Chore: react hooks eslint fixes in grafana-ui (#28026)
  * ci-e2e: Add Git (#28410)
  * TestData: Remove useEffect that triggeres query on component load (#28321)
  * FieldColor: Remove inverted color scheme (#28408)
  * Chore: Set timezone for tests to non utc. (#28405)
  * Chore: fix jsdoc desc and return (#28383)
  * Docs: Fixing v51 link (#28396)
  * fixes windows crlf warning (#28346)
  * Grafana/ui: pass html attributes to segment (#28316)
  * Alerting: Return proper status code when trying to create alert notification channel with duplicate name or uid (#28043)
  * OAuth: Able to skip auto login (#28357)
  * CloudWatch: Fix custom metrics (#28391)
  * Docs: Adds basic frontend data request concepts (#28253)
  * Instrumentation: Add histogram for request duration (#28364)
  * remove status label from histogram (#28387)
  * OAuth: configurable user name attribute (#28286)
  * Component/NewsPanel: Add rel="noopener" to NewsPanel links (#28379)
  * Webpack: Split out unicons and bizcharts (#28374)
  * Explore: Fix date formatting in url for trace logs link (#28381)
  * Docs: Add activate-license (#28156)
  * Instrumentation: Add counters and histograms for database queries (#28236)
  * Docs: Make tables formatting more consistent (#28164)
  * CloudWatch: Adding support for additional Amazon CloudFront metrics (#28378)
  * Add unique ids to query editor fields (#28376)
  * Plugins: Compose filesystem paths with filepath.Join (#28375)
  * Explore: Minor tweaks to exemplars marble (#28366)
  * Instrumentation: Adds environment_info metric  (#28355)
  * AzureMonitor: Fix capitalization of NetApp 'volumes' namespace (#28369)
  * ColorSchemes: Adds more color schemes and text colors that depend on the background (#28305)
  * Automation: Update backport github action trigger (#28352)
  * Dashboard links: Places drop down list so it's always visible (#28330)
  * Docs: Add missing records from grafana-ui 7.2.1 CHANGELOG (#28302)
  * Templating: Replace all '$tag' in tag values query (#28343)
  * Docs: Add docs for valuepicker (#28327)
  * Git: Create .gitattributes for windows line endings (#28340)
  * Update auth-proxy.md (#28339)
  * area/grafana/toolkit: update e2e docker image (#28335)
  * AlertingNG: remove warn/crit from eval prototype (#28334)
  * Automation: Tweaks to more info message (#28332)
  * Loki: Run instant query only when doing metric query (#28325)
  * SAML: IdP-initiated SSO docs (#28280)
  * IssueTriage: Needs more info automation and messages (#28137)
  * GraphNG: Use AxisSide enum (#28320)
  * BackendSrv: Fixes queue countdown when unsubscribe is before response (#28323)
  * Automation: Add backport github action (#28318)
  * Build(deps): Bump http-proxy from 1.18.0 to 1.18.1 (#27507)
  * Bump handlebars from 4.4.3 to 4.7.6 (#27416)
  * Bump tree-kill from 1.2.1 to 1.2.2 (#27405)
  * Loki: Base maxDataPoints limits on query type (#28298)
  * Explore: respect min_refresh_interval (#27988)
  * Drone: Use ${DRONE_TAG} in release pipelines, since it should work (#28299)
  * Graph NG: fix toggling queries and extract Graph component from graph3 panel (#28290)
  * fix: for graph size not taking up full height or width
  * should only ignore the file in the grafana mixin root folder (#28306)
  * Drone: Fix grafana-mixin linting (#28308)
  * SQLStore: Run tests as integration tests (#28265)
  * Chore: Add cloud-middleware as code owners (#28310)
  * API: Fix short URLs (#28300)
  * CloudWatch: Add EC2CapacityReservations Namespace (#28309)
  * Jaeger: timeline collapser to show icons (#28284)
  * update latest.json with latest beta version (#28293)
  * Update changelog (#28292)
  * Docs : - Added period (#28260)
  * Add monitoring mixing for Grafana (#28285)
  * Chore: Update package.json (#28291)
  * Drone: Fix enterprise release pipeline (#28289)
  * Alerting: Append appSubUrl to back button on channel form (#28282)
- Rework package Makefile &amp; README now that Grunt is gone</changelog>
  <changelog author="tserong@suse.com" date="1613995200">- Update to version 7.4.2:
  * Make Datetime local (No date if today) working (#31274) (#31275)
  * "Release: Updated versions in package to 7.4.2" (#31272)
  * [v7.4.x] Chore: grafana-toolkit uses grafana-ui and grafana-data workspaces (#31269)
  * Snapshots: Disallow anonymous user to create snapshots (#31263) (#31266)
  * only update usagestats every 30min (#31131) (#31262)
  * Prometheus: Fix enabling of disabled queries when editing in dashboard (#31055) (#31248)
  * CloudWatch: Ensure empty query row errors are not passed to the panel (#31172) (#31245)
  * StatPanels: Fixes to palette color scheme is not cleared when loading panel (#31126) (#31246)
  * QueryEditors: Fixes issue that happens after moving queries then editing would update other queries (#31193) (#31244)
  * LibraryPanels: Disconnect before connect during dashboard save (#31235) (#31238)
  * SqlDataSources: Fixes the Show Generated SQL button in query editors (#31236) (#31239)
  * Variables: Adds back default option for data source variable (#31208) (#31232)
  * IPv6: Support host address configured with enclosing square brackets (#31226) (#31228)
  * Postgres: Fix timeGroup macro converts long intervals to invalid numbers when TimescaleDB is enabled (#31179) (#31224)
  * Remove last synchronisation field from LDAP debug view (#30984) (#31221)
  * [v7.4.x]: Sync drone config from master to stable release branch (#31213)
  * DataSourceSrv: Filter out non queryable data sources by default (#31144) (#31214)
  * Alerting: Fix modal text for deleting obsolete notifier (#31171) (#31209)
  * Variables: Fixes missing empty elements from regex filters (#31156) (#31201)
  * DashboardLinks: Fixes links always cause full page reload (#31178) (#31181)
  * DashboardListPanel: Fixes issue with folder picker always showing All and using old form styles (#31160) (#31162)
  * Permissions: Fix team and role permissions on folders/dashboards not displayed for non Grafana Admin users (#31132) (#31176)
  * Prometheus: Multiply exemplars timestamp to follow api change (#31143) (#31170)
- Added add-gotest-module.patch to fix "inconsistent vendoring" build failure</changelog>
  <changelog author="ecsos@opensuse.org" date="1618228800">- Update to version 7.5.3:
  * "Release: Updated versions in package to 7.5.3" (#32745)
  * FolderPicker: Prevent dropdown menu from disappearing off screen (#32603) (#32741)
  * Loki: Remove empty annotations tags (#32359) (#32490)
  * SingleStat: fix wrong call to getDataLinkUIModel (#32721) (#32739)
  * Prometheus: Fix instant query to run two times when exemplars enabled (#32508) (#32726)
  * Elasticsearch: Fix bucket script variable duplication in UI (#32705) (#32714)
  * Variables: Confirms selection before opening new picker (#32586) (#32710)
  * CloudWarch: Fix service quotas link (#32686) (#32689)
  * Configuration: Prevent browser hanging / crashing with large number of org users (#32546) (#32598)
  * chore: bump execa to v2.1.0 (#32543) (#32592)
  * Explore: Fix bug where navigating to explore would result in wrong query and datasource to be shown (#32558)
  * Fix broken gtime tests (#32582) (#32587)
  * resolve conflicts (#32567)
  * gtime: Make ParseInterval deterministic (#32539) (#32560)
  * Dashboard: No longer includes default datasource when externally exporting dashboard with row (#32494) (#32535)
  * TextboxVariable: Limits the length of the preview value (#32472) (#32530)
  * AdHocVariable: Adds default data source (#32470) (#32476)
  * Variables: Fixes Unsupported data format error for null values (#32480) (#32487)
  * Prometheus: align exemplars check to latest api change (#32513) (#32515)
  * "Release: Updated versions in package to 7.5.2" (#32502)
  * SigV4: Add support EC2 IAM role auth and possibility to toggle auth providers  (#32444) (#32488)
  * Set spanNulls to default (#32471) (#32486)
  * Graph: Fix setting right y-axis when standard option unit is configured (#32426) (#32442)
  * API: Return 409 on datasource version conflict (#32425) (#32433)
  * API: Return 400 on invalid Annotation requests (#32429) (#32431)
  * Variables: Fixes problem with data source variable when default ds is selected (#32384) (#32424)
  * Table: Fixes so links work for image cells (#32370) (#32410)
  * Variables: Fixes error when manually non-matching entering custom value in variable input/picker (#32390) (#32394)
  * DashboardQueryEditor: Run query after selecting source panel (#32383) (#32395)
  * API: Datasource endpoint should return 400 bad request if id and orgId is invalid (#32392) (#32397)
  * "Release: Updated versions in package to 7.5.1" (#32362)
  * MSSQL: Upgrade go-mssqldb (#32347) (#32361)
  * GraphNG: Fix tooltip displaying wrong or no data (#32312) (#32348)
  * "Release: Updated versions in package to 7.5.0" (#32308)
  * Loki: Fix text search in Label browser (#32293) (#32306)
  * Explore: Show all dataFrames in data tab in Inspector (#32161) (#32299)
  * PieChartV2: Add migration from old piechart (#32259) (#32291)
  * LibraryPanels: Adds Type and Description to DB (#32258) (#32288)
  * LibraryPanels: Prevents deletion of connected library panels (#32277) (#32284)
  * Library Panels: Add "Discard" button to panel save modal (#31647) (#32281)
  * LibraryPanels: Changes to non readonly reducer (#32193) (#32200)
  * Notifications: InfluxDB - Fix regex to include metrics with hyphen in aliases (#32224) (#32262)
  * SSE/InfluxDB: Change InfluxQL to work with server side expressions (#31691) (#32102)
  * DashboardSettings: Fixes issue with tags list not updating when changes are made (#32241) (#32247)
  * Logs: If log message missing, use empty string (#32080) (#32243)
  * CloudWatch: Use latest version of aws sdk (#32217) (#32223)
  * Release: Updated versions in package to 7.5.0-beta.2 (#32158)
  * HttpServer: Make read timeout configurable but disabled by default (#31575) (#32154)
  * GraphNG: Ignore string fields when building data for uPlot in GraphNG (#32150) (#32151)
  * Fix loading timezone info on windows (#32029) (#32149)
  * SQLStore: Close session in withDbSession (#31775) (#32108)
  * Remove datalink template suggestions for accessing specific fields when there are multiple dataframes. (#32057) (#32148)
  * GraphNG: make sure dataset and config are in sync when initializing and re-initializing uPlot (#32106) (#32125)
  * MixedDataSource: Name is updated when data source variable changes (#32090) (#32144)
  * Backport 32005 to v7.5.x #32128 (#32130)
  * Loki: Label browser UI updates (#31737) (#32119)
  * ValueMappings: Fixes value 0 not being mapped (#31924) (#31929)
  * GraphNG: Fix tooltip series color for multi data frame scenario (#32098) (#32103)
  * LibraryPanels: Improves the Get All experience (#32028) (#32093)
  * Grafana/ui: display all selected levels for selected value when searching (#32030) (#32032)
  * Exemplars: always query exemplars (#31673) (#32024)
  * [v7.5.x] TimePicker: Fixes hidden time picker shown in kiosk TV mode (#32055)
  * Chore: Collect elasticsearch version usage stats (#31787) (#32063)
  * Chore: Tidy up Go deps (#32053)
  * GraphNG: Fix PlotLegend field display name being outdated (#32064) (#32066)
  * Data proxy: Fix encoded characters in URL path should be proxied encoded (#30597) (#32060)
  * [v7.5.x] Auth: Allow soft token revocation (#32037)
  * Snapshots: Fix usage of sign in link from the snapshot page (#31986) (#32036)
  * Make master green (#32011) (#32015)
  * Query editor: avoid avoiding word wrap on query editor components (#31949) (#31982)
  * Variables: Fixes filtering in picker with null items (#31979) (#31995)
  * TooltipContainer - use resize observer instead of getClientBoundingRect (#31937) (#32003)
  * Loki: Fix autocomplete when re-editing Loki label values (#31828) (#31987)
  * Loki: Fix type errors in language_provider (#31902) (#31945)
  * PanelInspect: Interpolates variables in CSV file name (#31936) (#31977)
  * Cloudwatch: use shared library for aws auth (#29550) (#31946)
  * Tooltip: partial perf improvement (#31774) (#31837) (#31957)
  * Backport 31913 to v7.5.x (#31955)
  * Grafana/ui: fix searchable options for Cascader with options update (#31906) (#31938)
  * Variables: Do not reset description on variable type change (#31933) (#31939)
  * [v7.5.x] AnnotationList: Adds spacing to UI  (#31888) (#31894)
  * Elasticseach: Support histogram fields (#29079) (#31914)
  * Chore: upgrade eslint and fork-ts-checker-webpack-plugin (#31854) (#31896)
  * Update scripts and Dockerfiles to use Go 1.16.1 (#31881) (#31891)
  * Templating: use dashboard timerange when variables are set to refresh 'On Dashboard Load' (#31721) (#31801)
  * [v7.5.x] Tempo: Add test for backend data source (#31835) (#31882)
  * Run go mod tidy to update go.mod and go.sum (#31859)
  * Grafana/ui: display all selected levels for Cascader (#31729) (#31862)
  * CloudWatch: Consume the grafana/aws-sdk (#31807) (#31861)
  * Cloudwatch: ListMetrics API page limit (#31788) (#31851)
  * Remove invalid attribute (#31848) (#31850)
  * CloudWatch: Restrict auth provider and assume role usage according to? (#31845)
  * CloudWatch: Add support for EC2 IAM role (#31804) (#31841)
  * Loki, Prometheus: Change the placement for query type explanation (#31784) (#31819)
  * Variables: Improves inspection performance and unknown filtering (#31811) (#31813)
  * Change piechart plugin state to beta (#31797) (#31798)
  * ReduceTransform: Include series with numeric string  names (#31763) (#31794)
  * Annotations: Make the annotation clean up batch size configurable (#31487) (#31769)
  * Fix escaping in ANSI and dynamic button removal (#31731) (#31767)
  * DataLinks: Bring back single click links for Stat, Gauge and BarGauge panel (#31692) (#31718)
  * log skipped, performed and duration for migrations (#31722) (#31754)
  * Search: Make items more compact (#31734) (#31750)
  * loki_datasource: add documentation to label_format and line_format (#31710) (#31746)
  * Tempo: Convert tempo to backend data source2 (#31733)
  * Elasticsearch: Fix script fields in query editor (#31681) (#31727)
  * Elasticsearch: revert to isoWeek when resolving weekly indices (#31709) (#31717)
  * Admin: Keeps expired api keys visible in table after delete (#31636) (#31675)
  * Tempo: set authentication header properly (#31699) (#31701)
  * Tempo: convert to backend data source (#31618) (#31695)
  * Update package.json (#31672)
  * Release: Bump version to 7.5.0-beta.1 (#31664)
  * Fix whatsNewUrl version to 7.5 (#31666)
  * Chore: add alias for what's new 7.5 (#31669)
  * Docs: Update doc for PostgreSQL authentication (#31434)
  * Docs: document report template variables (#31637)
  * AzureMonitor: Add deprecation message for App Insights/Insights Analytics (#30633)
  * Color: Fixes issue where colors where reset to gray when switch panels (#31611)
  * Live: Use pure WebSocket transport (#31630)
  * Docs: Fix broken image link (#31661)
  * Docs: Add Whats new in 7.5 (#31659)
  * Docs: Fix links for 7.5 (#31658)
  * Update enterprise-configuration.md (#31656)
  * Explore/Logs: Escaping of incorrectly escaped log lines (#31352)
  * Tracing: Small improvements to trace types (#31646)
  * Update _index.md (#31645)
  * AlertingNG: code refactoring (#30787)
  * Remove pkill gpg-agent (#31169)
  * Remove format for plugin routes (#31633)
  * Library Panels: Change unsaved change detection logic (#31477)
  * CloudWatch: Added AWS Timestream Metrics and Dimensions (#31624)
  * add new metrics and dimensions (#31595)
  * fix devenv dashboard content typo (#31583)
  * DashList: Sort starred and searched dashboard alphabetically (#31605)
  * Docs: Update whats-new-in-v7-4.md (#31612)
  * SSE: Add "Classic Condition" on backend (#31511)
  * InfluxDB: Improve maxDataPoints error-message in Flux-mode, raise limits (#31259)
  * Alerting: PagerDuty: adding current state to the payload (#29270)
  * devenv: Fix typo (#31589)
  * Loki: Label browser (#30351)
  * LibraryPanels: No save modal when user is on same dashboard (#31606)
  * Bug: adding resolution for `react-use-measure` to prevent plugin tests from failing. (#31603)
  * Update node-graph.md (#31571)
  * test: pass Cypress options objects into selector wrappers (#31567)
  * Loki: Add support for alerting (#31424)
  * Tracing: Specify type of the data frame that is expected for TraceView (#31465)
  * LibraryPanels: Adds version column (#31590)
  * PieChart: Add color changing options to pie chart (#31588)
  * Explore: keep enabled/disabled state in angular based QueryEditors correctly (#31558)
  * Bring back correct legend sizing afer PlotLegend refactor (#31582)
  * Alerting: Fix bug in Discord for when name for metric value is absent (#31257)
  * LibraryPanels: Deletes library panels during folder deletion (#31572)
  * chore: bump lodash to 4.17.21 (#31549)
  * Elasticsearch: Fix impossibility to perform non-logs queries after importing queries from loki or prometheus in explore (#31518)
  * TestData: Fixes never ending annotations scenario (#31573)
  * CloudWatch: Added AWS Network Firewall metrics and dimensions (#31498)
  * propagate plugin unavailable message to UI (#31560)
  * ConfirmButton: updates story from knobs to controls (#31476)
  * Loki: Refactor line limit to use grafana/ui component (#31509)
  * LibraryPanels: Adds folder checks and permissions (#31473)
  * Add guide on custom option editors (#31254)
  * PieChart: Update text color and minor changes (#31546)
  * Grafana-data: bump markedjs to v2.x to resolve vulnerability (#31036)
  * Chore(deps): Bump google.golang.org/api from 0.39.0 to 0.40.0 (#31210)
  * PieChart: Improve piechart legend and options (#31446)
  * Chore(deps): Bump google.golang.org/grpc from 1.35.0 to 1.36.0 (#31541)
  * Chore(deps): Bump github.com/aws/aws-sdk-go from 1.37.7 to 1.37.20 (#31538)
  * Chore(deps): Bump github.com/prometheus/common from 0.17.0 to 0.18.0 (#31539)
  * Add multiselect options ui (#31501)
  * Profile: Fixes profile preferences being accessible when anonymous access was enabled (#31516)
  * Variables: Fixes error with: cannot read property length of undefined (#31458)
  * Explore: Show ANSI colored logs in logs context (#31510)
  * LogsPanel: Show all received logs  (#31505)
  * AddPanel: Design polish  (#31484)
  * TimeSeriesPanel: Remove unnecessary margin from legend  (#31467)
  * influxdb: flux: handle is-hidden (#31324)
  * Graph: Fix tooltip not showing when close to the edge of viewport  (#31493)
  * FolderPicker: Remove useNewForms from FolderPicker (#31485)
  * Add reportVariables feature toggle (#31469)
  * Grafana datasource: support multiple targets (#31495)
  * Update license-restrictions.md (#31488)
  * Docs: Derived fields links in logs detail view (#31482)
  * Docs: Add new data source links to Enterprise page (#31480)
  * Convert annotations to dataframes (#31400)
  * ReleaseNotes: Updated changelog and release notes for v7.4.2 (#31475)
  * GrafanaUI: Fixes typescript error for missing css prop (#31479)
  * Login: handle custom token creation error messages (#31283)
  * Library Panels: Don't list current panel in available panels list (#31472)
  * DashboardSettings: Migrate Link Settings to React (#31150)
  * Frontend changes for library panels feature (#30653)
  * Alerting notifier SensuGo: improvements in default message (#31428)
  * AppPlugins: Options to disable showing config page in nav (#31354)
  * add aws config (#31464)
  * Heatmap: Fix missing/wrong value in heatmap legend (#31430)
  * Chore: Fixes small typos (#31461)
  * Graphite/SSE: update graphite to work with server side expressions (#31455)
  * update the lastest version to 7.4.3 (#31457)
  * ReleaseNotes: Updated changelog and release notes for 7.4.3 (#31454)
  * AWS: Add aws plugin configuration (#31312)
  * Revert ""Release: Updated versions in package to 7.4.3" (#31444)" (#31452)
  * Remove UserSyncInfo.tsx (#31450)
  * Elasticsearch: Add word highlighting to search results (#30293)
  * Chore: Fix eslint react hook warnings in grafana-ui (#31092)
  * CloudWatch: Make it possible to specify custom api endpoint (#31402)
  * Chore: fixed incorrect naming for disable settings (#31448)
  * TraceViewer: Fix show log marker in spanbar (#30742)
  * LibraryPanels: Adds permissions to getAllHandler (#31416)
  * NamedColorsPalette: updates story from knobs to controls (#31443)
  * "Release: Updated versions in package to 7.4.3" (#31444)
  * ColorPicker: updates story from knobs to controls (#31429)
  * Streaming: Fixes an issue with time series panel and streaming data source when scrolling back from being out of view (#31431)
  * ClipboardButton: updates story from knobs to controls (#31422)
  * we should never log unhashed tokens (#31432)
  * CI: Upgrade Dockerfiles wrt. Go, Node, Debian (#31407)
  * Elasticsearch: Fix query initialization logic &amp; query transformation from Promethous/Loki (#31322)
  * Postgres: allow providing TLS/SSL certificates as text in addition to file paths (#30353)
  * CloudWatch: Added AWS Ground Station metrics and dimensions (#31362)
  * TraceViewer: Fix trace to logs icon to show in right pane (#31414)
  * add hg team as migrations code owners (#31420)
  * Remove tidy-check script (#31423)
  * InfluxDB: handle columns named "table" (#30985)
  * Prometheus: Use configured HTTP method for /series and /labels endpoints (#31401)
  * Devenv: Add gdev-influxdb2 data source (#31250)
  * Update grabpl from 0.5.38 to 0.5.42 version (#31419)
  * Move NOOP_CONTROL to storybook utils and change to a standalone file (#31421)
  * remove squadcast details from docs (#31413)
  * Add new Cloudwatch AWS/DDoSProtection metrics and dimensions (#31297)
  * Logging: add frontend logging helpers to @grafana/runtime package (#30482)
  * CallToActionCard: updates story from knobs to controls (#31393)
  * Add eu-south-1 cloudwatch region, closes #31197 (#31198)
  * Chore: Upgrade eslint packages (#31408)
  * Cascader: updates story from knobs to controls (#31399)
  * addressed issues 28763 and 30314. (#31404)
  * Added section Query a time series database by id (#31337)
  * Prometheus: Change default httpMethod for new instances to POST (#31292)
  * Data source list: Use Card component (#31326)
  * Chore: Remove gotest.tools dependency (#31391)
  * Revert "StoryBook: Introduces Grafana Controls (#31351)" (#31388)
  * Chore(deps): Bump github.com/prometheus/common from 0.15.0 to 0.17.0 (#31387)
  * AdHocVariables: Fixes crash when values are stored as numbers (#31382)
  * Chore(deps): Bump github.com/golang/mock from 1.4.4 to 1.5.0 (#31379)
  * Chore: Fix strict errors, down to 416 (#31365)
  * Chore(deps): Bump github.com/getsentry/sentry-go from 0.9.0 to 0.10.0 (#31378)
  * StoryBook: Introduces Grafana Controls (#31351)
  * ReleaseNotes: Updated changelog and release notes for 7.4.2 (#31313)
  * Theming: Support for runtime theme switching and hooks for custom themes (#31301)
  * Devenv: Remove old-versioned loki blocks and update prometheus2 block  (#31282)
  * Zipkin: Show success on test data source (#30829)
  * Update grot template (needs more info) (#31350)
  * DatasourceSrv: Fix instance retrieval when datasource variable value set to "default" (#31347)
  * TimeSeriesPanel: Fixes overlapping time axis ticks (#31332)
  * Grafana/UI: Add basic legend to the PieChart (#31278)
  * SAML: single logout only enabled in enterprise (#31325)
  * QueryEditor: handle query.hide changes in angular based query-editors (#31336)
  * DashboardLinks: Fixes another issue where dashboard links cause full page reload (#31334)
  * LibraryPanels: Syncs panel title with name (#31311)
  * Chore: Upgrade golangci-lint (#31330)
  * Add info to docs about concurrent session limits (#31333)
  * Table: Fixes issue with fixed min and auto max with bar gauge cell (#31316)
  * BarGuage: updates story from knobs to controls (#31223)
  * Docs: Clarifies how to add Key/Value pairs (#31303)
  * Usagestats: Exclude folders from total dashboard count (#31320)
  * ButtonCascader: updates story from knobs to controls (#31288)
  * test: allow check for Table as well as Graph for Explore e2e flow (#31290)
  * Grafana-UI: Update tooltip type (#31310)
  * fix 7.4.2 release note (#31299)
  * Add `--tries 3` arg when triggering e2e-tests upon releasing (#31285)
  * Chore: reduce strict errors for variables (#31241)
  * update latest release version (#31296)
  * ReleaseNotes: Updated changelog and release notes for 7.4.2 (#31291)
  * Correct name of Discord notifier tests (#31277)
  * Docs: Clarifies custom date formats for variables (#31271)
  * BigValue: updates story from knobs to controls (#31240)
  * Docs: Annotations update (#31194)
  * Introduce functions for interacting with library panels API (#30993)
  * Search: display sort metadata (#31167)
  * Folders: Editors should be able to edit name and delete folders (#31242)
  * Make Datetime local (No date if today) working (#31274)
  * UsageStats: Purpose named variables (#31264)
  * Snapshots: Disallow anonymous user to create snapshots (#31263)
  * only update usagestats every 30min (#31131)
  * Chore: grafana-toolkit uses grafana-ui and grafana-data workspaces (#30701)
  * Grafana-UI: Add id to Select to make it easier to test (#31230)
  * Prometheus: Fix enabling of disabled queries when editing in dashboard (#31055)
  * UI/Card: Fix handling of 'onClick' callback (#31225)
  * Loki: Add line limit for annotations (#31183)
  * Remove deprecated and breaking loki config field (#31227)
  * SqlDataSources: Fixes the Show Generated SQL button in query editors (#31236)
  * LibraryPanels: Disconnect before connect during dashboard save (#31235)
  * Disable Change Password for OAuth users (#27886)
  * TagsInput: Design update and component refactor (#31163)
  * Variables: Adds back default option for data source variable (#31208)
  * IPv6: Support host address configured with enclosing square brackets (#31226)
  * Postgres: Fix timeGroup macro converts long intervals to invalid numbers when TimescaleDB is enabled (#31179)
  * GraphNG: refactor core to class component (#30941)
  * Remove last synchronisation field from LDAP debug view (#30984)
  * Chore: Upgrade grafana-plugin-sdk-go to v0.88.0 (#30975)
  * Graph: Make axes unit option work even when field option unit is set (#31205)
  * AlertingNG:  Test definition  (#30886)
  * Docs: Update Influx config options (#31146)
  * WIP: Skip this call when we skip migrations (#31216)
  * use 0.1.0 (#31215)
  * DataSourceSrv: Filter out non queryable data sources by default (#31144)
  * QueryEditors: Fixes issue that happens after moving queries then editing would update other queries (#31193)
  * Chore: report eslint no-explicit-any errors to metrics (#31182)
  * Chore(deps): Bump cloud.google.com/go/storage from 1.12.0 to 1.13.0 (#31211)
  * Chore(deps): Bump xorm.io/xorm from 0.8.1 to 0.8.2 (#30773)
  * Alerting: Fix modal text for deleting obsolete notifier (#31171)
  * Chore(deps): Bump github.com/linkedin/goavro/v2 from 2.9.7 to 2.10.0 (#31204)
  * Variables: Fixes missing empty elements from regex filters (#31156)
  * StatPanels: Fixes to palette color scheme is not cleared when loading panel (#31126)
  * Fixed the typo. (#31189)
  * Docs: Rewrite preferences docs (#31154)
  * Explore/Refactor: Simplify URL handling (#29173)
  * DashboardLinks: Fixes links always cause full page reload (#31178)
  * Replace PR with Commit truncated hash when build fails (#31177)
  * Alert: update story to use controls (#31145)
  * Permissions: Fix team and role permissions on folders/dashboards not displayed for non Grafana Admin users (#31132)
  * CloudWatch: Ensure empty query row errors are not passed to the panel (#31172)
  * Update prometheus.md (#31173)
  * Variables: Extend option pickers to accept custom onChange callback (#30913)
  * Prometheus: Multiply exemplars timestamp to follow api change (#31143)
  * DashboardListPanel: Fixes issue with folder picker always showing All and using old form styles (#31160)
  * Add author name and pr number in drone pipeline notifications (#31124)
  * Prometheus: Add documentation for ad-hoc filters (#31122)
  * DataSourceSettings: Fixes add header button, it should not trigger a save &amp; test action (#31135)
  * Alerting: Fix so that sending an alert with the Alertmanager notifier doesn't fail when one of multiple configured URL's are down (#31079)
  * Chore: Update latest.json (#31139)
  * Docs: add 7.4.1 relese notes link (#31137)
  * PieChart: Progress on new core pie chart  (#28020)
  * ReleaseNotes: Updated changelog and release notes for 7.4.1 (#31133)
  * Eslint: no-duplicate-imports rule (bump grafana-eslint-config) (#30989)
  * Transforms: Fixes Outer join issue with duplicate field names not getting the same unique field names as before  (#31121)
  * MuxWriter: Handle error for already closed file (#31119)
  * Logging: sourcemap transform asset urls from CDN in logged stacktraces (#31115)
  * Search: add sort information in dashboard results (#30609)
  * area/grafana/e2e: ginstall should pull version specified (#31056)
  * Exemplars: Change CTA style (#30880)
  * Influx: Make max series limit configurable and show the limiting message if applied (#31025)
  * Docs: request security (#30937)
  * update configurePanel for 7.4.0 changes (#31093)
  * Elasticsearch: fix log row context erroring out (#31088)
  * Prometheus: Fix issues with ad-hoc filters (#30931)
  * LogsPanel: Add deduplication option for logs (#31019)
  * Drone: Make sure CDN upload is ok before pushing docker images (#31075)
  * PluginManager: Remove some global state (#31081)
  * test: update addDashboard flow for v7.4.0 changes (#31059)
  * Transformations: Fixed typo in FilterByValue transformer description. (#31078)
  * Docs: Group id should be 0 instead of 1 in Docker upgrade notes (#31074)
  * Usage stats: Adds source/distributor setting (#31039)
  * CDN: Add CDN upload step to enterprise and release pipelines (#31058)
  * Chore: Replace native select with grafana ui select  (#31030)
  * Docs: Update json-model.md (#31066)
  * Docs: Update whats-new-in-v7-4.md (#31069)
  * Added hyperlinks to Graphite documentation (#31064)
  * DashboardSettings: Update to new form styles (#31022)
  * CDN: Fixing drone CI config (#31052)
  * convert path to posix by default (#31045)
  * DashboardLinks: Fixes crash when link has no title (#31008)
  * Alerting: Fixes so notification channels are properly deleted (#31040)
  * Explore: Remove emotion error when displaying logs (#31026)
  * Elasticsearch: Fix alias field value not being shown in query editor (#30992)
  * CDN: Adds uppload to CDN step to drone CI (#30879)
  * Improved glossary (#31004)
  * BarGauge: Improvements to value sizing and table inner width calculations  (#30990)
  * Drone: Fix deployment image (#31027)
  * ColorPicker: migrated styles from sass to emotion (#30909)
  * Dashboard: Migrate general settings to react (#30914)
  * Chore(deps): Bump github.com/jung-kurt/gofpdf from 1.10.1 to 1.16.2 (#30586)
  * Chore(deps): Bump github.com/aws/aws-sdk-go from 1.36.31 to 1.37.7 (#31018)
  * Prometheus: Min step defaults to seconds when no unit is set to prevent errors when running alerts. (#30966)
  * Chore(deps): Bump github.com/magefile/mage from 1.10.0 to 1.11.0 (#31017)
  * Chore(deps): Bump github.com/grpc-ecosystem/go-grpc-middleware (#31013)
  * Graph: Fixes so graph is shown for non numeric time values (#30972)
  * CloudMonitoring: Prevent resource type variable function from crashing (#30901)
  * Chore(deps): Bump google.golang.org/api from 0.33.0 to 0.39.0 (#30971)
  * Build: Releases e2e and e2e-selectors too (#31006)
  * TextPanel: Fixes so panel title is updated when variables change (#30884)
  * Docs: Update configuration.md (login_maximum_inactive_lifetime_duration, login_maximum_lifetime_duration) (#31000)
  * instrumentation: make the first database histogram bucket smaller (#30995)
  * Grafana/UI: Remove DismissableFeatureInfoBox and replace with LocalSt? (#30988)
  * StatPanel: Fixes issue formatting date values using unit option (#30979)
  * Chore(deps): Bump actions/cache from v2 to v2.1.4 (#30973)
  * Units: Fixes formatting of duration units (#30982)
  * Elasticsearch: Show Size setting for raw_data metric (#30980)
  * Alerts: Dedupe alerts so that we do not fill the screen with the same alert messsage (#30935)
  * make sure service and slo display name is passed to segment comp (#30900)
  * assign changes in cloud datasources to the new cloud datasources team (#30645)
  * Table: Updates devenv test dashboard after change to TestData Randrom Table response (#30927)
  * Theme: Use higher order theme color variables rather then is light/dark logic (#30939)
  * Docs: Add alias for what's new in 7.4 (#30945)
  * e2e: extends selector factory to plugins (#30932)
  * Chore: Upgrade docker build image (#30820)
  * Docs: updated developer guide (#29978)
  * Alerts: Update Alert storybook to show more states (#30908)
  * Variables: Adds queryparam formatting option (#30858)
  * Chore: pad unknown values with undefined (#30808)
  * Transformers: add search to transform selection (#30854)
  * Exemplars: change api to reflect latest changes (#30910)
  * docs: use selinux relabelling on docker containers (#27685)
  * Docs: Fix bad image path for alert notification template (#30911)
  * Make value mappings correctly interpret numeric-like strings (#30893)
  * Chore: Update latest.json (#30905)
  * Docs: Update whats-new-in-v7-4.md (#30882)
  * Dashboard: Ignore changes to dashboard when the user session expires (#30897)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0 (#30902)
  * test: add support for timeout to be passed in for addDatasource (#30736)
  * increase page size and make sure the cache supports query params (#30892)
  * DataSourceSettings: Adds info box and link to Grafana Cloud (#30891)
  * OAuth: custom username docs (#28400)
  * Panels: Remove value mapping of values that have been formatted #26763 (#30868)
  * Alerting: Fixes alert panel header icon not showing (#30840)
  * AlertingNG: Edit Alert Definition (#30676)
  * Logging: sourcemap support for frontend stacktraces (#30590)
  * Added "Restart Grafana" topic. (#30844)
  * Docs: Org, Team, and User Admin (#30756)
  * bump grabpl version to 0.5.36 (#30874)
  * Plugins: Requests validator (#30445)
  * Docs: Update whats-new-in-v7-4.md (#30876)
  * Docs: Add server view folder (#30849)
  * Fixed image name and path  (#30871)
  * Grafana-ui: fixes closing modals with escape key (#30745)
  * InfluxDB: Add http configuration when selecting InfluxDB v2 flavor  (#30827)
  * TestData: Fixes issue with for ever loading state when all queries are hidden (#30861)
  * Chart/Tooltip: refactored style declaration (#30824)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0-beta1 (#30853)
  * Grafana-ui: fixes no data message in Table component (#30821)
  * grafana/ui: Update pagination component for large number of pages (#30151)
  * Alerting: Customise OK notification priorities for Pushover notifier (#30169)
  * DashboardLinks: Support variable expression in to tooltip - Issue #30409 (#30569)
  * Chore: Remove panelTime.html, closes #30097 (#30842)
  * Docs: Time series panel, bar alignment docs (#30780)
  * Chore: add more docs annotations (#30847)
  * Transforms: allow boolean in field calculations (#30802)
  * Prometheus: Add tooltip to explain possibility to use patterns in text and title fields in annotations (#30825)
  * Update prometheus.md with image link fix (#30833)
  * BarChart: inside-align strokes, upgrade uPlot to 1.6.4. (#30806)
  * Update license-expiration.md (#30839)
  * Explore rewrite (#30804)
  * Prometheus: Set type of labels to string (#30831)
  * GrafanaUI: Add a way to persistently close InfoBox (#30716)
  * Fix typo in transformer registry (#30712)
  * Elasticsearch: Display errors with text responses (#30122)
  * CDN: Fixes cdn path when Grafana is under sub path (#30822)
  * TraceViewer: Fix lazy loading (#30700)
  * FormField: migrated sass styling to emotion (#30392)
  * AlertingNG: change API permissions (#30781)
  * Variables: Clears drop down state when leaving dashboard (#30810)
  * Grafana-UI: Add story/docs for ErrorBoundary (#30304)
  * Add missing callback dependency (#30797)
  * PanelLibrary: Adds library panel meta information to dashboard json (#30770)
  * Chore(deps): Bump gonum.org/v1/gonum from 0.6.0 to 0.8.2 (#30343)
  * Chore(deps): Bump gopkg.in/yaml.v2 from 2.3.0 to 2.4.0 (#30771)
  * GraphNG: improve behavior when switching between solid/dash/dots (#30796)
  * Chore(deps): Bump github.com/hashicorp/go-hclog from 0.14.1 to 0.15.0 (#30778)
  * Add width for Variable Editors (#30791)
  * Chore: Remove warning when calling resource (#30752)
  * Auth: Use SigV4 lib from grafana-aws-sdk  (#30713)
  * Panels: Fixes so panels are refreshed when scrolling past them fast (#30784)
  * GraphNG: add bar alignment option (#30499)
  * Expressions: Measure total transformation requests and elapsed time (#30514)
  * Menu: Mark menu components as internal (#30740)
  * TableInputCSV: migrated styles from sass to emotion (#30554)
  * CDN: Fix passing correct prefix to GetContentDeliveryURL (#30777)
  * Chore(deps): Bump gopkg.in/ini.v1 from 1.57.0 to 1.62.0 (#30772)
  * CDN: Adds support for serving assets over a CDN (#30691)
  * PanelEdit: Trigger refresh when changing data source (#30744)
  * Chore: remove __debug_bin (#30725)
  * BarChart: add alpha bar chart panel (#30323)
  * Docs: Time series panel (#30690)
  * Backend Plugins: Convert test data source to use SDK contracts (#29916)
  * Docs: Update whats-new-in-v7-4.md (#30747)
  * Add link to Elasticsearch docs. (#30748)
  * Mobile: Fixes issue scrolling on mobile in chrome (#30746)
  * TagsInput: Make placeholder configurable (#30718)
  * Docs: Add config settings for fonts in reporting (#30421)
  * Add menu.yaml to .gitignore (#30743)
  * bump cypress to 6.3.0 (#30644)
  * Datasource: Use json-iterator configuration compatible with standard library (#30732)
  * AlertingNG: Update UX to use new PageToolbar component (#30680)
  * Docs: Add usage insights export feature (#30376)
  * skip symlinks to directories when generating plugin manifest (#30721)
  * PluginCiE2E: Upgrade base images (#30696)
  * Variables: Fixes so text format will show All instead of custom all (#30730)
  * PanelLibrary: better handling of deleted panels (#30709)
  * Added section "Curated dashboards for Google Cloud Monitoring" for 7.4 What's New (#30724)
  * Added "curated dashboards" information and broke down, rearranged topics. (#30659)
  * Transform: improve the "outer join" performance/behavior (#30407)
  * Add alt text to plugin logos (#30710)
  * Deleted menu.yaml file (#30717)
  * Dashboard: Top Share URL icon should share panel URL when on viewPanel page (#30000)
  * Added entry for web server. (#30715)
  * DashboardPicker: switch to promise-based debounce, return dashboard UID (#30706)
  * Use connected GraphNG in Explore (#30707)
  * Fix documentation for streaming data sources (#30704)
  * PanelLibrary: changes casing of responses and adds meta property (#30668)
  * Influx: Show all datapoints for dynamically windowed flux query (#30688)
  * Trace: trace to logs design update (#30637)
  * DeployImage: Switch base images to Debian (#30684)
  * Chore: remove CSP debug logging line (#30689)
  * Docs: 7.4 documentation for expressions (#30524)
  * PanelEdit: Get rid of last remaining usage of navbar-button (#30682)
  * Grafana-UI: Fix setting default value for MultiSelect (#30671)
  * CustomScrollbar: migrated styles from sass to emotion (#30506)
  * DashboardSettings &amp; PanelEdit: Use new PageToolbar (#30675)
  * Explore: Fix jumpy live tailing (#30650)
  * ci(npm-publish): add missing github package token to env vars (#30665)
  * PageToolbar: Extracting navbar styles &amp; layout into a modern emotion based component (#30588)
  * AlertingNG: pause/unpause definitions via the API (#30627)
  * Docs: Refer to product docs in whats new for alerting templating feature (#30652)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0-beta1 (#30666)
  * Variables: Fixes display value when using capture groups in regex (#30636)
  * Docs: Update _index.md (#30655)
  * Docs: Auditing updates (#30433)
  * Docs: add hidden_users configuration field (#30435)
  * Docs: Define TLS/SSL terminology (#30533)
  * Docs: Fix expressions enabled description (#30589)
  * Docs: Update ES screenshots (#30598)
  * Licensing Docs: Adding license restrictions docs (#30216)
  * Update documentation-style-guide.md (#30611)
  * Docs: Update queries.md (#30616)
  * chore(grafana-ui): bump storybook to 6.1.15 (#30642)
  * DashboardSettings: fixes vertical scrolling (#30640)
  * Usage Stats: Remove unused method for getting user stats (#30074)
  * Grafana/UI: Unit picker should not set a category as unit (#30638)
  * Graph: Fixes auto decimals issue in legend and tooltip (#30628)
  * AlertingNG: List saved Alert definitions in Alert Rule list (#30603)
  * chore: bump redux toolkit to 1.5.0 for immer 8.0.1 vulnerability fix (#30605)
  * Grafana/UI: Add disable prop to Segment (#30539)
  * Variables: Fixes so queries work for numbers values too (#30602)
  * Admin: Fixes so form values are filled in from backend (#30544)
  * Docs: Add new override info and add whats new 7.4 links (#30615)
  * TestData: Improve what's new in v7.4 (#30612)
  * Docs: Update 7.4 What's New to use more correct description of alerting notification template feature (#30502)
  * NodeGraph: Add docs (#30504)
  * Loki: Improve live tailing errors and fix Explore's logs container type errors (#30517)
  * TimeRangePicker: Updates components to use new ToolbarButton &amp; ButtonGroup (#30570)
  * Update styling.md guide (#30594)
  * TestData: Adding what's new in v7.4 to the devenv dashboards (#30568)
  * Chore(deps): Bump github.com/aws/aws-sdk-go from 1.35.5 to 1.36.31 (#30583)
  * Chore(deps): Bump github.com/prometheus/client_golang (#30585)
  * Chore(deps): Bump gopkg.in/macaron.v1 from 1.3.9 to 1.4.0 (#30587)
  * Chore(deps): Bump github.com/google/uuid from 1.1.5 to 1.2.0 (#30584)
  * Explore: Fix logs hover state so that it is visible and in dark mode &amp; simply hover code (#30572)
  * RefreshPicker: Fixes so valid intervals in url are visible in RefreshPicker (#30474)
  * Add documentation for Exemplars (#30317)
  * OldGraph: Fix height issue in Firefox (#30565)
  * XY Chart: fix editor error with empty frame (no fields) (#30573)
  * ButtonSelect &amp; RefreshPicker: Rewrite of components to use new emotion based ToolbarButton &amp; Menu (#30510)
  * XY Chart: share legend config with timeseries (#30559)
  * configuration.md: Document Content Security Policy options (#30413)
  * DataFrame: cache frame/field index in field state (#30529)
  * List + before -; rm old Git ref; reformat. (#30543)
  * Expressions: Add option to disable feature (#30541)
  * Explore: Fix loading visualisation on the top of the new time series panel (#30553)
  * Prometheus: Fix show query instead of Value if no __name__ and metric (#30511)
  * Decimals: Big Improvements to auto decimals and fixes to auto decimals bug found in 7.4-beta1  (#30519)
  * Postgres: Convert tests to stdlib (#30536)
  * Storybook: Migrate card story to use controls  (#30535)
  * AlertingNG: Enable UI to Save Alert Definitions (#30394)
  * Postgres: Be consistent about TLS/SSL terminology (#30532)
  * Loki: Append refId to logs uid (#30418)
  * Postgres: Fix indentation (#30531)
  * GraphNG: uPlot 1.6.3 (fix bands not filling below 0). close #30523. (#30527)
  * updates for e2e docker image (#30465)
  * GraphNG: uPlot 1.6.2 (#30521)
  * Docs: Update whats-new-in-v7-4.md (#30520)
  * Prettier: ignore build and devenv dirs (#30501)
  * Chore: Upgrade grabpl version (#30486)
  * Explore: Update styling of buttons (#30493)
  * Cloud Monitoring: Fix legend naming with display name override (#30440)
  * GraphNG: Disable Plot logging by default (#30390)
  * Admin: Fixes so whole org drop down is visible when adding users to org (#30481)
  * Docs: include Makefile option for local assets (#30455)
  * Footer: Fixes layout issue in footer  (#30443)
  * TimeSeriesPanel: Fixed default value for gradientMode (#30484)
  * Docs: fix typo in what's new doc (#30489)
  * Chore: adds wait to e2e test (#30488)
  * chore: update packages dependent on dot-prop to fix security vulnerability (#30432)
  * Dashboard: Remove Icon and change copy -&gt; Copy to clipboard in the share embedded panel modal (#30480)
  * Chore: fix spelling mistake (#30473)
  * Chore: Restrict internal imports from other packages (#30453)
  * Docs: What's new fixes and improvements (#30469)
  * Timeseries: only migrage point size when configured (#30461)
  * Alerting: Hides threshold handle for percentual thresholds (#30431)
  * Graph: Fixes so only users with correct permissions can add annotations (#30419)
  * Chore: update latest version to 7.4.0-beta1 (#30452)
  * Docs: Add whats new 7.4 links (#30463)
  * Update whats-new-in-v7-4.md (#30460)
  * docs: 7.4 what's new (Add expressions note) (#30446)
  * Chore: Upgrade build pipeline tool (#30456)
  * PanelModel: Make sure the angular options are passed to react panel type changed handler (#30441)
  * Expressions: Fix button icon (#30444)
  * ReleaseNotes: Updated changelog and release notes for 7.4.0-beta1 (#30449)
  * Docs: Fix img link for alert notification template (#30436)
  * grafana/ui: Fix internal import from grafana/data (#30439)
  * prevent field config from being overwritten (#30437)
  * PanelOptions: Refactoring applying panel and field options out of PanelModel and add property clean up for properties not in field config registry  (#30389)
  * Dashboard: Remove template variables option from ShareModal (#30395)
  * Added doc content for variables inspector code change by Hugo (#30408)
  * Docs: update license expiration behavior for reporting (#30420)
  * Chore: use old version format in package.json (#30430)
  * Chore: upgrade NPM security vulnerabilities (#30397)
  * "Release: Updated versions in package to 7.5.0-pre.0" (#30428)
  * contribute: Add backend and configuration guidelines for PRs (#30426)
  * Chore: Update what's new URL (#30424)
- Update to version 7.4.5
  * Security: Fix API permissions issues related to team-sync CVE-2021-28146, CVE-2021-28147. (Enterprise)
  * Security: Usage insights requires signed in users CVE-2021-28148. (Enterprise)
  * Security: Do not allow editors to incorrectly bypass permissions on the default data source. CVE-2021-27962. (Enterprise)
- Drop patch add-gotest-module.patch
- Add patch drop-grafana-aws-sdk-0.3.0-module.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1618488000">- Update to version 7.5.4:
  * "Release: Updated versions in package to 7.5.4" (#32971)
  * fix(datasource_srv): prevent infinite loop where default datasource is named default (#32949) (#32967)
  * Added Azure Monitor support for Microsoft.AppConfiguration/configurationStores namespace (#32123) (#32968)
  * fix sqlite3 tx retry condition operator precedence (#32897) (#32952)
  * AzureMonitor: Add support for Virtual WAN namespaces (#32935) (#32947)
  * Plugins: Allow a non-dashboard page to be the default home page (#32926) (#32945)
  * GraphNG: uPlot 1.6.8 (#32859) (#32863)
  * Alerting: Add ability to include aliases with dashes (/) and at (@) signs in InfluxDB (#32844)
  * Prometheus: Allow exemplars endpoint in data source proxy (#32802) (#32804)
  * [v7.5.x] Table: Fixes table data links so they refer to correct row after sorting (#32758)
  * TablePanel: Makes sorting case-insensitive (#32435) (#32752)</changelog>
  <changelog author="ecsos@opensuse.org" date="1620302400">- Update to version 7.5.5:
  * "Release: Updated versions in package to 7.5.5" (#33469)
  * GraphNG: Fix exemplars window position (#33427) (#33462)
  * Remove field limitation from slack notification (#33113) (#33455)
  * Prometheus: Support POST in template variables (#33321) (#33441)
  * Instrumentation: Add success rate metrics for email notifications (#33359) (#33409)
  * Use either moment objects (for absolute times in the datepicker) or string (for relative time) (#33315) (#33406)
  * Docs: Removed type from find annotations example. (#33399) (#33403)
  * [v7.5.x]: FrontendMetrics: Adds new backend api that frontend can use to push frontend measurements and counters to prometheus (#33255)
  * Updated label for add panel. (#33285) (#33286)
  * Bug: Add git to Dockerfile.ubuntu (#33247) (#33248)
  * Docs: Sync latest master docs with 7.5.x (#33156)
  * Docs: Update getting-started-influxdb.md (#33234) (#33241)
  * Doc: Document the X-Grafana-Org-Id HTTP header (#32478) (#33239)
  * Minor Changes in Auditing.md (#31435) (#33238)
  * Docs: Add license check endpoint doc (#32987) (#33236)
  * Postgres: Fix time group macro when TimescaleDB is enabled and interval is less than a second (#33153) (#33219)
  * Docs: InfluxDB doc improvements (#32815) (#33185)
  * [v7.5.x] Loki: Pass Skip TLS Verify setting to alert queries (#33031)
  * update cla (#33181)
  * Fix inefficient regular expression (#33155) (#33159)
  * Auth: Don't clear auth token cookie when lookup token fails (#32999) (#33136)
  * Elasticsearch:  Add documentation for supported Elasticsearch query transformations (#33072) (#33128)
  * Update team.md (#33060) (#33084)
  * GE issue 1268 (#33049) (#33081)
  * Fixed some formatting issues for PRs from yesterday. (#33078) (#33079)
  * Explore: Load default data source in Explore when the provided source does not exist (#32992) (#33061)
  * Docs: Replace next with latest in aliases (#33054) (#33059)
  * Added missing link item. (#33052) (#33055)
  * Backport 33034 (#33038)
  * Docs: Backport 32916 to v7.5x  (#33008)
  * ReleaseNotes: Updated changelog and release notes for 7.5.4 (#32973) (#32998)
  * Elasticsearch: Force re-rendering of each editor row type change (#32993) (#32996)
  * Docs: Sync release branch with latest docs (#32986)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Update to version 7.5.7:
  * Updated relref to "Configuring exemplars" section (#34240) (#34243)
  * Added exemplar topic (#34147) (#34226)
  * Quota: Do not count folders towards dashboard quota (#32519) (#34025)
  * Instructions to separate emails with semicolons (#32499) (#34138)
  * Docs: Remove documentation of v8 generic OAuth feature (#34018)
  * Annotations: Prevent orphaned annotation tags cleanup when no annotations were cleaned (#33957) (#33975)
  * [GH-33898] Add missing --no-cache to Dockerfile. (#33906) (#33935)
  * ReleaseNotes: Updated changelog and release notes for 7.5.6 (#33932) (#33936)
  * Stop hoisting @icons/material (#33922)
  * Chore: fix react-color version in yarn.lock (#33914)
  * "Release: Updated versions in package to 7.5.6" (#33909)
  * Loki: fix label browser crashing when + typed (#33900) (#33901)
  * Document `hide_version` flag (#33670) (#33881)
  * Add isolation level db configuration parameter (#33830) (#33878)
  * Sanitize PromLink button (#33874) (#33876)
  * Removed content as per MarcusE's suggestion in https://github.com/grafana/grafana/issues/33822. (#33870) (#33872)
  * Docs feedback: /administration/provisioning.md (#33804) (#33842)
  * Docs: delete from high availability docs references to removed configurations related to session storage (#33827) (#33851)
  * Docs: Update _index.md (#33797) (#33799)
  * Docs: Update installation.md (#33656) (#33703)
  * GraphNG: uPlot 1.6.9 (#33598) (#33612)
  * dont consider invalid email address a failed email (#33671) (#33681)
  * InfluxDB: Improve measurement-autocomplete behavior in query editor (#33494) (#33625)
  * add template for dashboard url parameters  (#33549) (#33588)
  * Add note to Snapshot API doc to specify that user has to provide the entire dashboard model  (#33572) (#33586)
  * Update team.md (#33454) (#33536)
  * Removed duplicate file "dashboard_folder_permissions.md (#33497)
  * Document customQueryParameters for prometheus datasource provisioning (#33440) (#33495)
  * ReleaseNotes: Updated changelog and release notes for 7.5.5 (#33473) (#33492)
  * Documentation: Update developer-guide.md (#33478) (#33490)
  * add closed parenthesis to fix a hyperlink (#33471) (#33481)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1632225600">- Add patch 0001-Add-source-code-reference.patch
  * Add URL to package source code in the login page footer</changelog>
  <changelog author="ro@suse.de" date="1637150400">- Update to version 7.5.11:
  * Fix Snapshot authentication bypass (bsc#1191454, CVE-2021-39226)
  * Fix certs issue (#40002)
  * Release v7.5.11 (#124)
  * Fix static path matching issue in macaron
  * OAuth: add docs for disableAutoLogin param (#38752) (#38894)
  * Fix #747; remove 'other variables'. (#37866) (#37878)
  * Update alert docs (#33658) (#33659)
  * [7.5.x] Docs: added documentation for the "prepare time series"-transformation. (#36836)
  * cherry picked dc5778c303ca555b70e8ca8c28e95997e26ecfc1 (#36813)
  * "Release: Updated versions in package to 7.5.10" (#36792)
  * [v7.5.x] Transformations: add 'prepare time series' transformer (#36749)
  * Remove verify-drone from windows (#36775)
  * Update queries.md (#31941) (#36764)
  * Updated content to specify method to use to get keyboard shortcuts wh? (#36084) (#36087)
  * ReleaseNotes: Updated changelog and release notes for 7.5.9 (#36057) (#36077)
  * "Release: Updated versions in package to 7.5.9" (#36056)
  * Login: Fixes Unauthorized message showing when on login page or snapshot page (#35311) (#35880)
  * ReleaseNotes: Updated changelog and release notes for 7.5.8 (#35703) (#35822)
  * CI: Upgrade pipeline tool to use main (#35804)
  * CI: try to force v7.5.x instead of master (#35799)
  * CI: supports move from master to main in 7.5.x release branch (#35747)
  * "Release: Updated versions in package to 7.5.8" (#35701)
  * Chore: Bump acorn and lodash-es (#35650)
  * Snapshots: Remove dashboard links from snapshots (#35567) (#35585)
  * [v7.5.x] Datasource: Allow configuring `MaxConnsPerHost` (#35519)
  * Remove docs sync from v7.5.x (#35443)
  * "Release: Updated versions in package to 7.5.7" (#35412)
  * Add max_idle_connections_per_host to config (#35365)
  * Update go.sum to fix failing enterprise pipeline (#35353)
  * [v7.5.x] HTTP Client: Introduce `go-conntrack`  (#35321)
  * Fix Markdown syntax in enterprise/license/_index.md (#34683) (#35210)
  * Update annotations.md (#33218) (#35138)
  * Docs: Add query caching to enterprise docs page (#34751) (#35025)
  * [7.5.x] Admin: hide per role counts for licensed users (#34994)
  * cleanup shortcodes, image paths (#34827)
  * Security: Upgrade Thrift dependency (#34698) (#34702)
  * Docs: Fix Quick Start link on Geting Started Influx page (#34549) (#34603)
  * Add link to release notes v7.5.7 (#34460) (#34474)
  * Update 7.5.x landing page (#34447)
  * ReleaseNotes: Updated changelog and release notes for 7.5.7 (#34383) (#34428)
- update to 7.5.10
  * [v7.5.x] Transformations: add "prepare time series" transformer. [#36749]
- update to 7.5.9
  * Login: Fix Unauthorized message that is displayed on sign-in or snapshot page. [#35880]
- drop drop-grafana-aws-sdk-0.3.0-module.patch (upstream)</changelog>
  <changelog author="ro@suse.de" date="1637236800">- recreate tarballs using the makefile to update the
  npm and go modules required</changelog>
  <changelog author="witold.bedyk@suse.com" date="1639396800">- Update to version 7.5.12:
  * Fix markdown path traversal (#42969, bsc#1193688, CVE-2021-43813)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642680000">- Update to Go 1.17.
- Add build-time dependency on `wire`.
- Update license to GNU Affero General Public License v3.0.
- Update to version 8.3.4
  + Security:
  * GetUserInfo: return an error if no user was found
    (bsc#1194873, CVE-2022-21673)
  + Features and enhancements:
  * Alerting: Allow configuration of non-ready alertmanagers.
  * Alerting: Allow customization of Google chat message.
  * AppPlugins: Support app plugins with only default nav.
  * InfluxDB: query editor: skip fields in metadata queries.
  * Postgres/MySQL/MSSQL: Cancel in-flight SQL query if user
    cancels query in grafana.
  * Prometheus: Forward oauth tokens after prometheus datasource
    migration.
  + Bug fixes:
  * Azure Monitor: Bug fix for variable interpolations in metrics
    dropdowns.
  * Azure Monitor: Improved error messages for variable queries.
  * CloudMonitoring: Fixes broken variable queries that use group
    bys.
  * Configuration: You can now see your expired API keys if you
    have no active ones.
  * Elasticsearch: Fix handling multiple datalinks for a single
    field.
  * Export: Fix error being thrown when exporting dashboards
    using query variables that reference the default datasource.
  * ImportDashboard: Fixes issue with importing dashboard and
    name ending up in uid.
  * Login: Page no longer overflows on mobile.
  * Plugins: Set backend metadata property for core plugins.
  * Prometheus: Fill missing steps with null values.
  * Prometheus: Fix interpolation of $__rate_interval variable.
  * Prometheus: Interpolate variables with curly brackets syntax.
  * Prometheus: Respect the http-method data source setting.
  * Table: Fixes issue with field config applied to wrong fields
    when hiding columns.
  * Toolkit: Fix bug with rootUrls not being properly parsed when
    signing a private plugin.
  * Variables: Fix so data source variables are added to adhoc
    configuration.
  + Plugin development fixes &amp; changes:
  * Toolkit: Revert build config so tslib is bundled with plugins
    to prevent plugins from crashing.
- Update to version 8.3.3:
  + Features and enhancements:
  * BarChart: Use new data error view component to show actions
    in panel edit.
  * CloudMonitor: Iterate over pageToken for resources.
  * Macaron: Prevent WriteHeader invalid HTTP status code panic.
  + Bug fixes:
  * AnnoListPanel: Fix interpolation of variables in tags.
  * CloudWatch: Allow queries to have no dimensions specified.
  * CloudWatch: Fix broken queries for users migrating from
    8.2.4/8.2.5 to 8.3.0.
  * CloudWatch: Make sure MatchExact flag gets the right value.
  * Dashboards: Fix so that empty folders can be deleted from the
    manage dashboards/folders page.
  * InfluxDB: Improve handling of metadata query errors in
    InfluxQL.
  * Loki: Fix adding of ad hoc filters for queries with parser
    and line_format expressions.
  * Prometheus: Fix running of exemplar queries for non-histogram
    metrics.
  * Prometheus: Interpolate template variables in interval.
  * StateTimeline: Fix toolitp not showing when for frames with
    multiple fields.
  * TraceView: Fix virtualized scrolling when trace view is
    opened in right pane in Explore.
  * Variables: Fix repeating panels for on time range changed
    variables.
  * Variables: Fix so queryparam option works for scoped
    variables.
- Update to version 8.3.2
  + Security: Fixes CVE-2021-43813 and CVE-2021-43815.
- Update to version 8.3.1
  + Security: Fixes CVE-2021-43798.
- Update to version 8.3.0
  + Features and enhancements:
  * Alerting: Prevent folders from being deleted when they
    contain alerts.
  * Alerting: Show full preview value in tooltip.
  * BarGauge: Limit title width when name is really long.
  * CloudMonitoring: Avoid to escape regexps in filters.
  * CloudWatch: Add support for AWS Metric Insights.
  * TooltipPlugin: Remove other panels' shared tooltip in edit
    panel.
  * Visualizations: Limit y label width to 40% of visualization
    width.
  + Bug fixes:
  * Alerting: Clear alerting rule evaluation errors after
    intermittent failures.
  * Alerting: Fix refresh on legacy Alert List panel.
  * Dashboard: Fix queries for panels with non-integer widths.
  * Explore: Fix url update inconsistency.
  * Prometheus: Fix range variables interpolation for time ranges
    smaller than 1 second.
  * ValueMappings: Fixes issue with regex value mapping that only
    sets color.
- Update to version 8.3.0-beta2
  + Breaking changes:
  * Grafana 8 Alerting enabled by default for installations that
    do not use legacy alerting.
  * Keep Last State for "If execution error or timeout" when
    upgrading to Grafana 8 alerting.
  + Features and enhancements:
  * Alerting: Create DatasourceError alert if evaluation returns
    error.
  * Alerting: Make Unified Alerting enabled by default for those
    who do not use legacy alerting.
  * Alerting: Support mute timings configuration through the api
    for the embedded alert manager.
  * CloudWatch: Add missing AWS/Events metrics.
  * Docs: Add easier to find deprecation notices to certain data
    sources and to the changelog.
  * Plugins Catalog: Enable install controls based on the
    pluginAdminEnabled flag.
  * Table: Add space between values for the DefaultCell and
    JSONViewCell.
  * Tracing: Make query editors available in dashboard for Tempo
    and Zipkin.
  + Bug fixes:
  * AccessControl: Renamed orgs roles, removed fixed:orgs:reader
    introduced in beta1.
  * Azure Monitor: Add trap focus for modals in grafana/ui and
    other small a11y fixes for Azure Monitor.
  * CodeEditor: Prevent suggestions from being clipped.
  * Dashboard: Fix cache timeout persistence.
  * Datasource: Fix stable sort order of query responses.
  * Explore: Fix error in query history when removing last item.
  * Logs: Fix requesting of older logs when flipped order.
  * Prometheus: Fix running of health check query based on access
    mode.
  * TextPanel: Fix suggestions for existing panels.
  * Tracing: Fix incorrect indentations due to reoccurring
    spanIDs.
  * Tracing: Show start time of trace with milliseconds
    precision.
  * Variables: Make renamed or missing variable section
    expandable.
  + Plugin development fixes &amp; changes:
  * Select: Select menus now properly scroll during keyboard
    navigation.
- Update to version 8.3.0-beta1
  + Features and enhancements:
  * Alerting: Add UI for contact point testing with custom
    annotations and labels.
  * Alerting: Make alert state indicator in panel header work
    with Grafana 8 alerts.
  * Alerting: Option for Discord notifier to use webhook name.
  * Annotations: Deprecate AnnotationsSrv.
  * Auth: Omit all base64 paddings in JWT tokens for the JWT
    auth.
  * Azure Monitor: Clean up fields when editing Metrics.
  * AzureMonitor: Add new starter dashboards.
  * AzureMonitor: Add starter dashboard for app monitoring with
    Application Insights.
  * Barchart/Time series: Allow x axis label.
  * CLI: Improve error handling for installing plugins.
  * CloudMonitoring: Migrate to use backend plugin SDK contracts.
  * CloudWatch Logs: Add retry strategy for hitting max
    concurrent queries.
  * CloudWatch: Add AWS RoboMaker metrics and dimension.
  * CloudWatch: Add AWS Transfer metrics and dimension.
  * Dashboard: replace datasource name with a reference object.
  * Dashboards: Show logs on time series when hovering.
  * Elasticsearch: Add support for Elasticsearch 8.0 (Beta).
  * Elasticsearch: Add time zone setting to Date Histogram
    aggregation.
  * Elasticsearch: Enable full range log volume histogram.
  * Elasticsearch: Full range logs volume.
  * Explore: Allow changing the graph type.
  * Explore: Show ANSI colors when highlighting matched words in
    the logs panel.
  * Graph(old) panel: Listen to events from Time series panel.
  * Import: Load gcom dashboards from URL.
  * LibraryPanels: Improves export and import of library panels
    between orgs.
  * OAuth: Support PKCE.
  * Panel edit: Overrides now highlight correctly when searching.
  * PanelEdit: Display drag indicators on draggable sections.
  * Plugins: Refactor Plugin Management.
  * Prometheus: Add custom query parameters when creating
    PromLink url.
  * Prometheus: Remove limits on metrics, labels, and values in
    Metrics Browser.
  * StateTimeline: Share cursor with rest of the panels.
  * Tempo: Add error details when json upload fails.
  * Tempo: Add filtering for service graph query.
  * Tempo: Add links to nodes in Service Graph pointing to
    Prometheus metrics.
  * Time series/Bar chart panel: Add ability to sort series via
    legend.
  * TimeSeries: Allow multiple axes for the same unit.
  * TraceView: Allow span links defined on dataFrame.
  * Transformations: Support a rows mode in labels to fields.
  * ValueMappings: Don't apply field config defaults to time
    fields.
  * Variables: Only update panels that are impacted by variable
    change.
  + Bug fixes:
  * API: Fix dashboard quota limit for imports.
  * Alerting: Fix rule editor issues with Azure Monitor data
    source.
  * Azure monitor: Make sure alert rule editor is not enabled
    when template variables are being used.
  * CloudMonitoring: Fix annotation queries.
  * CodeEditor: Trigger the latest getSuggestions() passed to
    CodeEditor.
  * Dashboard: Remove the current panel from the list of options
    in the Dashboard datasource.
  * Encryption: Fix decrypting secrets in alerting migration.
  * InfluxDB: Fix corner case where index is too large in ALIAS
    field.
  * NavBar: Order App plugins alphabetically.
  * NodeGraph: Fix zooming sensitivity on touchpads.
  * Plugins: Add OAuth pass-through logic to api/ds/query
    endpoint.
  * Snapshots: Fix panel inspector for snapshot data.
  * Tempo: Fix basic auth password reset on adding tag.
  * ValueMapping: Fixes issue with regex mappings.
  + Plugin development fixes &amp; changes:
  * grafana/ui: Enable slider marks display.
- Update to version 8.2.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.2.6
  + Features and enhancements:
  * Security: Upgrade Docker base image to Alpine 3.14.3.
  * Security: Upgrade Go to 1.17.2.
  + Bug fixes:
  * TimeSeries: Fix fillBelowTo wrongly affecting fills of
    unrelated series.
- Update to version 8.2.5
  + Breaking changes:
  * Fix No Data behaviour in Legacy Alerting.
  + Bug fixes:
  * Alerting: Fix a bug where the metric in the evaluation string
    was not correctly populated.
  * Alerting: Fix no data behaviour in Legacy Alerting for alert
    rules using the AND operator.
  * CloudMonitoring: Ignore min and max aggregation in MQL
    queries.
  * Dashboards: 'Copy' is no longer added to new dashboard
    titles.
  * DataProxy: Fix overriding response body when response is a
    WebSocket upgrade.
  * Elasticsearch: Use field configured in query editor as field
    for date_histogram aggregations.
  * Explore: Fix running queries without a datasource property
    set.
  * InfluxDB: Fix numeric aliases in queries.
  * Plugins: Ensure consistent plugin settings list response.
  * Tempo: Fix validation of float durations.
  * Tracing: Correct tags for each span are shown.
- Update to version 8.2.4
  + Security: Fixes CVE-2021-41244.
- Update to version 8.2.3
  + Security: Fixes CVE-2021-41174.
- Update to version 8.2.2
  + Features and enhancements:
  * Annotations: We have improved tag search performance.
  * Application: You can now configure an error-template title.
  * AzureMonitor: We removed a restriction from the resource
    filter query.
  * Packaging: We removed the ProcSubset option in systemd. This
    option prevented Grafana from starting in LXC environments.
  * Prometheus: We removed the autocomplete limit for metrics.
  * Table: We improved the styling of the type icons to make them
    more distinct from column / field name.
  * ValueMappings: You can now use value mapping in stat, gauge,
    bar gauge, and pie chart visualizations.
  + Bug fixes:
  * Alerting: Fix panic when Slack's API sends unexpected
    response.
  * Alerting: The Create Alert button now appears on the
    dashboard panel when you are working with a default
    datasource.
  * Explore: We fixed the problem where the Explore log panel
    disappears when an Elasticsearch logs query returns no
    results.
  * Graph: You can now see annotation descriptions on hover.
  * Logs: The system now uses the JSON parser only if the line is
    parsed to an object.
  * Prometheus: We fixed the issue where the system did not reuse
    TCP connections when querying from Grafana alerting.
  * Prometheus: We fixed the problem that resulted in an error
    when a user created a query with a $__interval min step.
  * RowsToFields: We fixed the issue where the system was not
    properly interpreting number values.
  * Scale: We fixed how the system handles NaN percent when data
    min = data max.
  * Table panel: You can now create a filter that includes
    special characters.
- Update to version 8.2.1
  + Bug fixes:
  * Dashboard: Fix rendering of repeating panels.
  * Datasources: Fix deletion of data source if plugin is not
    found.
  * Packaging: Remove systemcallfilters sections from systemd
    unit files.
  * Prometheus: Add Headers to HTTP client options.
- Update to version 8.2.0
  + Features and enhancements:
  * AWS: Updated AWS authentication documentation.
  * Alerting: Added support Alertmanager data source for upstream
    Prometheus AM implementation.
  * Alerting: Allows more characters in label names so
    notifications are sent.
  * Alerting: Get alert rules for a dashboard or a panel using
    /api/v1/rules endpoints.
  * Annotations: Improved rendering performance of event markers.
  * CloudWatch Logs: Skip caching for log queries.
  * Explore: Added an opt-in configuration for Node Graph in
    Jaeger, Zipkin, and Tempo.
  * Packaging: Add stricter systemd unit options.
  * Prometheus: Metrics browser can now handle label values with
    special characters.
  + Bug fixes:
  * CodeEditor: Ensure that we trigger the latest onSave callback
    provided to the component.
  * DashboardList/AlertList: Fix for missing All folder value.
  + Plugin development fixes &amp; changes:
  * Plugins: Create a mock icon component to prevent console
    errors.
- Update to version 8.2.0-beta2
  + Features and enhancements:
  * AccessControl: Document new permissions restricting data
    source access.
  * TimePicker: Add fiscal years and search to time picker.
  * Alerting: Added support for Unified Alerting with Grafana HA.
  * Alerting: Added support for tune rule evaluation using
    configuration options.
  * Alerting: Cleanups alertmanager namespace from key-value
    store when disabling Grafana 8 alerts.
  * Alerting: Remove ngalert feature toggle and introduce two new
    settings for enabling Grafana 8 alerts and disabling them for
    specific organisations.
  * CloudWatch: Introduced new math expression where it is
    necessary to specify the period field.
  * InfluxDB: Added support for $__interval and $__interval_ms in
    Flux queries for alerting.
  * InfluxDB: Flux queries can use more precise start and end
    timestamps with nanosecond-precision.
  * Plugins Catalog: Make the catalog the default way to interact
    with plugins.
  * Prometheus: Removed autocomplete limit for metrics.
  + Bug fixes:
  * Alerting: Fixed an issue where the edit page crashes if you
    tried to preview an alert without a condition set.
  * Alerting: Fixed rules migration to keep existing Grafana 8
    alert rules.
  * Alerting: Fixed the silence file content generated during
    migration.
  * Analytics: Fixed an issue related to interaction event
    propagation in Azure Application Insights.
  * BarGauge: Fixed an issue where the cell color was lit even
    though there was no data.
  * BarGauge: Improved handling of streaming data.
  * CloudMonitoring: Fixed INT64 label unmarshal error.
  * ConfirmModal: Fixes confirm button focus on modal open.
  * Dashboard: Add option to generate short URL for variables
    with values containing spaces.
  * Explore: No longer hides errors containing refId property.
  * Fixed an issue that produced State timeline panel tooltip
    error when data was not in sync.
  * InfluxDB: InfluxQL query editor is set to always use
    resultFormat.
  * Loki: Fixed creating context query for logs with parsed
    labels.
  * PageToolbar: Fixed alignment of titles.
  * Plugins Catalog: Update to the list of available panels after
    an install, update or uninstall.
  * TimeSeries: Fixed an issue where the shared cursor was not
    showing when hovering over in old Graph panel.
  * Variables: Fixed issues related to change of focus or refresh
    pages when pressing enter in a text box variable input.
  * Variables: Panel no longer crash when using the adhoc
    variable in data links.
- Update to version 8.2.0-beta1
  + Features and enhancements:
  * AccessControl: Introduce new permissions to restrict access
    for reloading provisioning configuration.
  * Alerting: Add UI to edit Cortex/Loki namespace, group names,
    and group evaluation interval.
  * Alerting: Add a Test button to test contact point.
  * Alerting: Allow creating/editing recording rules for Loki and
    Cortex.
  * Alerting: Metrics should have the label org instead of user.
  * Alerting: Sort notification channels by name to make them
    easier to locate.
  * Alerting: Support org level isolation of notification
    configuration.
  * AzureMonitor: Add data links to deep link to Azure Portal
    Azure Resource Graph.
  * AzureMonitor: Add support for annotations from Azure Monitor
    Metrics and Azure Resource Graph services.
  * AzureMonitor: Show error message when subscriptions request
    fails in ConfigEditor.
  * Chore: Update to Golang 1.16.7.
  * CloudWatch Logs: Add link to X-Ray data source for trace IDs
    in logs.
  * CloudWatch Logs: Disable query path using websockets (Live)
    feature.
  * CloudWatch/Logs: Don't group dataframes for non time series
    queries.
  * Cloudwatch: Migrate queries that use multiple stats to one
    query per stat.
  * Dashboard: Keep live timeseries moving left (v2).
  * Datasources: Introduce response_limit for datasource
    responses.
  * Explore: Add filter by trace or span ID to trace to logs
    feature.
  * Explore: Download traces as JSON in Explore Inspector.
  * Explore: Reuse Dashboard's QueryRows component.
  * Explore: Support custom display label for derived fields
    buttons for Loki datasource.
  * Grafana UI: Update monaco-related dependencies.
  * Graphite: Deprecate browser access mode.
  * InfluxDB: Improve handling of intervals in alerting.
  * InfluxDB: InfluxQL query editor: Handle unusual characters in
    tag values better.
  * Jaeger: Add ability to upload JSON file for trace data.
  * LibraryElements: Enable specifying UID for new and existing
    library elements.
  * LibraryPanels: Remove library panel icon from the panel
    header so you can no longer tell that a panel is a library
    panel from the dashboard view.
  * Logs panel: Scroll to the bottom on page refresh when sorting
    in ascending order.
  * Loki: Add fuzzy search to label browser.
  * Navigation: Implement active state for items in the Sidemenu.
  * Packaging: Add stricter systemd unit options.
  * Packaging: Update PID file location from /var/run to /run.
  * Plugins: Add Hide OAuth Forward config option.
  * Postgres/MySQL/MSSQL: Add setting to limit the maximum number
    of rows processed.
  * Prometheus: Add browser access mode deprecation warning.
  * Prometheus: Add interpolation for built-in-time variables to
    backend.
  * Tempo: Add ability to upload trace data in JSON format.
  * TimeSeries/XYChart: Allow grid lines visibility control in
    XYChart and TimeSeries panels.
  * Transformations: Convert field types to time string number or
    boolean.
  * Value mappings: Add regular-expression based value mapping.
  * Zipkin: Add ability to upload trace JSON.
  + Bug fixes:
  * Admin: Prevent user from deleting user's current/active
    organization.
  * LibraryPanels: Fix library panel getting saved in the
    dashboard's folder.
  * OAuth: Make generic teams URL and JMES path configurable.
  * QueryEditor: Fix broken copy-paste for mouse middle-click
  * Thresholds: Fix undefined color in "Add threshold".
  * Timeseries: Add wide-to-long, and fix multi-frame output.
  * TooltipPlugin: Fix behavior of Shared Crosshair when Tooltip
    is set to All.
  + Plugin development fixes &amp; changes:
  * Grafana UI: Fix TS error property css is missing in type.
- Update to version 8.1.8
  + Security: Fixes CVE-2021-43798.
- Update to version 8.1.7
  + Bug fixes:
  * Alerting: Fix alerts with evaluation interval more than 30
    seconds resolving before notification.
  * Elasticsearch/Prometheus: Fix usage of proper SigV4 service
    namespace.
- Update to version 8.1.6
  + Security: Fixes CVE-2021-39226.
- Update to version 8.1.5
  + Bug fixes:
  * BarChart: Fixes panel error that happens on second refresh.
- Update to version 8.1.4
  + Features and enhancements
  * Explore: Ensure logs volume bar colors match legend colors.
  * LDAP: Search all DNs for users.
  + Bug fixes:
  * Alerting: Fix notification channel migration.
  * Annotations: Fix blank panels for queries with unknown data
    sources.
  * BarChart: Fix stale values and x axis labels.
  * Graph: Make old graph panel thresholds work even if ngalert
    is enabled.
  * InfluxDB: Fix regex to identify / as separator.
  * LibraryPanels: Fix update issues related to library panels in
    rows.
  * Variables: Fix variables not updating inside a Panel when the
    preceding Row uses "Repeat For".
- Update to version 8.1.3
  + Bug fixes
  * Alerting: Fix alert flapping in the internal alertmanager.
  * Alerting: Fix request handler failed to convert dataframe
    "results" to plugins.DataTimeSeriesSlice: input frame is not
    recognized as a time series.
  * Dashboard: Fix UIDs are not preserved when importing/creating
    dashboards thru importing .json file.
  * Dashboard: Forces panel re-render when exiting panel edit.
  * Dashboard: Prevent folder from changing when navigating to
    general settings.
  * Docker: Force use of libcrypto1.1 and libssl1.1 versions to
    fix CVE-2021-3711.
  * Elasticsearch: Fix metric names for alert queries.
  * Elasticsearch: Limit Histogram field parameter to numeric
    values.
  * Elasticsearch: Prevent pipeline aggregations to show up in
    terms order by options.
  * LibraryPanels: Prevent duplicate repeated panels from being
    created.
  * Loki: Fix ad-hoc filter in dashboard when used with parser.
  * Plugins: Track signed files + add warn log for plugin assets
    which are not signed.
  * Postgres/MySQL/MSSQL: Fix region annotations not displayed
    correctly.
  * Prometheus: Fix validate selector in metrics browser.
  * Security: Fix stylesheet injection vulnerability.
  * Security: Fix short URL vulnerability.
- Update to version 8.1.2
  + Features and enhancements:
  * AzureMonitor: Add support for PostgreSQL and MySQL Flexible
    Servers.
  * Datasource: Change HTTP status code for failed datasource
    health check to 400.
  * Explore: Add span duration to left panel in trace viewer.
  * Plugins: Use file extension allowlist when serving plugin
    assets instead of checking for UNIX executable.
  * Profiling: Add support for binding pprof server to custom
    network interfaces.
  * Search: Make search icon keyboard navigable.
  * Template variables: Keyboard navigation improvements.
  * Tooltip: Display ms within minute time range.
  + Bug fixes:
  * Alerting: Fix saving LINE contact point.
  * Annotations: Fix alerting annotation coloring.
  * Annotations: Alert annotations are now visible in the correct
    Panel.
  * Auth: Hide SigV4 config UI and disable middleware when its
    config flag is disabled.
  * Dashboard: Prevent incorrect panel layout by comparing window
    width against theme breakpoints.
  * Elasticsearch: Fix metric names for alert queries.
  * Explore: Fix showing of full log context.
  * PanelEdit: Fix 'Actual' size by passing the correct panel
    size to Dashboard.
  * Plugins: Fix TLS datasource settings.
  * Variables: Fix issue with empty drop downs on navigation.
  * Variables: Fix URL util converting false into true.
  + Plugin development fixes &amp; changes:
  * Toolkit: Fix matchMedia not found error.
- Update to version 8.1.1
  + Bug fixes:
  * CloudWatch Logs: Fix crash when no region is selected.
- Update to version 8.1.0
  + Features and enhancements:
  * Alerting: Deduplicate receivers during migration.
  * ColorPicker: Display colors as RGBA.
  * Select: Make portalling the menu opt-in, but opt-in
    everywhere.
  * TimeRangePicker: Improve accessibility.
  + Bug fixes:
  * Annotations: Correct annotations that are displayed upon page
    refresh.
  * Annotations: Fix Enabled button that disappeared from Grafana
    v8.0.6.
  * Annotations: Fix data source template variable that was not
    available for annotations.
  * AzureMonitor: Fix annotations query editor that does not
    load.
  * Geomap: Fix scale calculations.
  * GraphNG: Fix y-axis autosizing.
  * Live: Display stream rate and fix duplicate channels in list
    response.
  * Loki: Update labels in log browser when time range changes in
    dashboard.
  * NGAlert: Send resolve signal to alertmanager on alerting -&gt;
    Normal.
  * PasswordField: Prevent a password from being displayed when
    you click the Enter button.
  * Renderer: Remove debug.log file when Grafana is stopped.
  * Security: Update dependencies to fix CVE-2021-36222.
- Update to version 8.1.0-beta3
  + Features and enhancements:
  * Alerting: Support label matcher syntax in alert rule list
    filter.
  * IconButton: Put tooltip text as aria-label.
  * Live: Experimental HA with Redis.
  * UI: FileDropzone component.
  * CloudWatch: Add AWS LookoutMetrics.
  + Bug fixes:
  * Docker: Fix builds by delaying go mod verify until all
    required files are copied over.
  * Exemplars: Fix disable exemplars only on the query that
    failed.
  * SQL: Fix SQL dataframe resampling (fill mode + time
    intervals).
- Update to version 8.1.0-beta2
  + Features and enhancements:
  * Alerting: Expand the value string in alert annotations and
    labels.
  * Auth: Add Azure HTTP authentication middleware.
  * Auth: Auth: Pass user role when using the authentication
    proxy.
  * Gazetteer: Update countries.json file to allow for linking to
    3-letter country codes.
  + Bug fixes:
  * Config: Fix Docker builds by correcting formatting in
    sample.ini.
  * Explore: Fix encoding of internal URLs.
- Update to version 8.1.0-beta1
  + Features and enhancements:
  * Alerting: Add Alertmanager notifications tab.
  * Alerting: Add button to deactivate current Alertmanager
    configuration.
  * Alerting: Add toggle in Loki/Prometheus data source
    configuration to opt out of alerting UI.
  * Alerting: Allow any "evaluate for" value &gt;=0 in the alert
    rule form.
  * Alerting: Load default configuration from status endpoint, if
    Cortex Alertmanager returns empty user configuration.
  * Alerting: view to display alert rule and its underlying data.
  * Annotation panel: Release the annotation panel.
  * Annotations: Add typeahead support for tags in built-in
    annotations.
  * AzureMonitor: Add curated dashboards for Azure services.
  * AzureMonitor: Add support for deep links to Microsoft Azure
    portal for Metrics.
  * AzureMonitor: Remove support for different credentials for
    Azure Monitor Logs.
  * AzureMonitor: Support querying any Resource for Logs queries.
  * Elasticsearch: Add frozen indices search support.
  * Elasticsearch: Name fields after template variables values
    instead of their name.
  * Elasticsearch: add rate aggregation.
  * Email: Allow configuration of content types for email
    notifications.
  * Explore: Add more meta information when line limit is hit.
  * Explore: UI improvements to trace view.
  * FieldOverrides: Added support to change display name in an
    override field and have it be matched by a later rule.
  * HTTP Client: Introduce dataproxy_max_idle_connections config
    variable.
  * InfluxDB: InfluxQL: adds tags to timeseries data.
  * InfluxDB: InfluxQL: make measurement search case insensitive.
    Legacy Alerting: Replace simplejson with a struct in webhook
    notification channel.
  * Legend: Updates display name for Last (not null) to just
    Last*.
  * Logs panel: Add option to show common labels.
  * Loki: Add $__range variable.
  * Loki: Add support for "label_values(log stream selector,
    label)" in templating.
  * Loki: Add support for ad-hoc filtering in dashboard.
  * MySQL Datasource: Add timezone parameter.
  * NodeGraph: Show gradient fields in legend.
  * PanelOptions: Don't mutate panel options/field config object
    when updating.
  * PieChart: Make pie gradient more subtle to match other
    charts.
  * Prometheus: Update PromQL typeahead and highlighting.
  * Prometheus: interpolate variable for step field.
  * Provisioning: Improve validation by validating across all
    dashboard providers.
  * SQL Datasources: Allow multiple string/labels columns with
    time series.
  * Select: Portal select menu to document.body.
  * Team Sync: Add group mapping to support team sync in the
    Generic OAuth provider.
  * Tooltip: Make active series more noticeable.
  * Tracing: Add support to configure trace to logs start and end
    time.
  * Transformations: Skip merge when there is only a single data
    frame.
  * ValueMapping: Added support for mapping text to color,
    boolean values, NaN and Null. Improved UI for value mapping.
  * Visualizations: Dynamically set any config (min, max, unit,
    color, thresholds) from query results.
  * live: Add support to handle origin without a value for the
    port when matching with root_url.
  + Bug fixes:
  * Alerting: Handle marshaling Inf values.
  * AzureMonitor: Fix macro resolution for template variables.
  * AzureMonitor: Fix queries with Microsoft.NetApp/../../volumes
    resources.
  * AzureMonitor: Request and concat subsequent resource pages.
  * Bug: Fix parse duration for day.
  * Datasources: Improve error handling for error messages.
  * Explore: Correct the functionality of shift-enter shortcut
    across all uses.
  * Explore: Show all dataFrames in data tab in Inspector.
  * GraphNG: Fix Tooltip mode 'All' for XYChart.
  * Loki: Fix highlight of logs when using filter expressions
    with backticks.
  * Modal: Force modal content to overflow with scroll.
  * Plugins: Ignore symlinked folders when verifying plugin
    signature.
  + Plugin development fixes &amp; changes:
  * Toolkit: Improve error messages when tasks fail.
- Update to version 8.0.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.0.6
  + Features and enhancements:
  * Alerting: Add annotation upon alert state change.
  * Alerting: Allow space in label and annotation names.
  * InfluxDB: Improve legend labels for InfluxDB query results.
  + Bug fixes:
  * Alerting: Fix improper alert by changing the handling of
    empty labels.
  * CloudWatch/Logs: Reestablish Cloud Watch alert behavior.
  * Dashboard: Avoid migration breaking on fieldConfig without
    defaults field in folded panel.
  * DashboardList: Fix issue not re-fetching dashboard list after
    variable change.
  * Database: Fix incorrect format of isolation level
    configuration parameter for MySQL.
  * InfluxDB: Correct tag filtering on InfluxDB data.
  * Links: Fix links that caused a full page reload.
  * Live: Fix HTTP error when InfluxDB metrics have an incomplete
    or asymmetrical field set.
  * Postgres/MySQL/MSSQL: Change time field to "Time" for time
    series queries.
  * Postgres: Fix the handling of a null return value in query
    results.
  * Tempo: Show hex strings instead of uints for IDs.
  * TimeSeries: Improve tooltip positioning when tooltip
    overflows.
  * Transformations: Add 'prepare time series' transformer.
- Update to version 8.0.5
  + Features and enhancements:
  * Cloudwatch Logs: Send error down to client.
  * Folders: Return 409 Conflict status when folder already
    exists.
  * TimeSeries: Do not show series in tooltip if it's hidden in
    the viz.
  + Bug fixes:
  * AzureMonitor: Fix issue where resource group name is missing
    on the resource picker button.
  * Chore: Fix AWS auth assuming role with workspace IAM.
  * DashboardQueryRunner: Fixes unrestrained subscriptions being
    created.
  * DateFormats: Fix reading correct setting key for
    use_browser_locale.
  * Links: Fix links to other apps outside Grafana when under sub
    path.
  * Snapshots: Fix snapshot absolute time range issue.
  * Table: Fix data link color.
  * Time Series: Fix X-axis time format when tick increment is
    larger than a year.
  * Tooltip Plugin: Prevent tooltip render if field is undefined.
- Update to version 8.0.4
  + Features and enhancements:
  * Live: Rely on app url for origin check.
  * PieChart: Sort legend descending, update placeholder.
  * TimeSeries panel: Do not reinitialize plot when thresholds
    mode change.
  + Bug fixes:
  * Elasticsearch: Allow case sensitive custom options in
    date_histogram interval.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * Explore: Fix import of queries between SQL data sources.
  * InfluxDB: InfluxQL query editor: fix retention policy
    handling.
  * Loki: Send correct time range in template variable queries.
  * TimeSeries: Preserve RegExp series overrides when migrating
    from old graph panel.
- Update to version 8.0.3
  + Features and enhancements:
  * Alerting: Increase alertmanager_conf column if MySQL.
  * Time series/Bar chart panel: Handle infinite numbers as nulls
    when converting to plot array.
  * TimeSeries: Ensure series overrides that contain color are
    migrated, and migrate the previous fieldConfig when changing
    the panel type.
  * ValueMappings: Improve singlestat value mappings migration.
  + Bug fixes:
  * Annotations: Fix annotation line and marker colors.
  * AzureMonitor: Fix KQL template variable queries without
    default workspace.
  * CloudWatch/Logs: Fix missing response data for log queries.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * LibraryPanels: Fix crash in library panels list when panel
    plugin is not found.
  * LogsPanel: Fix performance drop when moving logs panel in
    dashboard.
  * Loki: Parse log levels when ANSI coloring is enabled.
  * MSSQL: Fix issue with hidden queries still being executed.
  * PanelEdit: Display the VisualizationPicker that was not
    displayed if a panel has an unknown panel plugin.
  * Plugins: Fix loading symbolically linked plugins.
  * Prometheus: Fix issue where legend name was replaced with
    name Value in stat and gauge panels.
  * State Timeline: Fix crash when hovering over panel.
- Update to version 8.0.2
  + Features and enhancements:
  * Datasource: Add support for max_conns_per_host in dataproxy
    settings.
  + Bug fixes:
  * Configuration: Fix changing org preferences in FireFox.
  * PieChart: Fix legend dimension limits.
  * Postgres/MySQL/MSSQL: Fix panic in concurrent map writes.
  * Variables: Hide default data source if missing from regex.
- Update to version 8.0.1
  + Bug fixes:
  * Alerting/SSE: Fix "count_non_null" reducer validation.
  * Cloudwatch: Fix duplicated time series.
  * Cloudwatch: Fix missing defaultRegion.
  * Dashboard: Fix Dashboard init failed error on dashboards with
    old singlestat panels in collapsed rows.
  * Datasource: Fix storing timeout option as numeric.
  * Postgres/MySQL/MSSQL: Fix annotation parsing for empty
    responses.
  * Postgres/MySQL/MSSQL: Numeric/non-string values are now
    returned from query variables.
  * Postgres: Fix an error that was thrown when the annotation
    query did not return any results.
  * StatPanel: Fix an issue with the appearance of the graph when
    switching color mode.
  * Visualizations: Fix an issue in the
    Stat/BarGauge/Gauge/PieChart panels where all values mode
    were showing the same name if they had the same value.
  + Plugin development fixes &amp; changes:
  * Toolkit: Resolve external fonts when Grafana is served from a
    sub path.
- Update to version 8.0.0
  + Breaking changes:
  * The following endpoints were deprecated for Grafana v5.0 and
    support for them has now been removed:
    GET /dashboards/db/:slug
    GET /dashboard-solo/db/:slug
    GET /api/dashboard/db/:slug
    DELETE /api/dashboards/db/:slug
  + Features and enhancements:
  * AzureMonitor: Require default subscription for workspaces()
    template variable query.
  * AzureMonitor: Use resource type display names in the UI.
  * Dashboard: Remove support for loading and deleting dashboard
    by slug.
  * InfluxDB: Deprecate direct browser access in data source.
  * VizLegend: Add a read-only property.
  + Bug fixes:
  * AzureMonitor: Fix Azure Resource Graph queries in Azure
    China.
  * Checkbox: Fix vertical layout issue with checkboxes due to
    fixed height.
  * Dashboard: Fix Table view when editing causes the panel data
    to not update.
  * Dashboard: Fix issues where unsaved-changes warning is not
    displayed.
  * Login: Fixes Unauthorized message showing when on login page
    or snapshot page.
  * NodeGraph: Fix sorting markers in grid view.
  * Short URL: Include orgId in generated short URLs.
  * Variables: Support raw values of boolean type.
- Update to version 8.0.0-beta3
  + Breaking changes:
  * The default HTTP method for Prometheus data source is now
    POST.
  + Features and enhancements:
  * API: Support folder UID in dashboards API.
  * Alerting: Add support for configuring avatar URL for the
    Discord notifier.
  * Alerting: Clarify that Threema Gateway Alerts support only
    Basic IDs.
  * Azure: Expose Azure settings to external plugins.
  * AzureMonitor: Deprecate using separate credentials for Azure
    Monitor Logs.
  * AzureMonitor: Display variables in resource picker for Azure
    Monitor Logs.
  * AzureMonitor: Hide application insights for data sources not
    using it.
  * AzureMonitor: Support querying subscriptions and resource
    groups in Azure Monitor Logs.
  * AzureMonitor: remove requirement for default subscription.
  * CloudWatch: Add Lambda@Edge Amazon CloudFront metrics.
  * CloudWatch: Add missing AWS AppSync metrics.
  * ConfirmModal: Auto focus delete button.
  * Explore: Add caching for queries that are run from logs
    navigation.
  * Loki: Add formatting for annotations.
  * Loki: Bring back processed bytes as meta information.
  * NodeGraph: Display node graph collapsed by default with trace
    view.
  * Overrides: Include a manual override option to hide something
    from visualization.
  * PieChart: Support row data in pie charts.
  * Prometheus: Update default HTTP method to POST for existing
    data sources.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  + Bug fixes:
  * Admin: Fix infinite loading edit on the profile page.
  * Color: Fix issues with random colors in string and date
    fields.
  * Dashboard: Fix issue with title or folder change has no
    effect after exiting settings view.
  * DataLinks: Fix an issue __series.name is not working in data
    link.
  * Datasource: Fix dataproxy timeout should always be applied
    for outgoing data source HTTP requests.
  * Elasticsearch: Fix NewClient not passing httpClientProvider
    to client impl.
  * Explore: Fix Browser title not updated on Navigation to
    Explore.
  * GraphNG: Remove fieldName and hideInLegend properties from
    UPlotSeriesBuilder.
  * OAuth: Fix fallback to auto_assign_org_role setting for Azure
    AD OAuth when no role claims exists.
  * PanelChrome: Fix issue with empty panel after adding a non
    data panel and coming back from panel edit.
  * StatPanel: Fix data link tooltip not showing for single
    value.
  * Table: Fix sorting for number fields.
  * Table: Have text underline for datalink, and add support for
    image datalink.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  * Transformations: Prevent FilterByValue transform from
    crashing panel edit.
- Update to version 8.0.0-beta2
  + Features and enhancements:
  * AppPlugins: Expose react-router to apps.
  * AzureMonitor: Add Azure Resource Graph.
  * AzureMonitor: Managed Identity configuration UI.
  * AzureMonitor: Token provider with support for Managed
    Identities.
  * AzureMonitor: Update Logs workspace() template variable query
    to return resource URIs.
  * BarChart: Value label sizing.
  * CloudMonitoring: Add support for preprocessing.
  * CloudWatch: Add AWS/EFS StorageBytes metric.
  * CloudWatch: Allow use of missing AWS namespaces using custom
    metrics.
  * Datasource: Shared HTTP client provider for core backend data
    sources and any data source using the data source proxy.
  * InfluxDB: InfluxQL: allow empty tag values in the query
    editor.
  * Instrumentation: Instrument incoming HTTP request with
    histograms by default.
  * Library Panels: Add name endpoint &amp; unique name validation to
    AddLibraryPanelModal.
  * Logs panel: Support details view.
  * PieChart: Always show the calculation options dropdown in the
    editor.
  * PieChart: Remove beta flag.
  * Plugins: Enforce signing for all plugins.
  * Plugins: Remove support for deprecated backend plugin
    protocol version.
  * Tempo/Jaeger: Add better display name to legend.
  * Timeline: Add time range zoom.
  * Timeline: Adds opacity &amp; line width option.
  * Timeline: Value text alignment option.
  * ValueMappings: Add duplicate action, and disable dismiss on
    backdrop click.
  * Zipkin: Add node graph view to trace response.
  + Bug fixes:
  * Annotations panel: Remove subpath from dashboard links.
  * Content Security Policy: Allow all image sources by default.
  * Content Security Policy: Relax default template wrt. loading
    of scripts, due to nonces not working.
  * Datasource: Fix tracing propagation for alert execution by
    introducing HTTP client outgoing tracing middleware.
  * InfluxDB: InfluxQL always apply time interval end.
  * Library Panels: Fixes "error while loading library panels".
  * NewsPanel: Fixes rendering issue in Safari.
  * PanelChrome: Fix queries being issued again when scrolling in
    and out of view.
  * Plugins: Fix Azure token provider cache panic and auth param
    nil value.
  * Snapshots: Fix key and deleteKey being ignored when creating
    an external snapshot.
  * Table: Fix issue with cell border not showing with colored
    background cells.
  * Table: Makes tooltip scrollable for long JSON values.
  * TimeSeries: Fix for Connected null values threshold toggle
    during panel editing.
  * Variables: Fixes inconsistent selected states on dashboard
    load.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * QueryField: Remove carriage return character from pasted text.
- Update to version 8.0.0-beta1
  + License update:
  * AGPL License: Update license from Apache 2.0 to the GNU
    Affero General Public License (AGPL).
  + Breaking changes:
  * Removes the never refresh option for Query variables.
  * Removes the experimental Tags feature for Variables.
  + Deprecations:
  * The InfoBox &amp; FeatureInfoBox are now deprecated please use
    the Alert component instead with severity info.
  + Features and enhancements:
  * API: Add org users with pagination.
  * API: Return 404 when deleting nonexistent API key.
  * API: Return query results as JSON rather than base64 encoded
    Arrow.
  * Alerting: Allow sending notification tags to Opsgenie as
    extra properties.
  * Alerts: Replaces all uses of InfoBox &amp; FeatureInfoBox with
    Alert.
  * Auth: Add support for JWT Authentication.
  * AzureMonitor: Add support for
    Microsoft.SignalRService/SignalR metrics.
  * AzureMonitor: Azure settings in Grafana server config.
  * AzureMonitor: Migrate Metrics query editor to React.
  * BarChart panel: enable series toggling via legend.
  * BarChart panel: Adds support for Tooltip in BarChartPanel.
  * PieChart panel: Change look of highlighted pie slices.
  * CloudMonitoring: Migrate config editor from angular to react.
  * CloudWatch: Add Amplify Console metrics and dimensions.
  * CloudWatch: Add missing Redshift metrics to CloudWatch data
    source.
  * CloudWatch: Add metrics for managed RabbitMQ service.
  * DashboardList: Enable templating on search tag input.
  * Datasource config: correctly remove single custom http
    header.
  * Elasticsearch: Add generic support for template variables.
  * Elasticsearch: Allow omitting field when metric supports
    inline script.
  * Elasticsearch: Allow setting a custom limit for log queries.
  * Elasticsearch: Guess field type from first non-empty value.
  * Elasticsearch: Use application/x-ndjson content type for
    multisearch requests.
  * Elasticsearch: Use semver strings to identify ES version.
  * Explore: Add logs navigation to request more logs.
  * Explore: Map Graphite queries to Loki.
  * Explore: Scroll split panes in Explore independently.
  * Explore: Wrap each panel in separate error boundary.
  * FieldDisplay: Smarter naming of stat values when visualising
    row values (all values) in stat panels.
  * Graphite: Expand metric names for variables.
  * Graphite: Handle unknown Graphite functions without breaking
    the visual editor.
  * Graphite: Show graphite functions descriptions.
  * Graphite: Support request cancellation properly (Uses new
    backendSrv.fetch Observable request API).
  * InfluxDB: Flux: Improve handling of complex
    response-structures.
  * InfluxDB: Support region annotations.
  * Inspector: Download logs for manual processing.
  * Jaeger: Add node graph view for trace.
  * Jaeger: Search traces.
  * Loki: Use data source settings for alerting queries.
  * NodeGraph: Exploration mode.
  * OAuth: Add support for empty scopes.
  * PanelChrome: New logic-less emotion based component with no
    dependency on PanelModel or DashboardModel.
  * PanelEdit: Adds a table view toggle to quickly view data in
    table form.
  * PanelEdit: Highlight matched words when searching options.
  * PanelEdit: UX improvements.
  * Plugins: PanelRenderer and simplified QueryRunner to be used
    from plugins.
  * Plugins: AuthType in route configuration and params
    interpolation.
  * Plugins: Enable plugin runtime install/uninstall
    capabilities.
  * Plugins: Support set body content in plugin routes.
  * Plugins: Introduce marketplace app.
  * Plugins: Moving the DataSourcePicker to grafana/runtime so it
    can be reused in plugins.
  * Prometheus: Add custom query params for alert and exemplars
    queries.
  * Prometheus: Use fuzzy string matching to autocomplete metric
    names and label.
  * Routing: Replace Angular routing with react-router.
  * Slack: Use chat.postMessage API by default.
  * Tempo: Search for Traces by querying Loki directly from
    Tempo.
  * Tempo: Show graph view of the trace.
  * Themes: Switch theme without reload using global shortcut.
  * TimeSeries panel: Add support for shared cursor.
  * TimeSeries panel: Do not crash the panel if there is no time
    series data in the response.
  * Variables: Do not save repeated panels, rows and scopedVars.
  * Variables: Removes experimental Tags feature.
  * Variables: Removes the never refresh option.
  * Visualizations: Unify tooltip options across visualizations.
  * Visualizations: Refactor and unify option creation between
    new visualizations.
  * Visualizations: Remove singlestat panel.
  + Bug fixes:
  * APIKeys: Fixes issue with adding first api key.
  * Alerting: Add checks for non supported units - disable
    defaulting to seconds.
  * Alerting: Fix issue where Slack notifications won't link to
    user IDs.
  * Alerting: Omit empty message in PagerDuty notifier.
  * AzureMonitor: Fix migration error from older versions of App
    Insights queries.
  * CloudWatch: Fix AWS/Connect dimensions.
  * CloudWatch: Fix broken AWS/MediaTailor dimension name.
  * Dashboards: Allow string manipulation as advanced variable
    format option.
  * DataLinks: Includes harmless extended characters like
    Cyrillic characters.
  * Drawer: Fixes title overflowing its container.
  * Explore: Fix issue when some query errors were not shown.
  * Generic OAuth: Prevent adding duplicated users.
  * Graphite: Handle invalid annotations.
  * Graphite: Fix autocomplete when tags are not available.
  * InfluxDB: Fix Cannot read property 'length' of undefined in
    when parsing response.
  * Instrumentation: Enable tracing when Jaeger host and port are
    set.
  * Instrumentation: Prefix metrics with grafana.
  * MSSQL: By default let driver choose port.
  * OAuth: Add optional strict parsing of role_attribute_path.
  * Panel: Fixes description markdown with inline code being
    rendered on newlines and full width.
  * PanelChrome: Ignore data updates &amp; errors for non data
    panels.
  * Permissions: Fix inherited folder permissions can prevent new
    permissions being added to a dashboard.
  * Plugins: Remove pre-existing plugin installs when installing
    with grafana-cli.
  * Plugins: Support installing to folders with whitespace and
    fix pluginUrl trailing and leading whitespace failures.
  * Postgres/MySQL/MSSQL: Don't return connection failure details
    to the client.
  * Postgres: Fix ms precision of interval in time group macro
    when TimescaleDB is enabled.
  * Provisioning: Use dashboard checksum field as change
    indicator.
  * SQL: Fix so that all captured errors are returned from sql
    engine.
  * Shortcuts: Fixes panel shortcuts so they always work.
  * Table: Fixes so border is visible for cells with links.
  * Variables: Clear query when data source type changes.
  * Variables: Filters out builtin variables from unknown list.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * Button: Introduce buttonStyle prop.
  * DataQueryRequest: Remove deprecated props showingGraph and
    showingTabel and exploreMode.
  * grafana/ui: Update React Hook Form to v7.
  * IconButton: Introduce variant for red and blue icon buttons.
  * Plugins: Expose the getTimeZone function to be able to get
    the current selected timeZone.
  * TagsInput: Add className to TagsInput.
  * VizLegend: Move onSeriesColorChanged to PanelContext
    (breaking change).
- Update to version 7.5.13
  + Bug fixes:
  * Alerting: Fix NoDataFound for alert rules using AND operator.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1644408000">- Update to version 8.3.5 (jsc#SLE-23439, jsc#SLE-23422)
  + Security:
  * Fixes XSS vulnerability in handling data sources
    (bsc#1195726, CVE-2022-21702)
  * Fixes cross-origin request forgery vulnerability
    (bsc#1195727, CVE-2022-21703)
  * Fixes Insecure Direct Object Reference vulnerability in Teams
    API (bsc#1195728, CVE-2022-21713)</changelog>
</package>
<package pkgid="ddfd1d124c52398303a9e5598a1e67a5cdf96b26fe433ffeb61499e3dbfedeea" name="grafana-status-panel" arch="noarch">
  <version epoch="0" ver="1.0.11" rel="150200.3.8.1"/>
  <changelog author="jan.fajerski@suse.com" date="1550836800">- inital package</changelog>
  <changelog author="jan.fajerski@suse.com" date="1575547200">- Change SUSE name in spec file</changelog>
  <changelog author="jan.fajerski@suse.com" date="1575979200">- Fix permission in /var/lib/grafana/plugins to avoid conflict with grafana rpm</changelog>
  <changelog author="jan.fajerski@suse.com" date="1577966400">- Add BuildRequires: grafana so grafana user and group are present
- add empty build section for rpmlint
- remove duplicate files via fdupes</changelog>
  <changelog author="pseidensal@suse.com" date="1624017600">- Update plugin to version 1.0.10 to fix compatibilty issues with newer Grafana
  versions as the plugin stopped working on Grafana versions higher than
  v6.7.x.
  https://github.com/Vonage/Grafana_Status_panel/pull/161</changelog>
  <changelog author="tserong@suse.com" date="1650628800">- Update to version 1.0.11, signed for use with grafana v8.x (bsc#1198768)</changelog>
</package>
<package pkgid="6232998734b0c4168b3fd56fec0b0411d41602b37eb4662a6f2426d926758180" name="grafana-status-panel" arch="src">
  <version epoch="0" ver="1.0.11" rel="150200.3.8.1"/>
  <changelog author="jan.fajerski@suse.com" date="1550836800">- inital package</changelog>
  <changelog author="jan.fajerski@suse.com" date="1575547200">- Change SUSE name in spec file</changelog>
  <changelog author="jan.fajerski@suse.com" date="1575979200">- Fix permission in /var/lib/grafana/plugins to avoid conflict with grafana rpm</changelog>
  <changelog author="jan.fajerski@suse.com" date="1577966400">- Add BuildRequires: grafana so grafana user and group are present
- add empty build section for rpmlint
- remove duplicate files via fdupes</changelog>
  <changelog author="pseidensal@suse.com" date="1624017600">- Update plugin to version 1.0.10 to fix compatibilty issues with newer Grafana
  versions as the plugin stopped working on Grafana versions higher than
  v6.7.x.
  https://github.com/Vonage/Grafana_Status_panel/pull/161</changelog>
  <changelog author="tserong@suse.com" date="1650628800">- Update to version 1.0.11, signed for use with grafana v8.x (bsc#1198768)</changelog>
</package>
<package pkgid="8e45addf3e761fd55540e9d441d5ea57f2f1de16d6e68c02e0a29f32ef26e6b5" name="grep" arch="aarch64">
  <version epoch="0" ver="3.1" rel="150000.4.6.1"/>
  <changelog author="meissner@suse.com" date="1419940800">- build with PIE enabled</changelog>
  <changelog author="schwab@suse.de" date="1421064000">- Fix last change</changelog>
  <changelog author="schwab@suse.de" date="1422273600">- grep-F-heap-overrun.patch: fix heap overrun with grep -F (CVE-2015-1345,
  bsc#914695)</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib.bugs</changelog>
  <changelog author="astieger@suse.com" date="1446465600">- GNU grep 2.22:
  * Improve performance for patterns containing very long strings
  * Output and pattern matching bug fixes
- drop add gnulib-perl522.patch, changed upstream
- drop grep-F-heap-overrun.patch, included upstream</changelog>
  <changelog author="schwab@suse.de" date="1446552000">- testsuite.patch: disable unreliable test mb-non-UTF8-performance</changelog>
  <changelog author="schwab@suse.de" date="1448539200">- testsuite.patch: also disable long-pattern-perf test</changelog>
  <changelog author="mpluskal@suse.com" date="1454673600">- Update to 2.23
  * Binary files are now less likely to generate diagnostics and
    more likely to yield text matches.  grep now reports "Binary
    file FOO matches" and suppresses further output instead of
    outputting a line containing an encoding error; hence grep can
    now report matching text before a later binary match.
    Formerly, grep reported FOO to be binary when it found an
    encoding error in FOO before generating output for FOO, which
    meant it never reported both matching text and matching binary
    data; this was less useful for searching text containing
    encoding errors in non-matching lines. [bug introduced in
    grep-2.21]
  * grep -c no longer stops counting when finding binary data.
    [bug introduced in grep-2.21]
  * grep no longer outputs encoding errors in unibyte locales. For
    example, if the byte '\x81' is not a valid character in a
    unibyte locale, grep treats the byte as binary data. [bug
    introduced in grep-2.21]
  * grep -oP is no longer susceptible to an infinite loop when
    processing invalid UTF8 just before a match. [bug introduced in
    grep-2.22]
  * --exclude and related options are now matched against trailing
    parts of command-line arguments, not against the entire
    arguments. This partly reverts the --exclude-related change
    in 2.22. [bug introduced in grep-2.22]
  * --line-buffer is no longer ineffective when combined with -l.
    [bug introduced in grep-2.5]
  * -xw is now equivalent to -x more consistently, with -P and
    with backrefs.  [bug only partially fixed in grep-2.19]
- Update info handling scriplets
  * move from postun to preun
  * add dependeny for preun
- Refresh partially upstreamed patch
  * testsuite.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1457697600">- Update to 2.24
  * grep -z would match strings it should not.  To trigger the bug,
    you'd have to use a regular expression including an anchor
    (^ or $) and a feature like a range or a backreference, causing
    grep to forego its DFA matcher and resort to using re_search.
    With a multibyte locale, that matcher could mistakenly match a
    string containing a newline. For example, this command:
    printf 'a\nb\0' | LC_ALL=en_US.utf-8 grep -z '^[a-b]*b'
    would mistakenly match and print all four input bytes.  After
    the fix, there is no match, as expected.
    [bug introduced in grep-2.7]
  * grep -Pz now diagnoses attempts to use patterns containing ^
    and $, instead of mishandling these patterns.  This problem
    seems to be inherent to the PCRE API; removing this limitation
    is on PCRE's maint/README wish list.  Patterns can continue to
    match literal ^ and $ by escaping them with \ (now needed even
    inside [...]). [bug introduced in grep-2.5]</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- grep 2.25:
  * In the C or POSIX locale, grep now treats all bytes as valid
    characters even if the C runtime library says otherwise.
    ( Fixes yast2-users and other build failures - boo#966780 )
  * grep -oz now uses null bytes, not newlines, to terminate output
    lines.
  * grep now outputs details more consistently when reporting a
    write error.</changelog>
  <changelog author="astieger@suse.com" date="1477656000">- grep 2.26:
  * no longer omit output merely because it follows an output line
    suppressed due to encoding errors
  * In the Shift_JIS locale, no longer mistakenly match in the
    middle of a multibyte character
  * grep can be much faster now when standard output is /dev/null.
  * grep -F is now typically much faster when many patterns are
    given, as it now uses the Aho-Corasick algorithm instead of
    the Commentz-Walter algorithm in that case.
  * grep -iF is typically much faster in a multibyte locale, if
    the pattern and its case counterparts contain only single byte
    characters.
  * grep with complicated expressions (e.g., back-references) and
    without -i now uses the regex fastmap for better performance.
  * In multibyte locales, grep now handles leading "." in patterns
    more efficiently.
  * grep now prints a "FILENAME:LINENO: " prefix when diagnosing
    an invalid regular expression that was read from an
  '-f'-specified file.</changelog>
  <changelog author="schwab@suse.de" date="1481112000">- Update to grep 2.27
  * grep no longer reports a false match in a multibyte, non-UTF8 locale
    like zh_CN.gb18030, with a regular expression like ".*7" that just
    happens to match the 4-byte representation of gb18030's \uC9, the
    final byte of which is the digit "7".
  * grep by default now reads all of standard input if it is a pipe,
    even if this cannot affect grep's output or exit status.
  * grep no longer mishandles ranges in nontrivial unibyte locales.
  * grep -P no longer attempts multiline matches.
  * grep -m0 -L PAT FILE now outputs "FILE".
  * To output ':' and tab-align the following character C, grep -T no
    longer outputs tab-backspace-':'-C, an approach that has problems if
    run inside an Emacs shell window.
  * grep -T now uses worst-case widths of line numbers and byte offsets
    instead of guessing widths that might not work with larger files.
  * grep no longer reads the input in a few more cases when it is easy to
    see that matching cannot succeed, e.g., 'grep -f /dev/null'.</changelog>
  <changelog author="schwab@suse.de" date="1481544000">- testsuite.patch: remove
- proc-lseek-glitch.patch: work around proc lseek glitch</changelog>
  <changelog author="mpluskal@suse.com" date="1486555200">- Update to version 2.28:
  * Improve performance for -E or -G pattern lists that are easily
    converted to -F format.
  * Fix performance regression with multiple patterns.
  * When standard output is /dev/null, grep no longer fails when
    standard input is a file in the Linux /proc file system, or when
    standard input is a pipe and standard output is in append mode.
  * When grep -Fo finds matches of differing length, it could
    mistakenly print a shorter one.  Now it prints a longest one.
- Drop upstreamed proc-lseek-glitch.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1486814400">- Update to version 3.0:
  * grep without -F no longer goes awry when given two or more
    patterns that contain no special characters other than '\' and
    also contain a subpattern like '\.' that escapes a character to
    make it ordinary.
  * grep no longer fails to build on PCRE versions before 8.20.
- Cleanup spec file:
  * Drop support for old distributions
  * Create lang subpackage
  * Use fdupes to replace duplicate files with symlinks</changelog>
  <changelog author="mpluskal@suse.com" date="1496318400">- Use https url's
- Drop no longer needed explicit pie
- Enable profiled build</changelog>
  <changelog author="schwab@suse.de" date="1499083200">- Update to grep 3.1
  * grep '[0-9]' is now just as fast as grep '[[:digit:]]' when run
    in a multi-byte locale
  * Context no longer excludes selected lines omitted because of -m</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1576756800">- Update testsuite expectations, no functional changes (bsc#1155271)</changelog>
  <changelog author="bwiedemann@suse.com" date="1647518400">- Make profiling deterministic (bsc#1040589, SLE-24115)</changelog>
</package>
<package pkgid="f7f26660614c292af111610774dd0da16bd0318b08a2490ed2db81c32253d2a4" name="grep" arch="ppc64le">
  <version epoch="0" ver="3.1" rel="150000.4.6.1"/>
  <changelog author="meissner@suse.com" date="1419940800">- build with PIE enabled</changelog>
  <changelog author="schwab@suse.de" date="1421064000">- Fix last change</changelog>
  <changelog author="schwab@suse.de" date="1422273600">- grep-F-heap-overrun.patch: fix heap overrun with grep -F (CVE-2015-1345,
  bsc#914695)</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib.bugs</changelog>
  <changelog author="astieger@suse.com" date="1446465600">- GNU grep 2.22:
  * Improve performance for patterns containing very long strings
  * Output and pattern matching bug fixes
- drop add gnulib-perl522.patch, changed upstream
- drop grep-F-heap-overrun.patch, included upstream</changelog>
  <changelog author="schwab@suse.de" date="1446552000">- testsuite.patch: disable unreliable test mb-non-UTF8-performance</changelog>
  <changelog author="schwab@suse.de" date="1448539200">- testsuite.patch: also disable long-pattern-perf test</changelog>
  <changelog author="mpluskal@suse.com" date="1454673600">- Update to 2.23
  * Binary files are now less likely to generate diagnostics and
    more likely to yield text matches.  grep now reports "Binary
    file FOO matches" and suppresses further output instead of
    outputting a line containing an encoding error; hence grep can
    now report matching text before a later binary match.
    Formerly, grep reported FOO to be binary when it found an
    encoding error in FOO before generating output for FOO, which
    meant it never reported both matching text and matching binary
    data; this was less useful for searching text containing
    encoding errors in non-matching lines. [bug introduced in
    grep-2.21]
  * grep -c no longer stops counting when finding binary data.
    [bug introduced in grep-2.21]
  * grep no longer outputs encoding errors in unibyte locales. For
    example, if the byte '\x81' is not a valid character in a
    unibyte locale, grep treats the byte as binary data. [bug
    introduced in grep-2.21]
  * grep -oP is no longer susceptible to an infinite loop when
    processing invalid UTF8 just before a match. [bug introduced in
    grep-2.22]
  * --exclude and related options are now matched against trailing
    parts of command-line arguments, not against the entire
    arguments. This partly reverts the --exclude-related change
    in 2.22. [bug introduced in grep-2.22]
  * --line-buffer is no longer ineffective when combined with -l.
    [bug introduced in grep-2.5]
  * -xw is now equivalent to -x more consistently, with -P and
    with backrefs.  [bug only partially fixed in grep-2.19]
- Update info handling scriplets
  * move from postun to preun
  * add dependeny for preun
- Refresh partially upstreamed patch
  * testsuite.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1457697600">- Update to 2.24
  * grep -z would match strings it should not.  To trigger the bug,
    you'd have to use a regular expression including an anchor
    (^ or $) and a feature like a range or a backreference, causing
    grep to forego its DFA matcher and resort to using re_search.
    With a multibyte locale, that matcher could mistakenly match a
    string containing a newline. For example, this command:
    printf 'a\nb\0' | LC_ALL=en_US.utf-8 grep -z '^[a-b]*b'
    would mistakenly match and print all four input bytes.  After
    the fix, there is no match, as expected.
    [bug introduced in grep-2.7]
  * grep -Pz now diagnoses attempts to use patterns containing ^
    and $, instead of mishandling these patterns.  This problem
    seems to be inherent to the PCRE API; removing this limitation
    is on PCRE's maint/README wish list.  Patterns can continue to
    match literal ^ and $ by escaping them with \ (now needed even
    inside [...]). [bug introduced in grep-2.5]</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- grep 2.25:
  * In the C or POSIX locale, grep now treats all bytes as valid
    characters even if the C runtime library says otherwise.
    ( Fixes yast2-users and other build failures - boo#966780 )
  * grep -oz now uses null bytes, not newlines, to terminate output
    lines.
  * grep now outputs details more consistently when reporting a
    write error.</changelog>
  <changelog author="astieger@suse.com" date="1477656000">- grep 2.26:
  * no longer omit output merely because it follows an output line
    suppressed due to encoding errors
  * In the Shift_JIS locale, no longer mistakenly match in the
    middle of a multibyte character
  * grep can be much faster now when standard output is /dev/null.
  * grep -F is now typically much faster when many patterns are
    given, as it now uses the Aho-Corasick algorithm instead of
    the Commentz-Walter algorithm in that case.
  * grep -iF is typically much faster in a multibyte locale, if
    the pattern and its case counterparts contain only single byte
    characters.
  * grep with complicated expressions (e.g., back-references) and
    without -i now uses the regex fastmap for better performance.
  * In multibyte locales, grep now handles leading "." in patterns
    more efficiently.
  * grep now prints a "FILENAME:LINENO: " prefix when diagnosing
    an invalid regular expression that was read from an
  '-f'-specified file.</changelog>
  <changelog author="schwab@suse.de" date="1481112000">- Update to grep 2.27
  * grep no longer reports a false match in a multibyte, non-UTF8 locale
    like zh_CN.gb18030, with a regular expression like ".*7" that just
    happens to match the 4-byte representation of gb18030's \uC9, the
    final byte of which is the digit "7".
  * grep by default now reads all of standard input if it is a pipe,
    even if this cannot affect grep's output or exit status.
  * grep no longer mishandles ranges in nontrivial unibyte locales.
  * grep -P no longer attempts multiline matches.
  * grep -m0 -L PAT FILE now outputs "FILE".
  * To output ':' and tab-align the following character C, grep -T no
    longer outputs tab-backspace-':'-C, an approach that has problems if
    run inside an Emacs shell window.
  * grep -T now uses worst-case widths of line numbers and byte offsets
    instead of guessing widths that might not work with larger files.
  * grep no longer reads the input in a few more cases when it is easy to
    see that matching cannot succeed, e.g., 'grep -f /dev/null'.</changelog>
  <changelog author="schwab@suse.de" date="1481544000">- testsuite.patch: remove
- proc-lseek-glitch.patch: work around proc lseek glitch</changelog>
  <changelog author="mpluskal@suse.com" date="1486555200">- Update to version 2.28:
  * Improve performance for -E or -G pattern lists that are easily
    converted to -F format.
  * Fix performance regression with multiple patterns.
  * When standard output is /dev/null, grep no longer fails when
    standard input is a file in the Linux /proc file system, or when
    standard input is a pipe and standard output is in append mode.
  * When grep -Fo finds matches of differing length, it could
    mistakenly print a shorter one.  Now it prints a longest one.
- Drop upstreamed proc-lseek-glitch.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1486814400">- Update to version 3.0:
  * grep without -F no longer goes awry when given two or more
    patterns that contain no special characters other than '\' and
    also contain a subpattern like '\.' that escapes a character to
    make it ordinary.
  * grep no longer fails to build on PCRE versions before 8.20.
- Cleanup spec file:
  * Drop support for old distributions
  * Create lang subpackage
  * Use fdupes to replace duplicate files with symlinks</changelog>
  <changelog author="mpluskal@suse.com" date="1496318400">- Use https url's
- Drop no longer needed explicit pie
- Enable profiled build</changelog>
  <changelog author="schwab@suse.de" date="1499083200">- Update to grep 3.1
  * grep '[0-9]' is now just as fast as grep '[[:digit:]]' when run
    in a multi-byte locale
  * Context no longer excludes selected lines omitted because of -m</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1576756800">- Update testsuite expectations, no functional changes (bsc#1155271)</changelog>
  <changelog author="bwiedemann@suse.com" date="1647518400">- Make profiling deterministic (bsc#1040589, SLE-24115)</changelog>
</package>
<package pkgid="5a07745966dc094c149cf368f864157049dc32e4cfb49f3b4fcbb36b51b61527" name="grep" arch="s390x">
  <version epoch="0" ver="3.1" rel="150000.4.6.1"/>
  <changelog author="meissner@suse.com" date="1419940800">- build with PIE enabled</changelog>
  <changelog author="schwab@suse.de" date="1421064000">- Fix last change</changelog>
  <changelog author="schwab@suse.de" date="1422273600">- grep-F-heap-overrun.patch: fix heap overrun with grep -F (CVE-2015-1345,
  bsc#914695)</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib.bugs</changelog>
  <changelog author="astieger@suse.com" date="1446465600">- GNU grep 2.22:
  * Improve performance for patterns containing very long strings
  * Output and pattern matching bug fixes
- drop add gnulib-perl522.patch, changed upstream
- drop grep-F-heap-overrun.patch, included upstream</changelog>
  <changelog author="schwab@suse.de" date="1446552000">- testsuite.patch: disable unreliable test mb-non-UTF8-performance</changelog>
  <changelog author="schwab@suse.de" date="1448539200">- testsuite.patch: also disable long-pattern-perf test</changelog>
  <changelog author="mpluskal@suse.com" date="1454673600">- Update to 2.23
  * Binary files are now less likely to generate diagnostics and
    more likely to yield text matches.  grep now reports "Binary
    file FOO matches" and suppresses further output instead of
    outputting a line containing an encoding error; hence grep can
    now report matching text before a later binary match.
    Formerly, grep reported FOO to be binary when it found an
    encoding error in FOO before generating output for FOO, which
    meant it never reported both matching text and matching binary
    data; this was less useful for searching text containing
    encoding errors in non-matching lines. [bug introduced in
    grep-2.21]
  * grep -c no longer stops counting when finding binary data.
    [bug introduced in grep-2.21]
  * grep no longer outputs encoding errors in unibyte locales. For
    example, if the byte '\x81' is not a valid character in a
    unibyte locale, grep treats the byte as binary data. [bug
    introduced in grep-2.21]
  * grep -oP is no longer susceptible to an infinite loop when
    processing invalid UTF8 just before a match. [bug introduced in
    grep-2.22]
  * --exclude and related options are now matched against trailing
    parts of command-line arguments, not against the entire
    arguments. This partly reverts the --exclude-related change
    in 2.22. [bug introduced in grep-2.22]
  * --line-buffer is no longer ineffective when combined with -l.
    [bug introduced in grep-2.5]
  * -xw is now equivalent to -x more consistently, with -P and
    with backrefs.  [bug only partially fixed in grep-2.19]
- Update info handling scriplets
  * move from postun to preun
  * add dependeny for preun
- Refresh partially upstreamed patch
  * testsuite.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1457697600">- Update to 2.24
  * grep -z would match strings it should not.  To trigger the bug,
    you'd have to use a regular expression including an anchor
    (^ or $) and a feature like a range or a backreference, causing
    grep to forego its DFA matcher and resort to using re_search.
    With a multibyte locale, that matcher could mistakenly match a
    string containing a newline. For example, this command:
    printf 'a\nb\0' | LC_ALL=en_US.utf-8 grep -z '^[a-b]*b'
    would mistakenly match and print all four input bytes.  After
    the fix, there is no match, as expected.
    [bug introduced in grep-2.7]
  * grep -Pz now diagnoses attempts to use patterns containing ^
    and $, instead of mishandling these patterns.  This problem
    seems to be inherent to the PCRE API; removing this limitation
    is on PCRE's maint/README wish list.  Patterns can continue to
    match literal ^ and $ by escaping them with \ (now needed even
    inside [...]). [bug introduced in grep-2.5]</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- grep 2.25:
  * In the C or POSIX locale, grep now treats all bytes as valid
    characters even if the C runtime library says otherwise.
    ( Fixes yast2-users and other build failures - boo#966780 )
  * grep -oz now uses null bytes, not newlines, to terminate output
    lines.
  * grep now outputs details more consistently when reporting a
    write error.</changelog>
  <changelog author="astieger@suse.com" date="1477656000">- grep 2.26:
  * no longer omit output merely because it follows an output line
    suppressed due to encoding errors
  * In the Shift_JIS locale, no longer mistakenly match in the
    middle of a multibyte character
  * grep can be much faster now when standard output is /dev/null.
  * grep -F is now typically much faster when many patterns are
    given, as it now uses the Aho-Corasick algorithm instead of
    the Commentz-Walter algorithm in that case.
  * grep -iF is typically much faster in a multibyte locale, if
    the pattern and its case counterparts contain only single byte
    characters.
  * grep with complicated expressions (e.g., back-references) and
    without -i now uses the regex fastmap for better performance.
  * In multibyte locales, grep now handles leading "." in patterns
    more efficiently.
  * grep now prints a "FILENAME:LINENO: " prefix when diagnosing
    an invalid regular expression that was read from an
  '-f'-specified file.</changelog>
  <changelog author="schwab@suse.de" date="1481112000">- Update to grep 2.27
  * grep no longer reports a false match in a multibyte, non-UTF8 locale
    like zh_CN.gb18030, with a regular expression like ".*7" that just
    happens to match the 4-byte representation of gb18030's \uC9, the
    final byte of which is the digit "7".
  * grep by default now reads all of standard input if it is a pipe,
    even if this cannot affect grep's output or exit status.
  * grep no longer mishandles ranges in nontrivial unibyte locales.
  * grep -P no longer attempts multiline matches.
  * grep -m0 -L PAT FILE now outputs "FILE".
  * To output ':' and tab-align the following character C, grep -T no
    longer outputs tab-backspace-':'-C, an approach that has problems if
    run inside an Emacs shell window.
  * grep -T now uses worst-case widths of line numbers and byte offsets
    instead of guessing widths that might not work with larger files.
  * grep no longer reads the input in a few more cases when it is easy to
    see that matching cannot succeed, e.g., 'grep -f /dev/null'.</changelog>
  <changelog author="schwab@suse.de" date="1481544000">- testsuite.patch: remove
- proc-lseek-glitch.patch: work around proc lseek glitch</changelog>
  <changelog author="mpluskal@suse.com" date="1486555200">- Update to version 2.28:
  * Improve performance for -E or -G pattern lists that are easily
    converted to -F format.
  * Fix performance regression with multiple patterns.
  * When standard output is /dev/null, grep no longer fails when
    standard input is a file in the Linux /proc file system, or when
    standard input is a pipe and standard output is in append mode.
  * When grep -Fo finds matches of differing length, it could
    mistakenly print a shorter one.  Now it prints a longest one.
- Drop upstreamed proc-lseek-glitch.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1486814400">- Update to version 3.0:
  * grep without -F no longer goes awry when given two or more
    patterns that contain no special characters other than '\' and
    also contain a subpattern like '\.' that escapes a character to
    make it ordinary.
  * grep no longer fails to build on PCRE versions before 8.20.
- Cleanup spec file:
  * Drop support for old distributions
  * Create lang subpackage
  * Use fdupes to replace duplicate files with symlinks</changelog>
  <changelog author="mpluskal@suse.com" date="1496318400">- Use https url's
- Drop no longer needed explicit pie
- Enable profiled build</changelog>
  <changelog author="schwab@suse.de" date="1499083200">- Update to grep 3.1
  * grep '[0-9]' is now just as fast as grep '[[:digit:]]' when run
    in a multi-byte locale
  * Context no longer excludes selected lines omitted because of -m</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1576756800">- Update testsuite expectations, no functional changes (bsc#1155271)</changelog>
  <changelog author="bwiedemann@suse.com" date="1647518400">- Make profiling deterministic (bsc#1040589, SLE-24115)</changelog>
</package>
<package pkgid="c8c3af9942d63a172e5a4aaac3d4b7d6269de3eb14c15781031f071a9e298992" name="grep" arch="src">
  <version epoch="0" ver="3.1" rel="150000.4.6.1"/>
  <changelog author="meissner@suse.com" date="1419940800">- build with PIE enabled</changelog>
  <changelog author="schwab@suse.de" date="1421064000">- Fix last change</changelog>
  <changelog author="schwab@suse.de" date="1422273600">- grep-F-heap-overrun.patch: fix heap overrun with grep -F (CVE-2015-1345,
  bsc#914695)</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib.bugs</changelog>
  <changelog author="astieger@suse.com" date="1446465600">- GNU grep 2.22:
  * Improve performance for patterns containing very long strings
  * Output and pattern matching bug fixes
- drop add gnulib-perl522.patch, changed upstream
- drop grep-F-heap-overrun.patch, included upstream</changelog>
  <changelog author="schwab@suse.de" date="1446552000">- testsuite.patch: disable unreliable test mb-non-UTF8-performance</changelog>
  <changelog author="schwab@suse.de" date="1448539200">- testsuite.patch: also disable long-pattern-perf test</changelog>
  <changelog author="mpluskal@suse.com" date="1454673600">- Update to 2.23
  * Binary files are now less likely to generate diagnostics and
    more likely to yield text matches.  grep now reports "Binary
    file FOO matches" and suppresses further output instead of
    outputting a line containing an encoding error; hence grep can
    now report matching text before a later binary match.
    Formerly, grep reported FOO to be binary when it found an
    encoding error in FOO before generating output for FOO, which
    meant it never reported both matching text and matching binary
    data; this was less useful for searching text containing
    encoding errors in non-matching lines. [bug introduced in
    grep-2.21]
  * grep -c no longer stops counting when finding binary data.
    [bug introduced in grep-2.21]
  * grep no longer outputs encoding errors in unibyte locales. For
    example, if the byte '\x81' is not a valid character in a
    unibyte locale, grep treats the byte as binary data. [bug
    introduced in grep-2.21]
  * grep -oP is no longer susceptible to an infinite loop when
    processing invalid UTF8 just before a match. [bug introduced in
    grep-2.22]
  * --exclude and related options are now matched against trailing
    parts of command-line arguments, not against the entire
    arguments. This partly reverts the --exclude-related change
    in 2.22. [bug introduced in grep-2.22]
  * --line-buffer is no longer ineffective when combined with -l.
    [bug introduced in grep-2.5]
  * -xw is now equivalent to -x more consistently, with -P and
    with backrefs.  [bug only partially fixed in grep-2.19]
- Update info handling scriplets
  * move from postun to preun
  * add dependeny for preun
- Refresh partially upstreamed patch
  * testsuite.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1457697600">- Update to 2.24
  * grep -z would match strings it should not.  To trigger the bug,
    you'd have to use a regular expression including an anchor
    (^ or $) and a feature like a range or a backreference, causing
    grep to forego its DFA matcher and resort to using re_search.
    With a multibyte locale, that matcher could mistakenly match a
    string containing a newline. For example, this command:
    printf 'a\nb\0' | LC_ALL=en_US.utf-8 grep -z '^[a-b]*b'
    would mistakenly match and print all four input bytes.  After
    the fix, there is no match, as expected.
    [bug introduced in grep-2.7]
  * grep -Pz now diagnoses attempts to use patterns containing ^
    and $, instead of mishandling these patterns.  This problem
    seems to be inherent to the PCRE API; removing this limitation
    is on PCRE's maint/README wish list.  Patterns can continue to
    match literal ^ and $ by escaping them with \ (now needed even
    inside [...]). [bug introduced in grep-2.5]</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- grep 2.25:
  * In the C or POSIX locale, grep now treats all bytes as valid
    characters even if the C runtime library says otherwise.
    ( Fixes yast2-users and other build failures - boo#966780 )
  * grep -oz now uses null bytes, not newlines, to terminate output
    lines.
  * grep now outputs details more consistently when reporting a
    write error.</changelog>
  <changelog author="astieger@suse.com" date="1477656000">- grep 2.26:
  * no longer omit output merely because it follows an output line
    suppressed due to encoding errors
  * In the Shift_JIS locale, no longer mistakenly match in the
    middle of a multibyte character
  * grep can be much faster now when standard output is /dev/null.
  * grep -F is now typically much faster when many patterns are
    given, as it now uses the Aho-Corasick algorithm instead of
    the Commentz-Walter algorithm in that case.
  * grep -iF is typically much faster in a multibyte locale, if
    the pattern and its case counterparts contain only single byte
    characters.
  * grep with complicated expressions (e.g., back-references) and
    without -i now uses the regex fastmap for better performance.
  * In multibyte locales, grep now handles leading "." in patterns
    more efficiently.
  * grep now prints a "FILENAME:LINENO: " prefix when diagnosing
    an invalid regular expression that was read from an
  '-f'-specified file.</changelog>
  <changelog author="schwab@suse.de" date="1481112000">- Update to grep 2.27
  * grep no longer reports a false match in a multibyte, non-UTF8 locale
    like zh_CN.gb18030, with a regular expression like ".*7" that just
    happens to match the 4-byte representation of gb18030's \uC9, the
    final byte of which is the digit "7".
  * grep by default now reads all of standard input if it is a pipe,
    even if this cannot affect grep's output or exit status.
  * grep no longer mishandles ranges in nontrivial unibyte locales.
  * grep -P no longer attempts multiline matches.
  * grep -m0 -L PAT FILE now outputs "FILE".
  * To output ':' and tab-align the following character C, grep -T no
    longer outputs tab-backspace-':'-C, an approach that has problems if
    run inside an Emacs shell window.
  * grep -T now uses worst-case widths of line numbers and byte offsets
    instead of guessing widths that might not work with larger files.
  * grep no longer reads the input in a few more cases when it is easy to
    see that matching cannot succeed, e.g., 'grep -f /dev/null'.</changelog>
  <changelog author="schwab@suse.de" date="1481544000">- testsuite.patch: remove
- proc-lseek-glitch.patch: work around proc lseek glitch</changelog>
  <changelog author="mpluskal@suse.com" date="1486555200">- Update to version 2.28:
  * Improve performance for -E or -G pattern lists that are easily
    converted to -F format.
  * Fix performance regression with multiple patterns.
  * When standard output is /dev/null, grep no longer fails when
    standard input is a file in the Linux /proc file system, or when
    standard input is a pipe and standard output is in append mode.
  * When grep -Fo finds matches of differing length, it could
    mistakenly print a shorter one.  Now it prints a longest one.
- Drop upstreamed proc-lseek-glitch.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1486814400">- Update to version 3.0:
  * grep without -F no longer goes awry when given two or more
    patterns that contain no special characters other than '\' and
    also contain a subpattern like '\.' that escapes a character to
    make it ordinary.
  * grep no longer fails to build on PCRE versions before 8.20.
- Cleanup spec file:
  * Drop support for old distributions
  * Create lang subpackage
  * Use fdupes to replace duplicate files with symlinks</changelog>
  <changelog author="mpluskal@suse.com" date="1496318400">- Use https url's
- Drop no longer needed explicit pie
- Enable profiled build</changelog>
  <changelog author="schwab@suse.de" date="1499083200">- Update to grep 3.1
  * grep '[0-9]' is now just as fast as grep '[[:digit:]]' when run
    in a multi-byte locale
  * Context no longer excludes selected lines omitted because of -m</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1576756800">- Update testsuite expectations, no functional changes (bsc#1155271)</changelog>
  <changelog author="bwiedemann@suse.com" date="1647518400">- Make profiling deterministic (bsc#1040589, SLE-24115)</changelog>
</package>
<package pkgid="ad7046ef117444aa86fb8d6d2a06f4a2b573a1148e25545033c036dc010430cf" name="grep" arch="x86_64">
  <version epoch="0" ver="3.1" rel="150000.4.6.1"/>
  <changelog author="meissner@suse.com" date="1419940800">- build with PIE enabled</changelog>
  <changelog author="schwab@suse.de" date="1421064000">- Fix last change</changelog>
  <changelog author="schwab@suse.de" date="1422273600">- grep-F-heap-overrun.patch: fix heap overrun with grep -F (CVE-2015-1345,
  bsc#914695)</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib.bugs</changelog>
  <changelog author="astieger@suse.com" date="1446465600">- GNU grep 2.22:
  * Improve performance for patterns containing very long strings
  * Output and pattern matching bug fixes
- drop add gnulib-perl522.patch, changed upstream
- drop grep-F-heap-overrun.patch, included upstream</changelog>
  <changelog author="schwab@suse.de" date="1446552000">- testsuite.patch: disable unreliable test mb-non-UTF8-performance</changelog>
  <changelog author="schwab@suse.de" date="1448539200">- testsuite.patch: also disable long-pattern-perf test</changelog>
  <changelog author="mpluskal@suse.com" date="1454673600">- Update to 2.23
  * Binary files are now less likely to generate diagnostics and
    more likely to yield text matches.  grep now reports "Binary
    file FOO matches" and suppresses further output instead of
    outputting a line containing an encoding error; hence grep can
    now report matching text before a later binary match.
    Formerly, grep reported FOO to be binary when it found an
    encoding error in FOO before generating output for FOO, which
    meant it never reported both matching text and matching binary
    data; this was less useful for searching text containing
    encoding errors in non-matching lines. [bug introduced in
    grep-2.21]
  * grep -c no longer stops counting when finding binary data.
    [bug introduced in grep-2.21]
  * grep no longer outputs encoding errors in unibyte locales. For
    example, if the byte '\x81' is not a valid character in a
    unibyte locale, grep treats the byte as binary data. [bug
    introduced in grep-2.21]
  * grep -oP is no longer susceptible to an infinite loop when
    processing invalid UTF8 just before a match. [bug introduced in
    grep-2.22]
  * --exclude and related options are now matched against trailing
    parts of command-line arguments, not against the entire
    arguments. This partly reverts the --exclude-related change
    in 2.22. [bug introduced in grep-2.22]
  * --line-buffer is no longer ineffective when combined with -l.
    [bug introduced in grep-2.5]
  * -xw is now equivalent to -x more consistently, with -P and
    with backrefs.  [bug only partially fixed in grep-2.19]
- Update info handling scriplets
  * move from postun to preun
  * add dependeny for preun
- Refresh partially upstreamed patch
  * testsuite.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1457697600">- Update to 2.24
  * grep -z would match strings it should not.  To trigger the bug,
    you'd have to use a regular expression including an anchor
    (^ or $) and a feature like a range or a backreference, causing
    grep to forego its DFA matcher and resort to using re_search.
    With a multibyte locale, that matcher could mistakenly match a
    string containing a newline. For example, this command:
    printf 'a\nb\0' | LC_ALL=en_US.utf-8 grep -z '^[a-b]*b'
    would mistakenly match and print all four input bytes.  After
    the fix, there is no match, as expected.
    [bug introduced in grep-2.7]
  * grep -Pz now diagnoses attempts to use patterns containing ^
    and $, instead of mishandling these patterns.  This problem
    seems to be inherent to the PCRE API; removing this limitation
    is on PCRE's maint/README wish list.  Patterns can continue to
    match literal ^ and $ by escaping them with \ (now needed even
    inside [...]). [bug introduced in grep-2.5]</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- grep 2.25:
  * In the C or POSIX locale, grep now treats all bytes as valid
    characters even if the C runtime library says otherwise.
    ( Fixes yast2-users and other build failures - boo#966780 )
  * grep -oz now uses null bytes, not newlines, to terminate output
    lines.
  * grep now outputs details more consistently when reporting a
    write error.</changelog>
  <changelog author="astieger@suse.com" date="1477656000">- grep 2.26:
  * no longer omit output merely because it follows an output line
    suppressed due to encoding errors
  * In the Shift_JIS locale, no longer mistakenly match in the
    middle of a multibyte character
  * grep can be much faster now when standard output is /dev/null.
  * grep -F is now typically much faster when many patterns are
    given, as it now uses the Aho-Corasick algorithm instead of
    the Commentz-Walter algorithm in that case.
  * grep -iF is typically much faster in a multibyte locale, if
    the pattern and its case counterparts contain only single byte
    characters.
  * grep with complicated expressions (e.g., back-references) and
    without -i now uses the regex fastmap for better performance.
  * In multibyte locales, grep now handles leading "." in patterns
    more efficiently.
  * grep now prints a "FILENAME:LINENO: " prefix when diagnosing
    an invalid regular expression that was read from an
  '-f'-specified file.</changelog>
  <changelog author="schwab@suse.de" date="1481112000">- Update to grep 2.27
  * grep no longer reports a false match in a multibyte, non-UTF8 locale
    like zh_CN.gb18030, with a regular expression like ".*7" that just
    happens to match the 4-byte representation of gb18030's \uC9, the
    final byte of which is the digit "7".
  * grep by default now reads all of standard input if it is a pipe,
    even if this cannot affect grep's output or exit status.
  * grep no longer mishandles ranges in nontrivial unibyte locales.
  * grep -P no longer attempts multiline matches.
  * grep -m0 -L PAT FILE now outputs "FILE".
  * To output ':' and tab-align the following character C, grep -T no
    longer outputs tab-backspace-':'-C, an approach that has problems if
    run inside an Emacs shell window.
  * grep -T now uses worst-case widths of line numbers and byte offsets
    instead of guessing widths that might not work with larger files.
  * grep no longer reads the input in a few more cases when it is easy to
    see that matching cannot succeed, e.g., 'grep -f /dev/null'.</changelog>
  <changelog author="schwab@suse.de" date="1481544000">- testsuite.patch: remove
- proc-lseek-glitch.patch: work around proc lseek glitch</changelog>
  <changelog author="mpluskal@suse.com" date="1486555200">- Update to version 2.28:
  * Improve performance for -E or -G pattern lists that are easily
    converted to -F format.
  * Fix performance regression with multiple patterns.
  * When standard output is /dev/null, grep no longer fails when
    standard input is a file in the Linux /proc file system, or when
    standard input is a pipe and standard output is in append mode.
  * When grep -Fo finds matches of differing length, it could
    mistakenly print a shorter one.  Now it prints a longest one.
- Drop upstreamed proc-lseek-glitch.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1486814400">- Update to version 3.0:
  * grep without -F no longer goes awry when given two or more
    patterns that contain no special characters other than '\' and
    also contain a subpattern like '\.' that escapes a character to
    make it ordinary.
  * grep no longer fails to build on PCRE versions before 8.20.
- Cleanup spec file:
  * Drop support for old distributions
  * Create lang subpackage
  * Use fdupes to replace duplicate files with symlinks</changelog>
  <changelog author="mpluskal@suse.com" date="1496318400">- Use https url's
- Drop no longer needed explicit pie
- Enable profiled build</changelog>
  <changelog author="schwab@suse.de" date="1499083200">- Update to grep 3.1
  * grep '[0-9]' is now just as fast as grep '[[:digit:]]' when run
    in a multi-byte locale
  * Context no longer excludes selected lines omitted because of -m</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1576756800">- Update testsuite expectations, no functional changes (bsc#1155271)</changelog>
  <changelog author="bwiedemann@suse.com" date="1647518400">- Make profiling deterministic (bsc#1040589, SLE-24115)</changelog>
</package>
<package pkgid="47f0a968feed74babb5b514f3241fab987276fef9bc40f1bdd7cd0d9e0caf6ab" name="grep-lang" arch="noarch">
  <version epoch="0" ver="3.1" rel="150000.4.6.1"/>
  <changelog author="meissner@suse.com" date="1419940800">- build with PIE enabled</changelog>
  <changelog author="schwab@suse.de" date="1421064000">- Fix last change</changelog>
  <changelog author="schwab@suse.de" date="1422273600">- grep-F-heap-overrun.patch: fix heap overrun with grep -F (CVE-2015-1345,
  bsc#914695)</changelog>
  <changelog author="coolo@suse.com" date="1436184000">- add gnulib-perl522.patch from gnulib.bugs</changelog>
  <changelog author="astieger@suse.com" date="1446465600">- GNU grep 2.22:
  * Improve performance for patterns containing very long strings
  * Output and pattern matching bug fixes
- drop add gnulib-perl522.patch, changed upstream
- drop grep-F-heap-overrun.patch, included upstream</changelog>
  <changelog author="schwab@suse.de" date="1446552000">- testsuite.patch: disable unreliable test mb-non-UTF8-performance</changelog>
  <changelog author="schwab@suse.de" date="1448539200">- testsuite.patch: also disable long-pattern-perf test</changelog>
  <changelog author="mpluskal@suse.com" date="1454673600">- Update to 2.23
  * Binary files are now less likely to generate diagnostics and
    more likely to yield text matches.  grep now reports "Binary
    file FOO matches" and suppresses further output instead of
    outputting a line containing an encoding error; hence grep can
    now report matching text before a later binary match.
    Formerly, grep reported FOO to be binary when it found an
    encoding error in FOO before generating output for FOO, which
    meant it never reported both matching text and matching binary
    data; this was less useful for searching text containing
    encoding errors in non-matching lines. [bug introduced in
    grep-2.21]
  * grep -c no longer stops counting when finding binary data.
    [bug introduced in grep-2.21]
  * grep no longer outputs encoding errors in unibyte locales. For
    example, if the byte '\x81' is not a valid character in a
    unibyte locale, grep treats the byte as binary data. [bug
    introduced in grep-2.21]
  * grep -oP is no longer susceptible to an infinite loop when
    processing invalid UTF8 just before a match. [bug introduced in
    grep-2.22]
  * --exclude and related options are now matched against trailing
    parts of command-line arguments, not against the entire
    arguments. This partly reverts the --exclude-related change
    in 2.22. [bug introduced in grep-2.22]
  * --line-buffer is no longer ineffective when combined with -l.
    [bug introduced in grep-2.5]
  * -xw is now equivalent to -x more consistently, with -P and
    with backrefs.  [bug only partially fixed in grep-2.19]
- Update info handling scriplets
  * move from postun to preun
  * add dependeny for preun
- Refresh partially upstreamed patch
  * testsuite.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1457697600">- Update to 2.24
  * grep -z would match strings it should not.  To trigger the bug,
    you'd have to use a regular expression including an anchor
    (^ or $) and a feature like a range or a backreference, causing
    grep to forego its DFA matcher and resort to using re_search.
    With a multibyte locale, that matcher could mistakenly match a
    string containing a newline. For example, this command:
    printf 'a\nb\0' | LC_ALL=en_US.utf-8 grep -z '^[a-b]*b'
    would mistakenly match and print all four input bytes.  After
    the fix, there is no match, as expected.
    [bug introduced in grep-2.7]
  * grep -Pz now diagnoses attempts to use patterns containing ^
    and $, instead of mishandling these patterns.  This problem
    seems to be inherent to the PCRE API; removing this limitation
    is on PCRE's maint/README wish list.  Patterns can continue to
    match literal ^ and $ by escaping them with \ (now needed even
    inside [...]). [bug introduced in grep-2.5]</changelog>
  <changelog author="astieger@suse.com" date="1461326400">- grep 2.25:
  * In the C or POSIX locale, grep now treats all bytes as valid
    characters even if the C runtime library says otherwise.
    ( Fixes yast2-users and other build failures - boo#966780 )
  * grep -oz now uses null bytes, not newlines, to terminate output
    lines.
  * grep now outputs details more consistently when reporting a
    write error.</changelog>
  <changelog author="astieger@suse.com" date="1477656000">- grep 2.26:
  * no longer omit output merely because it follows an output line
    suppressed due to encoding errors
  * In the Shift_JIS locale, no longer mistakenly match in the
    middle of a multibyte character
  * grep can be much faster now when standard output is /dev/null.
  * grep -F is now typically much faster when many patterns are
    given, as it now uses the Aho-Corasick algorithm instead of
    the Commentz-Walter algorithm in that case.
  * grep -iF is typically much faster in a multibyte locale, if
    the pattern and its case counterparts contain only single byte
    characters.
  * grep with complicated expressions (e.g., back-references) and
    without -i now uses the regex fastmap for better performance.
  * In multibyte locales, grep now handles leading "." in patterns
    more efficiently.
  * grep now prints a "FILENAME:LINENO: " prefix when diagnosing
    an invalid regular expression that was read from an
  '-f'-specified file.</changelog>
  <changelog author="schwab@suse.de" date="1481112000">- Update to grep 2.27
  * grep no longer reports a false match in a multibyte, non-UTF8 locale
    like zh_CN.gb18030, with a regular expression like ".*7" that just
    happens to match the 4-byte representation of gb18030's \uC9, the
    final byte of which is the digit "7".
  * grep by default now reads all of standard input if it is a pipe,
    even if this cannot affect grep's output or exit status.
  * grep no longer mishandles ranges in nontrivial unibyte locales.
  * grep -P no longer attempts multiline matches.
  * grep -m0 -L PAT FILE now outputs "FILE".
  * To output ':' and tab-align the following character C, grep -T no
    longer outputs tab-backspace-':'-C, an approach that has problems if
    run inside an Emacs shell window.
  * grep -T now uses worst-case widths of line numbers and byte offsets
    instead of guessing widths that might not work with larger files.
  * grep no longer reads the input in a few more cases when it is easy to
    see that matching cannot succeed, e.g., 'grep -f /dev/null'.</changelog>
  <changelog author="schwab@suse.de" date="1481544000">- testsuite.patch: remove
- proc-lseek-glitch.patch: work around proc lseek glitch</changelog>
  <changelog author="mpluskal@suse.com" date="1486555200">- Update to version 2.28:
  * Improve performance for -E or -G pattern lists that are easily
    converted to -F format.
  * Fix performance regression with multiple patterns.
  * When standard output is /dev/null, grep no longer fails when
    standard input is a file in the Linux /proc file system, or when
    standard input is a pipe and standard output is in append mode.
  * When grep -Fo finds matches of differing length, it could
    mistakenly print a shorter one.  Now it prints a longest one.
- Drop upstreamed proc-lseek-glitch.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1486814400">- Update to version 3.0:
  * grep without -F no longer goes awry when given two or more
    patterns that contain no special characters other than '\' and
    also contain a subpattern like '\.' that escapes a character to
    make it ordinary.
  * grep no longer fails to build on PCRE versions before 8.20.
- Cleanup spec file:
  * Drop support for old distributions
  * Create lang subpackage
  * Use fdupes to replace duplicate files with symlinks</changelog>
  <changelog author="mpluskal@suse.com" date="1496318400">- Use https url's
- Drop no longer needed explicit pie
- Enable profiled build</changelog>
  <changelog author="schwab@suse.de" date="1499083200">- Update to grep 3.1
  * grep '[0-9]' is now just as fast as grep '[[:digit:]]' when run
    in a multi-byte locale
  * Context no longer excludes selected lines omitted because of -m</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1576756800">- Update testsuite expectations, no functional changes (bsc#1155271)</changelog>
  <changelog author="bwiedemann@suse.com" date="1647518400">- Make profiling deterministic (bsc#1040589, SLE-24115)</changelog>
</package>
<package pkgid="55483f225b0edc1470b3dcf74e48a764bb0fdf566b95814982ad2c31d3a1727e" name="grpc" arch="src">
  <version epoch="0" ver="1.25.0" rel="150200.3.5.1"/>
  <changelog author="tbechtold@suse.com" date="1526644800">- update to 1.12.0:
  Core:
  * Update protobuf submodule to 3.5.2 (#15114)
  * Make GrpcBuffer{Reader|Writer} Public (#14541)
  * Compile Out Tracers Option (#15108)
  * Fix bug in an address sorting comparison (#15208)
  * Fix: Check retry timer before starting resolving (#15156)
  * Fix c-ares resolution with default authority (#15073)
  * Fix c-ares resolver crash when DNS server unreachable (#15134)
  * Performance: Avoid low severity log message construction (#14945)
  * Peformance: Enable SIO_LOOPBACK_FAST_PATH on Windows (#14905)
  C#:
  * Add RpcException.StatusCode property (#15140)
  * Improvements to C# build instructions (#15178)
  Python:
  * Eliminate grpcio package dependency on protobuf package (#15034).
    Please pay extra attention if you are using gRPC with Protocol Buffers and
    your deployment scripts do not explicitly list the correct dependencies
    and used to rely on the transitive Python package dependency from grpcio to protobuf.
  * A new grpc.Channel.close method is introduced and correct use of gRPC
    Python now requires that channels be closed after use. No existing code
    should observably break when upgrading to 1.12 but code that creates
    channels but does not close them will not be supported in 1.13 and later.
  Core:
  * Fix: Check retry timer before starting resolving (#15156)
  * Fix c-ares resolution with default authority (#15073)
  * Fix c-ares resolver crash when DNS server unreachable (#15134)
  * Add core underpinnings for TLS session ticket support (#14483)
  * Experimental support for configurable retries (use at your own risk) (#10684)
  * Fail calls with wait_for_ready=false on transient resolver failure (#14733)
  * Fix a call stack ref flake (#14681)
  * c-ares DNS resolver sorts resolved addresses per RFC 6724 (#13290)
  * Use socklen_t instead of size_t for address length (fixes use case for some
    big endian systems) (#14464)
  * Initial part of channel tracing implementation (#13883, #14746, #14751)
  * Avoid crashes on environments with hot-plugged CPUs (#14712)
  * When building from source, Makefile now checks for minimum protobuf
    version 3.5.0 instead 3.0.0 (#14821)
  * gRPC Core public header no longer includes inttypes.h (#14676)
  * CMake improvements:
  * Add well-commented examples and continuous test for various ways of
    building gRPC as a dependency (via ExternalProject_Add in #14822,
    via add_subdirectory in #14864)
  * Remove internal tools from binaries installed by cmake install (#14850)
  * Simplify Android build example (#14885)
  * Enable SO_REUSEPORT in IPv6-only environments as well (#14748)
  C#:
  * Improvements in experimental support for Unity - added useful resources
    and improved support for loading grpc_csharp_ext on Unity (#14576, #14605)
  * Further prevent name collisions by using only fully qualified type
    names in C# code generator (#14524)
  * Fix C# connectivity watcher shutdown race (#14776)
  Objective-C:
  * Support for Keep-Alive (#14781)
  * Experimental C++ podspec now supports Apple framework (#14480)
  * Allow discarding generated implementation (leaving only protocol)
    with macro (#14490)
  * Better handling of network error (#14554)
  PHP:
  * Add missing -O2 compilation flag for pecl (#14768)
  * Update the reserved variable list to check in PHP code generator to
    match protobuf 3.5.0 (#13580)
  Python:
  * Progress towards full Beta API elimination (Beta API is and has been
    unsupported and will go away completely):
    Remove _face_interface_test tests for the Beta API (#14702)
  * Remove Python background poller thread (#14448)
    Note there is a small change in behavior. Before, clients would
    detect disconnected channels immediately.
  * Initial gevent compatibility (EXPERIMENTAL) (#14561)
  * Release the GIL when calling grpc_call_start_batch to improve
    performance under multithreaded scenarios. (#14801)
  Ruby:
  * Correct handling of underscores in package names by Protocol Buffers code
    generator for Ruby (#13634)
  * Source code and locally compiled (not cross-compiled) shared libraries
    (grpc_c.so files) are removed from the linux binary packages. This includes
    the packages targeting the x86_64-linux and x86-linux platforms (#14634)
  * Bug fix for a use-after-free related to access to a garbage collected
    object (#14809)
  * Get rid of the -Wno-format argument to compilation of the ruby extension
  * Documentation improvements (#14535)
  * Don?t raise GRPC::Core::CallErrors for failed reads or writes of bidi
    streaming calls (#14922)
  * Fix a race condition in an interrupt handler that could cause an
    assertion failure (#14953)</changelog>
  <changelog author="jengelh@inai.de" date="1526644801">- Switch to plain makefiles since they generate more shared libs.
- Remove grpc-build.diff, grpc-versioning.diff.</changelog>
  <changelog author="tbechtold@suse.com" date="1527249600">- build grpc python module for python2 and python3
  * add 0001-Allow-building-the-python-module-with-system-openssl.patch
  * add 0002-Allow-building-the-python-module-with-system-zlib.patch
  * add 0003-Allow-building-the-python-module-with-system-cares.patch</changelog>
  <changelog author="jengelh@inai.de" date="1529755200">- Throw out silly -Werror in release builds.</changelog>
  <changelog author="tbechtold@suse.com" date="1541937600">- update to 1.15.1:
  * Document SSL portability and performance considerations. See
    https://github.com/grpc/grpc/blob/master/doc/ssl-performance.md .
  * Simplify call arena size growth.
  * PF: Check connectivity state before watching.
  * Added system roots feature to load roots from OS trust store.
  * Fix re-resolution in pick first.
  * Allow error strings in final_info to propagate to filters on
    call destruction.
  * Add resolver executor.
  * Data race fix for lockfree_event.
  * Channelz: Expose new Core API.
  * cmake: disable assembly optimizations only when necessary.
  * C++ sync server: Return status RESOURCE_EXHAUSTED if no
    thread quota available.
  * Use correct target name for gflags-config.cmake.
  * Make should generate pkg-config file for gpr as well.
  * Restrict the number of threads in C++ sync server.
  * Allow reset of connection backoff.
- update to 1.14.2:
  * Add TROUBLESHOOTING.md guide
  * Fixed gRPC channels blocking indefinitely and not respecting
    deadlines on network disconnect.
  * Add user guide for keepalive.
  * Fix GRPC_ARG_HTTP2_MIN_RECV_PING_INTERVAL_WITHOUT_DATA_MS doc
    to restrict usage to server.
  * Fixed ordering in adding pending picks to Round Robin LB.
  * Implement local channel/server credentials for UDS connections.
  * Allow extra copy in zero-copy protector integrity-only mode.
  * Update to use the canonical version of LB proto.
  * Prefer using https_proxy over http_proxy.
  * Refactor to put c-ares queries under a combiner.
  * Remove already_closed parameter from fd_orphan.
  * Add channel arg to enable/disable http proxy.
  * Fix shutdown of closed fd when c-ares opens a second fd.
  * Fixed segmentation fault when product name from BIOS is empty.
  * Introduce server-side load reporting service.
  * Reorder steps in ServerBuilder::BuildAndStart().
  * Support Per-Method Codegen Generic on Server Side.
  * Protobuf-related headers are available in a subspec of
    gRPC-C++ podspec.
- update to 1.13.1:
  * gRPC stats will only be collected for debug builds or if
    GRPC_COLLECT_STATS is defined. It will be disabled for opt
    builds.
  * Fix for Issue #13553. Unlimited can now be set as the max
    receive message length.
  * cmake install now also installs should also installs the
    roots.pem file.
- Drop 0001-Allow-building-the-python-module-with-system-openssl.patch
  Applied upstream
- Drop 0002-Allow-building-the-python-module-with-system-zlib.patch
  Applied upstream
- 0003-Allow-building-the-python-module-with-system-cares.patch
  Applied upstream</changelog>
  <changelog author="jengelh@inai.de" date="1541937601">- Update to new upstream release 1.16
  * Keepalive watchdog firing should return status UNAVAILABLE.
  * Set TCP_USER_TIMEOUT socket option for Linux.
  * Turn loading system root certificate as default.
  * Change pick_first to not unref unselected subchannels.
  * cmake: prevent C core from depending on libstdc++.
  * Implement Watch method in health check service.</changelog>
  <changelog author="mrostecki@suse.de" date="1546862400">- Add grpc-source package - some Go programs using gRPC need
  protobuf definitions which are included inside the source code,
  but are not included in the devel package.</changelog>
  <changelog author="jengelh@inai.de" date="1552737600">- Update to new upstream release 1.19.1
  * Use 32-bit nanopb fields.
  * Avoid SRV and TXT lookups for localhost.
  * Set c-ares as the default resolver.</changelog>
  <changelog author="sbrabec@suse.com" date="1555070400">- Fix typo in Groups.</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 1.21.3
  * Add SPIFFE security stack to gRPC.
  * Re-enable ALPN check in gRPC C core SSL stack.</changelog>
  <changelog author="jengelh@inai.de" date="1566129600">- Update to new upstream release 1.23 [boo#1144068]
  * Fixed a bug where POST_RECV_MESSAGE was not being triggered.
  * Renamed root certificate bundle in gRPC-C++ pod.
  * Increased lower bound on DNS re-resolution period to 30 seconds.
  * Fixed a segfault when forking while using gevent.
  * Added channel idleness support
  * Added threadpool support</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Disable LTO because it's broken.</changelog>
  <changelog author="jengelh@inai.de" date="1570017600">- Update to release 1.23.1
  * Unspecific refinements, improvements, and bug fixes.
- Add gettid.patch
- Split libgrpc into libgrpc++ because that has a SO version
  group of its own.
- Bump libgrpc6 to libgrpc7 as there is actually .so.7 files.
  Add suitable Conflicts markers.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1570708800">- Make sure that patches are included in the source package.
- Filter out several rpmlintrc warnings for the source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1572955200">- Add patch which replaces BoringSSL with OpenSSL as the SSL
  library when grpc is used as a Bazel dependency:
  * 0001-bazel-Replace-boringssl-with-openssl.patch</changelog>
  <changelog author="mrostecki@opensuse.org" date="1573473600">- Define BoringSSL as a Bazel dependency in WORKSPACE instead of
  grpc_deps.bzl - using new_local_repository function is now always
  allowed in imported modules.</changelog>
  <changelog author="jengelh@inai.de" date="1576497600">- Update to release 1.25
  * Change RR to consider a subchannel in TF if it has failed
    since it was READY.
  * Do not create streams after a GOAWAY has been received.
  * Prevent HTTP2 parser from queueing a lot of induced frames.
- Drop gettid.patch</changelog>
  <changelog author="mrostecki@opensuse.org" date="1578571200">- Remove patch for Bazel files, which is not needed anymore:
  * 0001-bazel-Replace-boringssl-with-openssl.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1584014400">- Add conditional to build without python2 if needed</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1649160000">- Update in SLE-15 (bsc#1197726)</changelog>
</package>
<package pkgid="071e1b62dfaae1df9a2d6b80b795fcc9f630b285bc8c25ccd60e1e51360f8c99" name="grpc-devel" arch="aarch64">
  <version epoch="0" ver="1.25.0" rel="150200.3.5.1"/>
  <changelog author="tbechtold@suse.com" date="1526644800">- update to 1.12.0:
  Core:
  * Update protobuf submodule to 3.5.2 (#15114)
  * Make GrpcBuffer{Reader|Writer} Public (#14541)
  * Compile Out Tracers Option (#15108)
  * Fix bug in an address sorting comparison (#15208)
  * Fix: Check retry timer before starting resolving (#15156)
  * Fix c-ares resolution with default authority (#15073)
  * Fix c-ares resolver crash when DNS server unreachable (#15134)
  * Performance: Avoid low severity log message construction (#14945)
  * Peformance: Enable SIO_LOOPBACK_FAST_PATH on Windows (#14905)
  C#:
  * Add RpcException.StatusCode property (#15140)
  * Improvements to C# build instructions (#15178)
  Python:
  * Eliminate grpcio package dependency on protobuf package (#15034).
    Please pay extra attention if you are using gRPC with Protocol Buffers and
    your deployment scripts do not explicitly list the correct dependencies
    and used to rely on the transitive Python package dependency from grpcio to protobuf.
  * A new grpc.Channel.close method is introduced and correct use of gRPC
    Python now requires that channels be closed after use. No existing code
    should observably break when upgrading to 1.12 but code that creates
    channels but does not close them will not be supported in 1.13 and later.
  Core:
  * Fix: Check retry timer before starting resolving (#15156)
  * Fix c-ares resolution with default authority (#15073)
  * Fix c-ares resolver crash when DNS server unreachable (#15134)
  * Add core underpinnings for TLS session ticket support (#14483)
  * Experimental support for configurable retries (use at your own risk) (#10684)
  * Fail calls with wait_for_ready=false on transient resolver failure (#14733)
  * Fix a call stack ref flake (#14681)
  * c-ares DNS resolver sorts resolved addresses per RFC 6724 (#13290)
  * Use socklen_t instead of size_t for address length (fixes use case for some
    big endian systems) (#14464)
  * Initial part of channel tracing implementation (#13883, #14746, #14751)
  * Avoid crashes on environments with hot-plugged CPUs (#14712)
  * When building from source, Makefile now checks for minimum protobuf
    version 3.5.0 instead 3.0.0 (#14821)
  * gRPC Core public header no longer includes inttypes.h (#14676)
  * CMake improvements:
  * Add well-commented examples and continuous test for various ways of
    building gRPC as a dependency (via ExternalProject_Add in #14822,
    via add_subdirectory in #14864)
  * Remove internal tools from binaries installed by cmake install (#14850)
  * Simplify Android build example (#14885)
  * Enable SO_REUSEPORT in IPv6-only environments as well (#14748)
  C#:
  * Improvements in experimental support for Unity - added useful resources
    and improved support for loading grpc_csharp_ext on Unity (#14576, #14605)
  * Further prevent name collisions by using only fully qualified type
    names in C# code generator (#14524)
  * Fix C# connectivity watcher shutdown race (#14776)
  Objective-C:
  * Support for Keep-Alive (#14781)
  * Experimental C++ podspec now supports Apple framework (#14480)
  * Allow discarding generated implementation (leaving only protocol)
    with macro (#14490)
  * Better handling of network error (#14554)
  PHP:
  * Add missing -O2 compilation flag for pecl (#14768)
  * Update the reserved variable list to check in PHP code generator to
    match protobuf 3.5.0 (#13580)
  Python:
  * Progress towards full Beta API elimination (Beta API is and has been
    unsupported and will go away completely):
    Remove _face_interface_test tests for the Beta API (#14702)
  * Remove Python background poller thread (#14448)
    Note there is a small change in behavior. Before, clients would
    detect disconnected channels immediately.
  * Initial gevent compatibility (EXPERIMENTAL) (#14561)
  * Release the GIL when calling grpc_call_start_batch to improve
    performance under multithreaded scenarios. (#14801)
  Ruby:
  * Correct handling of underscores in package names by Protocol Buffers code
    generator for Ruby (#13634)
  * Source code and locally compiled (not cross-compiled) shared libraries
    (grpc_c.so files) are removed from the linux binary packages. This includes
    the packages targeting the x86_64-linux and x86-linux platforms (#14634)
  * Bug fix for a use-after-free related to access to a garbage collected
    object (#14809)
  * Get rid of the -Wno-format argument to compilation of the ruby extension
  * Documentation improvements (#14535)
  * Don?t raise GRPC::Core::CallErrors for failed reads or writes of bidi
    streaming calls (#14922)
  * Fix a race condition in an interrupt handler that could cause an
    assertion failure (#14953)</changelog>
  <changelog author="jengelh@inai.de" date="1526644801">- Switch to plain makefiles since they generate more shared libs.
- Remove grpc-build.diff, grpc-versioning.diff.</changelog>
  <changelog author="tbechtold@suse.com" date="1527249600">- build grpc python module for python2 and python3
  * add 0001-Allow-building-the-python-module-with-system-openssl.patch
  * add 0002-Allow-building-the-python-module-with-system-zlib.patch
  * add 0003-Allow-building-the-python-module-with-system-cares.patch</changelog>
  <changelog author="jengelh@inai.de" date="1529755200">- Throw out silly -Werror in release builds.</changelog>
  <changelog author="tbechtold@suse.com" date="1541937600">- update to 1.15.1:
  * Document SSL portability and performance considerations. See
    https://github.com/grpc/grpc/blob/master/doc/ssl-performance.md .
  * Simplify call arena size growth.
  * PF: Check connectivity state before watching.
  * Added system roots feature to load roots from OS trust store.
  * Fix re-resolution in pick first.
  * Allow error strings in final_info to propagate to filters on
    call destruction.
  * Add resolver executor.
  * Data race fix for lockfree_event.
  * Channelz: Expose new Core API.
  * cmake: disable assembly optimizations only when necessary.
  * C++ sync server: Return status RESOURCE_EXHAUSTED if no
    thread quota available.
  * Use correct target name for gflags-config.cmake.
  * Make should generate pkg-config file for gpr as well.
  * Restrict the number of threads in C++ sync server.
  * Allow reset of connection backoff.
- update to 1.14.2:
  * Add TROUBLESHOOTING.md guide
  * Fixed gRPC channels blocking indefinitely and not respecting
    deadlines on network disconnect.
  * Add user guide for keepalive.
  * Fix GRPC_ARG_HTTP2_MIN_RECV_PING_INTERVAL_WITHOUT_DATA_MS doc
    to restrict usage to server.
  * Fixed ordering in adding pending picks to Round Robin LB.
  * Implement local channel/server credentials for UDS connections.
  * Allow extra copy in zero-copy protector integrity-only mode.
  * Update to use the canonical version of LB proto.
  * Prefer using https_proxy over http_proxy.
  * Refactor to put c-ares queries under a combiner.
  * Remove already_closed parameter from fd_orphan.
  * Add channel arg to enable/disable http proxy.
  * Fix shutdown of closed fd when c-ares opens a second fd.
  * Fixed segmentation fault when product name from BIOS is empty.
  * Introduce server-side load reporting service.
  * Reorder steps in ServerBuilder::BuildAndStart().
  * Support Per-Method Codegen Generic on Server Side.
  * Protobuf-related headers are available in a subspec of
    gRPC-C++ podspec.
- update to 1.13.1:
  * gRPC stats will only be collected for debug builds or if
    GRPC_COLLECT_STATS is defined. It will be disabled for opt
    builds.
  * Fix for Issue #13553. Unlimited can now be set as the max
    receive message length.
  * cmake install now also installs should also installs the
    roots.pem file.
- Drop 0001-Allow-building-the-python-module-with-system-openssl.patch
  Applied upstream
- Drop 0002-Allow-building-the-python-module-with-system-zlib.patch
  Applied upstream
- 0003-Allow-building-the-python-module-with-system-cares.patch
  Applied upstream</changelog>
  <changelog author="jengelh@inai.de" date="1541937601">- Update to new upstream release 1.16
  * Keepalive watchdog firing should return status UNAVAILABLE.
  * Set TCP_USER_TIMEOUT socket option for Linux.
  * Turn loading system root certificate as default.
  * Change pick_first to not unref unselected subchannels.
  * cmake: prevent C core from depending on libstdc++.
  * Implement Watch method in health check service.</changelog>
  <changelog author="mrostecki@suse.de" date="1546862400">- Add grpc-source package - some Go programs using gRPC need
  protobuf definitions which are included inside the source code,
  but are not included in the devel package.</changelog>
  <changelog author="jengelh@inai.de" date="1552737600">- Update to new upstream release 1.19.1
  * Use 32-bit nanopb fields.
  * Avoid SRV and TXT lookups for localhost.
  * Set c-ares as the default resolver.</changelog>
  <changelog author="sbrabec@suse.com" date="1555070400">- Fix typo in Groups.</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 1.21.3
  * Add SPIFFE security stack to gRPC.
  * Re-enable ALPN check in gRPC C core SSL stack.</changelog>
  <changelog author="jengelh@inai.de" date="1566129600">- Update to new upstream release 1.23 [boo#1144068]
  * Fixed a bug where POST_RECV_MESSAGE was not being triggered.
  * Renamed root certificate bundle in gRPC-C++ pod.
  * Increased lower bound on DNS re-resolution period to 30 seconds.
  * Fixed a segfault when forking while using gevent.
  * Added channel idleness support
  * Added threadpool support</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Disable LTO because it's broken.</changelog>
  <changelog author="jengelh@inai.de" date="1570017600">- Update to release 1.23.1
  * Unspecific refinements, improvements, and bug fixes.
- Add gettid.patch
- Split libgrpc into libgrpc++ because that has a SO version
  group of its own.
- Bump libgrpc6 to libgrpc7 as there is actually .so.7 files.
  Add suitable Conflicts markers.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1570708800">- Make sure that patches are included in the source package.
- Filter out several rpmlintrc warnings for the source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1572955200">- Add patch which replaces BoringSSL with OpenSSL as the SSL
  library when grpc is used as a Bazel dependency:
  * 0001-bazel-Replace-boringssl-with-openssl.patch</changelog>
  <changelog author="mrostecki@opensuse.org" date="1573473600">- Define BoringSSL as a Bazel dependency in WORKSPACE instead of
  grpc_deps.bzl - using new_local_repository function is now always
  allowed in imported modules.</changelog>
  <changelog author="jengelh@inai.de" date="1576497600">- Update to release 1.25
  * Change RR to consider a subchannel in TF if it has failed
    since it was READY.
  * Do not create streams after a GOAWAY has been received.
  * Prevent HTTP2 parser from queueing a lot of induced frames.
- Drop gettid.patch</changelog>
  <changelog author="mrostecki@opensuse.org" date="1578571200">- Remove patch for Bazel files, which is not needed anymore:
  * 0001-bazel-Replace-boringssl-with-openssl.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1584014400">- Add conditional to build without python2 if needed</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1649160000">- Update in SLE-15 (bsc#1197726)</changelog>
</package>
<package pkgid="3cfeb12f2dcc964765cdd83be8ccd81f33f3d7225016190848e1d01aa774d6ef" name="grpc-devel" arch="ppc64le">
  <version epoch="0" ver="1.25.0" rel="150200.3.5.1"/>
  <changelog author="tbechtold@suse.com" date="1526644800">- update to 1.12.0:
  Core:
  * Update protobuf submodule to 3.5.2 (#15114)
  * Make GrpcBuffer{Reader|Writer} Public (#14541)
  * Compile Out Tracers Option (#15108)
  * Fix bug in an address sorting comparison (#15208)
  * Fix: Check retry timer before starting resolving (#15156)
  * Fix c-ares resolution with default authority (#15073)
  * Fix c-ares resolver crash when DNS server unreachable (#15134)
  * Performance: Avoid low severity log message construction (#14945)
  * Peformance: Enable SIO_LOOPBACK_FAST_PATH on Windows (#14905)
  C#:
  * Add RpcException.StatusCode property (#15140)
  * Improvements to C# build instructions (#15178)
  Python:
  * Eliminate grpcio package dependency on protobuf package (#15034).
    Please pay extra attention if you are using gRPC with Protocol Buffers and
    your deployment scripts do not explicitly list the correct dependencies
    and used to rely on the transitive Python package dependency from grpcio to protobuf.
  * A new grpc.Channel.close method is introduced and correct use of gRPC
    Python now requires that channels be closed after use. No existing code
    should observably break when upgrading to 1.12 but code that creates
    channels but does not close them will not be supported in 1.13 and later.
  Core:
  * Fix: Check retry timer before starting resolving (#15156)
  * Fix c-ares resolution with default authority (#15073)
  * Fix c-ares resolver crash when DNS server unreachable (#15134)
  * Add core underpinnings for TLS session ticket support (#14483)
  * Experimental support for configurable retries (use at your own risk) (#10684)
  * Fail calls with wait_for_ready=false on transient resolver failure (#14733)
  * Fix a call stack ref flake (#14681)
  * c-ares DNS resolver sorts resolved addresses per RFC 6724 (#13290)
  * Use socklen_t instead of size_t for address length (fixes use case for some
    big endian systems) (#14464)
  * Initial part of channel tracing implementation (#13883, #14746, #14751)
  * Avoid crashes on environments with hot-plugged CPUs (#14712)
  * When building from source, Makefile now checks for minimum protobuf
    version 3.5.0 instead 3.0.0 (#14821)
  * gRPC Core public header no longer includes inttypes.h (#14676)
  * CMake improvements:
  * Add well-commented examples and continuous test for various ways of
    building gRPC as a dependency (via ExternalProject_Add in #14822,
    via add_subdirectory in #14864)
  * Remove internal tools from binaries installed by cmake install (#14850)
  * Simplify Android build example (#14885)
  * Enable SO_REUSEPORT in IPv6-only environments as well (#14748)
  C#:
  * Improvements in experimental support for Unity - added useful resources
    and improved support for loading grpc_csharp_ext on Unity (#14576, #14605)
  * Further prevent name collisions by using only fully qualified type
    names in C# code generator (#14524)
  * Fix C# connectivity watcher shutdown race (#14776)
  Objective-C:
  * Support for Keep-Alive (#14781)
  * Experimental C++ podspec now supports Apple framework (#14480)
  * Allow discarding generated implementation (leaving only protocol)
    with macro (#14490)
  * Better handling of network error (#14554)
  PHP:
  * Add missing -O2 compilation flag for pecl (#14768)
  * Update the reserved variable list to check in PHP code generator to
    match protobuf 3.5.0 (#13580)
  Python:
  * Progress towards full Beta API elimination (Beta API is and has been
    unsupported and will go away completely):
    Remove _face_interface_test tests for the Beta API (#14702)
  * Remove Python background poller thread (#14448)
    Note there is a small change in behavior. Before, clients would
    detect disconnected channels immediately.
  * Initial gevent compatibility (EXPERIMENTAL) (#14561)
  * Release the GIL when calling grpc_call_start_batch to improve
    performance under multithreaded scenarios. (#14801)
  Ruby:
  * Correct handling of underscores in package names by Protocol Buffers code
    generator for Ruby (#13634)
  * Source code and locally compiled (not cross-compiled) shared libraries
    (grpc_c.so files) are removed from the linux binary packages. This includes
    the packages targeting the x86_64-linux and x86-linux platforms (#14634)
  * Bug fix for a use-after-free related to access to a garbage collected
    object (#14809)
  * Get rid of the -Wno-format argument to compilation of the ruby extension
  * Documentation improvements (#14535)
  * Don?t raise GRPC::Core::CallErrors for failed reads or writes of bidi
    streaming calls (#14922)
  * Fix a race condition in an interrupt handler that could cause an
    assertion failure (#14953)</changelog>
  <changelog author="jengelh@inai.de" date="1526644801">- Switch to plain makefiles since they generate more shared libs.
- Remove grpc-build.diff, grpc-versioning.diff.</changelog>
  <changelog author="tbechtold@suse.com" date="1527249600">- build grpc python module for python2 and python3
  * add 0001-Allow-building-the-python-module-with-system-openssl.patch
  * add 0002-Allow-building-the-python-module-with-system-zlib.patch
  * add 0003-Allow-building-the-python-module-with-system-cares.patch</changelog>
  <changelog author="jengelh@inai.de" date="1529755200">- Throw out silly -Werror in release builds.</changelog>
  <changelog author="tbechtold@suse.com" date="1541937600">- update to 1.15.1:
  * Document SSL portability and performance considerations. See
    https://github.com/grpc/grpc/blob/master/doc/ssl-performance.md .
  * Simplify call arena size growth.
  * PF: Check connectivity state before watching.
  * Added system roots feature to load roots from OS trust store.
  * Fix re-resolution in pick first.
  * Allow error strings in final_info to propagate to filters on
    call destruction.
  * Add resolver executor.
  * Data race fix for lockfree_event.
  * Channelz: Expose new Core API.
  * cmake: disable assembly optimizations only when necessary.
  * C++ sync server: Return status RESOURCE_EXHAUSTED if no
    thread quota available.
  * Use correct target name for gflags-config.cmake.
  * Make should generate pkg-config file for gpr as well.
  * Restrict the number of threads in C++ sync server.
  * Allow reset of connection backoff.
- update to 1.14.2:
  * Add TROUBLESHOOTING.md guide
  * Fixed gRPC channels blocking indefinitely and not respecting
    deadlines on network disconnect.
  * Add user guide for keepalive.
  * Fix GRPC_ARG_HTTP2_MIN_RECV_PING_INTERVAL_WITHOUT_DATA_MS doc
    to restrict usage to server.
  * Fixed ordering in adding pending picks to Round Robin LB.
  * Implement local channel/server credentials for UDS connections.
  * Allow extra copy in zero-copy protector integrity-only mode.
  * Update to use the canonical version of LB proto.
  * Prefer using https_proxy over http_proxy.
  * Refactor to put c-ares queries under a combiner.
  * Remove already_closed parameter from fd_orphan.
  * Add channel arg to enable/disable http proxy.
  * Fix shutdown of closed fd when c-ares opens a second fd.
  * Fixed segmentation fault when product name from BIOS is empty.
  * Introduce server-side load reporting service.
  * Reorder steps in ServerBuilder::BuildAndStart().
  * Support Per-Method Codegen Generic on Server Side.
  * Protobuf-related headers are available in a subspec of
    gRPC-C++ podspec.
- update to 1.13.1:
  * gRPC stats will only be collected for debug builds or if
    GRPC_COLLECT_STATS is defined. It will be disabled for opt
    builds.
  * Fix for Issue #13553. Unlimited can now be set as the max
    receive message length.
  * cmake install now also installs should also installs the
    roots.pem file.
- Drop 0001-Allow-building-the-python-module-with-system-openssl.patch
  Applied upstream
- Drop 0002-Allow-building-the-python-module-with-system-zlib.patch
  Applied upstream
- 0003-Allow-building-the-python-module-with-system-cares.patch
  Applied upstream</changelog>
  <changelog author="jengelh@inai.de" date="1541937601">- Update to new upstream release 1.16
  * Keepalive watchdog firing should return status UNAVAILABLE.
  * Set TCP_USER_TIMEOUT socket option for Linux.
  * Turn loading system root certificate as default.
  * Change pick_first to not unref unselected subchannels.
  * cmake: prevent C core from depending on libstdc++.
  * Implement Watch method in health check service.</changelog>
  <changelog author="mrostecki@suse.de" date="1546862400">- Add grpc-source package - some Go programs using gRPC need
  protobuf definitions which are included inside the source code,
  but are not included in the devel package.</changelog>
  <changelog author="jengelh@inai.de" date="1552737600">- Update to new upstream release 1.19.1
  * Use 32-bit nanopb fields.
  * Avoid SRV and TXT lookups for localhost.
  * Set c-ares as the default resolver.</changelog>
  <changelog author="sbrabec@suse.com" date="1555070400">- Fix typo in Groups.</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 1.21.3
  * Add SPIFFE security stack to gRPC.
  * Re-enable ALPN check in gRPC C core SSL stack.</changelog>
  <changelog author="jengelh@inai.de" date="1566129600">- Update to new upstream release 1.23 [boo#1144068]
  * Fixed a bug where POST_RECV_MESSAGE was not being triggered.
  * Renamed root certificate bundle in gRPC-C++ pod.
  * Increased lower bound on DNS re-resolution period to 30 seconds.
  * Fixed a segfault when forking while using gevent.
  * Added channel idleness support
  * Added threadpool support</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Disable LTO because it's broken.</changelog>
  <changelog author="jengelh@inai.de" date="1570017600">- Update to release 1.23.1
  * Unspecific refinements, improvements, and bug fixes.
- Add gettid.patch
- Split libgrpc into libgrpc++ because that has a SO version
  group of its own.
- Bump libgrpc6 to libgrpc7 as there is actually .so.7 files.
  Add suitable Conflicts markers.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1570708800">- Make sure that patches are included in the source package.
- Filter out several rpmlintrc warnings for the source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1572955200">- Add patch which replaces BoringSSL with OpenSSL as the SSL
  library when grpc is used as a Bazel dependency:
  * 0001-bazel-Replace-boringssl-with-openssl.patch</changelog>
  <changelog author="mrostecki@opensuse.org" date="1573473600">- Define BoringSSL as a Bazel dependency in WORKSPACE instead of
  grpc_deps.bzl - using new_local_repository function is now always
  allowed in imported modules.</changelog>
  <changelog author="jengelh@inai.de" date="1576497600">- Update to release 1.25
  * Change RR to consider a subchannel in TF if it has failed
    since it was READY.
  * Do not create streams after a GOAWAY has been received.
  * Prevent HTTP2 parser from queueing a lot of induced frames.
- Drop gettid.patch</changelog>
  <changelog author="mrostecki@opensuse.org" date="1578571200">- Remove patch for Bazel files, which is not needed anymore:
  * 0001-bazel-Replace-boringssl-with-openssl.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1584014400">- Add conditional to build without python2 if needed</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1649160000">- Update in SLE-15 (bsc#1197726)</changelog>
</package>
<package pkgid="5852cf102ad4acdcb4e99847b43e8a63ab366664603621cdb0700a1275d487d4" name="grpc-devel" arch="s390x">
  <version epoch="0" ver="1.25.0" rel="150200.3.5.1"/>
  <changelog author="tbechtold@suse.com" date="1526644800">- update to 1.12.0:
  Core:
  * Update protobuf submodule to 3.5.2 (#15114)
  * Make GrpcBuffer{Reader|Writer} Public (#14541)
  * Compile Out Tracers Option (#15108)
  * Fix bug in an address sorting comparison (#15208)
  * Fix: Check retry timer before starting resolving (#15156)
  * Fix c-ares resolution with default authority (#15073)
  * Fix c-ares resolver crash when DNS server unreachable (#15134)
  * Performance: Avoid low severity log message construction (#14945)
  * Peformance: Enable SIO_LOOPBACK_FAST_PATH on Windows (#14905)
  C#:
  * Add RpcException.StatusCode property (#15140)
  * Improvements to C# build instructions (#15178)
  Python:
  * Eliminate grpcio package dependency on protobuf package (#15034).
    Please pay extra attention if you are using gRPC with Protocol Buffers and
    your deployment scripts do not explicitly list the correct dependencies
    and used to rely on the transitive Python package dependency from grpcio to protobuf.
  * A new grpc.Channel.close method is introduced and correct use of gRPC
    Python now requires that channels be closed after use. No existing code
    should observably break when upgrading to 1.12 but code that creates
    channels but does not close them will not be supported in 1.13 and later.
  Core:
  * Fix: Check retry timer before starting resolving (#15156)
  * Fix c-ares resolution with default authority (#15073)
  * Fix c-ares resolver crash when DNS server unreachable (#15134)
  * Add core underpinnings for TLS session ticket support (#14483)
  * Experimental support for configurable retries (use at your own risk) (#10684)
  * Fail calls with wait_for_ready=false on transient resolver failure (#14733)
  * Fix a call stack ref flake (#14681)
  * c-ares DNS resolver sorts resolved addresses per RFC 6724 (#13290)
  * Use socklen_t instead of size_t for address length (fixes use case for some
    big endian systems) (#14464)
  * Initial part of channel tracing implementation (#13883, #14746, #14751)
  * Avoid crashes on environments with hot-plugged CPUs (#14712)
  * When building from source, Makefile now checks for minimum protobuf
    version 3.5.0 instead 3.0.0 (#14821)
  * gRPC Core public header no longer includes inttypes.h (#14676)
  * CMake improvements:
  * Add well-commented examples and continuous test for various ways of
    building gRPC as a dependency (via ExternalProject_Add in #14822,
    via add_subdirectory in #14864)
  * Remove internal tools from binaries installed by cmake install (#14850)
  * Simplify Android build example (#14885)
  * Enable SO_REUSEPORT in IPv6-only environments as well (#14748)
  C#:
  * Improvements in experimental support for Unity - added useful resources
    and improved support for loading grpc_csharp_ext on Unity (#14576, #14605)
  * Further prevent name collisions by using only fully qualified type
    names in C# code generator (#14524)
  * Fix C# connectivity watcher shutdown race (#14776)
  Objective-C:
  * Support for Keep-Alive (#14781)
  * Experimental C++ podspec now supports Apple framework (#14480)
  * Allow discarding generated implementation (leaving only protocol)
    with macro (#14490)
  * Better handling of network error (#14554)
  PHP:
  * Add missing -O2 compilation flag for pecl (#14768)
  * Update the reserved variable list to check in PHP code generator to
    match protobuf 3.5.0 (#13580)
  Python:
  * Progress towards full Beta API elimination (Beta API is and has been
    unsupported and will go away completely):
    Remove _face_interface_test tests for the Beta API (#14702)
  * Remove Python background poller thread (#14448)
    Note there is a small change in behavior. Before, clients would
    detect disconnected channels immediately.
  * Initial gevent compatibility (EXPERIMENTAL) (#14561)
  * Release the GIL when calling grpc_call_start_batch to improve
    performance under multithreaded scenarios. (#14801)
  Ruby:
  * Correct handling of underscores in package names by Protocol Buffers code
    generator for Ruby (#13634)
  * Source code and locally compiled (not cross-compiled) shared libraries
    (grpc_c.so files) are removed from the linux binary packages. This includes
    the packages targeting the x86_64-linux and x86-linux platforms (#14634)
  * Bug fix for a use-after-free related to access to a garbage collected
    object (#14809)
  * Get rid of the -Wno-format argument to compilation of the ruby extension
  * Documentation improvements (#14535)
  * Don?t raise GRPC::Core::CallErrors for failed reads or writes of bidi
    streaming calls (#14922)
  * Fix a race condition in an interrupt handler that could cause an
    assertion failure (#14953)</changelog>
  <changelog author="jengelh@inai.de" date="1526644801">- Switch to plain makefiles since they generate more shared libs.
- Remove grpc-build.diff, grpc-versioning.diff.</changelog>
  <changelog author="tbechtold@suse.com" date="1527249600">- build grpc python module for python2 and python3
  * add 0001-Allow-building-the-python-module-with-system-openssl.patch
  * add 0002-Allow-building-the-python-module-with-system-zlib.patch
  * add 0003-Allow-building-the-python-module-with-system-cares.patch</changelog>
  <changelog author="jengelh@inai.de" date="1529755200">- Throw out silly -Werror in release builds.</changelog>
  <changelog author="tbechtold@suse.com" date="1541937600">- update to 1.15.1:
  * Document SSL portability and performance considerations. See
    https://github.com/grpc/grpc/blob/master/doc/ssl-performance.md .
  * Simplify call arena size growth.
  * PF: Check connectivity state before watching.
  * Added system roots feature to load roots from OS trust store.
  * Fix re-resolution in pick first.
  * Allow error strings in final_info to propagate to filters on
    call destruction.
  * Add resolver executor.
  * Data race fix for lockfree_event.
  * Channelz: Expose new Core API.
  * cmake: disable assembly optimizations only when necessary.
  * C++ sync server: Return status RESOURCE_EXHAUSTED if no
    thread quota available.
  * Use correct target name for gflags-config.cmake.
  * Make should generate pkg-config file for gpr as well.
  * Restrict the number of threads in C++ sync server.
  * Allow reset of connection backoff.
- update to 1.14.2:
  * Add TROUBLESHOOTING.md guide
  * Fixed gRPC channels blocking indefinitely and not respecting
    deadlines on network disconnect.
  * Add user guide for keepalive.
  * Fix GRPC_ARG_HTTP2_MIN_RECV_PING_INTERVAL_WITHOUT_DATA_MS doc
    to restrict usage to server.
  * Fixed ordering in adding pending picks to Round Robin LB.
  * Implement local channel/server credentials for UDS connections.
  * Allow extra copy in zero-copy protector integrity-only mode.
  * Update to use the canonical version of LB proto.
  * Prefer using https_proxy over http_proxy.
  * Refactor to put c-ares queries under a combiner.
  * Remove already_closed parameter from fd_orphan.
  * Add channel arg to enable/disable http proxy.
  * Fix shutdown of closed fd when c-ares opens a second fd.
  * Fixed segmentation fault when product name from BIOS is empty.
  * Introduce server-side load reporting service.
  * Reorder steps in ServerBuilder::BuildAndStart().
  * Support Per-Method Codegen Generic on Server Side.
  * Protobuf-related headers are available in a subspec of
    gRPC-C++ podspec.
- update to 1.13.1:
  * gRPC stats will only be collected for debug builds or if
    GRPC_COLLECT_STATS is defined. It will be disabled for opt
    builds.
  * Fix for Issue #13553. Unlimited can now be set as the max
    receive message length.
  * cmake install now also installs should also installs the
    roots.pem file.
- Drop 0001-Allow-building-the-python-module-with-system-openssl.patch
  Applied upstream
- Drop 0002-Allow-building-the-python-module-with-system-zlib.patch
  Applied upstream
- 0003-Allow-building-the-python-module-with-system-cares.patch
  Applied upstream</changelog>
  <changelog author="jengelh@inai.de" date="1541937601">- Update to new upstream release 1.16
  * Keepalive watchdog firing should return status UNAVAILABLE.
  * Set TCP_USER_TIMEOUT socket option for Linux.
  * Turn loading system root certificate as default.
  * Change pick_first to not unref unselected subchannels.
  * cmake: prevent C core from depending on libstdc++.
  * Implement Watch method in health check service.</changelog>
  <changelog author="mrostecki@suse.de" date="1546862400">- Add grpc-source package - some Go programs using gRPC need
  protobuf definitions which are included inside the source code,
  but are not included in the devel package.</changelog>
  <changelog author="jengelh@inai.de" date="1552737600">- Update to new upstream release 1.19.1
  * Use 32-bit nanopb fields.
  * Avoid SRV and TXT lookups for localhost.
  * Set c-ares as the default resolver.</changelog>
  <changelog author="sbrabec@suse.com" date="1555070400">- Fix typo in Groups.</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 1.21.3
  * Add SPIFFE security stack to gRPC.
  * Re-enable ALPN check in gRPC C core SSL stack.</changelog>
  <changelog author="jengelh@inai.de" date="1566129600">- Update to new upstream release 1.23 [boo#1144068]
  * Fixed a bug where POST_RECV_MESSAGE was not being triggered.
  * Renamed root certificate bundle in gRPC-C++ pod.
  * Increased lower bound on DNS re-resolution period to 30 seconds.
  * Fixed a segfault when forking while using gevent.
  * Added channel idleness support
  * Added threadpool support</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Disable LTO because it's broken.</changelog>
  <changelog author="jengelh@inai.de" date="1570017600">- Update to release 1.23.1
  * Unspecific refinements, improvements, and bug fixes.
- Add gettid.patch
- Split libgrpc into libgrpc++ because that has a SO version
  group of its own.
- Bump libgrpc6 to libgrpc7 as there is actually .so.7 files.
  Add suitable Conflicts markers.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1570708800">- Make sure that patches are included in the source package.
- Filter out several rpmlintrc warnings for the source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1572955200">- Add patch which replaces BoringSSL with OpenSSL as the SSL
  library when grpc is used as a Bazel dependency:
  * 0001-bazel-Replace-boringssl-with-openssl.patch</changelog>
  <changelog author="mrostecki@opensuse.org" date="1573473600">- Define BoringSSL as a Bazel dependency in WORKSPACE instead of
  grpc_deps.bzl - using new_local_repository function is now always
  allowed in imported modules.</changelog>
  <changelog author="jengelh@inai.de" date="1576497600">- Update to release 1.25
  * Change RR to consider a subchannel in TF if it has failed
    since it was READY.
  * Do not create streams after a GOAWAY has been received.
  * Prevent HTTP2 parser from queueing a lot of induced frames.
- Drop gettid.patch</changelog>
  <changelog author="mrostecki@opensuse.org" date="1578571200">- Remove patch for Bazel files, which is not needed anymore:
  * 0001-bazel-Replace-boringssl-with-openssl.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1584014400">- Add conditional to build without python2 if needed</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1649160000">- Update in SLE-15 (bsc#1197726)</changelog>
</package>
<package pkgid="66da62626fbe5a9569fc64cc686f2d34a292274efa65adfab5d3ac77acd703ef" name="grpc-devel" arch="x86_64">
  <version epoch="0" ver="1.25.0" rel="150200.3.5.1"/>
  <changelog author="tbechtold@suse.com" date="1526644800">- update to 1.12.0:
  Core:
  * Update protobuf submodule to 3.5.2 (#15114)
  * Make GrpcBuffer{Reader|Writer} Public (#14541)
  * Compile Out Tracers Option (#15108)
  * Fix bug in an address sorting comparison (#15208)
  * Fix: Check retry timer before starting resolving (#15156)
  * Fix c-ares resolution with default authority (#15073)
  * Fix c-ares resolver crash when DNS server unreachable (#15134)
  * Performance: Avoid low severity log message construction (#14945)
  * Peformance: Enable SIO_LOOPBACK_FAST_PATH on Windows (#14905)
  C#:
  * Add RpcException.StatusCode property (#15140)
  * Improvements to C# build instructions (#15178)
  Python:
  * Eliminate grpcio package dependency on protobuf package (#15034).
    Please pay extra attention if you are using gRPC with Protocol Buffers and
    your deployment scripts do not explicitly list the correct dependencies
    and used to rely on the transitive Python package dependency from grpcio to protobuf.
  * A new grpc.Channel.close method is introduced and correct use of gRPC
    Python now requires that channels be closed after use. No existing code
    should observably break when upgrading to 1.12 but code that creates
    channels but does not close them will not be supported in 1.13 and later.
  Core:
  * Fix: Check retry timer before starting resolving (#15156)
  * Fix c-ares resolution with default authority (#15073)
  * Fix c-ares resolver crash when DNS server unreachable (#15134)
  * Add core underpinnings for TLS session ticket support (#14483)
  * Experimental support for configurable retries (use at your own risk) (#10684)
  * Fail calls with wait_for_ready=false on transient resolver failure (#14733)
  * Fix a call stack ref flake (#14681)
  * c-ares DNS resolver sorts resolved addresses per RFC 6724 (#13290)
  * Use socklen_t instead of size_t for address length (fixes use case for some
    big endian systems) (#14464)
  * Initial part of channel tracing implementation (#13883, #14746, #14751)
  * Avoid crashes on environments with hot-plugged CPUs (#14712)
  * When building from source, Makefile now checks for minimum protobuf
    version 3.5.0 instead 3.0.0 (#14821)
  * gRPC Core public header no longer includes inttypes.h (#14676)
  * CMake improvements:
  * Add well-commented examples and continuous test for various ways of
    building gRPC as a dependency (via ExternalProject_Add in #14822,
    via add_subdirectory in #14864)
  * Remove internal tools from binaries installed by cmake install (#14850)
  * Simplify Android build example (#14885)
  * Enable SO_REUSEPORT in IPv6-only environments as well (#14748)
  C#:
  * Improvements in experimental support for Unity - added useful resources
    and improved support for loading grpc_csharp_ext on Unity (#14576, #14605)
  * Further prevent name collisions by using only fully qualified type
    names in C# code generator (#14524)
  * Fix C# connectivity watcher shutdown race (#14776)
  Objective-C:
  * Support for Keep-Alive (#14781)
  * Experimental C++ podspec now supports Apple framework (#14480)
  * Allow discarding generated implementation (leaving only protocol)
    with macro (#14490)
  * Better handling of network error (#14554)
  PHP:
  * Add missing -O2 compilation flag for pecl (#14768)
  * Update the reserved variable list to check in PHP code generator to
    match protobuf 3.5.0 (#13580)
  Python:
  * Progress towards full Beta API elimination (Beta API is and has been
    unsupported and will go away completely):
    Remove _face_interface_test tests for the Beta API (#14702)
  * Remove Python background poller thread (#14448)
    Note there is a small change in behavior. Before, clients would
    detect disconnected channels immediately.
  * Initial gevent compatibility (EXPERIMENTAL) (#14561)
  * Release the GIL when calling grpc_call_start_batch to improve
    performance under multithreaded scenarios. (#14801)
  Ruby:
  * Correct handling of underscores in package names by Protocol Buffers code
    generator for Ruby (#13634)
  * Source code and locally compiled (not cross-compiled) shared libraries
    (grpc_c.so files) are removed from the linux binary packages. This includes
    the packages targeting the x86_64-linux and x86-linux platforms (#14634)
  * Bug fix for a use-after-free related to access to a garbage collected
    object (#14809)
  * Get rid of the -Wno-format argument to compilation of the ruby extension
  * Documentation improvements (#14535)
  * Don?t raise GRPC::Core::CallErrors for failed reads or writes of bidi
    streaming calls (#14922)
  * Fix a race condition in an interrupt handler that could cause an
    assertion failure (#14953)</changelog>
  <changelog author="jengelh@inai.de" date="1526644801">- Switch to plain makefiles since they generate more shared libs.
- Remove grpc-build.diff, grpc-versioning.diff.</changelog>
  <changelog author="tbechtold@suse.com" date="1527249600">- build grpc python module for python2 and python3
  * add 0001-Allow-building-the-python-module-with-system-openssl.patch
  * add 0002-Allow-building-the-python-module-with-system-zlib.patch
  * add 0003-Allow-building-the-python-module-with-system-cares.patch</changelog>
  <changelog author="jengelh@inai.de" date="1529755200">- Throw out silly -Werror in release builds.</changelog>
  <changelog author="tbechtold@suse.com" date="1541937600">- update to 1.15.1:
  * Document SSL portability and performance considerations. See
    https://github.com/grpc/grpc/blob/master/doc/ssl-performance.md .
  * Simplify call arena size growth.
  * PF: Check connectivity state before watching.
  * Added system roots feature to load roots from OS trust store.
  * Fix re-resolution in pick first.
  * Allow error strings in final_info to propagate to filters on
    call destruction.
  * Add resolver executor.
  * Data race fix for lockfree_event.
  * Channelz: Expose new Core API.
  * cmake: disable assembly optimizations only when necessary.
  * C++ sync server: Return status RESOURCE_EXHAUSTED if no
    thread quota available.
  * Use correct target name for gflags-config.cmake.
  * Make should generate pkg-config file for gpr as well.
  * Restrict the number of threads in C++ sync server.
  * Allow reset of connection backoff.
- update to 1.14.2:
  * Add TROUBLESHOOTING.md guide
  * Fixed gRPC channels blocking indefinitely and not respecting
    deadlines on network disconnect.
  * Add user guide for keepalive.
  * Fix GRPC_ARG_HTTP2_MIN_RECV_PING_INTERVAL_WITHOUT_DATA_MS doc
    to restrict usage to server.
  * Fixed ordering in adding pending picks to Round Robin LB.
  * Implement local channel/server credentials for UDS connections.
  * Allow extra copy in zero-copy protector integrity-only mode.
  * Update to use the canonical version of LB proto.
  * Prefer using https_proxy over http_proxy.
  * Refactor to put c-ares queries under a combiner.
  * Remove already_closed parameter from fd_orphan.
  * Add channel arg to enable/disable http proxy.
  * Fix shutdown of closed fd when c-ares opens a second fd.
  * Fixed segmentation fault when product name from BIOS is empty.
  * Introduce server-side load reporting service.
  * Reorder steps in ServerBuilder::BuildAndStart().
  * Support Per-Method Codegen Generic on Server Side.
  * Protobuf-related headers are available in a subspec of
    gRPC-C++ podspec.
- update to 1.13.1:
  * gRPC stats will only be collected for debug builds or if
    GRPC_COLLECT_STATS is defined. It will be disabled for opt
    builds.
  * Fix for Issue #13553. Unlimited can now be set as the max
    receive message length.
  * cmake install now also installs should also installs the
    roots.pem file.
- Drop 0001-Allow-building-the-python-module-with-system-openssl.patch
  Applied upstream
- Drop 0002-Allow-building-the-python-module-with-system-zlib.patch
  Applied upstream
- 0003-Allow-building-the-python-module-with-system-cares.patch
  Applied upstream</changelog>
  <changelog author="jengelh@inai.de" date="1541937601">- Update to new upstream release 1.16
  * Keepalive watchdog firing should return status UNAVAILABLE.
  * Set TCP_USER_TIMEOUT socket option for Linux.
  * Turn loading system root certificate as default.
  * Change pick_first to not unref unselected subchannels.
  * cmake: prevent C core from depending on libstdc++.
  * Implement Watch method in health check service.</changelog>
  <changelog author="mrostecki@suse.de" date="1546862400">- Add grpc-source package - some Go programs using gRPC need
  protobuf definitions which are included inside the source code,
  but are not included in the devel package.</changelog>
  <changelog author="jengelh@inai.de" date="1552737600">- Update to new upstream release 1.19.1
  * Use 32-bit nanopb fields.
  * Avoid SRV and TXT lookups for localhost.
  * Set c-ares as the default resolver.</changelog>
  <changelog author="sbrabec@suse.com" date="1555070400">- Fix typo in Groups.</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 1.21.3
  * Add SPIFFE security stack to gRPC.
  * Re-enable ALPN check in gRPC C core SSL stack.</changelog>
  <changelog author="jengelh@inai.de" date="1566129600">- Update to new upstream release 1.23 [boo#1144068]
  * Fixed a bug where POST_RECV_MESSAGE was not being triggered.
  * Renamed root certificate bundle in gRPC-C++ pod.
  * Increased lower bound on DNS re-resolution period to 30 seconds.
  * Fixed a segfault when forking while using gevent.
  * Added channel idleness support
  * Added threadpool support</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Disable LTO because it's broken.</changelog>
  <changelog author="jengelh@inai.de" date="1570017600">- Update to release 1.23.1
  * Unspecific refinements, improvements, and bug fixes.
- Add gettid.patch
- Split libgrpc into libgrpc++ because that has a SO version
  group of its own.
- Bump libgrpc6 to libgrpc7 as there is actually .so.7 files.
  Add suitable Conflicts markers.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1570708800">- Make sure that patches are included in the source package.
- Filter out several rpmlintrc warnings for the source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1572955200">- Add patch which replaces BoringSSL with OpenSSL as the SSL
  library when grpc is used as a Bazel dependency:
  * 0001-bazel-Replace-boringssl-with-openssl.patch</changelog>
  <changelog author="mrostecki@opensuse.org" date="1573473600">- Define BoringSSL as a Bazel dependency in WORKSPACE instead of
  grpc_deps.bzl - using new_local_repository function is now always
  allowed in imported modules.</changelog>
  <changelog author="jengelh@inai.de" date="1576497600">- Update to release 1.25
  * Change RR to consider a subchannel in TF if it has failed
    since it was READY.
  * Do not create streams after a GOAWAY has been received.
  * Prevent HTTP2 parser from queueing a lot of induced frames.
- Drop gettid.patch</changelog>
  <changelog author="mrostecki@opensuse.org" date="1578571200">- Remove patch for Bazel files, which is not needed anymore:
  * 0001-bazel-Replace-boringssl-with-openssl.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1584014400">- Add conditional to build without python2 if needed</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1649160000">- Update in SLE-15 (bsc#1197726)</changelog>
</package>
<package pkgid="60781a08dbd5fea758a30ee55aaafd5fbc8e700475a660be90ef4ff5038ecd22" name="grpc-source" arch="noarch">
  <version epoch="0" ver="1.25.0" rel="150200.3.5.1"/>
  <changelog author="tbechtold@suse.com" date="1526644800">- update to 1.12.0:
  Core:
  * Update protobuf submodule to 3.5.2 (#15114)
  * Make GrpcBuffer{Reader|Writer} Public (#14541)
  * Compile Out Tracers Option (#15108)
  * Fix bug in an address sorting comparison (#15208)
  * Fix: Check retry timer before starting resolving (#15156)
  * Fix c-ares resolution with default authority (#15073)
  * Fix c-ares resolver crash when DNS server unreachable (#15134)
  * Performance: Avoid low severity log message construction (#14945)
  * Peformance: Enable SIO_LOOPBACK_FAST_PATH on Windows (#14905)
  C#:
  * Add RpcException.StatusCode property (#15140)
  * Improvements to C# build instructions (#15178)
  Python:
  * Eliminate grpcio package dependency on protobuf package (#15034).
    Please pay extra attention if you are using gRPC with Protocol Buffers and
    your deployment scripts do not explicitly list the correct dependencies
    and used to rely on the transitive Python package dependency from grpcio to protobuf.
  * A new grpc.Channel.close method is introduced and correct use of gRPC
    Python now requires that channels be closed after use. No existing code
    should observably break when upgrading to 1.12 but code that creates
    channels but does not close them will not be supported in 1.13 and later.
  Core:
  * Fix: Check retry timer before starting resolving (#15156)
  * Fix c-ares resolution with default authority (#15073)
  * Fix c-ares resolver crash when DNS server unreachable (#15134)
  * Add core underpinnings for TLS session ticket support (#14483)
  * Experimental support for configurable retries (use at your own risk) (#10684)
  * Fail calls with wait_for_ready=false on transient resolver failure (#14733)
  * Fix a call stack ref flake (#14681)
  * c-ares DNS resolver sorts resolved addresses per RFC 6724 (#13290)
  * Use socklen_t instead of size_t for address length (fixes use case for some
    big endian systems) (#14464)
  * Initial part of channel tracing implementation (#13883, #14746, #14751)
  * Avoid crashes on environments with hot-plugged CPUs (#14712)
  * When building from source, Makefile now checks for minimum protobuf
    version 3.5.0 instead 3.0.0 (#14821)
  * gRPC Core public header no longer includes inttypes.h (#14676)
  * CMake improvements:
  * Add well-commented examples and continuous test for various ways of
    building gRPC as a dependency (via ExternalProject_Add in #14822,
    via add_subdirectory in #14864)
  * Remove internal tools from binaries installed by cmake install (#14850)
  * Simplify Android build example (#14885)
  * Enable SO_REUSEPORT in IPv6-only environments as well (#14748)
  C#:
  * Improvements in experimental support for Unity - added useful resources
    and improved support for loading grpc_csharp_ext on Unity (#14576, #14605)
  * Further prevent name collisions by using only fully qualified type
    names in C# code generator (#14524)
  * Fix C# connectivity watcher shutdown race (#14776)
  Objective-C:
  * Support for Keep-Alive (#14781)
  * Experimental C++ podspec now supports Apple framework (#14480)
  * Allow discarding generated implementation (leaving only protocol)
    with macro (#14490)
  * Better handling of network error (#14554)
  PHP:
  * Add missing -O2 compilation flag for pecl (#14768)
  * Update the reserved variable list to check in PHP code generator to
    match protobuf 3.5.0 (#13580)
  Python:
  * Progress towards full Beta API elimination (Beta API is and has been
    unsupported and will go away completely):
    Remove _face_interface_test tests for the Beta API (#14702)
  * Remove Python background poller thread (#14448)
    Note there is a small change in behavior. Before, clients would
    detect disconnected channels immediately.
  * Initial gevent compatibility (EXPERIMENTAL) (#14561)
  * Release the GIL when calling grpc_call_start_batch to improve
    performance under multithreaded scenarios. (#14801)
  Ruby:
  * Correct handling of underscores in package names by Protocol Buffers code
    generator for Ruby (#13634)
  * Source code and locally compiled (not cross-compiled) shared libraries
    (grpc_c.so files) are removed from the linux binary packages. This includes
    the packages targeting the x86_64-linux and x86-linux platforms (#14634)
  * Bug fix for a use-after-free related to access to a garbage collected
    object (#14809)
  * Get rid of the -Wno-format argument to compilation of the ruby extension
  * Documentation improvements (#14535)
  * Don?t raise GRPC::Core::CallErrors for failed reads or writes of bidi
    streaming calls (#14922)
  * Fix a race condition in an interrupt handler that could cause an
    assertion failure (#14953)</changelog>
  <changelog author="jengelh@inai.de" date="1526644801">- Switch to plain makefiles since they generate more shared libs.
- Remove grpc-build.diff, grpc-versioning.diff.</changelog>
  <changelog author="tbechtold@suse.com" date="1527249600">- build grpc python module for python2 and python3
  * add 0001-Allow-building-the-python-module-with-system-openssl.patch
  * add 0002-Allow-building-the-python-module-with-system-zlib.patch
  * add 0003-Allow-building-the-python-module-with-system-cares.patch</changelog>
  <changelog author="jengelh@inai.de" date="1529755200">- Throw out silly -Werror in release builds.</changelog>
  <changelog author="tbechtold@suse.com" date="1541937600">- update to 1.15.1:
  * Document SSL portability and performance considerations. See
    https://github.com/grpc/grpc/blob/master/doc/ssl-performance.md .
  * Simplify call arena size growth.
  * PF: Check connectivity state before watching.
  * Added system roots feature to load roots from OS trust store.
  * Fix re-resolution in pick first.
  * Allow error strings in final_info to propagate to filters on
    call destruction.
  * Add resolver executor.
  * Data race fix for lockfree_event.
  * Channelz: Expose new Core API.
  * cmake: disable assembly optimizations only when necessary.
  * C++ sync server: Return status RESOURCE_EXHAUSTED if no
    thread quota available.
  * Use correct target name for gflags-config.cmake.
  * Make should generate pkg-config file for gpr as well.
  * Restrict the number of threads in C++ sync server.
  * Allow reset of connection backoff.
- update to 1.14.2:
  * Add TROUBLESHOOTING.md guide
  * Fixed gRPC channels blocking indefinitely and not respecting
    deadlines on network disconnect.
  * Add user guide for keepalive.
  * Fix GRPC_ARG_HTTP2_MIN_RECV_PING_INTERVAL_WITHOUT_DATA_MS doc
    to restrict usage to server.
  * Fixed ordering in adding pending picks to Round Robin LB.
  * Implement local channel/server credentials for UDS connections.
  * Allow extra copy in zero-copy protector integrity-only mode.
  * Update to use the canonical version of LB proto.
  * Prefer using https_proxy over http_proxy.
  * Refactor to put c-ares queries under a combiner.
  * Remove already_closed parameter from fd_orphan.
  * Add channel arg to enable/disable http proxy.
  * Fix shutdown of closed fd when c-ares opens a second fd.
  * Fixed segmentation fault when product name from BIOS is empty.
  * Introduce server-side load reporting service.
  * Reorder steps in ServerBuilder::BuildAndStart().
  * Support Per-Method Codegen Generic on Server Side.
  * Protobuf-related headers are available in a subspec of
    gRPC-C++ podspec.
- update to 1.13.1:
  * gRPC stats will only be collected for debug builds or if
    GRPC_COLLECT_STATS is defined. It will be disabled for opt
    builds.
  * Fix for Issue #13553. Unlimited can now be set as the max
    receive message length.
  * cmake install now also installs should also installs the
    roots.pem file.
- Drop 0001-Allow-building-the-python-module-with-system-openssl.patch
  Applied upstream
- Drop 0002-Allow-building-the-python-module-with-system-zlib.patch
  Applied upstream
- 0003-Allow-building-the-python-module-with-system-cares.patch
  Applied upstream</changelog>
  <changelog author="jengelh@inai.de" date="1541937601">- Update to new upstream release 1.16
  * Keepalive watchdog firing should return status UNAVAILABLE.
  * Set TCP_USER_TIMEOUT socket option for Linux.
  * Turn loading system root certificate as default.
  * Change pick_first to not unref unselected subchannels.
  * cmake: prevent C core from depending on libstdc++.
  * Implement Watch method in health check service.</changelog>
  <changelog author="mrostecki@suse.de" date="1546862400">- Add grpc-source package - some Go programs using gRPC need
  protobuf definitions which are included inside the source code,
  but are not included in the devel package.</changelog>
  <changelog author="jengelh@inai.de" date="1552737600">- Update to new upstream release 1.19.1
  * Use 32-bit nanopb fields.
  * Avoid SRV and TXT lookups for localhost.
  * Set c-ares as the default resolver.</changelog>
  <changelog author="sbrabec@suse.com" date="1555070400">- Fix typo in Groups.</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 1.21.3
  * Add SPIFFE security stack to gRPC.
  * Re-enable ALPN check in gRPC C core SSL stack.</changelog>
  <changelog author="jengelh@inai.de" date="1566129600">- Update to new upstream release 1.23 [boo#1144068]
  * Fixed a bug where POST_RECV_MESSAGE was not being triggered.
  * Renamed root certificate bundle in gRPC-C++ pod.
  * Increased lower bound on DNS re-resolution period to 30 seconds.
  * Fixed a segfault when forking while using gevent.
  * Added channel idleness support
  * Added threadpool support</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Disable LTO because it's broken.</changelog>
  <changelog author="jengelh@inai.de" date="1570017600">- Update to release 1.23.1
  * Unspecific refinements, improvements, and bug fixes.
- Add gettid.patch
- Split libgrpc into libgrpc++ because that has a SO version
  group of its own.
- Bump libgrpc6 to libgrpc7 as there is actually .so.7 files.
  Add suitable Conflicts markers.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1570708800">- Make sure that patches are included in the source package.
- Filter out several rpmlintrc warnings for the source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1572955200">- Add patch which replaces BoringSSL with OpenSSL as the SSL
  library when grpc is used as a Bazel dependency:
  * 0001-bazel-Replace-boringssl-with-openssl.patch</changelog>
  <changelog author="mrostecki@opensuse.org" date="1573473600">- Define BoringSSL as a Bazel dependency in WORKSPACE instead of
  grpc_deps.bzl - using new_local_repository function is now always
  allowed in imported modules.</changelog>
  <changelog author="jengelh@inai.de" date="1576497600">- Update to release 1.25
  * Change RR to consider a subchannel in TF if it has failed
    since it was READY.
  * Do not create streams after a GOAWAY has been received.
  * Prevent HTTP2 parser from queueing a lot of induced frames.
- Drop gettid.patch</changelog>
  <changelog author="mrostecki@opensuse.org" date="1578571200">- Remove patch for Bazel files, which is not needed anymore:
  * 0001-bazel-Replace-boringssl-with-openssl.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1584014400">- Add conditional to build without python2 if needed</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1649160000">- Update in SLE-15 (bsc#1197726)</changelog>
</package>
<package pkgid="ec0a1e58f5378de61dbe8c65b2211d91fdd7e784d3cf9a64332c4a4a8f292be6" name="gstreamer-plugins-cogl" arch="aarch64">
  <version epoch="0" ver="1.22.2" rel="150200.10.2.1"/>
  <changelog author="fcrozat@suse.com" date="1418385600">- Disable wayland backend on SLE12.</changelog>
  <changelog author="dimstar@opensuse.org" date="1424779200">- Update to version 1.20.0:
  + Support for "quad buffer" based stereo rendering.
  + Support for Mir window system.
  + A number of updates for the Wayland support.
  + Improved vblank sync when using glXWaitForMSC.</changelog>
  <changelog author="zaitor@opensuse.org" date="1440158400">- Update to version 1.21.2:
  + Add X11-specific API for retrieving the renderer's visual.
  + Improvement to the MSVC build.
  + Support KMS drivers without page flip.
  + Do not use deprecated OpenGL API with the GL3 driver.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 1.22.0:
  + Improvements in handling errors in the KMS winsys (bgo#754540).
  + Fix crashers in Wayland and GLX winsys (bgo#754667,
    bgo#754888).</changelog>
  <changelog author="zaitor@opensuse.org" date="1445601600">- Pass --enable-cogl-gst to configure, we have clutter-gst-3.0,
  shame on us, this should have been done for Leap too.
- Add new BuildRequires needed from above change:
  - pkgconfig(gstreamer-audio-1.0)
  - pkgconfig(gstreamer-base-1.0)
  - pkgconfig(gstreamer-controller-1.0)
  - pkgconfig(gstreamer-plugins-base-1.0)
  - pkgconfig(gstreamer-tag-1.0)
  - pkgconfig(gstreamer-video-1.0)
- Package new sub-packages typelib-1_0-CoglGst-2_0 and
  gstreamer-plugins-cogl due to above change. Add Supplements:
  packageand(libcogl20:gstreamer) for gstreamer-plugins-cogl.
- Flip enable gles2 define to 1, build gles2 support.
- Add cogl-GLES-Support-glMapBufferRange.patch: ES3 provides
  glMapBufferRange as core, with the added bonus that it also
  supports read mappings. Use this where possible.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450872000">- Add cogl-fix-black-login-screen.patch: Fix black and frozen
  login screen after logout when using gdm in wayland mode and
  session in x11 mode (boo#958885, bgo#758112, bgo#756926).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1472212800">- Update to version 1.22.2:
  + Skip journal dumping if not supported (bgo#728355).
  + Support glMapBufferRange from ES3 (bgo#728355).
  + Improvements in the KMS winsys (bgo#756926, bgo#758073).
  + Require gettext 0.19 to avoid hacks (bgo#760285).
  + Respect the Wayland spec for EGL surface creation (bgo#765351).
  + Updated translations.
- Drop cogl-GLES-Support-glMapBufferRange.patch and
  cogl-fix-black-login-screen.patch: Fixed upstream.</changelog>
  <changelog author="fezhang@suse.com" date="1472472000">- Add 0001-fix-build-failure-with-Werror-undef.patch:
  Fix build failure for SLE (bgo#770533).</changelog>
  <changelog author="fezhang@suse.com" date="1505390400">- Drop the SLE12 / Leap42 build_wayland_backend conditional.</changelog>
</package>
<package pkgid="3f7d56fdb3bee14cfacedd0c9501869a07904f64439f9fabdcf8f64fdf73d525" name="gstreamer-plugins-cogl" arch="ppc64le">
  <version epoch="0" ver="1.22.2" rel="150200.10.2.1"/>
  <changelog author="fcrozat@suse.com" date="1418385600">- Disable wayland backend on SLE12.</changelog>
  <changelog author="dimstar@opensuse.org" date="1424779200">- Update to version 1.20.0:
  + Support for "quad buffer" based stereo rendering.
  + Support for Mir window system.
  + A number of updates for the Wayland support.
  + Improved vblank sync when using glXWaitForMSC.</changelog>
  <changelog author="zaitor@opensuse.org" date="1440158400">- Update to version 1.21.2:
  + Add X11-specific API for retrieving the renderer's visual.
  + Improvement to the MSVC build.
  + Support KMS drivers without page flip.
  + Do not use deprecated OpenGL API with the GL3 driver.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 1.22.0:
  + Improvements in handling errors in the KMS winsys (bgo#754540).
  + Fix crashers in Wayland and GLX winsys (bgo#754667,
    bgo#754888).</changelog>
  <changelog author="zaitor@opensuse.org" date="1445601600">- Pass --enable-cogl-gst to configure, we have clutter-gst-3.0,
  shame on us, this should have been done for Leap too.
- Add new BuildRequires needed from above change:
  - pkgconfig(gstreamer-audio-1.0)
  - pkgconfig(gstreamer-base-1.0)
  - pkgconfig(gstreamer-controller-1.0)
  - pkgconfig(gstreamer-plugins-base-1.0)
  - pkgconfig(gstreamer-tag-1.0)
  - pkgconfig(gstreamer-video-1.0)
- Package new sub-packages typelib-1_0-CoglGst-2_0 and
  gstreamer-plugins-cogl due to above change. Add Supplements:
  packageand(libcogl20:gstreamer) for gstreamer-plugins-cogl.
- Flip enable gles2 define to 1, build gles2 support.
- Add cogl-GLES-Support-glMapBufferRange.patch: ES3 provides
  glMapBufferRange as core, with the added bonus that it also
  supports read mappings. Use this where possible.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450872000">- Add cogl-fix-black-login-screen.patch: Fix black and frozen
  login screen after logout when using gdm in wayland mode and
  session in x11 mode (boo#958885, bgo#758112, bgo#756926).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1472212800">- Update to version 1.22.2:
  + Skip journal dumping if not supported (bgo#728355).
  + Support glMapBufferRange from ES3 (bgo#728355).
  + Improvements in the KMS winsys (bgo#756926, bgo#758073).
  + Require gettext 0.19 to avoid hacks (bgo#760285).
  + Respect the Wayland spec for EGL surface creation (bgo#765351).
  + Updated translations.
- Drop cogl-GLES-Support-glMapBufferRange.patch and
  cogl-fix-black-login-screen.patch: Fixed upstream.</changelog>
  <changelog author="fezhang@suse.com" date="1472472000">- Add 0001-fix-build-failure-with-Werror-undef.patch:
  Fix build failure for SLE (bgo#770533).</changelog>
  <changelog author="fezhang@suse.com" date="1505390400">- Drop the SLE12 / Leap42 build_wayland_backend conditional.</changelog>
</package>
<package pkgid="bb847a1485eb181c1c6549a69358266383c6423c8678232d58d86c33fcafe4c6" name="gstreamer-plugins-cogl" arch="s390x">
  <version epoch="0" ver="1.22.2" rel="150200.10.2.1"/>
  <changelog author="fcrozat@suse.com" date="1418385600">- Disable wayland backend on SLE12.</changelog>
  <changelog author="dimstar@opensuse.org" date="1424779200">- Update to version 1.20.0:
  + Support for "quad buffer" based stereo rendering.
  + Support for Mir window system.
  + A number of updates for the Wayland support.
  + Improved vblank sync when using glXWaitForMSC.</changelog>
  <changelog author="zaitor@opensuse.org" date="1440158400">- Update to version 1.21.2:
  + Add X11-specific API for retrieving the renderer's visual.
  + Improvement to the MSVC build.
  + Support KMS drivers without page flip.
  + Do not use deprecated OpenGL API with the GL3 driver.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 1.22.0:
  + Improvements in handling errors in the KMS winsys (bgo#754540).
  + Fix crashers in Wayland and GLX winsys (bgo#754667,
    bgo#754888).</changelog>
  <changelog author="zaitor@opensuse.org" date="1445601600">- Pass --enable-cogl-gst to configure, we have clutter-gst-3.0,
  shame on us, this should have been done for Leap too.
- Add new BuildRequires needed from above change:
  - pkgconfig(gstreamer-audio-1.0)
  - pkgconfig(gstreamer-base-1.0)
  - pkgconfig(gstreamer-controller-1.0)
  - pkgconfig(gstreamer-plugins-base-1.0)
  - pkgconfig(gstreamer-tag-1.0)
  - pkgconfig(gstreamer-video-1.0)
- Package new sub-packages typelib-1_0-CoglGst-2_0 and
  gstreamer-plugins-cogl due to above change. Add Supplements:
  packageand(libcogl20:gstreamer) for gstreamer-plugins-cogl.
- Flip enable gles2 define to 1, build gles2 support.
- Add cogl-GLES-Support-glMapBufferRange.patch: ES3 provides
  glMapBufferRange as core, with the added bonus that it also
  supports read mappings. Use this where possible.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450872000">- Add cogl-fix-black-login-screen.patch: Fix black and frozen
  login screen after logout when using gdm in wayland mode and
  session in x11 mode (boo#958885, bgo#758112, bgo#756926).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1472212800">- Update to version 1.22.2:
  + Skip journal dumping if not supported (bgo#728355).
  + Support glMapBufferRange from ES3 (bgo#728355).
  + Improvements in the KMS winsys (bgo#756926, bgo#758073).
  + Require gettext 0.19 to avoid hacks (bgo#760285).
  + Respect the Wayland spec for EGL surface creation (bgo#765351).
  + Updated translations.
- Drop cogl-GLES-Support-glMapBufferRange.patch and
  cogl-fix-black-login-screen.patch: Fixed upstream.</changelog>
  <changelog author="fezhang@suse.com" date="1472472000">- Add 0001-fix-build-failure-with-Werror-undef.patch:
  Fix build failure for SLE (bgo#770533).</changelog>
  <changelog author="fezhang@suse.com" date="1505390400">- Drop the SLE12 / Leap42 build_wayland_backend conditional.</changelog>
</package>
<package pkgid="d80e18796c52eed482af5cbf022ba2e2065e6156d331c62fe058943715d103cb" name="gstreamer-plugins-cogl" arch="x86_64">
  <version epoch="0" ver="1.22.2" rel="150200.10.2.1"/>
  <changelog author="fcrozat@suse.com" date="1418385600">- Disable wayland backend on SLE12.</changelog>
  <changelog author="dimstar@opensuse.org" date="1424779200">- Update to version 1.20.0:
  + Support for "quad buffer" based stereo rendering.
  + Support for Mir window system.
  + A number of updates for the Wayland support.
  + Improved vblank sync when using glXWaitForMSC.</changelog>
  <changelog author="zaitor@opensuse.org" date="1440158400">- Update to version 1.21.2:
  + Add X11-specific API for retrieving the renderer's visual.
  + Improvement to the MSVC build.
  + Support KMS drivers without page flip.
  + Do not use deprecated OpenGL API with the GL3 driver.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1442404800">- Update to version 1.22.0:
  + Improvements in handling errors in the KMS winsys (bgo#754540).
  + Fix crashers in Wayland and GLX winsys (bgo#754667,
    bgo#754888).</changelog>
  <changelog author="zaitor@opensuse.org" date="1445601600">- Pass --enable-cogl-gst to configure, we have clutter-gst-3.0,
  shame on us, this should have been done for Leap too.
- Add new BuildRequires needed from above change:
  - pkgconfig(gstreamer-audio-1.0)
  - pkgconfig(gstreamer-base-1.0)
  - pkgconfig(gstreamer-controller-1.0)
  - pkgconfig(gstreamer-plugins-base-1.0)
  - pkgconfig(gstreamer-tag-1.0)
  - pkgconfig(gstreamer-video-1.0)
- Package new sub-packages typelib-1_0-CoglGst-2_0 and
  gstreamer-plugins-cogl due to above change. Add Supplements:
  packageand(libcogl20:gstreamer) for gstreamer-plugins-cogl.
- Flip enable gles2 define to 1, build gles2 support.
- Add cogl-GLES-Support-glMapBufferRange.patch: ES3 provides
  glMapBufferRange as core, with the added bonus that it also
  supports read mappings. Use this where possible.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450872000">- Add cogl-fix-black-login-screen.patch: Fix black and frozen
  login screen after logout when using gdm in wayland mode and
  session in x11 mode (boo#958885, bgo#758112, bgo#756926).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1472212800">- Update to version 1.22.2:
  + Skip journal dumping if not supported (bgo#728355).
  + Support glMapBufferRange from ES3 (bgo#728355).
  + Improvements in the KMS winsys (bgo#756926, bgo#758073).
  + Require gettext 0.19 to avoid hacks (bgo#760285).
  + Respect the Wayland spec for EGL surface creation (bgo#765351).
  + Updated translations.
- Drop cogl-GLES-Support-glMapBufferRange.patch and
  cogl-fix-black-login-screen.patch: Fixed upstream.</changelog>
  <changelog author="fezhang@suse.com" date="1472472000">- Add 0001-fix-build-failure-with-Werror-undef.patch:
  Fix build failure for SLE (bgo#770533).</changelog>
  <changelog author="fezhang@suse.com" date="1505390400">- Drop the SLE12 / Leap42 build_wayland_backend conditional.</changelog>
</package>
<package pkgid="eb468be3011b45e0c9b5cf3925a2375ea714350f59a8c49fdd94edc963289330" name="gtkiterm" arch="aarch64">
  <version epoch="0" ver="0.5.20040304" rel="150000.5.6.1"/>
  <changelog author="pgajdos@suse.com" date="1360843200">- add bdftopcf into build requires [bnc#803276]</changelog>
  <changelog author="pgajdos@suse.com" date="1362484800">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- README.SuSE renamed to README.SUSE [bnc#889032] (internal)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414843200">- Switch to pkgconfig() buildrequires instead of using
  metapackage xorg-x11-devel</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- implict-ptsname-decl.patch: fix implicit declaration of ptsname with
  glibc &gt;= 2.24</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="schwab@suse.de" date="1502884800">- Prerequire group(tty)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Conflict libiterm1 with terminfo-iterm: terminfo-iterm is an
  alternative to xiterm, and the conflict is meant to be.</changelog>
  <changelog author="schwab@suse.de" date="1565265600">- stropts.patch: remove use of obsolete XSI STREAMS interface</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- added patches
  fix do not enable application keypad mode [bsc#1158271]
  + xiterm-no-keypad-application-mode.patch
- big thanks to Stefan Hundhammer</changelog>
</package>
<package pkgid="2aff6887df9cb23ab227cc03071b12689463b54722dc5d5b38176ddb14c16f37" name="gtkiterm" arch="ppc64le">
  <version epoch="0" ver="0.5.20040304" rel="150000.5.6.1"/>
  <changelog author="pgajdos@suse.com" date="1360843200">- add bdftopcf into build requires [bnc#803276]</changelog>
  <changelog author="pgajdos@suse.com" date="1362484800">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- README.SuSE renamed to README.SUSE [bnc#889032] (internal)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414843200">- Switch to pkgconfig() buildrequires instead of using
  metapackage xorg-x11-devel</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- implict-ptsname-decl.patch: fix implicit declaration of ptsname with
  glibc &gt;= 2.24</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="schwab@suse.de" date="1502884800">- Prerequire group(tty)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Conflict libiterm1 with terminfo-iterm: terminfo-iterm is an
  alternative to xiterm, and the conflict is meant to be.</changelog>
  <changelog author="schwab@suse.de" date="1565265600">- stropts.patch: remove use of obsolete XSI STREAMS interface</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- added patches
  fix do not enable application keypad mode [bsc#1158271]
  + xiterm-no-keypad-application-mode.patch
- big thanks to Stefan Hundhammer</changelog>
</package>
<package pkgid="fad25f1f0f1941b03b5d96a305957be0289cff5da019029ef3eac40dec826f7f" name="gtkiterm" arch="s390x">
  <version epoch="0" ver="0.5.20040304" rel="150000.5.6.1"/>
  <changelog author="pgajdos@suse.com" date="1360843200">- add bdftopcf into build requires [bnc#803276]</changelog>
  <changelog author="pgajdos@suse.com" date="1362484800">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- README.SuSE renamed to README.SUSE [bnc#889032] (internal)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414843200">- Switch to pkgconfig() buildrequires instead of using
  metapackage xorg-x11-devel</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- implict-ptsname-decl.patch: fix implicit declaration of ptsname with
  glibc &gt;= 2.24</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="schwab@suse.de" date="1502884800">- Prerequire group(tty)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Conflict libiterm1 with terminfo-iterm: terminfo-iterm is an
  alternative to xiterm, and the conflict is meant to be.</changelog>
  <changelog author="schwab@suse.de" date="1565265600">- stropts.patch: remove use of obsolete XSI STREAMS interface</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- added patches
  fix do not enable application keypad mode [bsc#1158271]
  + xiterm-no-keypad-application-mode.patch
- big thanks to Stefan Hundhammer</changelog>
</package>
<package pkgid="9efceff40f1d54269fa78b62abdba98abbce495a40ccd5c41d225e9404cf3f6e" name="gtkiterm" arch="x86_64">
  <version epoch="0" ver="0.5.20040304" rel="150000.5.6.1"/>
  <changelog author="pgajdos@suse.com" date="1360843200">- add bdftopcf into build requires [bnc#803276]</changelog>
  <changelog author="pgajdos@suse.com" date="1362484800">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- README.SuSE renamed to README.SUSE [bnc#889032] (internal)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414843200">- Switch to pkgconfig() buildrequires instead of using
  metapackage xorg-x11-devel</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- implict-ptsname-decl.patch: fix implicit declaration of ptsname with
  glibc &gt;= 2.24</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="schwab@suse.de" date="1502884800">- Prerequire group(tty)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Conflict libiterm1 with terminfo-iterm: terminfo-iterm is an
  alternative to xiterm, and the conflict is meant to be.</changelog>
  <changelog author="schwab@suse.de" date="1565265600">- stropts.patch: remove use of obsolete XSI STREAMS interface</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- added patches
  fix do not enable application keypad mode [bsc#1158271]
  + xiterm-no-keypad-application-mode.patch
- big thanks to Stefan Hundhammer</changelog>
</package>
<package pkgid="6e0f37e5ffa469991abd2d09ef531bb139c675167074340bd491e56da6434a84" name="gzip" arch="aarch64">
  <version epoch="0" ver="1.10" rel="150200.10.1"/>
  <changelog author="mpluskal@suse.com" date="1461758400">- Update to 1.8
  * gzip -l no longer falsely reports a write error when writing to
    a pipe.
  * Port to Oracle Solaris Studio 12 on x86-64.
  * When configuring gzip, ./configure DEFS='...-DNO_ASM...' now
    suppresses assembler again.
- Small spec file cleanup</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- use loop with a range instead of a number list</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- define %{_buildshell} to /bin/bash as we newly rely on bash
  features like {1..9}</changelog>
  <changelog author="src@posteo.de" date="1496145600">- changing the way how gcc profiling is generating to have a reproducible
  build</changelog>
  <changelog author="bwiedemann@suse.com" date="1496232000">- Make build reproducible in spite of gcc profile based optimizations
  (boo#1040589)</changelog>
  <changelog author="kstreitova@suse.com" date="1512129600">- add gzip-1.8-fix_unpack_EOB_check.patch to fix mishandling of
  leading zeros in the end-of-block code [bsc#1067891]</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- add gzip-1.8-deprecate_netstat.patch to get rid of deprecated
  'netstat -n' command in tests/init.sh script</changelog>
  <changelog author="kbabioch@suse.com" date="1515672000">- Update to 1.9
  * Fix suffix handling
  * Fix bug when handling pack format while decompressing
  * Fix time handling bug
  * Improve exit code handling for shell scripts
- remove gzip-1.8-fix_unpack_EOB_check.patch as it is included
  upstream now
- refresh manpage-no-date.patch
- spec file cleanups</changelog>
  <changelog author="meissner@suse.com" date="1515758400">- license is GPL-3.0+</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="astieger@suse.com" date="1546171200">- gzip 1.10:
  * Compressed gzip output no longer contains the current time as
    a timestamp when the input is not a regular file.  Instead, the
    output contains a null (zero) timestamp.  This makes gzip's
    behavior more reproducible when used as part of a pipeline.
  * A use of uninitialized memory on some malformed inputs has been
    fixed.
  * A few theoretical race conditions in signal handers have been
    fixed.
- drop upstreamed patches:
  * gnulib-libio.patch
  * gzip-1.8-deprecate_netstat.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1559822400">- add gzip-1.10-ibm_dfltcc_support.patch [jsc#SLE-5818] [jsc#SLE-8914]
  * it adds support for DFLTCC (hardware-accelerated deflation)
    for s390x arch
  * enable it via "--enable-dfltcc" option</changelog>
  <changelog author="kstreitova@suse.com" date="1566907200">- refresh gzip-1.10-ibm_dfltcc_support.patch to fix three data
  corruption issues [bsc#1145276] [jsc#SLE-5818] [jsc#SLE-8914]</changelog>
  <changelog author="kstreitova@suse.com" date="1599048000">- Enable DFLTCC compression for s390x for levels 1-6 (i. e. to make
  it used by default) by adding -DDFLTCC_LEVEL_MASK=0x7e to CLFAGS.
  [jsc#SLE-13775]</changelog>
  <changelog author="kstreitova@suse.com" date="1611748800">- add gzip-1.10-fix_count_of_lines_to_skip.patch to fix count
  of lines to skip [bsc#1180713]</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- gzip.spec: move %patch10 from the ifarch condition (mistake)</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- fix DFLTCC segfault [bsc#1177047]
- added patches
  fix https://git.savannah.gnu.org/cgit/gzip.git/commit/?id=be0a534ba2b6e77da289de8da79e70843b1028cc
  + gzip-1.10-fix-DFLTCC-segfault.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1649332800">- Fix escaping of malicious filenames (CVE-2022-1271 bsc#1198062)
  * bsc1198062.patch
  * bsc1198062-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1651752000">- Add support to zstd in zgrep, fixes bsc#1198922
  * xz_lzma.patch -&gt; xz_lzma_zstd.patch</changelog>
</package>
<package pkgid="8197e08a760011ec4f09b0351e49a4018d0b601dd24138ac40e81fb45286de5c" name="gzip" arch="ppc64le">
  <version epoch="0" ver="1.10" rel="150200.10.1"/>
  <changelog author="mpluskal@suse.com" date="1461758400">- Update to 1.8
  * gzip -l no longer falsely reports a write error when writing to
    a pipe.
  * Port to Oracle Solaris Studio 12 on x86-64.
  * When configuring gzip, ./configure DEFS='...-DNO_ASM...' now
    suppresses assembler again.
- Small spec file cleanup</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- use loop with a range instead of a number list</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- define %{_buildshell} to /bin/bash as we newly rely on bash
  features like {1..9}</changelog>
  <changelog author="src@posteo.de" date="1496145600">- changing the way how gcc profiling is generating to have a reproducible
  build</changelog>
  <changelog author="bwiedemann@suse.com" date="1496232000">- Make build reproducible in spite of gcc profile based optimizations
  (boo#1040589)</changelog>
  <changelog author="kstreitova@suse.com" date="1512129600">- add gzip-1.8-fix_unpack_EOB_check.patch to fix mishandling of
  leading zeros in the end-of-block code [bsc#1067891]</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- add gzip-1.8-deprecate_netstat.patch to get rid of deprecated
  'netstat -n' command in tests/init.sh script</changelog>
  <changelog author="kbabioch@suse.com" date="1515672000">- Update to 1.9
  * Fix suffix handling
  * Fix bug when handling pack format while decompressing
  * Fix time handling bug
  * Improve exit code handling for shell scripts
- remove gzip-1.8-fix_unpack_EOB_check.patch as it is included
  upstream now
- refresh manpage-no-date.patch
- spec file cleanups</changelog>
  <changelog author="meissner@suse.com" date="1515758400">- license is GPL-3.0+</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="astieger@suse.com" date="1546171200">- gzip 1.10:
  * Compressed gzip output no longer contains the current time as
    a timestamp when the input is not a regular file.  Instead, the
    output contains a null (zero) timestamp.  This makes gzip's
    behavior more reproducible when used as part of a pipeline.
  * A use of uninitialized memory on some malformed inputs has been
    fixed.
  * A few theoretical race conditions in signal handers have been
    fixed.
- drop upstreamed patches:
  * gnulib-libio.patch
  * gzip-1.8-deprecate_netstat.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1559822400">- add gzip-1.10-ibm_dfltcc_support.patch [jsc#SLE-5818] [jsc#SLE-8914]
  * it adds support for DFLTCC (hardware-accelerated deflation)
    for s390x arch
  * enable it via "--enable-dfltcc" option</changelog>
  <changelog author="kstreitova@suse.com" date="1566907200">- refresh gzip-1.10-ibm_dfltcc_support.patch to fix three data
  corruption issues [bsc#1145276] [jsc#SLE-5818] [jsc#SLE-8914]</changelog>
  <changelog author="kstreitova@suse.com" date="1599048000">- Enable DFLTCC compression for s390x for levels 1-6 (i. e. to make
  it used by default) by adding -DDFLTCC_LEVEL_MASK=0x7e to CLFAGS.
  [jsc#SLE-13775]</changelog>
  <changelog author="kstreitova@suse.com" date="1611748800">- add gzip-1.10-fix_count_of_lines_to_skip.patch to fix count
  of lines to skip [bsc#1180713]</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- gzip.spec: move %patch10 from the ifarch condition (mistake)</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- fix DFLTCC segfault [bsc#1177047]
- added patches
  fix https://git.savannah.gnu.org/cgit/gzip.git/commit/?id=be0a534ba2b6e77da289de8da79e70843b1028cc
  + gzip-1.10-fix-DFLTCC-segfault.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1649332800">- Fix escaping of malicious filenames (CVE-2022-1271 bsc#1198062)
  * bsc1198062.patch
  * bsc1198062-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1651752000">- Add support to zstd in zgrep, fixes bsc#1198922
  * xz_lzma.patch -&gt; xz_lzma_zstd.patch</changelog>
</package>
<package pkgid="6f0a39f5c0173b881cb3e8f198236ad8a78c846677dbfe99585e65e5443a828d" name="gzip" arch="s390x">
  <version epoch="0" ver="1.10" rel="150200.10.1"/>
  <changelog author="mpluskal@suse.com" date="1461758400">- Update to 1.8
  * gzip -l no longer falsely reports a write error when writing to
    a pipe.
  * Port to Oracle Solaris Studio 12 on x86-64.
  * When configuring gzip, ./configure DEFS='...-DNO_ASM...' now
    suppresses assembler again.
- Small spec file cleanup</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- use loop with a range instead of a number list</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- define %{_buildshell} to /bin/bash as we newly rely on bash
  features like {1..9}</changelog>
  <changelog author="src@posteo.de" date="1496145600">- changing the way how gcc profiling is generating to have a reproducible
  build</changelog>
  <changelog author="bwiedemann@suse.com" date="1496232000">- Make build reproducible in spite of gcc profile based optimizations
  (boo#1040589)</changelog>
  <changelog author="kstreitova@suse.com" date="1512129600">- add gzip-1.8-fix_unpack_EOB_check.patch to fix mishandling of
  leading zeros in the end-of-block code [bsc#1067891]</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- add gzip-1.8-deprecate_netstat.patch to get rid of deprecated
  'netstat -n' command in tests/init.sh script</changelog>
  <changelog author="kbabioch@suse.com" date="1515672000">- Update to 1.9
  * Fix suffix handling
  * Fix bug when handling pack format while decompressing
  * Fix time handling bug
  * Improve exit code handling for shell scripts
- remove gzip-1.8-fix_unpack_EOB_check.patch as it is included
  upstream now
- refresh manpage-no-date.patch
- spec file cleanups</changelog>
  <changelog author="meissner@suse.com" date="1515758400">- license is GPL-3.0+</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="astieger@suse.com" date="1546171200">- gzip 1.10:
  * Compressed gzip output no longer contains the current time as
    a timestamp when the input is not a regular file.  Instead, the
    output contains a null (zero) timestamp.  This makes gzip's
    behavior more reproducible when used as part of a pipeline.
  * A use of uninitialized memory on some malformed inputs has been
    fixed.
  * A few theoretical race conditions in signal handers have been
    fixed.
- drop upstreamed patches:
  * gnulib-libio.patch
  * gzip-1.8-deprecate_netstat.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1559822400">- add gzip-1.10-ibm_dfltcc_support.patch [jsc#SLE-5818] [jsc#SLE-8914]
  * it adds support for DFLTCC (hardware-accelerated deflation)
    for s390x arch
  * enable it via "--enable-dfltcc" option</changelog>
  <changelog author="kstreitova@suse.com" date="1566907200">- refresh gzip-1.10-ibm_dfltcc_support.patch to fix three data
  corruption issues [bsc#1145276] [jsc#SLE-5818] [jsc#SLE-8914]</changelog>
  <changelog author="kstreitova@suse.com" date="1599048000">- Enable DFLTCC compression for s390x for levels 1-6 (i. e. to make
  it used by default) by adding -DDFLTCC_LEVEL_MASK=0x7e to CLFAGS.
  [jsc#SLE-13775]</changelog>
  <changelog author="kstreitova@suse.com" date="1611748800">- add gzip-1.10-fix_count_of_lines_to_skip.patch to fix count
  of lines to skip [bsc#1180713]</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- gzip.spec: move %patch10 from the ifarch condition (mistake)</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- fix DFLTCC segfault [bsc#1177047]
- added patches
  fix https://git.savannah.gnu.org/cgit/gzip.git/commit/?id=be0a534ba2b6e77da289de8da79e70843b1028cc
  + gzip-1.10-fix-DFLTCC-segfault.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1649332800">- Fix escaping of malicious filenames (CVE-2022-1271 bsc#1198062)
  * bsc1198062.patch
  * bsc1198062-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1651752000">- Add support to zstd in zgrep, fixes bsc#1198922
  * xz_lzma.patch -&gt; xz_lzma_zstd.patch</changelog>
</package>
<package pkgid="7f3e6f6d0a0d8ecf67956629b576bfa31702e3704df63d978e92e3622b4776d6" name="gzip" arch="src">
  <version epoch="0" ver="1.10" rel="150200.10.1"/>
  <changelog author="mpluskal@suse.com" date="1461758400">- Update to 1.8
  * gzip -l no longer falsely reports a write error when writing to
    a pipe.
  * Port to Oracle Solaris Studio 12 on x86-64.
  * When configuring gzip, ./configure DEFS='...-DNO_ASM...' now
    suppresses assembler again.
- Small spec file cleanup</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- use loop with a range instead of a number list</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- define %{_buildshell} to /bin/bash as we newly rely on bash
  features like {1..9}</changelog>
  <changelog author="src@posteo.de" date="1496145600">- changing the way how gcc profiling is generating to have a reproducible
  build</changelog>
  <changelog author="bwiedemann@suse.com" date="1496232000">- Make build reproducible in spite of gcc profile based optimizations
  (boo#1040589)</changelog>
  <changelog author="kstreitova@suse.com" date="1512129600">- add gzip-1.8-fix_unpack_EOB_check.patch to fix mishandling of
  leading zeros in the end-of-block code [bsc#1067891]</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- add gzip-1.8-deprecate_netstat.patch to get rid of deprecated
  'netstat -n' command in tests/init.sh script</changelog>
  <changelog author="kbabioch@suse.com" date="1515672000">- Update to 1.9
  * Fix suffix handling
  * Fix bug when handling pack format while decompressing
  * Fix time handling bug
  * Improve exit code handling for shell scripts
- remove gzip-1.8-fix_unpack_EOB_check.patch as it is included
  upstream now
- refresh manpage-no-date.patch
- spec file cleanups</changelog>
  <changelog author="meissner@suse.com" date="1515758400">- license is GPL-3.0+</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="astieger@suse.com" date="1546171200">- gzip 1.10:
  * Compressed gzip output no longer contains the current time as
    a timestamp when the input is not a regular file.  Instead, the
    output contains a null (zero) timestamp.  This makes gzip's
    behavior more reproducible when used as part of a pipeline.
  * A use of uninitialized memory on some malformed inputs has been
    fixed.
  * A few theoretical race conditions in signal handers have been
    fixed.
- drop upstreamed patches:
  * gnulib-libio.patch
  * gzip-1.8-deprecate_netstat.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1559822400">- add gzip-1.10-ibm_dfltcc_support.patch [jsc#SLE-5818] [jsc#SLE-8914]
  * it adds support for DFLTCC (hardware-accelerated deflation)
    for s390x arch
  * enable it via "--enable-dfltcc" option</changelog>
  <changelog author="kstreitova@suse.com" date="1566907200">- refresh gzip-1.10-ibm_dfltcc_support.patch to fix three data
  corruption issues [bsc#1145276] [jsc#SLE-5818] [jsc#SLE-8914]</changelog>
  <changelog author="kstreitova@suse.com" date="1599048000">- Enable DFLTCC compression for s390x for levels 1-6 (i. e. to make
  it used by default) by adding -DDFLTCC_LEVEL_MASK=0x7e to CLFAGS.
  [jsc#SLE-13775]</changelog>
  <changelog author="kstreitova@suse.com" date="1611748800">- add gzip-1.10-fix_count_of_lines_to_skip.patch to fix count
  of lines to skip [bsc#1180713]</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- gzip.spec: move %patch10 from the ifarch condition (mistake)</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- fix DFLTCC segfault [bsc#1177047]
- added patches
  fix https://git.savannah.gnu.org/cgit/gzip.git/commit/?id=be0a534ba2b6e77da289de8da79e70843b1028cc
  + gzip-1.10-fix-DFLTCC-segfault.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1649332800">- Fix escaping of malicious filenames (CVE-2022-1271 bsc#1198062)
  * bsc1198062.patch
  * bsc1198062-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1651752000">- Add support to zstd in zgrep, fixes bsc#1198922
  * xz_lzma.patch -&gt; xz_lzma_zstd.patch</changelog>
</package>
<package pkgid="adbfa2868a9c07fa1e40c40dd332e835d03044d6a7b5434cf91347b41f4fbe55" name="gzip" arch="x86_64">
  <version epoch="0" ver="1.10" rel="150200.10.1"/>
  <changelog author="mpluskal@suse.com" date="1461758400">- Update to 1.8
  * gzip -l no longer falsely reports a write error when writing to
    a pipe.
  * Port to Oracle Solaris Studio 12 on x86-64.
  * When configuring gzip, ./configure DEFS='...-DNO_ASM...' now
    suppresses assembler again.
- Small spec file cleanup</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner
- use loop with a range instead of a number list</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- define %{_buildshell} to /bin/bash as we newly rely on bash
  features like {1..9}</changelog>
  <changelog author="src@posteo.de" date="1496145600">- changing the way how gcc profiling is generating to have a reproducible
  build</changelog>
  <changelog author="bwiedemann@suse.com" date="1496232000">- Make build reproducible in spite of gcc profile based optimizations
  (boo#1040589)</changelog>
  <changelog author="kstreitova@suse.com" date="1512129600">- add gzip-1.8-fix_unpack_EOB_check.patch to fix mishandling of
  leading zeros in the end-of-block code [bsc#1067891]</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- add gzip-1.8-deprecate_netstat.patch to get rid of deprecated
  'netstat -n' command in tests/init.sh script</changelog>
  <changelog author="kbabioch@suse.com" date="1515672000">- Update to 1.9
  * Fix suffix handling
  * Fix bug when handling pack format while decompressing
  * Fix time handling bug
  * Improve exit code handling for shell scripts
- remove gzip-1.8-fix_unpack_EOB_check.patch as it is included
  upstream now
- refresh manpage-no-date.patch
- spec file cleanups</changelog>
  <changelog author="meissner@suse.com" date="1515758400">- license is GPL-3.0+</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- gnulib-libio.patch: Update gnulib for libio.h removal</changelog>
  <changelog author="astieger@suse.com" date="1546171200">- gzip 1.10:
  * Compressed gzip output no longer contains the current time as
    a timestamp when the input is not a regular file.  Instead, the
    output contains a null (zero) timestamp.  This makes gzip's
    behavior more reproducible when used as part of a pipeline.
  * A use of uninitialized memory on some malformed inputs has been
    fixed.
  * A few theoretical race conditions in signal handers have been
    fixed.
- drop upstreamed patches:
  * gnulib-libio.patch
  * gzip-1.8-deprecate_netstat.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1559822400">- add gzip-1.10-ibm_dfltcc_support.patch [jsc#SLE-5818] [jsc#SLE-8914]
  * it adds support for DFLTCC (hardware-accelerated deflation)
    for s390x arch
  * enable it via "--enable-dfltcc" option</changelog>
  <changelog author="kstreitova@suse.com" date="1566907200">- refresh gzip-1.10-ibm_dfltcc_support.patch to fix three data
  corruption issues [bsc#1145276] [jsc#SLE-5818] [jsc#SLE-8914]</changelog>
  <changelog author="kstreitova@suse.com" date="1599048000">- Enable DFLTCC compression for s390x for levels 1-6 (i. e. to make
  it used by default) by adding -DDFLTCC_LEVEL_MASK=0x7e to CLFAGS.
  [jsc#SLE-13775]</changelog>
  <changelog author="kstreitova@suse.com" date="1611748800">- add gzip-1.10-fix_count_of_lines_to_skip.patch to fix count
  of lines to skip [bsc#1180713]</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- gzip.spec: move %patch10 from the ifarch condition (mistake)</changelog>
  <changelog author="pgajdos@suse.com" date="1618315200">- fix DFLTCC segfault [bsc#1177047]
- added patches
  fix https://git.savannah.gnu.org/cgit/gzip.git/commit/?id=be0a534ba2b6e77da289de8da79e70843b1028cc
  + gzip-1.10-fix-DFLTCC-segfault.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1649332800">- Fix escaping of malicious filenames (CVE-2022-1271 bsc#1198062)
  * bsc1198062.patch
  * bsc1198062-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1651752000">- Add support to zstd in zgrep, fixes bsc#1198922
  * xz_lzma.patch -&gt; xz_lzma_zstd.patch</changelog>
</package>
<package pkgid="6c784c38a792d8f71662f8190e76817b812f30a4c5fd8bf698a00bce6c6db9bd" name="hdf5-gnu-hpc" arch="noarch">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="206f01243b8ca84b9b09db4ee5f57cb43e0ea93e2225f8aca3f7cebeb07d0823" name="hdf5-gnu-hpc-devel" arch="noarch">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="742070e460f8566d45e4c2522f91cd478faa9ce6a3f1be8d6b12d896002a5bde" name="hdf5-gnu-mpich-hpc" arch="noarch">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="08c9f6eebb106e804a48ea3c13828dc7f63e4160f885440d24ca31e81e5c07b6" name="hdf5-gnu-mpich-hpc-devel" arch="noarch">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="80f06bfd4e538c6e9116d4ac7787945b2a995d55ac9b367adec85b3efaadef9b" name="hdf5-gnu-mvapich2-hpc" arch="noarch">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="e7052db04bd5b5cedd6674324d99f37f4e15843d7368584e22ce32fb277cbee5" name="hdf5-gnu-mvapich2-hpc-devel" arch="noarch">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="41e1db1d8241cfcb22fc48b481bd8fc1012f23e77139ca3e1c10624796700fb8" name="hdf5-gnu-openmpi3-hpc" arch="noarch">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="db728777e32242c858ce974d2b6beae53ff75a3ebeb05cf5c613435cbb08953c" name="hdf5-gnu-openmpi3-hpc-devel" arch="noarch">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="6256fd1298a25f13ac19548b3d9f05f8a682d7bdbeee7d74742310fb6a3668f0" name="hdf5-gnu-openmpi4-hpc" arch="noarch">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="e69eac2a66a66637b60314778d43fd2e03d89530d7148cdc40101d2f38436ecd" name="hdf5-gnu-openmpi4-hpc-devel" arch="noarch">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="3dc5d69ce8367d2235cb02f3ac92444bb316652c2330c3ca6341eaf18dd23a96" name="hdf5-hpc-examples" arch="noarch">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="8194d412d16017c89b11013769d87490351b42ce471caff4e13cbb0062a4d353" name="hdf5_1_10_8-gnu-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="eb2b2bd5c45ad5da57f96ef8c803defcfbb87b511223699001340783b13767ab" name="hdf5_1_10_8-gnu-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="4f1d945264aa175b7ee7ead61eef3f007fca66e515c7899843d9b740b68e8ecb" name="hdf5_1_10_8-gnu-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="a86c9d71ba03388c49608d7f42f31b5748a8b3a182e05c7af67651daa687ef4c" name="hdf5_1_10_8-gnu-hpc" arch="src">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="0c2a634dde8b4499c2a6e980a26a9fcd1d9cfb1f531ab78a4d7e7facb903d537" name="hdf5_1_10_8-gnu-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="ffee6ddcc5f678c71854157a6de424cd9111b0c27d68a7ea290337f8aef1894a" name="hdf5_1_10_8-gnu-hpc-devel" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="55049674c384c8ead5b07b303007e0d42b8151aeb6b0999261ac672bee2807f2" name="hdf5_1_10_8-gnu-hpc-devel" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="8a7db4aea0dcd98c25fa1cf92bbee2c2a955a3e77dfd80ad45fc563054fa38f8" name="hdf5_1_10_8-gnu-hpc-devel" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="f8e8df792f1e2f505ba3f923f445372cb8344496240cd39e54832a8d5885ce5b" name="hdf5_1_10_8-gnu-hpc-devel" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="525d5c482839e879ceee57f279c0111fd67347fedeae4292a67d4eef53aa3039" name="hdf5_1_10_8-gnu-hpc-devel-static" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="d1d2377c737b104413b6a30eb813b64707393da47e7f08ae4e3d0544e3cd46a7" name="hdf5_1_10_8-gnu-hpc-devel-static" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="9b2ae190e4ae9e299538499219ab7a3f0968767831f6c37f89ebe1f476972187" name="hdf5_1_10_8-gnu-hpc-devel-static" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="a800a6200df35c77d298247258016f1b2ceb50039db18cdc70d5df198e8ff671" name="hdf5_1_10_8-gnu-hpc-devel-static" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="2bebab630350cba09be452a5e149e0511b219d60656f5b4f53a444c29be8ceb8" name="hdf5_1_10_8-gnu-hpc-module" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="e1b801e5206fdd66efd5c5ffb07b529f0cf629af0154cef0679daaae869b89ca" name="hdf5_1_10_8-gnu-hpc-module" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="04c5a723265fdda566628cd7c0903bc2eee1e531473cbbebca4a080b2ac6de24" name="hdf5_1_10_8-gnu-hpc-module" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="95726f6b014860acbc6b26bd5ebc909c4a692f01350c9ca2f54a49ca6e745283" name="hdf5_1_10_8-gnu-hpc-module" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="a77b208b14d3456318dca5ce96d95858ba25f046a4e37aa50386b3885f5b638d" name="hdf5_1_10_8-gnu-mpich-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="f3515787475f9ad9aa2741d6fe5f54e02beba9d308ab07ff3ad27529619512d8" name="hdf5_1_10_8-gnu-mpich-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="398295abc754c61100d6093b1c1a388d1ddba4ca9986b598cfa31328317092ca" name="hdf5_1_10_8-gnu-mpich-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="b5cc8855fefc0856e662bb66387dce95c45f4afff31e1b100babfa4594ba73d0" name="hdf5_1_10_8-gnu-mpich-hpc" arch="src">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="5bf8a6b85128c5ebfa36c2ee449ffc0dc2bc67c26bbe8eea62dd86ee835f3e8c" name="hdf5_1_10_8-gnu-mpich-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="e67c8f15a52f9ae48545dc062e9decb1d409ebf90bd7b40de9030fd4b9fdcf7d" name="hdf5_1_10_8-gnu-mpich-hpc-devel" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="b1c826e4e60149081f5133b1e0ad8cb5cf2eaa894acb858de170fda4ab58bbec" name="hdf5_1_10_8-gnu-mpich-hpc-devel" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="2274e9eb5635325205f43880321e579b03efcaaa0239272f8afb1a5d0e3f09cb" name="hdf5_1_10_8-gnu-mpich-hpc-devel" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="fa3f582b341fef1750365280f65231255566816004f8dc9a084c8a4a153faca6" name="hdf5_1_10_8-gnu-mpich-hpc-devel" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="cf65ab044beded1d9ce6f075337064a3aa74bab456fb48254e4868af786e2a7d" name="hdf5_1_10_8-gnu-mpich-hpc-devel-static" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="a39dd391ddb5ebbe4449baaf2b7e201af78cb751cd5d3ab3f8ad67f7df4d06f7" name="hdf5_1_10_8-gnu-mpich-hpc-devel-static" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="8dfe4ef8b78f07bb00af0fa0cbd29e224b6662319d59501e91aabf336db7b6fc" name="hdf5_1_10_8-gnu-mpich-hpc-devel-static" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="a37a276465c7b69ecd509e32162f2efa8655da38745522f34e3cfcc3e4e626fd" name="hdf5_1_10_8-gnu-mpich-hpc-devel-static" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="8da24728b7bbde15decb1d85aff7d204d18224920e64e3183163afeeb8175bd8" name="hdf5_1_10_8-gnu-mpich-hpc-module" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="560427c8d249d6b2eec0581a8d71c3a4ff4d5fb9c59bdd073d18977773d61d2f" name="hdf5_1_10_8-gnu-mpich-hpc-module" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="e6371f8b6088eb0de7cf3dcea31d76595361903b26327ff25ec0b204178bfa4a" name="hdf5_1_10_8-gnu-mpich-hpc-module" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="1539437cae0b1af916b63cdfd02a95cc4ecd8921cd54ce0151e3c0ca89ec194c" name="hdf5_1_10_8-gnu-mpich-hpc-module" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="78931791c144ea7fe526797f4b8340db0406825bb63da3c06d38cfd20fb5686a" name="hdf5_1_10_8-gnu-mvapich2-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="f5f8d9877f29cdc51aefd99a1484a6651b9c4510abe6362dbf022047be49c874" name="hdf5_1_10_8-gnu-mvapich2-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="f2b9193fd06f7450adc49bc06817fb47994a8650f177cabc50631939cd70e825" name="hdf5_1_10_8-gnu-mvapich2-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="ecd7c960701f77273c3d636bdb2d9a283bed5c230d57145ad13af4ba8d668176" name="hdf5_1_10_8-gnu-mvapich2-hpc" arch="src">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="38bd4424949bc2d01082188ab94694aac0378e8aee90f65d1f954c16c931d8b1" name="hdf5_1_10_8-gnu-mvapich2-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="f81129a9369100337ad8e20fcc5f9e24bb046bafd8ea4cdca193a7036eae5ddc" name="hdf5_1_10_8-gnu-mvapich2-hpc-devel" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="8067222551a39cc99f74d9bbcd90995f09ecf672930406c2c5ab9600be35d981" name="hdf5_1_10_8-gnu-mvapich2-hpc-devel" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="3c01047fb18e182a2e55f745f70a7063ba3fd12209a07c5bd1734d8421896e4f" name="hdf5_1_10_8-gnu-mvapich2-hpc-devel" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="cec4bca657e18a7540011689879c1b4eaed1bd656c90dcb90810d3360a46bf7a" name="hdf5_1_10_8-gnu-mvapich2-hpc-devel" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="7ab2caf3ec549559453b799475f85723d44301cd90eb52d624b015083bcdc8a4" name="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="1209c9ce863fa949cf490c9b5c7d83b81ae67b929076269baedea534ce2262e7" name="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="e11ef243205b80e6bb8078aa9a75e71d66dde22cc014eda4d9b7b1af37c34cc0" name="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="04d8d826d528a959bc2358aca2b258714734e81e3b9f75e48013ea4156ad102a" name="hdf5_1_10_8-gnu-mvapich2-hpc-devel-static" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="acf1d1aa2f8d0ed6db5679118d63eeb83c0385f07cbc63b15b3bfae18d124057" name="hdf5_1_10_8-gnu-mvapich2-hpc-module" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="1cdac2bd7a5d726c44fd56ac6f167c69c594a4467fe8e2bd1f993422b4b1b04b" name="hdf5_1_10_8-gnu-mvapich2-hpc-module" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="2c16ff860081a4f09d0fb00597a2f4baf6cfa050eed42a87d56fcc5e0591211c" name="hdf5_1_10_8-gnu-mvapich2-hpc-module" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="45bf9f23bd05634c68ee5cd255fa834d2cd958abd2d3f7066f59e19d1bf06902" name="hdf5_1_10_8-gnu-mvapich2-hpc-module" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="3ea5a21b82072be011d4f96ccdd283556034b881a1dd092e1cc993c1fd234a88" name="hdf5_1_10_8-gnu-openmpi3-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="fb58a46e3c7721907ac794d38749673333c7424716520fafe8e2859d970c6949" name="hdf5_1_10_8-gnu-openmpi3-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="b23bcd0ddafdcf9e0de6571b45ea3438fa0998d3c9b60d70722bb831f7872aeb" name="hdf5_1_10_8-gnu-openmpi3-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="197eceea65579c82514d182e29af5b8248d6da9c62ac02f08350d3e728e08f47" name="hdf5_1_10_8-gnu-openmpi3-hpc" arch="src">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="63ad4f8cff06e1749778f63a84d0c3aaa891aeb0ebebb94c2c4da6ab2517882e" name="hdf5_1_10_8-gnu-openmpi3-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="d0ecbbb196be72d17414a65ae1cc664f825fb92f036cd83c79b1471b65415a49" name="hdf5_1_10_8-gnu-openmpi3-hpc-devel" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="916fb6b11b3f45d02113865b2a2edc2689a737c9d9dbf5f95d29fa49be9db32a" name="hdf5_1_10_8-gnu-openmpi3-hpc-devel" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="0fd52a4cd92abbb6c933f633af0d01a9f6202308c82a25563a87b84f31f860f5" name="hdf5_1_10_8-gnu-openmpi3-hpc-devel" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="17450523f634f7392656b591e84c5376d03ec0ea60819a2f5e8f3eef11808123" name="hdf5_1_10_8-gnu-openmpi3-hpc-devel" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="9e7fefb4ce76c41fedf0715132589e4b48e3ec1669e19c54eeed0b05f90b8b7b" name="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="0dbd07d8f28c543b3661de05cfaf6488f7834a93ee6ec01759398d3a408da7aa" name="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="e39cfe9480ed85273ac591a67132cc387cb8e4204aed84b387dd7d9217396a17" name="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="17822b6ad08ad7ea3def075db8ed88a508c6bdcb07e2bd136c383672524c153b" name="hdf5_1_10_8-gnu-openmpi3-hpc-devel-static" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="71fdc2e5b77616b2f4b0b3eb0e0f7eb720c5a5c97fab2474f91e284f1e7fc42e" name="hdf5_1_10_8-gnu-openmpi3-hpc-module" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="b56e4e82ae8b7733f6c0e11eeb252414803da7c400633e0420b976fd8d67ac98" name="hdf5_1_10_8-gnu-openmpi3-hpc-module" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="c5c63595ef7194f0bd72b58b39b098d2a47cb0539c87daedfa0b3c064cd5c024" name="hdf5_1_10_8-gnu-openmpi3-hpc-module" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="83e9e16860138ba8a16bde86e4f36999eca7749f814ad2392cc80957797ce352" name="hdf5_1_10_8-gnu-openmpi3-hpc-module" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="a27d73ba211be67be7c56edffd90ceeab3a00c68032ee06ea556ee2ace4e7b50" name="hdf5_1_10_8-gnu-openmpi4-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="31177d1dec6f5619c3407a43550339c71bc1642e5e2564c9539370ae9a0916d5" name="hdf5_1_10_8-gnu-openmpi4-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="bd3f612eb83e0e605811f99c59e892b953a7dbb295d860a9c9607276e5e22edc" name="hdf5_1_10_8-gnu-openmpi4-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="daee3bc9ee68c79f644dff0390950b53386cf27b93c8ba8643806930a46c3ee6" name="hdf5_1_10_8-gnu-openmpi4-hpc" arch="src">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="5dbcb88d7de22c05e049cc0514d66fe49cda3ff61fa54406a1c7d06fe353d3fd" name="hdf5_1_10_8-gnu-openmpi4-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="e77f2e9b449875ed51349a4cc6aa0f23f53b2d3b540e4f9ef603764ee3f2db6e" name="hdf5_1_10_8-gnu-openmpi4-hpc-devel" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="d4cee75b908163eccb258380b67877878bdacf91c8d3951f7035945ebc6c0c3e" name="hdf5_1_10_8-gnu-openmpi4-hpc-devel" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="ad7c09acb7c062527e317baed1efd49d6016eb048ad86f7c3c83a3dab04b5115" name="hdf5_1_10_8-gnu-openmpi4-hpc-devel" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="ff6da0e49a9c9a1dfa0eda8ece45eae7c4f94d0356f067ffd882cf9a75fd830b" name="hdf5_1_10_8-gnu-openmpi4-hpc-devel" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="3151318934dac39fbbead806a5f2ab2c6eecf5b050d4fd4ca3922a8bc8f33112" name="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="e1d9e5cf40e25764b248cfed27199c93632e01d3218b0ba6ee2a091d2177485b" name="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="e47f8088bf7b54a7e1dcc0bc5956f80780902a7b94d57231d2bb17b8bbbc9048" name="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="266722ce7ed4263a11be4effbc461f1903ca555c16ea4b10989cac4d08cbb025" name="hdf5_1_10_8-gnu-openmpi4-hpc-devel-static" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="cf201f7ddaff29bd12bc10a3805a0925e72353ee1feae8d6bf31ba28c681b7c0" name="hdf5_1_10_8-gnu-openmpi4-hpc-module" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="45476a2bec87fdeda7eddf93de665f5b2cf7fc7781ec33d3473f6786a9ea4fa9" name="hdf5_1_10_8-gnu-openmpi4-hpc-module" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="517c6505f49c3fdfb45a8d71360635fc9df7a9b75b072165e1e6dce42679e3fd" name="hdf5_1_10_8-gnu-openmpi4-hpc-module" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="4673dface60a07f5adc9a83d1da0e28708a68d90b5bcefc1e15e2414bc5020c4" name="hdf5_1_10_8-gnu-openmpi4-hpc-module" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="74372bfad5ecebbb016d19b7ee96bdf0e6d646a29548662633f0691dd373db54" name="hdf5_1_10_8-hpc-examples" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="8e4ef3a37e0348021d67060ccd890dc6162963b5fff5a89a5ff706c017a48a60" name="hdf5_1_10_8-hpc-examples" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="a42ad5da7163eaa8f161c399b6b24fc6de0d5c57f6fb297c5a3711a91f2beeb2" name="hdf5_1_10_8-hpc-examples" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="0ff2e9f688439c18de3fbcc0e77e07ca6e8498bda7a9377a4ea7151a36e1a205" name="hdf5_1_10_8-hpc-examples" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="4042abeae93abce37c1c82524f08d993be421c663b506b9f11d0f5dd07723766" name="helm-mirror" arch="aarch64">
  <version epoch="0" ver="0.3.1" rel="150000.1.13.1"/>
  <changelog author="vzepedamas@suse.com" date="1539345600">[#]# v0.1.0
  [#]## Added
- `mirror [chart-repo] [target-folder]` this command takes a chart repository and downloads all
  chart found in there and downloads them to a local target folder.
- `mirror inspect-images [target]` this command takes the target and extracts all container
  images being used in it. It can be a single chart or a folder with multiple charts. If
  some values are not present to process the chart you can use `--ignore-errors` flag to
  render the charts and get the container image anyway. (this can output inconsistent data)
- Use Helm configuration settings for Chart Repository.
  - --ca-file
  - --cert-file
  - --key-file
  - --password
  - --username
- CI steps with [Travis CI](https://travis-ci.org) and Code Coverage with [CodeCov](https://codecov.io)
  (fate#326810)
  fix bsc#1116182</changelog>
  <changelog author="jengelh@inai.de" date="1541937600">- Use noun phrase in descriptions.</changelog>
  <changelog author="vzepedamas@suse.com" date="1543924800">[#]# v0.2.0
  [#]## Added
- `mirror inspect-images` flag `--output` usage updated, flag `--file-name` no longer needed.
  - `-o file=filename`
  - `-o json=filename.json`
  - `-o yaml=filename.yaml`
  - `-o skopeo=filename.yaml`
- `helm-mirror` has a new flag `--new-root-url` new root url of the chart repository.
  (eg: `https://mirror.local.lan/charts`). This will allow users to set the name of
  their mirror server when getting all the charts.
- `downloaded-index.yaml` file changes it's name to `index.yaml` to allow users to host quickly
  a mirror chart server.
  fix bsc#1117783</changelog>
  <changelog author="vzepedamas@suse.com" date="1544616000">upgrade to the latest go version so we build with a supported go</changelog>
  <changelog author="vzepedamas@suse.com" date="1545134400">- Update go requirements to &gt;= go1.11.3 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="vzepedamas@suse.com" date="1546603200">[#]# v0.2.1
- fixes empty archive files
- usage of ignore-errors flag
  fix bsc#1120762</changelog>
  <changelog author="dorf@suse.com" date="1562932800">[#]# v0.2.4
- updated release steps
- updated install script
  [#]# v0.2.3
- fixes issue while getting the latest release
  [#]# v0.2.2
- fixes issue with go module when installing with `helm plugin install`</changelog>
  <changelog author="vzepedamas@suse.com" date="1570449600">[#]# v0.3.0
- New features: get latest and specific charts
  - Getting charts now only downloads the altest versions of the charts.
  - The --all-versions flags allows to download all versions of the charts.
  - The flags --chart-name and --chart-version allow the user to only get the desired chart.
  fix bsc#1153244</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- added patches
  fix build [bsc#1197728]
  + helm-mirror-go-build-mod-vendor.patch
- version update to 0.3.1 [bsc#1156646]:
  * Update to use helm 2.16.1 to fix CVE-2019-18658
  * Update to use go modules</changelog>
</package>
<package pkgid="4992dd8bb0be0a00281b2546bb25469672ba0f996d909964a18c5be527ca1d0d" name="helm-mirror" arch="ppc64le">
  <version epoch="0" ver="0.3.1" rel="150000.1.13.1"/>
  <changelog author="vzepedamas@suse.com" date="1539345600">[#]# v0.1.0
  [#]## Added
- `mirror [chart-repo] [target-folder]` this command takes a chart repository and downloads all
  chart found in there and downloads them to a local target folder.
- `mirror inspect-images [target]` this command takes the target and extracts all container
  images being used in it. It can be a single chart or a folder with multiple charts. If
  some values are not present to process the chart you can use `--ignore-errors` flag to
  render the charts and get the container image anyway. (this can output inconsistent data)
- Use Helm configuration settings for Chart Repository.
  - --ca-file
  - --cert-file
  - --key-file
  - --password
  - --username
- CI steps with [Travis CI](https://travis-ci.org) and Code Coverage with [CodeCov](https://codecov.io)
  (fate#326810)
  fix bsc#1116182</changelog>
  <changelog author="jengelh@inai.de" date="1541937600">- Use noun phrase in descriptions.</changelog>
  <changelog author="vzepedamas@suse.com" date="1543924800">[#]# v0.2.0
  [#]## Added
- `mirror inspect-images` flag `--output` usage updated, flag `--file-name` no longer needed.
  - `-o file=filename`
  - `-o json=filename.json`
  - `-o yaml=filename.yaml`
  - `-o skopeo=filename.yaml`
- `helm-mirror` has a new flag `--new-root-url` new root url of the chart repository.
  (eg: `https://mirror.local.lan/charts`). This will allow users to set the name of
  their mirror server when getting all the charts.
- `downloaded-index.yaml` file changes it's name to `index.yaml` to allow users to host quickly
  a mirror chart server.
  fix bsc#1117783</changelog>
  <changelog author="vzepedamas@suse.com" date="1544616000">upgrade to the latest go version so we build with a supported go</changelog>
  <changelog author="vzepedamas@suse.com" date="1545134400">- Update go requirements to &gt;= go1.11.3 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="vzepedamas@suse.com" date="1546603200">[#]# v0.2.1
- fixes empty archive files
- usage of ignore-errors flag
  fix bsc#1120762</changelog>
  <changelog author="dorf@suse.com" date="1562932800">[#]# v0.2.4
- updated release steps
- updated install script
  [#]# v0.2.3
- fixes issue while getting the latest release
  [#]# v0.2.2
- fixes issue with go module when installing with `helm plugin install`</changelog>
  <changelog author="vzepedamas@suse.com" date="1570449600">[#]# v0.3.0
- New features: get latest and specific charts
  - Getting charts now only downloads the altest versions of the charts.
  - The --all-versions flags allows to download all versions of the charts.
  - The flags --chart-name and --chart-version allow the user to only get the desired chart.
  fix bsc#1153244</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- added patches
  fix build [bsc#1197728]
  + helm-mirror-go-build-mod-vendor.patch
- version update to 0.3.1 [bsc#1156646]:
  * Update to use helm 2.16.1 to fix CVE-2019-18658
  * Update to use go modules</changelog>
</package>
<package pkgid="6ecbcc6868a437c999b33b2613e407ff90a1bdba49c81462dbf9c887404f08b4" name="helm-mirror" arch="s390x">
  <version epoch="0" ver="0.3.1" rel="150000.1.13.1"/>
  <changelog author="vzepedamas@suse.com" date="1539345600">[#]# v0.1.0
  [#]## Added
- `mirror [chart-repo] [target-folder]` this command takes a chart repository and downloads all
  chart found in there and downloads them to a local target folder.
- `mirror inspect-images [target]` this command takes the target and extracts all container
  images being used in it. It can be a single chart or a folder with multiple charts. If
  some values are not present to process the chart you can use `--ignore-errors` flag to
  render the charts and get the container image anyway. (this can output inconsistent data)
- Use Helm configuration settings for Chart Repository.
  - --ca-file
  - --cert-file
  - --key-file
  - --password
  - --username
- CI steps with [Travis CI](https://travis-ci.org) and Code Coverage with [CodeCov](https://codecov.io)
  (fate#326810)
  fix bsc#1116182</changelog>
  <changelog author="jengelh@inai.de" date="1541937600">- Use noun phrase in descriptions.</changelog>
  <changelog author="vzepedamas@suse.com" date="1543924800">[#]# v0.2.0
  [#]## Added
- `mirror inspect-images` flag `--output` usage updated, flag `--file-name` no longer needed.
  - `-o file=filename`
  - `-o json=filename.json`
  - `-o yaml=filename.yaml`
  - `-o skopeo=filename.yaml`
- `helm-mirror` has a new flag `--new-root-url` new root url of the chart repository.
  (eg: `https://mirror.local.lan/charts`). This will allow users to set the name of
  their mirror server when getting all the charts.
- `downloaded-index.yaml` file changes it's name to `index.yaml` to allow users to host quickly
  a mirror chart server.
  fix bsc#1117783</changelog>
  <changelog author="vzepedamas@suse.com" date="1544616000">upgrade to the latest go version so we build with a supported go</changelog>
  <changelog author="vzepedamas@suse.com" date="1545134400">- Update go requirements to &gt;= go1.11.3 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="vzepedamas@suse.com" date="1546603200">[#]# v0.2.1
- fixes empty archive files
- usage of ignore-errors flag
  fix bsc#1120762</changelog>
  <changelog author="dorf@suse.com" date="1562932800">[#]# v0.2.4
- updated release steps
- updated install script
  [#]# v0.2.3
- fixes issue while getting the latest release
  [#]# v0.2.2
- fixes issue with go module when installing with `helm plugin install`</changelog>
  <changelog author="vzepedamas@suse.com" date="1570449600">[#]# v0.3.0
- New features: get latest and specific charts
  - Getting charts now only downloads the altest versions of the charts.
  - The --all-versions flags allows to download all versions of the charts.
  - The flags --chart-name and --chart-version allow the user to only get the desired chart.
  fix bsc#1153244</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- added patches
  fix build [bsc#1197728]
  + helm-mirror-go-build-mod-vendor.patch
- version update to 0.3.1 [bsc#1156646]:
  * Update to use helm 2.16.1 to fix CVE-2019-18658
  * Update to use go modules</changelog>
</package>
<package pkgid="07daff090d8599bedf22b7ceeb12283486eda960f2b330700c8fd7244d762936" name="helm-mirror" arch="src">
  <version epoch="0" ver="0.3.1" rel="150000.1.13.1"/>
  <changelog author="vzepedamas@suse.com" date="1539345600">[#]# v0.1.0
  [#]## Added
- `mirror [chart-repo] [target-folder]` this command takes a chart repository and downloads all
  chart found in there and downloads them to a local target folder.
- `mirror inspect-images [target]` this command takes the target and extracts all container
  images being used in it. It can be a single chart or a folder with multiple charts. If
  some values are not present to process the chart you can use `--ignore-errors` flag to
  render the charts and get the container image anyway. (this can output inconsistent data)
- Use Helm configuration settings for Chart Repository.
  - --ca-file
  - --cert-file
  - --key-file
  - --password
  - --username
- CI steps with [Travis CI](https://travis-ci.org) and Code Coverage with [CodeCov](https://codecov.io)
  (fate#326810)
  fix bsc#1116182</changelog>
  <changelog author="jengelh@inai.de" date="1541937600">- Use noun phrase in descriptions.</changelog>
  <changelog author="vzepedamas@suse.com" date="1543924800">[#]# v0.2.0
  [#]## Added
- `mirror inspect-images` flag `--output` usage updated, flag `--file-name` no longer needed.
  - `-o file=filename`
  - `-o json=filename.json`
  - `-o yaml=filename.yaml`
  - `-o skopeo=filename.yaml`
- `helm-mirror` has a new flag `--new-root-url` new root url of the chart repository.
  (eg: `https://mirror.local.lan/charts`). This will allow users to set the name of
  their mirror server when getting all the charts.
- `downloaded-index.yaml` file changes it's name to `index.yaml` to allow users to host quickly
  a mirror chart server.
  fix bsc#1117783</changelog>
  <changelog author="vzepedamas@suse.com" date="1544616000">upgrade to the latest go version so we build with a supported go</changelog>
  <changelog author="vzepedamas@suse.com" date="1545134400">- Update go requirements to &gt;= go1.11.3 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="vzepedamas@suse.com" date="1546603200">[#]# v0.2.1
- fixes empty archive files
- usage of ignore-errors flag
  fix bsc#1120762</changelog>
  <changelog author="dorf@suse.com" date="1562932800">[#]# v0.2.4
- updated release steps
- updated install script
  [#]# v0.2.3
- fixes issue while getting the latest release
  [#]# v0.2.2
- fixes issue with go module when installing with `helm plugin install`</changelog>
  <changelog author="vzepedamas@suse.com" date="1570449600">[#]# v0.3.0
- New features: get latest and specific charts
  - Getting charts now only downloads the altest versions of the charts.
  - The --all-versions flags allows to download all versions of the charts.
  - The flags --chart-name and --chart-version allow the user to only get the desired chart.
  fix bsc#1153244</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- added patches
  fix build [bsc#1197728]
  + helm-mirror-go-build-mod-vendor.patch
- version update to 0.3.1 [bsc#1156646]:
  * Update to use helm 2.16.1 to fix CVE-2019-18658
  * Update to use go modules</changelog>
</package>
<package pkgid="d8e063d07c2ee2fead4562e1f37fd9c9affdeca2471a8a1dec3b166e355ffa06" name="helm-mirror" arch="x86_64">
  <version epoch="0" ver="0.3.1" rel="150000.1.13.1"/>
  <changelog author="vzepedamas@suse.com" date="1539345600">[#]# v0.1.0
  [#]## Added
- `mirror [chart-repo] [target-folder]` this command takes a chart repository and downloads all
  chart found in there and downloads them to a local target folder.
- `mirror inspect-images [target]` this command takes the target and extracts all container
  images being used in it. It can be a single chart or a folder with multiple charts. If
  some values are not present to process the chart you can use `--ignore-errors` flag to
  render the charts and get the container image anyway. (this can output inconsistent data)
- Use Helm configuration settings for Chart Repository.
  - --ca-file
  - --cert-file
  - --key-file
  - --password
  - --username
- CI steps with [Travis CI](https://travis-ci.org) and Code Coverage with [CodeCov](https://codecov.io)
  (fate#326810)
  fix bsc#1116182</changelog>
  <changelog author="jengelh@inai.de" date="1541937600">- Use noun phrase in descriptions.</changelog>
  <changelog author="vzepedamas@suse.com" date="1543924800">[#]# v0.2.0
  [#]## Added
- `mirror inspect-images` flag `--output` usage updated, flag `--file-name` no longer needed.
  - `-o file=filename`
  - `-o json=filename.json`
  - `-o yaml=filename.yaml`
  - `-o skopeo=filename.yaml`
- `helm-mirror` has a new flag `--new-root-url` new root url of the chart repository.
  (eg: `https://mirror.local.lan/charts`). This will allow users to set the name of
  their mirror server when getting all the charts.
- `downloaded-index.yaml` file changes it's name to `index.yaml` to allow users to host quickly
  a mirror chart server.
  fix bsc#1117783</changelog>
  <changelog author="vzepedamas@suse.com" date="1544616000">upgrade to the latest go version so we build with a supported go</changelog>
  <changelog author="vzepedamas@suse.com" date="1545134400">- Update go requirements to &gt;= go1.11.3 to fix
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service</changelog>
  <changelog author="vzepedamas@suse.com" date="1546603200">[#]# v0.2.1
- fixes empty archive files
- usage of ignore-errors flag
  fix bsc#1120762</changelog>
  <changelog author="dorf@suse.com" date="1562932800">[#]# v0.2.4
- updated release steps
- updated install script
  [#]# v0.2.3
- fixes issue while getting the latest release
  [#]# v0.2.2
- fixes issue with go module when installing with `helm plugin install`</changelog>
  <changelog author="vzepedamas@suse.com" date="1570449600">[#]# v0.3.0
- New features: get latest and specific charts
  - Getting charts now only downloads the altest versions of the charts.
  - The --all-versions flags allows to download all versions of the charts.
  - The flags --chart-name and --chart-version allow the user to only get the desired chart.
  fix bsc#1153244</changelog>
  <changelog author="pgajdos@suse.com" date="1651147200">- added patches
  fix build [bsc#1197728]
  + helm-mirror-go-build-mod-vendor.patch
- version update to 0.3.1 [bsc#1156646]:
  * Update to use helm 2.16.1 to fix CVE-2019-18658
  * Update to use go modules</changelog>
</package>
<package pkgid="92f9d116cd20ad7b70350e814b5e8673468263e3029a5c990c5789230d1cdf74" name="hp-drive-guard" arch="aarch64">
  <version epoch="0" ver="0.3.12" rel="150000.4.2.1"/>
  <changelog author="tiwai@suse.de" date="1283342400">- Initial version for SLED11-SP1-Update: verion 0.3.12, including
  translations (bnc#633806)</changelog>
  <changelog author="tiwai@suse.de" date="1283428800">- add missing prereq for insserv
- don't activate daemon as default (bnc#633806)</changelog>
  <changelog author="tiwai@suse.de" date="1283428801">- fix build with debuginfo (filelist fixed)
- removed unnecessary post and prereq</changelog>
  <changelog author="tiwai@suse.de" date="1284465600">- fix misc compile warnings due to wrong printf format and unused
  variables / functions</changelog>
  <changelog author="tiwai@suse.de" date="1309262400">- Fix build with new libnotify on FACTORY</changelog>
  <changelog author="tiwai@suse.de" date="1311940800">- Convert to new polkit-1 (bnc#708992)
- Use gtk3 for FACTORY</changelog>
  <changelog author="tiwai@suse.de" date="1352462400">- Add systemd unit file</changelog>
  <changelog author="dimstar@opensuse.org" date="1489579200">- Correctly install the systemd service as a .service file (not
  .spec)
- Drop the sysV script on systemd setups
- Only call insserv on sysV systems.</changelog>
  <changelog author="fcrozat@suse.com" date="1505131200">- Fix spelling of SUSE and replace old email address.</changelog>
</package>
<package pkgid="705a7e067907ea12cdfb8a2502a3c4f3d820ace58938183db2b85d3db528b042" name="hp-drive-guard" arch="ppc64le">
  <version epoch="0" ver="0.3.12" rel="150000.4.2.1"/>
  <changelog author="tiwai@suse.de" date="1283342400">- Initial version for SLED11-SP1-Update: verion 0.3.12, including
  translations (bnc#633806)</changelog>
  <changelog author="tiwai@suse.de" date="1283428800">- add missing prereq for insserv
- don't activate daemon as default (bnc#633806)</changelog>
  <changelog author="tiwai@suse.de" date="1283428801">- fix build with debuginfo (filelist fixed)
- removed unnecessary post and prereq</changelog>
  <changelog author="tiwai@suse.de" date="1284465600">- fix misc compile warnings due to wrong printf format and unused
  variables / functions</changelog>
  <changelog author="tiwai@suse.de" date="1309262400">- Fix build with new libnotify on FACTORY</changelog>
  <changelog author="tiwai@suse.de" date="1311940800">- Convert to new polkit-1 (bnc#708992)
- Use gtk3 for FACTORY</changelog>
  <changelog author="tiwai@suse.de" date="1352462400">- Add systemd unit file</changelog>
  <changelog author="dimstar@opensuse.org" date="1489579200">- Correctly install the systemd service as a .service file (not
  .spec)
- Drop the sysV script on systemd setups
- Only call insserv on sysV systems.</changelog>
  <changelog author="fcrozat@suse.com" date="1505131200">- Fix spelling of SUSE and replace old email address.</changelog>
</package>
<package pkgid="b688035d347419bf9513f64f0472d4df1d018633cc7e260f84ebf77416697fc5" name="hp-drive-guard" arch="s390x">
  <version epoch="0" ver="0.3.12" rel="150000.4.2.1"/>
  <changelog author="tiwai@suse.de" date="1283342400">- Initial version for SLED11-SP1-Update: verion 0.3.12, including
  translations (bnc#633806)</changelog>
  <changelog author="tiwai@suse.de" date="1283428800">- add missing prereq for insserv
- don't activate daemon as default (bnc#633806)</changelog>
  <changelog author="tiwai@suse.de" date="1283428801">- fix build with debuginfo (filelist fixed)
- removed unnecessary post and prereq</changelog>
  <changelog author="tiwai@suse.de" date="1284465600">- fix misc compile warnings due to wrong printf format and unused
  variables / functions</changelog>
  <changelog author="tiwai@suse.de" date="1309262400">- Fix build with new libnotify on FACTORY</changelog>
  <changelog author="tiwai@suse.de" date="1311940800">- Convert to new polkit-1 (bnc#708992)
- Use gtk3 for FACTORY</changelog>
  <changelog author="tiwai@suse.de" date="1352462400">- Add systemd unit file</changelog>
  <changelog author="dimstar@opensuse.org" date="1489579200">- Correctly install the systemd service as a .service file (not
  .spec)
- Drop the sysV script on systemd setups
- Only call insserv on sysV systems.</changelog>
  <changelog author="fcrozat@suse.com" date="1505131200">- Fix spelling of SUSE and replace old email address.</changelog>
</package>
<package pkgid="4176760df0e348484f584c35adc0a51f193f1506ae6b1c6d44e5cf66faba6a87" name="hp-drive-guard" arch="src">
  <version epoch="0" ver="0.3.12" rel="150000.4.2.1"/>
  <changelog author="tiwai@suse.de" date="1283342400">- Initial version for SLED11-SP1-Update: verion 0.3.12, including
  translations (bnc#633806)</changelog>
  <changelog author="tiwai@suse.de" date="1283428800">- add missing prereq for insserv
- don't activate daemon as default (bnc#633806)</changelog>
  <changelog author="tiwai@suse.de" date="1283428801">- fix build with debuginfo (filelist fixed)
- removed unnecessary post and prereq</changelog>
  <changelog author="tiwai@suse.de" date="1284465600">- fix misc compile warnings due to wrong printf format and unused
  variables / functions</changelog>
  <changelog author="tiwai@suse.de" date="1309262400">- Fix build with new libnotify on FACTORY</changelog>
  <changelog author="tiwai@suse.de" date="1311940800">- Convert to new polkit-1 (bnc#708992)
- Use gtk3 for FACTORY</changelog>
  <changelog author="tiwai@suse.de" date="1352462400">- Add systemd unit file</changelog>
  <changelog author="dimstar@opensuse.org" date="1489579200">- Correctly install the systemd service as a .service file (not
  .spec)
- Drop the sysV script on systemd setups
- Only call insserv on sysV systems.</changelog>
  <changelog author="fcrozat@suse.com" date="1505131200">- Fix spelling of SUSE and replace old email address.</changelog>
</package>
<package pkgid="033d14ef84fc64e5e4b538a14d74d6e559c012afaf584d3e9dc929e8c5f28b22" name="hp-drive-guard" arch="x86_64">
  <version epoch="0" ver="0.3.12" rel="150000.4.2.1"/>
  <changelog author="tiwai@suse.de" date="1283342400">- Initial version for SLED11-SP1-Update: verion 0.3.12, including
  translations (bnc#633806)</changelog>
  <changelog author="tiwai@suse.de" date="1283428800">- add missing prereq for insserv
- don't activate daemon as default (bnc#633806)</changelog>
  <changelog author="tiwai@suse.de" date="1283428801">- fix build with debuginfo (filelist fixed)
- removed unnecessary post and prereq</changelog>
  <changelog author="tiwai@suse.de" date="1284465600">- fix misc compile warnings due to wrong printf format and unused
  variables / functions</changelog>
  <changelog author="tiwai@suse.de" date="1309262400">- Fix build with new libnotify on FACTORY</changelog>
  <changelog author="tiwai@suse.de" date="1311940800">- Convert to new polkit-1 (bnc#708992)
- Use gtk3 for FACTORY</changelog>
  <changelog author="tiwai@suse.de" date="1352462400">- Add systemd unit file</changelog>
  <changelog author="dimstar@opensuse.org" date="1489579200">- Correctly install the systemd service as a .service file (not
  .spec)
- Drop the sysV script on systemd setups
- Only call insserv on sysV systems.</changelog>
  <changelog author="fcrozat@suse.com" date="1505131200">- Fix spelling of SUSE and replace old email address.</changelog>
</package>
<package pkgid="70e259bd97ff5d1862a19ed458d075e8b76d6207c47bcb88c8fea5a65de13166" name="hunspell" arch="aarch64">
  <version epoch="0" ver="1.6.2" rel="150000.3.11.1"/>
  <changelog author="tchvatal@suse.com" date="1459771200">- Version update to 1.3.4:
  * Various updates to the buildsystem
  * Various werror bugfixes
  * Loads of coverity fixes
- Add patch to build with grep 2.24:
  * hunspell-grep2.24.patch
- Remove upstreamed patch:
  * hunspell-emacs-utf8.patch
- Do not search for translations - broken automake from upstream
  * Not worth fixing only bit italian and mostly hungarian translations
    for cli anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1641470400">- suggests english dictionary [bsc#1193627]</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- requires english dictionary [bsc#1199209]</changelog>
</package>
<package pkgid="03bb314e8a6ff411618be34a64f9dbee8e58bccdf16abdd16fe351715da1535c" name="hunspell" arch="ppc64le">
  <version epoch="0" ver="1.6.2" rel="150000.3.11.1"/>
  <changelog author="tchvatal@suse.com" date="1459771200">- Version update to 1.3.4:
  * Various updates to the buildsystem
  * Various werror bugfixes
  * Loads of coverity fixes
- Add patch to build with grep 2.24:
  * hunspell-grep2.24.patch
- Remove upstreamed patch:
  * hunspell-emacs-utf8.patch
- Do not search for translations - broken automake from upstream
  * Not worth fixing only bit italian and mostly hungarian translations
    for cli anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1641470400">- suggests english dictionary [bsc#1193627]</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- requires english dictionary [bsc#1199209]</changelog>
</package>
<package pkgid="1b180c5b233a62bee3fcf76c145d0ee163caa5dc92cb35cccc9f2eeb50b64c73" name="hunspell" arch="s390x">
  <version epoch="0" ver="1.6.2" rel="150000.3.11.1"/>
  <changelog author="tchvatal@suse.com" date="1459771200">- Version update to 1.3.4:
  * Various updates to the buildsystem
  * Various werror bugfixes
  * Loads of coverity fixes
- Add patch to build with grep 2.24:
  * hunspell-grep2.24.patch
- Remove upstreamed patch:
  * hunspell-emacs-utf8.patch
- Do not search for translations - broken automake from upstream
  * Not worth fixing only bit italian and mostly hungarian translations
    for cli anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1641470400">- suggests english dictionary [bsc#1193627]</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- requires english dictionary [bsc#1199209]</changelog>
</package>
<package pkgid="a52e3020fdaf4e0db1590336ee9c6357fe94d3218addce312b1ddc3953016cd0" name="hunspell" arch="src">
  <version epoch="0" ver="1.6.2" rel="150000.3.11.1"/>
  <changelog author="cfarrell@suse.com" date="1323864000">- license update: (GPL-2.0+ or LGPL-2.1+ or MPL-1.1+) and LGPL-2.1+
  SPDX syntax describing the COPYING file statesments</changelog>
  <changelog author="pgajdos@suse.com" date="1346673600">- added /usr/lib64/libhunspell.so on request from egdfree@opensuse.org</changelog>
  <changelog author="mmeister@suse.com" date="1364472000">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="schwab@linux-m68k.org" date="1392984000">- hashmgr-add-word.patch: fix allocation error in HashMgr::add_word (from
  http://sourceforge.net/p/hunspell/patches/49/)</changelog>
  <changelog author="tchvatal@suse.com" date="1399291200">- Cleanup with spec-cleaner.
- Do not provide static package. Nothing should staticaly link here
  anyway. With this also remove libtool archive.
- Explicitely disable rpath and name all switches.
- Autoreconf the sources after the patching. Also makes aarch64
  happy this way.
- Paralelize the check phase, no need to run it in just one thread.
- Added patches:
  * hunspell-1.3.2-static-lib.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1403524800">- updated to 1.3.3:
  - OpenDocument (ODF and Flat ODF) support (ODF needs unzip program)
  - various bug fixes
- removed patches:
  * hashmgr-add-word.patch (upstreamed)
  * hunspell-1.3.2-static-lib.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1406894400">- make hunspell work with emacs and utf-8 [bnc#883505]
- added patches:
  * hunspell-emacs-utf8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1459771200">- Version update to 1.3.4:
  * Various updates to the buildsystem
  * Various werror bugfixes
  * Loads of coverity fixes
- Add patch to build with grep 2.24:
  * hunspell-grep2.24.patch
- Remove upstreamed patch:
  * hunspell-emacs-utf8.patch
- Do not search for translations - broken automake from upstream
  * Not worth fixing only bit italian and mostly hungarian translations
    for cli anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1641470400">- suggests english dictionary [bsc#1193627]</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- requires english dictionary [bsc#1199209]</changelog>
</package>
<package pkgid="2f71811ed113a2bea89ae7442adb176f665135cf54419d028a35cf9cfb1dbfc6" name="hunspell" arch="x86_64">
  <version epoch="0" ver="1.6.2" rel="150000.3.11.1"/>
  <changelog author="tchvatal@suse.com" date="1459771200">- Version update to 1.3.4:
  * Various updates to the buildsystem
  * Various werror bugfixes
  * Loads of coverity fixes
- Add patch to build with grep 2.24:
  * hunspell-grep2.24.patch
- Remove upstreamed patch:
  * hunspell-emacs-utf8.patch
- Do not search for translations - broken automake from upstream
  * Not worth fixing only bit italian and mostly hungarian translations
    for cli anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1641470400">- suggests english dictionary [bsc#1193627]</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- requires english dictionary [bsc#1199209]</changelog>
</package>
<package pkgid="dc64acfb891877722f3c76be57049275afeab4204a0fa957702b9f6119508aae" name="hunspell-devel" arch="aarch64">
  <version epoch="0" ver="1.6.2" rel="150000.3.11.1"/>
  <changelog author="tchvatal@suse.com" date="1459771200">- Version update to 1.3.4:
  * Various updates to the buildsystem
  * Various werror bugfixes
  * Loads of coverity fixes
- Add patch to build with grep 2.24:
  * hunspell-grep2.24.patch
- Remove upstreamed patch:
  * hunspell-emacs-utf8.patch
- Do not search for translations - broken automake from upstream
  * Not worth fixing only bit italian and mostly hungarian translations
    for cli anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1641470400">- suggests english dictionary [bsc#1193627]</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- requires english dictionary [bsc#1199209]</changelog>
</package>
<package pkgid="dd68a93567b0d7dfd3871db3ebc13e8772111522b834d31d040556f41e616f32" name="hunspell-devel" arch="ppc64le">
  <version epoch="0" ver="1.6.2" rel="150000.3.11.1"/>
  <changelog author="tchvatal@suse.com" date="1459771200">- Version update to 1.3.4:
  * Various updates to the buildsystem
  * Various werror bugfixes
  * Loads of coverity fixes
- Add patch to build with grep 2.24:
  * hunspell-grep2.24.patch
- Remove upstreamed patch:
  * hunspell-emacs-utf8.patch
- Do not search for translations - broken automake from upstream
  * Not worth fixing only bit italian and mostly hungarian translations
    for cli anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1641470400">- suggests english dictionary [bsc#1193627]</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- requires english dictionary [bsc#1199209]</changelog>
</package>
<package pkgid="2cfd0549665767a4812fbf2a99bc544fc6b0c6b6edef32b4b18d9f36f554a993" name="hunspell-devel" arch="s390x">
  <version epoch="0" ver="1.6.2" rel="150000.3.11.1"/>
  <changelog author="tchvatal@suse.com" date="1459771200">- Version update to 1.3.4:
  * Various updates to the buildsystem
  * Various werror bugfixes
  * Loads of coverity fixes
- Add patch to build with grep 2.24:
  * hunspell-grep2.24.patch
- Remove upstreamed patch:
  * hunspell-emacs-utf8.patch
- Do not search for translations - broken automake from upstream
  * Not worth fixing only bit italian and mostly hungarian translations
    for cli anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1641470400">- suggests english dictionary [bsc#1193627]</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- requires english dictionary [bsc#1199209]</changelog>
</package>
<package pkgid="e09509d546ce5f910033d568019e466a6bda7e0441cba107adff2cd9821ff3d9" name="hunspell-devel" arch="x86_64">
  <version epoch="0" ver="1.6.2" rel="150000.3.11.1"/>
  <changelog author="tchvatal@suse.com" date="1459771200">- Version update to 1.3.4:
  * Various updates to the buildsystem
  * Various werror bugfixes
  * Loads of coverity fixes
- Add patch to build with grep 2.24:
  * hunspell-grep2.24.patch
- Remove upstreamed patch:
  * hunspell-emacs-utf8.patch
- Do not search for translations - broken automake from upstream
  * Not worth fixing only bit italian and mostly hungarian translations
    for cli anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1641470400">- suggests english dictionary [bsc#1193627]</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- requires english dictionary [bsc#1199209]</changelog>
</package>
<package pkgid="30f2ec35a95f7be2eb15dcf4e66cbfcbfc189b69a91a3620233e3f2720b785be" name="hunspell-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.6.2" rel="150000.3.11.1"/>
  <changelog author="tchvatal@suse.com" date="1459771200">- Version update to 1.3.4:
  * Various updates to the buildsystem
  * Various werror bugfixes
  * Loads of coverity fixes
- Add patch to build with grep 2.24:
  * hunspell-grep2.24.patch
- Remove upstreamed patch:
  * hunspell-emacs-utf8.patch
- Do not search for translations - broken automake from upstream
  * Not worth fixing only bit italian and mostly hungarian translations
    for cli anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1641470400">- suggests english dictionary [bsc#1193627]</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- requires english dictionary [bsc#1199209]</changelog>
</package>
<package pkgid="ca428f16c29b0c675148e23582d03f764fb1510fdb81836b499fd02b0b04569f" name="hunspell-tools" arch="aarch64">
  <version epoch="0" ver="1.6.2" rel="150000.3.11.1"/>
  <changelog author="tchvatal@suse.com" date="1459771200">- Version update to 1.3.4:
  * Various updates to the buildsystem
  * Various werror bugfixes
  * Loads of coverity fixes
- Add patch to build with grep 2.24:
  * hunspell-grep2.24.patch
- Remove upstreamed patch:
  * hunspell-emacs-utf8.patch
- Do not search for translations - broken automake from upstream
  * Not worth fixing only bit italian and mostly hungarian translations
    for cli anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1641470400">- suggests english dictionary [bsc#1193627]</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- requires english dictionary [bsc#1199209]</changelog>
</package>
<package pkgid="92a980598cbce2a5148f9baf045db29ef0f1c29464f7593a5859376336dc5c8d" name="hunspell-tools" arch="ppc64le">
  <version epoch="0" ver="1.6.2" rel="150000.3.11.1"/>
  <changelog author="tchvatal@suse.com" date="1459771200">- Version update to 1.3.4:
  * Various updates to the buildsystem
  * Various werror bugfixes
  * Loads of coverity fixes
- Add patch to build with grep 2.24:
  * hunspell-grep2.24.patch
- Remove upstreamed patch:
  * hunspell-emacs-utf8.patch
- Do not search for translations - broken automake from upstream
  * Not worth fixing only bit italian and mostly hungarian translations
    for cli anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1641470400">- suggests english dictionary [bsc#1193627]</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- requires english dictionary [bsc#1199209]</changelog>
</package>
<package pkgid="9d8e742d7328a53b9ce6da0fe725fd3722d0015461a1a801ded994e38a7c5cf8" name="hunspell-tools" arch="s390x">
  <version epoch="0" ver="1.6.2" rel="150000.3.11.1"/>
  <changelog author="tchvatal@suse.com" date="1459771200">- Version update to 1.3.4:
  * Various updates to the buildsystem
  * Various werror bugfixes
  * Loads of coverity fixes
- Add patch to build with grep 2.24:
  * hunspell-grep2.24.patch
- Remove upstreamed patch:
  * hunspell-emacs-utf8.patch
- Do not search for translations - broken automake from upstream
  * Not worth fixing only bit italian and mostly hungarian translations
    for cli anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1641470400">- suggests english dictionary [bsc#1193627]</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- requires english dictionary [bsc#1199209]</changelog>
</package>
<package pkgid="8a3a4e6d6f751186ccd03b54bf1aa91fac9c304402800fd02d19ec28653268a6" name="hunspell-tools" arch="x86_64">
  <version epoch="0" ver="1.6.2" rel="150000.3.11.1"/>
  <changelog author="tchvatal@suse.com" date="1459771200">- Version update to 1.3.4:
  * Various updates to the buildsystem
  * Various werror bugfixes
  * Loads of coverity fixes
- Add patch to build with grep 2.24:
  * hunspell-grep2.24.patch
- Remove upstreamed patch:
  * hunspell-emacs-utf8.patch
- Do not search for translations - broken automake from upstream
  * Not worth fixing only bit italian and mostly hungarian translations
    for cli anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1641470400">- suggests english dictionary [bsc#1193627]</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- requires english dictionary [bsc#1199209]</changelog>
</package>
<package pkgid="9bafbed5a5735269f8e8247e1c96767152f7bb826c7d389d1ff31afeac9c4ae7" name="hwdata" arch="noarch">
  <version epoch="0" ver="0.358" rel="150000.3.45.1"/>
  <changelog author="mpluskal@suse.com" date="1602158400">- Update to version 0.340:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1604577600">- Update to version 0.341:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1607342400">- Update to version 0.342:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1609934400">- Update to version 0.343:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1610020800">- Add merge-pciids.pl to fully duplicate behavior of pciutils-ids
  * Resolves SLE issue bsc#1180422 bsc#1180482</changelog>
  <changelog author="mpluskal@suse.com" date="1612267200">- Update to version 0.344:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1614600000">- Update to version 0.345:
  + Updated pci, usb and vendor ids.
  + Resolves boo#1182482 jsc#SLE-13791 bnc#1170160</changelog>
  <changelog author="mpluskal@suse.com" date="1617710400">- Update to version 0.346:
  + Updated pci, usb and vendor ids.
  + Resolves boo#1182482 jsc#SLE-13791 bnc#1170160</changelog>
  <changelog author="mpluskal@suse.com" date="1620302400">- Update to version 0.347 (bsc#1185697):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1622635200">- Update to version 0.348 (bsc#1186749):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1625745600">- Update to version 0.349 (bsc#1187948):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1627992000">- Update to version 0.350 (bsc#1189005):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1630584000">- Update to version 0.351 (bsc#1190091):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1633521600">- Update to version 0.352 (bsc#1191375):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1636632000">- Update to version 0.353 (bsc#1192587):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1638878400">- Update to version 0.354:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1641384000">- Update to version 0.355 (bsc#1194338):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1644321600">- Update to version 0.356:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1646740800">- Update to version 0.357 (bsc#1196332):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1650369600">- Update to version 0.358 (bsc#1196332):
  + Updated pci, usb and vendor ids.</changelog>
</package>
<package pkgid="723116f77792765474bd2acb55ead982d762c41503e8793f513c451230ac020c" name="hwdata" arch="src">
  <version epoch="0" ver="0.358" rel="150000.3.45.1"/>
  <changelog author="mpluskal@suse.com" date="1602158400">- Update to version 0.340:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1604577600">- Update to version 0.341:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1607342400">- Update to version 0.342:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1609934400">- Update to version 0.343:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1610020800">- Add merge-pciids.pl to fully duplicate behavior of pciutils-ids
  * Resolves SLE issue bsc#1180422 bsc#1180482</changelog>
  <changelog author="mpluskal@suse.com" date="1612267200">- Update to version 0.344:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1614600000">- Update to version 0.345:
  + Updated pci, usb and vendor ids.
  + Resolves boo#1182482 jsc#SLE-13791 bnc#1170160</changelog>
  <changelog author="mpluskal@suse.com" date="1617710400">- Update to version 0.346:
  + Updated pci, usb and vendor ids.
  + Resolves boo#1182482 jsc#SLE-13791 bnc#1170160</changelog>
  <changelog author="mpluskal@suse.com" date="1620302400">- Update to version 0.347 (bsc#1185697):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1622635200">- Update to version 0.348 (bsc#1186749):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1625745600">- Update to version 0.349 (bsc#1187948):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1627992000">- Update to version 0.350 (bsc#1189005):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1630584000">- Update to version 0.351 (bsc#1190091):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1633521600">- Update to version 0.352 (bsc#1191375):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1636632000">- Update to version 0.353 (bsc#1192587):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1638878400">- Update to version 0.354:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1641384000">- Update to version 0.355 (bsc#1194338):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1644321600">- Update to version 0.356:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1646740800">- Update to version 0.357 (bsc#1196332):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1650369600">- Update to version 0.358 (bsc#1196332):
  + Updated pci, usb and vendor ids.</changelog>
</package>
<package pkgid="9366966bdcd41503370ffc5329875aaafccb818815f74824699bbe844589ba0c" name="icewm" arch="aarch64">
  <version epoch="0" ver="1.4.2" rel="150000.7.15.1"/>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="qkzhu@suse.com" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="yfjiang@suse.com" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="yfjiang@suse.com" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
  <changelog author="meissner@suse.com" date="1596024000">- removed conflict on theming to make the transition work (bsc#1173441 bsc#1170420)</changelog>
  <changelog author="yfjiang@suse.com" date="1649764800">- Add icewm-build-with-glib2-ver-gt-2.67.3.patch:
  A later glib2 update will cause icewm failed to build by including
  gdk-pixbuf-xlib with extern "C" annotation:
  https://gitlab.gnome.org/GNOME/glib/-/commit/51003d409bb4b6c9a8540f70b92f8045abc4f0c9?merge_request_iid=1715
  The patch aims to remove the annotation caused the issue
  (bsc#1197729).</changelog>
</package>
<package pkgid="76fe56d049608c9b7a2daeb817d5730452de07999b4800e70a4bd02b3debc120" name="icewm" arch="ppc64le">
  <version epoch="0" ver="1.4.2" rel="150000.7.15.1"/>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="qkzhu@suse.com" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="yfjiang@suse.com" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="yfjiang@suse.com" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
  <changelog author="meissner@suse.com" date="1596024000">- removed conflict on theming to make the transition work (bsc#1173441 bsc#1170420)</changelog>
  <changelog author="yfjiang@suse.com" date="1649764800">- Add icewm-build-with-glib2-ver-gt-2.67.3.patch:
  A later glib2 update will cause icewm failed to build by including
  gdk-pixbuf-xlib with extern "C" annotation:
  https://gitlab.gnome.org/GNOME/glib/-/commit/51003d409bb4b6c9a8540f70b92f8045abc4f0c9?merge_request_iid=1715
  The patch aims to remove the annotation caused the issue
  (bsc#1197729).</changelog>
</package>
<package pkgid="5b6243f5deec2148e908e55a11e86a501927348518c62128aa280b52d0b0818d" name="icewm" arch="s390x">
  <version epoch="0" ver="1.4.2" rel="150000.7.15.1"/>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="qkzhu@suse.com" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="yfjiang@suse.com" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="yfjiang@suse.com" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
  <changelog author="meissner@suse.com" date="1596024000">- removed conflict on theming to make the transition work (bsc#1173441 bsc#1170420)</changelog>
  <changelog author="yfjiang@suse.com" date="1649764800">- Add icewm-build-with-glib2-ver-gt-2.67.3.patch:
  A later glib2 update will cause icewm failed to build by including
  gdk-pixbuf-xlib with extern "C" annotation:
  https://gitlab.gnome.org/GNOME/glib/-/commit/51003d409bb4b6c9a8540f70b92f8045abc4f0c9?merge_request_iid=1715
  The patch aims to remove the annotation caused the issue
  (bsc#1197729).</changelog>
</package>
<package pkgid="b4b20d1495b69bbcd1df7974d85072dceb513544f0c73a358b25105e309675d8" name="icewm" arch="src">
  <version epoch="0" ver="1.4.2" rel="150000.7.15.1"/>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="qkzhu@suse.com" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="yfjiang@suse.com" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="yfjiang@suse.com" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
  <changelog author="meissner@suse.com" date="1596024000">- removed conflict on theming to make the transition work (bsc#1173441 bsc#1170420)</changelog>
  <changelog author="yfjiang@suse.com" date="1649764800">- Add icewm-build-with-glib2-ver-gt-2.67.3.patch:
  A later glib2 update will cause icewm failed to build by including
  gdk-pixbuf-xlib with extern "C" annotation:
  https://gitlab.gnome.org/GNOME/glib/-/commit/51003d409bb4b6c9a8540f70b92f8045abc4f0c9?merge_request_iid=1715
  The patch aims to remove the annotation caused the issue
  (bsc#1197729).</changelog>
</package>
<package pkgid="dab4f74765a55f3b450e07c7c31d5ae40fbdd547d8503d3d09bf2877d61d4b40" name="icewm" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="150000.7.15.1"/>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="qkzhu@suse.com" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="yfjiang@suse.com" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="yfjiang@suse.com" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
  <changelog author="meissner@suse.com" date="1596024000">- removed conflict on theming to make the transition work (bsc#1173441 bsc#1170420)</changelog>
  <changelog author="yfjiang@suse.com" date="1649764800">- Add icewm-build-with-glib2-ver-gt-2.67.3.patch:
  A later glib2 update will cause icewm failed to build by including
  gdk-pixbuf-xlib with extern "C" annotation:
  https://gitlab.gnome.org/GNOME/glib/-/commit/51003d409bb4b6c9a8540f70b92f8045abc4f0c9?merge_request_iid=1715
  The patch aims to remove the annotation caused the issue
  (bsc#1197729).</changelog>
</package>
<package pkgid="fde2a968aaaf232d2915e8c0ba3d43f31ff81a1248aacf1a1c11518f183194c2" name="icewm-config-upstream" arch="noarch">
  <version epoch="0" ver="1.4.2" rel="150000.7.15.1"/>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="qkzhu@suse.com" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="yfjiang@suse.com" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="yfjiang@suse.com" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
  <changelog author="meissner@suse.com" date="1596024000">- removed conflict on theming to make the transition work (bsc#1173441 bsc#1170420)</changelog>
  <changelog author="yfjiang@suse.com" date="1649764800">- Add icewm-build-with-glib2-ver-gt-2.67.3.patch:
  A later glib2 update will cause icewm failed to build by including
  gdk-pixbuf-xlib with extern "C" annotation:
  https://gitlab.gnome.org/GNOME/glib/-/commit/51003d409bb4b6c9a8540f70b92f8045abc4f0c9?merge_request_iid=1715
  The patch aims to remove the annotation caused the issue
  (bsc#1197729).</changelog>
</package>
<package pkgid="fb32e0ab5be7dfd4d01cfa3a6233783e4bc2803b9fe363d91270fe0d672dacd6" name="icewm-default" arch="aarch64">
  <version epoch="0" ver="1.4.2" rel="150000.7.15.1"/>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="qkzhu@suse.com" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="yfjiang@suse.com" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="yfjiang@suse.com" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
  <changelog author="meissner@suse.com" date="1596024000">- removed conflict on theming to make the transition work (bsc#1173441 bsc#1170420)</changelog>
  <changelog author="yfjiang@suse.com" date="1649764800">- Add icewm-build-with-glib2-ver-gt-2.67.3.patch:
  A later glib2 update will cause icewm failed to build by including
  gdk-pixbuf-xlib with extern "C" annotation:
  https://gitlab.gnome.org/GNOME/glib/-/commit/51003d409bb4b6c9a8540f70b92f8045abc4f0c9?merge_request_iid=1715
  The patch aims to remove the annotation caused the issue
  (bsc#1197729).</changelog>
</package>
<package pkgid="eabb7085830e2ada23c78775c9b966b321de60446783bd9ea829876fe96da9d8" name="icewm-default" arch="ppc64le">
  <version epoch="0" ver="1.4.2" rel="150000.7.15.1"/>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="qkzhu@suse.com" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="yfjiang@suse.com" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="yfjiang@suse.com" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
  <changelog author="meissner@suse.com" date="1596024000">- removed conflict on theming to make the transition work (bsc#1173441 bsc#1170420)</changelog>
  <changelog author="yfjiang@suse.com" date="1649764800">- Add icewm-build-with-glib2-ver-gt-2.67.3.patch:
  A later glib2 update will cause icewm failed to build by including
  gdk-pixbuf-xlib with extern "C" annotation:
  https://gitlab.gnome.org/GNOME/glib/-/commit/51003d409bb4b6c9a8540f70b92f8045abc4f0c9?merge_request_iid=1715
  The patch aims to remove the annotation caused the issue
  (bsc#1197729).</changelog>
</package>
<package pkgid="ee18e32fbd7e5285f086147953a8ce8b00cc79d1150cf62d7158ee704966edb1" name="icewm-default" arch="s390x">
  <version epoch="0" ver="1.4.2" rel="150000.7.15.1"/>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="qkzhu@suse.com" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="yfjiang@suse.com" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="yfjiang@suse.com" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
  <changelog author="meissner@suse.com" date="1596024000">- removed conflict on theming to make the transition work (bsc#1173441 bsc#1170420)</changelog>
  <changelog author="yfjiang@suse.com" date="1649764800">- Add icewm-build-with-glib2-ver-gt-2.67.3.patch:
  A later glib2 update will cause icewm failed to build by including
  gdk-pixbuf-xlib with extern "C" annotation:
  https://gitlab.gnome.org/GNOME/glib/-/commit/51003d409bb4b6c9a8540f70b92f8045abc4f0c9?merge_request_iid=1715
  The patch aims to remove the annotation caused the issue
  (bsc#1197729).</changelog>
</package>
<package pkgid="3db0aa8cc6af41a79fa8ce31b2809dbf75b1caa50236a8f4c8a98892010cc37a" name="icewm-default" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="150000.7.15.1"/>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="qkzhu@suse.com" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="yfjiang@suse.com" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="yfjiang@suse.com" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
  <changelog author="meissner@suse.com" date="1596024000">- removed conflict on theming to make the transition work (bsc#1173441 bsc#1170420)</changelog>
  <changelog author="yfjiang@suse.com" date="1649764800">- Add icewm-build-with-glib2-ver-gt-2.67.3.patch:
  A later glib2 update will cause icewm failed to build by including
  gdk-pixbuf-xlib with extern "C" annotation:
  https://gitlab.gnome.org/GNOME/glib/-/commit/51003d409bb4b6c9a8540f70b92f8045abc4f0c9?merge_request_iid=1715
  The patch aims to remove the annotation caused the issue
  (bsc#1197729).</changelog>
</package>
<package pkgid="40af02a86bf5cdf772a9e01da48a7734234e124e3eacf5999262f7941d690a28" name="icewm-lang" arch="noarch">
  <version epoch="0" ver="1.4.2" rel="150000.7.15.1"/>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="qkzhu@suse.com" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="yfjiang@suse.com" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="yfjiang@suse.com" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
  <changelog author="meissner@suse.com" date="1596024000">- removed conflict on theming to make the transition work (bsc#1173441 bsc#1170420)</changelog>
  <changelog author="yfjiang@suse.com" date="1649764800">- Add icewm-build-with-glib2-ver-gt-2.67.3.patch:
  A later glib2 update will cause icewm failed to build by including
  gdk-pixbuf-xlib with extern "C" annotation:
  https://gitlab.gnome.org/GNOME/glib/-/commit/51003d409bb4b6c9a8540f70b92f8045abc4f0c9?merge_request_iid=1715
  The patch aims to remove the annotation caused the issue
  (bsc#1197729).</changelog>
</package>
<package pkgid="e6a2b728cc928f5bf24e0caa69ee7af16b1a9f74f694b6b5bafb5edf013e109f" name="icewm-lite" arch="aarch64">
  <version epoch="0" ver="1.4.2" rel="150000.7.15.1"/>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="qkzhu@suse.com" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="yfjiang@suse.com" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="yfjiang@suse.com" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
  <changelog author="meissner@suse.com" date="1596024000">- removed conflict on theming to make the transition work (bsc#1173441 bsc#1170420)</changelog>
  <changelog author="yfjiang@suse.com" date="1649764800">- Add icewm-build-with-glib2-ver-gt-2.67.3.patch:
  A later glib2 update will cause icewm failed to build by including
  gdk-pixbuf-xlib with extern "C" annotation:
  https://gitlab.gnome.org/GNOME/glib/-/commit/51003d409bb4b6c9a8540f70b92f8045abc4f0c9?merge_request_iid=1715
  The patch aims to remove the annotation caused the issue
  (bsc#1197729).</changelog>
</package>
<package pkgid="21ad2064ef012a9b1b6b03b27f8d979b95df86bdb345ea46775812013165c505" name="icewm-lite" arch="ppc64le">
  <version epoch="0" ver="1.4.2" rel="150000.7.15.1"/>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="qkzhu@suse.com" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="yfjiang@suse.com" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="yfjiang@suse.com" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
  <changelog author="meissner@suse.com" date="1596024000">- removed conflict on theming to make the transition work (bsc#1173441 bsc#1170420)</changelog>
  <changelog author="yfjiang@suse.com" date="1649764800">- Add icewm-build-with-glib2-ver-gt-2.67.3.patch:
  A later glib2 update will cause icewm failed to build by including
  gdk-pixbuf-xlib with extern "C" annotation:
  https://gitlab.gnome.org/GNOME/glib/-/commit/51003d409bb4b6c9a8540f70b92f8045abc4f0c9?merge_request_iid=1715
  The patch aims to remove the annotation caused the issue
  (bsc#1197729).</changelog>
</package>
<package pkgid="9b2168141c1083140369345842fb4c00c976e2dc836712849f576067f220dd97" name="icewm-lite" arch="s390x">
  <version epoch="0" ver="1.4.2" rel="150000.7.15.1"/>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="qkzhu@suse.com" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="yfjiang@suse.com" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="yfjiang@suse.com" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
  <changelog author="meissner@suse.com" date="1596024000">- removed conflict on theming to make the transition work (bsc#1173441 bsc#1170420)</changelog>
  <changelog author="yfjiang@suse.com" date="1649764800">- Add icewm-build-with-glib2-ver-gt-2.67.3.patch:
  A later glib2 update will cause icewm failed to build by including
  gdk-pixbuf-xlib with extern "C" annotation:
  https://gitlab.gnome.org/GNOME/glib/-/commit/51003d409bb4b6c9a8540f70b92f8045abc4f0c9?merge_request_iid=1715
  The patch aims to remove the annotation caused the issue
  (bsc#1197729).</changelog>
</package>
<package pkgid="4950b02a06ca1ecaabc0451792a48b7758e4f37ebef37a2f2184cbf257cefbdd" name="icewm-lite" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="150000.7.15.1"/>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
  <changelog author="qkzhu@suse.com" date="1559131200">- Add icewm-Stop-messing-around-with-power-related-keys-by-default.patch:
  Icewm will suspend the system twice through concurrency with other
  listeners like systemd for the suspend key events, this patch
  disable icewm's suspend function key and let systemd manage power
  key events ( gh#bbidulock/icewm/commit/0cb93e9, bsc#1076817 ).</changelog>
  <changelog author="yfjiang@suse.com" date="1584360000">- Improve build tag consistency between SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
  * Recommend polkit-gnome to both Leap and SLE.
  * Disable icewm-preferences.patch for Leap. The patch makes sense
    to icewm-config-upstream while Leap uses icewm-theme-branding
    the provide the theme.</changelog>
  <changelog author="yfjiang@suse.com" date="1586865600">- Explicitly require icewm-theme-branding on SLE and Leap
  (jsc#SLE-11888, bsc#1170420).
- Add Conflicts between icewm-config-upstream and icewm-theme-branding.</changelog>
  <changelog author="meissner@suse.com" date="1596024000">- removed conflict on theming to make the transition work (bsc#1173441 bsc#1170420)</changelog>
  <changelog author="yfjiang@suse.com" date="1649764800">- Add icewm-build-with-glib2-ver-gt-2.67.3.patch:
  A later glib2 update will cause icewm failed to build by including
  gdk-pixbuf-xlib with extern "C" annotation:
  https://gitlab.gnome.org/GNOME/glib/-/commit/51003d409bb4b6c9a8540f70b92f8045abc4f0c9?merge_request_iid=1715
  The patch aims to remove the annotation caused the issue
  (bsc#1197729).</changelog>
</package>
<package pkgid="82f4681a9b4fec9f18ed8ce8376ea0cd60325ed37f0ad7bcdaa4b08a6de6c641" name="jackson-annotations" arch="noarch">
  <version epoch="0" ver="2.13.0" rel="150200.3.6.1"/>
  <changelog author="fstrba@suse.com" date="1557316800">- Initial packaging of jackson-annotations 2.9.4</changelog>
  <changelog author="jengelh@inai.de" date="1559476800">- Add missing Group: line for javadoc subpackage.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574251200">- Update to 2.10.1
  * 2.10.0 (26-Sep-2019)
    [#138]: Add basic Java 9+ module info
    [#141]: Add `JsonFormat.Feature.ACCEPT_CASE_INSENSITIVE_PROPERTIES`
    [#159]: Add `JsonFormat.Shape.BINARY`</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578398400">- Update to 2.10.2</changelog>
  <changelog author="fstrba@suse.com" date="1585224000">- Update to 2.10.3</changelog>
  <changelog author="fstrba@suse.com" date="1611576000">- Update to 2.10.5</changelog>
  <changelog author="fstrba@suse.com" date="1619438400">- Rewrite to use ant for building in order to be able to use it
  in packages that have to be built before maven</changelog>
  <changelog author="fstrba@suse.com" date="1634731200">- Update to 2.13.0 (CVE-2020-36518, bsc#1197132)
  * 2.13.0 (30-Sep-2021)
    + Add 'mvnw' wrapper
  * 2.12.0 (29-Nov-2020)
    + #171: 'JsonSubType.Type' should accept array of names
    + #173: Jackson version alignment with Gradle 6
    + #174: Add '@JsonIncludeProperties'
    + #175: Add '@JsonTypeInfo(use=DEDUCTION)'
    + #177: Ability to use '@JsonAnyGetter' on fields
    + #179: Add '@JsonKey' annotation
    + #180: Allow repeated calls to
    'SimpleObjectIdResolver.bindItem()' for same mapping
    + #181: Add 'namespace' property for '@JsonProperty' (for
    XML module)
    + Add target 'ElementType.ANNOTATION_TYPE' for
    '@JsonEnumDefaultValue' (was missing for some reason)
  * 2.11.0 (26-Apr-2020)
    + 'JsonPattern.Value.pattern' retained as "", never
    (accidentally) exposed as 'null'</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Build with source/target levels 8</changelog>
</package>
<package pkgid="b6afd3ea15cc1c9d2f86442c858b583d632ada21583595abcac58e2808c5bf02" name="jackson-annotations" arch="src">
  <version epoch="0" ver="2.13.0" rel="150200.3.6.1"/>
  <changelog author="fstrba@suse.com" date="1557316800">- Initial packaging of jackson-annotations 2.9.4</changelog>
  <changelog author="jengelh@inai.de" date="1559476800">- Add missing Group: line for javadoc subpackage.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574251200">- Update to 2.10.1
  * 2.10.0 (26-Sep-2019)
    [#138]: Add basic Java 9+ module info
    [#141]: Add `JsonFormat.Feature.ACCEPT_CASE_INSENSITIVE_PROPERTIES`
    [#159]: Add `JsonFormat.Shape.BINARY`</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578398400">- Update to 2.10.2</changelog>
  <changelog author="fstrba@suse.com" date="1585224000">- Update to 2.10.3</changelog>
  <changelog author="fstrba@suse.com" date="1611576000">- Update to 2.10.5</changelog>
  <changelog author="fstrba@suse.com" date="1619438400">- Rewrite to use ant for building in order to be able to use it
  in packages that have to be built before maven</changelog>
  <changelog author="fstrba@suse.com" date="1634731200">- Update to 2.13.0 (CVE-2020-36518, bsc#1197132)
  * 2.13.0 (30-Sep-2021)
    + Add 'mvnw' wrapper
  * 2.12.0 (29-Nov-2020)
    + #171: 'JsonSubType.Type' should accept array of names
    + #173: Jackson version alignment with Gradle 6
    + #174: Add '@JsonIncludeProperties'
    + #175: Add '@JsonTypeInfo(use=DEDUCTION)'
    + #177: Ability to use '@JsonAnyGetter' on fields
    + #179: Add '@JsonKey' annotation
    + #180: Allow repeated calls to
    'SimpleObjectIdResolver.bindItem()' for same mapping
    + #181: Add 'namespace' property for '@JsonProperty' (for
    XML module)
    + Add target 'ElementType.ANNOTATION_TYPE' for
    '@JsonEnumDefaultValue' (was missing for some reason)
  * 2.11.0 (26-Apr-2020)
    + 'JsonPattern.Value.pattern' retained as "", never
    (accidentally) exposed as 'null'</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Build with source/target levels 8</changelog>
</package>
<package pkgid="1179a8cd929af8808f616ae40eac5099a31dee77f71db3a0a4bf247ac89d8cb3" name="jackson-annotations-javadoc" arch="noarch">
  <version epoch="0" ver="2.13.0" rel="150200.3.6.1"/>
  <changelog author="fstrba@suse.com" date="1557316800">- Initial packaging of jackson-annotations 2.9.4</changelog>
  <changelog author="jengelh@inai.de" date="1559476800">- Add missing Group: line for javadoc subpackage.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574251200">- Update to 2.10.1
  * 2.10.0 (26-Sep-2019)
    [#138]: Add basic Java 9+ module info
    [#141]: Add `JsonFormat.Feature.ACCEPT_CASE_INSENSITIVE_PROPERTIES`
    [#159]: Add `JsonFormat.Shape.BINARY`</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578398400">- Update to 2.10.2</changelog>
  <changelog author="fstrba@suse.com" date="1585224000">- Update to 2.10.3</changelog>
  <changelog author="fstrba@suse.com" date="1611576000">- Update to 2.10.5</changelog>
  <changelog author="fstrba@suse.com" date="1619438400">- Rewrite to use ant for building in order to be able to use it
  in packages that have to be built before maven</changelog>
  <changelog author="fstrba@suse.com" date="1634731200">- Update to 2.13.0 (CVE-2020-36518, bsc#1197132)
  * 2.13.0 (30-Sep-2021)
    + Add 'mvnw' wrapper
  * 2.12.0 (29-Nov-2020)
    + #171: 'JsonSubType.Type' should accept array of names
    + #173: Jackson version alignment with Gradle 6
    + #174: Add '@JsonIncludeProperties'
    + #175: Add '@JsonTypeInfo(use=DEDUCTION)'
    + #177: Ability to use '@JsonAnyGetter' on fields
    + #179: Add '@JsonKey' annotation
    + #180: Allow repeated calls to
    'SimpleObjectIdResolver.bindItem()' for same mapping
    + #181: Add 'namespace' property for '@JsonProperty' (for
    XML module)
    + Add target 'ElementType.ANNOTATION_TYPE' for
    '@JsonEnumDefaultValue' (was missing for some reason)
  * 2.11.0 (26-Apr-2020)
    + 'JsonPattern.Value.pattern' retained as "", never
    (accidentally) exposed as 'null'</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Build with source/target levels 8</changelog>
</package>
<package pkgid="83fbcbc39cd408cf08f9efb425487a6d5b9445461a467a1e44ea65e7203c38d0" name="jackson-bom" arch="noarch">
  <version epoch="0" ver="2.13.0" rel="150200.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1557316800">- Initial packaging of jackson-bom poms version 2.9.4</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574251200">- Update to version 2.10.1</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578398400">- Update to version 2.10.2</changelog>
  <changelog author="fstrba@suse.com" date="1585224000">- Update to version 2.10.3</changelog>
  <changelog author="fstrba@suse.com" date="1611576000">- Update to version 2.10.5
  * Add missing version for jackson-datatype-eclipse-collections</changelog>
  <changelog author="fstrba@suse.com" date="1634731200">- Update to version 2.13.0
  * 2.13.0 (30-Sep-2021)
    + #39: Configure moditect plugin with
    '&lt;jvmVersion&gt;11&lt;/jvmVersion&gt;'
    + #43: jackson-bom manages the version of 'junit:junit'
    + [datatype-hibernate#39]: Drop 'jackson-datatype-hibernate3'
    (support for Hibernate 3.x datatypes)
    + [jackson-jarx-providers#146] due to addition of new Jakarta
    artifacts - (Jakarta-JSONP, Jakarta-xmlbind-annotations,
    Jakarta-rs-providers) - removed "jakarta" classifier variants
    of JAXB/JSON-P/JAX-RS modules
  * 2.12.3 (12-Apr-2021)
    + Add version for 'jackson-datatype-jakarta-jsonp' module
    (introduced after 2.12.2)
    + Add (beta) version for 'jackson-dataformat-toml'
  * 2.12.2 (03-Mar-2021)
    + #40: Jakarta 9 artifact versions are missing from jackson-bom
  * 2.12.0 (29-Nov-2020)
    + Add another execution of 'maven-replacer-plugin' for
    "prepare-package" phase
  to help with IDE import.
    + Add default settings for 'gradle-module-metadata-maven-plugin'
    (gradle metadata)
    + Add default settings for 'build-helper-maven-plugin'
    (LICENSE inclusion)
    + Drop 'jackson-module-scala_2.10' entry (not released for
    Jackson 2.12 or later)
  * 2.11.2
    + Add override for 'version.plugin.bundle' (for 5.1.1) to help
    build on JDK 15+</changelog>
</package>
<package pkgid="02c15808a3d70884737527d5275bc69d575d303bf3f181ec992acb4d153c49e1" name="jackson-bom" arch="src">
  <version epoch="0" ver="2.13.0" rel="150200.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1557316800">- Initial packaging of jackson-bom poms version 2.9.4</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574251200">- Update to version 2.10.1</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578398400">- Update to version 2.10.2</changelog>
  <changelog author="fstrba@suse.com" date="1585224000">- Update to version 2.10.3</changelog>
  <changelog author="fstrba@suse.com" date="1611576000">- Update to version 2.10.5
  * Add missing version for jackson-datatype-eclipse-collections</changelog>
  <changelog author="fstrba@suse.com" date="1634731200">- Update to version 2.13.0
  * 2.13.0 (30-Sep-2021)
    + #39: Configure moditect plugin with
    '&lt;jvmVersion&gt;11&lt;/jvmVersion&gt;'
    + #43: jackson-bom manages the version of 'junit:junit'
    + [datatype-hibernate#39]: Drop 'jackson-datatype-hibernate3'
    (support for Hibernate 3.x datatypes)
    + [jackson-jarx-providers#146] due to addition of new Jakarta
    artifacts - (Jakarta-JSONP, Jakarta-xmlbind-annotations,
    Jakarta-rs-providers) - removed "jakarta" classifier variants
    of JAXB/JSON-P/JAX-RS modules
  * 2.12.3 (12-Apr-2021)
    + Add version for 'jackson-datatype-jakarta-jsonp' module
    (introduced after 2.12.2)
    + Add (beta) version for 'jackson-dataformat-toml'
  * 2.12.2 (03-Mar-2021)
    + #40: Jakarta 9 artifact versions are missing from jackson-bom
  * 2.12.0 (29-Nov-2020)
    + Add another execution of 'maven-replacer-plugin' for
    "prepare-package" phase
  to help with IDE import.
    + Add default settings for 'gradle-module-metadata-maven-plugin'
    (gradle metadata)
    + Add default settings for 'build-helper-maven-plugin'
    (LICENSE inclusion)
    + Drop 'jackson-module-scala_2.10' entry (not released for
    Jackson 2.12 or later)
  * 2.11.2
    + Add override for 'version.plugin.bundle' (for 5.1.1) to help
    build on JDK 15+</changelog>
</package>
<package pkgid="a40165b77311abcca0b8b73d138cc13893d8e3bc6daf59ac41a67a0c3ef9a620" name="jackson-core" arch="noarch">
  <version epoch="0" ver="2.13.0" rel="150200.3.6.1"/>
  <changelog author="fstrba@suse.com" date="1569931200">- Initial packaging of jackson-core 2.9.4</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574251200">- Version update to 2.10.1
  * 2.10.1 (not yet released)
    [#455]: Jackson reports wrong locations for JsonEOFException
    [#567]: Add 'uses' for 'ObjectCodec' in module-info
    [#578]: Array index out of bounds in hex lookup
  * 2.10.0 (26-Sep-2019)
    [#433]: Add Builder pattern for creating configured Stream factories
    [#464]: Add "maximum unescaped char" configuration option for 'JsonFactory' via builder
    [#467]: Create 'JsonReadFeature' to move JSON-specific 'JsonParser.Feature's to
    [#479]: Improve thread-safety of buffer recycling
    [#480]: 'SerializableString' value can not directly render to Writer
    [#481]: Create 'JsonWriteFeature' to move JSON-specific 'JsonGenerator.Feature's to
    [#484]: Implement 'UTF8JsonGenerator.writeRawValue(SerializableString)' (and
    'writeRaw(..)') more efficiently
    [#495]: Create 'StreamReadFeature' to move non-json specific 'JsonParser.Feature's to
    [#496]: Create 'StreamWriteFeature' to take over non-json-specific 'JsonGenerator.Feature's
    [#502]: Make 'DefaultPrettyPrinter.createInstance()' to fail for sub-classes
    [#506]: Add missing type parameter for 'TypeReference' in 'ObjectCodec'
    [#508]: Add new exception type 'InputCoercionException' to be used for failed coercions
    like overflow for 'int'
    [#517]: Add 'JsonGenerator.writeStartObject(Object, int)' (needed by CBOR, maybe Avro)
    [#527]: Add simple module-info for JDK9+, using Moditect
    [#533]: UTF-8 BOM not accounted for in JsonLocation.getByteOffset()
    [#539]: Reduce max size of recycled byte[]/char[] blocks by 'TextBuffer',
    'ByteArrayBuilder'
    [#547]: 'CharsToNameCanonicalizer': Internal error on 'SymbolTable.rehash()' with high
    number of hash collisions
    [#548]: ByteQuadsCanonicalizer: ArrayIndexOutOfBoundsException in addName
    [#549]: Add configurability of "quote character" for JSON factory
    [#561]: Misleading exception for unquoted String parsing
    [#563]: Async parser does not keep track of Array context properly
  - Rewrite 'JsonGenerator.copyCurrentStructure()' to remove recursion)
  - Add 'missingNode()', 'nullNode()' in 'TreeCodec'
  - Add 'JsonParserDelegate.delegate()' methods
  * 2.9.10 (21-Sep-2019)
    [#540]: UTF8StreamJsonParser: fix byte to int conversion for malformed escapes
    [#556]: 'IndexOutOfBoundsException' in UTF8JsonGenerator.writeString(Reader, len)
    when using a negative length
  * 2.9.9 (16-May-2019)
    [#516]: _inputPtr off-by-one in UTF8StreamJsonParser._parseNumber2()
    [#531]: Non-blocking parser reports incorrect locations when fed with non-zero offset
  * 2.9.8 (15-Dec-2018)
    [#488]: Fail earlier on coercions from "too big" 'BigInteger' into
    fixed-size types ('int', 'long', 'short')
    [#510]: Fix ArrayIndexOutofBoundsException found by LGTM.com
  - Improve exception message for missing Base64 padding (see databind#2183)
  * 2.9.7 (19-Sep-2018)
    [#476]: Problem with 'BufferRecycler' via async parser (or when sharing parser
    across threads)
    [#477]: Exception while decoding Base64 value with escaped '=' character
    [#488]: Fail earlier on coercions from "too big" 'BigInteger' into
    fixed-size types ('int', 'long', 'short')
  * 2.9.6 (12-Jun-2018)
    [#400]: Add mechanism for forcing 'BufferRecycler' released (to call on shutdown)
    [#460]: Failing to link 'ObjectCodec' with 'JsonFactory' copy constructor
    [#463]: Ensure that 'skipChildren()' of non-blocking 'JsonParser' will throw
    exception if not enough input
  * 2.9.5 (26-Mar-2018)
    No changes since 2.9.4</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578398400">- Changes for 2.10.2
  [#580]: FilteringGeneratorDelegate writeRawValue delegate to 'writeRaw()'
    instead of 'writeRawValue()'
  [#582]: 'FilteringGeneratorDelegate' bug when filtering arrays (in 2.10.1)</changelog>
  <changelog author="fstrba@suse.com" date="1585224000">- Update to 2.10.3
- Changes:
  * #592: DataFormatMatcher#getMatchedFormatName throws NPE when
    no match exists
  * #603: 'JsonParser.getCurrentLocation()' byte/char offset update
    incorrectly for big payloads</changelog>
  <changelog author="fstrba@suse.com" date="1611576000">- Update to 2.10.5
  * #616: Parsing JSON with 'ALLOW_MISSING_VALUE' enabled results
    in endless stream of 'VALUE_NULL' tokens
  * #605: Handle case when system property access is restricted
  * #609: (partial fix) 'FilteringGeneratorDelegate' does not
    handle 'writeString(Reader, int)'</changelog>
  <changelog author="fstrba@suse.com" date="1619438400">- Rewrite to use ant for building in order to be able to use it
  in packages that have to be built before maven</changelog>
  <changelog author="fstrba@suse.com" date="1634731200">- Update to 2.13.0 (CVE-2020-36518, bsc#1197132)
  * 2.13.0 (30-Sep-2021)
    + #652: Misleading exception for input source when processing
    byte buffer with start offset
    + #658: Escape contents of source document snippet for
    'JsonLocation._appendSourceDesc()'
    + #664: Add 'StreamWriteException' type to eventually replace
    'JsonGenerationException'
    + #671: Replace 'getCurrentLocation()'/'getTokenLocation()' with
    'currentLocation()'/'currentTokenLocation()' in 'JsonParser'
    + #673: Replace 'JsonGenerator.writeObject()' (and related) with
    'writePOJO()'
    + #674: Replace 'getCurrentValue()'/'setCurrentValue()' with
    'currentValue()'/'assignCurrentValue()' in
    'JsonParser'/'JsonGenerator
    + #677: Introduce O(n^1.5) BigDecimal parser implementation
    + #687:  ByteQuadsCanonicalizer.addName(String, int, int) has
    incorrect handling for case of q2 == null
    + #692: UTF32Reader ArrayIndexOutOfBoundsException
    + #694: Improve exception/JsonLocation handling for binary
    content: don't show content, include byte offset
    + #700: Unable to ignore properties when deserializing.
    TokenFilter seems broken
    + #712: Optimize array allocation by 'JsonStringEncoder'
    + Add 'mvnw' wrapper
  * 2.12.5 (27-Aug-2021)
    + #712: (partial) Optimize array allocation by
    'JsonStringEncoder'
    + #713: Add back accidentally removed 'JsonStringEncoder'
    related methods in 'BufferRecyclers'
    (like 'getJsonStringEncoder()')
  * 2.12.4 (06-Jul-2021)
    + #702: 'ArrayOutOfBoundException' at
    'WriterBasedJsonGenerator.writeString(Reader, int)'
  * 2.12.0 (29-Nov-2020)
    + #500: Allow "optional-padding" for 'Base64Variant'
    + #573: More customizable TokenFilter inclusion (using
    'Tokenfilter.Inclusion')
    + #618: Publish Gradle Module Metadata
    + #619: Add 'StreamReadCapability' for further
    format-based/format-agnostic handling improvements
    + #627: Add 'JsonParser.isExpectedNumberIntToken()' convenience
    method
    + #630: Add 'StreamWriteCapability' for further
    format-based/format-agnostic handling improvements
    + #631: Add 'JsonParser.getNumberValueExact()' to allow
    precision-retaining buffering
    + #639: Limit initial allocated block size by 'ByteArrayBuilder'
    to max block size
    + #640: Add 'JacksonException' as parent class of
    'JsonProcessingException'
    + #653: Make 'JsonWriteContext.reset()' and
    'JsonReadContext.reset()' methods public
    + Deprecate 'JsonParser.getCurrentTokenId()' (use
    '#currentTokenId()' instead)
    + Full "LICENSE" included in jar for easier access by compliancy
    tools
  * 2.11.4 (12-Dec-2020)
    + #647: Fix NPE in 'writeNumber(String)' method of
    'UTF8JsonGenerator',
  'WriterBasedJsonGenerator'
  * 2.11.0 (26-Apr-2020)
    + #504: Add a String Array write method in the Streaming API
    + #565: Synchronize variants of 'JsonGenerator#writeNumberField'
    with 'JsonGenerator#writeNumber'
    + #587: Add JsonGenerator#writeNumber(char[], int, int) method
    + #606: Do not clear aggregated contents of 'TextBuffer' when
    'releaseBuffers()' called
    + #609: 'FilteringGeneratorDelegate' does not handle
    'writeString(Reader, int)'
    + #611: Optionally allow leading decimal in float tokens</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Build with source and target levels 8</changelog>
</package>
<package pkgid="23a923dd407673ba6b5cb7b9fa6cfcb9a0dc55763b6a3c87a929f89009295352" name="jackson-core" arch="src">
  <version epoch="0" ver="2.13.0" rel="150200.3.6.1"/>
  <changelog author="fstrba@suse.com" date="1569931200">- Initial packaging of jackson-core 2.9.4</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574251200">- Version update to 2.10.1
  * 2.10.1 (not yet released)
    [#455]: Jackson reports wrong locations for JsonEOFException
    [#567]: Add 'uses' for 'ObjectCodec' in module-info
    [#578]: Array index out of bounds in hex lookup
  * 2.10.0 (26-Sep-2019)
    [#433]: Add Builder pattern for creating configured Stream factories
    [#464]: Add "maximum unescaped char" configuration option for 'JsonFactory' via builder
    [#467]: Create 'JsonReadFeature' to move JSON-specific 'JsonParser.Feature's to
    [#479]: Improve thread-safety of buffer recycling
    [#480]: 'SerializableString' value can not directly render to Writer
    [#481]: Create 'JsonWriteFeature' to move JSON-specific 'JsonGenerator.Feature's to
    [#484]: Implement 'UTF8JsonGenerator.writeRawValue(SerializableString)' (and
    'writeRaw(..)') more efficiently
    [#495]: Create 'StreamReadFeature' to move non-json specific 'JsonParser.Feature's to
    [#496]: Create 'StreamWriteFeature' to take over non-json-specific 'JsonGenerator.Feature's
    [#502]: Make 'DefaultPrettyPrinter.createInstance()' to fail for sub-classes
    [#506]: Add missing type parameter for 'TypeReference' in 'ObjectCodec'
    [#508]: Add new exception type 'InputCoercionException' to be used for failed coercions
    like overflow for 'int'
    [#517]: Add 'JsonGenerator.writeStartObject(Object, int)' (needed by CBOR, maybe Avro)
    [#527]: Add simple module-info for JDK9+, using Moditect
    [#533]: UTF-8 BOM not accounted for in JsonLocation.getByteOffset()
    [#539]: Reduce max size of recycled byte[]/char[] blocks by 'TextBuffer',
    'ByteArrayBuilder'
    [#547]: 'CharsToNameCanonicalizer': Internal error on 'SymbolTable.rehash()' with high
    number of hash collisions
    [#548]: ByteQuadsCanonicalizer: ArrayIndexOutOfBoundsException in addName
    [#549]: Add configurability of "quote character" for JSON factory
    [#561]: Misleading exception for unquoted String parsing
    [#563]: Async parser does not keep track of Array context properly
  - Rewrite 'JsonGenerator.copyCurrentStructure()' to remove recursion)
  - Add 'missingNode()', 'nullNode()' in 'TreeCodec'
  - Add 'JsonParserDelegate.delegate()' methods
  * 2.9.10 (21-Sep-2019)
    [#540]: UTF8StreamJsonParser: fix byte to int conversion for malformed escapes
    [#556]: 'IndexOutOfBoundsException' in UTF8JsonGenerator.writeString(Reader, len)
    when using a negative length
  * 2.9.9 (16-May-2019)
    [#516]: _inputPtr off-by-one in UTF8StreamJsonParser._parseNumber2()
    [#531]: Non-blocking parser reports incorrect locations when fed with non-zero offset
  * 2.9.8 (15-Dec-2018)
    [#488]: Fail earlier on coercions from "too big" 'BigInteger' into
    fixed-size types ('int', 'long', 'short')
    [#510]: Fix ArrayIndexOutofBoundsException found by LGTM.com
  - Improve exception message for missing Base64 padding (see databind#2183)
  * 2.9.7 (19-Sep-2018)
    [#476]: Problem with 'BufferRecycler' via async parser (or when sharing parser
    across threads)
    [#477]: Exception while decoding Base64 value with escaped '=' character
    [#488]: Fail earlier on coercions from "too big" 'BigInteger' into
    fixed-size types ('int', 'long', 'short')
  * 2.9.6 (12-Jun-2018)
    [#400]: Add mechanism for forcing 'BufferRecycler' released (to call on shutdown)
    [#460]: Failing to link 'ObjectCodec' with 'JsonFactory' copy constructor
    [#463]: Ensure that 'skipChildren()' of non-blocking 'JsonParser' will throw
    exception if not enough input
  * 2.9.5 (26-Mar-2018)
    No changes since 2.9.4</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578398400">- Changes for 2.10.2
  [#580]: FilteringGeneratorDelegate writeRawValue delegate to 'writeRaw()'
    instead of 'writeRawValue()'
  [#582]: 'FilteringGeneratorDelegate' bug when filtering arrays (in 2.10.1)</changelog>
  <changelog author="fstrba@suse.com" date="1585224000">- Update to 2.10.3
- Changes:
  * #592: DataFormatMatcher#getMatchedFormatName throws NPE when
    no match exists
  * #603: 'JsonParser.getCurrentLocation()' byte/char offset update
    incorrectly for big payloads</changelog>
  <changelog author="fstrba@suse.com" date="1611576000">- Update to 2.10.5
  * #616: Parsing JSON with 'ALLOW_MISSING_VALUE' enabled results
    in endless stream of 'VALUE_NULL' tokens
  * #605: Handle case when system property access is restricted
  * #609: (partial fix) 'FilteringGeneratorDelegate' does not
    handle 'writeString(Reader, int)'</changelog>
  <changelog author="fstrba@suse.com" date="1619438400">- Rewrite to use ant for building in order to be able to use it
  in packages that have to be built before maven</changelog>
  <changelog author="fstrba@suse.com" date="1634731200">- Update to 2.13.0 (CVE-2020-36518, bsc#1197132)
  * 2.13.0 (30-Sep-2021)
    + #652: Misleading exception for input source when processing
    byte buffer with start offset
    + #658: Escape contents of source document snippet for
    'JsonLocation._appendSourceDesc()'
    + #664: Add 'StreamWriteException' type to eventually replace
    'JsonGenerationException'
    + #671: Replace 'getCurrentLocation()'/'getTokenLocation()' with
    'currentLocation()'/'currentTokenLocation()' in 'JsonParser'
    + #673: Replace 'JsonGenerator.writeObject()' (and related) with
    'writePOJO()'
    + #674: Replace 'getCurrentValue()'/'setCurrentValue()' with
    'currentValue()'/'assignCurrentValue()' in
    'JsonParser'/'JsonGenerator
    + #677: Introduce O(n^1.5) BigDecimal parser implementation
    + #687:  ByteQuadsCanonicalizer.addName(String, int, int) has
    incorrect handling for case of q2 == null
    + #692: UTF32Reader ArrayIndexOutOfBoundsException
    + #694: Improve exception/JsonLocation handling for binary
    content: don't show content, include byte offset
    + #700: Unable to ignore properties when deserializing.
    TokenFilter seems broken
    + #712: Optimize array allocation by 'JsonStringEncoder'
    + Add 'mvnw' wrapper
  * 2.12.5 (27-Aug-2021)
    + #712: (partial) Optimize array allocation by
    'JsonStringEncoder'
    + #713: Add back accidentally removed 'JsonStringEncoder'
    related methods in 'BufferRecyclers'
    (like 'getJsonStringEncoder()')
  * 2.12.4 (06-Jul-2021)
    + #702: 'ArrayOutOfBoundException' at
    'WriterBasedJsonGenerator.writeString(Reader, int)'
  * 2.12.0 (29-Nov-2020)
    + #500: Allow "optional-padding" for 'Base64Variant'
    + #573: More customizable TokenFilter inclusion (using
    'Tokenfilter.Inclusion')
    + #618: Publish Gradle Module Metadata
    + #619: Add 'StreamReadCapability' for further
    format-based/format-agnostic handling improvements
    + #627: Add 'JsonParser.isExpectedNumberIntToken()' convenience
    method
    + #630: Add 'StreamWriteCapability' for further
    format-based/format-agnostic handling improvements
    + #631: Add 'JsonParser.getNumberValueExact()' to allow
    precision-retaining buffering
    + #639: Limit initial allocated block size by 'ByteArrayBuilder'
    to max block size
    + #640: Add 'JacksonException' as parent class of
    'JsonProcessingException'
    + #653: Make 'JsonWriteContext.reset()' and
    'JsonReadContext.reset()' methods public
    + Deprecate 'JsonParser.getCurrentTokenId()' (use
    '#currentTokenId()' instead)
    + Full "LICENSE" included in jar for easier access by compliancy
    tools
  * 2.11.4 (12-Dec-2020)
    + #647: Fix NPE in 'writeNumber(String)' method of
    'UTF8JsonGenerator',
  'WriterBasedJsonGenerator'
  * 2.11.0 (26-Apr-2020)
    + #504: Add a String Array write method in the Streaming API
    + #565: Synchronize variants of 'JsonGenerator#writeNumberField'
    with 'JsonGenerator#writeNumber'
    + #587: Add JsonGenerator#writeNumber(char[], int, int) method
    + #606: Do not clear aggregated contents of 'TextBuffer' when
    'releaseBuffers()' called
    + #609: 'FilteringGeneratorDelegate' does not handle
    'writeString(Reader, int)'
    + #611: Optionally allow leading decimal in float tokens</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Build with source and target levels 8</changelog>
</package>
<package pkgid="66e5a27238f91b190d667f7b4521db9b6fce772e1776bcbf793ff5aa2e062db6" name="jackson-core-javadoc" arch="noarch">
  <version epoch="0" ver="2.13.0" rel="150200.3.6.1"/>
  <changelog author="fstrba@suse.com" date="1569931200">- Initial packaging of jackson-core 2.9.4</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574251200">- Version update to 2.10.1
  * 2.10.1 (not yet released)
    [#455]: Jackson reports wrong locations for JsonEOFException
    [#567]: Add 'uses' for 'ObjectCodec' in module-info
    [#578]: Array index out of bounds in hex lookup
  * 2.10.0 (26-Sep-2019)
    [#433]: Add Builder pattern for creating configured Stream factories
    [#464]: Add "maximum unescaped char" configuration option for 'JsonFactory' via builder
    [#467]: Create 'JsonReadFeature' to move JSON-specific 'JsonParser.Feature's to
    [#479]: Improve thread-safety of buffer recycling
    [#480]: 'SerializableString' value can not directly render to Writer
    [#481]: Create 'JsonWriteFeature' to move JSON-specific 'JsonGenerator.Feature's to
    [#484]: Implement 'UTF8JsonGenerator.writeRawValue(SerializableString)' (and
    'writeRaw(..)') more efficiently
    [#495]: Create 'StreamReadFeature' to move non-json specific 'JsonParser.Feature's to
    [#496]: Create 'StreamWriteFeature' to take over non-json-specific 'JsonGenerator.Feature's
    [#502]: Make 'DefaultPrettyPrinter.createInstance()' to fail for sub-classes
    [#506]: Add missing type parameter for 'TypeReference' in 'ObjectCodec'
    [#508]: Add new exception type 'InputCoercionException' to be used for failed coercions
    like overflow for 'int'
    [#517]: Add 'JsonGenerator.writeStartObject(Object, int)' (needed by CBOR, maybe Avro)
    [#527]: Add simple module-info for JDK9+, using Moditect
    [#533]: UTF-8 BOM not accounted for in JsonLocation.getByteOffset()
    [#539]: Reduce max size of recycled byte[]/char[] blocks by 'TextBuffer',
    'ByteArrayBuilder'
    [#547]: 'CharsToNameCanonicalizer': Internal error on 'SymbolTable.rehash()' with high
    number of hash collisions
    [#548]: ByteQuadsCanonicalizer: ArrayIndexOutOfBoundsException in addName
    [#549]: Add configurability of "quote character" for JSON factory
    [#561]: Misleading exception for unquoted String parsing
    [#563]: Async parser does not keep track of Array context properly
  - Rewrite 'JsonGenerator.copyCurrentStructure()' to remove recursion)
  - Add 'missingNode()', 'nullNode()' in 'TreeCodec'
  - Add 'JsonParserDelegate.delegate()' methods
  * 2.9.10 (21-Sep-2019)
    [#540]: UTF8StreamJsonParser: fix byte to int conversion for malformed escapes
    [#556]: 'IndexOutOfBoundsException' in UTF8JsonGenerator.writeString(Reader, len)
    when using a negative length
  * 2.9.9 (16-May-2019)
    [#516]: _inputPtr off-by-one in UTF8StreamJsonParser._parseNumber2()
    [#531]: Non-blocking parser reports incorrect locations when fed with non-zero offset
  * 2.9.8 (15-Dec-2018)
    [#488]: Fail earlier on coercions from "too big" 'BigInteger' into
    fixed-size types ('int', 'long', 'short')
    [#510]: Fix ArrayIndexOutofBoundsException found by LGTM.com
  - Improve exception message for missing Base64 padding (see databind#2183)
  * 2.9.7 (19-Sep-2018)
    [#476]: Problem with 'BufferRecycler' via async parser (or when sharing parser
    across threads)
    [#477]: Exception while decoding Base64 value with escaped '=' character
    [#488]: Fail earlier on coercions from "too big" 'BigInteger' into
    fixed-size types ('int', 'long', 'short')
  * 2.9.6 (12-Jun-2018)
    [#400]: Add mechanism for forcing 'BufferRecycler' released (to call on shutdown)
    [#460]: Failing to link 'ObjectCodec' with 'JsonFactory' copy constructor
    [#463]: Ensure that 'skipChildren()' of non-blocking 'JsonParser' will throw
    exception if not enough input
  * 2.9.5 (26-Mar-2018)
    No changes since 2.9.4</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578398400">- Changes for 2.10.2
  [#580]: FilteringGeneratorDelegate writeRawValue delegate to 'writeRaw()'
    instead of 'writeRawValue()'
  [#582]: 'FilteringGeneratorDelegate' bug when filtering arrays (in 2.10.1)</changelog>
  <changelog author="fstrba@suse.com" date="1585224000">- Update to 2.10.3
- Changes:
  * #592: DataFormatMatcher#getMatchedFormatName throws NPE when
    no match exists
  * #603: 'JsonParser.getCurrentLocation()' byte/char offset update
    incorrectly for big payloads</changelog>
  <changelog author="fstrba@suse.com" date="1611576000">- Update to 2.10.5
  * #616: Parsing JSON with 'ALLOW_MISSING_VALUE' enabled results
    in endless stream of 'VALUE_NULL' tokens
  * #605: Handle case when system property access is restricted
  * #609: (partial fix) 'FilteringGeneratorDelegate' does not
    handle 'writeString(Reader, int)'</changelog>
  <changelog author="fstrba@suse.com" date="1619438400">- Rewrite to use ant for building in order to be able to use it
  in packages that have to be built before maven</changelog>
  <changelog author="fstrba@suse.com" date="1634731200">- Update to 2.13.0 (CVE-2020-36518, bsc#1197132)
  * 2.13.0 (30-Sep-2021)
    + #652: Misleading exception for input source when processing
    byte buffer with start offset
    + #658: Escape contents of source document snippet for
    'JsonLocation._appendSourceDesc()'
    + #664: Add 'StreamWriteException' type to eventually replace
    'JsonGenerationException'
    + #671: Replace 'getCurrentLocation()'/'getTokenLocation()' with
    'currentLocation()'/'currentTokenLocation()' in 'JsonParser'
    + #673: Replace 'JsonGenerator.writeObject()' (and related) with
    'writePOJO()'
    + #674: Replace 'getCurrentValue()'/'setCurrentValue()' with
    'currentValue()'/'assignCurrentValue()' in
    'JsonParser'/'JsonGenerator
    + #677: Introduce O(n^1.5) BigDecimal parser implementation
    + #687:  ByteQuadsCanonicalizer.addName(String, int, int) has
    incorrect handling for case of q2 == null
    + #692: UTF32Reader ArrayIndexOutOfBoundsException
    + #694: Improve exception/JsonLocation handling for binary
    content: don't show content, include byte offset
    + #700: Unable to ignore properties when deserializing.
    TokenFilter seems broken
    + #712: Optimize array allocation by 'JsonStringEncoder'
    + Add 'mvnw' wrapper
  * 2.12.5 (27-Aug-2021)
    + #712: (partial) Optimize array allocation by
    'JsonStringEncoder'
    + #713: Add back accidentally removed 'JsonStringEncoder'
    related methods in 'BufferRecyclers'
    (like 'getJsonStringEncoder()')
  * 2.12.4 (06-Jul-2021)
    + #702: 'ArrayOutOfBoundException' at
    'WriterBasedJsonGenerator.writeString(Reader, int)'
  * 2.12.0 (29-Nov-2020)
    + #500: Allow "optional-padding" for 'Base64Variant'
    + #573: More customizable TokenFilter inclusion (using
    'Tokenfilter.Inclusion')
    + #618: Publish Gradle Module Metadata
    + #619: Add 'StreamReadCapability' for further
    format-based/format-agnostic handling improvements
    + #627: Add 'JsonParser.isExpectedNumberIntToken()' convenience
    method
    + #630: Add 'StreamWriteCapability' for further
    format-based/format-agnostic handling improvements
    + #631: Add 'JsonParser.getNumberValueExact()' to allow
    precision-retaining buffering
    + #639: Limit initial allocated block size by 'ByteArrayBuilder'
    to max block size
    + #640: Add 'JacksonException' as parent class of
    'JsonProcessingException'
    + #653: Make 'JsonWriteContext.reset()' and
    'JsonReadContext.reset()' methods public
    + Deprecate 'JsonParser.getCurrentTokenId()' (use
    '#currentTokenId()' instead)
    + Full "LICENSE" included in jar for easier access by compliancy
    tools
  * 2.11.4 (12-Dec-2020)
    + #647: Fix NPE in 'writeNumber(String)' method of
    'UTF8JsonGenerator',
  'WriterBasedJsonGenerator'
  * 2.11.0 (26-Apr-2020)
    + #504: Add a String Array write method in the Streaming API
    + #565: Synchronize variants of 'JsonGenerator#writeNumberField'
    with 'JsonGenerator#writeNumber'
    + #587: Add JsonGenerator#writeNumber(char[], int, int) method
    + #606: Do not clear aggregated contents of 'TextBuffer' when
    'releaseBuffers()' called
    + #609: 'FilteringGeneratorDelegate' does not handle
    'writeString(Reader, int)'
    + #611: Optionally allow leading decimal in float tokens</changelog>
  <changelog author="fstrba@suse.com" date="1647777600">- Build with source and target levels 8</changelog>
</package>
<package pkgid="783afcf120d70cd58dab6ec75444868a7f2a93739f7505113e797ed2bca17491" name="jackson-databind" arch="noarch">
  <version epoch="0" ver="2.13.0" rel="150200.3.9.1"/>
  <changelog author="fstrba@suse.com" date="1569931200">- Initial packaging of jackson-databind 2.9.4</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574164800">- Update to 2.10.1 [bsc#1157186, CVE-2019-14893]
  * 2.10.1 (09-Nov-2019)
    [#2457]: Extended enum values are not handled as enums when used as Map keys
    [#2473]: Array index missing in path of 'JsonMappingException' for 'Collection&lt;String&gt;',
    with custom deserializer
    [#2475]: 'StringCollectionSerializer' calls 'JsonGenerator.setCurrentValue(value)',
    which messes up current value for sibling properties
    [#2485]: Add 'uses' for 'Module' in module-info
    [#2513]: BigDecimalAsStringSerializer in NumberSerializer throws IllegalStateException in 2.10
    [#2519]: Serializing 'BigDecimal' values inside containers ignores shape override
    [#2520]: Sub-optimal exception message when failing to deserialize non-static inner classes
    [#2529]: Add tests to ensure 'EnumSet' and 'EnumMap' work correctly with "null-as-empty"
    [#2534]: Add 'BasicPolymorphicTypeValidator.Builder.allowIfSubTypeIsArray()'
    [#2535]: Allow String-to-byte[] coercion for String-value collections
  * 2.10.0 (26-Sep-2019)
    [#18]: Make 'JsonNode' serializable
    [#1093]: Default typing does not work with 'writerFor(Object.class)'
    [#1675]: Remove "impossible" 'IOException' in 'readTree()' and 'readValue()' 'ObjectMapper'
    methods which accept Strings
    [#1954]: Add Builder pattern for creating configured 'ObjectMapper' instances
    [#1995]: Limit size of 'DeserializerCache', auto-flush on exceeding
    [#2059]: Remove 'final' modifier for 'TypeFactory'
    [#2077]: 'JsonTypeInfo' with a subtype having 'JsonFormat.Shape.ARRAY' and
    no fields generates '{}' not '[]'
    [#2115]: Support naive deserialization of 'Serializable' values as "untyped", same
    as 'java.lang.Object'
    [#2116]: Make NumberSerializers.Base public and its inherited classes not final
    [#2126]: 'DeserializationContext.instantiationException()' throws 'InvalidDefinitionException'
    [#2129]: Add 'SerializationFeature.WRITE_ENUM_KEYS_USING_INDEX', separate from value setting
    [#2133]: Improve 'DeserializationProblemHandler.handleUnexpectedToken()' to allow handling of
    Collection problems
    [#2149]: Add 'MapperFeature.ACCEPT_CASE_INSENSITIVE_VALUES'
    [#2153]: Add 'JsonMapper' to replace generic 'ObjectMapper' usage
    [#2164]: 'FactoryBasedEnumDeserializer' does not respect
    'DeserializationFeature.WRAP_EXCEPTIONS'
    [#2187]: Make 'JsonNode.toString()' use shared 'ObjectMapper' to produce valid json
    [#2189]: 'TreeTraversingParser' does not check int bounds
    [#2195]: Add abstraction 'PolymorphicTypeValidator', for limiting subtypes allowed by
    default typing, '@JsonTypeInfo'
    [#2196]: Type safety for 'readValue()' with 'TypeReference'
    [#2204]: Add 'JsonNode.isEmpty()' as convenience alias
    [#2211]: Change of behavior (2.8 -&gt; 2.9) with 'ObjectMapper.readTree(input)' with no content
    [#2217]: Suboptimal memory allocation in 'TextNode.getBinaryValue()'
    [#2220]: Force serialization always for 'convertValue()'; avoid short-cuts
    [#2223]: Add 'missingNode()' method in 'JsonNodeFactory'
    [#2227]: Minor cleanup of exception message for 'Enum' binding failure
    [#2230]: 'WRITE_BIGDECIMAL_AS_PLAIN' is ignored if '@JsonFormat' is used
    [#2236]: Type id not provided on 'Double.NaN', 'Infinity' with '@JsonTypeInfo'
    [#2237]: Add "required" methods in 'JsonNode': 'required(String | int)',
    'requiredAt(JsonPointer)'
    [#2241]: Add 'PropertyNamingStrategy.LOWER_DOT_CASE' for dot-delimited names
    [#2251]: Getter that returns an abstract collection breaks a delegating '@JsonCreator'
    [#2265]: Inconsistent handling of Collections$UnmodifiableList vs
    Collections$UnmodifiableRandomAccessListq
    [#2273]: Add basic Java 9+ module info
    [#2280]: JsonMerge not work with constructor args
    [#2309]: READ_ENUMS_USING_TO_STRING doesn't support null values
    [#2311]: Unnecessary MultiView creation for property writers
    [#2331]: 'JsonMappingException' through nested getter with generic wildcard return type
    [#2336]: 'MapDeserializer' can not merge 'Map's with polymorphic values
    [#2338]: Suboptimal return type for 'JsonNode.withArray()'
    [#2339]: Suboptimal return type for 'ObjectNode.set()'
    [#2348]: Add sanity checks for 'ObjectMapper.readXXX()' methods
    [#2349]: Add option 'DefaultTyping.EVERYTHING' to support Kotlin data classes
    [#2357]: Lack of path on MismatchedInputException
    [#2378]: '@JsonAlias' doesn't work with AutoValue
    [#2390]: 'Iterable' serialization breaks when adding '@JsonFilter' annotation
    [#2392]: 'BeanDeserializerModifier.modifyDeserializer()' not applied to custom bean
    deserializers
    [#2393]: 'TreeTraversingParser.getLongValue()' incorrectly checks 'canConvertToInt()'
    [#2398]: Replace recursion in 'TokenBuffer.copyCurrentStructure()' with iteration
    [#2415]: Builder-based POJO deserializer should pass builder instance, not type,
    to 'handleUnknownVanilla()'
    [#2416]: Optimize 'ValueInstantiator' construction for default 'Collection', 'Map' types
    [#2422]: 'scala.collection.immutable.ListMap' fails to serialize since 2.9.3
    [#2424]: Add global config override setting for '@JsonFormat.lenient()'
    [#2428]: Use "activateDefaultTyping" over "enableDefaultTyping" in 2.10 with new methods
    [#2430]: Change 'ObjectMapper.valueToTree()' to convert 'null' to 'NullNode'
    [#2432]: Add support for module bundles
    [#2433]: Improve 'NullNode.equals()'
    [#2442]: 'ArrayNode.addAll()' adds raw 'null' values which cause NPE on 'deepCopy()'
    and 'toString()'
    [#2446]: Java 11: Unable to load JDK7 types (annotations, java.nio.file.Path): no Java7 support added
    [#2451]: Add new 'JsonValueFormat' value, 'UUID'
    [#2453]: Add 'DeserializationContext.readTree(JsonParser)' convenience method
    [#2458]: 'Nulls' property metadata ignored for creators
    [#2466]: Didn't find class "java.nio.file.Path" below Android api 26
    [#2467]: Accept 'JsonTypeInfo.As.WRAPPER_ARRAY' with no second argument to
    deserialize as "null value"
  * 2.9.10.1 (20-Oct-2019)
    [#2478]: Block two more gadget types (commons-dbcp, p6spy, CVE-2019-16942 / CVE-2019-16943)
    [#2498]: Block one more gadget type (log4j-extras/1.2, CVE-2019-17531)
  * 2.9.10 (21-Sep-2019)
    [#2331]: 'JsonMappingException' through nested getter with generic wildcard return type
    [#2334]: Block one more gadget type (CVE-2019-12384)
    [#2341]: Block one more gadget type (CVE-2019-12814)
    [#2374]: 'ObjectMapper. getRegisteredModuleIds()' throws NPE if no modules registered
    [#2387]: Block yet another deserialization gadget (CVE-2019-14379)
    [#2389]: Block yet another deserialization gadget (CVE-2019-14439)
    [#2404]: FAIL_ON_MISSING_EXTERNAL_TYPE_ID_PROPERTY setting ignored when
    creator properties are buffered
    [#2410]: Block one more gadget type (CVE-2019-14540)
    [#2420]: Block one more gadget type (no CVE allocated yet)
    [#2449]: Block one more gadget type (CVE-2019-14540)
    [#2460]: Block one more gadget type (ehcache, CVE-2019-17267)
    [#2462]: Block two more gadget types (commons-configuration)
    [#2469]: Block one more gadget type (xalan2)
  * 2.9.9 (16-May-2019)
    [#1408]: Call to 'TypeVariable.getBounds()' without synchronization unsafe on some platforms
    [#2221]: 'DeserializationProblemHandler.handleUnknownTypeId()' returning 'Void.class',
    enableDefaultTyping causing NPE
    [#2251]: Getter that returns an abstract collection breaks a delegating '@JsonCreator'
    [#2265]: Inconsistent handling of Collections$UnmodifiableList vs Collections$UnmodifiableRandomAccessList
    [#2299]: Fix for using jackson-databind in an OSGi environment under Android
    [#2303]: Deserialize null, when java type is "TypeRef of TypeRef of T", does not provide "Type(Type(null))"
    [#2324]: 'StringCollectionDeserializer' fails with custom collection
    [#2326]: Block one more gadget type (CVE-2019-12086)
- Prevent String coercion of 'null' in 'WritableObjectId' when calling 'JsonGenerator.writeObjectId()',
    mostly relevant for formats like YAML that have native Object Ids
  * 2.9.8 (15-Dec-2018)
    [#1662]: 'ByteBuffer' serialization is broken if offset is not 0
    [#2155]: Type parameters are checked for equality while isAssignableFrom expected
    [#2167]: Large ISO-8601 Dates are formatted/serialized incorrectly
    [#2181]: Don't re-use dynamic serializers for property-updating copy constructors
    [#2183]: Base64 JsonMappingException: Unexpected end-of-input
    [#2186]: Block more classes from polymorphic deserialization (CVE-2018-19360,
    CVE-2018-19361, CVE-2018-19362)
    [#2197]: Illegal reflective access operation warning when using 'java.lang.Void'
    as value type
    [#2202]: StdKeyDeserializer Class method _getToStringResolver is slow causing Thread Block
  * 2.9.7 (19-Sep-2018)
    [#2060]: 'UnwrappingBeanPropertyWriter' incorrectly assumes the found serializer is
    of type 'UnwrappingBeanSerializer'
    [#2064]: Cannot set custom format for 'SqlDateSerializer' globally
    [#2079]: NPE when visiting StaticListSerializerBase
    [#2082]: 'FactoryBasedEnumDeserializer' should be cachable
    [#2088]: '@JsonUnwrapped' fields are skipped when using 'PropertyBasedCreator' if
    they appear after the last creator property
    [#2096]: 'TreeTraversingParser' does not take base64 variant into account
    [#2097]: Block more classes from polymorphic deserialization (CVE-2018-14718
  - CVE-2018-14721)
    [#2109]: Canonical string for reference type is built incorrectly
    [#2120]: 'NioPathDeserializer' improvement
    [#2128]: Location information included twice for some 'JsonMappingException's
  * 2.9.6 (12-Jun-2018)
    [#955]: Add 'MapperFeature.USE_BASE_TYPE_AS_DEFAULT_IMPL' to use declared base type
    as 'defaultImpl' for polymorphic deserialization
    [#1328]: External property polymorphic deserialization does not work with enums
    [#1565]: Deserialization failure with Polymorphism using JsonTypeInfo 'defaultImpl',
    subtype as target
    [#1964]: Failed to specialize 'Map' type during serialization where key type
    incompatibility overidden via "raw" types
    [#1990]: MixIn '@JsonProperty' for 'Object.hashCode()' is ignored
    [#1991]: Context attributes are not passed/available to custom serializer if object is in POJO
    [#1998]: Removing "type" attribute with Mixin not taken in account if
    using ObjectMapper.copy()
    [#1999]: "Duplicate property" issue should mention which class it complains about
    [#2001]: Deserialization issue with '@JsonIgnore' and '@JsonCreator' + '@JsonProperty'
    for same property name
    [#2015]: '@Jsonsetter with Nulls.SKIP' collides with
    'DeserializationFeature.READ_UNKNOWN_ENUM_VALUES_AS_NULL' when parsing enum
    [#2016]: Delegating JsonCreator disregards JsonDeserialize info
    [#2019]: Abstract Type mapping in 2.9 fails when multiple modules are registered
    [#2021]: Delegating JsonCreator disregards 'JsonDeserialize.using' annotation
    [#2023]: 'JsonFormat.Feature.ACCEPT_EMPTY_STRING_AS_NULL_OBJECT' not working
    with 'null' coercion with '@JsonSetter'
    [#2027]: Concurrency error causes 'IllegalStateException' on 'BeanPropertyMap'
    [#2032]: CVE-2018-11307: Potential information exfiltration with default typing,
    serialization gadget from MyBatis
    [#2034]: Serialization problem with type specialization of nested generic types
    [#2038]: JDK Serializing and using Deserialized 'ObjectMapper' loses linkage
    back from 'JsonParser.getCodec()'
    [#2051]: Implicit constructor property names are not renamed properly with
    'PropertyNamingStrategy'
    [#2052]: CVE-2018-12022: Block polymorphic deserialization of types from Jodd-db library
    [#2058]: CVE-2018-12023: Block polymorphic deserialization of types from Oracle JDBC driver
  * 2.9.5 (26-Mar-2018)
    [#1911]: Allow serialization of 'BigDecimal' as String, using
    '@JsonFormat(shape=Shape.String)', config overrides
    [#1912]: 'BeanDeserializerModifier.updateBuilder()' not work to set custom
    deserializer on a property (since 2.9.0)
    [#1931]: Two more 'c3p0' gadgets to exploit default typing issue
    [#1932]: 'EnumMap' cannot deserialize with type inclusion as property
    [#1940]: 'Float' values with integer value beyond 'int' lose precision if
    bound to 'long'
    [#1941]: 'TypeFactory.constructFromCanonical()' throws NPE for Unparameterized
    generic canonical strings
    [#1947]: 'MapperFeature.AUTO_DETECT_XXX' do not work if all disabled
    [#1977]: Serializing an Iterator with multiple sub-types fails after upgrading to 2.9.x
    [#1978]: Using @JsonUnwrapped annotation in builderdeserializer hangs in infinite loop
- Remove patch fixed upstream:
  * CVE-2018-7489.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578398400">- Update to 2.10.2 [bsc#1160113, CVE-2019-20330]
    [#2101]: 'FAIL_ON_NULL_FOR_PRIMITIVES' failure does not indicate field name in exception message
    [#2544]: java.lang.NoClassDefFoundError Thrown for compact profile1
    [#2553]: JsonDeserialize(contentAs=...) broken with raw collections
    [#2556]: Contention in 'TypeNameIdResolver.idFromClass()'
    [#2560]: Check 'WRAP_EXCEPTIONS' in 'CollectionDeserializer.handleNonArray()'
    [#2564]: Fix 'IllegalArgumentException' on empty input collection for 'ArrayBlockingQueue'
    [#2566]: 'MissingNode.toString()' returns 'null' (4 character token) instead of empty string
    [#2567]: Incorrect target type for arrays when providing nulls and nulls are disabled
    [#2573]: Problem with 'JsonInclude' config overrides for 'java.util.Map'
    [#2576]: Fail to serialize 'Enum' instance which includes a method override
    as POJO (shape = Shape.OBJECT)
    Fix an issue with 'ObjectReader.with(JsonParser.Feature)' (and related) not working</changelog>
  <changelog author="fstrba@suse.com" date="1585224000">- Update to 2.10.3
  * #2482: JSONMappingException Location column number is one line
    Behind the actual location
  * #2599: NoClassDefFoundError at DeserializationContext. on
    Android 4.1.2 and Jackson 2.10.0
  * #2602: ByteBufferSerializer produces unexpected results with a
    duplicated ByteBuffer and a position &gt; 0
  * #2605: Failure to deserialize polymorphic subtypes of base
    type Enum
  * #2610: EXTERNAL_PROPERTY doesn't work with
    @JsonIgnoreProperties</changelog>
  <changelog author="fstrba@suse.com" date="1611576000">- Update to 2.10.5.1
  * #2589: 'DOMDeserializer': setExpandEntityReferences(false) may
    not prevent external entity expansion in all cases
    (CVE-2020-25649, bsc#1177616)
  * #2787 (partial fix): NPE after add mixin for enum
  * #2679: 'ObjectMapper.readValue("123", Void.TYPE)' throws
    "should never occur"
- Vulnerabilities not affecting this version:
  * CVE-2020-35728, bsc#1180391
  * CVE-2021-20190, bsc#1181118</changelog>
  <changelog author="fstrba@suse.com" date="1619438400">- Rewrite to use ant for building in order to be able to use it
  in packages that have to be built before maven</changelog>
  <changelog author="fstrba@suse.com" date="1634731200">- Update to 2.13.0 (CVE-2020-36518, bsc#1197132)
  * 2.13.0 (30-Sep-2021)
    + #1850: '@JsonValue' with integer for enum does not deserialize
    correctly
    + #2509: 'AnnotatedMethod.getValue()/setValue()' doesn't have
    useful exception message
    + #2828: Add 'DatabindException' as intermediate subtype of
    'JsonMappingException'
    + #2900: Jackson does not support deserializing new Java 9
    unmodifiable collections
    + #2989: Allocate TokenBuffer instance via context objects (to
    allow format-specific buffer types)
    + #3001: Add mechanism for setting default 'ContextAttributes'
    for 'ObjectMapper'
    + #3002: Add 'DeserializationContext.readTreeAsValue()' methods
    for more convenient conversions for deserializers to use
    + #3011: Clean up support of typed "unmodifiable", "singleton"
    Maps/Sets/Collections
    + #3033: Extend internal bitfield of 'MapperFeature' to be
    'long'
    + #3035: Add 'removeMixIn()' method in 'MapperBuilder'
    + #3036: Backport 'MapperBuilder' lambda-taking methods:
    'withConfigOverride()', 'withCoercionConfig()',
    'withCoercionConfigDefaults()'
    + #3080: configOverrides(boolean.class) silently ignored,
    whereas .configOverride(Boolean.class) works for both
    primitives and boxed boolean values
    + #3082: Dont track unknown props in buffer if
    'ignoreAllUnknown' is true
    + #3091: Should allow deserialization of java.time types via
    opaque 'JsonToken.VALUE_EMBEDDED_OBJECT'
    + #3099: Optimize "AnnotatedConstructor.call()" case by passing
    explicit null
    + #3101: Add AnnotationIntrospector.XmlExtensions interface for
    decoupling javax dependencies
    + #3110: Custom SimpleModule not included in list returned by
    ObjectMapper.getRegisteredModuleIds() after registration
    + #3117: Use more limiting default visibility settings for JDK
    types (java.*, javax.*)
    + #3122: Deep merge for 'JsonNode' using
    'ObjectReader.readTree()'
    + #3125: IllegalArgumentException: Conflicting setter
    definitions for property with more than 2 setters
    + #3130: Serializing java.lang.Thread fails on JDK 11 and above
    (should suppress serialization of ClassLoader)
    + #3143: String-based 'Map' key deserializer is not
    deterministic when there is no single arg constructor
    + #3154: Add ArrayNode#set(int index, primitive_type value)
    + #3160: JsonStreamContext "currentValue" wrongly references to
    @JsonTypeInfo annotated object
    + #3174: DOM 'Node' serialization omits the default namespace
    declaration
    + #3177: Support 'suppressed' property when deserializing
    'Throwable'
    + #3187: 'AnnotatedMember.equals()' does not work reliably
    + #3193: Add 'MapperFeature.APPLY_DEFAULT_VALUES', initially for
    Scala module
    + #3214: For an absent property Jackson injects 'NullNode'
    instead of 'null' to a JsonNode-typed constructor argument of
    a '@ConstructorProperties'-annotated constructor
    + #3217: 'XMLGregorianCalendar' doesn't work with default typing
    + #3227: Content 'null' handling not working for root values
    + #3234: StdDeserializer rejects blank (all-whitespace) strings
    for ints
    + #3235: 'USE_BASE_TYPE_AS_DEFAULT_IMPL' not working with
    'DefaultTypeResolverBuilder'
    + #3238: Add PropertyNamingStrategies.UpperSnakeCaseStrategy
    (and UPPER_SNAKE_CASE constant)
    + #3244: StackOverflowError when serializing
    JsonProcessingException
    + #3259: Support for BCP 47 'java.util.Locale'
    serialization/deserialization
    + #3271: String property deserializes null as "null" for
    JsonTypeInfo.As.EXISTING_PROPERTY
    + #3280: Can not deserialize json to enum value with
    Object-/Array-valued input, '@JsonCreator'
    + Fix to avoid problem with 'BigDecimalNode', scale of
    'Integer.MIN_VALUE'
    + Extend handling of 'FAIL_ON_NULL_FOR_PRIMITIVES' to cover
    coercion from (Empty) String via 'AsNull'
    + Add 'mvnw' wrapper
  * 2.12.5 (27-Aug-2021)
    + #3220: (regression) Factory method generic type resolution
    does not use Class-bound type parameter
  * 2.12.4 (06-Jul-2021)
    + #3139: Deserialization of "empty" subtype with DEDUCTION
    failed
    + #3146: Merge findInjectableValues() results in
    AnnotationIntrospectorPair
    + #3171: READ_UNKNOWN_ENUM_VALUES_USING_DEFAULT_VALUE doesn't
    work with empty strings
  * 2.12.3 (12-Apr-2021)
    + #3108: 'TypeFactory' cannot convert 'Collection' sub-type
    without type parameters
  to canonical form and back
    + Fix for [modules-java8#207]: prevent fail on secondary Java 8
    date/time types
  * 2.12.2 (03-Mar-2021)
    + #754: EXTERNAL_PROPERTY does not work well with '@JsonCreator'
    and 'FAIL_ON_UNKNOWN_PROPERTIES'
    + #3008: String property deserializes null as "null" for
    'JsonTypeInfo.As.EXTERNAL_PROPERTY'
    + #3022: Property ignorals cause 'BeanDeserializer 'to forget
    how to read from arrays (not copying
    '_arrayDelegateDeserializer')
    + #3025: UntypedObjectDeserializer' mixes multiple unwrapped
    collections (related to #2733)
    + #3038: Two cases of incorrect error reporting about
    DeserializationFeature
    + #3045: Bug in polymorphic deserialization with '@JsonCreator',
    '@JsonAnySetter', 'JsonTypeInfo.As.EXTERNAL_PROPERTY'
    + #3055: Polymorphic subtype deduction ignores 'defaultImpl'
    attribute
    + #3056: MismatchedInputException: Cannot deserialize instance
    of 'com.fasterxml.jackson.databind.node.ObjectNode' out of
    VALUE_NULL token
    + #3060: Missing override for 'hasAsKey()' in
    'AnnotationIntrospectorPair'
    + #3062: Creator lookup fails with 'InvalidDefinitionException'
    for conflict between single-double/single-Double arg
    constructor
    + #3068: 'MapDeserializer' forcing 'JsonMappingException'
    wrapping even if WRAP_EXCEPTIONS set to false
  * 2.12.1 (08-Jan-2021)
    + #2962: Auto-detection of constructor-based creator method
    skipped if there is an annotated factory-based creator method
    (regression from 2.11)
    + #2972: 'ObjectMapper.treeToValue()' no longer invokes
    'JsonDeserializer.getNullValue()'
    + #2973: DeserializationProblemHandler is not invoked when
    trying to deserialize String
    + #2978: Fix failing 'double' JsonCreators in jackson 2.12.0
    + #2979: Conflicting in POJOPropertiesCollector when having
    namingStrategy
    + #2990: Breaking API change in 'BasicClassIntrospector'
    (2.12.0)
    + #3005: 'JsonNode.requiredAt()' does NOT fail on some path
    expressions
    + #3009: Exception thrown when 'Collections.synchronizedList()'
    is serialized with type info, deserialized
  * 2.12.0 (29-Nov-2020)
    + #43: Add option to resolve type from multiple existing
    properties, '@JsonTypeInfo(use=DEDUCTION)'
    + #426: '@JsonIgnoreProperties' does not prevent Exception
    Conflicting getter/setter definitions for property
    + #921: Deserialization Not Working Right with Generic Types and
    Builders
    + #1296: Add '@JsonIncludeProperties(propertyNames)' (reverse of
    '@JsonIgnoreProperties')
    + #1458: '@JsonAnyGetter' should be allowed on a field
    + #1498: Allow handling of single-arg constructor as property
    based by default
    + #1852: Allow case insensitive deserialization of String value
    into 'boolean'/'Boolean' (esp for Excel)
    + #1886: Allow use of '@JsonFormat(with=JsonFormat.Feature
    .ACCEPT_CASE_INSENSITIVE_PROPERTIES)' on Class
    + #1919: Abstract class included as part of known type ids for
    error message   when using JsonSubTypes
    + #2066: Distinguish null from empty string for UUID
    deserialization
    + #2091: 'ReferenceType' does not expose valid containedType
    + #2113: Add 'CoercionConfig[s]' mechanism for configuring
    allowed coercions
    + #2118: 'JsonProperty.Access.READ_ONLY' does not work with
    "getter-as-setter" 'Collection's
    + #2215: Support 'BigInteger' and 'BigDecimal' creators in
    'StdValueInstantiator'
    + #2283: 'JsonProperty.Access.READ_ONLY' fails with collections
    when a property name is specified
    + #2644: 'BigDecimal' precision not retained for polymorphic
    deserialization
    + #2675: Support use of 'Void' valued properties
    ('MapperFeature.ALLOW_VOID_VALUED_PROPERTIES')
    + #2683: Explicitly fail (de)serialization of 'java.time.*'
    types in absence of registered custom (de)serializers
    + #2707: Improve description included in by
    'DeserializationContext.handleUnexpectedToken()'
    + #2709: Support for JDK 14 record types ('java.lang.Record')
    + #2715: 'PropertyNamingStrategy' class initialization depends
    on its subclass, this can lead to class loading deadlock
    + #2719: 'FAIL_ON_IGNORED_PROPERTIES' does not throw on
    'READONLY' properties with an explicit name
    + #2726: Add Gradle Module Metadata for version alignment with
    Gradle 6
    + #2732: Allow 'JsonNode' auto-convert into 'ArrayNode' if
    duplicates found (for XML)
    + #2733: Allow values of "untyped" auto-convert into 'List' if
    duplicates found (for XML)
    + #2751: Add 'ValueInstantiator.createContextual(...)
    + #2761: Support multiple names in 'JsonSubType.Type'
    + #2775: Disabling 'FAIL_ON_INVALID_SUBTYPE' breaks polymorphic
    deserialization of Enums
    + #2776: Explicitly fail (de)serialization of 'org.joda.time.*'
    types in absence of registered custom (de)serializers
    + #2784: Trailing zeros are stripped when deserializing
    BigDecimal values inside a @JsonUnwrapped property
    + #2800: Extract getter/setter/field name mangling from
    'BeanUtil' into pluggable 'AccessorNamingStrategy'
    + #2804: Throw 'InvalidFormatException' instead of
    'MismatchedInputException' for ACCEPT_FLOAT_AS_INT coercion
    failures
    + #2871: Add '@JsonKey' annotation (similar to '@JsonValue') for
    customizable serialization of Map keys
    + #2873: 'MapperFeature.ACCEPT_CASE_INSENSITIVE_ENUMS' should
    work for enum as keys
    + #2879: Add support for disabling special handling of "Creator
    properties" wrt alphabetic property ordering
    + #2885: Add 'JsonNode.canConvertToExactIntegral()' to indicate
    whether floating-point/BigDecimal values could be converted to
    integers losslessly
    + #2895: Improve static factory method generic type resolution
    logic
    + #2903: Allow preventing "Enum from integer" coercion using new
    'CoercionConfig' system
    + #2909: '@JsonValue' not considered when evaluating inclusion
    + #2910: Make some java platform modules optional
    + #2925: Add support for serializing 'java.sql.Blob'
    + #2928: 'AnnotatedCreatorCollector' should avoid processing
    synthetic static (factory) methods
    + #2931: Add errorprone static analysis profile to detect bugs
    at build time
    + #2932: Problem with implicit creator name detection for
    constructor detection
    + Add 'BeanDeserializerBase.isCaseInsensitive()'
    + Some refactoring of 'CollectionDeserializer' to solve CSV
    array handling issues
    + Full "LICENSE" included in jar for easier access by compliancy
    tools
  * 2.11.4 (12-Dec-2020)
    + #2894: Fix type resolution for static methods (regression in
    2.11.3 due to #2821 fix)
    + #2944: '@JsonCreator' on constructor not compatible with
    '@JsonIdentityInfo', 'PropertyGenerator'
    + Add debug improvements wrt
    [#2807] ('ClassUtil.getClassMethods()')
  * 2.11.3 (02-Oct-2020)
    + #2795: Cannot detect creator arguments of mixins for JDK types
    + #2815: Add 'JsonFormat.Shape' awareness for UUID serialization
    ('UUIDSerializer')
    + #2821: Json serialization fails or a specific case that
    contains generics and static methods with generic parameters
    (2.11.1 -&gt; 2.11.2 regression)
    + #2822: Using JsonValue and JsonFormat on one field does not
    work as expected
    + #2840: 'ObjectMapper.activateDefaultTypingAsProperty()' is not
    using parameter 'PolymorphicTypeValidator'
    + #2846: Problem deserialization "raw generic" fields
    (like 'Map') in 2.11.2
    + Fix issues with 'MapLikeType.isTrueMapType()',
    'CollectionLikeType.isTrueCollectionType()'
  * 2.11.2 (02-Aug-2020)
    + #2783: Parser/Generator features not set when using
    'ObjectMapper.createParser()', 'createGenerator()'
    + #2785: Polymorphic subtypes not registering on copied
    ObjectMapper (2.11.1)
    + #2789: Failure to read AnnotatedField value in Jackson 2.11
    + #2796: 'TypeFactory.constructType()' does not take
    'TypeBindings' correctly
  * 2.11.1 (25-Jun-2020)
    + #2486: Builder Deserialization with JsonCreator Value vs Array
    + #2725: JsonCreator on static method in Enum and Enum used as
    key in map fails randomly
    + #2755: 'StdSubtypeResolver' is not thread safe (possibly due
    to copy not being made with 'ObjectMapper.copy()')
    + #2757: "Conflicting setter definitions for property" exception
    for 'Map' subtype during deserialization
    + #2758: Fail to deserialize local Records
    + #2759: Rearranging of props when property-based generator is
    in use leads to incorrect output
    + #2760: Jackson doesn't respect
    'CAN_OVERRIDE_ACCESS_MODIFIERS=false' for deserializer
    properties
    + #2767: 'DeserializationFeature.UNWRAP_SINGLE_VALUE_ARRAYS'
    don't support 'Map' type field
    + #2770: JsonParser from MismatchedInputException cannot
    getText() for floating-point value
  * 2.11.0 (26-Apr-2020)
    + #953: i-I case conversion problem in Turkish locale with
    case-insensitive deserialization
    + #962: '@JsonInject' fails on trying to find deserializer even
    if inject-only
    + #1983: Polymorphic deserialization should handle
    case-insensitive Type Id property name if
    'MapperFeature.ACCEPT_CASE_INSENSITIVE_PROPERTIES' is enabled
    + #2049: TreeTraversingParser and UTF8StreamJsonParser create
    contexts differently
    + #2352: Support use of '@JsonAlias' for enum values
    + #2365: 'declaringClass' of "enum-as-POJO" not removed for
    'ObjectMapper' with a naming strategy
    + #2480: Fix 'JavaType.isEnumType()' to support sub-classes
    + #2487: BeanDeserializerBuilder Protected Factory Method for
    Extension
    + #2503: Support '@JsonSerialize(keyUsing)' and
    '@JsonDeserialize(keyUsing)' on Key class
    + #2511: Add 'SerializationFeature.WRITE_SELF_REFERENCES_AS_NULL'
    + #2515: 'ObjectMapper.registerSubtypes(NamedType...)' doesn't
    allow registering same POJO for two different type ids
    + #2522: 'DeserializationContext.handleMissingInstantiator()'
    throws 'MismatchedInputException' for non-static inner classes
    + #2525: Incorrect 'JsonStreamContext' for 'TokenBuffer' and
    'TreeTraversingParser'
    + #2527: Add 'AnnotationIntrospector.findRenameByField()' to
    support Kotlin's "is-getter" naming convention
    + #2555: Use '@JsonProperty(index)' for sorting properties on
    serialization
    + #2565: Java 8 'Optional' not working with '@JsonUnwrapped' on
    unwrappable type
    + #2587: Add 'MapperFeature.BLOCK_UNSAFE_POLYMORPHIC_BASE_TYPES'
    to allow blocking use of unsafe base type for polymorphic
    deserialization
    + #2589: 'DOMDeserializer': setExpandEntityReferences(false) may
    not prevent external entity expansion in all cases
    [CVE-2020-25649]
    + #2592: 'ObjectMapper.setSerializationInclusion()' is ignored
    for 'JsonAnyGetter'
    + #2608: 'ValueInstantiationException' when deserializing using
    a builder and 'UNWRAP_SINGLE_VALUE_ARRAYS'
    + #2627: JsonIgnoreProperties(ignoreUnknown = true) does not
    work on field and method level
    + #2632: Failure to resolve generic type parameters on
    serialization
    + #2635: JsonParser cannot getText() for input stream on
    MismatchedInputException
    + #2636: ObjectReader readValue lacks Class&lt;T&gt; argument
    + #2643: Change default textual serialization of
    'java.util.Date'/'Calendar' to include colon in timezone
    offset
    + #2647: Add 'ObjectMapper.createParser()' and
    'createGenerator()' methods
    + #2657: Allow serialization of 'Properties' with
    non-String values
    + #2663: Add new factory method for creating custom 'EnumValues'
    to pass to 'EnumDeserializer
    + #2668: 'IllegalArgumentException' thrown for mismatched
    subclass deserialization
    + #2693: Add convenience methods for creating 'List', 'Map'
    valued 'ObjectReader's (ObjectMapper.readerForListOf())
    + Add 'SerializerProvider.findContentValueSerializer()' methods</changelog>
</package>
<package pkgid="288d9f1cc4b170c142c5173a54c306f9e3eb3ecd5ec968cd84f302c7d6df2180" name="jackson-databind" arch="src">
  <version epoch="0" ver="2.13.0" rel="150200.3.9.1"/>
  <changelog author="fstrba@suse.com" date="1569931200">- Initial packaging of jackson-databind 2.9.4</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574164800">- Update to 2.10.1 [bsc#1157186, CVE-2019-14893]
  * 2.10.1 (09-Nov-2019)
    [#2457]: Extended enum values are not handled as enums when used as Map keys
    [#2473]: Array index missing in path of 'JsonMappingException' for 'Collection&lt;String&gt;',
    with custom deserializer
    [#2475]: 'StringCollectionSerializer' calls 'JsonGenerator.setCurrentValue(value)',
    which messes up current value for sibling properties
    [#2485]: Add 'uses' for 'Module' in module-info
    [#2513]: BigDecimalAsStringSerializer in NumberSerializer throws IllegalStateException in 2.10
    [#2519]: Serializing 'BigDecimal' values inside containers ignores shape override
    [#2520]: Sub-optimal exception message when failing to deserialize non-static inner classes
    [#2529]: Add tests to ensure 'EnumSet' and 'EnumMap' work correctly with "null-as-empty"
    [#2534]: Add 'BasicPolymorphicTypeValidator.Builder.allowIfSubTypeIsArray()'
    [#2535]: Allow String-to-byte[] coercion for String-value collections
  * 2.10.0 (26-Sep-2019)
    [#18]: Make 'JsonNode' serializable
    [#1093]: Default typing does not work with 'writerFor(Object.class)'
    [#1675]: Remove "impossible" 'IOException' in 'readTree()' and 'readValue()' 'ObjectMapper'
    methods which accept Strings
    [#1954]: Add Builder pattern for creating configured 'ObjectMapper' instances
    [#1995]: Limit size of 'DeserializerCache', auto-flush on exceeding
    [#2059]: Remove 'final' modifier for 'TypeFactory'
    [#2077]: 'JsonTypeInfo' with a subtype having 'JsonFormat.Shape.ARRAY' and
    no fields generates '{}' not '[]'
    [#2115]: Support naive deserialization of 'Serializable' values as "untyped", same
    as 'java.lang.Object'
    [#2116]: Make NumberSerializers.Base public and its inherited classes not final
    [#2126]: 'DeserializationContext.instantiationException()' throws 'InvalidDefinitionException'
    [#2129]: Add 'SerializationFeature.WRITE_ENUM_KEYS_USING_INDEX', separate from value setting
    [#2133]: Improve 'DeserializationProblemHandler.handleUnexpectedToken()' to allow handling of
    Collection problems
    [#2149]: Add 'MapperFeature.ACCEPT_CASE_INSENSITIVE_VALUES'
    [#2153]: Add 'JsonMapper' to replace generic 'ObjectMapper' usage
    [#2164]: 'FactoryBasedEnumDeserializer' does not respect
    'DeserializationFeature.WRAP_EXCEPTIONS'
    [#2187]: Make 'JsonNode.toString()' use shared 'ObjectMapper' to produce valid json
    [#2189]: 'TreeTraversingParser' does not check int bounds
    [#2195]: Add abstraction 'PolymorphicTypeValidator', for limiting subtypes allowed by
    default typing, '@JsonTypeInfo'
    [#2196]: Type safety for 'readValue()' with 'TypeReference'
    [#2204]: Add 'JsonNode.isEmpty()' as convenience alias
    [#2211]: Change of behavior (2.8 -&gt; 2.9) with 'ObjectMapper.readTree(input)' with no content
    [#2217]: Suboptimal memory allocation in 'TextNode.getBinaryValue()'
    [#2220]: Force serialization always for 'convertValue()'; avoid short-cuts
    [#2223]: Add 'missingNode()' method in 'JsonNodeFactory'
    [#2227]: Minor cleanup of exception message for 'Enum' binding failure
    [#2230]: 'WRITE_BIGDECIMAL_AS_PLAIN' is ignored if '@JsonFormat' is used
    [#2236]: Type id not provided on 'Double.NaN', 'Infinity' with '@JsonTypeInfo'
    [#2237]: Add "required" methods in 'JsonNode': 'required(String | int)',
    'requiredAt(JsonPointer)'
    [#2241]: Add 'PropertyNamingStrategy.LOWER_DOT_CASE' for dot-delimited names
    [#2251]: Getter that returns an abstract collection breaks a delegating '@JsonCreator'
    [#2265]: Inconsistent handling of Collections$UnmodifiableList vs
    Collections$UnmodifiableRandomAccessListq
    [#2273]: Add basic Java 9+ module info
    [#2280]: JsonMerge not work with constructor args
    [#2309]: READ_ENUMS_USING_TO_STRING doesn't support null values
    [#2311]: Unnecessary MultiView creation for property writers
    [#2331]: 'JsonMappingException' through nested getter with generic wildcard return type
    [#2336]: 'MapDeserializer' can not merge 'Map's with polymorphic values
    [#2338]: Suboptimal return type for 'JsonNode.withArray()'
    [#2339]: Suboptimal return type for 'ObjectNode.set()'
    [#2348]: Add sanity checks for 'ObjectMapper.readXXX()' methods
    [#2349]: Add option 'DefaultTyping.EVERYTHING' to support Kotlin data classes
    [#2357]: Lack of path on MismatchedInputException
    [#2378]: '@JsonAlias' doesn't work with AutoValue
    [#2390]: 'Iterable' serialization breaks when adding '@JsonFilter' annotation
    [#2392]: 'BeanDeserializerModifier.modifyDeserializer()' not applied to custom bean
    deserializers
    [#2393]: 'TreeTraversingParser.getLongValue()' incorrectly checks 'canConvertToInt()'
    [#2398]: Replace recursion in 'TokenBuffer.copyCurrentStructure()' with iteration
    [#2415]: Builder-based POJO deserializer should pass builder instance, not type,
    to 'handleUnknownVanilla()'
    [#2416]: Optimize 'ValueInstantiator' construction for default 'Collection', 'Map' types
    [#2422]: 'scala.collection.immutable.ListMap' fails to serialize since 2.9.3
    [#2424]: Add global config override setting for '@JsonFormat.lenient()'
    [#2428]: Use "activateDefaultTyping" over "enableDefaultTyping" in 2.10 with new methods
    [#2430]: Change 'ObjectMapper.valueToTree()' to convert 'null' to 'NullNode'
    [#2432]: Add support for module bundles
    [#2433]: Improve 'NullNode.equals()'
    [#2442]: 'ArrayNode.addAll()' adds raw 'null' values which cause NPE on 'deepCopy()'
    and 'toString()'
    [#2446]: Java 11: Unable to load JDK7 types (annotations, java.nio.file.Path): no Java7 support added
    [#2451]: Add new 'JsonValueFormat' value, 'UUID'
    [#2453]: Add 'DeserializationContext.readTree(JsonParser)' convenience method
    [#2458]: 'Nulls' property metadata ignored for creators
    [#2466]: Didn't find class "java.nio.file.Path" below Android api 26
    [#2467]: Accept 'JsonTypeInfo.As.WRAPPER_ARRAY' with no second argument to
    deserialize as "null value"
  * 2.9.10.1 (20-Oct-2019)
    [#2478]: Block two more gadget types (commons-dbcp, p6spy, CVE-2019-16942 / CVE-2019-16943)
    [#2498]: Block one more gadget type (log4j-extras/1.2, CVE-2019-17531)
  * 2.9.10 (21-Sep-2019)
    [#2331]: 'JsonMappingException' through nested getter with generic wildcard return type
    [#2334]: Block one more gadget type (CVE-2019-12384)
    [#2341]: Block one more gadget type (CVE-2019-12814)
    [#2374]: 'ObjectMapper. getRegisteredModuleIds()' throws NPE if no modules registered
    [#2387]: Block yet another deserialization gadget (CVE-2019-14379)
    [#2389]: Block yet another deserialization gadget (CVE-2019-14439)
    [#2404]: FAIL_ON_MISSING_EXTERNAL_TYPE_ID_PROPERTY setting ignored when
    creator properties are buffered
    [#2410]: Block one more gadget type (CVE-2019-14540)
    [#2420]: Block one more gadget type (no CVE allocated yet)
    [#2449]: Block one more gadget type (CVE-2019-14540)
    [#2460]: Block one more gadget type (ehcache, CVE-2019-17267)
    [#2462]: Block two more gadget types (commons-configuration)
    [#2469]: Block one more gadget type (xalan2)
  * 2.9.9 (16-May-2019)
    [#1408]: Call to 'TypeVariable.getBounds()' without synchronization unsafe on some platforms
    [#2221]: 'DeserializationProblemHandler.handleUnknownTypeId()' returning 'Void.class',
    enableDefaultTyping causing NPE
    [#2251]: Getter that returns an abstract collection breaks a delegating '@JsonCreator'
    [#2265]: Inconsistent handling of Collections$UnmodifiableList vs Collections$UnmodifiableRandomAccessList
    [#2299]: Fix for using jackson-databind in an OSGi environment under Android
    [#2303]: Deserialize null, when java type is "TypeRef of TypeRef of T", does not provide "Type(Type(null))"
    [#2324]: 'StringCollectionDeserializer' fails with custom collection
    [#2326]: Block one more gadget type (CVE-2019-12086)
- Prevent String coercion of 'null' in 'WritableObjectId' when calling 'JsonGenerator.writeObjectId()',
    mostly relevant for formats like YAML that have native Object Ids
  * 2.9.8 (15-Dec-2018)
    [#1662]: 'ByteBuffer' serialization is broken if offset is not 0
    [#2155]: Type parameters are checked for equality while isAssignableFrom expected
    [#2167]: Large ISO-8601 Dates are formatted/serialized incorrectly
    [#2181]: Don't re-use dynamic serializers for property-updating copy constructors
    [#2183]: Base64 JsonMappingException: Unexpected end-of-input
    [#2186]: Block more classes from polymorphic deserialization (CVE-2018-19360,
    CVE-2018-19361, CVE-2018-19362)
    [#2197]: Illegal reflective access operation warning when using 'java.lang.Void'
    as value type
    [#2202]: StdKeyDeserializer Class method _getToStringResolver is slow causing Thread Block
  * 2.9.7 (19-Sep-2018)
    [#2060]: 'UnwrappingBeanPropertyWriter' incorrectly assumes the found serializer is
    of type 'UnwrappingBeanSerializer'
    [#2064]: Cannot set custom format for 'SqlDateSerializer' globally
    [#2079]: NPE when visiting StaticListSerializerBase
    [#2082]: 'FactoryBasedEnumDeserializer' should be cachable
    [#2088]: '@JsonUnwrapped' fields are skipped when using 'PropertyBasedCreator' if
    they appear after the last creator property
    [#2096]: 'TreeTraversingParser' does not take base64 variant into account
    [#2097]: Block more classes from polymorphic deserialization (CVE-2018-14718
  - CVE-2018-14721)
    [#2109]: Canonical string for reference type is built incorrectly
    [#2120]: 'NioPathDeserializer' improvement
    [#2128]: Location information included twice for some 'JsonMappingException's
  * 2.9.6 (12-Jun-2018)
    [#955]: Add 'MapperFeature.USE_BASE_TYPE_AS_DEFAULT_IMPL' to use declared base type
    as 'defaultImpl' for polymorphic deserialization
    [#1328]: External property polymorphic deserialization does not work with enums
    [#1565]: Deserialization failure with Polymorphism using JsonTypeInfo 'defaultImpl',
    subtype as target
    [#1964]: Failed to specialize 'Map' type during serialization where key type
    incompatibility overidden via "raw" types
    [#1990]: MixIn '@JsonProperty' for 'Object.hashCode()' is ignored
    [#1991]: Context attributes are not passed/available to custom serializer if object is in POJO
    [#1998]: Removing "type" attribute with Mixin not taken in account if
    using ObjectMapper.copy()
    [#1999]: "Duplicate property" issue should mention which class it complains about
    [#2001]: Deserialization issue with '@JsonIgnore' and '@JsonCreator' + '@JsonProperty'
    for same property name
    [#2015]: '@Jsonsetter with Nulls.SKIP' collides with
    'DeserializationFeature.READ_UNKNOWN_ENUM_VALUES_AS_NULL' when parsing enum
    [#2016]: Delegating JsonCreator disregards JsonDeserialize info
    [#2019]: Abstract Type mapping in 2.9 fails when multiple modules are registered
    [#2021]: Delegating JsonCreator disregards 'JsonDeserialize.using' annotation
    [#2023]: 'JsonFormat.Feature.ACCEPT_EMPTY_STRING_AS_NULL_OBJECT' not working
    with 'null' coercion with '@JsonSetter'
    [#2027]: Concurrency error causes 'IllegalStateException' on 'BeanPropertyMap'
    [#2032]: CVE-2018-11307: Potential information exfiltration with default typing,
    serialization gadget from MyBatis
    [#2034]: Serialization problem with type specialization of nested generic types
    [#2038]: JDK Serializing and using Deserialized 'ObjectMapper' loses linkage
    back from 'JsonParser.getCodec()'
    [#2051]: Implicit constructor property names are not renamed properly with
    'PropertyNamingStrategy'
    [#2052]: CVE-2018-12022: Block polymorphic deserialization of types from Jodd-db library
    [#2058]: CVE-2018-12023: Block polymorphic deserialization of types from Oracle JDBC driver
  * 2.9.5 (26-Mar-2018)
    [#1911]: Allow serialization of 'BigDecimal' as String, using
    '@JsonFormat(shape=Shape.String)', config overrides
    [#1912]: 'BeanDeserializerModifier.updateBuilder()' not work to set custom
    deserializer on a property (since 2.9.0)
    [#1931]: Two more 'c3p0' gadgets to exploit default typing issue
    [#1932]: 'EnumMap' cannot deserialize with type inclusion as property
    [#1940]: 'Float' values with integer value beyond 'int' lose precision if
    bound to 'long'
    [#1941]: 'TypeFactory.constructFromCanonical()' throws NPE for Unparameterized
    generic canonical strings
    [#1947]: 'MapperFeature.AUTO_DETECT_XXX' do not work if all disabled
    [#1977]: Serializing an Iterator with multiple sub-types fails after upgrading to 2.9.x
    [#1978]: Using @JsonUnwrapped annotation in builderdeserializer hangs in infinite loop
- Remove patch fixed upstream:
  * CVE-2018-7489.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578398400">- Update to 2.10.2 [bsc#1160113, CVE-2019-20330]
    [#2101]: 'FAIL_ON_NULL_FOR_PRIMITIVES' failure does not indicate field name in exception message
    [#2544]: java.lang.NoClassDefFoundError Thrown for compact profile1
    [#2553]: JsonDeserialize(contentAs=...) broken with raw collections
    [#2556]: Contention in 'TypeNameIdResolver.idFromClass()'
    [#2560]: Check 'WRAP_EXCEPTIONS' in 'CollectionDeserializer.handleNonArray()'
    [#2564]: Fix 'IllegalArgumentException' on empty input collection for 'ArrayBlockingQueue'
    [#2566]: 'MissingNode.toString()' returns 'null' (4 character token) instead of empty string
    [#2567]: Incorrect target type for arrays when providing nulls and nulls are disabled
    [#2573]: Problem with 'JsonInclude' config overrides for 'java.util.Map'
    [#2576]: Fail to serialize 'Enum' instance which includes a method override
    as POJO (shape = Shape.OBJECT)
    Fix an issue with 'ObjectReader.with(JsonParser.Feature)' (and related) not working</changelog>
  <changelog author="fstrba@suse.com" date="1585224000">- Update to 2.10.3
  * #2482: JSONMappingException Location column number is one line
    Behind the actual location
  * #2599: NoClassDefFoundError at DeserializationContext. on
    Android 4.1.2 and Jackson 2.10.0
  * #2602: ByteBufferSerializer produces unexpected results with a
    duplicated ByteBuffer and a position &gt; 0
  * #2605: Failure to deserialize polymorphic subtypes of base
    type Enum
  * #2610: EXTERNAL_PROPERTY doesn't work with
    @JsonIgnoreProperties</changelog>
  <changelog author="fstrba@suse.com" date="1611576000">- Update to 2.10.5.1
  * #2589: 'DOMDeserializer': setExpandEntityReferences(false) may
    not prevent external entity expansion in all cases
    (CVE-2020-25649, bsc#1177616)
  * #2787 (partial fix): NPE after add mixin for enum
  * #2679: 'ObjectMapper.readValue("123", Void.TYPE)' throws
    "should never occur"
- Vulnerabilities not affecting this version:
  * CVE-2020-35728, bsc#1180391
  * CVE-2021-20190, bsc#1181118</changelog>
  <changelog author="fstrba@suse.com" date="1619438400">- Rewrite to use ant for building in order to be able to use it
  in packages that have to be built before maven</changelog>
  <changelog author="fstrba@suse.com" date="1634731200">- Update to 2.13.0 (CVE-2020-36518, bsc#1197132)
  * 2.13.0 (30-Sep-2021)
    + #1850: '@JsonValue' with integer for enum does not deserialize
    correctly
    + #2509: 'AnnotatedMethod.getValue()/setValue()' doesn't have
    useful exception message
    + #2828: Add 'DatabindException' as intermediate subtype of
    'JsonMappingException'
    + #2900: Jackson does not support deserializing new Java 9
    unmodifiable collections
    + #2989: Allocate TokenBuffer instance via context objects (to
    allow format-specific buffer types)
    + #3001: Add mechanism for setting default 'ContextAttributes'
    for 'ObjectMapper'
    + #3002: Add 'DeserializationContext.readTreeAsValue()' methods
    for more convenient conversions for deserializers to use
    + #3011: Clean up support of typed "unmodifiable", "singleton"
    Maps/Sets/Collections
    + #3033: Extend internal bitfield of 'MapperFeature' to be
    'long'
    + #3035: Add 'removeMixIn()' method in 'MapperBuilder'
    + #3036: Backport 'MapperBuilder' lambda-taking methods:
    'withConfigOverride()', 'withCoercionConfig()',
    'withCoercionConfigDefaults()'
    + #3080: configOverrides(boolean.class) silently ignored,
    whereas .configOverride(Boolean.class) works for both
    primitives and boxed boolean values
    + #3082: Dont track unknown props in buffer if
    'ignoreAllUnknown' is true
    + #3091: Should allow deserialization of java.time types via
    opaque 'JsonToken.VALUE_EMBEDDED_OBJECT'
    + #3099: Optimize "AnnotatedConstructor.call()" case by passing
    explicit null
    + #3101: Add AnnotationIntrospector.XmlExtensions interface for
    decoupling javax dependencies
    + #3110: Custom SimpleModule not included in list returned by
    ObjectMapper.getRegisteredModuleIds() after registration
    + #3117: Use more limiting default visibility settings for JDK
    types (java.*, javax.*)
    + #3122: Deep merge for 'JsonNode' using
    'ObjectReader.readTree()'
    + #3125: IllegalArgumentException: Conflicting setter
    definitions for property with more than 2 setters
    + #3130: Serializing java.lang.Thread fails on JDK 11 and above
    (should suppress serialization of ClassLoader)
    + #3143: String-based 'Map' key deserializer is not
    deterministic when there is no single arg constructor
    + #3154: Add ArrayNode#set(int index, primitive_type value)
    + #3160: JsonStreamContext "currentValue" wrongly references to
    @JsonTypeInfo annotated object
    + #3174: DOM 'Node' serialization omits the default namespace
    declaration
    + #3177: Support 'suppressed' property when deserializing
    'Throwable'
    + #3187: 'AnnotatedMember.equals()' does not work reliably
    + #3193: Add 'MapperFeature.APPLY_DEFAULT_VALUES', initially for
    Scala module
    + #3214: For an absent property Jackson injects 'NullNode'
    instead of 'null' to a JsonNode-typed constructor argument of
    a '@ConstructorProperties'-annotated constructor
    + #3217: 'XMLGregorianCalendar' doesn't work with default typing
    + #3227: Content 'null' handling not working for root values
    + #3234: StdDeserializer rejects blank (all-whitespace) strings
    for ints
    + #3235: 'USE_BASE_TYPE_AS_DEFAULT_IMPL' not working with
    'DefaultTypeResolverBuilder'
    + #3238: Add PropertyNamingStrategies.UpperSnakeCaseStrategy
    (and UPPER_SNAKE_CASE constant)
    + #3244: StackOverflowError when serializing
    JsonProcessingException
    + #3259: Support for BCP 47 'java.util.Locale'
    serialization/deserialization
    + #3271: String property deserializes null as "null" for
    JsonTypeInfo.As.EXISTING_PROPERTY
    + #3280: Can not deserialize json to enum value with
    Object-/Array-valued input, '@JsonCreator'
    + Fix to avoid problem with 'BigDecimalNode', scale of
    'Integer.MIN_VALUE'
    + Extend handling of 'FAIL_ON_NULL_FOR_PRIMITIVES' to cover
    coercion from (Empty) String via 'AsNull'
    + Add 'mvnw' wrapper
  * 2.12.5 (27-Aug-2021)
    + #3220: (regression) Factory method generic type resolution
    does not use Class-bound type parameter
  * 2.12.4 (06-Jul-2021)
    + #3139: Deserialization of "empty" subtype with DEDUCTION
    failed
    + #3146: Merge findInjectableValues() results in
    AnnotationIntrospectorPair
    + #3171: READ_UNKNOWN_ENUM_VALUES_USING_DEFAULT_VALUE doesn't
    work with empty strings
  * 2.12.3 (12-Apr-2021)
    + #3108: 'TypeFactory' cannot convert 'Collection' sub-type
    without type parameters
  to canonical form and back
    + Fix for [modules-java8#207]: prevent fail on secondary Java 8
    date/time types
  * 2.12.2 (03-Mar-2021)
    + #754: EXTERNAL_PROPERTY does not work well with '@JsonCreator'
    and 'FAIL_ON_UNKNOWN_PROPERTIES'
    + #3008: String property deserializes null as "null" for
    'JsonTypeInfo.As.EXTERNAL_PROPERTY'
    + #3022: Property ignorals cause 'BeanDeserializer 'to forget
    how to read from arrays (not copying
    '_arrayDelegateDeserializer')
    + #3025: UntypedObjectDeserializer' mixes multiple unwrapped
    collections (related to #2733)
    + #3038: Two cases of incorrect error reporting about
    DeserializationFeature
    + #3045: Bug in polymorphic deserialization with '@JsonCreator',
    '@JsonAnySetter', 'JsonTypeInfo.As.EXTERNAL_PROPERTY'
    + #3055: Polymorphic subtype deduction ignores 'defaultImpl'
    attribute
    + #3056: MismatchedInputException: Cannot deserialize instance
    of 'com.fasterxml.jackson.databind.node.ObjectNode' out of
    VALUE_NULL token
    + #3060: Missing override for 'hasAsKey()' in
    'AnnotationIntrospectorPair'
    + #3062: Creator lookup fails with 'InvalidDefinitionException'
    for conflict between single-double/single-Double arg
    constructor
    + #3068: 'MapDeserializer' forcing 'JsonMappingException'
    wrapping even if WRAP_EXCEPTIONS set to false
  * 2.12.1 (08-Jan-2021)
    + #2962: Auto-detection of constructor-based creator method
    skipped if there is an annotated factory-based creator method
    (regression from 2.11)
    + #2972: 'ObjectMapper.treeToValue()' no longer invokes
    'JsonDeserializer.getNullValue()'
    + #2973: DeserializationProblemHandler is not invoked when
    trying to deserialize String
    + #2978: Fix failing 'double' JsonCreators in jackson 2.12.0
    + #2979: Conflicting in POJOPropertiesCollector when having
    namingStrategy
    + #2990: Breaking API change in 'BasicClassIntrospector'
    (2.12.0)
    + #3005: 'JsonNode.requiredAt()' does NOT fail on some path
    expressions
    + #3009: Exception thrown when 'Collections.synchronizedList()'
    is serialized with type info, deserialized
  * 2.12.0 (29-Nov-2020)
    + #43: Add option to resolve type from multiple existing
    properties, '@JsonTypeInfo(use=DEDUCTION)'
    + #426: '@JsonIgnoreProperties' does not prevent Exception
    Conflicting getter/setter definitions for property
    + #921: Deserialization Not Working Right with Generic Types and
    Builders
    + #1296: Add '@JsonIncludeProperties(propertyNames)' (reverse of
    '@JsonIgnoreProperties')
    + #1458: '@JsonAnyGetter' should be allowed on a field
    + #1498: Allow handling of single-arg constructor as property
    based by default
    + #1852: Allow case insensitive deserialization of String value
    into 'boolean'/'Boolean' (esp for Excel)
    + #1886: Allow use of '@JsonFormat(with=JsonFormat.Feature
    .ACCEPT_CASE_INSENSITIVE_PROPERTIES)' on Class
    + #1919: Abstract class included as part of known type ids for
    error message   when using JsonSubTypes
    + #2066: Distinguish null from empty string for UUID
    deserialization
    + #2091: 'ReferenceType' does not expose valid containedType
    + #2113: Add 'CoercionConfig[s]' mechanism for configuring
    allowed coercions
    + #2118: 'JsonProperty.Access.READ_ONLY' does not work with
    "getter-as-setter" 'Collection's
    + #2215: Support 'BigInteger' and 'BigDecimal' creators in
    'StdValueInstantiator'
    + #2283: 'JsonProperty.Access.READ_ONLY' fails with collections
    when a property name is specified
    + #2644: 'BigDecimal' precision not retained for polymorphic
    deserialization
    + #2675: Support use of 'Void' valued properties
    ('MapperFeature.ALLOW_VOID_VALUED_PROPERTIES')
    + #2683: Explicitly fail (de)serialization of 'java.time.*'
    types in absence of registered custom (de)serializers
    + #2707: Improve description included in by
    'DeserializationContext.handleUnexpectedToken()'
    + #2709: Support for JDK 14 record types ('java.lang.Record')
    + #2715: 'PropertyNamingStrategy' class initialization depends
    on its subclass, this can lead to class loading deadlock
    + #2719: 'FAIL_ON_IGNORED_PROPERTIES' does not throw on
    'READONLY' properties with an explicit name
    + #2726: Add Gradle Module Metadata for version alignment with
    Gradle 6
    + #2732: Allow 'JsonNode' auto-convert into 'ArrayNode' if
    duplicates found (for XML)
    + #2733: Allow values of "untyped" auto-convert into 'List' if
    duplicates found (for XML)
    + #2751: Add 'ValueInstantiator.createContextual(...)
    + #2761: Support multiple names in 'JsonSubType.Type'
    + #2775: Disabling 'FAIL_ON_INVALID_SUBTYPE' breaks polymorphic
    deserialization of Enums
    + #2776: Explicitly fail (de)serialization of 'org.joda.time.*'
    types in absence of registered custom (de)serializers
    + #2784: Trailing zeros are stripped when deserializing
    BigDecimal values inside a @JsonUnwrapped property
    + #2800: Extract getter/setter/field name mangling from
    'BeanUtil' into pluggable 'AccessorNamingStrategy'
    + #2804: Throw 'InvalidFormatException' instead of
    'MismatchedInputException' for ACCEPT_FLOAT_AS_INT coercion
    failures
    + #2871: Add '@JsonKey' annotation (similar to '@JsonValue') for
    customizable serialization of Map keys
    + #2873: 'MapperFeature.ACCEPT_CASE_INSENSITIVE_ENUMS' should
    work for enum as keys
    + #2879: Add support for disabling special handling of "Creator
    properties" wrt alphabetic property ordering
    + #2885: Add 'JsonNode.canConvertToExactIntegral()' to indicate
    whether floating-point/BigDecimal values could be converted to
    integers losslessly
    + #2895: Improve static factory method generic type resolution
    logic
    + #2903: Allow preventing "Enum from integer" coercion using new
    'CoercionConfig' system
    + #2909: '@JsonValue' not considered when evaluating inclusion
    + #2910: Make some java platform modules optional
    + #2925: Add support for serializing 'java.sql.Blob'
    + #2928: 'AnnotatedCreatorCollector' should avoid processing
    synthetic static (factory) methods
    + #2931: Add errorprone static analysis profile to detect bugs
    at build time
    + #2932: Problem with implicit creator name detection for
    constructor detection
    + Add 'BeanDeserializerBase.isCaseInsensitive()'
    + Some refactoring of 'CollectionDeserializer' to solve CSV
    array handling issues
    + Full "LICENSE" included in jar for easier access by compliancy
    tools
  * 2.11.4 (12-Dec-2020)
    + #2894: Fix type resolution for static methods (regression in
    2.11.3 due to #2821 fix)
    + #2944: '@JsonCreator' on constructor not compatible with
    '@JsonIdentityInfo', 'PropertyGenerator'
    + Add debug improvements wrt
    [#2807] ('ClassUtil.getClassMethods()')
  * 2.11.3 (02-Oct-2020)
    + #2795: Cannot detect creator arguments of mixins for JDK types
    + #2815: Add 'JsonFormat.Shape' awareness for UUID serialization
    ('UUIDSerializer')
    + #2821: Json serialization fails or a specific case that
    contains generics and static methods with generic parameters
    (2.11.1 -&gt; 2.11.2 regression)
    + #2822: Using JsonValue and JsonFormat on one field does not
    work as expected
    + #2840: 'ObjectMapper.activateDefaultTypingAsProperty()' is not
    using parameter 'PolymorphicTypeValidator'
    + #2846: Problem deserialization "raw generic" fields
    (like 'Map') in 2.11.2
    + Fix issues with 'MapLikeType.isTrueMapType()',
    'CollectionLikeType.isTrueCollectionType()'
  * 2.11.2 (02-Aug-2020)
    + #2783: Parser/Generator features not set when using
    'ObjectMapper.createParser()', 'createGenerator()'
    + #2785: Polymorphic subtypes not registering on copied
    ObjectMapper (2.11.1)
    + #2789: Failure to read AnnotatedField value in Jackson 2.11
    + #2796: 'TypeFactory.constructType()' does not take
    'TypeBindings' correctly
  * 2.11.1 (25-Jun-2020)
    + #2486: Builder Deserialization with JsonCreator Value vs Array
    + #2725: JsonCreator on static method in Enum and Enum used as
    key in map fails randomly
    + #2755: 'StdSubtypeResolver' is not thread safe (possibly due
    to copy not being made with 'ObjectMapper.copy()')
    + #2757: "Conflicting setter definitions for property" exception
    for 'Map' subtype during deserialization
    + #2758: Fail to deserialize local Records
    + #2759: Rearranging of props when property-based generator is
    in use leads to incorrect output
    + #2760: Jackson doesn't respect
    'CAN_OVERRIDE_ACCESS_MODIFIERS=false' for deserializer
    properties
    + #2767: 'DeserializationFeature.UNWRAP_SINGLE_VALUE_ARRAYS'
    don't support 'Map' type field
    + #2770: JsonParser from MismatchedInputException cannot
    getText() for floating-point value
  * 2.11.0 (26-Apr-2020)
    + #953: i-I case conversion problem in Turkish locale with
    case-insensitive deserialization
    + #962: '@JsonInject' fails on trying to find deserializer even
    if inject-only
    + #1983: Polymorphic deserialization should handle
    case-insensitive Type Id property name if
    'MapperFeature.ACCEPT_CASE_INSENSITIVE_PROPERTIES' is enabled
    + #2049: TreeTraversingParser and UTF8StreamJsonParser create
    contexts differently
    + #2352: Support use of '@JsonAlias' for enum values
    + #2365: 'declaringClass' of "enum-as-POJO" not removed for
    'ObjectMapper' with a naming strategy
    + #2480: Fix 'JavaType.isEnumType()' to support sub-classes
    + #2487: BeanDeserializerBuilder Protected Factory Method for
    Extension
    + #2503: Support '@JsonSerialize(keyUsing)' and
    '@JsonDeserialize(keyUsing)' on Key class
    + #2511: Add 'SerializationFeature.WRITE_SELF_REFERENCES_AS_NULL'
    + #2515: 'ObjectMapper.registerSubtypes(NamedType...)' doesn't
    allow registering same POJO for two different type ids
    + #2522: 'DeserializationContext.handleMissingInstantiator()'
    throws 'MismatchedInputException' for non-static inner classes
    + #2525: Incorrect 'JsonStreamContext' for 'TokenBuffer' and
    'TreeTraversingParser'
    + #2527: Add 'AnnotationIntrospector.findRenameByField()' to
    support Kotlin's "is-getter" naming convention
    + #2555: Use '@JsonProperty(index)' for sorting properties on
    serialization
    + #2565: Java 8 'Optional' not working with '@JsonUnwrapped' on
    unwrappable type
    + #2587: Add 'MapperFeature.BLOCK_UNSAFE_POLYMORPHIC_BASE_TYPES'
    to allow blocking use of unsafe base type for polymorphic
    deserialization
    + #2589: 'DOMDeserializer': setExpandEntityReferences(false) may
    not prevent external entity expansion in all cases
    [CVE-2020-25649]
    + #2592: 'ObjectMapper.setSerializationInclusion()' is ignored
    for 'JsonAnyGetter'
    + #2608: 'ValueInstantiationException' when deserializing using
    a builder and 'UNWRAP_SINGLE_VALUE_ARRAYS'
    + #2627: JsonIgnoreProperties(ignoreUnknown = true) does not
    work on field and method level
    + #2632: Failure to resolve generic type parameters on
    serialization
    + #2635: JsonParser cannot getText() for input stream on
    MismatchedInputException
    + #2636: ObjectReader readValue lacks Class&lt;T&gt; argument
    + #2643: Change default textual serialization of
    'java.util.Date'/'Calendar' to include colon in timezone
    offset
    + #2647: Add 'ObjectMapper.createParser()' and
    'createGenerator()' methods
    + #2657: Allow serialization of 'Properties' with
    non-String values
    + #2663: Add new factory method for creating custom 'EnumValues'
    to pass to 'EnumDeserializer
    + #2668: 'IllegalArgumentException' thrown for mismatched
    subclass deserialization
    + #2693: Add convenience methods for creating 'List', 'Map'
    valued 'ObjectReader's (ObjectMapper.readerForListOf())
    + Add 'SerializerProvider.findContentValueSerializer()' methods</changelog>
</package>
<package pkgid="4d765e312172189b98a9a4131b4c186163e5fdd46e32d082f96747f6aaa32a9f" name="jackson-databind-javadoc" arch="noarch">
  <version epoch="0" ver="2.13.0" rel="150200.3.9.1"/>
  <changelog author="fstrba@suse.com" date="1569931200">- Initial packaging of jackson-databind 2.9.4</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574164800">- Update to 2.10.1 [bsc#1157186, CVE-2019-14893]
  * 2.10.1 (09-Nov-2019)
    [#2457]: Extended enum values are not handled as enums when used as Map keys
    [#2473]: Array index missing in path of 'JsonMappingException' for 'Collection&lt;String&gt;',
    with custom deserializer
    [#2475]: 'StringCollectionSerializer' calls 'JsonGenerator.setCurrentValue(value)',
    which messes up current value for sibling properties
    [#2485]: Add 'uses' for 'Module' in module-info
    [#2513]: BigDecimalAsStringSerializer in NumberSerializer throws IllegalStateException in 2.10
    [#2519]: Serializing 'BigDecimal' values inside containers ignores shape override
    [#2520]: Sub-optimal exception message when failing to deserialize non-static inner classes
    [#2529]: Add tests to ensure 'EnumSet' and 'EnumMap' work correctly with "null-as-empty"
    [#2534]: Add 'BasicPolymorphicTypeValidator.Builder.allowIfSubTypeIsArray()'
    [#2535]: Allow String-to-byte[] coercion for String-value collections
  * 2.10.0 (26-Sep-2019)
    [#18]: Make 'JsonNode' serializable
    [#1093]: Default typing does not work with 'writerFor(Object.class)'
    [#1675]: Remove "impossible" 'IOException' in 'readTree()' and 'readValue()' 'ObjectMapper'
    methods which accept Strings
    [#1954]: Add Builder pattern for creating configured 'ObjectMapper' instances
    [#1995]: Limit size of 'DeserializerCache', auto-flush on exceeding
    [#2059]: Remove 'final' modifier for 'TypeFactory'
    [#2077]: 'JsonTypeInfo' with a subtype having 'JsonFormat.Shape.ARRAY' and
    no fields generates '{}' not '[]'
    [#2115]: Support naive deserialization of 'Serializable' values as "untyped", same
    as 'java.lang.Object'
    [#2116]: Make NumberSerializers.Base public and its inherited classes not final
    [#2126]: 'DeserializationContext.instantiationException()' throws 'InvalidDefinitionException'
    [#2129]: Add 'SerializationFeature.WRITE_ENUM_KEYS_USING_INDEX', separate from value setting
    [#2133]: Improve 'DeserializationProblemHandler.handleUnexpectedToken()' to allow handling of
    Collection problems
    [#2149]: Add 'MapperFeature.ACCEPT_CASE_INSENSITIVE_VALUES'
    [#2153]: Add 'JsonMapper' to replace generic 'ObjectMapper' usage
    [#2164]: 'FactoryBasedEnumDeserializer' does not respect
    'DeserializationFeature.WRAP_EXCEPTIONS'
    [#2187]: Make 'JsonNode.toString()' use shared 'ObjectMapper' to produce valid json
    [#2189]: 'TreeTraversingParser' does not check int bounds
    [#2195]: Add abstraction 'PolymorphicTypeValidator', for limiting subtypes allowed by
    default typing, '@JsonTypeInfo'
    [#2196]: Type safety for 'readValue()' with 'TypeReference'
    [#2204]: Add 'JsonNode.isEmpty()' as convenience alias
    [#2211]: Change of behavior (2.8 -&gt; 2.9) with 'ObjectMapper.readTree(input)' with no content
    [#2217]: Suboptimal memory allocation in 'TextNode.getBinaryValue()'
    [#2220]: Force serialization always for 'convertValue()'; avoid short-cuts
    [#2223]: Add 'missingNode()' method in 'JsonNodeFactory'
    [#2227]: Minor cleanup of exception message for 'Enum' binding failure
    [#2230]: 'WRITE_BIGDECIMAL_AS_PLAIN' is ignored if '@JsonFormat' is used
    [#2236]: Type id not provided on 'Double.NaN', 'Infinity' with '@JsonTypeInfo'
    [#2237]: Add "required" methods in 'JsonNode': 'required(String | int)',
    'requiredAt(JsonPointer)'
    [#2241]: Add 'PropertyNamingStrategy.LOWER_DOT_CASE' for dot-delimited names
    [#2251]: Getter that returns an abstract collection breaks a delegating '@JsonCreator'
    [#2265]: Inconsistent handling of Collections$UnmodifiableList vs
    Collections$UnmodifiableRandomAccessListq
    [#2273]: Add basic Java 9+ module info
    [#2280]: JsonMerge not work with constructor args
    [#2309]: READ_ENUMS_USING_TO_STRING doesn't support null values
    [#2311]: Unnecessary MultiView creation for property writers
    [#2331]: 'JsonMappingException' through nested getter with generic wildcard return type
    [#2336]: 'MapDeserializer' can not merge 'Map's with polymorphic values
    [#2338]: Suboptimal return type for 'JsonNode.withArray()'
    [#2339]: Suboptimal return type for 'ObjectNode.set()'
    [#2348]: Add sanity checks for 'ObjectMapper.readXXX()' methods
    [#2349]: Add option 'DefaultTyping.EVERYTHING' to support Kotlin data classes
    [#2357]: Lack of path on MismatchedInputException
    [#2378]: '@JsonAlias' doesn't work with AutoValue
    [#2390]: 'Iterable' serialization breaks when adding '@JsonFilter' annotation
    [#2392]: 'BeanDeserializerModifier.modifyDeserializer()' not applied to custom bean
    deserializers
    [#2393]: 'TreeTraversingParser.getLongValue()' incorrectly checks 'canConvertToInt()'
    [#2398]: Replace recursion in 'TokenBuffer.copyCurrentStructure()' with iteration
    [#2415]: Builder-based POJO deserializer should pass builder instance, not type,
    to 'handleUnknownVanilla()'
    [#2416]: Optimize 'ValueInstantiator' construction for default 'Collection', 'Map' types
    [#2422]: 'scala.collection.immutable.ListMap' fails to serialize since 2.9.3
    [#2424]: Add global config override setting for '@JsonFormat.lenient()'
    [#2428]: Use "activateDefaultTyping" over "enableDefaultTyping" in 2.10 with new methods
    [#2430]: Change 'ObjectMapper.valueToTree()' to convert 'null' to 'NullNode'
    [#2432]: Add support for module bundles
    [#2433]: Improve 'NullNode.equals()'
    [#2442]: 'ArrayNode.addAll()' adds raw 'null' values which cause NPE on 'deepCopy()'
    and 'toString()'
    [#2446]: Java 11: Unable to load JDK7 types (annotations, java.nio.file.Path): no Java7 support added
    [#2451]: Add new 'JsonValueFormat' value, 'UUID'
    [#2453]: Add 'DeserializationContext.readTree(JsonParser)' convenience method
    [#2458]: 'Nulls' property metadata ignored for creators
    [#2466]: Didn't find class "java.nio.file.Path" below Android api 26
    [#2467]: Accept 'JsonTypeInfo.As.WRAPPER_ARRAY' with no second argument to
    deserialize as "null value"
  * 2.9.10.1 (20-Oct-2019)
    [#2478]: Block two more gadget types (commons-dbcp, p6spy, CVE-2019-16942 / CVE-2019-16943)
    [#2498]: Block one more gadget type (log4j-extras/1.2, CVE-2019-17531)
  * 2.9.10 (21-Sep-2019)
    [#2331]: 'JsonMappingException' through nested getter with generic wildcard return type
    [#2334]: Block one more gadget type (CVE-2019-12384)
    [#2341]: Block one more gadget type (CVE-2019-12814)
    [#2374]: 'ObjectMapper. getRegisteredModuleIds()' throws NPE if no modules registered
    [#2387]: Block yet another deserialization gadget (CVE-2019-14379)
    [#2389]: Block yet another deserialization gadget (CVE-2019-14439)
    [#2404]: FAIL_ON_MISSING_EXTERNAL_TYPE_ID_PROPERTY setting ignored when
    creator properties are buffered
    [#2410]: Block one more gadget type (CVE-2019-14540)
    [#2420]: Block one more gadget type (no CVE allocated yet)
    [#2449]: Block one more gadget type (CVE-2019-14540)
    [#2460]: Block one more gadget type (ehcache, CVE-2019-17267)
    [#2462]: Block two more gadget types (commons-configuration)
    [#2469]: Block one more gadget type (xalan2)
  * 2.9.9 (16-May-2019)
    [#1408]: Call to 'TypeVariable.getBounds()' without synchronization unsafe on some platforms
    [#2221]: 'DeserializationProblemHandler.handleUnknownTypeId()' returning 'Void.class',
    enableDefaultTyping causing NPE
    [#2251]: Getter that returns an abstract collection breaks a delegating '@JsonCreator'
    [#2265]: Inconsistent handling of Collections$UnmodifiableList vs Collections$UnmodifiableRandomAccessList
    [#2299]: Fix for using jackson-databind in an OSGi environment under Android
    [#2303]: Deserialize null, when java type is "TypeRef of TypeRef of T", does not provide "Type(Type(null))"
    [#2324]: 'StringCollectionDeserializer' fails with custom collection
    [#2326]: Block one more gadget type (CVE-2019-12086)
- Prevent String coercion of 'null' in 'WritableObjectId' when calling 'JsonGenerator.writeObjectId()',
    mostly relevant for formats like YAML that have native Object Ids
  * 2.9.8 (15-Dec-2018)
    [#1662]: 'ByteBuffer' serialization is broken if offset is not 0
    [#2155]: Type parameters are checked for equality while isAssignableFrom expected
    [#2167]: Large ISO-8601 Dates are formatted/serialized incorrectly
    [#2181]: Don't re-use dynamic serializers for property-updating copy constructors
    [#2183]: Base64 JsonMappingException: Unexpected end-of-input
    [#2186]: Block more classes from polymorphic deserialization (CVE-2018-19360,
    CVE-2018-19361, CVE-2018-19362)
    [#2197]: Illegal reflective access operation warning when using 'java.lang.Void'
    as value type
    [#2202]: StdKeyDeserializer Class method _getToStringResolver is slow causing Thread Block
  * 2.9.7 (19-Sep-2018)
    [#2060]: 'UnwrappingBeanPropertyWriter' incorrectly assumes the found serializer is
    of type 'UnwrappingBeanSerializer'
    [#2064]: Cannot set custom format for 'SqlDateSerializer' globally
    [#2079]: NPE when visiting StaticListSerializerBase
    [#2082]: 'FactoryBasedEnumDeserializer' should be cachable
    [#2088]: '@JsonUnwrapped' fields are skipped when using 'PropertyBasedCreator' if
    they appear after the last creator property
    [#2096]: 'TreeTraversingParser' does not take base64 variant into account
    [#2097]: Block more classes from polymorphic deserialization (CVE-2018-14718
  - CVE-2018-14721)
    [#2109]: Canonical string for reference type is built incorrectly
    [#2120]: 'NioPathDeserializer' improvement
    [#2128]: Location information included twice for some 'JsonMappingException's
  * 2.9.6 (12-Jun-2018)
    [#955]: Add 'MapperFeature.USE_BASE_TYPE_AS_DEFAULT_IMPL' to use declared base type
    as 'defaultImpl' for polymorphic deserialization
    [#1328]: External property polymorphic deserialization does not work with enums
    [#1565]: Deserialization failure with Polymorphism using JsonTypeInfo 'defaultImpl',
    subtype as target
    [#1964]: Failed to specialize 'Map' type during serialization where key type
    incompatibility overidden via "raw" types
    [#1990]: MixIn '@JsonProperty' for 'Object.hashCode()' is ignored
    [#1991]: Context attributes are not passed/available to custom serializer if object is in POJO
    [#1998]: Removing "type" attribute with Mixin not taken in account if
    using ObjectMapper.copy()
    [#1999]: "Duplicate property" issue should mention which class it complains about
    [#2001]: Deserialization issue with '@JsonIgnore' and '@JsonCreator' + '@JsonProperty'
    for same property name
    [#2015]: '@Jsonsetter with Nulls.SKIP' collides with
    'DeserializationFeature.READ_UNKNOWN_ENUM_VALUES_AS_NULL' when parsing enum
    [#2016]: Delegating JsonCreator disregards JsonDeserialize info
    [#2019]: Abstract Type mapping in 2.9 fails when multiple modules are registered
    [#2021]: Delegating JsonCreator disregards 'JsonDeserialize.using' annotation
    [#2023]: 'JsonFormat.Feature.ACCEPT_EMPTY_STRING_AS_NULL_OBJECT' not working
    with 'null' coercion with '@JsonSetter'
    [#2027]: Concurrency error causes 'IllegalStateException' on 'BeanPropertyMap'
    [#2032]: CVE-2018-11307: Potential information exfiltration with default typing,
    serialization gadget from MyBatis
    [#2034]: Serialization problem with type specialization of nested generic types
    [#2038]: JDK Serializing and using Deserialized 'ObjectMapper' loses linkage
    back from 'JsonParser.getCodec()'
    [#2051]: Implicit constructor property names are not renamed properly with
    'PropertyNamingStrategy'
    [#2052]: CVE-2018-12022: Block polymorphic deserialization of types from Jodd-db library
    [#2058]: CVE-2018-12023: Block polymorphic deserialization of types from Oracle JDBC driver
  * 2.9.5 (26-Mar-2018)
    [#1911]: Allow serialization of 'BigDecimal' as String, using
    '@JsonFormat(shape=Shape.String)', config overrides
    [#1912]: 'BeanDeserializerModifier.updateBuilder()' not work to set custom
    deserializer on a property (since 2.9.0)
    [#1931]: Two more 'c3p0' gadgets to exploit default typing issue
    [#1932]: 'EnumMap' cannot deserialize with type inclusion as property
    [#1940]: 'Float' values with integer value beyond 'int' lose precision if
    bound to 'long'
    [#1941]: 'TypeFactory.constructFromCanonical()' throws NPE for Unparameterized
    generic canonical strings
    [#1947]: 'MapperFeature.AUTO_DETECT_XXX' do not work if all disabled
    [#1977]: Serializing an Iterator with multiple sub-types fails after upgrading to 2.9.x
    [#1978]: Using @JsonUnwrapped annotation in builderdeserializer hangs in infinite loop
- Remove patch fixed upstream:
  * CVE-2018-7489.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578398400">- Update to 2.10.2 [bsc#1160113, CVE-2019-20330]
    [#2101]: 'FAIL_ON_NULL_FOR_PRIMITIVES' failure does not indicate field name in exception message
    [#2544]: java.lang.NoClassDefFoundError Thrown for compact profile1
    [#2553]: JsonDeserialize(contentAs=...) broken with raw collections
    [#2556]: Contention in 'TypeNameIdResolver.idFromClass()'
    [#2560]: Check 'WRAP_EXCEPTIONS' in 'CollectionDeserializer.handleNonArray()'
    [#2564]: Fix 'IllegalArgumentException' on empty input collection for 'ArrayBlockingQueue'
    [#2566]: 'MissingNode.toString()' returns 'null' (4 character token) instead of empty string
    [#2567]: Incorrect target type for arrays when providing nulls and nulls are disabled
    [#2573]: Problem with 'JsonInclude' config overrides for 'java.util.Map'
    [#2576]: Fail to serialize 'Enum' instance which includes a method override
    as POJO (shape = Shape.OBJECT)
    Fix an issue with 'ObjectReader.with(JsonParser.Feature)' (and related) not working</changelog>
  <changelog author="fstrba@suse.com" date="1585224000">- Update to 2.10.3
  * #2482: JSONMappingException Location column number is one line
    Behind the actual location
  * #2599: NoClassDefFoundError at DeserializationContext. on
    Android 4.1.2 and Jackson 2.10.0
  * #2602: ByteBufferSerializer produces unexpected results with a
    duplicated ByteBuffer and a position &gt; 0
  * #2605: Failure to deserialize polymorphic subtypes of base
    type Enum
  * #2610: EXTERNAL_PROPERTY doesn't work with
    @JsonIgnoreProperties</changelog>
  <changelog author="fstrba@suse.com" date="1611576000">- Update to 2.10.5.1
  * #2589: 'DOMDeserializer': setExpandEntityReferences(false) may
    not prevent external entity expansion in all cases
    (CVE-2020-25649, bsc#1177616)
  * #2787 (partial fix): NPE after add mixin for enum
  * #2679: 'ObjectMapper.readValue("123", Void.TYPE)' throws
    "should never occur"
- Vulnerabilities not affecting this version:
  * CVE-2020-35728, bsc#1180391
  * CVE-2021-20190, bsc#1181118</changelog>
  <changelog author="fstrba@suse.com" date="1619438400">- Rewrite to use ant for building in order to be able to use it
  in packages that have to be built before maven</changelog>
  <changelog author="fstrba@suse.com" date="1634731200">- Update to 2.13.0 (CVE-2020-36518, bsc#1197132)
  * 2.13.0 (30-Sep-2021)
    + #1850: '@JsonValue' with integer for enum does not deserialize
    correctly
    + #2509: 'AnnotatedMethod.getValue()/setValue()' doesn't have
    useful exception message
    + #2828: Add 'DatabindException' as intermediate subtype of
    'JsonMappingException'
    + #2900: Jackson does not support deserializing new Java 9
    unmodifiable collections
    + #2989: Allocate TokenBuffer instance via context objects (to
    allow format-specific buffer types)
    + #3001: Add mechanism for setting default 'ContextAttributes'
    for 'ObjectMapper'
    + #3002: Add 'DeserializationContext.readTreeAsValue()' methods
    for more convenient conversions for deserializers to use
    + #3011: Clean up support of typed "unmodifiable", "singleton"
    Maps/Sets/Collections
    + #3033: Extend internal bitfield of 'MapperFeature' to be
    'long'
    + #3035: Add 'removeMixIn()' method in 'MapperBuilder'
    + #3036: Backport 'MapperBuilder' lambda-taking methods:
    'withConfigOverride()', 'withCoercionConfig()',
    'withCoercionConfigDefaults()'
    + #3080: configOverrides(boolean.class) silently ignored,
    whereas .configOverride(Boolean.class) works for both
    primitives and boxed boolean values
    + #3082: Dont track unknown props in buffer if
    'ignoreAllUnknown' is true
    + #3091: Should allow deserialization of java.time types via
    opaque 'JsonToken.VALUE_EMBEDDED_OBJECT'
    + #3099: Optimize "AnnotatedConstructor.call()" case by passing
    explicit null
    + #3101: Add AnnotationIntrospector.XmlExtensions interface for
    decoupling javax dependencies
    + #3110: Custom SimpleModule not included in list returned by
    ObjectMapper.getRegisteredModuleIds() after registration
    + #3117: Use more limiting default visibility settings for JDK
    types (java.*, javax.*)
    + #3122: Deep merge for 'JsonNode' using
    'ObjectReader.readTree()'
    + #3125: IllegalArgumentException: Conflicting setter
    definitions for property with more than 2 setters
    + #3130: Serializing java.lang.Thread fails on JDK 11 and above
    (should suppress serialization of ClassLoader)
    + #3143: String-based 'Map' key deserializer is not
    deterministic when there is no single arg constructor
    + #3154: Add ArrayNode#set(int index, primitive_type value)
    + #3160: JsonStreamContext "currentValue" wrongly references to
    @JsonTypeInfo annotated object
    + #3174: DOM 'Node' serialization omits the default namespace
    declaration
    + #3177: Support 'suppressed' property when deserializing
    'Throwable'
    + #3187: 'AnnotatedMember.equals()' does not work reliably
    + #3193: Add 'MapperFeature.APPLY_DEFAULT_VALUES', initially for
    Scala module
    + #3214: For an absent property Jackson injects 'NullNode'
    instead of 'null' to a JsonNode-typed constructor argument of
    a '@ConstructorProperties'-annotated constructor
    + #3217: 'XMLGregorianCalendar' doesn't work with default typing
    + #3227: Content 'null' handling not working for root values
    + #3234: StdDeserializer rejects blank (all-whitespace) strings
    for ints
    + #3235: 'USE_BASE_TYPE_AS_DEFAULT_IMPL' not working with
    'DefaultTypeResolverBuilder'
    + #3238: Add PropertyNamingStrategies.UpperSnakeCaseStrategy
    (and UPPER_SNAKE_CASE constant)
    + #3244: StackOverflowError when serializing
    JsonProcessingException
    + #3259: Support for BCP 47 'java.util.Locale'
    serialization/deserialization
    + #3271: String property deserializes null as "null" for
    JsonTypeInfo.As.EXISTING_PROPERTY
    + #3280: Can not deserialize json to enum value with
    Object-/Array-valued input, '@JsonCreator'
    + Fix to avoid problem with 'BigDecimalNode', scale of
    'Integer.MIN_VALUE'
    + Extend handling of 'FAIL_ON_NULL_FOR_PRIMITIVES' to cover
    coercion from (Empty) String via 'AsNull'
    + Add 'mvnw' wrapper
  * 2.12.5 (27-Aug-2021)
    + #3220: (regression) Factory method generic type resolution
    does not use Class-bound type parameter
  * 2.12.4 (06-Jul-2021)
    + #3139: Deserialization of "empty" subtype with DEDUCTION
    failed
    + #3146: Merge findInjectableValues() results in
    AnnotationIntrospectorPair
    + #3171: READ_UNKNOWN_ENUM_VALUES_USING_DEFAULT_VALUE doesn't
    work with empty strings
  * 2.12.3 (12-Apr-2021)
    + #3108: 'TypeFactory' cannot convert 'Collection' sub-type
    without type parameters
  to canonical form and back
    + Fix for [modules-java8#207]: prevent fail on secondary Java 8
    date/time types
  * 2.12.2 (03-Mar-2021)
    + #754: EXTERNAL_PROPERTY does not work well with '@JsonCreator'
    and 'FAIL_ON_UNKNOWN_PROPERTIES'
    + #3008: String property deserializes null as "null" for
    'JsonTypeInfo.As.EXTERNAL_PROPERTY'
    + #3022: Property ignorals cause 'BeanDeserializer 'to forget
    how to read from arrays (not copying
    '_arrayDelegateDeserializer')
    + #3025: UntypedObjectDeserializer' mixes multiple unwrapped
    collections (related to #2733)
    + #3038: Two cases of incorrect error reporting about
    DeserializationFeature
    + #3045: Bug in polymorphic deserialization with '@JsonCreator',
    '@JsonAnySetter', 'JsonTypeInfo.As.EXTERNAL_PROPERTY'
    + #3055: Polymorphic subtype deduction ignores 'defaultImpl'
    attribute
    + #3056: MismatchedInputException: Cannot deserialize instance
    of 'com.fasterxml.jackson.databind.node.ObjectNode' out of
    VALUE_NULL token
    + #3060: Missing override for 'hasAsKey()' in
    'AnnotationIntrospectorPair'
    + #3062: Creator lookup fails with 'InvalidDefinitionException'
    for conflict between single-double/single-Double arg
    constructor
    + #3068: 'MapDeserializer' forcing 'JsonMappingException'
    wrapping even if WRAP_EXCEPTIONS set to false
  * 2.12.1 (08-Jan-2021)
    + #2962: Auto-detection of constructor-based creator method
    skipped if there is an annotated factory-based creator method
    (regression from 2.11)
    + #2972: 'ObjectMapper.treeToValue()' no longer invokes
    'JsonDeserializer.getNullValue()'
    + #2973: DeserializationProblemHandler is not invoked when
    trying to deserialize String
    + #2978: Fix failing 'double' JsonCreators in jackson 2.12.0
    + #2979: Conflicting in POJOPropertiesCollector when having
    namingStrategy
    + #2990: Breaking API change in 'BasicClassIntrospector'
    (2.12.0)
    + #3005: 'JsonNode.requiredAt()' does NOT fail on some path
    expressions
    + #3009: Exception thrown when 'Collections.synchronizedList()'
    is serialized with type info, deserialized
  * 2.12.0 (29-Nov-2020)
    + #43: Add option to resolve type from multiple existing
    properties, '@JsonTypeInfo(use=DEDUCTION)'
    + #426: '@JsonIgnoreProperties' does not prevent Exception
    Conflicting getter/setter definitions for property
    + #921: Deserialization Not Working Right with Generic Types and
    Builders
    + #1296: Add '@JsonIncludeProperties(propertyNames)' (reverse of
    '@JsonIgnoreProperties')
    + #1458: '@JsonAnyGetter' should be allowed on a field
    + #1498: Allow handling of single-arg constructor as property
    based by default
    + #1852: Allow case insensitive deserialization of String value
    into 'boolean'/'Boolean' (esp for Excel)
    + #1886: Allow use of '@JsonFormat(with=JsonFormat.Feature
    .ACCEPT_CASE_INSENSITIVE_PROPERTIES)' on Class
    + #1919: Abstract class included as part of known type ids for
    error message   when using JsonSubTypes
    + #2066: Distinguish null from empty string for UUID
    deserialization
    + #2091: 'ReferenceType' does not expose valid containedType
    + #2113: Add 'CoercionConfig[s]' mechanism for configuring
    allowed coercions
    + #2118: 'JsonProperty.Access.READ_ONLY' does not work with
    "getter-as-setter" 'Collection's
    + #2215: Support 'BigInteger' and 'BigDecimal' creators in
    'StdValueInstantiator'
    + #2283: 'JsonProperty.Access.READ_ONLY' fails with collections
    when a property name is specified
    + #2644: 'BigDecimal' precision not retained for polymorphic
    deserialization
    + #2675: Support use of 'Void' valued properties
    ('MapperFeature.ALLOW_VOID_VALUED_PROPERTIES')
    + #2683: Explicitly fail (de)serialization of 'java.time.*'
    types in absence of registered custom (de)serializers
    + #2707: Improve description included in by
    'DeserializationContext.handleUnexpectedToken()'
    + #2709: Support for JDK 14 record types ('java.lang.Record')
    + #2715: 'PropertyNamingStrategy' class initialization depends
    on its subclass, this can lead to class loading deadlock
    + #2719: 'FAIL_ON_IGNORED_PROPERTIES' does not throw on
    'READONLY' properties with an explicit name
    + #2726: Add Gradle Module Metadata for version alignment with
    Gradle 6
    + #2732: Allow 'JsonNode' auto-convert into 'ArrayNode' if
    duplicates found (for XML)
    + #2733: Allow values of "untyped" auto-convert into 'List' if
    duplicates found (for XML)
    + #2751: Add 'ValueInstantiator.createContextual(...)
    + #2761: Support multiple names in 'JsonSubType.Type'
    + #2775: Disabling 'FAIL_ON_INVALID_SUBTYPE' breaks polymorphic
    deserialization of Enums
    + #2776: Explicitly fail (de)serialization of 'org.joda.time.*'
    types in absence of registered custom (de)serializers
    + #2784: Trailing zeros are stripped when deserializing
    BigDecimal values inside a @JsonUnwrapped property
    + #2800: Extract getter/setter/field name mangling from
    'BeanUtil' into pluggable 'AccessorNamingStrategy'
    + #2804: Throw 'InvalidFormatException' instead of
    'MismatchedInputException' for ACCEPT_FLOAT_AS_INT coercion
    failures
    + #2871: Add '@JsonKey' annotation (similar to '@JsonValue') for
    customizable serialization of Map keys
    + #2873: 'MapperFeature.ACCEPT_CASE_INSENSITIVE_ENUMS' should
    work for enum as keys
    + #2879: Add support for disabling special handling of "Creator
    properties" wrt alphabetic property ordering
    + #2885: Add 'JsonNode.canConvertToExactIntegral()' to indicate
    whether floating-point/BigDecimal values could be converted to
    integers losslessly
    + #2895: Improve static factory method generic type resolution
    logic
    + #2903: Allow preventing "Enum from integer" coercion using new
    'CoercionConfig' system
    + #2909: '@JsonValue' not considered when evaluating inclusion
    + #2910: Make some java platform modules optional
    + #2925: Add support for serializing 'java.sql.Blob'
    + #2928: 'AnnotatedCreatorCollector' should avoid processing
    synthetic static (factory) methods
    + #2931: Add errorprone static analysis profile to detect bugs
    at build time
    + #2932: Problem with implicit creator name detection for
    constructor detection
    + Add 'BeanDeserializerBase.isCaseInsensitive()'
    + Some refactoring of 'CollectionDeserializer' to solve CSV
    array handling issues
    + Full "LICENSE" included in jar for easier access by compliancy
    tools
  * 2.11.4 (12-Dec-2020)
    + #2894: Fix type resolution for static methods (regression in
    2.11.3 due to #2821 fix)
    + #2944: '@JsonCreator' on constructor not compatible with
    '@JsonIdentityInfo', 'PropertyGenerator'
    + Add debug improvements wrt
    [#2807] ('ClassUtil.getClassMethods()')
  * 2.11.3 (02-Oct-2020)
    + #2795: Cannot detect creator arguments of mixins for JDK types
    + #2815: Add 'JsonFormat.Shape' awareness for UUID serialization
    ('UUIDSerializer')
    + #2821: Json serialization fails or a specific case that
    contains generics and static methods with generic parameters
    (2.11.1 -&gt; 2.11.2 regression)
    + #2822: Using JsonValue and JsonFormat on one field does not
    work as expected
    + #2840: 'ObjectMapper.activateDefaultTypingAsProperty()' is not
    using parameter 'PolymorphicTypeValidator'
    + #2846: Problem deserialization "raw generic" fields
    (like 'Map') in 2.11.2
    + Fix issues with 'MapLikeType.isTrueMapType()',
    'CollectionLikeType.isTrueCollectionType()'
  * 2.11.2 (02-Aug-2020)
    + #2783: Parser/Generator features not set when using
    'ObjectMapper.createParser()', 'createGenerator()'
    + #2785: Polymorphic subtypes not registering on copied
    ObjectMapper (2.11.1)
    + #2789: Failure to read AnnotatedField value in Jackson 2.11
    + #2796: 'TypeFactory.constructType()' does not take
    'TypeBindings' correctly
  * 2.11.1 (25-Jun-2020)
    + #2486: Builder Deserialization with JsonCreator Value vs Array
    + #2725: JsonCreator on static method in Enum and Enum used as
    key in map fails randomly
    + #2755: 'StdSubtypeResolver' is not thread safe (possibly due
    to copy not being made with 'ObjectMapper.copy()')
    + #2757: "Conflicting setter definitions for property" exception
    for 'Map' subtype during deserialization
    + #2758: Fail to deserialize local Records
    + #2759: Rearranging of props when property-based generator is
    in use leads to incorrect output
    + #2760: Jackson doesn't respect
    'CAN_OVERRIDE_ACCESS_MODIFIERS=false' for deserializer
    properties
    + #2767: 'DeserializationFeature.UNWRAP_SINGLE_VALUE_ARRAYS'
    don't support 'Map' type field
    + #2770: JsonParser from MismatchedInputException cannot
    getText() for floating-point value
  * 2.11.0 (26-Apr-2020)
    + #953: i-I case conversion problem in Turkish locale with
    case-insensitive deserialization
    + #962: '@JsonInject' fails on trying to find deserializer even
    if inject-only
    + #1983: Polymorphic deserialization should handle
    case-insensitive Type Id property name if
    'MapperFeature.ACCEPT_CASE_INSENSITIVE_PROPERTIES' is enabled
    + #2049: TreeTraversingParser and UTF8StreamJsonParser create
    contexts differently
    + #2352: Support use of '@JsonAlias' for enum values
    + #2365: 'declaringClass' of "enum-as-POJO" not removed for
    'ObjectMapper' with a naming strategy
    + #2480: Fix 'JavaType.isEnumType()' to support sub-classes
    + #2487: BeanDeserializerBuilder Protected Factory Method for
    Extension
    + #2503: Support '@JsonSerialize(keyUsing)' and
    '@JsonDeserialize(keyUsing)' on Key class
    + #2511: Add 'SerializationFeature.WRITE_SELF_REFERENCES_AS_NULL'
    + #2515: 'ObjectMapper.registerSubtypes(NamedType...)' doesn't
    allow registering same POJO for two different type ids
    + #2522: 'DeserializationContext.handleMissingInstantiator()'
    throws 'MismatchedInputException' for non-static inner classes
    + #2525: Incorrect 'JsonStreamContext' for 'TokenBuffer' and
    'TreeTraversingParser'
    + #2527: Add 'AnnotationIntrospector.findRenameByField()' to
    support Kotlin's "is-getter" naming convention
    + #2555: Use '@JsonProperty(index)' for sorting properties on
    serialization
    + #2565: Java 8 'Optional' not working with '@JsonUnwrapped' on
    unwrappable type
    + #2587: Add 'MapperFeature.BLOCK_UNSAFE_POLYMORPHIC_BASE_TYPES'
    to allow blocking use of unsafe base type for polymorphic
    deserialization
    + #2589: 'DOMDeserializer': setExpandEntityReferences(false) may
    not prevent external entity expansion in all cases
    [CVE-2020-25649]
    + #2592: 'ObjectMapper.setSerializationInclusion()' is ignored
    for 'JsonAnyGetter'
    + #2608: 'ValueInstantiationException' when deserializing using
    a builder and 'UNWRAP_SINGLE_VALUE_ARRAYS'
    + #2627: JsonIgnoreProperties(ignoreUnknown = true) does not
    work on field and method level
    + #2632: Failure to resolve generic type parameters on
    serialization
    + #2635: JsonParser cannot getText() for input stream on
    MismatchedInputException
    + #2636: ObjectReader readValue lacks Class&lt;T&gt; argument
    + #2643: Change default textual serialization of
    'java.util.Date'/'Calendar' to include colon in timezone
    offset
    + #2647: Add 'ObjectMapper.createParser()' and
    'createGenerator()' methods
    + #2657: Allow serialization of 'Properties' with
    non-String values
    + #2663: Add new factory method for creating custom 'EnumValues'
    to pass to 'EnumDeserializer
    + #2668: 'IllegalArgumentException' thrown for mismatched
    subclass deserialization
    + #2693: Add convenience methods for creating 'List', 'Map'
    valued 'ObjectReader's (ObjectMapper.readerForListOf())
    + Add 'SerializerProvider.findContentValueSerializer()' methods</changelog>
</package>
<package pkgid="89f86bd103b95c7526f6c07673784152b8e5036222bac01642f05eeb8e391b39" name="jackson-dataformat-cbor" arch="noarch">
  <version epoch="0" ver="2.13.0" rel="150200.3.3.3"/>
  <changelog author="fstrba@suse.com" date="1573560000">- Initial packaging of jackson-dataformats-binary 2.9.4</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574251200">- Version update to 2.10.1
  * 2.10.1 (09-Nov-2019)
    + #185: Internal parsing of tagged arrays can lead to stack
    overflow
    + #188: Unexpected 'MismatchedInputException' for 'byte[]' value
    bound to 'String' in collection/array
  * 2.10.0 (26-Sep-2019)
    + #139: (cbor) Incorrect decimal fraction representation
    + #148: (protobuf) Add
    'ProtobufMapper.generateSchemaFor(TypeReference&lt;?&gt;)' overload
    + #155: (cbor, smile) Inconsistent support for
    FLUSH_PASSED_TO_STREAM
    + #157: (all) Add simple module-info for JDK9+, using Moditect
    + #163: (ion) Update 'ion-java' dependency
    + #168: (avro) 'JsonMappingException' for union types with
    multiple Record types
    + #173: (avro) Improve Union type serialization performance
    + #177: (avro) Deserialization of "empty" Records as root values
    fails
    + #178: (cbor) Fix issue wit input offsets when parsing CBOR
    from 'InputStream'
    + #180: (protobuf) Add
    'ProtobufGenerator.canWriteBinaryNatively()' to support binary
    writes
    + asm version upgrade to 6.2.1 (from 5.1)
    + (cbor, smile) Rewrote handling of "output context" for better
    field id write support
  * 2.9.9 (16-May-2019)
    + #159: (cbor) Some short UTF Strings encoded using
    non-canonical form
    + #161: (avro) Deserialize from newer version to older one
    throws NullPointerException
  * 2.9.8 (15-Dec-2018)
    + #140: (protobuf) Stack overflow when generating Protobuf
    schema on class with cyclic type definition
    + #153: (smile) Unable to set a compression input/output
    decorator to a 'SmileFactory'
  * 2.9.7 (19-Sep-2018)
    + #142: (ion) 'IonParser.getNumberType()' returns 'null' for
    'IonType.FLOAT'
    + #150: Add 'CBORMapper'
    + #151: Add 'SmileMapper'
  * 2.9.6 (12-Jun-2018)
    + #93: (cbor) 'CBORParser' does not accept "undefined value"
    + #135: (protobuf) Infinite sequence of 'END_OBJECT' tokens
    returned at end of streaming read
    + #136: (avro) Fix MapWriteContext not correctly resolving union
    values
  * 2.9.5 (26-Feb-2018)
    + #128 (protobuf) Fix skip unknown WireType.FIXED_64BIT value
    bug
    + #129 (cbor) Remove "final" modifier from 'CBORParser'</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574251201">- Remove plugins unnecessary for RPM builds
  org.moditect:moditect-maven-plugin</changelog>
  <changelog author="fstrba@suse.com" date="1634731200">- Version update to 2.13.0
  * 2.13.0 (30-Sep-2021)
    + #239: (cbor) Should validate UTF-8 multi-byte validity for
    short decode path too
    + #248: (ion) Deprecate 'CloseSafeUTF8Writer', remove use
    + #252: (smile) Make 'SmileFactory' support
    'JsonFactory.Feature.CANONICALIZE_FIELD_NAMES'
    + #253: (cbor) Make 'CBORFactory' support
    'JsonFactory.Feature.CANONICALIZE_FIELD_NAMES'
    + #264: (cbor) Handle case of BigDecimal with Integer.MIN_VALUE
    for scale gracefully
    + #272: (cbor) Uncaught exception in
    CBORParser._nextChunkedByte2 (by ossfuzzer)
    + #273: (cbor) Another uncaught exception in
    CBORParser._nextChunkedByte2 (by ossfuzzer)
    + #276: (smile) Add
    'SmileGenerator.Feature.LENIENT_UTF_ENCODING' for lenient
    handling of broken Unicode surrogate pairs on writing
    + #283: (avro) Add 'logicalType' support for some 'java.time'
    types; add 'AvroJavaTimeModule' for native ser/deser
    + #284: Support base64 strings in 'getBinaryValue()' for CBOR
    and Smile
    + #289: (cbor) 'ArrayIndexOutOfBounds' for truncated UTF-8 name
    + #290: (avro) Generate logicalType switch
    + #291: (smile) 'ArrayIndexOutOfBounds' for truncated UTF-8 name
    + #295: (ion) 'jackson-dataformat-ion' does not handle
    null.struct deserialization correctly
    + 'Ion-java' dep 1.4.0 -&gt; 1.8.0
    + Minor change to Ion module registration names
    (fully-qualified)
  * 2.12.4 (06-Jul-2021)
    + #287: (cbor) Uncaught exception in
    CBORParser._nextChunkedByte2 (by ossfuzzer)
    + #288: (cbor) Uncaught exception in
    CBORParser._findDecodedFromSymbols() (by ossfuzzer)
  * 2.12.3 (12-Apr-2021)
    + #257: (smile) Uncaught validation problem wrt Smile
    "BigDecimal" type
    + #258: (smile) ArrayIndexOutOfBoundsException for malformed
    Smile header
    + #259: (cbor) Failed to handle case of alleged String with
    length of Integer.MAX_VALUE
    + #260: (smile) Allocate byte[] lazily for longer Smile binary
    data payloads
    + #261 (cbor) CBORParser need to validate zero-length byte[] for
    BigInteger
    + #263: (smile) Handle invalid chunked-binary-format length
    gracefully
    + #265: (smile) Allocate byte[] lazily for longer Smile binary
    data payloads (7-bit encoded)
    + #266: (smile)  ArrayIndexOutOfBoundsException in
    SmileParser._decodeShortUnicodeValue()
    + #268: (smile) Handle sequence of Smile header markers without
    recursion
    + #269: (cbor) CBOR loses 'Map' entries with specific 'long' Map
    key values (32-bit boundary)
    + #270: (ion) Ion Polymorphic deserialization in 2.12 breaks wrt
    use of Native Type Ids when upgrading from 2.8
  * 2.12.2 (03-Mar-2021)
    + #236: (cbor) 'ArrayIndexOutOfBoundsException' in 'CBORParser'
    for invalid UTF-8 String
    + #240: (cbor) Handle invalid CBOR content like '[0x84]'
    (incomplete array)
    + #241: (ion) Respect 'WRITE_ENUMS_USING_TO_STRING' in
    'EnumAsIonSymbolSerializer'
    + #242: (ion) Add support for generating IonSexps
    + #244: (ion) Add support for deserializing IonTimestamps and
    IonBlobs
    + #246: (ion) Add 'IonObjectMapper.builderForBinaryWriters()' /
    '.builderforTextualWriters()' convenience methods
    + #247: (ion) Enabling pretty-printing fails Ion serialization
  * 2.12.1 (08-Jan-2021)
    + #232: (ion) Allow disabling native type ids in IonMapper
    + #235: (smile) Small bug in byte-alignment for long field names
    in Smile, symbol table reuse
  * 2.12.0 (29-Nov-2020)
    + #204: (ion) Add 'IonFactory.getIonSystem()' accessor
    + #212: (ion) Optimize 'IonParser.getNumberType()' using
    'IonReader.getIntegerSize()'
    + #222: (cbor) Add 'CBORGenerator.Feature.LENIENT_UTF_ENCODING'
    for lenient handling of Unicode surrogate pairs on writing
    + #228: (cbor) Add support for decoding unassigned "simple
    values" (type 7)
    + Add Gradle Module Metadata
    (https://blog.gradle.org/alignment-with-gradle-module-metadata)
  * 2.11.4 (12-Dec-2020)
    + #186: (cbor) Eager allocation of byte buffer can cause
    'java.lang.OutOfMemoryError' exception (CVE-2020-28491)
  * 2.11.3 (02-Oct-2020)
    + #219: (avro) Cache record names to avoid hitting class loader
  * 2.11.2 (02-Aug-2020)
    + #216: (avro) Avro null deserialization
  * 2.11.1 (25-Jun-2020)
    + #204: (ion) Add 'IonFactory.getIonSystem()' accessor
  * 2.11.0 (26-Apr-2020)
    + #179: (avro) Add 'AvroGenerator.canWriteBinaryNatively()' to
    support binary writes, fix 'java.util.UUID' representation
    + #192: (ion) Allow 'IonObjectMapper' with class name annotation
    introspector to deserialize generic subtypes
    + #195: Remove dependencies upon Jackson 1.X and Avro's
    JacksonUtils
    + #198: 'jackson-databind' should not be full dependency for
    (cbor, protobuf, smile) modules
    + #201: 'CBORGenerator.Feature.WRITE_MINIMAL_INTS' does not
    write most compact form for all integers
    + 'AvroGenerator' overrides 'getOutputContext()' properly
  * 2.10.5 (21-Jul-2020)
    + #204: (ion) Add 'IonFactory.getIonSystem()' accessor
    + #211: (avro) Fix schema evolution involving maps of non-scalar
  * 2.10.4 (03-May-2020)
    + #202: (protobuf) Parsing a protobuf message doesn't properly
    skip unknown fields
  * 2.10.2 (05-Jan-2020)
    + #189: (ion) IonObjectMapper close()s the provided IonWriter
    unnecessarily
    + ion-java dependency 1.4.0 -&gt; 1.5.1</changelog>
</package>
<package pkgid="fd766180b5457c90d4f2ceef90f2e65966010cf196994dbbd893baa17997ab5c" name="jackson-dataformat-smile" arch="noarch">
  <version epoch="0" ver="2.13.0" rel="150200.3.3.3"/>
  <changelog author="fstrba@suse.com" date="1573560000">- Initial packaging of jackson-dataformats-binary 2.9.4</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574251200">- Version update to 2.10.1
  * 2.10.1 (09-Nov-2019)
    + #185: Internal parsing of tagged arrays can lead to stack
    overflow
    + #188: Unexpected 'MismatchedInputException' for 'byte[]' value
    bound to 'String' in collection/array
  * 2.10.0 (26-Sep-2019)
    + #139: (cbor) Incorrect decimal fraction representation
    + #148: (protobuf) Add
    'ProtobufMapper.generateSchemaFor(TypeReference&lt;?&gt;)' overload
    + #155: (cbor, smile) Inconsistent support for
    FLUSH_PASSED_TO_STREAM
    + #157: (all) Add simple module-info for JDK9+, using Moditect
    + #163: (ion) Update 'ion-java' dependency
    + #168: (avro) 'JsonMappingException' for union types with
    multiple Record types
    + #173: (avro) Improve Union type serialization performance
    + #177: (avro) Deserialization of "empty" Records as root values
    fails
    + #178: (cbor) Fix issue wit input offsets when parsing CBOR
    from 'InputStream'
    + #180: (protobuf) Add
    'ProtobufGenerator.canWriteBinaryNatively()' to support binary
    writes
    + asm version upgrade to 6.2.1 (from 5.1)
    + (cbor, smile) Rewrote handling of "output context" for better
    field id write support
  * 2.9.9 (16-May-2019)
    + #159: (cbor) Some short UTF Strings encoded using
    non-canonical form
    + #161: (avro) Deserialize from newer version to older one
    throws NullPointerException
  * 2.9.8 (15-Dec-2018)
    + #140: (protobuf) Stack overflow when generating Protobuf
    schema on class with cyclic type definition
    + #153: (smile) Unable to set a compression input/output
    decorator to a 'SmileFactory'
  * 2.9.7 (19-Sep-2018)
    + #142: (ion) 'IonParser.getNumberType()' returns 'null' for
    'IonType.FLOAT'
    + #150: Add 'CBORMapper'
    + #151: Add 'SmileMapper'
  * 2.9.6 (12-Jun-2018)
    + #93: (cbor) 'CBORParser' does not accept "undefined value"
    + #135: (protobuf) Infinite sequence of 'END_OBJECT' tokens
    returned at end of streaming read
    + #136: (avro) Fix MapWriteContext not correctly resolving union
    values
  * 2.9.5 (26-Feb-2018)
    + #128 (protobuf) Fix skip unknown WireType.FIXED_64BIT value
    bug
    + #129 (cbor) Remove "final" modifier from 'CBORParser'</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574251201">- Remove plugins unnecessary for RPM builds
  org.moditect:moditect-maven-plugin</changelog>
  <changelog author="fstrba@suse.com" date="1634731200">- Version update to 2.13.0
  * 2.13.0 (30-Sep-2021)
    + #239: (cbor) Should validate UTF-8 multi-byte validity for
    short decode path too
    + #248: (ion) Deprecate 'CloseSafeUTF8Writer', remove use
    + #252: (smile) Make 'SmileFactory' support
    'JsonFactory.Feature.CANONICALIZE_FIELD_NAMES'
    + #253: (cbor) Make 'CBORFactory' support
    'JsonFactory.Feature.CANONICALIZE_FIELD_NAMES'
    + #264: (cbor) Handle case of BigDecimal with Integer.MIN_VALUE
    for scale gracefully
    + #272: (cbor) Uncaught exception in
    CBORParser._nextChunkedByte2 (by ossfuzzer)
    + #273: (cbor) Another uncaught exception in
    CBORParser._nextChunkedByte2 (by ossfuzzer)
    + #276: (smile) Add
    'SmileGenerator.Feature.LENIENT_UTF_ENCODING' for lenient
    handling of broken Unicode surrogate pairs on writing
    + #283: (avro) Add 'logicalType' support for some 'java.time'
    types; add 'AvroJavaTimeModule' for native ser/deser
    + #284: Support base64 strings in 'getBinaryValue()' for CBOR
    and Smile
    + #289: (cbor) 'ArrayIndexOutOfBounds' for truncated UTF-8 name
    + #290: (avro) Generate logicalType switch
    + #291: (smile) 'ArrayIndexOutOfBounds' for truncated UTF-8 name
    + #295: (ion) 'jackson-dataformat-ion' does not handle
    null.struct deserialization correctly
    + 'Ion-java' dep 1.4.0 -&gt; 1.8.0
    + Minor change to Ion module registration names
    (fully-qualified)
  * 2.12.4 (06-Jul-2021)
    + #287: (cbor) Uncaught exception in
    CBORParser._nextChunkedByte2 (by ossfuzzer)
    + #288: (cbor) Uncaught exception in
    CBORParser._findDecodedFromSymbols() (by ossfuzzer)
  * 2.12.3 (12-Apr-2021)
    + #257: (smile) Uncaught validation problem wrt Smile
    "BigDecimal" type
    + #258: (smile) ArrayIndexOutOfBoundsException for malformed
    Smile header
    + #259: (cbor) Failed to handle case of alleged String with
    length of Integer.MAX_VALUE
    + #260: (smile) Allocate byte[] lazily for longer Smile binary
    data payloads
    + #261 (cbor) CBORParser need to validate zero-length byte[] for
    BigInteger
    + #263: (smile) Handle invalid chunked-binary-format length
    gracefully
    + #265: (smile) Allocate byte[] lazily for longer Smile binary
    data payloads (7-bit encoded)
    + #266: (smile)  ArrayIndexOutOfBoundsException in
    SmileParser._decodeShortUnicodeValue()
    + #268: (smile) Handle sequence of Smile header markers without
    recursion
    + #269: (cbor) CBOR loses 'Map' entries with specific 'long' Map
    key values (32-bit boundary)
    + #270: (ion) Ion Polymorphic deserialization in 2.12 breaks wrt
    use of Native Type Ids when upgrading from 2.8
  * 2.12.2 (03-Mar-2021)
    + #236: (cbor) 'ArrayIndexOutOfBoundsException' in 'CBORParser'
    for invalid UTF-8 String
    + #240: (cbor) Handle invalid CBOR content like '[0x84]'
    (incomplete array)
    + #241: (ion) Respect 'WRITE_ENUMS_USING_TO_STRING' in
    'EnumAsIonSymbolSerializer'
    + #242: (ion) Add support for generating IonSexps
    + #244: (ion) Add support for deserializing IonTimestamps and
    IonBlobs
    + #246: (ion) Add 'IonObjectMapper.builderForBinaryWriters()' /
    '.builderforTextualWriters()' convenience methods
    + #247: (ion) Enabling pretty-printing fails Ion serialization
  * 2.12.1 (08-Jan-2021)
    + #232: (ion) Allow disabling native type ids in IonMapper
    + #235: (smile) Small bug in byte-alignment for long field names
    in Smile, symbol table reuse
  * 2.12.0 (29-Nov-2020)
    + #204: (ion) Add 'IonFactory.getIonSystem()' accessor
    + #212: (ion) Optimize 'IonParser.getNumberType()' using
    'IonReader.getIntegerSize()'
    + #222: (cbor) Add 'CBORGenerator.Feature.LENIENT_UTF_ENCODING'
    for lenient handling of Unicode surrogate pairs on writing
    + #228: (cbor) Add support for decoding unassigned "simple
    values" (type 7)
    + Add Gradle Module Metadata
    (https://blog.gradle.org/alignment-with-gradle-module-metadata)
  * 2.11.4 (12-Dec-2020)
    + #186: (cbor) Eager allocation of byte buffer can cause
    'java.lang.OutOfMemoryError' exception (CVE-2020-28491)
  * 2.11.3 (02-Oct-2020)
    + #219: (avro) Cache record names to avoid hitting class loader
  * 2.11.2 (02-Aug-2020)
    + #216: (avro) Avro null deserialization
  * 2.11.1 (25-Jun-2020)
    + #204: (ion) Add 'IonFactory.getIonSystem()' accessor
  * 2.11.0 (26-Apr-2020)
    + #179: (avro) Add 'AvroGenerator.canWriteBinaryNatively()' to
    support binary writes, fix 'java.util.UUID' representation
    + #192: (ion) Allow 'IonObjectMapper' with class name annotation
    introspector to deserialize generic subtypes
    + #195: Remove dependencies upon Jackson 1.X and Avro's
    JacksonUtils
    + #198: 'jackson-databind' should not be full dependency for
    (cbor, protobuf, smile) modules
    + #201: 'CBORGenerator.Feature.WRITE_MINIMAL_INTS' does not
    write most compact form for all integers
    + 'AvroGenerator' overrides 'getOutputContext()' properly
  * 2.10.5 (21-Jul-2020)
    + #204: (ion) Add 'IonFactory.getIonSystem()' accessor
    + #211: (avro) Fix schema evolution involving maps of non-scalar
  * 2.10.4 (03-May-2020)
    + #202: (protobuf) Parsing a protobuf message doesn't properly
    skip unknown fields
  * 2.10.2 (05-Jan-2020)
    + #189: (ion) IonObjectMapper close()s the provided IonWriter
    unnecessarily
    + ion-java dependency 1.4.0 -&gt; 1.5.1</changelog>
</package>
<package pkgid="6fcfab50226676a04f64bc84837d22549ae1490f61fc51f177011c24ee796070" name="jackson-dataformats-binary" arch="noarch">
  <version epoch="0" ver="2.13.0" rel="150200.3.3.3"/>
  <changelog author="fstrba@suse.com" date="1573560000">- Initial packaging of jackson-dataformats-binary 2.9.4</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574251200">- Version update to 2.10.1
  * 2.10.1 (09-Nov-2019)
    + #185: Internal parsing of tagged arrays can lead to stack
    overflow
    + #188: Unexpected 'MismatchedInputException' for 'byte[]' value
    bound to 'String' in collection/array
  * 2.10.0 (26-Sep-2019)
    + #139: (cbor) Incorrect decimal fraction representation
    + #148: (protobuf) Add
    'ProtobufMapper.generateSchemaFor(TypeReference&lt;?&gt;)' overload
    + #155: (cbor, smile) Inconsistent support for
    FLUSH_PASSED_TO_STREAM
    + #157: (all) Add simple module-info for JDK9+, using Moditect
    + #163: (ion) Update 'ion-java' dependency
    + #168: (avro) 'JsonMappingException' for union types with
    multiple Record types
    + #173: (avro) Improve Union type serialization performance
    + #177: (avro) Deserialization of "empty" Records as root values
    fails
    + #178: (cbor) Fix issue wit input offsets when parsing CBOR
    from 'InputStream'
    + #180: (protobuf) Add
    'ProtobufGenerator.canWriteBinaryNatively()' to support binary
    writes
    + asm version upgrade to 6.2.1 (from 5.1)
    + (cbor, smile) Rewrote handling of "output context" for better
    field id write support
  * 2.9.9 (16-May-2019)
    + #159: (cbor) Some short UTF Strings encoded using
    non-canonical form
    + #161: (avro) Deserialize from newer version to older one
    throws NullPointerException
  * 2.9.8 (15-Dec-2018)
    + #140: (protobuf) Stack overflow when generating Protobuf
    schema on class with cyclic type definition
    + #153: (smile) Unable to set a compression input/output
    decorator to a 'SmileFactory'
  * 2.9.7 (19-Sep-2018)
    + #142: (ion) 'IonParser.getNumberType()' returns 'null' for
    'IonType.FLOAT'
    + #150: Add 'CBORMapper'
    + #151: Add 'SmileMapper'
  * 2.9.6 (12-Jun-2018)
    + #93: (cbor) 'CBORParser' does not accept "undefined value"
    + #135: (protobuf) Infinite sequence of 'END_OBJECT' tokens
    returned at end of streaming read
    + #136: (avro) Fix MapWriteContext not correctly resolving union
    values
  * 2.9.5 (26-Feb-2018)
    + #128 (protobuf) Fix skip unknown WireType.FIXED_64BIT value
    bug
    + #129 (cbor) Remove "final" modifier from 'CBORParser'</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574251201">- Remove plugins unnecessary for RPM builds
  org.moditect:moditect-maven-plugin</changelog>
  <changelog author="fstrba@suse.com" date="1634731200">- Version update to 2.13.0
  * 2.13.0 (30-Sep-2021)
    + #239: (cbor) Should validate UTF-8 multi-byte validity for
    short decode path too
    + #248: (ion) Deprecate 'CloseSafeUTF8Writer', remove use
    + #252: (smile) Make 'SmileFactory' support
    'JsonFactory.Feature.CANONICALIZE_FIELD_NAMES'
    + #253: (cbor) Make 'CBORFactory' support
    'JsonFactory.Feature.CANONICALIZE_FIELD_NAMES'
    + #264: (cbor) Handle case of BigDecimal with Integer.MIN_VALUE
    for scale gracefully
    + #272: (cbor) Uncaught exception in
    CBORParser._nextChunkedByte2 (by ossfuzzer)
    + #273: (cbor) Another uncaught exception in
    CBORParser._nextChunkedByte2 (by ossfuzzer)
    + #276: (smile) Add
    'SmileGenerator.Feature.LENIENT_UTF_ENCODING' for lenient
    handling of broken Unicode surrogate pairs on writing
    + #283: (avro) Add 'logicalType' support for some 'java.time'
    types; add 'AvroJavaTimeModule' for native ser/deser
    + #284: Support base64 strings in 'getBinaryValue()' for CBOR
    and Smile
    + #289: (cbor) 'ArrayIndexOutOfBounds' for truncated UTF-8 name
    + #290: (avro) Generate logicalType switch
    + #291: (smile) 'ArrayIndexOutOfBounds' for truncated UTF-8 name
    + #295: (ion) 'jackson-dataformat-ion' does not handle
    null.struct deserialization correctly
    + 'Ion-java' dep 1.4.0 -&gt; 1.8.0
    + Minor change to Ion module registration names
    (fully-qualified)
  * 2.12.4 (06-Jul-2021)
    + #287: (cbor) Uncaught exception in
    CBORParser._nextChunkedByte2 (by ossfuzzer)
    + #288: (cbor) Uncaught exception in
    CBORParser._findDecodedFromSymbols() (by ossfuzzer)
  * 2.12.3 (12-Apr-2021)
    + #257: (smile) Uncaught validation problem wrt Smile
    "BigDecimal" type
    + #258: (smile) ArrayIndexOutOfBoundsException for malformed
    Smile header
    + #259: (cbor) Failed to handle case of alleged String with
    length of Integer.MAX_VALUE
    + #260: (smile) Allocate byte[] lazily for longer Smile binary
    data payloads
    + #261 (cbor) CBORParser need to validate zero-length byte[] for
    BigInteger
    + #263: (smile) Handle invalid chunked-binary-format length
    gracefully
    + #265: (smile) Allocate byte[] lazily for longer Smile binary
    data payloads (7-bit encoded)
    + #266: (smile)  ArrayIndexOutOfBoundsException in
    SmileParser._decodeShortUnicodeValue()
    + #268: (smile) Handle sequence of Smile header markers without
    recursion
    + #269: (cbor) CBOR loses 'Map' entries with specific 'long' Map
    key values (32-bit boundary)
    + #270: (ion) Ion Polymorphic deserialization in 2.12 breaks wrt
    use of Native Type Ids when upgrading from 2.8
  * 2.12.2 (03-Mar-2021)
    + #236: (cbor) 'ArrayIndexOutOfBoundsException' in 'CBORParser'
    for invalid UTF-8 String
    + #240: (cbor) Handle invalid CBOR content like '[0x84]'
    (incomplete array)
    + #241: (ion) Respect 'WRITE_ENUMS_USING_TO_STRING' in
    'EnumAsIonSymbolSerializer'
    + #242: (ion) Add support for generating IonSexps
    + #244: (ion) Add support for deserializing IonTimestamps and
    IonBlobs
    + #246: (ion) Add 'IonObjectMapper.builderForBinaryWriters()' /
    '.builderforTextualWriters()' convenience methods
    + #247: (ion) Enabling pretty-printing fails Ion serialization
  * 2.12.1 (08-Jan-2021)
    + #232: (ion) Allow disabling native type ids in IonMapper
    + #235: (smile) Small bug in byte-alignment for long field names
    in Smile, symbol table reuse
  * 2.12.0 (29-Nov-2020)
    + #204: (ion) Add 'IonFactory.getIonSystem()' accessor
    + #212: (ion) Optimize 'IonParser.getNumberType()' using
    'IonReader.getIntegerSize()'
    + #222: (cbor) Add 'CBORGenerator.Feature.LENIENT_UTF_ENCODING'
    for lenient handling of Unicode surrogate pairs on writing
    + #228: (cbor) Add support for decoding unassigned "simple
    values" (type 7)
    + Add Gradle Module Metadata
    (https://blog.gradle.org/alignment-with-gradle-module-metadata)
  * 2.11.4 (12-Dec-2020)
    + #186: (cbor) Eager allocation of byte buffer can cause
    'java.lang.OutOfMemoryError' exception (CVE-2020-28491)
  * 2.11.3 (02-Oct-2020)
    + #219: (avro) Cache record names to avoid hitting class loader
  * 2.11.2 (02-Aug-2020)
    + #216: (avro) Avro null deserialization
  * 2.11.1 (25-Jun-2020)
    + #204: (ion) Add 'IonFactory.getIonSystem()' accessor
  * 2.11.0 (26-Apr-2020)
    + #179: (avro) Add 'AvroGenerator.canWriteBinaryNatively()' to
    support binary writes, fix 'java.util.UUID' representation
    + #192: (ion) Allow 'IonObjectMapper' with class name annotation
    introspector to deserialize generic subtypes
    + #195: Remove dependencies upon Jackson 1.X and Avro's
    JacksonUtils
    + #198: 'jackson-databind' should not be full dependency for
    (cbor, protobuf, smile) modules
    + #201: 'CBORGenerator.Feature.WRITE_MINIMAL_INTS' does not
    write most compact form for all integers
    + 'AvroGenerator' overrides 'getOutputContext()' properly
  * 2.10.5 (21-Jul-2020)
    + #204: (ion) Add 'IonFactory.getIonSystem()' accessor
    + #211: (avro) Fix schema evolution involving maps of non-scalar
  * 2.10.4 (03-May-2020)
    + #202: (protobuf) Parsing a protobuf message doesn't properly
    skip unknown fields
  * 2.10.2 (05-Jan-2020)
    + #189: (ion) IonObjectMapper close()s the provided IonWriter
    unnecessarily
    + ion-java dependency 1.4.0 -&gt; 1.5.1</changelog>
</package>
<package pkgid="9e4f79cbfc3d229361df04e652c71a64813f05d63887ea27e103cc75f0308bc5" name="jackson-dataformats-binary" arch="src">
  <version epoch="0" ver="2.13.0" rel="150200.3.3.3"/>
  <changelog author="fstrba@suse.com" date="1573560000">- Initial packaging of jackson-dataformats-binary 2.9.4</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574251200">- Version update to 2.10.1
  * 2.10.1 (09-Nov-2019)
    + #185: Internal parsing of tagged arrays can lead to stack
    overflow
    + #188: Unexpected 'MismatchedInputException' for 'byte[]' value
    bound to 'String' in collection/array
  * 2.10.0 (26-Sep-2019)
    + #139: (cbor) Incorrect decimal fraction representation
    + #148: (protobuf) Add
    'ProtobufMapper.generateSchemaFor(TypeReference&lt;?&gt;)' overload
    + #155: (cbor, smile) Inconsistent support for
    FLUSH_PASSED_TO_STREAM
    + #157: (all) Add simple module-info for JDK9+, using Moditect
    + #163: (ion) Update 'ion-java' dependency
    + #168: (avro) 'JsonMappingException' for union types with
    multiple Record types
    + #173: (avro) Improve Union type serialization performance
    + #177: (avro) Deserialization of "empty" Records as root values
    fails
    + #178: (cbor) Fix issue wit input offsets when parsing CBOR
    from 'InputStream'
    + #180: (protobuf) Add
    'ProtobufGenerator.canWriteBinaryNatively()' to support binary
    writes
    + asm version upgrade to 6.2.1 (from 5.1)
    + (cbor, smile) Rewrote handling of "output context" for better
    field id write support
  * 2.9.9 (16-May-2019)
    + #159: (cbor) Some short UTF Strings encoded using
    non-canonical form
    + #161: (avro) Deserialize from newer version to older one
    throws NullPointerException
  * 2.9.8 (15-Dec-2018)
    + #140: (protobuf) Stack overflow when generating Protobuf
    schema on class with cyclic type definition
    + #153: (smile) Unable to set a compression input/output
    decorator to a 'SmileFactory'
  * 2.9.7 (19-Sep-2018)
    + #142: (ion) 'IonParser.getNumberType()' returns 'null' for
    'IonType.FLOAT'
    + #150: Add 'CBORMapper'
    + #151: Add 'SmileMapper'
  * 2.9.6 (12-Jun-2018)
    + #93: (cbor) 'CBORParser' does not accept "undefined value"
    + #135: (protobuf) Infinite sequence of 'END_OBJECT' tokens
    returned at end of streaming read
    + #136: (avro) Fix MapWriteContext not correctly resolving union
    values
  * 2.9.5 (26-Feb-2018)
    + #128 (protobuf) Fix skip unknown WireType.FIXED_64BIT value
    bug
    + #129 (cbor) Remove "final" modifier from 'CBORParser'</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574251201">- Remove plugins unnecessary for RPM builds
  org.moditect:moditect-maven-plugin</changelog>
  <changelog author="fstrba@suse.com" date="1634731200">- Version update to 2.13.0
  * 2.13.0 (30-Sep-2021)
    + #239: (cbor) Should validate UTF-8 multi-byte validity for
    short decode path too
    + #248: (ion) Deprecate 'CloseSafeUTF8Writer', remove use
    + #252: (smile) Make 'SmileFactory' support
    'JsonFactory.Feature.CANONICALIZE_FIELD_NAMES'
    + #253: (cbor) Make 'CBORFactory' support
    'JsonFactory.Feature.CANONICALIZE_FIELD_NAMES'
    + #264: (cbor) Handle case of BigDecimal with Integer.MIN_VALUE
    for scale gracefully
    + #272: (cbor) Uncaught exception in
    CBORParser._nextChunkedByte2 (by ossfuzzer)
    + #273: (cbor) Another uncaught exception in
    CBORParser._nextChunkedByte2 (by ossfuzzer)
    + #276: (smile) Add
    'SmileGenerator.Feature.LENIENT_UTF_ENCODING' for lenient
    handling of broken Unicode surrogate pairs on writing
    + #283: (avro) Add 'logicalType' support for some 'java.time'
    types; add 'AvroJavaTimeModule' for native ser/deser
    + #284: Support base64 strings in 'getBinaryValue()' for CBOR
    and Smile
    + #289: (cbor) 'ArrayIndexOutOfBounds' for truncated UTF-8 name
    + #290: (avro) Generate logicalType switch
    + #291: (smile) 'ArrayIndexOutOfBounds' for truncated UTF-8 name
    + #295: (ion) 'jackson-dataformat-ion' does not handle
    null.struct deserialization correctly
    + 'Ion-java' dep 1.4.0 -&gt; 1.8.0
    + Minor change to Ion module registration names
    (fully-qualified)
  * 2.12.4 (06-Jul-2021)
    + #287: (cbor) Uncaught exception in
    CBORParser._nextChunkedByte2 (by ossfuzzer)
    + #288: (cbor) Uncaught exception in
    CBORParser._findDecodedFromSymbols() (by ossfuzzer)
  * 2.12.3 (12-Apr-2021)
    + #257: (smile) Uncaught validation problem wrt Smile
    "BigDecimal" type
    + #258: (smile) ArrayIndexOutOfBoundsException for malformed
    Smile header
    + #259: (cbor) Failed to handle case of alleged String with
    length of Integer.MAX_VALUE
    + #260: (smile) Allocate byte[] lazily for longer Smile binary
    data payloads
    + #261 (cbor) CBORParser need to validate zero-length byte[] for
    BigInteger
    + #263: (smile) Handle invalid chunked-binary-format length
    gracefully
    + #265: (smile) Allocate byte[] lazily for longer Smile binary
    data payloads (7-bit encoded)
    + #266: (smile)  ArrayIndexOutOfBoundsException in
    SmileParser._decodeShortUnicodeValue()
    + #268: (smile) Handle sequence of Smile header markers without
    recursion
    + #269: (cbor) CBOR loses 'Map' entries with specific 'long' Map
    key values (32-bit boundary)
    + #270: (ion) Ion Polymorphic deserialization in 2.12 breaks wrt
    use of Native Type Ids when upgrading from 2.8
  * 2.12.2 (03-Mar-2021)
    + #236: (cbor) 'ArrayIndexOutOfBoundsException' in 'CBORParser'
    for invalid UTF-8 String
    + #240: (cbor) Handle invalid CBOR content like '[0x84]'
    (incomplete array)
    + #241: (ion) Respect 'WRITE_ENUMS_USING_TO_STRING' in
    'EnumAsIonSymbolSerializer'
    + #242: (ion) Add support for generating IonSexps
    + #244: (ion) Add support for deserializing IonTimestamps and
    IonBlobs
    + #246: (ion) Add 'IonObjectMapper.builderForBinaryWriters()' /
    '.builderforTextualWriters()' convenience methods
    + #247: (ion) Enabling pretty-printing fails Ion serialization
  * 2.12.1 (08-Jan-2021)
    + #232: (ion) Allow disabling native type ids in IonMapper
    + #235: (smile) Small bug in byte-alignment for long field names
    in Smile, symbol table reuse
  * 2.12.0 (29-Nov-2020)
    + #204: (ion) Add 'IonFactory.getIonSystem()' accessor
    + #212: (ion) Optimize 'IonParser.getNumberType()' using
    'IonReader.getIntegerSize()'
    + #222: (cbor) Add 'CBORGenerator.Feature.LENIENT_UTF_ENCODING'
    for lenient handling of Unicode surrogate pairs on writing
    + #228: (cbor) Add support for decoding unassigned "simple
    values" (type 7)
    + Add Gradle Module Metadata
    (https://blog.gradle.org/alignment-with-gradle-module-metadata)
  * 2.11.4 (12-Dec-2020)
    + #186: (cbor) Eager allocation of byte buffer can cause
    'java.lang.OutOfMemoryError' exception (CVE-2020-28491)
  * 2.11.3 (02-Oct-2020)
    + #219: (avro) Cache record names to avoid hitting class loader
  * 2.11.2 (02-Aug-2020)
    + #216: (avro) Avro null deserialization
  * 2.11.1 (25-Jun-2020)
    + #204: (ion) Add 'IonFactory.getIonSystem()' accessor
  * 2.11.0 (26-Apr-2020)
    + #179: (avro) Add 'AvroGenerator.canWriteBinaryNatively()' to
    support binary writes, fix 'java.util.UUID' representation
    + #192: (ion) Allow 'IonObjectMapper' with class name annotation
    introspector to deserialize generic subtypes
    + #195: Remove dependencies upon Jackson 1.X and Avro's
    JacksonUtils
    + #198: 'jackson-databind' should not be full dependency for
    (cbor, protobuf, smile) modules
    + #201: 'CBORGenerator.Feature.WRITE_MINIMAL_INTS' does not
    write most compact form for all integers
    + 'AvroGenerator' overrides 'getOutputContext()' properly
  * 2.10.5 (21-Jul-2020)
    + #204: (ion) Add 'IonFactory.getIonSystem()' accessor
    + #211: (avro) Fix schema evolution involving maps of non-scalar
  * 2.10.4 (03-May-2020)
    + #202: (protobuf) Parsing a protobuf message doesn't properly
    skip unknown fields
  * 2.10.2 (05-Jan-2020)
    + #189: (ion) IonObjectMapper close()s the provided IonWriter
    unnecessarily
    + ion-java dependency 1.4.0 -&gt; 1.5.1</changelog>
</package>
<package pkgid="88c7cbfe55a88564175b024f18ebd0e36dd0d6922335933409fb4949e2b6b20c" name="jackson-dataformats-binary-javadoc" arch="noarch">
  <version epoch="0" ver="2.13.0" rel="150200.3.3.3"/>
  <changelog author="fstrba@suse.com" date="1573560000">- Initial packaging of jackson-dataformats-binary 2.9.4</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574251200">- Version update to 2.10.1
  * 2.10.1 (09-Nov-2019)
    + #185: Internal parsing of tagged arrays can lead to stack
    overflow
    + #188: Unexpected 'MismatchedInputException' for 'byte[]' value
    bound to 'String' in collection/array
  * 2.10.0 (26-Sep-2019)
    + #139: (cbor) Incorrect decimal fraction representation
    + #148: (protobuf) Add
    'ProtobufMapper.generateSchemaFor(TypeReference&lt;?&gt;)' overload
    + #155: (cbor, smile) Inconsistent support for
    FLUSH_PASSED_TO_STREAM
    + #157: (all) Add simple module-info for JDK9+, using Moditect
    + #163: (ion) Update 'ion-java' dependency
    + #168: (avro) 'JsonMappingException' for union types with
    multiple Record types
    + #173: (avro) Improve Union type serialization performance
    + #177: (avro) Deserialization of "empty" Records as root values
    fails
    + #178: (cbor) Fix issue wit input offsets when parsing CBOR
    from 'InputStream'
    + #180: (protobuf) Add
    'ProtobufGenerator.canWriteBinaryNatively()' to support binary
    writes
    + asm version upgrade to 6.2.1 (from 5.1)
    + (cbor, smile) Rewrote handling of "output context" for better
    field id write support
  * 2.9.9 (16-May-2019)
    + #159: (cbor) Some short UTF Strings encoded using
    non-canonical form
    + #161: (avro) Deserialize from newer version to older one
    throws NullPointerException
  * 2.9.8 (15-Dec-2018)
    + #140: (protobuf) Stack overflow when generating Protobuf
    schema on class with cyclic type definition
    + #153: (smile) Unable to set a compression input/output
    decorator to a 'SmileFactory'
  * 2.9.7 (19-Sep-2018)
    + #142: (ion) 'IonParser.getNumberType()' returns 'null' for
    'IonType.FLOAT'
    + #150: Add 'CBORMapper'
    + #151: Add 'SmileMapper'
  * 2.9.6 (12-Jun-2018)
    + #93: (cbor) 'CBORParser' does not accept "undefined value"
    + #135: (protobuf) Infinite sequence of 'END_OBJECT' tokens
    returned at end of streaming read
    + #136: (avro) Fix MapWriteContext not correctly resolving union
    values
  * 2.9.5 (26-Feb-2018)
    + #128 (protobuf) Fix skip unknown WireType.FIXED_64BIT value
    bug
    + #129 (cbor) Remove "final" modifier from 'CBORParser'</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1574251201">- Remove plugins unnecessary for RPM builds
  org.moditect:moditect-maven-plugin</changelog>
  <changelog author="fstrba@suse.com" date="1634731200">- Version update to 2.13.0
  * 2.13.0 (30-Sep-2021)
    + #239: (cbor) Should validate UTF-8 multi-byte validity for
    short decode path too
    + #248: (ion) Deprecate 'CloseSafeUTF8Writer', remove use
    + #252: (smile) Make 'SmileFactory' support
    'JsonFactory.Feature.CANONICALIZE_FIELD_NAMES'
    + #253: (cbor) Make 'CBORFactory' support
    'JsonFactory.Feature.CANONICALIZE_FIELD_NAMES'
    + #264: (cbor) Handle case of BigDecimal with Integer.MIN_VALUE
    for scale gracefully
    + #272: (cbor) Uncaught exception in
    CBORParser._nextChunkedByte2 (by ossfuzzer)
    + #273: (cbor) Another uncaught exception in
    CBORParser._nextChunkedByte2 (by ossfuzzer)
    + #276: (smile) Add
    'SmileGenerator.Feature.LENIENT_UTF_ENCODING' for lenient
    handling of broken Unicode surrogate pairs on writing
    + #283: (avro) Add 'logicalType' support for some 'java.time'
    types; add 'AvroJavaTimeModule' for native ser/deser
    + #284: Support base64 strings in 'getBinaryValue()' for CBOR
    and Smile
    + #289: (cbor) 'ArrayIndexOutOfBounds' for truncated UTF-8 name
    + #290: (avro) Generate logicalType switch
    + #291: (smile) 'ArrayIndexOutOfBounds' for truncated UTF-8 name
    + #295: (ion) 'jackson-dataformat-ion' does not handle
    null.struct deserialization correctly
    + 'Ion-java' dep 1.4.0 -&gt; 1.8.0
    + Minor change to Ion module registration names
    (fully-qualified)
  * 2.12.4 (06-Jul-2021)
    + #287: (cbor) Uncaught exception in
    CBORParser._nextChunkedByte2 (by ossfuzzer)
    + #288: (cbor) Uncaught exception in
    CBORParser._findDecodedFromSymbols() (by ossfuzzer)
  * 2.12.3 (12-Apr-2021)
    + #257: (smile) Uncaught validation problem wrt Smile
    "BigDecimal" type
    + #258: (smile) ArrayIndexOutOfBoundsException for malformed
    Smile header
    + #259: (cbor) Failed to handle case of alleged String with
    length of Integer.MAX_VALUE
    + #260: (smile) Allocate byte[] lazily for longer Smile binary
    data payloads
    + #261 (cbor) CBORParser need to validate zero-length byte[] for
    BigInteger
    + #263: (smile) Handle invalid chunked-binary-format length
    gracefully
    + #265: (smile) Allocate byte[] lazily for longer Smile binary
    data payloads (7-bit encoded)
    + #266: (smile)  ArrayIndexOutOfBoundsException in
    SmileParser._decodeShortUnicodeValue()
    + #268: (smile) Handle sequence of Smile header markers without
    recursion
    + #269: (cbor) CBOR loses 'Map' entries with specific 'long' Map
    key values (32-bit boundary)
    + #270: (ion) Ion Polymorphic deserialization in 2.12 breaks wrt
    use of Native Type Ids when upgrading from 2.8
  * 2.12.2 (03-Mar-2021)
    + #236: (cbor) 'ArrayIndexOutOfBoundsException' in 'CBORParser'
    for invalid UTF-8 String
    + #240: (cbor) Handle invalid CBOR content like '[0x84]'
    (incomplete array)
    + #241: (ion) Respect 'WRITE_ENUMS_USING_TO_STRING' in
    'EnumAsIonSymbolSerializer'
    + #242: (ion) Add support for generating IonSexps
    + #244: (ion) Add support for deserializing IonTimestamps and
    IonBlobs
    + #246: (ion) Add 'IonObjectMapper.builderForBinaryWriters()' /
    '.builderforTextualWriters()' convenience methods
    + #247: (ion) Enabling pretty-printing fails Ion serialization
  * 2.12.1 (08-Jan-2021)
    + #232: (ion) Allow disabling native type ids in IonMapper
    + #235: (smile) Small bug in byte-alignment for long field names
    in Smile, symbol table reuse
  * 2.12.0 (29-Nov-2020)
    + #204: (ion) Add 'IonFactory.getIonSystem()' accessor
    + #212: (ion) Optimize 'IonParser.getNumberType()' using
    'IonReader.getIntegerSize()'
    + #222: (cbor) Add 'CBORGenerator.Feature.LENIENT_UTF_ENCODING'
    for lenient handling of Unicode surrogate pairs on writing
    + #228: (cbor) Add support for decoding unassigned "simple
    values" (type 7)
    + Add Gradle Module Metadata
    (https://blog.gradle.org/alignment-with-gradle-module-metadata)
  * 2.11.4 (12-Dec-2020)
    + #186: (cbor) Eager allocation of byte buffer can cause
    'java.lang.OutOfMemoryError' exception (CVE-2020-28491)
  * 2.11.3 (02-Oct-2020)
    + #219: (avro) Cache record names to avoid hitting class loader
  * 2.11.2 (02-Aug-2020)
    + #216: (avro) Avro null deserialization
  * 2.11.1 (25-Jun-2020)
    + #204: (ion) Add 'IonFactory.getIonSystem()' accessor
  * 2.11.0 (26-Apr-2020)
    + #179: (avro) Add 'AvroGenerator.canWriteBinaryNatively()' to
    support binary writes, fix 'java.util.UUID' representation
    + #192: (ion) Allow 'IonObjectMapper' with class name annotation
    introspector to deserialize generic subtypes
    + #195: Remove dependencies upon Jackson 1.X and Avro's
    JacksonUtils
    + #198: 'jackson-databind' should not be full dependency for
    (cbor, protobuf, smile) modules
    + #201: 'CBORGenerator.Feature.WRITE_MINIMAL_INTS' does not
    write most compact form for all integers
    + 'AvroGenerator' overrides 'getOutputContext()' properly
  * 2.10.5 (21-Jul-2020)
    + #204: (ion) Add 'IonFactory.getIonSystem()' accessor
    + #211: (avro) Fix schema evolution involving maps of non-scalar
  * 2.10.4 (03-May-2020)
    + #202: (protobuf) Parsing a protobuf message doesn't properly
    skip unknown fields
  * 2.10.2 (05-Jan-2020)
    + #189: (ion) IonObjectMapper close()s the provided IonWriter
    unnecessarily
    + ion-java dependency 1.4.0 -&gt; 1.5.1</changelog>
</package>
<package pkgid="a89580753e2baa02d8767a849593efc177b3a3231860c16fc4125e23d2b32dfc" name="jasper" arch="aarch64">
  <version epoch="0" ver="2.0.14" rel="150000.3.25.1"/>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="adam.majer@suse.de" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
  <changelog author="mvetter@suse.com" date="1584446400">- bsc#1092115 CVE-2018-9154: Fix possible denial of service
  Add jasper-CVE-2018-9154.patch: dont abort in jpc_dec_process_sot()</changelog>
  <changelog author="mvetter@suse.com" date="1597320000">- bsc#1010980 CVE-2016-9399: Fix assert in calcstepsizes
  Add jasper-CVE-2016-9399.patch
- bsc#1020451 CVE-2017-5499: Validate component depth bit
  Add jasper-CVE-2017-5499.patch
- bsc#1020456 CVE-2017-5503, bsc#1020458 CVE-2017-5504, bsc#1020460 CVE-2017-5505:
  Check bounds in jas_seq2d_bindsub()
  Add jasper-CVE-2017-5503-CVE-2017-5504-CVE-2017-5505.patch</changelog>
  <changelog author="mvetter@suse.com" date="1597665600">- bsc#1120807 CVE-2018-20570: Fix heap based buffer over-read in jp2_encode
  Add jasper-CVE-2018-20570.patch
- bsc#1120805 CVE-2018-20622: Fix memory leak in jas_malloc.c
  Add jasper-CVE-2018-20622.patch
- bsc#1117328 CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup
  Add jasper-CVE-2018-19543-CVE-2017-9782.patch
- bsc#1115637 CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms
  Add jasper-CVE-2018-19139.patch
- bsc#1114498 CVE-2018-18873: Fix null pointer deref in ras_putdatastd
  Add jasper-CVE-2018-18873.patch
- bsc#1088278 CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize
  Add jasper-CVE-2018-9252.patch
- bsc#1057152 CVE-2017-14132: Fix heap base overflow in by checking components
  Add jasper-CVE-2017-14132.patch</changelog>
  <changelog author="mvetter@suse.com" date="1598443200">- bsc#1010979 CVE-2016-9398: Use new fix from upstream where we
  actually check for allowed value range instead of just negating
  Add jasper-CVE-2016-9398-upstream.patch</changelog>
  <changelog author="mvetter@suse.com" date="1612785600">- bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls
  Add jasper-CVE-2020-27828.patch
- bsc#1181483 CVE-2021-3272: Fix heap overflow by ensuring number
  of channels matches image components
  Add jasper-CVE-2021-3272.patch</changelog>
  <changelog author="mvetter@suse.com" date="1643803200">- bsc#1188437 CVE-2021-27845: Fix divide-by-zery in cp_create()
  Add jasper-CVE-2021-27845.patch</changelog>
  <changelog author="mvetter@suse.com" date="1650542400">- bsc#1184757 CVE-2021-3467: Fix NULL pointer deref in jp2_decode()
  Add jasper-CVE-2021-3467.patch
- bsc#1184798 CVE-2021-3443: Fix NULL pointer derefin jp2_decode()
  Add jasper-CVE-2021-3443.patch
- bsc#1182104 CVE-2021-26927: Fix NULL pointer deref in jp2_decode()
  bsc#1182105 CVE-2021-26926: Fix Out of bounds read in jp2_decode()
  Add jasper-CVE-2021-26926-CVE-2021-26927.patch</changelog>
</package>
<package pkgid="a45e62069f92f72ff12ad0c08546eb2074f11c444610019231c562a649d76986" name="jasper" arch="ppc64le">
  <version epoch="0" ver="2.0.14" rel="150000.3.25.1"/>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="adam.majer@suse.de" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
  <changelog author="mvetter@suse.com" date="1584446400">- bsc#1092115 CVE-2018-9154: Fix possible denial of service
  Add jasper-CVE-2018-9154.patch: dont abort in jpc_dec_process_sot()</changelog>
  <changelog author="mvetter@suse.com" date="1597320000">- bsc#1010980 CVE-2016-9399: Fix assert in calcstepsizes
  Add jasper-CVE-2016-9399.patch
- bsc#1020451 CVE-2017-5499: Validate component depth bit
  Add jasper-CVE-2017-5499.patch
- bsc#1020456 CVE-2017-5503, bsc#1020458 CVE-2017-5504, bsc#1020460 CVE-2017-5505:
  Check bounds in jas_seq2d_bindsub()
  Add jasper-CVE-2017-5503-CVE-2017-5504-CVE-2017-5505.patch</changelog>
  <changelog author="mvetter@suse.com" date="1597665600">- bsc#1120807 CVE-2018-20570: Fix heap based buffer over-read in jp2_encode
  Add jasper-CVE-2018-20570.patch
- bsc#1120805 CVE-2018-20622: Fix memory leak in jas_malloc.c
  Add jasper-CVE-2018-20622.patch
- bsc#1117328 CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup
  Add jasper-CVE-2018-19543-CVE-2017-9782.patch
- bsc#1115637 CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms
  Add jasper-CVE-2018-19139.patch
- bsc#1114498 CVE-2018-18873: Fix null pointer deref in ras_putdatastd
  Add jasper-CVE-2018-18873.patch
- bsc#1088278 CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize
  Add jasper-CVE-2018-9252.patch
- bsc#1057152 CVE-2017-14132: Fix heap base overflow in by checking components
  Add jasper-CVE-2017-14132.patch</changelog>
  <changelog author="mvetter@suse.com" date="1598443200">- bsc#1010979 CVE-2016-9398: Use new fix from upstream where we
  actually check for allowed value range instead of just negating
  Add jasper-CVE-2016-9398-upstream.patch</changelog>
  <changelog author="mvetter@suse.com" date="1612785600">- bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls
  Add jasper-CVE-2020-27828.patch
- bsc#1181483 CVE-2021-3272: Fix heap overflow by ensuring number
  of channels matches image components
  Add jasper-CVE-2021-3272.patch</changelog>
  <changelog author="mvetter@suse.com" date="1643803200">- bsc#1188437 CVE-2021-27845: Fix divide-by-zery in cp_create()
  Add jasper-CVE-2021-27845.patch</changelog>
  <changelog author="mvetter@suse.com" date="1650542400">- bsc#1184757 CVE-2021-3467: Fix NULL pointer deref in jp2_decode()
  Add jasper-CVE-2021-3467.patch
- bsc#1184798 CVE-2021-3443: Fix NULL pointer derefin jp2_decode()
  Add jasper-CVE-2021-3443.patch
- bsc#1182104 CVE-2021-26927: Fix NULL pointer deref in jp2_decode()
  bsc#1182105 CVE-2021-26926: Fix Out of bounds read in jp2_decode()
  Add jasper-CVE-2021-26926-CVE-2021-26927.patch</changelog>
</package>
<package pkgid="010ec95b1857093cd7d7bfa8134a6c10c9f002094080d0fbc69bdca3219cfd87" name="jasper" arch="s390x">
  <version epoch="0" ver="2.0.14" rel="150000.3.25.1"/>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="adam.majer@suse.de" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
  <changelog author="mvetter@suse.com" date="1584446400">- bsc#1092115 CVE-2018-9154: Fix possible denial of service
  Add jasper-CVE-2018-9154.patch: dont abort in jpc_dec_process_sot()</changelog>
  <changelog author="mvetter@suse.com" date="1597320000">- bsc#1010980 CVE-2016-9399: Fix assert in calcstepsizes
  Add jasper-CVE-2016-9399.patch
- bsc#1020451 CVE-2017-5499: Validate component depth bit
  Add jasper-CVE-2017-5499.patch
- bsc#1020456 CVE-2017-5503, bsc#1020458 CVE-2017-5504, bsc#1020460 CVE-2017-5505:
  Check bounds in jas_seq2d_bindsub()
  Add jasper-CVE-2017-5503-CVE-2017-5504-CVE-2017-5505.patch</changelog>
  <changelog author="mvetter@suse.com" date="1597665600">- bsc#1120807 CVE-2018-20570: Fix heap based buffer over-read in jp2_encode
  Add jasper-CVE-2018-20570.patch
- bsc#1120805 CVE-2018-20622: Fix memory leak in jas_malloc.c
  Add jasper-CVE-2018-20622.patch
- bsc#1117328 CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup
  Add jasper-CVE-2018-19543-CVE-2017-9782.patch
- bsc#1115637 CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms
  Add jasper-CVE-2018-19139.patch
- bsc#1114498 CVE-2018-18873: Fix null pointer deref in ras_putdatastd
  Add jasper-CVE-2018-18873.patch
- bsc#1088278 CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize
  Add jasper-CVE-2018-9252.patch
- bsc#1057152 CVE-2017-14132: Fix heap base overflow in by checking components
  Add jasper-CVE-2017-14132.patch</changelog>
  <changelog author="mvetter@suse.com" date="1598443200">- bsc#1010979 CVE-2016-9398: Use new fix from upstream where we
  actually check for allowed value range instead of just negating
  Add jasper-CVE-2016-9398-upstream.patch</changelog>
  <changelog author="mvetter@suse.com" date="1612785600">- bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls
  Add jasper-CVE-2020-27828.patch
- bsc#1181483 CVE-2021-3272: Fix heap overflow by ensuring number
  of channels matches image components
  Add jasper-CVE-2021-3272.patch</changelog>
  <changelog author="mvetter@suse.com" date="1643803200">- bsc#1188437 CVE-2021-27845: Fix divide-by-zery in cp_create()
  Add jasper-CVE-2021-27845.patch</changelog>
  <changelog author="mvetter@suse.com" date="1650542400">- bsc#1184757 CVE-2021-3467: Fix NULL pointer deref in jp2_decode()
  Add jasper-CVE-2021-3467.patch
- bsc#1184798 CVE-2021-3443: Fix NULL pointer derefin jp2_decode()
  Add jasper-CVE-2021-3443.patch
- bsc#1182104 CVE-2021-26927: Fix NULL pointer deref in jp2_decode()
  bsc#1182105 CVE-2021-26926: Fix Out of bounds read in jp2_decode()
  Add jasper-CVE-2021-26926-CVE-2021-26927.patch</changelog>
</package>
<package pkgid="a6fc53e856912166e48c4cc7568ed3a122d4a8e2493f0981a2f27b72f094cd99" name="jasper" arch="src">
  <version epoch="0" ver="2.0.14" rel="150000.3.25.1"/>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="adam.majer@suse.de" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
  <changelog author="mvetter@suse.com" date="1584446400">- bsc#1092115 CVE-2018-9154: Fix possible denial of service
  Add jasper-CVE-2018-9154.patch: dont abort in jpc_dec_process_sot()</changelog>
  <changelog author="mvetter@suse.com" date="1597320000">- bsc#1010980 CVE-2016-9399: Fix assert in calcstepsizes
  Add jasper-CVE-2016-9399.patch
- bsc#1020451 CVE-2017-5499: Validate component depth bit
  Add jasper-CVE-2017-5499.patch
- bsc#1020456 CVE-2017-5503, bsc#1020458 CVE-2017-5504, bsc#1020460 CVE-2017-5505:
  Check bounds in jas_seq2d_bindsub()
  Add jasper-CVE-2017-5503-CVE-2017-5504-CVE-2017-5505.patch</changelog>
  <changelog author="mvetter@suse.com" date="1597665600">- bsc#1120807 CVE-2018-20570: Fix heap based buffer over-read in jp2_encode
  Add jasper-CVE-2018-20570.patch
- bsc#1120805 CVE-2018-20622: Fix memory leak in jas_malloc.c
  Add jasper-CVE-2018-20622.patch
- bsc#1117328 CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup
  Add jasper-CVE-2018-19543-CVE-2017-9782.patch
- bsc#1115637 CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms
  Add jasper-CVE-2018-19139.patch
- bsc#1114498 CVE-2018-18873: Fix null pointer deref in ras_putdatastd
  Add jasper-CVE-2018-18873.patch
- bsc#1088278 CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize
  Add jasper-CVE-2018-9252.patch
- bsc#1057152 CVE-2017-14132: Fix heap base overflow in by checking components
  Add jasper-CVE-2017-14132.patch</changelog>
  <changelog author="mvetter@suse.com" date="1598443200">- bsc#1010979 CVE-2016-9398: Use new fix from upstream where we
  actually check for allowed value range instead of just negating
  Add jasper-CVE-2016-9398-upstream.patch</changelog>
  <changelog author="mvetter@suse.com" date="1612785600">- bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls
  Add jasper-CVE-2020-27828.patch
- bsc#1181483 CVE-2021-3272: Fix heap overflow by ensuring number
  of channels matches image components
  Add jasper-CVE-2021-3272.patch</changelog>
  <changelog author="mvetter@suse.com" date="1643803200">- bsc#1188437 CVE-2021-27845: Fix divide-by-zery in cp_create()
  Add jasper-CVE-2021-27845.patch</changelog>
  <changelog author="mvetter@suse.com" date="1650542400">- bsc#1184757 CVE-2021-3467: Fix NULL pointer deref in jp2_decode()
  Add jasper-CVE-2021-3467.patch
- bsc#1184798 CVE-2021-3443: Fix NULL pointer derefin jp2_decode()
  Add jasper-CVE-2021-3443.patch
- bsc#1182104 CVE-2021-26927: Fix NULL pointer deref in jp2_decode()
  bsc#1182105 CVE-2021-26926: Fix Out of bounds read in jp2_decode()
  Add jasper-CVE-2021-26926-CVE-2021-26927.patch</changelog>
</package>
<package pkgid="dd2fbe4662154a6fe37efb9f365c94d58b87b7be2ebfe33e907e6302033eb1e8" name="jasper" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="150000.3.25.1"/>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="adam.majer@suse.de" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
  <changelog author="mvetter@suse.com" date="1584446400">- bsc#1092115 CVE-2018-9154: Fix possible denial of service
  Add jasper-CVE-2018-9154.patch: dont abort in jpc_dec_process_sot()</changelog>
  <changelog author="mvetter@suse.com" date="1597320000">- bsc#1010980 CVE-2016-9399: Fix assert in calcstepsizes
  Add jasper-CVE-2016-9399.patch
- bsc#1020451 CVE-2017-5499: Validate component depth bit
  Add jasper-CVE-2017-5499.patch
- bsc#1020456 CVE-2017-5503, bsc#1020458 CVE-2017-5504, bsc#1020460 CVE-2017-5505:
  Check bounds in jas_seq2d_bindsub()
  Add jasper-CVE-2017-5503-CVE-2017-5504-CVE-2017-5505.patch</changelog>
  <changelog author="mvetter@suse.com" date="1597665600">- bsc#1120807 CVE-2018-20570: Fix heap based buffer over-read in jp2_encode
  Add jasper-CVE-2018-20570.patch
- bsc#1120805 CVE-2018-20622: Fix memory leak in jas_malloc.c
  Add jasper-CVE-2018-20622.patch
- bsc#1117328 CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup
  Add jasper-CVE-2018-19543-CVE-2017-9782.patch
- bsc#1115637 CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms
  Add jasper-CVE-2018-19139.patch
- bsc#1114498 CVE-2018-18873: Fix null pointer deref in ras_putdatastd
  Add jasper-CVE-2018-18873.patch
- bsc#1088278 CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize
  Add jasper-CVE-2018-9252.patch
- bsc#1057152 CVE-2017-14132: Fix heap base overflow in by checking components
  Add jasper-CVE-2017-14132.patch</changelog>
  <changelog author="mvetter@suse.com" date="1598443200">- bsc#1010979 CVE-2016-9398: Use new fix from upstream where we
  actually check for allowed value range instead of just negating
  Add jasper-CVE-2016-9398-upstream.patch</changelog>
  <changelog author="mvetter@suse.com" date="1612785600">- bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls
  Add jasper-CVE-2020-27828.patch
- bsc#1181483 CVE-2021-3272: Fix heap overflow by ensuring number
  of channels matches image components
  Add jasper-CVE-2021-3272.patch</changelog>
  <changelog author="mvetter@suse.com" date="1643803200">- bsc#1188437 CVE-2021-27845: Fix divide-by-zery in cp_create()
  Add jasper-CVE-2021-27845.patch</changelog>
  <changelog author="mvetter@suse.com" date="1650542400">- bsc#1184757 CVE-2021-3467: Fix NULL pointer deref in jp2_decode()
  Add jasper-CVE-2021-3467.patch
- bsc#1184798 CVE-2021-3443: Fix NULL pointer derefin jp2_decode()
  Add jasper-CVE-2021-3443.patch
- bsc#1182104 CVE-2021-26927: Fix NULL pointer deref in jp2_decode()
  bsc#1182105 CVE-2021-26926: Fix Out of bounds read in jp2_decode()
  Add jasper-CVE-2021-26926-CVE-2021-26927.patch</changelog>
</package>
<package pkgid="6f9741d40ba10e14510ceaf161516d11cbcbff29bc1f1921148a5dfe5b82e592" name="java-11-openjdk" arch="aarch64">
  <version epoch="0" ver="11.0.15.0" rel="150000.3.80.1"/>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643630400">- Update to upstream tag jdk-11.0.14+9 (January 2022 CPU)
  * New features
    + JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
  * Security fixes
    + JDK-8217375: jarsigner breaks old signature with long lines
    in manifest
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
    + JDK-8279541: Improve HarfBuzz
  * Other changes
    + JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/
    /ChoiceKeyEventReaction.html fails
    + JDK-7105119: [TEST_BUG] [macosx] In test
    UIDefaults.toString() must be called with the invokeLater()
    + JDK-7151826: [TEST_BUG] [macosx] The test
    javax/swing/JPopupMenu/4966112/bug4966112.java not for mac
    + JDK-7179006: [macosx] Print-to-file doesn't work: printing to
    the default printer instead
    + JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/
    /bug4726194.java fails on MacOSX
    + JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003 Wrong
    number of thread end events
    + JDK-8039261: [TEST_BUG]: There is not a minimal security
    level in Java Preferences and the TestApplet.html is blocked.
    + JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/
    /AltTabCrashTest.java fails with exception
    + JDK-8075909: [TEST_BUG] The regression-swing case failed as
    it does not have the 'Open' button when select 'subdir' folder
    with NimbusLAF
    + JDK-8078219: Verify lack of @test tag in files in java/net
    test directory
    + JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails
    with "RuntimeException: Process terminated prematurely"
    + JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java timed out intermittently
    + JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails
    intermittently
    + JDK-8131745: java/lang/management/ThreadMXBean/
    /AllThreadIds.java still fails intermittently
    + JDK-8136517: [macosx] Test java/awt/Focus/8073453/
    /AWTFocusTransitionTest.java fails on MacOSX
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/
    /Test6541987.java fails
    + JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/
    /bug4760494.java leaves key pressed
    + JDK-8159904: [TEST_BUG] Failure on solaris of
    java/awt/Window/MultiWindowApp/MultiWindowAppTest.java
    + JDK-8163086: java/awt/Window/TranslucentJAppletTest/
    /TranslucentJAppletTest.java fails
    + JDK-8165828: [TEST_BUG] The reg case: javax/swing/plaf/metal/
    /MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look
    and Feel
    + JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not
    fired! on Windows
    + JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException:
    Default button is not pressed
    + JDK-8169959: javax/swing/JTable/6263446/bug6263446.java:
    Table should be editing
    + JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/
    /7156657/bug7156657.java fails on OS X
    + JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails
    on Windows
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8179880: Refactor javax/security shell tests to plain
    java tests
    + JDK-8180568: Refactor javax/crypto shell tests to plain java
    tests
    + JDK-8180569: Refactor sun/security/krb5/ shell tests to plain
    java tests
    + JDK-8180571: Refactor sun/security/pkcs11 shell tests to
    plain java tests and fix failures
    + JDK-8180573: Refactor sun/security/tools shell tests to plain
    java tests
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8195703: BasicJDWPConnectionTest.java: 'App exited
    unexpectedly with 2'
    + JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java
    fails
    + JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java
    fails
    + JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/
    /NoEventsTest.java fails on Windows
    + JDK-8197811: Test java/awt/Choice/PopupPosTest/
    /PopupPosTest.java fails on Windows
    + JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java
    fails on mac
    + JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java
    fails on mac
    + JDK-8198619: java/awt/Focus/FocusTraversalPolicy/
    /ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java
    fails on mac
    + JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/
    /EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java
    fails on mac
    + JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/
    /SubMenuShowTest/SubMenuShowTest.html fails on mac
    + JDK-8199138: Add RISC-V support to Zero
    + JDK-8199529: javax/swing/text/Utilities/8142966/
    /SwingFontMetricsTest.java fails on windows
    + JDK-8201224: Make string buffer size dynamic in
    mlvmJvmtiUtils.c
    + JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/
    /FollowReferences/followref003/TestDescription.java fails with
    "Location mismatch" errors
    + JDK-8204161: [TESTBUG] auto failed with the "Applet thread
    threw exception: java.lang.UnsupportedOperationException"
    exception
    + JDK-8206085: Refactor
    langtools/tools/javac/versions/Versions.java
    + JDK-8207936: TestZipFile failed with java.lang.AssertionError
    exception
    + JDK-8208242: Add @requires to vmTestbase/gc/g1 tests
    + JDK-8209611: use C++ compiler for hotspot tests
    + JDK-8210182: Remove macros for C compilation from vmTestBase
    but non jvmti
    + JDK-8210198: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[A-F] tests
    + JDK-8210205: build fails on AIX in hotspot cpp tests (for
    example getstacktr001.cpp)
    + JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/
    /jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION
    on windows-x86
    + JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java
    back to tier1
    + JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[A-N] tests
    + JDK-8210392: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8210395: Add doc to SecurityTools.java
    + JDK-8210429: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[G-Z] tests
    + JDK-8210481: Remove #ifdef cplusplus from vmTestbase
    + JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[N-R] tests
    + JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[R-U] tests
    + JDK-8210689: Remove the multi-line old C style for string
    literals
    + JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti/unit tests
    + JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665
    + JDK-8210920: Native C++ tests are not using CXXFLAGS
    + JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR:
    hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti,
    thread)"
    + JDK-8211036: Remove the NSK_STUB macros from vmTestbase for
    non jvmti
    + JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[G-I]*
    + JDK-8211148: var in implicit lambdas shouldn't be accepted
    for source &lt; 11
    + JDK-8211171: move JarUtils to top-level testlibrary
    + JDK-8211227: Inconsistent TLS protocol version in debug output
    + JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[A-G]*
    + JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp
    + JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[I-S]*
    + JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[A-E]
    + JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[E-M]
    + JDK-8211905: Remove multiple casts for EM06 file
    + JDK-8211999: Window positioning bugs due to overlapping
    GraphicsDevice bounds (Windows/HiDPI)
    + JDK-8212082: Remove the NSK_CPP_STUB macros for remaining
    vmTestbase/jvmti/[sS]*
    + JDK-8212083: Handle remaining gc/lock native code and fix two
    strings
    + JDK-8212148: Remove remaining NSK_CPP_STUBs
    + JDK-8213110: Remove the use of applets in automatic tests
    + JDK-8213189: Make restricted headers in HTTP Client
    configurable and remove Date by default
    + JDK-8213263: fix legal headers in test/langtools
    + JDK-8213296: Fix legal headers in test/jdk/java/net
    + JDK-8213301: Fix legal headers in jdk logging tests
    + JDK-8213305: Fix legal headers in test/java/math
    + JDK-8213306: Fix legal headers in test/java/nio
    + JDK-8213328: Update test copyrights in test/java/util/zip and
    test/jdk/tools
    + JDK-8213330: Fix legal headers in i18n tests
    + JDK-8213707: [TEST] vmTestbase/nsk/stress/except/
    /except011.java failed due to wrong class name
    + JDK-8214469: [macos] PIT: java/awt/Choice/
    /ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails
    + JDK-8215410: Regression test for JDK-8214994
    + JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher
    + JDK-8215624: Add parallel heap iteration for jmap \u2013histo
    + JDK-8215889: assert(!_unloading) failed: This oop is not
    available to unloading class loader data with ZGC
    + JDK-8216318: The usage of Disposer in the java.awt.Robot can
    be deleted
    + JDK-8216417: cleanup of IPv6 scope-id handling
    + JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java
    failed with UnsupportedOperation exception
    + JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX
    + JDK-8217633: Configurable extensions with system properties
    + JDK-8217882: java/net/httpclient/MaxStreams.java failed once
    + JDK-8217903: java/net/httpclient/Response204.java fails with
    404
    + JDK-8218483: Crash in
    "assert(_daemon_threads_count-&gt;get_value() &gt; daemon_count)
    failed: thread count mismatch 5 : 5"
    + JDK-8219986: Change to Xcode 10.1 for building on Macosx at
    Oracle
    + JDK-8220575: Correctly format test URI's that contain a
    retrieved IPv6 address
    + JDK-8221259: New tests for java.net.Socket to exercise long
    standing behavior
    + JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails
    on MacOS + Solaris
    + JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/
    /FocusTraversal.java fails on ubuntu
    + JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/
    /IconifyTest.java fails on ubuntu18.04
    + JDK-8222446: assert(C-&gt;env()-&gt;system_dictionary_modification_counter_changed())
    failed: Must invalidate if TypeFuncs differ
    + JDK-8223137: Rename predicate 'do_unroll_only()' to
    'is_unroll_only()'.
    + JDK-8223138: Small clean-up in loop-tree support.
    + JDK-8223139: Rename mandatory policy-do routines.
    + JDK-8223140: Clean-up in 'ok_to_convert()'
    + JDK-8223141: Change (count) suffix _ct into _cnt.
    + JDK-8223400: Replace some enums with static const members in
    hotspot/runtime
    + JDK-8223658: Performance regression of XML.validation in
    13-b19
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8224829: AsyncSSLSocketClose.java has timing issue
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226514: Replace wildcard address with loopback or local
    host in tests - part 17
    + JDK-8226943: compile error in libfollowref003.cpp  with XCode
    10.2 on macosx
    + JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed
    due to "SSLException: An established connection was aborted by
    the software in your host machine"
    + JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java
    fails on Windows7
    + JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently
    positions text
    + JDK-8230019: [REDO] compiler/types/correctness/* tests fail
    with "assert(recv == __null || recv-&gt;is_klass()) failed: wrong
    type"
    + JDK-8230067: Add optional automatic retry when running jtreg
    tests
    + JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests
    may fail on some platforms
    + JDK-8231501: VM crash in
    MethodData::clean_extra_data(CleanExtraDataClosure*):
    fatal error: unexpected tag 99
    + JDK-8233403: Improve verbosity of some httpclient tests
    + JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS
    + JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on
    MacOS
    + JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on
    MacOS
    + JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS
    + JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS
    + JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on
    macos
    + JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java  is
    failing on macos
    + JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails
    on macos
    + JDK-8233562: [TESTBUG] Swing StyledEditorKit test
    bug4506788.java fails on MacOS
    + JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing
    + JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on
    MacoS
    + JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos
    + JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java
    fails on macos
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails
    on macos
    + JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java
    fails on macos
    + JDK-8233637: [TESTBUG] Swing
    ActionListenerCalledTwiceTest.java fails on macos
    + JDK-8233638: [TESTBUG] Swing test
    ScreenMenuBarInputTwice.java fails on macos
    + JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails
    on macos
    + JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java  fails
    on macos
    + JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on
    macos
    + JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is
    failing on macos
    + JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is
    failing on macos
    + JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture
    Recognition in all the platforms
    + JDK-8234823: java/net/Socket/Timeouts.java testcase
    testTimedConnect2() fails on Windows 10
    + JDK-8235784: java/lang/invoke/VarHandles/
    /VarHandleTestByteArrayAsInt.java fails due to timeout with
    fastdebug bits
    + JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -Xcomp -XX:TieredStopAtLevel=1
    + JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60),
    cond_wait
    + JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT,
    when using proxy tunnel
    + JDK-8237354: Add option to jcmd to write a gzipped heap dump
    + JDK-8237589: Fix copyright header formatting
    + JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java
    should not specify TLS version
    + JDK-8239334: Tab Size does not work correctly in JTextArea
    with setLineWrap on
    + JDK-8239422: [TESTBUG]
    compiler/c1/TestPrintIRDuringConstruction.java failed when C1
    is disabled
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240256: Better resource cleaning for SunPKCS11 Provider
    + JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test
    Server
    + JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/
    /bug8020708.java fails in mach5 ubuntu system
    + JDK-8242793: Incorrect copyright header in
    ContinuousCallSiteTargetChange.java
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244292: Headful clients failing with
  - -illegal-access=deny
    + JDK-8245147: Refactor and improve utility of
    test/langtools/tools/javac/versions/Versions.java
    + JDK-8245165: Update bug id for
    javax/swing/text/StyledEditorKit/4506788/bug4506788.java in
    ProblemList
    + JDK-8245665: Test WeakAlg.java should only make sure no
    warning for weak signature algorithms by keytool on root CA
    + JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails
    after 8241072 (multi-homed systems)
    + JDK-8246807: Incorrect copyright header in
    TimeZoneDatePermissionCheck.sh
    + JDK-8247403: JShell: No custom input (e.g. from GUI) possible
    with JavaShellToolBuilder
    + JDK-8247510: typo in IllegalHandshakeMessage
    + JDK-8248187: [TESTBUG] javax/swing/plaf/basic/
    /BasicGraphicsUtils/8132119/bug8132119.java fails with String
    is not properly drawn
    + JDK-8248341: ProblemList java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java
    + JDK-8248500: AArch64: Remove the r18 dependency on Windows
    AArch64
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8249195: Change to Xcode 11.3.1 for building on Macos at
    Oracle
    + JDK-8250521: Configure initial RTO to use minimal retry for
    loopback connections on Windows
    + JDK-8250810: Push missing parts of JDK-8248817
    + JDK-8250839: Improve test template SSLEngineTemplate with
    SSLContextTemplate
    + JDK-8250863: Build error with GCC 10 in NetworkInterface.c
    and k_standard.c
    + JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/
    /gf08t001/TestDriver.java fails
    + JDK-8251155: HostIdentifier fails to canonicalize hostnames
    starting with digits
    + JDK-8251377: [macos11] JTabbedPane selected tab text is
    barely legible
    + JDK-8251570: JDK-8215624 causes assert(worker_id &lt;
    _n_workers) failed: Invalid worker_id
    + JDK-8251930: AArch64: Native types mismatch in hotspot
    + JDK-8252049: Native memory leak in ciMethodData ctor
    + JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x
    friendly
    + JDK-8252114: Windows-AArch64: Enable and test ZGC and
    ShenandoahGC
    + JDK-8253015: Aarch64: Move linux code out from generic CPU
    feature detection
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java
    fail on big screens
    + JDK-8253497: Core Libs Terminology Refresh
    + JDK-8253682: The AppletInitialFocusTest1.java is unstable
    + JDK-8253763: ParallelObjectIterator should have virtual
    destructor
    + JDK-8253866: Security Libs Terminology Refresh
    + JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in
    "try throwing in GET_BODY"
    + JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java
    intermittently failing with TestServer: start exception:
    java.io.IOException: Invalid preface
    + JDK-8255264: Support for identifying the full range of IPv4
    localhost addresses on Windows
    + JDK-8255716: AArch64: Regression: JVM crashes if manually
    offline a core
    + JDK-8255722: Create a new test for rotated blit
    + JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad
    + JDK-8256066: Tests use deprecated TestNG API that is no
    longer available in new versions
    + JDK-8256152: tests fail because of ambiguous method resolution
    + JDK-8256182: Update qemu-debootstrap cross-compilation recipe
    + JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/
    /FullscreenWindowProps.java failed
    + JDK-8256202: Some tweaks for jarsigner tests
    PosixPermissionsTest and SymLinkTest
    + JDK-8256372: [macos] Unexpected symbol was displayed on
    JTextField with Monospaced font
    + JDK-8256956: RegisterImpl::max_slots_per_register is
    incorrect on AMD64
    + JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with
    InvalidPathException on windows
    + JDK-8258855: Two tests sun/security/krb5/auto/
    /ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java
    failed on OL8.3
    + JDK-8259237: Demo selection changes with left/right arrow
    key. No need to press space for selection.
    + JDK-8260571: Add PrintMetaspaceStatistics to print metaspace
    statistics upon VM exit
    + JDK-8260690: JConsole User Guide Link from the Help menu is
    not accessible by keyboard
    + JDK-8261036: Reduce classes loaded by CleanerFactory
    initialization
    + JDK-8261071: AArch64: Refactor interpreter native wrappers
    + JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch
    implementation
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261297: NMT: Final report should use scale 1
    + JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java
    fails because Reserved memory size is too big
    + JDK-8261916: gtest/GTestWrapper.java
    vmErrorTest.unimplemented1_vm_assert failed
    + JDK-8262438: sun/security/ssl/SSLLogger/
    /LoggingFormatConsistency.java failed with "SocketException:
    Socket is closed"
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8262844: (fs) FileStore.supportsFileAttributeView might
    return false negative in case of ext3
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp
    + JDK-8263303: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8263362: Avoid division by 0 in
    java/awt/font/TextJustifier.java justify
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java
    failed with "java.lang.RuntimeException: Wrong method"
    + JDK-8264526: javax/swing/text/html/parser/Parser/8078268/
    /bug8078268.java timeout
    + JDK-8264824: java/net/Inet6Address/B6206527.java doesn't
    close ServerSocket properly
    + JDK-8265019: Update tests for additional TestNG test
    permissions
    + JDK-8265173: [test] divert spurious log output away from
    stream under test in ProcessBuilder Basic test
    + JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8266579: Update test/jdk/java/lang/ProcessHandle/
    /PermissionTest.java &amp; test/jdk/java/sql/testng/util/
    /TestPolicy.java
    + JDK-8266949: Check possibility to disable OperationTimedOut
    on Unix
    + JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg
    tests on many-core machines
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267304: Bump global JTReg memory limit to 768m
    + JDK-8267652: c2 loop unrolling by 8 results in reading memory
    past array
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268093: Manual Testcase: "sun/security/krb5/config/
    /native/TestDynamicStore.java" Fails with NPE
    + JDK-8268555: Update HttpClient tests that use ITestContext to
    jtreg 6+1
    + JDK-8268672: C2: assert(!loop-&gt;is_member(u_loop)) failed: can
    be in outer loop or out of both loops only
    + JDK-8269034: AccessControlException for SunPKCS11 daemon
    threads
    + JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to
    accessClassAndFindClass
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269768: JFR Terminology Refresh
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8269984: [macos] JTabbedPane title looks like  disabled
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270216: [macOS] Update named used for Java run loop mode
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270344: Session resumption errors
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1
    + JDK-8272181: Windows-AArch64:Backport fix of `Backtracing
    broken on PAC enabled systems`
    + JDK-8272316: Wrong Boot JDK help message in 11
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8272828: Add correct licenses to jszip.md
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java
    fails by timeout
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273541: Cleaner Thread creates with normal priority
    instead of MAX_PRIORITY - 2
    + JDK-8273547: [11u] [JVMCI] Partial module-info.java backport
    of JDK-8223332
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273671: Backport of 8260616 misses one JNF header
    inclusion removal
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273795: Zero SPARC64 debug builds fail due to missing
    interpreter fields
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274860: gcc 10.2.1 produces an uninitialized warning in
    sharedRuntimeTrig.cpp
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277815: Fix mistakes in legal header backports
- Removed patch:
  * riscv64-zero.patch
    + integrated upstream
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1644926400">- Update to upstream tag jdk-11.0.14.1+1
  * Changes:
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8281324: Bump update version for OpenJDK: jdk-11.0.14.1</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="fb3f3024790ffffe0e34252d574bb8a1711be72a2c713397f108ac898e7686db" name="java-11-openjdk" arch="ppc64le">
  <version epoch="0" ver="11.0.15.0" rel="150000.3.80.1"/>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643630400">- Update to upstream tag jdk-11.0.14+9 (January 2022 CPU)
  * New features
    + JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
  * Security fixes
    + JDK-8217375: jarsigner breaks old signature with long lines
    in manifest
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
    + JDK-8279541: Improve HarfBuzz
  * Other changes
    + JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/
    /ChoiceKeyEventReaction.html fails
    + JDK-7105119: [TEST_BUG] [macosx] In test
    UIDefaults.toString() must be called with the invokeLater()
    + JDK-7151826: [TEST_BUG] [macosx] The test
    javax/swing/JPopupMenu/4966112/bug4966112.java not for mac
    + JDK-7179006: [macosx] Print-to-file doesn't work: printing to
    the default printer instead
    + JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/
    /bug4726194.java fails on MacOSX
    + JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003 Wrong
    number of thread end events
    + JDK-8039261: [TEST_BUG]: There is not a minimal security
    level in Java Preferences and the TestApplet.html is blocked.
    + JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/
    /AltTabCrashTest.java fails with exception
    + JDK-8075909: [TEST_BUG] The regression-swing case failed as
    it does not have the 'Open' button when select 'subdir' folder
    with NimbusLAF
    + JDK-8078219: Verify lack of @test tag in files in java/net
    test directory
    + JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails
    with "RuntimeException: Process terminated prematurely"
    + JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java timed out intermittently
    + JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails
    intermittently
    + JDK-8131745: java/lang/management/ThreadMXBean/
    /AllThreadIds.java still fails intermittently
    + JDK-8136517: [macosx] Test java/awt/Focus/8073453/
    /AWTFocusTransitionTest.java fails on MacOSX
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/
    /Test6541987.java fails
    + JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/
    /bug4760494.java leaves key pressed
    + JDK-8159904: [TEST_BUG] Failure on solaris of
    java/awt/Window/MultiWindowApp/MultiWindowAppTest.java
    + JDK-8163086: java/awt/Window/TranslucentJAppletTest/
    /TranslucentJAppletTest.java fails
    + JDK-8165828: [TEST_BUG] The reg case: javax/swing/plaf/metal/
    /MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look
    and Feel
    + JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not
    fired! on Windows
    + JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException:
    Default button is not pressed
    + JDK-8169959: javax/swing/JTable/6263446/bug6263446.java:
    Table should be editing
    + JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/
    /7156657/bug7156657.java fails on OS X
    + JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails
    on Windows
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8179880: Refactor javax/security shell tests to plain
    java tests
    + JDK-8180568: Refactor javax/crypto shell tests to plain java
    tests
    + JDK-8180569: Refactor sun/security/krb5/ shell tests to plain
    java tests
    + JDK-8180571: Refactor sun/security/pkcs11 shell tests to
    plain java tests and fix failures
    + JDK-8180573: Refactor sun/security/tools shell tests to plain
    java tests
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8195703: BasicJDWPConnectionTest.java: 'App exited
    unexpectedly with 2'
    + JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java
    fails
    + JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java
    fails
    + JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/
    /NoEventsTest.java fails on Windows
    + JDK-8197811: Test java/awt/Choice/PopupPosTest/
    /PopupPosTest.java fails on Windows
    + JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java
    fails on mac
    + JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java
    fails on mac
    + JDK-8198619: java/awt/Focus/FocusTraversalPolicy/
    /ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java
    fails on mac
    + JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/
    /EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java
    fails on mac
    + JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/
    /SubMenuShowTest/SubMenuShowTest.html fails on mac
    + JDK-8199138: Add RISC-V support to Zero
    + JDK-8199529: javax/swing/text/Utilities/8142966/
    /SwingFontMetricsTest.java fails on windows
    + JDK-8201224: Make string buffer size dynamic in
    mlvmJvmtiUtils.c
    + JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/
    /FollowReferences/followref003/TestDescription.java fails with
    "Location mismatch" errors
    + JDK-8204161: [TESTBUG] auto failed with the "Applet thread
    threw exception: java.lang.UnsupportedOperationException"
    exception
    + JDK-8206085: Refactor
    langtools/tools/javac/versions/Versions.java
    + JDK-8207936: TestZipFile failed with java.lang.AssertionError
    exception
    + JDK-8208242: Add @requires to vmTestbase/gc/g1 tests
    + JDK-8209611: use C++ compiler for hotspot tests
    + JDK-8210182: Remove macros for C compilation from vmTestBase
    but non jvmti
    + JDK-8210198: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[A-F] tests
    + JDK-8210205: build fails on AIX in hotspot cpp tests (for
    example getstacktr001.cpp)
    + JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/
    /jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION
    on windows-x86
    + JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java
    back to tier1
    + JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[A-N] tests
    + JDK-8210392: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8210395: Add doc to SecurityTools.java
    + JDK-8210429: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[G-Z] tests
    + JDK-8210481: Remove #ifdef cplusplus from vmTestbase
    + JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[N-R] tests
    + JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[R-U] tests
    + JDK-8210689: Remove the multi-line old C style for string
    literals
    + JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti/unit tests
    + JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665
    + JDK-8210920: Native C++ tests are not using CXXFLAGS
    + JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR:
    hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti,
    thread)"
    + JDK-8211036: Remove the NSK_STUB macros from vmTestbase for
    non jvmti
    + JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[G-I]*
    + JDK-8211148: var in implicit lambdas shouldn't be accepted
    for source &lt; 11
    + JDK-8211171: move JarUtils to top-level testlibrary
    + JDK-8211227: Inconsistent TLS protocol version in debug output
    + JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[A-G]*
    + JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp
    + JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[I-S]*
    + JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[A-E]
    + JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[E-M]
    + JDK-8211905: Remove multiple casts for EM06 file
    + JDK-8211999: Window positioning bugs due to overlapping
    GraphicsDevice bounds (Windows/HiDPI)
    + JDK-8212082: Remove the NSK_CPP_STUB macros for remaining
    vmTestbase/jvmti/[sS]*
    + JDK-8212083: Handle remaining gc/lock native code and fix two
    strings
    + JDK-8212148: Remove remaining NSK_CPP_STUBs
    + JDK-8213110: Remove the use of applets in automatic tests
    + JDK-8213189: Make restricted headers in HTTP Client
    configurable and remove Date by default
    + JDK-8213263: fix legal headers in test/langtools
    + JDK-8213296: Fix legal headers in test/jdk/java/net
    + JDK-8213301: Fix legal headers in jdk logging tests
    + JDK-8213305: Fix legal headers in test/java/math
    + JDK-8213306: Fix legal headers in test/java/nio
    + JDK-8213328: Update test copyrights in test/java/util/zip and
    test/jdk/tools
    + JDK-8213330: Fix legal headers in i18n tests
    + JDK-8213707: [TEST] vmTestbase/nsk/stress/except/
    /except011.java failed due to wrong class name
    + JDK-8214469: [macos] PIT: java/awt/Choice/
    /ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails
    + JDK-8215410: Regression test for JDK-8214994
    + JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher
    + JDK-8215624: Add parallel heap iteration for jmap \u2013histo
    + JDK-8215889: assert(!_unloading) failed: This oop is not
    available to unloading class loader data with ZGC
    + JDK-8216318: The usage of Disposer in the java.awt.Robot can
    be deleted
    + JDK-8216417: cleanup of IPv6 scope-id handling
    + JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java
    failed with UnsupportedOperation exception
    + JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX
    + JDK-8217633: Configurable extensions with system properties
    + JDK-8217882: java/net/httpclient/MaxStreams.java failed once
    + JDK-8217903: java/net/httpclient/Response204.java fails with
    404
    + JDK-8218483: Crash in
    "assert(_daemon_threads_count-&gt;get_value() &gt; daemon_count)
    failed: thread count mismatch 5 : 5"
    + JDK-8219986: Change to Xcode 10.1 for building on Macosx at
    Oracle
    + JDK-8220575: Correctly format test URI's that contain a
    retrieved IPv6 address
    + JDK-8221259: New tests for java.net.Socket to exercise long
    standing behavior
    + JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails
    on MacOS + Solaris
    + JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/
    /FocusTraversal.java fails on ubuntu
    + JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/
    /IconifyTest.java fails on ubuntu18.04
    + JDK-8222446: assert(C-&gt;env()-&gt;system_dictionary_modification_counter_changed())
    failed: Must invalidate if TypeFuncs differ
    + JDK-8223137: Rename predicate 'do_unroll_only()' to
    'is_unroll_only()'.
    + JDK-8223138: Small clean-up in loop-tree support.
    + JDK-8223139: Rename mandatory policy-do routines.
    + JDK-8223140: Clean-up in 'ok_to_convert()'
    + JDK-8223141: Change (count) suffix _ct into _cnt.
    + JDK-8223400: Replace some enums with static const members in
    hotspot/runtime
    + JDK-8223658: Performance regression of XML.validation in
    13-b19
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8224829: AsyncSSLSocketClose.java has timing issue
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226514: Replace wildcard address with loopback or local
    host in tests - part 17
    + JDK-8226943: compile error in libfollowref003.cpp  with XCode
    10.2 on macosx
    + JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed
    due to "SSLException: An established connection was aborted by
    the software in your host machine"
    + JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java
    fails on Windows7
    + JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently
    positions text
    + JDK-8230019: [REDO] compiler/types/correctness/* tests fail
    with "assert(recv == __null || recv-&gt;is_klass()) failed: wrong
    type"
    + JDK-8230067: Add optional automatic retry when running jtreg
    tests
    + JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests
    may fail on some platforms
    + JDK-8231501: VM crash in
    MethodData::clean_extra_data(CleanExtraDataClosure*):
    fatal error: unexpected tag 99
    + JDK-8233403: Improve verbosity of some httpclient tests
    + JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS
    + JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on
    MacOS
    + JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on
    MacOS
    + JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS
    + JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS
    + JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on
    macos
    + JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java  is
    failing on macos
    + JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails
    on macos
    + JDK-8233562: [TESTBUG] Swing StyledEditorKit test
    bug4506788.java fails on MacOS
    + JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing
    + JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on
    MacoS
    + JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos
    + JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java
    fails on macos
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails
    on macos
    + JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java
    fails on macos
    + JDK-8233637: [TESTBUG] Swing
    ActionListenerCalledTwiceTest.java fails on macos
    + JDK-8233638: [TESTBUG] Swing test
    ScreenMenuBarInputTwice.java fails on macos
    + JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails
    on macos
    + JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java  fails
    on macos
    + JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on
    macos
    + JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is
    failing on macos
    + JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is
    failing on macos
    + JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture
    Recognition in all the platforms
    + JDK-8234823: java/net/Socket/Timeouts.java testcase
    testTimedConnect2() fails on Windows 10
    + JDK-8235784: java/lang/invoke/VarHandles/
    /VarHandleTestByteArrayAsInt.java fails due to timeout with
    fastdebug bits
    + JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -Xcomp -XX:TieredStopAtLevel=1
    + JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60),
    cond_wait
    + JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT,
    when using proxy tunnel
    + JDK-8237354: Add option to jcmd to write a gzipped heap dump
    + JDK-8237589: Fix copyright header formatting
    + JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java
    should not specify TLS version
    + JDK-8239334: Tab Size does not work correctly in JTextArea
    with setLineWrap on
    + JDK-8239422: [TESTBUG]
    compiler/c1/TestPrintIRDuringConstruction.java failed when C1
    is disabled
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240256: Better resource cleaning for SunPKCS11 Provider
    + JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test
    Server
    + JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/
    /bug8020708.java fails in mach5 ubuntu system
    + JDK-8242793: Incorrect copyright header in
    ContinuousCallSiteTargetChange.java
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244292: Headful clients failing with
  - -illegal-access=deny
    + JDK-8245147: Refactor and improve utility of
    test/langtools/tools/javac/versions/Versions.java
    + JDK-8245165: Update bug id for
    javax/swing/text/StyledEditorKit/4506788/bug4506788.java in
    ProblemList
    + JDK-8245665: Test WeakAlg.java should only make sure no
    warning for weak signature algorithms by keytool on root CA
    + JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails
    after 8241072 (multi-homed systems)
    + JDK-8246807: Incorrect copyright header in
    TimeZoneDatePermissionCheck.sh
    + JDK-8247403: JShell: No custom input (e.g. from GUI) possible
    with JavaShellToolBuilder
    + JDK-8247510: typo in IllegalHandshakeMessage
    + JDK-8248187: [TESTBUG] javax/swing/plaf/basic/
    /BasicGraphicsUtils/8132119/bug8132119.java fails with String
    is not properly drawn
    + JDK-8248341: ProblemList java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java
    + JDK-8248500: AArch64: Remove the r18 dependency on Windows
    AArch64
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8249195: Change to Xcode 11.3.1 for building on Macos at
    Oracle
    + JDK-8250521: Configure initial RTO to use minimal retry for
    loopback connections on Windows
    + JDK-8250810: Push missing parts of JDK-8248817
    + JDK-8250839: Improve test template SSLEngineTemplate with
    SSLContextTemplate
    + JDK-8250863: Build error with GCC 10 in NetworkInterface.c
    and k_standard.c
    + JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/
    /gf08t001/TestDriver.java fails
    + JDK-8251155: HostIdentifier fails to canonicalize hostnames
    starting with digits
    + JDK-8251377: [macos11] JTabbedPane selected tab text is
    barely legible
    + JDK-8251570: JDK-8215624 causes assert(worker_id &lt;
    _n_workers) failed: Invalid worker_id
    + JDK-8251930: AArch64: Native types mismatch in hotspot
    + JDK-8252049: Native memory leak in ciMethodData ctor
    + JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x
    friendly
    + JDK-8252114: Windows-AArch64: Enable and test ZGC and
    ShenandoahGC
    + JDK-8253015: Aarch64: Move linux code out from generic CPU
    feature detection
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java
    fail on big screens
    + JDK-8253497: Core Libs Terminology Refresh
    + JDK-8253682: The AppletInitialFocusTest1.java is unstable
    + JDK-8253763: ParallelObjectIterator should have virtual
    destructor
    + JDK-8253866: Security Libs Terminology Refresh
    + JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in
    "try throwing in GET_BODY"
    + JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java
    intermittently failing with TestServer: start exception:
    java.io.IOException: Invalid preface
    + JDK-8255264: Support for identifying the full range of IPv4
    localhost addresses on Windows
    + JDK-8255716: AArch64: Regression: JVM crashes if manually
    offline a core
    + JDK-8255722: Create a new test for rotated blit
    + JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad
    + JDK-8256066: Tests use deprecated TestNG API that is no
    longer available in new versions
    + JDK-8256152: tests fail because of ambiguous method resolution
    + JDK-8256182: Update qemu-debootstrap cross-compilation recipe
    + JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/
    /FullscreenWindowProps.java failed
    + JDK-8256202: Some tweaks for jarsigner tests
    PosixPermissionsTest and SymLinkTest
    + JDK-8256372: [macos] Unexpected symbol was displayed on
    JTextField with Monospaced font
    + JDK-8256956: RegisterImpl::max_slots_per_register is
    incorrect on AMD64
    + JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with
    InvalidPathException on windows
    + JDK-8258855: Two tests sun/security/krb5/auto/
    /ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java
    failed on OL8.3
    + JDK-8259237: Demo selection changes with left/right arrow
    key. No need to press space for selection.
    + JDK-8260571: Add PrintMetaspaceStatistics to print metaspace
    statistics upon VM exit
    + JDK-8260690: JConsole User Guide Link from the Help menu is
    not accessible by keyboard
    + JDK-8261036: Reduce classes loaded by CleanerFactory
    initialization
    + JDK-8261071: AArch64: Refactor interpreter native wrappers
    + JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch
    implementation
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261297: NMT: Final report should use scale 1
    + JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java
    fails because Reserved memory size is too big
    + JDK-8261916: gtest/GTestWrapper.java
    vmErrorTest.unimplemented1_vm_assert failed
    + JDK-8262438: sun/security/ssl/SSLLogger/
    /LoggingFormatConsistency.java failed with "SocketException:
    Socket is closed"
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8262844: (fs) FileStore.supportsFileAttributeView might
    return false negative in case of ext3
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp
    + JDK-8263303: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8263362: Avoid division by 0 in
    java/awt/font/TextJustifier.java justify
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java
    failed with "java.lang.RuntimeException: Wrong method"
    + JDK-8264526: javax/swing/text/html/parser/Parser/8078268/
    /bug8078268.java timeout
    + JDK-8264824: java/net/Inet6Address/B6206527.java doesn't
    close ServerSocket properly
    + JDK-8265019: Update tests for additional TestNG test
    permissions
    + JDK-8265173: [test] divert spurious log output away from
    stream under test in ProcessBuilder Basic test
    + JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8266579: Update test/jdk/java/lang/ProcessHandle/
    /PermissionTest.java &amp; test/jdk/java/sql/testng/util/
    /TestPolicy.java
    + JDK-8266949: Check possibility to disable OperationTimedOut
    on Unix
    + JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg
    tests on many-core machines
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267304: Bump global JTReg memory limit to 768m
    + JDK-8267652: c2 loop unrolling by 8 results in reading memory
    past array
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268093: Manual Testcase: "sun/security/krb5/config/
    /native/TestDynamicStore.java" Fails with NPE
    + JDK-8268555: Update HttpClient tests that use ITestContext to
    jtreg 6+1
    + JDK-8268672: C2: assert(!loop-&gt;is_member(u_loop)) failed: can
    be in outer loop or out of both loops only
    + JDK-8269034: AccessControlException for SunPKCS11 daemon
    threads
    + JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to
    accessClassAndFindClass
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269768: JFR Terminology Refresh
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8269984: [macos] JTabbedPane title looks like  disabled
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270216: [macOS] Update named used for Java run loop mode
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270344: Session resumption errors
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1
    + JDK-8272181: Windows-AArch64:Backport fix of `Backtracing
    broken on PAC enabled systems`
    + JDK-8272316: Wrong Boot JDK help message in 11
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8272828: Add correct licenses to jszip.md
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java
    fails by timeout
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273541: Cleaner Thread creates with normal priority
    instead of MAX_PRIORITY - 2
    + JDK-8273547: [11u] [JVMCI] Partial module-info.java backport
    of JDK-8223332
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273671: Backport of 8260616 misses one JNF header
    inclusion removal
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273795: Zero SPARC64 debug builds fail due to missing
    interpreter fields
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274860: gcc 10.2.1 produces an uninitialized warning in
    sharedRuntimeTrig.cpp
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277815: Fix mistakes in legal header backports
- Removed patch:
  * riscv64-zero.patch
    + integrated upstream
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1644926400">- Update to upstream tag jdk-11.0.14.1+1
  * Changes:
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8281324: Bump update version for OpenJDK: jdk-11.0.14.1</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="e7cb6de3351c858fc1df45b7e18b6adefd53d6055aa6270c6bc21f67cba64297" name="java-11-openjdk" arch="s390x">
  <version epoch="0" ver="11.0.15.0" rel="150000.3.80.1"/>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643630400">- Update to upstream tag jdk-11.0.14+9 (January 2022 CPU)
  * New features
    + JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
  * Security fixes
    + JDK-8217375: jarsigner breaks old signature with long lines
    in manifest
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
    + JDK-8279541: Improve HarfBuzz
  * Other changes
    + JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/
    /ChoiceKeyEventReaction.html fails
    + JDK-7105119: [TEST_BUG] [macosx] In test
    UIDefaults.toString() must be called with the invokeLater()
    + JDK-7151826: [TEST_BUG] [macosx] The test
    javax/swing/JPopupMenu/4966112/bug4966112.java not for mac
    + JDK-7179006: [macosx] Print-to-file doesn't work: printing to
    the default printer instead
    + JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/
    /bug4726194.java fails on MacOSX
    + JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003 Wrong
    number of thread end events
    + JDK-8039261: [TEST_BUG]: There is not a minimal security
    level in Java Preferences and the TestApplet.html is blocked.
    + JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/
    /AltTabCrashTest.java fails with exception
    + JDK-8075909: [TEST_BUG] The regression-swing case failed as
    it does not have the 'Open' button when select 'subdir' folder
    with NimbusLAF
    + JDK-8078219: Verify lack of @test tag in files in java/net
    test directory
    + JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails
    with "RuntimeException: Process terminated prematurely"
    + JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java timed out intermittently
    + JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails
    intermittently
    + JDK-8131745: java/lang/management/ThreadMXBean/
    /AllThreadIds.java still fails intermittently
    + JDK-8136517: [macosx] Test java/awt/Focus/8073453/
    /AWTFocusTransitionTest.java fails on MacOSX
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/
    /Test6541987.java fails
    + JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/
    /bug4760494.java leaves key pressed
    + JDK-8159904: [TEST_BUG] Failure on solaris of
    java/awt/Window/MultiWindowApp/MultiWindowAppTest.java
    + JDK-8163086: java/awt/Window/TranslucentJAppletTest/
    /TranslucentJAppletTest.java fails
    + JDK-8165828: [TEST_BUG] The reg case: javax/swing/plaf/metal/
    /MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look
    and Feel
    + JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not
    fired! on Windows
    + JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException:
    Default button is not pressed
    + JDK-8169959: javax/swing/JTable/6263446/bug6263446.java:
    Table should be editing
    + JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/
    /7156657/bug7156657.java fails on OS X
    + JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails
    on Windows
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8179880: Refactor javax/security shell tests to plain
    java tests
    + JDK-8180568: Refactor javax/crypto shell tests to plain java
    tests
    + JDK-8180569: Refactor sun/security/krb5/ shell tests to plain
    java tests
    + JDK-8180571: Refactor sun/security/pkcs11 shell tests to
    plain java tests and fix failures
    + JDK-8180573: Refactor sun/security/tools shell tests to plain
    java tests
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8195703: BasicJDWPConnectionTest.java: 'App exited
    unexpectedly with 2'
    + JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java
    fails
    + JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java
    fails
    + JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/
    /NoEventsTest.java fails on Windows
    + JDK-8197811: Test java/awt/Choice/PopupPosTest/
    /PopupPosTest.java fails on Windows
    + JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java
    fails on mac
    + JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java
    fails on mac
    + JDK-8198619: java/awt/Focus/FocusTraversalPolicy/
    /ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java
    fails on mac
    + JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/
    /EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java
    fails on mac
    + JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/
    /SubMenuShowTest/SubMenuShowTest.html fails on mac
    + JDK-8199138: Add RISC-V support to Zero
    + JDK-8199529: javax/swing/text/Utilities/8142966/
    /SwingFontMetricsTest.java fails on windows
    + JDK-8201224: Make string buffer size dynamic in
    mlvmJvmtiUtils.c
    + JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/
    /FollowReferences/followref003/TestDescription.java fails with
    "Location mismatch" errors
    + JDK-8204161: [TESTBUG] auto failed with the "Applet thread
    threw exception: java.lang.UnsupportedOperationException"
    exception
    + JDK-8206085: Refactor
    langtools/tools/javac/versions/Versions.java
    + JDK-8207936: TestZipFile failed with java.lang.AssertionError
    exception
    + JDK-8208242: Add @requires to vmTestbase/gc/g1 tests
    + JDK-8209611: use C++ compiler for hotspot tests
    + JDK-8210182: Remove macros for C compilation from vmTestBase
    but non jvmti
    + JDK-8210198: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[A-F] tests
    + JDK-8210205: build fails on AIX in hotspot cpp tests (for
    example getstacktr001.cpp)
    + JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/
    /jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION
    on windows-x86
    + JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java
    back to tier1
    + JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[A-N] tests
    + JDK-8210392: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8210395: Add doc to SecurityTools.java
    + JDK-8210429: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[G-Z] tests
    + JDK-8210481: Remove #ifdef cplusplus from vmTestbase
    + JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[N-R] tests
    + JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[R-U] tests
    + JDK-8210689: Remove the multi-line old C style for string
    literals
    + JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti/unit tests
    + JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665
    + JDK-8210920: Native C++ tests are not using CXXFLAGS
    + JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR:
    hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti,
    thread)"
    + JDK-8211036: Remove the NSK_STUB macros from vmTestbase for
    non jvmti
    + JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[G-I]*
    + JDK-8211148: var in implicit lambdas shouldn't be accepted
    for source &lt; 11
    + JDK-8211171: move JarUtils to top-level testlibrary
    + JDK-8211227: Inconsistent TLS protocol version in debug output
    + JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[A-G]*
    + JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp
    + JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[I-S]*
    + JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[A-E]
    + JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[E-M]
    + JDK-8211905: Remove multiple casts for EM06 file
    + JDK-8211999: Window positioning bugs due to overlapping
    GraphicsDevice bounds (Windows/HiDPI)
    + JDK-8212082: Remove the NSK_CPP_STUB macros for remaining
    vmTestbase/jvmti/[sS]*
    + JDK-8212083: Handle remaining gc/lock native code and fix two
    strings
    + JDK-8212148: Remove remaining NSK_CPP_STUBs
    + JDK-8213110: Remove the use of applets in automatic tests
    + JDK-8213189: Make restricted headers in HTTP Client
    configurable and remove Date by default
    + JDK-8213263: fix legal headers in test/langtools
    + JDK-8213296: Fix legal headers in test/jdk/java/net
    + JDK-8213301: Fix legal headers in jdk logging tests
    + JDK-8213305: Fix legal headers in test/java/math
    + JDK-8213306: Fix legal headers in test/java/nio
    + JDK-8213328: Update test copyrights in test/java/util/zip and
    test/jdk/tools
    + JDK-8213330: Fix legal headers in i18n tests
    + JDK-8213707: [TEST] vmTestbase/nsk/stress/except/
    /except011.java failed due to wrong class name
    + JDK-8214469: [macos] PIT: java/awt/Choice/
    /ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails
    + JDK-8215410: Regression test for JDK-8214994
    + JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher
    + JDK-8215624: Add parallel heap iteration for jmap \u2013histo
    + JDK-8215889: assert(!_unloading) failed: This oop is not
    available to unloading class loader data with ZGC
    + JDK-8216318: The usage of Disposer in the java.awt.Robot can
    be deleted
    + JDK-8216417: cleanup of IPv6 scope-id handling
    + JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java
    failed with UnsupportedOperation exception
    + JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX
    + JDK-8217633: Configurable extensions with system properties
    + JDK-8217882: java/net/httpclient/MaxStreams.java failed once
    + JDK-8217903: java/net/httpclient/Response204.java fails with
    404
    + JDK-8218483: Crash in
    "assert(_daemon_threads_count-&gt;get_value() &gt; daemon_count)
    failed: thread count mismatch 5 : 5"
    + JDK-8219986: Change to Xcode 10.1 for building on Macosx at
    Oracle
    + JDK-8220575: Correctly format test URI's that contain a
    retrieved IPv6 address
    + JDK-8221259: New tests for java.net.Socket to exercise long
    standing behavior
    + JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails
    on MacOS + Solaris
    + JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/
    /FocusTraversal.java fails on ubuntu
    + JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/
    /IconifyTest.java fails on ubuntu18.04
    + JDK-8222446: assert(C-&gt;env()-&gt;system_dictionary_modification_counter_changed())
    failed: Must invalidate if TypeFuncs differ
    + JDK-8223137: Rename predicate 'do_unroll_only()' to
    'is_unroll_only()'.
    + JDK-8223138: Small clean-up in loop-tree support.
    + JDK-8223139: Rename mandatory policy-do routines.
    + JDK-8223140: Clean-up in 'ok_to_convert()'
    + JDK-8223141: Change (count) suffix _ct into _cnt.
    + JDK-8223400: Replace some enums with static const members in
    hotspot/runtime
    + JDK-8223658: Performance regression of XML.validation in
    13-b19
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8224829: AsyncSSLSocketClose.java has timing issue
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226514: Replace wildcard address with loopback or local
    host in tests - part 17
    + JDK-8226943: compile error in libfollowref003.cpp  with XCode
    10.2 on macosx
    + JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed
    due to "SSLException: An established connection was aborted by
    the software in your host machine"
    + JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java
    fails on Windows7
    + JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently
    positions text
    + JDK-8230019: [REDO] compiler/types/correctness/* tests fail
    with "assert(recv == __null || recv-&gt;is_klass()) failed: wrong
    type"
    + JDK-8230067: Add optional automatic retry when running jtreg
    tests
    + JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests
    may fail on some platforms
    + JDK-8231501: VM crash in
    MethodData::clean_extra_data(CleanExtraDataClosure*):
    fatal error: unexpected tag 99
    + JDK-8233403: Improve verbosity of some httpclient tests
    + JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS
    + JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on
    MacOS
    + JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on
    MacOS
    + JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS
    + JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS
    + JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on
    macos
    + JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java  is
    failing on macos
    + JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails
    on macos
    + JDK-8233562: [TESTBUG] Swing StyledEditorKit test
    bug4506788.java fails on MacOS
    + JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing
    + JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on
    MacoS
    + JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos
    + JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java
    fails on macos
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails
    on macos
    + JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java
    fails on macos
    + JDK-8233637: [TESTBUG] Swing
    ActionListenerCalledTwiceTest.java fails on macos
    + JDK-8233638: [TESTBUG] Swing test
    ScreenMenuBarInputTwice.java fails on macos
    + JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails
    on macos
    + JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java  fails
    on macos
    + JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on
    macos
    + JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is
    failing on macos
    + JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is
    failing on macos
    + JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture
    Recognition in all the platforms
    + JDK-8234823: java/net/Socket/Timeouts.java testcase
    testTimedConnect2() fails on Windows 10
    + JDK-8235784: java/lang/invoke/VarHandles/
    /VarHandleTestByteArrayAsInt.java fails due to timeout with
    fastdebug bits
    + JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -Xcomp -XX:TieredStopAtLevel=1
    + JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60),
    cond_wait
    + JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT,
    when using proxy tunnel
    + JDK-8237354: Add option to jcmd to write a gzipped heap dump
    + JDK-8237589: Fix copyright header formatting
    + JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java
    should not specify TLS version
    + JDK-8239334: Tab Size does not work correctly in JTextArea
    with setLineWrap on
    + JDK-8239422: [TESTBUG]
    compiler/c1/TestPrintIRDuringConstruction.java failed when C1
    is disabled
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240256: Better resource cleaning for SunPKCS11 Provider
    + JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test
    Server
    + JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/
    /bug8020708.java fails in mach5 ubuntu system
    + JDK-8242793: Incorrect copyright header in
    ContinuousCallSiteTargetChange.java
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244292: Headful clients failing with
  - -illegal-access=deny
    + JDK-8245147: Refactor and improve utility of
    test/langtools/tools/javac/versions/Versions.java
    + JDK-8245165: Update bug id for
    javax/swing/text/StyledEditorKit/4506788/bug4506788.java in
    ProblemList
    + JDK-8245665: Test WeakAlg.java should only make sure no
    warning for weak signature algorithms by keytool on root CA
    + JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails
    after 8241072 (multi-homed systems)
    + JDK-8246807: Incorrect copyright header in
    TimeZoneDatePermissionCheck.sh
    + JDK-8247403: JShell: No custom input (e.g. from GUI) possible
    with JavaShellToolBuilder
    + JDK-8247510: typo in IllegalHandshakeMessage
    + JDK-8248187: [TESTBUG] javax/swing/plaf/basic/
    /BasicGraphicsUtils/8132119/bug8132119.java fails with String
    is not properly drawn
    + JDK-8248341: ProblemList java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java
    + JDK-8248500: AArch64: Remove the r18 dependency on Windows
    AArch64
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8249195: Change to Xcode 11.3.1 for building on Macos at
    Oracle
    + JDK-8250521: Configure initial RTO to use minimal retry for
    loopback connections on Windows
    + JDK-8250810: Push missing parts of JDK-8248817
    + JDK-8250839: Improve test template SSLEngineTemplate with
    SSLContextTemplate
    + JDK-8250863: Build error with GCC 10 in NetworkInterface.c
    and k_standard.c
    + JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/
    /gf08t001/TestDriver.java fails
    + JDK-8251155: HostIdentifier fails to canonicalize hostnames
    starting with digits
    + JDK-8251377: [macos11] JTabbedPane selected tab text is
    barely legible
    + JDK-8251570: JDK-8215624 causes assert(worker_id &lt;
    _n_workers) failed: Invalid worker_id
    + JDK-8251930: AArch64: Native types mismatch in hotspot
    + JDK-8252049: Native memory leak in ciMethodData ctor
    + JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x
    friendly
    + JDK-8252114: Windows-AArch64: Enable and test ZGC and
    ShenandoahGC
    + JDK-8253015: Aarch64: Move linux code out from generic CPU
    feature detection
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java
    fail on big screens
    + JDK-8253497: Core Libs Terminology Refresh
    + JDK-8253682: The AppletInitialFocusTest1.java is unstable
    + JDK-8253763: ParallelObjectIterator should have virtual
    destructor
    + JDK-8253866: Security Libs Terminology Refresh
    + JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in
    "try throwing in GET_BODY"
    + JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java
    intermittently failing with TestServer: start exception:
    java.io.IOException: Invalid preface
    + JDK-8255264: Support for identifying the full range of IPv4
    localhost addresses on Windows
    + JDK-8255716: AArch64: Regression: JVM crashes if manually
    offline a core
    + JDK-8255722: Create a new test for rotated blit
    + JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad
    + JDK-8256066: Tests use deprecated TestNG API that is no
    longer available in new versions
    + JDK-8256152: tests fail because of ambiguous method resolution
    + JDK-8256182: Update qemu-debootstrap cross-compilation recipe
    + JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/
    /FullscreenWindowProps.java failed
    + JDK-8256202: Some tweaks for jarsigner tests
    PosixPermissionsTest and SymLinkTest
    + JDK-8256372: [macos] Unexpected symbol was displayed on
    JTextField with Monospaced font
    + JDK-8256956: RegisterImpl::max_slots_per_register is
    incorrect on AMD64
    + JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with
    InvalidPathException on windows
    + JDK-8258855: Two tests sun/security/krb5/auto/
    /ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java
    failed on OL8.3
    + JDK-8259237: Demo selection changes with left/right arrow
    key. No need to press space for selection.
    + JDK-8260571: Add PrintMetaspaceStatistics to print metaspace
    statistics upon VM exit
    + JDK-8260690: JConsole User Guide Link from the Help menu is
    not accessible by keyboard
    + JDK-8261036: Reduce classes loaded by CleanerFactory
    initialization
    + JDK-8261071: AArch64: Refactor interpreter native wrappers
    + JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch
    implementation
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261297: NMT: Final report should use scale 1
    + JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java
    fails because Reserved memory size is too big
    + JDK-8261916: gtest/GTestWrapper.java
    vmErrorTest.unimplemented1_vm_assert failed
    + JDK-8262438: sun/security/ssl/SSLLogger/
    /LoggingFormatConsistency.java failed with "SocketException:
    Socket is closed"
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8262844: (fs) FileStore.supportsFileAttributeView might
    return false negative in case of ext3
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp
    + JDK-8263303: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8263362: Avoid division by 0 in
    java/awt/font/TextJustifier.java justify
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java
    failed with "java.lang.RuntimeException: Wrong method"
    + JDK-8264526: javax/swing/text/html/parser/Parser/8078268/
    /bug8078268.java timeout
    + JDK-8264824: java/net/Inet6Address/B6206527.java doesn't
    close ServerSocket properly
    + JDK-8265019: Update tests for additional TestNG test
    permissions
    + JDK-8265173: [test] divert spurious log output away from
    stream under test in ProcessBuilder Basic test
    + JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8266579: Update test/jdk/java/lang/ProcessHandle/
    /PermissionTest.java &amp; test/jdk/java/sql/testng/util/
    /TestPolicy.java
    + JDK-8266949: Check possibility to disable OperationTimedOut
    on Unix
    + JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg
    tests on many-core machines
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267304: Bump global JTReg memory limit to 768m
    + JDK-8267652: c2 loop unrolling by 8 results in reading memory
    past array
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268093: Manual Testcase: "sun/security/krb5/config/
    /native/TestDynamicStore.java" Fails with NPE
    + JDK-8268555: Update HttpClient tests that use ITestContext to
    jtreg 6+1
    + JDK-8268672: C2: assert(!loop-&gt;is_member(u_loop)) failed: can
    be in outer loop or out of both loops only
    + JDK-8269034: AccessControlException for SunPKCS11 daemon
    threads
    + JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to
    accessClassAndFindClass
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269768: JFR Terminology Refresh
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8269984: [macos] JTabbedPane title looks like  disabled
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270216: [macOS] Update named used for Java run loop mode
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270344: Session resumption errors
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1
    + JDK-8272181: Windows-AArch64:Backport fix of `Backtracing
    broken on PAC enabled systems`
    + JDK-8272316: Wrong Boot JDK help message in 11
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8272828: Add correct licenses to jszip.md
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java
    fails by timeout
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273541: Cleaner Thread creates with normal priority
    instead of MAX_PRIORITY - 2
    + JDK-8273547: [11u] [JVMCI] Partial module-info.java backport
    of JDK-8223332
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273671: Backport of 8260616 misses one JNF header
    inclusion removal
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273795: Zero SPARC64 debug builds fail due to missing
    interpreter fields
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274860: gcc 10.2.1 produces an uninitialized warning in
    sharedRuntimeTrig.cpp
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277815: Fix mistakes in legal header backports
- Removed patch:
  * riscv64-zero.patch
    + integrated upstream
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1644926400">- Update to upstream tag jdk-11.0.14.1+1
  * Changes:
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8281324: Bump update version for OpenJDK: jdk-11.0.14.1</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="5e063b305f953472a4628ee8abae97f0d9448432f7a7e0ab77372896e3e3be59" name="java-11-openjdk" arch="src">
  <version epoch="0" ver="11.0.15.0" rel="150000.3.80.1"/>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643630400">- Update to upstream tag jdk-11.0.14+9 (January 2022 CPU)
  * New features
    + JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
  * Security fixes
    + JDK-8217375: jarsigner breaks old signature with long lines
    in manifest
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
    + JDK-8279541: Improve HarfBuzz
  * Other changes
    + JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/
    /ChoiceKeyEventReaction.html fails
    + JDK-7105119: [TEST_BUG] [macosx] In test
    UIDefaults.toString() must be called with the invokeLater()
    + JDK-7151826: [TEST_BUG] [macosx] The test
    javax/swing/JPopupMenu/4966112/bug4966112.java not for mac
    + JDK-7179006: [macosx] Print-to-file doesn't work: printing to
    the default printer instead
    + JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/
    /bug4726194.java fails on MacOSX
    + JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003 Wrong
    number of thread end events
    + JDK-8039261: [TEST_BUG]: There is not a minimal security
    level in Java Preferences and the TestApplet.html is blocked.
    + JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/
    /AltTabCrashTest.java fails with exception
    + JDK-8075909: [TEST_BUG] The regression-swing case failed as
    it does not have the 'Open' button when select 'subdir' folder
    with NimbusLAF
    + JDK-8078219: Verify lack of @test tag in files in java/net
    test directory
    + JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails
    with "RuntimeException: Process terminated prematurely"
    + JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java timed out intermittently
    + JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails
    intermittently
    + JDK-8131745: java/lang/management/ThreadMXBean/
    /AllThreadIds.java still fails intermittently
    + JDK-8136517: [macosx] Test java/awt/Focus/8073453/
    /AWTFocusTransitionTest.java fails on MacOSX
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/
    /Test6541987.java fails
    + JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/
    /bug4760494.java leaves key pressed
    + JDK-8159904: [TEST_BUG] Failure on solaris of
    java/awt/Window/MultiWindowApp/MultiWindowAppTest.java
    + JDK-8163086: java/awt/Window/TranslucentJAppletTest/
    /TranslucentJAppletTest.java fails
    + JDK-8165828: [TEST_BUG] The reg case: javax/swing/plaf/metal/
    /MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look
    and Feel
    + JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not
    fired! on Windows
    + JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException:
    Default button is not pressed
    + JDK-8169959: javax/swing/JTable/6263446/bug6263446.java:
    Table should be editing
    + JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/
    /7156657/bug7156657.java fails on OS X
    + JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails
    on Windows
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8179880: Refactor javax/security shell tests to plain
    java tests
    + JDK-8180568: Refactor javax/crypto shell tests to plain java
    tests
    + JDK-8180569: Refactor sun/security/krb5/ shell tests to plain
    java tests
    + JDK-8180571: Refactor sun/security/pkcs11 shell tests to
    plain java tests and fix failures
    + JDK-8180573: Refactor sun/security/tools shell tests to plain
    java tests
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8195703: BasicJDWPConnectionTest.java: 'App exited
    unexpectedly with 2'
    + JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java
    fails
    + JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java
    fails
    + JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/
    /NoEventsTest.java fails on Windows
    + JDK-8197811: Test java/awt/Choice/PopupPosTest/
    /PopupPosTest.java fails on Windows
    + JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java
    fails on mac
    + JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java
    fails on mac
    + JDK-8198619: java/awt/Focus/FocusTraversalPolicy/
    /ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java
    fails on mac
    + JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/
    /EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java
    fails on mac
    + JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/
    /SubMenuShowTest/SubMenuShowTest.html fails on mac
    + JDK-8199138: Add RISC-V support to Zero
    + JDK-8199529: javax/swing/text/Utilities/8142966/
    /SwingFontMetricsTest.java fails on windows
    + JDK-8201224: Make string buffer size dynamic in
    mlvmJvmtiUtils.c
    + JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/
    /FollowReferences/followref003/TestDescription.java fails with
    "Location mismatch" errors
    + JDK-8204161: [TESTBUG] auto failed with the "Applet thread
    threw exception: java.lang.UnsupportedOperationException"
    exception
    + JDK-8206085: Refactor
    langtools/tools/javac/versions/Versions.java
    + JDK-8207936: TestZipFile failed with java.lang.AssertionError
    exception
    + JDK-8208242: Add @requires to vmTestbase/gc/g1 tests
    + JDK-8209611: use C++ compiler for hotspot tests
    + JDK-8210182: Remove macros for C compilation from vmTestBase
    but non jvmti
    + JDK-8210198: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[A-F] tests
    + JDK-8210205: build fails on AIX in hotspot cpp tests (for
    example getstacktr001.cpp)
    + JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/
    /jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION
    on windows-x86
    + JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java
    back to tier1
    + JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[A-N] tests
    + JDK-8210392: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8210395: Add doc to SecurityTools.java
    + JDK-8210429: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[G-Z] tests
    + JDK-8210481: Remove #ifdef cplusplus from vmTestbase
    + JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[N-R] tests
    + JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[R-U] tests
    + JDK-8210689: Remove the multi-line old C style for string
    literals
    + JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti/unit tests
    + JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665
    + JDK-8210920: Native C++ tests are not using CXXFLAGS
    + JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR:
    hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti,
    thread)"
    + JDK-8211036: Remove the NSK_STUB macros from vmTestbase for
    non jvmti
    + JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[G-I]*
    + JDK-8211148: var in implicit lambdas shouldn't be accepted
    for source &lt; 11
    + JDK-8211171: move JarUtils to top-level testlibrary
    + JDK-8211227: Inconsistent TLS protocol version in debug output
    + JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[A-G]*
    + JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp
    + JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[I-S]*
    + JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[A-E]
    + JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[E-M]
    + JDK-8211905: Remove multiple casts for EM06 file
    + JDK-8211999: Window positioning bugs due to overlapping
    GraphicsDevice bounds (Windows/HiDPI)
    + JDK-8212082: Remove the NSK_CPP_STUB macros for remaining
    vmTestbase/jvmti/[sS]*
    + JDK-8212083: Handle remaining gc/lock native code and fix two
    strings
    + JDK-8212148: Remove remaining NSK_CPP_STUBs
    + JDK-8213110: Remove the use of applets in automatic tests
    + JDK-8213189: Make restricted headers in HTTP Client
    configurable and remove Date by default
    + JDK-8213263: fix legal headers in test/langtools
    + JDK-8213296: Fix legal headers in test/jdk/java/net
    + JDK-8213301: Fix legal headers in jdk logging tests
    + JDK-8213305: Fix legal headers in test/java/math
    + JDK-8213306: Fix legal headers in test/java/nio
    + JDK-8213328: Update test copyrights in test/java/util/zip and
    test/jdk/tools
    + JDK-8213330: Fix legal headers in i18n tests
    + JDK-8213707: [TEST] vmTestbase/nsk/stress/except/
    /except011.java failed due to wrong class name
    + JDK-8214469: [macos] PIT: java/awt/Choice/
    /ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails
    + JDK-8215410: Regression test for JDK-8214994
    + JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher
    + JDK-8215624: Add parallel heap iteration for jmap \u2013histo
    + JDK-8215889: assert(!_unloading) failed: This oop is not
    available to unloading class loader data with ZGC
    + JDK-8216318: The usage of Disposer in the java.awt.Robot can
    be deleted
    + JDK-8216417: cleanup of IPv6 scope-id handling
    + JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java
    failed with UnsupportedOperation exception
    + JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX
    + JDK-8217633: Configurable extensions with system properties
    + JDK-8217882: java/net/httpclient/MaxStreams.java failed once
    + JDK-8217903: java/net/httpclient/Response204.java fails with
    404
    + JDK-8218483: Crash in
    "assert(_daemon_threads_count-&gt;get_value() &gt; daemon_count)
    failed: thread count mismatch 5 : 5"
    + JDK-8219986: Change to Xcode 10.1 for building on Macosx at
    Oracle
    + JDK-8220575: Correctly format test URI's that contain a
    retrieved IPv6 address
    + JDK-8221259: New tests for java.net.Socket to exercise long
    standing behavior
    + JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails
    on MacOS + Solaris
    + JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/
    /FocusTraversal.java fails on ubuntu
    + JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/
    /IconifyTest.java fails on ubuntu18.04
    + JDK-8222446: assert(C-&gt;env()-&gt;system_dictionary_modification_counter_changed())
    failed: Must invalidate if TypeFuncs differ
    + JDK-8223137: Rename predicate 'do_unroll_only()' to
    'is_unroll_only()'.
    + JDK-8223138: Small clean-up in loop-tree support.
    + JDK-8223139: Rename mandatory policy-do routines.
    + JDK-8223140: Clean-up in 'ok_to_convert()'
    + JDK-8223141: Change (count) suffix _ct into _cnt.
    + JDK-8223400: Replace some enums with static const members in
    hotspot/runtime
    + JDK-8223658: Performance regression of XML.validation in
    13-b19
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8224829: AsyncSSLSocketClose.java has timing issue
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226514: Replace wildcard address with loopback or local
    host in tests - part 17
    + JDK-8226943: compile error in libfollowref003.cpp  with XCode
    10.2 on macosx
    + JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed
    due to "SSLException: An established connection was aborted by
    the software in your host machine"
    + JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java
    fails on Windows7
    + JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently
    positions text
    + JDK-8230019: [REDO] compiler/types/correctness/* tests fail
    with "assert(recv == __null || recv-&gt;is_klass()) failed: wrong
    type"
    + JDK-8230067: Add optional automatic retry when running jtreg
    tests
    + JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests
    may fail on some platforms
    + JDK-8231501: VM crash in
    MethodData::clean_extra_data(CleanExtraDataClosure*):
    fatal error: unexpected tag 99
    + JDK-8233403: Improve verbosity of some httpclient tests
    + JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS
    + JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on
    MacOS
    + JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on
    MacOS
    + JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS
    + JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS
    + JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on
    macos
    + JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java  is
    failing on macos
    + JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails
    on macos
    + JDK-8233562: [TESTBUG] Swing StyledEditorKit test
    bug4506788.java fails on MacOS
    + JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing
    + JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on
    MacoS
    + JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos
    + JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java
    fails on macos
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails
    on macos
    + JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java
    fails on macos
    + JDK-8233637: [TESTBUG] Swing
    ActionListenerCalledTwiceTest.java fails on macos
    + JDK-8233638: [TESTBUG] Swing test
    ScreenMenuBarInputTwice.java fails on macos
    + JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails
    on macos
    + JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java  fails
    on macos
    + JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on
    macos
    + JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is
    failing on macos
    + JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is
    failing on macos
    + JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture
    Recognition in all the platforms
    + JDK-8234823: java/net/Socket/Timeouts.java testcase
    testTimedConnect2() fails on Windows 10
    + JDK-8235784: java/lang/invoke/VarHandles/
    /VarHandleTestByteArrayAsInt.java fails due to timeout with
    fastdebug bits
    + JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -Xcomp -XX:TieredStopAtLevel=1
    + JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60),
    cond_wait
    + JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT,
    when using proxy tunnel
    + JDK-8237354: Add option to jcmd to write a gzipped heap dump
    + JDK-8237589: Fix copyright header formatting
    + JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java
    should not specify TLS version
    + JDK-8239334: Tab Size does not work correctly in JTextArea
    with setLineWrap on
    + JDK-8239422: [TESTBUG]
    compiler/c1/TestPrintIRDuringConstruction.java failed when C1
    is disabled
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240256: Better resource cleaning for SunPKCS11 Provider
    + JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test
    Server
    + JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/
    /bug8020708.java fails in mach5 ubuntu system
    + JDK-8242793: Incorrect copyright header in
    ContinuousCallSiteTargetChange.java
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244292: Headful clients failing with
  - -illegal-access=deny
    + JDK-8245147: Refactor and improve utility of
    test/langtools/tools/javac/versions/Versions.java
    + JDK-8245165: Update bug id for
    javax/swing/text/StyledEditorKit/4506788/bug4506788.java in
    ProblemList
    + JDK-8245665: Test WeakAlg.java should only make sure no
    warning for weak signature algorithms by keytool on root CA
    + JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails
    after 8241072 (multi-homed systems)
    + JDK-8246807: Incorrect copyright header in
    TimeZoneDatePermissionCheck.sh
    + JDK-8247403: JShell: No custom input (e.g. from GUI) possible
    with JavaShellToolBuilder
    + JDK-8247510: typo in IllegalHandshakeMessage
    + JDK-8248187: [TESTBUG] javax/swing/plaf/basic/
    /BasicGraphicsUtils/8132119/bug8132119.java fails with String
    is not properly drawn
    + JDK-8248341: ProblemList java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java
    + JDK-8248500: AArch64: Remove the r18 dependency on Windows
    AArch64
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8249195: Change to Xcode 11.3.1 for building on Macos at
    Oracle
    + JDK-8250521: Configure initial RTO to use minimal retry for
    loopback connections on Windows
    + JDK-8250810: Push missing parts of JDK-8248817
    + JDK-8250839: Improve test template SSLEngineTemplate with
    SSLContextTemplate
    + JDK-8250863: Build error with GCC 10 in NetworkInterface.c
    and k_standard.c
    + JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/
    /gf08t001/TestDriver.java fails
    + JDK-8251155: HostIdentifier fails to canonicalize hostnames
    starting with digits
    + JDK-8251377: [macos11] JTabbedPane selected tab text is
    barely legible
    + JDK-8251570: JDK-8215624 causes assert(worker_id &lt;
    _n_workers) failed: Invalid worker_id
    + JDK-8251930: AArch64: Native types mismatch in hotspot
    + JDK-8252049: Native memory leak in ciMethodData ctor
    + JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x
    friendly
    + JDK-8252114: Windows-AArch64: Enable and test ZGC and
    ShenandoahGC
    + JDK-8253015: Aarch64: Move linux code out from generic CPU
    feature detection
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java
    fail on big screens
    + JDK-8253497: Core Libs Terminology Refresh
    + JDK-8253682: The AppletInitialFocusTest1.java is unstable
    + JDK-8253763: ParallelObjectIterator should have virtual
    destructor
    + JDK-8253866: Security Libs Terminology Refresh
    + JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in
    "try throwing in GET_BODY"
    + JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java
    intermittently failing with TestServer: start exception:
    java.io.IOException: Invalid preface
    + JDK-8255264: Support for identifying the full range of IPv4
    localhost addresses on Windows
    + JDK-8255716: AArch64: Regression: JVM crashes if manually
    offline a core
    + JDK-8255722: Create a new test for rotated blit
    + JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad
    + JDK-8256066: Tests use deprecated TestNG API that is no
    longer available in new versions
    + JDK-8256152: tests fail because of ambiguous method resolution
    + JDK-8256182: Update qemu-debootstrap cross-compilation recipe
    + JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/
    /FullscreenWindowProps.java failed
    + JDK-8256202: Some tweaks for jarsigner tests
    PosixPermissionsTest and SymLinkTest
    + JDK-8256372: [macos] Unexpected symbol was displayed on
    JTextField with Monospaced font
    + JDK-8256956: RegisterImpl::max_slots_per_register is
    incorrect on AMD64
    + JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with
    InvalidPathException on windows
    + JDK-8258855: Two tests sun/security/krb5/auto/
    /ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java
    failed on OL8.3
    + JDK-8259237: Demo selection changes with left/right arrow
    key. No need to press space for selection.
    + JDK-8260571: Add PrintMetaspaceStatistics to print metaspace
    statistics upon VM exit
    + JDK-8260690: JConsole User Guide Link from the Help menu is
    not accessible by keyboard
    + JDK-8261036: Reduce classes loaded by CleanerFactory
    initialization
    + JDK-8261071: AArch64: Refactor interpreter native wrappers
    + JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch
    implementation
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261297: NMT: Final report should use scale 1
    + JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java
    fails because Reserved memory size is too big
    + JDK-8261916: gtest/GTestWrapper.java
    vmErrorTest.unimplemented1_vm_assert failed
    + JDK-8262438: sun/security/ssl/SSLLogger/
    /LoggingFormatConsistency.java failed with "SocketException:
    Socket is closed"
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8262844: (fs) FileStore.supportsFileAttributeView might
    return false negative in case of ext3
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp
    + JDK-8263303: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8263362: Avoid division by 0 in
    java/awt/font/TextJustifier.java justify
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java
    failed with "java.lang.RuntimeException: Wrong method"
    + JDK-8264526: javax/swing/text/html/parser/Parser/8078268/
    /bug8078268.java timeout
    + JDK-8264824: java/net/Inet6Address/B6206527.java doesn't
    close ServerSocket properly
    + JDK-8265019: Update tests for additional TestNG test
    permissions
    + JDK-8265173: [test] divert spurious log output away from
    stream under test in ProcessBuilder Basic test
    + JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8266579: Update test/jdk/java/lang/ProcessHandle/
    /PermissionTest.java &amp; test/jdk/java/sql/testng/util/
    /TestPolicy.java
    + JDK-8266949: Check possibility to disable OperationTimedOut
    on Unix
    + JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg
    tests on many-core machines
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267304: Bump global JTReg memory limit to 768m
    + JDK-8267652: c2 loop unrolling by 8 results in reading memory
    past array
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268093: Manual Testcase: "sun/security/krb5/config/
    /native/TestDynamicStore.java" Fails with NPE
    + JDK-8268555: Update HttpClient tests that use ITestContext to
    jtreg 6+1
    + JDK-8268672: C2: assert(!loop-&gt;is_member(u_loop)) failed: can
    be in outer loop or out of both loops only
    + JDK-8269034: AccessControlException for SunPKCS11 daemon
    threads
    + JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to
    accessClassAndFindClass
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269768: JFR Terminology Refresh
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8269984: [macos] JTabbedPane title looks like  disabled
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270216: [macOS] Update named used for Java run loop mode
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270344: Session resumption errors
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1
    + JDK-8272181: Windows-AArch64:Backport fix of `Backtracing
    broken on PAC enabled systems`
    + JDK-8272316: Wrong Boot JDK help message in 11
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8272828: Add correct licenses to jszip.md
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java
    fails by timeout
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273541: Cleaner Thread creates with normal priority
    instead of MAX_PRIORITY - 2
    + JDK-8273547: [11u] [JVMCI] Partial module-info.java backport
    of JDK-8223332
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273671: Backport of 8260616 misses one JNF header
    inclusion removal
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273795: Zero SPARC64 debug builds fail due to missing
    interpreter fields
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274860: gcc 10.2.1 produces an uninitialized warning in
    sharedRuntimeTrig.cpp
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277815: Fix mistakes in legal header backports
- Removed patch:
  * riscv64-zero.patch
    + integrated upstream
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1644926400">- Update to upstream tag jdk-11.0.14.1+1
  * Changes:
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8281324: Bump update version for OpenJDK: jdk-11.0.14.1</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="01d5e282d10711a40e6edda47ba5c9747c19e53429dc076205d93772bd618795" name="java-11-openjdk" arch="x86_64">
  <version epoch="0" ver="11.0.15.0" rel="150000.3.80.1"/>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643630400">- Update to upstream tag jdk-11.0.14+9 (January 2022 CPU)
  * New features
    + JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
  * Security fixes
    + JDK-8217375: jarsigner breaks old signature with long lines
    in manifest
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
    + JDK-8279541: Improve HarfBuzz
  * Other changes
    + JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/
    /ChoiceKeyEventReaction.html fails
    + JDK-7105119: [TEST_BUG] [macosx] In test
    UIDefaults.toString() must be called with the invokeLater()
    + JDK-7151826: [TEST_BUG] [macosx] The test
    javax/swing/JPopupMenu/4966112/bug4966112.java not for mac
    + JDK-7179006: [macosx] Print-to-file doesn't work: printing to
    the default printer instead
    + JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/
    /bug4726194.java fails on MacOSX
    + JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003 Wrong
    number of thread end events
    + JDK-8039261: [TEST_BUG]: There is not a minimal security
    level in Java Preferences and the TestApplet.html is blocked.
    + JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/
    /AltTabCrashTest.java fails with exception
    + JDK-8075909: [TEST_BUG] The regression-swing case failed as
    it does not have the 'Open' button when select 'subdir' folder
    with NimbusLAF
    + JDK-8078219: Verify lack of @test tag in files in java/net
    test directory
    + JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails
    with "RuntimeException: Process terminated prematurely"
    + JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java timed out intermittently
    + JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails
    intermittently
    + JDK-8131745: java/lang/management/ThreadMXBean/
    /AllThreadIds.java still fails intermittently
    + JDK-8136517: [macosx] Test java/awt/Focus/8073453/
    /AWTFocusTransitionTest.java fails on MacOSX
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/
    /Test6541987.java fails
    + JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/
    /bug4760494.java leaves key pressed
    + JDK-8159904: [TEST_BUG] Failure on solaris of
    java/awt/Window/MultiWindowApp/MultiWindowAppTest.java
    + JDK-8163086: java/awt/Window/TranslucentJAppletTest/
    /TranslucentJAppletTest.java fails
    + JDK-8165828: [TEST_BUG] The reg case: javax/swing/plaf/metal/
    /MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look
    and Feel
    + JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not
    fired! on Windows
    + JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException:
    Default button is not pressed
    + JDK-8169959: javax/swing/JTable/6263446/bug6263446.java:
    Table should be editing
    + JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/
    /7156657/bug7156657.java fails on OS X
    + JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails
    on Windows
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8179880: Refactor javax/security shell tests to plain
    java tests
    + JDK-8180568: Refactor javax/crypto shell tests to plain java
    tests
    + JDK-8180569: Refactor sun/security/krb5/ shell tests to plain
    java tests
    + JDK-8180571: Refactor sun/security/pkcs11 shell tests to
    plain java tests and fix failures
    + JDK-8180573: Refactor sun/security/tools shell tests to plain
    java tests
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8195703: BasicJDWPConnectionTest.java: 'App exited
    unexpectedly with 2'
    + JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java
    fails
    + JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java
    fails
    + JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/
    /NoEventsTest.java fails on Windows
    + JDK-8197811: Test java/awt/Choice/PopupPosTest/
    /PopupPosTest.java fails on Windows
    + JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java
    fails on mac
    + JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java
    fails on mac
    + JDK-8198619: java/awt/Focus/FocusTraversalPolicy/
    /ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java
    fails on mac
    + JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/
    /EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java
    fails on mac
    + JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/
    /SubMenuShowTest/SubMenuShowTest.html fails on mac
    + JDK-8199138: Add RISC-V support to Zero
    + JDK-8199529: javax/swing/text/Utilities/8142966/
    /SwingFontMetricsTest.java fails on windows
    + JDK-8201224: Make string buffer size dynamic in
    mlvmJvmtiUtils.c
    + JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/
    /FollowReferences/followref003/TestDescription.java fails with
    "Location mismatch" errors
    + JDK-8204161: [TESTBUG] auto failed with the "Applet thread
    threw exception: java.lang.UnsupportedOperationException"
    exception
    + JDK-8206085: Refactor
    langtools/tools/javac/versions/Versions.java
    + JDK-8207936: TestZipFile failed with java.lang.AssertionError
    exception
    + JDK-8208242: Add @requires to vmTestbase/gc/g1 tests
    + JDK-8209611: use C++ compiler for hotspot tests
    + JDK-8210182: Remove macros for C compilation from vmTestBase
    but non jvmti
    + JDK-8210198: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[A-F] tests
    + JDK-8210205: build fails on AIX in hotspot cpp tests (for
    example getstacktr001.cpp)
    + JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/
    /jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION
    on windows-x86
    + JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java
    back to tier1
    + JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[A-N] tests
    + JDK-8210392: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8210395: Add doc to SecurityTools.java
    + JDK-8210429: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[G-Z] tests
    + JDK-8210481: Remove #ifdef cplusplus from vmTestbase
    + JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[N-R] tests
    + JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[R-U] tests
    + JDK-8210689: Remove the multi-line old C style for string
    literals
    + JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti/unit tests
    + JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665
    + JDK-8210920: Native C++ tests are not using CXXFLAGS
    + JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR:
    hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti,
    thread)"
    + JDK-8211036: Remove the NSK_STUB macros from vmTestbase for
    non jvmti
    + JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[G-I]*
    + JDK-8211148: var in implicit lambdas shouldn't be accepted
    for source &lt; 11
    + JDK-8211171: move JarUtils to top-level testlibrary
    + JDK-8211227: Inconsistent TLS protocol version in debug output
    + JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[A-G]*
    + JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp
    + JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[I-S]*
    + JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[A-E]
    + JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[E-M]
    + JDK-8211905: Remove multiple casts for EM06 file
    + JDK-8211999: Window positioning bugs due to overlapping
    GraphicsDevice bounds (Windows/HiDPI)
    + JDK-8212082: Remove the NSK_CPP_STUB macros for remaining
    vmTestbase/jvmti/[sS]*
    + JDK-8212083: Handle remaining gc/lock native code and fix two
    strings
    + JDK-8212148: Remove remaining NSK_CPP_STUBs
    + JDK-8213110: Remove the use of applets in automatic tests
    + JDK-8213189: Make restricted headers in HTTP Client
    configurable and remove Date by default
    + JDK-8213263: fix legal headers in test/langtools
    + JDK-8213296: Fix legal headers in test/jdk/java/net
    + JDK-8213301: Fix legal headers in jdk logging tests
    + JDK-8213305: Fix legal headers in test/java/math
    + JDK-8213306: Fix legal headers in test/java/nio
    + JDK-8213328: Update test copyrights in test/java/util/zip and
    test/jdk/tools
    + JDK-8213330: Fix legal headers in i18n tests
    + JDK-8213707: [TEST] vmTestbase/nsk/stress/except/
    /except011.java failed due to wrong class name
    + JDK-8214469: [macos] PIT: java/awt/Choice/
    /ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails
    + JDK-8215410: Regression test for JDK-8214994
    + JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher
    + JDK-8215624: Add parallel heap iteration for jmap \u2013histo
    + JDK-8215889: assert(!_unloading) failed: This oop is not
    available to unloading class loader data with ZGC
    + JDK-8216318: The usage of Disposer in the java.awt.Robot can
    be deleted
    + JDK-8216417: cleanup of IPv6 scope-id handling
    + JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java
    failed with UnsupportedOperation exception
    + JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX
    + JDK-8217633: Configurable extensions with system properties
    + JDK-8217882: java/net/httpclient/MaxStreams.java failed once
    + JDK-8217903: java/net/httpclient/Response204.java fails with
    404
    + JDK-8218483: Crash in
    "assert(_daemon_threads_count-&gt;get_value() &gt; daemon_count)
    failed: thread count mismatch 5 : 5"
    + JDK-8219986: Change to Xcode 10.1 for building on Macosx at
    Oracle
    + JDK-8220575: Correctly format test URI's that contain a
    retrieved IPv6 address
    + JDK-8221259: New tests for java.net.Socket to exercise long
    standing behavior
    + JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails
    on MacOS + Solaris
    + JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/
    /FocusTraversal.java fails on ubuntu
    + JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/
    /IconifyTest.java fails on ubuntu18.04
    + JDK-8222446: assert(C-&gt;env()-&gt;system_dictionary_modification_counter_changed())
    failed: Must invalidate if TypeFuncs differ
    + JDK-8223137: Rename predicate 'do_unroll_only()' to
    'is_unroll_only()'.
    + JDK-8223138: Small clean-up in loop-tree support.
    + JDK-8223139: Rename mandatory policy-do routines.
    + JDK-8223140: Clean-up in 'ok_to_convert()'
    + JDK-8223141: Change (count) suffix _ct into _cnt.
    + JDK-8223400: Replace some enums with static const members in
    hotspot/runtime
    + JDK-8223658: Performance regression of XML.validation in
    13-b19
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8224829: AsyncSSLSocketClose.java has timing issue
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226514: Replace wildcard address with loopback or local
    host in tests - part 17
    + JDK-8226943: compile error in libfollowref003.cpp  with XCode
    10.2 on macosx
    + JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed
    due to "SSLException: An established connection was aborted by
    the software in your host machine"
    + JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java
    fails on Windows7
    + JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently
    positions text
    + JDK-8230019: [REDO] compiler/types/correctness/* tests fail
    with "assert(recv == __null || recv-&gt;is_klass()) failed: wrong
    type"
    + JDK-8230067: Add optional automatic retry when running jtreg
    tests
    + JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests
    may fail on some platforms
    + JDK-8231501: VM crash in
    MethodData::clean_extra_data(CleanExtraDataClosure*):
    fatal error: unexpected tag 99
    + JDK-8233403: Improve verbosity of some httpclient tests
    + JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS
    + JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on
    MacOS
    + JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on
    MacOS
    + JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS
    + JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS
    + JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on
    macos
    + JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java  is
    failing on macos
    + JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails
    on macos
    + JDK-8233562: [TESTBUG] Swing StyledEditorKit test
    bug4506788.java fails on MacOS
    + JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing
    + JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on
    MacoS
    + JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos
    + JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java
    fails on macos
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails
    on macos
    + JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java
    fails on macos
    + JDK-8233637: [TESTBUG] Swing
    ActionListenerCalledTwiceTest.java fails on macos
    + JDK-8233638: [TESTBUG] Swing test
    ScreenMenuBarInputTwice.java fails on macos
    + JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails
    on macos
    + JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java  fails
    on macos
    + JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on
    macos
    + JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is
    failing on macos
    + JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is
    failing on macos
    + JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture
    Recognition in all the platforms
    + JDK-8234823: java/net/Socket/Timeouts.java testcase
    testTimedConnect2() fails on Windows 10
    + JDK-8235784: java/lang/invoke/VarHandles/
    /VarHandleTestByteArrayAsInt.java fails due to timeout with
    fastdebug bits
    + JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -Xcomp -XX:TieredStopAtLevel=1
    + JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60),
    cond_wait
    + JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT,
    when using proxy tunnel
    + JDK-8237354: Add option to jcmd to write a gzipped heap dump
    + JDK-8237589: Fix copyright header formatting
    + JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java
    should not specify TLS version
    + JDK-8239334: Tab Size does not work correctly in JTextArea
    with setLineWrap on
    + JDK-8239422: [TESTBUG]
    compiler/c1/TestPrintIRDuringConstruction.java failed when C1
    is disabled
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240256: Better resource cleaning for SunPKCS11 Provider
    + JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test
    Server
    + JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/
    /bug8020708.java fails in mach5 ubuntu system
    + JDK-8242793: Incorrect copyright header in
    ContinuousCallSiteTargetChange.java
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244292: Headful clients failing with
  - -illegal-access=deny
    + JDK-8245147: Refactor and improve utility of
    test/langtools/tools/javac/versions/Versions.java
    + JDK-8245165: Update bug id for
    javax/swing/text/StyledEditorKit/4506788/bug4506788.java in
    ProblemList
    + JDK-8245665: Test WeakAlg.java should only make sure no
    warning for weak signature algorithms by keytool on root CA
    + JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails
    after 8241072 (multi-homed systems)
    + JDK-8246807: Incorrect copyright header in
    TimeZoneDatePermissionCheck.sh
    + JDK-8247403: JShell: No custom input (e.g. from GUI) possible
    with JavaShellToolBuilder
    + JDK-8247510: typo in IllegalHandshakeMessage
    + JDK-8248187: [TESTBUG] javax/swing/plaf/basic/
    /BasicGraphicsUtils/8132119/bug8132119.java fails with String
    is not properly drawn
    + JDK-8248341: ProblemList java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java
    + JDK-8248500: AArch64: Remove the r18 dependency on Windows
    AArch64
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8249195: Change to Xcode 11.3.1 for building on Macos at
    Oracle
    + JDK-8250521: Configure initial RTO to use minimal retry for
    loopback connections on Windows
    + JDK-8250810: Push missing parts of JDK-8248817
    + JDK-8250839: Improve test template SSLEngineTemplate with
    SSLContextTemplate
    + JDK-8250863: Build error with GCC 10 in NetworkInterface.c
    and k_standard.c
    + JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/
    /gf08t001/TestDriver.java fails
    + JDK-8251155: HostIdentifier fails to canonicalize hostnames
    starting with digits
    + JDK-8251377: [macos11] JTabbedPane selected tab text is
    barely legible
    + JDK-8251570: JDK-8215624 causes assert(worker_id &lt;
    _n_workers) failed: Invalid worker_id
    + JDK-8251930: AArch64: Native types mismatch in hotspot
    + JDK-8252049: Native memory leak in ciMethodData ctor
    + JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x
    friendly
    + JDK-8252114: Windows-AArch64: Enable and test ZGC and
    ShenandoahGC
    + JDK-8253015: Aarch64: Move linux code out from generic CPU
    feature detection
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java
    fail on big screens
    + JDK-8253497: Core Libs Terminology Refresh
    + JDK-8253682: The AppletInitialFocusTest1.java is unstable
    + JDK-8253763: ParallelObjectIterator should have virtual
    destructor
    + JDK-8253866: Security Libs Terminology Refresh
    + JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in
    "try throwing in GET_BODY"
    + JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java
    intermittently failing with TestServer: start exception:
    java.io.IOException: Invalid preface
    + JDK-8255264: Support for identifying the full range of IPv4
    localhost addresses on Windows
    + JDK-8255716: AArch64: Regression: JVM crashes if manually
    offline a core
    + JDK-8255722: Create a new test for rotated blit
    + JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad
    + JDK-8256066: Tests use deprecated TestNG API that is no
    longer available in new versions
    + JDK-8256152: tests fail because of ambiguous method resolution
    + JDK-8256182: Update qemu-debootstrap cross-compilation recipe
    + JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/
    /FullscreenWindowProps.java failed
    + JDK-8256202: Some tweaks for jarsigner tests
    PosixPermissionsTest and SymLinkTest
    + JDK-8256372: [macos] Unexpected symbol was displayed on
    JTextField with Monospaced font
    + JDK-8256956: RegisterImpl::max_slots_per_register is
    incorrect on AMD64
    + JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with
    InvalidPathException on windows
    + JDK-8258855: Two tests sun/security/krb5/auto/
    /ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java
    failed on OL8.3
    + JDK-8259237: Demo selection changes with left/right arrow
    key. No need to press space for selection.
    + JDK-8260571: Add PrintMetaspaceStatistics to print metaspace
    statistics upon VM exit
    + JDK-8260690: JConsole User Guide Link from the Help menu is
    not accessible by keyboard
    + JDK-8261036: Reduce classes loaded by CleanerFactory
    initialization
    + JDK-8261071: AArch64: Refactor interpreter native wrappers
    + JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch
    implementation
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261297: NMT: Final report should use scale 1
    + JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java
    fails because Reserved memory size is too big
    + JDK-8261916: gtest/GTestWrapper.java
    vmErrorTest.unimplemented1_vm_assert failed
    + JDK-8262438: sun/security/ssl/SSLLogger/
    /LoggingFormatConsistency.java failed with "SocketException:
    Socket is closed"
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8262844: (fs) FileStore.supportsFileAttributeView might
    return false negative in case of ext3
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp
    + JDK-8263303: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8263362: Avoid division by 0 in
    java/awt/font/TextJustifier.java justify
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java
    failed with "java.lang.RuntimeException: Wrong method"
    + JDK-8264526: javax/swing/text/html/parser/Parser/8078268/
    /bug8078268.java timeout
    + JDK-8264824: java/net/Inet6Address/B6206527.java doesn't
    close ServerSocket properly
    + JDK-8265019: Update tests for additional TestNG test
    permissions
    + JDK-8265173: [test] divert spurious log output away from
    stream under test in ProcessBuilder Basic test
    + JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8266579: Update test/jdk/java/lang/ProcessHandle/
    /PermissionTest.java &amp; test/jdk/java/sql/testng/util/
    /TestPolicy.java
    + JDK-8266949: Check possibility to disable OperationTimedOut
    on Unix
    + JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg
    tests on many-core machines
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267304: Bump global JTReg memory limit to 768m
    + JDK-8267652: c2 loop unrolling by 8 results in reading memory
    past array
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268093: Manual Testcase: "sun/security/krb5/config/
    /native/TestDynamicStore.java" Fails with NPE
    + JDK-8268555: Update HttpClient tests that use ITestContext to
    jtreg 6+1
    + JDK-8268672: C2: assert(!loop-&gt;is_member(u_loop)) failed: can
    be in outer loop or out of both loops only
    + JDK-8269034: AccessControlException for SunPKCS11 daemon
    threads
    + JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to
    accessClassAndFindClass
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269768: JFR Terminology Refresh
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8269984: [macos] JTabbedPane title looks like  disabled
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270216: [macOS] Update named used for Java run loop mode
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270344: Session resumption errors
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1
    + JDK-8272181: Windows-AArch64:Backport fix of `Backtracing
    broken on PAC enabled systems`
    + JDK-8272316: Wrong Boot JDK help message in 11
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8272828: Add correct licenses to jszip.md
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java
    fails by timeout
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273541: Cleaner Thread creates with normal priority
    instead of MAX_PRIORITY - 2
    + JDK-8273547: [11u] [JVMCI] Partial module-info.java backport
    of JDK-8223332
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273671: Backport of 8260616 misses one JNF header
    inclusion removal
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273795: Zero SPARC64 debug builds fail due to missing
    interpreter fields
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274860: gcc 10.2.1 produces an uninitialized warning in
    sharedRuntimeTrig.cpp
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277815: Fix mistakes in legal header backports
- Removed patch:
  * riscv64-zero.patch
    + integrated upstream
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1644926400">- Update to upstream tag jdk-11.0.14.1+1
  * Changes:
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8281324: Bump update version for OpenJDK: jdk-11.0.14.1</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="3c0eaf67fc4cf5260b46d2cb33e57a18f9a558b12ec05e4caccb587164fa3233" name="java-11-openjdk-accessibility" arch="aarch64">
  <version epoch="0" ver="11.0.15.0" rel="150000.3.80.1"/>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643630400">- Update to upstream tag jdk-11.0.14+9 (January 2022 CPU)
  * New features
    + JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
  * Security fixes
    + JDK-8217375: jarsigner breaks old signature with long lines
    in manifest
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
    + JDK-8279541: Improve HarfBuzz
  * Other changes
    + JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/
    /ChoiceKeyEventReaction.html fails
    + JDK-7105119: [TEST_BUG] [macosx] In test
    UIDefaults.toString() must be called with the invokeLater()
    + JDK-7151826: [TEST_BUG] [macosx] The test
    javax/swing/JPopupMenu/4966112/bug4966112.java not for mac
    + JDK-7179006: [macosx] Print-to-file doesn't work: printing to
    the default printer instead
    + JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/
    /bug4726194.java fails on MacOSX
    + JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003 Wrong
    number of thread end events
    + JDK-8039261: [TEST_BUG]: There is not a minimal security
    level in Java Preferences and the TestApplet.html is blocked.
    + JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/
    /AltTabCrashTest.java fails with exception
    + JDK-8075909: [TEST_BUG] The regression-swing case failed as
    it does not have the 'Open' button when select 'subdir' folder
    with NimbusLAF
    + JDK-8078219: Verify lack of @test tag in files in java/net
    test directory
    + JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails
    with "RuntimeException: Process terminated prematurely"
    + JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java timed out intermittently
    + JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails
    intermittently
    + JDK-8131745: java/lang/management/ThreadMXBean/
    /AllThreadIds.java still fails intermittently
    + JDK-8136517: [macosx] Test java/awt/Focus/8073453/
    /AWTFocusTransitionTest.java fails on MacOSX
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/
    /Test6541987.java fails
    + JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/
    /bug4760494.java leaves key pressed
    + JDK-8159904: [TEST_BUG] Failure on solaris of
    java/awt/Window/MultiWindowApp/MultiWindowAppTest.java
    + JDK-8163086: java/awt/Window/TranslucentJAppletTest/
    /TranslucentJAppletTest.java fails
    + JDK-8165828: [TEST_BUG] The reg case: javax/swing/plaf/metal/
    /MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look
    and Feel
    + JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not
    fired! on Windows
    + JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException:
    Default button is not pressed
    + JDK-8169959: javax/swing/JTable/6263446/bug6263446.java:
    Table should be editing
    + JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/
    /7156657/bug7156657.java fails on OS X
    + JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails
    on Windows
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8179880: Refactor javax/security shell tests to plain
    java tests
    + JDK-8180568: Refactor javax/crypto shell tests to plain java
    tests
    + JDK-8180569: Refactor sun/security/krb5/ shell tests to plain
    java tests
    + JDK-8180571: Refactor sun/security/pkcs11 shell tests to
    plain java tests and fix failures
    + JDK-8180573: Refactor sun/security/tools shell tests to plain
    java tests
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8195703: BasicJDWPConnectionTest.java: 'App exited
    unexpectedly with 2'
    + JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java
    fails
    + JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java
    fails
    + JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/
    /NoEventsTest.java fails on Windows
    + JDK-8197811: Test java/awt/Choice/PopupPosTest/
    /PopupPosTest.java fails on Windows
    + JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java
    fails on mac
    + JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java
    fails on mac
    + JDK-8198619: java/awt/Focus/FocusTraversalPolicy/
    /ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java
    fails on mac
    + JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/
    /EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java
    fails on mac
    + JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/
    /SubMenuShowTest/SubMenuShowTest.html fails on mac
    + JDK-8199138: Add RISC-V support to Zero
    + JDK-8199529: javax/swing/text/Utilities/8142966/
    /SwingFontMetricsTest.java fails on windows
    + JDK-8201224: Make string buffer size dynamic in
    mlvmJvmtiUtils.c
    + JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/
    /FollowReferences/followref003/TestDescription.java fails with
    "Location mismatch" errors
    + JDK-8204161: [TESTBUG] auto failed with the "Applet thread
    threw exception: java.lang.UnsupportedOperationException"
    exception
    + JDK-8206085: Refactor
    langtools/tools/javac/versions/Versions.java
    + JDK-8207936: TestZipFile failed with java.lang.AssertionError
    exception
    + JDK-8208242: Add @requires to vmTestbase/gc/g1 tests
    + JDK-8209611: use C++ compiler for hotspot tests
    + JDK-8210182: Remove macros for C compilation from vmTestBase
    but non jvmti
    + JDK-8210198: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[A-F] tests
    + JDK-8210205: build fails on AIX in hotspot cpp tests (for
    example getstacktr001.cpp)
    + JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/
    /jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION
    on windows-x86
    + JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java
    back to tier1
    + JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[A-N] tests
    + JDK-8210392: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8210395: Add doc to SecurityTools.java
    + JDK-8210429: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[G-Z] tests
    + JDK-8210481: Remove #ifdef cplusplus from vmTestbase
    + JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[N-R] tests
    + JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[R-U] tests
    + JDK-8210689: Remove the multi-line old C style for string
    literals
    + JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti/unit tests
    + JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665
    + JDK-8210920: Native C++ tests are not using CXXFLAGS
    + JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR:
    hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti,
    thread)"
    + JDK-8211036: Remove the NSK_STUB macros from vmTestbase for
    non jvmti
    + JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[G-I]*
    + JDK-8211148: var in implicit lambdas shouldn't be accepted
    for source &lt; 11
    + JDK-8211171: move JarUtils to top-level testlibrary
    + JDK-8211227: Inconsistent TLS protocol version in debug output
    + JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[A-G]*
    + JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp
    + JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[I-S]*
    + JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[A-E]
    + JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[E-M]
    + JDK-8211905: Remove multiple casts for EM06 file
    + JDK-8211999: Window positioning bugs due to overlapping
    GraphicsDevice bounds (Windows/HiDPI)
    + JDK-8212082: Remove the NSK_CPP_STUB macros for remaining
    vmTestbase/jvmti/[sS]*
    + JDK-8212083: Handle remaining gc/lock native code and fix two
    strings
    + JDK-8212148: Remove remaining NSK_CPP_STUBs
    + JDK-8213110: Remove the use of applets in automatic tests
    + JDK-8213189: Make restricted headers in HTTP Client
    configurable and remove Date by default
    + JDK-8213263: fix legal headers in test/langtools
    + JDK-8213296: Fix legal headers in test/jdk/java/net
    + JDK-8213301: Fix legal headers in jdk logging tests
    + JDK-8213305: Fix legal headers in test/java/math
    + JDK-8213306: Fix legal headers in test/java/nio
    + JDK-8213328: Update test copyrights in test/java/util/zip and
    test/jdk/tools
    + JDK-8213330: Fix legal headers in i18n tests
    + JDK-8213707: [TEST] vmTestbase/nsk/stress/except/
    /except011.java failed due to wrong class name
    + JDK-8214469: [macos] PIT: java/awt/Choice/
    /ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails
    + JDK-8215410: Regression test for JDK-8214994
    + JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher
    + JDK-8215624: Add parallel heap iteration for jmap \u2013histo
    + JDK-8215889: assert(!_unloading) failed: This oop is not
    available to unloading class loader data with ZGC
    + JDK-8216318: The usage of Disposer in the java.awt.Robot can
    be deleted
    + JDK-8216417: cleanup of IPv6 scope-id handling
    + JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java
    failed with UnsupportedOperation exception
    + JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX
    + JDK-8217633: Configurable extensions with system properties
    + JDK-8217882: java/net/httpclient/MaxStreams.java failed once
    + JDK-8217903: java/net/httpclient/Response204.java fails with
    404
    + JDK-8218483: Crash in
    "assert(_daemon_threads_count-&gt;get_value() &gt; daemon_count)
    failed: thread count mismatch 5 : 5"
    + JDK-8219986: Change to Xcode 10.1 for building on Macosx at
    Oracle
    + JDK-8220575: Correctly format test URI's that contain a
    retrieved IPv6 address
    + JDK-8221259: New tests for java.net.Socket to exercise long
    standing behavior
    + JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails
    on MacOS + Solaris
    + JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/
    /FocusTraversal.java fails on ubuntu
    + JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/
    /IconifyTest.java fails on ubuntu18.04
    + JDK-8222446: assert(C-&gt;env()-&gt;system_dictionary_modification_counter_changed())
    failed: Must invalidate if TypeFuncs differ
    + JDK-8223137: Rename predicate 'do_unroll_only()' to
    'is_unroll_only()'.
    + JDK-8223138: Small clean-up in loop-tree support.
    + JDK-8223139: Rename mandatory policy-do routines.
    + JDK-8223140: Clean-up in 'ok_to_convert()'
    + JDK-8223141: Change (count) suffix _ct into _cnt.
    + JDK-8223400: Replace some enums with static const members in
    hotspot/runtime
    + JDK-8223658: Performance regression of XML.validation in
    13-b19
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8224829: AsyncSSLSocketClose.java has timing issue
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226514: Replace wildcard address with loopback or local
    host in tests - part 17
    + JDK-8226943: compile error in libfollowref003.cpp  with XCode
    10.2 on macosx
    + JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed
    due to "SSLException: An established connection was aborted by
    the software in your host machine"
    + JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java
    fails on Windows7
    + JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently
    positions text
    + JDK-8230019: [REDO] compiler/types/correctness/* tests fail
    with "assert(recv == __null || recv-&gt;is_klass()) failed: wrong
    type"
    + JDK-8230067: Add optional automatic retry when running jtreg
    tests
    + JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests
    may fail on some platforms
    + JDK-8231501: VM crash in
    MethodData::clean_extra_data(CleanExtraDataClosure*):
    fatal error: unexpected tag 99
    + JDK-8233403: Improve verbosity of some httpclient tests
    + JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS
    + JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on
    MacOS
    + JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on
    MacOS
    + JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS
    + JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS
    + JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on
    macos
    + JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java  is
    failing on macos
    + JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails
    on macos
    + JDK-8233562: [TESTBUG] Swing StyledEditorKit test
    bug4506788.java fails on MacOS
    + JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing
    + JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on
    MacoS
    + JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos
    + JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java
    fails on macos
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails
    on macos
    + JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java
    fails on macos
    + JDK-8233637: [TESTBUG] Swing
    ActionListenerCalledTwiceTest.java fails on macos
    + JDK-8233638: [TESTBUG] Swing test
    ScreenMenuBarInputTwice.java fails on macos
    + JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails
    on macos
    + JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java  fails
    on macos
    + JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on
    macos
    + JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is
    failing on macos
    + JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is
    failing on macos
    + JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture
    Recognition in all the platforms
    + JDK-8234823: java/net/Socket/Timeouts.java testcase
    testTimedConnect2() fails on Windows 10
    + JDK-8235784: java/lang/invoke/VarHandles/
    /VarHandleTestByteArrayAsInt.java fails due to timeout with
    fastdebug bits
    + JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -Xcomp -XX:TieredStopAtLevel=1
    + JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60),
    cond_wait
    + JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT,
    when using proxy tunnel
    + JDK-8237354: Add option to jcmd to write a gzipped heap dump
    + JDK-8237589: Fix copyright header formatting
    + JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java
    should not specify TLS version
    + JDK-8239334: Tab Size does not work correctly in JTextArea
    with setLineWrap on
    + JDK-8239422: [TESTBUG]
    compiler/c1/TestPrintIRDuringConstruction.java failed when C1
    is disabled
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240256: Better resource cleaning for SunPKCS11 Provider
    + JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test
    Server
    + JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/
    /bug8020708.java fails in mach5 ubuntu system
    + JDK-8242793: Incorrect copyright header in
    ContinuousCallSiteTargetChange.java
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244292: Headful clients failing with
  - -illegal-access=deny
    + JDK-8245147: Refactor and improve utility of
    test/langtools/tools/javac/versions/Versions.java
    + JDK-8245165: Update bug id for
    javax/swing/text/StyledEditorKit/4506788/bug4506788.java in
    ProblemList
    + JDK-8245665: Test WeakAlg.java should only make sure no
    warning for weak signature algorithms by keytool on root CA
    + JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails
    after 8241072 (multi-homed systems)
    + JDK-8246807: Incorrect copyright header in
    TimeZoneDatePermissionCheck.sh
    + JDK-8247403: JShell: No custom input (e.g. from GUI) possible
    with JavaShellToolBuilder
    + JDK-8247510: typo in IllegalHandshakeMessage
    + JDK-8248187: [TESTBUG] javax/swing/plaf/basic/
    /BasicGraphicsUtils/8132119/bug8132119.java fails with String
    is not properly drawn
    + JDK-8248341: ProblemList java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java
    + JDK-8248500: AArch64: Remove the r18 dependency on Windows
    AArch64
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8249195: Change to Xcode 11.3.1 for building on Macos at
    Oracle
    + JDK-8250521: Configure initial RTO to use minimal retry for
    loopback connections on Windows
    + JDK-8250810: Push missing parts of JDK-8248817
    + JDK-8250839: Improve test template SSLEngineTemplate with
    SSLContextTemplate
    + JDK-8250863: Build error with GCC 10 in NetworkInterface.c
    and k_standard.c
    + JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/
    /gf08t001/TestDriver.java fails
    + JDK-8251155: HostIdentifier fails to canonicalize hostnames
    starting with digits
    + JDK-8251377: [macos11] JTabbedPane selected tab text is
    barely legible
    + JDK-8251570: JDK-8215624 causes assert(worker_id &lt;
    _n_workers) failed: Invalid worker_id
    + JDK-8251930: AArch64: Native types mismatch in hotspot
    + JDK-8252049: Native memory leak in ciMethodData ctor
    + JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x
    friendly
    + JDK-8252114: Windows-AArch64: Enable and test ZGC and
    ShenandoahGC
    + JDK-8253015: Aarch64: Move linux code out from generic CPU
    feature detection
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java
    fail on big screens
    + JDK-8253497: Core Libs Terminology Refresh
    + JDK-8253682: The AppletInitialFocusTest1.java is unstable
    + JDK-8253763: ParallelObjectIterator should have virtual
    destructor
    + JDK-8253866: Security Libs Terminology Refresh
    + JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in
    "try throwing in GET_BODY"
    + JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java
    intermittently failing with TestServer: start exception:
    java.io.IOException: Invalid preface
    + JDK-8255264: Support for identifying the full range of IPv4
    localhost addresses on Windows
    + JDK-8255716: AArch64: Regression: JVM crashes if manually
    offline a core
    + JDK-8255722: Create a new test for rotated blit
    + JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad
    + JDK-8256066: Tests use deprecated TestNG API that is no
    longer available in new versions
    + JDK-8256152: tests fail because of ambiguous method resolution
    + JDK-8256182: Update qemu-debootstrap cross-compilation recipe
    + JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/
    /FullscreenWindowProps.java failed
    + JDK-8256202: Some tweaks for jarsigner tests
    PosixPermissionsTest and SymLinkTest
    + JDK-8256372: [macos] Unexpected symbol was displayed on
    JTextField with Monospaced font
    + JDK-8256956: RegisterImpl::max_slots_per_register is
    incorrect on AMD64
    + JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with
    InvalidPathException on windows
    + JDK-8258855: Two tests sun/security/krb5/auto/
    /ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java
    failed on OL8.3
    + JDK-8259237: Demo selection changes with left/right arrow
    key. No need to press space for selection.
    + JDK-8260571: Add PrintMetaspaceStatistics to print metaspace
    statistics upon VM exit
    + JDK-8260690: JConsole User Guide Link from the Help menu is
    not accessible by keyboard
    + JDK-8261036: Reduce classes loaded by CleanerFactory
    initialization
    + JDK-8261071: AArch64: Refactor interpreter native wrappers
    + JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch
    implementation
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261297: NMT: Final report should use scale 1
    + JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java
    fails because Reserved memory size is too big
    + JDK-8261916: gtest/GTestWrapper.java
    vmErrorTest.unimplemented1_vm_assert failed
    + JDK-8262438: sun/security/ssl/SSLLogger/
    /LoggingFormatConsistency.java failed with "SocketException:
    Socket is closed"
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8262844: (fs) FileStore.supportsFileAttributeView might
    return false negative in case of ext3
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp
    + JDK-8263303: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8263362: Avoid division by 0 in
    java/awt/font/TextJustifier.java justify
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java
    failed with "java.lang.RuntimeException: Wrong method"
    + JDK-8264526: javax/swing/text/html/parser/Parser/8078268/
    /bug8078268.java timeout
    + JDK-8264824: java/net/Inet6Address/B6206527.java doesn't
    close ServerSocket properly
    + JDK-8265019: Update tests for additional TestNG test
    permissions
    + JDK-8265173: [test] divert spurious log output away from
    stream under test in ProcessBuilder Basic test
    + JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8266579: Update test/jdk/java/lang/ProcessHandle/
    /PermissionTest.java &amp; test/jdk/java/sql/testng/util/
    /TestPolicy.java
    + JDK-8266949: Check possibility to disable OperationTimedOut
    on Unix
    + JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg
    tests on many-core machines
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267304: Bump global JTReg memory limit to 768m
    + JDK-8267652: c2 loop unrolling by 8 results in reading memory
    past array
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268093: Manual Testcase: "sun/security/krb5/config/
    /native/TestDynamicStore.java" Fails with NPE
    + JDK-8268555: Update HttpClient tests that use ITestContext to
    jtreg 6+1
    + JDK-8268672: C2: assert(!loop-&gt;is_member(u_loop)) failed: can
    be in outer loop or out of both loops only
    + JDK-8269034: AccessControlException for SunPKCS11 daemon
    threads
    + JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to
    accessClassAndFindClass
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269768: JFR Terminology Refresh
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8269984: [macos] JTabbedPane title looks like  disabled
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270216: [macOS] Update named used for Java run loop mode
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270344: Session resumption errors
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1
    + JDK-8272181: Windows-AArch64:Backport fix of `Backtracing
    broken on PAC enabled systems`
    + JDK-8272316: Wrong Boot JDK help message in 11
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8272828: Add correct licenses to jszip.md
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java
    fails by timeout
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273541: Cleaner Thread creates with normal priority
    instead of MAX_PRIORITY - 2
    + JDK-8273547: [11u] [JVMCI] Partial module-info.java backport
    of JDK-8223332
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273671: Backport of 8260616 misses one JNF header
    inclusion removal
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273795: Zero SPARC64 debug builds fail due to missing
    interpreter fields
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274860: gcc 10.2.1 produces an uninitialized warning in
    sharedRuntimeTrig.cpp
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277815: Fix mistakes in legal header backports
- Removed patch:
  * riscv64-zero.patch
    + integrated upstream
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1644926400">- Update to upstream tag jdk-11.0.14.1+1
  * Changes:
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8281324: Bump update version for OpenJDK: jdk-11.0.14.1</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="282740b0fafc21be3733e88062f3e594b0f809bcbba560d797513ad32f64dfb4" name="java-11-openjdk-accessibility" arch="ppc64le">
  <version epoch="0" ver="11.0.15.0" rel="150000.3.80.1"/>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643630400">- Update to upstream tag jdk-11.0.14+9 (January 2022 CPU)
  * New features
    + JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
  * Security fixes
    + JDK-8217375: jarsigner breaks old signature with long lines
    in manifest
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
    + JDK-8279541: Improve HarfBuzz
  * Other changes
    + JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/
    /ChoiceKeyEventReaction.html fails
    + JDK-7105119: [TEST_BUG] [macosx] In test
    UIDefaults.toString() must be called with the invokeLater()
    + JDK-7151826: [TEST_BUG] [macosx] The test
    javax/swing/JPopupMenu/4966112/bug4966112.java not for mac
    + JDK-7179006: [macosx] Print-to-file doesn't work: printing to
    the default printer instead
    + JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/
    /bug4726194.java fails on MacOSX
    + JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003 Wrong
    number of thread end events
    + JDK-8039261: [TEST_BUG]: There is not a minimal security
    level in Java Preferences and the TestApplet.html is blocked.
    + JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/
    /AltTabCrashTest.java fails with exception
    + JDK-8075909: [TEST_BUG] The regression-swing case failed as
    it does not have the 'Open' button when select 'subdir' folder
    with NimbusLAF
    + JDK-8078219: Verify lack of @test tag in files in java/net
    test directory
    + JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails
    with "RuntimeException: Process terminated prematurely"
    + JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java timed out intermittently
    + JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails
    intermittently
    + JDK-8131745: java/lang/management/ThreadMXBean/
    /AllThreadIds.java still fails intermittently
    + JDK-8136517: [macosx] Test java/awt/Focus/8073453/
    /AWTFocusTransitionTest.java fails on MacOSX
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/
    /Test6541987.java fails
    + JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/
    /bug4760494.java leaves key pressed
    + JDK-8159904: [TEST_BUG] Failure on solaris of
    java/awt/Window/MultiWindowApp/MultiWindowAppTest.java
    + JDK-8163086: java/awt/Window/TranslucentJAppletTest/
    /TranslucentJAppletTest.java fails
    + JDK-8165828: [TEST_BUG] The reg case: javax/swing/plaf/metal/
    /MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look
    and Feel
    + JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not
    fired! on Windows
    + JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException:
    Default button is not pressed
    + JDK-8169959: javax/swing/JTable/6263446/bug6263446.java:
    Table should be editing
    + JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/
    /7156657/bug7156657.java fails on OS X
    + JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails
    on Windows
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8179880: Refactor javax/security shell tests to plain
    java tests
    + JDK-8180568: Refactor javax/crypto shell tests to plain java
    tests
    + JDK-8180569: Refactor sun/security/krb5/ shell tests to plain
    java tests
    + JDK-8180571: Refactor sun/security/pkcs11 shell tests to
    plain java tests and fix failures
    + JDK-8180573: Refactor sun/security/tools shell tests to plain
    java tests
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8195703: BasicJDWPConnectionTest.java: 'App exited
    unexpectedly with 2'
    + JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java
    fails
    + JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java
    fails
    + JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/
    /NoEventsTest.java fails on Windows
    + JDK-8197811: Test java/awt/Choice/PopupPosTest/
    /PopupPosTest.java fails on Windows
    + JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java
    fails on mac
    + JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java
    fails on mac
    + JDK-8198619: java/awt/Focus/FocusTraversalPolicy/
    /ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java
    fails on mac
    + JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/
    /EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java
    fails on mac
    + JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/
    /SubMenuShowTest/SubMenuShowTest.html fails on mac
    + JDK-8199138: Add RISC-V support to Zero
    + JDK-8199529: javax/swing/text/Utilities/8142966/
    /SwingFontMetricsTest.java fails on windows
    + JDK-8201224: Make string buffer size dynamic in
    mlvmJvmtiUtils.c
    + JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/
    /FollowReferences/followref003/TestDescription.java fails with
    "Location mismatch" errors
    + JDK-8204161: [TESTBUG] auto failed with the "Applet thread
    threw exception: java.lang.UnsupportedOperationException"
    exception
    + JDK-8206085: Refactor
    langtools/tools/javac/versions/Versions.java
    + JDK-8207936: TestZipFile failed with java.lang.AssertionError
    exception
    + JDK-8208242: Add @requires to vmTestbase/gc/g1 tests
    + JDK-8209611: use C++ compiler for hotspot tests
    + JDK-8210182: Remove macros for C compilation from vmTestBase
    but non jvmti
    + JDK-8210198: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[A-F] tests
    + JDK-8210205: build fails on AIX in hotspot cpp tests (for
    example getstacktr001.cpp)
    + JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/
    /jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION
    on windows-x86
    + JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java
    back to tier1
    + JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[A-N] tests
    + JDK-8210392: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8210395: Add doc to SecurityTools.java
    + JDK-8210429: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[G-Z] tests
    + JDK-8210481: Remove #ifdef cplusplus from vmTestbase
    + JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[N-R] tests
    + JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[R-U] tests
    + JDK-8210689: Remove the multi-line old C style for string
    literals
    + JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti/unit tests
    + JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665
    + JDK-8210920: Native C++ tests are not using CXXFLAGS
    + JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR:
    hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti,
    thread)"
    + JDK-8211036: Remove the NSK_STUB macros from vmTestbase for
    non jvmti
    + JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[G-I]*
    + JDK-8211148: var in implicit lambdas shouldn't be accepted
    for source &lt; 11
    + JDK-8211171: move JarUtils to top-level testlibrary
    + JDK-8211227: Inconsistent TLS protocol version in debug output
    + JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[A-G]*
    + JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp
    + JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[I-S]*
    + JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[A-E]
    + JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[E-M]
    + JDK-8211905: Remove multiple casts for EM06 file
    + JDK-8211999: Window positioning bugs due to overlapping
    GraphicsDevice bounds (Windows/HiDPI)
    + JDK-8212082: Remove the NSK_CPP_STUB macros for remaining
    vmTestbase/jvmti/[sS]*
    + JDK-8212083: Handle remaining gc/lock native code and fix two
    strings
    + JDK-8212148: Remove remaining NSK_CPP_STUBs
    + JDK-8213110: Remove the use of applets in automatic tests
    + JDK-8213189: Make restricted headers in HTTP Client
    configurable and remove Date by default
    + JDK-8213263: fix legal headers in test/langtools
    + JDK-8213296: Fix legal headers in test/jdk/java/net
    + JDK-8213301: Fix legal headers in jdk logging tests
    + JDK-8213305: Fix legal headers in test/java/math
    + JDK-8213306: Fix legal headers in test/java/nio
    + JDK-8213328: Update test copyrights in test/java/util/zip and
    test/jdk/tools
    + JDK-8213330: Fix legal headers in i18n tests
    + JDK-8213707: [TEST] vmTestbase/nsk/stress/except/
    /except011.java failed due to wrong class name
    + JDK-8214469: [macos] PIT: java/awt/Choice/
    /ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails
    + JDK-8215410: Regression test for JDK-8214994
    + JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher
    + JDK-8215624: Add parallel heap iteration for jmap \u2013histo
    + JDK-8215889: assert(!_unloading) failed: This oop is not
    available to unloading class loader data with ZGC
    + JDK-8216318: The usage of Disposer in the java.awt.Robot can
    be deleted
    + JDK-8216417: cleanup of IPv6 scope-id handling
    + JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java
    failed with UnsupportedOperation exception
    + JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX
    + JDK-8217633: Configurable extensions with system properties
    + JDK-8217882: java/net/httpclient/MaxStreams.java failed once
    + JDK-8217903: java/net/httpclient/Response204.java fails with
    404
    + JDK-8218483: Crash in
    "assert(_daemon_threads_count-&gt;get_value() &gt; daemon_count)
    failed: thread count mismatch 5 : 5"
    + JDK-8219986: Change to Xcode 10.1 for building on Macosx at
    Oracle
    + JDK-8220575: Correctly format test URI's that contain a
    retrieved IPv6 address
    + JDK-8221259: New tests for java.net.Socket to exercise long
    standing behavior
    + JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails
    on MacOS + Solaris
    + JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/
    /FocusTraversal.java fails on ubuntu
    + JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/
    /IconifyTest.java fails on ubuntu18.04
    + JDK-8222446: assert(C-&gt;env()-&gt;system_dictionary_modification_counter_changed())
    failed: Must invalidate if TypeFuncs differ
    + JDK-8223137: Rename predicate 'do_unroll_only()' to
    'is_unroll_only()'.
    + JDK-8223138: Small clean-up in loop-tree support.
    + JDK-8223139: Rename mandatory policy-do routines.
    + JDK-8223140: Clean-up in 'ok_to_convert()'
    + JDK-8223141: Change (count) suffix _ct into _cnt.
    + JDK-8223400: Replace some enums with static const members in
    hotspot/runtime
    + JDK-8223658: Performance regression of XML.validation in
    13-b19
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8224829: AsyncSSLSocketClose.java has timing issue
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226514: Replace wildcard address with loopback or local
    host in tests - part 17
    + JDK-8226943: compile error in libfollowref003.cpp  with XCode
    10.2 on macosx
    + JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed
    due to "SSLException: An established connection was aborted by
    the software in your host machine"
    + JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java
    fails on Windows7
    + JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently
    positions text
    + JDK-8230019: [REDO] compiler/types/correctness/* tests fail
    with "assert(recv == __null || recv-&gt;is_klass()) failed: wrong
    type"
    + JDK-8230067: Add optional automatic retry when running jtreg
    tests
    + JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests
    may fail on some platforms
    + JDK-8231501: VM crash in
    MethodData::clean_extra_data(CleanExtraDataClosure*):
    fatal error: unexpected tag 99
    + JDK-8233403: Improve verbosity of some httpclient tests
    + JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS
    + JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on
    MacOS
    + JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on
    MacOS
    + JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS
    + JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS
    + JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on
    macos
    + JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java  is
    failing on macos
    + JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails
    on macos
    + JDK-8233562: [TESTBUG] Swing StyledEditorKit test
    bug4506788.java fails on MacOS
    + JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing
    + JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on
    MacoS
    + JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos
    + JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java
    fails on macos
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails
    on macos
    + JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java
    fails on macos
    + JDK-8233637: [TESTBUG] Swing
    ActionListenerCalledTwiceTest.java fails on macos
    + JDK-8233638: [TESTBUG] Swing test
    ScreenMenuBarInputTwice.java fails on macos
    + JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails
    on macos
    + JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java  fails
    on macos
    + JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on
    macos
    + JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is
    failing on macos
    + JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is
    failing on macos
    + JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture
    Recognition in all the platforms
    + JDK-8234823: java/net/Socket/Timeouts.java testcase
    testTimedConnect2() fails on Windows 10
    + JDK-8235784: java/lang/invoke/VarHandles/
    /VarHandleTestByteArrayAsInt.java fails due to timeout with
    fastdebug bits
    + JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -Xcomp -XX:TieredStopAtLevel=1
    + JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60),
    cond_wait
    + JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT,
    when using proxy tunnel
    + JDK-8237354: Add option to jcmd to write a gzipped heap dump
    + JDK-8237589: Fix copyright header formatting
    + JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java
    should not specify TLS version
    + JDK-8239334: Tab Size does not work correctly in JTextArea
    with setLineWrap on
    + JDK-8239422: [TESTBUG]
    compiler/c1/TestPrintIRDuringConstruction.java failed when C1
    is disabled
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240256: Better resource cleaning for SunPKCS11 Provider
    + JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test
    Server
    + JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/
    /bug8020708.java fails in mach5 ubuntu system
    + JDK-8242793: Incorrect copyright header in
    ContinuousCallSiteTargetChange.java
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244292: Headful clients failing with
  - -illegal-access=deny
    + JDK-8245147: Refactor and improve utility of
    test/langtools/tools/javac/versions/Versions.java
    + JDK-8245165: Update bug id for
    javax/swing/text/StyledEditorKit/4506788/bug4506788.java in
    ProblemList
    + JDK-8245665: Test WeakAlg.java should only make sure no
    warning for weak signature algorithms by keytool on root CA
    + JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails
    after 8241072 (multi-homed systems)
    + JDK-8246807: Incorrect copyright header in
    TimeZoneDatePermissionCheck.sh
    + JDK-8247403: JShell: No custom input (e.g. from GUI) possible
    with JavaShellToolBuilder
    + JDK-8247510: typo in IllegalHandshakeMessage
    + JDK-8248187: [TESTBUG] javax/swing/plaf/basic/
    /BasicGraphicsUtils/8132119/bug8132119.java fails with String
    is not properly drawn
    + JDK-8248341: ProblemList java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java
    + JDK-8248500: AArch64: Remove the r18 dependency on Windows
    AArch64
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8249195: Change to Xcode 11.3.1 for building on Macos at
    Oracle
    + JDK-8250521: Configure initial RTO to use minimal retry for
    loopback connections on Windows
    + JDK-8250810: Push missing parts of JDK-8248817
    + JDK-8250839: Improve test template SSLEngineTemplate with
    SSLContextTemplate
    + JDK-8250863: Build error with GCC 10 in NetworkInterface.c
    and k_standard.c
    + JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/
    /gf08t001/TestDriver.java fails
    + JDK-8251155: HostIdentifier fails to canonicalize hostnames
    starting with digits
    + JDK-8251377: [macos11] JTabbedPane selected tab text is
    barely legible
    + JDK-8251570: JDK-8215624 causes assert(worker_id &lt;
    _n_workers) failed: Invalid worker_id
    + JDK-8251930: AArch64: Native types mismatch in hotspot
    + JDK-8252049: Native memory leak in ciMethodData ctor
    + JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x
    friendly
    + JDK-8252114: Windows-AArch64: Enable and test ZGC and
    ShenandoahGC
    + JDK-8253015: Aarch64: Move linux code out from generic CPU
    feature detection
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java
    fail on big screens
    + JDK-8253497: Core Libs Terminology Refresh
    + JDK-8253682: The AppletInitialFocusTest1.java is unstable
    + JDK-8253763: ParallelObjectIterator should have virtual
    destructor
    + JDK-8253866: Security Libs Terminology Refresh
    + JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in
    "try throwing in GET_BODY"
    + JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java
    intermittently failing with TestServer: start exception:
    java.io.IOException: Invalid preface
    + JDK-8255264: Support for identifying the full range of IPv4
    localhost addresses on Windows
    + JDK-8255716: AArch64: Regression: JVM crashes if manually
    offline a core
    + JDK-8255722: Create a new test for rotated blit
    + JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad
    + JDK-8256066: Tests use deprecated TestNG API that is no
    longer available in new versions
    + JDK-8256152: tests fail because of ambiguous method resolution
    + JDK-8256182: Update qemu-debootstrap cross-compilation recipe
    + JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/
    /FullscreenWindowProps.java failed
    + JDK-8256202: Some tweaks for jarsigner tests
    PosixPermissionsTest and SymLinkTest
    + JDK-8256372: [macos] Unexpected symbol was displayed on
    JTextField with Monospaced font
    + JDK-8256956: RegisterImpl::max_slots_per_register is
    incorrect on AMD64
    + JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with
    InvalidPathException on windows
    + JDK-8258855: Two tests sun/security/krb5/auto/
    /ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java
    failed on OL8.3
    + JDK-8259237: Demo selection changes with left/right arrow
    key. No need to press space for selection.
    + JDK-8260571: Add PrintMetaspaceStatistics to print metaspace
    statistics upon VM exit
    + JDK-8260690: JConsole User Guide Link from the Help menu is
    not accessible by keyboard
    + JDK-8261036: Reduce classes loaded by CleanerFactory
    initialization
    + JDK-8261071: AArch64: Refactor interpreter native wrappers
    + JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch
    implementation
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261297: NMT: Final report should use scale 1
    + JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java
    fails because Reserved memory size is too big
    + JDK-8261916: gtest/GTestWrapper.java
    vmErrorTest.unimplemented1_vm_assert failed
    + JDK-8262438: sun/security/ssl/SSLLogger/
    /LoggingFormatConsistency.java failed with "SocketException:
    Socket is closed"
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8262844: (fs) FileStore.supportsFileAttributeView might
    return false negative in case of ext3
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp
    + JDK-8263303: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8263362: Avoid division by 0 in
    java/awt/font/TextJustifier.java justify
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java
    failed with "java.lang.RuntimeException: Wrong method"
    + JDK-8264526: javax/swing/text/html/parser/Parser/8078268/
    /bug8078268.java timeout
    + JDK-8264824: java/net/Inet6Address/B6206527.java doesn't
    close ServerSocket properly
    + JDK-8265019: Update tests for additional TestNG test
    permissions
    + JDK-8265173: [test] divert spurious log output away from
    stream under test in ProcessBuilder Basic test
    + JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8266579: Update test/jdk/java/lang/ProcessHandle/
    /PermissionTest.java &amp; test/jdk/java/sql/testng/util/
    /TestPolicy.java
    + JDK-8266949: Check possibility to disable OperationTimedOut
    on Unix
    + JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg
    tests on many-core machines
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267304: Bump global JTReg memory limit to 768m
    + JDK-8267652: c2 loop unrolling by 8 results in reading memory
    past array
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268093: Manual Testcase: "sun/security/krb5/config/
    /native/TestDynamicStore.java" Fails with NPE
    + JDK-8268555: Update HttpClient tests that use ITestContext to
    jtreg 6+1
    + JDK-8268672: C2: assert(!loop-&gt;is_member(u_loop)) failed: can
    be in outer loop or out of both loops only
    + JDK-8269034: AccessControlException for SunPKCS11 daemon
    threads
    + JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to
    accessClassAndFindClass
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269768: JFR Terminology Refresh
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8269984: [macos] JTabbedPane title looks like  disabled
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270216: [macOS] Update named used for Java run loop mode
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270344: Session resumption errors
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1
    + JDK-8272181: Windows-AArch64:Backport fix of `Backtracing
    broken on PAC enabled systems`
    + JDK-8272316: Wrong Boot JDK help message in 11
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8272828: Add correct licenses to jszip.md
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java
    fails by timeout
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273541: Cleaner Thread creates with normal priority
    instead of MAX_PRIORITY - 2
    + JDK-8273547: [11u] [JVMCI] Partial module-info.java backport
    of JDK-8223332
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273671: Backport of 8260616 misses one JNF header
    inclusion removal
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273795: Zero SPARC64 debug builds fail due to missing
    interpreter fields
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274860: gcc 10.2.1 produces an uninitialized warning in
    sharedRuntimeTrig.cpp
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277815: Fix mistakes in legal header backports
- Removed patch:
  * riscv64-zero.patch
    + integrated upstream
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1644926400">- Update to upstream tag jdk-11.0.14.1+1
  * Changes:
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8281324: Bump update version for OpenJDK: jdk-11.0.14.1</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="81dedc4b96cd899c30c5376f3e5eaea519ad73baaf72c76425fcd3fa09fa0783" name="java-11-openjdk-accessibility" arch="s390x">
  <version epoch="0" ver="11.0.15.0" rel="150000.3.80.1"/>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643630400">- Update to upstream tag jdk-11.0.14+9 (January 2022 CPU)
  * New features
    + JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
  * Security fixes
    + JDK-8217375: jarsigner breaks old signature with long lines
    in manifest
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
    + JDK-8279541: Improve HarfBuzz
  * Other changes
    + JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/
    /ChoiceKeyEventReaction.html fails
    + JDK-7105119: [TEST_BUG] [macosx] In test
    UIDefaults.toString() must be called with the invokeLater()
    + JDK-7151826: [TEST_BUG] [macosx] The test
    javax/swing/JPopupMenu/4966112/bug4966112.java not for mac
    + JDK-7179006: [macosx] Print-to-file doesn't work: printing to
    the default printer instead
    + JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/
    /bug4726194.java fails on MacOSX
    + JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003 Wrong
    number of thread end events
    + JDK-8039261: [TEST_BUG]: There is not a minimal security
    level in Java Preferences and the TestApplet.html is blocked.
    + JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/
    /AltTabCrashTest.java fails with exception
    + JDK-8075909: [TEST_BUG] The regression-swing case failed as
    it does not have the 'Open' button when select 'subdir' folder
    with NimbusLAF
    + JDK-8078219: Verify lack of @test tag in files in java/net
    test directory
    + JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails
    with "RuntimeException: Process terminated prematurely"
    + JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java timed out intermittently
    + JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails
    intermittently
    + JDK-8131745: java/lang/management/ThreadMXBean/
    /AllThreadIds.java still fails intermittently
    + JDK-8136517: [macosx] Test java/awt/Focus/8073453/
    /AWTFocusTransitionTest.java fails on MacOSX
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/
    /Test6541987.java fails
    + JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/
    /bug4760494.java leaves key pressed
    + JDK-8159904: [TEST_BUG] Failure on solaris of
    java/awt/Window/MultiWindowApp/MultiWindowAppTest.java
    + JDK-8163086: java/awt/Window/TranslucentJAppletTest/
    /TranslucentJAppletTest.java fails
    + JDK-8165828: [TEST_BUG] The reg case: javax/swing/plaf/metal/
    /MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look
    and Feel
    + JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not
    fired! on Windows
    + JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException:
    Default button is not pressed
    + JDK-8169959: javax/swing/JTable/6263446/bug6263446.java:
    Table should be editing
    + JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/
    /7156657/bug7156657.java fails on OS X
    + JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails
    on Windows
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8179880: Refactor javax/security shell tests to plain
    java tests
    + JDK-8180568: Refactor javax/crypto shell tests to plain java
    tests
    + JDK-8180569: Refactor sun/security/krb5/ shell tests to plain
    java tests
    + JDK-8180571: Refactor sun/security/pkcs11 shell tests to
    plain java tests and fix failures
    + JDK-8180573: Refactor sun/security/tools shell tests to plain
    java tests
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8195703: BasicJDWPConnectionTest.java: 'App exited
    unexpectedly with 2'
    + JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java
    fails
    + JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java
    fails
    + JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/
    /NoEventsTest.java fails on Windows
    + JDK-8197811: Test java/awt/Choice/PopupPosTest/
    /PopupPosTest.java fails on Windows
    + JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java
    fails on mac
    + JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java
    fails on mac
    + JDK-8198619: java/awt/Focus/FocusTraversalPolicy/
    /ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java
    fails on mac
    + JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/
    /EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java
    fails on mac
    + JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/
    /SubMenuShowTest/SubMenuShowTest.html fails on mac
    + JDK-8199138: Add RISC-V support to Zero
    + JDK-8199529: javax/swing/text/Utilities/8142966/
    /SwingFontMetricsTest.java fails on windows
    + JDK-8201224: Make string buffer size dynamic in
    mlvmJvmtiUtils.c
    + JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/
    /FollowReferences/followref003/TestDescription.java fails with
    "Location mismatch" errors
    + JDK-8204161: [TESTBUG] auto failed with the "Applet thread
    threw exception: java.lang.UnsupportedOperationException"
    exception
    + JDK-8206085: Refactor
    langtools/tools/javac/versions/Versions.java
    + JDK-8207936: TestZipFile failed with java.lang.AssertionError
    exception
    + JDK-8208242: Add @requires to vmTestbase/gc/g1 tests
    + JDK-8209611: use C++ compiler for hotspot tests
    + JDK-8210182: Remove macros for C compilation from vmTestBase
    but non jvmti
    + JDK-8210198: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[A-F] tests
    + JDK-8210205: build fails on AIX in hotspot cpp tests (for
    example getstacktr001.cpp)
    + JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/
    /jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION
    on windows-x86
    + JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java
    back to tier1
    + JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[A-N] tests
    + JDK-8210392: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8210395: Add doc to SecurityTools.java
    + JDK-8210429: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[G-Z] tests
    + JDK-8210481: Remove #ifdef cplusplus from vmTestbase
    + JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[N-R] tests
    + JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[R-U] tests
    + JDK-8210689: Remove the multi-line old C style for string
    literals
    + JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti/unit tests
    + JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665
    + JDK-8210920: Native C++ tests are not using CXXFLAGS
    + JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR:
    hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti,
    thread)"
    + JDK-8211036: Remove the NSK_STUB macros from vmTestbase for
    non jvmti
    + JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[G-I]*
    + JDK-8211148: var in implicit lambdas shouldn't be accepted
    for source &lt; 11
    + JDK-8211171: move JarUtils to top-level testlibrary
    + JDK-8211227: Inconsistent TLS protocol version in debug output
    + JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[A-G]*
    + JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp
    + JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[I-S]*
    + JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[A-E]
    + JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[E-M]
    + JDK-8211905: Remove multiple casts for EM06 file
    + JDK-8211999: Window positioning bugs due to overlapping
    GraphicsDevice bounds (Windows/HiDPI)
    + JDK-8212082: Remove the NSK_CPP_STUB macros for remaining
    vmTestbase/jvmti/[sS]*
    + JDK-8212083: Handle remaining gc/lock native code and fix two
    strings
    + JDK-8212148: Remove remaining NSK_CPP_STUBs
    + JDK-8213110: Remove the use of applets in automatic tests
    + JDK-8213189: Make restricted headers in HTTP Client
    configurable and remove Date by default
    + JDK-8213263: fix legal headers in test/langtools
    + JDK-8213296: Fix legal headers in test/jdk/java/net
    + JDK-8213301: Fix legal headers in jdk logging tests
    + JDK-8213305: Fix legal headers in test/java/math
    + JDK-8213306: Fix legal headers in test/java/nio
    + JDK-8213328: Update test copyrights in test/java/util/zip and
    test/jdk/tools
    + JDK-8213330: Fix legal headers in i18n tests
    + JDK-8213707: [TEST] vmTestbase/nsk/stress/except/
    /except011.java failed due to wrong class name
    + JDK-8214469: [macos] PIT: java/awt/Choice/
    /ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails
    + JDK-8215410: Regression test for JDK-8214994
    + JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher
    + JDK-8215624: Add parallel heap iteration for jmap \u2013histo
    + JDK-8215889: assert(!_unloading) failed: This oop is not
    available to unloading class loader data with ZGC
    + JDK-8216318: The usage of Disposer in the java.awt.Robot can
    be deleted
    + JDK-8216417: cleanup of IPv6 scope-id handling
    + JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java
    failed with UnsupportedOperation exception
    + JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX
    + JDK-8217633: Configurable extensions with system properties
    + JDK-8217882: java/net/httpclient/MaxStreams.java failed once
    + JDK-8217903: java/net/httpclient/Response204.java fails with
    404
    + JDK-8218483: Crash in
    "assert(_daemon_threads_count-&gt;get_value() &gt; daemon_count)
    failed: thread count mismatch 5 : 5"
    + JDK-8219986: Change to Xcode 10.1 for building on Macosx at
    Oracle
    + JDK-8220575: Correctly format test URI's that contain a
    retrieved IPv6 address
    + JDK-8221259: New tests for java.net.Socket to exercise long
    standing behavior
    + JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails
    on MacOS + Solaris
    + JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/
    /FocusTraversal.java fails on ubuntu
    + JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/
    /IconifyTest.java fails on ubuntu18.04
    + JDK-8222446: assert(C-&gt;env()-&gt;system_dictionary_modification_counter_changed())
    failed: Must invalidate if TypeFuncs differ
    + JDK-8223137: Rename predicate 'do_unroll_only()' to
    'is_unroll_only()'.
    + JDK-8223138: Small clean-up in loop-tree support.
    + JDK-8223139: Rename mandatory policy-do routines.
    + JDK-8223140: Clean-up in 'ok_to_convert()'
    + JDK-8223141: Change (count) suffix _ct into _cnt.
    + JDK-8223400: Replace some enums with static const members in
    hotspot/runtime
    + JDK-8223658: Performance regression of XML.validation in
    13-b19
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8224829: AsyncSSLSocketClose.java has timing issue
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226514: Replace wildcard address with loopback or local
    host in tests - part 17
    + JDK-8226943: compile error in libfollowref003.cpp  with XCode
    10.2 on macosx
    + JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed
    due to "SSLException: An established connection was aborted by
    the software in your host machine"
    + JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java
    fails on Windows7
    + JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently
    positions text
    + JDK-8230019: [REDO] compiler/types/correctness/* tests fail
    with "assert(recv == __null || recv-&gt;is_klass()) failed: wrong
    type"
    + JDK-8230067: Add optional automatic retry when running jtreg
    tests
    + JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests
    may fail on some platforms
    + JDK-8231501: VM crash in
    MethodData::clean_extra_data(CleanExtraDataClosure*):
    fatal error: unexpected tag 99
    + JDK-8233403: Improve verbosity of some httpclient tests
    + JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS
    + JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on
    MacOS
    + JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on
    MacOS
    + JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS
    + JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS
    + JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on
    macos
    + JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java  is
    failing on macos
    + JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails
    on macos
    + JDK-8233562: [TESTBUG] Swing StyledEditorKit test
    bug4506788.java fails on MacOS
    + JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing
    + JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on
    MacoS
    + JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos
    + JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java
    fails on macos
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails
    on macos
    + JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java
    fails on macos
    + JDK-8233637: [TESTBUG] Swing
    ActionListenerCalledTwiceTest.java fails on macos
    + JDK-8233638: [TESTBUG] Swing test
    ScreenMenuBarInputTwice.java fails on macos
    + JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails
    on macos
    + JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java  fails
    on macos
    + JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on
    macos
    + JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is
    failing on macos
    + JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is
    failing on macos
    + JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture
    Recognition in all the platforms
    + JDK-8234823: java/net/Socket/Timeouts.java testcase
    testTimedConnect2() fails on Windows 10
    + JDK-8235784: java/lang/invoke/VarHandles/
    /VarHandleTestByteArrayAsInt.java fails due to timeout with
    fastdebug bits
    + JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -Xcomp -XX:TieredStopAtLevel=1
    + JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60),
    cond_wait
    + JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT,
    when using proxy tunnel
    + JDK-8237354: Add option to jcmd to write a gzipped heap dump
    + JDK-8237589: Fix copyright header formatting
    + JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java
    should not specify TLS version
    + JDK-8239334: Tab Size does not work correctly in JTextArea
    with setLineWrap on
    + JDK-8239422: [TESTBUG]
    compiler/c1/TestPrintIRDuringConstruction.java failed when C1
    is disabled
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240256: Better resource cleaning for SunPKCS11 Provider
    + JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test
    Server
    + JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/
    /bug8020708.java fails in mach5 ubuntu system
    + JDK-8242793: Incorrect copyright header in
    ContinuousCallSiteTargetChange.java
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244292: Headful clients failing with
  - -illegal-access=deny
    + JDK-8245147: Refactor and improve utility of
    test/langtools/tools/javac/versions/Versions.java
    + JDK-8245165: Update bug id for
    javax/swing/text/StyledEditorKit/4506788/bug4506788.java in
    ProblemList
    + JDK-8245665: Test WeakAlg.java should only make sure no
    warning for weak signature algorithms by keytool on root CA
    + JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails
    after 8241072 (multi-homed systems)
    + JDK-8246807: Incorrect copyright header in
    TimeZoneDatePermissionCheck.sh
    + JDK-8247403: JShell: No custom input (e.g. from GUI) possible
    with JavaShellToolBuilder
    + JDK-8247510: typo in IllegalHandshakeMessage
    + JDK-8248187: [TESTBUG] javax/swing/plaf/basic/
    /BasicGraphicsUtils/8132119/bug8132119.java fails with String
    is not properly drawn
    + JDK-8248341: ProblemList java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java
    + JDK-8248500: AArch64: Remove the r18 dependency on Windows
    AArch64
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8249195: Change to Xcode 11.3.1 for building on Macos at
    Oracle
    + JDK-8250521: Configure initial RTO to use minimal retry for
    loopback connections on Windows
    + JDK-8250810: Push missing parts of JDK-8248817
    + JDK-8250839: Improve test template SSLEngineTemplate with
    SSLContextTemplate
    + JDK-8250863: Build error with GCC 10 in NetworkInterface.c
    and k_standard.c
    + JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/
    /gf08t001/TestDriver.java fails
    + JDK-8251155: HostIdentifier fails to canonicalize hostnames
    starting with digits
    + JDK-8251377: [macos11] JTabbedPane selected tab text is
    barely legible
    + JDK-8251570: JDK-8215624 causes assert(worker_id &lt;
    _n_workers) failed: Invalid worker_id
    + JDK-8251930: AArch64: Native types mismatch in hotspot
    + JDK-8252049: Native memory leak in ciMethodData ctor
    + JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x
    friendly
    + JDK-8252114: Windows-AArch64: Enable and test ZGC and
    ShenandoahGC
    + JDK-8253015: Aarch64: Move linux code out from generic CPU
    feature detection
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java
    fail on big screens
    + JDK-8253497: Core Libs Terminology Refresh
    + JDK-8253682: The AppletInitialFocusTest1.java is unstable
    + JDK-8253763: ParallelObjectIterator should have virtual
    destructor
    + JDK-8253866: Security Libs Terminology Refresh
    + JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in
    "try throwing in GET_BODY"
    + JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java
    intermittently failing with TestServer: start exception:
    java.io.IOException: Invalid preface
    + JDK-8255264: Support for identifying the full range of IPv4
    localhost addresses on Windows
    + JDK-8255716: AArch64: Regression: JVM crashes if manually
    offline a core
    + JDK-8255722: Create a new test for rotated blit
    + JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad
    + JDK-8256066: Tests use deprecated TestNG API that is no
    longer available in new versions
    + JDK-8256152: tests fail because of ambiguous method resolution
    + JDK-8256182: Update qemu-debootstrap cross-compilation recipe
    + JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/
    /FullscreenWindowProps.java failed
    + JDK-8256202: Some tweaks for jarsigner tests
    PosixPermissionsTest and SymLinkTest
    + JDK-8256372: [macos] Unexpected symbol was displayed on
    JTextField with Monospaced font
    + JDK-8256956: RegisterImpl::max_slots_per_register is
    incorrect on AMD64
    + JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with
    InvalidPathException on windows
    + JDK-8258855: Two tests sun/security/krb5/auto/
    /ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java
    failed on OL8.3
    + JDK-8259237: Demo selection changes with left/right arrow
    key. No need to press space for selection.
    + JDK-8260571: Add PrintMetaspaceStatistics to print metaspace
    statistics upon VM exit
    + JDK-8260690: JConsole User Guide Link from the Help menu is
    not accessible by keyboard
    + JDK-8261036: Reduce classes loaded by CleanerFactory
    initialization
    + JDK-8261071: AArch64: Refactor interpreter native wrappers
    + JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch
    implementation
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261297: NMT: Final report should use scale 1
    + JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java
    fails because Reserved memory size is too big
    + JDK-8261916: gtest/GTestWrapper.java
    vmErrorTest.unimplemented1_vm_assert failed
    + JDK-8262438: sun/security/ssl/SSLLogger/
    /LoggingFormatConsistency.java failed with "SocketException:
    Socket is closed"
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8262844: (fs) FileStore.supportsFileAttributeView might
    return false negative in case of ext3
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp
    + JDK-8263303: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8263362: Avoid division by 0 in
    java/awt/font/TextJustifier.java justify
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java
    failed with "java.lang.RuntimeException: Wrong method"
    + JDK-8264526: javax/swing/text/html/parser/Parser/8078268/
    /bug8078268.java timeout
    + JDK-8264824: java/net/Inet6Address/B6206527.java doesn't
    close ServerSocket properly
    + JDK-8265019: Update tests for additional TestNG test
    permissions
    + JDK-8265173: [test] divert spurious log output away from
    stream under test in ProcessBuilder Basic test
    + JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8266579: Update test/jdk/java/lang/ProcessHandle/
    /PermissionTest.java &amp; test/jdk/java/sql/testng/util/
    /TestPolicy.java
    + JDK-8266949: Check possibility to disable OperationTimedOut
    on Unix
    + JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg
    tests on many-core machines
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267304: Bump global JTReg memory limit to 768m
    + JDK-8267652: c2 loop unrolling by 8 results in reading memory
    past array
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268093: Manual Testcase: "sun/security/krb5/config/
    /native/TestDynamicStore.java" Fails with NPE
    + JDK-8268555: Update HttpClient tests that use ITestContext to
    jtreg 6+1
    + JDK-8268672: C2: assert(!loop-&gt;is_member(u_loop)) failed: can
    be in outer loop or out of both loops only
    + JDK-8269034: AccessControlException for SunPKCS11 daemon
    threads
    + JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to
    accessClassAndFindClass
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269768: JFR Terminology Refresh
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8269984: [macos] JTabbedPane title looks like  disabled
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270216: [macOS] Update named used for Java run loop mode
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270344: Session resumption errors
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1
    + JDK-8272181: Windows-AArch64:Backport fix of `Backtracing
    broken on PAC enabled systems`
    + JDK-8272316: Wrong Boot JDK help message in 11
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8272828: Add correct licenses to jszip.md
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java
    fails by timeout
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273541: Cleaner Thread creates with normal priority
    instead of MAX_PRIORITY - 2
    + JDK-8273547: [11u] [JVMCI] Partial module-info.java backport
    of JDK-8223332
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273671: Backport of 8260616 misses one JNF header
    inclusion removal
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273795: Zero SPARC64 debug builds fail due to missing
    interpreter fields
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274860: gcc 10.2.1 produces an uninitialized warning in
    sharedRuntimeTrig.cpp
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277815: Fix mistakes in legal header backports
- Removed patch:
  * riscv64-zero.patch
    + integrated upstream
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1644926400">- Update to upstream tag jdk-11.0.14.1+1
  * Changes:
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8281324: Bump update version for OpenJDK: jdk-11.0.14.1</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="61e7e6d890321527404c4cefb97412fcd0a59840ee9da28db4c8374d01033ada" name="java-11-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="11.0.15.0" rel="150000.3.80.1"/>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643630400">- Update to upstream tag jdk-11.0.14+9 (January 2022 CPU)
  * New features
    + JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
  * Security fixes
    + JDK-8217375: jarsigner breaks old signature with long lines
    in manifest
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
    + JDK-8279541: Improve HarfBuzz
  * Other changes
    + JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/
    /ChoiceKeyEventReaction.html fails
    + JDK-7105119: [TEST_BUG] [macosx] In test
    UIDefaults.toString() must be called with the invokeLater()
    + JDK-7151826: [TEST_BUG] [macosx] The test
    javax/swing/JPopupMenu/4966112/bug4966112.java not for mac
    + JDK-7179006: [macosx] Print-to-file doesn't work: printing to
    the default printer instead
    + JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/
    /bug4726194.java fails on MacOSX
    + JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003 Wrong
    number of thread end events
    + JDK-8039261: [TEST_BUG]: There is not a minimal security
    level in Java Preferences and the TestApplet.html is blocked.
    + JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/
    /AltTabCrashTest.java fails with exception
    + JDK-8075909: [TEST_BUG] The regression-swing case failed as
    it does not have the 'Open' button when select 'subdir' folder
    with NimbusLAF
    + JDK-8078219: Verify lack of @test tag in files in java/net
    test directory
    + JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails
    with "RuntimeException: Process terminated prematurely"
    + JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java timed out intermittently
    + JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails
    intermittently
    + JDK-8131745: java/lang/management/ThreadMXBean/
    /AllThreadIds.java still fails intermittently
    + JDK-8136517: [macosx] Test java/awt/Focus/8073453/
    /AWTFocusTransitionTest.java fails on MacOSX
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/
    /Test6541987.java fails
    + JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/
    /bug4760494.java leaves key pressed
    + JDK-8159904: [TEST_BUG] Failure on solaris of
    java/awt/Window/MultiWindowApp/MultiWindowAppTest.java
    + JDK-8163086: java/awt/Window/TranslucentJAppletTest/
    /TranslucentJAppletTest.java fails
    + JDK-8165828: [TEST_BUG] The reg case: javax/swing/plaf/metal/
    /MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look
    and Feel
    + JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not
    fired! on Windows
    + JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException:
    Default button is not pressed
    + JDK-8169959: javax/swing/JTable/6263446/bug6263446.java:
    Table should be editing
    + JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/
    /7156657/bug7156657.java fails on OS X
    + JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails
    on Windows
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8179880: Refactor javax/security shell tests to plain
    java tests
    + JDK-8180568: Refactor javax/crypto shell tests to plain java
    tests
    + JDK-8180569: Refactor sun/security/krb5/ shell tests to plain
    java tests
    + JDK-8180571: Refactor sun/security/pkcs11 shell tests to
    plain java tests and fix failures
    + JDK-8180573: Refactor sun/security/tools shell tests to plain
    java tests
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8195703: BasicJDWPConnectionTest.java: 'App exited
    unexpectedly with 2'
    + JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java
    fails
    + JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java
    fails
    + JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/
    /NoEventsTest.java fails on Windows
    + JDK-8197811: Test java/awt/Choice/PopupPosTest/
    /PopupPosTest.java fails on Windows
    + JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java
    fails on mac
    + JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java
    fails on mac
    + JDK-8198619: java/awt/Focus/FocusTraversalPolicy/
    /ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java
    fails on mac
    + JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/
    /EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java
    fails on mac
    + JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/
    /SubMenuShowTest/SubMenuShowTest.html fails on mac
    + JDK-8199138: Add RISC-V support to Zero
    + JDK-8199529: javax/swing/text/Utilities/8142966/
    /SwingFontMetricsTest.java fails on windows
    + JDK-8201224: Make string buffer size dynamic in
    mlvmJvmtiUtils.c
    + JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/
    /FollowReferences/followref003/TestDescription.java fails with
    "Location mismatch" errors
    + JDK-8204161: [TESTBUG] auto failed with the "Applet thread
    threw exception: java.lang.UnsupportedOperationException"
    exception
    + JDK-8206085: Refactor
    langtools/tools/javac/versions/Versions.java
    + JDK-8207936: TestZipFile failed with java.lang.AssertionError
    exception
    + JDK-8208242: Add @requires to vmTestbase/gc/g1 tests
    + JDK-8209611: use C++ compiler for hotspot tests
    + JDK-8210182: Remove macros for C compilation from vmTestBase
    but non jvmti
    + JDK-8210198: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[A-F] tests
    + JDK-8210205: build fails on AIX in hotspot cpp tests (for
    example getstacktr001.cpp)
    + JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/
    /jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION
    on windows-x86
    + JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java
    back to tier1
    + JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[A-N] tests
    + JDK-8210392: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8210395: Add doc to SecurityTools.java
    + JDK-8210429: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[G-Z] tests
    + JDK-8210481: Remove #ifdef cplusplus from vmTestbase
    + JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[N-R] tests
    + JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[R-U] tests
    + JDK-8210689: Remove the multi-line old C style for string
    literals
    + JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti/unit tests
    + JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665
    + JDK-8210920: Native C++ tests are not using CXXFLAGS
    + JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR:
    hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti,
    thread)"
    + JDK-8211036: Remove the NSK_STUB macros from vmTestbase for
    non jvmti
    + JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[G-I]*
    + JDK-8211148: var in implicit lambdas shouldn't be accepted
    for source &lt; 11
    + JDK-8211171: move JarUtils to top-level testlibrary
    + JDK-8211227: Inconsistent TLS protocol version in debug output
    + JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[A-G]*
    + JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp
    + JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[I-S]*
    + JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[A-E]
    + JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[E-M]
    + JDK-8211905: Remove multiple casts for EM06 file
    + JDK-8211999: Window positioning bugs due to overlapping
    GraphicsDevice bounds (Windows/HiDPI)
    + JDK-8212082: Remove the NSK_CPP_STUB macros for remaining
    vmTestbase/jvmti/[sS]*
    + JDK-8212083: Handle remaining gc/lock native code and fix two
    strings
    + JDK-8212148: Remove remaining NSK_CPP_STUBs
    + JDK-8213110: Remove the use of applets in automatic tests
    + JDK-8213189: Make restricted headers in HTTP Client
    configurable and remove Date by default
    + JDK-8213263: fix legal headers in test/langtools
    + JDK-8213296: Fix legal headers in test/jdk/java/net
    + JDK-8213301: Fix legal headers in jdk logging tests
    + JDK-8213305: Fix legal headers in test/java/math
    + JDK-8213306: Fix legal headers in test/java/nio
    + JDK-8213328: Update test copyrights in test/java/util/zip and
    test/jdk/tools
    + JDK-8213330: Fix legal headers in i18n tests
    + JDK-8213707: [TEST] vmTestbase/nsk/stress/except/
    /except011.java failed due to wrong class name
    + JDK-8214469: [macos] PIT: java/awt/Choice/
    /ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails
    + JDK-8215410: Regression test for JDK-8214994
    + JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher
    + JDK-8215624: Add parallel heap iteration for jmap \u2013histo
    + JDK-8215889: assert(!_unloading) failed: This oop is not
    available to unloading class loader data with ZGC
    + JDK-8216318: The usage of Disposer in the java.awt.Robot can
    be deleted
    + JDK-8216417: cleanup of IPv6 scope-id handling
    + JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java
    failed with UnsupportedOperation exception
    + JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX
    + JDK-8217633: Configurable extensions with system properties
    + JDK-8217882: java/net/httpclient/MaxStreams.java failed once
    + JDK-8217903: java/net/httpclient/Response204.java fails with
    404
    + JDK-8218483: Crash in
    "assert(_daemon_threads_count-&gt;get_value() &gt; daemon_count)
    failed: thread count mismatch 5 : 5"
    + JDK-8219986: Change to Xcode 10.1 for building on Macosx at
    Oracle
    + JDK-8220575: Correctly format test URI's that contain a
    retrieved IPv6 address
    + JDK-8221259: New tests for java.net.Socket to exercise long
    standing behavior
    + JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails
    on MacOS + Solaris
    + JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/
    /FocusTraversal.java fails on ubuntu
    + JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/
    /IconifyTest.java fails on ubuntu18.04
    + JDK-8222446: assert(C-&gt;env()-&gt;system_dictionary_modification_counter_changed())
    failed: Must invalidate if TypeFuncs differ
    + JDK-8223137: Rename predicate 'do_unroll_only()' to
    'is_unroll_only()'.
    + JDK-8223138: Small clean-up in loop-tree support.
    + JDK-8223139: Rename mandatory policy-do routines.
    + JDK-8223140: Clean-up in 'ok_to_convert()'
    + JDK-8223141: Change (count) suffix _ct into _cnt.
    + JDK-8223400: Replace some enums with static const members in
    hotspot/runtime
    + JDK-8223658: Performance regression of XML.validation in
    13-b19
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8224829: AsyncSSLSocketClose.java has timing issue
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226514: Replace wildcard address with loopback or local
    host in tests - part 17
    + JDK-8226943: compile error in libfollowref003.cpp  with XCode
    10.2 on macosx
    + JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed
    due to "SSLException: An established connection was aborted by
    the software in your host machine"
    + JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java
    fails on Windows7
    + JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently
    positions text
    + JDK-8230019: [REDO] compiler/types/correctness/* tests fail
    with "assert(recv == __null || recv-&gt;is_klass()) failed: wrong
    type"
    + JDK-8230067: Add optional automatic retry when running jtreg
    tests
    + JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests
    may fail on some platforms
    + JDK-8231501: VM crash in
    MethodData::clean_extra_data(CleanExtraDataClosure*):
    fatal error: unexpected tag 99
    + JDK-8233403: Improve verbosity of some httpclient tests
    + JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS
    + JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on
    MacOS
    + JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on
    MacOS
    + JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS
    + JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS
    + JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on
    macos
    + JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java  is
    failing on macos
    + JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails
    on macos
    + JDK-8233562: [TESTBUG] Swing StyledEditorKit test
    bug4506788.java fails on MacOS
    + JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing
    + JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on
    MacoS
    + JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos
    + JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java
    fails on macos
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails
    on macos
    + JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java
    fails on macos
    + JDK-8233637: [TESTBUG] Swing
    ActionListenerCalledTwiceTest.java fails on macos
    + JDK-8233638: [TESTBUG] Swing test
    ScreenMenuBarInputTwice.java fails on macos
    + JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails
    on macos
    + JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java  fails
    on macos
    + JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on
    macos
    + JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is
    failing on macos
    + JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is
    failing on macos
    + JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture
    Recognition in all the platforms
    + JDK-8234823: java/net/Socket/Timeouts.java testcase
    testTimedConnect2() fails on Windows 10
    + JDK-8235784: java/lang/invoke/VarHandles/
    /VarHandleTestByteArrayAsInt.java fails due to timeout with
    fastdebug bits
    + JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -Xcomp -XX:TieredStopAtLevel=1
    + JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60),
    cond_wait
    + JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT,
    when using proxy tunnel
    + JDK-8237354: Add option to jcmd to write a gzipped heap dump
    + JDK-8237589: Fix copyright header formatting
    + JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java
    should not specify TLS version
    + JDK-8239334: Tab Size does not work correctly in JTextArea
    with setLineWrap on
    + JDK-8239422: [TESTBUG]
    compiler/c1/TestPrintIRDuringConstruction.java failed when C1
    is disabled
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240256: Better resource cleaning for SunPKCS11 Provider
    + JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test
    Server
    + JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/
    /bug8020708.java fails in mach5 ubuntu system
    + JDK-8242793: Incorrect copyright header in
    ContinuousCallSiteTargetChange.java
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244292: Headful clients failing with
  - -illegal-access=deny
    + JDK-8245147: Refactor and improve utility of
    test/langtools/tools/javac/versions/Versions.java
    + JDK-8245165: Update bug id for
    javax/swing/text/StyledEditorKit/4506788/bug4506788.java in
    ProblemList
    + JDK-8245665: Test WeakAlg.java should only make sure no
    warning for weak signature algorithms by keytool on root CA
    + JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails
    after 8241072 (multi-homed systems)
    + JDK-8246807: Incorrect copyright header in
    TimeZoneDatePermissionCheck.sh
    + JDK-8247403: JShell: No custom input (e.g. from GUI) possible
    with JavaShellToolBuilder
    + JDK-8247510: typo in IllegalHandshakeMessage
    + JDK-8248187: [TESTBUG] javax/swing/plaf/basic/
    /BasicGraphicsUtils/8132119/bug8132119.java fails with String
    is not properly drawn
    + JDK-8248341: ProblemList java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java
    + JDK-8248500: AArch64: Remove the r18 dependency on Windows
    AArch64
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8249195: Change to Xcode 11.3.1 for building on Macos at
    Oracle
    + JDK-8250521: Configure initial RTO to use minimal retry for
    loopback connections on Windows
    + JDK-8250810: Push missing parts of JDK-8248817
    + JDK-8250839: Improve test template SSLEngineTemplate with
    SSLContextTemplate
    + JDK-8250863: Build error with GCC 10 in NetworkInterface.c
    and k_standard.c
    + JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/
    /gf08t001/TestDriver.java fails
    + JDK-8251155: HostIdentifier fails to canonicalize hostnames
    starting with digits
    + JDK-8251377: [macos11] JTabbedPane selected tab text is
    barely legible
    + JDK-8251570: JDK-8215624 causes assert(worker_id &lt;
    _n_workers) failed: Invalid worker_id
    + JDK-8251930: AArch64: Native types mismatch in hotspot
    + JDK-8252049: Native memory leak in ciMethodData ctor
    + JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x
    friendly
    + JDK-8252114: Windows-AArch64: Enable and test ZGC and
    ShenandoahGC
    + JDK-8253015: Aarch64: Move linux code out from generic CPU
    feature detection
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java
    fail on big screens
    + JDK-8253497: Core Libs Terminology Refresh
    + JDK-8253682: The AppletInitialFocusTest1.java is unstable
    + JDK-8253763: ParallelObjectIterator should have virtual
    destructor
    + JDK-8253866: Security Libs Terminology Refresh
    + JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in
    "try throwing in GET_BODY"
    + JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java
    intermittently failing with TestServer: start exception:
    java.io.IOException: Invalid preface
    + JDK-8255264: Support for identifying the full range of IPv4
    localhost addresses on Windows
    + JDK-8255716: AArch64: Regression: JVM crashes if manually
    offline a core
    + JDK-8255722: Create a new test for rotated blit
    + JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad
    + JDK-8256066: Tests use deprecated TestNG API that is no
    longer available in new versions
    + JDK-8256152: tests fail because of ambiguous method resolution
    + JDK-8256182: Update qemu-debootstrap cross-compilation recipe
    + JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/
    /FullscreenWindowProps.java failed
    + JDK-8256202: Some tweaks for jarsigner tests
    PosixPermissionsTest and SymLinkTest
    + JDK-8256372: [macos] Unexpected symbol was displayed on
    JTextField with Monospaced font
    + JDK-8256956: RegisterImpl::max_slots_per_register is
    incorrect on AMD64
    + JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with
    InvalidPathException on windows
    + JDK-8258855: Two tests sun/security/krb5/auto/
    /ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java
    failed on OL8.3
    + JDK-8259237: Demo selection changes with left/right arrow
    key. No need to press space for selection.
    + JDK-8260571: Add PrintMetaspaceStatistics to print metaspace
    statistics upon VM exit
    + JDK-8260690: JConsole User Guide Link from the Help menu is
    not accessible by keyboard
    + JDK-8261036: Reduce classes loaded by CleanerFactory
    initialization
    + JDK-8261071: AArch64: Refactor interpreter native wrappers
    + JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch
    implementation
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261297: NMT: Final report should use scale 1
    + JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java
    fails because Reserved memory size is too big
    + JDK-8261916: gtest/GTestWrapper.java
    vmErrorTest.unimplemented1_vm_assert failed
    + JDK-8262438: sun/security/ssl/SSLLogger/
    /LoggingFormatConsistency.java failed with "SocketException:
    Socket is closed"
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8262844: (fs) FileStore.supportsFileAttributeView might
    return false negative in case of ext3
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp
    + JDK-8263303: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8263362: Avoid division by 0 in
    java/awt/font/TextJustifier.java justify
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java
    failed with "java.lang.RuntimeException: Wrong method"
    + JDK-8264526: javax/swing/text/html/parser/Parser/8078268/
    /bug8078268.java timeout
    + JDK-8264824: java/net/Inet6Address/B6206527.java doesn't
    close ServerSocket properly
    + JDK-8265019: Update tests for additional TestNG test
    permissions
    + JDK-8265173: [test] divert spurious log output away from
    stream under test in ProcessBuilder Basic test
    + JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8266579: Update test/jdk/java/lang/ProcessHandle/
    /PermissionTest.java &amp; test/jdk/java/sql/testng/util/
    /TestPolicy.java
    + JDK-8266949: Check possibility to disable OperationTimedOut
    on Unix
    + JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg
    tests on many-core machines
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267304: Bump global JTReg memory limit to 768m
    + JDK-8267652: c2 loop unrolling by 8 results in reading memory
    past array
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268093: Manual Testcase: "sun/security/krb5/config/
    /native/TestDynamicStore.java" Fails with NPE
    + JDK-8268555: Update HttpClient tests that use ITestContext to
    jtreg 6+1
    + JDK-8268672: C2: assert(!loop-&gt;is_member(u_loop)) failed: can
    be in outer loop or out of both loops only
    + JDK-8269034: AccessControlException for SunPKCS11 daemon
    threads
    + JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to
    accessClassAndFindClass
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269768: JFR Terminology Refresh
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8269984: [macos] JTabbedPane title looks like  disabled
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270216: [macOS] Update named used for Java run loop mode
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270344: Session resumption errors
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1
    + JDK-8272181: Windows-AArch64:Backport fix of `Backtracing
    broken on PAC enabled systems`
    + JDK-8272316: Wrong Boot JDK help message in 11
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8272828: Add correct licenses to jszip.md
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java
    fails by timeout
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273541: Cleaner Thread creates with normal priority
    instead of MAX_PRIORITY - 2
    + JDK-8273547: [11u] [JVMCI] Partial module-info.java backport
    of JDK-8223332
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273671: Backport of 8260616 misses one JNF header
    inclusion removal
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273795: Zero SPARC64 debug builds fail due to missing
    interpreter fields
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274860: gcc 10.2.1 produces an uninitialized warning in
    sharedRuntimeTrig.cpp
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277815: Fix mistakes in legal header backports
- Removed patch:
  * riscv64-zero.patch
    + integrated upstream
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1644926400">- Update to upstream tag jdk-11.0.14.1+1
  * Changes:
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8281324: Bump update version for OpenJDK: jdk-11.0.14.1</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="1d31bf9b0874cb9ef33b900da6c89818eef20e57aa3fcec8d9059b553f4e86ac" name="java-11-openjdk-demo" arch="aarch64">
  <version epoch="0" ver="11.0.15.0" rel="150000.3.80.1"/>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643630400">- Update to upstream tag jdk-11.0.14+9 (January 2022 CPU)
  * New features
    + JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
  * Security fixes
    + JDK-8217375: jarsigner breaks old signature with long lines
    in manifest
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
    + JDK-8279541: Improve HarfBuzz
  * Other changes
    + JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/
    /ChoiceKeyEventReaction.html fails
    + JDK-7105119: [TEST_BUG] [macosx] In test
    UIDefaults.toString() must be called with the invokeLater()
    + JDK-7151826: [TEST_BUG] [macosx] The test
    javax/swing/JPopupMenu/4966112/bug4966112.java not for mac
    + JDK-7179006: [macosx] Print-to-file doesn't work: printing to
    the default printer instead
    + JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/
    /bug4726194.java fails on MacOSX
    + JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003 Wrong
    number of thread end events
    + JDK-8039261: [TEST_BUG]: There is not a minimal security
    level in Java Preferences and the TestApplet.html is blocked.
    + JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/
    /AltTabCrashTest.java fails with exception
    + JDK-8075909: [TEST_BUG] The regression-swing case failed as
    it does not have the 'Open' button when select 'subdir' folder
    with NimbusLAF
    + JDK-8078219: Verify lack of @test tag in files in java/net
    test directory
    + JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails
    with "RuntimeException: Process terminated prematurely"
    + JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java timed out intermittently
    + JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails
    intermittently
    + JDK-8131745: java/lang/management/ThreadMXBean/
    /AllThreadIds.java still fails intermittently
    + JDK-8136517: [macosx] Test java/awt/Focus/8073453/
    /AWTFocusTransitionTest.java fails on MacOSX
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/
    /Test6541987.java fails
    + JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/
    /bug4760494.java leaves key pressed
    + JDK-8159904: [TEST_BUG] Failure on solaris of
    java/awt/Window/MultiWindowApp/MultiWindowAppTest.java
    + JDK-8163086: java/awt/Window/TranslucentJAppletTest/
    /TranslucentJAppletTest.java fails
    + JDK-8165828: [TEST_BUG] The reg case: javax/swing/plaf/metal/
    /MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look
    and Feel
    + JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not
    fired! on Windows
    + JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException:
    Default button is not pressed
    + JDK-8169959: javax/swing/JTable/6263446/bug6263446.java:
    Table should be editing
    + JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/
    /7156657/bug7156657.java fails on OS X
    + JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails
    on Windows
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8179880: Refactor javax/security shell tests to plain
    java tests
    + JDK-8180568: Refactor javax/crypto shell tests to plain java
    tests
    + JDK-8180569: Refactor sun/security/krb5/ shell tests to plain
    java tests
    + JDK-8180571: Refactor sun/security/pkcs11 shell tests to
    plain java tests and fix failures
    + JDK-8180573: Refactor sun/security/tools shell tests to plain
    java tests
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8195703: BasicJDWPConnectionTest.java: 'App exited
    unexpectedly with 2'
    + JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java
    fails
    + JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java
    fails
    + JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/
    /NoEventsTest.java fails on Windows
    + JDK-8197811: Test java/awt/Choice/PopupPosTest/
    /PopupPosTest.java fails on Windows
    + JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java
    fails on mac
    + JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java
    fails on mac
    + JDK-8198619: java/awt/Focus/FocusTraversalPolicy/
    /ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java
    fails on mac
    + JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/
    /EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java
    fails on mac
    + JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/
    /SubMenuShowTest/SubMenuShowTest.html fails on mac
    + JDK-8199138: Add RISC-V support to Zero
    + JDK-8199529: javax/swing/text/Utilities/8142966/
    /SwingFontMetricsTest.java fails on windows
    + JDK-8201224: Make string buffer size dynamic in
    mlvmJvmtiUtils.c
    + JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/
    /FollowReferences/followref003/TestDescription.java fails with
    "Location mismatch" errors
    + JDK-8204161: [TESTBUG] auto failed with the "Applet thread
    threw exception: java.lang.UnsupportedOperationException"
    exception
    + JDK-8206085: Refactor
    langtools/tools/javac/versions/Versions.java
    + JDK-8207936: TestZipFile failed with java.lang.AssertionError
    exception
    + JDK-8208242: Add @requires to vmTestbase/gc/g1 tests
    + JDK-8209611: use C++ compiler for hotspot tests
    + JDK-8210182: Remove macros for C compilation from vmTestBase
    but non jvmti
    + JDK-8210198: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[A-F] tests
    + JDK-8210205: build fails on AIX in hotspot cpp tests (for
    example getstacktr001.cpp)
    + JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/
    /jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION
    on windows-x86
    + JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java
    back to tier1
    + JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[A-N] tests
    + JDK-8210392: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8210395: Add doc to SecurityTools.java
    + JDK-8210429: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[G-Z] tests
    + JDK-8210481: Remove #ifdef cplusplus from vmTestbase
    + JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[N-R] tests
    + JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[R-U] tests
    + JDK-8210689: Remove the multi-line old C style for string
    literals
    + JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti/unit tests
    + JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665
    + JDK-8210920: Native C++ tests are not using CXXFLAGS
    + JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR:
    hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti,
    thread)"
    + JDK-8211036: Remove the NSK_STUB macros from vmTestbase for
    non jvmti
    + JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[G-I]*
    + JDK-8211148: var in implicit lambdas shouldn't be accepted
    for source &lt; 11
    + JDK-8211171: move JarUtils to top-level testlibrary
    + JDK-8211227: Inconsistent TLS protocol version in debug output
    + JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[A-G]*
    + JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp
    + JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[I-S]*
    + JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[A-E]
    + JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[E-M]
    + JDK-8211905: Remove multiple casts for EM06 file
    + JDK-8211999: Window positioning bugs due to overlapping
    GraphicsDevice bounds (Windows/HiDPI)
    + JDK-8212082: Remove the NSK_CPP_STUB macros for remaining
    vmTestbase/jvmti/[sS]*
    + JDK-8212083: Handle remaining gc/lock native code and fix two
    strings
    + JDK-8212148: Remove remaining NSK_CPP_STUBs
    + JDK-8213110: Remove the use of applets in automatic tests
    + JDK-8213189: Make restricted headers in HTTP Client
    configurable and remove Date by default
    + JDK-8213263: fix legal headers in test/langtools
    + JDK-8213296: Fix legal headers in test/jdk/java/net
    + JDK-8213301: Fix legal headers in jdk logging tests
    + JDK-8213305: Fix legal headers in test/java/math
    + JDK-8213306: Fix legal headers in test/java/nio
    + JDK-8213328: Update test copyrights in test/java/util/zip and
    test/jdk/tools
    + JDK-8213330: Fix legal headers in i18n tests
    + JDK-8213707: [TEST] vmTestbase/nsk/stress/except/
    /except011.java failed due to wrong class name
    + JDK-8214469: [macos] PIT: java/awt/Choice/
    /ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails
    + JDK-8215410: Regression test for JDK-8214994
    + JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher
    + JDK-8215624: Add parallel heap iteration for jmap \u2013histo
    + JDK-8215889: assert(!_unloading) failed: This oop is not
    available to unloading class loader data with ZGC
    + JDK-8216318: The usage of Disposer in the java.awt.Robot can
    be deleted
    + JDK-8216417: cleanup of IPv6 scope-id handling
    + JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java
    failed with UnsupportedOperation exception
    + JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX
    + JDK-8217633: Configurable extensions with system properties
    + JDK-8217882: java/net/httpclient/MaxStreams.java failed once
    + JDK-8217903: java/net/httpclient/Response204.java fails with
    404
    + JDK-8218483: Crash in
    "assert(_daemon_threads_count-&gt;get_value() &gt; daemon_count)
    failed: thread count mismatch 5 : 5"
    + JDK-8219986: Change to Xcode 10.1 for building on Macosx at
    Oracle
    + JDK-8220575: Correctly format test URI's that contain a
    retrieved IPv6 address
    + JDK-8221259: New tests for java.net.Socket to exercise long
    standing behavior
    + JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails
    on MacOS + Solaris
    + JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/
    /FocusTraversal.java fails on ubuntu
    + JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/
    /IconifyTest.java fails on ubuntu18.04
    + JDK-8222446: assert(C-&gt;env()-&gt;system_dictionary_modification_counter_changed())
    failed: Must invalidate if TypeFuncs differ
    + JDK-8223137: Rename predicate 'do_unroll_only()' to
    'is_unroll_only()'.
    + JDK-8223138: Small clean-up in loop-tree support.
    + JDK-8223139: Rename mandatory policy-do routines.
    + JDK-8223140: Clean-up in 'ok_to_convert()'
    + JDK-8223141: Change (count) suffix _ct into _cnt.
    + JDK-8223400: Replace some enums with static const members in
    hotspot/runtime
    + JDK-8223658: Performance regression of XML.validation in
    13-b19
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8224829: AsyncSSLSocketClose.java has timing issue
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226514: Replace wildcard address with loopback or local
    host in tests - part 17
    + JDK-8226943: compile error in libfollowref003.cpp  with XCode
    10.2 on macosx
    + JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed
    due to "SSLException: An established connection was aborted by
    the software in your host machine"
    + JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java
    fails on Windows7
    + JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently
    positions text
    + JDK-8230019: [REDO] compiler/types/correctness/* tests fail
    with "assert(recv == __null || recv-&gt;is_klass()) failed: wrong
    type"
    + JDK-8230067: Add optional automatic retry when running jtreg
    tests
    + JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests
    may fail on some platforms
    + JDK-8231501: VM crash in
    MethodData::clean_extra_data(CleanExtraDataClosure*):
    fatal error: unexpected tag 99
    + JDK-8233403: Improve verbosity of some httpclient tests
    + JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS
    + JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on
    MacOS
    + JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on
    MacOS
    + JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS
    + JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS
    + JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on
    macos
    + JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java  is
    failing on macos
    + JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails
    on macos
    + JDK-8233562: [TESTBUG] Swing StyledEditorKit test
    bug4506788.java fails on MacOS
    + JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing
    + JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on
    MacoS
    + JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos
    + JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java
    fails on macos
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails
    on macos
    + JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java
    fails on macos
    + JDK-8233637: [TESTBUG] Swing
    ActionListenerCalledTwiceTest.java fails on macos
    + JDK-8233638: [TESTBUG] Swing test
    ScreenMenuBarInputTwice.java fails on macos
    + JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails
    on macos
    + JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java  fails
    on macos
    + JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on
    macos
    + JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is
    failing on macos
    + JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is
    failing on macos
    + JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture
    Recognition in all the platforms
    + JDK-8234823: java/net/Socket/Timeouts.java testcase
    testTimedConnect2() fails on Windows 10
    + JDK-8235784: java/lang/invoke/VarHandles/
    /VarHandleTestByteArrayAsInt.java fails due to timeout with
    fastdebug bits
    + JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -Xcomp -XX:TieredStopAtLevel=1
    + JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60),
    cond_wait
    + JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT,
    when using proxy tunnel
    + JDK-8237354: Add option to jcmd to write a gzipped heap dump
    + JDK-8237589: Fix copyright header formatting
    + JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java
    should not specify TLS version
    + JDK-8239334: Tab Size does not work correctly in JTextArea
    with setLineWrap on
    + JDK-8239422: [TESTBUG]
    compiler/c1/TestPrintIRDuringConstruction.java failed when C1
    is disabled
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240256: Better resource cleaning for SunPKCS11 Provider
    + JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test
    Server
    + JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/
    /bug8020708.java fails in mach5 ubuntu system
    + JDK-8242793: Incorrect copyright header in
    ContinuousCallSiteTargetChange.java
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244292: Headful clients failing with
  - -illegal-access=deny
    + JDK-8245147: Refactor and improve utility of
    test/langtools/tools/javac/versions/Versions.java
    + JDK-8245165: Update bug id for
    javax/swing/text/StyledEditorKit/4506788/bug4506788.java in
    ProblemList
    + JDK-8245665: Test WeakAlg.java should only make sure no
    warning for weak signature algorithms by keytool on root CA
    + JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails
    after 8241072 (multi-homed systems)
    + JDK-8246807: Incorrect copyright header in
    TimeZoneDatePermissionCheck.sh
    + JDK-8247403: JShell: No custom input (e.g. from GUI) possible
    with JavaShellToolBuilder
    + JDK-8247510: typo in IllegalHandshakeMessage
    + JDK-8248187: [TESTBUG] javax/swing/plaf/basic/
    /BasicGraphicsUtils/8132119/bug8132119.java fails with String
    is not properly drawn
    + JDK-8248341: ProblemList java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java
    + JDK-8248500: AArch64: Remove the r18 dependency on Windows
    AArch64
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8249195: Change to Xcode 11.3.1 for building on Macos at
    Oracle
    + JDK-8250521: Configure initial RTO to use minimal retry for
    loopback connections on Windows
    + JDK-8250810: Push missing parts of JDK-8248817
    + JDK-8250839: Improve test template SSLEngineTemplate with
    SSLContextTemplate
    + JDK-8250863: Build error with GCC 10 in NetworkInterface.c
    and k_standard.c
    + JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/
    /gf08t001/TestDriver.java fails
    + JDK-8251155: HostIdentifier fails to canonicalize hostnames
    starting with digits
    + JDK-8251377: [macos11] JTabbedPane selected tab text is
    barely legible
    + JDK-8251570: JDK-8215624 causes assert(worker_id &lt;
    _n_workers) failed: Invalid worker_id
    + JDK-8251930: AArch64: Native types mismatch in hotspot
    + JDK-8252049: Native memory leak in ciMethodData ctor
    + JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x
    friendly
    + JDK-8252114: Windows-AArch64: Enable and test ZGC and
    ShenandoahGC
    + JDK-8253015: Aarch64: Move linux code out from generic CPU
    feature detection
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java
    fail on big screens
    + JDK-8253497: Core Libs Terminology Refresh
    + JDK-8253682: The AppletInitialFocusTest1.java is unstable
    + JDK-8253763: ParallelObjectIterator should have virtual
    destructor
    + JDK-8253866: Security Libs Terminology Refresh
    + JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in
    "try throwing in GET_BODY"
    + JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java
    intermittently failing with TestServer: start exception:
    java.io.IOException: Invalid preface
    + JDK-8255264: Support for identifying the full range of IPv4
    localhost addresses on Windows
    + JDK-8255716: AArch64: Regression: JVM crashes if manually
    offline a core
    + JDK-8255722: Create a new test for rotated blit
    + JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad
    + JDK-8256066: Tests use deprecated TestNG API that is no
    longer available in new versions
    + JDK-8256152: tests fail because of ambiguous method resolution
    + JDK-8256182: Update qemu-debootstrap cross-compilation recipe
    + JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/
    /FullscreenWindowProps.java failed
    + JDK-8256202: Some tweaks for jarsigner tests
    PosixPermissionsTest and SymLinkTest
    + JDK-8256372: [macos] Unexpected symbol was displayed on
    JTextField with Monospaced font
    + JDK-8256956: RegisterImpl::max_slots_per_register is
    incorrect on AMD64
    + JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with
    InvalidPathException on windows
    + JDK-8258855: Two tests sun/security/krb5/auto/
    /ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java
    failed on OL8.3
    + JDK-8259237: Demo selection changes with left/right arrow
    key. No need to press space for selection.
    + JDK-8260571: Add PrintMetaspaceStatistics to print metaspace
    statistics upon VM exit
    + JDK-8260690: JConsole User Guide Link from the Help menu is
    not accessible by keyboard
    + JDK-8261036: Reduce classes loaded by CleanerFactory
    initialization
    + JDK-8261071: AArch64: Refactor interpreter native wrappers
    + JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch
    implementation
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261297: NMT: Final report should use scale 1
    + JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java
    fails because Reserved memory size is too big
    + JDK-8261916: gtest/GTestWrapper.java
    vmErrorTest.unimplemented1_vm_assert failed
    + JDK-8262438: sun/security/ssl/SSLLogger/
    /LoggingFormatConsistency.java failed with "SocketException:
    Socket is closed"
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8262844: (fs) FileStore.supportsFileAttributeView might
    return false negative in case of ext3
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp
    + JDK-8263303: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8263362: Avoid division by 0 in
    java/awt/font/TextJustifier.java justify
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java
    failed with "java.lang.RuntimeException: Wrong method"
    + JDK-8264526: javax/swing/text/html/parser/Parser/8078268/
    /bug8078268.java timeout
    + JDK-8264824: java/net/Inet6Address/B6206527.java doesn't
    close ServerSocket properly
    + JDK-8265019: Update tests for additional TestNG test
    permissions
    + JDK-8265173: [test] divert spurious log output away from
    stream under test in ProcessBuilder Basic test
    + JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8266579: Update test/jdk/java/lang/ProcessHandle/
    /PermissionTest.java &amp; test/jdk/java/sql/testng/util/
    /TestPolicy.java
    + JDK-8266949: Check possibility to disable OperationTimedOut
    on Unix
    + JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg
    tests on many-core machines
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267304: Bump global JTReg memory limit to 768m
    + JDK-8267652: c2 loop unrolling by 8 results in reading memory
    past array
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268093: Manual Testcase: "sun/security/krb5/config/
    /native/TestDynamicStore.java" Fails with NPE
    + JDK-8268555: Update HttpClient tests that use ITestContext to
    jtreg 6+1
    + JDK-8268672: C2: assert(!loop-&gt;is_member(u_loop)) failed: can
    be in outer loop or out of both loops only
    + JDK-8269034: AccessControlException for SunPKCS11 daemon
    threads
    + JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to
    accessClassAndFindClass
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269768: JFR Terminology Refresh
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8269984: [macos] JTabbedPane title looks like  disabled
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270216: [macOS] Update named used for Java run loop mode
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270344: Session resumption errors
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1
    + JDK-8272181: Windows-AArch64:Backport fix of `Backtracing
    broken on PAC enabled systems`
    + JDK-8272316: Wrong Boot JDK help message in 11
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8272828: Add correct licenses to jszip.md
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java
    fails by timeout
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273541: Cleaner Thread creates with normal priority
    instead of MAX_PRIORITY - 2
    + JDK-8273547: [11u] [JVMCI] Partial module-info.java backport
    of JDK-8223332
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273671: Backport of 8260616 misses one JNF header
    inclusion removal
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273795: Zero SPARC64 debug builds fail due to missing
    interpreter fields
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274860: gcc 10.2.1 produces an uninitialized warning in
    sharedRuntimeTrig.cpp
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277815: Fix mistakes in legal header backports
- Removed patch:
  * riscv64-zero.patch
    + integrated upstream
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1644926400">- Update to upstream tag jdk-11.0.14.1+1
  * Changes:
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8281324: Bump update version for OpenJDK: jdk-11.0.14.1</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="d24d741b3310f83a92ec40c2cee71ed793ded59e1252ae3b025c2fdc16c467ea" name="java-11-openjdk-demo" arch="ppc64le">
  <version epoch="0" ver="11.0.15.0" rel="150000.3.80.1"/>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643630400">- Update to upstream tag jdk-11.0.14+9 (January 2022 CPU)
  * New features
    + JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
  * Security fixes
    + JDK-8217375: jarsigner breaks old signature with long lines
    in manifest
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
    + JDK-8279541: Improve HarfBuzz
  * Other changes
    + JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/
    /ChoiceKeyEventReaction.html fails
    + JDK-7105119: [TEST_BUG] [macosx] In test
    UIDefaults.toString() must be called with the invokeLater()
    + JDK-7151826: [TEST_BUG] [macosx] The test
    javax/swing/JPopupMenu/4966112/bug4966112.java not for mac
    + JDK-7179006: [macosx] Print-to-file doesn't work: printing to
    the default printer instead
    + JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/
    /bug4726194.java fails on MacOSX
    + JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003 Wrong
    number of thread end events
    + JDK-8039261: [TEST_BUG]: There is not a minimal security
    level in Java Preferences and the TestApplet.html is blocked.
    + JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/
    /AltTabCrashTest.java fails with exception
    + JDK-8075909: [TEST_BUG] The regression-swing case failed as
    it does not have the 'Open' button when select 'subdir' folder
    with NimbusLAF
    + JDK-8078219: Verify lack of @test tag in files in java/net
    test directory
    + JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails
    with "RuntimeException: Process terminated prematurely"
    + JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java timed out intermittently
    + JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails
    intermittently
    + JDK-8131745: java/lang/management/ThreadMXBean/
    /AllThreadIds.java still fails intermittently
    + JDK-8136517: [macosx] Test java/awt/Focus/8073453/
    /AWTFocusTransitionTest.java fails on MacOSX
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/
    /Test6541987.java fails
    + JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/
    /bug4760494.java leaves key pressed
    + JDK-8159904: [TEST_BUG] Failure on solaris of
    java/awt/Window/MultiWindowApp/MultiWindowAppTest.java
    + JDK-8163086: java/awt/Window/TranslucentJAppletTest/
    /TranslucentJAppletTest.java fails
    + JDK-8165828: [TEST_BUG] The reg case: javax/swing/plaf/metal/
    /MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look
    and Feel
    + JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not
    fired! on Windows
    + JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException:
    Default button is not pressed
    + JDK-8169959: javax/swing/JTable/6263446/bug6263446.java:
    Table should be editing
    + JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/
    /7156657/bug7156657.java fails on OS X
    + JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails
    on Windows
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8179880: Refactor javax/security shell tests to plain
    java tests
    + JDK-8180568: Refactor javax/crypto shell tests to plain java
    tests
    + JDK-8180569: Refactor sun/security/krb5/ shell tests to plain
    java tests
    + JDK-8180571: Refactor sun/security/pkcs11 shell tests to
    plain java tests and fix failures
    + JDK-8180573: Refactor sun/security/tools shell tests to plain
    java tests
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8195703: BasicJDWPConnectionTest.java: 'App exited
    unexpectedly with 2'
    + JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java
    fails
    + JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java
    fails
    + JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/
    /NoEventsTest.java fails on Windows
    + JDK-8197811: Test java/awt/Choice/PopupPosTest/
    /PopupPosTest.java fails on Windows
    + JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java
    fails on mac
    + JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java
    fails on mac
    + JDK-8198619: java/awt/Focus/FocusTraversalPolicy/
    /ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java
    fails on mac
    + JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/
    /EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java
    fails on mac
    + JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/
    /SubMenuShowTest/SubMenuShowTest.html fails on mac
    + JDK-8199138: Add RISC-V support to Zero
    + JDK-8199529: javax/swing/text/Utilities/8142966/
    /SwingFontMetricsTest.java fails on windows
    + JDK-8201224: Make string buffer size dynamic in
    mlvmJvmtiUtils.c
    + JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/
    /FollowReferences/followref003/TestDescription.java fails with
    "Location mismatch" errors
    + JDK-8204161: [TESTBUG] auto failed with the "Applet thread
    threw exception: java.lang.UnsupportedOperationException"
    exception
    + JDK-8206085: Refactor
    langtools/tools/javac/versions/Versions.java
    + JDK-8207936: TestZipFile failed with java.lang.AssertionError
    exception
    + JDK-8208242: Add @requires to vmTestbase/gc/g1 tests
    + JDK-8209611: use C++ compiler for hotspot tests
    + JDK-8210182: Remove macros for C compilation from vmTestBase
    but non jvmti
    + JDK-8210198: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[A-F] tests
    + JDK-8210205: build fails on AIX in hotspot cpp tests (for
    example getstacktr001.cpp)
    + JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/
    /jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION
    on windows-x86
    + JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java
    back to tier1
    + JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[A-N] tests
    + JDK-8210392: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8210395: Add doc to SecurityTools.java
    + JDK-8210429: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[G-Z] tests
    + JDK-8210481: Remove #ifdef cplusplus from vmTestbase
    + JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[N-R] tests
    + JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[R-U] tests
    + JDK-8210689: Remove the multi-line old C style for string
    literals
    + JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti/unit tests
    + JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665
    + JDK-8210920: Native C++ tests are not using CXXFLAGS
    + JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR:
    hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti,
    thread)"
    + JDK-8211036: Remove the NSK_STUB macros from vmTestbase for
    non jvmti
    + JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[G-I]*
    + JDK-8211148: var in implicit lambdas shouldn't be accepted
    for source &lt; 11
    + JDK-8211171: move JarUtils to top-level testlibrary
    + JDK-8211227: Inconsistent TLS protocol version in debug output
    + JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[A-G]*
    + JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp
    + JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[I-S]*
    + JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[A-E]
    + JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[E-M]
    + JDK-8211905: Remove multiple casts for EM06 file
    + JDK-8211999: Window positioning bugs due to overlapping
    GraphicsDevice bounds (Windows/HiDPI)
    + JDK-8212082: Remove the NSK_CPP_STUB macros for remaining
    vmTestbase/jvmti/[sS]*
    + JDK-8212083: Handle remaining gc/lock native code and fix two
    strings
    + JDK-8212148: Remove remaining NSK_CPP_STUBs
    + JDK-8213110: Remove the use of applets in automatic tests
    + JDK-8213189: Make restricted headers in HTTP Client
    configurable and remove Date by default
    + JDK-8213263: fix legal headers in test/langtools
    + JDK-8213296: Fix legal headers in test/jdk/java/net
    + JDK-8213301: Fix legal headers in jdk logging tests
    + JDK-8213305: Fix legal headers in test/java/math
    + JDK-8213306: Fix legal headers in test/java/nio
    + JDK-8213328: Update test copyrights in test/java/util/zip and
    test/jdk/tools
    + JDK-8213330: Fix legal headers in i18n tests
    + JDK-8213707: [TEST] vmTestbase/nsk/stress/except/
    /except011.java failed due to wrong class name
    + JDK-8214469: [macos] PIT: java/awt/Choice/
    /ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails
    + JDK-8215410: Regression test for JDK-8214994
    + JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher
    + JDK-8215624: Add parallel heap iteration for jmap \u2013histo
    + JDK-8215889: assert(!_unloading) failed: This oop is not
    available to unloading class loader data with ZGC
    + JDK-8216318: The usage of Disposer in the java.awt.Robot can
    be deleted
    + JDK-8216417: cleanup of IPv6 scope-id handling
    + JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java
    failed with UnsupportedOperation exception
    + JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX
    + JDK-8217633: Configurable extensions with system properties
    + JDK-8217882: java/net/httpclient/MaxStreams.java failed once
    + JDK-8217903: java/net/httpclient/Response204.java fails with
    404
    + JDK-8218483: Crash in
    "assert(_daemon_threads_count-&gt;get_value() &gt; daemon_count)
    failed: thread count mismatch 5 : 5"
    + JDK-8219986: Change to Xcode 10.1 for building on Macosx at
    Oracle
    + JDK-8220575: Correctly format test URI's that contain a
    retrieved IPv6 address
    + JDK-8221259: New tests for java.net.Socket to exercise long
    standing behavior
    + JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails
    on MacOS + Solaris
    + JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/
    /FocusTraversal.java fails on ubuntu
    + JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/
    /IconifyTest.java fails on ubuntu18.04
    + JDK-8222446: assert(C-&gt;env()-&gt;system_dictionary_modification_counter_changed())
    failed: Must invalidate if TypeFuncs differ
    + JDK-8223137: Rename predicate 'do_unroll_only()' to
    'is_unroll_only()'.
    + JDK-8223138: Small clean-up in loop-tree support.
    + JDK-8223139: Rename mandatory policy-do routines.
    + JDK-8223140: Clean-up in 'ok_to_convert()'
    + JDK-8223141: Change (count) suffix _ct into _cnt.
    + JDK-8223400: Replace some enums with static const members in
    hotspot/runtime
    + JDK-8223658: Performance regression of XML.validation in
    13-b19
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8224829: AsyncSSLSocketClose.java has timing issue
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226514: Replace wildcard address with loopback or local
    host in tests - part 17
    + JDK-8226943: compile error in libfollowref003.cpp  with XCode
    10.2 on macosx
    + JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed
    due to "SSLException: An established connection was aborted by
    the software in your host machine"
    + JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java
    fails on Windows7
    + JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently
    positions text
    + JDK-8230019: [REDO] compiler/types/correctness/* tests fail
    with "assert(recv == __null || recv-&gt;is_klass()) failed: wrong
    type"
    + JDK-8230067: Add optional automatic retry when running jtreg
    tests
    + JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests
    may fail on some platforms
    + JDK-8231501: VM crash in
    MethodData::clean_extra_data(CleanExtraDataClosure*):
    fatal error: unexpected tag 99
    + JDK-8233403: Improve verbosity of some httpclient tests
    + JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS
    + JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on
    MacOS
    + JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on
    MacOS
    + JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS
    + JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS
    + JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on
    macos
    + JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java  is
    failing on macos
    + JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails
    on macos
    + JDK-8233562: [TESTBUG] Swing StyledEditorKit test
    bug4506788.java fails on MacOS
    + JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing
    + JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on
    MacoS
    + JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos
    + JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java
    fails on macos
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails
    on macos
    + JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java
    fails on macos
    + JDK-8233637: [TESTBUG] Swing
    ActionListenerCalledTwiceTest.java fails on macos
    + JDK-8233638: [TESTBUG] Swing test
    ScreenMenuBarInputTwice.java fails on macos
    + JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails
    on macos
    + JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java  fails
    on macos
    + JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on
    macos
    + JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is
    failing on macos
    + JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is
    failing on macos
    + JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture
    Recognition in all the platforms
    + JDK-8234823: java/net/Socket/Timeouts.java testcase
    testTimedConnect2() fails on Windows 10
    + JDK-8235784: java/lang/invoke/VarHandles/
    /VarHandleTestByteArrayAsInt.java fails due to timeout with
    fastdebug bits
    + JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -Xcomp -XX:TieredStopAtLevel=1
    + JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60),
    cond_wait
    + JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT,
    when using proxy tunnel
    + JDK-8237354: Add option to jcmd to write a gzipped heap dump
    + JDK-8237589: Fix copyright header formatting
    + JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java
    should not specify TLS version
    + JDK-8239334: Tab Size does not work correctly in JTextArea
    with setLineWrap on
    + JDK-8239422: [TESTBUG]
    compiler/c1/TestPrintIRDuringConstruction.java failed when C1
    is disabled
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240256: Better resource cleaning for SunPKCS11 Provider
    + JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test
    Server
    + JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/
    /bug8020708.java fails in mach5 ubuntu system
    + JDK-8242793: Incorrect copyright header in
    ContinuousCallSiteTargetChange.java
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244292: Headful clients failing with
  - -illegal-access=deny
    + JDK-8245147: Refactor and improve utility of
    test/langtools/tools/javac/versions/Versions.java
    + JDK-8245165: Update bug id for
    javax/swing/text/StyledEditorKit/4506788/bug4506788.java in
    ProblemList
    + JDK-8245665: Test WeakAlg.java should only make sure no
    warning for weak signature algorithms by keytool on root CA
    + JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails
    after 8241072 (multi-homed systems)
    + JDK-8246807: Incorrect copyright header in
    TimeZoneDatePermissionCheck.sh
    + JDK-8247403: JShell: No custom input (e.g. from GUI) possible
    with JavaShellToolBuilder
    + JDK-8247510: typo in IllegalHandshakeMessage
    + JDK-8248187: [TESTBUG] javax/swing/plaf/basic/
    /BasicGraphicsUtils/8132119/bug8132119.java fails with String
    is not properly drawn
    + JDK-8248341: ProblemList java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java
    + JDK-8248500: AArch64: Remove the r18 dependency on Windows
    AArch64
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8249195: Change to Xcode 11.3.1 for building on Macos at
    Oracle
    + JDK-8250521: Configure initial RTO to use minimal retry for
    loopback connections on Windows
    + JDK-8250810: Push missing parts of JDK-8248817
    + JDK-8250839: Improve test template SSLEngineTemplate with
    SSLContextTemplate
    + JDK-8250863: Build error with GCC 10 in NetworkInterface.c
    and k_standard.c
    + JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/
    /gf08t001/TestDriver.java fails
    + JDK-8251155: HostIdentifier fails to canonicalize hostnames
    starting with digits
    + JDK-8251377: [macos11] JTabbedPane selected tab text is
    barely legible
    + JDK-8251570: JDK-8215624 causes assert(worker_id &lt;
    _n_workers) failed: Invalid worker_id
    + JDK-8251930: AArch64: Native types mismatch in hotspot
    + JDK-8252049: Native memory leak in ciMethodData ctor
    + JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x
    friendly
    + JDK-8252114: Windows-AArch64: Enable and test ZGC and
    ShenandoahGC
    + JDK-8253015: Aarch64: Move linux code out from generic CPU
    feature detection
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java
    fail on big screens
    + JDK-8253497: Core Libs Terminology Refresh
    + JDK-8253682: The AppletInitialFocusTest1.java is unstable
    + JDK-8253763: ParallelObjectIterator should have virtual
    destructor
    + JDK-8253866: Security Libs Terminology Refresh
    + JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in
    "try throwing in GET_BODY"
    + JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java
    intermittently failing with TestServer: start exception:
    java.io.IOException: Invalid preface
    + JDK-8255264: Support for identifying the full range of IPv4
    localhost addresses on Windows
    + JDK-8255716: AArch64: Regression: JVM crashes if manually
    offline a core
    + JDK-8255722: Create a new test for rotated blit
    + JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad
    + JDK-8256066: Tests use deprecated TestNG API that is no
    longer available in new versions
    + JDK-8256152: tests fail because of ambiguous method resolution
    + JDK-8256182: Update qemu-debootstrap cross-compilation recipe
    + JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/
    /FullscreenWindowProps.java failed
    + JDK-8256202: Some tweaks for jarsigner tests
    PosixPermissionsTest and SymLinkTest
    + JDK-8256372: [macos] Unexpected symbol was displayed on
    JTextField with Monospaced font
    + JDK-8256956: RegisterImpl::max_slots_per_register is
    incorrect on AMD64
    + JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with
    InvalidPathException on windows
    + JDK-8258855: Two tests sun/security/krb5/auto/
    /ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java
    failed on OL8.3
    + JDK-8259237: Demo selection changes with left/right arrow
    key. No need to press space for selection.
    + JDK-8260571: Add PrintMetaspaceStatistics to print metaspace
    statistics upon VM exit
    + JDK-8260690: JConsole User Guide Link from the Help menu is
    not accessible by keyboard
    + JDK-8261036: Reduce classes loaded by CleanerFactory
    initialization
    + JDK-8261071: AArch64: Refactor interpreter native wrappers
    + JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch
    implementation
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261297: NMT: Final report should use scale 1
    + JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java
    fails because Reserved memory size is too big
    + JDK-8261916: gtest/GTestWrapper.java
    vmErrorTest.unimplemented1_vm_assert failed
    + JDK-8262438: sun/security/ssl/SSLLogger/
    /LoggingFormatConsistency.java failed with "SocketException:
    Socket is closed"
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8262844: (fs) FileStore.supportsFileAttributeView might
    return false negative in case of ext3
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp
    + JDK-8263303: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8263362: Avoid division by 0 in
    java/awt/font/TextJustifier.java justify
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java
    failed with "java.lang.RuntimeException: Wrong method"
    + JDK-8264526: javax/swing/text/html/parser/Parser/8078268/
    /bug8078268.java timeout
    + JDK-8264824: java/net/Inet6Address/B6206527.java doesn't
    close ServerSocket properly
    + JDK-8265019: Update tests for additional TestNG test
    permissions
    + JDK-8265173: [test] divert spurious log output away from
    stream under test in ProcessBuilder Basic test
    + JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8266579: Update test/jdk/java/lang/ProcessHandle/
    /PermissionTest.java &amp; test/jdk/java/sql/testng/util/
    /TestPolicy.java
    + JDK-8266949: Check possibility to disable OperationTimedOut
    on Unix
    + JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg
    tests on many-core machines
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267304: Bump global JTReg memory limit to 768m
    + JDK-8267652: c2 loop unrolling by 8 results in reading memory
    past array
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268093: Manual Testcase: "sun/security/krb5/config/
    /native/TestDynamicStore.java" Fails with NPE
    + JDK-8268555: Update HttpClient tests that use ITestContext to
    jtreg 6+1
    + JDK-8268672: C2: assert(!loop-&gt;is_member(u_loop)) failed: can
    be in outer loop or out of both loops only
    + JDK-8269034: AccessControlException for SunPKCS11 daemon
    threads
    + JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to
    accessClassAndFindClass
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269768: JFR Terminology Refresh
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8269984: [macos] JTabbedPane title looks like  disabled
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270216: [macOS] Update named used for Java run loop mode
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270344: Session resumption errors
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1
    + JDK-8272181: Windows-AArch64:Backport fix of `Backtracing
    broken on PAC enabled systems`
    + JDK-8272316: Wrong Boot JDK help message in 11
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8272828: Add correct licenses to jszip.md
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java
    fails by timeout
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273541: Cleaner Thread creates with normal priority
    instead of MAX_PRIORITY - 2
    + JDK-8273547: [11u] [JVMCI] Partial module-info.java backport
    of JDK-8223332
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273671: Backport of 8260616 misses one JNF header
    inclusion removal
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273795: Zero SPARC64 debug builds fail due to missing
    interpreter fields
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274860: gcc 10.2.1 produces an uninitialized warning in
    sharedRuntimeTrig.cpp
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277815: Fix mistakes in legal header backports
- Removed patch:
  * riscv64-zero.patch
    + integrated upstream
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1644926400">- Update to upstream tag jdk-11.0.14.1+1
  * Changes:
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8281324: Bump update version for OpenJDK: jdk-11.0.14.1</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="0e8e16ce041831d2766a15f5cc79f2bb13717961d290b9c6a7b3b38401d83add" name="java-11-openjdk-demo" arch="s390x">
  <version epoch="0" ver="11.0.15.0" rel="150000.3.80.1"/>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643630400">- Update to upstream tag jdk-11.0.14+9 (January 2022 CPU)
  * New features
    + JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
  * Security fixes
    + JDK-8217375: jarsigner breaks old signature with long lines
    in manifest
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
    + JDK-8279541: Improve HarfBuzz
  * Other changes
    + JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/
    /ChoiceKeyEventReaction.html fails
    + JDK-7105119: [TEST_BUG] [macosx] In test
    UIDefaults.toString() must be called with the invokeLater()
    + JDK-7151826: [TEST_BUG] [macosx] The test
    javax/swing/JPopupMenu/4966112/bug4966112.java not for mac
    + JDK-7179006: [macosx] Print-to-file doesn't work: printing to
    the default printer instead
    + JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/
    /bug4726194.java fails on MacOSX
    + JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003 Wrong
    number of thread end events
    + JDK-8039261: [TEST_BUG]: There is not a minimal security
    level in Java Preferences and the TestApplet.html is blocked.
    + JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/
    /AltTabCrashTest.java fails with exception
    + JDK-8075909: [TEST_BUG] The regression-swing case failed as
    it does not have the 'Open' button when select 'subdir' folder
    with NimbusLAF
    + JDK-8078219: Verify lack of @test tag in files in java/net
    test directory
    + JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails
    with "RuntimeException: Process terminated prematurely"
    + JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java timed out intermittently
    + JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails
    intermittently
    + JDK-8131745: java/lang/management/ThreadMXBean/
    /AllThreadIds.java still fails intermittently
    + JDK-8136517: [macosx] Test java/awt/Focus/8073453/
    /AWTFocusTransitionTest.java fails on MacOSX
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/
    /Test6541987.java fails
    + JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/
    /bug4760494.java leaves key pressed
    + JDK-8159904: [TEST_BUG] Failure on solaris of
    java/awt/Window/MultiWindowApp/MultiWindowAppTest.java
    + JDK-8163086: java/awt/Window/TranslucentJAppletTest/
    /TranslucentJAppletTest.java fails
    + JDK-8165828: [TEST_BUG] The reg case: javax/swing/plaf/metal/
    /MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look
    and Feel
    + JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not
    fired! on Windows
    + JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException:
    Default button is not pressed
    + JDK-8169959: javax/swing/JTable/6263446/bug6263446.java:
    Table should be editing
    + JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/
    /7156657/bug7156657.java fails on OS X
    + JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails
    on Windows
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8179880: Refactor javax/security shell tests to plain
    java tests
    + JDK-8180568: Refactor javax/crypto shell tests to plain java
    tests
    + JDK-8180569: Refactor sun/security/krb5/ shell tests to plain
    java tests
    + JDK-8180571: Refactor sun/security/pkcs11 shell tests to
    plain java tests and fix failures
    + JDK-8180573: Refactor sun/security/tools shell tests to plain
    java tests
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8195703: BasicJDWPConnectionTest.java: 'App exited
    unexpectedly with 2'
    + JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java
    fails
    + JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java
    fails
    + JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/
    /NoEventsTest.java fails on Windows
    + JDK-8197811: Test java/awt/Choice/PopupPosTest/
    /PopupPosTest.java fails on Windows
    + JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java
    fails on mac
    + JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java
    fails on mac
    + JDK-8198619: java/awt/Focus/FocusTraversalPolicy/
    /ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java
    fails on mac
    + JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/
    /EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java
    fails on mac
    + JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/
    /SubMenuShowTest/SubMenuShowTest.html fails on mac
    + JDK-8199138: Add RISC-V support to Zero
    + JDK-8199529: javax/swing/text/Utilities/8142966/
    /SwingFontMetricsTest.java fails on windows
    + JDK-8201224: Make string buffer size dynamic in
    mlvmJvmtiUtils.c
    + JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/
    /FollowReferences/followref003/TestDescription.java fails with
    "Location mismatch" errors
    + JDK-8204161: [TESTBUG] auto failed with the "Applet thread
    threw exception: java.lang.UnsupportedOperationException"
    exception
    + JDK-8206085: Refactor
    langtools/tools/javac/versions/Versions.java
    + JDK-8207936: TestZipFile failed with java.lang.AssertionError
    exception
    + JDK-8208242: Add @requires to vmTestbase/gc/g1 tests
    + JDK-8209611: use C++ compiler for hotspot tests
    + JDK-8210182: Remove macros for C compilation from vmTestBase
    but non jvmti
    + JDK-8210198: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[A-F] tests
    + JDK-8210205: build fails on AIX in hotspot cpp tests (for
    example getstacktr001.cpp)
    + JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/
    /jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION
    on windows-x86
    + JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java
    back to tier1
    + JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[A-N] tests
    + JDK-8210392: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8210395: Add doc to SecurityTools.java
    + JDK-8210429: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[G-Z] tests
    + JDK-8210481: Remove #ifdef cplusplus from vmTestbase
    + JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[N-R] tests
    + JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[R-U] tests
    + JDK-8210689: Remove the multi-line old C style for string
    literals
    + JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti/unit tests
    + JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665
    + JDK-8210920: Native C++ tests are not using CXXFLAGS
    + JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR:
    hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti,
    thread)"
    + JDK-8211036: Remove the NSK_STUB macros from vmTestbase for
    non jvmti
    + JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[G-I]*
    + JDK-8211148: var in implicit lambdas shouldn't be accepted
    for source &lt; 11
    + JDK-8211171: move JarUtils to top-level testlibrary
    + JDK-8211227: Inconsistent TLS protocol version in debug output
    + JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[A-G]*
    + JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp
    + JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[I-S]*
    + JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[A-E]
    + JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[E-M]
    + JDK-8211905: Remove multiple casts for EM06 file
    + JDK-8211999: Window positioning bugs due to overlapping
    GraphicsDevice bounds (Windows/HiDPI)
    + JDK-8212082: Remove the NSK_CPP_STUB macros for remaining
    vmTestbase/jvmti/[sS]*
    + JDK-8212083: Handle remaining gc/lock native code and fix two
    strings
    + JDK-8212148: Remove remaining NSK_CPP_STUBs
    + JDK-8213110: Remove the use of applets in automatic tests
    + JDK-8213189: Make restricted headers in HTTP Client
    configurable and remove Date by default
    + JDK-8213263: fix legal headers in test/langtools
    + JDK-8213296: Fix legal headers in test/jdk/java/net
    + JDK-8213301: Fix legal headers in jdk logging tests
    + JDK-8213305: Fix legal headers in test/java/math
    + JDK-8213306: Fix legal headers in test/java/nio
    + JDK-8213328: Update test copyrights in test/java/util/zip and
    test/jdk/tools
    + JDK-8213330: Fix legal headers in i18n tests
    + JDK-8213707: [TEST] vmTestbase/nsk/stress/except/
    /except011.java failed due to wrong class name
    + JDK-8214469: [macos] PIT: java/awt/Choice/
    /ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails
    + JDK-8215410: Regression test for JDK-8214994
    + JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher
    + JDK-8215624: Add parallel heap iteration for jmap \u2013histo
    + JDK-8215889: assert(!_unloading) failed: This oop is not
    available to unloading class loader data with ZGC
    + JDK-8216318: The usage of Disposer in the java.awt.Robot can
    be deleted
    + JDK-8216417: cleanup of IPv6 scope-id handling
    + JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java
    failed with UnsupportedOperation exception
    + JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX
    + JDK-8217633: Configurable extensions with system properties
    + JDK-8217882: java/net/httpclient/MaxStreams.java failed once
    + JDK-8217903: java/net/httpclient/Response204.java fails with
    404
    + JDK-8218483: Crash in
    "assert(_daemon_threads_count-&gt;get_value() &gt; daemon_count)
    failed: thread count mismatch 5 : 5"
    + JDK-8219986: Change to Xcode 10.1 for building on Macosx at
    Oracle
    + JDK-8220575: Correctly format test URI's that contain a
    retrieved IPv6 address
    + JDK-8221259: New tests for java.net.Socket to exercise long
    standing behavior
    + JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails
    on MacOS + Solaris
    + JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/
    /FocusTraversal.java fails on ubuntu
    + JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/
    /IconifyTest.java fails on ubuntu18.04
    + JDK-8222446: assert(C-&gt;env()-&gt;system_dictionary_modification_counter_changed())
    failed: Must invalidate if TypeFuncs differ
    + JDK-8223137: Rename predicate 'do_unroll_only()' to
    'is_unroll_only()'.
    + JDK-8223138: Small clean-up in loop-tree support.
    + JDK-8223139: Rename mandatory policy-do routines.
    + JDK-8223140: Clean-up in 'ok_to_convert()'
    + JDK-8223141: Change (count) suffix _ct into _cnt.
    + JDK-8223400: Replace some enums with static const members in
    hotspot/runtime
    + JDK-8223658: Performance regression of XML.validation in
    13-b19
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8224829: AsyncSSLSocketClose.java has timing issue
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226514: Replace wildcard address with loopback or local
    host in tests - part 17
    + JDK-8226943: compile error in libfollowref003.cpp  with XCode
    10.2 on macosx
    + JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed
    due to "SSLException: An established connection was aborted by
    the software in your host machine"
    + JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java
    fails on Windows7
    + JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently
    positions text
    + JDK-8230019: [REDO] compiler/types/correctness/* tests fail
    with "assert(recv == __null || recv-&gt;is_klass()) failed: wrong
    type"
    + JDK-8230067: Add optional automatic retry when running jtreg
    tests
    + JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests
    may fail on some platforms
    + JDK-8231501: VM crash in
    MethodData::clean_extra_data(CleanExtraDataClosure*):
    fatal error: unexpected tag 99
    + JDK-8233403: Improve verbosity of some httpclient tests
    + JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS
    + JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on
    MacOS
    + JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on
    MacOS
    + JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS
    + JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS
    + JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on
    macos
    + JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java  is
    failing on macos
    + JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails
    on macos
    + JDK-8233562: [TESTBUG] Swing StyledEditorKit test
    bug4506788.java fails on MacOS
    + JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing
    + JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on
    MacoS
    + JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos
    + JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java
    fails on macos
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails
    on macos
    + JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java
    fails on macos
    + JDK-8233637: [TESTBUG] Swing
    ActionListenerCalledTwiceTest.java fails on macos
    + JDK-8233638: [TESTBUG] Swing test
    ScreenMenuBarInputTwice.java fails on macos
    + JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails
    on macos
    + JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java  fails
    on macos
    + JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on
    macos
    + JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is
    failing on macos
    + JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is
    failing on macos
    + JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture
    Recognition in all the platforms
    + JDK-8234823: java/net/Socket/Timeouts.java testcase
    testTimedConnect2() fails on Windows 10
    + JDK-8235784: java/lang/invoke/VarHandles/
    /VarHandleTestByteArrayAsInt.java fails due to timeout with
    fastdebug bits
    + JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -Xcomp -XX:TieredStopAtLevel=1
    + JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60),
    cond_wait
    + JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT,
    when using proxy tunnel
    + JDK-8237354: Add option to jcmd to write a gzipped heap dump
    + JDK-8237589: Fix copyright header formatting
    + JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java
    should not specify TLS version
    + JDK-8239334: Tab Size does not work correctly in JTextArea
    with setLineWrap on
    + JDK-8239422: [TESTBUG]
    compiler/c1/TestPrintIRDuringConstruction.java failed when C1
    is disabled
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240256: Better resource cleaning for SunPKCS11 Provider
    + JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test
    Server
    + JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/
    /bug8020708.java fails in mach5 ubuntu system
    + JDK-8242793: Incorrect copyright header in
    ContinuousCallSiteTargetChange.java
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244292: Headful clients failing with
  - -illegal-access=deny
    + JDK-8245147: Refactor and improve utility of
    test/langtools/tools/javac/versions/Versions.java
    + JDK-8245165: Update bug id for
    javax/swing/text/StyledEditorKit/4506788/bug4506788.java in
    ProblemList
    + JDK-8245665: Test WeakAlg.java should only make sure no
    warning for weak signature algorithms by keytool on root CA
    + JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails
    after 8241072 (multi-homed systems)
    + JDK-8246807: Incorrect copyright header in
    TimeZoneDatePermissionCheck.sh
    + JDK-8247403: JShell: No custom input (e.g. from GUI) possible
    with JavaShellToolBuilder
    + JDK-8247510: typo in IllegalHandshakeMessage
    + JDK-8248187: [TESTBUG] javax/swing/plaf/basic/
    /BasicGraphicsUtils/8132119/bug8132119.java fails with String
    is not properly drawn
    + JDK-8248341: ProblemList java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java
    + JDK-8248500: AArch64: Remove the r18 dependency on Windows
    AArch64
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8249195: Change to Xcode 11.3.1 for building on Macos at
    Oracle
    + JDK-8250521: Configure initial RTO to use minimal retry for
    loopback connections on Windows
    + JDK-8250810: Push missing parts of JDK-8248817
    + JDK-8250839: Improve test template SSLEngineTemplate with
    SSLContextTemplate
    + JDK-8250863: Build error with GCC 10 in NetworkInterface.c
    and k_standard.c
    + JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/
    /gf08t001/TestDriver.java fails
    + JDK-8251155: HostIdentifier fails to canonicalize hostnames
    starting with digits
    + JDK-8251377: [macos11] JTabbedPane selected tab text is
    barely legible
    + JDK-8251570: JDK-8215624 causes assert(worker_id &lt;
    _n_workers) failed: Invalid worker_id
    + JDK-8251930: AArch64: Native types mismatch in hotspot
    + JDK-8252049: Native memory leak in ciMethodData ctor
    + JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x
    friendly
    + JDK-8252114: Windows-AArch64: Enable and test ZGC and
    ShenandoahGC
    + JDK-8253015: Aarch64: Move linux code out from generic CPU
    feature detection
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java
    fail on big screens
    + JDK-8253497: Core Libs Terminology Refresh
    + JDK-8253682: The AppletInitialFocusTest1.java is unstable
    + JDK-8253763: ParallelObjectIterator should have virtual
    destructor
    + JDK-8253866: Security Libs Terminology Refresh
    + JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in
    "try throwing in GET_BODY"
    + JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java
    intermittently failing with TestServer: start exception:
    java.io.IOException: Invalid preface
    + JDK-8255264: Support for identifying the full range of IPv4
    localhost addresses on Windows
    + JDK-8255716: AArch64: Regression: JVM crashes if manually
    offline a core
    + JDK-8255722: Create a new test for rotated blit
    + JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad
    + JDK-8256066: Tests use deprecated TestNG API that is no
    longer available in new versions
    + JDK-8256152: tests fail because of ambiguous method resolution
    + JDK-8256182: Update qemu-debootstrap cross-compilation recipe
    + JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/
    /FullscreenWindowProps.java failed
    + JDK-8256202: Some tweaks for jarsigner tests
    PosixPermissionsTest and SymLinkTest
    + JDK-8256372: [macos] Unexpected symbol was displayed on
    JTextField with Monospaced font
    + JDK-8256956: RegisterImpl::max_slots_per_register is
    incorrect on AMD64
    + JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with
    InvalidPathException on windows
    + JDK-8258855: Two tests sun/security/krb5/auto/
    /ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java
    failed on OL8.3
    + JDK-8259237: Demo selection changes with left/right arrow
    key. No need to press space for selection.
    + JDK-8260571: Add PrintMetaspaceStatistics to print metaspace
    statistics upon VM exit
    + JDK-8260690: JConsole User Guide Link from the Help menu is
    not accessible by keyboard
    + JDK-8261036: Reduce classes loaded by CleanerFactory
    initialization
    + JDK-8261071: AArch64: Refactor interpreter native wrappers
    + JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch
    implementation
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261297: NMT: Final report should use scale 1
    + JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java
    fails because Reserved memory size is too big
    + JDK-8261916: gtest/GTestWrapper.java
    vmErrorTest.unimplemented1_vm_assert failed
    + JDK-8262438: sun/security/ssl/SSLLogger/
    /LoggingFormatConsistency.java failed with "SocketException:
    Socket is closed"
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8262844: (fs) FileStore.supportsFileAttributeView might
    return false negative in case of ext3
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp
    + JDK-8263303: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8263362: Avoid division by 0 in
    java/awt/font/TextJustifier.java justify
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java
    failed with "java.lang.RuntimeException: Wrong method"
    + JDK-8264526: javax/swing/text/html/parser/Parser/8078268/
    /bug8078268.java timeout
    + JDK-8264824: java/net/Inet6Address/B6206527.java doesn't
    close ServerSocket properly
    + JDK-8265019: Update tests for additional TestNG test
    permissions
    + JDK-8265173: [test] divert spurious log output away from
    stream under test in ProcessBuilder Basic test
    + JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8266579: Update test/jdk/java/lang/ProcessHandle/
    /PermissionTest.java &amp; test/jdk/java/sql/testng/util/
    /TestPolicy.java
    + JDK-8266949: Check possibility to disable OperationTimedOut
    on Unix
    + JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg
    tests on many-core machines
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267304: Bump global JTReg memory limit to 768m
    + JDK-8267652: c2 loop unrolling by 8 results in reading memory
    past array
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268093: Manual Testcase: "sun/security/krb5/config/
    /native/TestDynamicStore.java" Fails with NPE
    + JDK-8268555: Update HttpClient tests that use ITestContext to
    jtreg 6+1
    + JDK-8268672: C2: assert(!loop-&gt;is_member(u_loop)) failed: can
    be in outer loop or out of both loops only
    + JDK-8269034: AccessControlException for SunPKCS11 daemon
    threads
    + JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to
    accessClassAndFindClass
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269768: JFR Terminology Refresh
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8269984: [macos] JTabbedPane title looks like  disabled
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270216: [macOS] Update named used for Java run loop mode
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270344: Session resumption errors
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1
    + JDK-8272181: Windows-AArch64:Backport fix of `Backtracing
    broken on PAC enabled systems`
    + JDK-8272316: Wrong Boot JDK help message in 11
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8272828: Add correct licenses to jszip.md
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java
    fails by timeout
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273541: Cleaner Thread creates with normal priority
    instead of MAX_PRIORITY - 2
    + JDK-8273547: [11u] [JVMCI] Partial module-info.java backport
    of JDK-8223332
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273671: Backport of 8260616 misses one JNF header
    inclusion removal
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273795: Zero SPARC64 debug builds fail due to missing
    interpreter fields
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274860: gcc 10.2.1 produces an uninitialized warning in
    sharedRuntimeTrig.cpp
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277815: Fix mistakes in legal header backports
- Removed patch:
  * riscv64-zero.patch
    + integrated upstream
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1644926400">- Update to upstream tag jdk-11.0.14.1+1
  * Changes:
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8281324: Bump update version for OpenJDK: jdk-11.0.14.1</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="982ad22d4fb0d16770babdae064a63da2fa5d3b4fc6bed33130684a634a324de" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="11.0.15.0" rel="150000.3.80.1"/>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643630400">- Update to upstream tag jdk-11.0.14+9 (January 2022 CPU)
  * New features
    + JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
  * Security fixes
    + JDK-8217375: jarsigner breaks old signature with long lines
    in manifest
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
    + JDK-8279541: Improve HarfBuzz
  * Other changes
    + JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/
    /ChoiceKeyEventReaction.html fails
    + JDK-7105119: [TEST_BUG] [macosx] In test
    UIDefaults.toString() must be called with the invokeLater()
    + JDK-7151826: [TEST_BUG] [macosx] The test
    javax/swing/JPopupMenu/4966112/bug4966112.java not for mac
    + JDK-7179006: [macosx] Print-to-file doesn't work: printing to
    the default printer instead
    + JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/
    /bug4726194.java fails on MacOSX
    + JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003 Wrong
    number of thread end events
    + JDK-8039261: [TEST_BUG]: There is not a minimal security
    level in Java Preferences and the TestApplet.html is blocked.
    + JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/
    /AltTabCrashTest.java fails with exception
    + JDK-8075909: [TEST_BUG] The regression-swing case failed as
    it does not have the 'Open' button when select 'subdir' folder
    with NimbusLAF
    + JDK-8078219: Verify lack of @test tag in files in java/net
    test directory
    + JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails
    with "RuntimeException: Process terminated prematurely"
    + JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java timed out intermittently
    + JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails
    intermittently
    + JDK-8131745: java/lang/management/ThreadMXBean/
    /AllThreadIds.java still fails intermittently
    + JDK-8136517: [macosx] Test java/awt/Focus/8073453/
    /AWTFocusTransitionTest.java fails on MacOSX
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/
    /Test6541987.java fails
    + JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/
    /bug4760494.java leaves key pressed
    + JDK-8159904: [TEST_BUG] Failure on solaris of
    java/awt/Window/MultiWindowApp/MultiWindowAppTest.java
    + JDK-8163086: java/awt/Window/TranslucentJAppletTest/
    /TranslucentJAppletTest.java fails
    + JDK-8165828: [TEST_BUG] The reg case: javax/swing/plaf/metal/
    /MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look
    and Feel
    + JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not
    fired! on Windows
    + JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException:
    Default button is not pressed
    + JDK-8169959: javax/swing/JTable/6263446/bug6263446.java:
    Table should be editing
    + JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/
    /7156657/bug7156657.java fails on OS X
    + JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails
    on Windows
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8179880: Refactor javax/security shell tests to plain
    java tests
    + JDK-8180568: Refactor javax/crypto shell tests to plain java
    tests
    + JDK-8180569: Refactor sun/security/krb5/ shell tests to plain
    java tests
    + JDK-8180571: Refactor sun/security/pkcs11 shell tests to
    plain java tests and fix failures
    + JDK-8180573: Refactor sun/security/tools shell tests to plain
    java tests
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8195703: BasicJDWPConnectionTest.java: 'App exited
    unexpectedly with 2'
    + JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java
    fails
    + JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java
    fails
    + JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/
    /NoEventsTest.java fails on Windows
    + JDK-8197811: Test java/awt/Choice/PopupPosTest/
    /PopupPosTest.java fails on Windows
    + JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java
    fails on mac
    + JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java
    fails on mac
    + JDK-8198619: java/awt/Focus/FocusTraversalPolicy/
    /ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java
    fails on mac
    + JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/
    /EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java
    fails on mac
    + JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/
    /SubMenuShowTest/SubMenuShowTest.html fails on mac
    + JDK-8199138: Add RISC-V support to Zero
    + JDK-8199529: javax/swing/text/Utilities/8142966/
    /SwingFontMetricsTest.java fails on windows
    + JDK-8201224: Make string buffer size dynamic in
    mlvmJvmtiUtils.c
    + JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/
    /FollowReferences/followref003/TestDescription.java fails with
    "Location mismatch" errors
    + JDK-8204161: [TESTBUG] auto failed with the "Applet thread
    threw exception: java.lang.UnsupportedOperationException"
    exception
    + JDK-8206085: Refactor
    langtools/tools/javac/versions/Versions.java
    + JDK-8207936: TestZipFile failed with java.lang.AssertionError
    exception
    + JDK-8208242: Add @requires to vmTestbase/gc/g1 tests
    + JDK-8209611: use C++ compiler for hotspot tests
    + JDK-8210182: Remove macros for C compilation from vmTestBase
    but non jvmti
    + JDK-8210198: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[A-F] tests
    + JDK-8210205: build fails on AIX in hotspot cpp tests (for
    example getstacktr001.cpp)
    + JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/
    /jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION
    on windows-x86
    + JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java
    back to tier1
    + JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[A-N] tests
    + JDK-8210392: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8210395: Add doc to SecurityTools.java
    + JDK-8210429: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[G-Z] tests
    + JDK-8210481: Remove #ifdef cplusplus from vmTestbase
    + JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[N-R] tests
    + JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[R-U] tests
    + JDK-8210689: Remove the multi-line old C style for string
    literals
    + JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti/unit tests
    + JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665
    + JDK-8210920: Native C++ tests are not using CXXFLAGS
    + JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR:
    hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti,
    thread)"
    + JDK-8211036: Remove the NSK_STUB macros from vmTestbase for
    non jvmti
    + JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[G-I]*
    + JDK-8211148: var in implicit lambdas shouldn't be accepted
    for source &lt; 11
    + JDK-8211171: move JarUtils to top-level testlibrary
    + JDK-8211227: Inconsistent TLS protocol version in debug output
    + JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[A-G]*
    + JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp
    + JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[I-S]*
    + JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[A-E]
    + JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[E-M]
    + JDK-8211905: Remove multiple casts for EM06 file
    + JDK-8211999: Window positioning bugs due to overlapping
    GraphicsDevice bounds (Windows/HiDPI)
    + JDK-8212082: Remove the NSK_CPP_STUB macros for remaining
    vmTestbase/jvmti/[sS]*
    + JDK-8212083: Handle remaining gc/lock native code and fix two
    strings
    + JDK-8212148: Remove remaining NSK_CPP_STUBs
    + JDK-8213110: Remove the use of applets in automatic tests
    + JDK-8213189: Make restricted headers in HTTP Client
    configurable and remove Date by default
    + JDK-8213263: fix legal headers in test/langtools
    + JDK-8213296: Fix legal headers in test/jdk/java/net
    + JDK-8213301: Fix legal headers in jdk logging tests
    + JDK-8213305: Fix legal headers in test/java/math
    + JDK-8213306: Fix legal headers in test/java/nio
    + JDK-8213328: Update test copyrights in test/java/util/zip and
    test/jdk/tools
    + JDK-8213330: Fix legal headers in i18n tests
    + JDK-8213707: [TEST] vmTestbase/nsk/stress/except/
    /except011.java failed due to wrong class name
    + JDK-8214469: [macos] PIT: java/awt/Choice/
    /ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails
    + JDK-8215410: Regression test for JDK-8214994
    + JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher
    + JDK-8215624: Add parallel heap iteration for jmap \u2013histo
    + JDK-8215889: assert(!_unloading) failed: This oop is not
    available to unloading class loader data with ZGC
    + JDK-8216318: The usage of Disposer in the java.awt.Robot can
    be deleted
    + JDK-8216417: cleanup of IPv6 scope-id handling
    + JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java
    failed with UnsupportedOperation exception
    + JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX
    + JDK-8217633: Configurable extensions with system properties
    + JDK-8217882: java/net/httpclient/MaxStreams.java failed once
    + JDK-8217903: java/net/httpclient/Response204.java fails with
    404
    + JDK-8218483: Crash in
    "assert(_daemon_threads_count-&gt;get_value() &gt; daemon_count)
    failed: thread count mismatch 5 : 5"
    + JDK-8219986: Change to Xcode 10.1 for building on Macosx at
    Oracle
    + JDK-8220575: Correctly format test URI's that contain a
    retrieved IPv6 address
    + JDK-8221259: New tests for java.net.Socket to exercise long
    standing behavior
    + JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails
    on MacOS + Solaris
    + JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/
    /FocusTraversal.java fails on ubuntu
    + JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/
    /IconifyTest.java fails on ubuntu18.04
    + JDK-8222446: assert(C-&gt;env()-&gt;system_dictionary_modification_counter_changed())
    failed: Must invalidate if TypeFuncs differ
    + JDK-8223137: Rename predicate 'do_unroll_only()' to
    'is_unroll_only()'.
    + JDK-8223138: Small clean-up in loop-tree support.
    + JDK-8223139: Rename mandatory policy-do routines.
    + JDK-8223140: Clean-up in 'ok_to_convert()'
    + JDK-8223141: Change (count) suffix _ct into _cnt.
    + JDK-8223400: Replace some enums with static const members in
    hotspot/runtime
    + JDK-8223658: Performance regression of XML.validation in
    13-b19
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8224829: AsyncSSLSocketClose.java has timing issue
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226514: Replace wildcard address with loopback or local
    host in tests - part 17
    + JDK-8226943: compile error in libfollowref003.cpp  with XCode
    10.2 on macosx
    + JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed
    due to "SSLException: An established connection was aborted by
    the software in your host machine"
    + JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java
    fails on Windows7
    + JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently
    positions text
    + JDK-8230019: [REDO] compiler/types/correctness/* tests fail
    with "assert(recv == __null || recv-&gt;is_klass()) failed: wrong
    type"
    + JDK-8230067: Add optional automatic retry when running jtreg
    tests
    + JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests
    may fail on some platforms
    + JDK-8231501: VM crash in
    MethodData::clean_extra_data(CleanExtraDataClosure*):
    fatal error: unexpected tag 99
    + JDK-8233403: Improve verbosity of some httpclient tests
    + JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS
    + JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on
    MacOS
    + JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on
    MacOS
    + JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS
    + JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS
    + JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on
    macos
    + JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java  is
    failing on macos
    + JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails
    on macos
    + JDK-8233562: [TESTBUG] Swing StyledEditorKit test
    bug4506788.java fails on MacOS
    + JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing
    + JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on
    MacoS
    + JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos
    + JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java
    fails on macos
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails
    on macos
    + JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java
    fails on macos
    + JDK-8233637: [TESTBUG] Swing
    ActionListenerCalledTwiceTest.java fails on macos
    + JDK-8233638: [TESTBUG] Swing test
    ScreenMenuBarInputTwice.java fails on macos
    + JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails
    on macos
    + JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java  fails
    on macos
    + JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on
    macos
    + JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is
    failing on macos
    + JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is
    failing on macos
    + JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture
    Recognition in all the platforms
    + JDK-8234823: java/net/Socket/Timeouts.java testcase
    testTimedConnect2() fails on Windows 10
    + JDK-8235784: java/lang/invoke/VarHandles/
    /VarHandleTestByteArrayAsInt.java fails due to timeout with
    fastdebug bits
    + JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -Xcomp -XX:TieredStopAtLevel=1
    + JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60),
    cond_wait
    + JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT,
    when using proxy tunnel
    + JDK-8237354: Add option to jcmd to write a gzipped heap dump
    + JDK-8237589: Fix copyright header formatting
    + JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java
    should not specify TLS version
    + JDK-8239334: Tab Size does not work correctly in JTextArea
    with setLineWrap on
    + JDK-8239422: [TESTBUG]
    compiler/c1/TestPrintIRDuringConstruction.java failed when C1
    is disabled
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240256: Better resource cleaning for SunPKCS11 Provider
    + JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test
    Server
    + JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/
    /bug8020708.java fails in mach5 ubuntu system
    + JDK-8242793: Incorrect copyright header in
    ContinuousCallSiteTargetChange.java
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244292: Headful clients failing with
  - -illegal-access=deny
    + JDK-8245147: Refactor and improve utility of
    test/langtools/tools/javac/versions/Versions.java
    + JDK-8245165: Update bug id for
    javax/swing/text/StyledEditorKit/4506788/bug4506788.java in
    ProblemList
    + JDK-8245665: Test WeakAlg.java should only make sure no
    warning for weak signature algorithms by keytool on root CA
    + JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails
    after 8241072 (multi-homed systems)
    + JDK-8246807: Incorrect copyright header in
    TimeZoneDatePermissionCheck.sh
    + JDK-8247403: JShell: No custom input (e.g. from GUI) possible
    with JavaShellToolBuilder
    + JDK-8247510: typo in IllegalHandshakeMessage
    + JDK-8248187: [TESTBUG] javax/swing/plaf/basic/
    /BasicGraphicsUtils/8132119/bug8132119.java fails with String
    is not properly drawn
    + JDK-8248341: ProblemList java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java
    + JDK-8248500: AArch64: Remove the r18 dependency on Windows
    AArch64
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8249195: Change to Xcode 11.3.1 for building on Macos at
    Oracle
    + JDK-8250521: Configure initial RTO to use minimal retry for
    loopback connections on Windows
    + JDK-8250810: Push missing parts of JDK-8248817
    + JDK-8250839: Improve test template SSLEngineTemplate with
    SSLContextTemplate
    + JDK-8250863: Build error with GCC 10 in NetworkInterface.c
    and k_standard.c
    + JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/
    /gf08t001/TestDriver.java fails
    + JDK-8251155: HostIdentifier fails to canonicalize hostnames
    starting with digits
    + JDK-8251377: [macos11] JTabbedPane selected tab text is
    barely legible
    + JDK-8251570: JDK-8215624 causes assert(worker_id &lt;
    _n_workers) failed: Invalid worker_id
    + JDK-8251930: AArch64: Native types mismatch in hotspot
    + JDK-8252049: Native memory leak in ciMethodData ctor
    + JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x
    friendly
    + JDK-8252114: Windows-AArch64: Enable and test ZGC and
    ShenandoahGC
    + JDK-8253015: Aarch64: Move linux code out from generic CPU
    feature detection
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java
    fail on big screens
    + JDK-8253497: Core Libs Terminology Refresh
    + JDK-8253682: The AppletInitialFocusTest1.java is unstable
    + JDK-8253763: ParallelObjectIterator should have virtual
    destructor
    + JDK-8253866: Security Libs Terminology Refresh
    + JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in
    "try throwing in GET_BODY"
    + JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java
    intermittently failing with TestServer: start exception:
    java.io.IOException: Invalid preface
    + JDK-8255264: Support for identifying the full range of IPv4
    localhost addresses on Windows
    + JDK-8255716: AArch64: Regression: JVM crashes if manually
    offline a core
    + JDK-8255722: Create a new test for rotated blit
    + JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad
    + JDK-8256066: Tests use deprecated TestNG API that is no
    longer available in new versions
    + JDK-8256152: tests fail because of ambiguous method resolution
    + JDK-8256182: Update qemu-debootstrap cross-compilation recipe
    + JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/
    /FullscreenWindowProps.java failed
    + JDK-8256202: Some tweaks for jarsigner tests
    PosixPermissionsTest and SymLinkTest
    + JDK-8256372: [macos] Unexpected symbol was displayed on
    JTextField with Monospaced font
    + JDK-8256956: RegisterImpl::max_slots_per_register is
    incorrect on AMD64
    + JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with
    InvalidPathException on windows
    + JDK-8258855: Two tests sun/security/krb5/auto/
    /ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java
    failed on OL8.3
    + JDK-8259237: Demo selection changes with left/right arrow
    key. No need to press space for selection.
    + JDK-8260571: Add PrintMetaspaceStatistics to print metaspace
    statistics upon VM exit
    + JDK-8260690: JConsole User Guide Link from the Help menu is
    not accessible by keyboard
    + JDK-8261036: Reduce classes loaded by CleanerFactory
    initialization
    + JDK-8261071: AArch64: Refactor interpreter native wrappers
    + JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch
    implementation
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261297: NMT: Final report should use scale 1
    + JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java
    fails because Reserved memory size is too big
    + JDK-8261916: gtest/GTestWrapper.java
    vmErrorTest.unimplemented1_vm_assert failed
    + JDK-8262438: sun/security/ssl/SSLLogger/
    /LoggingFormatConsistency.java failed with "SocketException:
    Socket is closed"
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8262844: (fs) FileStore.supportsFileAttributeView might
    return false negative in case of ext3
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp
    + JDK-8263303: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8263362: Avoid division by 0 in
    java/awt/font/TextJustifier.java justify
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java
    failed with "java.lang.RuntimeException: Wrong method"
    + JDK-8264526: javax/swing/text/html/parser/Parser/8078268/
    /bug8078268.java timeout
    + JDK-8264824: java/net/Inet6Address/B6206527.java doesn't
    close ServerSocket properly
    + JDK-8265019: Update tests for additional TestNG test
    permissions
    + JDK-8265173: [test] divert spurious log output away from
    stream under test in ProcessBuilder Basic test
    + JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8266579: Update test/jdk/java/lang/ProcessHandle/
    /PermissionTest.java &amp; test/jdk/java/sql/testng/util/
    /TestPolicy.java
    + JDK-8266949: Check possibility to disable OperationTimedOut
    on Unix
    + JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg
    tests on many-core machines
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267304: Bump global JTReg memory limit to 768m
    + JDK-8267652: c2 loop unrolling by 8 results in reading memory
    past array
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268093: Manual Testcase: "sun/security/krb5/config/
    /native/TestDynamicStore.java" Fails with NPE
    + JDK-8268555: Update HttpClient tests that use ITestContext to
    jtreg 6+1
    + JDK-8268672: C2: assert(!loop-&gt;is_member(u_loop)) failed: can
    be in outer loop or out of both loops only
    + JDK-8269034: AccessControlException for SunPKCS11 daemon
    threads
    + JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to
    accessClassAndFindClass
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269768: JFR Terminology Refresh
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8269984: [macos] JTabbedPane title looks like  disabled
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270216: [macOS] Update named used for Java run loop mode
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270344: Session resumption errors
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1
    + JDK-8272181: Windows-AArch64:Backport fix of `Backtracing
    broken on PAC enabled systems`
    + JDK-8272316: Wrong Boot JDK help message in 11
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8272828: Add correct licenses to jszip.md
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java
    fails by timeout
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273541: Cleaner Thread creates with normal priority
    instead of MAX_PRIORITY - 2
    + JDK-8273547: [11u] [JVMCI] Partial module-info.java backport
    of JDK-8223332
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273671: Backport of 8260616 misses one JNF header
    inclusion removal
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273795: Zero SPARC64 debug builds fail due to missing
    interpreter fields
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274860: gcc 10.2.1 produces an uninitialized warning in
    sharedRuntimeTrig.cpp
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277815: Fix mistakes in legal header backports
- Removed patch:
  * riscv64-zero.patch
    + integrated upstream
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1644926400">- Update to upstream tag jdk-11.0.14.1+1
  * Changes:
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8281324: Bump update version for OpenJDK: jdk-11.0.14.1</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="38f30186f9c295af7c46714914e5e29f72fa5bd29593c707991ce52750ab3b8d" name="java-11-openjdk-devel" arch="aarch64">
  <version epoch="0" ver="11.0.15.0" rel="150000.3.80.1"/>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643630400">- Update to upstream tag jdk-11.0.14+9 (January 2022 CPU)
  * New features
    + JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
  * Security fixes
    + JDK-8217375: jarsigner breaks old signature with long lines
    in manifest
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
    + JDK-8279541: Improve HarfBuzz
  * Other changes
    + JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/
    /ChoiceKeyEventReaction.html fails
    + JDK-7105119: [TEST_BUG] [macosx] In test
    UIDefaults.toString() must be called with the invokeLater()
    + JDK-7151826: [TEST_BUG] [macosx] The test
    javax/swing/JPopupMenu/4966112/bug4966112.java not for mac
    + JDK-7179006: [macosx] Print-to-file doesn't work: printing to
    the default printer instead
    + JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/
    /bug4726194.java fails on MacOSX
    + JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003 Wrong
    number of thread end events
    + JDK-8039261: [TEST_BUG]: There is not a minimal security
    level in Java Preferences and the TestApplet.html is blocked.
    + JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/
    /AltTabCrashTest.java fails with exception
    + JDK-8075909: [TEST_BUG] The regression-swing case failed as
    it does not have the 'Open' button when select 'subdir' folder
    with NimbusLAF
    + JDK-8078219: Verify lack of @test tag in files in java/net
    test directory
    + JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails
    with "RuntimeException: Process terminated prematurely"
    + JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java timed out intermittently
    + JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails
    intermittently
    + JDK-8131745: java/lang/management/ThreadMXBean/
    /AllThreadIds.java still fails intermittently
    + JDK-8136517: [macosx] Test java/awt/Focus/8073453/
    /AWTFocusTransitionTest.java fails on MacOSX
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/
    /Test6541987.java fails
    + JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/
    /bug4760494.java leaves key pressed
    + JDK-8159904: [TEST_BUG] Failure on solaris of
    java/awt/Window/MultiWindowApp/MultiWindowAppTest.java
    + JDK-8163086: java/awt/Window/TranslucentJAppletTest/
    /TranslucentJAppletTest.java fails
    + JDK-8165828: [TEST_BUG] The reg case: javax/swing/plaf/metal/
    /MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look
    and Feel
    + JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not
    fired! on Windows
    + JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException:
    Default button is not pressed
    + JDK-8169959: javax/swing/JTable/6263446/bug6263446.java:
    Table should be editing
    + JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/
    /7156657/bug7156657.java fails on OS X
    + JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails
    on Windows
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8179880: Refactor javax/security shell tests to plain
    java tests
    + JDK-8180568: Refactor javax/crypto shell tests to plain java
    tests
    + JDK-8180569: Refactor sun/security/krb5/ shell tests to plain
    java tests
    + JDK-8180571: Refactor sun/security/pkcs11 shell tests to
    plain java tests and fix failures
    + JDK-8180573: Refactor sun/security/tools shell tests to plain
    java tests
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8195703: BasicJDWPConnectionTest.java: 'App exited
    unexpectedly with 2'
    + JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java
    fails
    + JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java
    fails
    + JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/
    /NoEventsTest.java fails on Windows
    + JDK-8197811: Test java/awt/Choice/PopupPosTest/
    /PopupPosTest.java fails on Windows
    + JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java
    fails on mac
    + JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java
    fails on mac
    + JDK-8198619: java/awt/Focus/FocusTraversalPolicy/
    /ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java
    fails on mac
    + JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/
    /EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java
    fails on mac
    + JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/
    /SubMenuShowTest/SubMenuShowTest.html fails on mac
    + JDK-8199138: Add RISC-V support to Zero
    + JDK-8199529: javax/swing/text/Utilities/8142966/
    /SwingFontMetricsTest.java fails on windows
    + JDK-8201224: Make string buffer size dynamic in
    mlvmJvmtiUtils.c
    + JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/
    /FollowReferences/followref003/TestDescription.java fails with
    "Location mismatch" errors
    + JDK-8204161: [TESTBUG] auto failed with the "Applet thread
    threw exception: java.lang.UnsupportedOperationException"
    exception
    + JDK-8206085: Refactor
    langtools/tools/javac/versions/Versions.java
    + JDK-8207936: TestZipFile failed with java.lang.AssertionError
    exception
    + JDK-8208242: Add @requires to vmTestbase/gc/g1 tests
    + JDK-8209611: use C++ compiler for hotspot tests
    + JDK-8210182: Remove macros for C compilation from vmTestBase
    but non jvmti
    + JDK-8210198: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[A-F] tests
    + JDK-8210205: build fails on AIX in hotspot cpp tests (for
    example getstacktr001.cpp)
    + JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/
    /jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION
    on windows-x86
    + JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java
    back to tier1
    + JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[A-N] tests
    + JDK-8210392: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8210395: Add doc to SecurityTools.java
    + JDK-8210429: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[G-Z] tests
    + JDK-8210481: Remove #ifdef cplusplus from vmTestbase
    + JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[N-R] tests
    + JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[R-U] tests
    + JDK-8210689: Remove the multi-line old C style for string
    literals
    + JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti/unit tests
    + JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665
    + JDK-8210920: Native C++ tests are not using CXXFLAGS
    + JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR:
    hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti,
    thread)"
    + JDK-8211036: Remove the NSK_STUB macros from vmTestbase for
    non jvmti
    + JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[G-I]*
    + JDK-8211148: var in implicit lambdas shouldn't be accepted
    for source &lt; 11
    + JDK-8211171: move JarUtils to top-level testlibrary
    + JDK-8211227: Inconsistent TLS protocol version in debug output
    + JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[A-G]*
    + JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp
    + JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[I-S]*
    + JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[A-E]
    + JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[E-M]
    + JDK-8211905: Remove multiple casts for EM06 file
    + JDK-8211999: Window positioning bugs due to overlapping
    GraphicsDevice bounds (Windows/HiDPI)
    + JDK-8212082: Remove the NSK_CPP_STUB macros for remaining
    vmTestbase/jvmti/[sS]*
    + JDK-8212083: Handle remaining gc/lock native code and fix two
    strings
    + JDK-8212148: Remove remaining NSK_CPP_STUBs
    + JDK-8213110: Remove the use of applets in automatic tests
    + JDK-8213189: Make restricted headers in HTTP Client
    configurable and remove Date by default
    + JDK-8213263: fix legal headers in test/langtools
    + JDK-8213296: Fix legal headers in test/jdk/java/net
    + JDK-8213301: Fix legal headers in jdk logging tests
    + JDK-8213305: Fix legal headers in test/java/math
    + JDK-8213306: Fix legal headers in test/java/nio
    + JDK-8213328: Update test copyrights in test/java/util/zip and
    test/jdk/tools
    + JDK-8213330: Fix legal headers in i18n tests
    + JDK-8213707: [TEST] vmTestbase/nsk/stress/except/
    /except011.java failed due to wrong class name
    + JDK-8214469: [macos] PIT: java/awt/Choice/
    /ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails
    + JDK-8215410: Regression test for JDK-8214994
    + JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher
    + JDK-8215624: Add parallel heap iteration for jmap \u2013histo
    + JDK-8215889: assert(!_unloading) failed: This oop is not
    available to unloading class loader data with ZGC
    + JDK-8216318: The usage of Disposer in the java.awt.Robot can
    be deleted
    + JDK-8216417: cleanup of IPv6 scope-id handling
    + JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java
    failed with UnsupportedOperation exception
    + JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX
    + JDK-8217633: Configurable extensions with system properties
    + JDK-8217882: java/net/httpclient/MaxStreams.java failed once
    + JDK-8217903: java/net/httpclient/Response204.java fails with
    404
    + JDK-8218483: Crash in
    "assert(_daemon_threads_count-&gt;get_value() &gt; daemon_count)
    failed: thread count mismatch 5 : 5"
    + JDK-8219986: Change to Xcode 10.1 for building on Macosx at
    Oracle
    + JDK-8220575: Correctly format test URI's that contain a
    retrieved IPv6 address
    + JDK-8221259: New tests for java.net.Socket to exercise long
    standing behavior
    + JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails
    on MacOS + Solaris
    + JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/
    /FocusTraversal.java fails on ubuntu
    + JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/
    /IconifyTest.java fails on ubuntu18.04
    + JDK-8222446: assert(C-&gt;env()-&gt;system_dictionary_modification_counter_changed())
    failed: Must invalidate if TypeFuncs differ
    + JDK-8223137: Rename predicate 'do_unroll_only()' to
    'is_unroll_only()'.
    + JDK-8223138: Small clean-up in loop-tree support.
    + JDK-8223139: Rename mandatory policy-do routines.
    + JDK-8223140: Clean-up in 'ok_to_convert()'
    + JDK-8223141: Change (count) suffix _ct into _cnt.
    + JDK-8223400: Replace some enums with static const members in
    hotspot/runtime
    + JDK-8223658: Performance regression of XML.validation in
    13-b19
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8224829: AsyncSSLSocketClose.java has timing issue
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226514: Replace wildcard address with loopback or local
    host in tests - part 17
    + JDK-8226943: compile error in libfollowref003.cpp  with XCode
    10.2 on macosx
    + JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed
    due to "SSLException: An established connection was aborted by
    the software in your host machine"
    + JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java
    fails on Windows7
    + JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently
    positions text
    + JDK-8230019: [REDO] compiler/types/correctness/* tests fail
    with "assert(recv == __null || recv-&gt;is_klass()) failed: wrong
    type"
    + JDK-8230067: Add optional automatic retry when running jtreg
    tests
    + JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests
    may fail on some platforms
    + JDK-8231501: VM crash in
    MethodData::clean_extra_data(CleanExtraDataClosure*):
    fatal error: unexpected tag 99
    + JDK-8233403: Improve verbosity of some httpclient tests
    + JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS
    + JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on
    MacOS
    + JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on
    MacOS
    + JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS
    + JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS
    + JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on
    macos
    + JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java  is
    failing on macos
    + JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails
    on macos
    + JDK-8233562: [TESTBUG] Swing StyledEditorKit test
    bug4506788.java fails on MacOS
    + JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing
    + JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on
    MacoS
    + JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos
    + JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java
    fails on macos
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails
    on macos
    + JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java
    fails on macos
    + JDK-8233637: [TESTBUG] Swing
    ActionListenerCalledTwiceTest.java fails on macos
    + JDK-8233638: [TESTBUG] Swing test
    ScreenMenuBarInputTwice.java fails on macos
    + JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails
    on macos
    + JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java  fails
    on macos
    + JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on
    macos
    + JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is
    failing on macos
    + JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is
    failing on macos
    + JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture
    Recognition in all the platforms
    + JDK-8234823: java/net/Socket/Timeouts.java testcase
    testTimedConnect2() fails on Windows 10
    + JDK-8235784: java/lang/invoke/VarHandles/
    /VarHandleTestByteArrayAsInt.java fails due to timeout with
    fastdebug bits
    + JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -Xcomp -XX:TieredStopAtLevel=1
    + JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60),
    cond_wait
    + JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT,
    when using proxy tunnel
    + JDK-8237354: Add option to jcmd to write a gzipped heap dump
    + JDK-8237589: Fix copyright header formatting
    + JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java
    should not specify TLS version
    + JDK-8239334: Tab Size does not work correctly in JTextArea
    with setLineWrap on
    + JDK-8239422: [TESTBUG]
    compiler/c1/TestPrintIRDuringConstruction.java failed when C1
    is disabled
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240256: Better resource cleaning for SunPKCS11 Provider
    + JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test
    Server
    + JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/
    /bug8020708.java fails in mach5 ubuntu system
    + JDK-8242793: Incorrect copyright header in
    ContinuousCallSiteTargetChange.java
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244292: Headful clients failing with
  - -illegal-access=deny
    + JDK-8245147: Refactor and improve utility of
    test/langtools/tools/javac/versions/Versions.java
    + JDK-8245165: Update bug id for
    javax/swing/text/StyledEditorKit/4506788/bug4506788.java in
    ProblemList
    + JDK-8245665: Test WeakAlg.java should only make sure no
    warning for weak signature algorithms by keytool on root CA
    + JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails
    after 8241072 (multi-homed systems)
    + JDK-8246807: Incorrect copyright header in
    TimeZoneDatePermissionCheck.sh
    + JDK-8247403: JShell: No custom input (e.g. from GUI) possible
    with JavaShellToolBuilder
    + JDK-8247510: typo in IllegalHandshakeMessage
    + JDK-8248187: [TESTBUG] javax/swing/plaf/basic/
    /BasicGraphicsUtils/8132119/bug8132119.java fails with String
    is not properly drawn
    + JDK-8248341: ProblemList java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java
    + JDK-8248500: AArch64: Remove the r18 dependency on Windows
    AArch64
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8249195: Change to Xcode 11.3.1 for building on Macos at
    Oracle
    + JDK-8250521: Configure initial RTO to use minimal retry for
    loopback connections on Windows
    + JDK-8250810: Push missing parts of JDK-8248817
    + JDK-8250839: Improve test template SSLEngineTemplate with
    SSLContextTemplate
    + JDK-8250863: Build error with GCC 10 in NetworkInterface.c
    and k_standard.c
    + JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/
    /gf08t001/TestDriver.java fails
    + JDK-8251155: HostIdentifier fails to canonicalize hostnames
    starting with digits
    + JDK-8251377: [macos11] JTabbedPane selected tab text is
    barely legible
    + JDK-8251570: JDK-8215624 causes assert(worker_id &lt;
    _n_workers) failed: Invalid worker_id
    + JDK-8251930: AArch64: Native types mismatch in hotspot
    + JDK-8252049: Native memory leak in ciMethodData ctor
    + JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x
    friendly
    + JDK-8252114: Windows-AArch64: Enable and test ZGC and
    ShenandoahGC
    + JDK-8253015: Aarch64: Move linux code out from generic CPU
    feature detection
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java
    fail on big screens
    + JDK-8253497: Core Libs Terminology Refresh
    + JDK-8253682: The AppletInitialFocusTest1.java is unstable
    + JDK-8253763: ParallelObjectIterator should have virtual
    destructor
    + JDK-8253866: Security Libs Terminology Refresh
    + JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in
    "try throwing in GET_BODY"
    + JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java
    intermittently failing with TestServer: start exception:
    java.io.IOException: Invalid preface
    + JDK-8255264: Support for identifying the full range of IPv4
    localhost addresses on Windows
    + JDK-8255716: AArch64: Regression: JVM crashes if manually
    offline a core
    + JDK-8255722: Create a new test for rotated blit
    + JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad
    + JDK-8256066: Tests use deprecated TestNG API that is no
    longer available in new versions
    + JDK-8256152: tests fail because of ambiguous method resolution
    + JDK-8256182: Update qemu-debootstrap cross-compilation recipe
    + JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/
    /FullscreenWindowProps.java failed
    + JDK-8256202: Some tweaks for jarsigner tests
    PosixPermissionsTest and SymLinkTest
    + JDK-8256372: [macos] Unexpected symbol was displayed on
    JTextField with Monospaced font
    + JDK-8256956: RegisterImpl::max_slots_per_register is
    incorrect on AMD64
    + JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with
    InvalidPathException on windows
    + JDK-8258855: Two tests sun/security/krb5/auto/
    /ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java
    failed on OL8.3
    + JDK-8259237: Demo selection changes with left/right arrow
    key. No need to press space for selection.
    + JDK-8260571: Add PrintMetaspaceStatistics to print metaspace
    statistics upon VM exit
    + JDK-8260690: JConsole User Guide Link from the Help menu is
    not accessible by keyboard
    + JDK-8261036: Reduce classes loaded by CleanerFactory
    initialization
    + JDK-8261071: AArch64: Refactor interpreter native wrappers
    + JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch
    implementation
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261297: NMT: Final report should use scale 1
    + JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java
    fails because Reserved memory size is too big
    + JDK-8261916: gtest/GTestWrapper.java
    vmErrorTest.unimplemented1_vm_assert failed
    + JDK-8262438: sun/security/ssl/SSLLogger/
    /LoggingFormatConsistency.java failed with "SocketException:
    Socket is closed"
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8262844: (fs) FileStore.supportsFileAttributeView might
    return false negative in case of ext3
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp
    + JDK-8263303: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8263362: Avoid division by 0 in
    java/awt/font/TextJustifier.java justify
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java
    failed with "java.lang.RuntimeException: Wrong method"
    + JDK-8264526: javax/swing/text/html/parser/Parser/8078268/
    /bug8078268.java timeout
    + JDK-8264824: java/net/Inet6Address/B6206527.java doesn't
    close ServerSocket properly
    + JDK-8265019: Update tests for additional TestNG test
    permissions
    + JDK-8265173: [test] divert spurious log output away from
    stream under test in ProcessBuilder Basic test
    + JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8266579: Update test/jdk/java/lang/ProcessHandle/
    /PermissionTest.java &amp; test/jdk/java/sql/testng/util/
    /TestPolicy.java
    + JDK-8266949: Check possibility to disable OperationTimedOut
    on Unix
    + JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg
    tests on many-core machines
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267304: Bump global JTReg memory limit to 768m
    + JDK-8267652: c2 loop unrolling by 8 results in reading memory
    past array
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268093: Manual Testcase: "sun/security/krb5/config/
    /native/TestDynamicStore.java" Fails with NPE
    + JDK-8268555: Update HttpClient tests that use ITestContext to
    jtreg 6+1
    + JDK-8268672: C2: assert(!loop-&gt;is_member(u_loop)) failed: can
    be in outer loop or out of both loops only
    + JDK-8269034: AccessControlException for SunPKCS11 daemon
    threads
    + JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to
    accessClassAndFindClass
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269768: JFR Terminology Refresh
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8269984: [macos] JTabbedPane title looks like  disabled
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270216: [macOS] Update named used for Java run loop mode
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270344: Session resumption errors
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1
    + JDK-8272181: Windows-AArch64:Backport fix of `Backtracing
    broken on PAC enabled systems`
    + JDK-8272316: Wrong Boot JDK help message in 11
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8272828: Add correct licenses to jszip.md
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java
    fails by timeout
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273541: Cleaner Thread creates with normal priority
    instead of MAX_PRIORITY - 2
    + JDK-8273547: [11u] [JVMCI] Partial module-info.java backport
    of JDK-8223332
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273671: Backport of 8260616 misses one JNF header
    inclusion removal
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273795: Zero SPARC64 debug builds fail due to missing
    interpreter fields
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274860: gcc 10.2.1 produces an uninitialized warning in
    sharedRuntimeTrig.cpp
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277815: Fix mistakes in legal header backports
- Removed patch:
  * riscv64-zero.patch
    + integrated upstream
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1644926400">- Update to upstream tag jdk-11.0.14.1+1
  * Changes:
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8281324: Bump update version for OpenJDK: jdk-11.0.14.1</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="fa3ab00525c2914004ebd36f9311c4f28b3f229835be1df28d6e647eaae0480f" name="java-11-openjdk-devel" arch="ppc64le">
  <version epoch="0" ver="11.0.15.0" rel="150000.3.80.1"/>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643630400">- Update to upstream tag jdk-11.0.14+9 (January 2022 CPU)
  * New features
    + JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
  * Security fixes
    + JDK-8217375: jarsigner breaks old signature with long lines
    in manifest
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
    + JDK-8279541: Improve HarfBuzz
  * Other changes
    + JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/
    /ChoiceKeyEventReaction.html fails
    + JDK-7105119: [TEST_BUG] [macosx] In test
    UIDefaults.toString() must be called with the invokeLater()
    + JDK-7151826: [TEST_BUG] [macosx] The test
    javax/swing/JPopupMenu/4966112/bug4966112.java not for mac
    + JDK-7179006: [macosx] Print-to-file doesn't work: printing to
    the default printer instead
    + JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/
    /bug4726194.java fails on MacOSX
    + JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003 Wrong
    number of thread end events
    + JDK-8039261: [TEST_BUG]: There is not a minimal security
    level in Java Preferences and the TestApplet.html is blocked.
    + JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/
    /AltTabCrashTest.java fails with exception
    + JDK-8075909: [TEST_BUG] The regression-swing case failed as
    it does not have the 'Open' button when select 'subdir' folder
    with NimbusLAF
    + JDK-8078219: Verify lack of @test tag in files in java/net
    test directory
    + JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails
    with "RuntimeException: Process terminated prematurely"
    + JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java timed out intermittently
    + JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails
    intermittently
    + JDK-8131745: java/lang/management/ThreadMXBean/
    /AllThreadIds.java still fails intermittently
    + JDK-8136517: [macosx] Test java/awt/Focus/8073453/
    /AWTFocusTransitionTest.java fails on MacOSX
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/
    /Test6541987.java fails
    + JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/
    /bug4760494.java leaves key pressed
    + JDK-8159904: [TEST_BUG] Failure on solaris of
    java/awt/Window/MultiWindowApp/MultiWindowAppTest.java
    + JDK-8163086: java/awt/Window/TranslucentJAppletTest/
    /TranslucentJAppletTest.java fails
    + JDK-8165828: [TEST_BUG] The reg case: javax/swing/plaf/metal/
    /MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look
    and Feel
    + JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not
    fired! on Windows
    + JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException:
    Default button is not pressed
    + JDK-8169959: javax/swing/JTable/6263446/bug6263446.java:
    Table should be editing
    + JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/
    /7156657/bug7156657.java fails on OS X
    + JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails
    on Windows
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8179880: Refactor javax/security shell tests to plain
    java tests
    + JDK-8180568: Refactor javax/crypto shell tests to plain java
    tests
    + JDK-8180569: Refactor sun/security/krb5/ shell tests to plain
    java tests
    + JDK-8180571: Refactor sun/security/pkcs11 shell tests to
    plain java tests and fix failures
    + JDK-8180573: Refactor sun/security/tools shell tests to plain
    java tests
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8195703: BasicJDWPConnectionTest.java: 'App exited
    unexpectedly with 2'
    + JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java
    fails
    + JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java
    fails
    + JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/
    /NoEventsTest.java fails on Windows
    + JDK-8197811: Test java/awt/Choice/PopupPosTest/
    /PopupPosTest.java fails on Windows
    + JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java
    fails on mac
    + JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java
    fails on mac
    + JDK-8198619: java/awt/Focus/FocusTraversalPolicy/
    /ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java
    fails on mac
    + JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/
    /EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java
    fails on mac
    + JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/
    /SubMenuShowTest/SubMenuShowTest.html fails on mac
    + JDK-8199138: Add RISC-V support to Zero
    + JDK-8199529: javax/swing/text/Utilities/8142966/
    /SwingFontMetricsTest.java fails on windows
    + JDK-8201224: Make string buffer size dynamic in
    mlvmJvmtiUtils.c
    + JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/
    /FollowReferences/followref003/TestDescription.java fails with
    "Location mismatch" errors
    + JDK-8204161: [TESTBUG] auto failed with the "Applet thread
    threw exception: java.lang.UnsupportedOperationException"
    exception
    + JDK-8206085: Refactor
    langtools/tools/javac/versions/Versions.java
    + JDK-8207936: TestZipFile failed with java.lang.AssertionError
    exception
    + JDK-8208242: Add @requires to vmTestbase/gc/g1 tests
    + JDK-8209611: use C++ compiler for hotspot tests
    + JDK-8210182: Remove macros for C compilation from vmTestBase
    but non jvmti
    + JDK-8210198: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[A-F] tests
    + JDK-8210205: build fails on AIX in hotspot cpp tests (for
    example getstacktr001.cpp)
    + JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/
    /jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION
    on windows-x86
    + JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java
    back to tier1
    + JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[A-N] tests
    + JDK-8210392: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8210395: Add doc to SecurityTools.java
    + JDK-8210429: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[G-Z] tests
    + JDK-8210481: Remove #ifdef cplusplus from vmTestbase
    + JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[N-R] tests
    + JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[R-U] tests
    + JDK-8210689: Remove the multi-line old C style for string
    literals
    + JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti/unit tests
    + JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665
    + JDK-8210920: Native C++ tests are not using CXXFLAGS
    + JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR:
    hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti,
    thread)"
    + JDK-8211036: Remove the NSK_STUB macros from vmTestbase for
    non jvmti
    + JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[G-I]*
    + JDK-8211148: var in implicit lambdas shouldn't be accepted
    for source &lt; 11
    + JDK-8211171: move JarUtils to top-level testlibrary
    + JDK-8211227: Inconsistent TLS protocol version in debug output
    + JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[A-G]*
    + JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp
    + JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[I-S]*
    + JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[A-E]
    + JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[E-M]
    + JDK-8211905: Remove multiple casts for EM06 file
    + JDK-8211999: Window positioning bugs due to overlapping
    GraphicsDevice bounds (Windows/HiDPI)
    + JDK-8212082: Remove the NSK_CPP_STUB macros for remaining
    vmTestbase/jvmti/[sS]*
    + JDK-8212083: Handle remaining gc/lock native code and fix two
    strings
    + JDK-8212148: Remove remaining NSK_CPP_STUBs
    + JDK-8213110: Remove the use of applets in automatic tests
    + JDK-8213189: Make restricted headers in HTTP Client
    configurable and remove Date by default
    + JDK-8213263: fix legal headers in test/langtools
    + JDK-8213296: Fix legal headers in test/jdk/java/net
    + JDK-8213301: Fix legal headers in jdk logging tests
    + JDK-8213305: Fix legal headers in test/java/math
    + JDK-8213306: Fix legal headers in test/java/nio
    + JDK-8213328: Update test copyrights in test/java/util/zip and
    test/jdk/tools
    + JDK-8213330: Fix legal headers in i18n tests
    + JDK-8213707: [TEST] vmTestbase/nsk/stress/except/
    /except011.java failed due to wrong class name
    + JDK-8214469: [macos] PIT: java/awt/Choice/
    /ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails
    + JDK-8215410: Regression test for JDK-8214994
    + JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher
    + JDK-8215624: Add parallel heap iteration for jmap \u2013histo
    + JDK-8215889: assert(!_unloading) failed: This oop is not
    available to unloading class loader data with ZGC
    + JDK-8216318: The usage of Disposer in the java.awt.Robot can
    be deleted
    + JDK-8216417: cleanup of IPv6 scope-id handling
    + JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java
    failed with UnsupportedOperation exception
    + JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX
    + JDK-8217633: Configurable extensions with system properties
    + JDK-8217882: java/net/httpclient/MaxStreams.java failed once
    + JDK-8217903: java/net/httpclient/Response204.java fails with
    404
    + JDK-8218483: Crash in
    "assert(_daemon_threads_count-&gt;get_value() &gt; daemon_count)
    failed: thread count mismatch 5 : 5"
    + JDK-8219986: Change to Xcode 10.1 for building on Macosx at
    Oracle
    + JDK-8220575: Correctly format test URI's that contain a
    retrieved IPv6 address
    + JDK-8221259: New tests for java.net.Socket to exercise long
    standing behavior
    + JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails
    on MacOS + Solaris
    + JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/
    /FocusTraversal.java fails on ubuntu
    + JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/
    /IconifyTest.java fails on ubuntu18.04
    + JDK-8222446: assert(C-&gt;env()-&gt;system_dictionary_modification_counter_changed())
    failed: Must invalidate if TypeFuncs differ
    + JDK-8223137: Rename predicate 'do_unroll_only()' to
    'is_unroll_only()'.
    + JDK-8223138: Small clean-up in loop-tree support.
    + JDK-8223139: Rename mandatory policy-do routines.
    + JDK-8223140: Clean-up in 'ok_to_convert()'
    + JDK-8223141: Change (count) suffix _ct into _cnt.
    + JDK-8223400: Replace some enums with static const members in
    hotspot/runtime
    + JDK-8223658: Performance regression of XML.validation in
    13-b19
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8224829: AsyncSSLSocketClose.java has timing issue
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226514: Replace wildcard address with loopback or local
    host in tests - part 17
    + JDK-8226943: compile error in libfollowref003.cpp  with XCode
    10.2 on macosx
    + JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed
    due to "SSLException: An established connection was aborted by
    the software in your host machine"
    + JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java
    fails on Windows7
    + JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently
    positions text
    + JDK-8230019: [REDO] compiler/types/correctness/* tests fail
    with "assert(recv == __null || recv-&gt;is_klass()) failed: wrong
    type"
    + JDK-8230067: Add optional automatic retry when running jtreg
    tests
    + JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests
    may fail on some platforms
    + JDK-8231501: VM crash in
    MethodData::clean_extra_data(CleanExtraDataClosure*):
    fatal error: unexpected tag 99
    + JDK-8233403: Improve verbosity of some httpclient tests
    + JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS
    + JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on
    MacOS
    + JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on
    MacOS
    + JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS
    + JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS
    + JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on
    macos
    + JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java  is
    failing on macos
    + JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails
    on macos
    + JDK-8233562: [TESTBUG] Swing StyledEditorKit test
    bug4506788.java fails on MacOS
    + JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing
    + JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on
    MacoS
    + JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos
    + JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java
    fails on macos
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails
    on macos
    + JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java
    fails on macos
    + JDK-8233637: [TESTBUG] Swing
    ActionListenerCalledTwiceTest.java fails on macos
    + JDK-8233638: [TESTBUG] Swing test
    ScreenMenuBarInputTwice.java fails on macos
    + JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails
    on macos
    + JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java  fails
    on macos
    + JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on
    macos
    + JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is
    failing on macos
    + JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is
    failing on macos
    + JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture
    Recognition in all the platforms
    + JDK-8234823: java/net/Socket/Timeouts.java testcase
    testTimedConnect2() fails on Windows 10
    + JDK-8235784: java/lang/invoke/VarHandles/
    /VarHandleTestByteArrayAsInt.java fails due to timeout with
    fastdebug bits
    + JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -Xcomp -XX:TieredStopAtLevel=1
    + JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60),
    cond_wait
    + JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT,
    when using proxy tunnel
    + JDK-8237354: Add option to jcmd to write a gzipped heap dump
    + JDK-8237589: Fix copyright header formatting
    + JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java
    should not specify TLS version
    + JDK-8239334: Tab Size does not work correctly in JTextArea
    with setLineWrap on
    + JDK-8239422: [TESTBUG]
    compiler/c1/TestPrintIRDuringConstruction.java failed when C1
    is disabled
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240256: Better resource cleaning for SunPKCS11 Provider
    + JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test
    Server
    + JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/
    /bug8020708.java fails in mach5 ubuntu system
    + JDK-8242793: Incorrect copyright header in
    ContinuousCallSiteTargetChange.java
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244292: Headful clients failing with
  - -illegal-access=deny
    + JDK-8245147: Refactor and improve utility of
    test/langtools/tools/javac/versions/Versions.java
    + JDK-8245165: Update bug id for
    javax/swing/text/StyledEditorKit/4506788/bug4506788.java in
    ProblemList
    + JDK-8245665: Test WeakAlg.java should only make sure no
    warning for weak signature algorithms by keytool on root CA
    + JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails
    after 8241072 (multi-homed systems)
    + JDK-8246807: Incorrect copyright header in
    TimeZoneDatePermissionCheck.sh
    + JDK-8247403: JShell: No custom input (e.g. from GUI) possible
    with JavaShellToolBuilder
    + JDK-8247510: typo in IllegalHandshakeMessage
    + JDK-8248187: [TESTBUG] javax/swing/plaf/basic/
    /BasicGraphicsUtils/8132119/bug8132119.java fails with String
    is not properly drawn
    + JDK-8248341: ProblemList java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java
    + JDK-8248500: AArch64: Remove the r18 dependency on Windows
    AArch64
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8249195: Change to Xcode 11.3.1 for building on Macos at
    Oracle
    + JDK-8250521: Configure initial RTO to use minimal retry for
    loopback connections on Windows
    + JDK-8250810: Push missing parts of JDK-8248817
    + JDK-8250839: Improve test template SSLEngineTemplate with
    SSLContextTemplate
    + JDK-8250863: Build error with GCC 10 in NetworkInterface.c
    and k_standard.c
    + JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/
    /gf08t001/TestDriver.java fails
    + JDK-8251155: HostIdentifier fails to canonicalize hostnames
    starting with digits
    + JDK-8251377: [macos11] JTabbedPane selected tab text is
    barely legible
    + JDK-8251570: JDK-8215624 causes assert(worker_id &lt;
    _n_workers) failed: Invalid worker_id
    + JDK-8251930: AArch64: Native types mismatch in hotspot
    + JDK-8252049: Native memory leak in ciMethodData ctor
    + JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x
    friendly
    + JDK-8252114: Windows-AArch64: Enable and test ZGC and
    ShenandoahGC
    + JDK-8253015: Aarch64: Move linux code out from generic CPU
    feature detection
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java
    fail on big screens
    + JDK-8253497: Core Libs Terminology Refresh
    + JDK-8253682: The AppletInitialFocusTest1.java is unstable
    + JDK-8253763: ParallelObjectIterator should have virtual
    destructor
    + JDK-8253866: Security Libs Terminology Refresh
    + JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in
    "try throwing in GET_BODY"
    + JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java
    intermittently failing with TestServer: start exception:
    java.io.IOException: Invalid preface
    + JDK-8255264: Support for identifying the full range of IPv4
    localhost addresses on Windows
    + JDK-8255716: AArch64: Regression: JVM crashes if manually
    offline a core
    + JDK-8255722: Create a new test for rotated blit
    + JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad
    + JDK-8256066: Tests use deprecated TestNG API that is no
    longer available in new versions
    + JDK-8256152: tests fail because of ambiguous method resolution
    + JDK-8256182: Update qemu-debootstrap cross-compilation recipe
    + JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/
    /FullscreenWindowProps.java failed
    + JDK-8256202: Some tweaks for jarsigner tests
    PosixPermissionsTest and SymLinkTest
    + JDK-8256372: [macos] Unexpected symbol was displayed on
    JTextField with Monospaced font
    + JDK-8256956: RegisterImpl::max_slots_per_register is
    incorrect on AMD64
    + JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with
    InvalidPathException on windows
    + JDK-8258855: Two tests sun/security/krb5/auto/
    /ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java
    failed on OL8.3
    + JDK-8259237: Demo selection changes with left/right arrow
    key. No need to press space for selection.
    + JDK-8260571: Add PrintMetaspaceStatistics to print metaspace
    statistics upon VM exit
    + JDK-8260690: JConsole User Guide Link from the Help menu is
    not accessible by keyboard
    + JDK-8261036: Reduce classes loaded by CleanerFactory
    initialization
    + JDK-8261071: AArch64: Refactor interpreter native wrappers
    + JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch
    implementation
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261297: NMT: Final report should use scale 1
    + JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java
    fails because Reserved memory size is too big
    + JDK-8261916: gtest/GTestWrapper.java
    vmErrorTest.unimplemented1_vm_assert failed
    + JDK-8262438: sun/security/ssl/SSLLogger/
    /LoggingFormatConsistency.java failed with "SocketException:
    Socket is closed"
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8262844: (fs) FileStore.supportsFileAttributeView might
    return false negative in case of ext3
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp
    + JDK-8263303: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8263362: Avoid division by 0 in
    java/awt/font/TextJustifier.java justify
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java
    failed with "java.lang.RuntimeException: Wrong method"
    + JDK-8264526: javax/swing/text/html/parser/Parser/8078268/
    /bug8078268.java timeout
    + JDK-8264824: java/net/Inet6Address/B6206527.java doesn't
    close ServerSocket properly
    + JDK-8265019: Update tests for additional TestNG test
    permissions
    + JDK-8265173: [test] divert spurious log output away from
    stream under test in ProcessBuilder Basic test
    + JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8266579: Update test/jdk/java/lang/ProcessHandle/
    /PermissionTest.java &amp; test/jdk/java/sql/testng/util/
    /TestPolicy.java
    + JDK-8266949: Check possibility to disable OperationTimedOut
    on Unix
    + JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg
    tests on many-core machines
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267304: Bump global JTReg memory limit to 768m
    + JDK-8267652: c2 loop unrolling by 8 results in reading memory
    past array
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268093: Manual Testcase: "sun/security/krb5/config/
    /native/TestDynamicStore.java" Fails with NPE
    + JDK-8268555: Update HttpClient tests that use ITestContext to
    jtreg 6+1
    + JDK-8268672: C2: assert(!loop-&gt;is_member(u_loop)) failed: can
    be in outer loop or out of both loops only
    + JDK-8269034: AccessControlException for SunPKCS11 daemon
    threads
    + JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to
    accessClassAndFindClass
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269768: JFR Terminology Refresh
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8269984: [macos] JTabbedPane title looks like  disabled
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270216: [macOS] Update named used for Java run loop mode
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270344: Session resumption errors
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1
    + JDK-8272181: Windows-AArch64:Backport fix of `Backtracing
    broken on PAC enabled systems`
    + JDK-8272316: Wrong Boot JDK help message in 11
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8272828: Add correct licenses to jszip.md
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java
    fails by timeout
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273541: Cleaner Thread creates with normal priority
    instead of MAX_PRIORITY - 2
    + JDK-8273547: [11u] [JVMCI] Partial module-info.java backport
    of JDK-8223332
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273671: Backport of 8260616 misses one JNF header
    inclusion removal
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273795: Zero SPARC64 debug builds fail due to missing
    interpreter fields
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274860: gcc 10.2.1 produces an uninitialized warning in
    sharedRuntimeTrig.cpp
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277815: Fix mistakes in legal header backports
- Removed patch:
  * riscv64-zero.patch
    + integrated upstream
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1644926400">- Update to upstream tag jdk-11.0.14.1+1
  * Changes:
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8281324: Bump update version for OpenJDK: jdk-11.0.14.1</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="961e47185c9a39d1861f323405613effe2a38318b1ccf267255ee5e44d3f432a" name="java-11-openjdk-devel" arch="s390x">
  <version epoch="0" ver="11.0.15.0" rel="150000.3.80.1"/>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643630400">- Update to upstream tag jdk-11.0.14+9 (January 2022 CPU)
  * New features
    + JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
  * Security fixes
    + JDK-8217375: jarsigner breaks old signature with long lines
    in manifest
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
    + JDK-8279541: Improve HarfBuzz
  * Other changes
    + JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/
    /ChoiceKeyEventReaction.html fails
    + JDK-7105119: [TEST_BUG] [macosx] In test
    UIDefaults.toString() must be called with the invokeLater()
    + JDK-7151826: [TEST_BUG] [macosx] The test
    javax/swing/JPopupMenu/4966112/bug4966112.java not for mac
    + JDK-7179006: [macosx] Print-to-file doesn't work: printing to
    the default printer instead
    + JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/
    /bug4726194.java fails on MacOSX
    + JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003 Wrong
    number of thread end events
    + JDK-8039261: [TEST_BUG]: There is not a minimal security
    level in Java Preferences and the TestApplet.html is blocked.
    + JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/
    /AltTabCrashTest.java fails with exception
    + JDK-8075909: [TEST_BUG] The regression-swing case failed as
    it does not have the 'Open' button when select 'subdir' folder
    with NimbusLAF
    + JDK-8078219: Verify lack of @test tag in files in java/net
    test directory
    + JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails
    with "RuntimeException: Process terminated prematurely"
    + JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java timed out intermittently
    + JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails
    intermittently
    + JDK-8131745: java/lang/management/ThreadMXBean/
    /AllThreadIds.java still fails intermittently
    + JDK-8136517: [macosx] Test java/awt/Focus/8073453/
    /AWTFocusTransitionTest.java fails on MacOSX
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/
    /Test6541987.java fails
    + JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/
    /bug4760494.java leaves key pressed
    + JDK-8159904: [TEST_BUG] Failure on solaris of
    java/awt/Window/MultiWindowApp/MultiWindowAppTest.java
    + JDK-8163086: java/awt/Window/TranslucentJAppletTest/
    /TranslucentJAppletTest.java fails
    + JDK-8165828: [TEST_BUG] The reg case: javax/swing/plaf/metal/
    /MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look
    and Feel
    + JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not
    fired! on Windows
    + JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException:
    Default button is not pressed
    + JDK-8169959: javax/swing/JTable/6263446/bug6263446.java:
    Table should be editing
    + JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/
    /7156657/bug7156657.java fails on OS X
    + JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails
    on Windows
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8179880: Refactor javax/security shell tests to plain
    java tests
    + JDK-8180568: Refactor javax/crypto shell tests to plain java
    tests
    + JDK-8180569: Refactor sun/security/krb5/ shell tests to plain
    java tests
    + JDK-8180571: Refactor sun/security/pkcs11 shell tests to
    plain java tests and fix failures
    + JDK-8180573: Refactor sun/security/tools shell tests to plain
    java tests
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8195703: BasicJDWPConnectionTest.java: 'App exited
    unexpectedly with 2'
    + JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java
    fails
    + JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java
    fails
    + JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/
    /NoEventsTest.java fails on Windows
    + JDK-8197811: Test java/awt/Choice/PopupPosTest/
    /PopupPosTest.java fails on Windows
    + JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java
    fails on mac
    + JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java
    fails on mac
    + JDK-8198619: java/awt/Focus/FocusTraversalPolicy/
    /ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java
    fails on mac
    + JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/
    /EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java
    fails on mac
    + JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/
    /SubMenuShowTest/SubMenuShowTest.html fails on mac
    + JDK-8199138: Add RISC-V support to Zero
    + JDK-8199529: javax/swing/text/Utilities/8142966/
    /SwingFontMetricsTest.java fails on windows
    + JDK-8201224: Make string buffer size dynamic in
    mlvmJvmtiUtils.c
    + JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/
    /FollowReferences/followref003/TestDescription.java fails with
    "Location mismatch" errors
    + JDK-8204161: [TESTBUG] auto failed with the "Applet thread
    threw exception: java.lang.UnsupportedOperationException"
    exception
    + JDK-8206085: Refactor
    langtools/tools/javac/versions/Versions.java
    + JDK-8207936: TestZipFile failed with java.lang.AssertionError
    exception
    + JDK-8208242: Add @requires to vmTestbase/gc/g1 tests
    + JDK-8209611: use C++ compiler for hotspot tests
    + JDK-8210182: Remove macros for C compilation from vmTestBase
    but non jvmti
    + JDK-8210198: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[A-F] tests
    + JDK-8210205: build fails on AIX in hotspot cpp tests (for
    example getstacktr001.cpp)
    + JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/
    /jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION
    on windows-x86
    + JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java
    back to tier1
    + JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[A-N] tests
    + JDK-8210392: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8210395: Add doc to SecurityTools.java
    + JDK-8210429: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[G-Z] tests
    + JDK-8210481: Remove #ifdef cplusplus from vmTestbase
    + JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[N-R] tests
    + JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[R-U] tests
    + JDK-8210689: Remove the multi-line old C style for string
    literals
    + JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti/unit tests
    + JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665
    + JDK-8210920: Native C++ tests are not using CXXFLAGS
    + JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR:
    hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti,
    thread)"
    + JDK-8211036: Remove the NSK_STUB macros from vmTestbase for
    non jvmti
    + JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[G-I]*
    + JDK-8211148: var in implicit lambdas shouldn't be accepted
    for source &lt; 11
    + JDK-8211171: move JarUtils to top-level testlibrary
    + JDK-8211227: Inconsistent TLS protocol version in debug output
    + JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[A-G]*
    + JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp
    + JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[I-S]*
    + JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[A-E]
    + JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[E-M]
    + JDK-8211905: Remove multiple casts for EM06 file
    + JDK-8211999: Window positioning bugs due to overlapping
    GraphicsDevice bounds (Windows/HiDPI)
    + JDK-8212082: Remove the NSK_CPP_STUB macros for remaining
    vmTestbase/jvmti/[sS]*
    + JDK-8212083: Handle remaining gc/lock native code and fix two
    strings
    + JDK-8212148: Remove remaining NSK_CPP_STUBs
    + JDK-8213110: Remove the use of applets in automatic tests
    + JDK-8213189: Make restricted headers in HTTP Client
    configurable and remove Date by default
    + JDK-8213263: fix legal headers in test/langtools
    + JDK-8213296: Fix legal headers in test/jdk/java/net
    + JDK-8213301: Fix legal headers in jdk logging tests
    + JDK-8213305: Fix legal headers in test/java/math
    + JDK-8213306: Fix legal headers in test/java/nio
    + JDK-8213328: Update test copyrights in test/java/util/zip and
    test/jdk/tools
    + JDK-8213330: Fix legal headers in i18n tests
    + JDK-8213707: [TEST] vmTestbase/nsk/stress/except/
    /except011.java failed due to wrong class name
    + JDK-8214469: [macos] PIT: java/awt/Choice/
    /ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails
    + JDK-8215410: Regression test for JDK-8214994
    + JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher
    + JDK-8215624: Add parallel heap iteration for jmap \u2013histo
    + JDK-8215889: assert(!_unloading) failed: This oop is not
    available to unloading class loader data with ZGC
    + JDK-8216318: The usage of Disposer in the java.awt.Robot can
    be deleted
    + JDK-8216417: cleanup of IPv6 scope-id handling
    + JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java
    failed with UnsupportedOperation exception
    + JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX
    + JDK-8217633: Configurable extensions with system properties
    + JDK-8217882: java/net/httpclient/MaxStreams.java failed once
    + JDK-8217903: java/net/httpclient/Response204.java fails with
    404
    + JDK-8218483: Crash in
    "assert(_daemon_threads_count-&gt;get_value() &gt; daemon_count)
    failed: thread count mismatch 5 : 5"
    + JDK-8219986: Change to Xcode 10.1 for building on Macosx at
    Oracle
    + JDK-8220575: Correctly format test URI's that contain a
    retrieved IPv6 address
    + JDK-8221259: New tests for java.net.Socket to exercise long
    standing behavior
    + JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails
    on MacOS + Solaris
    + JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/
    /FocusTraversal.java fails on ubuntu
    + JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/
    /IconifyTest.java fails on ubuntu18.04
    + JDK-8222446: assert(C-&gt;env()-&gt;system_dictionary_modification_counter_changed())
    failed: Must invalidate if TypeFuncs differ
    + JDK-8223137: Rename predicate 'do_unroll_only()' to
    'is_unroll_only()'.
    + JDK-8223138: Small clean-up in loop-tree support.
    + JDK-8223139: Rename mandatory policy-do routines.
    + JDK-8223140: Clean-up in 'ok_to_convert()'
    + JDK-8223141: Change (count) suffix _ct into _cnt.
    + JDK-8223400: Replace some enums with static const members in
    hotspot/runtime
    + JDK-8223658: Performance regression of XML.validation in
    13-b19
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8224829: AsyncSSLSocketClose.java has timing issue
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226514: Replace wildcard address with loopback or local
    host in tests - part 17
    + JDK-8226943: compile error in libfollowref003.cpp  with XCode
    10.2 on macosx
    + JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed
    due to "SSLException: An established connection was aborted by
    the software in your host machine"
    + JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java
    fails on Windows7
    + JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently
    positions text
    + JDK-8230019: [REDO] compiler/types/correctness/* tests fail
    with "assert(recv == __null || recv-&gt;is_klass()) failed: wrong
    type"
    + JDK-8230067: Add optional automatic retry when running jtreg
    tests
    + JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests
    may fail on some platforms
    + JDK-8231501: VM crash in
    MethodData::clean_extra_data(CleanExtraDataClosure*):
    fatal error: unexpected tag 99
    + JDK-8233403: Improve verbosity of some httpclient tests
    + JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS
    + JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on
    MacOS
    + JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on
    MacOS
    + JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS
    + JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS
    + JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on
    macos
    + JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java  is
    failing on macos
    + JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails
    on macos
    + JDK-8233562: [TESTBUG] Swing StyledEditorKit test
    bug4506788.java fails on MacOS
    + JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing
    + JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on
    MacoS
    + JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos
    + JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java
    fails on macos
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails
    on macos
    + JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java
    fails on macos
    + JDK-8233637: [TESTBUG] Swing
    ActionListenerCalledTwiceTest.java fails on macos
    + JDK-8233638: [TESTBUG] Swing test
    ScreenMenuBarInputTwice.java fails on macos
    + JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails
    on macos
    + JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java  fails
    on macos
    + JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on
    macos
    + JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is
    failing on macos
    + JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is
    failing on macos
    + JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture
    Recognition in all the platforms
    + JDK-8234823: java/net/Socket/Timeouts.java testcase
    testTimedConnect2() fails on Windows 10
    + JDK-8235784: java/lang/invoke/VarHandles/
    /VarHandleTestByteArrayAsInt.java fails due to timeout with
    fastdebug bits
    + JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -Xcomp -XX:TieredStopAtLevel=1
    + JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60),
    cond_wait
    + JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT,
    when using proxy tunnel
    + JDK-8237354: Add option to jcmd to write a gzipped heap dump
    + JDK-8237589: Fix copyright header formatting
    + JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java
    should not specify TLS version
    + JDK-8239334: Tab Size does not work correctly in JTextArea
    with setLineWrap on
    + JDK-8239422: [TESTBUG]
    compiler/c1/TestPrintIRDuringConstruction.java failed when C1
    is disabled
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240256: Better resource cleaning for SunPKCS11 Provider
    + JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test
    Server
    + JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/
    /bug8020708.java fails in mach5 ubuntu system
    + JDK-8242793: Incorrect copyright header in
    ContinuousCallSiteTargetChange.java
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244292: Headful clients failing with
  - -illegal-access=deny
    + JDK-8245147: Refactor and improve utility of
    test/langtools/tools/javac/versions/Versions.java
    + JDK-8245165: Update bug id for
    javax/swing/text/StyledEditorKit/4506788/bug4506788.java in
    ProblemList
    + JDK-8245665: Test WeakAlg.java should only make sure no
    warning for weak signature algorithms by keytool on root CA
    + JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails
    after 8241072 (multi-homed systems)
    + JDK-8246807: Incorrect copyright header in
    TimeZoneDatePermissionCheck.sh
    + JDK-8247403: JShell: No custom input (e.g. from GUI) possible
    with JavaShellToolBuilder
    + JDK-8247510: typo in IllegalHandshakeMessage
    + JDK-8248187: [TESTBUG] javax/swing/plaf/basic/
    /BasicGraphicsUtils/8132119/bug8132119.java fails with String
    is not properly drawn
    + JDK-8248341: ProblemList java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java
    + JDK-8248500: AArch64: Remove the r18 dependency on Windows
    AArch64
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8249195: Change to Xcode 11.3.1 for building on Macos at
    Oracle
    + JDK-8250521: Configure initial RTO to use minimal retry for
    loopback connections on Windows
    + JDK-8250810: Push missing parts of JDK-8248817
    + JDK-8250839: Improve test template SSLEngineTemplate with
    SSLContextTemplate
    + JDK-8250863: Build error with GCC 10 in NetworkInterface.c
    and k_standard.c
    + JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/
    /gf08t001/TestDriver.java fails
    + JDK-8251155: HostIdentifier fails to canonicalize hostnames
    starting with digits
    + JDK-8251377: [macos11] JTabbedPane selected tab text is
    barely legible
    + JDK-8251570: JDK-8215624 causes assert(worker_id &lt;
    _n_workers) failed: Invalid worker_id
    + JDK-8251930: AArch64: Native types mismatch in hotspot
    + JDK-8252049: Native memory leak in ciMethodData ctor
    + JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x
    friendly
    + JDK-8252114: Windows-AArch64: Enable and test ZGC and
    ShenandoahGC
    + JDK-8253015: Aarch64: Move linux code out from generic CPU
    feature detection
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java
    fail on big screens
    + JDK-8253497: Core Libs Terminology Refresh
    + JDK-8253682: The AppletInitialFocusTest1.java is unstable
    + JDK-8253763: ParallelObjectIterator should have virtual
    destructor
    + JDK-8253866: Security Libs Terminology Refresh
    + JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in
    "try throwing in GET_BODY"
    + JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java
    intermittently failing with TestServer: start exception:
    java.io.IOException: Invalid preface
    + JDK-8255264: Support for identifying the full range of IPv4
    localhost addresses on Windows
    + JDK-8255716: AArch64: Regression: JVM crashes if manually
    offline a core
    + JDK-8255722: Create a new test for rotated blit
    + JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad
    + JDK-8256066: Tests use deprecated TestNG API that is no
    longer available in new versions
    + JDK-8256152: tests fail because of ambiguous method resolution
    + JDK-8256182: Update qemu-debootstrap cross-compilation recipe
    + JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/
    /FullscreenWindowProps.java failed
    + JDK-8256202: Some tweaks for jarsigner tests
    PosixPermissionsTest and SymLinkTest
    + JDK-8256372: [macos] Unexpected symbol was displayed on
    JTextField with Monospaced font
    + JDK-8256956: RegisterImpl::max_slots_per_register is
    incorrect on AMD64
    + JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with
    InvalidPathException on windows
    + JDK-8258855: Two tests sun/security/krb5/auto/
    /ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java
    failed on OL8.3
    + JDK-8259237: Demo selection changes with left/right arrow
    key. No need to press space for selection.
    + JDK-8260571: Add PrintMetaspaceStatistics to print metaspace
    statistics upon VM exit
    + JDK-8260690: JConsole User Guide Link from the Help menu is
    not accessible by keyboard
    + JDK-8261036: Reduce classes loaded by CleanerFactory
    initialization
    + JDK-8261071: AArch64: Refactor interpreter native wrappers
    + JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch
    implementation
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261297: NMT: Final report should use scale 1
    + JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java
    fails because Reserved memory size is too big
    + JDK-8261916: gtest/GTestWrapper.java
    vmErrorTest.unimplemented1_vm_assert failed
    + JDK-8262438: sun/security/ssl/SSLLogger/
    /LoggingFormatConsistency.java failed with "SocketException:
    Socket is closed"
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8262844: (fs) FileStore.supportsFileAttributeView might
    return false negative in case of ext3
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp
    + JDK-8263303: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8263362: Avoid division by 0 in
    java/awt/font/TextJustifier.java justify
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java
    failed with "java.lang.RuntimeException: Wrong method"
    + JDK-8264526: javax/swing/text/html/parser/Parser/8078268/
    /bug8078268.java timeout
    + JDK-8264824: java/net/Inet6Address/B6206527.java doesn't
    close ServerSocket properly
    + JDK-8265019: Update tests for additional TestNG test
    permissions
    + JDK-8265173: [test] divert spurious log output away from
    stream under test in ProcessBuilder Basic test
    + JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8266579: Update test/jdk/java/lang/ProcessHandle/
    /PermissionTest.java &amp; test/jdk/java/sql/testng/util/
    /TestPolicy.java
    + JDK-8266949: Check possibility to disable OperationTimedOut
    on Unix
    + JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg
    tests on many-core machines
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267304: Bump global JTReg memory limit to 768m
    + JDK-8267652: c2 loop unrolling by 8 results in reading memory
    past array
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268093: Manual Testcase: "sun/security/krb5/config/
    /native/TestDynamicStore.java" Fails with NPE
    + JDK-8268555: Update HttpClient tests that use ITestContext to
    jtreg 6+1
    + JDK-8268672: C2: assert(!loop-&gt;is_member(u_loop)) failed: can
    be in outer loop or out of both loops only
    + JDK-8269034: AccessControlException for SunPKCS11 daemon
    threads
    + JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to
    accessClassAndFindClass
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269768: JFR Terminology Refresh
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8269984: [macos] JTabbedPane title looks like  disabled
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270216: [macOS] Update named used for Java run loop mode
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270344: Session resumption errors
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1
    + JDK-8272181: Windows-AArch64:Backport fix of `Backtracing
    broken on PAC enabled systems`
    + JDK-8272316: Wrong Boot JDK help message in 11
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8272828: Add correct licenses to jszip.md
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java
    fails by timeout
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273541: Cleaner Thread creates with normal priority
    instead of MAX_PRIORITY - 2
    + JDK-8273547: [11u] [JVMCI] Partial module-info.java backport
    of JDK-8223332
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273671: Backport of 8260616 misses one JNF header
    inclusion removal
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273795: Zero SPARC64 debug builds fail due to missing
    interpreter fields
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274860: gcc 10.2.1 produces an uninitialized warning in
    sharedRuntimeTrig.cpp
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277815: Fix mistakes in legal header backports
- Removed patch:
  * riscv64-zero.patch
    + integrated upstream
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1644926400">- Update to upstream tag jdk-11.0.14.1+1
  * Changes:
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8281324: Bump update version for OpenJDK: jdk-11.0.14.1</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="d228cf216a56f2654c3c78bda621dc18244c169e1ba41c54093a9ad980c64ab7" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="11.0.15.0" rel="150000.3.80.1"/>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643630400">- Update to upstream tag jdk-11.0.14+9 (January 2022 CPU)
  * New features
    + JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
  * Security fixes
    + JDK-8217375: jarsigner breaks old signature with long lines
    in manifest
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
    + JDK-8279541: Improve HarfBuzz
  * Other changes
    + JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/
    /ChoiceKeyEventReaction.html fails
    + JDK-7105119: [TEST_BUG] [macosx] In test
    UIDefaults.toString() must be called with the invokeLater()
    + JDK-7151826: [TEST_BUG] [macosx] The test
    javax/swing/JPopupMenu/4966112/bug4966112.java not for mac
    + JDK-7179006: [macosx] Print-to-file doesn't work: printing to
    the default printer instead
    + JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/
    /bug4726194.java fails on MacOSX
    + JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003 Wrong
    number of thread end events
    + JDK-8039261: [TEST_BUG]: There is not a minimal security
    level in Java Preferences and the TestApplet.html is blocked.
    + JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/
    /AltTabCrashTest.java fails with exception
    + JDK-8075909: [TEST_BUG] The regression-swing case failed as
    it does not have the 'Open' button when select 'subdir' folder
    with NimbusLAF
    + JDK-8078219: Verify lack of @test tag in files in java/net
    test directory
    + JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails
    with "RuntimeException: Process terminated prematurely"
    + JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java timed out intermittently
    + JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails
    intermittently
    + JDK-8131745: java/lang/management/ThreadMXBean/
    /AllThreadIds.java still fails intermittently
    + JDK-8136517: [macosx] Test java/awt/Focus/8073453/
    /AWTFocusTransitionTest.java fails on MacOSX
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/
    /Test6541987.java fails
    + JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/
    /bug4760494.java leaves key pressed
    + JDK-8159904: [TEST_BUG] Failure on solaris of
    java/awt/Window/MultiWindowApp/MultiWindowAppTest.java
    + JDK-8163086: java/awt/Window/TranslucentJAppletTest/
    /TranslucentJAppletTest.java fails
    + JDK-8165828: [TEST_BUG] The reg case: javax/swing/plaf/metal/
    /MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look
    and Feel
    + JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not
    fired! on Windows
    + JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException:
    Default button is not pressed
    + JDK-8169959: javax/swing/JTable/6263446/bug6263446.java:
    Table should be editing
    + JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/
    /7156657/bug7156657.java fails on OS X
    + JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails
    on Windows
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8179880: Refactor javax/security shell tests to plain
    java tests
    + JDK-8180568: Refactor javax/crypto shell tests to plain java
    tests
    + JDK-8180569: Refactor sun/security/krb5/ shell tests to plain
    java tests
    + JDK-8180571: Refactor sun/security/pkcs11 shell tests to
    plain java tests and fix failures
    + JDK-8180573: Refactor sun/security/tools shell tests to plain
    java tests
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8195703: BasicJDWPConnectionTest.java: 'App exited
    unexpectedly with 2'
    + JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java
    fails
    + JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java
    fails
    + JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/
    /NoEventsTest.java fails on Windows
    + JDK-8197811: Test java/awt/Choice/PopupPosTest/
    /PopupPosTest.java fails on Windows
    + JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java
    fails on mac
    + JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java
    fails on mac
    + JDK-8198619: java/awt/Focus/FocusTraversalPolicy/
    /ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java
    fails on mac
    + JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/
    /EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java
    fails on mac
    + JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/
    /SubMenuShowTest/SubMenuShowTest.html fails on mac
    + JDK-8199138: Add RISC-V support to Zero
    + JDK-8199529: javax/swing/text/Utilities/8142966/
    /SwingFontMetricsTest.java fails on windows
    + JDK-8201224: Make string buffer size dynamic in
    mlvmJvmtiUtils.c
    + JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/
    /FollowReferences/followref003/TestDescription.java fails with
    "Location mismatch" errors
    + JDK-8204161: [TESTBUG] auto failed with the "Applet thread
    threw exception: java.lang.UnsupportedOperationException"
    exception
    + JDK-8206085: Refactor
    langtools/tools/javac/versions/Versions.java
    + JDK-8207936: TestZipFile failed with java.lang.AssertionError
    exception
    + JDK-8208242: Add @requires to vmTestbase/gc/g1 tests
    + JDK-8209611: use C++ compiler for hotspot tests
    + JDK-8210182: Remove macros for C compilation from vmTestBase
    but non jvmti
    + JDK-8210198: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[A-F] tests
    + JDK-8210205: build fails on AIX in hotspot cpp tests (for
    example getstacktr001.cpp)
    + JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/
    /jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION
    on windows-x86
    + JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java
    back to tier1
    + JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[A-N] tests
    + JDK-8210392: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8210395: Add doc to SecurityTools.java
    + JDK-8210429: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[G-Z] tests
    + JDK-8210481: Remove #ifdef cplusplus from vmTestbase
    + JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[N-R] tests
    + JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[R-U] tests
    + JDK-8210689: Remove the multi-line old C style for string
    literals
    + JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti/unit tests
    + JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665
    + JDK-8210920: Native C++ tests are not using CXXFLAGS
    + JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR:
    hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti,
    thread)"
    + JDK-8211036: Remove the NSK_STUB macros from vmTestbase for
    non jvmti
    + JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[G-I]*
    + JDK-8211148: var in implicit lambdas shouldn't be accepted
    for source &lt; 11
    + JDK-8211171: move JarUtils to top-level testlibrary
    + JDK-8211227: Inconsistent TLS protocol version in debug output
    + JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[A-G]*
    + JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp
    + JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[I-S]*
    + JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[A-E]
    + JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[E-M]
    + JDK-8211905: Remove multiple casts for EM06 file
    + JDK-8211999: Window positioning bugs due to overlapping
    GraphicsDevice bounds (Windows/HiDPI)
    + JDK-8212082: Remove the NSK_CPP_STUB macros for remaining
    vmTestbase/jvmti/[sS]*
    + JDK-8212083: Handle remaining gc/lock native code and fix two
    strings
    + JDK-8212148: Remove remaining NSK_CPP_STUBs
    + JDK-8213110: Remove the use of applets in automatic tests
    + JDK-8213189: Make restricted headers in HTTP Client
    configurable and remove Date by default
    + JDK-8213263: fix legal headers in test/langtools
    + JDK-8213296: Fix legal headers in test/jdk/java/net
    + JDK-8213301: Fix legal headers in jdk logging tests
    + JDK-8213305: Fix legal headers in test/java/math
    + JDK-8213306: Fix legal headers in test/java/nio
    + JDK-8213328: Update test copyrights in test/java/util/zip and
    test/jdk/tools
    + JDK-8213330: Fix legal headers in i18n tests
    + JDK-8213707: [TEST] vmTestbase/nsk/stress/except/
    /except011.java failed due to wrong class name
    + JDK-8214469: [macos] PIT: java/awt/Choice/
    /ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails
    + JDK-8215410: Regression test for JDK-8214994
    + JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher
    + JDK-8215624: Add parallel heap iteration for jmap \u2013histo
    + JDK-8215889: assert(!_unloading) failed: This oop is not
    available to unloading class loader data with ZGC
    + JDK-8216318: The usage of Disposer in the java.awt.Robot can
    be deleted
    + JDK-8216417: cleanup of IPv6 scope-id handling
    + JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java
    failed with UnsupportedOperation exception
    + JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX
    + JDK-8217633: Configurable extensions with system properties
    + JDK-8217882: java/net/httpclient/MaxStreams.java failed once
    + JDK-8217903: java/net/httpclient/Response204.java fails with
    404
    + JDK-8218483: Crash in
    "assert(_daemon_threads_count-&gt;get_value() &gt; daemon_count)
    failed: thread count mismatch 5 : 5"
    + JDK-8219986: Change to Xcode 10.1 for building on Macosx at
    Oracle
    + JDK-8220575: Correctly format test URI's that contain a
    retrieved IPv6 address
    + JDK-8221259: New tests for java.net.Socket to exercise long
    standing behavior
    + JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails
    on MacOS + Solaris
    + JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/
    /FocusTraversal.java fails on ubuntu
    + JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/
    /IconifyTest.java fails on ubuntu18.04
    + JDK-8222446: assert(C-&gt;env()-&gt;system_dictionary_modification_counter_changed())
    failed: Must invalidate if TypeFuncs differ
    + JDK-8223137: Rename predicate 'do_unroll_only()' to
    'is_unroll_only()'.
    + JDK-8223138: Small clean-up in loop-tree support.
    + JDK-8223139: Rename mandatory policy-do routines.
    + JDK-8223140: Clean-up in 'ok_to_convert()'
    + JDK-8223141: Change (count) suffix _ct into _cnt.
    + JDK-8223400: Replace some enums with static const members in
    hotspot/runtime
    + JDK-8223658: Performance regression of XML.validation in
    13-b19
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8224829: AsyncSSLSocketClose.java has timing issue
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226514: Replace wildcard address with loopback or local
    host in tests - part 17
    + JDK-8226943: compile error in libfollowref003.cpp  with XCode
    10.2 on macosx
    + JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed
    due to "SSLException: An established connection was aborted by
    the software in your host machine"
    + JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java
    fails on Windows7
    + JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently
    positions text
    + JDK-8230019: [REDO] compiler/types/correctness/* tests fail
    with "assert(recv == __null || recv-&gt;is_klass()) failed: wrong
    type"
    + JDK-8230067: Add optional automatic retry when running jtreg
    tests
    + JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests
    may fail on some platforms
    + JDK-8231501: VM crash in
    MethodData::clean_extra_data(CleanExtraDataClosure*):
    fatal error: unexpected tag 99
    + JDK-8233403: Improve verbosity of some httpclient tests
    + JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS
    + JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on
    MacOS
    + JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on
    MacOS
    + JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS
    + JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS
    + JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on
    macos
    + JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java  is
    failing on macos
    + JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails
    on macos
    + JDK-8233562: [TESTBUG] Swing StyledEditorKit test
    bug4506788.java fails on MacOS
    + JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing
    + JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on
    MacoS
    + JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos
    + JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java
    fails on macos
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails
    on macos
    + JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java
    fails on macos
    + JDK-8233637: [TESTBUG] Swing
    ActionListenerCalledTwiceTest.java fails on macos
    + JDK-8233638: [TESTBUG] Swing test
    ScreenMenuBarInputTwice.java fails on macos
    + JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails
    on macos
    + JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java  fails
    on macos
    + JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on
    macos
    + JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is
    failing on macos
    + JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is
    failing on macos
    + JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture
    Recognition in all the platforms
    + JDK-8234823: java/net/Socket/Timeouts.java testcase
    testTimedConnect2() fails on Windows 10
    + JDK-8235784: java/lang/invoke/VarHandles/
    /VarHandleTestByteArrayAsInt.java fails due to timeout with
    fastdebug bits
    + JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -Xcomp -XX:TieredStopAtLevel=1
    + JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60),
    cond_wait
    + JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT,
    when using proxy tunnel
    + JDK-8237354: Add option to jcmd to write a gzipped heap dump
    + JDK-8237589: Fix copyright header formatting
    + JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java
    should not specify TLS version
    + JDK-8239334: Tab Size does not work correctly in JTextArea
    with setLineWrap on
    + JDK-8239422: [TESTBUG]
    compiler/c1/TestPrintIRDuringConstruction.java failed when C1
    is disabled
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240256: Better resource cleaning for SunPKCS11 Provider
    + JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test
    Server
    + JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/
    /bug8020708.java fails in mach5 ubuntu system
    + JDK-8242793: Incorrect copyright header in
    ContinuousCallSiteTargetChange.java
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244292: Headful clients failing with
  - -illegal-access=deny
    + JDK-8245147: Refactor and improve utility of
    test/langtools/tools/javac/versions/Versions.java
    + JDK-8245165: Update bug id for
    javax/swing/text/StyledEditorKit/4506788/bug4506788.java in
    ProblemList
    + JDK-8245665: Test WeakAlg.java should only make sure no
    warning for weak signature algorithms by keytool on root CA
    + JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails
    after 8241072 (multi-homed systems)
    + JDK-8246807: Incorrect copyright header in
    TimeZoneDatePermissionCheck.sh
    + JDK-8247403: JShell: No custom input (e.g. from GUI) possible
    with JavaShellToolBuilder
    + JDK-8247510: typo in IllegalHandshakeMessage
    + JDK-8248187: [TESTBUG] javax/swing/plaf/basic/
    /BasicGraphicsUtils/8132119/bug8132119.java fails with String
    is not properly drawn
    + JDK-8248341: ProblemList java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java
    + JDK-8248500: AArch64: Remove the r18 dependency on Windows
    AArch64
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8249195: Change to Xcode 11.3.1 for building on Macos at
    Oracle
    + JDK-8250521: Configure initial RTO to use minimal retry for
    loopback connections on Windows
    + JDK-8250810: Push missing parts of JDK-8248817
    + JDK-8250839: Improve test template SSLEngineTemplate with
    SSLContextTemplate
    + JDK-8250863: Build error with GCC 10 in NetworkInterface.c
    and k_standard.c
    + JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/
    /gf08t001/TestDriver.java fails
    + JDK-8251155: HostIdentifier fails to canonicalize hostnames
    starting with digits
    + JDK-8251377: [macos11] JTabbedPane selected tab text is
    barely legible
    + JDK-8251570: JDK-8215624 causes assert(worker_id &lt;
    _n_workers) failed: Invalid worker_id
    + JDK-8251930: AArch64: Native types mismatch in hotspot
    + JDK-8252049: Native memory leak in ciMethodData ctor
    + JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x
    friendly
    + JDK-8252114: Windows-AArch64: Enable and test ZGC and
    ShenandoahGC
    + JDK-8253015: Aarch64: Move linux code out from generic CPU
    feature detection
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java
    fail on big screens
    + JDK-8253497: Core Libs Terminology Refresh
    + JDK-8253682: The AppletInitialFocusTest1.java is unstable
    + JDK-8253763: ParallelObjectIterator should have virtual
    destructor
    + JDK-8253866: Security Libs Terminology Refresh
    + JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in
    "try throwing in GET_BODY"
    + JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java
    intermittently failing with TestServer: start exception:
    java.io.IOException: Invalid preface
    + JDK-8255264: Support for identifying the full range of IPv4
    localhost addresses on Windows
    + JDK-8255716: AArch64: Regression: JVM crashes if manually
    offline a core
    + JDK-8255722: Create a new test for rotated blit
    + JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad
    + JDK-8256066: Tests use deprecated TestNG API that is no
    longer available in new versions
    + JDK-8256152: tests fail because of ambiguous method resolution
    + JDK-8256182: Update qemu-debootstrap cross-compilation recipe
    + JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/
    /FullscreenWindowProps.java failed
    + JDK-8256202: Some tweaks for jarsigner tests
    PosixPermissionsTest and SymLinkTest
    + JDK-8256372: [macos] Unexpected symbol was displayed on
    JTextField with Monospaced font
    + JDK-8256956: RegisterImpl::max_slots_per_register is
    incorrect on AMD64
    + JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with
    InvalidPathException on windows
    + JDK-8258855: Two tests sun/security/krb5/auto/
    /ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java
    failed on OL8.3
    + JDK-8259237: Demo selection changes with left/right arrow
    key. No need to press space for selection.
    + JDK-8260571: Add PrintMetaspaceStatistics to print metaspace
    statistics upon VM exit
    + JDK-8260690: JConsole User Guide Link from the Help menu is
    not accessible by keyboard
    + JDK-8261036: Reduce classes loaded by CleanerFactory
    initialization
    + JDK-8261071: AArch64: Refactor interpreter native wrappers
    + JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch
    implementation
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261297: NMT: Final report should use scale 1
    + JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java
    fails because Reserved memory size is too big
    + JDK-8261916: gtest/GTestWrapper.java
    vmErrorTest.unimplemented1_vm_assert failed
    + JDK-8262438: sun/security/ssl/SSLLogger/
    /LoggingFormatConsistency.java failed with "SocketException:
    Socket is closed"
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8262844: (fs) FileStore.supportsFileAttributeView might
    return false negative in case of ext3
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp
    + JDK-8263303: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8263362: Avoid division by 0 in
    java/awt/font/TextJustifier.java justify
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java
    failed with "java.lang.RuntimeException: Wrong method"
    + JDK-8264526: javax/swing/text/html/parser/Parser/8078268/
    /bug8078268.java timeout
    + JDK-8264824: java/net/Inet6Address/B6206527.java doesn't
    close ServerSocket properly
    + JDK-8265019: Update tests for additional TestNG test
    permissions
    + JDK-8265173: [test] divert spurious log output away from
    stream under test in ProcessBuilder Basic test
    + JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8266579: Update test/jdk/java/lang/ProcessHandle/
    /PermissionTest.java &amp; test/jdk/java/sql/testng/util/
    /TestPolicy.java
    + JDK-8266949: Check possibility to disable OperationTimedOut
    on Unix
    + JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg
    tests on many-core machines
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267304: Bump global JTReg memory limit to 768m
    + JDK-8267652: c2 loop unrolling by 8 results in reading memory
    past array
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268093: Manual Testcase: "sun/security/krb5/config/
    /native/TestDynamicStore.java" Fails with NPE
    + JDK-8268555: Update HttpClient tests that use ITestContext to
    jtreg 6+1
    + JDK-8268672: C2: assert(!loop-&gt;is_member(u_loop)) failed: can
    be in outer loop or out of both loops only
    + JDK-8269034: AccessControlException for SunPKCS11 daemon
    threads
    + JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to
    accessClassAndFindClass
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269768: JFR Terminology Refresh
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8269984: [macos] JTabbedPane title looks like  disabled
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270216: [macOS] Update named used for Java run loop mode
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270344: Session resumption errors
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1
    + JDK-8272181: Windows-AArch64:Backport fix of `Backtracing
    broken on PAC enabled systems`
    + JDK-8272316: Wrong Boot JDK help message in 11
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8272828: Add correct licenses to jszip.md
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java
    fails by timeout
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273541: Cleaner Thread creates with normal priority
    instead of MAX_PRIORITY - 2
    + JDK-8273547: [11u] [JVMCI] Partial module-info.java backport
    of JDK-8223332
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273671: Backport of 8260616 misses one JNF header
    inclusion removal
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273795: Zero SPARC64 debug builds fail due to missing
    interpreter fields
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274860: gcc 10.2.1 produces an uninitialized warning in
    sharedRuntimeTrig.cpp
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277815: Fix mistakes in legal header backports
- Removed patch:
  * riscv64-zero.patch
    + integrated upstream
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1644926400">- Update to upstream tag jdk-11.0.14.1+1
  * Changes:
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8281324: Bump update version for OpenJDK: jdk-11.0.14.1</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="0f56d00e2fb8c10aedfd35f789a036f1e644c0c6c5795077dd76729334acd4a3" name="java-11-openjdk-headless" arch="aarch64">
  <version epoch="0" ver="11.0.15.0" rel="150000.3.80.1"/>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643630400">- Update to upstream tag jdk-11.0.14+9 (January 2022 CPU)
  * New features
    + JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
  * Security fixes
    + JDK-8217375: jarsigner breaks old signature with long lines
    in manifest
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
    + JDK-8279541: Improve HarfBuzz
  * Other changes
    + JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/
    /ChoiceKeyEventReaction.html fails
    + JDK-7105119: [TEST_BUG] [macosx] In test
    UIDefaults.toString() must be called with the invokeLater()
    + JDK-7151826: [TEST_BUG] [macosx] The test
    javax/swing/JPopupMenu/4966112/bug4966112.java not for mac
    + JDK-7179006: [macosx] Print-to-file doesn't work: printing to
    the default printer instead
    + JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/
    /bug4726194.java fails on MacOSX
    + JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003 Wrong
    number of thread end events
    + JDK-8039261: [TEST_BUG]: There is not a minimal security
    level in Java Preferences and the TestApplet.html is blocked.
    + JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/
    /AltTabCrashTest.java fails with exception
    + JDK-8075909: [TEST_BUG] The regression-swing case failed as
    it does not have the 'Open' button when select 'subdir' folder
    with NimbusLAF
    + JDK-8078219: Verify lack of @test tag in files in java/net
    test directory
    + JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails
    with "RuntimeException: Process terminated prematurely"
    + JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java timed out intermittently
    + JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails
    intermittently
    + JDK-8131745: java/lang/management/ThreadMXBean/
    /AllThreadIds.java still fails intermittently
    + JDK-8136517: [macosx] Test java/awt/Focus/8073453/
    /AWTFocusTransitionTest.java fails on MacOSX
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/
    /Test6541987.java fails
    + JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/
    /bug4760494.java leaves key pressed
    + JDK-8159904: [TEST_BUG] Failure on solaris of
    java/awt/Window/MultiWindowApp/MultiWindowAppTest.java
    + JDK-8163086: java/awt/Window/TranslucentJAppletTest/
    /TranslucentJAppletTest.java fails
    + JDK-8165828: [TEST_BUG] The reg case: javax/swing/plaf/metal/
    /MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look
    and Feel
    + JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not
    fired! on Windows
    + JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException:
    Default button is not pressed
    + JDK-8169959: javax/swing/JTable/6263446/bug6263446.java:
    Table should be editing
    + JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/
    /7156657/bug7156657.java fails on OS X
    + JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails
    on Windows
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8179880: Refactor javax/security shell tests to plain
    java tests
    + JDK-8180568: Refactor javax/crypto shell tests to plain java
    tests
    + JDK-8180569: Refactor sun/security/krb5/ shell tests to plain
    java tests
    + JDK-8180571: Refactor sun/security/pkcs11 shell tests to
    plain java tests and fix failures
    + JDK-8180573: Refactor sun/security/tools shell tests to plain
    java tests
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8195703: BasicJDWPConnectionTest.java: 'App exited
    unexpectedly with 2'
    + JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java
    fails
    + JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java
    fails
    + JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/
    /NoEventsTest.java fails on Windows
    + JDK-8197811: Test java/awt/Choice/PopupPosTest/
    /PopupPosTest.java fails on Windows
    + JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java
    fails on mac
    + JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java
    fails on mac
    + JDK-8198619: java/awt/Focus/FocusTraversalPolicy/
    /ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java
    fails on mac
    + JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/
    /EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java
    fails on mac
    + JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/
    /SubMenuShowTest/SubMenuShowTest.html fails on mac
    + JDK-8199138: Add RISC-V support to Zero
    + JDK-8199529: javax/swing/text/Utilities/8142966/
    /SwingFontMetricsTest.java fails on windows
    + JDK-8201224: Make string buffer size dynamic in
    mlvmJvmtiUtils.c
    + JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/
    /FollowReferences/followref003/TestDescription.java fails with
    "Location mismatch" errors
    + JDK-8204161: [TESTBUG] auto failed with the "Applet thread
    threw exception: java.lang.UnsupportedOperationException"
    exception
    + JDK-8206085: Refactor
    langtools/tools/javac/versions/Versions.java
    + JDK-8207936: TestZipFile failed with java.lang.AssertionError
    exception
    + JDK-8208242: Add @requires to vmTestbase/gc/g1 tests
    + JDK-8209611: use C++ compiler for hotspot tests
    + JDK-8210182: Remove macros for C compilation from vmTestBase
    but non jvmti
    + JDK-8210198: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[A-F] tests
    + JDK-8210205: build fails on AIX in hotspot cpp tests (for
    example getstacktr001.cpp)
    + JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/
    /jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION
    on windows-x86
    + JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java
    back to tier1
    + JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[A-N] tests
    + JDK-8210392: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8210395: Add doc to SecurityTools.java
    + JDK-8210429: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[G-Z] tests
    + JDK-8210481: Remove #ifdef cplusplus from vmTestbase
    + JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[N-R] tests
    + JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[R-U] tests
    + JDK-8210689: Remove the multi-line old C style for string
    literals
    + JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti/unit tests
    + JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665
    + JDK-8210920: Native C++ tests are not using CXXFLAGS
    + JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR:
    hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti,
    thread)"
    + JDK-8211036: Remove the NSK_STUB macros from vmTestbase for
    non jvmti
    + JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[G-I]*
    + JDK-8211148: var in implicit lambdas shouldn't be accepted
    for source &lt; 11
    + JDK-8211171: move JarUtils to top-level testlibrary
    + JDK-8211227: Inconsistent TLS protocol version in debug output
    + JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[A-G]*
    + JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp
    + JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[I-S]*
    + JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[A-E]
    + JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[E-M]
    + JDK-8211905: Remove multiple casts for EM06 file
    + JDK-8211999: Window positioning bugs due to overlapping
    GraphicsDevice bounds (Windows/HiDPI)
    + JDK-8212082: Remove the NSK_CPP_STUB macros for remaining
    vmTestbase/jvmti/[sS]*
    + JDK-8212083: Handle remaining gc/lock native code and fix two
    strings
    + JDK-8212148: Remove remaining NSK_CPP_STUBs
    + JDK-8213110: Remove the use of applets in automatic tests
    + JDK-8213189: Make restricted headers in HTTP Client
    configurable and remove Date by default
    + JDK-8213263: fix legal headers in test/langtools
    + JDK-8213296: Fix legal headers in test/jdk/java/net
    + JDK-8213301: Fix legal headers in jdk logging tests
    + JDK-8213305: Fix legal headers in test/java/math
    + JDK-8213306: Fix legal headers in test/java/nio
    + JDK-8213328: Update test copyrights in test/java/util/zip and
    test/jdk/tools
    + JDK-8213330: Fix legal headers in i18n tests
    + JDK-8213707: [TEST] vmTestbase/nsk/stress/except/
    /except011.java failed due to wrong class name
    + JDK-8214469: [macos] PIT: java/awt/Choice/
    /ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails
    + JDK-8215410: Regression test for JDK-8214994
    + JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher
    + JDK-8215624: Add parallel heap iteration for jmap \u2013histo
    + JDK-8215889: assert(!_unloading) failed: This oop is not
    available to unloading class loader data with ZGC
    + JDK-8216318: The usage of Disposer in the java.awt.Robot can
    be deleted
    + JDK-8216417: cleanup of IPv6 scope-id handling
    + JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java
    failed with UnsupportedOperation exception
    + JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX
    + JDK-8217633: Configurable extensions with system properties
    + JDK-8217882: java/net/httpclient/MaxStreams.java failed once
    + JDK-8217903: java/net/httpclient/Response204.java fails with
    404
    + JDK-8218483: Crash in
    "assert(_daemon_threads_count-&gt;get_value() &gt; daemon_count)
    failed: thread count mismatch 5 : 5"
    + JDK-8219986: Change to Xcode 10.1 for building on Macosx at
    Oracle
    + JDK-8220575: Correctly format test URI's that contain a
    retrieved IPv6 address
    + JDK-8221259: New tests for java.net.Socket to exercise long
    standing behavior
    + JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails
    on MacOS + Solaris
    + JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/
    /FocusTraversal.java fails on ubuntu
    + JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/
    /IconifyTest.java fails on ubuntu18.04
    + JDK-8222446: assert(C-&gt;env()-&gt;system_dictionary_modification_counter_changed())
    failed: Must invalidate if TypeFuncs differ
    + JDK-8223137: Rename predicate 'do_unroll_only()' to
    'is_unroll_only()'.
    + JDK-8223138: Small clean-up in loop-tree support.
    + JDK-8223139: Rename mandatory policy-do routines.
    + JDK-8223140: Clean-up in 'ok_to_convert()'
    + JDK-8223141: Change (count) suffix _ct into _cnt.
    + JDK-8223400: Replace some enums with static const members in
    hotspot/runtime
    + JDK-8223658: Performance regression of XML.validation in
    13-b19
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8224829: AsyncSSLSocketClose.java has timing issue
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226514: Replace wildcard address with loopback or local
    host in tests - part 17
    + JDK-8226943: compile error in libfollowref003.cpp  with XCode
    10.2 on macosx
    + JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed
    due to "SSLException: An established connection was aborted by
    the software in your host machine"
    + JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java
    fails on Windows7
    + JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently
    positions text
    + JDK-8230019: [REDO] compiler/types/correctness/* tests fail
    with "assert(recv == __null || recv-&gt;is_klass()) failed: wrong
    type"
    + JDK-8230067: Add optional automatic retry when running jtreg
    tests
    + JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests
    may fail on some platforms
    + JDK-8231501: VM crash in
    MethodData::clean_extra_data(CleanExtraDataClosure*):
    fatal error: unexpected tag 99
    + JDK-8233403: Improve verbosity of some httpclient tests
    + JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS
    + JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on
    MacOS
    + JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on
    MacOS
    + JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS
    + JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS
    + JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on
    macos
    + JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java  is
    failing on macos
    + JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails
    on macos
    + JDK-8233562: [TESTBUG] Swing StyledEditorKit test
    bug4506788.java fails on MacOS
    + JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing
    + JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on
    MacoS
    + JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos
    + JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java
    fails on macos
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails
    on macos
    + JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java
    fails on macos
    + JDK-8233637: [TESTBUG] Swing
    ActionListenerCalledTwiceTest.java fails on macos
    + JDK-8233638: [TESTBUG] Swing test
    ScreenMenuBarInputTwice.java fails on macos
    + JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails
    on macos
    + JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java  fails
    on macos
    + JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on
    macos
    + JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is
    failing on macos
    + JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is
    failing on macos
    + JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture
    Recognition in all the platforms
    + JDK-8234823: java/net/Socket/Timeouts.java testcase
    testTimedConnect2() fails on Windows 10
    + JDK-8235784: java/lang/invoke/VarHandles/
    /VarHandleTestByteArrayAsInt.java fails due to timeout with
    fastdebug bits
    + JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -Xcomp -XX:TieredStopAtLevel=1
    + JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60),
    cond_wait
    + JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT,
    when using proxy tunnel
    + JDK-8237354: Add option to jcmd to write a gzipped heap dump
    + JDK-8237589: Fix copyright header formatting
    + JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java
    should not specify TLS version
    + JDK-8239334: Tab Size does not work correctly in JTextArea
    with setLineWrap on
    + JDK-8239422: [TESTBUG]
    compiler/c1/TestPrintIRDuringConstruction.java failed when C1
    is disabled
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240256: Better resource cleaning for SunPKCS11 Provider
    + JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test
    Server
    + JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/
    /bug8020708.java fails in mach5 ubuntu system
    + JDK-8242793: Incorrect copyright header in
    ContinuousCallSiteTargetChange.java
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244292: Headful clients failing with
  - -illegal-access=deny
    + JDK-8245147: Refactor and improve utility of
    test/langtools/tools/javac/versions/Versions.java
    + JDK-8245165: Update bug id for
    javax/swing/text/StyledEditorKit/4506788/bug4506788.java in
    ProblemList
    + JDK-8245665: Test WeakAlg.java should only make sure no
    warning for weak signature algorithms by keytool on root CA
    + JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails
    after 8241072 (multi-homed systems)
    + JDK-8246807: Incorrect copyright header in
    TimeZoneDatePermissionCheck.sh
    + JDK-8247403: JShell: No custom input (e.g. from GUI) possible
    with JavaShellToolBuilder
    + JDK-8247510: typo in IllegalHandshakeMessage
    + JDK-8248187: [TESTBUG] javax/swing/plaf/basic/
    /BasicGraphicsUtils/8132119/bug8132119.java fails with String
    is not properly drawn
    + JDK-8248341: ProblemList java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java
    + JDK-8248500: AArch64: Remove the r18 dependency on Windows
    AArch64
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8249195: Change to Xcode 11.3.1 for building on Macos at
    Oracle
    + JDK-8250521: Configure initial RTO to use minimal retry for
    loopback connections on Windows
    + JDK-8250810: Push missing parts of JDK-8248817
    + JDK-8250839: Improve test template SSLEngineTemplate with
    SSLContextTemplate
    + JDK-8250863: Build error with GCC 10 in NetworkInterface.c
    and k_standard.c
    + JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/
    /gf08t001/TestDriver.java fails
    + JDK-8251155: HostIdentifier fails to canonicalize hostnames
    starting with digits
    + JDK-8251377: [macos11] JTabbedPane selected tab text is
    barely legible
    + JDK-8251570: JDK-8215624 causes assert(worker_id &lt;
    _n_workers) failed: Invalid worker_id
    + JDK-8251930: AArch64: Native types mismatch in hotspot
    + JDK-8252049: Native memory leak in ciMethodData ctor
    + JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x
    friendly
    + JDK-8252114: Windows-AArch64: Enable and test ZGC and
    ShenandoahGC
    + JDK-8253015: Aarch64: Move linux code out from generic CPU
    feature detection
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java
    fail on big screens
    + JDK-8253497: Core Libs Terminology Refresh
    + JDK-8253682: The AppletInitialFocusTest1.java is unstable
    + JDK-8253763: ParallelObjectIterator should have virtual
    destructor
    + JDK-8253866: Security Libs Terminology Refresh
    + JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in
    "try throwing in GET_BODY"
    + JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java
    intermittently failing with TestServer: start exception:
    java.io.IOException: Invalid preface
    + JDK-8255264: Support for identifying the full range of IPv4
    localhost addresses on Windows
    + JDK-8255716: AArch64: Regression: JVM crashes if manually
    offline a core
    + JDK-8255722: Create a new test for rotated blit
    + JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad
    + JDK-8256066: Tests use deprecated TestNG API that is no
    longer available in new versions
    + JDK-8256152: tests fail because of ambiguous method resolution
    + JDK-8256182: Update qemu-debootstrap cross-compilation recipe
    + JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/
    /FullscreenWindowProps.java failed
    + JDK-8256202: Some tweaks for jarsigner tests
    PosixPermissionsTest and SymLinkTest
    + JDK-8256372: [macos] Unexpected symbol was displayed on
    JTextField with Monospaced font
    + JDK-8256956: RegisterImpl::max_slots_per_register is
    incorrect on AMD64
    + JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with
    InvalidPathException on windows
    + JDK-8258855: Two tests sun/security/krb5/auto/
    /ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java
    failed on OL8.3
    + JDK-8259237: Demo selection changes with left/right arrow
    key. No need to press space for selection.
    + JDK-8260571: Add PrintMetaspaceStatistics to print metaspace
    statistics upon VM exit
    + JDK-8260690: JConsole User Guide Link from the Help menu is
    not accessible by keyboard
    + JDK-8261036: Reduce classes loaded by CleanerFactory
    initialization
    + JDK-8261071: AArch64: Refactor interpreter native wrappers
    + JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch
    implementation
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261297: NMT: Final report should use scale 1
    + JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java
    fails because Reserved memory size is too big
    + JDK-8261916: gtest/GTestWrapper.java
    vmErrorTest.unimplemented1_vm_assert failed
    + JDK-8262438: sun/security/ssl/SSLLogger/
    /LoggingFormatConsistency.java failed with "SocketException:
    Socket is closed"
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8262844: (fs) FileStore.supportsFileAttributeView might
    return false negative in case of ext3
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp
    + JDK-8263303: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8263362: Avoid division by 0 in
    java/awt/font/TextJustifier.java justify
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java
    failed with "java.lang.RuntimeException: Wrong method"
    + JDK-8264526: javax/swing/text/html/parser/Parser/8078268/
    /bug8078268.java timeout
    + JDK-8264824: java/net/Inet6Address/B6206527.java doesn't
    close ServerSocket properly
    + JDK-8265019: Update tests for additional TestNG test
    permissions
    + JDK-8265173: [test] divert spurious log output away from
    stream under test in ProcessBuilder Basic test
    + JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8266579: Update test/jdk/java/lang/ProcessHandle/
    /PermissionTest.java &amp; test/jdk/java/sql/testng/util/
    /TestPolicy.java
    + JDK-8266949: Check possibility to disable OperationTimedOut
    on Unix
    + JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg
    tests on many-core machines
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267304: Bump global JTReg memory limit to 768m
    + JDK-8267652: c2 loop unrolling by 8 results in reading memory
    past array
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268093: Manual Testcase: "sun/security/krb5/config/
    /native/TestDynamicStore.java" Fails with NPE
    + JDK-8268555: Update HttpClient tests that use ITestContext to
    jtreg 6+1
    + JDK-8268672: C2: assert(!loop-&gt;is_member(u_loop)) failed: can
    be in outer loop or out of both loops only
    + JDK-8269034: AccessControlException for SunPKCS11 daemon
    threads
    + JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to
    accessClassAndFindClass
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269768: JFR Terminology Refresh
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8269984: [macos] JTabbedPane title looks like  disabled
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270216: [macOS] Update named used for Java run loop mode
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270344: Session resumption errors
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1
    + JDK-8272181: Windows-AArch64:Backport fix of `Backtracing
    broken on PAC enabled systems`
    + JDK-8272316: Wrong Boot JDK help message in 11
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8272828: Add correct licenses to jszip.md
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java
    fails by timeout
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273541: Cleaner Thread creates with normal priority
    instead of MAX_PRIORITY - 2
    + JDK-8273547: [11u] [JVMCI] Partial module-info.java backport
    of JDK-8223332
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273671: Backport of 8260616 misses one JNF header
    inclusion removal
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273795: Zero SPARC64 debug builds fail due to missing
    interpreter fields
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274860: gcc 10.2.1 produces an uninitialized warning in
    sharedRuntimeTrig.cpp
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277815: Fix mistakes in legal header backports
- Removed patch:
  * riscv64-zero.patch
    + integrated upstream
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1644926400">- Update to upstream tag jdk-11.0.14.1+1
  * Changes:
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8281324: Bump update version for OpenJDK: jdk-11.0.14.1</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="f7bf43df91ebfa5c1111226cf8ccea9d6d8b995ac4598819ae3ab365cbe0ab9f" name="java-11-openjdk-headless" arch="ppc64le">
  <version epoch="0" ver="11.0.15.0" rel="150000.3.80.1"/>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643630400">- Update to upstream tag jdk-11.0.14+9 (January 2022 CPU)
  * New features
    + JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
  * Security fixes
    + JDK-8217375: jarsigner breaks old signature with long lines
    in manifest
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
    + JDK-8279541: Improve HarfBuzz
  * Other changes
    + JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/
    /ChoiceKeyEventReaction.html fails
    + JDK-7105119: [TEST_BUG] [macosx] In test
    UIDefaults.toString() must be called with the invokeLater()
    + JDK-7151826: [TEST_BUG] [macosx] The test
    javax/swing/JPopupMenu/4966112/bug4966112.java not for mac
    + JDK-7179006: [macosx] Print-to-file doesn't work: printing to
    the default printer instead
    + JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/
    /bug4726194.java fails on MacOSX
    + JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003 Wrong
    number of thread end events
    + JDK-8039261: [TEST_BUG]: There is not a minimal security
    level in Java Preferences and the TestApplet.html is blocked.
    + JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/
    /AltTabCrashTest.java fails with exception
    + JDK-8075909: [TEST_BUG] The regression-swing case failed as
    it does not have the 'Open' button when select 'subdir' folder
    with NimbusLAF
    + JDK-8078219: Verify lack of @test tag in files in java/net
    test directory
    + JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails
    with "RuntimeException: Process terminated prematurely"
    + JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java timed out intermittently
    + JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails
    intermittently
    + JDK-8131745: java/lang/management/ThreadMXBean/
    /AllThreadIds.java still fails intermittently
    + JDK-8136517: [macosx] Test java/awt/Focus/8073453/
    /AWTFocusTransitionTest.java fails on MacOSX
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/
    /Test6541987.java fails
    + JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/
    /bug4760494.java leaves key pressed
    + JDK-8159904: [TEST_BUG] Failure on solaris of
    java/awt/Window/MultiWindowApp/MultiWindowAppTest.java
    + JDK-8163086: java/awt/Window/TranslucentJAppletTest/
    /TranslucentJAppletTest.java fails
    + JDK-8165828: [TEST_BUG] The reg case: javax/swing/plaf/metal/
    /MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look
    and Feel
    + JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not
    fired! on Windows
    + JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException:
    Default button is not pressed
    + JDK-8169959: javax/swing/JTable/6263446/bug6263446.java:
    Table should be editing
    + JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/
    /7156657/bug7156657.java fails on OS X
    + JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails
    on Windows
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8179880: Refactor javax/security shell tests to plain
    java tests
    + JDK-8180568: Refactor javax/crypto shell tests to plain java
    tests
    + JDK-8180569: Refactor sun/security/krb5/ shell tests to plain
    java tests
    + JDK-8180571: Refactor sun/security/pkcs11 shell tests to
    plain java tests and fix failures
    + JDK-8180573: Refactor sun/security/tools shell tests to plain
    java tests
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8195703: BasicJDWPConnectionTest.java: 'App exited
    unexpectedly with 2'
    + JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java
    fails
    + JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java
    fails
    + JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/
    /NoEventsTest.java fails on Windows
    + JDK-8197811: Test java/awt/Choice/PopupPosTest/
    /PopupPosTest.java fails on Windows
    + JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java
    fails on mac
    + JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java
    fails on mac
    + JDK-8198619: java/awt/Focus/FocusTraversalPolicy/
    /ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java
    fails on mac
    + JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/
    /EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java
    fails on mac
    + JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/
    /SubMenuShowTest/SubMenuShowTest.html fails on mac
    + JDK-8199138: Add RISC-V support to Zero
    + JDK-8199529: javax/swing/text/Utilities/8142966/
    /SwingFontMetricsTest.java fails on windows
    + JDK-8201224: Make string buffer size dynamic in
    mlvmJvmtiUtils.c
    + JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/
    /FollowReferences/followref003/TestDescription.java fails with
    "Location mismatch" errors
    + JDK-8204161: [TESTBUG] auto failed with the "Applet thread
    threw exception: java.lang.UnsupportedOperationException"
    exception
    + JDK-8206085: Refactor
    langtools/tools/javac/versions/Versions.java
    + JDK-8207936: TestZipFile failed with java.lang.AssertionError
    exception
    + JDK-8208242: Add @requires to vmTestbase/gc/g1 tests
    + JDK-8209611: use C++ compiler for hotspot tests
    + JDK-8210182: Remove macros for C compilation from vmTestBase
    but non jvmti
    + JDK-8210198: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[A-F] tests
    + JDK-8210205: build fails on AIX in hotspot cpp tests (for
    example getstacktr001.cpp)
    + JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/
    /jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION
    on windows-x86
    + JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java
    back to tier1
    + JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[A-N] tests
    + JDK-8210392: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8210395: Add doc to SecurityTools.java
    + JDK-8210429: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[G-Z] tests
    + JDK-8210481: Remove #ifdef cplusplus from vmTestbase
    + JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[N-R] tests
    + JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[R-U] tests
    + JDK-8210689: Remove the multi-line old C style for string
    literals
    + JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti/unit tests
    + JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665
    + JDK-8210920: Native C++ tests are not using CXXFLAGS
    + JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR:
    hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti,
    thread)"
    + JDK-8211036: Remove the NSK_STUB macros from vmTestbase for
    non jvmti
    + JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[G-I]*
    + JDK-8211148: var in implicit lambdas shouldn't be accepted
    for source &lt; 11
    + JDK-8211171: move JarUtils to top-level testlibrary
    + JDK-8211227: Inconsistent TLS protocol version in debug output
    + JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[A-G]*
    + JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp
    + JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[I-S]*
    + JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[A-E]
    + JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[E-M]
    + JDK-8211905: Remove multiple casts for EM06 file
    + JDK-8211999: Window positioning bugs due to overlapping
    GraphicsDevice bounds (Windows/HiDPI)
    + JDK-8212082: Remove the NSK_CPP_STUB macros for remaining
    vmTestbase/jvmti/[sS]*
    + JDK-8212083: Handle remaining gc/lock native code and fix two
    strings
    + JDK-8212148: Remove remaining NSK_CPP_STUBs
    + JDK-8213110: Remove the use of applets in automatic tests
    + JDK-8213189: Make restricted headers in HTTP Client
    configurable and remove Date by default
    + JDK-8213263: fix legal headers in test/langtools
    + JDK-8213296: Fix legal headers in test/jdk/java/net
    + JDK-8213301: Fix legal headers in jdk logging tests
    + JDK-8213305: Fix legal headers in test/java/math
    + JDK-8213306: Fix legal headers in test/java/nio
    + JDK-8213328: Update test copyrights in test/java/util/zip and
    test/jdk/tools
    + JDK-8213330: Fix legal headers in i18n tests
    + JDK-8213707: [TEST] vmTestbase/nsk/stress/except/
    /except011.java failed due to wrong class name
    + JDK-8214469: [macos] PIT: java/awt/Choice/
    /ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails
    + JDK-8215410: Regression test for JDK-8214994
    + JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher
    + JDK-8215624: Add parallel heap iteration for jmap \u2013histo
    + JDK-8215889: assert(!_unloading) failed: This oop is not
    available to unloading class loader data with ZGC
    + JDK-8216318: The usage of Disposer in the java.awt.Robot can
    be deleted
    + JDK-8216417: cleanup of IPv6 scope-id handling
    + JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java
    failed with UnsupportedOperation exception
    + JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX
    + JDK-8217633: Configurable extensions with system properties
    + JDK-8217882: java/net/httpclient/MaxStreams.java failed once
    + JDK-8217903: java/net/httpclient/Response204.java fails with
    404
    + JDK-8218483: Crash in
    "assert(_daemon_threads_count-&gt;get_value() &gt; daemon_count)
    failed: thread count mismatch 5 : 5"
    + JDK-8219986: Change to Xcode 10.1 for building on Macosx at
    Oracle
    + JDK-8220575: Correctly format test URI's that contain a
    retrieved IPv6 address
    + JDK-8221259: New tests for java.net.Socket to exercise long
    standing behavior
    + JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails
    on MacOS + Solaris
    + JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/
    /FocusTraversal.java fails on ubuntu
    + JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/
    /IconifyTest.java fails on ubuntu18.04
    + JDK-8222446: assert(C-&gt;env()-&gt;system_dictionary_modification_counter_changed())
    failed: Must invalidate if TypeFuncs differ
    + JDK-8223137: Rename predicate 'do_unroll_only()' to
    'is_unroll_only()'.
    + JDK-8223138: Small clean-up in loop-tree support.
    + JDK-8223139: Rename mandatory policy-do routines.
    + JDK-8223140: Clean-up in 'ok_to_convert()'
    + JDK-8223141: Change (count) suffix _ct into _cnt.
    + JDK-8223400: Replace some enums with static const members in
    hotspot/runtime
    + JDK-8223658: Performance regression of XML.validation in
    13-b19
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8224829: AsyncSSLSocketClose.java has timing issue
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226514: Replace wildcard address with loopback or local
    host in tests - part 17
    + JDK-8226943: compile error in libfollowref003.cpp  with XCode
    10.2 on macosx
    + JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed
    due to "SSLException: An established connection was aborted by
    the software in your host machine"
    + JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java
    fails on Windows7
    + JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently
    positions text
    + JDK-8230019: [REDO] compiler/types/correctness/* tests fail
    with "assert(recv == __null || recv-&gt;is_klass()) failed: wrong
    type"
    + JDK-8230067: Add optional automatic retry when running jtreg
    tests
    + JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests
    may fail on some platforms
    + JDK-8231501: VM crash in
    MethodData::clean_extra_data(CleanExtraDataClosure*):
    fatal error: unexpected tag 99
    + JDK-8233403: Improve verbosity of some httpclient tests
    + JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS
    + JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on
    MacOS
    + JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on
    MacOS
    + JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS
    + JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS
    + JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on
    macos
    + JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java  is
    failing on macos
    + JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails
    on macos
    + JDK-8233562: [TESTBUG] Swing StyledEditorKit test
    bug4506788.java fails on MacOS
    + JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing
    + JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on
    MacoS
    + JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos
    + JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java
    fails on macos
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails
    on macos
    + JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java
    fails on macos
    + JDK-8233637: [TESTBUG] Swing
    ActionListenerCalledTwiceTest.java fails on macos
    + JDK-8233638: [TESTBUG] Swing test
    ScreenMenuBarInputTwice.java fails on macos
    + JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails
    on macos
    + JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java  fails
    on macos
    + JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on
    macos
    + JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is
    failing on macos
    + JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is
    failing on macos
    + JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture
    Recognition in all the platforms
    + JDK-8234823: java/net/Socket/Timeouts.java testcase
    testTimedConnect2() fails on Windows 10
    + JDK-8235784: java/lang/invoke/VarHandles/
    /VarHandleTestByteArrayAsInt.java fails due to timeout with
    fastdebug bits
    + JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -Xcomp -XX:TieredStopAtLevel=1
    + JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60),
    cond_wait
    + JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT,
    when using proxy tunnel
    + JDK-8237354: Add option to jcmd to write a gzipped heap dump
    + JDK-8237589: Fix copyright header formatting
    + JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java
    should not specify TLS version
    + JDK-8239334: Tab Size does not work correctly in JTextArea
    with setLineWrap on
    + JDK-8239422: [TESTBUG]
    compiler/c1/TestPrintIRDuringConstruction.java failed when C1
    is disabled
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240256: Better resource cleaning for SunPKCS11 Provider
    + JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test
    Server
    + JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/
    /bug8020708.java fails in mach5 ubuntu system
    + JDK-8242793: Incorrect copyright header in
    ContinuousCallSiteTargetChange.java
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244292: Headful clients failing with
  - -illegal-access=deny
    + JDK-8245147: Refactor and improve utility of
    test/langtools/tools/javac/versions/Versions.java
    + JDK-8245165: Update bug id for
    javax/swing/text/StyledEditorKit/4506788/bug4506788.java in
    ProblemList
    + JDK-8245665: Test WeakAlg.java should only make sure no
    warning for weak signature algorithms by keytool on root CA
    + JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails
    after 8241072 (multi-homed systems)
    + JDK-8246807: Incorrect copyright header in
    TimeZoneDatePermissionCheck.sh
    + JDK-8247403: JShell: No custom input (e.g. from GUI) possible
    with JavaShellToolBuilder
    + JDK-8247510: typo in IllegalHandshakeMessage
    + JDK-8248187: [TESTBUG] javax/swing/plaf/basic/
    /BasicGraphicsUtils/8132119/bug8132119.java fails with String
    is not properly drawn
    + JDK-8248341: ProblemList java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java
    + JDK-8248500: AArch64: Remove the r18 dependency on Windows
    AArch64
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8249195: Change to Xcode 11.3.1 for building on Macos at
    Oracle
    + JDK-8250521: Configure initial RTO to use minimal retry for
    loopback connections on Windows
    + JDK-8250810: Push missing parts of JDK-8248817
    + JDK-8250839: Improve test template SSLEngineTemplate with
    SSLContextTemplate
    + JDK-8250863: Build error with GCC 10 in NetworkInterface.c
    and k_standard.c
    + JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/
    /gf08t001/TestDriver.java fails
    + JDK-8251155: HostIdentifier fails to canonicalize hostnames
    starting with digits
    + JDK-8251377: [macos11] JTabbedPane selected tab text is
    barely legible
    + JDK-8251570: JDK-8215624 causes assert(worker_id &lt;
    _n_workers) failed: Invalid worker_id
    + JDK-8251930: AArch64: Native types mismatch in hotspot
    + JDK-8252049: Native memory leak in ciMethodData ctor
    + JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x
    friendly
    + JDK-8252114: Windows-AArch64: Enable and test ZGC and
    ShenandoahGC
    + JDK-8253015: Aarch64: Move linux code out from generic CPU
    feature detection
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java
    fail on big screens
    + JDK-8253497: Core Libs Terminology Refresh
    + JDK-8253682: The AppletInitialFocusTest1.java is unstable
    + JDK-8253763: ParallelObjectIterator should have virtual
    destructor
    + JDK-8253866: Security Libs Terminology Refresh
    + JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in
    "try throwing in GET_BODY"
    + JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java
    intermittently failing with TestServer: start exception:
    java.io.IOException: Invalid preface
    + JDK-8255264: Support for identifying the full range of IPv4
    localhost addresses on Windows
    + JDK-8255716: AArch64: Regression: JVM crashes if manually
    offline a core
    + JDK-8255722: Create a new test for rotated blit
    + JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad
    + JDK-8256066: Tests use deprecated TestNG API that is no
    longer available in new versions
    + JDK-8256152: tests fail because of ambiguous method resolution
    + JDK-8256182: Update qemu-debootstrap cross-compilation recipe
    + JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/
    /FullscreenWindowProps.java failed
    + JDK-8256202: Some tweaks for jarsigner tests
    PosixPermissionsTest and SymLinkTest
    + JDK-8256372: [macos] Unexpected symbol was displayed on
    JTextField with Monospaced font
    + JDK-8256956: RegisterImpl::max_slots_per_register is
    incorrect on AMD64
    + JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with
    InvalidPathException on windows
    + JDK-8258855: Two tests sun/security/krb5/auto/
    /ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java
    failed on OL8.3
    + JDK-8259237: Demo selection changes with left/right arrow
    key. No need to press space for selection.
    + JDK-8260571: Add PrintMetaspaceStatistics to print metaspace
    statistics upon VM exit
    + JDK-8260690: JConsole User Guide Link from the Help menu is
    not accessible by keyboard
    + JDK-8261036: Reduce classes loaded by CleanerFactory
    initialization
    + JDK-8261071: AArch64: Refactor interpreter native wrappers
    + JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch
    implementation
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261297: NMT: Final report should use scale 1
    + JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java
    fails because Reserved memory size is too big
    + JDK-8261916: gtest/GTestWrapper.java
    vmErrorTest.unimplemented1_vm_assert failed
    + JDK-8262438: sun/security/ssl/SSLLogger/
    /LoggingFormatConsistency.java failed with "SocketException:
    Socket is closed"
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8262844: (fs) FileStore.supportsFileAttributeView might
    return false negative in case of ext3
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp
    + JDK-8263303: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8263362: Avoid division by 0 in
    java/awt/font/TextJustifier.java justify
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java
    failed with "java.lang.RuntimeException: Wrong method"
    + JDK-8264526: javax/swing/text/html/parser/Parser/8078268/
    /bug8078268.java timeout
    + JDK-8264824: java/net/Inet6Address/B6206527.java doesn't
    close ServerSocket properly
    + JDK-8265019: Update tests for additional TestNG test
    permissions
    + JDK-8265173: [test] divert spurious log output away from
    stream under test in ProcessBuilder Basic test
    + JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8266579: Update test/jdk/java/lang/ProcessHandle/
    /PermissionTest.java &amp; test/jdk/java/sql/testng/util/
    /TestPolicy.java
    + JDK-8266949: Check possibility to disable OperationTimedOut
    on Unix
    + JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg
    tests on many-core machines
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267304: Bump global JTReg memory limit to 768m
    + JDK-8267652: c2 loop unrolling by 8 results in reading memory
    past array
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268093: Manual Testcase: "sun/security/krb5/config/
    /native/TestDynamicStore.java" Fails with NPE
    + JDK-8268555: Update HttpClient tests that use ITestContext to
    jtreg 6+1
    + JDK-8268672: C2: assert(!loop-&gt;is_member(u_loop)) failed: can
    be in outer loop or out of both loops only
    + JDK-8269034: AccessControlException for SunPKCS11 daemon
    threads
    + JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to
    accessClassAndFindClass
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269768: JFR Terminology Refresh
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8269984: [macos] JTabbedPane title looks like  disabled
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270216: [macOS] Update named used for Java run loop mode
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270344: Session resumption errors
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1
    + JDK-8272181: Windows-AArch64:Backport fix of `Backtracing
    broken on PAC enabled systems`
    + JDK-8272316: Wrong Boot JDK help message in 11
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8272828: Add correct licenses to jszip.md
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java
    fails by timeout
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273541: Cleaner Thread creates with normal priority
    instead of MAX_PRIORITY - 2
    + JDK-8273547: [11u] [JVMCI] Partial module-info.java backport
    of JDK-8223332
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273671: Backport of 8260616 misses one JNF header
    inclusion removal
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273795: Zero SPARC64 debug builds fail due to missing
    interpreter fields
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274860: gcc 10.2.1 produces an uninitialized warning in
    sharedRuntimeTrig.cpp
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277815: Fix mistakes in legal header backports
- Removed patch:
  * riscv64-zero.patch
    + integrated upstream
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1644926400">- Update to upstream tag jdk-11.0.14.1+1
  * Changes:
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8281324: Bump update version for OpenJDK: jdk-11.0.14.1</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="5f5daca1130700baa06eb1d9ed7a15e36491a7ec1ea639b02b2fe23b0e38cee0" name="java-11-openjdk-headless" arch="s390x">
  <version epoch="0" ver="11.0.15.0" rel="150000.3.80.1"/>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643630400">- Update to upstream tag jdk-11.0.14+9 (January 2022 CPU)
  * New features
    + JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
  * Security fixes
    + JDK-8217375: jarsigner breaks old signature with long lines
    in manifest
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
    + JDK-8279541: Improve HarfBuzz
  * Other changes
    + JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/
    /ChoiceKeyEventReaction.html fails
    + JDK-7105119: [TEST_BUG] [macosx] In test
    UIDefaults.toString() must be called with the invokeLater()
    + JDK-7151826: [TEST_BUG] [macosx] The test
    javax/swing/JPopupMenu/4966112/bug4966112.java not for mac
    + JDK-7179006: [macosx] Print-to-file doesn't work: printing to
    the default printer instead
    + JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/
    /bug4726194.java fails on MacOSX
    + JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003 Wrong
    number of thread end events
    + JDK-8039261: [TEST_BUG]: There is not a minimal security
    level in Java Preferences and the TestApplet.html is blocked.
    + JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/
    /AltTabCrashTest.java fails with exception
    + JDK-8075909: [TEST_BUG] The regression-swing case failed as
    it does not have the 'Open' button when select 'subdir' folder
    with NimbusLAF
    + JDK-8078219: Verify lack of @test tag in files in java/net
    test directory
    + JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails
    with "RuntimeException: Process terminated prematurely"
    + JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java timed out intermittently
    + JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails
    intermittently
    + JDK-8131745: java/lang/management/ThreadMXBean/
    /AllThreadIds.java still fails intermittently
    + JDK-8136517: [macosx] Test java/awt/Focus/8073453/
    /AWTFocusTransitionTest.java fails on MacOSX
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/
    /Test6541987.java fails
    + JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/
    /bug4760494.java leaves key pressed
    + JDK-8159904: [TEST_BUG] Failure on solaris of
    java/awt/Window/MultiWindowApp/MultiWindowAppTest.java
    + JDK-8163086: java/awt/Window/TranslucentJAppletTest/
    /TranslucentJAppletTest.java fails
    + JDK-8165828: [TEST_BUG] The reg case: javax/swing/plaf/metal/
    /MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look
    and Feel
    + JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not
    fired! on Windows
    + JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException:
    Default button is not pressed
    + JDK-8169959: javax/swing/JTable/6263446/bug6263446.java:
    Table should be editing
    + JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/
    /7156657/bug7156657.java fails on OS X
    + JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails
    on Windows
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8179880: Refactor javax/security shell tests to plain
    java tests
    + JDK-8180568: Refactor javax/crypto shell tests to plain java
    tests
    + JDK-8180569: Refactor sun/security/krb5/ shell tests to plain
    java tests
    + JDK-8180571: Refactor sun/security/pkcs11 shell tests to
    plain java tests and fix failures
    + JDK-8180573: Refactor sun/security/tools shell tests to plain
    java tests
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8195703: BasicJDWPConnectionTest.java: 'App exited
    unexpectedly with 2'
    + JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java
    fails
    + JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java
    fails
    + JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/
    /NoEventsTest.java fails on Windows
    + JDK-8197811: Test java/awt/Choice/PopupPosTest/
    /PopupPosTest.java fails on Windows
    + JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java
    fails on mac
    + JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java
    fails on mac
    + JDK-8198619: java/awt/Focus/FocusTraversalPolicy/
    /ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java
    fails on mac
    + JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/
    /EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java
    fails on mac
    + JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/
    /SubMenuShowTest/SubMenuShowTest.html fails on mac
    + JDK-8199138: Add RISC-V support to Zero
    + JDK-8199529: javax/swing/text/Utilities/8142966/
    /SwingFontMetricsTest.java fails on windows
    + JDK-8201224: Make string buffer size dynamic in
    mlvmJvmtiUtils.c
    + JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/
    /FollowReferences/followref003/TestDescription.java fails with
    "Location mismatch" errors
    + JDK-8204161: [TESTBUG] auto failed with the "Applet thread
    threw exception: java.lang.UnsupportedOperationException"
    exception
    + JDK-8206085: Refactor
    langtools/tools/javac/versions/Versions.java
    + JDK-8207936: TestZipFile failed with java.lang.AssertionError
    exception
    + JDK-8208242: Add @requires to vmTestbase/gc/g1 tests
    + JDK-8209611: use C++ compiler for hotspot tests
    + JDK-8210182: Remove macros for C compilation from vmTestBase
    but non jvmti
    + JDK-8210198: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[A-F] tests
    + JDK-8210205: build fails on AIX in hotspot cpp tests (for
    example getstacktr001.cpp)
    + JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/
    /jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION
    on windows-x86
    + JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java
    back to tier1
    + JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[A-N] tests
    + JDK-8210392: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8210395: Add doc to SecurityTools.java
    + JDK-8210429: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[G-Z] tests
    + JDK-8210481: Remove #ifdef cplusplus from vmTestbase
    + JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[N-R] tests
    + JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[R-U] tests
    + JDK-8210689: Remove the multi-line old C style for string
    literals
    + JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti/unit tests
    + JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665
    + JDK-8210920: Native C++ tests are not using CXXFLAGS
    + JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR:
    hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti,
    thread)"
    + JDK-8211036: Remove the NSK_STUB macros from vmTestbase for
    non jvmti
    + JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[G-I]*
    + JDK-8211148: var in implicit lambdas shouldn't be accepted
    for source &lt; 11
    + JDK-8211171: move JarUtils to top-level testlibrary
    + JDK-8211227: Inconsistent TLS protocol version in debug output
    + JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[A-G]*
    + JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp
    + JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[I-S]*
    + JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[A-E]
    + JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[E-M]
    + JDK-8211905: Remove multiple casts for EM06 file
    + JDK-8211999: Window positioning bugs due to overlapping
    GraphicsDevice bounds (Windows/HiDPI)
    + JDK-8212082: Remove the NSK_CPP_STUB macros for remaining
    vmTestbase/jvmti/[sS]*
    + JDK-8212083: Handle remaining gc/lock native code and fix two
    strings
    + JDK-8212148: Remove remaining NSK_CPP_STUBs
    + JDK-8213110: Remove the use of applets in automatic tests
    + JDK-8213189: Make restricted headers in HTTP Client
    configurable and remove Date by default
    + JDK-8213263: fix legal headers in test/langtools
    + JDK-8213296: Fix legal headers in test/jdk/java/net
    + JDK-8213301: Fix legal headers in jdk logging tests
    + JDK-8213305: Fix legal headers in test/java/math
    + JDK-8213306: Fix legal headers in test/java/nio
    + JDK-8213328: Update test copyrights in test/java/util/zip and
    test/jdk/tools
    + JDK-8213330: Fix legal headers in i18n tests
    + JDK-8213707: [TEST] vmTestbase/nsk/stress/except/
    /except011.java failed due to wrong class name
    + JDK-8214469: [macos] PIT: java/awt/Choice/
    /ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails
    + JDK-8215410: Regression test for JDK-8214994
    + JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher
    + JDK-8215624: Add parallel heap iteration for jmap \u2013histo
    + JDK-8215889: assert(!_unloading) failed: This oop is not
    available to unloading class loader data with ZGC
    + JDK-8216318: The usage of Disposer in the java.awt.Robot can
    be deleted
    + JDK-8216417: cleanup of IPv6 scope-id handling
    + JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java
    failed with UnsupportedOperation exception
    + JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX
    + JDK-8217633: Configurable extensions with system properties
    + JDK-8217882: java/net/httpclient/MaxStreams.java failed once
    + JDK-8217903: java/net/httpclient/Response204.java fails with
    404
    + JDK-8218483: Crash in
    "assert(_daemon_threads_count-&gt;get_value() &gt; daemon_count)
    failed: thread count mismatch 5 : 5"
    + JDK-8219986: Change to Xcode 10.1 for building on Macosx at
    Oracle
    + JDK-8220575: Correctly format test URI's that contain a
    retrieved IPv6 address
    + JDK-8221259: New tests for java.net.Socket to exercise long
    standing behavior
    + JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails
    on MacOS + Solaris
    + JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/
    /FocusTraversal.java fails on ubuntu
    + JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/
    /IconifyTest.java fails on ubuntu18.04
    + JDK-8222446: assert(C-&gt;env()-&gt;system_dictionary_modification_counter_changed())
    failed: Must invalidate if TypeFuncs differ
    + JDK-8223137: Rename predicate 'do_unroll_only()' to
    'is_unroll_only()'.
    + JDK-8223138: Small clean-up in loop-tree support.
    + JDK-8223139: Rename mandatory policy-do routines.
    + JDK-8223140: Clean-up in 'ok_to_convert()'
    + JDK-8223141: Change (count) suffix _ct into _cnt.
    + JDK-8223400: Replace some enums with static const members in
    hotspot/runtime
    + JDK-8223658: Performance regression of XML.validation in
    13-b19
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8224829: AsyncSSLSocketClose.java has timing issue
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226514: Replace wildcard address with loopback or local
    host in tests - part 17
    + JDK-8226943: compile error in libfollowref003.cpp  with XCode
    10.2 on macosx
    + JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed
    due to "SSLException: An established connection was aborted by
    the software in your host machine"
    + JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java
    fails on Windows7
    + JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently
    positions text
    + JDK-8230019: [REDO] compiler/types/correctness/* tests fail
    with "assert(recv == __null || recv-&gt;is_klass()) failed: wrong
    type"
    + JDK-8230067: Add optional automatic retry when running jtreg
    tests
    + JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests
    may fail on some platforms
    + JDK-8231501: VM crash in
    MethodData::clean_extra_data(CleanExtraDataClosure*):
    fatal error: unexpected tag 99
    + JDK-8233403: Improve verbosity of some httpclient tests
    + JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS
    + JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on
    MacOS
    + JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on
    MacOS
    + JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS
    + JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS
    + JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on
    macos
    + JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java  is
    failing on macos
    + JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails
    on macos
    + JDK-8233562: [TESTBUG] Swing StyledEditorKit test
    bug4506788.java fails on MacOS
    + JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing
    + JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on
    MacoS
    + JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos
    + JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java
    fails on macos
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails
    on macos
    + JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java
    fails on macos
    + JDK-8233637: [TESTBUG] Swing
    ActionListenerCalledTwiceTest.java fails on macos
    + JDK-8233638: [TESTBUG] Swing test
    ScreenMenuBarInputTwice.java fails on macos
    + JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails
    on macos
    + JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java  fails
    on macos
    + JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on
    macos
    + JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is
    failing on macos
    + JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is
    failing on macos
    + JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture
    Recognition in all the platforms
    + JDK-8234823: java/net/Socket/Timeouts.java testcase
    testTimedConnect2() fails on Windows 10
    + JDK-8235784: java/lang/invoke/VarHandles/
    /VarHandleTestByteArrayAsInt.java fails due to timeout with
    fastdebug bits
    + JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -Xcomp -XX:TieredStopAtLevel=1
    + JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60),
    cond_wait
    + JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT,
    when using proxy tunnel
    + JDK-8237354: Add option to jcmd to write a gzipped heap dump
    + JDK-8237589: Fix copyright header formatting
    + JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java
    should not specify TLS version
    + JDK-8239334: Tab Size does not work correctly in JTextArea
    with setLineWrap on
    + JDK-8239422: [TESTBUG]
    compiler/c1/TestPrintIRDuringConstruction.java failed when C1
    is disabled
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240256: Better resource cleaning for SunPKCS11 Provider
    + JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test
    Server
    + JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/
    /bug8020708.java fails in mach5 ubuntu system
    + JDK-8242793: Incorrect copyright header in
    ContinuousCallSiteTargetChange.java
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244292: Headful clients failing with
  - -illegal-access=deny
    + JDK-8245147: Refactor and improve utility of
    test/langtools/tools/javac/versions/Versions.java
    + JDK-8245165: Update bug id for
    javax/swing/text/StyledEditorKit/4506788/bug4506788.java in
    ProblemList
    + JDK-8245665: Test WeakAlg.java should only make sure no
    warning for weak signature algorithms by keytool on root CA
    + JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails
    after 8241072 (multi-homed systems)
    + JDK-8246807: Incorrect copyright header in
    TimeZoneDatePermissionCheck.sh
    + JDK-8247403: JShell: No custom input (e.g. from GUI) possible
    with JavaShellToolBuilder
    + JDK-8247510: typo in IllegalHandshakeMessage
    + JDK-8248187: [TESTBUG] javax/swing/plaf/basic/
    /BasicGraphicsUtils/8132119/bug8132119.java fails with String
    is not properly drawn
    + JDK-8248341: ProblemList java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java
    + JDK-8248500: AArch64: Remove the r18 dependency on Windows
    AArch64
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8249195: Change to Xcode 11.3.1 for building on Macos at
    Oracle
    + JDK-8250521: Configure initial RTO to use minimal retry for
    loopback connections on Windows
    + JDK-8250810: Push missing parts of JDK-8248817
    + JDK-8250839: Improve test template SSLEngineTemplate with
    SSLContextTemplate
    + JDK-8250863: Build error with GCC 10 in NetworkInterface.c
    and k_standard.c
    + JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/
    /gf08t001/TestDriver.java fails
    + JDK-8251155: HostIdentifier fails to canonicalize hostnames
    starting with digits
    + JDK-8251377: [macos11] JTabbedPane selected tab text is
    barely legible
    + JDK-8251570: JDK-8215624 causes assert(worker_id &lt;
    _n_workers) failed: Invalid worker_id
    + JDK-8251930: AArch64: Native types mismatch in hotspot
    + JDK-8252049: Native memory leak in ciMethodData ctor
    + JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x
    friendly
    + JDK-8252114: Windows-AArch64: Enable and test ZGC and
    ShenandoahGC
    + JDK-8253015: Aarch64: Move linux code out from generic CPU
    feature detection
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java
    fail on big screens
    + JDK-8253497: Core Libs Terminology Refresh
    + JDK-8253682: The AppletInitialFocusTest1.java is unstable
    + JDK-8253763: ParallelObjectIterator should have virtual
    destructor
    + JDK-8253866: Security Libs Terminology Refresh
    + JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in
    "try throwing in GET_BODY"
    + JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java
    intermittently failing with TestServer: start exception:
    java.io.IOException: Invalid preface
    + JDK-8255264: Support for identifying the full range of IPv4
    localhost addresses on Windows
    + JDK-8255716: AArch64: Regression: JVM crashes if manually
    offline a core
    + JDK-8255722: Create a new test for rotated blit
    + JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad
    + JDK-8256066: Tests use deprecated TestNG API that is no
    longer available in new versions
    + JDK-8256152: tests fail because of ambiguous method resolution
    + JDK-8256182: Update qemu-debootstrap cross-compilation recipe
    + JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/
    /FullscreenWindowProps.java failed
    + JDK-8256202: Some tweaks for jarsigner tests
    PosixPermissionsTest and SymLinkTest
    + JDK-8256372: [macos] Unexpected symbol was displayed on
    JTextField with Monospaced font
    + JDK-8256956: RegisterImpl::max_slots_per_register is
    incorrect on AMD64
    + JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with
    InvalidPathException on windows
    + JDK-8258855: Two tests sun/security/krb5/auto/
    /ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java
    failed on OL8.3
    + JDK-8259237: Demo selection changes with left/right arrow
    key. No need to press space for selection.
    + JDK-8260571: Add PrintMetaspaceStatistics to print metaspace
    statistics upon VM exit
    + JDK-8260690: JConsole User Guide Link from the Help menu is
    not accessible by keyboard
    + JDK-8261036: Reduce classes loaded by CleanerFactory
    initialization
    + JDK-8261071: AArch64: Refactor interpreter native wrappers
    + JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch
    implementation
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261297: NMT: Final report should use scale 1
    + JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java
    fails because Reserved memory size is too big
    + JDK-8261916: gtest/GTestWrapper.java
    vmErrorTest.unimplemented1_vm_assert failed
    + JDK-8262438: sun/security/ssl/SSLLogger/
    /LoggingFormatConsistency.java failed with "SocketException:
    Socket is closed"
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8262844: (fs) FileStore.supportsFileAttributeView might
    return false negative in case of ext3
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp
    + JDK-8263303: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8263362: Avoid division by 0 in
    java/awt/font/TextJustifier.java justify
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java
    failed with "java.lang.RuntimeException: Wrong method"
    + JDK-8264526: javax/swing/text/html/parser/Parser/8078268/
    /bug8078268.java timeout
    + JDK-8264824: java/net/Inet6Address/B6206527.java doesn't
    close ServerSocket properly
    + JDK-8265019: Update tests for additional TestNG test
    permissions
    + JDK-8265173: [test] divert spurious log output away from
    stream under test in ProcessBuilder Basic test
    + JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8266579: Update test/jdk/java/lang/ProcessHandle/
    /PermissionTest.java &amp; test/jdk/java/sql/testng/util/
    /TestPolicy.java
    + JDK-8266949: Check possibility to disable OperationTimedOut
    on Unix
    + JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg
    tests on many-core machines
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267304: Bump global JTReg memory limit to 768m
    + JDK-8267652: c2 loop unrolling by 8 results in reading memory
    past array
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268093: Manual Testcase: "sun/security/krb5/config/
    /native/TestDynamicStore.java" Fails with NPE
    + JDK-8268555: Update HttpClient tests that use ITestContext to
    jtreg 6+1
    + JDK-8268672: C2: assert(!loop-&gt;is_member(u_loop)) failed: can
    be in outer loop or out of both loops only
    + JDK-8269034: AccessControlException for SunPKCS11 daemon
    threads
    + JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to
    accessClassAndFindClass
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269768: JFR Terminology Refresh
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8269984: [macos] JTabbedPane title looks like  disabled
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270216: [macOS] Update named used for Java run loop mode
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270344: Session resumption errors
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1
    + JDK-8272181: Windows-AArch64:Backport fix of `Backtracing
    broken on PAC enabled systems`
    + JDK-8272316: Wrong Boot JDK help message in 11
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8272828: Add correct licenses to jszip.md
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java
    fails by timeout
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273541: Cleaner Thread creates with normal priority
    instead of MAX_PRIORITY - 2
    + JDK-8273547: [11u] [JVMCI] Partial module-info.java backport
    of JDK-8223332
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273671: Backport of 8260616 misses one JNF header
    inclusion removal
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273795: Zero SPARC64 debug builds fail due to missing
    interpreter fields
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274860: gcc 10.2.1 produces an uninitialized warning in
    sharedRuntimeTrig.cpp
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277815: Fix mistakes in legal header backports
- Removed patch:
  * riscv64-zero.patch
    + integrated upstream
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1644926400">- Update to upstream tag jdk-11.0.14.1+1
  * Changes:
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8281324: Bump update version for OpenJDK: jdk-11.0.14.1</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="586700f4d40e3daa03f8431d81b92ef995d5d165563d9e2f79e60ea56b4d7338" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="11.0.15.0" rel="150000.3.80.1"/>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643630400">- Update to upstream tag jdk-11.0.14+9 (January 2022 CPU)
  * New features
    + JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
  * Security fixes
    + JDK-8217375: jarsigner breaks old signature with long lines
    in manifest
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
    + JDK-8279541: Improve HarfBuzz
  * Other changes
    + JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/
    /ChoiceKeyEventReaction.html fails
    + JDK-7105119: [TEST_BUG] [macosx] In test
    UIDefaults.toString() must be called with the invokeLater()
    + JDK-7151826: [TEST_BUG] [macosx] The test
    javax/swing/JPopupMenu/4966112/bug4966112.java not for mac
    + JDK-7179006: [macosx] Print-to-file doesn't work: printing to
    the default printer instead
    + JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/
    /bug4726194.java fails on MacOSX
    + JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003 Wrong
    number of thread end events
    + JDK-8039261: [TEST_BUG]: There is not a minimal security
    level in Java Preferences and the TestApplet.html is blocked.
    + JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/
    /AltTabCrashTest.java fails with exception
    + JDK-8075909: [TEST_BUG] The regression-swing case failed as
    it does not have the 'Open' button when select 'subdir' folder
    with NimbusLAF
    + JDK-8078219: Verify lack of @test tag in files in java/net
    test directory
    + JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails
    with "RuntimeException: Process terminated prematurely"
    + JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java timed out intermittently
    + JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails
    intermittently
    + JDK-8131745: java/lang/management/ThreadMXBean/
    /AllThreadIds.java still fails intermittently
    + JDK-8136517: [macosx] Test java/awt/Focus/8073453/
    /AWTFocusTransitionTest.java fails on MacOSX
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/
    /Test6541987.java fails
    + JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/
    /bug4760494.java leaves key pressed
    + JDK-8159904: [TEST_BUG] Failure on solaris of
    java/awt/Window/MultiWindowApp/MultiWindowAppTest.java
    + JDK-8163086: java/awt/Window/TranslucentJAppletTest/
    /TranslucentJAppletTest.java fails
    + JDK-8165828: [TEST_BUG] The reg case: javax/swing/plaf/metal/
    /MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look
    and Feel
    + JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not
    fired! on Windows
    + JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException:
    Default button is not pressed
    + JDK-8169959: javax/swing/JTable/6263446/bug6263446.java:
    Table should be editing
    + JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/
    /7156657/bug7156657.java fails on OS X
    + JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails
    on Windows
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8179880: Refactor javax/security shell tests to plain
    java tests
    + JDK-8180568: Refactor javax/crypto shell tests to plain java
    tests
    + JDK-8180569: Refactor sun/security/krb5/ shell tests to plain
    java tests
    + JDK-8180571: Refactor sun/security/pkcs11 shell tests to
    plain java tests and fix failures
    + JDK-8180573: Refactor sun/security/tools shell tests to plain
    java tests
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8195703: BasicJDWPConnectionTest.java: 'App exited
    unexpectedly with 2'
    + JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java
    fails
    + JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java
    fails
    + JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/
    /NoEventsTest.java fails on Windows
    + JDK-8197811: Test java/awt/Choice/PopupPosTest/
    /PopupPosTest.java fails on Windows
    + JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java
    fails on mac
    + JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java
    fails on mac
    + JDK-8198619: java/awt/Focus/FocusTraversalPolicy/
    /ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java
    fails on mac
    + JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/
    /EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java
    fails on mac
    + JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/
    /SubMenuShowTest/SubMenuShowTest.html fails on mac
    + JDK-8199138: Add RISC-V support to Zero
    + JDK-8199529: javax/swing/text/Utilities/8142966/
    /SwingFontMetricsTest.java fails on windows
    + JDK-8201224: Make string buffer size dynamic in
    mlvmJvmtiUtils.c
    + JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/
    /FollowReferences/followref003/TestDescription.java fails with
    "Location mismatch" errors
    + JDK-8204161: [TESTBUG] auto failed with the "Applet thread
    threw exception: java.lang.UnsupportedOperationException"
    exception
    + JDK-8206085: Refactor
    langtools/tools/javac/versions/Versions.java
    + JDK-8207936: TestZipFile failed with java.lang.AssertionError
    exception
    + JDK-8208242: Add @requires to vmTestbase/gc/g1 tests
    + JDK-8209611: use C++ compiler for hotspot tests
    + JDK-8210182: Remove macros for C compilation from vmTestBase
    but non jvmti
    + JDK-8210198: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[A-F] tests
    + JDK-8210205: build fails on AIX in hotspot cpp tests (for
    example getstacktr001.cpp)
    + JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/
    /jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION
    on windows-x86
    + JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java
    back to tier1
    + JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[A-N] tests
    + JDK-8210392: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8210395: Add doc to SecurityTools.java
    + JDK-8210429: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[G-Z] tests
    + JDK-8210481: Remove #ifdef cplusplus from vmTestbase
    + JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[N-R] tests
    + JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[R-U] tests
    + JDK-8210689: Remove the multi-line old C style for string
    literals
    + JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti/unit tests
    + JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665
    + JDK-8210920: Native C++ tests are not using CXXFLAGS
    + JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR:
    hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti,
    thread)"
    + JDK-8211036: Remove the NSK_STUB macros from vmTestbase for
    non jvmti
    + JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[G-I]*
    + JDK-8211148: var in implicit lambdas shouldn't be accepted
    for source &lt; 11
    + JDK-8211171: move JarUtils to top-level testlibrary
    + JDK-8211227: Inconsistent TLS protocol version in debug output
    + JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[A-G]*
    + JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp
    + JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[I-S]*
    + JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[A-E]
    + JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[E-M]
    + JDK-8211905: Remove multiple casts for EM06 file
    + JDK-8211999: Window positioning bugs due to overlapping
    GraphicsDevice bounds (Windows/HiDPI)
    + JDK-8212082: Remove the NSK_CPP_STUB macros for remaining
    vmTestbase/jvmti/[sS]*
    + JDK-8212083: Handle remaining gc/lock native code and fix two
    strings
    + JDK-8212148: Remove remaining NSK_CPP_STUBs
    + JDK-8213110: Remove the use of applets in automatic tests
    + JDK-8213189: Make restricted headers in HTTP Client
    configurable and remove Date by default
    + JDK-8213263: fix legal headers in test/langtools
    + JDK-8213296: Fix legal headers in test/jdk/java/net
    + JDK-8213301: Fix legal headers in jdk logging tests
    + JDK-8213305: Fix legal headers in test/java/math
    + JDK-8213306: Fix legal headers in test/java/nio
    + JDK-8213328: Update test copyrights in test/java/util/zip and
    test/jdk/tools
    + JDK-8213330: Fix legal headers in i18n tests
    + JDK-8213707: [TEST] vmTestbase/nsk/stress/except/
    /except011.java failed due to wrong class name
    + JDK-8214469: [macos] PIT: java/awt/Choice/
    /ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails
    + JDK-8215410: Regression test for JDK-8214994
    + JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher
    + JDK-8215624: Add parallel heap iteration for jmap \u2013histo
    + JDK-8215889: assert(!_unloading) failed: This oop is not
    available to unloading class loader data with ZGC
    + JDK-8216318: The usage of Disposer in the java.awt.Robot can
    be deleted
    + JDK-8216417: cleanup of IPv6 scope-id handling
    + JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java
    failed with UnsupportedOperation exception
    + JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX
    + JDK-8217633: Configurable extensions with system properties
    + JDK-8217882: java/net/httpclient/MaxStreams.java failed once
    + JDK-8217903: java/net/httpclient/Response204.java fails with
    404
    + JDK-8218483: Crash in
    "assert(_daemon_threads_count-&gt;get_value() &gt; daemon_count)
    failed: thread count mismatch 5 : 5"
    + JDK-8219986: Change to Xcode 10.1 for building on Macosx at
    Oracle
    + JDK-8220575: Correctly format test URI's that contain a
    retrieved IPv6 address
    + JDK-8221259: New tests for java.net.Socket to exercise long
    standing behavior
    + JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails
    on MacOS + Solaris
    + JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/
    /FocusTraversal.java fails on ubuntu
    + JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/
    /IconifyTest.java fails on ubuntu18.04
    + JDK-8222446: assert(C-&gt;env()-&gt;system_dictionary_modification_counter_changed())
    failed: Must invalidate if TypeFuncs differ
    + JDK-8223137: Rename predicate 'do_unroll_only()' to
    'is_unroll_only()'.
    + JDK-8223138: Small clean-up in loop-tree support.
    + JDK-8223139: Rename mandatory policy-do routines.
    + JDK-8223140: Clean-up in 'ok_to_convert()'
    + JDK-8223141: Change (count) suffix _ct into _cnt.
    + JDK-8223400: Replace some enums with static const members in
    hotspot/runtime
    + JDK-8223658: Performance regression of XML.validation in
    13-b19
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8224829: AsyncSSLSocketClose.java has timing issue
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226514: Replace wildcard address with loopback or local
    host in tests - part 17
    + JDK-8226943: compile error in libfollowref003.cpp  with XCode
    10.2 on macosx
    + JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed
    due to "SSLException: An established connection was aborted by
    the software in your host machine"
    + JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java
    fails on Windows7
    + JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently
    positions text
    + JDK-8230019: [REDO] compiler/types/correctness/* tests fail
    with "assert(recv == __null || recv-&gt;is_klass()) failed: wrong
    type"
    + JDK-8230067: Add optional automatic retry when running jtreg
    tests
    + JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests
    may fail on some platforms
    + JDK-8231501: VM crash in
    MethodData::clean_extra_data(CleanExtraDataClosure*):
    fatal error: unexpected tag 99
    + JDK-8233403: Improve verbosity of some httpclient tests
    + JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS
    + JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on
    MacOS
    + JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on
    MacOS
    + JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS
    + JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS
    + JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on
    macos
    + JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java  is
    failing on macos
    + JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails
    on macos
    + JDK-8233562: [TESTBUG] Swing StyledEditorKit test
    bug4506788.java fails on MacOS
    + JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing
    + JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on
    MacoS
    + JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos
    + JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java
    fails on macos
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails
    on macos
    + JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java
    fails on macos
    + JDK-8233637: [TESTBUG] Swing
    ActionListenerCalledTwiceTest.java fails on macos
    + JDK-8233638: [TESTBUG] Swing test
    ScreenMenuBarInputTwice.java fails on macos
    + JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails
    on macos
    + JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java  fails
    on macos
    + JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on
    macos
    + JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is
    failing on macos
    + JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is
    failing on macos
    + JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture
    Recognition in all the platforms
    + JDK-8234823: java/net/Socket/Timeouts.java testcase
    testTimedConnect2() fails on Windows 10
    + JDK-8235784: java/lang/invoke/VarHandles/
    /VarHandleTestByteArrayAsInt.java fails due to timeout with
    fastdebug bits
    + JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -Xcomp -XX:TieredStopAtLevel=1
    + JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60),
    cond_wait
    + JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT,
    when using proxy tunnel
    + JDK-8237354: Add option to jcmd to write a gzipped heap dump
    + JDK-8237589: Fix copyright header formatting
    + JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java
    should not specify TLS version
    + JDK-8239334: Tab Size does not work correctly in JTextArea
    with setLineWrap on
    + JDK-8239422: [TESTBUG]
    compiler/c1/TestPrintIRDuringConstruction.java failed when C1
    is disabled
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240256: Better resource cleaning for SunPKCS11 Provider
    + JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test
    Server
    + JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/
    /bug8020708.java fails in mach5 ubuntu system
    + JDK-8242793: Incorrect copyright header in
    ContinuousCallSiteTargetChange.java
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244292: Headful clients failing with
  - -illegal-access=deny
    + JDK-8245147: Refactor and improve utility of
    test/langtools/tools/javac/versions/Versions.java
    + JDK-8245165: Update bug id for
    javax/swing/text/StyledEditorKit/4506788/bug4506788.java in
    ProblemList
    + JDK-8245665: Test WeakAlg.java should only make sure no
    warning for weak signature algorithms by keytool on root CA
    + JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails
    after 8241072 (multi-homed systems)
    + JDK-8246807: Incorrect copyright header in
    TimeZoneDatePermissionCheck.sh
    + JDK-8247403: JShell: No custom input (e.g. from GUI) possible
    with JavaShellToolBuilder
    + JDK-8247510: typo in IllegalHandshakeMessage
    + JDK-8248187: [TESTBUG] javax/swing/plaf/basic/
    /BasicGraphicsUtils/8132119/bug8132119.java fails with String
    is not properly drawn
    + JDK-8248341: ProblemList java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java
    + JDK-8248500: AArch64: Remove the r18 dependency on Windows
    AArch64
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8249195: Change to Xcode 11.3.1 for building on Macos at
    Oracle
    + JDK-8250521: Configure initial RTO to use minimal retry for
    loopback connections on Windows
    + JDK-8250810: Push missing parts of JDK-8248817
    + JDK-8250839: Improve test template SSLEngineTemplate with
    SSLContextTemplate
    + JDK-8250863: Build error with GCC 10 in NetworkInterface.c
    and k_standard.c
    + JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/
    /gf08t001/TestDriver.java fails
    + JDK-8251155: HostIdentifier fails to canonicalize hostnames
    starting with digits
    + JDK-8251377: [macos11] JTabbedPane selected tab text is
    barely legible
    + JDK-8251570: JDK-8215624 causes assert(worker_id &lt;
    _n_workers) failed: Invalid worker_id
    + JDK-8251930: AArch64: Native types mismatch in hotspot
    + JDK-8252049: Native memory leak in ciMethodData ctor
    + JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x
    friendly
    + JDK-8252114: Windows-AArch64: Enable and test ZGC and
    ShenandoahGC
    + JDK-8253015: Aarch64: Move linux code out from generic CPU
    feature detection
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java
    fail on big screens
    + JDK-8253497: Core Libs Terminology Refresh
    + JDK-8253682: The AppletInitialFocusTest1.java is unstable
    + JDK-8253763: ParallelObjectIterator should have virtual
    destructor
    + JDK-8253866: Security Libs Terminology Refresh
    + JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in
    "try throwing in GET_BODY"
    + JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java
    intermittently failing with TestServer: start exception:
    java.io.IOException: Invalid preface
    + JDK-8255264: Support for identifying the full range of IPv4
    localhost addresses on Windows
    + JDK-8255716: AArch64: Regression: JVM crashes if manually
    offline a core
    + JDK-8255722: Create a new test for rotated blit
    + JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad
    + JDK-8256066: Tests use deprecated TestNG API that is no
    longer available in new versions
    + JDK-8256152: tests fail because of ambiguous method resolution
    + JDK-8256182: Update qemu-debootstrap cross-compilation recipe
    + JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/
    /FullscreenWindowProps.java failed
    + JDK-8256202: Some tweaks for jarsigner tests
    PosixPermissionsTest and SymLinkTest
    + JDK-8256372: [macos] Unexpected symbol was displayed on
    JTextField with Monospaced font
    + JDK-8256956: RegisterImpl::max_slots_per_register is
    incorrect on AMD64
    + JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with
    InvalidPathException on windows
    + JDK-8258855: Two tests sun/security/krb5/auto/
    /ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java
    failed on OL8.3
    + JDK-8259237: Demo selection changes with left/right arrow
    key. No need to press space for selection.
    + JDK-8260571: Add PrintMetaspaceStatistics to print metaspace
    statistics upon VM exit
    + JDK-8260690: JConsole User Guide Link from the Help menu is
    not accessible by keyboard
    + JDK-8261036: Reduce classes loaded by CleanerFactory
    initialization
    + JDK-8261071: AArch64: Refactor interpreter native wrappers
    + JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch
    implementation
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261297: NMT: Final report should use scale 1
    + JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java
    fails because Reserved memory size is too big
    + JDK-8261916: gtest/GTestWrapper.java
    vmErrorTest.unimplemented1_vm_assert failed
    + JDK-8262438: sun/security/ssl/SSLLogger/
    /LoggingFormatConsistency.java failed with "SocketException:
    Socket is closed"
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8262844: (fs) FileStore.supportsFileAttributeView might
    return false negative in case of ext3
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp
    + JDK-8263303: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8263362: Avoid division by 0 in
    java/awt/font/TextJustifier.java justify
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java
    failed with "java.lang.RuntimeException: Wrong method"
    + JDK-8264526: javax/swing/text/html/parser/Parser/8078268/
    /bug8078268.java timeout
    + JDK-8264824: java/net/Inet6Address/B6206527.java doesn't
    close ServerSocket properly
    + JDK-8265019: Update tests for additional TestNG test
    permissions
    + JDK-8265173: [test] divert spurious log output away from
    stream under test in ProcessBuilder Basic test
    + JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8266579: Update test/jdk/java/lang/ProcessHandle/
    /PermissionTest.java &amp; test/jdk/java/sql/testng/util/
    /TestPolicy.java
    + JDK-8266949: Check possibility to disable OperationTimedOut
    on Unix
    + JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg
    tests on many-core machines
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267304: Bump global JTReg memory limit to 768m
    + JDK-8267652: c2 loop unrolling by 8 results in reading memory
    past array
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268093: Manual Testcase: "sun/security/krb5/config/
    /native/TestDynamicStore.java" Fails with NPE
    + JDK-8268555: Update HttpClient tests that use ITestContext to
    jtreg 6+1
    + JDK-8268672: C2: assert(!loop-&gt;is_member(u_loop)) failed: can
    be in outer loop or out of both loops only
    + JDK-8269034: AccessControlException for SunPKCS11 daemon
    threads
    + JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to
    accessClassAndFindClass
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269768: JFR Terminology Refresh
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8269984: [macos] JTabbedPane title looks like  disabled
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270216: [macOS] Update named used for Java run loop mode
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270344: Session resumption errors
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1
    + JDK-8272181: Windows-AArch64:Backport fix of `Backtracing
    broken on PAC enabled systems`
    + JDK-8272316: Wrong Boot JDK help message in 11
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8272828: Add correct licenses to jszip.md
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java
    fails by timeout
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273541: Cleaner Thread creates with normal priority
    instead of MAX_PRIORITY - 2
    + JDK-8273547: [11u] [JVMCI] Partial module-info.java backport
    of JDK-8223332
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273671: Backport of 8260616 misses one JNF header
    inclusion removal
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273795: Zero SPARC64 debug builds fail due to missing
    interpreter fields
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274860: gcc 10.2.1 produces an uninitialized warning in
    sharedRuntimeTrig.cpp
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277815: Fix mistakes in legal header backports
- Removed patch:
  * riscv64-zero.patch
    + integrated upstream
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1644926400">- Update to upstream tag jdk-11.0.14.1+1
  * Changes:
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8281324: Bump update version for OpenJDK: jdk-11.0.14.1</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="07b3c4387e716cec4d58cb0699c27003af6660b1f56ecc1f40852551d4a53628" name="java-11-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="11.0.15.0" rel="150000.3.80.1"/>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643630400">- Update to upstream tag jdk-11.0.14+9 (January 2022 CPU)
  * New features
    + JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
  * Security fixes
    + JDK-8217375: jarsigner breaks old signature with long lines
    in manifest
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
    + JDK-8279541: Improve HarfBuzz
  * Other changes
    + JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/
    /ChoiceKeyEventReaction.html fails
    + JDK-7105119: [TEST_BUG] [macosx] In test
    UIDefaults.toString() must be called with the invokeLater()
    + JDK-7151826: [TEST_BUG] [macosx] The test
    javax/swing/JPopupMenu/4966112/bug4966112.java not for mac
    + JDK-7179006: [macosx] Print-to-file doesn't work: printing to
    the default printer instead
    + JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/
    /bug4726194.java fails on MacOSX
    + JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003 Wrong
    number of thread end events
    + JDK-8039261: [TEST_BUG]: There is not a minimal security
    level in Java Preferences and the TestApplet.html is blocked.
    + JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/
    /AltTabCrashTest.java fails with exception
    + JDK-8075909: [TEST_BUG] The regression-swing case failed as
    it does not have the 'Open' button when select 'subdir' folder
    with NimbusLAF
    + JDK-8078219: Verify lack of @test tag in files in java/net
    test directory
    + JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails
    with "RuntimeException: Process terminated prematurely"
    + JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java timed out intermittently
    + JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails
    intermittently
    + JDK-8131745: java/lang/management/ThreadMXBean/
    /AllThreadIds.java still fails intermittently
    + JDK-8136517: [macosx] Test java/awt/Focus/8073453/
    /AWTFocusTransitionTest.java fails on MacOSX
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/
    /Test6541987.java fails
    + JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/
    /bug4760494.java leaves key pressed
    + JDK-8159904: [TEST_BUG] Failure on solaris of
    java/awt/Window/MultiWindowApp/MultiWindowAppTest.java
    + JDK-8163086: java/awt/Window/TranslucentJAppletTest/
    /TranslucentJAppletTest.java fails
    + JDK-8165828: [TEST_BUG] The reg case: javax/swing/plaf/metal/
    /MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look
    and Feel
    + JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not
    fired! on Windows
    + JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException:
    Default button is not pressed
    + JDK-8169959: javax/swing/JTable/6263446/bug6263446.java:
    Table should be editing
    + JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/
    /7156657/bug7156657.java fails on OS X
    + JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails
    on Windows
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8179880: Refactor javax/security shell tests to plain
    java tests
    + JDK-8180568: Refactor javax/crypto shell tests to plain java
    tests
    + JDK-8180569: Refactor sun/security/krb5/ shell tests to plain
    java tests
    + JDK-8180571: Refactor sun/security/pkcs11 shell tests to
    plain java tests and fix failures
    + JDK-8180573: Refactor sun/security/tools shell tests to plain
    java tests
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8195703: BasicJDWPConnectionTest.java: 'App exited
    unexpectedly with 2'
    + JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java
    fails
    + JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java
    fails
    + JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/
    /NoEventsTest.java fails on Windows
    + JDK-8197811: Test java/awt/Choice/PopupPosTest/
    /PopupPosTest.java fails on Windows
    + JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java
    fails on mac
    + JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java
    fails on mac
    + JDK-8198619: java/awt/Focus/FocusTraversalPolicy/
    /ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java
    fails on mac
    + JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/
    /EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java
    fails on mac
    + JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/
    /SubMenuShowTest/SubMenuShowTest.html fails on mac
    + JDK-8199138: Add RISC-V support to Zero
    + JDK-8199529: javax/swing/text/Utilities/8142966/
    /SwingFontMetricsTest.java fails on windows
    + JDK-8201224: Make string buffer size dynamic in
    mlvmJvmtiUtils.c
    + JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/
    /FollowReferences/followref003/TestDescription.java fails with
    "Location mismatch" errors
    + JDK-8204161: [TESTBUG] auto failed with the "Applet thread
    threw exception: java.lang.UnsupportedOperationException"
    exception
    + JDK-8206085: Refactor
    langtools/tools/javac/versions/Versions.java
    + JDK-8207936: TestZipFile failed with java.lang.AssertionError
    exception
    + JDK-8208242: Add @requires to vmTestbase/gc/g1 tests
    + JDK-8209611: use C++ compiler for hotspot tests
    + JDK-8210182: Remove macros for C compilation from vmTestBase
    but non jvmti
    + JDK-8210198: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[A-F] tests
    + JDK-8210205: build fails on AIX in hotspot cpp tests (for
    example getstacktr001.cpp)
    + JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/
    /jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION
    on windows-x86
    + JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java
    back to tier1
    + JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[A-N] tests
    + JDK-8210392: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8210395: Add doc to SecurityTools.java
    + JDK-8210429: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[G-Z] tests
    + JDK-8210481: Remove #ifdef cplusplus from vmTestbase
    + JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[N-R] tests
    + JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[R-U] tests
    + JDK-8210689: Remove the multi-line old C style for string
    literals
    + JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti/unit tests
    + JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665
    + JDK-8210920: Native C++ tests are not using CXXFLAGS
    + JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR:
    hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti,
    thread)"
    + JDK-8211036: Remove the NSK_STUB macros from vmTestbase for
    non jvmti
    + JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[G-I]*
    + JDK-8211148: var in implicit lambdas shouldn't be accepted
    for source &lt; 11
    + JDK-8211171: move JarUtils to top-level testlibrary
    + JDK-8211227: Inconsistent TLS protocol version in debug output
    + JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[A-G]*
    + JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp
    + JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[I-S]*
    + JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[A-E]
    + JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[E-M]
    + JDK-8211905: Remove multiple casts for EM06 file
    + JDK-8211999: Window positioning bugs due to overlapping
    GraphicsDevice bounds (Windows/HiDPI)
    + JDK-8212082: Remove the NSK_CPP_STUB macros for remaining
    vmTestbase/jvmti/[sS]*
    + JDK-8212083: Handle remaining gc/lock native code and fix two
    strings
    + JDK-8212148: Remove remaining NSK_CPP_STUBs
    + JDK-8213110: Remove the use of applets in automatic tests
    + JDK-8213189: Make restricted headers in HTTP Client
    configurable and remove Date by default
    + JDK-8213263: fix legal headers in test/langtools
    + JDK-8213296: Fix legal headers in test/jdk/java/net
    + JDK-8213301: Fix legal headers in jdk logging tests
    + JDK-8213305: Fix legal headers in test/java/math
    + JDK-8213306: Fix legal headers in test/java/nio
    + JDK-8213328: Update test copyrights in test/java/util/zip and
    test/jdk/tools
    + JDK-8213330: Fix legal headers in i18n tests
    + JDK-8213707: [TEST] vmTestbase/nsk/stress/except/
    /except011.java failed due to wrong class name
    + JDK-8214469: [macos] PIT: java/awt/Choice/
    /ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails
    + JDK-8215410: Regression test for JDK-8214994
    + JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher
    + JDK-8215624: Add parallel heap iteration for jmap \u2013histo
    + JDK-8215889: assert(!_unloading) failed: This oop is not
    available to unloading class loader data with ZGC
    + JDK-8216318: The usage of Disposer in the java.awt.Robot can
    be deleted
    + JDK-8216417: cleanup of IPv6 scope-id handling
    + JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java
    failed with UnsupportedOperation exception
    + JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX
    + JDK-8217633: Configurable extensions with system properties
    + JDK-8217882: java/net/httpclient/MaxStreams.java failed once
    + JDK-8217903: java/net/httpclient/Response204.java fails with
    404
    + JDK-8218483: Crash in
    "assert(_daemon_threads_count-&gt;get_value() &gt; daemon_count)
    failed: thread count mismatch 5 : 5"
    + JDK-8219986: Change to Xcode 10.1 for building on Macosx at
    Oracle
    + JDK-8220575: Correctly format test URI's that contain a
    retrieved IPv6 address
    + JDK-8221259: New tests for java.net.Socket to exercise long
    standing behavior
    + JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails
    on MacOS + Solaris
    + JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/
    /FocusTraversal.java fails on ubuntu
    + JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/
    /IconifyTest.java fails on ubuntu18.04
    + JDK-8222446: assert(C-&gt;env()-&gt;system_dictionary_modification_counter_changed())
    failed: Must invalidate if TypeFuncs differ
    + JDK-8223137: Rename predicate 'do_unroll_only()' to
    'is_unroll_only()'.
    + JDK-8223138: Small clean-up in loop-tree support.
    + JDK-8223139: Rename mandatory policy-do routines.
    + JDK-8223140: Clean-up in 'ok_to_convert()'
    + JDK-8223141: Change (count) suffix _ct into _cnt.
    + JDK-8223400: Replace some enums with static const members in
    hotspot/runtime
    + JDK-8223658: Performance regression of XML.validation in
    13-b19
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8224829: AsyncSSLSocketClose.java has timing issue
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226514: Replace wildcard address with loopback or local
    host in tests - part 17
    + JDK-8226943: compile error in libfollowref003.cpp  with XCode
    10.2 on macosx
    + JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed
    due to "SSLException: An established connection was aborted by
    the software in your host machine"
    + JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java
    fails on Windows7
    + JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently
    positions text
    + JDK-8230019: [REDO] compiler/types/correctness/* tests fail
    with "assert(recv == __null || recv-&gt;is_klass()) failed: wrong
    type"
    + JDK-8230067: Add optional automatic retry when running jtreg
    tests
    + JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests
    may fail on some platforms
    + JDK-8231501: VM crash in
    MethodData::clean_extra_data(CleanExtraDataClosure*):
    fatal error: unexpected tag 99
    + JDK-8233403: Improve verbosity of some httpclient tests
    + JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS
    + JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on
    MacOS
    + JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on
    MacOS
    + JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS
    + JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS
    + JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on
    macos
    + JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java  is
    failing on macos
    + JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails
    on macos
    + JDK-8233562: [TESTBUG] Swing StyledEditorKit test
    bug4506788.java fails on MacOS
    + JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing
    + JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on
    MacoS
    + JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos
    + JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java
    fails on macos
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails
    on macos
    + JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java
    fails on macos
    + JDK-8233637: [TESTBUG] Swing
    ActionListenerCalledTwiceTest.java fails on macos
    + JDK-8233638: [TESTBUG] Swing test
    ScreenMenuBarInputTwice.java fails on macos
    + JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails
    on macos
    + JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java  fails
    on macos
    + JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on
    macos
    + JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is
    failing on macos
    + JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is
    failing on macos
    + JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture
    Recognition in all the platforms
    + JDK-8234823: java/net/Socket/Timeouts.java testcase
    testTimedConnect2() fails on Windows 10
    + JDK-8235784: java/lang/invoke/VarHandles/
    /VarHandleTestByteArrayAsInt.java fails due to timeout with
    fastdebug bits
    + JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -Xcomp -XX:TieredStopAtLevel=1
    + JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60),
    cond_wait
    + JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT,
    when using proxy tunnel
    + JDK-8237354: Add option to jcmd to write a gzipped heap dump
    + JDK-8237589: Fix copyright header formatting
    + JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java
    should not specify TLS version
    + JDK-8239334: Tab Size does not work correctly in JTextArea
    with setLineWrap on
    + JDK-8239422: [TESTBUG]
    compiler/c1/TestPrintIRDuringConstruction.java failed when C1
    is disabled
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240256: Better resource cleaning for SunPKCS11 Provider
    + JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test
    Server
    + JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/
    /bug8020708.java fails in mach5 ubuntu system
    + JDK-8242793: Incorrect copyright header in
    ContinuousCallSiteTargetChange.java
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244292: Headful clients failing with
  - -illegal-access=deny
    + JDK-8245147: Refactor and improve utility of
    test/langtools/tools/javac/versions/Versions.java
    + JDK-8245165: Update bug id for
    javax/swing/text/StyledEditorKit/4506788/bug4506788.java in
    ProblemList
    + JDK-8245665: Test WeakAlg.java should only make sure no
    warning for weak signature algorithms by keytool on root CA
    + JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails
    after 8241072 (multi-homed systems)
    + JDK-8246807: Incorrect copyright header in
    TimeZoneDatePermissionCheck.sh
    + JDK-8247403: JShell: No custom input (e.g. from GUI) possible
    with JavaShellToolBuilder
    + JDK-8247510: typo in IllegalHandshakeMessage
    + JDK-8248187: [TESTBUG] javax/swing/plaf/basic/
    /BasicGraphicsUtils/8132119/bug8132119.java fails with String
    is not properly drawn
    + JDK-8248341: ProblemList java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java
    + JDK-8248500: AArch64: Remove the r18 dependency on Windows
    AArch64
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8249195: Change to Xcode 11.3.1 for building on Macos at
    Oracle
    + JDK-8250521: Configure initial RTO to use minimal retry for
    loopback connections on Windows
    + JDK-8250810: Push missing parts of JDK-8248817
    + JDK-8250839: Improve test template SSLEngineTemplate with
    SSLContextTemplate
    + JDK-8250863: Build error with GCC 10 in NetworkInterface.c
    and k_standard.c
    + JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/
    /gf08t001/TestDriver.java fails
    + JDK-8251155: HostIdentifier fails to canonicalize hostnames
    starting with digits
    + JDK-8251377: [macos11] JTabbedPane selected tab text is
    barely legible
    + JDK-8251570: JDK-8215624 causes assert(worker_id &lt;
    _n_workers) failed: Invalid worker_id
    + JDK-8251930: AArch64: Native types mismatch in hotspot
    + JDK-8252049: Native memory leak in ciMethodData ctor
    + JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x
    friendly
    + JDK-8252114: Windows-AArch64: Enable and test ZGC and
    ShenandoahGC
    + JDK-8253015: Aarch64: Move linux code out from generic CPU
    feature detection
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java
    fail on big screens
    + JDK-8253497: Core Libs Terminology Refresh
    + JDK-8253682: The AppletInitialFocusTest1.java is unstable
    + JDK-8253763: ParallelObjectIterator should have virtual
    destructor
    + JDK-8253866: Security Libs Terminology Refresh
    + JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in
    "try throwing in GET_BODY"
    + JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java
    intermittently failing with TestServer: start exception:
    java.io.IOException: Invalid preface
    + JDK-8255264: Support for identifying the full range of IPv4
    localhost addresses on Windows
    + JDK-8255716: AArch64: Regression: JVM crashes if manually
    offline a core
    + JDK-8255722: Create a new test for rotated blit
    + JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad
    + JDK-8256066: Tests use deprecated TestNG API that is no
    longer available in new versions
    + JDK-8256152: tests fail because of ambiguous method resolution
    + JDK-8256182: Update qemu-debootstrap cross-compilation recipe
    + JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/
    /FullscreenWindowProps.java failed
    + JDK-8256202: Some tweaks for jarsigner tests
    PosixPermissionsTest and SymLinkTest
    + JDK-8256372: [macos] Unexpected symbol was displayed on
    JTextField with Monospaced font
    + JDK-8256956: RegisterImpl::max_slots_per_register is
    incorrect on AMD64
    + JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with
    InvalidPathException on windows
    + JDK-8258855: Two tests sun/security/krb5/auto/
    /ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java
    failed on OL8.3
    + JDK-8259237: Demo selection changes with left/right arrow
    key. No need to press space for selection.
    + JDK-8260571: Add PrintMetaspaceStatistics to print metaspace
    statistics upon VM exit
    + JDK-8260690: JConsole User Guide Link from the Help menu is
    not accessible by keyboard
    + JDK-8261036: Reduce classes loaded by CleanerFactory
    initialization
    + JDK-8261071: AArch64: Refactor interpreter native wrappers
    + JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch
    implementation
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261297: NMT: Final report should use scale 1
    + JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java
    fails because Reserved memory size is too big
    + JDK-8261916: gtest/GTestWrapper.java
    vmErrorTest.unimplemented1_vm_assert failed
    + JDK-8262438: sun/security/ssl/SSLLogger/
    /LoggingFormatConsistency.java failed with "SocketException:
    Socket is closed"
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8262844: (fs) FileStore.supportsFileAttributeView might
    return false negative in case of ext3
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp
    + JDK-8263303: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8263362: Avoid division by 0 in
    java/awt/font/TextJustifier.java justify
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java
    failed with "java.lang.RuntimeException: Wrong method"
    + JDK-8264526: javax/swing/text/html/parser/Parser/8078268/
    /bug8078268.java timeout
    + JDK-8264824: java/net/Inet6Address/B6206527.java doesn't
    close ServerSocket properly
    + JDK-8265019: Update tests for additional TestNG test
    permissions
    + JDK-8265173: [test] divert spurious log output away from
    stream under test in ProcessBuilder Basic test
    + JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8266579: Update test/jdk/java/lang/ProcessHandle/
    /PermissionTest.java &amp; test/jdk/java/sql/testng/util/
    /TestPolicy.java
    + JDK-8266949: Check possibility to disable OperationTimedOut
    on Unix
    + JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg
    tests on many-core machines
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267304: Bump global JTReg memory limit to 768m
    + JDK-8267652: c2 loop unrolling by 8 results in reading memory
    past array
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268093: Manual Testcase: "sun/security/krb5/config/
    /native/TestDynamicStore.java" Fails with NPE
    + JDK-8268555: Update HttpClient tests that use ITestContext to
    jtreg 6+1
    + JDK-8268672: C2: assert(!loop-&gt;is_member(u_loop)) failed: can
    be in outer loop or out of both loops only
    + JDK-8269034: AccessControlException for SunPKCS11 daemon
    threads
    + JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to
    accessClassAndFindClass
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269768: JFR Terminology Refresh
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8269984: [macos] JTabbedPane title looks like  disabled
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270216: [macOS] Update named used for Java run loop mode
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270344: Session resumption errors
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1
    + JDK-8272181: Windows-AArch64:Backport fix of `Backtracing
    broken on PAC enabled systems`
    + JDK-8272316: Wrong Boot JDK help message in 11
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8272828: Add correct licenses to jszip.md
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java
    fails by timeout
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273541: Cleaner Thread creates with normal priority
    instead of MAX_PRIORITY - 2
    + JDK-8273547: [11u] [JVMCI] Partial module-info.java backport
    of JDK-8223332
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273671: Backport of 8260616 misses one JNF header
    inclusion removal
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273795: Zero SPARC64 debug builds fail due to missing
    interpreter fields
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274860: gcc 10.2.1 produces an uninitialized warning in
    sharedRuntimeTrig.cpp
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277815: Fix mistakes in legal header backports
- Removed patch:
  * riscv64-zero.patch
    + integrated upstream
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1644926400">- Update to upstream tag jdk-11.0.14.1+1
  * Changes:
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8281324: Bump update version for OpenJDK: jdk-11.0.14.1</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="93d3fd2900d750670b4356c99a8310860d3bc4d7d13eafa09b3a8f74c8a8b5d4" name="java-11-openjdk-jmods" arch="aarch64">
  <version epoch="0" ver="11.0.15.0" rel="150000.3.80.1"/>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643630400">- Update to upstream tag jdk-11.0.14+9 (January 2022 CPU)
  * New features
    + JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
  * Security fixes
    + JDK-8217375: jarsigner breaks old signature with long lines
    in manifest
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
    + JDK-8279541: Improve HarfBuzz
  * Other changes
    + JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/
    /ChoiceKeyEventReaction.html fails
    + JDK-7105119: [TEST_BUG] [macosx] In test
    UIDefaults.toString() must be called with the invokeLater()
    + JDK-7151826: [TEST_BUG] [macosx] The test
    javax/swing/JPopupMenu/4966112/bug4966112.java not for mac
    + JDK-7179006: [macosx] Print-to-file doesn't work: printing to
    the default printer instead
    + JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/
    /bug4726194.java fails on MacOSX
    + JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003 Wrong
    number of thread end events
    + JDK-8039261: [TEST_BUG]: There is not a minimal security
    level in Java Preferences and the TestApplet.html is blocked.
    + JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/
    /AltTabCrashTest.java fails with exception
    + JDK-8075909: [TEST_BUG] The regression-swing case failed as
    it does not have the 'Open' button when select 'subdir' folder
    with NimbusLAF
    + JDK-8078219: Verify lack of @test tag in files in java/net
    test directory
    + JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails
    with "RuntimeException: Process terminated prematurely"
    + JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java timed out intermittently
    + JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails
    intermittently
    + JDK-8131745: java/lang/management/ThreadMXBean/
    /AllThreadIds.java still fails intermittently
    + JDK-8136517: [macosx] Test java/awt/Focus/8073453/
    /AWTFocusTransitionTest.java fails on MacOSX
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/
    /Test6541987.java fails
    + JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/
    /bug4760494.java leaves key pressed
    + JDK-8159904: [TEST_BUG] Failure on solaris of
    java/awt/Window/MultiWindowApp/MultiWindowAppTest.java
    + JDK-8163086: java/awt/Window/TranslucentJAppletTest/
    /TranslucentJAppletTest.java fails
    + JDK-8165828: [TEST_BUG] The reg case: javax/swing/plaf/metal/
    /MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look
    and Feel
    + JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not
    fired! on Windows
    + JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException:
    Default button is not pressed
    + JDK-8169959: javax/swing/JTable/6263446/bug6263446.java:
    Table should be editing
    + JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/
    /7156657/bug7156657.java fails on OS X
    + JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails
    on Windows
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8179880: Refactor javax/security shell tests to plain
    java tests
    + JDK-8180568: Refactor javax/crypto shell tests to plain java
    tests
    + JDK-8180569: Refactor sun/security/krb5/ shell tests to plain
    java tests
    + JDK-8180571: Refactor sun/security/pkcs11 shell tests to
    plain java tests and fix failures
    + JDK-8180573: Refactor sun/security/tools shell tests to plain
    java tests
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8195703: BasicJDWPConnectionTest.java: 'App exited
    unexpectedly with 2'
    + JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java
    fails
    + JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java
    fails
    + JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/
    /NoEventsTest.java fails on Windows
    + JDK-8197811: Test java/awt/Choice/PopupPosTest/
    /PopupPosTest.java fails on Windows
    + JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java
    fails on mac
    + JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java
    fails on mac
    + JDK-8198619: java/awt/Focus/FocusTraversalPolicy/
    /ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java
    fails on mac
    + JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/
    /EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java
    fails on mac
    + JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/
    /SubMenuShowTest/SubMenuShowTest.html fails on mac
    + JDK-8199138: Add RISC-V support to Zero
    + JDK-8199529: javax/swing/text/Utilities/8142966/
    /SwingFontMetricsTest.java fails on windows
    + JDK-8201224: Make string buffer size dynamic in
    mlvmJvmtiUtils.c
    + JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/
    /FollowReferences/followref003/TestDescription.java fails with
    "Location mismatch" errors
    + JDK-8204161: [TESTBUG] auto failed with the "Applet thread
    threw exception: java.lang.UnsupportedOperationException"
    exception
    + JDK-8206085: Refactor
    langtools/tools/javac/versions/Versions.java
    + JDK-8207936: TestZipFile failed with java.lang.AssertionError
    exception
    + JDK-8208242: Add @requires to vmTestbase/gc/g1 tests
    + JDK-8209611: use C++ compiler for hotspot tests
    + JDK-8210182: Remove macros for C compilation from vmTestBase
    but non jvmti
    + JDK-8210198: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[A-F] tests
    + JDK-8210205: build fails on AIX in hotspot cpp tests (for
    example getstacktr001.cpp)
    + JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/
    /jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION
    on windows-x86
    + JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java
    back to tier1
    + JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[A-N] tests
    + JDK-8210392: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8210395: Add doc to SecurityTools.java
    + JDK-8210429: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[G-Z] tests
    + JDK-8210481: Remove #ifdef cplusplus from vmTestbase
    + JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[N-R] tests
    + JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[R-U] tests
    + JDK-8210689: Remove the multi-line old C style for string
    literals
    + JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti/unit tests
    + JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665
    + JDK-8210920: Native C++ tests are not using CXXFLAGS
    + JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR:
    hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti,
    thread)"
    + JDK-8211036: Remove the NSK_STUB macros from vmTestbase for
    non jvmti
    + JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[G-I]*
    + JDK-8211148: var in implicit lambdas shouldn't be accepted
    for source &lt; 11
    + JDK-8211171: move JarUtils to top-level testlibrary
    + JDK-8211227: Inconsistent TLS protocol version in debug output
    + JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[A-G]*
    + JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp
    + JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[I-S]*
    + JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[A-E]
    + JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[E-M]
    + JDK-8211905: Remove multiple casts for EM06 file
    + JDK-8211999: Window positioning bugs due to overlapping
    GraphicsDevice bounds (Windows/HiDPI)
    + JDK-8212082: Remove the NSK_CPP_STUB macros for remaining
    vmTestbase/jvmti/[sS]*
    + JDK-8212083: Handle remaining gc/lock native code and fix two
    strings
    + JDK-8212148: Remove remaining NSK_CPP_STUBs
    + JDK-8213110: Remove the use of applets in automatic tests
    + JDK-8213189: Make restricted headers in HTTP Client
    configurable and remove Date by default
    + JDK-8213263: fix legal headers in test/langtools
    + JDK-8213296: Fix legal headers in test/jdk/java/net
    + JDK-8213301: Fix legal headers in jdk logging tests
    + JDK-8213305: Fix legal headers in test/java/math
    + JDK-8213306: Fix legal headers in test/java/nio
    + JDK-8213328: Update test copyrights in test/java/util/zip and
    test/jdk/tools
    + JDK-8213330: Fix legal headers in i18n tests
    + JDK-8213707: [TEST] vmTestbase/nsk/stress/except/
    /except011.java failed due to wrong class name
    + JDK-8214469: [macos] PIT: java/awt/Choice/
    /ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails
    + JDK-8215410: Regression test for JDK-8214994
    + JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher
    + JDK-8215624: Add parallel heap iteration for jmap \u2013histo
    + JDK-8215889: assert(!_unloading) failed: This oop is not
    available to unloading class loader data with ZGC
    + JDK-8216318: The usage of Disposer in the java.awt.Robot can
    be deleted
    + JDK-8216417: cleanup of IPv6 scope-id handling
    + JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java
    failed with UnsupportedOperation exception
    + JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX
    + JDK-8217633: Configurable extensions with system properties
    + JDK-8217882: java/net/httpclient/MaxStreams.java failed once
    + JDK-8217903: java/net/httpclient/Response204.java fails with
    404
    + JDK-8218483: Crash in
    "assert(_daemon_threads_count-&gt;get_value() &gt; daemon_count)
    failed: thread count mismatch 5 : 5"
    + JDK-8219986: Change to Xcode 10.1 for building on Macosx at
    Oracle
    + JDK-8220575: Correctly format test URI's that contain a
    retrieved IPv6 address
    + JDK-8221259: New tests for java.net.Socket to exercise long
    standing behavior
    + JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails
    on MacOS + Solaris
    + JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/
    /FocusTraversal.java fails on ubuntu
    + JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/
    /IconifyTest.java fails on ubuntu18.04
    + JDK-8222446: assert(C-&gt;env()-&gt;system_dictionary_modification_counter_changed())
    failed: Must invalidate if TypeFuncs differ
    + JDK-8223137: Rename predicate 'do_unroll_only()' to
    'is_unroll_only()'.
    + JDK-8223138: Small clean-up in loop-tree support.
    + JDK-8223139: Rename mandatory policy-do routines.
    + JDK-8223140: Clean-up in 'ok_to_convert()'
    + JDK-8223141: Change (count) suffix _ct into _cnt.
    + JDK-8223400: Replace some enums with static const members in
    hotspot/runtime
    + JDK-8223658: Performance regression of XML.validation in
    13-b19
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8224829: AsyncSSLSocketClose.java has timing issue
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226514: Replace wildcard address with loopback or local
    host in tests - part 17
    + JDK-8226943: compile error in libfollowref003.cpp  with XCode
    10.2 on macosx
    + JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed
    due to "SSLException: An established connection was aborted by
    the software in your host machine"
    + JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java
    fails on Windows7
    + JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently
    positions text
    + JDK-8230019: [REDO] compiler/types/correctness/* tests fail
    with "assert(recv == __null || recv-&gt;is_klass()) failed: wrong
    type"
    + JDK-8230067: Add optional automatic retry when running jtreg
    tests
    + JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests
    may fail on some platforms
    + JDK-8231501: VM crash in
    MethodData::clean_extra_data(CleanExtraDataClosure*):
    fatal error: unexpected tag 99
    + JDK-8233403: Improve verbosity of some httpclient tests
    + JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS
    + JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on
    MacOS
    + JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on
    MacOS
    + JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS
    + JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS
    + JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on
    macos
    + JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java  is
    failing on macos
    + JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails
    on macos
    + JDK-8233562: [TESTBUG] Swing StyledEditorKit test
    bug4506788.java fails on MacOS
    + JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing
    + JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on
    MacoS
    + JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos
    + JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java
    fails on macos
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails
    on macos
    + JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java
    fails on macos
    + JDK-8233637: [TESTBUG] Swing
    ActionListenerCalledTwiceTest.java fails on macos
    + JDK-8233638: [TESTBUG] Swing test
    ScreenMenuBarInputTwice.java fails on macos
    + JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails
    on macos
    + JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java  fails
    on macos
    + JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on
    macos
    + JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is
    failing on macos
    + JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is
    failing on macos
    + JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture
    Recognition in all the platforms
    + JDK-8234823: java/net/Socket/Timeouts.java testcase
    testTimedConnect2() fails on Windows 10
    + JDK-8235784: java/lang/invoke/VarHandles/
    /VarHandleTestByteArrayAsInt.java fails due to timeout with
    fastdebug bits
    + JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -Xcomp -XX:TieredStopAtLevel=1
    + JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60),
    cond_wait
    + JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT,
    when using proxy tunnel
    + JDK-8237354: Add option to jcmd to write a gzipped heap dump
    + JDK-8237589: Fix copyright header formatting
    + JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java
    should not specify TLS version
    + JDK-8239334: Tab Size does not work correctly in JTextArea
    with setLineWrap on
    + JDK-8239422: [TESTBUG]
    compiler/c1/TestPrintIRDuringConstruction.java failed when C1
    is disabled
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240256: Better resource cleaning for SunPKCS11 Provider
    + JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test
    Server
    + JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/
    /bug8020708.java fails in mach5 ubuntu system
    + JDK-8242793: Incorrect copyright header in
    ContinuousCallSiteTargetChange.java
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244292: Headful clients failing with
  - -illegal-access=deny
    + JDK-8245147: Refactor and improve utility of
    test/langtools/tools/javac/versions/Versions.java
    + JDK-8245165: Update bug id for
    javax/swing/text/StyledEditorKit/4506788/bug4506788.java in
    ProblemList
    + JDK-8245665: Test WeakAlg.java should only make sure no
    warning for weak signature algorithms by keytool on root CA
    + JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails
    after 8241072 (multi-homed systems)
    + JDK-8246807: Incorrect copyright header in
    TimeZoneDatePermissionCheck.sh
    + JDK-8247403: JShell: No custom input (e.g. from GUI) possible
    with JavaShellToolBuilder
    + JDK-8247510: typo in IllegalHandshakeMessage
    + JDK-8248187: [TESTBUG] javax/swing/plaf/basic/
    /BasicGraphicsUtils/8132119/bug8132119.java fails with String
    is not properly drawn
    + JDK-8248341: ProblemList java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java
    + JDK-8248500: AArch64: Remove the r18 dependency on Windows
    AArch64
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8249195: Change to Xcode 11.3.1 for building on Macos at
    Oracle
    + JDK-8250521: Configure initial RTO to use minimal retry for
    loopback connections on Windows
    + JDK-8250810: Push missing parts of JDK-8248817
    + JDK-8250839: Improve test template SSLEngineTemplate with
    SSLContextTemplate
    + JDK-8250863: Build error with GCC 10 in NetworkInterface.c
    and k_standard.c
    + JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/
    /gf08t001/TestDriver.java fails
    + JDK-8251155: HostIdentifier fails to canonicalize hostnames
    starting with digits
    + JDK-8251377: [macos11] JTabbedPane selected tab text is
    barely legible
    + JDK-8251570: JDK-8215624 causes assert(worker_id &lt;
    _n_workers) failed: Invalid worker_id
    + JDK-8251930: AArch64: Native types mismatch in hotspot
    + JDK-8252049: Native memory leak in ciMethodData ctor
    + JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x
    friendly
    + JDK-8252114: Windows-AArch64: Enable and test ZGC and
    ShenandoahGC
    + JDK-8253015: Aarch64: Move linux code out from generic CPU
    feature detection
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java
    fail on big screens
    + JDK-8253497: Core Libs Terminology Refresh
    + JDK-8253682: The AppletInitialFocusTest1.java is unstable
    + JDK-8253763: ParallelObjectIterator should have virtual
    destructor
    + JDK-8253866: Security Libs Terminology Refresh
    + JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in
    "try throwing in GET_BODY"
    + JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java
    intermittently failing with TestServer: start exception:
    java.io.IOException: Invalid preface
    + JDK-8255264: Support for identifying the full range of IPv4
    localhost addresses on Windows
    + JDK-8255716: AArch64: Regression: JVM crashes if manually
    offline a core
    + JDK-8255722: Create a new test for rotated blit
    + JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad
    + JDK-8256066: Tests use deprecated TestNG API that is no
    longer available in new versions
    + JDK-8256152: tests fail because of ambiguous method resolution
    + JDK-8256182: Update qemu-debootstrap cross-compilation recipe
    + JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/
    /FullscreenWindowProps.java failed
    + JDK-8256202: Some tweaks for jarsigner tests
    PosixPermissionsTest and SymLinkTest
    + JDK-8256372: [macos] Unexpected symbol was displayed on
    JTextField with Monospaced font
    + JDK-8256956: RegisterImpl::max_slots_per_register is
    incorrect on AMD64
    + JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with
    InvalidPathException on windows
    + JDK-8258855: Two tests sun/security/krb5/auto/
    /ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java
    failed on OL8.3
    + JDK-8259237: Demo selection changes with left/right arrow
    key. No need to press space for selection.
    + JDK-8260571: Add PrintMetaspaceStatistics to print metaspace
    statistics upon VM exit
    + JDK-8260690: JConsole User Guide Link from the Help menu is
    not accessible by keyboard
    + JDK-8261036: Reduce classes loaded by CleanerFactory
    initialization
    + JDK-8261071: AArch64: Refactor interpreter native wrappers
    + JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch
    implementation
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261297: NMT: Final report should use scale 1
    + JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java
    fails because Reserved memory size is too big
    + JDK-8261916: gtest/GTestWrapper.java
    vmErrorTest.unimplemented1_vm_assert failed
    + JDK-8262438: sun/security/ssl/SSLLogger/
    /LoggingFormatConsistency.java failed with "SocketException:
    Socket is closed"
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8262844: (fs) FileStore.supportsFileAttributeView might
    return false negative in case of ext3
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp
    + JDK-8263303: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8263362: Avoid division by 0 in
    java/awt/font/TextJustifier.java justify
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java
    failed with "java.lang.RuntimeException: Wrong method"
    + JDK-8264526: javax/swing/text/html/parser/Parser/8078268/
    /bug8078268.java timeout
    + JDK-8264824: java/net/Inet6Address/B6206527.java doesn't
    close ServerSocket properly
    + JDK-8265019: Update tests for additional TestNG test
    permissions
    + JDK-8265173: [test] divert spurious log output away from
    stream under test in ProcessBuilder Basic test
    + JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8266579: Update test/jdk/java/lang/ProcessHandle/
    /PermissionTest.java &amp; test/jdk/java/sql/testng/util/
    /TestPolicy.java
    + JDK-8266949: Check possibility to disable OperationTimedOut
    on Unix
    + JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg
    tests on many-core machines
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267304: Bump global JTReg memory limit to 768m
    + JDK-8267652: c2 loop unrolling by 8 results in reading memory
    past array
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268093: Manual Testcase: "sun/security/krb5/config/
    /native/TestDynamicStore.java" Fails with NPE
    + JDK-8268555: Update HttpClient tests that use ITestContext to
    jtreg 6+1
    + JDK-8268672: C2: assert(!loop-&gt;is_member(u_loop)) failed: can
    be in outer loop or out of both loops only
    + JDK-8269034: AccessControlException for SunPKCS11 daemon
    threads
    + JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to
    accessClassAndFindClass
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269768: JFR Terminology Refresh
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8269984: [macos] JTabbedPane title looks like  disabled
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270216: [macOS] Update named used for Java run loop mode
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270344: Session resumption errors
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1
    + JDK-8272181: Windows-AArch64:Backport fix of `Backtracing
    broken on PAC enabled systems`
    + JDK-8272316: Wrong Boot JDK help message in 11
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8272828: Add correct licenses to jszip.md
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java
    fails by timeout
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273541: Cleaner Thread creates with normal priority
    instead of MAX_PRIORITY - 2
    + JDK-8273547: [11u] [JVMCI] Partial module-info.java backport
    of JDK-8223332
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273671: Backport of 8260616 misses one JNF header
    inclusion removal
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273795: Zero SPARC64 debug builds fail due to missing
    interpreter fields
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274860: gcc 10.2.1 produces an uninitialized warning in
    sharedRuntimeTrig.cpp
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277815: Fix mistakes in legal header backports
- Removed patch:
  * riscv64-zero.patch
    + integrated upstream
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1644926400">- Update to upstream tag jdk-11.0.14.1+1
  * Changes:
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8281324: Bump update version for OpenJDK: jdk-11.0.14.1</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="8f3a647be394d3266885ac984029d50f26cf7d12f33590083c41878beaffd425" name="java-11-openjdk-jmods" arch="ppc64le">
  <version epoch="0" ver="11.0.15.0" rel="150000.3.80.1"/>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643630400">- Update to upstream tag jdk-11.0.14+9 (January 2022 CPU)
  * New features
    + JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
  * Security fixes
    + JDK-8217375: jarsigner breaks old signature with long lines
    in manifest
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
    + JDK-8279541: Improve HarfBuzz
  * Other changes
    + JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/
    /ChoiceKeyEventReaction.html fails
    + JDK-7105119: [TEST_BUG] [macosx] In test
    UIDefaults.toString() must be called with the invokeLater()
    + JDK-7151826: [TEST_BUG] [macosx] The test
    javax/swing/JPopupMenu/4966112/bug4966112.java not for mac
    + JDK-7179006: [macosx] Print-to-file doesn't work: printing to
    the default printer instead
    + JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/
    /bug4726194.java fails on MacOSX
    + JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003 Wrong
    number of thread end events
    + JDK-8039261: [TEST_BUG]: There is not a minimal security
    level in Java Preferences and the TestApplet.html is blocked.
    + JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/
    /AltTabCrashTest.java fails with exception
    + JDK-8075909: [TEST_BUG] The regression-swing case failed as
    it does not have the 'Open' button when select 'subdir' folder
    with NimbusLAF
    + JDK-8078219: Verify lack of @test tag in files in java/net
    test directory
    + JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails
    with "RuntimeException: Process terminated prematurely"
    + JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java timed out intermittently
    + JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails
    intermittently
    + JDK-8131745: java/lang/management/ThreadMXBean/
    /AllThreadIds.java still fails intermittently
    + JDK-8136517: [macosx] Test java/awt/Focus/8073453/
    /AWTFocusTransitionTest.java fails on MacOSX
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/
    /Test6541987.java fails
    + JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/
    /bug4760494.java leaves key pressed
    + JDK-8159904: [TEST_BUG] Failure on solaris of
    java/awt/Window/MultiWindowApp/MultiWindowAppTest.java
    + JDK-8163086: java/awt/Window/TranslucentJAppletTest/
    /TranslucentJAppletTest.java fails
    + JDK-8165828: [TEST_BUG] The reg case: javax/swing/plaf/metal/
    /MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look
    and Feel
    + JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not
    fired! on Windows
    + JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException:
    Default button is not pressed
    + JDK-8169959: javax/swing/JTable/6263446/bug6263446.java:
    Table should be editing
    + JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/
    /7156657/bug7156657.java fails on OS X
    + JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails
    on Windows
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8179880: Refactor javax/security shell tests to plain
    java tests
    + JDK-8180568: Refactor javax/crypto shell tests to plain java
    tests
    + JDK-8180569: Refactor sun/security/krb5/ shell tests to plain
    java tests
    + JDK-8180571: Refactor sun/security/pkcs11 shell tests to
    plain java tests and fix failures
    + JDK-8180573: Refactor sun/security/tools shell tests to plain
    java tests
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8195703: BasicJDWPConnectionTest.java: 'App exited
    unexpectedly with 2'
    + JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java
    fails
    + JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java
    fails
    + JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/
    /NoEventsTest.java fails on Windows
    + JDK-8197811: Test java/awt/Choice/PopupPosTest/
    /PopupPosTest.java fails on Windows
    + JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java
    fails on mac
    + JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java
    fails on mac
    + JDK-8198619: java/awt/Focus/FocusTraversalPolicy/
    /ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java
    fails on mac
    + JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/
    /EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java
    fails on mac
    + JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/
    /SubMenuShowTest/SubMenuShowTest.html fails on mac
    + JDK-8199138: Add RISC-V support to Zero
    + JDK-8199529: javax/swing/text/Utilities/8142966/
    /SwingFontMetricsTest.java fails on windows
    + JDK-8201224: Make string buffer size dynamic in
    mlvmJvmtiUtils.c
    + JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/
    /FollowReferences/followref003/TestDescription.java fails with
    "Location mismatch" errors
    + JDK-8204161: [TESTBUG] auto failed with the "Applet thread
    threw exception: java.lang.UnsupportedOperationException"
    exception
    + JDK-8206085: Refactor
    langtools/tools/javac/versions/Versions.java
    + JDK-8207936: TestZipFile failed with java.lang.AssertionError
    exception
    + JDK-8208242: Add @requires to vmTestbase/gc/g1 tests
    + JDK-8209611: use C++ compiler for hotspot tests
    + JDK-8210182: Remove macros for C compilation from vmTestBase
    but non jvmti
    + JDK-8210198: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[A-F] tests
    + JDK-8210205: build fails on AIX in hotspot cpp tests (for
    example getstacktr001.cpp)
    + JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/
    /jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION
    on windows-x86
    + JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java
    back to tier1
    + JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[A-N] tests
    + JDK-8210392: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8210395: Add doc to SecurityTools.java
    + JDK-8210429: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[G-Z] tests
    + JDK-8210481: Remove #ifdef cplusplus from vmTestbase
    + JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[N-R] tests
    + JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[R-U] tests
    + JDK-8210689: Remove the multi-line old C style for string
    literals
    + JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti/unit tests
    + JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665
    + JDK-8210920: Native C++ tests are not using CXXFLAGS
    + JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR:
    hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti,
    thread)"
    + JDK-8211036: Remove the NSK_STUB macros from vmTestbase for
    non jvmti
    + JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[G-I]*
    + JDK-8211148: var in implicit lambdas shouldn't be accepted
    for source &lt; 11
    + JDK-8211171: move JarUtils to top-level testlibrary
    + JDK-8211227: Inconsistent TLS protocol version in debug output
    + JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[A-G]*
    + JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp
    + JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[I-S]*
    + JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[A-E]
    + JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[E-M]
    + JDK-8211905: Remove multiple casts for EM06 file
    + JDK-8211999: Window positioning bugs due to overlapping
    GraphicsDevice bounds (Windows/HiDPI)
    + JDK-8212082: Remove the NSK_CPP_STUB macros for remaining
    vmTestbase/jvmti/[sS]*
    + JDK-8212083: Handle remaining gc/lock native code and fix two
    strings
    + JDK-8212148: Remove remaining NSK_CPP_STUBs
    + JDK-8213110: Remove the use of applets in automatic tests
    + JDK-8213189: Make restricted headers in HTTP Client
    configurable and remove Date by default
    + JDK-8213263: fix legal headers in test/langtools
    + JDK-8213296: Fix legal headers in test/jdk/java/net
    + JDK-8213301: Fix legal headers in jdk logging tests
    + JDK-8213305: Fix legal headers in test/java/math
    + JDK-8213306: Fix legal headers in test/java/nio
    + JDK-8213328: Update test copyrights in test/java/util/zip and
    test/jdk/tools
    + JDK-8213330: Fix legal headers in i18n tests
    + JDK-8213707: [TEST] vmTestbase/nsk/stress/except/
    /except011.java failed due to wrong class name
    + JDK-8214469: [macos] PIT: java/awt/Choice/
    /ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails
    + JDK-8215410: Regression test for JDK-8214994
    + JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher
    + JDK-8215624: Add parallel heap iteration for jmap \u2013histo
    + JDK-8215889: assert(!_unloading) failed: This oop is not
    available to unloading class loader data with ZGC
    + JDK-8216318: The usage of Disposer in the java.awt.Robot can
    be deleted
    + JDK-8216417: cleanup of IPv6 scope-id handling
    + JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java
    failed with UnsupportedOperation exception
    + JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX
    + JDK-8217633: Configurable extensions with system properties
    + JDK-8217882: java/net/httpclient/MaxStreams.java failed once
    + JDK-8217903: java/net/httpclient/Response204.java fails with
    404
    + JDK-8218483: Crash in
    "assert(_daemon_threads_count-&gt;get_value() &gt; daemon_count)
    failed: thread count mismatch 5 : 5"
    + JDK-8219986: Change to Xcode 10.1 for building on Macosx at
    Oracle
    + JDK-8220575: Correctly format test URI's that contain a
    retrieved IPv6 address
    + JDK-8221259: New tests for java.net.Socket to exercise long
    standing behavior
    + JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails
    on MacOS + Solaris
    + JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/
    /FocusTraversal.java fails on ubuntu
    + JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/
    /IconifyTest.java fails on ubuntu18.04
    + JDK-8222446: assert(C-&gt;env()-&gt;system_dictionary_modification_counter_changed())
    failed: Must invalidate if TypeFuncs differ
    + JDK-8223137: Rename predicate 'do_unroll_only()' to
    'is_unroll_only()'.
    + JDK-8223138: Small clean-up in loop-tree support.
    + JDK-8223139: Rename mandatory policy-do routines.
    + JDK-8223140: Clean-up in 'ok_to_convert()'
    + JDK-8223141: Change (count) suffix _ct into _cnt.
    + JDK-8223400: Replace some enums with static const members in
    hotspot/runtime
    + JDK-8223658: Performance regression of XML.validation in
    13-b19
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8224829: AsyncSSLSocketClose.java has timing issue
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226514: Replace wildcard address with loopback or local
    host in tests - part 17
    + JDK-8226943: compile error in libfollowref003.cpp  with XCode
    10.2 on macosx
    + JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed
    due to "SSLException: An established connection was aborted by
    the software in your host machine"
    + JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java
    fails on Windows7
    + JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently
    positions text
    + JDK-8230019: [REDO] compiler/types/correctness/* tests fail
    with "assert(recv == __null || recv-&gt;is_klass()) failed: wrong
    type"
    + JDK-8230067: Add optional automatic retry when running jtreg
    tests
    + JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests
    may fail on some platforms
    + JDK-8231501: VM crash in
    MethodData::clean_extra_data(CleanExtraDataClosure*):
    fatal error: unexpected tag 99
    + JDK-8233403: Improve verbosity of some httpclient tests
    + JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS
    + JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on
    MacOS
    + JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on
    MacOS
    + JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS
    + JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS
    + JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on
    macos
    + JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java  is
    failing on macos
    + JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails
    on macos
    + JDK-8233562: [TESTBUG] Swing StyledEditorKit test
    bug4506788.java fails on MacOS
    + JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing
    + JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on
    MacoS
    + JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos
    + JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java
    fails on macos
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails
    on macos
    + JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java
    fails on macos
    + JDK-8233637: [TESTBUG] Swing
    ActionListenerCalledTwiceTest.java fails on macos
    + JDK-8233638: [TESTBUG] Swing test
    ScreenMenuBarInputTwice.java fails on macos
    + JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails
    on macos
    + JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java  fails
    on macos
    + JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on
    macos
    + JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is
    failing on macos
    + JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is
    failing on macos
    + JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture
    Recognition in all the platforms
    + JDK-8234823: java/net/Socket/Timeouts.java testcase
    testTimedConnect2() fails on Windows 10
    + JDK-8235784: java/lang/invoke/VarHandles/
    /VarHandleTestByteArrayAsInt.java fails due to timeout with
    fastdebug bits
    + JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -Xcomp -XX:TieredStopAtLevel=1
    + JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60),
    cond_wait
    + JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT,
    when using proxy tunnel
    + JDK-8237354: Add option to jcmd to write a gzipped heap dump
    + JDK-8237589: Fix copyright header formatting
    + JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java
    should not specify TLS version
    + JDK-8239334: Tab Size does not work correctly in JTextArea
    with setLineWrap on
    + JDK-8239422: [TESTBUG]
    compiler/c1/TestPrintIRDuringConstruction.java failed when C1
    is disabled
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240256: Better resource cleaning for SunPKCS11 Provider
    + JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test
    Server
    + JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/
    /bug8020708.java fails in mach5 ubuntu system
    + JDK-8242793: Incorrect copyright header in
    ContinuousCallSiteTargetChange.java
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244292: Headful clients failing with
  - -illegal-access=deny
    + JDK-8245147: Refactor and improve utility of
    test/langtools/tools/javac/versions/Versions.java
    + JDK-8245165: Update bug id for
    javax/swing/text/StyledEditorKit/4506788/bug4506788.java in
    ProblemList
    + JDK-8245665: Test WeakAlg.java should only make sure no
    warning for weak signature algorithms by keytool on root CA
    + JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails
    after 8241072 (multi-homed systems)
    + JDK-8246807: Incorrect copyright header in
    TimeZoneDatePermissionCheck.sh
    + JDK-8247403: JShell: No custom input (e.g. from GUI) possible
    with JavaShellToolBuilder
    + JDK-8247510: typo in IllegalHandshakeMessage
    + JDK-8248187: [TESTBUG] javax/swing/plaf/basic/
    /BasicGraphicsUtils/8132119/bug8132119.java fails with String
    is not properly drawn
    + JDK-8248341: ProblemList java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java
    + JDK-8248500: AArch64: Remove the r18 dependency on Windows
    AArch64
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8249195: Change to Xcode 11.3.1 for building on Macos at
    Oracle
    + JDK-8250521: Configure initial RTO to use minimal retry for
    loopback connections on Windows
    + JDK-8250810: Push missing parts of JDK-8248817
    + JDK-8250839: Improve test template SSLEngineTemplate with
    SSLContextTemplate
    + JDK-8250863: Build error with GCC 10 in NetworkInterface.c
    and k_standard.c
    + JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/
    /gf08t001/TestDriver.java fails
    + JDK-8251155: HostIdentifier fails to canonicalize hostnames
    starting with digits
    + JDK-8251377: [macos11] JTabbedPane selected tab text is
    barely legible
    + JDK-8251570: JDK-8215624 causes assert(worker_id &lt;
    _n_workers) failed: Invalid worker_id
    + JDK-8251930: AArch64: Native types mismatch in hotspot
    + JDK-8252049: Native memory leak in ciMethodData ctor
    + JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x
    friendly
    + JDK-8252114: Windows-AArch64: Enable and test ZGC and
    ShenandoahGC
    + JDK-8253015: Aarch64: Move linux code out from generic CPU
    feature detection
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java
    fail on big screens
    + JDK-8253497: Core Libs Terminology Refresh
    + JDK-8253682: The AppletInitialFocusTest1.java is unstable
    + JDK-8253763: ParallelObjectIterator should have virtual
    destructor
    + JDK-8253866: Security Libs Terminology Refresh
    + JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in
    "try throwing in GET_BODY"
    + JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java
    intermittently failing with TestServer: start exception:
    java.io.IOException: Invalid preface
    + JDK-8255264: Support for identifying the full range of IPv4
    localhost addresses on Windows
    + JDK-8255716: AArch64: Regression: JVM crashes if manually
    offline a core
    + JDK-8255722: Create a new test for rotated blit
    + JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad
    + JDK-8256066: Tests use deprecated TestNG API that is no
    longer available in new versions
    + JDK-8256152: tests fail because of ambiguous method resolution
    + JDK-8256182: Update qemu-debootstrap cross-compilation recipe
    + JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/
    /FullscreenWindowProps.java failed
    + JDK-8256202: Some tweaks for jarsigner tests
    PosixPermissionsTest and SymLinkTest
    + JDK-8256372: [macos] Unexpected symbol was displayed on
    JTextField with Monospaced font
    + JDK-8256956: RegisterImpl::max_slots_per_register is
    incorrect on AMD64
    + JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with
    InvalidPathException on windows
    + JDK-8258855: Two tests sun/security/krb5/auto/
    /ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java
    failed on OL8.3
    + JDK-8259237: Demo selection changes with left/right arrow
    key. No need to press space for selection.
    + JDK-8260571: Add PrintMetaspaceStatistics to print metaspace
    statistics upon VM exit
    + JDK-8260690: JConsole User Guide Link from the Help menu is
    not accessible by keyboard
    + JDK-8261036: Reduce classes loaded by CleanerFactory
    initialization
    + JDK-8261071: AArch64: Refactor interpreter native wrappers
    + JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch
    implementation
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261297: NMT: Final report should use scale 1
    + JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java
    fails because Reserved memory size is too big
    + JDK-8261916: gtest/GTestWrapper.java
    vmErrorTest.unimplemented1_vm_assert failed
    + JDK-8262438: sun/security/ssl/SSLLogger/
    /LoggingFormatConsistency.java failed with "SocketException:
    Socket is closed"
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8262844: (fs) FileStore.supportsFileAttributeView might
    return false negative in case of ext3
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp
    + JDK-8263303: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8263362: Avoid division by 0 in
    java/awt/font/TextJustifier.java justify
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java
    failed with "java.lang.RuntimeException: Wrong method"
    + JDK-8264526: javax/swing/text/html/parser/Parser/8078268/
    /bug8078268.java timeout
    + JDK-8264824: java/net/Inet6Address/B6206527.java doesn't
    close ServerSocket properly
    + JDK-8265019: Update tests for additional TestNG test
    permissions
    + JDK-8265173: [test] divert spurious log output away from
    stream under test in ProcessBuilder Basic test
    + JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8266579: Update test/jdk/java/lang/ProcessHandle/
    /PermissionTest.java &amp; test/jdk/java/sql/testng/util/
    /TestPolicy.java
    + JDK-8266949: Check possibility to disable OperationTimedOut
    on Unix
    + JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg
    tests on many-core machines
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267304: Bump global JTReg memory limit to 768m
    + JDK-8267652: c2 loop unrolling by 8 results in reading memory
    past array
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268093: Manual Testcase: "sun/security/krb5/config/
    /native/TestDynamicStore.java" Fails with NPE
    + JDK-8268555: Update HttpClient tests that use ITestContext to
    jtreg 6+1
    + JDK-8268672: C2: assert(!loop-&gt;is_member(u_loop)) failed: can
    be in outer loop or out of both loops only
    + JDK-8269034: AccessControlException for SunPKCS11 daemon
    threads
    + JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to
    accessClassAndFindClass
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269768: JFR Terminology Refresh
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8269984: [macos] JTabbedPane title looks like  disabled
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270216: [macOS] Update named used for Java run loop mode
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270344: Session resumption errors
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1
    + JDK-8272181: Windows-AArch64:Backport fix of `Backtracing
    broken on PAC enabled systems`
    + JDK-8272316: Wrong Boot JDK help message in 11
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8272828: Add correct licenses to jszip.md
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java
    fails by timeout
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273541: Cleaner Thread creates with normal priority
    instead of MAX_PRIORITY - 2
    + JDK-8273547: [11u] [JVMCI] Partial module-info.java backport
    of JDK-8223332
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273671: Backport of 8260616 misses one JNF header
    inclusion removal
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273795: Zero SPARC64 debug builds fail due to missing
    interpreter fields
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274860: gcc 10.2.1 produces an uninitialized warning in
    sharedRuntimeTrig.cpp
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277815: Fix mistakes in legal header backports
- Removed patch:
  * riscv64-zero.patch
    + integrated upstream
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1644926400">- Update to upstream tag jdk-11.0.14.1+1
  * Changes:
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8281324: Bump update version for OpenJDK: jdk-11.0.14.1</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="1f19689fa97bf4a9bf4171ace1fbad42bbe6f009a206f503c8a7a3bb2a6089ae" name="java-11-openjdk-jmods" arch="s390x">
  <version epoch="0" ver="11.0.15.0" rel="150000.3.80.1"/>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643630400">- Update to upstream tag jdk-11.0.14+9 (January 2022 CPU)
  * New features
    + JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
  * Security fixes
    + JDK-8217375: jarsigner breaks old signature with long lines
    in manifest
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
    + JDK-8279541: Improve HarfBuzz
  * Other changes
    + JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/
    /ChoiceKeyEventReaction.html fails
    + JDK-7105119: [TEST_BUG] [macosx] In test
    UIDefaults.toString() must be called with the invokeLater()
    + JDK-7151826: [TEST_BUG] [macosx] The test
    javax/swing/JPopupMenu/4966112/bug4966112.java not for mac
    + JDK-7179006: [macosx] Print-to-file doesn't work: printing to
    the default printer instead
    + JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/
    /bug4726194.java fails on MacOSX
    + JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003 Wrong
    number of thread end events
    + JDK-8039261: [TEST_BUG]: There is not a minimal security
    level in Java Preferences and the TestApplet.html is blocked.
    + JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/
    /AltTabCrashTest.java fails with exception
    + JDK-8075909: [TEST_BUG] The regression-swing case failed as
    it does not have the 'Open' button when select 'subdir' folder
    with NimbusLAF
    + JDK-8078219: Verify lack of @test tag in files in java/net
    test directory
    + JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails
    with "RuntimeException: Process terminated prematurely"
    + JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java timed out intermittently
    + JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails
    intermittently
    + JDK-8131745: java/lang/management/ThreadMXBean/
    /AllThreadIds.java still fails intermittently
    + JDK-8136517: [macosx] Test java/awt/Focus/8073453/
    /AWTFocusTransitionTest.java fails on MacOSX
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/
    /Test6541987.java fails
    + JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/
    /bug4760494.java leaves key pressed
    + JDK-8159904: [TEST_BUG] Failure on solaris of
    java/awt/Window/MultiWindowApp/MultiWindowAppTest.java
    + JDK-8163086: java/awt/Window/TranslucentJAppletTest/
    /TranslucentJAppletTest.java fails
    + JDK-8165828: [TEST_BUG] The reg case: javax/swing/plaf/metal/
    /MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look
    and Feel
    + JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not
    fired! on Windows
    + JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException:
    Default button is not pressed
    + JDK-8169959: javax/swing/JTable/6263446/bug6263446.java:
    Table should be editing
    + JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/
    /7156657/bug7156657.java fails on OS X
    + JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails
    on Windows
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8179880: Refactor javax/security shell tests to plain
    java tests
    + JDK-8180568: Refactor javax/crypto shell tests to plain java
    tests
    + JDK-8180569: Refactor sun/security/krb5/ shell tests to plain
    java tests
    + JDK-8180571: Refactor sun/security/pkcs11 shell tests to
    plain java tests and fix failures
    + JDK-8180573: Refactor sun/security/tools shell tests to plain
    java tests
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8195703: BasicJDWPConnectionTest.java: 'App exited
    unexpectedly with 2'
    + JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java
    fails
    + JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java
    fails
    + JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/
    /NoEventsTest.java fails on Windows
    + JDK-8197811: Test java/awt/Choice/PopupPosTest/
    /PopupPosTest.java fails on Windows
    + JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java
    fails on mac
    + JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java
    fails on mac
    + JDK-8198619: java/awt/Focus/FocusTraversalPolicy/
    /ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java
    fails on mac
    + JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/
    /EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java
    fails on mac
    + JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/
    /SubMenuShowTest/SubMenuShowTest.html fails on mac
    + JDK-8199138: Add RISC-V support to Zero
    + JDK-8199529: javax/swing/text/Utilities/8142966/
    /SwingFontMetricsTest.java fails on windows
    + JDK-8201224: Make string buffer size dynamic in
    mlvmJvmtiUtils.c
    + JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/
    /FollowReferences/followref003/TestDescription.java fails with
    "Location mismatch" errors
    + JDK-8204161: [TESTBUG] auto failed with the "Applet thread
    threw exception: java.lang.UnsupportedOperationException"
    exception
    + JDK-8206085: Refactor
    langtools/tools/javac/versions/Versions.java
    + JDK-8207936: TestZipFile failed with java.lang.AssertionError
    exception
    + JDK-8208242: Add @requires to vmTestbase/gc/g1 tests
    + JDK-8209611: use C++ compiler for hotspot tests
    + JDK-8210182: Remove macros for C compilation from vmTestBase
    but non jvmti
    + JDK-8210198: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[A-F] tests
    + JDK-8210205: build fails on AIX in hotspot cpp tests (for
    example getstacktr001.cpp)
    + JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/
    /jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION
    on windows-x86
    + JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java
    back to tier1
    + JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[A-N] tests
    + JDK-8210392: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8210395: Add doc to SecurityTools.java
    + JDK-8210429: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[G-Z] tests
    + JDK-8210481: Remove #ifdef cplusplus from vmTestbase
    + JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[N-R] tests
    + JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[R-U] tests
    + JDK-8210689: Remove the multi-line old C style for string
    literals
    + JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti/unit tests
    + JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665
    + JDK-8210920: Native C++ tests are not using CXXFLAGS
    + JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR:
    hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti,
    thread)"
    + JDK-8211036: Remove the NSK_STUB macros from vmTestbase for
    non jvmti
    + JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[G-I]*
    + JDK-8211148: var in implicit lambdas shouldn't be accepted
    for source &lt; 11
    + JDK-8211171: move JarUtils to top-level testlibrary
    + JDK-8211227: Inconsistent TLS protocol version in debug output
    + JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[A-G]*
    + JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp
    + JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[I-S]*
    + JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[A-E]
    + JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[E-M]
    + JDK-8211905: Remove multiple casts for EM06 file
    + JDK-8211999: Window positioning bugs due to overlapping
    GraphicsDevice bounds (Windows/HiDPI)
    + JDK-8212082: Remove the NSK_CPP_STUB macros for remaining
    vmTestbase/jvmti/[sS]*
    + JDK-8212083: Handle remaining gc/lock native code and fix two
    strings
    + JDK-8212148: Remove remaining NSK_CPP_STUBs
    + JDK-8213110: Remove the use of applets in automatic tests
    + JDK-8213189: Make restricted headers in HTTP Client
    configurable and remove Date by default
    + JDK-8213263: fix legal headers in test/langtools
    + JDK-8213296: Fix legal headers in test/jdk/java/net
    + JDK-8213301: Fix legal headers in jdk logging tests
    + JDK-8213305: Fix legal headers in test/java/math
    + JDK-8213306: Fix legal headers in test/java/nio
    + JDK-8213328: Update test copyrights in test/java/util/zip and
    test/jdk/tools
    + JDK-8213330: Fix legal headers in i18n tests
    + JDK-8213707: [TEST] vmTestbase/nsk/stress/except/
    /except011.java failed due to wrong class name
    + JDK-8214469: [macos] PIT: java/awt/Choice/
    /ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails
    + JDK-8215410: Regression test for JDK-8214994
    + JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher
    + JDK-8215624: Add parallel heap iteration for jmap \u2013histo
    + JDK-8215889: assert(!_unloading) failed: This oop is not
    available to unloading class loader data with ZGC
    + JDK-8216318: The usage of Disposer in the java.awt.Robot can
    be deleted
    + JDK-8216417: cleanup of IPv6 scope-id handling
    + JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java
    failed with UnsupportedOperation exception
    + JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX
    + JDK-8217633: Configurable extensions with system properties
    + JDK-8217882: java/net/httpclient/MaxStreams.java failed once
    + JDK-8217903: java/net/httpclient/Response204.java fails with
    404
    + JDK-8218483: Crash in
    "assert(_daemon_threads_count-&gt;get_value() &gt; daemon_count)
    failed: thread count mismatch 5 : 5"
    + JDK-8219986: Change to Xcode 10.1 for building on Macosx at
    Oracle
    + JDK-8220575: Correctly format test URI's that contain a
    retrieved IPv6 address
    + JDK-8221259: New tests for java.net.Socket to exercise long
    standing behavior
    + JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails
    on MacOS + Solaris
    + JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/
    /FocusTraversal.java fails on ubuntu
    + JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/
    /IconifyTest.java fails on ubuntu18.04
    + JDK-8222446: assert(C-&gt;env()-&gt;system_dictionary_modification_counter_changed())
    failed: Must invalidate if TypeFuncs differ
    + JDK-8223137: Rename predicate 'do_unroll_only()' to
    'is_unroll_only()'.
    + JDK-8223138: Small clean-up in loop-tree support.
    + JDK-8223139: Rename mandatory policy-do routines.
    + JDK-8223140: Clean-up in 'ok_to_convert()'
    + JDK-8223141: Change (count) suffix _ct into _cnt.
    + JDK-8223400: Replace some enums with static const members in
    hotspot/runtime
    + JDK-8223658: Performance regression of XML.validation in
    13-b19
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8224829: AsyncSSLSocketClose.java has timing issue
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226514: Replace wildcard address with loopback or local
    host in tests - part 17
    + JDK-8226943: compile error in libfollowref003.cpp  with XCode
    10.2 on macosx
    + JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed
    due to "SSLException: An established connection was aborted by
    the software in your host machine"
    + JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java
    fails on Windows7
    + JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently
    positions text
    + JDK-8230019: [REDO] compiler/types/correctness/* tests fail
    with "assert(recv == __null || recv-&gt;is_klass()) failed: wrong
    type"
    + JDK-8230067: Add optional automatic retry when running jtreg
    tests
    + JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests
    may fail on some platforms
    + JDK-8231501: VM crash in
    MethodData::clean_extra_data(CleanExtraDataClosure*):
    fatal error: unexpected tag 99
    + JDK-8233403: Improve verbosity of some httpclient tests
    + JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS
    + JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on
    MacOS
    + JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on
    MacOS
    + JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS
    + JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS
    + JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on
    macos
    + JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java  is
    failing on macos
    + JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails
    on macos
    + JDK-8233562: [TESTBUG] Swing StyledEditorKit test
    bug4506788.java fails on MacOS
    + JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing
    + JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on
    MacoS
    + JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos
    + JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java
    fails on macos
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails
    on macos
    + JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java
    fails on macos
    + JDK-8233637: [TESTBUG] Swing
    ActionListenerCalledTwiceTest.java fails on macos
    + JDK-8233638: [TESTBUG] Swing test
    ScreenMenuBarInputTwice.java fails on macos
    + JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails
    on macos
    + JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java  fails
    on macos
    + JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on
    macos
    + JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is
    failing on macos
    + JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is
    failing on macos
    + JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture
    Recognition in all the platforms
    + JDK-8234823: java/net/Socket/Timeouts.java testcase
    testTimedConnect2() fails on Windows 10
    + JDK-8235784: java/lang/invoke/VarHandles/
    /VarHandleTestByteArrayAsInt.java fails due to timeout with
    fastdebug bits
    + JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -Xcomp -XX:TieredStopAtLevel=1
    + JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60),
    cond_wait
    + JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT,
    when using proxy tunnel
    + JDK-8237354: Add option to jcmd to write a gzipped heap dump
    + JDK-8237589: Fix copyright header formatting
    + JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java
    should not specify TLS version
    + JDK-8239334: Tab Size does not work correctly in JTextArea
    with setLineWrap on
    + JDK-8239422: [TESTBUG]
    compiler/c1/TestPrintIRDuringConstruction.java failed when C1
    is disabled
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240256: Better resource cleaning for SunPKCS11 Provider
    + JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test
    Server
    + JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/
    /bug8020708.java fails in mach5 ubuntu system
    + JDK-8242793: Incorrect copyright header in
    ContinuousCallSiteTargetChange.java
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244292: Headful clients failing with
  - -illegal-access=deny
    + JDK-8245147: Refactor and improve utility of
    test/langtools/tools/javac/versions/Versions.java
    + JDK-8245165: Update bug id for
    javax/swing/text/StyledEditorKit/4506788/bug4506788.java in
    ProblemList
    + JDK-8245665: Test WeakAlg.java should only make sure no
    warning for weak signature algorithms by keytool on root CA
    + JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails
    after 8241072 (multi-homed systems)
    + JDK-8246807: Incorrect copyright header in
    TimeZoneDatePermissionCheck.sh
    + JDK-8247403: JShell: No custom input (e.g. from GUI) possible
    with JavaShellToolBuilder
    + JDK-8247510: typo in IllegalHandshakeMessage
    + JDK-8248187: [TESTBUG] javax/swing/plaf/basic/
    /BasicGraphicsUtils/8132119/bug8132119.java fails with String
    is not properly drawn
    + JDK-8248341: ProblemList java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java
    + JDK-8248500: AArch64: Remove the r18 dependency on Windows
    AArch64
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8249195: Change to Xcode 11.3.1 for building on Macos at
    Oracle
    + JDK-8250521: Configure initial RTO to use minimal retry for
    loopback connections on Windows
    + JDK-8250810: Push missing parts of JDK-8248817
    + JDK-8250839: Improve test template SSLEngineTemplate with
    SSLContextTemplate
    + JDK-8250863: Build error with GCC 10 in NetworkInterface.c
    and k_standard.c
    + JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/
    /gf08t001/TestDriver.java fails
    + JDK-8251155: HostIdentifier fails to canonicalize hostnames
    starting with digits
    + JDK-8251377: [macos11] JTabbedPane selected tab text is
    barely legible
    + JDK-8251570: JDK-8215624 causes assert(worker_id &lt;
    _n_workers) failed: Invalid worker_id
    + JDK-8251930: AArch64: Native types mismatch in hotspot
    + JDK-8252049: Native memory leak in ciMethodData ctor
    + JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x
    friendly
    + JDK-8252114: Windows-AArch64: Enable and test ZGC and
    ShenandoahGC
    + JDK-8253015: Aarch64: Move linux code out from generic CPU
    feature detection
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java
    fail on big screens
    + JDK-8253497: Core Libs Terminology Refresh
    + JDK-8253682: The AppletInitialFocusTest1.java is unstable
    + JDK-8253763: ParallelObjectIterator should have virtual
    destructor
    + JDK-8253866: Security Libs Terminology Refresh
    + JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in
    "try throwing in GET_BODY"
    + JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java
    intermittently failing with TestServer: start exception:
    java.io.IOException: Invalid preface
    + JDK-8255264: Support for identifying the full range of IPv4
    localhost addresses on Windows
    + JDK-8255716: AArch64: Regression: JVM crashes if manually
    offline a core
    + JDK-8255722: Create a new test for rotated blit
    + JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad
    + JDK-8256066: Tests use deprecated TestNG API that is no
    longer available in new versions
    + JDK-8256152: tests fail because of ambiguous method resolution
    + JDK-8256182: Update qemu-debootstrap cross-compilation recipe
    + JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/
    /FullscreenWindowProps.java failed
    + JDK-8256202: Some tweaks for jarsigner tests
    PosixPermissionsTest and SymLinkTest
    + JDK-8256372: [macos] Unexpected symbol was displayed on
    JTextField with Monospaced font
    + JDK-8256956: RegisterImpl::max_slots_per_register is
    incorrect on AMD64
    + JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with
    InvalidPathException on windows
    + JDK-8258855: Two tests sun/security/krb5/auto/
    /ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java
    failed on OL8.3
    + JDK-8259237: Demo selection changes with left/right arrow
    key. No need to press space for selection.
    + JDK-8260571: Add PrintMetaspaceStatistics to print metaspace
    statistics upon VM exit
    + JDK-8260690: JConsole User Guide Link from the Help menu is
    not accessible by keyboard
    + JDK-8261036: Reduce classes loaded by CleanerFactory
    initialization
    + JDK-8261071: AArch64: Refactor interpreter native wrappers
    + JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch
    implementation
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261297: NMT: Final report should use scale 1
    + JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java
    fails because Reserved memory size is too big
    + JDK-8261916: gtest/GTestWrapper.java
    vmErrorTest.unimplemented1_vm_assert failed
    + JDK-8262438: sun/security/ssl/SSLLogger/
    /LoggingFormatConsistency.java failed with "SocketException:
    Socket is closed"
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8262844: (fs) FileStore.supportsFileAttributeView might
    return false negative in case of ext3
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp
    + JDK-8263303: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8263362: Avoid division by 0 in
    java/awt/font/TextJustifier.java justify
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java
    failed with "java.lang.RuntimeException: Wrong method"
    + JDK-8264526: javax/swing/text/html/parser/Parser/8078268/
    /bug8078268.java timeout
    + JDK-8264824: java/net/Inet6Address/B6206527.java doesn't
    close ServerSocket properly
    + JDK-8265019: Update tests for additional TestNG test
    permissions
    + JDK-8265173: [test] divert spurious log output away from
    stream under test in ProcessBuilder Basic test
    + JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8266579: Update test/jdk/java/lang/ProcessHandle/
    /PermissionTest.java &amp; test/jdk/java/sql/testng/util/
    /TestPolicy.java
    + JDK-8266949: Check possibility to disable OperationTimedOut
    on Unix
    + JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg
    tests on many-core machines
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267304: Bump global JTReg memory limit to 768m
    + JDK-8267652: c2 loop unrolling by 8 results in reading memory
    past array
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268093: Manual Testcase: "sun/security/krb5/config/
    /native/TestDynamicStore.java" Fails with NPE
    + JDK-8268555: Update HttpClient tests that use ITestContext to
    jtreg 6+1
    + JDK-8268672: C2: assert(!loop-&gt;is_member(u_loop)) failed: can
    be in outer loop or out of both loops only
    + JDK-8269034: AccessControlException for SunPKCS11 daemon
    threads
    + JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to
    accessClassAndFindClass
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269768: JFR Terminology Refresh
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8269984: [macos] JTabbedPane title looks like  disabled
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270216: [macOS] Update named used for Java run loop mode
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270344: Session resumption errors
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1
    + JDK-8272181: Windows-AArch64:Backport fix of `Backtracing
    broken on PAC enabled systems`
    + JDK-8272316: Wrong Boot JDK help message in 11
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8272828: Add correct licenses to jszip.md
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java
    fails by timeout
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273541: Cleaner Thread creates with normal priority
    instead of MAX_PRIORITY - 2
    + JDK-8273547: [11u] [JVMCI] Partial module-info.java backport
    of JDK-8223332
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273671: Backport of 8260616 misses one JNF header
    inclusion removal
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273795: Zero SPARC64 debug builds fail due to missing
    interpreter fields
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274860: gcc 10.2.1 produces an uninitialized warning in
    sharedRuntimeTrig.cpp
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277815: Fix mistakes in legal header backports
- Removed patch:
  * riscv64-zero.patch
    + integrated upstream
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1644926400">- Update to upstream tag jdk-11.0.14.1+1
  * Changes:
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8281324: Bump update version for OpenJDK: jdk-11.0.14.1</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="3c96cdd28bed258d010b4c9f40cdacf337ac5ae9b42e555f9456e77edb392691" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="0" ver="11.0.15.0" rel="150000.3.80.1"/>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643630400">- Update to upstream tag jdk-11.0.14+9 (January 2022 CPU)
  * New features
    + JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
  * Security fixes
    + JDK-8217375: jarsigner breaks old signature with long lines
    in manifest
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
    + JDK-8279541: Improve HarfBuzz
  * Other changes
    + JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/
    /ChoiceKeyEventReaction.html fails
    + JDK-7105119: [TEST_BUG] [macosx] In test
    UIDefaults.toString() must be called with the invokeLater()
    + JDK-7151826: [TEST_BUG] [macosx] The test
    javax/swing/JPopupMenu/4966112/bug4966112.java not for mac
    + JDK-7179006: [macosx] Print-to-file doesn't work: printing to
    the default printer instead
    + JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/
    /bug4726194.java fails on MacOSX
    + JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003 Wrong
    number of thread end events
    + JDK-8039261: [TEST_BUG]: There is not a minimal security
    level in Java Preferences and the TestApplet.html is blocked.
    + JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/
    /AltTabCrashTest.java fails with exception
    + JDK-8075909: [TEST_BUG] The regression-swing case failed as
    it does not have the 'Open' button when select 'subdir' folder
    with NimbusLAF
    + JDK-8078219: Verify lack of @test tag in files in java/net
    test directory
    + JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails
    with "RuntimeException: Process terminated prematurely"
    + JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java timed out intermittently
    + JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails
    intermittently
    + JDK-8131745: java/lang/management/ThreadMXBean/
    /AllThreadIds.java still fails intermittently
    + JDK-8136517: [macosx] Test java/awt/Focus/8073453/
    /AWTFocusTransitionTest.java fails on MacOSX
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/
    /Test6541987.java fails
    + JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/
    /bug4760494.java leaves key pressed
    + JDK-8159904: [TEST_BUG] Failure on solaris of
    java/awt/Window/MultiWindowApp/MultiWindowAppTest.java
    + JDK-8163086: java/awt/Window/TranslucentJAppletTest/
    /TranslucentJAppletTest.java fails
    + JDK-8165828: [TEST_BUG] The reg case: javax/swing/plaf/metal/
    /MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look
    and Feel
    + JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not
    fired! on Windows
    + JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException:
    Default button is not pressed
    + JDK-8169959: javax/swing/JTable/6263446/bug6263446.java:
    Table should be editing
    + JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/
    /7156657/bug7156657.java fails on OS X
    + JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails
    on Windows
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8179880: Refactor javax/security shell tests to plain
    java tests
    + JDK-8180568: Refactor javax/crypto shell tests to plain java
    tests
    + JDK-8180569: Refactor sun/security/krb5/ shell tests to plain
    java tests
    + JDK-8180571: Refactor sun/security/pkcs11 shell tests to
    plain java tests and fix failures
    + JDK-8180573: Refactor sun/security/tools shell tests to plain
    java tests
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8195703: BasicJDWPConnectionTest.java: 'App exited
    unexpectedly with 2'
    + JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java
    fails
    + JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java
    fails
    + JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/
    /NoEventsTest.java fails on Windows
    + JDK-8197811: Test java/awt/Choice/PopupPosTest/
    /PopupPosTest.java fails on Windows
    + JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java
    fails on mac
    + JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java
    fails on mac
    + JDK-8198619: java/awt/Focus/FocusTraversalPolicy/
    /ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java
    fails on mac
    + JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/
    /EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java
    fails on mac
    + JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/
    /SubMenuShowTest/SubMenuShowTest.html fails on mac
    + JDK-8199138: Add RISC-V support to Zero
    + JDK-8199529: javax/swing/text/Utilities/8142966/
    /SwingFontMetricsTest.java fails on windows
    + JDK-8201224: Make string buffer size dynamic in
    mlvmJvmtiUtils.c
    + JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/
    /FollowReferences/followref003/TestDescription.java fails with
    "Location mismatch" errors
    + JDK-8204161: [TESTBUG] auto failed with the "Applet thread
    threw exception: java.lang.UnsupportedOperationException"
    exception
    + JDK-8206085: Refactor
    langtools/tools/javac/versions/Versions.java
    + JDK-8207936: TestZipFile failed with java.lang.AssertionError
    exception
    + JDK-8208242: Add @requires to vmTestbase/gc/g1 tests
    + JDK-8209611: use C++ compiler for hotspot tests
    + JDK-8210182: Remove macros for C compilation from vmTestBase
    but non jvmti
    + JDK-8210198: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[A-F] tests
    + JDK-8210205: build fails on AIX in hotspot cpp tests (for
    example getstacktr001.cpp)
    + JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/
    /jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION
    on windows-x86
    + JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java
    back to tier1
    + JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[A-N] tests
    + JDK-8210392: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8210395: Add doc to SecurityTools.java
    + JDK-8210429: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[G-Z] tests
    + JDK-8210481: Remove #ifdef cplusplus from vmTestbase
    + JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[N-R] tests
    + JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[R-U] tests
    + JDK-8210689: Remove the multi-line old C style for string
    literals
    + JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti/unit tests
    + JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665
    + JDK-8210920: Native C++ tests are not using CXXFLAGS
    + JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR:
    hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti,
    thread)"
    + JDK-8211036: Remove the NSK_STUB macros from vmTestbase for
    non jvmti
    + JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[G-I]*
    + JDK-8211148: var in implicit lambdas shouldn't be accepted
    for source &lt; 11
    + JDK-8211171: move JarUtils to top-level testlibrary
    + JDK-8211227: Inconsistent TLS protocol version in debug output
    + JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[A-G]*
    + JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp
    + JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[I-S]*
    + JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[A-E]
    + JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[E-M]
    + JDK-8211905: Remove multiple casts for EM06 file
    + JDK-8211999: Window positioning bugs due to overlapping
    GraphicsDevice bounds (Windows/HiDPI)
    + JDK-8212082: Remove the NSK_CPP_STUB macros for remaining
    vmTestbase/jvmti/[sS]*
    + JDK-8212083: Handle remaining gc/lock native code and fix two
    strings
    + JDK-8212148: Remove remaining NSK_CPP_STUBs
    + JDK-8213110: Remove the use of applets in automatic tests
    + JDK-8213189: Make restricted headers in HTTP Client
    configurable and remove Date by default
    + JDK-8213263: fix legal headers in test/langtools
    + JDK-8213296: Fix legal headers in test/jdk/java/net
    + JDK-8213301: Fix legal headers in jdk logging tests
    + JDK-8213305: Fix legal headers in test/java/math
    + JDK-8213306: Fix legal headers in test/java/nio
    + JDK-8213328: Update test copyrights in test/java/util/zip and
    test/jdk/tools
    + JDK-8213330: Fix legal headers in i18n tests
    + JDK-8213707: [TEST] vmTestbase/nsk/stress/except/
    /except011.java failed due to wrong class name
    + JDK-8214469: [macos] PIT: java/awt/Choice/
    /ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails
    + JDK-8215410: Regression test for JDK-8214994
    + JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher
    + JDK-8215624: Add parallel heap iteration for jmap \u2013histo
    + JDK-8215889: assert(!_unloading) failed: This oop is not
    available to unloading class loader data with ZGC
    + JDK-8216318: The usage of Disposer in the java.awt.Robot can
    be deleted
    + JDK-8216417: cleanup of IPv6 scope-id handling
    + JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java
    failed with UnsupportedOperation exception
    + JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX
    + JDK-8217633: Configurable extensions with system properties
    + JDK-8217882: java/net/httpclient/MaxStreams.java failed once
    + JDK-8217903: java/net/httpclient/Response204.java fails with
    404
    + JDK-8218483: Crash in
    "assert(_daemon_threads_count-&gt;get_value() &gt; daemon_count)
    failed: thread count mismatch 5 : 5"
    + JDK-8219986: Change to Xcode 10.1 for building on Macosx at
    Oracle
    + JDK-8220575: Correctly format test URI's that contain a
    retrieved IPv6 address
    + JDK-8221259: New tests for java.net.Socket to exercise long
    standing behavior
    + JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails
    on MacOS + Solaris
    + JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/
    /FocusTraversal.java fails on ubuntu
    + JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/
    /IconifyTest.java fails on ubuntu18.04
    + JDK-8222446: assert(C-&gt;env()-&gt;system_dictionary_modification_counter_changed())
    failed: Must invalidate if TypeFuncs differ
    + JDK-8223137: Rename predicate 'do_unroll_only()' to
    'is_unroll_only()'.
    + JDK-8223138: Small clean-up in loop-tree support.
    + JDK-8223139: Rename mandatory policy-do routines.
    + JDK-8223140: Clean-up in 'ok_to_convert()'
    + JDK-8223141: Change (count) suffix _ct into _cnt.
    + JDK-8223400: Replace some enums with static const members in
    hotspot/runtime
    + JDK-8223658: Performance regression of XML.validation in
    13-b19
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8224829: AsyncSSLSocketClose.java has timing issue
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226514: Replace wildcard address with loopback or local
    host in tests - part 17
    + JDK-8226943: compile error in libfollowref003.cpp  with XCode
    10.2 on macosx
    + JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed
    due to "SSLException: An established connection was aborted by
    the software in your host machine"
    + JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java
    fails on Windows7
    + JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently
    positions text
    + JDK-8230019: [REDO] compiler/types/correctness/* tests fail
    with "assert(recv == __null || recv-&gt;is_klass()) failed: wrong
    type"
    + JDK-8230067: Add optional automatic retry when running jtreg
    tests
    + JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests
    may fail on some platforms
    + JDK-8231501: VM crash in
    MethodData::clean_extra_data(CleanExtraDataClosure*):
    fatal error: unexpected tag 99
    + JDK-8233403: Improve verbosity of some httpclient tests
    + JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS
    + JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on
    MacOS
    + JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on
    MacOS
    + JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS
    + JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS
    + JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on
    macos
    + JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java  is
    failing on macos
    + JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails
    on macos
    + JDK-8233562: [TESTBUG] Swing StyledEditorKit test
    bug4506788.java fails on MacOS
    + JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing
    + JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on
    MacoS
    + JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos
    + JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java
    fails on macos
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails
    on macos
    + JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java
    fails on macos
    + JDK-8233637: [TESTBUG] Swing
    ActionListenerCalledTwiceTest.java fails on macos
    + JDK-8233638: [TESTBUG] Swing test
    ScreenMenuBarInputTwice.java fails on macos
    + JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails
    on macos
    + JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java  fails
    on macos
    + JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on
    macos
    + JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is
    failing on macos
    + JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is
    failing on macos
    + JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture
    Recognition in all the platforms
    + JDK-8234823: java/net/Socket/Timeouts.java testcase
    testTimedConnect2() fails on Windows 10
    + JDK-8235784: java/lang/invoke/VarHandles/
    /VarHandleTestByteArrayAsInt.java fails due to timeout with
    fastdebug bits
    + JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -Xcomp -XX:TieredStopAtLevel=1
    + JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60),
    cond_wait
    + JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT,
    when using proxy tunnel
    + JDK-8237354: Add option to jcmd to write a gzipped heap dump
    + JDK-8237589: Fix copyright header formatting
    + JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java
    should not specify TLS version
    + JDK-8239334: Tab Size does not work correctly in JTextArea
    with setLineWrap on
    + JDK-8239422: [TESTBUG]
    compiler/c1/TestPrintIRDuringConstruction.java failed when C1
    is disabled
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240256: Better resource cleaning for SunPKCS11 Provider
    + JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test
    Server
    + JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/
    /bug8020708.java fails in mach5 ubuntu system
    + JDK-8242793: Incorrect copyright header in
    ContinuousCallSiteTargetChange.java
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244292: Headful clients failing with
  - -illegal-access=deny
    + JDK-8245147: Refactor and improve utility of
    test/langtools/tools/javac/versions/Versions.java
    + JDK-8245165: Update bug id for
    javax/swing/text/StyledEditorKit/4506788/bug4506788.java in
    ProblemList
    + JDK-8245665: Test WeakAlg.java should only make sure no
    warning for weak signature algorithms by keytool on root CA
    + JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails
    after 8241072 (multi-homed systems)
    + JDK-8246807: Incorrect copyright header in
    TimeZoneDatePermissionCheck.sh
    + JDK-8247403: JShell: No custom input (e.g. from GUI) possible
    with JavaShellToolBuilder
    + JDK-8247510: typo in IllegalHandshakeMessage
    + JDK-8248187: [TESTBUG] javax/swing/plaf/basic/
    /BasicGraphicsUtils/8132119/bug8132119.java fails with String
    is not properly drawn
    + JDK-8248341: ProblemList java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java
    + JDK-8248500: AArch64: Remove the r18 dependency on Windows
    AArch64
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8249195: Change to Xcode 11.3.1 for building on Macos at
    Oracle
    + JDK-8250521: Configure initial RTO to use minimal retry for
    loopback connections on Windows
    + JDK-8250810: Push missing parts of JDK-8248817
    + JDK-8250839: Improve test template SSLEngineTemplate with
    SSLContextTemplate
    + JDK-8250863: Build error with GCC 10 in NetworkInterface.c
    and k_standard.c
    + JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/
    /gf08t001/TestDriver.java fails
    + JDK-8251155: HostIdentifier fails to canonicalize hostnames
    starting with digits
    + JDK-8251377: [macos11] JTabbedPane selected tab text is
    barely legible
    + JDK-8251570: JDK-8215624 causes assert(worker_id &lt;
    _n_workers) failed: Invalid worker_id
    + JDK-8251930: AArch64: Native types mismatch in hotspot
    + JDK-8252049: Native memory leak in ciMethodData ctor
    + JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x
    friendly
    + JDK-8252114: Windows-AArch64: Enable and test ZGC and
    ShenandoahGC
    + JDK-8253015: Aarch64: Move linux code out from generic CPU
    feature detection
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java
    fail on big screens
    + JDK-8253497: Core Libs Terminology Refresh
    + JDK-8253682: The AppletInitialFocusTest1.java is unstable
    + JDK-8253763: ParallelObjectIterator should have virtual
    destructor
    + JDK-8253866: Security Libs Terminology Refresh
    + JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in
    "try throwing in GET_BODY"
    + JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java
    intermittently failing with TestServer: start exception:
    java.io.IOException: Invalid preface
    + JDK-8255264: Support for identifying the full range of IPv4
    localhost addresses on Windows
    + JDK-8255716: AArch64: Regression: JVM crashes if manually
    offline a core
    + JDK-8255722: Create a new test for rotated blit
    + JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad
    + JDK-8256066: Tests use deprecated TestNG API that is no
    longer available in new versions
    + JDK-8256152: tests fail because of ambiguous method resolution
    + JDK-8256182: Update qemu-debootstrap cross-compilation recipe
    + JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/
    /FullscreenWindowProps.java failed
    + JDK-8256202: Some tweaks for jarsigner tests
    PosixPermissionsTest and SymLinkTest
    + JDK-8256372: [macos] Unexpected symbol was displayed on
    JTextField with Monospaced font
    + JDK-8256956: RegisterImpl::max_slots_per_register is
    incorrect on AMD64
    + JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with
    InvalidPathException on windows
    + JDK-8258855: Two tests sun/security/krb5/auto/
    /ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java
    failed on OL8.3
    + JDK-8259237: Demo selection changes with left/right arrow
    key. No need to press space for selection.
    + JDK-8260571: Add PrintMetaspaceStatistics to print metaspace
    statistics upon VM exit
    + JDK-8260690: JConsole User Guide Link from the Help menu is
    not accessible by keyboard
    + JDK-8261036: Reduce classes loaded by CleanerFactory
    initialization
    + JDK-8261071: AArch64: Refactor interpreter native wrappers
    + JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch
    implementation
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261297: NMT: Final report should use scale 1
    + JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java
    fails because Reserved memory size is too big
    + JDK-8261916: gtest/GTestWrapper.java
    vmErrorTest.unimplemented1_vm_assert failed
    + JDK-8262438: sun/security/ssl/SSLLogger/
    /LoggingFormatConsistency.java failed with "SocketException:
    Socket is closed"
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8262844: (fs) FileStore.supportsFileAttributeView might
    return false negative in case of ext3
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp
    + JDK-8263303: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8263362: Avoid division by 0 in
    java/awt/font/TextJustifier.java justify
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java
    failed with "java.lang.RuntimeException: Wrong method"
    + JDK-8264526: javax/swing/text/html/parser/Parser/8078268/
    /bug8078268.java timeout
    + JDK-8264824: java/net/Inet6Address/B6206527.java doesn't
    close ServerSocket properly
    + JDK-8265019: Update tests for additional TestNG test
    permissions
    + JDK-8265173: [test] divert spurious log output away from
    stream under test in ProcessBuilder Basic test
    + JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8266579: Update test/jdk/java/lang/ProcessHandle/
    /PermissionTest.java &amp; test/jdk/java/sql/testng/util/
    /TestPolicy.java
    + JDK-8266949: Check possibility to disable OperationTimedOut
    on Unix
    + JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg
    tests on many-core machines
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267304: Bump global JTReg memory limit to 768m
    + JDK-8267652: c2 loop unrolling by 8 results in reading memory
    past array
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268093: Manual Testcase: "sun/security/krb5/config/
    /native/TestDynamicStore.java" Fails with NPE
    + JDK-8268555: Update HttpClient tests that use ITestContext to
    jtreg 6+1
    + JDK-8268672: C2: assert(!loop-&gt;is_member(u_loop)) failed: can
    be in outer loop or out of both loops only
    + JDK-8269034: AccessControlException for SunPKCS11 daemon
    threads
    + JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to
    accessClassAndFindClass
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269768: JFR Terminology Refresh
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8269984: [macos] JTabbedPane title looks like  disabled
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270216: [macOS] Update named used for Java run loop mode
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270344: Session resumption errors
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1
    + JDK-8272181: Windows-AArch64:Backport fix of `Backtracing
    broken on PAC enabled systems`
    + JDK-8272316: Wrong Boot JDK help message in 11
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8272828: Add correct licenses to jszip.md
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java
    fails by timeout
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273541: Cleaner Thread creates with normal priority
    instead of MAX_PRIORITY - 2
    + JDK-8273547: [11u] [JVMCI] Partial module-info.java backport
    of JDK-8223332
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273671: Backport of 8260616 misses one JNF header
    inclusion removal
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273795: Zero SPARC64 debug builds fail due to missing
    interpreter fields
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274860: gcc 10.2.1 produces an uninitialized warning in
    sharedRuntimeTrig.cpp
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277815: Fix mistakes in legal header backports
- Removed patch:
  * riscv64-zero.patch
    + integrated upstream
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1644926400">- Update to upstream tag jdk-11.0.14.1+1
  * Changes:
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8281324: Bump update version for OpenJDK: jdk-11.0.14.1</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="df22f43e8f9c78b72147f8cadebdc31b63f5e0541b95d107b62e56656fac4560" name="java-11-openjdk-src" arch="aarch64">
  <version epoch="0" ver="11.0.15.0" rel="150000.3.80.1"/>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643630400">- Update to upstream tag jdk-11.0.14+9 (January 2022 CPU)
  * New features
    + JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
  * Security fixes
    + JDK-8217375: jarsigner breaks old signature with long lines
    in manifest
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
    + JDK-8279541: Improve HarfBuzz
  * Other changes
    + JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/
    /ChoiceKeyEventReaction.html fails
    + JDK-7105119: [TEST_BUG] [macosx] In test
    UIDefaults.toString() must be called with the invokeLater()
    + JDK-7151826: [TEST_BUG] [macosx] The test
    javax/swing/JPopupMenu/4966112/bug4966112.java not for mac
    + JDK-7179006: [macosx] Print-to-file doesn't work: printing to
    the default printer instead
    + JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/
    /bug4726194.java fails on MacOSX
    + JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003 Wrong
    number of thread end events
    + JDK-8039261: [TEST_BUG]: There is not a minimal security
    level in Java Preferences and the TestApplet.html is blocked.
    + JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/
    /AltTabCrashTest.java fails with exception
    + JDK-8075909: [TEST_BUG] The regression-swing case failed as
    it does not have the 'Open' button when select 'subdir' folder
    with NimbusLAF
    + JDK-8078219: Verify lack of @test tag in files in java/net
    test directory
    + JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails
    with "RuntimeException: Process terminated prematurely"
    + JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java timed out intermittently
    + JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails
    intermittently
    + JDK-8131745: java/lang/management/ThreadMXBean/
    /AllThreadIds.java still fails intermittently
    + JDK-8136517: [macosx] Test java/awt/Focus/8073453/
    /AWTFocusTransitionTest.java fails on MacOSX
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/
    /Test6541987.java fails
    + JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/
    /bug4760494.java leaves key pressed
    + JDK-8159904: [TEST_BUG] Failure on solaris of
    java/awt/Window/MultiWindowApp/MultiWindowAppTest.java
    + JDK-8163086: java/awt/Window/TranslucentJAppletTest/
    /TranslucentJAppletTest.java fails
    + JDK-8165828: [TEST_BUG] The reg case: javax/swing/plaf/metal/
    /MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look
    and Feel
    + JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not
    fired! on Windows
    + JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException:
    Default button is not pressed
    + JDK-8169959: javax/swing/JTable/6263446/bug6263446.java:
    Table should be editing
    + JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/
    /7156657/bug7156657.java fails on OS X
    + JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails
    on Windows
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8179880: Refactor javax/security shell tests to plain
    java tests
    + JDK-8180568: Refactor javax/crypto shell tests to plain java
    tests
    + JDK-8180569: Refactor sun/security/krb5/ shell tests to plain
    java tests
    + JDK-8180571: Refactor sun/security/pkcs11 shell tests to
    plain java tests and fix failures
    + JDK-8180573: Refactor sun/security/tools shell tests to plain
    java tests
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8195703: BasicJDWPConnectionTest.java: 'App exited
    unexpectedly with 2'
    + JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java
    fails
    + JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java
    fails
    + JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/
    /NoEventsTest.java fails on Windows
    + JDK-8197811: Test java/awt/Choice/PopupPosTest/
    /PopupPosTest.java fails on Windows
    + JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java
    fails on mac
    + JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java
    fails on mac
    + JDK-8198619: java/awt/Focus/FocusTraversalPolicy/
    /ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java
    fails on mac
    + JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/
    /EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java
    fails on mac
    + JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/
    /SubMenuShowTest/SubMenuShowTest.html fails on mac
    + JDK-8199138: Add RISC-V support to Zero
    + JDK-8199529: javax/swing/text/Utilities/8142966/
    /SwingFontMetricsTest.java fails on windows
    + JDK-8201224: Make string buffer size dynamic in
    mlvmJvmtiUtils.c
    + JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/
    /FollowReferences/followref003/TestDescription.java fails with
    "Location mismatch" errors
    + JDK-8204161: [TESTBUG] auto failed with the "Applet thread
    threw exception: java.lang.UnsupportedOperationException"
    exception
    + JDK-8206085: Refactor
    langtools/tools/javac/versions/Versions.java
    + JDK-8207936: TestZipFile failed with java.lang.AssertionError
    exception
    + JDK-8208242: Add @requires to vmTestbase/gc/g1 tests
    + JDK-8209611: use C++ compiler for hotspot tests
    + JDK-8210182: Remove macros for C compilation from vmTestBase
    but non jvmti
    + JDK-8210198: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[A-F] tests
    + JDK-8210205: build fails on AIX in hotspot cpp tests (for
    example getstacktr001.cpp)
    + JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/
    /jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION
    on windows-x86
    + JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java
    back to tier1
    + JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[A-N] tests
    + JDK-8210392: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8210395: Add doc to SecurityTools.java
    + JDK-8210429: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[G-Z] tests
    + JDK-8210481: Remove #ifdef cplusplus from vmTestbase
    + JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[N-R] tests
    + JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[R-U] tests
    + JDK-8210689: Remove the multi-line old C style for string
    literals
    + JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti/unit tests
    + JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665
    + JDK-8210920: Native C++ tests are not using CXXFLAGS
    + JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR:
    hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti,
    thread)"
    + JDK-8211036: Remove the NSK_STUB macros from vmTestbase for
    non jvmti
    + JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[G-I]*
    + JDK-8211148: var in implicit lambdas shouldn't be accepted
    for source &lt; 11
    + JDK-8211171: move JarUtils to top-level testlibrary
    + JDK-8211227: Inconsistent TLS protocol version in debug output
    + JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[A-G]*
    + JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp
    + JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[I-S]*
    + JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[A-E]
    + JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[E-M]
    + JDK-8211905: Remove multiple casts for EM06 file
    + JDK-8211999: Window positioning bugs due to overlapping
    GraphicsDevice bounds (Windows/HiDPI)
    + JDK-8212082: Remove the NSK_CPP_STUB macros for remaining
    vmTestbase/jvmti/[sS]*
    + JDK-8212083: Handle remaining gc/lock native code and fix two
    strings
    + JDK-8212148: Remove remaining NSK_CPP_STUBs
    + JDK-8213110: Remove the use of applets in automatic tests
    + JDK-8213189: Make restricted headers in HTTP Client
    configurable and remove Date by default
    + JDK-8213263: fix legal headers in test/langtools
    + JDK-8213296: Fix legal headers in test/jdk/java/net
    + JDK-8213301: Fix legal headers in jdk logging tests
    + JDK-8213305: Fix legal headers in test/java/math
    + JDK-8213306: Fix legal headers in test/java/nio
    + JDK-8213328: Update test copyrights in test/java/util/zip and
    test/jdk/tools
    + JDK-8213330: Fix legal headers in i18n tests
    + JDK-8213707: [TEST] vmTestbase/nsk/stress/except/
    /except011.java failed due to wrong class name
    + JDK-8214469: [macos] PIT: java/awt/Choice/
    /ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails
    + JDK-8215410: Regression test for JDK-8214994
    + JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher
    + JDK-8215624: Add parallel heap iteration for jmap \u2013histo
    + JDK-8215889: assert(!_unloading) failed: This oop is not
    available to unloading class loader data with ZGC
    + JDK-8216318: The usage of Disposer in the java.awt.Robot can
    be deleted
    + JDK-8216417: cleanup of IPv6 scope-id handling
    + JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java
    failed with UnsupportedOperation exception
    + JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX
    + JDK-8217633: Configurable extensions with system properties
    + JDK-8217882: java/net/httpclient/MaxStreams.java failed once
    + JDK-8217903: java/net/httpclient/Response204.java fails with
    404
    + JDK-8218483: Crash in
    "assert(_daemon_threads_count-&gt;get_value() &gt; daemon_count)
    failed: thread count mismatch 5 : 5"
    + JDK-8219986: Change to Xcode 10.1 for building on Macosx at
    Oracle
    + JDK-8220575: Correctly format test URI's that contain a
    retrieved IPv6 address
    + JDK-8221259: New tests for java.net.Socket to exercise long
    standing behavior
    + JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails
    on MacOS + Solaris
    + JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/
    /FocusTraversal.java fails on ubuntu
    + JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/
    /IconifyTest.java fails on ubuntu18.04
    + JDK-8222446: assert(C-&gt;env()-&gt;system_dictionary_modification_counter_changed())
    failed: Must invalidate if TypeFuncs differ
    + JDK-8223137: Rename predicate 'do_unroll_only()' to
    'is_unroll_only()'.
    + JDK-8223138: Small clean-up in loop-tree support.
    + JDK-8223139: Rename mandatory policy-do routines.
    + JDK-8223140: Clean-up in 'ok_to_convert()'
    + JDK-8223141: Change (count) suffix _ct into _cnt.
    + JDK-8223400: Replace some enums with static const members in
    hotspot/runtime
    + JDK-8223658: Performance regression of XML.validation in
    13-b19
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8224829: AsyncSSLSocketClose.java has timing issue
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226514: Replace wildcard address with loopback or local
    host in tests - part 17
    + JDK-8226943: compile error in libfollowref003.cpp  with XCode
    10.2 on macosx
    + JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed
    due to "SSLException: An established connection was aborted by
    the software in your host machine"
    + JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java
    fails on Windows7
    + JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently
    positions text
    + JDK-8230019: [REDO] compiler/types/correctness/* tests fail
    with "assert(recv == __null || recv-&gt;is_klass()) failed: wrong
    type"
    + JDK-8230067: Add optional automatic retry when running jtreg
    tests
    + JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests
    may fail on some platforms
    + JDK-8231501: VM crash in
    MethodData::clean_extra_data(CleanExtraDataClosure*):
    fatal error: unexpected tag 99
    + JDK-8233403: Improve verbosity of some httpclient tests
    + JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS
    + JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on
    MacOS
    + JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on
    MacOS
    + JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS
    + JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS
    + JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on
    macos
    + JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java  is
    failing on macos
    + JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails
    on macos
    + JDK-8233562: [TESTBUG] Swing StyledEditorKit test
    bug4506788.java fails on MacOS
    + JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing
    + JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on
    MacoS
    + JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos
    + JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java
    fails on macos
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails
    on macos
    + JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java
    fails on macos
    + JDK-8233637: [TESTBUG] Swing
    ActionListenerCalledTwiceTest.java fails on macos
    + JDK-8233638: [TESTBUG] Swing test
    ScreenMenuBarInputTwice.java fails on macos
    + JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails
    on macos
    + JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java  fails
    on macos
    + JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on
    macos
    + JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is
    failing on macos
    + JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is
    failing on macos
    + JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture
    Recognition in all the platforms
    + JDK-8234823: java/net/Socket/Timeouts.java testcase
    testTimedConnect2() fails on Windows 10
    + JDK-8235784: java/lang/invoke/VarHandles/
    /VarHandleTestByteArrayAsInt.java fails due to timeout with
    fastdebug bits
    + JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -Xcomp -XX:TieredStopAtLevel=1
    + JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60),
    cond_wait
    + JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT,
    when using proxy tunnel
    + JDK-8237354: Add option to jcmd to write a gzipped heap dump
    + JDK-8237589: Fix copyright header formatting
    + JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java
    should not specify TLS version
    + JDK-8239334: Tab Size does not work correctly in JTextArea
    with setLineWrap on
    + JDK-8239422: [TESTBUG]
    compiler/c1/TestPrintIRDuringConstruction.java failed when C1
    is disabled
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240256: Better resource cleaning for SunPKCS11 Provider
    + JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test
    Server
    + JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/
    /bug8020708.java fails in mach5 ubuntu system
    + JDK-8242793: Incorrect copyright header in
    ContinuousCallSiteTargetChange.java
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244292: Headful clients failing with
  - -illegal-access=deny
    + JDK-8245147: Refactor and improve utility of
    test/langtools/tools/javac/versions/Versions.java
    + JDK-8245165: Update bug id for
    javax/swing/text/StyledEditorKit/4506788/bug4506788.java in
    ProblemList
    + JDK-8245665: Test WeakAlg.java should only make sure no
    warning for weak signature algorithms by keytool on root CA
    + JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails
    after 8241072 (multi-homed systems)
    + JDK-8246807: Incorrect copyright header in
    TimeZoneDatePermissionCheck.sh
    + JDK-8247403: JShell: No custom input (e.g. from GUI) possible
    with JavaShellToolBuilder
    + JDK-8247510: typo in IllegalHandshakeMessage
    + JDK-8248187: [TESTBUG] javax/swing/plaf/basic/
    /BasicGraphicsUtils/8132119/bug8132119.java fails with String
    is not properly drawn
    + JDK-8248341: ProblemList java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java
    + JDK-8248500: AArch64: Remove the r18 dependency on Windows
    AArch64
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8249195: Change to Xcode 11.3.1 for building on Macos at
    Oracle
    + JDK-8250521: Configure initial RTO to use minimal retry for
    loopback connections on Windows
    + JDK-8250810: Push missing parts of JDK-8248817
    + JDK-8250839: Improve test template SSLEngineTemplate with
    SSLContextTemplate
    + JDK-8250863: Build error with GCC 10 in NetworkInterface.c
    and k_standard.c
    + JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/
    /gf08t001/TestDriver.java fails
    + JDK-8251155: HostIdentifier fails to canonicalize hostnames
    starting with digits
    + JDK-8251377: [macos11] JTabbedPane selected tab text is
    barely legible
    + JDK-8251570: JDK-8215624 causes assert(worker_id &lt;
    _n_workers) failed: Invalid worker_id
    + JDK-8251930: AArch64: Native types mismatch in hotspot
    + JDK-8252049: Native memory leak in ciMethodData ctor
    + JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x
    friendly
    + JDK-8252114: Windows-AArch64: Enable and test ZGC and
    ShenandoahGC
    + JDK-8253015: Aarch64: Move linux code out from generic CPU
    feature detection
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java
    fail on big screens
    + JDK-8253497: Core Libs Terminology Refresh
    + JDK-8253682: The AppletInitialFocusTest1.java is unstable
    + JDK-8253763: ParallelObjectIterator should have virtual
    destructor
    + JDK-8253866: Security Libs Terminology Refresh
    + JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in
    "try throwing in GET_BODY"
    + JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java
    intermittently failing with TestServer: start exception:
    java.io.IOException: Invalid preface
    + JDK-8255264: Support for identifying the full range of IPv4
    localhost addresses on Windows
    + JDK-8255716: AArch64: Regression: JVM crashes if manually
    offline a core
    + JDK-8255722: Create a new test for rotated blit
    + JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad
    + JDK-8256066: Tests use deprecated TestNG API that is no
    longer available in new versions
    + JDK-8256152: tests fail because of ambiguous method resolution
    + JDK-8256182: Update qemu-debootstrap cross-compilation recipe
    + JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/
    /FullscreenWindowProps.java failed
    + JDK-8256202: Some tweaks for jarsigner tests
    PosixPermissionsTest and SymLinkTest
    + JDK-8256372: [macos] Unexpected symbol was displayed on
    JTextField with Monospaced font
    + JDK-8256956: RegisterImpl::max_slots_per_register is
    incorrect on AMD64
    + JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with
    InvalidPathException on windows
    + JDK-8258855: Two tests sun/security/krb5/auto/
    /ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java
    failed on OL8.3
    + JDK-8259237: Demo selection changes with left/right arrow
    key. No need to press space for selection.
    + JDK-8260571: Add PrintMetaspaceStatistics to print metaspace
    statistics upon VM exit
    + JDK-8260690: JConsole User Guide Link from the Help menu is
    not accessible by keyboard
    + JDK-8261036: Reduce classes loaded by CleanerFactory
    initialization
    + JDK-8261071: AArch64: Refactor interpreter native wrappers
    + JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch
    implementation
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261297: NMT: Final report should use scale 1
    + JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java
    fails because Reserved memory size is too big
    + JDK-8261916: gtest/GTestWrapper.java
    vmErrorTest.unimplemented1_vm_assert failed
    + JDK-8262438: sun/security/ssl/SSLLogger/
    /LoggingFormatConsistency.java failed with "SocketException:
    Socket is closed"
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8262844: (fs) FileStore.supportsFileAttributeView might
    return false negative in case of ext3
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp
    + JDK-8263303: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8263362: Avoid division by 0 in
    java/awt/font/TextJustifier.java justify
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java
    failed with "java.lang.RuntimeException: Wrong method"
    + JDK-8264526: javax/swing/text/html/parser/Parser/8078268/
    /bug8078268.java timeout
    + JDK-8264824: java/net/Inet6Address/B6206527.java doesn't
    close ServerSocket properly
    + JDK-8265019: Update tests for additional TestNG test
    permissions
    + JDK-8265173: [test] divert spurious log output away from
    stream under test in ProcessBuilder Basic test
    + JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8266579: Update test/jdk/java/lang/ProcessHandle/
    /PermissionTest.java &amp; test/jdk/java/sql/testng/util/
    /TestPolicy.java
    + JDK-8266949: Check possibility to disable OperationTimedOut
    on Unix
    + JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg
    tests on many-core machines
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267304: Bump global JTReg memory limit to 768m
    + JDK-8267652: c2 loop unrolling by 8 results in reading memory
    past array
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268093: Manual Testcase: "sun/security/krb5/config/
    /native/TestDynamicStore.java" Fails with NPE
    + JDK-8268555: Update HttpClient tests that use ITestContext to
    jtreg 6+1
    + JDK-8268672: C2: assert(!loop-&gt;is_member(u_loop)) failed: can
    be in outer loop or out of both loops only
    + JDK-8269034: AccessControlException for SunPKCS11 daemon
    threads
    + JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to
    accessClassAndFindClass
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269768: JFR Terminology Refresh
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8269984: [macos] JTabbedPane title looks like  disabled
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270216: [macOS] Update named used for Java run loop mode
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270344: Session resumption errors
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1
    + JDK-8272181: Windows-AArch64:Backport fix of `Backtracing
    broken on PAC enabled systems`
    + JDK-8272316: Wrong Boot JDK help message in 11
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8272828: Add correct licenses to jszip.md
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java
    fails by timeout
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273541: Cleaner Thread creates with normal priority
    instead of MAX_PRIORITY - 2
    + JDK-8273547: [11u] [JVMCI] Partial module-info.java backport
    of JDK-8223332
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273671: Backport of 8260616 misses one JNF header
    inclusion removal
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273795: Zero SPARC64 debug builds fail due to missing
    interpreter fields
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274860: gcc 10.2.1 produces an uninitialized warning in
    sharedRuntimeTrig.cpp
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277815: Fix mistakes in legal header backports
- Removed patch:
  * riscv64-zero.patch
    + integrated upstream
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1644926400">- Update to upstream tag jdk-11.0.14.1+1
  * Changes:
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8281324: Bump update version for OpenJDK: jdk-11.0.14.1</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="9e4ebcdfde41365b713556e50c65d228fec56334e211b1fa5f7140e5a7335761" name="java-11-openjdk-src" arch="ppc64le">
  <version epoch="0" ver="11.0.15.0" rel="150000.3.80.1"/>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643630400">- Update to upstream tag jdk-11.0.14+9 (January 2022 CPU)
  * New features
    + JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
  * Security fixes
    + JDK-8217375: jarsigner breaks old signature with long lines
    in manifest
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
    + JDK-8279541: Improve HarfBuzz
  * Other changes
    + JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/
    /ChoiceKeyEventReaction.html fails
    + JDK-7105119: [TEST_BUG] [macosx] In test
    UIDefaults.toString() must be called with the invokeLater()
    + JDK-7151826: [TEST_BUG] [macosx] The test
    javax/swing/JPopupMenu/4966112/bug4966112.java not for mac
    + JDK-7179006: [macosx] Print-to-file doesn't work: printing to
    the default printer instead
    + JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/
    /bug4726194.java fails on MacOSX
    + JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003 Wrong
    number of thread end events
    + JDK-8039261: [TEST_BUG]: There is not a minimal security
    level in Java Preferences and the TestApplet.html is blocked.
    + JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/
    /AltTabCrashTest.java fails with exception
    + JDK-8075909: [TEST_BUG] The regression-swing case failed as
    it does not have the 'Open' button when select 'subdir' folder
    with NimbusLAF
    + JDK-8078219: Verify lack of @test tag in files in java/net
    test directory
    + JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails
    with "RuntimeException: Process terminated prematurely"
    + JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java timed out intermittently
    + JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails
    intermittently
    + JDK-8131745: java/lang/management/ThreadMXBean/
    /AllThreadIds.java still fails intermittently
    + JDK-8136517: [macosx] Test java/awt/Focus/8073453/
    /AWTFocusTransitionTest.java fails on MacOSX
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/
    /Test6541987.java fails
    + JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/
    /bug4760494.java leaves key pressed
    + JDK-8159904: [TEST_BUG] Failure on solaris of
    java/awt/Window/MultiWindowApp/MultiWindowAppTest.java
    + JDK-8163086: java/awt/Window/TranslucentJAppletTest/
    /TranslucentJAppletTest.java fails
    + JDK-8165828: [TEST_BUG] The reg case: javax/swing/plaf/metal/
    /MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look
    and Feel
    + JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not
    fired! on Windows
    + JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException:
    Default button is not pressed
    + JDK-8169959: javax/swing/JTable/6263446/bug6263446.java:
    Table should be editing
    + JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/
    /7156657/bug7156657.java fails on OS X
    + JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails
    on Windows
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8179880: Refactor javax/security shell tests to plain
    java tests
    + JDK-8180568: Refactor javax/crypto shell tests to plain java
    tests
    + JDK-8180569: Refactor sun/security/krb5/ shell tests to plain
    java tests
    + JDK-8180571: Refactor sun/security/pkcs11 shell tests to
    plain java tests and fix failures
    + JDK-8180573: Refactor sun/security/tools shell tests to plain
    java tests
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8195703: BasicJDWPConnectionTest.java: 'App exited
    unexpectedly with 2'
    + JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java
    fails
    + JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java
    fails
    + JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/
    /NoEventsTest.java fails on Windows
    + JDK-8197811: Test java/awt/Choice/PopupPosTest/
    /PopupPosTest.java fails on Windows
    + JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java
    fails on mac
    + JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java
    fails on mac
    + JDK-8198619: java/awt/Focus/FocusTraversalPolicy/
    /ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java
    fails on mac
    + JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/
    /EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java
    fails on mac
    + JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/
    /SubMenuShowTest/SubMenuShowTest.html fails on mac
    + JDK-8199138: Add RISC-V support to Zero
    + JDK-8199529: javax/swing/text/Utilities/8142966/
    /SwingFontMetricsTest.java fails on windows
    + JDK-8201224: Make string buffer size dynamic in
    mlvmJvmtiUtils.c
    + JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/
    /FollowReferences/followref003/TestDescription.java fails with
    "Location mismatch" errors
    + JDK-8204161: [TESTBUG] auto failed with the "Applet thread
    threw exception: java.lang.UnsupportedOperationException"
    exception
    + JDK-8206085: Refactor
    langtools/tools/javac/versions/Versions.java
    + JDK-8207936: TestZipFile failed with java.lang.AssertionError
    exception
    + JDK-8208242: Add @requires to vmTestbase/gc/g1 tests
    + JDK-8209611: use C++ compiler for hotspot tests
    + JDK-8210182: Remove macros for C compilation from vmTestBase
    but non jvmti
    + JDK-8210198: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[A-F] tests
    + JDK-8210205: build fails on AIX in hotspot cpp tests (for
    example getstacktr001.cpp)
    + JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/
    /jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION
    on windows-x86
    + JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java
    back to tier1
    + JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[A-N] tests
    + JDK-8210392: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8210395: Add doc to SecurityTools.java
    + JDK-8210429: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[G-Z] tests
    + JDK-8210481: Remove #ifdef cplusplus from vmTestbase
    + JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[N-R] tests
    + JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[R-U] tests
    + JDK-8210689: Remove the multi-line old C style for string
    literals
    + JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti/unit tests
    + JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665
    + JDK-8210920: Native C++ tests are not using CXXFLAGS
    + JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR:
    hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti,
    thread)"
    + JDK-8211036: Remove the NSK_STUB macros from vmTestbase for
    non jvmti
    + JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[G-I]*
    + JDK-8211148: var in implicit lambdas shouldn't be accepted
    for source &lt; 11
    + JDK-8211171: move JarUtils to top-level testlibrary
    + JDK-8211227: Inconsistent TLS protocol version in debug output
    + JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[A-G]*
    + JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp
    + JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[I-S]*
    + JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[A-E]
    + JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[E-M]
    + JDK-8211905: Remove multiple casts for EM06 file
    + JDK-8211999: Window positioning bugs due to overlapping
    GraphicsDevice bounds (Windows/HiDPI)
    + JDK-8212082: Remove the NSK_CPP_STUB macros for remaining
    vmTestbase/jvmti/[sS]*
    + JDK-8212083: Handle remaining gc/lock native code and fix two
    strings
    + JDK-8212148: Remove remaining NSK_CPP_STUBs
    + JDK-8213110: Remove the use of applets in automatic tests
    + JDK-8213189: Make restricted headers in HTTP Client
    configurable and remove Date by default
    + JDK-8213263: fix legal headers in test/langtools
    + JDK-8213296: Fix legal headers in test/jdk/java/net
    + JDK-8213301: Fix legal headers in jdk logging tests
    + JDK-8213305: Fix legal headers in test/java/math
    + JDK-8213306: Fix legal headers in test/java/nio
    + JDK-8213328: Update test copyrights in test/java/util/zip and
    test/jdk/tools
    + JDK-8213330: Fix legal headers in i18n tests
    + JDK-8213707: [TEST] vmTestbase/nsk/stress/except/
    /except011.java failed due to wrong class name
    + JDK-8214469: [macos] PIT: java/awt/Choice/
    /ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails
    + JDK-8215410: Regression test for JDK-8214994
    + JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher
    + JDK-8215624: Add parallel heap iteration for jmap \u2013histo
    + JDK-8215889: assert(!_unloading) failed: This oop is not
    available to unloading class loader data with ZGC
    + JDK-8216318: The usage of Disposer in the java.awt.Robot can
    be deleted
    + JDK-8216417: cleanup of IPv6 scope-id handling
    + JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java
    failed with UnsupportedOperation exception
    + JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX
    + JDK-8217633: Configurable extensions with system properties
    + JDK-8217882: java/net/httpclient/MaxStreams.java failed once
    + JDK-8217903: java/net/httpclient/Response204.java fails with
    404
    + JDK-8218483: Crash in
    "assert(_daemon_threads_count-&gt;get_value() &gt; daemon_count)
    failed: thread count mismatch 5 : 5"
    + JDK-8219986: Change to Xcode 10.1 for building on Macosx at
    Oracle
    + JDK-8220575: Correctly format test URI's that contain a
    retrieved IPv6 address
    + JDK-8221259: New tests for java.net.Socket to exercise long
    standing behavior
    + JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails
    on MacOS + Solaris
    + JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/
    /FocusTraversal.java fails on ubuntu
    + JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/
    /IconifyTest.java fails on ubuntu18.04
    + JDK-8222446: assert(C-&gt;env()-&gt;system_dictionary_modification_counter_changed())
    failed: Must invalidate if TypeFuncs differ
    + JDK-8223137: Rename predicate 'do_unroll_only()' to
    'is_unroll_only()'.
    + JDK-8223138: Small clean-up in loop-tree support.
    + JDK-8223139: Rename mandatory policy-do routines.
    + JDK-8223140: Clean-up in 'ok_to_convert()'
    + JDK-8223141: Change (count) suffix _ct into _cnt.
    + JDK-8223400: Replace some enums with static const members in
    hotspot/runtime
    + JDK-8223658: Performance regression of XML.validation in
    13-b19
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8224829: AsyncSSLSocketClose.java has timing issue
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226514: Replace wildcard address with loopback or local
    host in tests - part 17
    + JDK-8226943: compile error in libfollowref003.cpp  with XCode
    10.2 on macosx
    + JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed
    due to "SSLException: An established connection was aborted by
    the software in your host machine"
    + JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java
    fails on Windows7
    + JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently
    positions text
    + JDK-8230019: [REDO] compiler/types/correctness/* tests fail
    with "assert(recv == __null || recv-&gt;is_klass()) failed: wrong
    type"
    + JDK-8230067: Add optional automatic retry when running jtreg
    tests
    + JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests
    may fail on some platforms
    + JDK-8231501: VM crash in
    MethodData::clean_extra_data(CleanExtraDataClosure*):
    fatal error: unexpected tag 99
    + JDK-8233403: Improve verbosity of some httpclient tests
    + JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS
    + JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on
    MacOS
    + JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on
    MacOS
    + JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS
    + JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS
    + JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on
    macos
    + JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java  is
    failing on macos
    + JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails
    on macos
    + JDK-8233562: [TESTBUG] Swing StyledEditorKit test
    bug4506788.java fails on MacOS
    + JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing
    + JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on
    MacoS
    + JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos
    + JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java
    fails on macos
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails
    on macos
    + JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java
    fails on macos
    + JDK-8233637: [TESTBUG] Swing
    ActionListenerCalledTwiceTest.java fails on macos
    + JDK-8233638: [TESTBUG] Swing test
    ScreenMenuBarInputTwice.java fails on macos
    + JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails
    on macos
    + JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java  fails
    on macos
    + JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on
    macos
    + JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is
    failing on macos
    + JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is
    failing on macos
    + JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture
    Recognition in all the platforms
    + JDK-8234823: java/net/Socket/Timeouts.java testcase
    testTimedConnect2() fails on Windows 10
    + JDK-8235784: java/lang/invoke/VarHandles/
    /VarHandleTestByteArrayAsInt.java fails due to timeout with
    fastdebug bits
    + JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -Xcomp -XX:TieredStopAtLevel=1
    + JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60),
    cond_wait
    + JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT,
    when using proxy tunnel
    + JDK-8237354: Add option to jcmd to write a gzipped heap dump
    + JDK-8237589: Fix copyright header formatting
    + JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java
    should not specify TLS version
    + JDK-8239334: Tab Size does not work correctly in JTextArea
    with setLineWrap on
    + JDK-8239422: [TESTBUG]
    compiler/c1/TestPrintIRDuringConstruction.java failed when C1
    is disabled
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240256: Better resource cleaning for SunPKCS11 Provider
    + JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test
    Server
    + JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/
    /bug8020708.java fails in mach5 ubuntu system
    + JDK-8242793: Incorrect copyright header in
    ContinuousCallSiteTargetChange.java
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244292: Headful clients failing with
  - -illegal-access=deny
    + JDK-8245147: Refactor and improve utility of
    test/langtools/tools/javac/versions/Versions.java
    + JDK-8245165: Update bug id for
    javax/swing/text/StyledEditorKit/4506788/bug4506788.java in
    ProblemList
    + JDK-8245665: Test WeakAlg.java should only make sure no
    warning for weak signature algorithms by keytool on root CA
    + JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails
    after 8241072 (multi-homed systems)
    + JDK-8246807: Incorrect copyright header in
    TimeZoneDatePermissionCheck.sh
    + JDK-8247403: JShell: No custom input (e.g. from GUI) possible
    with JavaShellToolBuilder
    + JDK-8247510: typo in IllegalHandshakeMessage
    + JDK-8248187: [TESTBUG] javax/swing/plaf/basic/
    /BasicGraphicsUtils/8132119/bug8132119.java fails with String
    is not properly drawn
    + JDK-8248341: ProblemList java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java
    + JDK-8248500: AArch64: Remove the r18 dependency on Windows
    AArch64
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8249195: Change to Xcode 11.3.1 for building on Macos at
    Oracle
    + JDK-8250521: Configure initial RTO to use minimal retry for
    loopback connections on Windows
    + JDK-8250810: Push missing parts of JDK-8248817
    + JDK-8250839: Improve test template SSLEngineTemplate with
    SSLContextTemplate
    + JDK-8250863: Build error with GCC 10 in NetworkInterface.c
    and k_standard.c
    + JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/
    /gf08t001/TestDriver.java fails
    + JDK-8251155: HostIdentifier fails to canonicalize hostnames
    starting with digits
    + JDK-8251377: [macos11] JTabbedPane selected tab text is
    barely legible
    + JDK-8251570: JDK-8215624 causes assert(worker_id &lt;
    _n_workers) failed: Invalid worker_id
    + JDK-8251930: AArch64: Native types mismatch in hotspot
    + JDK-8252049: Native memory leak in ciMethodData ctor
    + JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x
    friendly
    + JDK-8252114: Windows-AArch64: Enable and test ZGC and
    ShenandoahGC
    + JDK-8253015: Aarch64: Move linux code out from generic CPU
    feature detection
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java
    fail on big screens
    + JDK-8253497: Core Libs Terminology Refresh
    + JDK-8253682: The AppletInitialFocusTest1.java is unstable
    + JDK-8253763: ParallelObjectIterator should have virtual
    destructor
    + JDK-8253866: Security Libs Terminology Refresh
    + JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in
    "try throwing in GET_BODY"
    + JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java
    intermittently failing with TestServer: start exception:
    java.io.IOException: Invalid preface
    + JDK-8255264: Support for identifying the full range of IPv4
    localhost addresses on Windows
    + JDK-8255716: AArch64: Regression: JVM crashes if manually
    offline a core
    + JDK-8255722: Create a new test for rotated blit
    + JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad
    + JDK-8256066: Tests use deprecated TestNG API that is no
    longer available in new versions
    + JDK-8256152: tests fail because of ambiguous method resolution
    + JDK-8256182: Update qemu-debootstrap cross-compilation recipe
    + JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/
    /FullscreenWindowProps.java failed
    + JDK-8256202: Some tweaks for jarsigner tests
    PosixPermissionsTest and SymLinkTest
    + JDK-8256372: [macos] Unexpected symbol was displayed on
    JTextField with Monospaced font
    + JDK-8256956: RegisterImpl::max_slots_per_register is
    incorrect on AMD64
    + JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with
    InvalidPathException on windows
    + JDK-8258855: Two tests sun/security/krb5/auto/
    /ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java
    failed on OL8.3
    + JDK-8259237: Demo selection changes with left/right arrow
    key. No need to press space for selection.
    + JDK-8260571: Add PrintMetaspaceStatistics to print metaspace
    statistics upon VM exit
    + JDK-8260690: JConsole User Guide Link from the Help menu is
    not accessible by keyboard
    + JDK-8261036: Reduce classes loaded by CleanerFactory
    initialization
    + JDK-8261071: AArch64: Refactor interpreter native wrappers
    + JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch
    implementation
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261297: NMT: Final report should use scale 1
    + JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java
    fails because Reserved memory size is too big
    + JDK-8261916: gtest/GTestWrapper.java
    vmErrorTest.unimplemented1_vm_assert failed
    + JDK-8262438: sun/security/ssl/SSLLogger/
    /LoggingFormatConsistency.java failed with "SocketException:
    Socket is closed"
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8262844: (fs) FileStore.supportsFileAttributeView might
    return false negative in case of ext3
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp
    + JDK-8263303: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8263362: Avoid division by 0 in
    java/awt/font/TextJustifier.java justify
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java
    failed with "java.lang.RuntimeException: Wrong method"
    + JDK-8264526: javax/swing/text/html/parser/Parser/8078268/
    /bug8078268.java timeout
    + JDK-8264824: java/net/Inet6Address/B6206527.java doesn't
    close ServerSocket properly
    + JDK-8265019: Update tests for additional TestNG test
    permissions
    + JDK-8265173: [test] divert spurious log output away from
    stream under test in ProcessBuilder Basic test
    + JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8266579: Update test/jdk/java/lang/ProcessHandle/
    /PermissionTest.java &amp; test/jdk/java/sql/testng/util/
    /TestPolicy.java
    + JDK-8266949: Check possibility to disable OperationTimedOut
    on Unix
    + JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg
    tests on many-core machines
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267304: Bump global JTReg memory limit to 768m
    + JDK-8267652: c2 loop unrolling by 8 results in reading memory
    past array
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268093: Manual Testcase: "sun/security/krb5/config/
    /native/TestDynamicStore.java" Fails with NPE
    + JDK-8268555: Update HttpClient tests that use ITestContext to
    jtreg 6+1
    + JDK-8268672: C2: assert(!loop-&gt;is_member(u_loop)) failed: can
    be in outer loop or out of both loops only
    + JDK-8269034: AccessControlException for SunPKCS11 daemon
    threads
    + JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to
    accessClassAndFindClass
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269768: JFR Terminology Refresh
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8269984: [macos] JTabbedPane title looks like  disabled
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270216: [macOS] Update named used for Java run loop mode
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270344: Session resumption errors
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1
    + JDK-8272181: Windows-AArch64:Backport fix of `Backtracing
    broken on PAC enabled systems`
    + JDK-8272316: Wrong Boot JDK help message in 11
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8272828: Add correct licenses to jszip.md
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java
    fails by timeout
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273541: Cleaner Thread creates with normal priority
    instead of MAX_PRIORITY - 2
    + JDK-8273547: [11u] [JVMCI] Partial module-info.java backport
    of JDK-8223332
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273671: Backport of 8260616 misses one JNF header
    inclusion removal
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273795: Zero SPARC64 debug builds fail due to missing
    interpreter fields
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274860: gcc 10.2.1 produces an uninitialized warning in
    sharedRuntimeTrig.cpp
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277815: Fix mistakes in legal header backports
- Removed patch:
  * riscv64-zero.patch
    + integrated upstream
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1644926400">- Update to upstream tag jdk-11.0.14.1+1
  * Changes:
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8281324: Bump update version for OpenJDK: jdk-11.0.14.1</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="50e198e3a73272f7917d4b2730eb60d036f5615c65a5354fe8358efbee3a610b" name="java-11-openjdk-src" arch="s390x">
  <version epoch="0" ver="11.0.15.0" rel="150000.3.80.1"/>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643630400">- Update to upstream tag jdk-11.0.14+9 (January 2022 CPU)
  * New features
    + JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
  * Security fixes
    + JDK-8217375: jarsigner breaks old signature with long lines
    in manifest
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
    + JDK-8279541: Improve HarfBuzz
  * Other changes
    + JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/
    /ChoiceKeyEventReaction.html fails
    + JDK-7105119: [TEST_BUG] [macosx] In test
    UIDefaults.toString() must be called with the invokeLater()
    + JDK-7151826: [TEST_BUG] [macosx] The test
    javax/swing/JPopupMenu/4966112/bug4966112.java not for mac
    + JDK-7179006: [macosx] Print-to-file doesn't work: printing to
    the default printer instead
    + JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/
    /bug4726194.java fails on MacOSX
    + JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003 Wrong
    number of thread end events
    + JDK-8039261: [TEST_BUG]: There is not a minimal security
    level in Java Preferences and the TestApplet.html is blocked.
    + JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/
    /AltTabCrashTest.java fails with exception
    + JDK-8075909: [TEST_BUG] The regression-swing case failed as
    it does not have the 'Open' button when select 'subdir' folder
    with NimbusLAF
    + JDK-8078219: Verify lack of @test tag in files in java/net
    test directory
    + JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails
    with "RuntimeException: Process terminated prematurely"
    + JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java timed out intermittently
    + JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails
    intermittently
    + JDK-8131745: java/lang/management/ThreadMXBean/
    /AllThreadIds.java still fails intermittently
    + JDK-8136517: [macosx] Test java/awt/Focus/8073453/
    /AWTFocusTransitionTest.java fails on MacOSX
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/
    /Test6541987.java fails
    + JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/
    /bug4760494.java leaves key pressed
    + JDK-8159904: [TEST_BUG] Failure on solaris of
    java/awt/Window/MultiWindowApp/MultiWindowAppTest.java
    + JDK-8163086: java/awt/Window/TranslucentJAppletTest/
    /TranslucentJAppletTest.java fails
    + JDK-8165828: [TEST_BUG] The reg case: javax/swing/plaf/metal/
    /MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look
    and Feel
    + JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not
    fired! on Windows
    + JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException:
    Default button is not pressed
    + JDK-8169959: javax/swing/JTable/6263446/bug6263446.java:
    Table should be editing
    + JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/
    /7156657/bug7156657.java fails on OS X
    + JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails
    on Windows
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8179880: Refactor javax/security shell tests to plain
    java tests
    + JDK-8180568: Refactor javax/crypto shell tests to plain java
    tests
    + JDK-8180569: Refactor sun/security/krb5/ shell tests to plain
    java tests
    + JDK-8180571: Refactor sun/security/pkcs11 shell tests to
    plain java tests and fix failures
    + JDK-8180573: Refactor sun/security/tools shell tests to plain
    java tests
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8195703: BasicJDWPConnectionTest.java: 'App exited
    unexpectedly with 2'
    + JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java
    fails
    + JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java
    fails
    + JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/
    /NoEventsTest.java fails on Windows
    + JDK-8197811: Test java/awt/Choice/PopupPosTest/
    /PopupPosTest.java fails on Windows
    + JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java
    fails on mac
    + JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java
    fails on mac
    + JDK-8198619: java/awt/Focus/FocusTraversalPolicy/
    /ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java
    fails on mac
    + JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/
    /EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java
    fails on mac
    + JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/
    /SubMenuShowTest/SubMenuShowTest.html fails on mac
    + JDK-8199138: Add RISC-V support to Zero
    + JDK-8199529: javax/swing/text/Utilities/8142966/
    /SwingFontMetricsTest.java fails on windows
    + JDK-8201224: Make string buffer size dynamic in
    mlvmJvmtiUtils.c
    + JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/
    /FollowReferences/followref003/TestDescription.java fails with
    "Location mismatch" errors
    + JDK-8204161: [TESTBUG] auto failed with the "Applet thread
    threw exception: java.lang.UnsupportedOperationException"
    exception
    + JDK-8206085: Refactor
    langtools/tools/javac/versions/Versions.java
    + JDK-8207936: TestZipFile failed with java.lang.AssertionError
    exception
    + JDK-8208242: Add @requires to vmTestbase/gc/g1 tests
    + JDK-8209611: use C++ compiler for hotspot tests
    + JDK-8210182: Remove macros for C compilation from vmTestBase
    but non jvmti
    + JDK-8210198: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[A-F] tests
    + JDK-8210205: build fails on AIX in hotspot cpp tests (for
    example getstacktr001.cpp)
    + JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/
    /jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION
    on windows-x86
    + JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java
    back to tier1
    + JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[A-N] tests
    + JDK-8210392: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8210395: Add doc to SecurityTools.java
    + JDK-8210429: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[G-Z] tests
    + JDK-8210481: Remove #ifdef cplusplus from vmTestbase
    + JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[N-R] tests
    + JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[R-U] tests
    + JDK-8210689: Remove the multi-line old C style for string
    literals
    + JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti/unit tests
    + JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665
    + JDK-8210920: Native C++ tests are not using CXXFLAGS
    + JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR:
    hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti,
    thread)"
    + JDK-8211036: Remove the NSK_STUB macros from vmTestbase for
    non jvmti
    + JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[G-I]*
    + JDK-8211148: var in implicit lambdas shouldn't be accepted
    for source &lt; 11
    + JDK-8211171: move JarUtils to top-level testlibrary
    + JDK-8211227: Inconsistent TLS protocol version in debug output
    + JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[A-G]*
    + JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp
    + JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[I-S]*
    + JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[A-E]
    + JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[E-M]
    + JDK-8211905: Remove multiple casts for EM06 file
    + JDK-8211999: Window positioning bugs due to overlapping
    GraphicsDevice bounds (Windows/HiDPI)
    + JDK-8212082: Remove the NSK_CPP_STUB macros for remaining
    vmTestbase/jvmti/[sS]*
    + JDK-8212083: Handle remaining gc/lock native code and fix two
    strings
    + JDK-8212148: Remove remaining NSK_CPP_STUBs
    + JDK-8213110: Remove the use of applets in automatic tests
    + JDK-8213189: Make restricted headers in HTTP Client
    configurable and remove Date by default
    + JDK-8213263: fix legal headers in test/langtools
    + JDK-8213296: Fix legal headers in test/jdk/java/net
    + JDK-8213301: Fix legal headers in jdk logging tests
    + JDK-8213305: Fix legal headers in test/java/math
    + JDK-8213306: Fix legal headers in test/java/nio
    + JDK-8213328: Update test copyrights in test/java/util/zip and
    test/jdk/tools
    + JDK-8213330: Fix legal headers in i18n tests
    + JDK-8213707: [TEST] vmTestbase/nsk/stress/except/
    /except011.java failed due to wrong class name
    + JDK-8214469: [macos] PIT: java/awt/Choice/
    /ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails
    + JDK-8215410: Regression test for JDK-8214994
    + JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher
    + JDK-8215624: Add parallel heap iteration for jmap \u2013histo
    + JDK-8215889: assert(!_unloading) failed: This oop is not
    available to unloading class loader data with ZGC
    + JDK-8216318: The usage of Disposer in the java.awt.Robot can
    be deleted
    + JDK-8216417: cleanup of IPv6 scope-id handling
    + JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java
    failed with UnsupportedOperation exception
    + JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX
    + JDK-8217633: Configurable extensions with system properties
    + JDK-8217882: java/net/httpclient/MaxStreams.java failed once
    + JDK-8217903: java/net/httpclient/Response204.java fails with
    404
    + JDK-8218483: Crash in
    "assert(_daemon_threads_count-&gt;get_value() &gt; daemon_count)
    failed: thread count mismatch 5 : 5"
    + JDK-8219986: Change to Xcode 10.1 for building on Macosx at
    Oracle
    + JDK-8220575: Correctly format test URI's that contain a
    retrieved IPv6 address
    + JDK-8221259: New tests for java.net.Socket to exercise long
    standing behavior
    + JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails
    on MacOS + Solaris
    + JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/
    /FocusTraversal.java fails on ubuntu
    + JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/
    /IconifyTest.java fails on ubuntu18.04
    + JDK-8222446: assert(C-&gt;env()-&gt;system_dictionary_modification_counter_changed())
    failed: Must invalidate if TypeFuncs differ
    + JDK-8223137: Rename predicate 'do_unroll_only()' to
    'is_unroll_only()'.
    + JDK-8223138: Small clean-up in loop-tree support.
    + JDK-8223139: Rename mandatory policy-do routines.
    + JDK-8223140: Clean-up in 'ok_to_convert()'
    + JDK-8223141: Change (count) suffix _ct into _cnt.
    + JDK-8223400: Replace some enums with static const members in
    hotspot/runtime
    + JDK-8223658: Performance regression of XML.validation in
    13-b19
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8224829: AsyncSSLSocketClose.java has timing issue
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226514: Replace wildcard address with loopback or local
    host in tests - part 17
    + JDK-8226943: compile error in libfollowref003.cpp  with XCode
    10.2 on macosx
    + JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed
    due to "SSLException: An established connection was aborted by
    the software in your host machine"
    + JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java
    fails on Windows7
    + JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently
    positions text
    + JDK-8230019: [REDO] compiler/types/correctness/* tests fail
    with "assert(recv == __null || recv-&gt;is_klass()) failed: wrong
    type"
    + JDK-8230067: Add optional automatic retry when running jtreg
    tests
    + JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests
    may fail on some platforms
    + JDK-8231501: VM crash in
    MethodData::clean_extra_data(CleanExtraDataClosure*):
    fatal error: unexpected tag 99
    + JDK-8233403: Improve verbosity of some httpclient tests
    + JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS
    + JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on
    MacOS
    + JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on
    MacOS
    + JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS
    + JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS
    + JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on
    macos
    + JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java  is
    failing on macos
    + JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails
    on macos
    + JDK-8233562: [TESTBUG] Swing StyledEditorKit test
    bug4506788.java fails on MacOS
    + JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing
    + JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on
    MacoS
    + JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos
    + JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java
    fails on macos
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails
    on macos
    + JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java
    fails on macos
    + JDK-8233637: [TESTBUG] Swing
    ActionListenerCalledTwiceTest.java fails on macos
    + JDK-8233638: [TESTBUG] Swing test
    ScreenMenuBarInputTwice.java fails on macos
    + JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails
    on macos
    + JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java  fails
    on macos
    + JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on
    macos
    + JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is
    failing on macos
    + JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is
    failing on macos
    + JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture
    Recognition in all the platforms
    + JDK-8234823: java/net/Socket/Timeouts.java testcase
    testTimedConnect2() fails on Windows 10
    + JDK-8235784: java/lang/invoke/VarHandles/
    /VarHandleTestByteArrayAsInt.java fails due to timeout with
    fastdebug bits
    + JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -Xcomp -XX:TieredStopAtLevel=1
    + JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60),
    cond_wait
    + JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT,
    when using proxy tunnel
    + JDK-8237354: Add option to jcmd to write a gzipped heap dump
    + JDK-8237589: Fix copyright header formatting
    + JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java
    should not specify TLS version
    + JDK-8239334: Tab Size does not work correctly in JTextArea
    with setLineWrap on
    + JDK-8239422: [TESTBUG]
    compiler/c1/TestPrintIRDuringConstruction.java failed when C1
    is disabled
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240256: Better resource cleaning for SunPKCS11 Provider
    + JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test
    Server
    + JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/
    /bug8020708.java fails in mach5 ubuntu system
    + JDK-8242793: Incorrect copyright header in
    ContinuousCallSiteTargetChange.java
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244292: Headful clients failing with
  - -illegal-access=deny
    + JDK-8245147: Refactor and improve utility of
    test/langtools/tools/javac/versions/Versions.java
    + JDK-8245165: Update bug id for
    javax/swing/text/StyledEditorKit/4506788/bug4506788.java in
    ProblemList
    + JDK-8245665: Test WeakAlg.java should only make sure no
    warning for weak signature algorithms by keytool on root CA
    + JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails
    after 8241072 (multi-homed systems)
    + JDK-8246807: Incorrect copyright header in
    TimeZoneDatePermissionCheck.sh
    + JDK-8247403: JShell: No custom input (e.g. from GUI) possible
    with JavaShellToolBuilder
    + JDK-8247510: typo in IllegalHandshakeMessage
    + JDK-8248187: [TESTBUG] javax/swing/plaf/basic/
    /BasicGraphicsUtils/8132119/bug8132119.java fails with String
    is not properly drawn
    + JDK-8248341: ProblemList java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java
    + JDK-8248500: AArch64: Remove the r18 dependency on Windows
    AArch64
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8249195: Change to Xcode 11.3.1 for building on Macos at
    Oracle
    + JDK-8250521: Configure initial RTO to use minimal retry for
    loopback connections on Windows
    + JDK-8250810: Push missing parts of JDK-8248817
    + JDK-8250839: Improve test template SSLEngineTemplate with
    SSLContextTemplate
    + JDK-8250863: Build error with GCC 10 in NetworkInterface.c
    and k_standard.c
    + JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/
    /gf08t001/TestDriver.java fails
    + JDK-8251155: HostIdentifier fails to canonicalize hostnames
    starting with digits
    + JDK-8251377: [macos11] JTabbedPane selected tab text is
    barely legible
    + JDK-8251570: JDK-8215624 causes assert(worker_id &lt;
    _n_workers) failed: Invalid worker_id
    + JDK-8251930: AArch64: Native types mismatch in hotspot
    + JDK-8252049: Native memory leak in ciMethodData ctor
    + JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x
    friendly
    + JDK-8252114: Windows-AArch64: Enable and test ZGC and
    ShenandoahGC
    + JDK-8253015: Aarch64: Move linux code out from generic CPU
    feature detection
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java
    fail on big screens
    + JDK-8253497: Core Libs Terminology Refresh
    + JDK-8253682: The AppletInitialFocusTest1.java is unstable
    + JDK-8253763: ParallelObjectIterator should have virtual
    destructor
    + JDK-8253866: Security Libs Terminology Refresh
    + JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in
    "try throwing in GET_BODY"
    + JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java
    intermittently failing with TestServer: start exception:
    java.io.IOException: Invalid preface
    + JDK-8255264: Support for identifying the full range of IPv4
    localhost addresses on Windows
    + JDK-8255716: AArch64: Regression: JVM crashes if manually
    offline a core
    + JDK-8255722: Create a new test for rotated blit
    + JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad
    + JDK-8256066: Tests use deprecated TestNG API that is no
    longer available in new versions
    + JDK-8256152: tests fail because of ambiguous method resolution
    + JDK-8256182: Update qemu-debootstrap cross-compilation recipe
    + JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/
    /FullscreenWindowProps.java failed
    + JDK-8256202: Some tweaks for jarsigner tests
    PosixPermissionsTest and SymLinkTest
    + JDK-8256372: [macos] Unexpected symbol was displayed on
    JTextField with Monospaced font
    + JDK-8256956: RegisterImpl::max_slots_per_register is
    incorrect on AMD64
    + JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with
    InvalidPathException on windows
    + JDK-8258855: Two tests sun/security/krb5/auto/
    /ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java
    failed on OL8.3
    + JDK-8259237: Demo selection changes with left/right arrow
    key. No need to press space for selection.
    + JDK-8260571: Add PrintMetaspaceStatistics to print metaspace
    statistics upon VM exit
    + JDK-8260690: JConsole User Guide Link from the Help menu is
    not accessible by keyboard
    + JDK-8261036: Reduce classes loaded by CleanerFactory
    initialization
    + JDK-8261071: AArch64: Refactor interpreter native wrappers
    + JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch
    implementation
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261297: NMT: Final report should use scale 1
    + JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java
    fails because Reserved memory size is too big
    + JDK-8261916: gtest/GTestWrapper.java
    vmErrorTest.unimplemented1_vm_assert failed
    + JDK-8262438: sun/security/ssl/SSLLogger/
    /LoggingFormatConsistency.java failed with "SocketException:
    Socket is closed"
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8262844: (fs) FileStore.supportsFileAttributeView might
    return false negative in case of ext3
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp
    + JDK-8263303: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8263362: Avoid division by 0 in
    java/awt/font/TextJustifier.java justify
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java
    failed with "java.lang.RuntimeException: Wrong method"
    + JDK-8264526: javax/swing/text/html/parser/Parser/8078268/
    /bug8078268.java timeout
    + JDK-8264824: java/net/Inet6Address/B6206527.java doesn't
    close ServerSocket properly
    + JDK-8265019: Update tests for additional TestNG test
    permissions
    + JDK-8265173: [test] divert spurious log output away from
    stream under test in ProcessBuilder Basic test
    + JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8266579: Update test/jdk/java/lang/ProcessHandle/
    /PermissionTest.java &amp; test/jdk/java/sql/testng/util/
    /TestPolicy.java
    + JDK-8266949: Check possibility to disable OperationTimedOut
    on Unix
    + JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg
    tests on many-core machines
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267304: Bump global JTReg memory limit to 768m
    + JDK-8267652: c2 loop unrolling by 8 results in reading memory
    past array
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268093: Manual Testcase: "sun/security/krb5/config/
    /native/TestDynamicStore.java" Fails with NPE
    + JDK-8268555: Update HttpClient tests that use ITestContext to
    jtreg 6+1
    + JDK-8268672: C2: assert(!loop-&gt;is_member(u_loop)) failed: can
    be in outer loop or out of both loops only
    + JDK-8269034: AccessControlException for SunPKCS11 daemon
    threads
    + JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to
    accessClassAndFindClass
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269768: JFR Terminology Refresh
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8269984: [macos] JTabbedPane title looks like  disabled
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270216: [macOS] Update named used for Java run loop mode
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270344: Session resumption errors
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1
    + JDK-8272181: Windows-AArch64:Backport fix of `Backtracing
    broken on PAC enabled systems`
    + JDK-8272316: Wrong Boot JDK help message in 11
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8272828: Add correct licenses to jszip.md
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java
    fails by timeout
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273541: Cleaner Thread creates with normal priority
    instead of MAX_PRIORITY - 2
    + JDK-8273547: [11u] [JVMCI] Partial module-info.java backport
    of JDK-8223332
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273671: Backport of 8260616 misses one JNF header
    inclusion removal
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273795: Zero SPARC64 debug builds fail due to missing
    interpreter fields
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274860: gcc 10.2.1 produces an uninitialized warning in
    sharedRuntimeTrig.cpp
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277815: Fix mistakes in legal header backports
- Removed patch:
  * riscv64-zero.patch
    + integrated upstream
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1644926400">- Update to upstream tag jdk-11.0.14.1+1
  * Changes:
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8281324: Bump update version for OpenJDK: jdk-11.0.14.1</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="e5561a08c7f85d962d394985bd9bdcc1bf66cdd2b2f092c509f218cd2c1f5c94" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="0" ver="11.0.15.0" rel="150000.3.80.1"/>
  <changelog author="fstrba@suse.com" date="1604491200">- Enable Sheandoah GC for x86_64 (jsc#ECO-3171)</changelog>
  <changelog author="fstrba@suse.com" date="1605528000">- Update to upstream tag jdk-11.0.9.1-1
  * Fix:
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
- Removed patch:
  * JDK-8250861.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1611230400">- Update to upstream tag jdk-11.0.10+9 (January 2021 CPU,
  bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Other changes
    + JDK-6722928: Support SSPI as a native GSS-API provider
    + JDK-7185258: [macosx] Deadlock in SunToolKit.realSync()
    + JDK-8152332: [macosx] JFileChooser cannot be serialized on
    Mac OS X
    + JDK-8161684: [testconf] Add VerifyOops' testing into compiler
    tiers
    + JDK-8171279: Support X25519 and X448 in TLS
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8173658: JvmtiExport::post_class_unload() is broken for
    non-JavaThread initiators
    + JDK-8191006: hsdis disassembler plugin does not compile with
    binutils 2.29+
    + JDK-8197981: Missing return statement in
    __sync_val_compare_and_swap_8
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java
    fails in headless mode
    + JDK-8200151: Add 8 JNDI tests to com/sun/jndi/dns/ConfigTests/
    + JDK-8208279: Add 8 JNDI tests to com/sun/jndi/dns/EnvTests/
    + JDK-8208483: Add 5 JNDI tests to
    com/sun/jndi/dns/FactoryTests/
    + JDK-8208542: Add 4 JNDI tests to com/sun/jndi/dns/ListTests/
    + JDK-8208665: Amend cross-compilation docs with
    qemu-debootstrap recipe
    + JDK-8210088: ProblemList gc/epsilon/TestMemoryMXBeans.java
    + JDK-8210339: Add 10 JNDI tests to com/sun/jndi/dns/FedTests/
    + JDK-8211450: UndetVar::dup is not copying the kind field to
    the duplicated instance
    + JDK-8212160: JVMTI agent crashes with "assert(_value != 0LL)
    failed: resolving NULL _value"
    + JDK-8212226: SurfaceManager throws "Invalid Image variant"
    for MultiResolutionImage (Windows)
    + JDK-8213400: Support choosing group name in keytool keypair
    generation
    + JDK-8213535: Windows HiDPI html lightweight tooltips are
    truncated
    + JDK-8213698: Improve devkit creation and add support for
    linux/ppc64/ppc64le/s390x
    + JDK-8214025: assert(t-&gt;singleton()) failed: must be a
    constant when ScavengeRootsInCode &lt; 2
    + JDK-8214242: compiler/arguments/TestScavengeRootsInCode.java
    fails because of missing UnlockDiagnosticVMOptions
    + JDK-8214787: Zero builds fail with "undefined
    JavaThread::thread_state()"
    + JDK-8215583: Exclude
    runtime/handshake/HandshakeWalkSuspendExitTest.java
    + JDK-8216012: Infinite loop in RSA KeyPairGenerator
    + JDK-8216324: GetClassMethods is confused by the presence of
    default methods in super interfaces
    + JDK-8217429: WebSocket over authenticating proxy fails to
    send Upgrade headers
    + JDK-8217976: test/jdk/java/net/httpclient/websocket/
    /WebSocketProxyTest.java fails intermittently
    + JDK-8218021: Have jarsigner preserve posix permission
    attributes
    + JDK-8218287: jshell tool: input behavior unstable after
    12-ea+24 on Windows
    + JDK-8218851: JVM crash in custom classloader stress test, JDK
    12 &amp; 13
    + JDK-8220420: Cleanup c1_LinearScan
    + JDK-8222072: JVMTI GenerateEvents() sends CompiledMethodLoad
    events to wrong jvmtiEnv
    + JDK-8222286: Fix for JDK-8213419 is broken on s390
    + JDK-8222527: HttpClient doesn't send HOST header when
    tunelling HTTP/1.1 through http proxy
    + JDK-8222533: jtreg test jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails on SLES12.3 linux ppc64le
    machine
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8224555: vmTestbase/nsk/jvmti/scenarios/contention/TC02/
    /tc02t001/TestDescription.java failed
    + JDK-8224650: Add tests to support X25519 and X448 in TLS
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8225329: -XX:+PrintBiasedLockingStatistics causes crash
    during initialization on Windows platforms
    + JDK-8225687: Newly added sspi.cpp in JDK-6722928 still
    contains some small errors
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8227275: Within native OOM error handling, assertions may
    hang the process
    + JDK-8227647: [Graal] Test8009761.java fails due to
    "RuntimeException: static java.lang.Object
    compiler.uncommontrap.Test8009761.m3(boolean,boolean) not
    compiled"
    + JDK-8229495: SIGILL in C2 generated OSR compilation
    + JDK-8230910: libsspi_bridge does not build on Windows 32bit
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234147: Avoid looking up standard charsets in core
    libraries
    + JDK-8234393: [macos] printing ignores printer tray
    + JDK-8234863: Increase default value of MaxInlineLevel
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235456: Minimal VM is broken after JDK-8212160
    + JDK-8235829: graal crashes with Zombie.java test
    + JDK-8236124: Minimal VM slowdebug build failed after
    JDK-8212160
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8236944: The legVecZ operand should be limited to
    zmm0-zmm15 registers
    + JDK-8237186: Fix typo in copyright header of
    java/io/Reader/TransferTo.java
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8237512: AArch64: aarch64TestHook leaks a BufferBlob
    + JDK-8237524: AArch64: String.compareTo() may return incorrect
    result
    + JDK-8237950: C2 compilation fails with "Live Node limit
    exceeded limit" during ConvI2L::Ideal optimization
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8239477: jdk/jfr/jcmd/TestJcmdStartStopDefault.java fails
  - XX:+VerifyOops with "verify_oop: rsi: broken oop"
    + JDK-8239497: SEGV in EdgeUtils::field_name_symbol(Edge const&amp;)
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8240690: Race condition between EDT and
    BasicDirectoryModel.FilesLoader.run0()
    + JDK-8241234: Unify monitor enter/exit runtime entries.
    + JDK-8241311: Move some charset mapping tests from closed to
    open
    + JDK-8241797: Add some tests to the problem list
    + JDK-8242029: AArch64: skip G1 array copy pre-barrier if
    marking not active
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8242614: cleanup duplicated test ldap server in some
    com/sun/jndi/ldap/ tests
    + JDK-8242846: Bring back test/jdk/tools/jlink/plugins/
    /OrderResourcesPluginTest.java
    + JDK-8243114: Implement montgomery{Multiply,Square}intrinsics
    on Windows
    + JDK-8243290: Improve diagnostic messages for class
    verification and redefinition failures
    + JDK-8243488: Add tests for set/get SendBufferSize and
    getReceiveBufferSize in DatagramSocket
    + JDK-8243549: sun/security/ssl/CipherSuite/
    /NamedGroupsWithCipherSuite.java failed with Unsupported
    signature algorithm: DSA
    + JDK-8243617: compiler/onSpinWait/TestOnSpinWaitC1.java test
    uses wrong class
    + JDK-8243619: compiler/codecache/CheckSegmentedCodeCache.java
    test misses -version
    + JDK-8244142: some hotspot/runtime tests don't check exit code
    of forked JVM
    + JDK-8244278: Excessive code cache flushes and sweeps
    + JDK-8244282: test/hotspot/jtreg/compiler/intrinsics/
    /Test8237524.java fails with --illegal-access=deny
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8244819: hsdis does not compile with binutils 2.34+
    + JDK-8245051: c1 is broken if it is compiled by gcc without
  - fno-lifetime-dse
    + JDK-8245168: jlink should not be treated as a "small" tool
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8246381: VM crashes with "Current BasicObjectLock* below
    than low_mark"
    + JDK-8246434: Threads::print_on_error assumes that the heap
    has been set up
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8247201: Print potential pointer value of readable stack
    memory in hs_err file
    + JDK-8247763: assert(outer-&gt;outcnt() == 2) failed: 'only phis'
    failure in LoopNode::verify_strip_mined()
    + JDK-8247867: Upgrade to freetype 2.10.2
    + JDK-8248190: Enable Power10 system and implement new
    byte-reverse instructions
    + JDK-8248226: TestCloneAccessStressGCM fails with
  - XX:-ReduceBulkZeroing
    + JDK-8248347: windows build broken by JDK-8243114
    + JDK-8248532: Every time I change keyboard language at my
    MacBook, Java crashes
    + JDK-8248552: C2 crashes with SIGFPE due to division by zero
    + JDK-8248596: [TESTBUG] compiler/loopopts/
    /PartialPeelingUnswitch.java times out with Graal enabled
    + JDK-8248745: Add jarsigner and keytool tests for restricted
    algorithms
    + JDK-8248791: sun/util/resources/cldr/TimeZoneNamesTest.java
    fails with -XX:-ReduceInitialCardMarks -XX:-ReduceBulkZeroing
    + JDK-8248845: AArch64: stack corruption after spilling vector
    register
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249192: MonitorInfo stores raw oops across safepoints
    + JDK-8249602: C2: assert(cnt == _outcnt) failed: no insertions
    allowed
    + JDK-8249603: C1: assert(has_error == false) failed: register
    allocation invalid
    + JDK-8249605: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8249607: C2: assert(!had_error) failed: bad dominance
    + JDK-8249608: Vector register used by C2 compiled method
    corrupted at safepoint
    + JDK-8249672: Include microcode revision in features_string on
    x86
    + JDK-8249748: gtest silently ignores bad jvm arguments
    + JDK-8249821: Separate libharfbuzz from libfontmanager
    + JDK-8250598: Hyper-V is detected in spite of running on host
    OS
    + JDK-8250605: Linux x86_32 builds fail after JDK-8249821
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250772: Test com/sun/jndi/ldap/
    /NamingExceptionMessageTest.java fails intermittently with
    javax.naming.ServiceUnavailableException
    + JDK-8250825: C2 crashes with assert(field != __null) failed:
    missing field
    + JDK-8250894: Provide a configure option to build and run
    against the platform libharfbuzz
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8250968: Symlinks attributes not preserved when using
    jarsigner on zip files
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251118: BiasedLocking::preserve_marks should not have a
    HandleMark
    + JDK-8251189: com/sun/jndi/ldap/LdapDnsProviderTest.java
    failed due to timeout
    + JDK-8251257: NMT: jcmd VM.native_memory scale=1 crashes
    target VM
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8251456: [TESTBUG] compiler/vectorization/
    /TestVectorsNotSavedAtSafepoint.java failed OutOfMemoryError
    + JDK-8251458: Parse::do_lookupswitch fails with "assert(_cnt
    &gt;= 0) failed"
    + JDK-8251535: Partial peeling at unsigned test adds incorrect
    loop exit check
    + JDK-8251949: ZGC: Set explicit heap size for
    compiler/gcbarriers tests
    + JDK-8252090: JFR: StreamWriterHost::write_unbuffered() stucks
    in an infinite loop OpenJDK (build 13.0.1+9)
    + JDK-8252415: Bump update version for OpenJDK: jdk-11.0.10
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252660: Shenandoah: support manageable SoftMaxHeapSize
    option
    + JDK-8252679: Two windows specific FileDIalog tests may fail
    on some Windows_Server_2016_Standard
    + JDK-8252696: Loop unswitching may cause out of bound array
    load to be executed
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8253219: Epsilon: clean up unnecessary includes
    + JDK-8253224: Shenandoah: ShenandoahStrDedupQueue destructor
    calls virtual num_queues()
    + JDK-8253226: Shenandoah: remove unimplemented
    ShenandoahStrDedupQueue::verify
    + JDK-8253269: The CheckCommonColors test should provide more
    info on failure
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8253778: ShenandoahSafepoint::is_at_shenandoah_safepoint
    should not access VMThread state from other threads
    + JDK-8253791: Issue with useAppleColor check in CSystemColors.m
    + JDK-8254016: Test8237524 fails with -XX:-CompactStrings option
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254177: (tz) Upgrade time-zone data to tzdata2020b
    + JDK-8254185: Fix Code cache sweeper heuristics for JDK 11
    + JDK-8254190: [s390] interpreter misses exception check after
    calling monitorenter
    + JDK-8254790: SIGSEGV in string_indexof_char and
    stringL_indexof_char intrinsics
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
    + JDK-8255050: Add pkcs11/KeyStore/ClientAuth.sh to Problem list
    + JDK-8255065: Zero: accessor_entry misses the IRIW case
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
    + JDK-8255365: Problem list failing client manual tests
    + JDK-8255457: Shenandoah: cleanup ShenandoahMarkTask
    + JDK-8255466: C2 crashes at ciObject::get_oop() const+0x0
    + JDK-8255550: x86: Assembler::cmpq(Address dst, Register src)
    encoding is incorrect
    + JDK-8255603: Memory/Performance regression after JDK-8210985
    + JDK-8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + JDK-8255781: Bump patch update version for OpenJDK:
    jdk-11.0.9.1
    + JDK-8255937: Better cleanup for
    test/jdk/javax/imageio/stream/StreamFlush.java
    + JDK-8256427: Test com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java does not work on AIX
    + JDK-8256452: Integrate missing part of JDK-8232370 to 11u
    + JDK-8256483: [TESTBUG] serviceability/jvmti/GetClassMethods/
    /libOverpassMethods.c fails to compile on gcc 4.4.x
    + JDK-8256557: libharfbuzz fails to link on gcc 4.4.x due to
  - Wl,-z,defs
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256736: Zero: GTest tests fail with "unsuppported vm
    variant"
    + JDK-8256809: Annotation processing causes NPE during flow
    analysis
    + JDK-8257181: s390x builds are very noisy with gc-sections
    messages
    + JDK-8257242: [macOS] Java app crashes while switching input
    methods
    + JDK-8257545: SunJSSE FIPS regression in key exchange after
    JDK-8171279 11u backport
    + JDK-8257641: Shenandoah: Query is_at_shenandoah_safepoint()
    from control thread should return false
    + JDK-8257701: Shenandoah: objArrayKlass metadata is not marked
    with chunked arrays
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
- New upstream dependency on libharfbuzz
- Regenerated patches: missing-return.patch system-pcsclite.patch</changelog>
  <changelog author="fstrba@suse.com" date="1616155200">- Added patches:
  * system-crypto-policy.patch
    + Let OpenJDK use system crypto policies unless explicitely told
    not to
  * nss-security-provider.patch
    + Add the NSS security provider with configuration in generated
    nss.cfg file
  * keytool-default-rsa.patch
    + Make keytool generate RSA keys by default, since only the
    LEGACY system crypto policy allows DSA</changelog>
  <changelog author="pujos.michael@gmail.com" date="1618488000">- moved mozilla-nss dependency to java-11-openjdk-headless package
  This is necessary to be able to do crypto with just
  java-11-openjdk-headless installed. Fixes boo#1184606</changelog>
  <changelog author="fstrba@suse.com" date="1619006400">- Update to upstream tag jdk-11.0.11+9 (April 2021, CPU)
  * Security fixes
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
    + JDK-8257001: Improve Http Client Support
  * Other changes
    + JDK-7107012: sun.jvm.hotspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8168869: jdeps: localized messages don't use proper line
    breaks
    + JDK-8180837: SunPKCS11-NSS tests failing with
    CKR_ATTRIBUTE_READ_ONLY and CKR_MECHANISM_PARAM_INVALID
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8205992: jhsdb cannot attach to Java processes running in
    Docker containers
    + JDK-8209193: Fix aarch64-linux compilation after -Wreorder
    changes
    + JDK-8210413: AArch64: Optimize div/rem by constant in C1
    + JDK-8210578: AArch64: Invalid encoding for fmlsvs instruction
    + JDK-8211051: jdeps usage of --dot-output doesn't provide
    valid output for modular jar
    + JDK-8211057: Gensrc step CompileProperties generates unstable
    CompilerProperties output
    + JDK-8211150: G1 Full GC not purging code root memory and
    hence causing memory leak
    + JDK-8211825: ModuleLayer.defineModulesWithXXX does not setup
    delegation when module reads automatic module
    + JDK-8212043: Add floating-point Math.min/max intrinsics
    + JDK-8212218: [TESTBUG] runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryErrorInMetaspace.java timed out
    + JDK-8213116: javax/swing/JComboBox/WindowsComboBoxSize/
    /WindowsComboBoxSizeTest.java fails in Windows
    + JDK-8213909: jdeps --print-module-deps should report missing
    dependences
    + JDK-8214180: Need better granularity for sleeping
    + JDK-8214223: tools/jdeps/listdeps/ListModuleDeps.java failed
    due to missing Lib2 file
    + JDK-8214230: Classes generated by SystemModulesPlugin.java
    are not reproducable
    + JDK-8214741: docs/index.html has no title or copyright
    + JDK-8215687: [Graal] unit test CheckGraalIntrinsics failed
    after 8212043
    + JDK-8217848: [Graal] vmTestbase/nsk/jvmti/ResourceExhausted/
    /resexhausted003/TestDescription.java fails
    + JDK-8218482: sun/security/krb5/auto/ReplayCachePrecise.java
    failed - no KrbException thrown
    + JDK-8218550: Add test omitted from JDK-8212043
    + JDK-8221584: SIGSEGV in os::PlatformEvent::unpark() in
    JvmtiRawMonitor::raw_exit while posting method exit event
    + JDK-8221995: AARCH64: problems with CAS instructions encoding
    + JDK-8222518: Remove unnecessary caching of Parker object in
    java.lang.Thread
    + JDK-8222785: aarch64: add necessary masking for immediate
    shift counts
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225773: jdeps --check produces NPE if there are missing
    module dependences
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226810: Failed to launch JVM because of
    NullPointerException occured on System.props
    + JDK-8229396: jdeps ignores multi-release when
    generate-module-info used on command line
    + JDK-8229474: Shenandoah: Cleanup CM::update_roots()
    + JDK-8232225: Rework the fix for JDK-8071483
    + JDK-8232905: JFR fails with assertion:
    assert(t-&gt;unflushed_size() == 0) failed: invariant
    + JDK-8233164: C2 fails with assert(phase-&gt;C-&gt;get_alias_index(t)
    == phase-&gt;C-&gt;get_alias_index(t_adr)) failed: correct memory
    chain
    + JDK-8233910: java/awt/ColorClass/AlphaColorTest.java is
    failing  intermittently in nightly lnux-x64 system
    + JDK-8233912: aarch64: minor improvements of atomic operations
    + JDK-8234508: VM_HeapWalkOperation::iterate_over_object reads
    non-strong fields with an on-strong load barrier
    + JDK-8234742: Improve handshake logging
    + JDK-8234796: Refactor Handshake::execute to take a more
    complex type than ThreadClosure
    + JDK-8235324: Dying objects are published from users of
    CollectedHeap::object_iterate
    + JDK-8235351: Lookup::unreflect should bind with the original
    caller independent of Method's accessible flag
    + JDK-8237369: Shenandoah: failed vmTestbase/nsk/jvmti/
    /AttachOnDemand/attach021/TestDescription.java test
    + JDK-8237392: Shenandoah: Remove unreliable assertion
    + JDK-8237483: AArch64 C1 OopMap inserted twice fatal error
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8239355: (dc) Initial value of SO_SNDBUF should allow
    sending large datagrams (macOS)
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8240704: CheckHandles.java failed "AssertionError: Handle
    use increased by more than 10 percent."
    + JDK-8240751: Shenandoah: fold ShenandoahTracer definition
    + JDK-8240795: [REDO] 8238384 CTW: C2 compilation fails with
    "assert(store != load-&gt;find_exact_control(load-&gt;in(0)))
    failed: dependence cycle found"
    + JDK-8241598: Upgrade JLine to 3.14.0
    + JDK-8241649: Optimize Character.toString
    + JDK-8241770: Module xxxAnnotation() methods throw NCDFE if
    module-info.class found as resource in unnamed module
    + JDK-8241911: AArch64: Fix a potential register clash issue in
    reduce_add2I
    + JDK-8242030: Wrong package declarations in jline classes after
    JDK-8241598
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8243618: compiler/rtm/cli tests can be run w/o WhiteBox
    + JDK-8243670: Unexpected test result caused by C2
    MergeMemNode::Ideal
    + JDK-8244088: [Regression] Switch of Gnome theme ends up in
    deadlocked UI
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0 header
    files
    + JDK-8244340: Handshake processing thread lacks yielding
    + JDK-8244573: java.lang.ArrayIndexOutOfBoundsException thrown
    for malformed class file
    + JDK-8244683: A TSA server used by tests
    + JDK-8245005: javax/net/ssl/compatibility/BasicConnectTest.java
    failed with No enum constant
    + JDK-8245026: PsAdaptiveSizePolicy::_old_gen_policy_is_ready is
    unused
    + JDK-8245283: JFR: Can't handle constant dynamic used by Jacoco
    agent
    + JDK-8245512: CRC32 optimization using AVX512 instructions
    + JDK-8245527: LDAP Channel Binding support for Java
    GSS/Kerberos
    + JDK-8246707: (sc) SocketChannel.read/write throws
    AsynchronousCloseException on closed channel
    + JDK-8246709: sun/security/tools/jarsigner/
    /TsacertOptionTest.java compilation failed after JDK-8244683
    + JDK-8247200: assert((unsigned)fpargs &lt; 32)
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits))
    failed: Field too big for insn.
    + JDK-8248336: AArch64: C2: offset overflow in
    BoxLockNode::emit
    + JDK-8248865: Document JNDI/LDAP timeout properties
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8249543: Force DirectBufferAllocTest to run with
  - ExplicitGCInvokesConcurrent
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8249749: modify a primitive array through a stream and a
    for cycle causes jre crash
    + JDK-8249787: Make TestGCLocker more resilient with concurrent
    GCs
    + JDK-8249867: xml declaration is not followed by a newline
    + JDK-8250911: [windows] os::pd_map_memory() error detection
    broken
    + JDK-8251255: [linux] Add process-memory information to hs-err
    and VM.info
    + JDK-8251359: Shenandoah: filter null oops before calling
    enqueue/SATB barrier
    + JDK-8251925: C2: RenaissanceStressTest fails with
    assert(!had_error): bad dominance
    + JDK-8251944: Add Shenandoah test config to
    compiler/gcbarriers/UnsafeIntrinsicsTest.java
    + JDK-8251992: VM crashed running TestComplexAddrExpr.java test
    with -XX:UseAVX=X
    + JDK-8253220: Epsilon: clean up unused code/declarations
    + JDK-8253274: The CycleDMImagetest brokes the system
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253404: C2: assert(C-&gt;live_nodes() &lt;=
    C-&gt;max_node_limit()) failed: Live Node limit exceeded limit
    + JDK-8253409: Double-rounding possibility in float fma
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253524: C2: Refactor code that clones predicates during
    loop unswitching
    + JDK-8253644: C2: assert(skeleton_predicate_has_opaque(iff))
    failed: unexpected
    + JDK-8253681: closed java/awt/dnd/MouseEventAfterStartDragTest/
    /MouseEventAfterStartDragTest.html test failed
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8253756: C2 CompilerThread0 crash in Node::add_req(Node*)
    + JDK-8254104: MethodCounters must exist before nmethod is
    installed
    + JDK-8254734: "dead loop detected" assert failure with patch
    from 8223051
    + JDK-8254748: Bad Copyright header format after JDK-8212218
    + JDK-8254799: runtime/ErrorHandling/
    /TestHeapDumpOnOutOfMemoryError.java fails with release VMs
    + JDK-8255058: C1: assert(is_virtual()) failed: type check
    + JDK-8255351: Add detection for Graviton 2 CPUs
    + JDK-8255368: Math.exp() gives wrong result for large values on
    x86 32-bit platforms
    + JDK-8255387: Japanese characters were printed upside down on
    AIX
    + JDK-8255401: Shenandoah: Allow oldval and newval registers to
    overlap in cmpxchg_oop()
    + JDK-8255479: [aarch64] assert(src-&gt;section_index_of(target) ==
    CodeBuffer::SECT_NONE) failed: sanity
    + JDK-8255544: Create a checked cast
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8255681: print callstack in error case in
    runAWTLoopWithApp
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8255742: PrintInlining as compiler directive doesn't print
    virtual calls
    + JDK-8255845: Memory leak in imageFile.cpp
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8256025: AArch64: MachCallRuntimeNode::ret_addr_offset()
    is incorrect for stub calls
    + JDK-8256056: Deoptimization stub doesn't save vector registers
    on x86
    + JDK-8256061: RegisterSaver::save_live_registers() omits upper
    halves of ZMM0-15 registers
    + JDK-8256187: [TEST_BUG] Automate bug4275046.java test
    + JDK-8256220: C1: x86_32 fails with -XX:UseSSE=1 after
    JDK-8210764 due to mishandled lir_neg
    + JDK-8256258: some missing NULL checks or asserts after
    CodeCache::find_blob_unsafe
    + JDK-8256264: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8256290: javac/lambda/T8031967.java fails with
    StackOverflowError on x86_32
    + JDK-8256359: AArch64: runtime/ReservedStack/
    /ReservedStackTestCompiler.java fails
    + JDK-8256387: Unexpected result if patching an entire
    instruction on AArch64
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8256488: [aarch64] Use ldpq/stpq instead of ld4/st4 for
    small copies in StubGenerator::copy_memory
    + JDK-8256489: Make gtest for long path names on Windows more
    resilient in the presence of virus scanners
    + JDK-8256501: libTestMainKeyWindow fails to build with Xcode
    12.2
    + JDK-8256633: Fix product build on Windows+Arm64
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8256751: Incremental rebuild with precompiled header fails
    when touching a header file
    + JDK-8256757: Incorrect MachCallRuntimeNode::ret_addr_offset()
    for CallLeafNoFP on x86_32
    + JDK-8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + JDK-8256807: C2: Not marking stores correctly as mismatched
    in string opts
    + JDK-8256810: Incremental rebuild broken on Macosx
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8256888: Client manual test problem list update
    + JDK-8257083: Security infra test failures caused by
    JDK-8202343
    + JDK-8257408: Bump update version for OpenJDK: jdk-11.0.11
    + JDK-8257423: [PPC64] Support -XX:-UseInlineCaches
    + JDK-8257436: [aarch64] Regressions in ArrayCopyUnalignedDst
    .testByte/testChar for 65-78 bytes when UseSIMDForMemoryOps
    is on
    + JDK-8257513: C2: assert((constant_addr -
    _masm.code()-&gt;consts()-&gt;start()) == con.offset())
    + JDK-8257547: Handle multiple prereqs on the same line in deps
    files
    + JDK-8257561: Some code is not vectorized after 8251925 and
    8250607
    + JDK-8257565: epsilonBarrierSet.hpp should not include
    barrierSetAssembler
    + JDK-8257575: C2: "failed: only phis" assert failure in loop
    strip mining verification
    + JDK-8257594: C2 compiled checkcast of non-null object triggers
    endless deoptimization/recompilation cycle
    + JDK-8257633: Missing -mmacosx-version-min=X flag when linking
    libjvm
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    reports leaks
    + JDK-8257707: Fix incorrect format string in Http1HeaderParser
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8257798: [PPC64] undefined reference to
    Klass::vtable_start_offset()
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257910: [JVMCI] Set exception_seen accordingly in the
    runtime.
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258077: Using -Xcheck:jni can lead to a double-free after
    JDK-8193234
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8258373: Update the text handling in the JPasswordField
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258471: "search codecache" clhsdb command does not work
    + JDK-8258534: Epsilon: clean up unused includes
    + JDK-8258805: Japanese characters not entered by mouse click
    on Windows 10
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
    + JDK-8258836: JNI local refs exceed capacity
    getDiagnosticCommandInfo
    + JDK-8258884: [TEST_BUG] Convert applet-based test
    open/test/jdk/javax/swing/JMenuItem/8031573/bug8031573.java
    to a regular java test
    + JDK-8259007: This test printed a blank page
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
    + JDK-8259049: Uninitialized variable after JDK-8257513
    + JDK-8259231: Epsilon: improve performance under contention
    during virtual space expansion
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will expire in 90 days
    + JDK-8259319: Illegal package access when SunPKCS11 requires
    SunJCE's classes
    + JDK-8259339: AllocateUninitializedArray C2 intrinsic fails
    with void.class input
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8259446: runtime/jni/checked/
    /TestCheckedReleaseArrayElements.java fails with stderr not
    empty
    + JDK-8259451: Zero: skip serviceability/sa tests, set vm.hasSA
    to false
    + JDK-8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259633: compiler/graalunit/CoreTest.java fails with NPE
    after JDK-8244543
    + JDK-8259706: C2 compilation fails with assert(vtable_index ==
    Method::invalid_vtable_index) failed: correct sentinel value
    + JDK-8259707: LDAP channel binding does not work with StartTLS
    extension
    + JDK-8259773: Incorrect encoding of AVX-512 kmovq instruction
    + JDK-8259849: Shenandoah: Rename store-val to IU-barrier
    + JDK-8259949: x86 32-bit build fails when -fcf-protection is
    passed in the compiler flags
    + JDK-8259954: gc/shenandoah/mxbeans tests fail with -Xcomp
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260308: Update LogCompilation junit to 4.13.1
    + JDK-8260338: Some fields in HaltNode is not cloned
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
    + JDK-8260378: [TESTBUG] DcmdMBeanTestCheckJni.java reports
    false positive
    + JDK-8260497: Shenandoah: Improve SATB flushing
    + JDK-8260502: [s390] NativeMovRegMem::verify() fails because
    it's too strict
    + JDK-8260632: Build failures after JDK-8253353
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261022: Fix incorrect result of Math.abs() with char type
    + JDK-8261089: [TESTBUG] native library of test
    TestCheckedReleaseCriticalArray.java fails to compile with
    gcc 4.x
    + JDK-8261183: Follow on to Make lists of normal filenames
    + JDK-8261209: isStandalone property: remove dependency on
    pretty-print
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8261251: Shenandoah: Use object size for full GC
    humongous compaction
    + JDK-8261310: PPC64 Zero build fails with
    'VMError::controlled_crash(int)::FunctionDescriptor
    functionDescriptor' has incomplete type and cannot be defined
    + JDK-8261334: NMT: tuning statistic shows incorrect hash
    distribution
    + JDK-8261413: Shenandoah: Disable class-unloading in I-U mode
    + JDK-8261522: [PPC64] AES intrinsics write beyond the
    destination array
    + JDK-8261534: Test sun/security/pkcs11/KeyAgreement/
    /IllegalPackageAccess.java fails on platforms where no nsslib
    artifacts are defined
    + JDK-8261585: Restore HandleArea used in
    Deoptimization::uncommon_trap
    + JDK-8261753: Test java/lang/System/OsVersionTest.java still
    failing on BigSur patch versions after JDK-8253702
    + JDK-8261829: Exclude tools/jlink/JLinkReproducibleTest.java
    in 11u
    + JDK-8261912: Code IfNode::fold_compares_helper more
    defensively
    + JDK-8261920: [AIX] jshell command throws java.io.IOError on
    non English locales
    + JDK-8262018: Wrong format in SAP copyright header of
    OsVersionTest
    + JDK-8263069: Exclude some failing tests from
    security/infra/java/security/cert/CertPathValidator</changelog>
  <changelog author="fstrba@suse.com" date="1620043200">- Remove all Jpackage provides for SLE12 in order to avoid
  installing this package as default Java on SLE12-SP5
  (bsc#1185476)</changelog>
  <changelog author="fstrba@suse.com" date="1621512000">- Modified patch:
  * nss-security-provider.patch
    + make the NSS provider first in the list</changelog>
  <changelog author="fstrba@suse.com" date="1626868800">- Update to upstream tag jdk-11.0.12+7 (July 2021, CPU)
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Other changes
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-7106851: Test should not use System.exit
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8076190: Customizing the generation of a PKCS12 keystore
    + JDK-8153005: Upgrade the default PKCS12 encryption/MAC
    algorithms
    + JDK-8171303: sun/java2d/pipe/InterpolationQualityTest.java
    fails on Windows &amp; Linux
    + JDK-8177068: incomplete classpath causes NPE in Flow
    + JDK-8185734: [Windows] Structured Exception Catcher missing
    around gtest execution
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8190763: Class cast exception on (CompoundEdit)
    UndoableEditEvent.getEdit()
    + JDK-8195841: PNGImageReader.readNullTerminatedString() doesnt
    check for non-null terminated strings with length equal to
    maxLen
    + JDK-8196100: javax/swing/text/JTextComponent/5074573/
    /bug5074573.java fails
    + JDK-8199646: JShell tests: jdk/jshell/
    /FailOverDirectExecutionControlTest.java failed with
    java.lang.UnsupportedOperationException
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8207160: ClassReader::adjustMethodParams can potentially
    return null if the args list is empty
    + JDK-8207247: AARCH64: Enable Minimal and Client VM builds
    + JDK-8207404: MulticastSocket tests failing on AIX
    + JDK-8207779: Method::is_valid_method() compares 'this' with
    NULL
    + JDK-8208061: runtime/LoadClass/TestResize.java fails with
    "Load factor too high" when running in CDS mode.
    + JDK-8209459: TestSHA512MultiBlockIntrinsics failed on AArch64
    + JDK-8210443: Migrate Locale matching tests to JDK Repo.
    + JDK-8213231: ThreadSnapshot::_threadObj can become stale
    + JDK-8213483: ARM32: runtime/ErrorHandling/
    /ShowRegistersOnAssertTest.java jtreg test fail
    + JDK-8213725: JShell NullPointerException due to class file
    with unexpected package
    + JDK-8213794: ARM32: disable TypeProfiling,
    CriticalJNINatives, Serviceablity tests for ARM32
    + JDK-8213845: ARM32: Interpreter doesn't call result handler
    after native calls
    + JDK-8214128: ARM32: wrong stack alignment on
    Deoptimization::unpack_frames
    + JDK-8214512: ARM32: Jtreg test compiler/c2/Test8062950.java
    fails on ARM
    + JDK-8214854: JDWP: Unforseen output truncation in logging
    + JDK-8214922: Add vectorization support for fmin/fmax
    + JDK-8215009: GCC 8 compilation error in libjli
    + JDK-8216184: CDS/appCDS tests failed on Windows due to long
    path to a classlist file
    + JDK-8216259: AArch64: Vectorize Adler32 intrinsics
    + JDK-8216314: SIGILL in CodeHeapState::print_names()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8217465: [REDO] - Optimize CodeHeap Analytics
    + JDK-8217561: X86: Add floating-point Math.min/max intrinsics
    + JDK-8217918: C2: -XX:+AggressiveUnboxing is broken
    + JDK-8218458: [TESTBUG] runtime/NMT/
    /CheckForProperDetailStackTrace.java fails with Expected
    stack trace missing from output
    + JDK-8219142: Remove unused JIMAGE_ResourcePath
    + JDK-8219586: CodeHeap State Analytics processes dead nmethods
    + JDK-8220074: Clean up GCC 8.3 errors in LittleCMS
    + JDK-8220407: compiler/intrinsics/math/
    /TestFpMinMaxIntrinsics.java timedout
    + JDK-8222302: [TESTBUG] test/hotspot/jtreg/compiler/intrinsics/
    /sha/cli/TestUseSHAOptionOnUnsupportedCPU.java fails on any
    other CPU
    + JDK-8222412: AARCH64: multiple instructions encoding issues
    + JDK-8223020: aarch64: expand minI_rReg and maxI_rReg patterns
    into separate instructions
    + JDK-8223444: Improve CodeHeap Free Space Management
    + JDK-8223504: Improve performance of forall loops by better
    inlining of "iterator()" methods
    + JDK-8223667: ASAN build broken
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8225438: javax/net/ssl/TLSCommon/
    /TestSessionLocalPrincipal.java failed with Read timed out
    + JDK-8225756: [testbug] compiler/loopstripmining/
    /CheckLoopStripMining.java sets too short a
    SafepointTimeoutDelay
    + JDK-8226374: Restrict TLS signature schemes and named groups
    + JDK-8226627: assert(t-&gt;singleton()) failed: must be a constant
    + JDK-8226721: Missing intrinsics for Math.ceil, floor, rint
    + JDK-8227080: (fs) Files.newInputStream(...).skip(n) is slow
    + JDK-8227222: vmTestbase/jit/FloatingPoint/gen_math/Loops04/
    /Loops04.java failed XMM register should be 0-15
    + JDK-8227609: (fs) Files.newInputStream(...).skip(n) should
    allow skipping beyond file size
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231460: Performance issue (CodeHeap) with large free
    blocks
    + JDK-8231713: x86_32 build failures after JDK-8226721 (Missing
    intrinsics for Math.ceil, floor, rint)
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8232084: HotSpot build failed with GCC 9.2.1
    + JDK-8232591: AArch64: Add missing match rules for smaddl,
    smsubl and smnegl
    + JDK-8233185: HttpServer.stop() blocks indefinitely when
    called on dispatch thread
    + JDK-8233787: Break cycle in vm_version* includes
    + JDK-8233948: AArch64: Incorrect mapping between OptoReg and
    VMReg for high 64 bits of Vector Register
    + JDK-8234355: Buffer overflow in jcmd GC.class_stats due to
    too many classes
    + JDK-8235368: Update BCEL to Version 6.4.1
    + JDK-8236859: WebSocket over authenticating proxy fails with
    NPE
    + JDK-8236992: AArch64: remove redundant load_klass in itable
    stub
    + JDK-8237743: test/langtools/jdk/jshell/
    /FailOverExecutionControlTest.java fails No
    ExecutionControlProvider with name 'nonExistent' and parameter
    keys: []
    + JDK-8237804: sun/security/mscapi tests fail with "Key pair
    not generated, alias &lt;nnnnnn&gt; already exists"
    + JDK-8238175: CTW: Class.getDeclaredMethods fails with
    assert(k-&gt;is_subclass_of(SystemDictionary::Throwable_klass()))
    failed: invalid exception class
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8238812: assert(false) failed: bad AD file
    + JDK-8239312: [macos] javax/swing/JFrame/NSTexturedJFrame/
    /NSTexturedJFrame.java
    + JDK-8239386: handle ContendedPaddingWidth in
    vm_version_aarch64
    + JDK-8239536: Can't use 'java.util.List' object after
    importing 'java.awt.List'
    + JDK-8240487: Cleanup whitespace in .cc, .hh, .m, and .mm files
    + JDK-8240848: ArrayIndexOutOfBoundsException buf for
    TextCallbackHandler
    + JDK-8241082: Upgrade IANA Language Subtag Registry data to
    03-16-2020 version
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8241101: [s390] jtreg test failure after JDK-8238696: not
    conformant features string
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8241372: Several test failures due to
    javax.net.ssl.SSLException: Connection reset
    + JDK-8241475: AArch64: Add missing support for PopCountVI node
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8241960: The SHA3 message digests impl of SUN provider
    are not thread safe after cloned
    + JDK-8242010: Upgrade IANA Language Subtag Registry to Version
    2020-04-01
    + JDK-8242429: Better implementation for sign extract
    + JDK-8242557: Add length limit for strings in PNGImageWriter
    + JDK-8242919: Paste locks up jshell
    + JDK-8243155: AArch64: Add support for SqrtVF
    + JDK-8243240: AArch64: Add support for MulVB
    + JDK-8243452: JFR: Could not create chunk in repository with
    over 200 recordings
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8243597: AArch64: Add support for integer vector abs
    + JDK-8244031: HttpClient should have more tests for HEAD
    requests
    + JDK-8244205: HTTP/2 tunnel connections through proxy may be
    reused regardless of which proxy is selected
    + JDK-8244847: Linux/PPC: runtime/CompressedOops/
    /CompressedClassPointers: smallHeapTest fails
    + JDK-8245511: G1 adaptive IHOP does not account for
    reclamation of humongous objects by young GC
    + JDK-8246274: G1 old gen allocation tracking is not in a
    separate class
    + JDK-8247354: [aarch64] PopFrame causes
    assert(oopDesc::is_oop(obj)) failed: not an oop
    + JDK-8247408: IdealGraph bit check expression canonicalization
    + JDK-8247432: Update IANA Language Subtag Registry to Version
    2020-09-29
    + JDK-8247438: JShell: When FailOverExecutionControlProvider
    fails the proximal cause is not shown
    + JDK-8247753: UIManager.getSytemLookAndFeelClassName() returns
    wrong value on Fedora 32
    + JDK-8248043: Need to eliminate excessive i2l conversions
    + JDK-8248411: [aarch64] Insufficient error handling when
    CodeBuffer is exhausted
    + JDK-8248568: compiler/c2/TestBit.java failed: test missing
    from stdout/stderr
    + JDK-8248870: AARCH64: I2L/L2I conversions can be skipped for
    masked positive values
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8249189: AARCH64: more L2I conversions can be skipped
    + JDK-8249719: MethodHandle performance suffers from bad
    ResolvedMethodTable hash function
    + JDK-8249875: GCC 10 warnings -Wtype-limits with JFR code
    + JDK-8250635: MethodArityHistogram should use Compile_lock in
    favour of fancy checks
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8251031: Some vmTestbase/nsk/monitoring/RuntimeMXBean
    tests fail with hostnames starting from digits
    + JDK-8251525: AARCH64: Faster Math.signum(fp)
    + JDK-8252259: AArch64: Adjust default value of FLOATPRESSURE
    + JDK-8252311: AArch64: save two words in itable lookup stub
    + JDK-8252779: compiler/graalunit/HotspotTest.java failed after
    8251525
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8253167: ARM32 builds fail after JDK-8247910
    + JDK-8253572: [windows] CDS archive may fail to open with long
    file names
    + JDK-8253923: C2 doesn't always run loop opts for compilations
    that include loops
    + JDK-8253948: Memory leak in ImageFileReader
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8255086: Update the root locale display names
    + JDK-8255625: AArch64: Implement Base64.encodeBlock
    accelerator/intrinsic
    + JDK-8255763: C2: OSR miscompilation caused by invalid memory
    instruction placement
    + JDK-8255992: JFR EventWriter does not use first string from
    StringPool with id 0
    + JDK-8256037: [TESTBUG] com/sun/jndi/dns/ConfigTests/
    /PortUnreachable.java fails due to the hard coded threshold
    is small
    + JDK-8256244: java/lang/ProcessHandle/PermissionTest.java
    fails with TestNG 7.1
    + JDK-8256287: [windows] add loop fuse to
    map_or_reserve_memory_aligned
    + JDK-8256523: Streamline Java SHA2 implementation
    + JDK-8257414: Drag n Drop target area is wrong on high DPI
    systems
    + JDK-8257569: Failure observed with
    JfrVirtualMemory::initialize
    + JDK-8257574: C2: "failed: parsing found no loops but there
    are some" assert failure
    + JDK-8257580: Bump update version for OpenJDK: jdk-11.0.12
    + JDK-8257604: JNI_ArgumentPusherVaArg leaks valist
    + JDK-8257621: JFR StringPool misses cached items across
    consecutive recordings
    + JDK-8257796: [TESTBUG]
    TestUseSHA512IntrinsicsOptionOnSupportedCPU.java fails
    on x86_32
    + JDK-8257822: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8257828: SafeFetch may crash if invoked in non-JavaThreads
    + JDK-8257853: Remove dependencies on JNF's JNI utility
    functions in AWT and 2D code
    + JDK-8257858: [macOS]: Remove JNF dependency from
    libosxsecurity/KeystoreImpl.m
    + JDK-8257860: [macOS]: Remove JNF dependency from
    libosxkrb5/SCDynamicStoreConfig.m
    + JDK-8257988: Remove JNF dependency from
    libsaproc/MacosxDebuggerLocal.m
    + JDK-8258414: OldObjectSample events too expensive
    + JDK-8258505: [TESTBUG] TestDivZeroWithSplitIf.java fails due
    to missing UnlockDiagnosticVMOptions
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259061: C2: assert(found) failed: memory-writing node is
    not placed in its original loop or an ancestor of it
    + JDK-8259227: C2 crashes with SIGFPE due to a division that
    floats above its zero check
    + JDK-8259232: Bad JNI lookup during printing
    + JDK-8259276: C2: Empty expression stack when reexecuting
    tableswitch/lookupswitch instructions after deoptimization
    + JDK-8259343: [macOS] Update JNI error handling in Cocoa code.
    + JDK-8259585: Accessible actions do not work on mac os x
    + JDK-8259651: [macOS] Replace JNF_COCOA_ENTER/EXIT macros
    + JDK-8259662: Don't wrap SocketExceptions into SSLExceptions
    in SSLSocketImpl
    + JDK-8259710: Inlining trace leaks memory
    + JDK-8259729: Missed JNFInstanceOf -&gt; IsInstanceOf conversion
    + JDK-8259777: Incorrect predication condition generated by ADLC
    + JDK-8259786: initialize last parameter of getpwuid_r
    + JDK-8259843: initialize dli_fname array before calling
    dll_address_to_library_name
    + JDK-8259869: [macOS] Remove desktop module dependencies on
    JNF Reference APIs
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8259983: do not use uninitialized expand_ms value in
    G1CollectedHeap::expand_heap_after_young_collection
    + JDK-8260030: Improve stringStream buffer handling
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260284: C2: assert(_base == Int) failed: Not an Int
    + JDK-8260380: Upgrade to LittleCMS 2.12
    + JDK-8260420: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8260426: awt debug_mem.c DMem_AllocateBlock might leak
    memory
    + JDK-8260432: allocateSpaceForGP in freetypeScaler.c might
    leak memory
    + JDK-8260616: Removing remaining JNF dependencies in the
    java.desktop module
    + JDK-8260653: Unreachable nodes keep speculative types alive
    + JDK-8260707: java/lang/instrument/PremainClass/
    /InheritAgent0100.java times out
    + JDK-8260925: HttpsURLConnection does not work  with other
    JSSE provider.
    + JDK-8260926: Trace resource exhausted events unconditionally
    + JDK-8261020: Wrong format parameter in
    create_emergency_chunk_path
    + JDK-8261027: AArch64: Support for LSE atomics C++ HotSpot code
    + JDK-8261167: print_process_memory_info add a close call after
    fopen
    + JDK-8261170: Upgrade to freetype 2.10.4
    + JDK-8261198: [macOS] Incorrect JNI parameters in number
    conversion in A11Y code
    + JDK-8261235: C1 compilation fails with
    assert(res-&gt;vreg_number() == index) failed: conversion check
    + JDK-8261261: The version extra fields needs to be overridable
    in jib-profiles.js
    + JDK-8261262: Kitchensink24HStress.java crashed with
    EXCEPTION_ACCESS_VIOLATION
    + JDK-8261354: SIGSEGV at MethodIteratorHost
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261397: try catch Method failing to work when dividing
    an integer by 0
    + JDK-8261422: Adjust problematic String.format calls in
    jdk/internal/util/Preconditions.java outOfBoundsMessage
    + JDK-8261447: MethodInvocationCounters frequently run into
    overflow
    + JDK-8261481: Cannot read Kerberos settings in dynamic store
    on macOS Big Sur
    + JDK-8261505: Test test/hotspot/jtreg/gc/parallel/
    /TestDynShrinkHeap.java killed by Linux OOM Killer
    + JDK-8261601: free memory in early return in
    Java_sun_nio_ch_sctp_SctpChannelImpl_receive0
    + JDK-8261649: AArch64: Optimize LSE atomics in C++ code
    + JDK-8261730: C2 compilation fails with
    assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge
    + JDK-8261752: Multiple GC test are missing memory requirements
    + JDK-8261791: (sctp) handleSendFailed in SctpChannelImpl.c
    potential leaks
    + JDK-8261812: C2 compilation fails with assert(!had_error)
    failed: bad dominance
    + JDK-8261914: IfNode::fold_compares_helper faces
    non-canonicalized bool when running JRuby JSON workload
    + JDK-8262093: java/util/concurrent/tck/JSR166TestCase.java
    failed "assert(false) failed: unexpected node"
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262121: [11u] Redo 8244287: JFR: Methods samples have
    line number 0
    + JDK-8262163: Extend settings printout in jcmd VM.metaspace
    + JDK-8262295: C2: Out-of-Bounds Array Load from Clone Source
    + JDK-8262298: G1BarrierSetC2::step_over_gc_barrier fails with
    assert "bad barrier shape"
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8262461: handle wcstombsdmp return value correctly in
    unix awt_InputMethod.c
    + JDK-8262465: Very long compilation times and high memory
    consumption in C2 debug builds
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262739: String inflation C2 intrinsic prevents insertion
    of anti-dependencies
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8262837: handle split_USE correctly
    + JDK-8262900: ToolBasicTest fails to access HTTP server it
    starts
    + JDK-8263260: [s390] Support latest hardware (z14 and z15)
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8263361: Incorrect arraycopy stub selected by C2 for SATB
    collectors
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8263425: AArch64: two potential bugs in C1
    LIRGenerator::generate_address()
    + JDK-8263448: CTW: fatal error: meet not symmetric
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263557: Possible NULL dereference in
    Arena::destruct_contents()
    + JDK-8263558: Possible NULL dereference in fast path arena
    free if ZapResourceArea is true
    + JDK-8263676: AArch64: one potential bug in C1
    LIRGenerator::generate_address()
    + JDK-8263729: [test] divert spurious output away from stream
    under test in ProcessBuilder Basic test
    + JDK-8263846: Bad JNI lookup getFocusOwner in accessibility
    code on Mac OS X
    + JDK-8264047: Duplicate global variable 'jvm' in libjavajpeg
    and libawt
    + JDK-8264096: slowdebug jvm crashes when StrInflatedCopy match
    rule is not supported
    + JDK-8264151: ciMethod::ensure_method_data() should return
    false is loading resulted in empty state
    + JDK-8264173: [s390] Improve Hardware Feature Detection And
    Reporting
    + JDK-8264190: Harden TLS interop tests
    + JDK-8264223: CodeHeap::verify fails extra_hops assertion in
    fastdebug test
    + JDK-8264328: Broken license in
    javax/swing/JComboBox/8072767/bug8072767.java
    + JDK-8264360: Loop strip mining verification fails with
    "should be on the backedge"
    + JDK-8264626: C1 should be able to inline excluded methods
    + JDK-8264640: CMS ParScanClosure misses a barrier
    + JDK-8264786: [macos] All Swing/AWT apps cause Allow
    Notifications prompt to appear when app is launched
    + JDK-8264821: DirectIOTest fails on a system with large block
    size
    + JDK-8264848: [macos] libjvm.dylib linker warning due to macOS
    version mismatch
    + JDK-8264923: PNGImageWriter.write_zTXt throws Exception with
    a typo
    + JDK-8264958: C2 compilation fails with assert "n is later
    than its clone"
    + JDK-8265099: Revert backport to 11u of 8236859: WebSocket
    over authenticating proxy fails with NPE
    + JDK-8265154: vinserti128 operand mix up for KNL platforms
    + JDK-8265239: Shenandoah: Shenandoah heap region count could
    be off by 1
    + JDK-8265417: Backport of JDK-8249672 breaks Solaris x86 build
    + JDK-8265421: java/lang/String/StringRepeat.java test is
    missing a memory requirement
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8265537: x86 version string truncated after JDK-8249672
    11u backport
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
    + JDK-8265677: CMS: CardTableBarrierSet::write_ref_array_work()
    lacks storestore barrier
    + JDK-8265690: Use the latest Ubuntu base image version in
    Docker testing
    + JDK-8265718: Build failure after JDK-8258414 11u backport
    + JDK-8265750: Fatal error in safepoint.cpp after backport of
    8258414
    + JDK-8265784: [C2] Hoisting of DecodeN leaves MachTemp inputs
    behind
    + JDK-8265938: C2's conditional move optimization does not
    handle top Phi
    + JDK-8266220: keytool still prompt for store password on a
    password-less pkcs12 file if -storetype pkcs12 is specified
    + JDK-8266293: Key protection using PBEWithMD5AndDES fails with
    "java.security.InvalidAlgorithmParameterException: Salt must
    be 8 bytes long"
    + JDK-8266713: [AIX] Build failure after 11u backport of
    JDK-8247753
    + JDK-8266802: Shenandoah: Round up region size to page size
    unconditionally
    + JDK-8266892: avoid maybe-uninitialized gcc warnings on linux
    s390x
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267561: Shenandoah: Reference processing not properly
    setup for outside of cycle degenerated GC
    + JDK-8267599: Revert the change to the default PKCS12
    macAlgorithm and macIterationCount props for 11u/8u/7u
    + JDK-8267641: [11u] 8227609 backport typo
    + JDK-8267721: Enable sun/security/pkcs11 tests for Amazon
    Linux 2 AArch64
    + JDK-8268678: LetsEncryptCA.java test fails as Let's Encrypt
    Authority X3 is retired</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv64 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1629979200">- Added patch:
  * jdk11-glibc234.patch
    + fix build with glibc-2.34 (bsc#1189201)</changelog>
  <changelog author="fstrba@suse.com" date="1631534400">- Modified patch:
  * nss-security-provider.patch
    + revert recent changes making NSS provider the default one
    + fixes bsc#1190252</changelog>
  <changelog author="fstrba@suse.com" date="1631793600">- Added patch:
  * fips.patch
    + implement FIPS support in OpenJDK</changelog>
  <changelog author="fstrba@suse.com" date="1634817600">- Update to upstream tag jdk-11.0.13+8 (October 2021 CPU)
  * Security fixes
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268205: Enhance DTLS client handshake
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Other changes
    + JDK-8024368: private methods are allocated vtable indices
    + JDK-8042902: Test java/net/Inet6Address/serialize/
    /Inet6AddressSerializationTest.java fails intermittently
    + JDK-8140466: ChaCha20 and Poly1305 TLS Cipher Suites
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8158066: SourceDebugExtensionTest fails to rename file
    + JDK-8168304: Make all of DependencyContext_test available in
    product mode
    + JDK-8169246: java/net/DatagramSocket/ReportSocketClosed.java
    fails intermittently with BindException
    + JDK-8181313: SA: Remove libthread_db dependency on Linux
    + JDK-8193214: Incorrect annotations.without.processors
    warnings with JDK 9
    + JDK-8194230: jdk/internal/jrtfs/remote/
    /RemoteRuntimeImageTest.java fails with
    java.lang.NullPointerException
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8199931: java/net/MulticastSocket/
    /UnreferencedMulticastSockets.java fails with "incorrect data
    received"
    + JDK-8206083: Make tools/javac/api/T6265137.java robust to JDK
    version changes
    + JDK-8206350: java/util/Locale/bcp47u/SystemPropertyTests.java
    failed on Mac 10.13 with zh_CN and zh_TW locales.
    + JDK-8207316: java/nio/channels/spi/SelectorProvider/
    /inheritedChannel/InheritedChannelTest.java failed
    + JDK-8208227: tools/jdeps/DotFileTest.java fails on Win-X64
    + JDK-8208363: test/jdk/java/lang/Package/
    /PackageFromManifest.java missing module dependencies
    declaration
    + JDK-8209380: ARM: cleanup maybe-uninitialized and reorder
    compiler warnings
    + JDK-8209768: Refactor java/util/prefs/CheckUserPrefsStorage.sh
    to plain java test
    + JDK-8209772: Refactor shell test java/util/ServiceLoader/
    /basic/basic.sh to java
    + JDK-8209773: Refactor shell test javax/naming/module/basic.sh
    to java
    + JDK-8209832: Refactor jdk/internal/reflect/Reflection/
    /GetCallerClassTest.sh to plain java test
    + JDK-8209930: Refactor java/util/zip/ZipFile/deletetempjar.sh
    to plain java test
    + JDK-8210406: Refactor java.util.PluggableLocale:i18n shell
    tests to plain java tests
    + JDK-8210407: Refactor java.util.Calendar:i18n shell tests to
    plain java tests
    + JDK-8210495: compiler crashes because of illegal signature in
    otherwise legal code
    + JDK-8210669: Some launcher tests assume a pre-JDK 9 run-time
    image layout
    + JDK-8210802: temp files left by tests in
    jdk/java/net/httpclient
    + JDK-8210819: Update the host name in CNameTest.java
    + JDK-8210908: Refactor java/util/prefs/PrefsSpi.sh to plain
    java test
    + JDK-8210934: Move sun/net/www/protocol/http/
    /GetErrorStream.java to OpenJDK
    + JDK-8210959: JShell fails and exits when statement throws an
    exception whose message contains a '%'.
    + JDK-8211055: Provide print to a file (PDF) feature even when
    printer was not connected
    + JDK-8211092: test/jdk/sun/net/www/http/HttpClient/
    /MultiThreadTest.java fails intermittently when cleaning up
    + JDK-8211296: Remove HotSpot deprecation warning suppression
    for Mac/clang
    + JDK-8211325: test/jdk/java/net/Socket/LingerTest.java fails
    with cleaning up
    + JDK-8212040: Compilation error due to wrong usage of
    NSPrintJobDispositionValue in mac10.12
    + JDK-8212695: Add explicit timeout to several HTTP Client tests
    + JDK-8212718: Refactor some annotation processor tests to
    better use collections
    + JDK-8213007: Update the link in test/jdk/sun/security/
    /provider/SecureRandom/DrbgCavp.java
    + JDK-8213137: Remove static initialization of monitor/mutex
    instances
    + JDK-8213235: java/nio/channels/SocketChannel/
    /AsyncCloseChannel.java fails with threads that didn't exit
    + JDK-8213409: Refactor sun.text.IntHashtable:i18n shell tests
    to plain java tests
    + JDK-8213576: Make test AsyncCloseChannel.java run in othervm
    + JDK-8213694: Test Timeout.java should run in othervm mode
    + JDK-8213718: [TEST] Wrong classname in vmTestbase/nsk/stress/
    /except/except002 and except003
    + JDK-8213922: fix ctw stand-alone build
    + JDK-8214195: Align stdout messages in
    test/jdk/java/math/BigInteger/PrimitiveConversionTests.java
    + JDK-8214520: [TEST_BUG] sun/security/mscapi/nonUniqueAliases/
    /NonUniqueAliases.java failed with incorrect jtreg tags order
    + JDK-8214937: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java failed due to unexpected expiration date
    + JDK-8216532: tools/launcher/Test7029048.java fails (Solaris)
    + JDK-8217825: Verify @AfterTest is used correctly in WebSocket
    tests
    + JDK-8218145: block_if_requested is not proper inlined due to
    size
    + JDK-8219417: bump jtreg requiredVersion to b14
    + JDK-8219552: bump jtreg requiredVersion to b14 in
    test/jdk/sanity/client/
    + JDK-8219804: java/net/MulticastSocket/Promiscuous.java fails
    intermittently due to NumberFormatException
    + JDK-8220445: Support for side by side MSVC Toolset versions
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8223050: JVMCI: findUniqueConcreteMethod() should not use
    Dependencies::find_unique_concrete_method() for non-virtual
    methods
    + JDK-8224853: CDS address sanitizer errors
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225583: Examine the HttpResponse.BodySubscribers for
    null handling and multiple subscriptions
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8225790: Two NestedDialogs tests fail on Ubuntu
    + JDK-8226319: Add forgotten test/jdk/java/net/httpclient/
    /BodySubscribersTest.java
    + JDK-8226533: JVMCI: findUniqueConcreteMethod should handle
    statically bindable methods directly
    + JDK-8226602: Test convenience reactive primitives from
    java.net.http with RS TCK
    + JDK-8226683: Remove review suggestion from fix to 8219804
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227766: CheckUnhandledOops is broken in MemAllocator
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8230674: Heap dumps should exclude dormant CDS archived
    objects of unloaded classes
    + JDK-8230808: Remove Access::equals()
    + JDK-8230841: Remove oopDesc::equals()
    + JDK-8231717: Improve performance of charset decoding when
    charset is always compactable
    + JDK-8232243: Wrong caret position in JTextPane on Windows
    with a screen resolution &gt; 100%
    + JDK-8232782: Shenandoah: streamline post-LRB CAS barrier
    (aarch64)
    + JDK-8233790: Forward output from heap dumper to jcmd/jmap
    + JDK-8233989: Create an IPv4 version of
    java/net/MulticastSocket/SetLoopbackMode.java
    + JDK-8234510: Remove file seeking requirement for writing a
    heap dump
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8235216: typo in test filename
    + JDK-8235866: bump jtreg requiredVersion to 4.2b16
    + JDK-8236111: narrow allowSmartActionArgs disabling
    + JDK-8236413: AbstractConnectTimeout should tolerate both
    NoRouteToHostException and UnresolvedAddressException
    + JDK-8236671: NullPointerException in JKS keystore
    + JDK-8238930: problem list compiler/c2/Test8004741.java
    + JDK-8238943: switch to jtreg 5.0
    + JDK-8240555: Using env of JAVA_TOOL_OPTIONS and _JAVA_OPTIONS
    breaks QuietOption.java test
    + JDK-8240983: Incorrect copyright header in Apache Santuario
    2.1.3 files
    + JDK-8241336: Some java.net tests failed with
    NoRouteToHostException on MacOS with special network
    configuration
    + JDK-8241353: NPE in ToolProvider.getSystemJavaCompiler
    + JDK-8241768: git needs .gitattributes
    + JDK-8242882: opening jar file with large manifest might throw
    NegativeArraySizeException
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8245134: test/lib/jdk/test/lib/security/
    /KeyStoreUtils.java should allow to specify aliases
    + JDK-8246261: TCKLocalTime.java failed due to "AssertionError:
    expected [18:14:22] but found [18:14:23]"
    + JDK-8246387: switch to jtreg 5.1
    + JDK-8247421: [TESTBUG] ReturnBlobToWrongHeapTest.java failed
    allocating blob
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8248352: [TEST_BUG] Test test/jdk/java/awt/font/
    /TextLayout/ArabicDiacriticTest.java can leave frame open
    + JDK-8248403: AArch64: Remove uses of kernel integer types
    + JDK-8248414: AArch64: Remove uses of long and unsigned long
    ints
    + JDK-8248657: Windows: strengthening in ThreadCritical
    regarding memory model
    + JDK-8248666: AArch64: Use THREAD_LOCAL instead of __thread
    + JDK-8248668: AArch64: Avoid MIN/MAX macros when using MSVC
    + JDK-8248671: AArch64: Remove unused variables
    + JDK-8248682: AArch64: Use ATTRIBUTE_ALIGNED helper
    + JDK-8248816: C1: Fix signature conflict in
    LIRGenerator::strength_reduce_multiply
    + JDK-8249095: tools/javac/launcher/SourceLauncherTest.java
    fails on Windows
    + JDK-8249548: backward focus traversal gets stuck in button
    group
    + JDK-8249773: Upgrade ReceiveISA.java test to be resilient to
    failure due to stray packets and interference
    + JDK-8249897: jdk/javadoc/tool/LangVers.java uses @ignore w/o
    bug-id
    + JDK-8249898: jdk/javadoc/tool/6176978/T6176978.java uses
    @ignore w/o bug-id
    + JDK-8249899: jdk/javadoc/tool/InlineTagsWithBraces.java uses
    @ignore w/o bug-id
    + JDK-8250588: Shenandoah: LRB needs to save/restore fp
    registers for runtime call
    + JDK-8250824: AArch64: follow up for JDK-8248414
    + JDK-8251166: Add automated testcases for changes done in
    JDK-8214112
    + JDK-8251252: Add automated testcase for fix done in
    JDK-8214253
    + JDK-8251254: Add automated test for fix done in JDK-8218472
    + JDK-8251361: Potential race between Logger configuration and
    GCs in HttpURLConWithProxy test
    + JDK-8251549: Update docs on building for Git
    + JDK-8251945: SIGSEGV in
    PackageEntry::purge_qualified_exports()
    + JDK-8252194: Add automated test for fix done in JDK-8218469
    + JDK-8252648: Shenandoah: name gang tasks consistently
    + JDK-8252825: Add automated test for fix done in JDK-8218479
    + JDK-8252853: AArch64: gc/shenandoah/TestVerifyJCStress.java
    fails intermittently with C1
    + JDK-8252857: AArch64: Shenandoah C1 CAS is not sequentially
    consistent
    + JDK-8253048: AArch64: When CallLeaf, no need to preserve
    callee-saved registers in caller
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253631: Remove unimplemented CompileBroker methods after
    JEP-165
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8253899: Make IsClassUnloadingEnabled signature match
    specification
    + JDK-8254024: Enhance native libs for AWT and Swing to work
    with GraalVM Native Image
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254244: Some code emitted by TemplateTable::branch is
    unused when running TieredCompilation
    + JDK-8254270: linux 32 bit build doesn't compile
    libjdwp/log_messages.c
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8254850: Update terminology in java.awt.GridBagLayout
    source code comments
    + JDK-8255255: Update Apache Santuario (XML Signature) to
    version 2.2.1
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255452: Doing GC during JVMTI MethodExit event posting
    breaks return oop
    + JDK-8255718: Zero: VM should know it runs in interpreter-only
    mode
    + JDK-8255790: GTKL&amp;F: Java 16 crashes on initialising GTKL&amp;F
    on Manjaro Linux
    + JDK-8255810: Zero: build fails without JVMTI
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256215: Shenandoah: re-organize saving/restoring machine
    state in assembler code
    + JDK-8256267: Relax compiler/floatingpoint/NaNTest.java for
    x86_32 and lower -XX:+UseSSE
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8257148: Remove obsolete code in AWTView.m
    + JDK-8257497: Update keytool to create AKID from the SKID of
    the issuing certificate as specified by RFC 5280
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8257913: Add more known library locations to simplify
    Linux cross-compilation
    + JDK-8258703: Incorrect 512-bit vector registers restore on
    x86_32
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8259535: ECDSA SignatureValue do not always have the
    specified length
    + JDK-8259679: GitHub actions should use MSVC 14.28
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8260923: Add more tests for SSLSocket input/output
    shutdown
    + JDK-8261072: AArch64: Fix MacroAssembler::get_thread
    convention
    + JDK-8261147: C2: Node is wrongly marked as reduction
    resulting in a wrong execution due to wrong vector instructions
    + JDK-8261238: NMT should not limit baselining by size threshold
    + JDK-8261496: Shenandoah: reconsider pacing updates memory
    ordering
    + JDK-8261652: Remove some dead comments from os_bsd_x86
    + JDK-8261846: [JVMCI] c2v_iterateFrames can get out of sync
    with the StackFrameStream
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262017: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8262392: Update Mesa 3-D Headers to version 21.0.3
    + JDK-8262409: sun/security/ssl/SSLSocketImpl/
    /SSLSocketImplThrowsWrongExceptions. SSL test failures caused
    by java failed with "Server reported the wrong exception"
    + JDK-8262470: Printed GlyphVector outline with low DPI has bad
    quality on Windows
    + JDK-8262862: Harden tests sun/security/x509/URICertStore/
    /ExtensionsWithLDAP.java and krb5/canonicalize/Test.java
    + JDK-8263136: C4530 was reported from VS 2019 at access bridge
    + JDK-8263227: C2: inconsistent spilling due to dead nodes in
    exception block
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8263407: SPARC64 detection fails on Athena (SPARC64-X)
    + JDK-8263432: javac may report an invalid package/class clash
    on case insensitive filesystems
    + JDK-8263490: [macos] Crash occurs on JPasswordField with
    activated InputMethod
    + JDK-8263531: Remove unused buffer int
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8263776: [JVMCI] add helper to perform Java upcalls
    + JDK-8264016: [JVMCI] add some thread local fields for use by
    JVMCI
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8265132: C2 compilation fails with assert "missing
    precedence edge"
    + JDK-8265231: (fc) ReadDirect and WriteDirect tests fail after
    fix for JDK-8264821
    + JDK-8265335: Epsilon: Minor typo in EpsilonElasticTLABDecay
    description
    + JDK-8265756: AArch64: initialize memory allocated for locals
    according to Windows AArch64 stack page growth requirement in
    template interpreter
    + JDK-8265761: Font with missed font family name is not
    properly printed on Windows
    + JDK-8265773: incorrect jdeps message "jdk8internals" to
    describe a removed JDK internal API
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
    + JDK-8266018: Shenandoah: fix an incorrect assert
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8266248: Compilation failure in
    PLATFORM_API_MacOSX_MidiUtils.c with Xcode 12.5
    + JDK-8266288: assert root method not found in
    witnessed_reabstraction_in_supers is too strong
    + JDK-8266404: Fatal error report generated with
  - XX:+CrashOnOutOfMemoryError should not contain suggestion to
    submit a bug report
    + JDK-8266480: Implicit null check optimization does not update
    control of hoisted memory operation
    + JDK-8266615: C2 incorrectly folds subtype checks involving an
    interface array
    + JDK-8266642: Improve ResolvedMethodTable hash function
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8266761: AssertionError in
    sun.net.httpserver.ServerImpl.responseCompleted
    + JDK-8266813: Shenandoah: Use shorter instruction sequence for
    checking if marking in progress
    + JDK-8267042: bug in monitor locking/unlocking on ARM32 C1 due
    to uninitialized BasicObjectLock::_displaced_header
    + JDK-8267348: Rewrite gc/epsilon/TestClasses.java to use
    Metaspace with less classes
    + JDK-8267396: Avoid recording "pc" in unhandled oops detector
    for better performance
    + JDK-8267399: C2: java/text/Normalizer/ConformanceTest.java
    test failed with assertion
    + JDK-8267424: CTW: C1 fails with "State must not be null"
    + JDK-8267459: Pasting Unicode characters into JShell does not
    work.
    + JDK-8267625: AARCH64: typo in LIR_Assembler::emit_profile_type
    + JDK-8267666: Add option to jcmd GC.heap_dump to use existing
    file
    + JDK-8267695: Bump update version for OpenJDK: jdk-11.0.13
    + JDK-8267751: (test) jtreg.SkippedException has no serial
    VersionUID
    + JDK-8267773: PhaseStringOpts::int_stringSize doesn't handle
    min_jint correctly
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8268127: Shenandoah: Heap size may be too small for
    region to align to large page size
    + JDK-8268261: C2: assert(n != __null) failed: Bad immediate
    dominator info.
    + JDK-8268347: C2: nested locks optimization may create
    unbalanced monitor enter/exit code
    + JDK-8268360: Missing check for infinite loop during node
    placement
    + JDK-8268362: [REDO] C2 crash when compile negative
    Arrays.copyOf length after loop
    + JDK-8268366: Incorrect calculation of has_fpu_registers in C1
    linear scan
    + JDK-8268369: SIGSEGV in PhaseCFG::implicit_null_check due to
    missing null check
    + JDK-8268417: Add test from JDK-8268360
    + JDK-8268427: Improve AlgorithmConstraints:checkAlgorithm
    performance
    + JDK-8268617: [11u REDO] - WebSocket over authenticating proxy
    fails with NPE
    + JDK-8268620: InfiniteLoopException test may fail on x86
    platforms
    + JDK-8268635: Corrupt oop in ClassLoaderData
    + JDK-8268699: Shenandoah: Add test for JDK-8268127
    + JDK-8268771: javadoc -notimestamp option does not work on
    index.html
    + JDK-8268775: Password is being converted to String in
    AccessibleJPasswordField
    + JDK-8268776: Test `ADatagramSocket.java` missing /othervm
    from @run tag
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8269304: Regression ~5% in 2005 in b27
    + JDK-8269415: [11u] Remove ea from
    DEFAULT_PROMOTED_VERSION_PRE in OpenJDK 11u
    + JDK-8269478: Shenandoah: gc/shenandoah/mxbeans tests should
    be more resilient
    + JDK-8269529: javax/swing/reliability/
    /HangDuringStaticInitialization.java fails in Windows debug
    build
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269614: [s390] Interpreter checks wrong bit for slow
    path instance allocation
    + JDK-8269650: Optimize gc-locker in
    [Get|Release]StringCritical for latin string
    + JDK-8269661: JNI_GetStringCritical does not lock char array
    + JDK-8269668: [aarch64] java.library.path not including
    /usr/lib64
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
    + JDK-8269795: C2: Out of bounds array load floats above its
    range check in loop peeling resulting in SEGV
    + JDK-8269847: JDK-8269594 backport breaks 11u builds
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8269882: stack-use-after-scope in NewObjectA
    + JDK-8269934: RunThese24H.java failed with
    EXCEPTION_ACCESS_VIOLATION in
    java_lang_Thread::get_thread_status
    + JDK-8270096: Shenandoah: Optimize gc/shenandoah/
    /TestRefprocSanity.java for interpreter mode
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8270184: [TESTBUG] Add coverage for jvmci
    ResolvedJavaType.toJavaName() for lambdas
    + JDK-8270196: [11u] [JVMCI] JavaType.toJavaName() returns
    incorrect type name for lambdas
    + JDK-8270556: Exclude security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA
    + JDK-8270893: IndexOutOfBoundsException while reading large
    TIFF file
    + JDK-8272078: Wrong Checksums in Temurin BootJDK dependencies
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272131: PhaseMacroExpand::generate_slow_arraycopy crash
    when clone null CallProjections.fallthrough_ioproj
    + JDK-8272197: Update 11u GHA workflow with Shenandoah
    configurations
    + JDK-8272332: --with-harfbuzz=system doesn't add -lharfbuzz
    after JDK-8255790
    + JDK-8272472: StackGuardPages test doesn't build with glibc
    2.34
    + JDK-8272602: [macos] not all KEY_PRESSED events sent when
    control modifier is used
    + JDK-8272628: Problemlist gc/stress/gcbasher/
    /TestGCBasherWithCMS.java for x86_32
    + JDK-8272700: [macos] Build failure with Xcode 13.0 after
    JDK-8264848
    + JDK-8272772: Shenandoah: compiler/c2/aarch64/
    /TestVolatilesShenandoah.java fails in 11u
    + JDK-8273939: Backport of 8248414 to JDK11 breaks
    MacroAssembler::adrp
- Remove the unneeded icedtea-sound provider
- Removed patches:
  * icedtea-sound-1.0.1-jdk9.patch
  * icedtea-sound-soundproperties.patch
    + not needed since the icedtea-sound provider is removed
  * jdk11-glibc234.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1635940800">- Modified patches:
  * system-crypto-policy.patch
    + rediff to changed context
  * fips.patch
    + Allow plain key import in fips mode unless
    com.suse.fips.plainKeySupport is set to false</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1643630400">- Update to upstream tag jdk-11.0.14+9 (January 2022 CPU)
  * New features
    + JDK-8248238: Implementation: JEP 388: Windows AArch64 Support
  * Security fixes
    + JDK-8217375: jarsigner breaks old signature with long lines
    in manifest
    + JDK-8251329: (zipfs) Files.walkFileTree walks infinitely if
    zip has dir named "." inside
    + JDK-8264934, CVE-2022-21248, bnc#1194926: Enhance cross VM serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bnc#1194937: Better String matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270386, CVE-2022-21291, bsc#1194925: Better verification
    of scan methods
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance construction
    of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution of
    URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning of
    XML entities
    + JDK-8270952, CVE-2022-21277, bsc#1194930: Improve TIFF file
    handling
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial forms
    for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
    + JDK-8274096, CVE-2022-21366, bsc#1194927: Improve decoding of
    image files
    + JDK-8279541: Improve HarfBuzz
  * Other changes
    + JDK-6849922: java/awt/Choice/ChoiceKeyEventReaction/
    /ChoiceKeyEventReaction.html fails
    + JDK-7105119: [TEST_BUG] [macosx] In test
    UIDefaults.toString() must be called with the invokeLater()
    + JDK-7151826: [TEST_BUG] [macosx] The test
    javax/swing/JPopupMenu/4966112/bug4966112.java not for mac
    + JDK-7179006: [macosx] Print-to-file doesn't work: printing to
    the default printer instead
    + JDK-8015602: [macosx] Test javax/swing/SpringLayout/4726194/
    /bug4726194.java fails on MacOSX
    + JDK-8034084: nsk.nsk/jvmti/ThreadStart/threadstart003 Wrong
    number of thread end events
    + JDK-8039261: [TEST_BUG]: There is not a minimal security
    level in Java Preferences and the TestApplet.html is blocked.
    + JDK-8047218: [TEST_BUG] java/awt/FullScreen/AltTabCrashTest/
    /AltTabCrashTest.java fails with exception
    + JDK-8075909: [TEST_BUG] The regression-swing case failed as
    it does not have the 'Open' button when select 'subdir' folder
    with NimbusLAF
    + JDK-8078219: Verify lack of @test tag in files in java/net
    test directory
    + JDK-8080569: java/lang/ProcessBuilder/DestroyTest.java fails
    with "RuntimeException: Process terminated prematurely"
    + JDK-8081652: [TESTBUG] java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java timed out intermittently
    + JDK-8129310: java/net/Socket/asyncClose/AsyncClose.java fails
    intermittently
    + JDK-8131745: java/lang/management/ThreadMXBean/
    /AllThreadIds.java still fails intermittently
    + JDK-8136517: [macosx] Test java/awt/Focus/8073453/
    /AWTFocusTransitionTest.java fails on MacOSX
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8143021: [TEST_BUG] Test javax/swing/JColorChooser/
    /Test6541987.java fails
    + JDK-8159597: [TEST_BUG] closed/javax/swing/JPopupMenu/4760494/
    /bug4760494.java leaves key pressed
    + JDK-8159904: [TEST_BUG] Failure on solaris of
    java/awt/Window/MultiWindowApp/MultiWindowAppTest.java
    + JDK-8163086: java/awt/Window/TranslucentJAppletTest/
    /TranslucentJAppletTest.java fails
    + JDK-8165828: [TEST_BUG] The reg case: javax/swing/plaf/metal/
    /MetalIcons/MetalHiDPIIconsTest.java failed as No Metal Look
    and Feel
    + JDK-8169953: JComboBox/8057893: ComboBoxEdited event is not
    fired! on Windows
    + JDK-8169954: JFileChooser/8021253: java.lang.RuntimeException:
    Default button is not pressed
    + JDK-8169959: javax/swing/JTable/6263446/bug6263446.java:
    Table should be editing
    + JDK-8171381: [TEST_BUG] [macos] javax/swing/JPopupMenu/
    /7156657/bug7156657.java fails on OS X
    + JDK-8171998: javax/swing/JMenu/4692443/bug4692443.java fails
    on Windows
    + JDK-8174819: java/nio/file/WatchService/LotsOfEvents.java
    fails intermittently
    + JDK-8179880: Refactor javax/security shell tests to plain
    java tests
    + JDK-8180568: Refactor javax/crypto shell tests to plain java
    tests
    + JDK-8180569: Refactor sun/security/krb5/ shell tests to plain
    java tests
    + JDK-8180571: Refactor sun/security/pkcs11 shell tests to
    plain java tests and fix failures
    + JDK-8180573: Refactor sun/security/tools shell tests to plain
    java tests
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8195703: BasicJDWPConnectionTest.java: 'App exited
    unexpectedly with 2'
    + JDK-8196096: javax/swing/JPopupMenu/6580930/bug6580930.java
    fails
    + JDK-8197560: test javax/swing/JTree/8003400/Test8003400.java
    fails
    + JDK-8197800: Test java/awt/Focus/NonFocusableWindowTest/
    /NoEventsTest.java fails on Windows
    + JDK-8197811: Test java/awt/Choice/PopupPosTest/
    /PopupPosTest.java fails on Windows
    + JDK-8198616: java/awt/Focus/6378278/InputVerifierTest.java
    fails on mac
    + JDK-8198617: java/awt/Focus/6382144/EndlessLoopTest.java
    fails on mac
    + JDK-8198619: java/awt/Focus/FocusTraversalPolicy/
    /ButtonGroupLayoutTraversal/ButtonGroupLayoutTraversalTest.java
    fails on mac
    + JDK-8198623: java/awt/KeyboardFocusmanager/TypeAhead/
    /EnqueueWithDialogButtonTest/EnqueueWithDialogButtonTest.java
    fails on mac
    + JDK-8198624: java/awt/KeyboardFocusmanager/TypeAhead/
    /SubMenuShowTest/SubMenuShowTest.html fails on mac
    + JDK-8199138: Add RISC-V support to Zero
    + JDK-8199529: javax/swing/text/Utilities/8142966/
    /SwingFontMetricsTest.java fails on windows
    + JDK-8201224: Make string buffer size dynamic in
    mlvmJvmtiUtils.c
    + JDK-8202342: [Graal] fromTonga/nsk/jvmti/unit/
    /FollowReferences/followref003/TestDescription.java fails with
    "Location mismatch" errors
    + JDK-8204161: [TESTBUG] auto failed with the "Applet thread
    threw exception: java.lang.UnsupportedOperationException"
    exception
    + JDK-8206085: Refactor
    langtools/tools/javac/versions/Versions.java
    + JDK-8207936: TestZipFile failed with java.lang.AssertionError
    exception
    + JDK-8208242: Add @requires to vmTestbase/gc/g1 tests
    + JDK-8209611: use C++ compiler for hotspot tests
    + JDK-8210182: Remove macros for C compilation from vmTestBase
    but non jvmti
    + JDK-8210198: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[A-F] tests
    + JDK-8210205: build fails on AIX in hotspot cpp tests (for
    example getstacktr001.cpp)
    + JDK-8210242: [TESTBUG] vmTestbase/nsk/stress/jni/
    /jnistress001.java crashes with EXCEPTION_ACCESS_VIOLATION
    on windows-x86
    + JDK-8210353: Move java/util/Arrays/TimSortStackSize2.java
    back to tier1
    + JDK-8210385: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[A-N] tests
    + JDK-8210392: assert(Compile::current()-&gt;live_nodes() &lt;
    Compile::current()-&gt;max_node_limit()) failed: Live Node limit
    exceeded limit
    + JDK-8210395: Add doc to SecurityTools.java
    + JDK-8210429: Clean up JNI_ENV_ARG for
    vmTestbase/jvmti/Get[G-Z] tests
    + JDK-8210481: Remove #ifdef cplusplus from vmTestbase
    + JDK-8210593: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[N-R] tests
    + JDK-8210665: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti[R-U] tests
    + JDK-8210689: Remove the multi-line old C style for string
    literals
    + JDK-8210700: Clean up JNI_ENV_ARG and factorize the macros
    for vmTestbase/jvmti/unit tests
    + JDK-8210726: Fix up a few minor nits forgotten by JDK-8210665
    + JDK-8210920: Native C++ tests are not using CXXFLAGS
    + JDK-8210984: [TESTBUG] hs203t003 fails with "# ERROR:
    hs203t003.cpp, 218: NSK_CPP_STUB2 ( ResumeThread, jvmti,
    thread)"
    + JDK-8211036: Remove the NSK_STUB macros from vmTestbase for
    non jvmti
    + JDK-8211131: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[G-I]*
    + JDK-8211148: var in implicit lambdas shouldn't be accepted
    for source &lt; 11
    + JDK-8211171: move JarUtils to top-level testlibrary
    + JDK-8211227: Inconsistent TLS protocol version in debug output
    + JDK-8211261: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[A-G]*
    + JDK-8211432: [REDO] Handle JNIGlobalRefLocker.cpp
    + JDK-8211782: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/[I-S]*
    + JDK-8211801: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[A-E]
    + JDK-8211899: Remove the NSK_CPP_STUB macros from vmTestbase
    for jvmti/scenarios/[E-M]
    + JDK-8211905: Remove multiple casts for EM06 file
    + JDK-8211999: Window positioning bugs due to overlapping
    GraphicsDevice bounds (Windows/HiDPI)
    + JDK-8212082: Remove the NSK_CPP_STUB macros for remaining
    vmTestbase/jvmti/[sS]*
    + JDK-8212083: Handle remaining gc/lock native code and fix two
    strings
    + JDK-8212148: Remove remaining NSK_CPP_STUBs
    + JDK-8213110: Remove the use of applets in automatic tests
    + JDK-8213189: Make restricted headers in HTTP Client
    configurable and remove Date by default
    + JDK-8213263: fix legal headers in test/langtools
    + JDK-8213296: Fix legal headers in test/jdk/java/net
    + JDK-8213301: Fix legal headers in jdk logging tests
    + JDK-8213305: Fix legal headers in test/java/math
    + JDK-8213306: Fix legal headers in test/java/nio
    + JDK-8213328: Update test copyrights in test/java/util/zip and
    test/jdk/tools
    + JDK-8213330: Fix legal headers in i18n tests
    + JDK-8213707: [TEST] vmTestbase/nsk/stress/except/
    /except011.java failed due to wrong class name
    + JDK-8214469: [macos] PIT: java/awt/Choice/
    /ChoiceKeyEventReaction/ChoiceKeyEventReaction.java fails
    + JDK-8215410: Regression test for JDK-8214994
    + JDK-8215568: Refactor SA clhsdb tests to use ClhsdbLauncher
    + JDK-8215624: Add parallel heap iteration for jmap \u2013histo
    + JDK-8215889: assert(!_unloading) failed: This oop is not
    available to unloading class loader data with ZGC
    + JDK-8216318: The usage of Disposer in the java.awt.Robot can
    be deleted
    + JDK-8216417: cleanup of IPv6 scope-id handling
    + JDK-8217377: javax/swing/JPopupMenu/6583251/bug6583251.java
    failed with UnsupportedOperation exception
    + JDK-8217438: Adapt tools//launcher/Test7029048.java for AIX
    + JDK-8217633: Configurable extensions with system properties
    + JDK-8217882: java/net/httpclient/MaxStreams.java failed once
    + JDK-8217903: java/net/httpclient/Response204.java fails with
    404
    + JDK-8218483: Crash in
    "assert(_daemon_threads_count-&gt;get_value() &gt; daemon_count)
    failed: thread count mismatch 5 : 5"
    + JDK-8219986: Change to Xcode 10.1 for building on Macosx at
    Oracle
    + JDK-8220575: Correctly format test URI's that contain a
    retrieved IPv6 address
    + JDK-8221259: New tests for java.net.Socket to exercise long
    standing behavior
    + JDK-8221305: java/awt/FontMetrics/MaxAdvanceIsMax.java fails
    on MacOS + Solaris
    + JDK-8221902: PIT: javax/swing/JRadioButton/FocusTraversal/
    /FocusTraversal.java fails on ubuntu
    + JDK-8221903: PIT: javax/swing/RepaintManager/IconifyTest/
    /IconifyTest.java fails on ubuntu18.04
    + JDK-8222446: assert(C-&gt;env()-&gt;system_dictionary_modification_counter_changed())
    failed: Must invalidate if TypeFuncs differ
    + JDK-8223137: Rename predicate 'do_unroll_only()' to
    'is_unroll_only()'.
    + JDK-8223138: Small clean-up in loop-tree support.
    + JDK-8223139: Rename mandatory policy-do routines.
    + JDK-8223140: Clean-up in 'ok_to_convert()'
    + JDK-8223141: Change (count) suffix _ct into _cnt.
    + JDK-8223400: Replace some enums with static const members in
    hotspot/runtime
    + JDK-8223658: Performance regression of XML.validation in
    13-b19
    + JDK-8223923: C2: Missing interference with mismatched unsafe
    accesses
    + JDK-8224829: AsyncSSLSocketClose.java has timing issue
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226514: Replace wildcard address with loopback or local
    host in tests - part 17
    + JDK-8226943: compile error in libfollowref003.cpp  with XCode
    10.2 on macosx
    + JDK-8228442: DHKeyExchange/LegacyDHEKeyExchange.java failed
    due to "SSLException: An established connection was aborted by
    the software in your host machine"
    + JDK-8228508: [TESTBUG] java/net/httpclient/SmokeTest.java
    fails on Windows7
    + JDK-8229935: [TEST_BUG]: bug8132119.java inconsistently
    positions text
    + JDK-8230019: [REDO] compiler/types/correctness/* tests fail
    with "assert(recv == __null || recv-&gt;is_klass()) failed: wrong
    type"
    + JDK-8230067: Add optional automatic retry when running jtreg
    tests
    + JDK-8230228: [TESTBUG] Several runtime/ErrorHandling tests
    may fail on some platforms
    + JDK-8231501: VM crash in
    MethodData::clean_extra_data(CleanExtraDataClosure*):
    fatal error: unexpected tag 99
    + JDK-8233403: Improve verbosity of some httpclient tests
    + JDK-8233550: [TESTBUG] JTree tests fail regularly on MacOS
    + JDK-8233552: [TESTBUG] JTable Test bug7068740.java fails on
    MacOS
    + JDK-8233553: [TESTBUG] JSpinner test bug4973721.java fails on
    MacOS
    + JDK-8233555: [TESTBUG] JRadioButton tests failing on MacoS
    + JDK-8233556: [TESTBUG] JPopupMenu tests fail on MacOS
    + JDK-8233559: [TESTBUG] TestNimbusOverride.java is failing on
    macos
    + JDK-8233560: [TESTBUG] ToolTipManager/Test6256140.java  is
    failing on macos
    + JDK-8233561: [TESTBUG] Swing text test bug8014863.java fails
    on macos
    + JDK-8233562: [TESTBUG] Swing StyledEditorKit test
    bug4506788.java fails on MacOS
    + JDK-8233564: [TESTBUG] MouseComboBoxTest.java is failing
    + JDK-8233566: [TESTBUG] KeyboardFocusManager tests failing on
    MacoS
    + JDK-8233567: [TESTBUG] FocusSubRequestTest.java fails on macos
    + JDK-8233569: [TESTBUG] JTextComponent test bug6361367.java
    fails on macos
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8233634: [TESTBUG] Swing text test bug4278839.java fails
    on macos
    + JDK-8233635: [TESTBUG] ProgressMonitorEscapeKeyPress.java
    fails on macos
    + JDK-8233637: [TESTBUG] Swing
    ActionListenerCalledTwiceTest.java fails on macos
    + JDK-8233638: [TESTBUG] Swing test
    ScreenMenuBarInputTwice.java fails on macos
    + JDK-8233641: [TESTBUG] JMenuItem test bug4171437.java fails
    on macos
    + JDK-8233642: [TESTBUG] JMenuBar test bug 4750590.java  fails
    on macos
    + JDK-8233643: [TESTBUG] JMenu test bug4515762.java fails on
    macos
    + JDK-8233644: [TESTBUG] JInternalFrame test bug8020708.java is
    failing on macos
    + JDK-8233647: [TESTBUG] JColorChooser/Test8051548.java is
    failing on macos
    + JDK-8234802: [TESTBUG] Test Right Mouse Button Drag Gesture
    Recognition in all the platforms
    + JDK-8234823: java/net/Socket/Timeouts.java testcase
    testTimedConnect2() fails on Windows 10
    + JDK-8235784: java/lang/invoke/VarHandles/
    /VarHandleTestByteArrayAsInt.java fails due to timeout with
    fastdebug bits
    + JDK-8236042: [TESTBUG] serviceability/sa/ClhsdbCDSCore.java
    fails with -Xcomp -XX:TieredStopAtLevel=1
    + JDK-8236177: assert(status == 0) failed: error ETIMEDOUT(60),
    cond_wait
    + JDK-8236596: HttpClient leaves HTTP/2 sockets in CLOSE_WAIT,
    when using proxy tunnel
    + JDK-8237354: Add option to jcmd to write a gzipped heap dump
    + JDK-8237589: Fix copyright header formatting
    + JDK-8238677: java/net/httpclient/ssltest/CertificateTest.java
    should not specify TLS version
    + JDK-8239334: Tab Size does not work correctly in JTextArea
    with setLineWrap on
    + JDK-8239422: [TESTBUG]
    compiler/c1/TestPrintIRDuringConstruction.java failed when C1
    is disabled
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240256: Better resource cleaning for SunPKCS11 Provider
    + JDK-8242044: Add basic HTTP/1.1 support to the HTTP/2 Test
    Server
    + JDK-8242526: PIT: javax/swing/JInternalFrame/8020708/
    /bug8020708.java fails in mach5 ubuntu system
    + JDK-8242793: Incorrect copyright header in
    ContinuousCallSiteTargetChange.java
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244292: Headful clients failing with
  - -illegal-access=deny
    + JDK-8245147: Refactor and improve utility of
    test/langtools/tools/javac/versions/Versions.java
    + JDK-8245165: Update bug id for
    javax/swing/text/StyledEditorKit/4506788/bug4506788.java in
    ProblemList
    + JDK-8245665: Test WeakAlg.java should only make sure no
    warning for weak signature algorithms by keytool on root CA
    + JDK-8246114: java/net/MulticastSocket/Promiscuous.java fails
    after 8241072 (multi-homed systems)
    + JDK-8246807: Incorrect copyright header in
    TimeZoneDatePermissionCheck.sh
    + JDK-8247403: JShell: No custom input (e.g. from GUI) possible
    with JavaShellToolBuilder
    + JDK-8247510: typo in IllegalHandshakeMessage
    + JDK-8248187: [TESTBUG] javax/swing/plaf/basic/
    /BasicGraphicsUtils/8132119/bug8132119.java fails with String
    is not properly drawn
    + JDK-8248341: ProblemList java/lang/management/ThreadMXBean/
    /ThreadMXBeanStateTest.java
    + JDK-8248500: AArch64: Remove the r18 dependency on Windows
    AArch64
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8249195: Change to Xcode 11.3.1 for building on Macos at
    Oracle
    + JDK-8250521: Configure initial RTO to use minimal retry for
    loopback connections on Windows
    + JDK-8250810: Push missing parts of JDK-8248817
    + JDK-8250839: Improve test template SSLEngineTemplate with
    SSLContextTemplate
    + JDK-8250863: Build error with GCC 10 in NetworkInterface.c
    and k_standard.c
    + JDK-8250888: nsk/jvmti/scenarios/general_functions/GF08/
    /gf08t001/TestDriver.java fails
    + JDK-8251155: HostIdentifier fails to canonicalize hostnames
    starting with digits
    + JDK-8251377: [macos11] JTabbedPane selected tab text is
    barely legible
    + JDK-8251570: JDK-8215624 causes assert(worker_id &lt;
    _n_workers) failed: Invalid worker_id
    + JDK-8251930: AArch64: Native types mismatch in hotspot
    + JDK-8252049: Native memory leak in ciMethodData ctor
    + JDK-8252051: Make mlvmJvmtiUtils strncpy uses GCC 10.x
    friendly
    + JDK-8252114: Windows-AArch64: Enable and test ZGC and
    ShenandoahGC
    + JDK-8253015: Aarch64: Move linux code out from generic CPU
    feature detection
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/bug7154841.java
    fail on big screens
    + JDK-8253497: Core Libs Terminology Refresh
    + JDK-8253682: The AppletInitialFocusTest1.java is unstable
    + JDK-8253763: ParallelObjectIterator should have virtual
    destructor
    + JDK-8253866: Security Libs Terminology Refresh
    + JDK-8254802: ThrowingPushPromisesAsStringCustom.java fails in
    "try throwing in GET_BODY"
    + JDK-8255227: java/net/httpclient/FlowAdapterPublisherTest.java
    intermittently failing with TestServer: start exception:
    java.io.IOException: Invalid preface
    + JDK-8255264: Support for identifying the full range of IPv4
    localhost addresses on Windows
    + JDK-8255716: AArch64: Regression: JVM crashes if manually
    offline a core
    + JDK-8255722: Create a new test for rotated blit
    + JDK-8256009: Remove src/hotspot/share/adlc/Test/i486.ad
    + JDK-8256066: Tests use deprecated TestNG API that is no
    longer available in new versions
    + JDK-8256152: tests fail because of ambiguous method resolution
    + JDK-8256182: Update qemu-debootstrap cross-compilation recipe
    + JDK-8256201: java/awt/FullScreen/FullscreenWindowProps/
    /FullscreenWindowProps.java failed
    + JDK-8256202: Some tweaks for jarsigner tests
    PosixPermissionsTest and SymLinkTest
    + JDK-8256372: [macos] Unexpected symbol was displayed on
    JTextField with Monospaced font
    + JDK-8256956: RegisterImpl::max_slots_per_register is
    incorrect on AMD64
    + JDK-8258457: testlibrary_tests/ctw/JarDirTest.java fails with
    InvalidPathException on windows
    + JDK-8258855: Two tests sun/security/krb5/auto/
    /ReplayCacheTestProc.java and ReplayCacheTestProcWithMD5.java
    failed on OL8.3
    + JDK-8259237: Demo selection changes with left/right arrow
    key. No need to press space for selection.
    + JDK-8260571: Add PrintMetaspaceStatistics to print metaspace
    statistics upon VM exit
    + JDK-8260690: JConsole User Guide Link from the Help menu is
    not accessible by keyboard
    + JDK-8261036: Reduce classes loaded by CleanerFactory
    initialization
    + JDK-8261071: AArch64: Refactor interpreter native wrappers
    + JDK-8261075: Create stubRoutines.inline.hpp with SafeFetch
    implementation
    + JDK-8261236: C2: ClhsdbJstackXcompStress test fails when
    StressGCM is enabled
    + JDK-8261297: NMT: Final report should use scale 1
    + JDK-8261661: gc/stress/TestReclaimStringsLeaksMemory.java
    fails because Reserved memory size is too big
    + JDK-8261916: gtest/GTestWrapper.java
    vmErrorTest.unimplemented1_vm_assert failed
    + JDK-8262438: sun/security/ssl/SSLLogger/
    /LoggingFormatConsistency.java failed with "SocketException:
    Socket is closed"
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8262844: (fs) FileStore.supportsFileAttributeView might
    return false negative in case of ext3
    + JDK-8263059: security/infra/java/security/cert/
    /CertPathValidator/certification/ComodoCA.java fails due to
    revoked cert
    + JDK-8263068: Rename safefetch.hpp to safefetch.inline.hpp
    + JDK-8263303: C2 compilation fails with assert(found_sfpt)
    failed: no node in loop that's not input to safepoint
    + JDK-8263362: Avoid division by 0 in
    java/awt/font/TextJustifier.java justify
    + JDK-8263773: Reenable German localization for builds at Oracle
    + JDK-8263897: compiler/c2/aarch64/TestVolatilesSerial.java
    failed with "java.lang.RuntimeException: Wrong method"
    + JDK-8264526: javax/swing/text/html/parser/Parser/8078268/
    /bug8078268.java timeout
    + JDK-8264824: java/net/Inet6Address/B6206527.java doesn't
    close ServerSocket properly
    + JDK-8265019: Update tests for additional TestNG test
    permissions
    + JDK-8265173: [test] divert spurious log output away from
    stream under test in ProcessBuilder Basic test
    + JDK-8265524: Upgrading JSZip from v3.2.2 to v3.6.0
    + JDK-8266182: Automate manual steps listed in the test
    jdk/sun/security/pkcs12/ParamsTest.java
    + JDK-8266579: Update test/jdk/java/lang/ProcessHandle/
    /PermissionTest.java &amp; test/jdk/java/sql/testng/util/
    /TestPolicy.java
    + JDK-8266949: Check possibility to disable OperationTimedOut
    on Unix
    + JDK-8267246: -XX:MaxRAMPercentage=0 is unreasonable for jtreg
    tests on many-core machines
    + JDK-8267256: Extend minimal retry for loopback connections on
    Windows to PlainSocketImpl
    + JDK-8267304: Bump global JTReg memory limit to 768m
    + JDK-8267652: c2 loop unrolling by 8 results in reading memory
    past array
    + JDK-8268019: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8268093: Manual Testcase: "sun/security/krb5/config/
    /native/TestDynamicStore.java" Fails with NPE
    + JDK-8268555: Update HttpClient tests that use ITestContext to
    jtreg 6+1
    + JDK-8268672: C2: assert(!loop-&gt;is_member(u_loop)) failed: can
    be in outer loop or out of both loops only
    + JDK-8269034: AccessControlException for SunPKCS11 daemon
    threads
    + JDK-8269426: Rename test/jdk/java/lang/invoke/t8150782 to
    accessClassAndFindClass
    + JDK-8269574: C2: Avoid redundant uncommon traps in
    GraphKit::builtin_throw() for JVMTI exception events
    + JDK-8269656: The test test/langtools/tools/javac/versions/
    /Versions.java has duplicate test cycles
    + JDK-8269768: JFR Terminology Refresh
    + JDK-8269951: [macos] Focus not painted in JButton when
    setBorderPainted(false) is invoked
    + JDK-8269984: [macos] JTabbedPane title looks like  disabled
    + JDK-8269993: [Test]: java/net/httpclient/
    /DigestEchoClientSSL.java contains redundant @run tags
    + JDK-8270116: Expand ButtonGroupLayoutTraversalTest.java to
    run in all LaFs, including Aqua on macOS
    + JDK-8270216: [macOS] Update named used for Java run loop mode
    + JDK-8270280: security/infra/java/security/cert/
    /CertPathValidator/certification/LetsEncryptCA.java OCSP
    response error
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8270344: Session resumption errors
    + JDK-8270517: Add Zero support for LoongArch
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
    + JDK-8270886: Crash in
    PhaseIdealLoop::verify_strip_mined_scheduling
    + JDK-8271287: jdk/jshell/CommandCompletionTest.java fails with
    "lists don't have the same size expected"
    + JDK-8271340: Crash PhaseIdealLoop::clone_outer_loop
    + JDK-8271341: Opcode() != Op_If &amp;&amp; Opcode() != Op_RangeCheck)
    || outcnt() == 2 assert failure with Test7179138_1.java
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8271490: [ppc] [s390]: Crash in
    JavaThread::pd_get_top_frame_for_profiling
    + JDK-8271560: sun/security/ssl/DHKeyExchange/
    /LegacyDHEKeyExchange.java still fails due to "An established
    connection was aborted by the software in your host machine"
    + JDK-8271567: AArch64: AES Galois CounterMode (GCM)
    interleaved implementation using vector instructions
    + JDK-8272180: Upgrade JSZip from v3.6.0 to v3.7.1
    + JDK-8272181: Windows-AArch64:Backport fix of `Backtracing
    broken on PAC enabled systems`
    + JDK-8272316: Wrong Boot JDK help message in 11
    + JDK-8272318: Improve performance of HeapDumpAllTest
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8272570: C2: crash in PhaseCFG::global_code_motion
    + JDK-8272574: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + JDK-8272581: sun/security/pkcs11/Provider/MultipleLogins.sh
    fails after JDK-8266182
    + JDK-8272708: [Test]: Cleanup: test/jdk/security/infra/java/
    /security/cert/CertPathValidator/certification/BuypassCA.java
    no longer needs ocspEnabled
    + JDK-8272720: Fix the implementation of loop unrolling
    heuristic with LoopPercentProfileLimit
    + JDK-8272783: Epsilon: Refactor tests to improve performance
    + JDK-8272806: [macOS] "Apple AWT Internal Exception" when
    input method is changed
    + JDK-8272828: Add correct licenses to jszip.md
    + JDK-8272836: Limit run time for java/lang/invoke/LFCaching
    tests
    + JDK-8272850: Drop zapping values in the Zap* option
    descriptions
    + JDK-8272902: Bump update version for OpenJDK: jdk-11.0.14
    + JDK-8272914: Create hotspot:tier2 and hotspot:tier3 test
    groups
    + JDK-8272966: test/jdk/java/awt/Robot/FlushCurrentEvent.java
    fails by timeout
    + JDK-8273026: Slow LoginContext.login() on multi threading
    application
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273235: tools/launcher/HelpFlagsTest.java Fails on
    Windows 32bit
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273314: Add tier4 test groups
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273358: macOS Monterey does not have the font Times
    needed by Serif
    + JDK-8273373: Zero: Cannot invoke JVM in primordial threads on
    Zero
    + JDK-8273498: compiler/c2/Test7179138_1.java timed out
    + JDK-8273541: Cleaner Thread creates with normal priority
    instead of MAX_PRIORITY - 2
    + JDK-8273547: [11u] [JVMCI] Partial module-info.java backport
    of JDK-8223332
    + JDK-8273606: Zero: SPARC64 build fails with si_band type
    mismatch
    + JDK-8273646: Add openssl from path variable also in to
    Default System Openssl Path in OpensslArtifactFetcher
    + JDK-8273671: Backport of 8260616 misses one JNF header
    inclusion removal
    + JDK-8273790: Potential cyclic dependencies between Gregorian
    and CalendarSystem
    + JDK-8273795: Zero SPARC64 debug builds fail due to missing
    interpreter fields
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273894: ConcurrentModificationException raised every
    time ReferralsCache drops referral
    + JDK-8273924: ArrayIndexOutOfBoundsException thrown in
    java.util.JapaneseImperialCalendar.add()
    + JDK-8273961: jdk/nio/zipfs/ZipFSTester.java fails if file
    path contains '+' character
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274056: JavaAccessibilityUtilities leaks JNI objects
    + JDK-8274083: Update testing docs to mention tiered testing
    + JDK-8274293: Build failure on macOS with Xcode 13.0 as vfork
    is deprecated
    + JDK-8274326: [macos] Ensure initialisation of sun/lwawt/
    /macosx/CAccessibility in JavaComponentAccessibility.m
    + JDK-8274329: Fix non-portable HotSpot code in
    MethodMatcher::parse_method_pattern
    + JDK-8274381: missing CAccessibility definitions in JNI code
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274522: java/lang/management/ManagementFactory/
    /MXBeanException.java test fails with Shenandoah
    + JDK-8274642: jdk/jshell/CommandCompletionTest.java fails with
    NoSuchElementException after JDK-8271287
    + JDK-8274773: [TESTBUG] UnsafeIntrinsicsTest intermittently
    fails on weak memory model platform
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8274860: gcc 10.2.1 produces an uninitialized warning in
    sharedRuntimeTrig.cpp
    + JDK-8275051: Shenandoah: Correct ordering of requested gc
    cause and gc request flag
    + JDK-8275131: Exceptions after a touchpad gesture on macOS
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276066: Reset LoopPercentProfileLimit for x86 due to
    suboptimal performance
    + JDK-8276139: TestJpsHostName.java not reliable, better to
    expand HostIdentifierCreate.java test
    + JDK-8276157: C2: Compiler stack overflow during escape
    analysis on Linux x86_32
    + JDK-8276201: Shenandoah: Race results degenerated GC to enter
    wrong entry point
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
    + JDK-8276550: Use SHA256 hash in build.tools.depend.Depend
    + JDK-8276774: Cookie stored in CookieHandler not sent if user
    headers contain cookie
    + JDK-8276854: Windows GHA builds fail due to broken Cygwin
    + JDK-8277029: JMM GetDiagnosticXXXInfo APIs should verify
    output array sizes
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277529: SIGSEGV in C2 CompilerThread
    Node::rematerialize() compiling Packet::readUnsignedTrint
    + JDK-8277815: Fix mistakes in legal header backports
- Removed patch:
  * riscv64-zero.patch
    + integrated upstream
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1644926400">- Update to upstream tag jdk-11.0.14.1+1
  * Changes:
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8281324: Bump update version for OpenJDK: jdk-11.0.14.1</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Stop adding the JavaEE modules when building for Factory</changelog>
  <changelog author="fstrba@suse.com" date="1650456000">- Update to upstream tag jdk-11.0.15+10 (April 2022 CPU)
  * Security fixes:
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8278356: Improve file creation
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better Xpath
    expression handling
    + JDK-8272594: Better record of recordings
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8272255: Completely handle MIDI files
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278449: Improve keychain support
    + JDK-8277227: Better identification of OIDs
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8274221: More definite BER encodings
    + JDK-8278798: Improve supported intrinsic
  * Other changes:
    + JDK-8283778: 11u GHA: Fix GCC 9 ubuntu package names
    + JDK-8283018: 11u GHA: Update GCC 9 minor versions
    + JDK-8275082, bsc#1198671, CVE-2022-21476: Update XML Security
    for Java to 2.3.0
    + JDK-8282761: XPathFactoryImpl remove setProperty and
    getProperty methods
    + JDK-8283270: [11u] broken JRT_ENTRY_NO_ASYNC after Backport
    of JDK-8253795
    + JDK-8275703: System.loadLibrary fails on Big Sur for
    libraries hidden from filesystem
    + JDK-8277795: ldap connection timeout not honoured under
    contention
    + JDK-8276141: XPathFactory set/getProperty method
    + JDK-8255410: Add ChaCha20 and Poly1305 support to SunPKCS11
    provider
    + JDK-8211333: AArch64: Fix another build failure after
    JDK-8211029
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8282372: [11] build issue on MacOS/aarch64 12.2.1 using
    Xcode 13.1: call to 'log2_intptr' is ambiguous
    + JDK-8214004: Missing space between compiler thread name and
    task info in hs_err
    + JDK-8250750: JDK-8247515 fix for OSX pc_to_symbol() lookup
    fails with some symbols
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8247515: OSX pc_to_symbol() lookup does not work with
    core files
    + JDK-8254085: javax/swing/text/Caret/
    /TestCaretPositionJTextPane.java failed with
    "RuntimeException: Wrong caret position"
    + JDK-8247272: SA ELF file support has never worked for 64-bit
    causing address to symbol name mapping to fail
    + JDK-8233986: ProblemList javax/swing/plaf/basic/BasicTextUI/
    /8001470/bug8001470.java for windows-x64
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8272541: Incorrect overflow test in Toom-Cook branch of
    BigInteger multiplication
    + JDK-8254072: AArch64: Get rid of --disable-warnings-as-errors
    on Windows+ARM64 build
    + JDK-8262894: [macos_aarch64] SIGBUS in Assembler::ld_st2
    + JDK-8266889: [macosx-aarch64] Crash with SIGBUS in
    MarkActivationClosure::do_code_blob during
    vmTestbase/nsk/jvmti/.../bi04t002 test run
    + JDK-8241004: NMT tests fail on unaligned thread size with
    debug build
    + JDK-8253795: Implementation of JEP 391: macOS/AArch64 Port
    + JDK-8280414: Memory leak in DefaultProxySelector
    + JDK-8280526: x86_32 Math.sqrt performance regression with
  - XX:UseSSE={0,1}
    + JDK-8279076: C2: Bad AD file when matching SqrtF with UseSSE=0
    + JDK-8281520: JFR: A wrong parameter is passed to the
    constructor of LeakKlassWriter
    + JDK-8281599: test/lib/jdk/test/lib/KnownOIDs.java is
    redundant since JDK-8268801
    + JDK-8190748: java/text/Format/DateFormat/DateFormatTest.java
    and NonGregorianFormatTest fail intermittently
    + JDK-8281061: [s390] JFR runs into assertions while validating
    interpreter frames
    + JDK-8280155: [PPC64, s390] frame size checks are not yet
    correct
    + JDK-8279924: [PPC64, s390] implement
    frame::is_interpreted_frame_valid checks
    + JDK-8261205: AssertionError: Cannot add metadata to an
    intersection type
    + JDK-8277992: Add fast jdk_svc subtests to jdk:tier3
    + JDK-8216969: ParseException thrown for certain months with
    russian locale
    + JDK-8278381: [GCC 11] Address::make_raw() does not initialize
    rspec
    + JDK-8264650: Cross-compilation to macos/aarch64
    + JDK-8256321: Some "inactive" color profiles use the wrong
    profile class
    + JDK-8280999: array_bounds should be array-bounds after 8278507
    + JDK-8177814: jdk/editpad is not in jdk TEST.groups
    + JDK-8279702: [macosx] ignore xcodebuild warnings on M1
    + JDK-8280786: Build failure on Solaris after 8262392
    + JDK-8218546: Unable to connect to https://google.com using
    java.net.HttpClient
    + JDK-8278758: runtime/BootstrapMethod/BSMCalledTwice.java
    fails with release VMs after JDK-8262134
    + JDK-8279833: Loop optimization issue in
    String.encodeUTF8_UTF16
    + JDK-8273277: C2: Move conditional negation into rc_predicate
    + JDK-8253197: vmTestbase/nsk/jvmti/StopThread/stopthrd007/
    /TestDescription.java fails with "ERROR:
    DebuggeeSleepingThread: ThreadDeath lost"
    + JDK-8236210: javac generates wrong annotation for fields
    generated from record components
    + JDK-8236505: Mark jdk/editpad/EditPadTest.java as @headful
    + JDK-8270874: JFrame paint artifacts when dragged from
    standard monitor to HiDPI monitor
    + JDK-8271202: C1: assert(false) failed: live_in set of first
    block must be empty
    + JDK-8277447: Hotspot C1 compiler crashes on Kotlin suspend
    fun with loop
    + JDK-8275610: C2: Object field load floats above its null
    check resulting in a segfault
    + JDK-8266421: Deadlock in Sound System
    + JDK-8274795: AArch64: avoid spilling and restoring r18 in
    macro assembler
    + JDK-8232533: G1 uses only a single thread for pretouching the
    java heap
    + JDK-8273933: [TESTBUG] Test must run without preallocated
    exceptions
    + JDK-8268542: serviceability/logging/TestFullNames.java tests
    only 1st test case
    + JDK-8251998: remove usage of PropertyResolvingWrapper in
    vmTestbase/jit/t
    + JDK-8273438: Enable parallelism in
    vmTestbase/metaspace/stressHierarchy tests
    + JDK-8273433: Enable parallelism in vmTestbase_nsk_sysdict
    tests
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8278871: [JVMCI] assert((uint)reason &lt; 2*
    _trap_hist_limit) failed: oob
    + JDK-8275326: C2: assert(no_dead_loop) failed: dead loop
    detected
    + JDK-8251127: clean up FileInstaller $test.src $cwd in
    remaining vmTestbase_vm_compiler tests
    + JDK-8252005: narrow disabling of allowSmartActionArgs in
    vmTestbase
    + JDK-8279998: PPC64 debug builds fail with "untested:
    RangeCheckStub: predicate_failed_trap_id"
    + JDK-8193277: SimpleFileObject inconsistency between getName
    and getShortName
    + JDK-8225559: assertion error at TransTypes.visitApply
    + JDK-8220634: SymLinkArchiveTest should handle not being able
    to create symlinks
    + JDK-8214026: Canonicalized archive paths appearing in
    diagnostics
    + JDK-8251126: nsk.share.GoldChecker should read golden file
    from ${test.src}
    + JDK-8237798: rewrite vmTestbase/jit/tiered from shell to java
    + JDK-8262134: compiler/uncommontrap/TestDeoptOOM.java failed
    with "guarantee(false) failed: wrong number of expression
    stack elements during deopt"
    + JDK-8210194: [TESTBUG] jvmti_FollowRefObjects.cpp missing
    initializer for member
    _jvmtiHeapCallbacks::heap_reference_callback
    + JDK-8277441: CompileQueue::add fails with
    assert(_last-&gt;next() == __null) failed: not last
    + JDK-8273704: DrawStringWithInfiniteXform.java failed :
    drawString with InfiniteXform transform takes long time
    + JDK-8277328: jdk/jshell/CommandCompletionTest.java failures
    on Windows
    + JDK-8251132: make main classes public in vmTestbase/jit tests
    + JDK-8274465: Fix javax/swing/text/ParagraphView/6364882/
    /bug6364882.java failures
    + JDK-8273634: [TEST_BUG] Improve javax/swing/text/
    /ParagraphView/6364882/bug6364882.java
    + JDK-8249019: clean up FileInstaller $test.src $cwd in
    vmTestbase_vm_compiler tests
    + JDK-8274338: com/sun/jdi/RedefineCrossEvent.java failed
    "assert(m != __null) failed: NULL mirror"
    + JDK-8279300: [arm32] SIGILL when running
    GetObjectSizeIntrinsicsTest
    + JDK-8273682: Upgrade Jline to 3.20.0
    + JDK-8256154: Some TestNG tests require default constructors
    + JDK-8237787: rewrite vmTestbase/vm/compiler/CodeCacheInfo*
    from shell to java
    + JDK-8223142: Clean-up WS and CB.
    + JDK-8278384: Bytecodes::result_type() for arraylength returns
    T_VOID instead of T_INT
    + JDK-8278172: java/nio/channels/FileChannel/
    /BlockDeviceSize.java should only run on Linux
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8279225: [arm32] C1 longs comparison operation destroys
    argument registers
    + JDK-8276623: JDK-8275650 accidentally pushed "out" file
    + JDK-8279379: GHA: Print tests that are in error
    + JDK-8275536: Add test to check that File::lastModified
    returns same time stamp as Files.getLastModifiedTime
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8239502: [TEST_BUG] Test javax/swing/text/FlowView/
    /6318524/bug6318524.java never fails
    + JDK-8277342: vmTestbase/nsk/stress/strace/strace004.java
    fails with SIGSEGV in InstanceKlass::jni_id_for
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8268014: Build failure on SUSE Linux Enterprise Server
    11.4 (s390x) due to 'SYS_get_mempolicy' was not declared
    + JDK-8241423: NUMA APIs fail to work in dockers due to
    dependent syscalls are disabled by default
    + JDK-8065704: Set LC_ALL=C for all relevant commands in the
    build system
    + JDK-8254827: JVMCI: Enable it for Windows+AArch64
    + JDK-8276314: [JVMCI] check alignment of call displacement
    during code installation
    + JDK-8265150: AsyncGetCallTrace crashes on ResourceMark
    + JDK-8276177: nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption failed with
    "assert(def_ik-&gt;is_being_redefined()) failed: should be
    being redefined to get here"
    + JDK-8273638: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8258554: javax/swing/JTable/4235420/bug4235420.java fails
    in GTK L&amp;F
    + JDK-8277385: Zero: Enable CompactStrings support
    + JDK-8278116: runtime/modules/LoadUnloadModuleStress.java has
    duplicate -Xmx
    + JDK-8278115: gc/stress/gclocker/TestGCLockerWithSerial.java
    has duplicate -Xmx
    + JDK-8274736: Concurrent read/close of SSLSockets causes
    SSLSessions to be invalidated unnecessarily
    + JDK-8278309: [windows] use of uninitialized OSThread::_state
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8207793: [TESTBUG] runtime/Metaspace/
    /FragmentMetaspace.java fails: heap needs to be increased
    + JDK-8211170: AArch64: Warnings in C1 and template interpreter
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8240904: Screen flashes on test failures when running
    tests from make
    + JDK-8234930: Use MAP_JIT when allocating pages for code cache
    on macOS
    + JDK-8275811: Incorrect instance to dispose
    + JDK-8186780: clang fastdebug assertion failure in
    os_linux_x86:os::verify_stack_alignment()
    + JDK-8266171: -Warray-bounds happens in imageioJPEG.c
    + JDK-8266170: -Wnonnull happens in classLoaderData.inline.hpp
    + JDK-8207011: Remove uses of the register storage class
    specifier
    + JDK-8266172: -Wstringop-overflow happens in vmError.cpp
    + JDK-8274714: Incorrect verifier protected access error message
    + JDK-8273514: java/util/DoubleStreamSums/CompensatedSums.java
    failure
    + JDK-8214761: Bug in parallel Kahan summation implementation
    + JDK-8272473: Parsing epoch seconds at a DST transition with a
    non-UTC parser is wrong
    + JDK-8255035: Update BCEL to Version 6.5.0
    + JDK-8257769: Cipher.getParameters() throws NPE for
    ChaCha20-Poly1305
    + JDK-8233827: Enable screenshots in the enhanced failure
    handler on Linux/macOS
    + JDK-8210236: Prepare
    ciReceiverTypeData::translate_receiver_data_from for
    concurrent class unloading
    + JDK-8273366: [testbug] javax/swing/UIDefaults/6302464/
    /bug6302464.java fails on macOS12
    + JDK-8199079: Test javax/swing/UIDefaults/6302464/
    /bug6302464.java is unstable
    + JDK-8256373: [Windows/HiDPI] The Frame#setBounds does not
    work in a minimized state
    + JDK-8274523:  java/lang/management/MemoryMXBean/
    /MemoryTest.java test should handle Shenandoah
    + JDK-8208074: [TESTBUG] vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    failed with NullPointerException
    + JDK-8266168: -Wmaybe-uninitialized happens in check_code.c
    + JDK-8266174: -Wmisleading-indentation happens in
    libmlib_image sources
    + JDK-8251558: J2DBench should support shaped and translucent
    windows
    + JDK-8254940: AArch64: Cleanup non-product thread members
    + JDK-8266173: -Wmaybe-uninitialized happens in jni_util.c
    + JDK-8263185: Mallinfo deprecated in glibc 2.33
    + JDK-8257467: [TESTBUG] -Wdeprecated-declarations is reported
    at sigset() in exesigtest.c
    + JDK-8266176: -Wmaybe-uninitialized happens in
    libArrayIndexOutOfBoundsExceptionTest.c
    + JDK-8274265: Suspicious string concatenation in
    logTestUtils.inline.hpp
    + JDK-8222825: ARM32 SIGILL issue on single core CPU (not
    supported PLDW instruction)
    + JDK-8276105: C2: Conv(D|F)2(I|L)Nodes::Ideal should handle
    rounding correctly
    + JDK-8268882: C2: assert(n-&gt;outcnt() != 0 || C-&gt;top() == n ||
    n-&gt;is_Proj()) failed: No dead instructions after post-alloc
    + JDK-8272345: macos doesn't check `os::set_boot_path()` result
    + JDK-8277796: Bump update version for OpenJDK: jdk-11.0.15
- Modified patch:
  * fips.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="b998cb98ec379635db1e21918f212857ed2eef508a7864fd91c441ffae383452" name="jboss-logging" arch="noarch">
  <version epoch="0" ver="3.4.1" rel="150200.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1573732800">- Initial packaging of jboss-logging 3.3.0</changelog>
  <changelog author="stasiek@michalski.cc" date="1586779200">- Update to 3.4.1</changelog>
  <changelog author="stasiek@michalski.cc" date="1586952000">- Fix the source url</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages</changelog>
  <changelog author="fstrba@suse.com" date="1649419200">- Build against the provider of mvn(log4j:log4j:1.2.16) instead of
  mvn(log4j:log4j), in order to be able to build both on systems
  with and without reload4j (bsc#1197642)</changelog>
</package>
<package pkgid="900d7a8889585feb36a01a3ab0fdf7c0d84f85418645d0148886e7e6122ea44b" name="jboss-logging" arch="src">
  <version epoch="0" ver="3.4.1" rel="150200.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1573732800">- Initial packaging of jboss-logging 3.3.0</changelog>
  <changelog author="stasiek@michalski.cc" date="1586779200">- Update to 3.4.1</changelog>
  <changelog author="stasiek@michalski.cc" date="1586952000">- Fix the source url</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages</changelog>
  <changelog author="fstrba@suse.com" date="1649419200">- Build against the provider of mvn(log4j:log4j:1.2.16) instead of
  mvn(log4j:log4j), in order to be able to build both on systems
  with and without reload4j (bsc#1197642)</changelog>
</package>
<package pkgid="2fef1935c16ff3c8ff1639ff01bb20503299f00ea8d6bc26e5c923ba96adde5e" name="jboss-logging-javadoc" arch="noarch">
  <version epoch="0" ver="3.4.1" rel="150200.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1573732800">- Initial packaging of jboss-logging 3.3.0</changelog>
  <changelog author="stasiek@michalski.cc" date="1586779200">- Update to 3.4.1</changelog>
  <changelog author="stasiek@michalski.cc" date="1586952000">- Fix the source url</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages</changelog>
  <changelog author="fstrba@suse.com" date="1649419200">- Build against the provider of mvn(log4j:log4j:1.2.16) instead of
  mvn(log4j:log4j), in order to be able to build both on systems
  with and without reload4j (bsc#1197642)</changelog>
</package>
<package pkgid="cf89e2da68ab98d2dc3515816f5b873f15a9e67180447f2a8ff1baf35a19c0bb" name="jetty-artifact-remote-resources" arch="noarch">
  <version epoch="0" ver="1.2" rel="150200.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Intial packaging of jetty-artifact-remote-resources 1.2</changelog>
  <changelog author="fstrba@suse.com" date="1649419200">- Do not require mvn(log4j:log4j) for build (bsc#1197642)</changelog>
</package>
<package pkgid="61efb6a73ba2bc5dd5c2106b42562ccd87d16b9fc9f00f8b72ba9be0ca458e6d" name="jetty-artifact-remote-resources" arch="src">
  <version epoch="0" ver="1.2" rel="150200.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Intial packaging of jetty-artifact-remote-resources 1.2</changelog>
  <changelog author="fstrba@suse.com" date="1649419200">- Do not require mvn(log4j:log4j) for build (bsc#1197642)</changelog>
</package>
<package pkgid="a2bc9f771b639f36dba93101f4d60e43821d064484511f971e234638947ac2aa" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="0dd18ce59289fba14d7f1f82dcef2218afdeb15db3165cd24798bc525babbfb6" name="kernel-firmware" arch="src">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="c7e3507fe325a67fca4c3852edd7df6fcc4ebef435312d87e69b6200457771c2" name="kernel-firmware-all" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="bfd6c44c0601536edd5e42256453c0cdb1bfb53b9ae6679c4c42f12469354924" name="kernel-firmware-amdgpu" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="3cf54b0f7dd7348426a0bd85d9efd80b8e5a664bf71f172e8b44686f9ef2eee6" name="kernel-firmware-ath10k" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="46c02772da7c7d630f84b1ba468b33d94a822406b4a46bcf4c98f3013a21225d" name="kernel-firmware-ath11k" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="a28d7d5f9eba3db0753c449077e7b7e8ce39304bf291c71629cc73265b3fe553" name="kernel-firmware-atheros" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="a80f24f7f8b02ef6750fb84f471c3678bfa69c9b583af1193a725f54463863bc" name="kernel-firmware-bluetooth" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="c9240570abe2a63f5a373b1204acc41a02e100b52510643881971a07b51bc718" name="kernel-firmware-bnx2" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="01940229639e6e2b2bcde15f23aa99fa44494751683b71655fe60a30b2be70a3" name="kernel-firmware-brcm" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="bc0030a03b359e252e9fcb474ae0c3edf8035bafa842312d557152a1692c0af4" name="kernel-firmware-chelsio" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="96735c7f978aa88a46f48115dc42fb12cdf6652ea8a4d2ec2bd4c7302aac1287" name="kernel-firmware-dpaa2" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="72c856b162efec78cba0746505963702b830d7a13506040ad19eaf5876fdb4e4" name="kernel-firmware-i915" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="69fe5e18636dd637923f90532bd051ef3d229705d2ba37551d6b87ea839e91f4" name="kernel-firmware-intel" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="de3f2b17ea0920bd98bc041f7b8f5760eac33be72aa3a32a279f410a0d8b785f" name="kernel-firmware-iwlwifi" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="03e18c56b471eecc968576e64e9c209efb174c89aba5886a136074805e6a4703" name="kernel-firmware-liquidio" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="f5137fa11cdba8af95931fa247f64da077c330ba52a78b566f426583b737e408" name="kernel-firmware-marvell" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="f2ec4d4dabf28dfb990ce84537630ff4649fac851dfea4e2733deba722e12a3d" name="kernel-firmware-media" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="74b315146963e966b492142f2cfaea6909b9051315f1c7c1c557e2af1d783c11" name="kernel-firmware-mediatek" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="36a2881ac5dceb54bce810ec3f1c4a0621a331eb000ea68e5cc303680f296b4a" name="kernel-firmware-mellanox" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="1704a3ac92a9d2fb2309563fa6e56efcda18f308c57df77616ec7bf126d19cb5" name="kernel-firmware-mwifiex" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="00e46ad5f41874107e0d93eff48fe385e0a4acaa7b9c12a545e789e678707b41" name="kernel-firmware-network" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="42e3c571c94a1bbc7b7f9cc52668ec37c4226bd88be3895665ec3eb8617273ad" name="kernel-firmware-nfp" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="fc26a74dd1180d701393912025ea99cf51b0bf72f2bfb146630571a7333a2db4" name="kernel-firmware-nvidia" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="bd58c4b30fa72ddacc144ed29ffa817fd0e3ac2fc2ca70a0a38cea46eaef4f78" name="kernel-firmware-platform" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="1bcd4b1662e48adf22189faa6e4ef2ed03ca50bff7eb1241c8799e2dabaab673" name="kernel-firmware-prestera" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="1f94a2a4b9048ddb3e96396371428f636ca3e8d13b7238b978bcf05acbbc83c0" name="kernel-firmware-qcom" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="6e208493b3e742dcd6321d35154bbcb7140a88cd109dd22d7133a0f59268f661" name="kernel-firmware-qlogic" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="351089a1fdc350b549c6a55b0550d4979af1d03dd096a455be03fc1696b3c5f8" name="kernel-firmware-radeon" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="24b9a45a38ddafc5f83f818211360ab07d1c4edc0b8c79e29f0379aca5505871" name="kernel-firmware-realtek" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="f7053b91fd41c0e742e6dcda26be2afb4023703c01e8a75fb9487d2d2e9122d4" name="kernel-firmware-serial" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="c645b8690fd06c4695f0261cce3c85069ccb6f825832b99d941e55eacaabffcf" name="kernel-firmware-sound" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="08ce4297afccdcb2b5995d7f559df0d84d52a32a4efd3aeea23e8b132963e364" name="kernel-firmware-ti" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="279e568b10ac4e6cddf086e91f89337fdc91be9837f4a7336367a64723ce2167" name="kernel-firmware-ueagle" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="30ec9c842ca3bd3bd926af85bb36877496ae093247f268a5cca4d17f9f7fcf5f" name="kernel-firmware-usb-network" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.5.1"/>
  <changelog author="tiwai@suse.com" date="1620388800">- Update to version 20210503 (git commit ecdfcf8e2ca1):
  * i915: Add ADL-P DMC Support
  * amdgpu: add new polaris 12 MC firmware
  * firmware: nvidia: Add VIC firmware for Tegra194
  * qcom: add gpu firmwares for sc7280
  * brcm: Add a link to enable khadas VIM2's WiFi
  * rtw89: 8852a: update fw to v0.13.8.0
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  * qcom: Add venus firmware files for VPU-2.0
  * qcom: update venus firmware files for v5.4
- Move adreno and modem firmware into kernel-firmware-qcom
  subpackage
- Update license list and module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1622030400">- Update to version 20210518 (git commit f8462923ed8f):
  * nvidia: fix symlinks for tu104/tu106 acr unload firmware
  * rtw88: 8822c: Update normal firmware to v9.9.10
  * iwlwifi: update 8000 family firmwares
  * iwlwifi: update 9000-family firmwares to core60-51
  * iwlwifi: add new FWs from core60-51 release
  * nvidia: Update Tegra194 XUSB firmware to v60.09
  * nvidia: Update Tegra186 XUSB firmware to v55.18
  * nvidia: Update Tegra210 XUSB firmware to v50.26
  * linux-firmware: update firmware for mhdp8546
- Update module aliases</changelog>
  <changelog author="tiwai@suse.com" date="1623931200">- Update to version 20210609 (git commit 0f66b74b6267):
  * cypress: update firmware for cyw54591 pcie
  * cypress: update firmware for cyw4373 sdio
  * cypress: update firmware for cyw43570 pcie
  * cypress: update firmware for cyw4356 sdio
  * cypress: update firmware for cyw4354 sdio
  * cypress: update firmware for cyw43455 sdio
  * cypress: update firmware for cyw43430 sdio
  * cypress: update firmware for cyw43340 sdio
  * cypress: update firmware for cyw43012 sdio
  * rtl_bt: Add rtl8761bu firmware
  * rtl_bt: Add rtl8761b firmware
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  * mediatek: update MT7915 firmware to 20201105
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_A0CB
  * rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  * linux-firmware: update firmware for MT7921 WiFi device
  * QCA: Add Bluetooth firmware for WCN685x
  * QCA: Update Bluetooth firmware for QCA6174
  * QCA: Update Bluetooth firmware for QCA6390
  * cxgb4: Update firmware to revision 1.25.6.0</changelog>
  <changelog author="tiwai@suse.com" date="1625659200">- Update to version 20210629 (git commit d79c26779d45):
  * amdgpu: update vcn firmware for green sardine for 21.20
  * amdgpu: update vcn firmware for renoir for 21.20
  * amdgpu: update vcn firmware for navi14 for 21.20
  * amdgpu: update vcn firmware for navi12 for 21.20
  * amdgpu: update vcn firmware for navi10 for 21.20
  * amdgpu: add initial dimgrey cavefish firmware from 21.20
  * amdgpu: update sienna cichlid firmware from 21.20
  * amdgpu: update vega20 firmware from 21.20
  * amdgpu: update Picasso firmware from 21.20
  * amdgpu: update navi14 firmware from 21.20
  * amdgpu: update green sardine firmware from 21.20
  * amdgpu: update vega12 firmware from 21.20
  * amdgpu: update navi12 firmware from 21.20
  * amdgpu: update vega10 firmware from 21.20
  * amdgpu: update renoir firmware from 21.20
  * amdgpu: update navi10 firmware from 21.20
  * amdgpu: update raven2 firmware from 21.20
  * amdgpu: update arcturus firmware from 21.20
  * amdgpu: update raven firmware from 21.20
  * amdgpu: update navy flounder firmware from 21.20
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_A0CD
  * linux-firmware: update firmware for MT7921 WiFi device to 20210612122753
  * rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  * QCA: Update Bluetooth firmware for QCA6174
- Add missing CA0132 firmware files into kernel-firmware-sound
  (boo#1187825)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
</package>
<package pkgid="108fd90eba538cbdae3c09955761f7944991cfdf5a151697ccc637038ce718d9" name="kernel-preempt" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="150300.59.68.1"/>
  <changelog author="tzimmermann@suse.de" date="1651579200">- blacklist.conf: Append 'Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"'
- commit f314ea7</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1651579201">- bnx2x: fix napi API usage sequence (bsc#1198217).
- commit 62d4fc3</changelog>
  <changelog author="oneukum@suse.com" date="1651579202">- adm8211: fix error return code in adm8211_probe() (git-fixes).
- blacklist.conf:
- commit 88c7ed6</changelog>
  <changelog author="oneukum@suse.com" date="1651579203">- mwl8k: Fix a double Free in mwl8k_probe_hw (git-fixes).
- commit 83451f5</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579204">- drm/vmwgfx: Remove unused compile options (bsc#1152472)
- commit fdc716b</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579205">- backlight: qcom-wled: Respect enabled-strings in set_brightness (bsc#1152489)
- commit 9612dd6</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579206">- drm/cma-helper: Set VM_DONTEXPAND for mmap (bsc#1152472)
- commit dd83cfa</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579207">- drm/i915: s/JSP2/ICP2/ PCH (bsc#1152489)
- commit 20ca121</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579208">- drm/amdgpu: fix amdgpu_ras_block_late_init error handler (bsc#1152489)
- commit e9f409a</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579209">- drm/fb-helper: Mark screen buffers in system memory with (bsc#1152472)
- commit 40b57d4</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579210">- USB: hcd-pci: Use PCI_STD_NUM_BARS when checking standard BARs (bsc#1152489)
- commit 30a990e</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579211">- drm/amd/display: Fix memory leak in dcn21_clock_source_create (bsc#1152472)
- commit f640496</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579212">- blacklist.conf: Append 'drm/i915: Fix syncmap memory leak'
- commit 5ad47f2</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579213">- blacklist.conf: Append 'drm/tegra: Add back arm_iommu_detach_device()'
- commit f7fdb0f</changelog>
  <changelog author="osalvador@suse.de" date="1651579214">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit a40b3c9</changelog>
  <changelog author="ohering@suse.de" date="1651665600">- net: mana: Remove unnecessary check of cqe_type in
  mana_process_rx_cqe() (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Use struct_size() helper in
  mana_gd_create_dma_region() (bsc#1195651).
- commit c23f4de</changelog>
  <changelog author="martin.wilck@suse.com" date="1651665601">- Revert lpfc driver update to 14.2.0.1 (bsc#1198989)
- commit eb15c95</changelog>
  <changelog author="oneukum@suse.com" date="1651665602">- usb: dwc3: core: Fix tx/rx threshold settings (git-fixes).
- commit c81dcdc</changelog>
  <changelog author="oneukum@suse.com" date="1651665603">- usb: dwc3: core: Only handle soft-reset in DCTL (git-fixes).
- commit 454e4d6</changelog>
  <changelog author="oneukum@suse.com" date="1651665604">- usb: dwc3: gadget: Return proper request status (git-fixes).
- commit 73a340f</changelog>
</package>
<package pkgid="be20b27ca488301dc7d351a5c7a9d1893e9dfd577c8dec8d541db1f317f31285" name="kernel-preempt" arch="src">
  <version epoch="0" ver="5.3.18" rel="150300.59.68.1"/>
  <changelog author="tzimmermann@suse.de" date="1651579200">- blacklist.conf: Append 'Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"'
- commit f314ea7</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1651579201">- bnx2x: fix napi API usage sequence (bsc#1198217).
- commit 62d4fc3</changelog>
  <changelog author="oneukum@suse.com" date="1651579202">- adm8211: fix error return code in adm8211_probe() (git-fixes).
- blacklist.conf:
- commit 88c7ed6</changelog>
  <changelog author="oneukum@suse.com" date="1651579203">- mwl8k: Fix a double Free in mwl8k_probe_hw (git-fixes).
- commit 83451f5</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579204">- drm/vmwgfx: Remove unused compile options (bsc#1152472)
- commit fdc716b</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579205">- backlight: qcom-wled: Respect enabled-strings in set_brightness (bsc#1152489)
- commit 9612dd6</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579206">- drm/cma-helper: Set VM_DONTEXPAND for mmap (bsc#1152472)
- commit dd83cfa</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579207">- drm/i915: s/JSP2/ICP2/ PCH (bsc#1152489)
- commit 20ca121</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579208">- drm/amdgpu: fix amdgpu_ras_block_late_init error handler (bsc#1152489)
- commit e9f409a</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579209">- drm/fb-helper: Mark screen buffers in system memory with (bsc#1152472)
- commit 40b57d4</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579210">- USB: hcd-pci: Use PCI_STD_NUM_BARS when checking standard BARs (bsc#1152489)
- commit 30a990e</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579211">- drm/amd/display: Fix memory leak in dcn21_clock_source_create (bsc#1152472)
- commit f640496</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579212">- blacklist.conf: Append 'drm/i915: Fix syncmap memory leak'
- commit 5ad47f2</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579213">- blacklist.conf: Append 'drm/tegra: Add back arm_iommu_detach_device()'
- commit f7fdb0f</changelog>
  <changelog author="osalvador@suse.de" date="1651579214">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit a40b3c9</changelog>
  <changelog author="ohering@suse.de" date="1651665600">- net: mana: Remove unnecessary check of cqe_type in
  mana_process_rx_cqe() (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Use struct_size() helper in
  mana_gd_create_dma_region() (bsc#1195651).
- commit c23f4de</changelog>
  <changelog author="martin.wilck@suse.com" date="1651665601">- Revert lpfc driver update to 14.2.0.1 (bsc#1198989)
- commit eb15c95</changelog>
  <changelog author="oneukum@suse.com" date="1651665602">- usb: dwc3: core: Fix tx/rx threshold settings (git-fixes).
- commit c81dcdc</changelog>
  <changelog author="oneukum@suse.com" date="1651665603">- usb: dwc3: core: Only handle soft-reset in DCTL (git-fixes).
- commit 454e4d6</changelog>
  <changelog author="oneukum@suse.com" date="1651665604">- usb: dwc3: gadget: Return proper request status (git-fixes).
- commit 73a340f</changelog>
</package>
<package pkgid="90cdcd2a7ffac411b71d4d7d8e140e9ee79a5ffa67918564a9ddfec27e8d3a5b" name="kernel-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="150300.59.68.1"/>
  <changelog author="tzimmermann@suse.de" date="1651579200">- blacklist.conf: Append 'Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"'
- commit f314ea7</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1651579201">- bnx2x: fix napi API usage sequence (bsc#1198217).
- commit 62d4fc3</changelog>
  <changelog author="oneukum@suse.com" date="1651579202">- adm8211: fix error return code in adm8211_probe() (git-fixes).
- blacklist.conf:
- commit 88c7ed6</changelog>
  <changelog author="oneukum@suse.com" date="1651579203">- mwl8k: Fix a double Free in mwl8k_probe_hw (git-fixes).
- commit 83451f5</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579204">- drm/vmwgfx: Remove unused compile options (bsc#1152472)
- commit fdc716b</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579205">- backlight: qcom-wled: Respect enabled-strings in set_brightness (bsc#1152489)
- commit 9612dd6</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579206">- drm/cma-helper: Set VM_DONTEXPAND for mmap (bsc#1152472)
- commit dd83cfa</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579207">- drm/i915: s/JSP2/ICP2/ PCH (bsc#1152489)
- commit 20ca121</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579208">- drm/amdgpu: fix amdgpu_ras_block_late_init error handler (bsc#1152489)
- commit e9f409a</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579209">- drm/fb-helper: Mark screen buffers in system memory with (bsc#1152472)
- commit 40b57d4</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579210">- USB: hcd-pci: Use PCI_STD_NUM_BARS when checking standard BARs (bsc#1152489)
- commit 30a990e</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579211">- drm/amd/display: Fix memory leak in dcn21_clock_source_create (bsc#1152472)
- commit f640496</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579212">- blacklist.conf: Append 'drm/i915: Fix syncmap memory leak'
- commit 5ad47f2</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579213">- blacklist.conf: Append 'drm/tegra: Add back arm_iommu_detach_device()'
- commit f7fdb0f</changelog>
  <changelog author="osalvador@suse.de" date="1651579214">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit a40b3c9</changelog>
  <changelog author="ohering@suse.de" date="1651665600">- net: mana: Remove unnecessary check of cqe_type in
  mana_process_rx_cqe() (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Use struct_size() helper in
  mana_gd_create_dma_region() (bsc#1195651).
- commit c23f4de</changelog>
  <changelog author="martin.wilck@suse.com" date="1651665601">- Revert lpfc driver update to 14.2.0.1 (bsc#1198989)
- commit eb15c95</changelog>
  <changelog author="oneukum@suse.com" date="1651665602">- usb: dwc3: core: Fix tx/rx threshold settings (git-fixes).
- commit c81dcdc</changelog>
  <changelog author="oneukum@suse.com" date="1651665603">- usb: dwc3: core: Only handle soft-reset in DCTL (git-fixes).
- commit 454e4d6</changelog>
  <changelog author="oneukum@suse.com" date="1651665604">- usb: dwc3: gadget: Return proper request status (git-fixes).
- commit 73a340f</changelog>
</package>
<package pkgid="050a01d18b5d13e19e7f0bd54765db2e09e18279cd47c10be2a11d17c0344927" name="kernel-preempt-devel" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="150300.59.68.1"/>
  <changelog author="tzimmermann@suse.de" date="1651579200">- blacklist.conf: Append 'Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"'
- commit f314ea7</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1651579201">- bnx2x: fix napi API usage sequence (bsc#1198217).
- commit 62d4fc3</changelog>
  <changelog author="oneukum@suse.com" date="1651579202">- adm8211: fix error return code in adm8211_probe() (git-fixes).
- blacklist.conf:
- commit 88c7ed6</changelog>
  <changelog author="oneukum@suse.com" date="1651579203">- mwl8k: Fix a double Free in mwl8k_probe_hw (git-fixes).
- commit 83451f5</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579204">- drm/vmwgfx: Remove unused compile options (bsc#1152472)
- commit fdc716b</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579205">- backlight: qcom-wled: Respect enabled-strings in set_brightness (bsc#1152489)
- commit 9612dd6</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579206">- drm/cma-helper: Set VM_DONTEXPAND for mmap (bsc#1152472)
- commit dd83cfa</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579207">- drm/i915: s/JSP2/ICP2/ PCH (bsc#1152489)
- commit 20ca121</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579208">- drm/amdgpu: fix amdgpu_ras_block_late_init error handler (bsc#1152489)
- commit e9f409a</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579209">- drm/fb-helper: Mark screen buffers in system memory with (bsc#1152472)
- commit 40b57d4</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579210">- USB: hcd-pci: Use PCI_STD_NUM_BARS when checking standard BARs (bsc#1152489)
- commit 30a990e</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579211">- drm/amd/display: Fix memory leak in dcn21_clock_source_create (bsc#1152472)
- commit f640496</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579212">- blacklist.conf: Append 'drm/i915: Fix syncmap memory leak'
- commit 5ad47f2</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579213">- blacklist.conf: Append 'drm/tegra: Add back arm_iommu_detach_device()'
- commit f7fdb0f</changelog>
  <changelog author="osalvador@suse.de" date="1651579214">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit a40b3c9</changelog>
  <changelog author="ohering@suse.de" date="1651665600">- net: mana: Remove unnecessary check of cqe_type in
  mana_process_rx_cqe() (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Use struct_size() helper in
  mana_gd_create_dma_region() (bsc#1195651).
- commit c23f4de</changelog>
  <changelog author="martin.wilck@suse.com" date="1651665601">- Revert lpfc driver update to 14.2.0.1 (bsc#1198989)
- commit eb15c95</changelog>
  <changelog author="oneukum@suse.com" date="1651665602">- usb: dwc3: core: Fix tx/rx threshold settings (git-fixes).
- commit c81dcdc</changelog>
  <changelog author="oneukum@suse.com" date="1651665603">- usb: dwc3: core: Only handle soft-reset in DCTL (git-fixes).
- commit 454e4d6</changelog>
  <changelog author="oneukum@suse.com" date="1651665604">- usb: dwc3: gadget: Return proper request status (git-fixes).
- commit 73a340f</changelog>
</package>
<package pkgid="9ca8f408c182c7346eb8d5efa74474a83e1571250fbe46c54d2ba28b3cd7fa2d" name="kernel-preempt-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="150300.59.68.1"/>
  <changelog author="tzimmermann@suse.de" date="1651579200">- blacklist.conf: Append 'Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"'
- commit f314ea7</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1651579201">- bnx2x: fix napi API usage sequence (bsc#1198217).
- commit 62d4fc3</changelog>
  <changelog author="oneukum@suse.com" date="1651579202">- adm8211: fix error return code in adm8211_probe() (git-fixes).
- blacklist.conf:
- commit 88c7ed6</changelog>
  <changelog author="oneukum@suse.com" date="1651579203">- mwl8k: Fix a double Free in mwl8k_probe_hw (git-fixes).
- commit 83451f5</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579204">- drm/vmwgfx: Remove unused compile options (bsc#1152472)
- commit fdc716b</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579205">- backlight: qcom-wled: Respect enabled-strings in set_brightness (bsc#1152489)
- commit 9612dd6</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579206">- drm/cma-helper: Set VM_DONTEXPAND for mmap (bsc#1152472)
- commit dd83cfa</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579207">- drm/i915: s/JSP2/ICP2/ PCH (bsc#1152489)
- commit 20ca121</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579208">- drm/amdgpu: fix amdgpu_ras_block_late_init error handler (bsc#1152489)
- commit e9f409a</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579209">- drm/fb-helper: Mark screen buffers in system memory with (bsc#1152472)
- commit 40b57d4</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579210">- USB: hcd-pci: Use PCI_STD_NUM_BARS when checking standard BARs (bsc#1152489)
- commit 30a990e</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579211">- drm/amd/display: Fix memory leak in dcn21_clock_source_create (bsc#1152472)
- commit f640496</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579212">- blacklist.conf: Append 'drm/i915: Fix syncmap memory leak'
- commit 5ad47f2</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579213">- blacklist.conf: Append 'drm/tegra: Add back arm_iommu_detach_device()'
- commit f7fdb0f</changelog>
  <changelog author="osalvador@suse.de" date="1651579214">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit a40b3c9</changelog>
  <changelog author="ohering@suse.de" date="1651665600">- net: mana: Remove unnecessary check of cqe_type in
  mana_process_rx_cqe() (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Use struct_size() helper in
  mana_gd_create_dma_region() (bsc#1195651).
- commit c23f4de</changelog>
  <changelog author="martin.wilck@suse.com" date="1651665601">- Revert lpfc driver update to 14.2.0.1 (bsc#1198989)
- commit eb15c95</changelog>
  <changelog author="oneukum@suse.com" date="1651665602">- usb: dwc3: core: Fix tx/rx threshold settings (git-fixes).
- commit c81dcdc</changelog>
  <changelog author="oneukum@suse.com" date="1651665603">- usb: dwc3: core: Only handle soft-reset in DCTL (git-fixes).
- commit 454e4d6</changelog>
  <changelog author="oneukum@suse.com" date="1651665604">- usb: dwc3: gadget: Return proper request status (git-fixes).
- commit 73a340f</changelog>
</package>
<package pkgid="fb3c3b54ee1b4743075fc82424966b93d4611d3b66913a7dceddfd1770603e0d" name="kernel-preempt-extra" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="150300.59.68.1"/>
  <changelog author="tzimmermann@suse.de" date="1651579200">- blacklist.conf: Append 'Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"'
- commit f314ea7</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1651579201">- bnx2x: fix napi API usage sequence (bsc#1198217).
- commit 62d4fc3</changelog>
  <changelog author="oneukum@suse.com" date="1651579202">- adm8211: fix error return code in adm8211_probe() (git-fixes).
- blacklist.conf:
- commit 88c7ed6</changelog>
  <changelog author="oneukum@suse.com" date="1651579203">- mwl8k: Fix a double Free in mwl8k_probe_hw (git-fixes).
- commit 83451f5</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579204">- drm/vmwgfx: Remove unused compile options (bsc#1152472)
- commit fdc716b</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579205">- backlight: qcom-wled: Respect enabled-strings in set_brightness (bsc#1152489)
- commit 9612dd6</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579206">- drm/cma-helper: Set VM_DONTEXPAND for mmap (bsc#1152472)
- commit dd83cfa</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579207">- drm/i915: s/JSP2/ICP2/ PCH (bsc#1152489)
- commit 20ca121</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579208">- drm/amdgpu: fix amdgpu_ras_block_late_init error handler (bsc#1152489)
- commit e9f409a</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579209">- drm/fb-helper: Mark screen buffers in system memory with (bsc#1152472)
- commit 40b57d4</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579210">- USB: hcd-pci: Use PCI_STD_NUM_BARS when checking standard BARs (bsc#1152489)
- commit 30a990e</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579211">- drm/amd/display: Fix memory leak in dcn21_clock_source_create (bsc#1152472)
- commit f640496</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579212">- blacklist.conf: Append 'drm/i915: Fix syncmap memory leak'
- commit 5ad47f2</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579213">- blacklist.conf: Append 'drm/tegra: Add back arm_iommu_detach_device()'
- commit f7fdb0f</changelog>
  <changelog author="osalvador@suse.de" date="1651579214">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit a40b3c9</changelog>
  <changelog author="ohering@suse.de" date="1651665600">- net: mana: Remove unnecessary check of cqe_type in
  mana_process_rx_cqe() (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Use struct_size() helper in
  mana_gd_create_dma_region() (bsc#1195651).
- commit c23f4de</changelog>
  <changelog author="martin.wilck@suse.com" date="1651665601">- Revert lpfc driver update to 14.2.0.1 (bsc#1198989)
- commit eb15c95</changelog>
  <changelog author="oneukum@suse.com" date="1651665602">- usb: dwc3: core: Fix tx/rx threshold settings (git-fixes).
- commit c81dcdc</changelog>
  <changelog author="oneukum@suse.com" date="1651665603">- usb: dwc3: core: Only handle soft-reset in DCTL (git-fixes).
- commit 454e4d6</changelog>
  <changelog author="oneukum@suse.com" date="1651665604">- usb: dwc3: gadget: Return proper request status (git-fixes).
- commit 73a340f</changelog>
</package>
<package pkgid="61b4565a3b111d095d1cfcbdc5f249b48c47e0a12c3173142efc2a5f0d28bb17" name="kernel-preempt-extra" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="150300.59.68.1"/>
  <changelog author="tzimmermann@suse.de" date="1651579200">- blacklist.conf: Append 'Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"'
- commit f314ea7</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1651579201">- bnx2x: fix napi API usage sequence (bsc#1198217).
- commit 62d4fc3</changelog>
  <changelog author="oneukum@suse.com" date="1651579202">- adm8211: fix error return code in adm8211_probe() (git-fixes).
- blacklist.conf:
- commit 88c7ed6</changelog>
  <changelog author="oneukum@suse.com" date="1651579203">- mwl8k: Fix a double Free in mwl8k_probe_hw (git-fixes).
- commit 83451f5</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579204">- drm/vmwgfx: Remove unused compile options (bsc#1152472)
- commit fdc716b</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579205">- backlight: qcom-wled: Respect enabled-strings in set_brightness (bsc#1152489)
- commit 9612dd6</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579206">- drm/cma-helper: Set VM_DONTEXPAND for mmap (bsc#1152472)
- commit dd83cfa</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579207">- drm/i915: s/JSP2/ICP2/ PCH (bsc#1152489)
- commit 20ca121</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579208">- drm/amdgpu: fix amdgpu_ras_block_late_init error handler (bsc#1152489)
- commit e9f409a</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579209">- drm/fb-helper: Mark screen buffers in system memory with (bsc#1152472)
- commit 40b57d4</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579210">- USB: hcd-pci: Use PCI_STD_NUM_BARS when checking standard BARs (bsc#1152489)
- commit 30a990e</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579211">- drm/amd/display: Fix memory leak in dcn21_clock_source_create (bsc#1152472)
- commit f640496</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579212">- blacklist.conf: Append 'drm/i915: Fix syncmap memory leak'
- commit 5ad47f2</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579213">- blacklist.conf: Append 'drm/tegra: Add back arm_iommu_detach_device()'
- commit f7fdb0f</changelog>
  <changelog author="osalvador@suse.de" date="1651579214">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit a40b3c9</changelog>
  <changelog author="ohering@suse.de" date="1651665600">- net: mana: Remove unnecessary check of cqe_type in
  mana_process_rx_cqe() (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Use struct_size() helper in
  mana_gd_create_dma_region() (bsc#1195651).
- commit c23f4de</changelog>
  <changelog author="martin.wilck@suse.com" date="1651665601">- Revert lpfc driver update to 14.2.0.1 (bsc#1198989)
- commit eb15c95</changelog>
  <changelog author="oneukum@suse.com" date="1651665602">- usb: dwc3: core: Fix tx/rx threshold settings (git-fixes).
- commit c81dcdc</changelog>
  <changelog author="oneukum@suse.com" date="1651665603">- usb: dwc3: core: Only handle soft-reset in DCTL (git-fixes).
- commit 454e4d6</changelog>
  <changelog author="oneukum@suse.com" date="1651665604">- usb: dwc3: gadget: Return proper request status (git-fixes).
- commit 73a340f</changelog>
</package>
<package pkgid="443f008cbcdb5d09d5478d4cdb367858868b0b9191790e8deb32ae077f92c17b" name="kernel-preempt-livepatch-devel" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="150300.59.68.1"/>
  <changelog author="tzimmermann@suse.de" date="1651579200">- blacklist.conf: Append 'Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"'
- commit f314ea7</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1651579201">- bnx2x: fix napi API usage sequence (bsc#1198217).
- commit 62d4fc3</changelog>
  <changelog author="oneukum@suse.com" date="1651579202">- adm8211: fix error return code in adm8211_probe() (git-fixes).
- blacklist.conf:
- commit 88c7ed6</changelog>
  <changelog author="oneukum@suse.com" date="1651579203">- mwl8k: Fix a double Free in mwl8k_probe_hw (git-fixes).
- commit 83451f5</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579204">- drm/vmwgfx: Remove unused compile options (bsc#1152472)
- commit fdc716b</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579205">- backlight: qcom-wled: Respect enabled-strings in set_brightness (bsc#1152489)
- commit 9612dd6</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579206">- drm/cma-helper: Set VM_DONTEXPAND for mmap (bsc#1152472)
- commit dd83cfa</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579207">- drm/i915: s/JSP2/ICP2/ PCH (bsc#1152489)
- commit 20ca121</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579208">- drm/amdgpu: fix amdgpu_ras_block_late_init error handler (bsc#1152489)
- commit e9f409a</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579209">- drm/fb-helper: Mark screen buffers in system memory with (bsc#1152472)
- commit 40b57d4</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579210">- USB: hcd-pci: Use PCI_STD_NUM_BARS when checking standard BARs (bsc#1152489)
- commit 30a990e</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579211">- drm/amd/display: Fix memory leak in dcn21_clock_source_create (bsc#1152472)
- commit f640496</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579212">- blacklist.conf: Append 'drm/i915: Fix syncmap memory leak'
- commit 5ad47f2</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579213">- blacklist.conf: Append 'drm/tegra: Add back arm_iommu_detach_device()'
- commit f7fdb0f</changelog>
  <changelog author="osalvador@suse.de" date="1651579214">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit a40b3c9</changelog>
  <changelog author="ohering@suse.de" date="1651665600">- net: mana: Remove unnecessary check of cqe_type in
  mana_process_rx_cqe() (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Use struct_size() helper in
  mana_gd_create_dma_region() (bsc#1195651).
- commit c23f4de</changelog>
  <changelog author="martin.wilck@suse.com" date="1651665601">- Revert lpfc driver update to 14.2.0.1 (bsc#1198989)
- commit eb15c95</changelog>
  <changelog author="oneukum@suse.com" date="1651665602">- usb: dwc3: core: Fix tx/rx threshold settings (git-fixes).
- commit c81dcdc</changelog>
  <changelog author="oneukum@suse.com" date="1651665603">- usb: dwc3: core: Only handle soft-reset in DCTL (git-fixes).
- commit 454e4d6</changelog>
  <changelog author="oneukum@suse.com" date="1651665604">- usb: dwc3: gadget: Return proper request status (git-fixes).
- commit 73a340f</changelog>
</package>
<package pkgid="1254e5e1460761eb4a0699d449f1d411d1c88c2186b2ac76215f88ad66a6ed15" name="kernel-preempt-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="150300.59.68.1"/>
  <changelog author="tzimmermann@suse.de" date="1651579200">- blacklist.conf: Append 'Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"'
- commit f314ea7</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1651579201">- bnx2x: fix napi API usage sequence (bsc#1198217).
- commit 62d4fc3</changelog>
  <changelog author="oneukum@suse.com" date="1651579202">- adm8211: fix error return code in adm8211_probe() (git-fixes).
- blacklist.conf:
- commit 88c7ed6</changelog>
  <changelog author="oneukum@suse.com" date="1651579203">- mwl8k: Fix a double Free in mwl8k_probe_hw (git-fixes).
- commit 83451f5</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579204">- drm/vmwgfx: Remove unused compile options (bsc#1152472)
- commit fdc716b</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579205">- backlight: qcom-wled: Respect enabled-strings in set_brightness (bsc#1152489)
- commit 9612dd6</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579206">- drm/cma-helper: Set VM_DONTEXPAND for mmap (bsc#1152472)
- commit dd83cfa</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579207">- drm/i915: s/JSP2/ICP2/ PCH (bsc#1152489)
- commit 20ca121</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579208">- drm/amdgpu: fix amdgpu_ras_block_late_init error handler (bsc#1152489)
- commit e9f409a</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579209">- drm/fb-helper: Mark screen buffers in system memory with (bsc#1152472)
- commit 40b57d4</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579210">- USB: hcd-pci: Use PCI_STD_NUM_BARS when checking standard BARs (bsc#1152489)
- commit 30a990e</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579211">- drm/amd/display: Fix memory leak in dcn21_clock_source_create (bsc#1152472)
- commit f640496</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579212">- blacklist.conf: Append 'drm/i915: Fix syncmap memory leak'
- commit 5ad47f2</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579213">- blacklist.conf: Append 'drm/tegra: Add back arm_iommu_detach_device()'
- commit f7fdb0f</changelog>
  <changelog author="osalvador@suse.de" date="1651579214">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit a40b3c9</changelog>
  <changelog author="ohering@suse.de" date="1651665600">- net: mana: Remove unnecessary check of cqe_type in
  mana_process_rx_cqe() (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Use struct_size() helper in
  mana_gd_create_dma_region() (bsc#1195651).
- commit c23f4de</changelog>
  <changelog author="martin.wilck@suse.com" date="1651665601">- Revert lpfc driver update to 14.2.0.1 (bsc#1198989)
- commit eb15c95</changelog>
  <changelog author="oneukum@suse.com" date="1651665602">- usb: dwc3: core: Fix tx/rx threshold settings (git-fixes).
- commit c81dcdc</changelog>
  <changelog author="oneukum@suse.com" date="1651665603">- usb: dwc3: core: Only handle soft-reset in DCTL (git-fixes).
- commit 454e4d6</changelog>
  <changelog author="oneukum@suse.com" date="1651665604">- usb: dwc3: gadget: Return proper request status (git-fixes).
- commit 73a340f</changelog>
</package>
<package pkgid="1f7d7a27842c6ca182fef9aab2346fcfbd9a866a695761d3f6a787e5ed449add" name="kernel-preempt-optional" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="150300.59.68.1"/>
  <changelog author="tzimmermann@suse.de" date="1651579200">- blacklist.conf: Append 'Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"'
- commit f314ea7</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1651579201">- bnx2x: fix napi API usage sequence (bsc#1198217).
- commit 62d4fc3</changelog>
  <changelog author="oneukum@suse.com" date="1651579202">- adm8211: fix error return code in adm8211_probe() (git-fixes).
- blacklist.conf:
- commit 88c7ed6</changelog>
  <changelog author="oneukum@suse.com" date="1651579203">- mwl8k: Fix a double Free in mwl8k_probe_hw (git-fixes).
- commit 83451f5</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579204">- drm/vmwgfx: Remove unused compile options (bsc#1152472)
- commit fdc716b</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579205">- backlight: qcom-wled: Respect enabled-strings in set_brightness (bsc#1152489)
- commit 9612dd6</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579206">- drm/cma-helper: Set VM_DONTEXPAND for mmap (bsc#1152472)
- commit dd83cfa</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579207">- drm/i915: s/JSP2/ICP2/ PCH (bsc#1152489)
- commit 20ca121</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579208">- drm/amdgpu: fix amdgpu_ras_block_late_init error handler (bsc#1152489)
- commit e9f409a</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579209">- drm/fb-helper: Mark screen buffers in system memory with (bsc#1152472)
- commit 40b57d4</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579210">- USB: hcd-pci: Use PCI_STD_NUM_BARS when checking standard BARs (bsc#1152489)
- commit 30a990e</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579211">- drm/amd/display: Fix memory leak in dcn21_clock_source_create (bsc#1152472)
- commit f640496</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579212">- blacklist.conf: Append 'drm/i915: Fix syncmap memory leak'
- commit 5ad47f2</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579213">- blacklist.conf: Append 'drm/tegra: Add back arm_iommu_detach_device()'
- commit f7fdb0f</changelog>
  <changelog author="osalvador@suse.de" date="1651579214">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit a40b3c9</changelog>
  <changelog author="ohering@suse.de" date="1651665600">- net: mana: Remove unnecessary check of cqe_type in
  mana_process_rx_cqe() (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Use struct_size() helper in
  mana_gd_create_dma_region() (bsc#1195651).
- commit c23f4de</changelog>
  <changelog author="martin.wilck@suse.com" date="1651665601">- Revert lpfc driver update to 14.2.0.1 (bsc#1198989)
- commit eb15c95</changelog>
  <changelog author="oneukum@suse.com" date="1651665602">- usb: dwc3: core: Fix tx/rx threshold settings (git-fixes).
- commit c81dcdc</changelog>
  <changelog author="oneukum@suse.com" date="1651665603">- usb: dwc3: core: Only handle soft-reset in DCTL (git-fixes).
- commit 454e4d6</changelog>
  <changelog author="oneukum@suse.com" date="1651665604">- usb: dwc3: gadget: Return proper request status (git-fixes).
- commit 73a340f</changelog>
</package>
<package pkgid="9ab9c166fe3a6100b0e94b786b344b0c4c9df6f97de0f978d4533c0cae2ef12a" name="kernel-preempt-optional" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="150300.59.68.1"/>
  <changelog author="tzimmermann@suse.de" date="1651579200">- blacklist.conf: Append 'Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"'
- commit f314ea7</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1651579201">- bnx2x: fix napi API usage sequence (bsc#1198217).
- commit 62d4fc3</changelog>
  <changelog author="oneukum@suse.com" date="1651579202">- adm8211: fix error return code in adm8211_probe() (git-fixes).
- blacklist.conf:
- commit 88c7ed6</changelog>
  <changelog author="oneukum@suse.com" date="1651579203">- mwl8k: Fix a double Free in mwl8k_probe_hw (git-fixes).
- commit 83451f5</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579204">- drm/vmwgfx: Remove unused compile options (bsc#1152472)
- commit fdc716b</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579205">- backlight: qcom-wled: Respect enabled-strings in set_brightness (bsc#1152489)
- commit 9612dd6</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579206">- drm/cma-helper: Set VM_DONTEXPAND for mmap (bsc#1152472)
- commit dd83cfa</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579207">- drm/i915: s/JSP2/ICP2/ PCH (bsc#1152489)
- commit 20ca121</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579208">- drm/amdgpu: fix amdgpu_ras_block_late_init error handler (bsc#1152489)
- commit e9f409a</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579209">- drm/fb-helper: Mark screen buffers in system memory with (bsc#1152472)
- commit 40b57d4</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579210">- USB: hcd-pci: Use PCI_STD_NUM_BARS when checking standard BARs (bsc#1152489)
- commit 30a990e</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579211">- drm/amd/display: Fix memory leak in dcn21_clock_source_create (bsc#1152472)
- commit f640496</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579212">- blacklist.conf: Append 'drm/i915: Fix syncmap memory leak'
- commit 5ad47f2</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579213">- blacklist.conf: Append 'drm/tegra: Add back arm_iommu_detach_device()'
- commit f7fdb0f</changelog>
  <changelog author="osalvador@suse.de" date="1651579214">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit a40b3c9</changelog>
  <changelog author="ohering@suse.de" date="1651665600">- net: mana: Remove unnecessary check of cqe_type in
  mana_process_rx_cqe() (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Use struct_size() helper in
  mana_gd_create_dma_region() (bsc#1195651).
- commit c23f4de</changelog>
  <changelog author="martin.wilck@suse.com" date="1651665601">- Revert lpfc driver update to 14.2.0.1 (bsc#1198989)
- commit eb15c95</changelog>
  <changelog author="oneukum@suse.com" date="1651665602">- usb: dwc3: core: Fix tx/rx threshold settings (git-fixes).
- commit c81dcdc</changelog>
  <changelog author="oneukum@suse.com" date="1651665603">- usb: dwc3: core: Only handle soft-reset in DCTL (git-fixes).
- commit 454e4d6</changelog>
  <changelog author="oneukum@suse.com" date="1651665604">- usb: dwc3: gadget: Return proper request status (git-fixes).
- commit 73a340f</changelog>
</package>
<package pkgid="a48f90905bf741997a0b295053aaab3bdfb35137dad3f4293bf01eb5e6b85bd8" name="kselftests-kmp-preempt" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="150300.59.68.1"/>
  <changelog author="tzimmermann@suse.de" date="1651579200">- blacklist.conf: Append 'Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"'
- commit f314ea7</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1651579201">- bnx2x: fix napi API usage sequence (bsc#1198217).
- commit 62d4fc3</changelog>
  <changelog author="oneukum@suse.com" date="1651579202">- adm8211: fix error return code in adm8211_probe() (git-fixes).
- blacklist.conf:
- commit 88c7ed6</changelog>
  <changelog author="oneukum@suse.com" date="1651579203">- mwl8k: Fix a double Free in mwl8k_probe_hw (git-fixes).
- commit 83451f5</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579204">- drm/vmwgfx: Remove unused compile options (bsc#1152472)
- commit fdc716b</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579205">- backlight: qcom-wled: Respect enabled-strings in set_brightness (bsc#1152489)
- commit 9612dd6</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579206">- drm/cma-helper: Set VM_DONTEXPAND for mmap (bsc#1152472)
- commit dd83cfa</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579207">- drm/i915: s/JSP2/ICP2/ PCH (bsc#1152489)
- commit 20ca121</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579208">- drm/amdgpu: fix amdgpu_ras_block_late_init error handler (bsc#1152489)
- commit e9f409a</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579209">- drm/fb-helper: Mark screen buffers in system memory with (bsc#1152472)
- commit 40b57d4</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579210">- USB: hcd-pci: Use PCI_STD_NUM_BARS when checking standard BARs (bsc#1152489)
- commit 30a990e</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579211">- drm/amd/display: Fix memory leak in dcn21_clock_source_create (bsc#1152472)
- commit f640496</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579212">- blacklist.conf: Append 'drm/i915: Fix syncmap memory leak'
- commit 5ad47f2</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579213">- blacklist.conf: Append 'drm/tegra: Add back arm_iommu_detach_device()'
- commit f7fdb0f</changelog>
  <changelog author="osalvador@suse.de" date="1651579214">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit a40b3c9</changelog>
  <changelog author="ohering@suse.de" date="1651665600">- net: mana: Remove unnecessary check of cqe_type in
  mana_process_rx_cqe() (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Use struct_size() helper in
  mana_gd_create_dma_region() (bsc#1195651).
- commit c23f4de</changelog>
  <changelog author="martin.wilck@suse.com" date="1651665601">- Revert lpfc driver update to 14.2.0.1 (bsc#1198989)
- commit eb15c95</changelog>
  <changelog author="oneukum@suse.com" date="1651665602">- usb: dwc3: core: Fix tx/rx threshold settings (git-fixes).
- commit c81dcdc</changelog>
  <changelog author="oneukum@suse.com" date="1651665603">- usb: dwc3: core: Only handle soft-reset in DCTL (git-fixes).
- commit 454e4d6</changelog>
  <changelog author="oneukum@suse.com" date="1651665604">- usb: dwc3: gadget: Return proper request status (git-fixes).
- commit 73a340f</changelog>
</package>
<package pkgid="a334ed99fecd1efe8ddcb99e96718ff2974f049c3859f061e2fede52a1263b8a" name="kselftests-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="150300.59.68.1"/>
  <changelog author="tzimmermann@suse.de" date="1651579200">- blacklist.conf: Append 'Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"'
- commit f314ea7</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1651579201">- bnx2x: fix napi API usage sequence (bsc#1198217).
- commit 62d4fc3</changelog>
  <changelog author="oneukum@suse.com" date="1651579202">- adm8211: fix error return code in adm8211_probe() (git-fixes).
- blacklist.conf:
- commit 88c7ed6</changelog>
  <changelog author="oneukum@suse.com" date="1651579203">- mwl8k: Fix a double Free in mwl8k_probe_hw (git-fixes).
- commit 83451f5</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579204">- drm/vmwgfx: Remove unused compile options (bsc#1152472)
- commit fdc716b</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579205">- backlight: qcom-wled: Respect enabled-strings in set_brightness (bsc#1152489)
- commit 9612dd6</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579206">- drm/cma-helper: Set VM_DONTEXPAND for mmap (bsc#1152472)
- commit dd83cfa</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579207">- drm/i915: s/JSP2/ICP2/ PCH (bsc#1152489)
- commit 20ca121</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579208">- drm/amdgpu: fix amdgpu_ras_block_late_init error handler (bsc#1152489)
- commit e9f409a</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579209">- drm/fb-helper: Mark screen buffers in system memory with (bsc#1152472)
- commit 40b57d4</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579210">- USB: hcd-pci: Use PCI_STD_NUM_BARS when checking standard BARs (bsc#1152489)
- commit 30a990e</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579211">- drm/amd/display: Fix memory leak in dcn21_clock_source_create (bsc#1152472)
- commit f640496</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579212">- blacklist.conf: Append 'drm/i915: Fix syncmap memory leak'
- commit 5ad47f2</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579213">- blacklist.conf: Append 'drm/tegra: Add back arm_iommu_detach_device()'
- commit f7fdb0f</changelog>
  <changelog author="osalvador@suse.de" date="1651579214">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit a40b3c9</changelog>
  <changelog author="ohering@suse.de" date="1651665600">- net: mana: Remove unnecessary check of cqe_type in
  mana_process_rx_cqe() (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Use struct_size() helper in
  mana_gd_create_dma_region() (bsc#1195651).
- commit c23f4de</changelog>
  <changelog author="martin.wilck@suse.com" date="1651665601">- Revert lpfc driver update to 14.2.0.1 (bsc#1198989)
- commit eb15c95</changelog>
  <changelog author="oneukum@suse.com" date="1651665602">- usb: dwc3: core: Fix tx/rx threshold settings (git-fixes).
- commit c81dcdc</changelog>
  <changelog author="oneukum@suse.com" date="1651665603">- usb: dwc3: core: Only handle soft-reset in DCTL (git-fixes).
- commit 454e4d6</changelog>
  <changelog author="oneukum@suse.com" date="1651665604">- usb: dwc3: gadget: Return proper request status (git-fixes).
- commit 73a340f</changelog>
</package>
<package pkgid="2315af51d8d1cbfe3954ef685d0a82319908819abcb0d79cf8d8fe750e6d15ea" name="kvm_stat" arch="noarch">
  <version epoch="0" ver="5.3.18" rel="150300.19.3.1"/>
  <changelog author="jengelh@inai.de" date="1477828800">- Simplify copying around</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="brogers@suse.com" date="1532606400">- Add a qemu package conflicts directive since SLE releases provided
  the kvm_stat script via the qemu package, while older openSUSE
  releases had provided it through qemu-kvm, which is already
  handled. (bsc#1102746 related)
- Change package to be noarch. kvm_stat is written in python, and
  is useful to multiple architectures which have kvm support.
- Drop the kernel README and CREDITS files, since they don't really
  represent this package in any meaningful way.
- Minor spec file tweaks performed.</changelog>
  <changelog author="brogers@suse.com" date="1541764800">- Add "Requires: python-curses" in kvm_stat.spec as this package
  needs to be installed to make kvm_stat work. (bsc#1114465)</changelog>
  <changelog author="ldewey@suse.com" date="1542628800">* Incorporating patches and comments produced by Fei Li for
  SLE15-SP1
- Backport 43 kvm_stat patches between kernel v4.16-* and current
  v4.12.14 for the kvm_stat package. Actually some of the patches
  are s390x specific, and some are noarch. (FATE#325017)
  + 0001-tools-kvm_stat-fix-event-counts-display-for-interrup.patch
  + 0002-tools-kvm_stat-fix-undue-use-of-initial-sleeptime.patch
  + 0003-tools-kvm_stat-remove-unnecessary-header-redraws.patch
  + 0004-tools-kvm_stat-simplify-line-print-logic.patch
  + 0005-tools-kvm_stat-remove-extra-statement.patch
  + 0006-tools-kvm_stat-simplify-initializers.patch
  + 0007-tools-kvm_stat-move-functions-to-corresponding-class.patch
  + 0008-tools-kvm_stat-show-cursor-in-selection-screens.patch
  + 0009-tools-kvm_stat-display-message-indicating-lack-of-ev.patch
  + 0010-tools-kvm_stat-make-heading-look-a-bit-more-like-top.patch
  + 0011-tools-kvm_stat-rename-Current-column-to-CurAvg-s.patch
  + 0012-tools-kvm_stat-add-new-interactive-command-h.patch
  + 0013-tools-kvm_stat-add-new-interactive-command-s.patch
  + 0014-tools-kvm_stat-add-new-interactive-command-o.patch
  + 0015-tools-kvm_stat-display-guest-list-in-pid-guest-selec.patch
  + 0016-tools-kvm_stat-fix-error-on-interactive-command-g.patch
  + 0017-tools-kvm_stat-add-new-command-line-switch-i.patch
  + 0018-tools-kvm_stat-add-new-interactive-command-b.patch
  + 0019-tools-kvm_stat-add-f-help-to-get-the-available-event.patch
  + 0020-tools-kvm_stat-Add-Python-3-support-to-kvm_stat.patch
  + 0021-tools-kvm_stat-fix-command-line-option-g.patch
  + 0022-tools-kvm_stat-fix-drilldown-in-events-by-guests-mod.patch
  + 0023-tools-kvm_stat-fix-missing-field-update-after-filter.patch
  + 0024-tools-kvm_stat-fix-extra-handling-of-help-with-field.patch
  + 0025-tools-kvm_stat-add-hint-on-f-help-to-man-page.patch
  + 0026-tools-kvm_stat-fix-child-trace-events-accounting.patch
  + 0027-tools-kvm_stat-handle-invalid-regular-expressions.patch
  + 0028-tools-kvm_stat-suppress-usage-information-on-command.patch
  + 0029-tools-kvm_stat-stop-ignoring-unhandled-arguments.patch
  + 0030-tools-kvm_stat-add-line-for-totals.patch
  + 0031-tools-kvm_stat-sort-f-help-output.patch
  + 0032-tools-kvm_stat-simplify-the-sortkey-function.patch
  + 0033-tools-kvm_stat-use-a-namedtuple-for-storing-the-valu.patch
  + 0034-tools-kvm_stat-use-a-more-pythonic-way-to-iterate-ov.patch
  + 0035-tools-kvm_stat-avoid-is-for-equality-checks.patch
  + 0036-tools-kvm_stat-fix-crash-when-filtering-out-all-non-.patch
  + 0037-tools-kvm_stat-print-error-on-invalid-regex.patch
  + 0038-tools-kvm_stat-fix-debugfs-handling.patch
  + 0039-tools-kvm_stat-mark-private-methods-as-such.patch
  + 0040-tools-kvm_stat-eliminate-extra-guest-pid-selection-d.patch
  + 0041-tools-kvm_stat-separate-drilldown-and-fields-filteri.patch
  + 0042-tools-kvm_stat-group-child-events-indented-after-par.patch
  + 0043-tools-kvm_stat-print-Total-line-for-multiple-events-.patch</changelog>
  <changelog author="brogers@suse.com" date="1543233600">- Make kvm_stat use python3 (bsc#1116822)
  + 0044-tools-kvm_stat-Don-t-use-deprecated-file.patch
  + 0045-tools-kvm_stat-fix-python3-issues.patch
  + 0046-tools-kvm_stat-apply-python-2to3-fixes-to-kvm_stat.patch
  + 0047-tools-kvm_stat-switch-python-reference-to-be-explici.patch</changelog>
  <changelog author="ldewey@suse.com" date="1543492800">* Changed the spec file to build SLE15-SP1 with the s390x patches,
  and added logic to the spec file to uniquely build Factory and
  SLE-15 as they do not require the first 44 patches, and the code
  base is not the same
- Making kvm_stat use python3 for openSUSE (bsc#1116822)
  - 0047-tools-kvm_stat-switch-python-reference-to-be-explici.patch
  + 0047-tools-kvm_stat-apply-python-2to3-fixes-to-kvm_stat2.patch
  + 0048-tools-kvm_stat-apply-python-2to3-fixes-to-kvm_stat3.patch
  + 0049-tools-kvm_stat-switch-python-reference-to-be-explici.patch</changelog>
  <changelog author="brogers@suse.com" date="1552564800">- Add python3 tweak to be compatible with v5.0 kernel source
  (bsc#1116822)
  + 0050-tools-kvm_stat-switch-python-reference-again.patch</changelog>
  <changelog author="brogers@suse.com" date="1565092800">- Adjust a patch that no longer applies due to upstream (non-code)
  changes</changelog>
  <changelog author="brogers@suse.com" date="1568289600">- Detect SLE15-SP2 / Leap 15.2 and patch accordingly</changelog>
  <changelog author="brogers@suse.com" date="1569326400">- Fix our patching for Leap 15.1 (boo#1140899)</changelog>
  <changelog author="brogers@suse.com" date="1583928000">- Remove legacy compatability patching, since that usage no longer
  needs to be single sourced with this current package. Python3 is
  now assumed. Also get rid of the final patch based on running
  2to3, since those changes are not really needed: the kvm_stat now
  in the current kernel source is good python3 code
  Patches removed:
  0001-tools-kvm_stat-fix-event-counts-display-for-interrup.patch
  0002-tools-kvm_stat-fix-undue-use-of-initial-sleeptime.patch
  0003-tools-kvm_stat-remove-unnecessary-header-redraws.patch
  0004-tools-kvm_stat-simplify-line-print-logic.patch
  0005-tools-kvm_stat-remove-extra-statement.patch
  0006-tools-kvm_stat-simplify-initializers.patch
  0007-tools-kvm_stat-move-functions-to-corresponding-class.patch
  0008-tools-kvm_stat-show-cursor-in-selection-screens.patch
  0009-tools-kvm_stat-display-message-indicating-lack-of-ev.patch
  0010-tools-kvm_stat-make-heading-look-a-bit-more-like-top.patch
  0011-tools-kvm_stat-rename-Current-column-to-CurAvg-s.patch
  0012-tools-kvm_stat-add-new-interactive-command-h.patch
  0013-tools-kvm_stat-add-new-interactive-command-s.patch
  0014-tools-kvm_stat-add-new-interactive-command-o.patch
  0015-tools-kvm_stat-display-guest-list-in-pid-guest-selec.patch
  0016-tools-kvm_stat-fix-error-on-interactive-command-g.patch
  0017-tools-kvm_stat-add-new-command-line-switch-i.patch
  0018-tools-kvm_stat-add-new-interactive-command-b.patch
  0019-tools-kvm_stat-add-f-help-to-get-the-available-event.patch
  0020-tools-kvm_stat-Add-Python-3-support-to-kvm_stat.patch
  0021-tools-kvm_stat-fix-command-line-option-g.patch
  0022-tools-kvm_stat-fix-drilldown-in-events-by-guests-mod.patch
  0023-tools-kvm_stat-fix-missing-field-update-after-filter.patch
  0024-tools-kvm_stat-fix-extra-handling-of-help-with-field.patch
  0025-tools-kvm_stat-add-hint-on-f-help-to-man-page.patch
  0026-tools-kvm_stat-fix-child-trace-events-accounting.patch
  0027-tools-kvm_stat-handle-invalid-regular-expressions.patch
  0028-tools-kvm_stat-suppress-usage-information-on-command.patch
  0029-tools-kvm_stat-stop-ignoring-unhandled-arguments.patch
  0030-tools-kvm_stat-add-line-for-totals.patch
  0031-tools-kvm_stat-sort-f-help-output.patch
  0032-tools-kvm_stat-simplify-the-sortkey-function.patch
  0033-tools-kvm_stat-use-a-namedtuple-for-storing-the-valu.patch
  0034-tools-kvm_stat-use-a-more-pythonic-way-to-iterate-ov.patch
  0035-tools-kvm_stat-avoid-is-for-equality-checks.patch
  0036-tools-kvm_stat-fix-crash-when-filtering-out-all-non-.patch
  0037-tools-kvm_stat-print-error-on-invalid-regex.patch
  0038-tools-kvm_stat-fix-debugfs-handling.patch
  0039-tools-kvm_stat-mark-private-methods-as-such.patch
  0040-tools-kvm_stat-eliminate-extra-guest-pid-selection-d.patch
  0041-tools-kvm_stat-separate-drilldown-and-fields-filteri.patch
  0042-tools-kvm_stat-group-child-events-indented-after-par.patch
  0043-tools-kvm_stat-print-Total-line-for-multiple-events-.patch
  0044-tools-kvm_stat-Don-t-use-deprecated-file.patch
  0045-tools-kvm_stat-fix-python3-issues.patch
  0046-tools-kvm_stat-apply-python-2to3-fixes-to-kvm_stat.patch
  0047-tools-kvm_stat-apply-python-2to3-fixes-to-kvm_stat2.patch
  0048-tools-kvm_stat-apply-python-2to3-fixes-to-kvm_stat3.patch
  0049-tools-kvm_stat-switch-python-reference-to-be-explici.patch
  0050-tools-kvm_stat-switch-python-reference-again.patch
  Patches added:
  tools-kvm_stat-explicitly-reference-python3.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1605268800">- Implement jsc#SLE-13784
  * Add patches:
  * rework-command-line-sequence.patch
  * switch-to-argparse.patch
  * add-command-line-switch-s-to-update.patch
  * add-command-line-switch-c-to-csv.patch
  * add-command-line-switch-z-skip-zero-records.patch
  * add-command-line-switch-L-to-log-file.patch
  * add-sample-systemd-unit.patch
  * patching is conditional, depending on kernel version</changelog>
  <changelog author="dfaggioli@suse.com" date="1607083200">- Include the example service file in the package
  * install it in /usr/share/kvm_stat
  * this deals properly with bsc#1179469</changelog>
  <changelog author="dfaggioli@suse.com" date="1608724800">- Fix kernel version comparison for selectively applying patches
  * so that it won't break when, e.g., 5.10.0 hits Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1610107200">- Remove broken patch tools-kvm_stat-explicitly-reference-python3.patch
  * the patch does not apply any longer, at least on top of
    Kernel source packages does the same (i.e., replacing /usr/bin/env)
    in their own kernel-source.spec;
  * therefore, let's take care of that directly inside of our own spec
    file instead, which is a solution that always work, no matter what
    has been done in the Kernel source package.</changelog>
  <changelog author="dfaggioli@suse.com" date="1610107201">- Get rid of the stale patch file.</changelog>
  <changelog author="dfaggioli@suse.com" date="1611835200">- Install the systemd unit file in the proper place, so that the
  service can be started right away, if the user wants that, without
  having to copy the file in the units directory.
- Integrate with logrotate, by providing a  logrotate config file, as
  the logs can easily become very big.</changelog>
  <changelog author="dimstar@opensuse.org" date="1611835201">- Add a dummy -rebuild package: give OBS/Tumbleweed a hint to tell
  when this package needs a rebuild (boo#1178493).</changelog>
  <changelog author="acho@suse.com" date="1625659200">- If the kvm service is enabled and the system rebooted,
  Systemd's initial attempt to start the kvm unit file may
  fail in case the kvm module is not loaded.
  Add an appropriate delay in the unit file. (bsc#1185945)
  * Add patches:
  * add-restart-delay.patch</changelog>
</package>
<package pkgid="2ead37c094112b14d735507995267f93fd34dd3e60bccaa7482c90475c51fc92" name="kvm_stat" arch="src">
  <version epoch="0" ver="5.3.18" rel="150300.19.3.1"/>
  <changelog author="jengelh@inai.de" date="1477828800">- Simplify copying around</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="brogers@suse.com" date="1532606400">- Add a qemu package conflicts directive since SLE releases provided
  the kvm_stat script via the qemu package, while older openSUSE
  releases had provided it through qemu-kvm, which is already
  handled. (bsc#1102746 related)
- Change package to be noarch. kvm_stat is written in python, and
  is useful to multiple architectures which have kvm support.
- Drop the kernel README and CREDITS files, since they don't really
  represent this package in any meaningful way.
- Minor spec file tweaks performed.</changelog>
  <changelog author="brogers@suse.com" date="1541764800">- Add "Requires: python-curses" in kvm_stat.spec as this package
  needs to be installed to make kvm_stat work. (bsc#1114465)</changelog>
  <changelog author="ldewey@suse.com" date="1542628800">* Incorporating patches and comments produced by Fei Li for
  SLE15-SP1
- Backport 43 kvm_stat patches between kernel v4.16-* and current
  v4.12.14 for the kvm_stat package. Actually some of the patches
  are s390x specific, and some are noarch. (FATE#325017)
  + 0001-tools-kvm_stat-fix-event-counts-display-for-interrup.patch
  + 0002-tools-kvm_stat-fix-undue-use-of-initial-sleeptime.patch
  + 0003-tools-kvm_stat-remove-unnecessary-header-redraws.patch
  + 0004-tools-kvm_stat-simplify-line-print-logic.patch
  + 0005-tools-kvm_stat-remove-extra-statement.patch
  + 0006-tools-kvm_stat-simplify-initializers.patch
  + 0007-tools-kvm_stat-move-functions-to-corresponding-class.patch
  + 0008-tools-kvm_stat-show-cursor-in-selection-screens.patch
  + 0009-tools-kvm_stat-display-message-indicating-lack-of-ev.patch
  + 0010-tools-kvm_stat-make-heading-look-a-bit-more-like-top.patch
  + 0011-tools-kvm_stat-rename-Current-column-to-CurAvg-s.patch
  + 0012-tools-kvm_stat-add-new-interactive-command-h.patch
  + 0013-tools-kvm_stat-add-new-interactive-command-s.patch
  + 0014-tools-kvm_stat-add-new-interactive-command-o.patch
  + 0015-tools-kvm_stat-display-guest-list-in-pid-guest-selec.patch
  + 0016-tools-kvm_stat-fix-error-on-interactive-command-g.patch
  + 0017-tools-kvm_stat-add-new-command-line-switch-i.patch
  + 0018-tools-kvm_stat-add-new-interactive-command-b.patch
  + 0019-tools-kvm_stat-add-f-help-to-get-the-available-event.patch
  + 0020-tools-kvm_stat-Add-Python-3-support-to-kvm_stat.patch
  + 0021-tools-kvm_stat-fix-command-line-option-g.patch
  + 0022-tools-kvm_stat-fix-drilldown-in-events-by-guests-mod.patch
  + 0023-tools-kvm_stat-fix-missing-field-update-after-filter.patch
  + 0024-tools-kvm_stat-fix-extra-handling-of-help-with-field.patch
  + 0025-tools-kvm_stat-add-hint-on-f-help-to-man-page.patch
  + 0026-tools-kvm_stat-fix-child-trace-events-accounting.patch
  + 0027-tools-kvm_stat-handle-invalid-regular-expressions.patch
  + 0028-tools-kvm_stat-suppress-usage-information-on-command.patch
  + 0029-tools-kvm_stat-stop-ignoring-unhandled-arguments.patch
  + 0030-tools-kvm_stat-add-line-for-totals.patch
  + 0031-tools-kvm_stat-sort-f-help-output.patch
  + 0032-tools-kvm_stat-simplify-the-sortkey-function.patch
  + 0033-tools-kvm_stat-use-a-namedtuple-for-storing-the-valu.patch
  + 0034-tools-kvm_stat-use-a-more-pythonic-way-to-iterate-ov.patch
  + 0035-tools-kvm_stat-avoid-is-for-equality-checks.patch
  + 0036-tools-kvm_stat-fix-crash-when-filtering-out-all-non-.patch
  + 0037-tools-kvm_stat-print-error-on-invalid-regex.patch
  + 0038-tools-kvm_stat-fix-debugfs-handling.patch
  + 0039-tools-kvm_stat-mark-private-methods-as-such.patch
  + 0040-tools-kvm_stat-eliminate-extra-guest-pid-selection-d.patch
  + 0041-tools-kvm_stat-separate-drilldown-and-fields-filteri.patch
  + 0042-tools-kvm_stat-group-child-events-indented-after-par.patch
  + 0043-tools-kvm_stat-print-Total-line-for-multiple-events-.patch</changelog>
  <changelog author="brogers@suse.com" date="1543233600">- Make kvm_stat use python3 (bsc#1116822)
  + 0044-tools-kvm_stat-Don-t-use-deprecated-file.patch
  + 0045-tools-kvm_stat-fix-python3-issues.patch
  + 0046-tools-kvm_stat-apply-python-2to3-fixes-to-kvm_stat.patch
  + 0047-tools-kvm_stat-switch-python-reference-to-be-explici.patch</changelog>
  <changelog author="ldewey@suse.com" date="1543492800">* Changed the spec file to build SLE15-SP1 with the s390x patches,
  and added logic to the spec file to uniquely build Factory and
  SLE-15 as they do not require the first 44 patches, and the code
  base is not the same
- Making kvm_stat use python3 for openSUSE (bsc#1116822)
  - 0047-tools-kvm_stat-switch-python-reference-to-be-explici.patch
  + 0047-tools-kvm_stat-apply-python-2to3-fixes-to-kvm_stat2.patch
  + 0048-tools-kvm_stat-apply-python-2to3-fixes-to-kvm_stat3.patch
  + 0049-tools-kvm_stat-switch-python-reference-to-be-explici.patch</changelog>
  <changelog author="brogers@suse.com" date="1552564800">- Add python3 tweak to be compatible with v5.0 kernel source
  (bsc#1116822)
  + 0050-tools-kvm_stat-switch-python-reference-again.patch</changelog>
  <changelog author="brogers@suse.com" date="1565092800">- Adjust a patch that no longer applies due to upstream (non-code)
  changes</changelog>
  <changelog author="brogers@suse.com" date="1568289600">- Detect SLE15-SP2 / Leap 15.2 and patch accordingly</changelog>
  <changelog author="brogers@suse.com" date="1569326400">- Fix our patching for Leap 15.1 (boo#1140899)</changelog>
  <changelog author="brogers@suse.com" date="1583928000">- Remove legacy compatability patching, since that usage no longer
  needs to be single sourced with this current package. Python3 is
  now assumed. Also get rid of the final patch based on running
  2to3, since those changes are not really needed: the kvm_stat now
  in the current kernel source is good python3 code
  Patches removed:
  0001-tools-kvm_stat-fix-event-counts-display-for-interrup.patch
  0002-tools-kvm_stat-fix-undue-use-of-initial-sleeptime.patch
  0003-tools-kvm_stat-remove-unnecessary-header-redraws.patch
  0004-tools-kvm_stat-simplify-line-print-logic.patch
  0005-tools-kvm_stat-remove-extra-statement.patch
  0006-tools-kvm_stat-simplify-initializers.patch
  0007-tools-kvm_stat-move-functions-to-corresponding-class.patch
  0008-tools-kvm_stat-show-cursor-in-selection-screens.patch
  0009-tools-kvm_stat-display-message-indicating-lack-of-ev.patch
  0010-tools-kvm_stat-make-heading-look-a-bit-more-like-top.patch
  0011-tools-kvm_stat-rename-Current-column-to-CurAvg-s.patch
  0012-tools-kvm_stat-add-new-interactive-command-h.patch
  0013-tools-kvm_stat-add-new-interactive-command-s.patch
  0014-tools-kvm_stat-add-new-interactive-command-o.patch
  0015-tools-kvm_stat-display-guest-list-in-pid-guest-selec.patch
  0016-tools-kvm_stat-fix-error-on-interactive-command-g.patch
  0017-tools-kvm_stat-add-new-command-line-switch-i.patch
  0018-tools-kvm_stat-add-new-interactive-command-b.patch
  0019-tools-kvm_stat-add-f-help-to-get-the-available-event.patch
  0020-tools-kvm_stat-Add-Python-3-support-to-kvm_stat.patch
  0021-tools-kvm_stat-fix-command-line-option-g.patch
  0022-tools-kvm_stat-fix-drilldown-in-events-by-guests-mod.patch
  0023-tools-kvm_stat-fix-missing-field-update-after-filter.patch
  0024-tools-kvm_stat-fix-extra-handling-of-help-with-field.patch
  0025-tools-kvm_stat-add-hint-on-f-help-to-man-page.patch
  0026-tools-kvm_stat-fix-child-trace-events-accounting.patch
  0027-tools-kvm_stat-handle-invalid-regular-expressions.patch
  0028-tools-kvm_stat-suppress-usage-information-on-command.patch
  0029-tools-kvm_stat-stop-ignoring-unhandled-arguments.patch
  0030-tools-kvm_stat-add-line-for-totals.patch
  0031-tools-kvm_stat-sort-f-help-output.patch
  0032-tools-kvm_stat-simplify-the-sortkey-function.patch
  0033-tools-kvm_stat-use-a-namedtuple-for-storing-the-valu.patch
  0034-tools-kvm_stat-use-a-more-pythonic-way-to-iterate-ov.patch
  0035-tools-kvm_stat-avoid-is-for-equality-checks.patch
  0036-tools-kvm_stat-fix-crash-when-filtering-out-all-non-.patch
  0037-tools-kvm_stat-print-error-on-invalid-regex.patch
  0038-tools-kvm_stat-fix-debugfs-handling.patch
  0039-tools-kvm_stat-mark-private-methods-as-such.patch
  0040-tools-kvm_stat-eliminate-extra-guest-pid-selection-d.patch
  0041-tools-kvm_stat-separate-drilldown-and-fields-filteri.patch
  0042-tools-kvm_stat-group-child-events-indented-after-par.patch
  0043-tools-kvm_stat-print-Total-line-for-multiple-events-.patch
  0044-tools-kvm_stat-Don-t-use-deprecated-file.patch
  0045-tools-kvm_stat-fix-python3-issues.patch
  0046-tools-kvm_stat-apply-python-2to3-fixes-to-kvm_stat.patch
  0047-tools-kvm_stat-apply-python-2to3-fixes-to-kvm_stat2.patch
  0048-tools-kvm_stat-apply-python-2to3-fixes-to-kvm_stat3.patch
  0049-tools-kvm_stat-switch-python-reference-to-be-explici.patch
  0050-tools-kvm_stat-switch-python-reference-again.patch
  Patches added:
  tools-kvm_stat-explicitly-reference-python3.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1605268800">- Implement jsc#SLE-13784
  * Add patches:
  * rework-command-line-sequence.patch
  * switch-to-argparse.patch
  * add-command-line-switch-s-to-update.patch
  * add-command-line-switch-c-to-csv.patch
  * add-command-line-switch-z-skip-zero-records.patch
  * add-command-line-switch-L-to-log-file.patch
  * add-sample-systemd-unit.patch
  * patching is conditional, depending on kernel version</changelog>
  <changelog author="dfaggioli@suse.com" date="1607083200">- Include the example service file in the package
  * install it in /usr/share/kvm_stat
  * this deals properly with bsc#1179469</changelog>
  <changelog author="dfaggioli@suse.com" date="1608724800">- Fix kernel version comparison for selectively applying patches
  * so that it won't break when, e.g., 5.10.0 hits Factory</changelog>
  <changelog author="dfaggioli@suse.com" date="1610107200">- Remove broken patch tools-kvm_stat-explicitly-reference-python3.patch
  * the patch does not apply any longer, at least on top of
    Kernel source packages does the same (i.e., replacing /usr/bin/env)
    in their own kernel-source.spec;
  * therefore, let's take care of that directly inside of our own spec
    file instead, which is a solution that always work, no matter what
    has been done in the Kernel source package.</changelog>
  <changelog author="dfaggioli@suse.com" date="1610107201">- Get rid of the stale patch file.</changelog>
  <changelog author="dfaggioli@suse.com" date="1611835200">- Install the systemd unit file in the proper place, so that the
  service can be started right away, if the user wants that, without
  having to copy the file in the units directory.
- Integrate with logrotate, by providing a  logrotate config file, as
  the logs can easily become very big.</changelog>
  <changelog author="dimstar@opensuse.org" date="1611835201">- Add a dummy -rebuild package: give OBS/Tumbleweed a hint to tell
  when this package needs a rebuild (boo#1178493).</changelog>
  <changelog author="acho@suse.com" date="1625659200">- If the kvm service is enabled and the system rebooted,
  Systemd's initial attempt to start the kvm unit file may
  fail in case the kvm module is not loaded.
  Add an appropriate delay in the unit file. (bsc#1185945)
  * Add patches:
  * add-restart-delay.patch</changelog>
</package>
<package pkgid="15a49fafa104586c0d8fc8799970a8dac366fd3357334c6d315d0b5e23a706d4" name="leveldb" arch="src">
  <version epoch="0" ver="1.18" rel="150000.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1328702400">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1328702401">- added shared library patch
- update to shared/static library packaging policy</changelog>
  <changelog author="ddiss@suse.com" date="1373976000">- Updated to 1.12.0
  + removed shared_library.patch, now upstream.</changelog>
  <changelog author="ddiss@suse.com" date="1381233600">- Updated to 1.14.0</changelog>
  <changelog author="i@marguerite.su" date="1381665600">- ran spec-cleaner. too casual the specfile was.
- make check/make clean is no more for OBS.
- add Provides/Obsoletes to libleveldb1.
  * no one know that name, provide leveldb itself
  * required by python-leveldb and python3-leveldb</changelog>
  <changelog author="ddiss@suse.com" date="1383480000">- Changed shared libs group to System/Libraries.</changelog>
  <changelog author="ro@suse.de" date="1387368000">- add support for other archs (taken from debian, 0001-debian-ports.patch)</changelog>
  <changelog author="ddiss@suse.com" date="1391601600">- updated to 1.15.0
  + switched from mmap based writing to simpler stdio based writing. Has
    a minor impact (0.5 microseconds) on microbenchmarks for asynchronous
    writes. Synchronous writes speed up from 30ms to 10ms on linux/ext4.
    Should be much more reliable on diverse platforms.
  + compaction errors now immediately put the database into a read-only
    mode (until it is re-opened). As a downside, a disk going out of
    space and then space being created will require a re-open to recover
    from, whereas previously that would happen automatically. On the
    plus side, many corruption possibilities go away.
  + force the DB to enter an error-state so that all future writes fail
    when a synchronous log write succeeds but the sync fails.
  + repair now regenerates sstables that exhibit problems
  + fix issue 218 - Use native memory barriers on OSX
  + fix issue 212 - QNX build is broken
  + fix build on iOS with xcode 5
  + make tests compile and pass on windows
- refreshed 0001-debian-ports.patch
  + moved OS_MACOSX hunk</changelog>
  <changelog author="ddiss@suse.com" date="1396872000">- updated to 1.16.0
  + Make Log::Reader not report a corruption when the last record in a
    log file is truncated.
  + Fix issue 224: variable created but not utilized.
  + Remove comment that referenced a removed feature.</changelog>
  <changelog author="dmueller@suse.com" date="1413806400">- update to 1.18:
  + Replace the basic fprintf call with a call to fwrite
  + Fix ALL the header guards.
  + A new CONTRIBUTING file.
  + leveldb: Remove unused function 'ConsumeChar'.
  + leveldbutil: Remove unused member variables from WriteBatchItemPrinter.
  + Verify checksums of index/meta/filter blocks when paranoid_checks set.
  + Invoke all tools for iOS with xcrun. (This was causing problems with the new XCode 5.1.1 image on pulse.)
  + include only once, and fix the following linter warning: "Found C system header after C++ system header"
  + When encountering a corrupted table file, return Status::Corruption instead of Status::InvalidArgument.
  + Support cygwin as build platform, patch is from https://code.google.com/p/leveldb/issues/detail?id=188
  + Fix typo, merge patch from https://code.google.com/p/leveldb/issues/detail?id=159
  + Fix typos and comments, and address the following two issues:
  + Add missing db synchronize after "fillseq" in the benchmark.
  + Removed unused variable in SeekRandom: value (issue #201)</changelog>
  <changelog author="mpluskal@suse.com" date="1428235200">- Update project url
- Use url for source
- Enable tests</changelog>
  <changelog author="ncutler@suse.com" date="1521028800">- revert to 1.18 because 1.20 causes ceph-osd to crash
  (bsc#1054194, bsc#1083921)
- FATE#319443 (aarch64 enablement) changes were backported by
  https://build.opensuse.org/request/show/294636 and are part
  of this release. Factory version builds on aarch64.
  (bsc#1041611)</changelog>
  <changelog author="pgajdos@suse.com" date="1649073600">- fix tests [bsc#1197742]
- added patches
  https://github.com/google/leveldb/commit/fa6dc010a20b6eb175d92d05651972651278e06f
  + leveldb-compressed-output-size.patch</changelog>
</package>
<package pkgid="eaa8ac3567c357bb2c8141f1d1532f4a1823caef628be27302348907fbb51c4d" name="leveldb-devel" arch="aarch64">
  <version epoch="0" ver="1.18" rel="150000.3.3.1"/>
  <changelog author="ddiss@suse.com" date="1381233600">- Updated to 1.14.0</changelog>
  <changelog author="i@marguerite.su" date="1381665600">- ran spec-cleaner. too casual the specfile was.
- make check/make clean is no more for OBS.
- add Provides/Obsoletes to libleveldb1.
  * no one know that name, provide leveldb itself
  * required by python-leveldb and python3-leveldb</changelog>
  <changelog author="ddiss@suse.com" date="1383480000">- Changed shared libs group to System/Libraries.</changelog>
  <changelog author="ro@suse.de" date="1387368000">- add support for other archs (taken from debian, 0001-debian-ports.patch)</changelog>
  <changelog author="ddiss@suse.com" date="1391601600">- updated to 1.15.0
  + switched from mmap based writing to simpler stdio based writing. Has
    a minor impact (0.5 microseconds) on microbenchmarks for asynchronous
    writes. Synchronous writes speed up from 30ms to 10ms on linux/ext4.
    Should be much more reliable on diverse platforms.
  + compaction errors now immediately put the database into a read-only
    mode (until it is re-opened). As a downside, a disk going out of
    space and then space being created will require a re-open to recover
    from, whereas previously that would happen automatically. On the
    plus side, many corruption possibilities go away.
  + force the DB to enter an error-state so that all future writes fail
    when a synchronous log write succeeds but the sync fails.
  + repair now regenerates sstables that exhibit problems
  + fix issue 218 - Use native memory barriers on OSX
  + fix issue 212 - QNX build is broken
  + fix build on iOS with xcode 5
  + make tests compile and pass on windows
- refreshed 0001-debian-ports.patch
  + moved OS_MACOSX hunk</changelog>
  <changelog author="ddiss@suse.com" date="1396872000">- updated to 1.16.0
  + Make Log::Reader not report a corruption when the last record in a
    log file is truncated.
  + Fix issue 224: variable created but not utilized.
  + Remove comment that referenced a removed feature.</changelog>
  <changelog author="dmueller@suse.com" date="1413806400">- update to 1.18:
  + Replace the basic fprintf call with a call to fwrite
  + Fix ALL the header guards.
  + A new CONTRIBUTING file.
  + leveldb: Remove unused function 'ConsumeChar'.
  + leveldbutil: Remove unused member variables from WriteBatchItemPrinter.
  + Verify checksums of index/meta/filter blocks when paranoid_checks set.
  + Invoke all tools for iOS with xcrun. (This was causing problems with the new XCode 5.1.1 image on pulse.)
  + include only once, and fix the following linter warning: "Found C system header after C++ system header"
  + When encountering a corrupted table file, return Status::Corruption instead of Status::InvalidArgument.
  + Support cygwin as build platform, patch is from https://code.google.com/p/leveldb/issues/detail?id=188
  + Fix typo, merge patch from https://code.google.com/p/leveldb/issues/detail?id=159
  + Fix typos and comments, and address the following two issues:
  + Add missing db synchronize after "fillseq" in the benchmark.
  + Removed unused variable in SeekRandom: value (issue #201)</changelog>
  <changelog author="mpluskal@suse.com" date="1428235200">- Update project url
- Use url for source
- Enable tests</changelog>
  <changelog author="ncutler@suse.com" date="1521028800">- revert to 1.18 because 1.20 causes ceph-osd to crash
  (bsc#1054194, bsc#1083921)
- FATE#319443 (aarch64 enablement) changes were backported by
  https://build.opensuse.org/request/show/294636 and are part
  of this release. Factory version builds on aarch64.
  (bsc#1041611)</changelog>
  <changelog author="pgajdos@suse.com" date="1649073600">- fix tests [bsc#1197742]
- added patches
  https://github.com/google/leveldb/commit/fa6dc010a20b6eb175d92d05651972651278e06f
  + leveldb-compressed-output-size.patch</changelog>
</package>
<package pkgid="4715728371834cefa36340d593894270353fa50707613b6d7d9ccb2b9ddb3e5e" name="leveldb-devel" arch="ppc64le">
  <version epoch="0" ver="1.18" rel="150000.3.3.1"/>
  <changelog author="ddiss@suse.com" date="1381233600">- Updated to 1.14.0</changelog>
  <changelog author="i@marguerite.su" date="1381665600">- ran spec-cleaner. too casual the specfile was.
- make check/make clean is no more for OBS.
- add Provides/Obsoletes to libleveldb1.
  * no one know that name, provide leveldb itself
  * required by python-leveldb and python3-leveldb</changelog>
  <changelog author="ddiss@suse.com" date="1383480000">- Changed shared libs group to System/Libraries.</changelog>
  <changelog author="ro@suse.de" date="1387368000">- add support for other archs (taken from debian, 0001-debian-ports.patch)</changelog>
  <changelog author="ddiss@suse.com" date="1391601600">- updated to 1.15.0
  + switched from mmap based writing to simpler stdio based writing. Has
    a minor impact (0.5 microseconds) on microbenchmarks for asynchronous
    writes. Synchronous writes speed up from 30ms to 10ms on linux/ext4.
    Should be much more reliable on diverse platforms.
  + compaction errors now immediately put the database into a read-only
    mode (until it is re-opened). As a downside, a disk going out of
    space and then space being created will require a re-open to recover
    from, whereas previously that would happen automatically. On the
    plus side, many corruption possibilities go away.
  + force the DB to enter an error-state so that all future writes fail
    when a synchronous log write succeeds but the sync fails.
  + repair now regenerates sstables that exhibit problems
  + fix issue 218 - Use native memory barriers on OSX
  + fix issue 212 - QNX build is broken
  + fix build on iOS with xcode 5
  + make tests compile and pass on windows
- refreshed 0001-debian-ports.patch
  + moved OS_MACOSX hunk</changelog>
  <changelog author="ddiss@suse.com" date="1396872000">- updated to 1.16.0
  + Make Log::Reader not report a corruption when the last record in a
    log file is truncated.
  + Fix issue 224: variable created but not utilized.
  + Remove comment that referenced a removed feature.</changelog>
  <changelog author="dmueller@suse.com" date="1413806400">- update to 1.18:
  + Replace the basic fprintf call with a call to fwrite
  + Fix ALL the header guards.
  + A new CONTRIBUTING file.
  + leveldb: Remove unused function 'ConsumeChar'.
  + leveldbutil: Remove unused member variables from WriteBatchItemPrinter.
  + Verify checksums of index/meta/filter blocks when paranoid_checks set.
  + Invoke all tools for iOS with xcrun. (This was causing problems with the new XCode 5.1.1 image on pulse.)
  + include only once, and fix the following linter warning: "Found C system header after C++ system header"
  + When encountering a corrupted table file, return Status::Corruption instead of Status::InvalidArgument.
  + Support cygwin as build platform, patch is from https://code.google.com/p/leveldb/issues/detail?id=188
  + Fix typo, merge patch from https://code.google.com/p/leveldb/issues/detail?id=159
  + Fix typos and comments, and address the following two issues:
  + Add missing db synchronize after "fillseq" in the benchmark.
  + Removed unused variable in SeekRandom: value (issue #201)</changelog>
  <changelog author="mpluskal@suse.com" date="1428235200">- Update project url
- Use url for source
- Enable tests</changelog>
  <changelog author="ncutler@suse.com" date="1521028800">- revert to 1.18 because 1.20 causes ceph-osd to crash
  (bsc#1054194, bsc#1083921)
- FATE#319443 (aarch64 enablement) changes were backported by
  https://build.opensuse.org/request/show/294636 and are part
  of this release. Factory version builds on aarch64.
  (bsc#1041611)</changelog>
  <changelog author="pgajdos@suse.com" date="1649073600">- fix tests [bsc#1197742]
- added patches
  https://github.com/google/leveldb/commit/fa6dc010a20b6eb175d92d05651972651278e06f
  + leveldb-compressed-output-size.patch</changelog>
</package>
<package pkgid="db27e079f8467c0cf40ec6c54f247db35f10cd09865cab012a739dcce2583913" name="leveldb-devel" arch="s390x">
  <version epoch="0" ver="1.18" rel="150000.3.3.1"/>
  <changelog author="ddiss@suse.com" date="1381233600">- Updated to 1.14.0</changelog>
  <changelog author="i@marguerite.su" date="1381665600">- ran spec-cleaner. too casual the specfile was.
- make check/make clean is no more for OBS.
- add Provides/Obsoletes to libleveldb1.
  * no one know that name, provide leveldb itself
  * required by python-leveldb and python3-leveldb</changelog>
  <changelog author="ddiss@suse.com" date="1383480000">- Changed shared libs group to System/Libraries.</changelog>
  <changelog author="ro@suse.de" date="1387368000">- add support for other archs (taken from debian, 0001-debian-ports.patch)</changelog>
  <changelog author="ddiss@suse.com" date="1391601600">- updated to 1.15.0
  + switched from mmap based writing to simpler stdio based writing. Has
    a minor impact (0.5 microseconds) on microbenchmarks for asynchronous
    writes. Synchronous writes speed up from 30ms to 10ms on linux/ext4.
    Should be much more reliable on diverse platforms.
  + compaction errors now immediately put the database into a read-only
    mode (until it is re-opened). As a downside, a disk going out of
    space and then space being created will require a re-open to recover
    from, whereas previously that would happen automatically. On the
    plus side, many corruption possibilities go away.
  + force the DB to enter an error-state so that all future writes fail
    when a synchronous log write succeeds but the sync fails.
  + repair now regenerates sstables that exhibit problems
  + fix issue 218 - Use native memory barriers on OSX
  + fix issue 212 - QNX build is broken
  + fix build on iOS with xcode 5
  + make tests compile and pass on windows
- refreshed 0001-debian-ports.patch
  + moved OS_MACOSX hunk</changelog>
  <changelog author="ddiss@suse.com" date="1396872000">- updated to 1.16.0
  + Make Log::Reader not report a corruption when the last record in a
    log file is truncated.
  + Fix issue 224: variable created but not utilized.
  + Remove comment that referenced a removed feature.</changelog>
  <changelog author="dmueller@suse.com" date="1413806400">- update to 1.18:
  + Replace the basic fprintf call with a call to fwrite
  + Fix ALL the header guards.
  + A new CONTRIBUTING file.
  + leveldb: Remove unused function 'ConsumeChar'.
  + leveldbutil: Remove unused member variables from WriteBatchItemPrinter.
  + Verify checksums of index/meta/filter blocks when paranoid_checks set.
  + Invoke all tools for iOS with xcrun. (This was causing problems with the new XCode 5.1.1 image on pulse.)
  + include only once, and fix the following linter warning: "Found C system header after C++ system header"
  + When encountering a corrupted table file, return Status::Corruption instead of Status::InvalidArgument.
  + Support cygwin as build platform, patch is from https://code.google.com/p/leveldb/issues/detail?id=188
  + Fix typo, merge patch from https://code.google.com/p/leveldb/issues/detail?id=159
  + Fix typos and comments, and address the following two issues:
  + Add missing db synchronize after "fillseq" in the benchmark.
  + Removed unused variable in SeekRandom: value (issue #201)</changelog>
  <changelog author="mpluskal@suse.com" date="1428235200">- Update project url
- Use url for source
- Enable tests</changelog>
  <changelog author="ncutler@suse.com" date="1521028800">- revert to 1.18 because 1.20 causes ceph-osd to crash
  (bsc#1054194, bsc#1083921)
- FATE#319443 (aarch64 enablement) changes were backported by
  https://build.opensuse.org/request/show/294636 and are part
  of this release. Factory version builds on aarch64.
  (bsc#1041611)</changelog>
  <changelog author="pgajdos@suse.com" date="1649073600">- fix tests [bsc#1197742]
- added patches
  https://github.com/google/leveldb/commit/fa6dc010a20b6eb175d92d05651972651278e06f
  + leveldb-compressed-output-size.patch</changelog>
</package>
<package pkgid="448bc3f707436020b108b70c877fc3e065f580246348cafc4c0b7dfcb53fa4ab" name="leveldb-devel" arch="x86_64">
  <version epoch="0" ver="1.18" rel="150000.3.3.1"/>
  <changelog author="ddiss@suse.com" date="1381233600">- Updated to 1.14.0</changelog>
  <changelog author="i@marguerite.su" date="1381665600">- ran spec-cleaner. too casual the specfile was.
- make check/make clean is no more for OBS.
- add Provides/Obsoletes to libleveldb1.
  * no one know that name, provide leveldb itself
  * required by python-leveldb and python3-leveldb</changelog>
  <changelog author="ddiss@suse.com" date="1383480000">- Changed shared libs group to System/Libraries.</changelog>
  <changelog author="ro@suse.de" date="1387368000">- add support for other archs (taken from debian, 0001-debian-ports.patch)</changelog>
  <changelog author="ddiss@suse.com" date="1391601600">- updated to 1.15.0
  + switched from mmap based writing to simpler stdio based writing. Has
    a minor impact (0.5 microseconds) on microbenchmarks for asynchronous
    writes. Synchronous writes speed up from 30ms to 10ms on linux/ext4.
    Should be much more reliable on diverse platforms.
  + compaction errors now immediately put the database into a read-only
    mode (until it is re-opened). As a downside, a disk going out of
    space and then space being created will require a re-open to recover
    from, whereas previously that would happen automatically. On the
    plus side, many corruption possibilities go away.
  + force the DB to enter an error-state so that all future writes fail
    when a synchronous log write succeeds but the sync fails.
  + repair now regenerates sstables that exhibit problems
  + fix issue 218 - Use native memory barriers on OSX
  + fix issue 212 - QNX build is broken
  + fix build on iOS with xcode 5
  + make tests compile and pass on windows
- refreshed 0001-debian-ports.patch
  + moved OS_MACOSX hunk</changelog>
  <changelog author="ddiss@suse.com" date="1396872000">- updated to 1.16.0
  + Make Log::Reader not report a corruption when the last record in a
    log file is truncated.
  + Fix issue 224: variable created but not utilized.
  + Remove comment that referenced a removed feature.</changelog>
  <changelog author="dmueller@suse.com" date="1413806400">- update to 1.18:
  + Replace the basic fprintf call with a call to fwrite
  + Fix ALL the header guards.
  + A new CONTRIBUTING file.
  + leveldb: Remove unused function 'ConsumeChar'.
  + leveldbutil: Remove unused member variables from WriteBatchItemPrinter.
  + Verify checksums of index/meta/filter blocks when paranoid_checks set.
  + Invoke all tools for iOS with xcrun. (This was causing problems with the new XCode 5.1.1 image on pulse.)
  + include only once, and fix the following linter warning: "Found C system header after C++ system header"
  + When encountering a corrupted table file, return Status::Corruption instead of Status::InvalidArgument.
  + Support cygwin as build platform, patch is from https://code.google.com/p/leveldb/issues/detail?id=188
  + Fix typo, merge patch from https://code.google.com/p/leveldb/issues/detail?id=159
  + Fix typos and comments, and address the following two issues:
  + Add missing db synchronize after "fillseq" in the benchmark.
  + Removed unused variable in SeekRandom: value (issue #201)</changelog>
  <changelog author="mpluskal@suse.com" date="1428235200">- Update project url
- Use url for source
- Enable tests</changelog>
  <changelog author="ncutler@suse.com" date="1521028800">- revert to 1.18 because 1.20 causes ceph-osd to crash
  (bsc#1054194, bsc#1083921)
- FATE#319443 (aarch64 enablement) changes were backported by
  https://build.opensuse.org/request/show/294636 and are part
  of this release. Factory version builds on aarch64.
  (bsc#1041611)</changelog>
  <changelog author="pgajdos@suse.com" date="1649073600">- fix tests [bsc#1197742]
- added patches
  https://github.com/google/leveldb/commit/fa6dc010a20b6eb175d92d05651972651278e06f
  + leveldb-compressed-output-size.patch</changelog>
</package>
<package pkgid="241668fd0f1ef87bffb65e5c27d7ee87eed402ce98594e19f439d444e1a8d872" name="leveldb-devel-static" arch="aarch64">
  <version epoch="0" ver="1.18" rel="150000.3.3.1"/>
  <changelog author="ddiss@suse.com" date="1381233600">- Updated to 1.14.0</changelog>
  <changelog author="i@marguerite.su" date="1381665600">- ran spec-cleaner. too casual the specfile was.
- make check/make clean is no more for OBS.
- add Provides/Obsoletes to libleveldb1.
  * no one know that name, provide leveldb itself
  * required by python-leveldb and python3-leveldb</changelog>
  <changelog author="ddiss@suse.com" date="1383480000">- Changed shared libs group to System/Libraries.</changelog>
  <changelog author="ro@suse.de" date="1387368000">- add support for other archs (taken from debian, 0001-debian-ports.patch)</changelog>
  <changelog author="ddiss@suse.com" date="1391601600">- updated to 1.15.0
  + switched from mmap based writing to simpler stdio based writing. Has
    a minor impact (0.5 microseconds) on microbenchmarks for asynchronous
    writes. Synchronous writes speed up from 30ms to 10ms on linux/ext4.
    Should be much more reliable on diverse platforms.
  + compaction errors now immediately put the database into a read-only
    mode (until it is re-opened). As a downside, a disk going out of
    space and then space being created will require a re-open to recover
    from, whereas previously that would happen automatically. On the
    plus side, many corruption possibilities go away.
  + force the DB to enter an error-state so that all future writes fail
    when a synchronous log write succeeds but the sync fails.
  + repair now regenerates sstables that exhibit problems
  + fix issue 218 - Use native memory barriers on OSX
  + fix issue 212 - QNX build is broken
  + fix build on iOS with xcode 5
  + make tests compile and pass on windows
- refreshed 0001-debian-ports.patch
  + moved OS_MACOSX hunk</changelog>
  <changelog author="ddiss@suse.com" date="1396872000">- updated to 1.16.0
  + Make Log::Reader not report a corruption when the last record in a
    log file is truncated.
  + Fix issue 224: variable created but not utilized.
  + Remove comment that referenced a removed feature.</changelog>
  <changelog author="dmueller@suse.com" date="1413806400">- update to 1.18:
  + Replace the basic fprintf call with a call to fwrite
  + Fix ALL the header guards.
  + A new CONTRIBUTING file.
  + leveldb: Remove unused function 'ConsumeChar'.
  + leveldbutil: Remove unused member variables from WriteBatchItemPrinter.
  + Verify checksums of index/meta/filter blocks when paranoid_checks set.
  + Invoke all tools for iOS with xcrun. (This was causing problems with the new XCode 5.1.1 image on pulse.)
  + include only once, and fix the following linter warning: "Found C system header after C++ system header"
  + When encountering a corrupted table file, return Status::Corruption instead of Status::InvalidArgument.
  + Support cygwin as build platform, patch is from https://code.google.com/p/leveldb/issues/detail?id=188
  + Fix typo, merge patch from https://code.google.com/p/leveldb/issues/detail?id=159
  + Fix typos and comments, and address the following two issues:
  + Add missing db synchronize after "fillseq" in the benchmark.
  + Removed unused variable in SeekRandom: value (issue #201)</changelog>
  <changelog author="mpluskal@suse.com" date="1428235200">- Update project url
- Use url for source
- Enable tests</changelog>
  <changelog author="ncutler@suse.com" date="1521028800">- revert to 1.18 because 1.20 causes ceph-osd to crash
  (bsc#1054194, bsc#1083921)
- FATE#319443 (aarch64 enablement) changes were backported by
  https://build.opensuse.org/request/show/294636 and are part
  of this release. Factory version builds on aarch64.
  (bsc#1041611)</changelog>
  <changelog author="pgajdos@suse.com" date="1649073600">- fix tests [bsc#1197742]
- added patches
  https://github.com/google/leveldb/commit/fa6dc010a20b6eb175d92d05651972651278e06f
  + leveldb-compressed-output-size.patch</changelog>
</package>
<package pkgid="7b92d2065fcb9bbf5a955f6d9f7c2153061d3a23c6062b4248e2819e5691b60d" name="leveldb-devel-static" arch="ppc64le">
  <version epoch="0" ver="1.18" rel="150000.3.3.1"/>
  <changelog author="ddiss@suse.com" date="1381233600">- Updated to 1.14.0</changelog>
  <changelog author="i@marguerite.su" date="1381665600">- ran spec-cleaner. too casual the specfile was.
- make check/make clean is no more for OBS.
- add Provides/Obsoletes to libleveldb1.
  * no one know that name, provide leveldb itself
  * required by python-leveldb and python3-leveldb</changelog>
  <changelog author="ddiss@suse.com" date="1383480000">- Changed shared libs group to System/Libraries.</changelog>
  <changelog author="ro@suse.de" date="1387368000">- add support for other archs (taken from debian, 0001-debian-ports.patch)</changelog>
  <changelog author="ddiss@suse.com" date="1391601600">- updated to 1.15.0
  + switched from mmap based writing to simpler stdio based writing. Has
    a minor impact (0.5 microseconds) on microbenchmarks for asynchronous
    writes. Synchronous writes speed up from 30ms to 10ms on linux/ext4.
    Should be much more reliable on diverse platforms.
  + compaction errors now immediately put the database into a read-only
    mode (until it is re-opened). As a downside, a disk going out of
    space and then space being created will require a re-open to recover
    from, whereas previously that would happen automatically. On the
    plus side, many corruption possibilities go away.
  + force the DB to enter an error-state so that all future writes fail
    when a synchronous log write succeeds but the sync fails.
  + repair now regenerates sstables that exhibit problems
  + fix issue 218 - Use native memory barriers on OSX
  + fix issue 212 - QNX build is broken
  + fix build on iOS with xcode 5
  + make tests compile and pass on windows
- refreshed 0001-debian-ports.patch
  + moved OS_MACOSX hunk</changelog>
  <changelog author="ddiss@suse.com" date="1396872000">- updated to 1.16.0
  + Make Log::Reader not report a corruption when the last record in a
    log file is truncated.
  + Fix issue 224: variable created but not utilized.
  + Remove comment that referenced a removed feature.</changelog>
  <changelog author="dmueller@suse.com" date="1413806400">- update to 1.18:
  + Replace the basic fprintf call with a call to fwrite
  + Fix ALL the header guards.
  + A new CONTRIBUTING file.
  + leveldb: Remove unused function 'ConsumeChar'.
  + leveldbutil: Remove unused member variables from WriteBatchItemPrinter.
  + Verify checksums of index/meta/filter blocks when paranoid_checks set.
  + Invoke all tools for iOS with xcrun. (This was causing problems with the new XCode 5.1.1 image on pulse.)
  + include only once, and fix the following linter warning: "Found C system header after C++ system header"
  + When encountering a corrupted table file, return Status::Corruption instead of Status::InvalidArgument.
  + Support cygwin as build platform, patch is from https://code.google.com/p/leveldb/issues/detail?id=188
  + Fix typo, merge patch from https://code.google.com/p/leveldb/issues/detail?id=159
  + Fix typos and comments, and address the following two issues:
  + Add missing db synchronize after "fillseq" in the benchmark.
  + Removed unused variable in SeekRandom: value (issue #201)</changelog>
  <changelog author="mpluskal@suse.com" date="1428235200">- Update project url
- Use url for source
- Enable tests</changelog>
  <changelog author="ncutler@suse.com" date="1521028800">- revert to 1.18 because 1.20 causes ceph-osd to crash
  (bsc#1054194, bsc#1083921)
- FATE#319443 (aarch64 enablement) changes were backported by
  https://build.opensuse.org/request/show/294636 and are part
  of this release. Factory version builds on aarch64.
  (bsc#1041611)</changelog>
  <changelog author="pgajdos@suse.com" date="1649073600">- fix tests [bsc#1197742]
- added patches
  https://github.com/google/leveldb/commit/fa6dc010a20b6eb175d92d05651972651278e06f
  + leveldb-compressed-output-size.patch</changelog>
</package>
<package pkgid="fdc524b707563261e0c5bb0c2606932f747629bb08d4ff2b8fe7e930571ca5f9" name="leveldb-devel-static" arch="s390x">
  <version epoch="0" ver="1.18" rel="150000.3.3.1"/>
  <changelog author="ddiss@suse.com" date="1381233600">- Updated to 1.14.0</changelog>
  <changelog author="i@marguerite.su" date="1381665600">- ran spec-cleaner. too casual the specfile was.
- make check/make clean is no more for OBS.
- add Provides/Obsoletes to libleveldb1.
  * no one know that name, provide leveldb itself
  * required by python-leveldb and python3-leveldb</changelog>
  <changelog author="ddiss@suse.com" date="1383480000">- Changed shared libs group to System/Libraries.</changelog>
  <changelog author="ro@suse.de" date="1387368000">- add support for other archs (taken from debian, 0001-debian-ports.patch)</changelog>
  <changelog author="ddiss@suse.com" date="1391601600">- updated to 1.15.0
  + switched from mmap based writing to simpler stdio based writing. Has
    a minor impact (0.5 microseconds) on microbenchmarks for asynchronous
    writes. Synchronous writes speed up from 30ms to 10ms on linux/ext4.
    Should be much more reliable on diverse platforms.
  + compaction errors now immediately put the database into a read-only
    mode (until it is re-opened). As a downside, a disk going out of
    space and then space being created will require a re-open to recover
    from, whereas previously that would happen automatically. On the
    plus side, many corruption possibilities go away.
  + force the DB to enter an error-state so that all future writes fail
    when a synchronous log write succeeds but the sync fails.
  + repair now regenerates sstables that exhibit problems
  + fix issue 218 - Use native memory barriers on OSX
  + fix issue 212 - QNX build is broken
  + fix build on iOS with xcode 5
  + make tests compile and pass on windows
- refreshed 0001-debian-ports.patch
  + moved OS_MACOSX hunk</changelog>
  <changelog author="ddiss@suse.com" date="1396872000">- updated to 1.16.0
  + Make Log::Reader not report a corruption when the last record in a
    log file is truncated.
  + Fix issue 224: variable created but not utilized.
  + Remove comment that referenced a removed feature.</changelog>
  <changelog author="dmueller@suse.com" date="1413806400">- update to 1.18:
  + Replace the basic fprintf call with a call to fwrite
  + Fix ALL the header guards.
  + A new CONTRIBUTING file.
  + leveldb: Remove unused function 'ConsumeChar'.
  + leveldbutil: Remove unused member variables from WriteBatchItemPrinter.
  + Verify checksums of index/meta/filter blocks when paranoid_checks set.
  + Invoke all tools for iOS with xcrun. (This was causing problems with the new XCode 5.1.1 image on pulse.)
  + include only once, and fix the following linter warning: "Found C system header after C++ system header"
  + When encountering a corrupted table file, return Status::Corruption instead of Status::InvalidArgument.
  + Support cygwin as build platform, patch is from https://code.google.com/p/leveldb/issues/detail?id=188
  + Fix typo, merge patch from https://code.google.com/p/leveldb/issues/detail?id=159
  + Fix typos and comments, and address the following two issues:
  + Add missing db synchronize after "fillseq" in the benchmark.
  + Removed unused variable in SeekRandom: value (issue #201)</changelog>
  <changelog author="mpluskal@suse.com" date="1428235200">- Update project url
- Use url for source
- Enable tests</changelog>
  <changelog author="ncutler@suse.com" date="1521028800">- revert to 1.18 because 1.20 causes ceph-osd to crash
  (bsc#1054194, bsc#1083921)
- FATE#319443 (aarch64 enablement) changes were backported by
  https://build.opensuse.org/request/show/294636 and are part
  of this release. Factory version builds on aarch64.
  (bsc#1041611)</changelog>
  <changelog author="pgajdos@suse.com" date="1649073600">- fix tests [bsc#1197742]
- added patches
  https://github.com/google/leveldb/commit/fa6dc010a20b6eb175d92d05651972651278e06f
  + leveldb-compressed-output-size.patch</changelog>
</package>
<package pkgid="911e24cdc1dd283d4eda8efad79692b01c6bb6c2dd0411ebb43e28fd6358a434" name="leveldb-devel-static" arch="x86_64">
  <version epoch="0" ver="1.18" rel="150000.3.3.1"/>
  <changelog author="ddiss@suse.com" date="1381233600">- Updated to 1.14.0</changelog>
  <changelog author="i@marguerite.su" date="1381665600">- ran spec-cleaner. too casual the specfile was.
- make check/make clean is no more for OBS.
- add Provides/Obsoletes to libleveldb1.
  * no one know that name, provide leveldb itself
  * required by python-leveldb and python3-leveldb</changelog>
  <changelog author="ddiss@suse.com" date="1383480000">- Changed shared libs group to System/Libraries.</changelog>
  <changelog author="ro@suse.de" date="1387368000">- add support for other archs (taken from debian, 0001-debian-ports.patch)</changelog>
  <changelog author="ddiss@suse.com" date="1391601600">- updated to 1.15.0
  + switched from mmap based writing to simpler stdio based writing. Has
    a minor impact (0.5 microseconds) on microbenchmarks for asynchronous
    writes. Synchronous writes speed up from 30ms to 10ms on linux/ext4.
    Should be much more reliable on diverse platforms.
  + compaction errors now immediately put the database into a read-only
    mode (until it is re-opened). As a downside, a disk going out of
    space and then space being created will require a re-open to recover
    from, whereas previously that would happen automatically. On the
    plus side, many corruption possibilities go away.
  + force the DB to enter an error-state so that all future writes fail
    when a synchronous log write succeeds but the sync fails.
  + repair now regenerates sstables that exhibit problems
  + fix issue 218 - Use native memory barriers on OSX
  + fix issue 212 - QNX build is broken
  + fix build on iOS with xcode 5
  + make tests compile and pass on windows
- refreshed 0001-debian-ports.patch
  + moved OS_MACOSX hunk</changelog>
  <changelog author="ddiss@suse.com" date="1396872000">- updated to 1.16.0
  + Make Log::Reader not report a corruption when the last record in a
    log file is truncated.
  + Fix issue 224: variable created but not utilized.
  + Remove comment that referenced a removed feature.</changelog>
  <changelog author="dmueller@suse.com" date="1413806400">- update to 1.18:
  + Replace the basic fprintf call with a call to fwrite
  + Fix ALL the header guards.
  + A new CONTRIBUTING file.
  + leveldb: Remove unused function 'ConsumeChar'.
  + leveldbutil: Remove unused member variables from WriteBatchItemPrinter.
  + Verify checksums of index/meta/filter blocks when paranoid_checks set.
  + Invoke all tools for iOS with xcrun. (This was causing problems with the new XCode 5.1.1 image on pulse.)
  + include only once, and fix the following linter warning: "Found C system header after C++ system header"
  + When encountering a corrupted table file, return Status::Corruption instead of Status::InvalidArgument.
  + Support cygwin as build platform, patch is from https://code.google.com/p/leveldb/issues/detail?id=188
  + Fix typo, merge patch from https://code.google.com/p/leveldb/issues/detail?id=159
  + Fix typos and comments, and address the following two issues:
  + Add missing db synchronize after "fillseq" in the benchmark.
  + Removed unused variable in SeekRandom: value (issue #201)</changelog>
  <changelog author="mpluskal@suse.com" date="1428235200">- Update project url
- Use url for source
- Enable tests</changelog>
  <changelog author="ncutler@suse.com" date="1521028800">- revert to 1.18 because 1.20 causes ceph-osd to crash
  (bsc#1054194, bsc#1083921)
- FATE#319443 (aarch64 enablement) changes were backported by
  https://build.opensuse.org/request/show/294636 and are part
  of this release. Factory version builds on aarch64.
  (bsc#1041611)</changelog>
  <changelog author="pgajdos@suse.com" date="1649073600">- fix tests [bsc#1197742]
- added patches
  https://github.com/google/leveldb/commit/fa6dc010a20b6eb175d92d05651972651278e06f
  + leveldb-compressed-output-size.patch</changelog>
</package>
<package pkgid="018cceba4e89f40f8d3514a86ef26a85b0f6e549788d909f54a0ec2ebc27b52c" name="libGLw" arch="src">
  <version epoch="0" ver="8.0.0" rel="150000.3.6.1"/>
  <changelog author="eich@suse.de" date="1307361600">- remove GLw-motif.diff. Instead resolve in spec file.</changelog>
  <changelog author="mhrusecky@suse.cz" date="1317556800">- configure -&gt; ./configure (fixes build)</changelog>
  <changelog author="jengelh@medozas.de" date="1329134400">- Remove redundant tags/sections from specfile
- Try shlib policy on the package</changelog>
  <changelog author="sndirsch@suse.com" date="1329739200">- use pkgconfig(...) capabilities for BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1329825600">- No particular reason for having conflicts with other providers
  of libGLw1, since there are no other providers of this lib and
  probably will never be</changelog>
  <changelog author="eich@suse.com" date="1332417600">- Replace Mesa package as source of libGLw by stand alone glw package
  created by the Mesa Project:
  Delete: MesaLib-7.10.2.tar.bz2
  Add: glw-1.0.0_20120320_4d1acb3.tar.bz2
  NOTE: Since there is no release of glw yet a tarball generated from
  the source repository is used. This contains the sources of
  the last version in MesaLib-7.10.2 plus a few bug fixes.</changelog>
  <changelog author="eich@suse.com" date="1332504000">- Change file naming sceme to what's expected for libraries:
  Now the packages are named after the library, without any Mesa*
  in their names.</changelog>
  <changelog author="sndirsch@suse.com" date="1336651200">- disable motif support in light of recent findings of the
  legal-team
- switched to minimal pkgconfig buildrequires</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1338379200">- Fix -devel package requires, it needs pkgconfig(gl)
- Fix buildrequires to require explicitely all needed libraries.</changelog>
  <changelog author="sndirsch@suse.com" date="1338811200">- added generation of biarch packages</changelog>
  <changelog author="sndirsch@suse.com" date="1338897600">- enable Motif support if %use_motif is set (currently done in
  X11:XOrg, but likely planned also for openSUSE:Factory:NonFree
  project)</changelog>
  <changelog author="sndirsch@suse.com" date="1348056000">- fixed build on openSUSE 12.2</changelog>
  <changelog author="sndirsch@suse.com" date="1348228800">- fixed BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1414411200">- fixed buildrequires: pkgconfig(dri) -&gt; pkgconfig(gl)
- added baselibs.conf as source to specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1422619200">- updated to current git 8.0.0_20130123_c4f7cdf; since
  1.0.0_20120320_4d1acb3 this is just a version bump to 8.0.0
  and one typo fix (git commit c4f7cdf)
- specfile cleanup</changelog>
  <changelog author="eich@suse.com" date="1458129600">- n_Use-newly-introduced-GLAPIVAR-for-variables.patch
  Use newly introduced GLAPIVAR instead of GLAPI for
  variable declarations. This adds an 'extern' in cases
  where GLAPI doesn't have one and avoids a variable
  declarartion to become a definition (bsc#970725).</changelog>
  <changelog author="eich@suse.com" date="1458388800">- Consolidate building of libGLw for Xt and Motif.</changelog>
  <changelog author="sndirsch@suse.com" date="1496059200">- includes everything needed for missing sle issue entries:
  fate #315643-315645, 319159-319161, 319618 (bsc#1041368)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387200">- n_Use-newly-introduced-GLAPIVAR-for-variables.patch
  * moved bits from Mesa's n_Define-GLAPIVAR-separate-from-GLAPI.patch
    into this one (boo#1082297)
- always build with Motif support</changelog>
  <changelog author="sndirsch@suse.com" date="1633348800">- fix libGLw.so symlink of devel package (bsc#1191122)</changelog>
</package>
<package pkgid="3c51fd653a3ec872185899a07bc31e024242621648e5983d01a09ba38be4c835" name="libGLw-devel-32bit" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150000.3.6.1"/>
  <changelog author="sndirsch@suse.com" date="1338897600">- enable Motif support if %use_motif is set (currently done in
  X11:XOrg, but likely planned also for openSUSE:Factory:NonFree
  project)</changelog>
  <changelog author="sndirsch@suse.com" date="1348056000">- fixed build on openSUSE 12.2</changelog>
  <changelog author="sndirsch@suse.com" date="1348228800">- fixed BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1414411200">- fixed buildrequires: pkgconfig(dri) -&gt; pkgconfig(gl)
- added baselibs.conf as source to specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1422619200">- updated to current git 8.0.0_20130123_c4f7cdf; since
  1.0.0_20120320_4d1acb3 this is just a version bump to 8.0.0
  and one typo fix (git commit c4f7cdf)
- specfile cleanup</changelog>
  <changelog author="eich@suse.com" date="1458129600">- n_Use-newly-introduced-GLAPIVAR-for-variables.patch
  Use newly introduced GLAPIVAR instead of GLAPI for
  variable declarations. This adds an 'extern' in cases
  where GLAPI doesn't have one and avoids a variable
  declarartion to become a definition (bsc#970725).</changelog>
  <changelog author="eich@suse.com" date="1458388800">- Consolidate building of libGLw for Xt and Motif.</changelog>
  <changelog author="sndirsch@suse.com" date="1496059200">- includes everything needed for missing sle issue entries:
  fate #315643-315645, 319159-319161, 319618 (bsc#1041368)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387200">- n_Use-newly-introduced-GLAPIVAR-for-variables.patch
  * moved bits from Mesa's n_Define-GLAPIVAR-separate-from-GLAPI.patch
    into this one (boo#1082297)
- always build with Motif support</changelog>
  <changelog author="sndirsch@suse.com" date="1633348800">- fix libGLw.so symlink of devel package (bsc#1191122)</changelog>
</package>
<package pkgid="7ee6ce42b04fc14273a3de5a12848cf3b834229d535b02749d935198b4ae63b4" name="libGLw-devel" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150000.3.6.1"/>
  <changelog author="sndirsch@suse.com" date="1338897600">- enable Motif support if %use_motif is set (currently done in
  X11:XOrg, but likely planned also for openSUSE:Factory:NonFree
  project)</changelog>
  <changelog author="sndirsch@suse.com" date="1348056000">- fixed build on openSUSE 12.2</changelog>
  <changelog author="sndirsch@suse.com" date="1348228800">- fixed BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1414411200">- fixed buildrequires: pkgconfig(dri) -&gt; pkgconfig(gl)
- added baselibs.conf as source to specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1422619200">- updated to current git 8.0.0_20130123_c4f7cdf; since
  1.0.0_20120320_4d1acb3 this is just a version bump to 8.0.0
  and one typo fix (git commit c4f7cdf)
- specfile cleanup</changelog>
  <changelog author="eich@suse.com" date="1458129600">- n_Use-newly-introduced-GLAPIVAR-for-variables.patch
  Use newly introduced GLAPIVAR instead of GLAPI for
  variable declarations. This adds an 'extern' in cases
  where GLAPI doesn't have one and avoids a variable
  declarartion to become a definition (bsc#970725).</changelog>
  <changelog author="eich@suse.com" date="1458388800">- Consolidate building of libGLw for Xt and Motif.</changelog>
  <changelog author="sndirsch@suse.com" date="1496059200">- includes everything needed for missing sle issue entries:
  fate #315643-315645, 319159-319161, 319618 (bsc#1041368)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387200">- n_Use-newly-introduced-GLAPIVAR-for-variables.patch
  * moved bits from Mesa's n_Define-GLAPIVAR-separate-from-GLAPI.patch
    into this one (boo#1082297)
- always build with Motif support</changelog>
  <changelog author="sndirsch@suse.com" date="1633348800">- fix libGLw.so symlink of devel package (bsc#1191122)</changelog>
</package>
<package pkgid="f2576bd7ff27f6558e0922a0f22be3bf92b91e7106f88aa10f0dfdabbc8cd394" name="libGLw-devel" arch="ppc64le">
  <version epoch="0" ver="8.0.0" rel="150000.3.6.1"/>
  <changelog author="sndirsch@suse.com" date="1338897600">- enable Motif support if %use_motif is set (currently done in
  X11:XOrg, but likely planned also for openSUSE:Factory:NonFree
  project)</changelog>
  <changelog author="sndirsch@suse.com" date="1348056000">- fixed build on openSUSE 12.2</changelog>
  <changelog author="sndirsch@suse.com" date="1348228800">- fixed BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1414411200">- fixed buildrequires: pkgconfig(dri) -&gt; pkgconfig(gl)
- added baselibs.conf as source to specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1422619200">- updated to current git 8.0.0_20130123_c4f7cdf; since
  1.0.0_20120320_4d1acb3 this is just a version bump to 8.0.0
  and one typo fix (git commit c4f7cdf)
- specfile cleanup</changelog>
  <changelog author="eich@suse.com" date="1458129600">- n_Use-newly-introduced-GLAPIVAR-for-variables.patch
  Use newly introduced GLAPIVAR instead of GLAPI for
  variable declarations. This adds an 'extern' in cases
  where GLAPI doesn't have one and avoids a variable
  declarartion to become a definition (bsc#970725).</changelog>
  <changelog author="eich@suse.com" date="1458388800">- Consolidate building of libGLw for Xt and Motif.</changelog>
  <changelog author="sndirsch@suse.com" date="1496059200">- includes everything needed for missing sle issue entries:
  fate #315643-315645, 319159-319161, 319618 (bsc#1041368)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387200">- n_Use-newly-introduced-GLAPIVAR-for-variables.patch
  * moved bits from Mesa's n_Define-GLAPIVAR-separate-from-GLAPI.patch
    into this one (boo#1082297)
- always build with Motif support</changelog>
  <changelog author="sndirsch@suse.com" date="1633348800">- fix libGLw.so symlink of devel package (bsc#1191122)</changelog>
</package>
<package pkgid="3a3c40c5da8d3651527bca653a442903d631da4651417a151448df9b732c4ba5" name="libGLw-devel" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150000.3.6.1"/>
  <changelog author="sndirsch@suse.com" date="1338897600">- enable Motif support if %use_motif is set (currently done in
  X11:XOrg, but likely planned also for openSUSE:Factory:NonFree
  project)</changelog>
  <changelog author="sndirsch@suse.com" date="1348056000">- fixed build on openSUSE 12.2</changelog>
  <changelog author="sndirsch@suse.com" date="1348228800">- fixed BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1414411200">- fixed buildrequires: pkgconfig(dri) -&gt; pkgconfig(gl)
- added baselibs.conf as source to specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1422619200">- updated to current git 8.0.0_20130123_c4f7cdf; since
  1.0.0_20120320_4d1acb3 this is just a version bump to 8.0.0
  and one typo fix (git commit c4f7cdf)
- specfile cleanup</changelog>
  <changelog author="eich@suse.com" date="1458129600">- n_Use-newly-introduced-GLAPIVAR-for-variables.patch
  Use newly introduced GLAPIVAR instead of GLAPI for
  variable declarations. This adds an 'extern' in cases
  where GLAPI doesn't have one and avoids a variable
  declarartion to become a definition (bsc#970725).</changelog>
  <changelog author="eich@suse.com" date="1458388800">- Consolidate building of libGLw for Xt and Motif.</changelog>
  <changelog author="sndirsch@suse.com" date="1496059200">- includes everything needed for missing sle issue entries:
  fate #315643-315645, 319159-319161, 319618 (bsc#1041368)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387200">- n_Use-newly-introduced-GLAPIVAR-for-variables.patch
  * moved bits from Mesa's n_Define-GLAPIVAR-separate-from-GLAPI.patch
    into this one (boo#1082297)
- always build with Motif support</changelog>
  <changelog author="sndirsch@suse.com" date="1633348800">- fix libGLw.so symlink of devel package (bsc#1191122)</changelog>
</package>
<package pkgid="aba4a3f56e9011a97077584a4d3e6d870c5b8ef7a88deee77876d963124c00a5" name="libGLw-devel" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150000.3.6.1"/>
  <changelog author="sndirsch@suse.com" date="1338897600">- enable Motif support if %use_motif is set (currently done in
  X11:XOrg, but likely planned also for openSUSE:Factory:NonFree
  project)</changelog>
  <changelog author="sndirsch@suse.com" date="1348056000">- fixed build on openSUSE 12.2</changelog>
  <changelog author="sndirsch@suse.com" date="1348228800">- fixed BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1414411200">- fixed buildrequires: pkgconfig(dri) -&gt; pkgconfig(gl)
- added baselibs.conf as source to specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1422619200">- updated to current git 8.0.0_20130123_c4f7cdf; since
  1.0.0_20120320_4d1acb3 this is just a version bump to 8.0.0
  and one typo fix (git commit c4f7cdf)
- specfile cleanup</changelog>
  <changelog author="eich@suse.com" date="1458129600">- n_Use-newly-introduced-GLAPIVAR-for-variables.patch
  Use newly introduced GLAPIVAR instead of GLAPI for
  variable declarations. This adds an 'extern' in cases
  where GLAPI doesn't have one and avoids a variable
  declarartion to become a definition (bsc#970725).</changelog>
  <changelog author="eich@suse.com" date="1458388800">- Consolidate building of libGLw for Xt and Motif.</changelog>
  <changelog author="sndirsch@suse.com" date="1496059200">- includes everything needed for missing sle issue entries:
  fate #315643-315645, 319159-319161, 319618 (bsc#1041368)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387200">- n_Use-newly-introduced-GLAPIVAR-for-variables.patch
  * moved bits from Mesa's n_Define-GLAPIVAR-separate-from-GLAPI.patch
    into this one (boo#1082297)
- always build with Motif support</changelog>
  <changelog author="sndirsch@suse.com" date="1633348800">- fix libGLw.so symlink of devel package (bsc#1191122)</changelog>
</package>
<package pkgid="6717c972030ee0453f9738fbb958c0d4f25501655e5bcf4c640f45fe873b1aa0" name="libGLw1-32bit" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150000.3.6.1"/>
  <changelog author="sndirsch@suse.com" date="1338897600">- enable Motif support if %use_motif is set (currently done in
  X11:XOrg, but likely planned also for openSUSE:Factory:NonFree
  project)</changelog>
  <changelog author="sndirsch@suse.com" date="1348056000">- fixed build on openSUSE 12.2</changelog>
  <changelog author="sndirsch@suse.com" date="1348228800">- fixed BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1414411200">- fixed buildrequires: pkgconfig(dri) -&gt; pkgconfig(gl)
- added baselibs.conf as source to specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1422619200">- updated to current git 8.0.0_20130123_c4f7cdf; since
  1.0.0_20120320_4d1acb3 this is just a version bump to 8.0.0
  and one typo fix (git commit c4f7cdf)
- specfile cleanup</changelog>
  <changelog author="eich@suse.com" date="1458129600">- n_Use-newly-introduced-GLAPIVAR-for-variables.patch
  Use newly introduced GLAPIVAR instead of GLAPI for
  variable declarations. This adds an 'extern' in cases
  where GLAPI doesn't have one and avoids a variable
  declarartion to become a definition (bsc#970725).</changelog>
  <changelog author="eich@suse.com" date="1458388800">- Consolidate building of libGLw for Xt and Motif.</changelog>
  <changelog author="sndirsch@suse.com" date="1496059200">- includes everything needed for missing sle issue entries:
  fate #315643-315645, 319159-319161, 319618 (bsc#1041368)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387200">- n_Use-newly-introduced-GLAPIVAR-for-variables.patch
  * moved bits from Mesa's n_Define-GLAPIVAR-separate-from-GLAPI.patch
    into this one (boo#1082297)
- always build with Motif support</changelog>
  <changelog author="sndirsch@suse.com" date="1633348800">- fix libGLw.so symlink of devel package (bsc#1191122)</changelog>
</package>
<package pkgid="a6f7a4d39790396bf0f47be9428a075897c4fedd86cf03d7e7a5d51b2bd84998" name="libGLw1" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150000.3.6.1"/>
  <changelog author="sndirsch@suse.com" date="1338897600">- enable Motif support if %use_motif is set (currently done in
  X11:XOrg, but likely planned also for openSUSE:Factory:NonFree
  project)</changelog>
  <changelog author="sndirsch@suse.com" date="1348056000">- fixed build on openSUSE 12.2</changelog>
  <changelog author="sndirsch@suse.com" date="1348228800">- fixed BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1414411200">- fixed buildrequires: pkgconfig(dri) -&gt; pkgconfig(gl)
- added baselibs.conf as source to specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1422619200">- updated to current git 8.0.0_20130123_c4f7cdf; since
  1.0.0_20120320_4d1acb3 this is just a version bump to 8.0.0
  and one typo fix (git commit c4f7cdf)
- specfile cleanup</changelog>
  <changelog author="eich@suse.com" date="1458129600">- n_Use-newly-introduced-GLAPIVAR-for-variables.patch
  Use newly introduced GLAPIVAR instead of GLAPI for
  variable declarations. This adds an 'extern' in cases
  where GLAPI doesn't have one and avoids a variable
  declarartion to become a definition (bsc#970725).</changelog>
  <changelog author="eich@suse.com" date="1458388800">- Consolidate building of libGLw for Xt and Motif.</changelog>
  <changelog author="sndirsch@suse.com" date="1496059200">- includes everything needed for missing sle issue entries:
  fate #315643-315645, 319159-319161, 319618 (bsc#1041368)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387200">- n_Use-newly-introduced-GLAPIVAR-for-variables.patch
  * moved bits from Mesa's n_Define-GLAPIVAR-separate-from-GLAPI.patch
    into this one (boo#1082297)
- always build with Motif support</changelog>
  <changelog author="sndirsch@suse.com" date="1633348800">- fix libGLw.so symlink of devel package (bsc#1191122)</changelog>
</package>
<package pkgid="3eaedc28df20527a57e27e404ed47bf8f854756b11b68b9ad8e506d999b89f28" name="libGLw1" arch="ppc64le">
  <version epoch="0" ver="8.0.0" rel="150000.3.6.1"/>
  <changelog author="sndirsch@suse.com" date="1338897600">- enable Motif support if %use_motif is set (currently done in
  X11:XOrg, but likely planned also for openSUSE:Factory:NonFree
  project)</changelog>
  <changelog author="sndirsch@suse.com" date="1348056000">- fixed build on openSUSE 12.2</changelog>
  <changelog author="sndirsch@suse.com" date="1348228800">- fixed BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1414411200">- fixed buildrequires: pkgconfig(dri) -&gt; pkgconfig(gl)
- added baselibs.conf as source to specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1422619200">- updated to current git 8.0.0_20130123_c4f7cdf; since
  1.0.0_20120320_4d1acb3 this is just a version bump to 8.0.0
  and one typo fix (git commit c4f7cdf)
- specfile cleanup</changelog>
  <changelog author="eich@suse.com" date="1458129600">- n_Use-newly-introduced-GLAPIVAR-for-variables.patch
  Use newly introduced GLAPIVAR instead of GLAPI for
  variable declarations. This adds an 'extern' in cases
  where GLAPI doesn't have one and avoids a variable
  declarartion to become a definition (bsc#970725).</changelog>
  <changelog author="eich@suse.com" date="1458388800">- Consolidate building of libGLw for Xt and Motif.</changelog>
  <changelog author="sndirsch@suse.com" date="1496059200">- includes everything needed for missing sle issue entries:
  fate #315643-315645, 319159-319161, 319618 (bsc#1041368)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387200">- n_Use-newly-introduced-GLAPIVAR-for-variables.patch
  * moved bits from Mesa's n_Define-GLAPIVAR-separate-from-GLAPI.patch
    into this one (boo#1082297)
- always build with Motif support</changelog>
  <changelog author="sndirsch@suse.com" date="1633348800">- fix libGLw.so symlink of devel package (bsc#1191122)</changelog>
</package>
<package pkgid="dd19730b42b6f353160f1a79ffaad479c87f3f8c8c4688d503d406e2688b5ddd" name="libGLw1" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150000.3.6.1"/>
  <changelog author="sndirsch@suse.com" date="1338897600">- enable Motif support if %use_motif is set (currently done in
  X11:XOrg, but likely planned also for openSUSE:Factory:NonFree
  project)</changelog>
  <changelog author="sndirsch@suse.com" date="1348056000">- fixed build on openSUSE 12.2</changelog>
  <changelog author="sndirsch@suse.com" date="1348228800">- fixed BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1414411200">- fixed buildrequires: pkgconfig(dri) -&gt; pkgconfig(gl)
- added baselibs.conf as source to specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1422619200">- updated to current git 8.0.0_20130123_c4f7cdf; since
  1.0.0_20120320_4d1acb3 this is just a version bump to 8.0.0
  and one typo fix (git commit c4f7cdf)
- specfile cleanup</changelog>
  <changelog author="eich@suse.com" date="1458129600">- n_Use-newly-introduced-GLAPIVAR-for-variables.patch
  Use newly introduced GLAPIVAR instead of GLAPI for
  variable declarations. This adds an 'extern' in cases
  where GLAPI doesn't have one and avoids a variable
  declarartion to become a definition (bsc#970725).</changelog>
  <changelog author="eich@suse.com" date="1458388800">- Consolidate building of libGLw for Xt and Motif.</changelog>
  <changelog author="sndirsch@suse.com" date="1496059200">- includes everything needed for missing sle issue entries:
  fate #315643-315645, 319159-319161, 319618 (bsc#1041368)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387200">- n_Use-newly-introduced-GLAPIVAR-for-variables.patch
  * moved bits from Mesa's n_Define-GLAPIVAR-separate-from-GLAPI.patch
    into this one (boo#1082297)
- always build with Motif support</changelog>
  <changelog author="sndirsch@suse.com" date="1633348800">- fix libGLw.so symlink of devel package (bsc#1191122)</changelog>
</package>
<package pkgid="c33e5e0dc74b011edf066d605260974f560e35f707ee1de0e471c263e0838fb4" name="libGLw1" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150000.3.6.1"/>
  <changelog author="sndirsch@suse.com" date="1338897600">- enable Motif support if %use_motif is set (currently done in
  X11:XOrg, but likely planned also for openSUSE:Factory:NonFree
  project)</changelog>
  <changelog author="sndirsch@suse.com" date="1348056000">- fixed build on openSUSE 12.2</changelog>
  <changelog author="sndirsch@suse.com" date="1348228800">- fixed BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1414411200">- fixed buildrequires: pkgconfig(dri) -&gt; pkgconfig(gl)
- added baselibs.conf as source to specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1422619200">- updated to current git 8.0.0_20130123_c4f7cdf; since
  1.0.0_20120320_4d1acb3 this is just a version bump to 8.0.0
  and one typo fix (git commit c4f7cdf)
- specfile cleanup</changelog>
  <changelog author="eich@suse.com" date="1458129600">- n_Use-newly-introduced-GLAPIVAR-for-variables.patch
  Use newly introduced GLAPIVAR instead of GLAPI for
  variable declarations. This adds an 'extern' in cases
  where GLAPI doesn't have one and avoids a variable
  declarartion to become a definition (bsc#970725).</changelog>
  <changelog author="eich@suse.com" date="1458388800">- Consolidate building of libGLw for Xt and Motif.</changelog>
  <changelog author="sndirsch@suse.com" date="1496059200">- includes everything needed for missing sle issue entries:
  fate #315643-315645, 319159-319161, 319618 (bsc#1041368)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387200">- n_Use-newly-introduced-GLAPIVAR-for-variables.patch
  * moved bits from Mesa's n_Define-GLAPIVAR-separate-from-GLAPI.patch
    into this one (boo#1082297)
- always build with Motif support</changelog>
  <changelog author="sndirsch@suse.com" date="1633348800">- fix libGLw.so symlink of devel package (bsc#1191122)</changelog>
</package>
<package pkgid="b232d77c7c41d8fb33283fe4339a1b30352f2eaec11325acf1e4845c27cbefb3" name="libGLwM1-32bit" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150000.3.6.1"/>
  <changelog author="sndirsch@suse.com" date="1338897600">- enable Motif support if %use_motif is set (currently done in
  X11:XOrg, but likely planned also for openSUSE:Factory:NonFree
  project)</changelog>
  <changelog author="sndirsch@suse.com" date="1348056000">- fixed build on openSUSE 12.2</changelog>
  <changelog author="sndirsch@suse.com" date="1348228800">- fixed BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1414411200">- fixed buildrequires: pkgconfig(dri) -&gt; pkgconfig(gl)
- added baselibs.conf as source to specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1422619200">- updated to current git 8.0.0_20130123_c4f7cdf; since
  1.0.0_20120320_4d1acb3 this is just a version bump to 8.0.0
  and one typo fix (git commit c4f7cdf)
- specfile cleanup</changelog>
  <changelog author="eich@suse.com" date="1458129600">- n_Use-newly-introduced-GLAPIVAR-for-variables.patch
  Use newly introduced GLAPIVAR instead of GLAPI for
  variable declarations. This adds an 'extern' in cases
  where GLAPI doesn't have one and avoids a variable
  declarartion to become a definition (bsc#970725).</changelog>
  <changelog author="eich@suse.com" date="1458388800">- Consolidate building of libGLw for Xt and Motif.</changelog>
  <changelog author="sndirsch@suse.com" date="1496059200">- includes everything needed for missing sle issue entries:
  fate #315643-315645, 319159-319161, 319618 (bsc#1041368)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387200">- n_Use-newly-introduced-GLAPIVAR-for-variables.patch
  * moved bits from Mesa's n_Define-GLAPIVAR-separate-from-GLAPI.patch
    into this one (boo#1082297)
- always build with Motif support</changelog>
  <changelog author="sndirsch@suse.com" date="1633348800">- fix libGLw.so symlink of devel package (bsc#1191122)</changelog>
</package>
<package pkgid="3fb941e2ae3ec21490bd3d9bee0b8d19b35d07d7071501b32b3de6631ca84581" name="libGLwM1" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150000.3.6.1"/>
  <changelog author="sndirsch@suse.com" date="1338897600">- enable Motif support if %use_motif is set (currently done in
  X11:XOrg, but likely planned also for openSUSE:Factory:NonFree
  project)</changelog>
  <changelog author="sndirsch@suse.com" date="1348056000">- fixed build on openSUSE 12.2</changelog>
  <changelog author="sndirsch@suse.com" date="1348228800">- fixed BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1414411200">- fixed buildrequires: pkgconfig(dri) -&gt; pkgconfig(gl)
- added baselibs.conf as source to specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1422619200">- updated to current git 8.0.0_20130123_c4f7cdf; since
  1.0.0_20120320_4d1acb3 this is just a version bump to 8.0.0
  and one typo fix (git commit c4f7cdf)
- specfile cleanup</changelog>
  <changelog author="eich@suse.com" date="1458129600">- n_Use-newly-introduced-GLAPIVAR-for-variables.patch
  Use newly introduced GLAPIVAR instead of GLAPI for
  variable declarations. This adds an 'extern' in cases
  where GLAPI doesn't have one and avoids a variable
  declarartion to become a definition (bsc#970725).</changelog>
  <changelog author="eich@suse.com" date="1458388800">- Consolidate building of libGLw for Xt and Motif.</changelog>
  <changelog author="sndirsch@suse.com" date="1496059200">- includes everything needed for missing sle issue entries:
  fate #315643-315645, 319159-319161, 319618 (bsc#1041368)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387200">- n_Use-newly-introduced-GLAPIVAR-for-variables.patch
  * moved bits from Mesa's n_Define-GLAPIVAR-separate-from-GLAPI.patch
    into this one (boo#1082297)
- always build with Motif support</changelog>
  <changelog author="sndirsch@suse.com" date="1633348800">- fix libGLw.so symlink of devel package (bsc#1191122)</changelog>
</package>
<package pkgid="0a78f843c902b9e02f3e08c7b65944656c7862783c99a123999b78c470c8a1e0" name="libGLwM1" arch="ppc64le">
  <version epoch="0" ver="8.0.0" rel="150000.3.6.1"/>
  <changelog author="sndirsch@suse.com" date="1338897600">- enable Motif support if %use_motif is set (currently done in
  X11:XOrg, but likely planned also for openSUSE:Factory:NonFree
  project)</changelog>
  <changelog author="sndirsch@suse.com" date="1348056000">- fixed build on openSUSE 12.2</changelog>
  <changelog author="sndirsch@suse.com" date="1348228800">- fixed BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1414411200">- fixed buildrequires: pkgconfig(dri) -&gt; pkgconfig(gl)
- added baselibs.conf as source to specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1422619200">- updated to current git 8.0.0_20130123_c4f7cdf; since
  1.0.0_20120320_4d1acb3 this is just a version bump to 8.0.0
  and one typo fix (git commit c4f7cdf)
- specfile cleanup</changelog>
  <changelog author="eich@suse.com" date="1458129600">- n_Use-newly-introduced-GLAPIVAR-for-variables.patch
  Use newly introduced GLAPIVAR instead of GLAPI for
  variable declarations. This adds an 'extern' in cases
  where GLAPI doesn't have one and avoids a variable
  declarartion to become a definition (bsc#970725).</changelog>
  <changelog author="eich@suse.com" date="1458388800">- Consolidate building of libGLw for Xt and Motif.</changelog>
  <changelog author="sndirsch@suse.com" date="1496059200">- includes everything needed for missing sle issue entries:
  fate #315643-315645, 319159-319161, 319618 (bsc#1041368)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387200">- n_Use-newly-introduced-GLAPIVAR-for-variables.patch
  * moved bits from Mesa's n_Define-GLAPIVAR-separate-from-GLAPI.patch
    into this one (boo#1082297)
- always build with Motif support</changelog>
  <changelog author="sndirsch@suse.com" date="1633348800">- fix libGLw.so symlink of devel package (bsc#1191122)</changelog>
</package>
<package pkgid="7674cdc96a5a4da5888e6529c3ce0705bbcd3b78a9f47947d10025d505882111" name="libGLwM1" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150000.3.6.1"/>
  <changelog author="sndirsch@suse.com" date="1338897600">- enable Motif support if %use_motif is set (currently done in
  X11:XOrg, but likely planned also for openSUSE:Factory:NonFree
  project)</changelog>
  <changelog author="sndirsch@suse.com" date="1348056000">- fixed build on openSUSE 12.2</changelog>
  <changelog author="sndirsch@suse.com" date="1348228800">- fixed BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1414411200">- fixed buildrequires: pkgconfig(dri) -&gt; pkgconfig(gl)
- added baselibs.conf as source to specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1422619200">- updated to current git 8.0.0_20130123_c4f7cdf; since
  1.0.0_20120320_4d1acb3 this is just a version bump to 8.0.0
  and one typo fix (git commit c4f7cdf)
- specfile cleanup</changelog>
  <changelog author="eich@suse.com" date="1458129600">- n_Use-newly-introduced-GLAPIVAR-for-variables.patch
  Use newly introduced GLAPIVAR instead of GLAPI for
  variable declarations. This adds an 'extern' in cases
  where GLAPI doesn't have one and avoids a variable
  declarartion to become a definition (bsc#970725).</changelog>
  <changelog author="eich@suse.com" date="1458388800">- Consolidate building of libGLw for Xt and Motif.</changelog>
  <changelog author="sndirsch@suse.com" date="1496059200">- includes everything needed for missing sle issue entries:
  fate #315643-315645, 319159-319161, 319618 (bsc#1041368)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387200">- n_Use-newly-introduced-GLAPIVAR-for-variables.patch
  * moved bits from Mesa's n_Define-GLAPIVAR-separate-from-GLAPI.patch
    into this one (boo#1082297)
- always build with Motif support</changelog>
  <changelog author="sndirsch@suse.com" date="1633348800">- fix libGLw.so symlink of devel package (bsc#1191122)</changelog>
</package>
<package pkgid="fa79157a7fa3a9df8463d5a29c33bba77f46d61a3cc5ae603cc00a67c1af1a63" name="libGLwM1" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150000.3.6.1"/>
  <changelog author="sndirsch@suse.com" date="1338897600">- enable Motif support if %use_motif is set (currently done in
  X11:XOrg, but likely planned also for openSUSE:Factory:NonFree
  project)</changelog>
  <changelog author="sndirsch@suse.com" date="1348056000">- fixed build on openSUSE 12.2</changelog>
  <changelog author="sndirsch@suse.com" date="1348228800">- fixed BuildRequires</changelog>
  <changelog author="sndirsch@suse.com" date="1414411200">- fixed buildrequires: pkgconfig(dri) -&gt; pkgconfig(gl)
- added baselibs.conf as source to specfile</changelog>
  <changelog author="sndirsch@suse.com" date="1422619200">- updated to current git 8.0.0_20130123_c4f7cdf; since
  1.0.0_20120320_4d1acb3 this is just a version bump to 8.0.0
  and one typo fix (git commit c4f7cdf)
- specfile cleanup</changelog>
  <changelog author="eich@suse.com" date="1458129600">- n_Use-newly-introduced-GLAPIVAR-for-variables.patch
  Use newly introduced GLAPIVAR instead of GLAPI for
  variable declarations. This adds an 'extern' in cases
  where GLAPI doesn't have one and avoids a variable
  declarartion to become a definition (bsc#970725).</changelog>
  <changelog author="eich@suse.com" date="1458388800">- Consolidate building of libGLw for Xt and Motif.</changelog>
  <changelog author="sndirsch@suse.com" date="1496059200">- includes everything needed for missing sle issue entries:
  fate #315643-315645, 319159-319161, 319618 (bsc#1041368)</changelog>
  <changelog author="sndirsch@suse.com" date="1519387200">- n_Use-newly-introduced-GLAPIVAR-for-variables.patch
  * moved bits from Mesa's n_Define-GLAPIVAR-separate-from-GLAPI.patch
    into this one (boo#1082297)
- always build with Motif support</changelog>
  <changelog author="sndirsch@suse.com" date="1633348800">- fix libGLw.so symlink of devel package (bsc#1191122)</changelog>
</package>
<package pkgid="39604dbc2e123206823e3921615ecd45be788438535c23095ef4aedd61cdaf3e" name="libLLVM7-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="316147d1aa2638c38d1c0f01b85d9ea665b43359e0488819f3e682fa5976c752" name="libLLVM7" arch="aarch64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="600757ac75cdf020a0463fcd7246b6f60d3f3701872d5751ece9258ea377a150" name="libLLVM7" arch="ppc64le">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="5d309658bdec3db0ce28c63eba99659bb1ea70723d125de8b0e1bc1e8ea372ec" name="libLLVM7" arch="s390x">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="2ba30224f8383ffe8b951d63a77d24e9ad7134130513bec678b011a12073de8f" name="libLLVM7" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="8d6e32a136d3705bc4c64b033e8407d5c0f5648a7af149b217d98ec96e4ac68e" name="libLTO7-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="17bdae4631ee659d42a3b03102ffb91ad3afd8fde5d9218b2dee507ffcf976ff" name="libLTO7" arch="aarch64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="7f51a690b8bab1d3e35f589db500cd45c46b50701ee8bf31acfcbe67f8785d36" name="libLTO7" arch="ppc64le">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="8569a35c41867e5501fd606a7f5ed970af21f4804037197f9dcbeeeb67083e23" name="libLTO7" arch="s390x">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="1a48bbc851bb5c7c4eff1c1906a39a9b076ba7df5f4a46964c10afc1831d7a4e" name="libLTO7" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="16ba8672d317e463fcee811d54109fc4c04c85664c5e99eb497042e18f59a320" name="libMagick++-7_Q16HDRI4-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="150200.10.26.1"/>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1638878400">- security update
- added patches
  fix CVE-2021-20176 [bsc#1181836], processing crafted file leads to division by zero
  + ImageMagick-CVE-2021-20176.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha() in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184001">- added patches
  use png_get_eXIf_1 when available [bsc#1197147]
  + ImageMagick-missing-png_get_eXIf_1.patch</changelog>
</package>
<package pkgid="4498f203f49ca96634df3ee227e65beeb070e622d30f3cd2e25d14e48325fb59" name="libMagick++-7_Q16HDRI4" arch="aarch64">
  <version epoch="0" ver="7.0.7.34" rel="150200.10.26.1"/>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1638878400">- security update
- added patches
  fix CVE-2021-20176 [bsc#1181836], processing crafted file leads to division by zero
  + ImageMagick-CVE-2021-20176.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha() in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184001">- added patches
  use png_get_eXIf_1 when available [bsc#1197147]
  + ImageMagick-missing-png_get_eXIf_1.patch</changelog>
</package>
<package pkgid="c0abfdf1a2294785fda15665047fd37d09056b7b49c6a119de032d03cf236be4" name="libMagick++-7_Q16HDRI4" arch="ppc64le">
  <version epoch="0" ver="7.0.7.34" rel="150200.10.26.1"/>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1638878400">- security update
- added patches
  fix CVE-2021-20176 [bsc#1181836], processing crafted file leads to division by zero
  + ImageMagick-CVE-2021-20176.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha() in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184001">- added patches
  use png_get_eXIf_1 when available [bsc#1197147]
  + ImageMagick-missing-png_get_eXIf_1.patch</changelog>
</package>
<package pkgid="a451a552d48dfc565c99b2f2c3aac6561ff013ba361ab9f254e1b73c6ecdb91d" name="libMagick++-7_Q16HDRI4" arch="s390x">
  <version epoch="0" ver="7.0.7.34" rel="150200.10.26.1"/>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1638878400">- security update
- added patches
  fix CVE-2021-20176 [bsc#1181836], processing crafted file leads to division by zero
  + ImageMagick-CVE-2021-20176.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha() in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184001">- added patches
  use png_get_eXIf_1 when available [bsc#1197147]
  + ImageMagick-missing-png_get_eXIf_1.patch</changelog>
</package>
<package pkgid="eafed4aff59c7437298ecd3d45a83554105d22c7e5183459c8eba00936bdf825" name="libMagick++-7_Q16HDRI4" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="150200.10.26.1"/>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1638878400">- security update
- added patches
  fix CVE-2021-20176 [bsc#1181836], processing crafted file leads to division by zero
  + ImageMagick-CVE-2021-20176.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha() in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184001">- added patches
  use png_get_eXIf_1 when available [bsc#1197147]
  + ImageMagick-missing-png_get_eXIf_1.patch</changelog>
</package>
<package pkgid="4388bc09976cc148b9ed9455bc05725abfa18df157a6b5f3daad8f0a6143e97a" name="libMagickCore-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="150200.10.26.1"/>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1638878400">- security update
- added patches
  fix CVE-2021-20176 [bsc#1181836], processing crafted file leads to division by zero
  + ImageMagick-CVE-2021-20176.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha() in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184001">- added patches
  use png_get_eXIf_1 when available [bsc#1197147]
  + ImageMagick-missing-png_get_eXIf_1.patch</changelog>
</package>
<package pkgid="d1359876ec807c386f6505de73505b113ca67b7012228ffbc73909cac15fcd4e" name="libMagickCore-7_Q16HDRI6" arch="aarch64">
  <version epoch="0" ver="7.0.7.34" rel="150200.10.26.1"/>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1638878400">- security update
- added patches
  fix CVE-2021-20176 [bsc#1181836], processing crafted file leads to division by zero
  + ImageMagick-CVE-2021-20176.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha() in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184001">- added patches
  use png_get_eXIf_1 when available [bsc#1197147]
  + ImageMagick-missing-png_get_eXIf_1.patch</changelog>
</package>
<package pkgid="8605d7583d2438e41ce400217fe87b926824702c6b027a77ef1671aa8757d4b1" name="libMagickCore-7_Q16HDRI6" arch="ppc64le">
  <version epoch="0" ver="7.0.7.34" rel="150200.10.26.1"/>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1638878400">- security update
- added patches
  fix CVE-2021-20176 [bsc#1181836], processing crafted file leads to division by zero
  + ImageMagick-CVE-2021-20176.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha() in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184001">- added patches
  use png_get_eXIf_1 when available [bsc#1197147]
  + ImageMagick-missing-png_get_eXIf_1.patch</changelog>
</package>
<package pkgid="f1b808458cfa71badd2d7517c6bfc7df467f338935bdde17c4e161219453b5c7" name="libMagickCore-7_Q16HDRI6" arch="s390x">
  <version epoch="0" ver="7.0.7.34" rel="150200.10.26.1"/>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1638878400">- security update
- added patches
  fix CVE-2021-20176 [bsc#1181836], processing crafted file leads to division by zero
  + ImageMagick-CVE-2021-20176.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha() in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184001">- added patches
  use png_get_eXIf_1 when available [bsc#1197147]
  + ImageMagick-missing-png_get_eXIf_1.patch</changelog>
</package>
<package pkgid="83aa30cb72bbc88c609b22608e6eb2ed3393be212ff4ab9f7eb4dde5fcbbd569" name="libMagickCore-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="150200.10.26.1"/>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1638878400">- security update
- added patches
  fix CVE-2021-20176 [bsc#1181836], processing crafted file leads to division by zero
  + ImageMagick-CVE-2021-20176.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha() in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184001">- added patches
  use png_get_eXIf_1 when available [bsc#1197147]
  + ImageMagick-missing-png_get_eXIf_1.patch</changelog>
</package>
<package pkgid="0d6b4df0296e48319b9785434273fdc56b2f83fccdede5d2883b64c309a313c8" name="libMagickWand-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="150200.10.26.1"/>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1638878400">- security update
- added patches
  fix CVE-2021-20176 [bsc#1181836], processing crafted file leads to division by zero
  + ImageMagick-CVE-2021-20176.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha() in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184001">- added patches
  use png_get_eXIf_1 when available [bsc#1197147]
  + ImageMagick-missing-png_get_eXIf_1.patch</changelog>
</package>
<package pkgid="d2b1991fc13f31356efb0b39e0db5120a98233dc4c678c118e096994a9590c7f" name="libMagickWand-7_Q16HDRI6" arch="aarch64">
  <version epoch="0" ver="7.0.7.34" rel="150200.10.26.1"/>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1638878400">- security update
- added patches
  fix CVE-2021-20176 [bsc#1181836], processing crafted file leads to division by zero
  + ImageMagick-CVE-2021-20176.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha() in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184001">- added patches
  use png_get_eXIf_1 when available [bsc#1197147]
  + ImageMagick-missing-png_get_eXIf_1.patch</changelog>
</package>
<package pkgid="2dbfd03304c9e5d6d8220ac4ec8f39611be318b88d87f1ed021696fd2a8517ae" name="libMagickWand-7_Q16HDRI6" arch="ppc64le">
  <version epoch="0" ver="7.0.7.34" rel="150200.10.26.1"/>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1638878400">- security update
- added patches
  fix CVE-2021-20176 [bsc#1181836], processing crafted file leads to division by zero
  + ImageMagick-CVE-2021-20176.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha() in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184001">- added patches
  use png_get_eXIf_1 when available [bsc#1197147]
  + ImageMagick-missing-png_get_eXIf_1.patch</changelog>
</package>
<package pkgid="e289bac8518578f08d516c40513d4499f17db7ff8ad6b9111f057fb8f35cacc3" name="libMagickWand-7_Q16HDRI6" arch="s390x">
  <version epoch="0" ver="7.0.7.34" rel="150200.10.26.1"/>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1638878400">- security update
- added patches
  fix CVE-2021-20176 [bsc#1181836], processing crafted file leads to division by zero
  + ImageMagick-CVE-2021-20176.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha() in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184001">- added patches
  use png_get_eXIf_1 when available [bsc#1197147]
  + ImageMagick-missing-png_get_eXIf_1.patch</changelog>
</package>
<package pkgid="3f0405748266c0fccc93ce1287638f98cf06a58f1e12f5933b2cb750d1ae97d6" name="libMagickWand-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="150200.10.26.1"/>
  <changelog author="pgajdos@suse.com" date="1560945600">- security update
- added patches
  CVE-2019-11597 [bsc#1138464]
  + ImageMagick-CVE-2019-11597.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1563883200">- security update
- added patches
  CVE-2019-13301 [bsc#1140554] (core)
  + ImageMagick-CVE-2019-13301.patch
  CVE-2019-13309 [bsc#1140520] (wand)
  + ImageMagick-CVE-2019-13309.patch
  CVE-2019-13310 [bsc#1140501] (wand)
  + ImageMagick-CVE-2019-13310.patch
  CVE-2019-13311 [bsc#1140513] (wand)
  + ImageMagick-CVE-2019-13311.patch
  CVE-2019-13303 [bsc#1140549] (core)
  + ImageMagick-CVE-2019-13303.patch
  CVE-2019-13296 [bsc#1140665] (wand)
  + ImageMagick-CVE-2019-13296.patch
  CVE-2019-13299 [bsc#1140668] (core)
  + ImageMagick-CVE-2019-13299.patch
  CVE-2019-13454 [bsc#1141171] (core)
  + ImageMagick-CVE-2019-13454.patch
  CVE-2019-13295 [bsc#1140664], CVE-2019-13297 [bsc#1140666] (core)
  + ImageMagick-CVE-2019-13295,13297.patch
  CVE-2019-12979 [bsc#1139886] (core)
  + ImageMagick-CVE-2019-12979.patch
  CVE-2019-13391 [bsc#1140673], CVE-2019-13308 [bsc#1140534], CVE-2019-13302 [bsc#1140552] (core, gif.c)
  + ImageMagick-CVE-2019-13391,13308,13302.patch
  CVE-2019-13298 [bsc#1140667] (core)
  + ImageMagick-CVE-2019-13298.patch
  CVE-2019-13300 [bsc#1140669] (core)
  + ImageMagick-CVE-2019-13300.patch
  CVE-2019-13307 [bsc#1140538] (core)
  + ImageMagick-CVE-2019-13307.patch
  CVE-2019-12977 [bsc#1139884] (jp2.c)
  + ImageMagick-CVE-2019-12977.patch
  CVE-2019-12975 [bsc#1140106] (dpx.c)
  + ImageMagick-CVE-2019-12975.patch
  CVE-2019-13135 [bsc#1140103] (cut.c)
  + ImageMagick-CVE-2019-13135.patch
  CVE-2019-12978 [bsc#1139885] (pango.c)
  + ImageMagick-CVE-2019-12978.patch
  CVE-2019-12974 [bsc#1140111] (pango.c)
  + ImageMagick-CVE-2019-12974.patch
  CVE-2019-13304 [bsc#1140547], CVE-2019-13305 [bsc#1140545], CVE-2019-13306 [bsc#1140543] (pnm.c)
  + ImageMagick-CVE-2019-13304,13305,13306.patch
  CVE-2019-13133 [bsc#1140100], CVE-2019-13134 [bsc#1140102] (bmp.c,viff.c)
  + ImageMagick-CVE-2019-13133,13134.patch
  CVE-2019-13137 [bsc#1140105] (ps.c)
  + ImageMagick-CVE-2019-13137.patch
  CVE-2019-13136 [bsc#1140104] (tiff.c)
  + ImageMagick-CVE-2019-13136.patch
  CVE-2019-12976 [bsc#1140110] (pcl.c)
  + ImageMagick-CVE-2019-12976.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1567684800">- security update
- added patches
  CVE-2019-15139 [bsc#1146213]
  + ImageMagick-CVE-2019-15139.patch
  CVE-2019-15140 [bsc#1146212]
  + ImageMagick-CVE-2019-15140.patch
  CVE-2019-15141 [bsc#1146211]
  + ImageMagick-CVE-2019-15141.patch
  CVE-2019-14980 [bsc#1146068]
  + ImageMagick-CVE-2019-14980.patch
  CVE-2019-14981 [bsc#1146065]
  + ImageMagick-CVE-2019-14981.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1570536000">- security update
- added patches
  CVE-2019-16713 [bsc#1151786]
  + ImageMagick-CVE-2019-16713.patch
  CVE-2019-16711 [bsc#1151784]
  + ImageMagick-CVE-2019-16711.patch
  CVE-2019-16712 [bsc#1151785]
  + ImageMagick-CVE-2019-16712.patch
  CVE-2019-16710 [bsc#1151783]
  + ImageMagick-CVE-2019-16710.patch
  CVE-2019-16708 [bsc#1151781], CVE-2019-16709 [bsc#1151782]
  + ImageMagick-CVE-2019-16708,16709.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578052800">- security update
- added patches
  CVE-2019-19948 [bsc#1159861]
  + ImageMagick-CVE-2019-19948.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1578484800">- security update
- added patches
  CVE-2019-19949 [bsc#1160369]
  + ImageMagick-CVE-2019-19949.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1580299200">- added patches
  bsc#1161194, https://github.com/ImageMagick/ImageMagick/issues/1428
  + ImageMagick-convert-tiff-resize-png.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1598875200">- fix bsc#1106272
- added patches
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603713600">- security update
- added patches
  fix CVE-2020-27560 [bsc#1178067], division by zero in OptimizeLayerFrames function in MagickCore/layer.c
  + ImageMagick-CVE-2020-27560.patch
  fix https://github.com/ImageMagick/ImageMagick/commit/029fb3425ecf82e8b30c060e38a135d1d3e76bb3
  + ImageMagick-set-correct-colorspace.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1606219200">- security update
- added patches
  fix CVE-2020-19667 [bsc#1179103], Stack buffer overflow in XPM coder could result in a crash
  + ImageMagick-CVE-2020-19667.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607342400">- security update
- added patches
  fix CVE-2020-27772 [bsc#1179347], outside the range of representable values of type 'unsigned int' at coders/bmp.c
  + ImageMagick-CVE-2020-27772.patch
  fix CVE-2020-27763 [bsc#1179312], division by zero at MagickCore/resize.c
  + ImageMagick-CVE-2020-27763.patch
  fix CVE-2020-27759 [bsc#1179313], outside the range of representable values of type 'int' at MagickCore/quantize.c
  fix CVE-2020-27769 [bsc#1179321], outside the range of representable values of type 'float' at MagickCore/quantize.c
  fix CVE-2020-27754 [bsc#1179336], outside the range of representable values of type 'long' and signed integer overflow at MagickCore/quantize.c
  + ImageMagick-CVE-2020-27759,27769,27754.patch
  fix CVE-2020-27771 [bsc#1179327], outside the range of representable values of type 'unsigned char' at coders/pdf.c
  + ImageMagick-CVE-2020-27771.patch
  fix CVE-2020-27764 [bsc#1179317], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27764.patch
  fix CVE-2020-27761 [bsc#1179315], outside the range of representable values of type 'unsigned long' at coders/palm.c
  + ImageMagick-CVE-2020-27761.patch
  fix CVE-2020-25676 [bsc#1179244], outside the range of representable values of type 'long' and integer overflow at MagickCore/pixel.c
  + ImageMagick-CVE-2020-25676.patch
  fix CVE-2020-25665 [bsc#1179208], heap-based buffer overflow in WritePALMImage
  + ImageMagick-CVE-2020-25665.patch
  fix CVE-2020-27766 [bsc#1179361], outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27776 [bsc#1179362], ImageMagick: outside the range of representable values of type 'unsigned long' at MagickCore/statistic.c
  fix CVE-2020-27774 [bsc#1179333], integer overflow at MagickCore/statistic.c
  + ImageMagick-CVE-2020-27774,27766,27776.patch
  fix CVE-2020-27750 [bsc#1179260], division by zero in MagickCore/colorspace-private.h
  + ImageMagick-CVE-2020-27750.patch
  fix CVE-2020-27760 [bsc#1179281], division by zero at MagickCore/enhance.c
  + ImageMagick-CVE-2020-27760.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607515200">- security update
- added patches
  fix CVE-2020-27753 [bsc#1179397], memory leaks in AcquireMagickMemory function
  + ImageMagick-CVE-2020-27753.patch
  fix CVE-2020-27770 [bsc#1179343], unsigned offset overflowed at MagickCore/string.c
  + ImageMagick-CVE-2020-27770.patch
  fix CVE-2020-25675 [bsc#1179240], outside the range of representable values of type 'long' and integer overflow
  + ImageMagick-CVE-2020-25675.patch
  fix CVE-2020-27756 [bsc#1179221], division by zero at MagickCore/geometry.c
  + ImageMagick-CVE-2020-27756.patch
  fix CVE-2020-27773 [bsc#1179285], division by zero at MagickCore/gem-private.h
  + ImageMagick-CVE-2020-27773.patch
  fix CVE-2020-27762 [bsc#1179278], outside the range of representable values of type 'unsigned char'
  + ImageMagick-CVE-2020-27762.patch
  fix CVE-2020-27755 [bsc#1179345], memory leaks in ResizeMagickMemory function in ImageMagick/MagickCore/memory.c
  + ImageMagick-CVE-2020-27755.patch
  fix CVE-2020-27765 [bsc#1179311], division by zero at MagickCore/segment.c
  + ImageMagick-CVE-2020-27765.patch
  fix CVE-2020-27758 [bsc#1179276], outside the range of representable values of type 'unsigned long long'
  + ImageMagick-CVE-2020-27758.patch
  fix CVE-2020-27775 [bsc#1179338], outside the range of representable values of type 'unsigned char' at MagickCore/quantum.h
  + ImageMagick-CVE-2020-27775.patch
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  + ImageMagick-CVE-2020-27752.patch
  fix CVE-2020-25664 [bsc#1179202], heap-based buffer overflow in PopShortPixel
  + ImageMagick-CVE-2020-25664.patch
  fix CVE-2020-25674 [bsc#1179223], heap-based buffer overflow in WriteOnePNGImage
  + ImageMagick-CVE-2020-25674.patch
  fix CVE-2020-25666 [bsc#1179212], outside the range of representable values of type 'int' and signed integer overflow
  + ImageMagick-CVE-2020-25666.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607688000">- security update
- added patches
  fix IM upstream issue #1184
  + ImageMagick-silent-disturbing-warnings.patch
  fix CVE-2020-27767 [bsc#1179322], outside the range of representable values of type 'float' at MagickCore/quantum.h
  fix CVE-2020-27768 [bsc#1179339], outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h
  fix CVE-2020-27751 [bsc#1179269], integer overflow in MagickCore/quantum-export.c
  fix CVE-2020-27752 [bsc#1179346], heap-based buffer overflow in PopShortPixel in MagickCore/quantum-private.h
  fix CVE-2020-27757 [bsc#1179268], outside the range of representable values of type 'unsigned long long' at
  + ImageMagick-CVE-2020-27767,27768,27751,27752,27757.patch
  fix CVE-2020-29599 [bsc#1179753], shell command injection in -authenticate
  + ImageMagick-CVE-2020-29599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1607947200">- run perl tests verbosely</changelog>
  <changelog author="pgajdos@suse.com" date="1614081600">- security update
- added patches
  fix CVE-2021-20241 [bsc#1182335], Division by zero in WriteJP2Image() in coders/jp2.c
  + ImageMagick-CVE-2021-20241.patch
  fix CVE-2021-20243 [bsc#1182336], Division by zero in GetResizeFilterWeight in MagickCore/resize.c
  + ImageMagick-CVE-2021-20243.patch
  fix CVE-2021-20244 [bsc#1182325], Division by zero in ImplodeImage in MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20244.patch
  fix CVE-2021-20246 [bsc#1182337], Division by zero in ScaleResampleFilter in MagickCore/resample.c
  + ImageMagick-CVE-2021-20246.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1618488000">- security update
- added patches
  fix CVE-2021-20309 [bsc#1184624], Division by zero in WaveImage() of MagickCore/visual-effects.c
  + ImageMagick-CVE-2021-20309.patch
  fix CVE-2021-20311 [bsc#1184626], Division by zero in sRGBTransformImage() in MagickCore/colorspace.c
  + ImageMagick-CVE-2021-20311.patch
  fix CVE-2021-20312 [bsc#1184627], Integer overflow in WriteTHUMBNAILImage of coders/thumbnail.c
  + ImageMagick-CVE-2021-20312.patch
  fix CVE-2021-20313 [bsc#1184628], Cipher leak when the calculating signatures in TransformSignatureof MagickCore/signature.c
  + ImageMagick-CVE-2021-20313.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1638878400">- security update
- added patches
  fix CVE-2021-20176 [bsc#1181836], processing crafted file leads to division by zero
  + ImageMagick-CVE-2021-20176.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha() in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1652184001">- added patches
  use png_get_eXIf_1 when available [bsc#1197147]
  + ImageMagick-missing-png_get_eXIf_1.patch</changelog>
</package>
<package pkgid="f063deefdcd2f4666205fc2a13d3de4dcd0c05e5d7a815267e97bb23c5127f24" name="libMrm4" arch="aarch64">
  <version epoch="0" ver="2.3.4" rel="150000.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="0f12a383e2464ae85cb59bffa113eb090c54ec0db0d886932863efc0e1befc3d" name="libMrm4" arch="ppc64le">
  <version epoch="0" ver="2.3.4" rel="150000.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="f93ca32172c8a1c2641109d449a1c8322169f7c1f199b22d524d05b46ec4b628" name="libMrm4" arch="s390x">
  <version epoch="0" ver="2.3.4" rel="150000.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="00d027b0444f35b8a061a99854150c9b5c609df4290d59a976f7f6f53d19cdab" name="libMrm4" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="150000.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="cbe319b3086d2224db44f5af93291c158e78c0e1f74fa5a4a3914f60f4e0fdc7" name="libMrm4-32bit" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="150000.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="98e14c3cfef7a81818fa718699703de5b60cc37825b5f3d61174f5665eaf3d07" name="libUil4" arch="aarch64">
  <version epoch="0" ver="2.3.4" rel="150000.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="6d7c9b2454a174f5662068a28a701d75ceb2b59069fd852d20cf6bd16ba44895" name="libUil4" arch="ppc64le">
  <version epoch="0" ver="2.3.4" rel="150000.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="cee5d5590c1fbc6a8303d01c69420afad88917939bd7812736357d6f35f2fbf0" name="libUil4" arch="s390x">
  <version epoch="0" ver="2.3.4" rel="150000.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="9283349895240641ac88cb811f052e5b3a32198dac3768d53b4041a5355190bf" name="libUil4" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="150000.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="fda08ba665dd7f5dc6006c892136a35d7173063e0323e01da72ae657df0ea149" name="libUil4-32bit" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="150000.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="8b325bdb2b124c844ea8b29ba7232b08b8228a209eae6e427b3bcfdc70c032e4" name="libXiterm-devel" arch="aarch64">
  <version epoch="0" ver="0.5.20040304" rel="150000.5.6.1"/>
  <changelog author="pgajdos@suse.com" date="1360843200">- add bdftopcf into build requires [bnc#803276]</changelog>
  <changelog author="pgajdos@suse.com" date="1362484800">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- README.SuSE renamed to README.SUSE [bnc#889032] (internal)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414843200">- Switch to pkgconfig() buildrequires instead of using
  metapackage xorg-x11-devel</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- implict-ptsname-decl.patch: fix implicit declaration of ptsname with
  glibc &gt;= 2.24</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="schwab@suse.de" date="1502884800">- Prerequire group(tty)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Conflict libiterm1 with terminfo-iterm: terminfo-iterm is an
  alternative to xiterm, and the conflict is meant to be.</changelog>
  <changelog author="schwab@suse.de" date="1565265600">- stropts.patch: remove use of obsolete XSI STREAMS interface</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- added patches
  fix do not enable application keypad mode [bsc#1158271]
  + xiterm-no-keypad-application-mode.patch
- big thanks to Stefan Hundhammer</changelog>
</package>
<package pkgid="c9a581d6292c944391bb0d76909e05efd497acea4ee41c0a768fbf2c10a96841" name="libXiterm-devel" arch="ppc64le">
  <version epoch="0" ver="0.5.20040304" rel="150000.5.6.1"/>
  <changelog author="pgajdos@suse.com" date="1360843200">- add bdftopcf into build requires [bnc#803276]</changelog>
  <changelog author="pgajdos@suse.com" date="1362484800">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- README.SuSE renamed to README.SUSE [bnc#889032] (internal)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414843200">- Switch to pkgconfig() buildrequires instead of using
  metapackage xorg-x11-devel</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- implict-ptsname-decl.patch: fix implicit declaration of ptsname with
  glibc &gt;= 2.24</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="schwab@suse.de" date="1502884800">- Prerequire group(tty)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Conflict libiterm1 with terminfo-iterm: terminfo-iterm is an
  alternative to xiterm, and the conflict is meant to be.</changelog>
  <changelog author="schwab@suse.de" date="1565265600">- stropts.patch: remove use of obsolete XSI STREAMS interface</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- added patches
  fix do not enable application keypad mode [bsc#1158271]
  + xiterm-no-keypad-application-mode.patch
- big thanks to Stefan Hundhammer</changelog>
</package>
<package pkgid="b9629be097f1a76b154411802374f969e43436d2b2919500cba0301d345cfef1" name="libXiterm-devel" arch="s390x">
  <version epoch="0" ver="0.5.20040304" rel="150000.5.6.1"/>
  <changelog author="pgajdos@suse.com" date="1360843200">- add bdftopcf into build requires [bnc#803276]</changelog>
  <changelog author="pgajdos@suse.com" date="1362484800">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- README.SuSE renamed to README.SUSE [bnc#889032] (internal)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414843200">- Switch to pkgconfig() buildrequires instead of using
  metapackage xorg-x11-devel</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- implict-ptsname-decl.patch: fix implicit declaration of ptsname with
  glibc &gt;= 2.24</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="schwab@suse.de" date="1502884800">- Prerequire group(tty)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Conflict libiterm1 with terminfo-iterm: terminfo-iterm is an
  alternative to xiterm, and the conflict is meant to be.</changelog>
  <changelog author="schwab@suse.de" date="1565265600">- stropts.patch: remove use of obsolete XSI STREAMS interface</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- added patches
  fix do not enable application keypad mode [bsc#1158271]
  + xiterm-no-keypad-application-mode.patch
- big thanks to Stefan Hundhammer</changelog>
</package>
<package pkgid="46aa61a75c02c63ca37997696c813174ccd8455223d5a4333f26edc24a94bcf3" name="libXiterm-devel" arch="x86_64">
  <version epoch="0" ver="0.5.20040304" rel="150000.5.6.1"/>
  <changelog author="pgajdos@suse.com" date="1360843200">- add bdftopcf into build requires [bnc#803276]</changelog>
  <changelog author="pgajdos@suse.com" date="1362484800">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- README.SuSE renamed to README.SUSE [bnc#889032] (internal)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414843200">- Switch to pkgconfig() buildrequires instead of using
  metapackage xorg-x11-devel</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- implict-ptsname-decl.patch: fix implicit declaration of ptsname with
  glibc &gt;= 2.24</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="schwab@suse.de" date="1502884800">- Prerequire group(tty)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Conflict libiterm1 with terminfo-iterm: terminfo-iterm is an
  alternative to xiterm, and the conflict is meant to be.</changelog>
  <changelog author="schwab@suse.de" date="1565265600">- stropts.patch: remove use of obsolete XSI STREAMS interface</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- added patches
  fix do not enable application keypad mode [bsc#1158271]
  + xiterm-no-keypad-application-mode.patch
- big thanks to Stefan Hundhammer</changelog>
</package>
<package pkgid="7c94a39926387abb26429463b47e22996882f7ab5b0f61be92398d338d74f712" name="libXiterm1" arch="aarch64">
  <version epoch="0" ver="0.5.20040304" rel="150000.5.6.1"/>
  <changelog author="pgajdos@suse.com" date="1360843200">- add bdftopcf into build requires [bnc#803276]</changelog>
  <changelog author="pgajdos@suse.com" date="1362484800">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- README.SuSE renamed to README.SUSE [bnc#889032] (internal)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414843200">- Switch to pkgconfig() buildrequires instead of using
  metapackage xorg-x11-devel</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- implict-ptsname-decl.patch: fix implicit declaration of ptsname with
  glibc &gt;= 2.24</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="schwab@suse.de" date="1502884800">- Prerequire group(tty)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Conflict libiterm1 with terminfo-iterm: terminfo-iterm is an
  alternative to xiterm, and the conflict is meant to be.</changelog>
  <changelog author="schwab@suse.de" date="1565265600">- stropts.patch: remove use of obsolete XSI STREAMS interface</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- added patches
  fix do not enable application keypad mode [bsc#1158271]
  + xiterm-no-keypad-application-mode.patch
- big thanks to Stefan Hundhammer</changelog>
</package>
<package pkgid="ebd03a9758528c7999fa5dfd0d14fc0439c2b19d2430cd02b7383cf1f2ec5ace" name="libXiterm1" arch="ppc64le">
  <version epoch="0" ver="0.5.20040304" rel="150000.5.6.1"/>
  <changelog author="pgajdos@suse.com" date="1360843200">- add bdftopcf into build requires [bnc#803276]</changelog>
  <changelog author="pgajdos@suse.com" date="1362484800">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- README.SuSE renamed to README.SUSE [bnc#889032] (internal)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414843200">- Switch to pkgconfig() buildrequires instead of using
  metapackage xorg-x11-devel</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- implict-ptsname-decl.patch: fix implicit declaration of ptsname with
  glibc &gt;= 2.24</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="schwab@suse.de" date="1502884800">- Prerequire group(tty)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Conflict libiterm1 with terminfo-iterm: terminfo-iterm is an
  alternative to xiterm, and the conflict is meant to be.</changelog>
  <changelog author="schwab@suse.de" date="1565265600">- stropts.patch: remove use of obsolete XSI STREAMS interface</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- added patches
  fix do not enable application keypad mode [bsc#1158271]
  + xiterm-no-keypad-application-mode.patch
- big thanks to Stefan Hundhammer</changelog>
</package>
<package pkgid="b58b14b0de2a3d173bec98ba46177392fe0217254b0db2b3da26f1ca1b5d927f" name="libXiterm1" arch="s390x">
  <version epoch="0" ver="0.5.20040304" rel="150000.5.6.1"/>
  <changelog author="pgajdos@suse.com" date="1360843200">- add bdftopcf into build requires [bnc#803276]</changelog>
  <changelog author="pgajdos@suse.com" date="1362484800">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- README.SuSE renamed to README.SUSE [bnc#889032] (internal)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414843200">- Switch to pkgconfig() buildrequires instead of using
  metapackage xorg-x11-devel</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- implict-ptsname-decl.patch: fix implicit declaration of ptsname with
  glibc &gt;= 2.24</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="schwab@suse.de" date="1502884800">- Prerequire group(tty)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Conflict libiterm1 with terminfo-iterm: terminfo-iterm is an
  alternative to xiterm, and the conflict is meant to be.</changelog>
  <changelog author="schwab@suse.de" date="1565265600">- stropts.patch: remove use of obsolete XSI STREAMS interface</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- added patches
  fix do not enable application keypad mode [bsc#1158271]
  + xiterm-no-keypad-application-mode.patch
- big thanks to Stefan Hundhammer</changelog>
</package>
<package pkgid="6965361eb421f6d3f72d076d6171180be55dfe776d75346a7f4382a9a0f10ffd" name="libXiterm1" arch="x86_64">
  <version epoch="0" ver="0.5.20040304" rel="150000.5.6.1"/>
  <changelog author="pgajdos@suse.com" date="1360843200">- add bdftopcf into build requires [bnc#803276]</changelog>
  <changelog author="pgajdos@suse.com" date="1362484800">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- README.SuSE renamed to README.SUSE [bnc#889032] (internal)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414843200">- Switch to pkgconfig() buildrequires instead of using
  metapackage xorg-x11-devel</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- implict-ptsname-decl.patch: fix implicit declaration of ptsname with
  glibc &gt;= 2.24</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="schwab@suse.de" date="1502884800">- Prerequire group(tty)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Conflict libiterm1 with terminfo-iterm: terminfo-iterm is an
  alternative to xiterm, and the conflict is meant to be.</changelog>
  <changelog author="schwab@suse.de" date="1565265600">- stropts.patch: remove use of obsolete XSI STREAMS interface</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- added patches
  fix do not enable application keypad mode [bsc#1158271]
  + xiterm-no-keypad-application-mode.patch
- big thanks to Stefan Hundhammer</changelog>
</package>
<package pkgid="6b331a9b8269389890d8ee13c2d6242fa6f6f75c22328a92c0940dfcd37937c2" name="libXm4" arch="aarch64">
  <version epoch="0" ver="2.3.4" rel="150000.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="c71e28896944fbae00c8f7f3b9c4cd100a3d30f09a6eff1192853d5da4f98abc" name="libXm4" arch="ppc64le">
  <version epoch="0" ver="2.3.4" rel="150000.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="621df855c375da6c9337424b144c21f71883f9cc9dfb7cf665305685dcfb48fd" name="libXm4" arch="s390x">
  <version epoch="0" ver="2.3.4" rel="150000.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="41f561e0d2971d9765a288ea9ba4b459f44d8eda98c62bdf72680d7368dc588d" name="libXm4" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="150000.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="8066744846eff1815a7c1a614a1290123a197ae167bef0418a8bdd34a1cfe9c3" name="libXm4-32bit" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="150000.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="1a407648f2cdefe497b0fd6648c8f3556a2ce548674253470f7d38680049e5b4" name="liba52-0" arch="aarch64">
  <version epoch="0" ver="0.7.5+svn613" rel="150000.3.2.1"/>
  <changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups where rpmlint wasn't so happy</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1258804800">- update to svn from videolan</changelog>
  <changelog author="ludwig.nussel@gmx.de" date="1277035200">- provide a52dec-devel for compatibility</changelog>
  <changelog author="reddwarf@opensuse.org" date="1299067200">- run spec cleaner
- remove .la files
- add pkg-config BuildRequire so RPM can do its magic</changelog>
  <changelog author="reddwarf@opensuse.org" date="1327406400">- fix baselibs.conf
- don't install the INSTALL file
- change license tag to SPDX
- add automake, autoconf and libtool BuildRequires</changelog>
  <changelog author="i@margueirte.su" date="1415188800">- update latest svn 0.7.5+svn613</changelog>
  <changelog author="aloisio@gmx.com" date="1490097600">- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1490184000">- Add baselibs.conf as source file</changelog>
  <changelog author="jengelh@inai.de" date="1490184001">- Trim filler words from descriptions. Improve summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500120000">- Drop a52dec-compat.diff and mm_accel.h source, not needed with
  the svn checkout we are using.
- Pass --enable-shared to configure, ensure we build the shared
  library.</changelog>
</package>
<package pkgid="8ff49c28cb235a16edeb076df02e90d31efa51fd26b17ec74805d5746ab2a6f7" name="liba52-0" arch="ppc64le">
  <version epoch="0" ver="0.7.5+svn613" rel="150000.3.2.1"/>
  <changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups where rpmlint wasn't so happy</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1258804800">- update to svn from videolan</changelog>
  <changelog author="ludwig.nussel@gmx.de" date="1277035200">- provide a52dec-devel for compatibility</changelog>
  <changelog author="reddwarf@opensuse.org" date="1299067200">- run spec cleaner
- remove .la files
- add pkg-config BuildRequire so RPM can do its magic</changelog>
  <changelog author="reddwarf@opensuse.org" date="1327406400">- fix baselibs.conf
- don't install the INSTALL file
- change license tag to SPDX
- add automake, autoconf and libtool BuildRequires</changelog>
  <changelog author="i@margueirte.su" date="1415188800">- update latest svn 0.7.5+svn613</changelog>
  <changelog author="aloisio@gmx.com" date="1490097600">- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1490184000">- Add baselibs.conf as source file</changelog>
  <changelog author="jengelh@inai.de" date="1490184001">- Trim filler words from descriptions. Improve summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500120000">- Drop a52dec-compat.diff and mm_accel.h source, not needed with
  the svn checkout we are using.
- Pass --enable-shared to configure, ensure we build the shared
  library.</changelog>
</package>
<package pkgid="b627de80cb0a652c6241ee9b1dd2870c8d3f4bedd7fdd8743a9fafd95ac78034" name="liba52-0" arch="s390x">
  <version epoch="0" ver="0.7.5+svn613" rel="150000.3.2.1"/>
  <changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups where rpmlint wasn't so happy</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1258804800">- update to svn from videolan</changelog>
  <changelog author="ludwig.nussel@gmx.de" date="1277035200">- provide a52dec-devel for compatibility</changelog>
  <changelog author="reddwarf@opensuse.org" date="1299067200">- run spec cleaner
- remove .la files
- add pkg-config BuildRequire so RPM can do its magic</changelog>
  <changelog author="reddwarf@opensuse.org" date="1327406400">- fix baselibs.conf
- don't install the INSTALL file
- change license tag to SPDX
- add automake, autoconf and libtool BuildRequires</changelog>
  <changelog author="i@margueirte.su" date="1415188800">- update latest svn 0.7.5+svn613</changelog>
  <changelog author="aloisio@gmx.com" date="1490097600">- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1490184000">- Add baselibs.conf as source file</changelog>
  <changelog author="jengelh@inai.de" date="1490184001">- Trim filler words from descriptions. Improve summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500120000">- Drop a52dec-compat.diff and mm_accel.h source, not needed with
  the svn checkout we are using.
- Pass --enable-shared to configure, ensure we build the shared
  library.</changelog>
</package>
<package pkgid="47a60c8d8a418cc669e83fcbf65c647fccd53c2f252bfb50e4cf02875519ec71" name="liba52-0" arch="x86_64">
  <version epoch="0" ver="0.7.5+svn613" rel="150000.3.2.1"/>
  <changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups where rpmlint wasn't so happy</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1258804800">- update to svn from videolan</changelog>
  <changelog author="ludwig.nussel@gmx.de" date="1277035200">- provide a52dec-devel for compatibility</changelog>
  <changelog author="reddwarf@opensuse.org" date="1299067200">- run spec cleaner
- remove .la files
- add pkg-config BuildRequire so RPM can do its magic</changelog>
  <changelog author="reddwarf@opensuse.org" date="1327406400">- fix baselibs.conf
- don't install the INSTALL file
- change license tag to SPDX
- add automake, autoconf and libtool BuildRequires</changelog>
  <changelog author="i@margueirte.su" date="1415188800">- update latest svn 0.7.5+svn613</changelog>
  <changelog author="aloisio@gmx.com" date="1490097600">- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1490184000">- Add baselibs.conf as source file</changelog>
  <changelog author="jengelh@inai.de" date="1490184001">- Trim filler words from descriptions. Improve summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500120000">- Drop a52dec-compat.diff and mm_accel.h source, not needed with
  the svn checkout we are using.
- Pass --enable-shared to configure, ensure we build the shared
  library.</changelog>
</package>
<package pkgid="19ddb6186116b030c94493e53fdd5db023a6012d228d17d562a023a236248c51" name="liba52-0-32bit" arch="x86_64">
  <version epoch="0" ver="0.7.5+svn613" rel="150000.3.2.1"/>
  <changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups where rpmlint wasn't so happy</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1258804800">- update to svn from videolan</changelog>
  <changelog author="ludwig.nussel@gmx.de" date="1277035200">- provide a52dec-devel for compatibility</changelog>
  <changelog author="reddwarf@opensuse.org" date="1299067200">- run spec cleaner
- remove .la files
- add pkg-config BuildRequire so RPM can do its magic</changelog>
  <changelog author="reddwarf@opensuse.org" date="1327406400">- fix baselibs.conf
- don't install the INSTALL file
- change license tag to SPDX
- add automake, autoconf and libtool BuildRequires</changelog>
  <changelog author="i@margueirte.su" date="1415188800">- update latest svn 0.7.5+svn613</changelog>
  <changelog author="aloisio@gmx.com" date="1490097600">- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1490184000">- Add baselibs.conf as source file</changelog>
  <changelog author="jengelh@inai.de" date="1490184001">- Trim filler words from descriptions. Improve summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500120000">- Drop a52dec-compat.diff and mm_accel.h source, not needed with
  the svn checkout we are using.
- Pass --enable-shared to configure, ensure we build the shared
  library.</changelog>
</package>
<package pkgid="53df2392797c7682cd324ef6618221026996e0aabc689aaa21d7a5dd9877d676" name="liba52-devel" arch="aarch64">
  <version epoch="0" ver="0.7.5+svn613" rel="150000.3.2.1"/>
  <changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups where rpmlint wasn't so happy</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1258804800">- update to svn from videolan</changelog>
  <changelog author="ludwig.nussel@gmx.de" date="1277035200">- provide a52dec-devel for compatibility</changelog>
  <changelog author="reddwarf@opensuse.org" date="1299067200">- run spec cleaner
- remove .la files
- add pkg-config BuildRequire so RPM can do its magic</changelog>
  <changelog author="reddwarf@opensuse.org" date="1327406400">- fix baselibs.conf
- don't install the INSTALL file
- change license tag to SPDX
- add automake, autoconf and libtool BuildRequires</changelog>
  <changelog author="i@margueirte.su" date="1415188800">- update latest svn 0.7.5+svn613</changelog>
  <changelog author="aloisio@gmx.com" date="1490097600">- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1490184000">- Add baselibs.conf as source file</changelog>
  <changelog author="jengelh@inai.de" date="1490184001">- Trim filler words from descriptions. Improve summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500120000">- Drop a52dec-compat.diff and mm_accel.h source, not needed with
  the svn checkout we are using.
- Pass --enable-shared to configure, ensure we build the shared
  library.</changelog>
</package>
<package pkgid="e75136759e1df2c74acf4d161e28dd0087f2b09bf7c3da390c0ab84a277424cc" name="liba52-devel" arch="ppc64le">
  <version epoch="0" ver="0.7.5+svn613" rel="150000.3.2.1"/>
  <changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups where rpmlint wasn't so happy</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1258804800">- update to svn from videolan</changelog>
  <changelog author="ludwig.nussel@gmx.de" date="1277035200">- provide a52dec-devel for compatibility</changelog>
  <changelog author="reddwarf@opensuse.org" date="1299067200">- run spec cleaner
- remove .la files
- add pkg-config BuildRequire so RPM can do its magic</changelog>
  <changelog author="reddwarf@opensuse.org" date="1327406400">- fix baselibs.conf
- don't install the INSTALL file
- change license tag to SPDX
- add automake, autoconf and libtool BuildRequires</changelog>
  <changelog author="i@margueirte.su" date="1415188800">- update latest svn 0.7.5+svn613</changelog>
  <changelog author="aloisio@gmx.com" date="1490097600">- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1490184000">- Add baselibs.conf as source file</changelog>
  <changelog author="jengelh@inai.de" date="1490184001">- Trim filler words from descriptions. Improve summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500120000">- Drop a52dec-compat.diff and mm_accel.h source, not needed with
  the svn checkout we are using.
- Pass --enable-shared to configure, ensure we build the shared
  library.</changelog>
</package>
<package pkgid="1fcd9ac3dcdff78d0450d974c08e27931af654647baa83c3a664474a4e11f6d2" name="liba52-devel" arch="s390x">
  <version epoch="0" ver="0.7.5+svn613" rel="150000.3.2.1"/>
  <changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups where rpmlint wasn't so happy</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1258804800">- update to svn from videolan</changelog>
  <changelog author="ludwig.nussel@gmx.de" date="1277035200">- provide a52dec-devel for compatibility</changelog>
  <changelog author="reddwarf@opensuse.org" date="1299067200">- run spec cleaner
- remove .la files
- add pkg-config BuildRequire so RPM can do its magic</changelog>
  <changelog author="reddwarf@opensuse.org" date="1327406400">- fix baselibs.conf
- don't install the INSTALL file
- change license tag to SPDX
- add automake, autoconf and libtool BuildRequires</changelog>
  <changelog author="i@margueirte.su" date="1415188800">- update latest svn 0.7.5+svn613</changelog>
  <changelog author="aloisio@gmx.com" date="1490097600">- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1490184000">- Add baselibs.conf as source file</changelog>
  <changelog author="jengelh@inai.de" date="1490184001">- Trim filler words from descriptions. Improve summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500120000">- Drop a52dec-compat.diff and mm_accel.h source, not needed with
  the svn checkout we are using.
- Pass --enable-shared to configure, ensure we build the shared
  library.</changelog>
</package>
<package pkgid="6c7a60e6c2cf521b446dcbca45f2cda94494ad112dbe6a9dc3a1752a2b824a39" name="liba52-devel" arch="x86_64">
  <version epoch="0" ver="0.7.5+svn613" rel="150000.3.2.1"/>
  <changelog author="Manfred.Tremmel@iiv.de" date="1250856000">- cleanups where rpmlint wasn't so happy</changelog>
  <changelog author="Manfred.Tremmel@iiv.de" date="1258804800">- update to svn from videolan</changelog>
  <changelog author="ludwig.nussel@gmx.de" date="1277035200">- provide a52dec-devel for compatibility</changelog>
  <changelog author="reddwarf@opensuse.org" date="1299067200">- run spec cleaner
- remove .la files
- add pkg-config BuildRequire so RPM can do its magic</changelog>
  <changelog author="reddwarf@opensuse.org" date="1327406400">- fix baselibs.conf
- don't install the INSTALL file
- change license tag to SPDX
- add automake, autoconf and libtool BuildRequires</changelog>
  <changelog author="i@margueirte.su" date="1415188800">- update latest svn 0.7.5+svn613</changelog>
  <changelog author="aloisio@gmx.com" date="1490097600">- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1490184000">- Add baselibs.conf as source file</changelog>
  <changelog author="jengelh@inai.de" date="1490184001">- Trim filler words from descriptions. Improve summaries.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500120000">- Drop a52dec-compat.diff and mm_accel.h source, not needed with
  the svn checkout we are using.
- Pass --enable-shared to configure, ensure we build the shared
  library.</changelog>
</package>
<package pkgid="5dae1794920f0101d3beb9ca703e681cbb1f3b557ca3ae24350dd5d0763c1780" name="libada11" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="aa1b864982bf20270ddee06370eca52d60ba1bc0abd20b365d702833cb31ee13" name="libada11" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="71c2780d240433275e639242041492498897c653988abd288e6d10c348f5f909" name="libada11" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="b2880094fd357d37997a85491960e3b99642ad4f795d49c2f099e19949733cec" name="libada11" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="04188633cdbbe377616b94917e871c6fe449deccb2fee67be7fe0a92b7340858" name="libada11-32bit" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="ea71892d098b541449a3ba853b63598e0792abe9e585d27f6a488503a19a0c6c" name="libada11-32bit" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="6944a3020478aafe4eb448be4042d114a627f5e536c8514468f05fc3e4898bc3" name="libada8-32bit" arch="s390x">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="37951bf01e5062ff3050350aa992acbd46dfa647320ec8ecc0424ab293431456" name="libada8-32bit" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="4558246625ba82fbf8aac9c95f54febec19ef7348170ed624ee49d7185a1a5d8" name="libada8" arch="aarch64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="b9dd9a07669a86f128b68ae9daba69a0741737c46c7619eb38dc79ccc3c1cdf9" name="libada8" arch="ppc64le">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="1b7bd9fba09cc02509bcd0190592efc44cdac06a416bad0c082288f21bbb20fa" name="libada8" arch="s390x">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="f18fa839bd6e78c23212392204b9f92c08f3e64896033795d6712b4892bbd3f7" name="libada8" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="cd4f1bb75f8c83a48de71561d227b0f683c073f1dd7af430a827c0141a7baa73" name="libaom" arch="src">
  <version epoch="0" ver="1.0.0" rel="150200.3.12.1"/>
  <changelog author="9+suse@cirno.systems" date="1532692800">- Init, v1.0.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532952000">- Pass conditional AOM_TARGET_CPU to cmake, fix build for arm and
  ppc, as well as optimize target cpu for other arches.</changelog>
  <changelog author="9+suse@cirno.systems" date="1533038400">- Enable CONFIG_LOWBITDEPTH. Makes 8-bit decoding faster. The only
  reason this confusingly-named option is not enabled by default
  is that its behavior might not match the 16-bit reference code
  path, and that hardware vendors want to be able to validate
  their designs against it. No actual mismatches have been found.
  See https://bugs.chromium.org/p/aomedia/issues/detail?id=2062</changelog>
  <changelog author="pgajdos@suse.com" date="1629892800">- security update
- added patches
  fix CVE-2021-30475 [bsc#1189497], Buffer overflow in aom_dsp/noise_model.c
  + libaom-CVE-2021-30475.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631188800">- security update
- added patches
  fix CVE-2021-30474 [bsc#1186799], aom_dsp/grain_table.c in libaom in AOMedia before 2021-03-30 has a use-after-free.
  + libaom-CVE-2021-30474.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1638878400">- security update
- added patches
  fix CVE-2020-36129 [bsc#1193356], AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aom_image.c.
  fix CVE-2020-36131 [bsc#1193365], AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/rate_hist.c.
  fix CVE-2020-36135 [bsc#1193366], AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component rate_hist.c.
  + libaom-CVE-2020-36129,36131,36135.patch
  fix CVE-2020-36130 [bsc#1193369], AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1_dx_iface.c.
  + libaom-CVE-2020-36130.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1648641600">- security update
- added patches
  fix CVE-2021-30473 [bsc#1185778], aom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap.
  + libaom-CVE-2021-30473.patch</changelog>
</package>
<package pkgid="cf7c22251c4b17e7bbb0d6071a50ab05d37c3a7b6d9652cc471b4913a330118b" name="libaom0" arch="aarch64">
  <version epoch="0" ver="1.0.0" rel="150200.3.12.1"/>
  <changelog author="9+suse@cirno.systems" date="1532692800">- Init, v1.0.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532952000">- Pass conditional AOM_TARGET_CPU to cmake, fix build for arm and
  ppc, as well as optimize target cpu for other arches.</changelog>
  <changelog author="9+suse@cirno.systems" date="1533038400">- Enable CONFIG_LOWBITDEPTH. Makes 8-bit decoding faster. The only
  reason this confusingly-named option is not enabled by default
  is that its behavior might not match the 16-bit reference code
  path, and that hardware vendors want to be able to validate
  their designs against it. No actual mismatches have been found.
  See https://bugs.chromium.org/p/aomedia/issues/detail?id=2062</changelog>
  <changelog author="pgajdos@suse.com" date="1629892800">- security update
- added patches
  fix CVE-2021-30475 [bsc#1189497], Buffer overflow in aom_dsp/noise_model.c
  + libaom-CVE-2021-30475.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631188800">- security update
- added patches
  fix CVE-2021-30474 [bsc#1186799], aom_dsp/grain_table.c in libaom in AOMedia before 2021-03-30 has a use-after-free.
  + libaom-CVE-2021-30474.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1638878400">- security update
- added patches
  fix CVE-2020-36129 [bsc#1193356], AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aom_image.c.
  fix CVE-2020-36131 [bsc#1193365], AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/rate_hist.c.
  fix CVE-2020-36135 [bsc#1193366], AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component rate_hist.c.
  + libaom-CVE-2020-36129,36131,36135.patch
  fix CVE-2020-36130 [bsc#1193369], AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1_dx_iface.c.
  + libaom-CVE-2020-36130.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1648641600">- security update
- added patches
  fix CVE-2021-30473 [bsc#1185778], aom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap.
  + libaom-CVE-2021-30473.patch</changelog>
</package>
<package pkgid="8fe3b0bdb422487cd3c28694e69225ca1a28e1ce91c1b30e2d360f1a53559088" name="libaom0" arch="ppc64le">
  <version epoch="0" ver="1.0.0" rel="150200.3.12.1"/>
  <changelog author="9+suse@cirno.systems" date="1532692800">- Init, v1.0.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532952000">- Pass conditional AOM_TARGET_CPU to cmake, fix build for arm and
  ppc, as well as optimize target cpu for other arches.</changelog>
  <changelog author="9+suse@cirno.systems" date="1533038400">- Enable CONFIG_LOWBITDEPTH. Makes 8-bit decoding faster. The only
  reason this confusingly-named option is not enabled by default
  is that its behavior might not match the 16-bit reference code
  path, and that hardware vendors want to be able to validate
  their designs against it. No actual mismatches have been found.
  See https://bugs.chromium.org/p/aomedia/issues/detail?id=2062</changelog>
  <changelog author="pgajdos@suse.com" date="1629892800">- security update
- added patches
  fix CVE-2021-30475 [bsc#1189497], Buffer overflow in aom_dsp/noise_model.c
  + libaom-CVE-2021-30475.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631188800">- security update
- added patches
  fix CVE-2021-30474 [bsc#1186799], aom_dsp/grain_table.c in libaom in AOMedia before 2021-03-30 has a use-after-free.
  + libaom-CVE-2021-30474.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1638878400">- security update
- added patches
  fix CVE-2020-36129 [bsc#1193356], AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aom_image.c.
  fix CVE-2020-36131 [bsc#1193365], AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/rate_hist.c.
  fix CVE-2020-36135 [bsc#1193366], AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component rate_hist.c.
  + libaom-CVE-2020-36129,36131,36135.patch
  fix CVE-2020-36130 [bsc#1193369], AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1_dx_iface.c.
  + libaom-CVE-2020-36130.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1648641600">- security update
- added patches
  fix CVE-2021-30473 [bsc#1185778], aom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap.
  + libaom-CVE-2021-30473.patch</changelog>
</package>
<package pkgid="5bb367f642b6afeb04c7722b7103cff241e532308da965f1a84ebf2867139eb9" name="libaom0" arch="s390x">
  <version epoch="0" ver="1.0.0" rel="150200.3.12.1"/>
  <changelog author="9+suse@cirno.systems" date="1532692800">- Init, v1.0.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532952000">- Pass conditional AOM_TARGET_CPU to cmake, fix build for arm and
  ppc, as well as optimize target cpu for other arches.</changelog>
  <changelog author="9+suse@cirno.systems" date="1533038400">- Enable CONFIG_LOWBITDEPTH. Makes 8-bit decoding faster. The only
  reason this confusingly-named option is not enabled by default
  is that its behavior might not match the 16-bit reference code
  path, and that hardware vendors want to be able to validate
  their designs against it. No actual mismatches have been found.
  See https://bugs.chromium.org/p/aomedia/issues/detail?id=2062</changelog>
  <changelog author="pgajdos@suse.com" date="1629892800">- security update
- added patches
  fix CVE-2021-30475 [bsc#1189497], Buffer overflow in aom_dsp/noise_model.c
  + libaom-CVE-2021-30475.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631188800">- security update
- added patches
  fix CVE-2021-30474 [bsc#1186799], aom_dsp/grain_table.c in libaom in AOMedia before 2021-03-30 has a use-after-free.
  + libaom-CVE-2021-30474.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1638878400">- security update
- added patches
  fix CVE-2020-36129 [bsc#1193356], AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aom_image.c.
  fix CVE-2020-36131 [bsc#1193365], AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/rate_hist.c.
  fix CVE-2020-36135 [bsc#1193366], AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component rate_hist.c.
  + libaom-CVE-2020-36129,36131,36135.patch
  fix CVE-2020-36130 [bsc#1193369], AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1_dx_iface.c.
  + libaom-CVE-2020-36130.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1648641600">- security update
- added patches
  fix CVE-2021-30473 [bsc#1185778], aom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap.
  + libaom-CVE-2021-30473.patch</changelog>
</package>
<package pkgid="8853d6d112dafb1dad7835ebd1ffbee2a939953ab59b8f6aafdf8078fb3b889e" name="libaom0" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="150200.3.12.1"/>
  <changelog author="9+suse@cirno.systems" date="1532692800">- Init, v1.0.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532952000">- Pass conditional AOM_TARGET_CPU to cmake, fix build for arm and
  ppc, as well as optimize target cpu for other arches.</changelog>
  <changelog author="9+suse@cirno.systems" date="1533038400">- Enable CONFIG_LOWBITDEPTH. Makes 8-bit decoding faster. The only
  reason this confusingly-named option is not enabled by default
  is that its behavior might not match the 16-bit reference code
  path, and that hardware vendors want to be able to validate
  their designs against it. No actual mismatches have been found.
  See https://bugs.chromium.org/p/aomedia/issues/detail?id=2062</changelog>
  <changelog author="pgajdos@suse.com" date="1629892800">- security update
- added patches
  fix CVE-2021-30475 [bsc#1189497], Buffer overflow in aom_dsp/noise_model.c
  + libaom-CVE-2021-30475.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631188800">- security update
- added patches
  fix CVE-2021-30474 [bsc#1186799], aom_dsp/grain_table.c in libaom in AOMedia before 2021-03-30 has a use-after-free.
  + libaom-CVE-2021-30474.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1638878400">- security update
- added patches
  fix CVE-2020-36129 [bsc#1193356], AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aom_image.c.
  fix CVE-2020-36131 [bsc#1193365], AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/rate_hist.c.
  fix CVE-2020-36135 [bsc#1193366], AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component rate_hist.c.
  + libaom-CVE-2020-36129,36131,36135.patch
  fix CVE-2020-36130 [bsc#1193369], AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1_dx_iface.c.
  + libaom-CVE-2020-36130.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1648641600">- security update
- added patches
  fix CVE-2021-30473 [bsc#1185778], aom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap.
  + libaom-CVE-2021-30473.patch</changelog>
</package>
<package pkgid="837f3110b462616c51b957c116c9d2b12d0873d49d6aca9375e11c99e7c09e09" name="libaom0-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="150200.3.12.1"/>
  <changelog author="9+suse@cirno.systems" date="1532692800">- Init, v1.0.0</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1532952000">- Pass conditional AOM_TARGET_CPU to cmake, fix build for arm and
  ppc, as well as optimize target cpu for other arches.</changelog>
  <changelog author="9+suse@cirno.systems" date="1533038400">- Enable CONFIG_LOWBITDEPTH. Makes 8-bit decoding faster. The only
  reason this confusingly-named option is not enabled by default
  is that its behavior might not match the 16-bit reference code
  path, and that hardware vendors want to be able to validate
  their designs against it. No actual mismatches have been found.
  See https://bugs.chromium.org/p/aomedia/issues/detail?id=2062</changelog>
  <changelog author="pgajdos@suse.com" date="1629892800">- security update
- added patches
  fix CVE-2021-30475 [bsc#1189497], Buffer overflow in aom_dsp/noise_model.c
  + libaom-CVE-2021-30475.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1631188800">- security update
- added patches
  fix CVE-2021-30474 [bsc#1186799], aom_dsp/grain_table.c in libaom in AOMedia before 2021-03-30 has a use-after-free.
  + libaom-CVE-2021-30474.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1638878400">- security update
- added patches
  fix CVE-2020-36129 [bsc#1193356], AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aom_image.c.
  fix CVE-2020-36131 [bsc#1193365], AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/rate_hist.c.
  fix CVE-2020-36135 [bsc#1193366], AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component rate_hist.c.
  + libaom-CVE-2020-36129,36131,36135.patch
  fix CVE-2020-36130 [bsc#1193369], AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1_dx_iface.c.
  + libaom-CVE-2020-36130.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1648641600">- security update
- added patches
  fix CVE-2021-30473 [bsc#1185778], aom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap.
  + libaom-CVE-2021-30473.patch</changelog>
</package>
<package pkgid="958b7831d48e1958bb8a238a1d9387ff411056380275be3e568c542b3acb1246" name="libarchive" arch="src">
  <version epoch="0" ver="3.5.1" rel="150400.3.3.1"/>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="adrian@suse.de" date="1536926400">- update to version 3.3.3
  * Avoid super-linear slowdown on malformed mtree files
  * Many fixes for building with Visual Studio
  * NO_OVERWRITE doesn't change existing directory attributes
  * New support for Zstandard read and write filters
- Fixes CVE-2017-14501, CVE-2017-14502, CVE-2017-14503
- fix-CVE-2017-14166.patch is obsolete</changelog>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
</package>
<package pkgid="1a4a3efba12c3104e96fc787cd1f472db6329bdc3fc6eb00c7bcb2625f86d67c" name="libarchive-devel" arch="aarch64">
  <version epoch="0" ver="3.5.1" rel="150400.3.3.1"/>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="adrian@suse.de" date="1536926400">- update to version 3.3.3
  * Avoid super-linear slowdown on malformed mtree files
  * Many fixes for building with Visual Studio
  * NO_OVERWRITE doesn't change existing directory attributes
  * New support for Zstandard read and write filters
- Fixes CVE-2017-14501, CVE-2017-14502, CVE-2017-14503
- fix-CVE-2017-14166.patch is obsolete</changelog>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
</package>
<package pkgid="55dee728d6ec9741b031e43a687919bc0c47428ea27bb3949dc10fba1d10d523" name="libarchive-devel" arch="ppc64le">
  <version epoch="0" ver="3.5.1" rel="150400.3.3.1"/>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="adrian@suse.de" date="1536926400">- update to version 3.3.3
  * Avoid super-linear slowdown on malformed mtree files
  * Many fixes for building with Visual Studio
  * NO_OVERWRITE doesn't change existing directory attributes
  * New support for Zstandard read and write filters
- Fixes CVE-2017-14501, CVE-2017-14502, CVE-2017-14503
- fix-CVE-2017-14166.patch is obsolete</changelog>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
</package>
<package pkgid="cfeb487655597af228d79344bef4acc26e48849dddd45e7766c02af551384c1a" name="libarchive-devel" arch="s390x">
  <version epoch="0" ver="3.5.1" rel="150400.3.3.1"/>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="adrian@suse.de" date="1536926400">- update to version 3.3.3
  * Avoid super-linear slowdown on malformed mtree files
  * Many fixes for building with Visual Studio
  * NO_OVERWRITE doesn't change existing directory attributes
  * New support for Zstandard read and write filters
- Fixes CVE-2017-14501, CVE-2017-14502, CVE-2017-14503
- fix-CVE-2017-14166.patch is obsolete</changelog>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
</package>
<package pkgid="9c8251765c5ded62ff58882ae9201c5f4aa6563c17800b1aa2772f91c00b1b04" name="libarchive-devel" arch="x86_64">
  <version epoch="0" ver="3.5.1" rel="150400.3.3.1"/>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="adrian@suse.de" date="1536926400">- update to version 3.3.3
  * Avoid super-linear slowdown on malformed mtree files
  * Many fixes for building with Visual Studio
  * NO_OVERWRITE doesn't change existing directory attributes
  * New support for Zstandard read and write filters
- Fixes CVE-2017-14501, CVE-2017-14502, CVE-2017-14503
- fix-CVE-2017-14166.patch is obsolete</changelog>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
</package>
<package pkgid="551670193308e99e3b7ea9b3b6104d0a4265d3af9eadf34bc6cde314e2a521e2" name="libarchive13" arch="aarch64">
  <version epoch="0" ver="3.5.1" rel="150400.3.3.1"/>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="adrian@suse.de" date="1536926400">- update to version 3.3.3
  * Avoid super-linear slowdown on malformed mtree files
  * Many fixes for building with Visual Studio
  * NO_OVERWRITE doesn't change existing directory attributes
  * New support for Zstandard read and write filters
- Fixes CVE-2017-14501, CVE-2017-14502, CVE-2017-14503
- fix-CVE-2017-14166.patch is obsolete</changelog>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
</package>
<package pkgid="e256299a20abb67c5b409d5c57f95a90b75479d46cb6fa662b1dc09c8222ac1e" name="libarchive13" arch="ppc64le">
  <version epoch="0" ver="3.5.1" rel="150400.3.3.1"/>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="adrian@suse.de" date="1536926400">- update to version 3.3.3
  * Avoid super-linear slowdown on malformed mtree files
  * Many fixes for building with Visual Studio
  * NO_OVERWRITE doesn't change existing directory attributes
  * New support for Zstandard read and write filters
- Fixes CVE-2017-14501, CVE-2017-14502, CVE-2017-14503
- fix-CVE-2017-14166.patch is obsolete</changelog>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
</package>
<package pkgid="4cdc318ff36c9749e15383458a9749bc89d239964e4537b081704142eee31023" name="libarchive13" arch="s390x">
  <version epoch="0" ver="3.5.1" rel="150400.3.3.1"/>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="adrian@suse.de" date="1536926400">- update to version 3.3.3
  * Avoid super-linear slowdown on malformed mtree files
  * Many fixes for building with Visual Studio
  * NO_OVERWRITE doesn't change existing directory attributes
  * New support for Zstandard read and write filters
- Fixes CVE-2017-14501, CVE-2017-14502, CVE-2017-14503
- fix-CVE-2017-14166.patch is obsolete</changelog>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
</package>
<package pkgid="e465ccf767e3b7d47055e37af449db15592d7215f1a4a37fb75c310035f2b5b6" name="libarchive13" arch="x86_64">
  <version epoch="0" ver="3.5.1" rel="150400.3.3.1"/>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="adrian@suse.de" date="1536926400">- update to version 3.3.3
  * Avoid super-linear slowdown on malformed mtree files
  * Many fixes for building with Visual Studio
  * NO_OVERWRITE doesn't change existing directory attributes
  * New support for Zstandard read and write filters
- Fixes CVE-2017-14501, CVE-2017-14502, CVE-2017-14503
- fix-CVE-2017-14166.patch is obsolete</changelog>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
</package>
<package pkgid="fa89689f7c3c49373a6fbd688f2d64a588226572ca14ca1c92b1b4b3dff6af0e" name="libarchive13-32bit" arch="x86_64">
  <version epoch="0" ver="3.5.1" rel="150400.3.3.1"/>
  <changelog author="adrian@suse.de" date="1491220800">- update to version 3.3.1
  * Security &amp; Feature release
    Details are not documented from upstream yet
    fix-extract-over-links.patch and libarchive-openssl.patch obsoleted</changelog>
  <changelog author="adrian@suse.de" date="1504785600">- update to version 3.3.2
  * NFSv4 ACL support for Linux (librichacl)
- fix-CVE-2017-14166.patch (boo#1057514)</changelog>
  <changelog author="adrian@suse.de" date="1536926400">- update to version 3.3.3
  * Avoid super-linear slowdown on malformed mtree files
  * Many fixes for building with Visual Studio
  * NO_OVERWRITE doesn't change existing directory attributes
  * New support for Zstandard read and write filters
- Fixes CVE-2017-14501, CVE-2017-14502, CVE-2017-14503
- fix-CVE-2017-14166.patch is obsolete</changelog>
  <changelog author="jengelh@inai.de" date="1537272000">- Fix RPM groups. Remove idempotent %if..%endif guards.
  Diversify summaries. Set CFLAGS instead of re-defining
  optflags with itself.</changelog>
  <changelog author="kbabioch@suse.de" date="1546516800">- Added patches:
  * CVE-2018-1000877.patch, which fixes a double free vulnerability in RAR
    decoder (CVE-2018-1000877 bsc#1120653)
  * CVE-2018-1000878.patch, which fixes a Use-After-Free vulnerability in RAR
    decoder (CVE-2018-1000878 bsc#1120654)
  * CVE-2018-1000879.patch, which fixes a NULL Pointer Dereference
    vulnerability in ACL parser (CVE-2018-1000879 bsc#1120656)
  * CVE-2018-1000880.patch, which fixes an improper input validation
    vulnerability in WARC parser (CVE-2018-1000880 bsc#1120659)
- Make use of %license macro
- Applied spec-cleaner</changelog>
  <changelog author="adrian@suse.de" date="1549368000">- Added patches:
  * CVE-2019-1000019.patch Fixes 7zip crash (boo#1124341)
  * CVE-2019-1000020.patch ISO9660 infinite loop fixed (boo#1124342)</changelog>
  <changelog author="idonmez@suse.com" date="1560427200">- Update to version 3.4.0
  * Support for file and directory symlinks on Windows
  * Read support for RAR 5.0 archives
  * Read support for ZIPX archives with xz, lzma, ppmd8 and
    bzip2 compression
  * Support for non-recursive list and extract
  * New tar option: --exclude-vcs
  * Improved file attribute support on Linux and file flags support
    on FreeBSD
  * Fix reading Android APK archives (#1055 )
  * Fix problems related to unreadable directories (#1167)
  * A two-digit number of OSS-Fuzz issues was resolved in this release
    including CVE-2019-18408
- Add libarchive.keyring and validate the tarball signature
- Drop all security patches, fixed upstream:
  * CVE-2018-1000877.patch
  * CVE-2018-1000878.patch
  * CVE-2018-1000879.patch
  * CVE-2018-1000880.patch
  * CVE-2019-1000019.patch
  * CVE-2019-1000020.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561032000">- Add lz4 and zstd support
- Add BuildRequires on liblz4-devel and libzstd-devel</changelog>
  <changelog author="idonmez@suse.com" date="1566129600">- Switch to cmake build
- Add lib-suffix.patch to honor LIB_SUFFIX
- Add fix-zstd-test.patch to fix zstd test
- Add fix-soversion.patch to fix the soversion to 13 as autotools</changelog>
  <changelog author="adrian@suse.de" date="1574424000">- fix bsc#1157569
  CVE-2019-19221.patch out-of-bounds read in libarchive</changelog>
  <changelog author="idonmez@suse.com" date="1577707200">- Update to version 3.4.1
  New features:
  * Unicode filename support for reading lha/lzh archives
  * New pax write option "xattrhdr"
  Important bugfixes:
  * security fixes in wide string processing (#1276 #1298)
  * security fixes in RAR5 reader (#1212 #1217 #1296) CVE-2019-19221
  * security fixes and optimizations to write filter logic (#351)
  * security fix related to use of readlink(2) (1dae5a5)
  * sparse file handling fixes (#1218 #1260)
- Drop CVE-2019-19221.patch and fix-zstd-test.patch, fixed upstream</changelog>
  <changelog author="idonmez@suse.com" date="1577707201">- Revert back to autoconf, cmake introduces a cycle. Leave cmake
  patches in since they are basically correct and might be useful
  in the future.</changelog>
  <changelog author="idonmez@suse.com" date="1581508800">- Update to version 3.4.2
  New features:
  * support for atomic file extraction (bsdtar -x --safe-writes) (#1289)
  * support for mbed TLS (PolarSSL) (#1301)
  Important bugfixes:
  * security fixes in RAR5 reader (#1280 #1326)
  * compression buffer fix in XAR writer (#1317)
  * fix uname and gname longer than 32 characters in PAX writer (#1319)
  * fix segfault when archiving hard links in ISO9660 and XAR writers (#1325)
  * fix support for extracting 7z archive entries with Delta filter (#987)</changelog>
  <changelog author="idonmez@suse.com" date="1582027200">- Switch back to cmake build now that cmake-mini exists, this will
  no longer create a build-cycle.</changelog>
  <changelog author="idonmez@suse.com" date="1589976000">- Update to version 3.4.3
  * support for pzstd compressed files (#1357)
  * support for RHT.security.selinux tar extended attribute (#1348)
  * various zstd fixes and improvements (#1342 #1352 #1359)
  * child process handling fixes (#1372)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599480000">- fix build with binutils submitted to Factory, adding upstream
  libarchive-3.4.3-fix_test_write_disk_secure.patch</changelog>
  <changelog author="idonmez@suse.com" date="1606824000">- Update to version 3.5.0
  New features:
  * mtree digest reader support (#1347)
  * completed support for UTF-8 encoding conversion (#1389)
  * minor API enhancements (#1258, #1405)
  * support for system extended attributes (#1409)
  * support for decompression of symbolic links in zipx archives (#1435)
  Important bugfixes
  * fixed extraction of archives with hard links pointing to itself (#1381)
  * cpio fixes (#1387, #1388)
  * fixed uninitialized size in rar5_read_data (#1408)
  * fixed memory leaks in error case of archive_write_open() functions (#1456)
- Drop libarchive-3.4.3-fix_test_write_disk_secure.patch, fixed upstream.</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 3.5.1:
  * various compilation fixes (#1461, #1462, #1463, #1464)
  * fixed undefined behavior in a function in warc reader (#1465)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1647259200">- Fix CVE-2021-36976 use-after-free in copy_string
  (CVE-2021-36976, bsc#1188572)
  * fix-CVE-2021-36976.patch
- The following issues have already been fixed in this package but
  weren't previously mentioned in the changes file:
  CVE-2017-5601, bsc#1022528, bsc#1189528</changelog>
  <changelog author="danilo.spinella@suse.com" date="1652184000">- Fix CVE-2022-26280 out-of-bounds read via the component zipx_lzma_alone_init
  (CVE-2022-26280, bsc#1197634)
  * fix-CVE-2022-26280.patch</changelog>
</package>
<package pkgid="81e0f8d50d5193334abb75066fb0fe9b2a9e8abed19344a1ca9409f05f67949d" name="libasan6" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="f48d969d92a732bd8e88283b6e5ce7271102636331c20bd944e07f2bd460e2ac" name="libasan6" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="d4476924c7ff5dbfd554f462e0a02e19bea665b0569966c3ec9c0a223f8b4d44" name="libasan6" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="fb11fdaab4c2af539b17f4b1fa38c04d18a2e8ed6d42616ae18d4aa910828f96" name="libasan6" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="3a848de600132b81439af5a3dc0394a8f8c9af3713aa6a640afa7e61adea292c" name="libasan6-32bit" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="b655b124ee7c6af6c5c840fdcb7e4bb4cac2acf8ac81236471ee7b0da1706f30" name="libasan6-32bit" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="e3cc5a2059ec69ae48352a1852abf8a8e614eb8182d4c14f03fa70b81fcbf586" name="libatomic1" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="e1fc73718d2a0c2c6a640a9b805da409e00c25fb23e8d054b44831cb55277865" name="libatomic1" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="a2780854e3c91521d41d6eecdee15b8cbf1a26fdb86206a999689b28b78910f3" name="libatomic1" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="09a58adc9f83233791b713f2f1e45923130ff2fbfcc0d2e9b83dc779be193dc7" name="libatomic1" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="4a395762e1bb990f883b9ff67452d0bccc11c3af8f94bec8ce7b4748582e0ef5" name="libatomic1-32bit" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="0e3cde1b6fd5a7d7ea0e934eb628573f1f44a796b10865beea519e5484cef98f" name="libatomic1-32bit" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="49850b158c93c90b023bd441bcd3d1dae377d2487363b8f8619476c56fa1e2b7" name="libbluray" arch="src">
  <version epoch="0" ver="1.0.2" rel="150000.4.2.1"/>
  <changelog author="tchvatal@suse.com" date="1425643200">- Put the configure args each on its own line</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1430395200">- Update to version 0.8.0:
  + Add security checks to BD-J.
  + Add support for UDF image files and unmounted discs.
  + Add UDF volume identifier to DISC_INFO.
  + Add bd_init(), bd_open_disc() and bd_open_stream().
  + Add /usr/share/libbluray/lib/ to .jar file search paths.
  + Add BD_EVENT_PLAYLIST_STOP (playlist playback is interrupted).
  + Accept directory name (without .jar file name) in LIBBLURAY_CP.
  + Improved error resilence.
  + Improve BD-J compability.
  + Fix Java 8u40 compability.
  + Fix infinite loop with some broken HDMV menus.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.
- Build with UDF support.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1432296000">- Update to version 0.8.1:
  + Notify application when UO mask changes.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix crash after bd_open(NULL).
  + Fix compability problem with libbdplus.
  + Fix memory leak in UDF filesystem parser.
  + Fix crash in freetype.</changelog>
  <changelog author="olaf@aepfle.de" date="1439208000">- Fix build in SLE_11</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1444046400">- Update to version 0.9.0:
  + Add functions to read files from VFS.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix Xlet-initiated font caching.
  + Fix return value when setting BLURAY_PLAYER_SETTING_DECODE_PG.
  + Fix build with C++ compiler</changelog>
  <changelog author="idonmez@suse.com" date="1446638400">- Update to version 0.9.1
  + Improved BD-J security.
  + Improved error resilience.
  + Improved seeking (avoid skipping PAT/PMT/PCR).
  + Fix UO mask check when bd_play_title() is used for Top Menu.
  + Fix re-starting of title bound Xlets when title changes.
  + Fix loading classes with invalid debug info.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1449144000">- Update to version 0.9.2:
  + Add primary audio stream to bd_select_stream().
  + Improve error resilience.
  + Fix Java 8 compability issues.
  + Fix Android build.
  + Fix SecurityException in AWTAutoShutdown.
  + Fix BD-J check when install path in Windows contains
    non-ASCII chars.
  + Fix jvm.dll loading in Windows ($JAVA_HOME/bin should be in
    dll load path).
  + Fix class translating in recent Java 8 versions.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1463486400">- Update to version 0.9.3:
  + Add bd_open_files(). This function deprecates old global file
    system hooks.
  + Add flag for on-disc menu support to DISC_INFO.
  + Add configure argument to disable building of JAR file.
  + Add missing player settings enums.
  + Update linux Java search path list and preferred JVM.
  + Enable UDF support by default.
  + Split developer tools from examples.
  + Improve BDJ_EVENT_CHAPTER triggering.
  + Improve main title detection.
  + Improve error resilience.
  + Improve BD-J compability.
  + Improve detecting of working aacs implementation.
  + Improve libmmbd support.
  + Fix BD-J media player stop().
  + Fix restoring playback rate with some BD-J discs.
  + Fix restoring suspended playback time position.
  + Fix current chapter lookup.
  + Fix lost key focus with multi-HScene discs.
  + Fix playback of discs without Top Menu title.
  + Fix caching of some BD-J files from UDF filesystem.
  + Fix stopping playback from HDMV menus.
  + Fix possible errors in win32 .iso image reading.
  + Fix undefined values in DISC_INFO.
  + Fix memory leaks.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="tchvatal@suse.com" date="1463659200">- Fix download url to not fail on network error</changelog>
  <changelog author="tchvatal@suse.com" date="1471348800">- Drop libbluray-autotools.patch as it has no real benefit and if
  something should be upstreamed</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486036800">- add patch to expose clip_id (as applied by Debian), which is
  necessary to build packages that depend on it (such as Handbrake)
  * A02-expose-clip_id.patch</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486900800">- drop patch A02-expopse-clip_id.patch as Handbrake seems to be the only
  package that needs it, to avoid binary runtime incompatibilities with
  libbluray packages that would stem from other repositories</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Rename %soname to %sover to better reflect its use.
  Fix RPM groups.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1488542400">- Update to version 1.0.0:
  + Add support for Java VM (BD-J) on MacOS.
  + Add clip_id to BLURAY_CLIP_INFO.
  + Add a suitable JVM path for Fedora/RHEL and clones.
  + Add support for AVCHD 8.3 filenames.
  + Add player setting for disabling persistent storage.
  + Add bd_set_rate().
  + Add playback time position to BD_EVENT_SEEK.
  + Add BD_VK_ROOT_MENU handling.
  + Add support for heavily fragmented 3D .m2ts files.
  + Improve Win32 dll loading security.
  + Improve playback resume position accuracy.
  + Improve error resilience and stability.
  + Fix using libmmbd with unmounted discs.
  + Fix leaks.
  + Delay BD-J overlay opening until something visible has been
    drawn.
  + Close BD-J overlay when window is not visible.
  + Use temporary storage when cache or persistent root location is
    unknown.
- Fixed patch libbluray-jvm_dir.patch.
- Changed soname version to 2.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 1.0.1:
  + Add possibility to check whether BD-J is functional without
    opening a disc.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Fix Windows dll loading.
  + Fix JAVA_HOME environment variable handling in Windows.
  + Fix build issues when CPPFLAGS is given in make command line.
  + Fix MSVC build issues.
  + Remove --disable-bdjava and --disable-udf configure options.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505044800">- BuildConflict with java-devel &gt;= 1.9. Java 8 is the last to
  support source_version 1.5.</changelog>
  <changelog author="fstrba@suse.com" date="1509364800">- Added patch:
  * libbluray-java9.patch
    + Fix build with jdk9
    + Due to incompatible changes in jdk9, the same code cannot be
    built with jdk9 and jdk &lt;= 1.8
    + Only apply on systems that hava jdk9</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512475200">- Update to version 1.0.2:
  + Add initial support for UHD BluRay discs (without BD-J menus).
  + Detect JRE (from the Java Applet plugin) on MacOS.
  + Improve error resilience and stability.
  + Improve libmmbd support.
  + Fix static build dependencies in pkgconfig file.
  + Fix creation of cache (sub-)directories on windows platforms.
  + Fix BD-J temporary storage when persistent storage is disabled.
  + Fix leaks.
- At least java-devel &gt;= 1.8 ist required for build.</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher, since some removal of
  deprecated SecurityManager functions makes BD-J not buildable
  with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1513684801">- Modified patch:
  * libbluray-java9.patch
    + Some change in hunks integrating upstream fixes that were
    partially different from ours.</changelog>
</package>
<package pkgid="79ec1a234062c229141bb576087b50a3f6a5a89dfdb130d54356df8e4c44b977" name="libbluray" arch="src">
  <version epoch="0" ver="1.3.0" rel="150300.10.7.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1432296000">- Update to version 0.8.1:
  + Notify application when UO mask changes.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix crash after bd_open(NULL).
  + Fix compability problem with libbdplus.
  + Fix memory leak in UDF filesystem parser.
  + Fix crash in freetype.</changelog>
  <changelog author="olaf@aepfle.de" date="1439208000">- Fix build in SLE_11</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1444046400">- Update to version 0.9.0:
  + Add functions to read files from VFS.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix Xlet-initiated font caching.
  + Fix return value when setting BLURAY_PLAYER_SETTING_DECODE_PG.
  + Fix build with C++ compiler</changelog>
  <changelog author="idonmez@suse.com" date="1446638400">- Update to version 0.9.1
  + Improved BD-J security.
  + Improved error resilience.
  + Improved seeking (avoid skipping PAT/PMT/PCR).
  + Fix UO mask check when bd_play_title() is used for Top Menu.
  + Fix re-starting of title bound Xlets when title changes.
  + Fix loading classes with invalid debug info.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1449144000">- Update to version 0.9.2:
  + Add primary audio stream to bd_select_stream().
  + Improve error resilience.
  + Fix Java 8 compability issues.
  + Fix Android build.
  + Fix SecurityException in AWTAutoShutdown.
  + Fix BD-J check when install path in Windows contains
    non-ASCII chars.
  + Fix jvm.dll loading in Windows ($JAVA_HOME/bin should be in
    dll load path).
  + Fix class translating in recent Java 8 versions.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1463486400">- Update to version 0.9.3:
  + Add bd_open_files(). This function deprecates old global file
    system hooks.
  + Add flag for on-disc menu support to DISC_INFO.
  + Add configure argument to disable building of JAR file.
  + Add missing player settings enums.
  + Update linux Java search path list and preferred JVM.
  + Enable UDF support by default.
  + Split developer tools from examples.
  + Improve BDJ_EVENT_CHAPTER triggering.
  + Improve main title detection.
  + Improve error resilience.
  + Improve BD-J compability.
  + Improve detecting of working aacs implementation.
  + Improve libmmbd support.
  + Fix BD-J media player stop().
  + Fix restoring playback rate with some BD-J discs.
  + Fix restoring suspended playback time position.
  + Fix current chapter lookup.
  + Fix lost key focus with multi-HScene discs.
  + Fix playback of discs without Top Menu title.
  + Fix caching of some BD-J files from UDF filesystem.
  + Fix stopping playback from HDMV menus.
  + Fix possible errors in win32 .iso image reading.
  + Fix undefined values in DISC_INFO.
  + Fix memory leaks.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="tchvatal@suse.com" date="1463659200">- Fix download url to not fail on network error</changelog>
  <changelog author="tchvatal@suse.com" date="1471348800">- Drop libbluray-autotools.patch as it has no real benefit and if
  something should be upstreamed</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486036800">- add patch to expose clip_id (as applied by Debian), which is
  necessary to build packages that depend on it (such as Handbrake)
  * A02-expose-clip_id.patch</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486900800">- drop patch A02-expopse-clip_id.patch as Handbrake seems to be the only
  package that needs it, to avoid binary runtime incompatibilities with
  libbluray packages that would stem from other repositories</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Rename %soname to %sover to better reflect its use.
  Fix RPM groups.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1488542400">- Update to version 1.0.0:
  + Add support for Java VM (BD-J) on MacOS.
  + Add clip_id to BLURAY_CLIP_INFO.
  + Add a suitable JVM path for Fedora/RHEL and clones.
  + Add support for AVCHD 8.3 filenames.
  + Add player setting for disabling persistent storage.
  + Add bd_set_rate().
  + Add playback time position to BD_EVENT_SEEK.
  + Add BD_VK_ROOT_MENU handling.
  + Add support for heavily fragmented 3D .m2ts files.
  + Improve Win32 dll loading security.
  + Improve playback resume position accuracy.
  + Improve error resilience and stability.
  + Fix using libmmbd with unmounted discs.
  + Fix leaks.
  + Delay BD-J overlay opening until something visible has been
    drawn.
  + Close BD-J overlay when window is not visible.
  + Use temporary storage when cache or persistent root location is
    unknown.
- Fixed patch libbluray-jvm_dir.patch.
- Changed soname version to 2.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 1.0.1:
  + Add possibility to check whether BD-J is functional without
    opening a disc.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Fix Windows dll loading.
  + Fix JAVA_HOME environment variable handling in Windows.
  + Fix build issues when CPPFLAGS is given in make command line.
  + Fix MSVC build issues.
  + Remove --disable-bdjava and --disable-udf configure options.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505044800">- BuildConflict with java-devel &gt;= 1.9. Java 8 is the last to
  support source_version 1.5.</changelog>
  <changelog author="fstrba@suse.com" date="1509364800">- Added patch:
  * libbluray-java9.patch
    + Fix build with jdk9
    + Due to incompatible changes in jdk9, the same code cannot be
    built with jdk9 and jdk &lt;= 1.8
    + Only apply on systems that hava jdk9</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512475200">- Update to version 1.0.2:
  + Add initial support for UHD BluRay discs (without BD-J menus).
  + Detect JRE (from the Java Applet plugin) on MacOS.
  + Improve error resilience and stability.
  + Improve libmmbd support.
  + Fix static build dependencies in pkgconfig file.
  + Fix creation of cache (sub-)directories on windows platforms.
  + Fix BD-J temporary storage when persistent storage is disabled.
  + Fix leaks.
- At least java-devel &gt;= 1.8 ist required for build.</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher, since some removal of
  deprecated SecurityManager functions makes BD-J not buildable
  with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1513684801">- Modified patch:
  * libbluray-java9.patch
    + Some change in hunks integrating upstream fixes that were
    partially different from ours.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637841600">- Update to 1.3.0:
  + Add bd_event_name().
  + Add return value to bd_refcnt_inc().
  + Add cache for parsed clpi file data.
  + Add player setting for JRE location (JAVA_HOME).
  + Improve FreeBSD BD-J support.
  + Improve portability.
  + Improve JVM and .jar file probing.
  + Fix leak.
- Update to 1.2.1:
  + Add initial support for .fmts files.
  + Improve missing/broken playlist handling.
  + Improve UHD metadata support.
  + Improve BD-J compability.
  + Improve error resilience and stability.
  + Fix long delay in "Evangelion, You are (not) alone" menu.
  + Fix JVM bootstrap issues with some Java 9 versions.
  + Fix sign extended bytes when reading single bytes in BDJ.
  + Fix creating organization and disc specific BD-J BUDA
    directories.
  + Use external libudfread when available.
  + Rename list_titles to bd_list_titles and add it to installed
    programs.
- Update to version 1.2.0:
  + Add functions to list and read BD-ROM files.
  + Add support for separate key pressed / typed / released user
    input events.
  + Add support for AWT mouse events (BD-J).
  + Fix build with OpenJDK 12 / 13.
- Update to version 1.1.2:
  + Add libxml version to pkg-config Requires.private.
  + Improve support for NetBSD operating system.
  + Improve BD-J compability.
  + Improve Java 8+ compability.
  + Fix main playlist caching in Windows.
  + Fix mark triggering when multiple marks are passed during
    single read().
  + Fix seek bar pop-up at chapter boundary with some discs.
  + Fix reading resources indirectly from mounted .jar file.
- Update to version 1.1.1:
  + Enable playback without menus when index.bdmv is missing.
  + Improve error resilience and stability.
  + Improve BD-J compability.
  + Fix loading libraries on MacOS / hardened runtime.
  + Fix resetting user-selected streams when playing without menus.
  + Fix stack overflow when using Java9+ with debugger connection.
  + Fix polygon-based BD-J graphics primitives.
  + Fix loading libmmbd in Windows 64-bit.
  + Fix loading classes with Windows Java 8.
  + Fix build with Java 1.6.
  + Fix pkg-config Libs.private.
- Update to version 1.1.0:
  + Add initial support for OpenJDK 11.
  + Add initial support for UHD disc BD-J menus.
  + Add support for compiling .jar file with Java 9+ compiler.
  + Move AWT classes to separate .jar file.
  + Update libudfread submodule repository URL.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Improve BD-J compability.
  + Fix playback of some broken BD-J discs.
  + Fix playback of discs without normal titles (only TopMenu /
    FirstPlay title).
- Remove unused dependencies from pkgconfig(libbluray)
  Our pkg is dynamically linked, so Libs.private is not needed
  Nothing in the exported header files needs paths from
  Requires.private
  * libbluray-pkgconfig.patch
- Refresh libbluray-java9.patch
- Drop libbluray-jvm_dir.patch
- Enable build against java-devel &gt;= 10.</changelog>
  <changelog author="pgajdos@suse.com" date="1652356800">- fix build for both 15sp3 and 15sp4 [bsc#1199463]
- added patches
  implement the new java.io.FileSystem.isInvalid method that entered all
  supported java versions with April 2022 CPU (taken from Factory)
  + libbluray-April2022CPU.patch</changelog>
</package>
<package pkgid="6479a0739dc62b44a493a9c99ff6563fc194f02b3fe182fdd564e771e9fcdb10" name="libbluray-bdj" arch="noarch">
  <version epoch="0" ver="1.0.2" rel="150000.4.2.1"/>
  <changelog author="tchvatal@suse.com" date="1425643200">- Put the configure args each on its own line</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1430395200">- Update to version 0.8.0:
  + Add security checks to BD-J.
  + Add support for UDF image files and unmounted discs.
  + Add UDF volume identifier to DISC_INFO.
  + Add bd_init(), bd_open_disc() and bd_open_stream().
  + Add /usr/share/libbluray/lib/ to .jar file search paths.
  + Add BD_EVENT_PLAYLIST_STOP (playlist playback is interrupted).
  + Accept directory name (without .jar file name) in LIBBLURAY_CP.
  + Improved error resilence.
  + Improve BD-J compability.
  + Fix Java 8u40 compability.
  + Fix infinite loop with some broken HDMV menus.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.
- Build with UDF support.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1432296000">- Update to version 0.8.1:
  + Notify application when UO mask changes.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix crash after bd_open(NULL).
  + Fix compability problem with libbdplus.
  + Fix memory leak in UDF filesystem parser.
  + Fix crash in freetype.</changelog>
  <changelog author="olaf@aepfle.de" date="1439208000">- Fix build in SLE_11</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1444046400">- Update to version 0.9.0:
  + Add functions to read files from VFS.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix Xlet-initiated font caching.
  + Fix return value when setting BLURAY_PLAYER_SETTING_DECODE_PG.
  + Fix build with C++ compiler</changelog>
  <changelog author="idonmez@suse.com" date="1446638400">- Update to version 0.9.1
  + Improved BD-J security.
  + Improved error resilience.
  + Improved seeking (avoid skipping PAT/PMT/PCR).
  + Fix UO mask check when bd_play_title() is used for Top Menu.
  + Fix re-starting of title bound Xlets when title changes.
  + Fix loading classes with invalid debug info.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1449144000">- Update to version 0.9.2:
  + Add primary audio stream to bd_select_stream().
  + Improve error resilience.
  + Fix Java 8 compability issues.
  + Fix Android build.
  + Fix SecurityException in AWTAutoShutdown.
  + Fix BD-J check when install path in Windows contains
    non-ASCII chars.
  + Fix jvm.dll loading in Windows ($JAVA_HOME/bin should be in
    dll load path).
  + Fix class translating in recent Java 8 versions.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1463486400">- Update to version 0.9.3:
  + Add bd_open_files(). This function deprecates old global file
    system hooks.
  + Add flag for on-disc menu support to DISC_INFO.
  + Add configure argument to disable building of JAR file.
  + Add missing player settings enums.
  + Update linux Java search path list and preferred JVM.
  + Enable UDF support by default.
  + Split developer tools from examples.
  + Improve BDJ_EVENT_CHAPTER triggering.
  + Improve main title detection.
  + Improve error resilience.
  + Improve BD-J compability.
  + Improve detecting of working aacs implementation.
  + Improve libmmbd support.
  + Fix BD-J media player stop().
  + Fix restoring playback rate with some BD-J discs.
  + Fix restoring suspended playback time position.
  + Fix current chapter lookup.
  + Fix lost key focus with multi-HScene discs.
  + Fix playback of discs without Top Menu title.
  + Fix caching of some BD-J files from UDF filesystem.
  + Fix stopping playback from HDMV menus.
  + Fix possible errors in win32 .iso image reading.
  + Fix undefined values in DISC_INFO.
  + Fix memory leaks.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="tchvatal@suse.com" date="1463659200">- Fix download url to not fail on network error</changelog>
  <changelog author="tchvatal@suse.com" date="1471348800">- Drop libbluray-autotools.patch as it has no real benefit and if
  something should be upstreamed</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486036800">- add patch to expose clip_id (as applied by Debian), which is
  necessary to build packages that depend on it (such as Handbrake)
  * A02-expose-clip_id.patch</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486900800">- drop patch A02-expopse-clip_id.patch as Handbrake seems to be the only
  package that needs it, to avoid binary runtime incompatibilities with
  libbluray packages that would stem from other repositories</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Rename %soname to %sover to better reflect its use.
  Fix RPM groups.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1488542400">- Update to version 1.0.0:
  + Add support for Java VM (BD-J) on MacOS.
  + Add clip_id to BLURAY_CLIP_INFO.
  + Add a suitable JVM path for Fedora/RHEL and clones.
  + Add support for AVCHD 8.3 filenames.
  + Add player setting for disabling persistent storage.
  + Add bd_set_rate().
  + Add playback time position to BD_EVENT_SEEK.
  + Add BD_VK_ROOT_MENU handling.
  + Add support for heavily fragmented 3D .m2ts files.
  + Improve Win32 dll loading security.
  + Improve playback resume position accuracy.
  + Improve error resilience and stability.
  + Fix using libmmbd with unmounted discs.
  + Fix leaks.
  + Delay BD-J overlay opening until something visible has been
    drawn.
  + Close BD-J overlay when window is not visible.
  + Use temporary storage when cache or persistent root location is
    unknown.
- Fixed patch libbluray-jvm_dir.patch.
- Changed soname version to 2.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 1.0.1:
  + Add possibility to check whether BD-J is functional without
    opening a disc.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Fix Windows dll loading.
  + Fix JAVA_HOME environment variable handling in Windows.
  + Fix build issues when CPPFLAGS is given in make command line.
  + Fix MSVC build issues.
  + Remove --disable-bdjava and --disable-udf configure options.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505044800">- BuildConflict with java-devel &gt;= 1.9. Java 8 is the last to
  support source_version 1.5.</changelog>
  <changelog author="fstrba@suse.com" date="1509364800">- Added patch:
  * libbluray-java9.patch
    + Fix build with jdk9
    + Due to incompatible changes in jdk9, the same code cannot be
    built with jdk9 and jdk &lt;= 1.8
    + Only apply on systems that hava jdk9</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512475200">- Update to version 1.0.2:
  + Add initial support for UHD BluRay discs (without BD-J menus).
  + Detect JRE (from the Java Applet plugin) on MacOS.
  + Improve error resilience and stability.
  + Improve libmmbd support.
  + Fix static build dependencies in pkgconfig file.
  + Fix creation of cache (sub-)directories on windows platforms.
  + Fix BD-J temporary storage when persistent storage is disabled.
  + Fix leaks.
- At least java-devel &gt;= 1.8 ist required for build.</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher, since some removal of
  deprecated SecurityManager functions makes BD-J not buildable
  with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1513684801">- Modified patch:
  * libbluray-java9.patch
    + Some change in hunks integrating upstream fixes that were
    partially different from ours.</changelog>
</package>
<package pkgid="90e5c7df56900a888207c13289305824a8477eb45278c578d0e7e9e3a3d537ff" name="libbluray-bdj" arch="noarch">
  <version epoch="0" ver="1.3.0" rel="150300.10.7.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1432296000">- Update to version 0.8.1:
  + Notify application when UO mask changes.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix crash after bd_open(NULL).
  + Fix compability problem with libbdplus.
  + Fix memory leak in UDF filesystem parser.
  + Fix crash in freetype.</changelog>
  <changelog author="olaf@aepfle.de" date="1439208000">- Fix build in SLE_11</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1444046400">- Update to version 0.9.0:
  + Add functions to read files from VFS.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix Xlet-initiated font caching.
  + Fix return value when setting BLURAY_PLAYER_SETTING_DECODE_PG.
  + Fix build with C++ compiler</changelog>
  <changelog author="idonmez@suse.com" date="1446638400">- Update to version 0.9.1
  + Improved BD-J security.
  + Improved error resilience.
  + Improved seeking (avoid skipping PAT/PMT/PCR).
  + Fix UO mask check when bd_play_title() is used for Top Menu.
  + Fix re-starting of title bound Xlets when title changes.
  + Fix loading classes with invalid debug info.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1449144000">- Update to version 0.9.2:
  + Add primary audio stream to bd_select_stream().
  + Improve error resilience.
  + Fix Java 8 compability issues.
  + Fix Android build.
  + Fix SecurityException in AWTAutoShutdown.
  + Fix BD-J check when install path in Windows contains
    non-ASCII chars.
  + Fix jvm.dll loading in Windows ($JAVA_HOME/bin should be in
    dll load path).
  + Fix class translating in recent Java 8 versions.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1463486400">- Update to version 0.9.3:
  + Add bd_open_files(). This function deprecates old global file
    system hooks.
  + Add flag for on-disc menu support to DISC_INFO.
  + Add configure argument to disable building of JAR file.
  + Add missing player settings enums.
  + Update linux Java search path list and preferred JVM.
  + Enable UDF support by default.
  + Split developer tools from examples.
  + Improve BDJ_EVENT_CHAPTER triggering.
  + Improve main title detection.
  + Improve error resilience.
  + Improve BD-J compability.
  + Improve detecting of working aacs implementation.
  + Improve libmmbd support.
  + Fix BD-J media player stop().
  + Fix restoring playback rate with some BD-J discs.
  + Fix restoring suspended playback time position.
  + Fix current chapter lookup.
  + Fix lost key focus with multi-HScene discs.
  + Fix playback of discs without Top Menu title.
  + Fix caching of some BD-J files from UDF filesystem.
  + Fix stopping playback from HDMV menus.
  + Fix possible errors in win32 .iso image reading.
  + Fix undefined values in DISC_INFO.
  + Fix memory leaks.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="tchvatal@suse.com" date="1463659200">- Fix download url to not fail on network error</changelog>
  <changelog author="tchvatal@suse.com" date="1471348800">- Drop libbluray-autotools.patch as it has no real benefit and if
  something should be upstreamed</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486036800">- add patch to expose clip_id (as applied by Debian), which is
  necessary to build packages that depend on it (such as Handbrake)
  * A02-expose-clip_id.patch</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486900800">- drop patch A02-expopse-clip_id.patch as Handbrake seems to be the only
  package that needs it, to avoid binary runtime incompatibilities with
  libbluray packages that would stem from other repositories</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Rename %soname to %sover to better reflect its use.
  Fix RPM groups.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1488542400">- Update to version 1.0.0:
  + Add support for Java VM (BD-J) on MacOS.
  + Add clip_id to BLURAY_CLIP_INFO.
  + Add a suitable JVM path for Fedora/RHEL and clones.
  + Add support for AVCHD 8.3 filenames.
  + Add player setting for disabling persistent storage.
  + Add bd_set_rate().
  + Add playback time position to BD_EVENT_SEEK.
  + Add BD_VK_ROOT_MENU handling.
  + Add support for heavily fragmented 3D .m2ts files.
  + Improve Win32 dll loading security.
  + Improve playback resume position accuracy.
  + Improve error resilience and stability.
  + Fix using libmmbd with unmounted discs.
  + Fix leaks.
  + Delay BD-J overlay opening until something visible has been
    drawn.
  + Close BD-J overlay when window is not visible.
  + Use temporary storage when cache or persistent root location is
    unknown.
- Fixed patch libbluray-jvm_dir.patch.
- Changed soname version to 2.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 1.0.1:
  + Add possibility to check whether BD-J is functional without
    opening a disc.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Fix Windows dll loading.
  + Fix JAVA_HOME environment variable handling in Windows.
  + Fix build issues when CPPFLAGS is given in make command line.
  + Fix MSVC build issues.
  + Remove --disable-bdjava and --disable-udf configure options.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505044800">- BuildConflict with java-devel &gt;= 1.9. Java 8 is the last to
  support source_version 1.5.</changelog>
  <changelog author="fstrba@suse.com" date="1509364800">- Added patch:
  * libbluray-java9.patch
    + Fix build with jdk9
    + Due to incompatible changes in jdk9, the same code cannot be
    built with jdk9 and jdk &lt;= 1.8
    + Only apply on systems that hava jdk9</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512475200">- Update to version 1.0.2:
  + Add initial support for UHD BluRay discs (without BD-J menus).
  + Detect JRE (from the Java Applet plugin) on MacOS.
  + Improve error resilience and stability.
  + Improve libmmbd support.
  + Fix static build dependencies in pkgconfig file.
  + Fix creation of cache (sub-)directories on windows platforms.
  + Fix BD-J temporary storage when persistent storage is disabled.
  + Fix leaks.
- At least java-devel &gt;= 1.8 ist required for build.</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher, since some removal of
  deprecated SecurityManager functions makes BD-J not buildable
  with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1513684801">- Modified patch:
  * libbluray-java9.patch
    + Some change in hunks integrating upstream fixes that were
    partially different from ours.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637841600">- Update to 1.3.0:
  + Add bd_event_name().
  + Add return value to bd_refcnt_inc().
  + Add cache for parsed clpi file data.
  + Add player setting for JRE location (JAVA_HOME).
  + Improve FreeBSD BD-J support.
  + Improve portability.
  + Improve JVM and .jar file probing.
  + Fix leak.
- Update to 1.2.1:
  + Add initial support for .fmts files.
  + Improve missing/broken playlist handling.
  + Improve UHD metadata support.
  + Improve BD-J compability.
  + Improve error resilience and stability.
  + Fix long delay in "Evangelion, You are (not) alone" menu.
  + Fix JVM bootstrap issues with some Java 9 versions.
  + Fix sign extended bytes when reading single bytes in BDJ.
  + Fix creating organization and disc specific BD-J BUDA
    directories.
  + Use external libudfread when available.
  + Rename list_titles to bd_list_titles and add it to installed
    programs.
- Update to version 1.2.0:
  + Add functions to list and read BD-ROM files.
  + Add support for separate key pressed / typed / released user
    input events.
  + Add support for AWT mouse events (BD-J).
  + Fix build with OpenJDK 12 / 13.
- Update to version 1.1.2:
  + Add libxml version to pkg-config Requires.private.
  + Improve support for NetBSD operating system.
  + Improve BD-J compability.
  + Improve Java 8+ compability.
  + Fix main playlist caching in Windows.
  + Fix mark triggering when multiple marks are passed during
    single read().
  + Fix seek bar pop-up at chapter boundary with some discs.
  + Fix reading resources indirectly from mounted .jar file.
- Update to version 1.1.1:
  + Enable playback without menus when index.bdmv is missing.
  + Improve error resilience and stability.
  + Improve BD-J compability.
  + Fix loading libraries on MacOS / hardened runtime.
  + Fix resetting user-selected streams when playing without menus.
  + Fix stack overflow when using Java9+ with debugger connection.
  + Fix polygon-based BD-J graphics primitives.
  + Fix loading libmmbd in Windows 64-bit.
  + Fix loading classes with Windows Java 8.
  + Fix build with Java 1.6.
  + Fix pkg-config Libs.private.
- Update to version 1.1.0:
  + Add initial support for OpenJDK 11.
  + Add initial support for UHD disc BD-J menus.
  + Add support for compiling .jar file with Java 9+ compiler.
  + Move AWT classes to separate .jar file.
  + Update libudfread submodule repository URL.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Improve BD-J compability.
  + Fix playback of some broken BD-J discs.
  + Fix playback of discs without normal titles (only TopMenu /
    FirstPlay title).
- Remove unused dependencies from pkgconfig(libbluray)
  Our pkg is dynamically linked, so Libs.private is not needed
  Nothing in the exported header files needs paths from
  Requires.private
  * libbluray-pkgconfig.patch
- Refresh libbluray-java9.patch
- Drop libbluray-jvm_dir.patch
- Enable build against java-devel &gt;= 10.</changelog>
  <changelog author="pgajdos@suse.com" date="1652356800">- fix build for both 15sp3 and 15sp4 [bsc#1199463]
- added patches
  implement the new java.io.FileSystem.isInvalid method that entered all
  supported java versions with April 2022 CPU (taken from Factory)
  + libbluray-April2022CPU.patch</changelog>
</package>
<package pkgid="d6aefdaa22a9c8d689004c178990c05e3f9ab621b60b54c7d1b6d9f2c6b6dfa7" name="libbluray-devel" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="150000.4.2.1"/>
  <changelog author="tchvatal@suse.com" date="1425643200">- Put the configure args each on its own line</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1430395200">- Update to version 0.8.0:
  + Add security checks to BD-J.
  + Add support for UDF image files and unmounted discs.
  + Add UDF volume identifier to DISC_INFO.
  + Add bd_init(), bd_open_disc() and bd_open_stream().
  + Add /usr/share/libbluray/lib/ to .jar file search paths.
  + Add BD_EVENT_PLAYLIST_STOP (playlist playback is interrupted).
  + Accept directory name (without .jar file name) in LIBBLURAY_CP.
  + Improved error resilence.
  + Improve BD-J compability.
  + Fix Java 8u40 compability.
  + Fix infinite loop with some broken HDMV menus.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.
- Build with UDF support.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1432296000">- Update to version 0.8.1:
  + Notify application when UO mask changes.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix crash after bd_open(NULL).
  + Fix compability problem with libbdplus.
  + Fix memory leak in UDF filesystem parser.
  + Fix crash in freetype.</changelog>
  <changelog author="olaf@aepfle.de" date="1439208000">- Fix build in SLE_11</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1444046400">- Update to version 0.9.0:
  + Add functions to read files from VFS.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix Xlet-initiated font caching.
  + Fix return value when setting BLURAY_PLAYER_SETTING_DECODE_PG.
  + Fix build with C++ compiler</changelog>
  <changelog author="idonmez@suse.com" date="1446638400">- Update to version 0.9.1
  + Improved BD-J security.
  + Improved error resilience.
  + Improved seeking (avoid skipping PAT/PMT/PCR).
  + Fix UO mask check when bd_play_title() is used for Top Menu.
  + Fix re-starting of title bound Xlets when title changes.
  + Fix loading classes with invalid debug info.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1449144000">- Update to version 0.9.2:
  + Add primary audio stream to bd_select_stream().
  + Improve error resilience.
  + Fix Java 8 compability issues.
  + Fix Android build.
  + Fix SecurityException in AWTAutoShutdown.
  + Fix BD-J check when install path in Windows contains
    non-ASCII chars.
  + Fix jvm.dll loading in Windows ($JAVA_HOME/bin should be in
    dll load path).
  + Fix class translating in recent Java 8 versions.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1463486400">- Update to version 0.9.3:
  + Add bd_open_files(). This function deprecates old global file
    system hooks.
  + Add flag for on-disc menu support to DISC_INFO.
  + Add configure argument to disable building of JAR file.
  + Add missing player settings enums.
  + Update linux Java search path list and preferred JVM.
  + Enable UDF support by default.
  + Split developer tools from examples.
  + Improve BDJ_EVENT_CHAPTER triggering.
  + Improve main title detection.
  + Improve error resilience.
  + Improve BD-J compability.
  + Improve detecting of working aacs implementation.
  + Improve libmmbd support.
  + Fix BD-J media player stop().
  + Fix restoring playback rate with some BD-J discs.
  + Fix restoring suspended playback time position.
  + Fix current chapter lookup.
  + Fix lost key focus with multi-HScene discs.
  + Fix playback of discs without Top Menu title.
  + Fix caching of some BD-J files from UDF filesystem.
  + Fix stopping playback from HDMV menus.
  + Fix possible errors in win32 .iso image reading.
  + Fix undefined values in DISC_INFO.
  + Fix memory leaks.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="tchvatal@suse.com" date="1463659200">- Fix download url to not fail on network error</changelog>
  <changelog author="tchvatal@suse.com" date="1471348800">- Drop libbluray-autotools.patch as it has no real benefit and if
  something should be upstreamed</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486036800">- add patch to expose clip_id (as applied by Debian), which is
  necessary to build packages that depend on it (such as Handbrake)
  * A02-expose-clip_id.patch</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486900800">- drop patch A02-expopse-clip_id.patch as Handbrake seems to be the only
  package that needs it, to avoid binary runtime incompatibilities with
  libbluray packages that would stem from other repositories</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Rename %soname to %sover to better reflect its use.
  Fix RPM groups.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1488542400">- Update to version 1.0.0:
  + Add support for Java VM (BD-J) on MacOS.
  + Add clip_id to BLURAY_CLIP_INFO.
  + Add a suitable JVM path for Fedora/RHEL and clones.
  + Add support for AVCHD 8.3 filenames.
  + Add player setting for disabling persistent storage.
  + Add bd_set_rate().
  + Add playback time position to BD_EVENT_SEEK.
  + Add BD_VK_ROOT_MENU handling.
  + Add support for heavily fragmented 3D .m2ts files.
  + Improve Win32 dll loading security.
  + Improve playback resume position accuracy.
  + Improve error resilience and stability.
  + Fix using libmmbd with unmounted discs.
  + Fix leaks.
  + Delay BD-J overlay opening until something visible has been
    drawn.
  + Close BD-J overlay when window is not visible.
  + Use temporary storage when cache or persistent root location is
    unknown.
- Fixed patch libbluray-jvm_dir.patch.
- Changed soname version to 2.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 1.0.1:
  + Add possibility to check whether BD-J is functional without
    opening a disc.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Fix Windows dll loading.
  + Fix JAVA_HOME environment variable handling in Windows.
  + Fix build issues when CPPFLAGS is given in make command line.
  + Fix MSVC build issues.
  + Remove --disable-bdjava and --disable-udf configure options.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505044800">- BuildConflict with java-devel &gt;= 1.9. Java 8 is the last to
  support source_version 1.5.</changelog>
  <changelog author="fstrba@suse.com" date="1509364800">- Added patch:
  * libbluray-java9.patch
    + Fix build with jdk9
    + Due to incompatible changes in jdk9, the same code cannot be
    built with jdk9 and jdk &lt;= 1.8
    + Only apply on systems that hava jdk9</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512475200">- Update to version 1.0.2:
  + Add initial support for UHD BluRay discs (without BD-J menus).
  + Detect JRE (from the Java Applet plugin) on MacOS.
  + Improve error resilience and stability.
  + Improve libmmbd support.
  + Fix static build dependencies in pkgconfig file.
  + Fix creation of cache (sub-)directories on windows platforms.
  + Fix BD-J temporary storage when persistent storage is disabled.
  + Fix leaks.
- At least java-devel &gt;= 1.8 ist required for build.</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher, since some removal of
  deprecated SecurityManager functions makes BD-J not buildable
  with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1513684801">- Modified patch:
  * libbluray-java9.patch
    + Some change in hunks integrating upstream fixes that were
    partially different from ours.</changelog>
</package>
<package pkgid="031b21df851b877ac3326954a06dde8f3b911217444c07076a4a149a52969568" name="libbluray-devel" arch="ppc64le">
  <version epoch="0" ver="1.0.2" rel="150000.4.2.1"/>
  <changelog author="tchvatal@suse.com" date="1425643200">- Put the configure args each on its own line</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1430395200">- Update to version 0.8.0:
  + Add security checks to BD-J.
  + Add support for UDF image files and unmounted discs.
  + Add UDF volume identifier to DISC_INFO.
  + Add bd_init(), bd_open_disc() and bd_open_stream().
  + Add /usr/share/libbluray/lib/ to .jar file search paths.
  + Add BD_EVENT_PLAYLIST_STOP (playlist playback is interrupted).
  + Accept directory name (without .jar file name) in LIBBLURAY_CP.
  + Improved error resilence.
  + Improve BD-J compability.
  + Fix Java 8u40 compability.
  + Fix infinite loop with some broken HDMV menus.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.
- Build with UDF support.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1432296000">- Update to version 0.8.1:
  + Notify application when UO mask changes.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix crash after bd_open(NULL).
  + Fix compability problem with libbdplus.
  + Fix memory leak in UDF filesystem parser.
  + Fix crash in freetype.</changelog>
  <changelog author="olaf@aepfle.de" date="1439208000">- Fix build in SLE_11</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1444046400">- Update to version 0.9.0:
  + Add functions to read files from VFS.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix Xlet-initiated font caching.
  + Fix return value when setting BLURAY_PLAYER_SETTING_DECODE_PG.
  + Fix build with C++ compiler</changelog>
  <changelog author="idonmez@suse.com" date="1446638400">- Update to version 0.9.1
  + Improved BD-J security.
  + Improved error resilience.
  + Improved seeking (avoid skipping PAT/PMT/PCR).
  + Fix UO mask check when bd_play_title() is used for Top Menu.
  + Fix re-starting of title bound Xlets when title changes.
  + Fix loading classes with invalid debug info.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1449144000">- Update to version 0.9.2:
  + Add primary audio stream to bd_select_stream().
  + Improve error resilience.
  + Fix Java 8 compability issues.
  + Fix Android build.
  + Fix SecurityException in AWTAutoShutdown.
  + Fix BD-J check when install path in Windows contains
    non-ASCII chars.
  + Fix jvm.dll loading in Windows ($JAVA_HOME/bin should be in
    dll load path).
  + Fix class translating in recent Java 8 versions.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1463486400">- Update to version 0.9.3:
  + Add bd_open_files(). This function deprecates old global file
    system hooks.
  + Add flag for on-disc menu support to DISC_INFO.
  + Add configure argument to disable building of JAR file.
  + Add missing player settings enums.
  + Update linux Java search path list and preferred JVM.
  + Enable UDF support by default.
  + Split developer tools from examples.
  + Improve BDJ_EVENT_CHAPTER triggering.
  + Improve main title detection.
  + Improve error resilience.
  + Improve BD-J compability.
  + Improve detecting of working aacs implementation.
  + Improve libmmbd support.
  + Fix BD-J media player stop().
  + Fix restoring playback rate with some BD-J discs.
  + Fix restoring suspended playback time position.
  + Fix current chapter lookup.
  + Fix lost key focus with multi-HScene discs.
  + Fix playback of discs without Top Menu title.
  + Fix caching of some BD-J files from UDF filesystem.
  + Fix stopping playback from HDMV menus.
  + Fix possible errors in win32 .iso image reading.
  + Fix undefined values in DISC_INFO.
  + Fix memory leaks.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="tchvatal@suse.com" date="1463659200">- Fix download url to not fail on network error</changelog>
  <changelog author="tchvatal@suse.com" date="1471348800">- Drop libbluray-autotools.patch as it has no real benefit and if
  something should be upstreamed</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486036800">- add patch to expose clip_id (as applied by Debian), which is
  necessary to build packages that depend on it (such as Handbrake)
  * A02-expose-clip_id.patch</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486900800">- drop patch A02-expopse-clip_id.patch as Handbrake seems to be the only
  package that needs it, to avoid binary runtime incompatibilities with
  libbluray packages that would stem from other repositories</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Rename %soname to %sover to better reflect its use.
  Fix RPM groups.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1488542400">- Update to version 1.0.0:
  + Add support for Java VM (BD-J) on MacOS.
  + Add clip_id to BLURAY_CLIP_INFO.
  + Add a suitable JVM path for Fedora/RHEL and clones.
  + Add support for AVCHD 8.3 filenames.
  + Add player setting for disabling persistent storage.
  + Add bd_set_rate().
  + Add playback time position to BD_EVENT_SEEK.
  + Add BD_VK_ROOT_MENU handling.
  + Add support for heavily fragmented 3D .m2ts files.
  + Improve Win32 dll loading security.
  + Improve playback resume position accuracy.
  + Improve error resilience and stability.
  + Fix using libmmbd with unmounted discs.
  + Fix leaks.
  + Delay BD-J overlay opening until something visible has been
    drawn.
  + Close BD-J overlay when window is not visible.
  + Use temporary storage when cache or persistent root location is
    unknown.
- Fixed patch libbluray-jvm_dir.patch.
- Changed soname version to 2.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 1.0.1:
  + Add possibility to check whether BD-J is functional without
    opening a disc.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Fix Windows dll loading.
  + Fix JAVA_HOME environment variable handling in Windows.
  + Fix build issues when CPPFLAGS is given in make command line.
  + Fix MSVC build issues.
  + Remove --disable-bdjava and --disable-udf configure options.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505044800">- BuildConflict with java-devel &gt;= 1.9. Java 8 is the last to
  support source_version 1.5.</changelog>
  <changelog author="fstrba@suse.com" date="1509364800">- Added patch:
  * libbluray-java9.patch
    + Fix build with jdk9
    + Due to incompatible changes in jdk9, the same code cannot be
    built with jdk9 and jdk &lt;= 1.8
    + Only apply on systems that hava jdk9</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512475200">- Update to version 1.0.2:
  + Add initial support for UHD BluRay discs (without BD-J menus).
  + Detect JRE (from the Java Applet plugin) on MacOS.
  + Improve error resilience and stability.
  + Improve libmmbd support.
  + Fix static build dependencies in pkgconfig file.
  + Fix creation of cache (sub-)directories on windows platforms.
  + Fix BD-J temporary storage when persistent storage is disabled.
  + Fix leaks.
- At least java-devel &gt;= 1.8 ist required for build.</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher, since some removal of
  deprecated SecurityManager functions makes BD-J not buildable
  with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1513684801">- Modified patch:
  * libbluray-java9.patch
    + Some change in hunks integrating upstream fixes that were
    partially different from ours.</changelog>
</package>
<package pkgid="17cdea51c7cc82d8bbdcf88742dc0c23c7ca6a108573944fc209d7da7cd54d1e" name="libbluray-devel" arch="s390x">
  <version epoch="0" ver="1.0.2" rel="150000.4.2.1"/>
  <changelog author="tchvatal@suse.com" date="1425643200">- Put the configure args each on its own line</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1430395200">- Update to version 0.8.0:
  + Add security checks to BD-J.
  + Add support for UDF image files and unmounted discs.
  + Add UDF volume identifier to DISC_INFO.
  + Add bd_init(), bd_open_disc() and bd_open_stream().
  + Add /usr/share/libbluray/lib/ to .jar file search paths.
  + Add BD_EVENT_PLAYLIST_STOP (playlist playback is interrupted).
  + Accept directory name (without .jar file name) in LIBBLURAY_CP.
  + Improved error resilence.
  + Improve BD-J compability.
  + Fix Java 8u40 compability.
  + Fix infinite loop with some broken HDMV menus.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.
- Build with UDF support.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1432296000">- Update to version 0.8.1:
  + Notify application when UO mask changes.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix crash after bd_open(NULL).
  + Fix compability problem with libbdplus.
  + Fix memory leak in UDF filesystem parser.
  + Fix crash in freetype.</changelog>
  <changelog author="olaf@aepfle.de" date="1439208000">- Fix build in SLE_11</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1444046400">- Update to version 0.9.0:
  + Add functions to read files from VFS.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix Xlet-initiated font caching.
  + Fix return value when setting BLURAY_PLAYER_SETTING_DECODE_PG.
  + Fix build with C++ compiler</changelog>
  <changelog author="idonmez@suse.com" date="1446638400">- Update to version 0.9.1
  + Improved BD-J security.
  + Improved error resilience.
  + Improved seeking (avoid skipping PAT/PMT/PCR).
  + Fix UO mask check when bd_play_title() is used for Top Menu.
  + Fix re-starting of title bound Xlets when title changes.
  + Fix loading classes with invalid debug info.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1449144000">- Update to version 0.9.2:
  + Add primary audio stream to bd_select_stream().
  + Improve error resilience.
  + Fix Java 8 compability issues.
  + Fix Android build.
  + Fix SecurityException in AWTAutoShutdown.
  + Fix BD-J check when install path in Windows contains
    non-ASCII chars.
  + Fix jvm.dll loading in Windows ($JAVA_HOME/bin should be in
    dll load path).
  + Fix class translating in recent Java 8 versions.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1463486400">- Update to version 0.9.3:
  + Add bd_open_files(). This function deprecates old global file
    system hooks.
  + Add flag for on-disc menu support to DISC_INFO.
  + Add configure argument to disable building of JAR file.
  + Add missing player settings enums.
  + Update linux Java search path list and preferred JVM.
  + Enable UDF support by default.
  + Split developer tools from examples.
  + Improve BDJ_EVENT_CHAPTER triggering.
  + Improve main title detection.
  + Improve error resilience.
  + Improve BD-J compability.
  + Improve detecting of working aacs implementation.
  + Improve libmmbd support.
  + Fix BD-J media player stop().
  + Fix restoring playback rate with some BD-J discs.
  + Fix restoring suspended playback time position.
  + Fix current chapter lookup.
  + Fix lost key focus with multi-HScene discs.
  + Fix playback of discs without Top Menu title.
  + Fix caching of some BD-J files from UDF filesystem.
  + Fix stopping playback from HDMV menus.
  + Fix possible errors in win32 .iso image reading.
  + Fix undefined values in DISC_INFO.
  + Fix memory leaks.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="tchvatal@suse.com" date="1463659200">- Fix download url to not fail on network error</changelog>
  <changelog author="tchvatal@suse.com" date="1471348800">- Drop libbluray-autotools.patch as it has no real benefit and if
  something should be upstreamed</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486036800">- add patch to expose clip_id (as applied by Debian), which is
  necessary to build packages that depend on it (such as Handbrake)
  * A02-expose-clip_id.patch</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486900800">- drop patch A02-expopse-clip_id.patch as Handbrake seems to be the only
  package that needs it, to avoid binary runtime incompatibilities with
  libbluray packages that would stem from other repositories</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Rename %soname to %sover to better reflect its use.
  Fix RPM groups.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1488542400">- Update to version 1.0.0:
  + Add support for Java VM (BD-J) on MacOS.
  + Add clip_id to BLURAY_CLIP_INFO.
  + Add a suitable JVM path for Fedora/RHEL and clones.
  + Add support for AVCHD 8.3 filenames.
  + Add player setting for disabling persistent storage.
  + Add bd_set_rate().
  + Add playback time position to BD_EVENT_SEEK.
  + Add BD_VK_ROOT_MENU handling.
  + Add support for heavily fragmented 3D .m2ts files.
  + Improve Win32 dll loading security.
  + Improve playback resume position accuracy.
  + Improve error resilience and stability.
  + Fix using libmmbd with unmounted discs.
  + Fix leaks.
  + Delay BD-J overlay opening until something visible has been
    drawn.
  + Close BD-J overlay when window is not visible.
  + Use temporary storage when cache or persistent root location is
    unknown.
- Fixed patch libbluray-jvm_dir.patch.
- Changed soname version to 2.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 1.0.1:
  + Add possibility to check whether BD-J is functional without
    opening a disc.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Fix Windows dll loading.
  + Fix JAVA_HOME environment variable handling in Windows.
  + Fix build issues when CPPFLAGS is given in make command line.
  + Fix MSVC build issues.
  + Remove --disable-bdjava and --disable-udf configure options.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505044800">- BuildConflict with java-devel &gt;= 1.9. Java 8 is the last to
  support source_version 1.5.</changelog>
  <changelog author="fstrba@suse.com" date="1509364800">- Added patch:
  * libbluray-java9.patch
    + Fix build with jdk9
    + Due to incompatible changes in jdk9, the same code cannot be
    built with jdk9 and jdk &lt;= 1.8
    + Only apply on systems that hava jdk9</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512475200">- Update to version 1.0.2:
  + Add initial support for UHD BluRay discs (without BD-J menus).
  + Detect JRE (from the Java Applet plugin) on MacOS.
  + Improve error resilience and stability.
  + Improve libmmbd support.
  + Fix static build dependencies in pkgconfig file.
  + Fix creation of cache (sub-)directories on windows platforms.
  + Fix BD-J temporary storage when persistent storage is disabled.
  + Fix leaks.
- At least java-devel &gt;= 1.8 ist required for build.</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher, since some removal of
  deprecated SecurityManager functions makes BD-J not buildable
  with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1513684801">- Modified patch:
  * libbluray-java9.patch
    + Some change in hunks integrating upstream fixes that were
    partially different from ours.</changelog>
</package>
<package pkgid="a9cd2376d0a7394ced644045e45706eb08a0e4c657485069170a09bb93fc443b" name="libbluray-devel" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="150000.4.2.1"/>
  <changelog author="tchvatal@suse.com" date="1425643200">- Put the configure args each on its own line</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1430395200">- Update to version 0.8.0:
  + Add security checks to BD-J.
  + Add support for UDF image files and unmounted discs.
  + Add UDF volume identifier to DISC_INFO.
  + Add bd_init(), bd_open_disc() and bd_open_stream().
  + Add /usr/share/libbluray/lib/ to .jar file search paths.
  + Add BD_EVENT_PLAYLIST_STOP (playlist playback is interrupted).
  + Accept directory name (without .jar file name) in LIBBLURAY_CP.
  + Improved error resilence.
  + Improve BD-J compability.
  + Fix Java 8u40 compability.
  + Fix infinite loop with some broken HDMV menus.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.
- Build with UDF support.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1432296000">- Update to version 0.8.1:
  + Notify application when UO mask changes.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix crash after bd_open(NULL).
  + Fix compability problem with libbdplus.
  + Fix memory leak in UDF filesystem parser.
  + Fix crash in freetype.</changelog>
  <changelog author="olaf@aepfle.de" date="1439208000">- Fix build in SLE_11</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1444046400">- Update to version 0.9.0:
  + Add functions to read files from VFS.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix Xlet-initiated font caching.
  + Fix return value when setting BLURAY_PLAYER_SETTING_DECODE_PG.
  + Fix build with C++ compiler</changelog>
  <changelog author="idonmez@suse.com" date="1446638400">- Update to version 0.9.1
  + Improved BD-J security.
  + Improved error resilience.
  + Improved seeking (avoid skipping PAT/PMT/PCR).
  + Fix UO mask check when bd_play_title() is used for Top Menu.
  + Fix re-starting of title bound Xlets when title changes.
  + Fix loading classes with invalid debug info.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1449144000">- Update to version 0.9.2:
  + Add primary audio stream to bd_select_stream().
  + Improve error resilience.
  + Fix Java 8 compability issues.
  + Fix Android build.
  + Fix SecurityException in AWTAutoShutdown.
  + Fix BD-J check when install path in Windows contains
    non-ASCII chars.
  + Fix jvm.dll loading in Windows ($JAVA_HOME/bin should be in
    dll load path).
  + Fix class translating in recent Java 8 versions.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1463486400">- Update to version 0.9.3:
  + Add bd_open_files(). This function deprecates old global file
    system hooks.
  + Add flag for on-disc menu support to DISC_INFO.
  + Add configure argument to disable building of JAR file.
  + Add missing player settings enums.
  + Update linux Java search path list and preferred JVM.
  + Enable UDF support by default.
  + Split developer tools from examples.
  + Improve BDJ_EVENT_CHAPTER triggering.
  + Improve main title detection.
  + Improve error resilience.
  + Improve BD-J compability.
  + Improve detecting of working aacs implementation.
  + Improve libmmbd support.
  + Fix BD-J media player stop().
  + Fix restoring playback rate with some BD-J discs.
  + Fix restoring suspended playback time position.
  + Fix current chapter lookup.
  + Fix lost key focus with multi-HScene discs.
  + Fix playback of discs without Top Menu title.
  + Fix caching of some BD-J files from UDF filesystem.
  + Fix stopping playback from HDMV menus.
  + Fix possible errors in win32 .iso image reading.
  + Fix undefined values in DISC_INFO.
  + Fix memory leaks.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="tchvatal@suse.com" date="1463659200">- Fix download url to not fail on network error</changelog>
  <changelog author="tchvatal@suse.com" date="1471348800">- Drop libbluray-autotools.patch as it has no real benefit and if
  something should be upstreamed</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486036800">- add patch to expose clip_id (as applied by Debian), which is
  necessary to build packages that depend on it (such as Handbrake)
  * A02-expose-clip_id.patch</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486900800">- drop patch A02-expopse-clip_id.patch as Handbrake seems to be the only
  package that needs it, to avoid binary runtime incompatibilities with
  libbluray packages that would stem from other repositories</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Rename %soname to %sover to better reflect its use.
  Fix RPM groups.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1488542400">- Update to version 1.0.0:
  + Add support for Java VM (BD-J) on MacOS.
  + Add clip_id to BLURAY_CLIP_INFO.
  + Add a suitable JVM path for Fedora/RHEL and clones.
  + Add support for AVCHD 8.3 filenames.
  + Add player setting for disabling persistent storage.
  + Add bd_set_rate().
  + Add playback time position to BD_EVENT_SEEK.
  + Add BD_VK_ROOT_MENU handling.
  + Add support for heavily fragmented 3D .m2ts files.
  + Improve Win32 dll loading security.
  + Improve playback resume position accuracy.
  + Improve error resilience and stability.
  + Fix using libmmbd with unmounted discs.
  + Fix leaks.
  + Delay BD-J overlay opening until something visible has been
    drawn.
  + Close BD-J overlay when window is not visible.
  + Use temporary storage when cache or persistent root location is
    unknown.
- Fixed patch libbluray-jvm_dir.patch.
- Changed soname version to 2.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 1.0.1:
  + Add possibility to check whether BD-J is functional without
    opening a disc.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Fix Windows dll loading.
  + Fix JAVA_HOME environment variable handling in Windows.
  + Fix build issues when CPPFLAGS is given in make command line.
  + Fix MSVC build issues.
  + Remove --disable-bdjava and --disable-udf configure options.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505044800">- BuildConflict with java-devel &gt;= 1.9. Java 8 is the last to
  support source_version 1.5.</changelog>
  <changelog author="fstrba@suse.com" date="1509364800">- Added patch:
  * libbluray-java9.patch
    + Fix build with jdk9
    + Due to incompatible changes in jdk9, the same code cannot be
    built with jdk9 and jdk &lt;= 1.8
    + Only apply on systems that hava jdk9</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512475200">- Update to version 1.0.2:
  + Add initial support for UHD BluRay discs (without BD-J menus).
  + Detect JRE (from the Java Applet plugin) on MacOS.
  + Improve error resilience and stability.
  + Improve libmmbd support.
  + Fix static build dependencies in pkgconfig file.
  + Fix creation of cache (sub-)directories on windows platforms.
  + Fix BD-J temporary storage when persistent storage is disabled.
  + Fix leaks.
- At least java-devel &gt;= 1.8 ist required for build.</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher, since some removal of
  deprecated SecurityManager functions makes BD-J not buildable
  with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1513684801">- Modified patch:
  * libbluray-java9.patch
    + Some change in hunks integrating upstream fixes that were
    partially different from ours.</changelog>
</package>
<package pkgid="10af0a3e570ab8e5da9a0b968bd332134224eea34452dd21b1158798f3f2ce26" name="libbluray-devel" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="150300.10.7.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1432296000">- Update to version 0.8.1:
  + Notify application when UO mask changes.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix crash after bd_open(NULL).
  + Fix compability problem with libbdplus.
  + Fix memory leak in UDF filesystem parser.
  + Fix crash in freetype.</changelog>
  <changelog author="olaf@aepfle.de" date="1439208000">- Fix build in SLE_11</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1444046400">- Update to version 0.9.0:
  + Add functions to read files from VFS.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix Xlet-initiated font caching.
  + Fix return value when setting BLURAY_PLAYER_SETTING_DECODE_PG.
  + Fix build with C++ compiler</changelog>
  <changelog author="idonmez@suse.com" date="1446638400">- Update to version 0.9.1
  + Improved BD-J security.
  + Improved error resilience.
  + Improved seeking (avoid skipping PAT/PMT/PCR).
  + Fix UO mask check when bd_play_title() is used for Top Menu.
  + Fix re-starting of title bound Xlets when title changes.
  + Fix loading classes with invalid debug info.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1449144000">- Update to version 0.9.2:
  + Add primary audio stream to bd_select_stream().
  + Improve error resilience.
  + Fix Java 8 compability issues.
  + Fix Android build.
  + Fix SecurityException in AWTAutoShutdown.
  + Fix BD-J check when install path in Windows contains
    non-ASCII chars.
  + Fix jvm.dll loading in Windows ($JAVA_HOME/bin should be in
    dll load path).
  + Fix class translating in recent Java 8 versions.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1463486400">- Update to version 0.9.3:
  + Add bd_open_files(). This function deprecates old global file
    system hooks.
  + Add flag for on-disc menu support to DISC_INFO.
  + Add configure argument to disable building of JAR file.
  + Add missing player settings enums.
  + Update linux Java search path list and preferred JVM.
  + Enable UDF support by default.
  + Split developer tools from examples.
  + Improve BDJ_EVENT_CHAPTER triggering.
  + Improve main title detection.
  + Improve error resilience.
  + Improve BD-J compability.
  + Improve detecting of working aacs implementation.
  + Improve libmmbd support.
  + Fix BD-J media player stop().
  + Fix restoring playback rate with some BD-J discs.
  + Fix restoring suspended playback time position.
  + Fix current chapter lookup.
  + Fix lost key focus with multi-HScene discs.
  + Fix playback of discs without Top Menu title.
  + Fix caching of some BD-J files from UDF filesystem.
  + Fix stopping playback from HDMV menus.
  + Fix possible errors in win32 .iso image reading.
  + Fix undefined values in DISC_INFO.
  + Fix memory leaks.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="tchvatal@suse.com" date="1463659200">- Fix download url to not fail on network error</changelog>
  <changelog author="tchvatal@suse.com" date="1471348800">- Drop libbluray-autotools.patch as it has no real benefit and if
  something should be upstreamed</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486036800">- add patch to expose clip_id (as applied by Debian), which is
  necessary to build packages that depend on it (such as Handbrake)
  * A02-expose-clip_id.patch</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486900800">- drop patch A02-expopse-clip_id.patch as Handbrake seems to be the only
  package that needs it, to avoid binary runtime incompatibilities with
  libbluray packages that would stem from other repositories</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Rename %soname to %sover to better reflect its use.
  Fix RPM groups.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1488542400">- Update to version 1.0.0:
  + Add support for Java VM (BD-J) on MacOS.
  + Add clip_id to BLURAY_CLIP_INFO.
  + Add a suitable JVM path for Fedora/RHEL and clones.
  + Add support for AVCHD 8.3 filenames.
  + Add player setting for disabling persistent storage.
  + Add bd_set_rate().
  + Add playback time position to BD_EVENT_SEEK.
  + Add BD_VK_ROOT_MENU handling.
  + Add support for heavily fragmented 3D .m2ts files.
  + Improve Win32 dll loading security.
  + Improve playback resume position accuracy.
  + Improve error resilience and stability.
  + Fix using libmmbd with unmounted discs.
  + Fix leaks.
  + Delay BD-J overlay opening until something visible has been
    drawn.
  + Close BD-J overlay when window is not visible.
  + Use temporary storage when cache or persistent root location is
    unknown.
- Fixed patch libbluray-jvm_dir.patch.
- Changed soname version to 2.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 1.0.1:
  + Add possibility to check whether BD-J is functional without
    opening a disc.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Fix Windows dll loading.
  + Fix JAVA_HOME environment variable handling in Windows.
  + Fix build issues when CPPFLAGS is given in make command line.
  + Fix MSVC build issues.
  + Remove --disable-bdjava and --disable-udf configure options.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505044800">- BuildConflict with java-devel &gt;= 1.9. Java 8 is the last to
  support source_version 1.5.</changelog>
  <changelog author="fstrba@suse.com" date="1509364800">- Added patch:
  * libbluray-java9.patch
    + Fix build with jdk9
    + Due to incompatible changes in jdk9, the same code cannot be
    built with jdk9 and jdk &lt;= 1.8
    + Only apply on systems that hava jdk9</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512475200">- Update to version 1.0.2:
  + Add initial support for UHD BluRay discs (without BD-J menus).
  + Detect JRE (from the Java Applet plugin) on MacOS.
  + Improve error resilience and stability.
  + Improve libmmbd support.
  + Fix static build dependencies in pkgconfig file.
  + Fix creation of cache (sub-)directories on windows platforms.
  + Fix BD-J temporary storage when persistent storage is disabled.
  + Fix leaks.
- At least java-devel &gt;= 1.8 ist required for build.</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher, since some removal of
  deprecated SecurityManager functions makes BD-J not buildable
  with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1513684801">- Modified patch:
  * libbluray-java9.patch
    + Some change in hunks integrating upstream fixes that were
    partially different from ours.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637841600">- Update to 1.3.0:
  + Add bd_event_name().
  + Add return value to bd_refcnt_inc().
  + Add cache for parsed clpi file data.
  + Add player setting for JRE location (JAVA_HOME).
  + Improve FreeBSD BD-J support.
  + Improve portability.
  + Improve JVM and .jar file probing.
  + Fix leak.
- Update to 1.2.1:
  + Add initial support for .fmts files.
  + Improve missing/broken playlist handling.
  + Improve UHD metadata support.
  + Improve BD-J compability.
  + Improve error resilience and stability.
  + Fix long delay in "Evangelion, You are (not) alone" menu.
  + Fix JVM bootstrap issues with some Java 9 versions.
  + Fix sign extended bytes when reading single bytes in BDJ.
  + Fix creating organization and disc specific BD-J BUDA
    directories.
  + Use external libudfread when available.
  + Rename list_titles to bd_list_titles and add it to installed
    programs.
- Update to version 1.2.0:
  + Add functions to list and read BD-ROM files.
  + Add support for separate key pressed / typed / released user
    input events.
  + Add support for AWT mouse events (BD-J).
  + Fix build with OpenJDK 12 / 13.
- Update to version 1.1.2:
  + Add libxml version to pkg-config Requires.private.
  + Improve support for NetBSD operating system.
  + Improve BD-J compability.
  + Improve Java 8+ compability.
  + Fix main playlist caching in Windows.
  + Fix mark triggering when multiple marks are passed during
    single read().
  + Fix seek bar pop-up at chapter boundary with some discs.
  + Fix reading resources indirectly from mounted .jar file.
- Update to version 1.1.1:
  + Enable playback without menus when index.bdmv is missing.
  + Improve error resilience and stability.
  + Improve BD-J compability.
  + Fix loading libraries on MacOS / hardened runtime.
  + Fix resetting user-selected streams when playing without menus.
  + Fix stack overflow when using Java9+ with debugger connection.
  + Fix polygon-based BD-J graphics primitives.
  + Fix loading libmmbd in Windows 64-bit.
  + Fix loading classes with Windows Java 8.
  + Fix build with Java 1.6.
  + Fix pkg-config Libs.private.
- Update to version 1.1.0:
  + Add initial support for OpenJDK 11.
  + Add initial support for UHD disc BD-J menus.
  + Add support for compiling .jar file with Java 9+ compiler.
  + Move AWT classes to separate .jar file.
  + Update libudfread submodule repository URL.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Improve BD-J compability.
  + Fix playback of some broken BD-J discs.
  + Fix playback of discs without normal titles (only TopMenu /
    FirstPlay title).
- Remove unused dependencies from pkgconfig(libbluray)
  Our pkg is dynamically linked, so Libs.private is not needed
  Nothing in the exported header files needs paths from
  Requires.private
  * libbluray-pkgconfig.patch
- Refresh libbluray-java9.patch
- Drop libbluray-jvm_dir.patch
- Enable build against java-devel &gt;= 10.</changelog>
  <changelog author="pgajdos@suse.com" date="1652356800">- fix build for both 15sp3 and 15sp4 [bsc#1199463]
- added patches
  implement the new java.io.FileSystem.isInvalid method that entered all
  supported java versions with April 2022 CPU (taken from Factory)
  + libbluray-April2022CPU.patch</changelog>
</package>
<package pkgid="8f7cd664a4cf3754e15301aeed6ddfc04ec50fccf3312bfe9f418de556d4201e" name="libbluray-devel" arch="ppc64le">
  <version epoch="0" ver="1.3.0" rel="150300.10.7.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1432296000">- Update to version 0.8.1:
  + Notify application when UO mask changes.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix crash after bd_open(NULL).
  + Fix compability problem with libbdplus.
  + Fix memory leak in UDF filesystem parser.
  + Fix crash in freetype.</changelog>
  <changelog author="olaf@aepfle.de" date="1439208000">- Fix build in SLE_11</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1444046400">- Update to version 0.9.0:
  + Add functions to read files from VFS.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix Xlet-initiated font caching.
  + Fix return value when setting BLURAY_PLAYER_SETTING_DECODE_PG.
  + Fix build with C++ compiler</changelog>
  <changelog author="idonmez@suse.com" date="1446638400">- Update to version 0.9.1
  + Improved BD-J security.
  + Improved error resilience.
  + Improved seeking (avoid skipping PAT/PMT/PCR).
  + Fix UO mask check when bd_play_title() is used for Top Menu.
  + Fix re-starting of title bound Xlets when title changes.
  + Fix loading classes with invalid debug info.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1449144000">- Update to version 0.9.2:
  + Add primary audio stream to bd_select_stream().
  + Improve error resilience.
  + Fix Java 8 compability issues.
  + Fix Android build.
  + Fix SecurityException in AWTAutoShutdown.
  + Fix BD-J check when install path in Windows contains
    non-ASCII chars.
  + Fix jvm.dll loading in Windows ($JAVA_HOME/bin should be in
    dll load path).
  + Fix class translating in recent Java 8 versions.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1463486400">- Update to version 0.9.3:
  + Add bd_open_files(). This function deprecates old global file
    system hooks.
  + Add flag for on-disc menu support to DISC_INFO.
  + Add configure argument to disable building of JAR file.
  + Add missing player settings enums.
  + Update linux Java search path list and preferred JVM.
  + Enable UDF support by default.
  + Split developer tools from examples.
  + Improve BDJ_EVENT_CHAPTER triggering.
  + Improve main title detection.
  + Improve error resilience.
  + Improve BD-J compability.
  + Improve detecting of working aacs implementation.
  + Improve libmmbd support.
  + Fix BD-J media player stop().
  + Fix restoring playback rate with some BD-J discs.
  + Fix restoring suspended playback time position.
  + Fix current chapter lookup.
  + Fix lost key focus with multi-HScene discs.
  + Fix playback of discs without Top Menu title.
  + Fix caching of some BD-J files from UDF filesystem.
  + Fix stopping playback from HDMV menus.
  + Fix possible errors in win32 .iso image reading.
  + Fix undefined values in DISC_INFO.
  + Fix memory leaks.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="tchvatal@suse.com" date="1463659200">- Fix download url to not fail on network error</changelog>
  <changelog author="tchvatal@suse.com" date="1471348800">- Drop libbluray-autotools.patch as it has no real benefit and if
  something should be upstreamed</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486036800">- add patch to expose clip_id (as applied by Debian), which is
  necessary to build packages that depend on it (such as Handbrake)
  * A02-expose-clip_id.patch</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486900800">- drop patch A02-expopse-clip_id.patch as Handbrake seems to be the only
  package that needs it, to avoid binary runtime incompatibilities with
  libbluray packages that would stem from other repositories</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Rename %soname to %sover to better reflect its use.
  Fix RPM groups.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1488542400">- Update to version 1.0.0:
  + Add support for Java VM (BD-J) on MacOS.
  + Add clip_id to BLURAY_CLIP_INFO.
  + Add a suitable JVM path for Fedora/RHEL and clones.
  + Add support for AVCHD 8.3 filenames.
  + Add player setting for disabling persistent storage.
  + Add bd_set_rate().
  + Add playback time position to BD_EVENT_SEEK.
  + Add BD_VK_ROOT_MENU handling.
  + Add support for heavily fragmented 3D .m2ts files.
  + Improve Win32 dll loading security.
  + Improve playback resume position accuracy.
  + Improve error resilience and stability.
  + Fix using libmmbd with unmounted discs.
  + Fix leaks.
  + Delay BD-J overlay opening until something visible has been
    drawn.
  + Close BD-J overlay when window is not visible.
  + Use temporary storage when cache or persistent root location is
    unknown.
- Fixed patch libbluray-jvm_dir.patch.
- Changed soname version to 2.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 1.0.1:
  + Add possibility to check whether BD-J is functional without
    opening a disc.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Fix Windows dll loading.
  + Fix JAVA_HOME environment variable handling in Windows.
  + Fix build issues when CPPFLAGS is given in make command line.
  + Fix MSVC build issues.
  + Remove --disable-bdjava and --disable-udf configure options.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505044800">- BuildConflict with java-devel &gt;= 1.9. Java 8 is the last to
  support source_version 1.5.</changelog>
  <changelog author="fstrba@suse.com" date="1509364800">- Added patch:
  * libbluray-java9.patch
    + Fix build with jdk9
    + Due to incompatible changes in jdk9, the same code cannot be
    built with jdk9 and jdk &lt;= 1.8
    + Only apply on systems that hava jdk9</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512475200">- Update to version 1.0.2:
  + Add initial support for UHD BluRay discs (without BD-J menus).
  + Detect JRE (from the Java Applet plugin) on MacOS.
  + Improve error resilience and stability.
  + Improve libmmbd support.
  + Fix static build dependencies in pkgconfig file.
  + Fix creation of cache (sub-)directories on windows platforms.
  + Fix BD-J temporary storage when persistent storage is disabled.
  + Fix leaks.
- At least java-devel &gt;= 1.8 ist required for build.</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher, since some removal of
  deprecated SecurityManager functions makes BD-J not buildable
  with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1513684801">- Modified patch:
  * libbluray-java9.patch
    + Some change in hunks integrating upstream fixes that were
    partially different from ours.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637841600">- Update to 1.3.0:
  + Add bd_event_name().
  + Add return value to bd_refcnt_inc().
  + Add cache for parsed clpi file data.
  + Add player setting for JRE location (JAVA_HOME).
  + Improve FreeBSD BD-J support.
  + Improve portability.
  + Improve JVM and .jar file probing.
  + Fix leak.
- Update to 1.2.1:
  + Add initial support for .fmts files.
  + Improve missing/broken playlist handling.
  + Improve UHD metadata support.
  + Improve BD-J compability.
  + Improve error resilience and stability.
  + Fix long delay in "Evangelion, You are (not) alone" menu.
  + Fix JVM bootstrap issues with some Java 9 versions.
  + Fix sign extended bytes when reading single bytes in BDJ.
  + Fix creating organization and disc specific BD-J BUDA
    directories.
  + Use external libudfread when available.
  + Rename list_titles to bd_list_titles and add it to installed
    programs.
- Update to version 1.2.0:
  + Add functions to list and read BD-ROM files.
  + Add support for separate key pressed / typed / released user
    input events.
  + Add support for AWT mouse events (BD-J).
  + Fix build with OpenJDK 12 / 13.
- Update to version 1.1.2:
  + Add libxml version to pkg-config Requires.private.
  + Improve support for NetBSD operating system.
  + Improve BD-J compability.
  + Improve Java 8+ compability.
  + Fix main playlist caching in Windows.
  + Fix mark triggering when multiple marks are passed during
    single read().
  + Fix seek bar pop-up at chapter boundary with some discs.
  + Fix reading resources indirectly from mounted .jar file.
- Update to version 1.1.1:
  + Enable playback without menus when index.bdmv is missing.
  + Improve error resilience and stability.
  + Improve BD-J compability.
  + Fix loading libraries on MacOS / hardened runtime.
  + Fix resetting user-selected streams when playing without menus.
  + Fix stack overflow when using Java9+ with debugger connection.
  + Fix polygon-based BD-J graphics primitives.
  + Fix loading libmmbd in Windows 64-bit.
  + Fix loading classes with Windows Java 8.
  + Fix build with Java 1.6.
  + Fix pkg-config Libs.private.
- Update to version 1.1.0:
  + Add initial support for OpenJDK 11.
  + Add initial support for UHD disc BD-J menus.
  + Add support for compiling .jar file with Java 9+ compiler.
  + Move AWT classes to separate .jar file.
  + Update libudfread submodule repository URL.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Improve BD-J compability.
  + Fix playback of some broken BD-J discs.
  + Fix playback of discs without normal titles (only TopMenu /
    FirstPlay title).
- Remove unused dependencies from pkgconfig(libbluray)
  Our pkg is dynamically linked, so Libs.private is not needed
  Nothing in the exported header files needs paths from
  Requires.private
  * libbluray-pkgconfig.patch
- Refresh libbluray-java9.patch
- Drop libbluray-jvm_dir.patch
- Enable build against java-devel &gt;= 10.</changelog>
  <changelog author="pgajdos@suse.com" date="1652356800">- fix build for both 15sp3 and 15sp4 [bsc#1199463]
- added patches
  implement the new java.io.FileSystem.isInvalid method that entered all
  supported java versions with April 2022 CPU (taken from Factory)
  + libbluray-April2022CPU.patch</changelog>
</package>
<package pkgid="88d52180266695ea2e44711b6ee520381b7f9513693ebcf8418e1ae922f20734" name="libbluray-devel" arch="s390x">
  <version epoch="0" ver="1.3.0" rel="150300.10.7.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1432296000">- Update to version 0.8.1:
  + Notify application when UO mask changes.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix crash after bd_open(NULL).
  + Fix compability problem with libbdplus.
  + Fix memory leak in UDF filesystem parser.
  + Fix crash in freetype.</changelog>
  <changelog author="olaf@aepfle.de" date="1439208000">- Fix build in SLE_11</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1444046400">- Update to version 0.9.0:
  + Add functions to read files from VFS.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix Xlet-initiated font caching.
  + Fix return value when setting BLURAY_PLAYER_SETTING_DECODE_PG.
  + Fix build with C++ compiler</changelog>
  <changelog author="idonmez@suse.com" date="1446638400">- Update to version 0.9.1
  + Improved BD-J security.
  + Improved error resilience.
  + Improved seeking (avoid skipping PAT/PMT/PCR).
  + Fix UO mask check when bd_play_title() is used for Top Menu.
  + Fix re-starting of title bound Xlets when title changes.
  + Fix loading classes with invalid debug info.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1449144000">- Update to version 0.9.2:
  + Add primary audio stream to bd_select_stream().
  + Improve error resilience.
  + Fix Java 8 compability issues.
  + Fix Android build.
  + Fix SecurityException in AWTAutoShutdown.
  + Fix BD-J check when install path in Windows contains
    non-ASCII chars.
  + Fix jvm.dll loading in Windows ($JAVA_HOME/bin should be in
    dll load path).
  + Fix class translating in recent Java 8 versions.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1463486400">- Update to version 0.9.3:
  + Add bd_open_files(). This function deprecates old global file
    system hooks.
  + Add flag for on-disc menu support to DISC_INFO.
  + Add configure argument to disable building of JAR file.
  + Add missing player settings enums.
  + Update linux Java search path list and preferred JVM.
  + Enable UDF support by default.
  + Split developer tools from examples.
  + Improve BDJ_EVENT_CHAPTER triggering.
  + Improve main title detection.
  + Improve error resilience.
  + Improve BD-J compability.
  + Improve detecting of working aacs implementation.
  + Improve libmmbd support.
  + Fix BD-J media player stop().
  + Fix restoring playback rate with some BD-J discs.
  + Fix restoring suspended playback time position.
  + Fix current chapter lookup.
  + Fix lost key focus with multi-HScene discs.
  + Fix playback of discs without Top Menu title.
  + Fix caching of some BD-J files from UDF filesystem.
  + Fix stopping playback from HDMV menus.
  + Fix possible errors in win32 .iso image reading.
  + Fix undefined values in DISC_INFO.
  + Fix memory leaks.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="tchvatal@suse.com" date="1463659200">- Fix download url to not fail on network error</changelog>
  <changelog author="tchvatal@suse.com" date="1471348800">- Drop libbluray-autotools.patch as it has no real benefit and if
  something should be upstreamed</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486036800">- add patch to expose clip_id (as applied by Debian), which is
  necessary to build packages that depend on it (such as Handbrake)
  * A02-expose-clip_id.patch</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486900800">- drop patch A02-expopse-clip_id.patch as Handbrake seems to be the only
  package that needs it, to avoid binary runtime incompatibilities with
  libbluray packages that would stem from other repositories</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Rename %soname to %sover to better reflect its use.
  Fix RPM groups.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1488542400">- Update to version 1.0.0:
  + Add support for Java VM (BD-J) on MacOS.
  + Add clip_id to BLURAY_CLIP_INFO.
  + Add a suitable JVM path for Fedora/RHEL and clones.
  + Add support for AVCHD 8.3 filenames.
  + Add player setting for disabling persistent storage.
  + Add bd_set_rate().
  + Add playback time position to BD_EVENT_SEEK.
  + Add BD_VK_ROOT_MENU handling.
  + Add support for heavily fragmented 3D .m2ts files.
  + Improve Win32 dll loading security.
  + Improve playback resume position accuracy.
  + Improve error resilience and stability.
  + Fix using libmmbd with unmounted discs.
  + Fix leaks.
  + Delay BD-J overlay opening until something visible has been
    drawn.
  + Close BD-J overlay when window is not visible.
  + Use temporary storage when cache or persistent root location is
    unknown.
- Fixed patch libbluray-jvm_dir.patch.
- Changed soname version to 2.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 1.0.1:
  + Add possibility to check whether BD-J is functional without
    opening a disc.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Fix Windows dll loading.
  + Fix JAVA_HOME environment variable handling in Windows.
  + Fix build issues when CPPFLAGS is given in make command line.
  + Fix MSVC build issues.
  + Remove --disable-bdjava and --disable-udf configure options.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505044800">- BuildConflict with java-devel &gt;= 1.9. Java 8 is the last to
  support source_version 1.5.</changelog>
  <changelog author="fstrba@suse.com" date="1509364800">- Added patch:
  * libbluray-java9.patch
    + Fix build with jdk9
    + Due to incompatible changes in jdk9, the same code cannot be
    built with jdk9 and jdk &lt;= 1.8
    + Only apply on systems that hava jdk9</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512475200">- Update to version 1.0.2:
  + Add initial support for UHD BluRay discs (without BD-J menus).
  + Detect JRE (from the Java Applet plugin) on MacOS.
  + Improve error resilience and stability.
  + Improve libmmbd support.
  + Fix static build dependencies in pkgconfig file.
  + Fix creation of cache (sub-)directories on windows platforms.
  + Fix BD-J temporary storage when persistent storage is disabled.
  + Fix leaks.
- At least java-devel &gt;= 1.8 ist required for build.</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher, since some removal of
  deprecated SecurityManager functions makes BD-J not buildable
  with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1513684801">- Modified patch:
  * libbluray-java9.patch
    + Some change in hunks integrating upstream fixes that were
    partially different from ours.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637841600">- Update to 1.3.0:
  + Add bd_event_name().
  + Add return value to bd_refcnt_inc().
  + Add cache for parsed clpi file data.
  + Add player setting for JRE location (JAVA_HOME).
  + Improve FreeBSD BD-J support.
  + Improve portability.
  + Improve JVM and .jar file probing.
  + Fix leak.
- Update to 1.2.1:
  + Add initial support for .fmts files.
  + Improve missing/broken playlist handling.
  + Improve UHD metadata support.
  + Improve BD-J compability.
  + Improve error resilience and stability.
  + Fix long delay in "Evangelion, You are (not) alone" menu.
  + Fix JVM bootstrap issues with some Java 9 versions.
  + Fix sign extended bytes when reading single bytes in BDJ.
  + Fix creating organization and disc specific BD-J BUDA
    directories.
  + Use external libudfread when available.
  + Rename list_titles to bd_list_titles and add it to installed
    programs.
- Update to version 1.2.0:
  + Add functions to list and read BD-ROM files.
  + Add support for separate key pressed / typed / released user
    input events.
  + Add support for AWT mouse events (BD-J).
  + Fix build with OpenJDK 12 / 13.
- Update to version 1.1.2:
  + Add libxml version to pkg-config Requires.private.
  + Improve support for NetBSD operating system.
  + Improve BD-J compability.
  + Improve Java 8+ compability.
  + Fix main playlist caching in Windows.
  + Fix mark triggering when multiple marks are passed during
    single read().
  + Fix seek bar pop-up at chapter boundary with some discs.
  + Fix reading resources indirectly from mounted .jar file.
- Update to version 1.1.1:
  + Enable playback without menus when index.bdmv is missing.
  + Improve error resilience and stability.
  + Improve BD-J compability.
  + Fix loading libraries on MacOS / hardened runtime.
  + Fix resetting user-selected streams when playing without menus.
  + Fix stack overflow when using Java9+ with debugger connection.
  + Fix polygon-based BD-J graphics primitives.
  + Fix loading libmmbd in Windows 64-bit.
  + Fix loading classes with Windows Java 8.
  + Fix build with Java 1.6.
  + Fix pkg-config Libs.private.
- Update to version 1.1.0:
  + Add initial support for OpenJDK 11.
  + Add initial support for UHD disc BD-J menus.
  + Add support for compiling .jar file with Java 9+ compiler.
  + Move AWT classes to separate .jar file.
  + Update libudfread submodule repository URL.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Improve BD-J compability.
  + Fix playback of some broken BD-J discs.
  + Fix playback of discs without normal titles (only TopMenu /
    FirstPlay title).
- Remove unused dependencies from pkgconfig(libbluray)
  Our pkg is dynamically linked, so Libs.private is not needed
  Nothing in the exported header files needs paths from
  Requires.private
  * libbluray-pkgconfig.patch
- Refresh libbluray-java9.patch
- Drop libbluray-jvm_dir.patch
- Enable build against java-devel &gt;= 10.</changelog>
  <changelog author="pgajdos@suse.com" date="1652356800">- fix build for both 15sp3 and 15sp4 [bsc#1199463]
- added patches
  implement the new java.io.FileSystem.isInvalid method that entered all
  supported java versions with April 2022 CPU (taken from Factory)
  + libbluray-April2022CPU.patch</changelog>
</package>
<package pkgid="a15cc6f6f9aae3849ad6be4321e09ab9f5281a336193e8f3bd6927042c9590a0" name="libbluray-devel" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="150300.10.7.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1432296000">- Update to version 0.8.1:
  + Notify application when UO mask changes.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix crash after bd_open(NULL).
  + Fix compability problem with libbdplus.
  + Fix memory leak in UDF filesystem parser.
  + Fix crash in freetype.</changelog>
  <changelog author="olaf@aepfle.de" date="1439208000">- Fix build in SLE_11</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1444046400">- Update to version 0.9.0:
  + Add functions to read files from VFS.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix Xlet-initiated font caching.
  + Fix return value when setting BLURAY_PLAYER_SETTING_DECODE_PG.
  + Fix build with C++ compiler</changelog>
  <changelog author="idonmez@suse.com" date="1446638400">- Update to version 0.9.1
  + Improved BD-J security.
  + Improved error resilience.
  + Improved seeking (avoid skipping PAT/PMT/PCR).
  + Fix UO mask check when bd_play_title() is used for Top Menu.
  + Fix re-starting of title bound Xlets when title changes.
  + Fix loading classes with invalid debug info.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1449144000">- Update to version 0.9.2:
  + Add primary audio stream to bd_select_stream().
  + Improve error resilience.
  + Fix Java 8 compability issues.
  + Fix Android build.
  + Fix SecurityException in AWTAutoShutdown.
  + Fix BD-J check when install path in Windows contains
    non-ASCII chars.
  + Fix jvm.dll loading in Windows ($JAVA_HOME/bin should be in
    dll load path).
  + Fix class translating in recent Java 8 versions.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1463486400">- Update to version 0.9.3:
  + Add bd_open_files(). This function deprecates old global file
    system hooks.
  + Add flag for on-disc menu support to DISC_INFO.
  + Add configure argument to disable building of JAR file.
  + Add missing player settings enums.
  + Update linux Java search path list and preferred JVM.
  + Enable UDF support by default.
  + Split developer tools from examples.
  + Improve BDJ_EVENT_CHAPTER triggering.
  + Improve main title detection.
  + Improve error resilience.
  + Improve BD-J compability.
  + Improve detecting of working aacs implementation.
  + Improve libmmbd support.
  + Fix BD-J media player stop().
  + Fix restoring playback rate with some BD-J discs.
  + Fix restoring suspended playback time position.
  + Fix current chapter lookup.
  + Fix lost key focus with multi-HScene discs.
  + Fix playback of discs without Top Menu title.
  + Fix caching of some BD-J files from UDF filesystem.
  + Fix stopping playback from HDMV menus.
  + Fix possible errors in win32 .iso image reading.
  + Fix undefined values in DISC_INFO.
  + Fix memory leaks.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="tchvatal@suse.com" date="1463659200">- Fix download url to not fail on network error</changelog>
  <changelog author="tchvatal@suse.com" date="1471348800">- Drop libbluray-autotools.patch as it has no real benefit and if
  something should be upstreamed</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486036800">- add patch to expose clip_id (as applied by Debian), which is
  necessary to build packages that depend on it (such as Handbrake)
  * A02-expose-clip_id.patch</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486900800">- drop patch A02-expopse-clip_id.patch as Handbrake seems to be the only
  package that needs it, to avoid binary runtime incompatibilities with
  libbluray packages that would stem from other repositories</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Rename %soname to %sover to better reflect its use.
  Fix RPM groups.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1488542400">- Update to version 1.0.0:
  + Add support for Java VM (BD-J) on MacOS.
  + Add clip_id to BLURAY_CLIP_INFO.
  + Add a suitable JVM path for Fedora/RHEL and clones.
  + Add support for AVCHD 8.3 filenames.
  + Add player setting for disabling persistent storage.
  + Add bd_set_rate().
  + Add playback time position to BD_EVENT_SEEK.
  + Add BD_VK_ROOT_MENU handling.
  + Add support for heavily fragmented 3D .m2ts files.
  + Improve Win32 dll loading security.
  + Improve playback resume position accuracy.
  + Improve error resilience and stability.
  + Fix using libmmbd with unmounted discs.
  + Fix leaks.
  + Delay BD-J overlay opening until something visible has been
    drawn.
  + Close BD-J overlay when window is not visible.
  + Use temporary storage when cache or persistent root location is
    unknown.
- Fixed patch libbluray-jvm_dir.patch.
- Changed soname version to 2.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 1.0.1:
  + Add possibility to check whether BD-J is functional without
    opening a disc.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Fix Windows dll loading.
  + Fix JAVA_HOME environment variable handling in Windows.
  + Fix build issues when CPPFLAGS is given in make command line.
  + Fix MSVC build issues.
  + Remove --disable-bdjava and --disable-udf configure options.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505044800">- BuildConflict with java-devel &gt;= 1.9. Java 8 is the last to
  support source_version 1.5.</changelog>
  <changelog author="fstrba@suse.com" date="1509364800">- Added patch:
  * libbluray-java9.patch
    + Fix build with jdk9
    + Due to incompatible changes in jdk9, the same code cannot be
    built with jdk9 and jdk &lt;= 1.8
    + Only apply on systems that hava jdk9</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512475200">- Update to version 1.0.2:
  + Add initial support for UHD BluRay discs (without BD-J menus).
  + Detect JRE (from the Java Applet plugin) on MacOS.
  + Improve error resilience and stability.
  + Improve libmmbd support.
  + Fix static build dependencies in pkgconfig file.
  + Fix creation of cache (sub-)directories on windows platforms.
  + Fix BD-J temporary storage when persistent storage is disabled.
  + Fix leaks.
- At least java-devel &gt;= 1.8 ist required for build.</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher, since some removal of
  deprecated SecurityManager functions makes BD-J not buildable
  with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1513684801">- Modified patch:
  * libbluray-java9.patch
    + Some change in hunks integrating upstream fixes that were
    partially different from ours.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637841600">- Update to 1.3.0:
  + Add bd_event_name().
  + Add return value to bd_refcnt_inc().
  + Add cache for parsed clpi file data.
  + Add player setting for JRE location (JAVA_HOME).
  + Improve FreeBSD BD-J support.
  + Improve portability.
  + Improve JVM and .jar file probing.
  + Fix leak.
- Update to 1.2.1:
  + Add initial support for .fmts files.
  + Improve missing/broken playlist handling.
  + Improve UHD metadata support.
  + Improve BD-J compability.
  + Improve error resilience and stability.
  + Fix long delay in "Evangelion, You are (not) alone" menu.
  + Fix JVM bootstrap issues with some Java 9 versions.
  + Fix sign extended bytes when reading single bytes in BDJ.
  + Fix creating organization and disc specific BD-J BUDA
    directories.
  + Use external libudfread when available.
  + Rename list_titles to bd_list_titles and add it to installed
    programs.
- Update to version 1.2.0:
  + Add functions to list and read BD-ROM files.
  + Add support for separate key pressed / typed / released user
    input events.
  + Add support for AWT mouse events (BD-J).
  + Fix build with OpenJDK 12 / 13.
- Update to version 1.1.2:
  + Add libxml version to pkg-config Requires.private.
  + Improve support for NetBSD operating system.
  + Improve BD-J compability.
  + Improve Java 8+ compability.
  + Fix main playlist caching in Windows.
  + Fix mark triggering when multiple marks are passed during
    single read().
  + Fix seek bar pop-up at chapter boundary with some discs.
  + Fix reading resources indirectly from mounted .jar file.
- Update to version 1.1.1:
  + Enable playback without menus when index.bdmv is missing.
  + Improve error resilience and stability.
  + Improve BD-J compability.
  + Fix loading libraries on MacOS / hardened runtime.
  + Fix resetting user-selected streams when playing without menus.
  + Fix stack overflow when using Java9+ with debugger connection.
  + Fix polygon-based BD-J graphics primitives.
  + Fix loading libmmbd in Windows 64-bit.
  + Fix loading classes with Windows Java 8.
  + Fix build with Java 1.6.
  + Fix pkg-config Libs.private.
- Update to version 1.1.0:
  + Add initial support for OpenJDK 11.
  + Add initial support for UHD disc BD-J menus.
  + Add support for compiling .jar file with Java 9+ compiler.
  + Move AWT classes to separate .jar file.
  + Update libudfread submodule repository URL.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Improve BD-J compability.
  + Fix playback of some broken BD-J discs.
  + Fix playback of discs without normal titles (only TopMenu /
    FirstPlay title).
- Remove unused dependencies from pkgconfig(libbluray)
  Our pkg is dynamically linked, so Libs.private is not needed
  Nothing in the exported header files needs paths from
  Requires.private
  * libbluray-pkgconfig.patch
- Refresh libbluray-java9.patch
- Drop libbluray-jvm_dir.patch
- Enable build against java-devel &gt;= 10.</changelog>
  <changelog author="pgajdos@suse.com" date="1652356800">- fix build for both 15sp3 and 15sp4 [bsc#1199463]
- added patches
  implement the new java.io.FileSystem.isInvalid method that entered all
  supported java versions with April 2022 CPU (taken from Factory)
  + libbluray-April2022CPU.patch</changelog>
</package>
<package pkgid="1c5f20215ccf9121b2adcea72150b9e7d562e0d0ae7b89bc5439a7a1e6b7d235" name="libbluray-tools" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="150000.4.2.1"/>
  <changelog author="tchvatal@suse.com" date="1425643200">- Put the configure args each on its own line</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1430395200">- Update to version 0.8.0:
  + Add security checks to BD-J.
  + Add support for UDF image files and unmounted discs.
  + Add UDF volume identifier to DISC_INFO.
  + Add bd_init(), bd_open_disc() and bd_open_stream().
  + Add /usr/share/libbluray/lib/ to .jar file search paths.
  + Add BD_EVENT_PLAYLIST_STOP (playlist playback is interrupted).
  + Accept directory name (without .jar file name) in LIBBLURAY_CP.
  + Improved error resilence.
  + Improve BD-J compability.
  + Fix Java 8u40 compability.
  + Fix infinite loop with some broken HDMV menus.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.
- Build with UDF support.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1432296000">- Update to version 0.8.1:
  + Notify application when UO mask changes.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix crash after bd_open(NULL).
  + Fix compability problem with libbdplus.
  + Fix memory leak in UDF filesystem parser.
  + Fix crash in freetype.</changelog>
  <changelog author="olaf@aepfle.de" date="1439208000">- Fix build in SLE_11</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1444046400">- Update to version 0.9.0:
  + Add functions to read files from VFS.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix Xlet-initiated font caching.
  + Fix return value when setting BLURAY_PLAYER_SETTING_DECODE_PG.
  + Fix build with C++ compiler</changelog>
  <changelog author="idonmez@suse.com" date="1446638400">- Update to version 0.9.1
  + Improved BD-J security.
  + Improved error resilience.
  + Improved seeking (avoid skipping PAT/PMT/PCR).
  + Fix UO mask check when bd_play_title() is used for Top Menu.
  + Fix re-starting of title bound Xlets when title changes.
  + Fix loading classes with invalid debug info.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1449144000">- Update to version 0.9.2:
  + Add primary audio stream to bd_select_stream().
  + Improve error resilience.
  + Fix Java 8 compability issues.
  + Fix Android build.
  + Fix SecurityException in AWTAutoShutdown.
  + Fix BD-J check when install path in Windows contains
    non-ASCII chars.
  + Fix jvm.dll loading in Windows ($JAVA_HOME/bin should be in
    dll load path).
  + Fix class translating in recent Java 8 versions.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1463486400">- Update to version 0.9.3:
  + Add bd_open_files(). This function deprecates old global file
    system hooks.
  + Add flag for on-disc menu support to DISC_INFO.
  + Add configure argument to disable building of JAR file.
  + Add missing player settings enums.
  + Update linux Java search path list and preferred JVM.
  + Enable UDF support by default.
  + Split developer tools from examples.
  + Improve BDJ_EVENT_CHAPTER triggering.
  + Improve main title detection.
  + Improve error resilience.
  + Improve BD-J compability.
  + Improve detecting of working aacs implementation.
  + Improve libmmbd support.
  + Fix BD-J media player stop().
  + Fix restoring playback rate with some BD-J discs.
  + Fix restoring suspended playback time position.
  + Fix current chapter lookup.
  + Fix lost key focus with multi-HScene discs.
  + Fix playback of discs without Top Menu title.
  + Fix caching of some BD-J files from UDF filesystem.
  + Fix stopping playback from HDMV menus.
  + Fix possible errors in win32 .iso image reading.
  + Fix undefined values in DISC_INFO.
  + Fix memory leaks.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="tchvatal@suse.com" date="1463659200">- Fix download url to not fail on network error</changelog>
  <changelog author="tchvatal@suse.com" date="1471348800">- Drop libbluray-autotools.patch as it has no real benefit and if
  something should be upstreamed</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486036800">- add patch to expose clip_id (as applied by Debian), which is
  necessary to build packages that depend on it (such as Handbrake)
  * A02-expose-clip_id.patch</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486900800">- drop patch A02-expopse-clip_id.patch as Handbrake seems to be the only
  package that needs it, to avoid binary runtime incompatibilities with
  libbluray packages that would stem from other repositories</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Rename %soname to %sover to better reflect its use.
  Fix RPM groups.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1488542400">- Update to version 1.0.0:
  + Add support for Java VM (BD-J) on MacOS.
  + Add clip_id to BLURAY_CLIP_INFO.
  + Add a suitable JVM path for Fedora/RHEL and clones.
  + Add support for AVCHD 8.3 filenames.
  + Add player setting for disabling persistent storage.
  + Add bd_set_rate().
  + Add playback time position to BD_EVENT_SEEK.
  + Add BD_VK_ROOT_MENU handling.
  + Add support for heavily fragmented 3D .m2ts files.
  + Improve Win32 dll loading security.
  + Improve playback resume position accuracy.
  + Improve error resilience and stability.
  + Fix using libmmbd with unmounted discs.
  + Fix leaks.
  + Delay BD-J overlay opening until something visible has been
    drawn.
  + Close BD-J overlay when window is not visible.
  + Use temporary storage when cache or persistent root location is
    unknown.
- Fixed patch libbluray-jvm_dir.patch.
- Changed soname version to 2.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 1.0.1:
  + Add possibility to check whether BD-J is functional without
    opening a disc.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Fix Windows dll loading.
  + Fix JAVA_HOME environment variable handling in Windows.
  + Fix build issues when CPPFLAGS is given in make command line.
  + Fix MSVC build issues.
  + Remove --disable-bdjava and --disable-udf configure options.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505044800">- BuildConflict with java-devel &gt;= 1.9. Java 8 is the last to
  support source_version 1.5.</changelog>
  <changelog author="fstrba@suse.com" date="1509364800">- Added patch:
  * libbluray-java9.patch
    + Fix build with jdk9
    + Due to incompatible changes in jdk9, the same code cannot be
    built with jdk9 and jdk &lt;= 1.8
    + Only apply on systems that hava jdk9</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512475200">- Update to version 1.0.2:
  + Add initial support for UHD BluRay discs (without BD-J menus).
  + Detect JRE (from the Java Applet plugin) on MacOS.
  + Improve error resilience and stability.
  + Improve libmmbd support.
  + Fix static build dependencies in pkgconfig file.
  + Fix creation of cache (sub-)directories on windows platforms.
  + Fix BD-J temporary storage when persistent storage is disabled.
  + Fix leaks.
- At least java-devel &gt;= 1.8 ist required for build.</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher, since some removal of
  deprecated SecurityManager functions makes BD-J not buildable
  with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1513684801">- Modified patch:
  * libbluray-java9.patch
    + Some change in hunks integrating upstream fixes that were
    partially different from ours.</changelog>
</package>
<package pkgid="1d89e2629a1e30dfb94c95e17402f7a2a3f7c7ebe6ed1d8d83f489de31fc41ba" name="libbluray-tools" arch="ppc64le">
  <version epoch="0" ver="1.0.2" rel="150000.4.2.1"/>
  <changelog author="tchvatal@suse.com" date="1425643200">- Put the configure args each on its own line</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1430395200">- Update to version 0.8.0:
  + Add security checks to BD-J.
  + Add support for UDF image files and unmounted discs.
  + Add UDF volume identifier to DISC_INFO.
  + Add bd_init(), bd_open_disc() and bd_open_stream().
  + Add /usr/share/libbluray/lib/ to .jar file search paths.
  + Add BD_EVENT_PLAYLIST_STOP (playlist playback is interrupted).
  + Accept directory name (without .jar file name) in LIBBLURAY_CP.
  + Improved error resilence.
  + Improve BD-J compability.
  + Fix Java 8u40 compability.
  + Fix infinite loop with some broken HDMV menus.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.
- Build with UDF support.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1432296000">- Update to version 0.8.1:
  + Notify application when UO mask changes.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix crash after bd_open(NULL).
  + Fix compability problem with libbdplus.
  + Fix memory leak in UDF filesystem parser.
  + Fix crash in freetype.</changelog>
  <changelog author="olaf@aepfle.de" date="1439208000">- Fix build in SLE_11</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1444046400">- Update to version 0.9.0:
  + Add functions to read files from VFS.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix Xlet-initiated font caching.
  + Fix return value when setting BLURAY_PLAYER_SETTING_DECODE_PG.
  + Fix build with C++ compiler</changelog>
  <changelog author="idonmez@suse.com" date="1446638400">- Update to version 0.9.1
  + Improved BD-J security.
  + Improved error resilience.
  + Improved seeking (avoid skipping PAT/PMT/PCR).
  + Fix UO mask check when bd_play_title() is used for Top Menu.
  + Fix re-starting of title bound Xlets when title changes.
  + Fix loading classes with invalid debug info.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1449144000">- Update to version 0.9.2:
  + Add primary audio stream to bd_select_stream().
  + Improve error resilience.
  + Fix Java 8 compability issues.
  + Fix Android build.
  + Fix SecurityException in AWTAutoShutdown.
  + Fix BD-J check when install path in Windows contains
    non-ASCII chars.
  + Fix jvm.dll loading in Windows ($JAVA_HOME/bin should be in
    dll load path).
  + Fix class translating in recent Java 8 versions.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1463486400">- Update to version 0.9.3:
  + Add bd_open_files(). This function deprecates old global file
    system hooks.
  + Add flag for on-disc menu support to DISC_INFO.
  + Add configure argument to disable building of JAR file.
  + Add missing player settings enums.
  + Update linux Java search path list and preferred JVM.
  + Enable UDF support by default.
  + Split developer tools from examples.
  + Improve BDJ_EVENT_CHAPTER triggering.
  + Improve main title detection.
  + Improve error resilience.
  + Improve BD-J compability.
  + Improve detecting of working aacs implementation.
  + Improve libmmbd support.
  + Fix BD-J media player stop().
  + Fix restoring playback rate with some BD-J discs.
  + Fix restoring suspended playback time position.
  + Fix current chapter lookup.
  + Fix lost key focus with multi-HScene discs.
  + Fix playback of discs without Top Menu title.
  + Fix caching of some BD-J files from UDF filesystem.
  + Fix stopping playback from HDMV menus.
  + Fix possible errors in win32 .iso image reading.
  + Fix undefined values in DISC_INFO.
  + Fix memory leaks.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="tchvatal@suse.com" date="1463659200">- Fix download url to not fail on network error</changelog>
  <changelog author="tchvatal@suse.com" date="1471348800">- Drop libbluray-autotools.patch as it has no real benefit and if
  something should be upstreamed</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486036800">- add patch to expose clip_id (as applied by Debian), which is
  necessary to build packages that depend on it (such as Handbrake)
  * A02-expose-clip_id.patch</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486900800">- drop patch A02-expopse-clip_id.patch as Handbrake seems to be the only
  package that needs it, to avoid binary runtime incompatibilities with
  libbluray packages that would stem from other repositories</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Rename %soname to %sover to better reflect its use.
  Fix RPM groups.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1488542400">- Update to version 1.0.0:
  + Add support for Java VM (BD-J) on MacOS.
  + Add clip_id to BLURAY_CLIP_INFO.
  + Add a suitable JVM path for Fedora/RHEL and clones.
  + Add support for AVCHD 8.3 filenames.
  + Add player setting for disabling persistent storage.
  + Add bd_set_rate().
  + Add playback time position to BD_EVENT_SEEK.
  + Add BD_VK_ROOT_MENU handling.
  + Add support for heavily fragmented 3D .m2ts files.
  + Improve Win32 dll loading security.
  + Improve playback resume position accuracy.
  + Improve error resilience and stability.
  + Fix using libmmbd with unmounted discs.
  + Fix leaks.
  + Delay BD-J overlay opening until something visible has been
    drawn.
  + Close BD-J overlay when window is not visible.
  + Use temporary storage when cache or persistent root location is
    unknown.
- Fixed patch libbluray-jvm_dir.patch.
- Changed soname version to 2.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 1.0.1:
  + Add possibility to check whether BD-J is functional without
    opening a disc.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Fix Windows dll loading.
  + Fix JAVA_HOME environment variable handling in Windows.
  + Fix build issues when CPPFLAGS is given in make command line.
  + Fix MSVC build issues.
  + Remove --disable-bdjava and --disable-udf configure options.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505044800">- BuildConflict with java-devel &gt;= 1.9. Java 8 is the last to
  support source_version 1.5.</changelog>
  <changelog author="fstrba@suse.com" date="1509364800">- Added patch:
  * libbluray-java9.patch
    + Fix build with jdk9
    + Due to incompatible changes in jdk9, the same code cannot be
    built with jdk9 and jdk &lt;= 1.8
    + Only apply on systems that hava jdk9</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512475200">- Update to version 1.0.2:
  + Add initial support for UHD BluRay discs (without BD-J menus).
  + Detect JRE (from the Java Applet plugin) on MacOS.
  + Improve error resilience and stability.
  + Improve libmmbd support.
  + Fix static build dependencies in pkgconfig file.
  + Fix creation of cache (sub-)directories on windows platforms.
  + Fix BD-J temporary storage when persistent storage is disabled.
  + Fix leaks.
- At least java-devel &gt;= 1.8 ist required for build.</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher, since some removal of
  deprecated SecurityManager functions makes BD-J not buildable
  with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1513684801">- Modified patch:
  * libbluray-java9.patch
    + Some change in hunks integrating upstream fixes that were
    partially different from ours.</changelog>
</package>
<package pkgid="a5c3e9fe7d357e0935a0e1287c390fc0837b3cd619398229ca548ec1a639fcd4" name="libbluray-tools" arch="s390x">
  <version epoch="0" ver="1.0.2" rel="150000.4.2.1"/>
  <changelog author="tchvatal@suse.com" date="1425643200">- Put the configure args each on its own line</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1430395200">- Update to version 0.8.0:
  + Add security checks to BD-J.
  + Add support for UDF image files and unmounted discs.
  + Add UDF volume identifier to DISC_INFO.
  + Add bd_init(), bd_open_disc() and bd_open_stream().
  + Add /usr/share/libbluray/lib/ to .jar file search paths.
  + Add BD_EVENT_PLAYLIST_STOP (playlist playback is interrupted).
  + Accept directory name (without .jar file name) in LIBBLURAY_CP.
  + Improved error resilence.
  + Improve BD-J compability.
  + Fix Java 8u40 compability.
  + Fix infinite loop with some broken HDMV menus.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.
- Build with UDF support.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1432296000">- Update to version 0.8.1:
  + Notify application when UO mask changes.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix crash after bd_open(NULL).
  + Fix compability problem with libbdplus.
  + Fix memory leak in UDF filesystem parser.
  + Fix crash in freetype.</changelog>
  <changelog author="olaf@aepfle.de" date="1439208000">- Fix build in SLE_11</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1444046400">- Update to version 0.9.0:
  + Add functions to read files from VFS.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix Xlet-initiated font caching.
  + Fix return value when setting BLURAY_PLAYER_SETTING_DECODE_PG.
  + Fix build with C++ compiler</changelog>
  <changelog author="idonmez@suse.com" date="1446638400">- Update to version 0.9.1
  + Improved BD-J security.
  + Improved error resilience.
  + Improved seeking (avoid skipping PAT/PMT/PCR).
  + Fix UO mask check when bd_play_title() is used for Top Menu.
  + Fix re-starting of title bound Xlets when title changes.
  + Fix loading classes with invalid debug info.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1449144000">- Update to version 0.9.2:
  + Add primary audio stream to bd_select_stream().
  + Improve error resilience.
  + Fix Java 8 compability issues.
  + Fix Android build.
  + Fix SecurityException in AWTAutoShutdown.
  + Fix BD-J check when install path in Windows contains
    non-ASCII chars.
  + Fix jvm.dll loading in Windows ($JAVA_HOME/bin should be in
    dll load path).
  + Fix class translating in recent Java 8 versions.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1463486400">- Update to version 0.9.3:
  + Add bd_open_files(). This function deprecates old global file
    system hooks.
  + Add flag for on-disc menu support to DISC_INFO.
  + Add configure argument to disable building of JAR file.
  + Add missing player settings enums.
  + Update linux Java search path list and preferred JVM.
  + Enable UDF support by default.
  + Split developer tools from examples.
  + Improve BDJ_EVENT_CHAPTER triggering.
  + Improve main title detection.
  + Improve error resilience.
  + Improve BD-J compability.
  + Improve detecting of working aacs implementation.
  + Improve libmmbd support.
  + Fix BD-J media player stop().
  + Fix restoring playback rate with some BD-J discs.
  + Fix restoring suspended playback time position.
  + Fix current chapter lookup.
  + Fix lost key focus with multi-HScene discs.
  + Fix playback of discs without Top Menu title.
  + Fix caching of some BD-J files from UDF filesystem.
  + Fix stopping playback from HDMV menus.
  + Fix possible errors in win32 .iso image reading.
  + Fix undefined values in DISC_INFO.
  + Fix memory leaks.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="tchvatal@suse.com" date="1463659200">- Fix download url to not fail on network error</changelog>
  <changelog author="tchvatal@suse.com" date="1471348800">- Drop libbluray-autotools.patch as it has no real benefit and if
  something should be upstreamed</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486036800">- add patch to expose clip_id (as applied by Debian), which is
  necessary to build packages that depend on it (such as Handbrake)
  * A02-expose-clip_id.patch</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486900800">- drop patch A02-expopse-clip_id.patch as Handbrake seems to be the only
  package that needs it, to avoid binary runtime incompatibilities with
  libbluray packages that would stem from other repositories</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Rename %soname to %sover to better reflect its use.
  Fix RPM groups.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1488542400">- Update to version 1.0.0:
  + Add support for Java VM (BD-J) on MacOS.
  + Add clip_id to BLURAY_CLIP_INFO.
  + Add a suitable JVM path for Fedora/RHEL and clones.
  + Add support for AVCHD 8.3 filenames.
  + Add player setting for disabling persistent storage.
  + Add bd_set_rate().
  + Add playback time position to BD_EVENT_SEEK.
  + Add BD_VK_ROOT_MENU handling.
  + Add support for heavily fragmented 3D .m2ts files.
  + Improve Win32 dll loading security.
  + Improve playback resume position accuracy.
  + Improve error resilience and stability.
  + Fix using libmmbd with unmounted discs.
  + Fix leaks.
  + Delay BD-J overlay opening until something visible has been
    drawn.
  + Close BD-J overlay when window is not visible.
  + Use temporary storage when cache or persistent root location is
    unknown.
- Fixed patch libbluray-jvm_dir.patch.
- Changed soname version to 2.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 1.0.1:
  + Add possibility to check whether BD-J is functional without
    opening a disc.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Fix Windows dll loading.
  + Fix JAVA_HOME environment variable handling in Windows.
  + Fix build issues when CPPFLAGS is given in make command line.
  + Fix MSVC build issues.
  + Remove --disable-bdjava and --disable-udf configure options.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505044800">- BuildConflict with java-devel &gt;= 1.9. Java 8 is the last to
  support source_version 1.5.</changelog>
  <changelog author="fstrba@suse.com" date="1509364800">- Added patch:
  * libbluray-java9.patch
    + Fix build with jdk9
    + Due to incompatible changes in jdk9, the same code cannot be
    built with jdk9 and jdk &lt;= 1.8
    + Only apply on systems that hava jdk9</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512475200">- Update to version 1.0.2:
  + Add initial support for UHD BluRay discs (without BD-J menus).
  + Detect JRE (from the Java Applet plugin) on MacOS.
  + Improve error resilience and stability.
  + Improve libmmbd support.
  + Fix static build dependencies in pkgconfig file.
  + Fix creation of cache (sub-)directories on windows platforms.
  + Fix BD-J temporary storage when persistent storage is disabled.
  + Fix leaks.
- At least java-devel &gt;= 1.8 ist required for build.</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher, since some removal of
  deprecated SecurityManager functions makes BD-J not buildable
  with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1513684801">- Modified patch:
  * libbluray-java9.patch
    + Some change in hunks integrating upstream fixes that were
    partially different from ours.</changelog>
</package>
<package pkgid="d7b47a17da87bcb1216debc1d10f4b8e559c306ef9981aa2dc912137f5c20f2b" name="libbluray-tools" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="150000.4.2.1"/>
  <changelog author="tchvatal@suse.com" date="1425643200">- Put the configure args each on its own line</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1430395200">- Update to version 0.8.0:
  + Add security checks to BD-J.
  + Add support for UDF image files and unmounted discs.
  + Add UDF volume identifier to DISC_INFO.
  + Add bd_init(), bd_open_disc() and bd_open_stream().
  + Add /usr/share/libbluray/lib/ to .jar file search paths.
  + Add BD_EVENT_PLAYLIST_STOP (playlist playback is interrupted).
  + Accept directory name (without .jar file name) in LIBBLURAY_CP.
  + Improved error resilence.
  + Improve BD-J compability.
  + Fix Java 8u40 compability.
  + Fix infinite loop with some broken HDMV menus.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.
- Build with UDF support.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1432296000">- Update to version 0.8.1:
  + Notify application when UO mask changes.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix crash after bd_open(NULL).
  + Fix compability problem with libbdplus.
  + Fix memory leak in UDF filesystem parser.
  + Fix crash in freetype.</changelog>
  <changelog author="olaf@aepfle.de" date="1439208000">- Fix build in SLE_11</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1444046400">- Update to version 0.9.0:
  + Add functions to read files from VFS.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix Xlet-initiated font caching.
  + Fix return value when setting BLURAY_PLAYER_SETTING_DECODE_PG.
  + Fix build with C++ compiler</changelog>
  <changelog author="idonmez@suse.com" date="1446638400">- Update to version 0.9.1
  + Improved BD-J security.
  + Improved error resilience.
  + Improved seeking (avoid skipping PAT/PMT/PCR).
  + Fix UO mask check when bd_play_title() is used for Top Menu.
  + Fix re-starting of title bound Xlets when title changes.
  + Fix loading classes with invalid debug info.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1449144000">- Update to version 0.9.2:
  + Add primary audio stream to bd_select_stream().
  + Improve error resilience.
  + Fix Java 8 compability issues.
  + Fix Android build.
  + Fix SecurityException in AWTAutoShutdown.
  + Fix BD-J check when install path in Windows contains
    non-ASCII chars.
  + Fix jvm.dll loading in Windows ($JAVA_HOME/bin should be in
    dll load path).
  + Fix class translating in recent Java 8 versions.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1463486400">- Update to version 0.9.3:
  + Add bd_open_files(). This function deprecates old global file
    system hooks.
  + Add flag for on-disc menu support to DISC_INFO.
  + Add configure argument to disable building of JAR file.
  + Add missing player settings enums.
  + Update linux Java search path list and preferred JVM.
  + Enable UDF support by default.
  + Split developer tools from examples.
  + Improve BDJ_EVENT_CHAPTER triggering.
  + Improve main title detection.
  + Improve error resilience.
  + Improve BD-J compability.
  + Improve detecting of working aacs implementation.
  + Improve libmmbd support.
  + Fix BD-J media player stop().
  + Fix restoring playback rate with some BD-J discs.
  + Fix restoring suspended playback time position.
  + Fix current chapter lookup.
  + Fix lost key focus with multi-HScene discs.
  + Fix playback of discs without Top Menu title.
  + Fix caching of some BD-J files from UDF filesystem.
  + Fix stopping playback from HDMV menus.
  + Fix possible errors in win32 .iso image reading.
  + Fix undefined values in DISC_INFO.
  + Fix memory leaks.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="tchvatal@suse.com" date="1463659200">- Fix download url to not fail on network error</changelog>
  <changelog author="tchvatal@suse.com" date="1471348800">- Drop libbluray-autotools.patch as it has no real benefit and if
  something should be upstreamed</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486036800">- add patch to expose clip_id (as applied by Debian), which is
  necessary to build packages that depend on it (such as Handbrake)
  * A02-expose-clip_id.patch</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486900800">- drop patch A02-expopse-clip_id.patch as Handbrake seems to be the only
  package that needs it, to avoid binary runtime incompatibilities with
  libbluray packages that would stem from other repositories</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Rename %soname to %sover to better reflect its use.
  Fix RPM groups.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1488542400">- Update to version 1.0.0:
  + Add support for Java VM (BD-J) on MacOS.
  + Add clip_id to BLURAY_CLIP_INFO.
  + Add a suitable JVM path for Fedora/RHEL and clones.
  + Add support for AVCHD 8.3 filenames.
  + Add player setting for disabling persistent storage.
  + Add bd_set_rate().
  + Add playback time position to BD_EVENT_SEEK.
  + Add BD_VK_ROOT_MENU handling.
  + Add support for heavily fragmented 3D .m2ts files.
  + Improve Win32 dll loading security.
  + Improve playback resume position accuracy.
  + Improve error resilience and stability.
  + Fix using libmmbd with unmounted discs.
  + Fix leaks.
  + Delay BD-J overlay opening until something visible has been
    drawn.
  + Close BD-J overlay when window is not visible.
  + Use temporary storage when cache or persistent root location is
    unknown.
- Fixed patch libbluray-jvm_dir.patch.
- Changed soname version to 2.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 1.0.1:
  + Add possibility to check whether BD-J is functional without
    opening a disc.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Fix Windows dll loading.
  + Fix JAVA_HOME environment variable handling in Windows.
  + Fix build issues when CPPFLAGS is given in make command line.
  + Fix MSVC build issues.
  + Remove --disable-bdjava and --disable-udf configure options.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505044800">- BuildConflict with java-devel &gt;= 1.9. Java 8 is the last to
  support source_version 1.5.</changelog>
  <changelog author="fstrba@suse.com" date="1509364800">- Added patch:
  * libbluray-java9.patch
    + Fix build with jdk9
    + Due to incompatible changes in jdk9, the same code cannot be
    built with jdk9 and jdk &lt;= 1.8
    + Only apply on systems that hava jdk9</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512475200">- Update to version 1.0.2:
  + Add initial support for UHD BluRay discs (without BD-J menus).
  + Detect JRE (from the Java Applet plugin) on MacOS.
  + Improve error resilience and stability.
  + Improve libmmbd support.
  + Fix static build dependencies in pkgconfig file.
  + Fix creation of cache (sub-)directories on windows platforms.
  + Fix BD-J temporary storage when persistent storage is disabled.
  + Fix leaks.
- At least java-devel &gt;= 1.8 ist required for build.</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher, since some removal of
  deprecated SecurityManager functions makes BD-J not buildable
  with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1513684801">- Modified patch:
  * libbluray-java9.patch
    + Some change in hunks integrating upstream fixes that were
    partially different from ours.</changelog>
</package>
<package pkgid="45b5fdbfb6def22cd3ba95e3f8e2363e61b16e359ba56a0698b52f900226a36a" name="libbluray-tools" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="150300.10.7.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1432296000">- Update to version 0.8.1:
  + Notify application when UO mask changes.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix crash after bd_open(NULL).
  + Fix compability problem with libbdplus.
  + Fix memory leak in UDF filesystem parser.
  + Fix crash in freetype.</changelog>
  <changelog author="olaf@aepfle.de" date="1439208000">- Fix build in SLE_11</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1444046400">- Update to version 0.9.0:
  + Add functions to read files from VFS.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix Xlet-initiated font caching.
  + Fix return value when setting BLURAY_PLAYER_SETTING_DECODE_PG.
  + Fix build with C++ compiler</changelog>
  <changelog author="idonmez@suse.com" date="1446638400">- Update to version 0.9.1
  + Improved BD-J security.
  + Improved error resilience.
  + Improved seeking (avoid skipping PAT/PMT/PCR).
  + Fix UO mask check when bd_play_title() is used for Top Menu.
  + Fix re-starting of title bound Xlets when title changes.
  + Fix loading classes with invalid debug info.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1449144000">- Update to version 0.9.2:
  + Add primary audio stream to bd_select_stream().
  + Improve error resilience.
  + Fix Java 8 compability issues.
  + Fix Android build.
  + Fix SecurityException in AWTAutoShutdown.
  + Fix BD-J check when install path in Windows contains
    non-ASCII chars.
  + Fix jvm.dll loading in Windows ($JAVA_HOME/bin should be in
    dll load path).
  + Fix class translating in recent Java 8 versions.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1463486400">- Update to version 0.9.3:
  + Add bd_open_files(). This function deprecates old global file
    system hooks.
  + Add flag for on-disc menu support to DISC_INFO.
  + Add configure argument to disable building of JAR file.
  + Add missing player settings enums.
  + Update linux Java search path list and preferred JVM.
  + Enable UDF support by default.
  + Split developer tools from examples.
  + Improve BDJ_EVENT_CHAPTER triggering.
  + Improve main title detection.
  + Improve error resilience.
  + Improve BD-J compability.
  + Improve detecting of working aacs implementation.
  + Improve libmmbd support.
  + Fix BD-J media player stop().
  + Fix restoring playback rate with some BD-J discs.
  + Fix restoring suspended playback time position.
  + Fix current chapter lookup.
  + Fix lost key focus with multi-HScene discs.
  + Fix playback of discs without Top Menu title.
  + Fix caching of some BD-J files from UDF filesystem.
  + Fix stopping playback from HDMV menus.
  + Fix possible errors in win32 .iso image reading.
  + Fix undefined values in DISC_INFO.
  + Fix memory leaks.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="tchvatal@suse.com" date="1463659200">- Fix download url to not fail on network error</changelog>
  <changelog author="tchvatal@suse.com" date="1471348800">- Drop libbluray-autotools.patch as it has no real benefit and if
  something should be upstreamed</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486036800">- add patch to expose clip_id (as applied by Debian), which is
  necessary to build packages that depend on it (such as Handbrake)
  * A02-expose-clip_id.patch</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486900800">- drop patch A02-expopse-clip_id.patch as Handbrake seems to be the only
  package that needs it, to avoid binary runtime incompatibilities with
  libbluray packages that would stem from other repositories</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Rename %soname to %sover to better reflect its use.
  Fix RPM groups.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1488542400">- Update to version 1.0.0:
  + Add support for Java VM (BD-J) on MacOS.
  + Add clip_id to BLURAY_CLIP_INFO.
  + Add a suitable JVM path for Fedora/RHEL and clones.
  + Add support for AVCHD 8.3 filenames.
  + Add player setting for disabling persistent storage.
  + Add bd_set_rate().
  + Add playback time position to BD_EVENT_SEEK.
  + Add BD_VK_ROOT_MENU handling.
  + Add support for heavily fragmented 3D .m2ts files.
  + Improve Win32 dll loading security.
  + Improve playback resume position accuracy.
  + Improve error resilience and stability.
  + Fix using libmmbd with unmounted discs.
  + Fix leaks.
  + Delay BD-J overlay opening until something visible has been
    drawn.
  + Close BD-J overlay when window is not visible.
  + Use temporary storage when cache or persistent root location is
    unknown.
- Fixed patch libbluray-jvm_dir.patch.
- Changed soname version to 2.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 1.0.1:
  + Add possibility to check whether BD-J is functional without
    opening a disc.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Fix Windows dll loading.
  + Fix JAVA_HOME environment variable handling in Windows.
  + Fix build issues when CPPFLAGS is given in make command line.
  + Fix MSVC build issues.
  + Remove --disable-bdjava and --disable-udf configure options.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505044800">- BuildConflict with java-devel &gt;= 1.9. Java 8 is the last to
  support source_version 1.5.</changelog>
  <changelog author="fstrba@suse.com" date="1509364800">- Added patch:
  * libbluray-java9.patch
    + Fix build with jdk9
    + Due to incompatible changes in jdk9, the same code cannot be
    built with jdk9 and jdk &lt;= 1.8
    + Only apply on systems that hava jdk9</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512475200">- Update to version 1.0.2:
  + Add initial support for UHD BluRay discs (without BD-J menus).
  + Detect JRE (from the Java Applet plugin) on MacOS.
  + Improve error resilience and stability.
  + Improve libmmbd support.
  + Fix static build dependencies in pkgconfig file.
  + Fix creation of cache (sub-)directories on windows platforms.
  + Fix BD-J temporary storage when persistent storage is disabled.
  + Fix leaks.
- At least java-devel &gt;= 1.8 ist required for build.</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher, since some removal of
  deprecated SecurityManager functions makes BD-J not buildable
  with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1513684801">- Modified patch:
  * libbluray-java9.patch
    + Some change in hunks integrating upstream fixes that were
    partially different from ours.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637841600">- Update to 1.3.0:
  + Add bd_event_name().
  + Add return value to bd_refcnt_inc().
  + Add cache for parsed clpi file data.
  + Add player setting for JRE location (JAVA_HOME).
  + Improve FreeBSD BD-J support.
  + Improve portability.
  + Improve JVM and .jar file probing.
  + Fix leak.
- Update to 1.2.1:
  + Add initial support for .fmts files.
  + Improve missing/broken playlist handling.
  + Improve UHD metadata support.
  + Improve BD-J compability.
  + Improve error resilience and stability.
  + Fix long delay in "Evangelion, You are (not) alone" menu.
  + Fix JVM bootstrap issues with some Java 9 versions.
  + Fix sign extended bytes when reading single bytes in BDJ.
  + Fix creating organization and disc specific BD-J BUDA
    directories.
  + Use external libudfread when available.
  + Rename list_titles to bd_list_titles and add it to installed
    programs.
- Update to version 1.2.0:
  + Add functions to list and read BD-ROM files.
  + Add support for separate key pressed / typed / released user
    input events.
  + Add support for AWT mouse events (BD-J).
  + Fix build with OpenJDK 12 / 13.
- Update to version 1.1.2:
  + Add libxml version to pkg-config Requires.private.
  + Improve support for NetBSD operating system.
  + Improve BD-J compability.
  + Improve Java 8+ compability.
  + Fix main playlist caching in Windows.
  + Fix mark triggering when multiple marks are passed during
    single read().
  + Fix seek bar pop-up at chapter boundary with some discs.
  + Fix reading resources indirectly from mounted .jar file.
- Update to version 1.1.1:
  + Enable playback without menus when index.bdmv is missing.
  + Improve error resilience and stability.
  + Improve BD-J compability.
  + Fix loading libraries on MacOS / hardened runtime.
  + Fix resetting user-selected streams when playing without menus.
  + Fix stack overflow when using Java9+ with debugger connection.
  + Fix polygon-based BD-J graphics primitives.
  + Fix loading libmmbd in Windows 64-bit.
  + Fix loading classes with Windows Java 8.
  + Fix build with Java 1.6.
  + Fix pkg-config Libs.private.
- Update to version 1.1.0:
  + Add initial support for OpenJDK 11.
  + Add initial support for UHD disc BD-J menus.
  + Add support for compiling .jar file with Java 9+ compiler.
  + Move AWT classes to separate .jar file.
  + Update libudfread submodule repository URL.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Improve BD-J compability.
  + Fix playback of some broken BD-J discs.
  + Fix playback of discs without normal titles (only TopMenu /
    FirstPlay title).
- Remove unused dependencies from pkgconfig(libbluray)
  Our pkg is dynamically linked, so Libs.private is not needed
  Nothing in the exported header files needs paths from
  Requires.private
  * libbluray-pkgconfig.patch
- Refresh libbluray-java9.patch
- Drop libbluray-jvm_dir.patch
- Enable build against java-devel &gt;= 10.</changelog>
  <changelog author="pgajdos@suse.com" date="1652356800">- fix build for both 15sp3 and 15sp4 [bsc#1199463]
- added patches
  implement the new java.io.FileSystem.isInvalid method that entered all
  supported java versions with April 2022 CPU (taken from Factory)
  + libbluray-April2022CPU.patch</changelog>
</package>
<package pkgid="4772ba3269e097393751134418e9b38e6847481abd3bbde29a7eba125722e1ed" name="libbluray-tools" arch="ppc64le">
  <version epoch="0" ver="1.3.0" rel="150300.10.7.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1432296000">- Update to version 0.8.1:
  + Notify application when UO mask changes.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix crash after bd_open(NULL).
  + Fix compability problem with libbdplus.
  + Fix memory leak in UDF filesystem parser.
  + Fix crash in freetype.</changelog>
  <changelog author="olaf@aepfle.de" date="1439208000">- Fix build in SLE_11</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1444046400">- Update to version 0.9.0:
  + Add functions to read files from VFS.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix Xlet-initiated font caching.
  + Fix return value when setting BLURAY_PLAYER_SETTING_DECODE_PG.
  + Fix build with C++ compiler</changelog>
  <changelog author="idonmez@suse.com" date="1446638400">- Update to version 0.9.1
  + Improved BD-J security.
  + Improved error resilience.
  + Improved seeking (avoid skipping PAT/PMT/PCR).
  + Fix UO mask check when bd_play_title() is used for Top Menu.
  + Fix re-starting of title bound Xlets when title changes.
  + Fix loading classes with invalid debug info.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1449144000">- Update to version 0.9.2:
  + Add primary audio stream to bd_select_stream().
  + Improve error resilience.
  + Fix Java 8 compability issues.
  + Fix Android build.
  + Fix SecurityException in AWTAutoShutdown.
  + Fix BD-J check when install path in Windows contains
    non-ASCII chars.
  + Fix jvm.dll loading in Windows ($JAVA_HOME/bin should be in
    dll load path).
  + Fix class translating in recent Java 8 versions.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1463486400">- Update to version 0.9.3:
  + Add bd_open_files(). This function deprecates old global file
    system hooks.
  + Add flag for on-disc menu support to DISC_INFO.
  + Add configure argument to disable building of JAR file.
  + Add missing player settings enums.
  + Update linux Java search path list and preferred JVM.
  + Enable UDF support by default.
  + Split developer tools from examples.
  + Improve BDJ_EVENT_CHAPTER triggering.
  + Improve main title detection.
  + Improve error resilience.
  + Improve BD-J compability.
  + Improve detecting of working aacs implementation.
  + Improve libmmbd support.
  + Fix BD-J media player stop().
  + Fix restoring playback rate with some BD-J discs.
  + Fix restoring suspended playback time position.
  + Fix current chapter lookup.
  + Fix lost key focus with multi-HScene discs.
  + Fix playback of discs without Top Menu title.
  + Fix caching of some BD-J files from UDF filesystem.
  + Fix stopping playback from HDMV menus.
  + Fix possible errors in win32 .iso image reading.
  + Fix undefined values in DISC_INFO.
  + Fix memory leaks.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="tchvatal@suse.com" date="1463659200">- Fix download url to not fail on network error</changelog>
  <changelog author="tchvatal@suse.com" date="1471348800">- Drop libbluray-autotools.patch as it has no real benefit and if
  something should be upstreamed</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486036800">- add patch to expose clip_id (as applied by Debian), which is
  necessary to build packages that depend on it (such as Handbrake)
  * A02-expose-clip_id.patch</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486900800">- drop patch A02-expopse-clip_id.patch as Handbrake seems to be the only
  package that needs it, to avoid binary runtime incompatibilities with
  libbluray packages that would stem from other repositories</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Rename %soname to %sover to better reflect its use.
  Fix RPM groups.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1488542400">- Update to version 1.0.0:
  + Add support for Java VM (BD-J) on MacOS.
  + Add clip_id to BLURAY_CLIP_INFO.
  + Add a suitable JVM path for Fedora/RHEL and clones.
  + Add support for AVCHD 8.3 filenames.
  + Add player setting for disabling persistent storage.
  + Add bd_set_rate().
  + Add playback time position to BD_EVENT_SEEK.
  + Add BD_VK_ROOT_MENU handling.
  + Add support for heavily fragmented 3D .m2ts files.
  + Improve Win32 dll loading security.
  + Improve playback resume position accuracy.
  + Improve error resilience and stability.
  + Fix using libmmbd with unmounted discs.
  + Fix leaks.
  + Delay BD-J overlay opening until something visible has been
    drawn.
  + Close BD-J overlay when window is not visible.
  + Use temporary storage when cache or persistent root location is
    unknown.
- Fixed patch libbluray-jvm_dir.patch.
- Changed soname version to 2.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 1.0.1:
  + Add possibility to check whether BD-J is functional without
    opening a disc.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Fix Windows dll loading.
  + Fix JAVA_HOME environment variable handling in Windows.
  + Fix build issues when CPPFLAGS is given in make command line.
  + Fix MSVC build issues.
  + Remove --disable-bdjava and --disable-udf configure options.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505044800">- BuildConflict with java-devel &gt;= 1.9. Java 8 is the last to
  support source_version 1.5.</changelog>
  <changelog author="fstrba@suse.com" date="1509364800">- Added patch:
  * libbluray-java9.patch
    + Fix build with jdk9
    + Due to incompatible changes in jdk9, the same code cannot be
    built with jdk9 and jdk &lt;= 1.8
    + Only apply on systems that hava jdk9</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512475200">- Update to version 1.0.2:
  + Add initial support for UHD BluRay discs (without BD-J menus).
  + Detect JRE (from the Java Applet plugin) on MacOS.
  + Improve error resilience and stability.
  + Improve libmmbd support.
  + Fix static build dependencies in pkgconfig file.
  + Fix creation of cache (sub-)directories on windows platforms.
  + Fix BD-J temporary storage when persistent storage is disabled.
  + Fix leaks.
- At least java-devel &gt;= 1.8 ist required for build.</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher, since some removal of
  deprecated SecurityManager functions makes BD-J not buildable
  with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1513684801">- Modified patch:
  * libbluray-java9.patch
    + Some change in hunks integrating upstream fixes that were
    partially different from ours.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637841600">- Update to 1.3.0:
  + Add bd_event_name().
  + Add return value to bd_refcnt_inc().
  + Add cache for parsed clpi file data.
  + Add player setting for JRE location (JAVA_HOME).
  + Improve FreeBSD BD-J support.
  + Improve portability.
  + Improve JVM and .jar file probing.
  + Fix leak.
- Update to 1.2.1:
  + Add initial support for .fmts files.
  + Improve missing/broken playlist handling.
  + Improve UHD metadata support.
  + Improve BD-J compability.
  + Improve error resilience and stability.
  + Fix long delay in "Evangelion, You are (not) alone" menu.
  + Fix JVM bootstrap issues with some Java 9 versions.
  + Fix sign extended bytes when reading single bytes in BDJ.
  + Fix creating organization and disc specific BD-J BUDA
    directories.
  + Use external libudfread when available.
  + Rename list_titles to bd_list_titles and add it to installed
    programs.
- Update to version 1.2.0:
  + Add functions to list and read BD-ROM files.
  + Add support for separate key pressed / typed / released user
    input events.
  + Add support for AWT mouse events (BD-J).
  + Fix build with OpenJDK 12 / 13.
- Update to version 1.1.2:
  + Add libxml version to pkg-config Requires.private.
  + Improve support for NetBSD operating system.
  + Improve BD-J compability.
  + Improve Java 8+ compability.
  + Fix main playlist caching in Windows.
  + Fix mark triggering when multiple marks are passed during
    single read().
  + Fix seek bar pop-up at chapter boundary with some discs.
  + Fix reading resources indirectly from mounted .jar file.
- Update to version 1.1.1:
  + Enable playback without menus when index.bdmv is missing.
  + Improve error resilience and stability.
  + Improve BD-J compability.
  + Fix loading libraries on MacOS / hardened runtime.
  + Fix resetting user-selected streams when playing without menus.
  + Fix stack overflow when using Java9+ with debugger connection.
  + Fix polygon-based BD-J graphics primitives.
  + Fix loading libmmbd in Windows 64-bit.
  + Fix loading classes with Windows Java 8.
  + Fix build with Java 1.6.
  + Fix pkg-config Libs.private.
- Update to version 1.1.0:
  + Add initial support for OpenJDK 11.
  + Add initial support for UHD disc BD-J menus.
  + Add support for compiling .jar file with Java 9+ compiler.
  + Move AWT classes to separate .jar file.
  + Update libudfread submodule repository URL.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Improve BD-J compability.
  + Fix playback of some broken BD-J discs.
  + Fix playback of discs without normal titles (only TopMenu /
    FirstPlay title).
- Remove unused dependencies from pkgconfig(libbluray)
  Our pkg is dynamically linked, so Libs.private is not needed
  Nothing in the exported header files needs paths from
  Requires.private
  * libbluray-pkgconfig.patch
- Refresh libbluray-java9.patch
- Drop libbluray-jvm_dir.patch
- Enable build against java-devel &gt;= 10.</changelog>
  <changelog author="pgajdos@suse.com" date="1652356800">- fix build for both 15sp3 and 15sp4 [bsc#1199463]
- added patches
  implement the new java.io.FileSystem.isInvalid method that entered all
  supported java versions with April 2022 CPU (taken from Factory)
  + libbluray-April2022CPU.patch</changelog>
</package>
<package pkgid="7d76aad077371f04d256c0a3252cdeb8019b889ecae2063daf54d7478b73b27b" name="libbluray-tools" arch="s390x">
  <version epoch="0" ver="1.3.0" rel="150300.10.7.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1432296000">- Update to version 0.8.1:
  + Notify application when UO mask changes.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix crash after bd_open(NULL).
  + Fix compability problem with libbdplus.
  + Fix memory leak in UDF filesystem parser.
  + Fix crash in freetype.</changelog>
  <changelog author="olaf@aepfle.de" date="1439208000">- Fix build in SLE_11</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1444046400">- Update to version 0.9.0:
  + Add functions to read files from VFS.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix Xlet-initiated font caching.
  + Fix return value when setting BLURAY_PLAYER_SETTING_DECODE_PG.
  + Fix build with C++ compiler</changelog>
  <changelog author="idonmez@suse.com" date="1446638400">- Update to version 0.9.1
  + Improved BD-J security.
  + Improved error resilience.
  + Improved seeking (avoid skipping PAT/PMT/PCR).
  + Fix UO mask check when bd_play_title() is used for Top Menu.
  + Fix re-starting of title bound Xlets when title changes.
  + Fix loading classes with invalid debug info.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1449144000">- Update to version 0.9.2:
  + Add primary audio stream to bd_select_stream().
  + Improve error resilience.
  + Fix Java 8 compability issues.
  + Fix Android build.
  + Fix SecurityException in AWTAutoShutdown.
  + Fix BD-J check when install path in Windows contains
    non-ASCII chars.
  + Fix jvm.dll loading in Windows ($JAVA_HOME/bin should be in
    dll load path).
  + Fix class translating in recent Java 8 versions.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1463486400">- Update to version 0.9.3:
  + Add bd_open_files(). This function deprecates old global file
    system hooks.
  + Add flag for on-disc menu support to DISC_INFO.
  + Add configure argument to disable building of JAR file.
  + Add missing player settings enums.
  + Update linux Java search path list and preferred JVM.
  + Enable UDF support by default.
  + Split developer tools from examples.
  + Improve BDJ_EVENT_CHAPTER triggering.
  + Improve main title detection.
  + Improve error resilience.
  + Improve BD-J compability.
  + Improve detecting of working aacs implementation.
  + Improve libmmbd support.
  + Fix BD-J media player stop().
  + Fix restoring playback rate with some BD-J discs.
  + Fix restoring suspended playback time position.
  + Fix current chapter lookup.
  + Fix lost key focus with multi-HScene discs.
  + Fix playback of discs without Top Menu title.
  + Fix caching of some BD-J files from UDF filesystem.
  + Fix stopping playback from HDMV menus.
  + Fix possible errors in win32 .iso image reading.
  + Fix undefined values in DISC_INFO.
  + Fix memory leaks.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="tchvatal@suse.com" date="1463659200">- Fix download url to not fail on network error</changelog>
  <changelog author="tchvatal@suse.com" date="1471348800">- Drop libbluray-autotools.patch as it has no real benefit and if
  something should be upstreamed</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486036800">- add patch to expose clip_id (as applied by Debian), which is
  necessary to build packages that depend on it (such as Handbrake)
  * A02-expose-clip_id.patch</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486900800">- drop patch A02-expopse-clip_id.patch as Handbrake seems to be the only
  package that needs it, to avoid binary runtime incompatibilities with
  libbluray packages that would stem from other repositories</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Rename %soname to %sover to better reflect its use.
  Fix RPM groups.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1488542400">- Update to version 1.0.0:
  + Add support for Java VM (BD-J) on MacOS.
  + Add clip_id to BLURAY_CLIP_INFO.
  + Add a suitable JVM path for Fedora/RHEL and clones.
  + Add support for AVCHD 8.3 filenames.
  + Add player setting for disabling persistent storage.
  + Add bd_set_rate().
  + Add playback time position to BD_EVENT_SEEK.
  + Add BD_VK_ROOT_MENU handling.
  + Add support for heavily fragmented 3D .m2ts files.
  + Improve Win32 dll loading security.
  + Improve playback resume position accuracy.
  + Improve error resilience and stability.
  + Fix using libmmbd with unmounted discs.
  + Fix leaks.
  + Delay BD-J overlay opening until something visible has been
    drawn.
  + Close BD-J overlay when window is not visible.
  + Use temporary storage when cache or persistent root location is
    unknown.
- Fixed patch libbluray-jvm_dir.patch.
- Changed soname version to 2.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 1.0.1:
  + Add possibility to check whether BD-J is functional without
    opening a disc.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Fix Windows dll loading.
  + Fix JAVA_HOME environment variable handling in Windows.
  + Fix build issues when CPPFLAGS is given in make command line.
  + Fix MSVC build issues.
  + Remove --disable-bdjava and --disable-udf configure options.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505044800">- BuildConflict with java-devel &gt;= 1.9. Java 8 is the last to
  support source_version 1.5.</changelog>
  <changelog author="fstrba@suse.com" date="1509364800">- Added patch:
  * libbluray-java9.patch
    + Fix build with jdk9
    + Due to incompatible changes in jdk9, the same code cannot be
    built with jdk9 and jdk &lt;= 1.8
    + Only apply on systems that hava jdk9</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512475200">- Update to version 1.0.2:
  + Add initial support for UHD BluRay discs (without BD-J menus).
  + Detect JRE (from the Java Applet plugin) on MacOS.
  + Improve error resilience and stability.
  + Improve libmmbd support.
  + Fix static build dependencies in pkgconfig file.
  + Fix creation of cache (sub-)directories on windows platforms.
  + Fix BD-J temporary storage when persistent storage is disabled.
  + Fix leaks.
- At least java-devel &gt;= 1.8 ist required for build.</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher, since some removal of
  deprecated SecurityManager functions makes BD-J not buildable
  with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1513684801">- Modified patch:
  * libbluray-java9.patch
    + Some change in hunks integrating upstream fixes that were
    partially different from ours.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637841600">- Update to 1.3.0:
  + Add bd_event_name().
  + Add return value to bd_refcnt_inc().
  + Add cache for parsed clpi file data.
  + Add player setting for JRE location (JAVA_HOME).
  + Improve FreeBSD BD-J support.
  + Improve portability.
  + Improve JVM and .jar file probing.
  + Fix leak.
- Update to 1.2.1:
  + Add initial support for .fmts files.
  + Improve missing/broken playlist handling.
  + Improve UHD metadata support.
  + Improve BD-J compability.
  + Improve error resilience and stability.
  + Fix long delay in "Evangelion, You are (not) alone" menu.
  + Fix JVM bootstrap issues with some Java 9 versions.
  + Fix sign extended bytes when reading single bytes in BDJ.
  + Fix creating organization and disc specific BD-J BUDA
    directories.
  + Use external libudfread when available.
  + Rename list_titles to bd_list_titles and add it to installed
    programs.
- Update to version 1.2.0:
  + Add functions to list and read BD-ROM files.
  + Add support for separate key pressed / typed / released user
    input events.
  + Add support for AWT mouse events (BD-J).
  + Fix build with OpenJDK 12 / 13.
- Update to version 1.1.2:
  + Add libxml version to pkg-config Requires.private.
  + Improve support for NetBSD operating system.
  + Improve BD-J compability.
  + Improve Java 8+ compability.
  + Fix main playlist caching in Windows.
  + Fix mark triggering when multiple marks are passed during
    single read().
  + Fix seek bar pop-up at chapter boundary with some discs.
  + Fix reading resources indirectly from mounted .jar file.
- Update to version 1.1.1:
  + Enable playback without menus when index.bdmv is missing.
  + Improve error resilience and stability.
  + Improve BD-J compability.
  + Fix loading libraries on MacOS / hardened runtime.
  + Fix resetting user-selected streams when playing without menus.
  + Fix stack overflow when using Java9+ with debugger connection.
  + Fix polygon-based BD-J graphics primitives.
  + Fix loading libmmbd in Windows 64-bit.
  + Fix loading classes with Windows Java 8.
  + Fix build with Java 1.6.
  + Fix pkg-config Libs.private.
- Update to version 1.1.0:
  + Add initial support for OpenJDK 11.
  + Add initial support for UHD disc BD-J menus.
  + Add support for compiling .jar file with Java 9+ compiler.
  + Move AWT classes to separate .jar file.
  + Update libudfread submodule repository URL.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Improve BD-J compability.
  + Fix playback of some broken BD-J discs.
  + Fix playback of discs without normal titles (only TopMenu /
    FirstPlay title).
- Remove unused dependencies from pkgconfig(libbluray)
  Our pkg is dynamically linked, so Libs.private is not needed
  Nothing in the exported header files needs paths from
  Requires.private
  * libbluray-pkgconfig.patch
- Refresh libbluray-java9.patch
- Drop libbluray-jvm_dir.patch
- Enable build against java-devel &gt;= 10.</changelog>
  <changelog author="pgajdos@suse.com" date="1652356800">- fix build for both 15sp3 and 15sp4 [bsc#1199463]
- added patches
  implement the new java.io.FileSystem.isInvalid method that entered all
  supported java versions with April 2022 CPU (taken from Factory)
  + libbluray-April2022CPU.patch</changelog>
</package>
<package pkgid="4a4ce76c28d027ea3ee4c286f6e07cad7d8afd93be4898b0381e9a5db5bf51d7" name="libbluray-tools" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="150300.10.7.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1432296000">- Update to version 0.8.1:
  + Notify application when UO mask changes.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix crash after bd_open(NULL).
  + Fix compability problem with libbdplus.
  + Fix memory leak in UDF filesystem parser.
  + Fix crash in freetype.</changelog>
  <changelog author="olaf@aepfle.de" date="1439208000">- Fix build in SLE_11</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1444046400">- Update to version 0.9.0:
  + Add functions to read files from VFS.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix Xlet-initiated font caching.
  + Fix return value when setting BLURAY_PLAYER_SETTING_DECODE_PG.
  + Fix build with C++ compiler</changelog>
  <changelog author="idonmez@suse.com" date="1446638400">- Update to version 0.9.1
  + Improved BD-J security.
  + Improved error resilience.
  + Improved seeking (avoid skipping PAT/PMT/PCR).
  + Fix UO mask check when bd_play_title() is used for Top Menu.
  + Fix re-starting of title bound Xlets when title changes.
  + Fix loading classes with invalid debug info.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1449144000">- Update to version 0.9.2:
  + Add primary audio stream to bd_select_stream().
  + Improve error resilience.
  + Fix Java 8 compability issues.
  + Fix Android build.
  + Fix SecurityException in AWTAutoShutdown.
  + Fix BD-J check when install path in Windows contains
    non-ASCII chars.
  + Fix jvm.dll loading in Windows ($JAVA_HOME/bin should be in
    dll load path).
  + Fix class translating in recent Java 8 versions.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1463486400">- Update to version 0.9.3:
  + Add bd_open_files(). This function deprecates old global file
    system hooks.
  + Add flag for on-disc menu support to DISC_INFO.
  + Add configure argument to disable building of JAR file.
  + Add missing player settings enums.
  + Update linux Java search path list and preferred JVM.
  + Enable UDF support by default.
  + Split developer tools from examples.
  + Improve BDJ_EVENT_CHAPTER triggering.
  + Improve main title detection.
  + Improve error resilience.
  + Improve BD-J compability.
  + Improve detecting of working aacs implementation.
  + Improve libmmbd support.
  + Fix BD-J media player stop().
  + Fix restoring playback rate with some BD-J discs.
  + Fix restoring suspended playback time position.
  + Fix current chapter lookup.
  + Fix lost key focus with multi-HScene discs.
  + Fix playback of discs without Top Menu title.
  + Fix caching of some BD-J files from UDF filesystem.
  + Fix stopping playback from HDMV menus.
  + Fix possible errors in win32 .iso image reading.
  + Fix undefined values in DISC_INFO.
  + Fix memory leaks.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="tchvatal@suse.com" date="1463659200">- Fix download url to not fail on network error</changelog>
  <changelog author="tchvatal@suse.com" date="1471348800">- Drop libbluray-autotools.patch as it has no real benefit and if
  something should be upstreamed</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486036800">- add patch to expose clip_id (as applied by Debian), which is
  necessary to build packages that depend on it (such as Handbrake)
  * A02-expose-clip_id.patch</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486900800">- drop patch A02-expopse-clip_id.patch as Handbrake seems to be the only
  package that needs it, to avoid binary runtime incompatibilities with
  libbluray packages that would stem from other repositories</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Rename %soname to %sover to better reflect its use.
  Fix RPM groups.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1488542400">- Update to version 1.0.0:
  + Add support for Java VM (BD-J) on MacOS.
  + Add clip_id to BLURAY_CLIP_INFO.
  + Add a suitable JVM path for Fedora/RHEL and clones.
  + Add support for AVCHD 8.3 filenames.
  + Add player setting for disabling persistent storage.
  + Add bd_set_rate().
  + Add playback time position to BD_EVENT_SEEK.
  + Add BD_VK_ROOT_MENU handling.
  + Add support for heavily fragmented 3D .m2ts files.
  + Improve Win32 dll loading security.
  + Improve playback resume position accuracy.
  + Improve error resilience and stability.
  + Fix using libmmbd with unmounted discs.
  + Fix leaks.
  + Delay BD-J overlay opening until something visible has been
    drawn.
  + Close BD-J overlay when window is not visible.
  + Use temporary storage when cache or persistent root location is
    unknown.
- Fixed patch libbluray-jvm_dir.patch.
- Changed soname version to 2.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 1.0.1:
  + Add possibility to check whether BD-J is functional without
    opening a disc.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Fix Windows dll loading.
  + Fix JAVA_HOME environment variable handling in Windows.
  + Fix build issues when CPPFLAGS is given in make command line.
  + Fix MSVC build issues.
  + Remove --disable-bdjava and --disable-udf configure options.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505044800">- BuildConflict with java-devel &gt;= 1.9. Java 8 is the last to
  support source_version 1.5.</changelog>
  <changelog author="fstrba@suse.com" date="1509364800">- Added patch:
  * libbluray-java9.patch
    + Fix build with jdk9
    + Due to incompatible changes in jdk9, the same code cannot be
    built with jdk9 and jdk &lt;= 1.8
    + Only apply on systems that hava jdk9</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512475200">- Update to version 1.0.2:
  + Add initial support for UHD BluRay discs (without BD-J menus).
  + Detect JRE (from the Java Applet plugin) on MacOS.
  + Improve error resilience and stability.
  + Improve libmmbd support.
  + Fix static build dependencies in pkgconfig file.
  + Fix creation of cache (sub-)directories on windows platforms.
  + Fix BD-J temporary storage when persistent storage is disabled.
  + Fix leaks.
- At least java-devel &gt;= 1.8 ist required for build.</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher, since some removal of
  deprecated SecurityManager functions makes BD-J not buildable
  with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1513684801">- Modified patch:
  * libbluray-java9.patch
    + Some change in hunks integrating upstream fixes that were
    partially different from ours.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637841600">- Update to 1.3.0:
  + Add bd_event_name().
  + Add return value to bd_refcnt_inc().
  + Add cache for parsed clpi file data.
  + Add player setting for JRE location (JAVA_HOME).
  + Improve FreeBSD BD-J support.
  + Improve portability.
  + Improve JVM and .jar file probing.
  + Fix leak.
- Update to 1.2.1:
  + Add initial support for .fmts files.
  + Improve missing/broken playlist handling.
  + Improve UHD metadata support.
  + Improve BD-J compability.
  + Improve error resilience and stability.
  + Fix long delay in "Evangelion, You are (not) alone" menu.
  + Fix JVM bootstrap issues with some Java 9 versions.
  + Fix sign extended bytes when reading single bytes in BDJ.
  + Fix creating organization and disc specific BD-J BUDA
    directories.
  + Use external libudfread when available.
  + Rename list_titles to bd_list_titles and add it to installed
    programs.
- Update to version 1.2.0:
  + Add functions to list and read BD-ROM files.
  + Add support for separate key pressed / typed / released user
    input events.
  + Add support for AWT mouse events (BD-J).
  + Fix build with OpenJDK 12 / 13.
- Update to version 1.1.2:
  + Add libxml version to pkg-config Requires.private.
  + Improve support for NetBSD operating system.
  + Improve BD-J compability.
  + Improve Java 8+ compability.
  + Fix main playlist caching in Windows.
  + Fix mark triggering when multiple marks are passed during
    single read().
  + Fix seek bar pop-up at chapter boundary with some discs.
  + Fix reading resources indirectly from mounted .jar file.
- Update to version 1.1.1:
  + Enable playback without menus when index.bdmv is missing.
  + Improve error resilience and stability.
  + Improve BD-J compability.
  + Fix loading libraries on MacOS / hardened runtime.
  + Fix resetting user-selected streams when playing without menus.
  + Fix stack overflow when using Java9+ with debugger connection.
  + Fix polygon-based BD-J graphics primitives.
  + Fix loading libmmbd in Windows 64-bit.
  + Fix loading classes with Windows Java 8.
  + Fix build with Java 1.6.
  + Fix pkg-config Libs.private.
- Update to version 1.1.0:
  + Add initial support for OpenJDK 11.
  + Add initial support for UHD disc BD-J menus.
  + Add support for compiling .jar file with Java 9+ compiler.
  + Move AWT classes to separate .jar file.
  + Update libudfread submodule repository URL.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Improve BD-J compability.
  + Fix playback of some broken BD-J discs.
  + Fix playback of discs without normal titles (only TopMenu /
    FirstPlay title).
- Remove unused dependencies from pkgconfig(libbluray)
  Our pkg is dynamically linked, so Libs.private is not needed
  Nothing in the exported header files needs paths from
  Requires.private
  * libbluray-pkgconfig.patch
- Refresh libbluray-java9.patch
- Drop libbluray-jvm_dir.patch
- Enable build against java-devel &gt;= 10.</changelog>
  <changelog author="pgajdos@suse.com" date="1652356800">- fix build for both 15sp3 and 15sp4 [bsc#1199463]
- added patches
  implement the new java.io.FileSystem.isInvalid method that entered all
  supported java versions with April 2022 CPU (taken from Factory)
  + libbluray-April2022CPU.patch</changelog>
</package>
<package pkgid="1df3f9ab37a1472d7b83595315da2135ec76f478fac393d2930ff3a70ccf3520" name="libbluray2" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="150000.4.2.1"/>
  <changelog author="tchvatal@suse.com" date="1425643200">- Put the configure args each on its own line</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1430395200">- Update to version 0.8.0:
  + Add security checks to BD-J.
  + Add support for UDF image files and unmounted discs.
  + Add UDF volume identifier to DISC_INFO.
  + Add bd_init(), bd_open_disc() and bd_open_stream().
  + Add /usr/share/libbluray/lib/ to .jar file search paths.
  + Add BD_EVENT_PLAYLIST_STOP (playlist playback is interrupted).
  + Accept directory name (without .jar file name) in LIBBLURAY_CP.
  + Improved error resilence.
  + Improve BD-J compability.
  + Fix Java 8u40 compability.
  + Fix infinite loop with some broken HDMV menus.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.
- Build with UDF support.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1432296000">- Update to version 0.8.1:
  + Notify application when UO mask changes.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix crash after bd_open(NULL).
  + Fix compability problem with libbdplus.
  + Fix memory leak in UDF filesystem parser.
  + Fix crash in freetype.</changelog>
  <changelog author="olaf@aepfle.de" date="1439208000">- Fix build in SLE_11</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1444046400">- Update to version 0.9.0:
  + Add functions to read files from VFS.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix Xlet-initiated font caching.
  + Fix return value when setting BLURAY_PLAYER_SETTING_DECODE_PG.
  + Fix build with C++ compiler</changelog>
  <changelog author="idonmez@suse.com" date="1446638400">- Update to version 0.9.1
  + Improved BD-J security.
  + Improved error resilience.
  + Improved seeking (avoid skipping PAT/PMT/PCR).
  + Fix UO mask check when bd_play_title() is used for Top Menu.
  + Fix re-starting of title bound Xlets when title changes.
  + Fix loading classes with invalid debug info.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1449144000">- Update to version 0.9.2:
  + Add primary audio stream to bd_select_stream().
  + Improve error resilience.
  + Fix Java 8 compability issues.
  + Fix Android build.
  + Fix SecurityException in AWTAutoShutdown.
  + Fix BD-J check when install path in Windows contains
    non-ASCII chars.
  + Fix jvm.dll loading in Windows ($JAVA_HOME/bin should be in
    dll load path).
  + Fix class translating in recent Java 8 versions.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1463486400">- Update to version 0.9.3:
  + Add bd_open_files(). This function deprecates old global file
    system hooks.
  + Add flag for on-disc menu support to DISC_INFO.
  + Add configure argument to disable building of JAR file.
  + Add missing player settings enums.
  + Update linux Java search path list and preferred JVM.
  + Enable UDF support by default.
  + Split developer tools from examples.
  + Improve BDJ_EVENT_CHAPTER triggering.
  + Improve main title detection.
  + Improve error resilience.
  + Improve BD-J compability.
  + Improve detecting of working aacs implementation.
  + Improve libmmbd support.
  + Fix BD-J media player stop().
  + Fix restoring playback rate with some BD-J discs.
  + Fix restoring suspended playback time position.
  + Fix current chapter lookup.
  + Fix lost key focus with multi-HScene discs.
  + Fix playback of discs without Top Menu title.
  + Fix caching of some BD-J files from UDF filesystem.
  + Fix stopping playback from HDMV menus.
  + Fix possible errors in win32 .iso image reading.
  + Fix undefined values in DISC_INFO.
  + Fix memory leaks.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="tchvatal@suse.com" date="1463659200">- Fix download url to not fail on network error</changelog>
  <changelog author="tchvatal@suse.com" date="1471348800">- Drop libbluray-autotools.patch as it has no real benefit and if
  something should be upstreamed</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486036800">- add patch to expose clip_id (as applied by Debian), which is
  necessary to build packages that depend on it (such as Handbrake)
  * A02-expose-clip_id.patch</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486900800">- drop patch A02-expopse-clip_id.patch as Handbrake seems to be the only
  package that needs it, to avoid binary runtime incompatibilities with
  libbluray packages that would stem from other repositories</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Rename %soname to %sover to better reflect its use.
  Fix RPM groups.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1488542400">- Update to version 1.0.0:
  + Add support for Java VM (BD-J) on MacOS.
  + Add clip_id to BLURAY_CLIP_INFO.
  + Add a suitable JVM path for Fedora/RHEL and clones.
  + Add support for AVCHD 8.3 filenames.
  + Add player setting for disabling persistent storage.
  + Add bd_set_rate().
  + Add playback time position to BD_EVENT_SEEK.
  + Add BD_VK_ROOT_MENU handling.
  + Add support for heavily fragmented 3D .m2ts files.
  + Improve Win32 dll loading security.
  + Improve playback resume position accuracy.
  + Improve error resilience and stability.
  + Fix using libmmbd with unmounted discs.
  + Fix leaks.
  + Delay BD-J overlay opening until something visible has been
    drawn.
  + Close BD-J overlay when window is not visible.
  + Use temporary storage when cache or persistent root location is
    unknown.
- Fixed patch libbluray-jvm_dir.patch.
- Changed soname version to 2.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 1.0.1:
  + Add possibility to check whether BD-J is functional without
    opening a disc.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Fix Windows dll loading.
  + Fix JAVA_HOME environment variable handling in Windows.
  + Fix build issues when CPPFLAGS is given in make command line.
  + Fix MSVC build issues.
  + Remove --disable-bdjava and --disable-udf configure options.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505044800">- BuildConflict with java-devel &gt;= 1.9. Java 8 is the last to
  support source_version 1.5.</changelog>
  <changelog author="fstrba@suse.com" date="1509364800">- Added patch:
  * libbluray-java9.patch
    + Fix build with jdk9
    + Due to incompatible changes in jdk9, the same code cannot be
    built with jdk9 and jdk &lt;= 1.8
    + Only apply on systems that hava jdk9</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512475200">- Update to version 1.0.2:
  + Add initial support for UHD BluRay discs (without BD-J menus).
  + Detect JRE (from the Java Applet plugin) on MacOS.
  + Improve error resilience and stability.
  + Improve libmmbd support.
  + Fix static build dependencies in pkgconfig file.
  + Fix creation of cache (sub-)directories on windows platforms.
  + Fix BD-J temporary storage when persistent storage is disabled.
  + Fix leaks.
- At least java-devel &gt;= 1.8 ist required for build.</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher, since some removal of
  deprecated SecurityManager functions makes BD-J not buildable
  with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1513684801">- Modified patch:
  * libbluray-java9.patch
    + Some change in hunks integrating upstream fixes that were
    partially different from ours.</changelog>
</package>
<package pkgid="f741ba6ebd1eb069628e8e84d1ff28a4b141ffe632ae5ddc4c8533c361d42aae" name="libbluray2" arch="ppc64le">
  <version epoch="0" ver="1.0.2" rel="150000.4.2.1"/>
  <changelog author="tchvatal@suse.com" date="1425643200">- Put the configure args each on its own line</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1430395200">- Update to version 0.8.0:
  + Add security checks to BD-J.
  + Add support for UDF image files and unmounted discs.
  + Add UDF volume identifier to DISC_INFO.
  + Add bd_init(), bd_open_disc() and bd_open_stream().
  + Add /usr/share/libbluray/lib/ to .jar file search paths.
  + Add BD_EVENT_PLAYLIST_STOP (playlist playback is interrupted).
  + Accept directory name (without .jar file name) in LIBBLURAY_CP.
  + Improved error resilence.
  + Improve BD-J compability.
  + Fix Java 8u40 compability.
  + Fix infinite loop with some broken HDMV menus.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.
- Build with UDF support.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1432296000">- Update to version 0.8.1:
  + Notify application when UO mask changes.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix crash after bd_open(NULL).
  + Fix compability problem with libbdplus.
  + Fix memory leak in UDF filesystem parser.
  + Fix crash in freetype.</changelog>
  <changelog author="olaf@aepfle.de" date="1439208000">- Fix build in SLE_11</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1444046400">- Update to version 0.9.0:
  + Add functions to read files from VFS.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix Xlet-initiated font caching.
  + Fix return value when setting BLURAY_PLAYER_SETTING_DECODE_PG.
  + Fix build with C++ compiler</changelog>
  <changelog author="idonmez@suse.com" date="1446638400">- Update to version 0.9.1
  + Improved BD-J security.
  + Improved error resilience.
  + Improved seeking (avoid skipping PAT/PMT/PCR).
  + Fix UO mask check when bd_play_title() is used for Top Menu.
  + Fix re-starting of title bound Xlets when title changes.
  + Fix loading classes with invalid debug info.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1449144000">- Update to version 0.9.2:
  + Add primary audio stream to bd_select_stream().
  + Improve error resilience.
  + Fix Java 8 compability issues.
  + Fix Android build.
  + Fix SecurityException in AWTAutoShutdown.
  + Fix BD-J check when install path in Windows contains
    non-ASCII chars.
  + Fix jvm.dll loading in Windows ($JAVA_HOME/bin should be in
    dll load path).
  + Fix class translating in recent Java 8 versions.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1463486400">- Update to version 0.9.3:
  + Add bd_open_files(). This function deprecates old global file
    system hooks.
  + Add flag for on-disc menu support to DISC_INFO.
  + Add configure argument to disable building of JAR file.
  + Add missing player settings enums.
  + Update linux Java search path list and preferred JVM.
  + Enable UDF support by default.
  + Split developer tools from examples.
  + Improve BDJ_EVENT_CHAPTER triggering.
  + Improve main title detection.
  + Improve error resilience.
  + Improve BD-J compability.
  + Improve detecting of working aacs implementation.
  + Improve libmmbd support.
  + Fix BD-J media player stop().
  + Fix restoring playback rate with some BD-J discs.
  + Fix restoring suspended playback time position.
  + Fix current chapter lookup.
  + Fix lost key focus with multi-HScene discs.
  + Fix playback of discs without Top Menu title.
  + Fix caching of some BD-J files from UDF filesystem.
  + Fix stopping playback from HDMV menus.
  + Fix possible errors in win32 .iso image reading.
  + Fix undefined values in DISC_INFO.
  + Fix memory leaks.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="tchvatal@suse.com" date="1463659200">- Fix download url to not fail on network error</changelog>
  <changelog author="tchvatal@suse.com" date="1471348800">- Drop libbluray-autotools.patch as it has no real benefit and if
  something should be upstreamed</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486036800">- add patch to expose clip_id (as applied by Debian), which is
  necessary to build packages that depend on it (such as Handbrake)
  * A02-expose-clip_id.patch</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486900800">- drop patch A02-expopse-clip_id.patch as Handbrake seems to be the only
  package that needs it, to avoid binary runtime incompatibilities with
  libbluray packages that would stem from other repositories</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Rename %soname to %sover to better reflect its use.
  Fix RPM groups.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1488542400">- Update to version 1.0.0:
  + Add support for Java VM (BD-J) on MacOS.
  + Add clip_id to BLURAY_CLIP_INFO.
  + Add a suitable JVM path for Fedora/RHEL and clones.
  + Add support for AVCHD 8.3 filenames.
  + Add player setting for disabling persistent storage.
  + Add bd_set_rate().
  + Add playback time position to BD_EVENT_SEEK.
  + Add BD_VK_ROOT_MENU handling.
  + Add support for heavily fragmented 3D .m2ts files.
  + Improve Win32 dll loading security.
  + Improve playback resume position accuracy.
  + Improve error resilience and stability.
  + Fix using libmmbd with unmounted discs.
  + Fix leaks.
  + Delay BD-J overlay opening until something visible has been
    drawn.
  + Close BD-J overlay when window is not visible.
  + Use temporary storage when cache or persistent root location is
    unknown.
- Fixed patch libbluray-jvm_dir.patch.
- Changed soname version to 2.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 1.0.1:
  + Add possibility to check whether BD-J is functional without
    opening a disc.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Fix Windows dll loading.
  + Fix JAVA_HOME environment variable handling in Windows.
  + Fix build issues when CPPFLAGS is given in make command line.
  + Fix MSVC build issues.
  + Remove --disable-bdjava and --disable-udf configure options.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505044800">- BuildConflict with java-devel &gt;= 1.9. Java 8 is the last to
  support source_version 1.5.</changelog>
  <changelog author="fstrba@suse.com" date="1509364800">- Added patch:
  * libbluray-java9.patch
    + Fix build with jdk9
    + Due to incompatible changes in jdk9, the same code cannot be
    built with jdk9 and jdk &lt;= 1.8
    + Only apply on systems that hava jdk9</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512475200">- Update to version 1.0.2:
  + Add initial support for UHD BluRay discs (without BD-J menus).
  + Detect JRE (from the Java Applet plugin) on MacOS.
  + Improve error resilience and stability.
  + Improve libmmbd support.
  + Fix static build dependencies in pkgconfig file.
  + Fix creation of cache (sub-)directories on windows platforms.
  + Fix BD-J temporary storage when persistent storage is disabled.
  + Fix leaks.
- At least java-devel &gt;= 1.8 ist required for build.</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher, since some removal of
  deprecated SecurityManager functions makes BD-J not buildable
  with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1513684801">- Modified patch:
  * libbluray-java9.patch
    + Some change in hunks integrating upstream fixes that were
    partially different from ours.</changelog>
</package>
<package pkgid="c643fa9fad10663e2abfa6f0058558331e925c73dede96483e1d3caaf6944c57" name="libbluray2" arch="s390x">
  <version epoch="0" ver="1.0.2" rel="150000.4.2.1"/>
  <changelog author="tchvatal@suse.com" date="1425643200">- Put the configure args each on its own line</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1430395200">- Update to version 0.8.0:
  + Add security checks to BD-J.
  + Add support for UDF image files and unmounted discs.
  + Add UDF volume identifier to DISC_INFO.
  + Add bd_init(), bd_open_disc() and bd_open_stream().
  + Add /usr/share/libbluray/lib/ to .jar file search paths.
  + Add BD_EVENT_PLAYLIST_STOP (playlist playback is interrupted).
  + Accept directory name (without .jar file name) in LIBBLURAY_CP.
  + Improved error resilence.
  + Improve BD-J compability.
  + Fix Java 8u40 compability.
  + Fix infinite loop with some broken HDMV menus.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.
- Build with UDF support.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1432296000">- Update to version 0.8.1:
  + Notify application when UO mask changes.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix crash after bd_open(NULL).
  + Fix compability problem with libbdplus.
  + Fix memory leak in UDF filesystem parser.
  + Fix crash in freetype.</changelog>
  <changelog author="olaf@aepfle.de" date="1439208000">- Fix build in SLE_11</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1444046400">- Update to version 0.9.0:
  + Add functions to read files from VFS.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix Xlet-initiated font caching.
  + Fix return value when setting BLURAY_PLAYER_SETTING_DECODE_PG.
  + Fix build with C++ compiler</changelog>
  <changelog author="idonmez@suse.com" date="1446638400">- Update to version 0.9.1
  + Improved BD-J security.
  + Improved error resilience.
  + Improved seeking (avoid skipping PAT/PMT/PCR).
  + Fix UO mask check when bd_play_title() is used for Top Menu.
  + Fix re-starting of title bound Xlets when title changes.
  + Fix loading classes with invalid debug info.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1449144000">- Update to version 0.9.2:
  + Add primary audio stream to bd_select_stream().
  + Improve error resilience.
  + Fix Java 8 compability issues.
  + Fix Android build.
  + Fix SecurityException in AWTAutoShutdown.
  + Fix BD-J check when install path in Windows contains
    non-ASCII chars.
  + Fix jvm.dll loading in Windows ($JAVA_HOME/bin should be in
    dll load path).
  + Fix class translating in recent Java 8 versions.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1463486400">- Update to version 0.9.3:
  + Add bd_open_files(). This function deprecates old global file
    system hooks.
  + Add flag for on-disc menu support to DISC_INFO.
  + Add configure argument to disable building of JAR file.
  + Add missing player settings enums.
  + Update linux Java search path list and preferred JVM.
  + Enable UDF support by default.
  + Split developer tools from examples.
  + Improve BDJ_EVENT_CHAPTER triggering.
  + Improve main title detection.
  + Improve error resilience.
  + Improve BD-J compability.
  + Improve detecting of working aacs implementation.
  + Improve libmmbd support.
  + Fix BD-J media player stop().
  + Fix restoring playback rate with some BD-J discs.
  + Fix restoring suspended playback time position.
  + Fix current chapter lookup.
  + Fix lost key focus with multi-HScene discs.
  + Fix playback of discs without Top Menu title.
  + Fix caching of some BD-J files from UDF filesystem.
  + Fix stopping playback from HDMV menus.
  + Fix possible errors in win32 .iso image reading.
  + Fix undefined values in DISC_INFO.
  + Fix memory leaks.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="tchvatal@suse.com" date="1463659200">- Fix download url to not fail on network error</changelog>
  <changelog author="tchvatal@suse.com" date="1471348800">- Drop libbluray-autotools.patch as it has no real benefit and if
  something should be upstreamed</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486036800">- add patch to expose clip_id (as applied by Debian), which is
  necessary to build packages that depend on it (such as Handbrake)
  * A02-expose-clip_id.patch</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486900800">- drop patch A02-expopse-clip_id.patch as Handbrake seems to be the only
  package that needs it, to avoid binary runtime incompatibilities with
  libbluray packages that would stem from other repositories</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Rename %soname to %sover to better reflect its use.
  Fix RPM groups.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1488542400">- Update to version 1.0.0:
  + Add support for Java VM (BD-J) on MacOS.
  + Add clip_id to BLURAY_CLIP_INFO.
  + Add a suitable JVM path for Fedora/RHEL and clones.
  + Add support for AVCHD 8.3 filenames.
  + Add player setting for disabling persistent storage.
  + Add bd_set_rate().
  + Add playback time position to BD_EVENT_SEEK.
  + Add BD_VK_ROOT_MENU handling.
  + Add support for heavily fragmented 3D .m2ts files.
  + Improve Win32 dll loading security.
  + Improve playback resume position accuracy.
  + Improve error resilience and stability.
  + Fix using libmmbd with unmounted discs.
  + Fix leaks.
  + Delay BD-J overlay opening until something visible has been
    drawn.
  + Close BD-J overlay when window is not visible.
  + Use temporary storage when cache or persistent root location is
    unknown.
- Fixed patch libbluray-jvm_dir.patch.
- Changed soname version to 2.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 1.0.1:
  + Add possibility to check whether BD-J is functional without
    opening a disc.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Fix Windows dll loading.
  + Fix JAVA_HOME environment variable handling in Windows.
  + Fix build issues when CPPFLAGS is given in make command line.
  + Fix MSVC build issues.
  + Remove --disable-bdjava and --disable-udf configure options.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505044800">- BuildConflict with java-devel &gt;= 1.9. Java 8 is the last to
  support source_version 1.5.</changelog>
  <changelog author="fstrba@suse.com" date="1509364800">- Added patch:
  * libbluray-java9.patch
    + Fix build with jdk9
    + Due to incompatible changes in jdk9, the same code cannot be
    built with jdk9 and jdk &lt;= 1.8
    + Only apply on systems that hava jdk9</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512475200">- Update to version 1.0.2:
  + Add initial support for UHD BluRay discs (without BD-J menus).
  + Detect JRE (from the Java Applet plugin) on MacOS.
  + Improve error resilience and stability.
  + Improve libmmbd support.
  + Fix static build dependencies in pkgconfig file.
  + Fix creation of cache (sub-)directories on windows platforms.
  + Fix BD-J temporary storage when persistent storage is disabled.
  + Fix leaks.
- At least java-devel &gt;= 1.8 ist required for build.</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher, since some removal of
  deprecated SecurityManager functions makes BD-J not buildable
  with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1513684801">- Modified patch:
  * libbluray-java9.patch
    + Some change in hunks integrating upstream fixes that were
    partially different from ours.</changelog>
</package>
<package pkgid="e938742096dba0a7d35db0ac0cae46cdb65d95d5078362dda91e093051d9dc06" name="libbluray2" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="150000.4.2.1"/>
  <changelog author="tchvatal@suse.com" date="1425643200">- Put the configure args each on its own line</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1430395200">- Update to version 0.8.0:
  + Add security checks to BD-J.
  + Add support for UDF image files and unmounted discs.
  + Add UDF volume identifier to DISC_INFO.
  + Add bd_init(), bd_open_disc() and bd_open_stream().
  + Add /usr/share/libbluray/lib/ to .jar file search paths.
  + Add BD_EVENT_PLAYLIST_STOP (playlist playback is interrupted).
  + Accept directory name (without .jar file name) in LIBBLURAY_CP.
  + Improved error resilence.
  + Improve BD-J compability.
  + Fix Java 8u40 compability.
  + Fix infinite loop with some broken HDMV menus.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.
- Build with UDF support.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1432296000">- Update to version 0.8.1:
  + Notify application when UO mask changes.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix crash after bd_open(NULL).
  + Fix compability problem with libbdplus.
  + Fix memory leak in UDF filesystem parser.
  + Fix crash in freetype.</changelog>
  <changelog author="olaf@aepfle.de" date="1439208000">- Fix build in SLE_11</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1444046400">- Update to version 0.9.0:
  + Add functions to read files from VFS.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix Xlet-initiated font caching.
  + Fix return value when setting BLURAY_PLAYER_SETTING_DECODE_PG.
  + Fix build with C++ compiler</changelog>
  <changelog author="idonmez@suse.com" date="1446638400">- Update to version 0.9.1
  + Improved BD-J security.
  + Improved error resilience.
  + Improved seeking (avoid skipping PAT/PMT/PCR).
  + Fix UO mask check when bd_play_title() is used for Top Menu.
  + Fix re-starting of title bound Xlets when title changes.
  + Fix loading classes with invalid debug info.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1449144000">- Update to version 0.9.2:
  + Add primary audio stream to bd_select_stream().
  + Improve error resilience.
  + Fix Java 8 compability issues.
  + Fix Android build.
  + Fix SecurityException in AWTAutoShutdown.
  + Fix BD-J check when install path in Windows contains
    non-ASCII chars.
  + Fix jvm.dll loading in Windows ($JAVA_HOME/bin should be in
    dll load path).
  + Fix class translating in recent Java 8 versions.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1463486400">- Update to version 0.9.3:
  + Add bd_open_files(). This function deprecates old global file
    system hooks.
  + Add flag for on-disc menu support to DISC_INFO.
  + Add configure argument to disable building of JAR file.
  + Add missing player settings enums.
  + Update linux Java search path list and preferred JVM.
  + Enable UDF support by default.
  + Split developer tools from examples.
  + Improve BDJ_EVENT_CHAPTER triggering.
  + Improve main title detection.
  + Improve error resilience.
  + Improve BD-J compability.
  + Improve detecting of working aacs implementation.
  + Improve libmmbd support.
  + Fix BD-J media player stop().
  + Fix restoring playback rate with some BD-J discs.
  + Fix restoring suspended playback time position.
  + Fix current chapter lookup.
  + Fix lost key focus with multi-HScene discs.
  + Fix playback of discs without Top Menu title.
  + Fix caching of some BD-J files from UDF filesystem.
  + Fix stopping playback from HDMV menus.
  + Fix possible errors in win32 .iso image reading.
  + Fix undefined values in DISC_INFO.
  + Fix memory leaks.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="tchvatal@suse.com" date="1463659200">- Fix download url to not fail on network error</changelog>
  <changelog author="tchvatal@suse.com" date="1471348800">- Drop libbluray-autotools.patch as it has no real benefit and if
  something should be upstreamed</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486036800">- add patch to expose clip_id (as applied by Debian), which is
  necessary to build packages that depend on it (such as Handbrake)
  * A02-expose-clip_id.patch</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486900800">- drop patch A02-expopse-clip_id.patch as Handbrake seems to be the only
  package that needs it, to avoid binary runtime incompatibilities with
  libbluray packages that would stem from other repositories</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Rename %soname to %sover to better reflect its use.
  Fix RPM groups.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1488542400">- Update to version 1.0.0:
  + Add support for Java VM (BD-J) on MacOS.
  + Add clip_id to BLURAY_CLIP_INFO.
  + Add a suitable JVM path for Fedora/RHEL and clones.
  + Add support for AVCHD 8.3 filenames.
  + Add player setting for disabling persistent storage.
  + Add bd_set_rate().
  + Add playback time position to BD_EVENT_SEEK.
  + Add BD_VK_ROOT_MENU handling.
  + Add support for heavily fragmented 3D .m2ts files.
  + Improve Win32 dll loading security.
  + Improve playback resume position accuracy.
  + Improve error resilience and stability.
  + Fix using libmmbd with unmounted discs.
  + Fix leaks.
  + Delay BD-J overlay opening until something visible has been
    drawn.
  + Close BD-J overlay when window is not visible.
  + Use temporary storage when cache or persistent root location is
    unknown.
- Fixed patch libbluray-jvm_dir.patch.
- Changed soname version to 2.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 1.0.1:
  + Add possibility to check whether BD-J is functional without
    opening a disc.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Fix Windows dll loading.
  + Fix JAVA_HOME environment variable handling in Windows.
  + Fix build issues when CPPFLAGS is given in make command line.
  + Fix MSVC build issues.
  + Remove --disable-bdjava and --disable-udf configure options.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505044800">- BuildConflict with java-devel &gt;= 1.9. Java 8 is the last to
  support source_version 1.5.</changelog>
  <changelog author="fstrba@suse.com" date="1509364800">- Added patch:
  * libbluray-java9.patch
    + Fix build with jdk9
    + Due to incompatible changes in jdk9, the same code cannot be
    built with jdk9 and jdk &lt;= 1.8
    + Only apply on systems that hava jdk9</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512475200">- Update to version 1.0.2:
  + Add initial support for UHD BluRay discs (without BD-J menus).
  + Detect JRE (from the Java Applet plugin) on MacOS.
  + Improve error resilience and stability.
  + Improve libmmbd support.
  + Fix static build dependencies in pkgconfig file.
  + Fix creation of cache (sub-)directories on windows platforms.
  + Fix BD-J temporary storage when persistent storage is disabled.
  + Fix leaks.
- At least java-devel &gt;= 1.8 ist required for build.</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher, since some removal of
  deprecated SecurityManager functions makes BD-J not buildable
  with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1513684801">- Modified patch:
  * libbluray-java9.patch
    + Some change in hunks integrating upstream fixes that were
    partially different from ours.</changelog>
</package>
<package pkgid="fa8b1c0ed3ff8cb8960e73800966e9732f11124908dbd17e49debf72809f85b5" name="libbluray2" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="150300.10.7.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1432296000">- Update to version 0.8.1:
  + Notify application when UO mask changes.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix crash after bd_open(NULL).
  + Fix compability problem with libbdplus.
  + Fix memory leak in UDF filesystem parser.
  + Fix crash in freetype.</changelog>
  <changelog author="olaf@aepfle.de" date="1439208000">- Fix build in SLE_11</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1444046400">- Update to version 0.9.0:
  + Add functions to read files from VFS.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix Xlet-initiated font caching.
  + Fix return value when setting BLURAY_PLAYER_SETTING_DECODE_PG.
  + Fix build with C++ compiler</changelog>
  <changelog author="idonmez@suse.com" date="1446638400">- Update to version 0.9.1
  + Improved BD-J security.
  + Improved error resilience.
  + Improved seeking (avoid skipping PAT/PMT/PCR).
  + Fix UO mask check when bd_play_title() is used for Top Menu.
  + Fix re-starting of title bound Xlets when title changes.
  + Fix loading classes with invalid debug info.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1449144000">- Update to version 0.9.2:
  + Add primary audio stream to bd_select_stream().
  + Improve error resilience.
  + Fix Java 8 compability issues.
  + Fix Android build.
  + Fix SecurityException in AWTAutoShutdown.
  + Fix BD-J check when install path in Windows contains
    non-ASCII chars.
  + Fix jvm.dll loading in Windows ($JAVA_HOME/bin should be in
    dll load path).
  + Fix class translating in recent Java 8 versions.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1463486400">- Update to version 0.9.3:
  + Add bd_open_files(). This function deprecates old global file
    system hooks.
  + Add flag for on-disc menu support to DISC_INFO.
  + Add configure argument to disable building of JAR file.
  + Add missing player settings enums.
  + Update linux Java search path list and preferred JVM.
  + Enable UDF support by default.
  + Split developer tools from examples.
  + Improve BDJ_EVENT_CHAPTER triggering.
  + Improve main title detection.
  + Improve error resilience.
  + Improve BD-J compability.
  + Improve detecting of working aacs implementation.
  + Improve libmmbd support.
  + Fix BD-J media player stop().
  + Fix restoring playback rate with some BD-J discs.
  + Fix restoring suspended playback time position.
  + Fix current chapter lookup.
  + Fix lost key focus with multi-HScene discs.
  + Fix playback of discs without Top Menu title.
  + Fix caching of some BD-J files from UDF filesystem.
  + Fix stopping playback from HDMV menus.
  + Fix possible errors in win32 .iso image reading.
  + Fix undefined values in DISC_INFO.
  + Fix memory leaks.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="tchvatal@suse.com" date="1463659200">- Fix download url to not fail on network error</changelog>
  <changelog author="tchvatal@suse.com" date="1471348800">- Drop libbluray-autotools.patch as it has no real benefit and if
  something should be upstreamed</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486036800">- add patch to expose clip_id (as applied by Debian), which is
  necessary to build packages that depend on it (such as Handbrake)
  * A02-expose-clip_id.patch</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486900800">- drop patch A02-expopse-clip_id.patch as Handbrake seems to be the only
  package that needs it, to avoid binary runtime incompatibilities with
  libbluray packages that would stem from other repositories</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Rename %soname to %sover to better reflect its use.
  Fix RPM groups.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1488542400">- Update to version 1.0.0:
  + Add support for Java VM (BD-J) on MacOS.
  + Add clip_id to BLURAY_CLIP_INFO.
  + Add a suitable JVM path for Fedora/RHEL and clones.
  + Add support for AVCHD 8.3 filenames.
  + Add player setting for disabling persistent storage.
  + Add bd_set_rate().
  + Add playback time position to BD_EVENT_SEEK.
  + Add BD_VK_ROOT_MENU handling.
  + Add support for heavily fragmented 3D .m2ts files.
  + Improve Win32 dll loading security.
  + Improve playback resume position accuracy.
  + Improve error resilience and stability.
  + Fix using libmmbd with unmounted discs.
  + Fix leaks.
  + Delay BD-J overlay opening until something visible has been
    drawn.
  + Close BD-J overlay when window is not visible.
  + Use temporary storage when cache or persistent root location is
    unknown.
- Fixed patch libbluray-jvm_dir.patch.
- Changed soname version to 2.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 1.0.1:
  + Add possibility to check whether BD-J is functional without
    opening a disc.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Fix Windows dll loading.
  + Fix JAVA_HOME environment variable handling in Windows.
  + Fix build issues when CPPFLAGS is given in make command line.
  + Fix MSVC build issues.
  + Remove --disable-bdjava and --disable-udf configure options.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505044800">- BuildConflict with java-devel &gt;= 1.9. Java 8 is the last to
  support source_version 1.5.</changelog>
  <changelog author="fstrba@suse.com" date="1509364800">- Added patch:
  * libbluray-java9.patch
    + Fix build with jdk9
    + Due to incompatible changes in jdk9, the same code cannot be
    built with jdk9 and jdk &lt;= 1.8
    + Only apply on systems that hava jdk9</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512475200">- Update to version 1.0.2:
  + Add initial support for UHD BluRay discs (without BD-J menus).
  + Detect JRE (from the Java Applet plugin) on MacOS.
  + Improve error resilience and stability.
  + Improve libmmbd support.
  + Fix static build dependencies in pkgconfig file.
  + Fix creation of cache (sub-)directories on windows platforms.
  + Fix BD-J temporary storage when persistent storage is disabled.
  + Fix leaks.
- At least java-devel &gt;= 1.8 ist required for build.</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher, since some removal of
  deprecated SecurityManager functions makes BD-J not buildable
  with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1513684801">- Modified patch:
  * libbluray-java9.patch
    + Some change in hunks integrating upstream fixes that were
    partially different from ours.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637841600">- Update to 1.3.0:
  + Add bd_event_name().
  + Add return value to bd_refcnt_inc().
  + Add cache for parsed clpi file data.
  + Add player setting for JRE location (JAVA_HOME).
  + Improve FreeBSD BD-J support.
  + Improve portability.
  + Improve JVM and .jar file probing.
  + Fix leak.
- Update to 1.2.1:
  + Add initial support for .fmts files.
  + Improve missing/broken playlist handling.
  + Improve UHD metadata support.
  + Improve BD-J compability.
  + Improve error resilience and stability.
  + Fix long delay in "Evangelion, You are (not) alone" menu.
  + Fix JVM bootstrap issues with some Java 9 versions.
  + Fix sign extended bytes when reading single bytes in BDJ.
  + Fix creating organization and disc specific BD-J BUDA
    directories.
  + Use external libudfread when available.
  + Rename list_titles to bd_list_titles and add it to installed
    programs.
- Update to version 1.2.0:
  + Add functions to list and read BD-ROM files.
  + Add support for separate key pressed / typed / released user
    input events.
  + Add support for AWT mouse events (BD-J).
  + Fix build with OpenJDK 12 / 13.
- Update to version 1.1.2:
  + Add libxml version to pkg-config Requires.private.
  + Improve support for NetBSD operating system.
  + Improve BD-J compability.
  + Improve Java 8+ compability.
  + Fix main playlist caching in Windows.
  + Fix mark triggering when multiple marks are passed during
    single read().
  + Fix seek bar pop-up at chapter boundary with some discs.
  + Fix reading resources indirectly from mounted .jar file.
- Update to version 1.1.1:
  + Enable playback without menus when index.bdmv is missing.
  + Improve error resilience and stability.
  + Improve BD-J compability.
  + Fix loading libraries on MacOS / hardened runtime.
  + Fix resetting user-selected streams when playing without menus.
  + Fix stack overflow when using Java9+ with debugger connection.
  + Fix polygon-based BD-J graphics primitives.
  + Fix loading libmmbd in Windows 64-bit.
  + Fix loading classes with Windows Java 8.
  + Fix build with Java 1.6.
  + Fix pkg-config Libs.private.
- Update to version 1.1.0:
  + Add initial support for OpenJDK 11.
  + Add initial support for UHD disc BD-J menus.
  + Add support for compiling .jar file with Java 9+ compiler.
  + Move AWT classes to separate .jar file.
  + Update libudfread submodule repository URL.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Improve BD-J compability.
  + Fix playback of some broken BD-J discs.
  + Fix playback of discs without normal titles (only TopMenu /
    FirstPlay title).
- Remove unused dependencies from pkgconfig(libbluray)
  Our pkg is dynamically linked, so Libs.private is not needed
  Nothing in the exported header files needs paths from
  Requires.private
  * libbluray-pkgconfig.patch
- Refresh libbluray-java9.patch
- Drop libbluray-jvm_dir.patch
- Enable build against java-devel &gt;= 10.</changelog>
  <changelog author="pgajdos@suse.com" date="1652356800">- fix build for both 15sp3 and 15sp4 [bsc#1199463]
- added patches
  implement the new java.io.FileSystem.isInvalid method that entered all
  supported java versions with April 2022 CPU (taken from Factory)
  + libbluray-April2022CPU.patch</changelog>
</package>
<package pkgid="7e1561df2f99a3ffa1c764dc2e766bb13b922b954025552f1f9a15e9ffdd702d" name="libbluray2" arch="ppc64le">
  <version epoch="0" ver="1.3.0" rel="150300.10.7.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1432296000">- Update to version 0.8.1:
  + Notify application when UO mask changes.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix crash after bd_open(NULL).
  + Fix compability problem with libbdplus.
  + Fix memory leak in UDF filesystem parser.
  + Fix crash in freetype.</changelog>
  <changelog author="olaf@aepfle.de" date="1439208000">- Fix build in SLE_11</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1444046400">- Update to version 0.9.0:
  + Add functions to read files from VFS.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix Xlet-initiated font caching.
  + Fix return value when setting BLURAY_PLAYER_SETTING_DECODE_PG.
  + Fix build with C++ compiler</changelog>
  <changelog author="idonmez@suse.com" date="1446638400">- Update to version 0.9.1
  + Improved BD-J security.
  + Improved error resilience.
  + Improved seeking (avoid skipping PAT/PMT/PCR).
  + Fix UO mask check when bd_play_title() is used for Top Menu.
  + Fix re-starting of title bound Xlets when title changes.
  + Fix loading classes with invalid debug info.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1449144000">- Update to version 0.9.2:
  + Add primary audio stream to bd_select_stream().
  + Improve error resilience.
  + Fix Java 8 compability issues.
  + Fix Android build.
  + Fix SecurityException in AWTAutoShutdown.
  + Fix BD-J check when install path in Windows contains
    non-ASCII chars.
  + Fix jvm.dll loading in Windows ($JAVA_HOME/bin should be in
    dll load path).
  + Fix class translating in recent Java 8 versions.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1463486400">- Update to version 0.9.3:
  + Add bd_open_files(). This function deprecates old global file
    system hooks.
  + Add flag for on-disc menu support to DISC_INFO.
  + Add configure argument to disable building of JAR file.
  + Add missing player settings enums.
  + Update linux Java search path list and preferred JVM.
  + Enable UDF support by default.
  + Split developer tools from examples.
  + Improve BDJ_EVENT_CHAPTER triggering.
  + Improve main title detection.
  + Improve error resilience.
  + Improve BD-J compability.
  + Improve detecting of working aacs implementation.
  + Improve libmmbd support.
  + Fix BD-J media player stop().
  + Fix restoring playback rate with some BD-J discs.
  + Fix restoring suspended playback time position.
  + Fix current chapter lookup.
  + Fix lost key focus with multi-HScene discs.
  + Fix playback of discs without Top Menu title.
  + Fix caching of some BD-J files from UDF filesystem.
  + Fix stopping playback from HDMV menus.
  + Fix possible errors in win32 .iso image reading.
  + Fix undefined values in DISC_INFO.
  + Fix memory leaks.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="tchvatal@suse.com" date="1463659200">- Fix download url to not fail on network error</changelog>
  <changelog author="tchvatal@suse.com" date="1471348800">- Drop libbluray-autotools.patch as it has no real benefit and if
  something should be upstreamed</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486036800">- add patch to expose clip_id (as applied by Debian), which is
  necessary to build packages that depend on it (such as Handbrake)
  * A02-expose-clip_id.patch</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486900800">- drop patch A02-expopse-clip_id.patch as Handbrake seems to be the only
  package that needs it, to avoid binary runtime incompatibilities with
  libbluray packages that would stem from other repositories</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Rename %soname to %sover to better reflect its use.
  Fix RPM groups.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1488542400">- Update to version 1.0.0:
  + Add support for Java VM (BD-J) on MacOS.
  + Add clip_id to BLURAY_CLIP_INFO.
  + Add a suitable JVM path for Fedora/RHEL and clones.
  + Add support for AVCHD 8.3 filenames.
  + Add player setting for disabling persistent storage.
  + Add bd_set_rate().
  + Add playback time position to BD_EVENT_SEEK.
  + Add BD_VK_ROOT_MENU handling.
  + Add support for heavily fragmented 3D .m2ts files.
  + Improve Win32 dll loading security.
  + Improve playback resume position accuracy.
  + Improve error resilience and stability.
  + Fix using libmmbd with unmounted discs.
  + Fix leaks.
  + Delay BD-J overlay opening until something visible has been
    drawn.
  + Close BD-J overlay when window is not visible.
  + Use temporary storage when cache or persistent root location is
    unknown.
- Fixed patch libbluray-jvm_dir.patch.
- Changed soname version to 2.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 1.0.1:
  + Add possibility to check whether BD-J is functional without
    opening a disc.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Fix Windows dll loading.
  + Fix JAVA_HOME environment variable handling in Windows.
  + Fix build issues when CPPFLAGS is given in make command line.
  + Fix MSVC build issues.
  + Remove --disable-bdjava and --disable-udf configure options.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505044800">- BuildConflict with java-devel &gt;= 1.9. Java 8 is the last to
  support source_version 1.5.</changelog>
  <changelog author="fstrba@suse.com" date="1509364800">- Added patch:
  * libbluray-java9.patch
    + Fix build with jdk9
    + Due to incompatible changes in jdk9, the same code cannot be
    built with jdk9 and jdk &lt;= 1.8
    + Only apply on systems that hava jdk9</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512475200">- Update to version 1.0.2:
  + Add initial support for UHD BluRay discs (without BD-J menus).
  + Detect JRE (from the Java Applet plugin) on MacOS.
  + Improve error resilience and stability.
  + Improve libmmbd support.
  + Fix static build dependencies in pkgconfig file.
  + Fix creation of cache (sub-)directories on windows platforms.
  + Fix BD-J temporary storage when persistent storage is disabled.
  + Fix leaks.
- At least java-devel &gt;= 1.8 ist required for build.</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher, since some removal of
  deprecated SecurityManager functions makes BD-J not buildable
  with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1513684801">- Modified patch:
  * libbluray-java9.patch
    + Some change in hunks integrating upstream fixes that were
    partially different from ours.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637841600">- Update to 1.3.0:
  + Add bd_event_name().
  + Add return value to bd_refcnt_inc().
  + Add cache for parsed clpi file data.
  + Add player setting for JRE location (JAVA_HOME).
  + Improve FreeBSD BD-J support.
  + Improve portability.
  + Improve JVM and .jar file probing.
  + Fix leak.
- Update to 1.2.1:
  + Add initial support for .fmts files.
  + Improve missing/broken playlist handling.
  + Improve UHD metadata support.
  + Improve BD-J compability.
  + Improve error resilience and stability.
  + Fix long delay in "Evangelion, You are (not) alone" menu.
  + Fix JVM bootstrap issues with some Java 9 versions.
  + Fix sign extended bytes when reading single bytes in BDJ.
  + Fix creating organization and disc specific BD-J BUDA
    directories.
  + Use external libudfread when available.
  + Rename list_titles to bd_list_titles and add it to installed
    programs.
- Update to version 1.2.0:
  + Add functions to list and read BD-ROM files.
  + Add support for separate key pressed / typed / released user
    input events.
  + Add support for AWT mouse events (BD-J).
  + Fix build with OpenJDK 12 / 13.
- Update to version 1.1.2:
  + Add libxml version to pkg-config Requires.private.
  + Improve support for NetBSD operating system.
  + Improve BD-J compability.
  + Improve Java 8+ compability.
  + Fix main playlist caching in Windows.
  + Fix mark triggering when multiple marks are passed during
    single read().
  + Fix seek bar pop-up at chapter boundary with some discs.
  + Fix reading resources indirectly from mounted .jar file.
- Update to version 1.1.1:
  + Enable playback without menus when index.bdmv is missing.
  + Improve error resilience and stability.
  + Improve BD-J compability.
  + Fix loading libraries on MacOS / hardened runtime.
  + Fix resetting user-selected streams when playing without menus.
  + Fix stack overflow when using Java9+ with debugger connection.
  + Fix polygon-based BD-J graphics primitives.
  + Fix loading libmmbd in Windows 64-bit.
  + Fix loading classes with Windows Java 8.
  + Fix build with Java 1.6.
  + Fix pkg-config Libs.private.
- Update to version 1.1.0:
  + Add initial support for OpenJDK 11.
  + Add initial support for UHD disc BD-J menus.
  + Add support for compiling .jar file with Java 9+ compiler.
  + Move AWT classes to separate .jar file.
  + Update libudfread submodule repository URL.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Improve BD-J compability.
  + Fix playback of some broken BD-J discs.
  + Fix playback of discs without normal titles (only TopMenu /
    FirstPlay title).
- Remove unused dependencies from pkgconfig(libbluray)
  Our pkg is dynamically linked, so Libs.private is not needed
  Nothing in the exported header files needs paths from
  Requires.private
  * libbluray-pkgconfig.patch
- Refresh libbluray-java9.patch
- Drop libbluray-jvm_dir.patch
- Enable build against java-devel &gt;= 10.</changelog>
  <changelog author="pgajdos@suse.com" date="1652356800">- fix build for both 15sp3 and 15sp4 [bsc#1199463]
- added patches
  implement the new java.io.FileSystem.isInvalid method that entered all
  supported java versions with April 2022 CPU (taken from Factory)
  + libbluray-April2022CPU.patch</changelog>
</package>
<package pkgid="d597e8af3a2154b12040b628a96aaf4454c1a2a5b8be9c218c8e91ebf006e17d" name="libbluray2" arch="s390x">
  <version epoch="0" ver="1.3.0" rel="150300.10.7.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1432296000">- Update to version 0.8.1:
  + Notify application when UO mask changes.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix crash after bd_open(NULL).
  + Fix compability problem with libbdplus.
  + Fix memory leak in UDF filesystem parser.
  + Fix crash in freetype.</changelog>
  <changelog author="olaf@aepfle.de" date="1439208000">- Fix build in SLE_11</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1444046400">- Update to version 0.9.0:
  + Add functions to read files from VFS.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix Xlet-initiated font caching.
  + Fix return value when setting BLURAY_PLAYER_SETTING_DECODE_PG.
  + Fix build with C++ compiler</changelog>
  <changelog author="idonmez@suse.com" date="1446638400">- Update to version 0.9.1
  + Improved BD-J security.
  + Improved error resilience.
  + Improved seeking (avoid skipping PAT/PMT/PCR).
  + Fix UO mask check when bd_play_title() is used for Top Menu.
  + Fix re-starting of title bound Xlets when title changes.
  + Fix loading classes with invalid debug info.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1449144000">- Update to version 0.9.2:
  + Add primary audio stream to bd_select_stream().
  + Improve error resilience.
  + Fix Java 8 compability issues.
  + Fix Android build.
  + Fix SecurityException in AWTAutoShutdown.
  + Fix BD-J check when install path in Windows contains
    non-ASCII chars.
  + Fix jvm.dll loading in Windows ($JAVA_HOME/bin should be in
    dll load path).
  + Fix class translating in recent Java 8 versions.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1463486400">- Update to version 0.9.3:
  + Add bd_open_files(). This function deprecates old global file
    system hooks.
  + Add flag for on-disc menu support to DISC_INFO.
  + Add configure argument to disable building of JAR file.
  + Add missing player settings enums.
  + Update linux Java search path list and preferred JVM.
  + Enable UDF support by default.
  + Split developer tools from examples.
  + Improve BDJ_EVENT_CHAPTER triggering.
  + Improve main title detection.
  + Improve error resilience.
  + Improve BD-J compability.
  + Improve detecting of working aacs implementation.
  + Improve libmmbd support.
  + Fix BD-J media player stop().
  + Fix restoring playback rate with some BD-J discs.
  + Fix restoring suspended playback time position.
  + Fix current chapter lookup.
  + Fix lost key focus with multi-HScene discs.
  + Fix playback of discs without Top Menu title.
  + Fix caching of some BD-J files from UDF filesystem.
  + Fix stopping playback from HDMV menus.
  + Fix possible errors in win32 .iso image reading.
  + Fix undefined values in DISC_INFO.
  + Fix memory leaks.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="tchvatal@suse.com" date="1463659200">- Fix download url to not fail on network error</changelog>
  <changelog author="tchvatal@suse.com" date="1471348800">- Drop libbluray-autotools.patch as it has no real benefit and if
  something should be upstreamed</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486036800">- add patch to expose clip_id (as applied by Debian), which is
  necessary to build packages that depend on it (such as Handbrake)
  * A02-expose-clip_id.patch</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486900800">- drop patch A02-expopse-clip_id.patch as Handbrake seems to be the only
  package that needs it, to avoid binary runtime incompatibilities with
  libbluray packages that would stem from other repositories</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Rename %soname to %sover to better reflect its use.
  Fix RPM groups.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1488542400">- Update to version 1.0.0:
  + Add support for Java VM (BD-J) on MacOS.
  + Add clip_id to BLURAY_CLIP_INFO.
  + Add a suitable JVM path for Fedora/RHEL and clones.
  + Add support for AVCHD 8.3 filenames.
  + Add player setting for disabling persistent storage.
  + Add bd_set_rate().
  + Add playback time position to BD_EVENT_SEEK.
  + Add BD_VK_ROOT_MENU handling.
  + Add support for heavily fragmented 3D .m2ts files.
  + Improve Win32 dll loading security.
  + Improve playback resume position accuracy.
  + Improve error resilience and stability.
  + Fix using libmmbd with unmounted discs.
  + Fix leaks.
  + Delay BD-J overlay opening until something visible has been
    drawn.
  + Close BD-J overlay when window is not visible.
  + Use temporary storage when cache or persistent root location is
    unknown.
- Fixed patch libbluray-jvm_dir.patch.
- Changed soname version to 2.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 1.0.1:
  + Add possibility to check whether BD-J is functional without
    opening a disc.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Fix Windows dll loading.
  + Fix JAVA_HOME environment variable handling in Windows.
  + Fix build issues when CPPFLAGS is given in make command line.
  + Fix MSVC build issues.
  + Remove --disable-bdjava and --disable-udf configure options.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505044800">- BuildConflict with java-devel &gt;= 1.9. Java 8 is the last to
  support source_version 1.5.</changelog>
  <changelog author="fstrba@suse.com" date="1509364800">- Added patch:
  * libbluray-java9.patch
    + Fix build with jdk9
    + Due to incompatible changes in jdk9, the same code cannot be
    built with jdk9 and jdk &lt;= 1.8
    + Only apply on systems that hava jdk9</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512475200">- Update to version 1.0.2:
  + Add initial support for UHD BluRay discs (without BD-J menus).
  + Detect JRE (from the Java Applet plugin) on MacOS.
  + Improve error resilience and stability.
  + Improve libmmbd support.
  + Fix static build dependencies in pkgconfig file.
  + Fix creation of cache (sub-)directories on windows platforms.
  + Fix BD-J temporary storage when persistent storage is disabled.
  + Fix leaks.
- At least java-devel &gt;= 1.8 ist required for build.</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher, since some removal of
  deprecated SecurityManager functions makes BD-J not buildable
  with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1513684801">- Modified patch:
  * libbluray-java9.patch
    + Some change in hunks integrating upstream fixes that were
    partially different from ours.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637841600">- Update to 1.3.0:
  + Add bd_event_name().
  + Add return value to bd_refcnt_inc().
  + Add cache for parsed clpi file data.
  + Add player setting for JRE location (JAVA_HOME).
  + Improve FreeBSD BD-J support.
  + Improve portability.
  + Improve JVM and .jar file probing.
  + Fix leak.
- Update to 1.2.1:
  + Add initial support for .fmts files.
  + Improve missing/broken playlist handling.
  + Improve UHD metadata support.
  + Improve BD-J compability.
  + Improve error resilience and stability.
  + Fix long delay in "Evangelion, You are (not) alone" menu.
  + Fix JVM bootstrap issues with some Java 9 versions.
  + Fix sign extended bytes when reading single bytes in BDJ.
  + Fix creating organization and disc specific BD-J BUDA
    directories.
  + Use external libudfread when available.
  + Rename list_titles to bd_list_titles and add it to installed
    programs.
- Update to version 1.2.0:
  + Add functions to list and read BD-ROM files.
  + Add support for separate key pressed / typed / released user
    input events.
  + Add support for AWT mouse events (BD-J).
  + Fix build with OpenJDK 12 / 13.
- Update to version 1.1.2:
  + Add libxml version to pkg-config Requires.private.
  + Improve support for NetBSD operating system.
  + Improve BD-J compability.
  + Improve Java 8+ compability.
  + Fix main playlist caching in Windows.
  + Fix mark triggering when multiple marks are passed during
    single read().
  + Fix seek bar pop-up at chapter boundary with some discs.
  + Fix reading resources indirectly from mounted .jar file.
- Update to version 1.1.1:
  + Enable playback without menus when index.bdmv is missing.
  + Improve error resilience and stability.
  + Improve BD-J compability.
  + Fix loading libraries on MacOS / hardened runtime.
  + Fix resetting user-selected streams when playing without menus.
  + Fix stack overflow when using Java9+ with debugger connection.
  + Fix polygon-based BD-J graphics primitives.
  + Fix loading libmmbd in Windows 64-bit.
  + Fix loading classes with Windows Java 8.
  + Fix build with Java 1.6.
  + Fix pkg-config Libs.private.
- Update to version 1.1.0:
  + Add initial support for OpenJDK 11.
  + Add initial support for UHD disc BD-J menus.
  + Add support for compiling .jar file with Java 9+ compiler.
  + Move AWT classes to separate .jar file.
  + Update libudfread submodule repository URL.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Improve BD-J compability.
  + Fix playback of some broken BD-J discs.
  + Fix playback of discs without normal titles (only TopMenu /
    FirstPlay title).
- Remove unused dependencies from pkgconfig(libbluray)
  Our pkg is dynamically linked, so Libs.private is not needed
  Nothing in the exported header files needs paths from
  Requires.private
  * libbluray-pkgconfig.patch
- Refresh libbluray-java9.patch
- Drop libbluray-jvm_dir.patch
- Enable build against java-devel &gt;= 10.</changelog>
  <changelog author="pgajdos@suse.com" date="1652356800">- fix build for both 15sp3 and 15sp4 [bsc#1199463]
- added patches
  implement the new java.io.FileSystem.isInvalid method that entered all
  supported java versions with April 2022 CPU (taken from Factory)
  + libbluray-April2022CPU.patch</changelog>
</package>
<package pkgid="45c51e5cf8f949940648947a42a07e0e94843fd59769fbf44110c74f1c7ff6a0" name="libbluray2" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="150300.10.7.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1432296000">- Update to version 0.8.1:
  + Notify application when UO mask changes.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix crash after bd_open(NULL).
  + Fix compability problem with libbdplus.
  + Fix memory leak in UDF filesystem parser.
  + Fix crash in freetype.</changelog>
  <changelog author="olaf@aepfle.de" date="1439208000">- Fix build in SLE_11</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1444046400">- Update to version 0.9.0:
  + Add functions to read files from VFS.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix Xlet-initiated font caching.
  + Fix return value when setting BLURAY_PLAYER_SETTING_DECODE_PG.
  + Fix build with C++ compiler</changelog>
  <changelog author="idonmez@suse.com" date="1446638400">- Update to version 0.9.1
  + Improved BD-J security.
  + Improved error resilience.
  + Improved seeking (avoid skipping PAT/PMT/PCR).
  + Fix UO mask check when bd_play_title() is used for Top Menu.
  + Fix re-starting of title bound Xlets when title changes.
  + Fix loading classes with invalid debug info.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1449144000">- Update to version 0.9.2:
  + Add primary audio stream to bd_select_stream().
  + Improve error resilience.
  + Fix Java 8 compability issues.
  + Fix Android build.
  + Fix SecurityException in AWTAutoShutdown.
  + Fix BD-J check when install path in Windows contains
    non-ASCII chars.
  + Fix jvm.dll loading in Windows ($JAVA_HOME/bin should be in
    dll load path).
  + Fix class translating in recent Java 8 versions.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1463486400">- Update to version 0.9.3:
  + Add bd_open_files(). This function deprecates old global file
    system hooks.
  + Add flag for on-disc menu support to DISC_INFO.
  + Add configure argument to disable building of JAR file.
  + Add missing player settings enums.
  + Update linux Java search path list and preferred JVM.
  + Enable UDF support by default.
  + Split developer tools from examples.
  + Improve BDJ_EVENT_CHAPTER triggering.
  + Improve main title detection.
  + Improve error resilience.
  + Improve BD-J compability.
  + Improve detecting of working aacs implementation.
  + Improve libmmbd support.
  + Fix BD-J media player stop().
  + Fix restoring playback rate with some BD-J discs.
  + Fix restoring suspended playback time position.
  + Fix current chapter lookup.
  + Fix lost key focus with multi-HScene discs.
  + Fix playback of discs without Top Menu title.
  + Fix caching of some BD-J files from UDF filesystem.
  + Fix stopping playback from HDMV menus.
  + Fix possible errors in win32 .iso image reading.
  + Fix undefined values in DISC_INFO.
  + Fix memory leaks.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="tchvatal@suse.com" date="1463659200">- Fix download url to not fail on network error</changelog>
  <changelog author="tchvatal@suse.com" date="1471348800">- Drop libbluray-autotools.patch as it has no real benefit and if
  something should be upstreamed</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486036800">- add patch to expose clip_id (as applied by Debian), which is
  necessary to build packages that depend on it (such as Handbrake)
  * A02-expose-clip_id.patch</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486900800">- drop patch A02-expopse-clip_id.patch as Handbrake seems to be the only
  package that needs it, to avoid binary runtime incompatibilities with
  libbluray packages that would stem from other repositories</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Rename %soname to %sover to better reflect its use.
  Fix RPM groups.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1488542400">- Update to version 1.0.0:
  + Add support for Java VM (BD-J) on MacOS.
  + Add clip_id to BLURAY_CLIP_INFO.
  + Add a suitable JVM path for Fedora/RHEL and clones.
  + Add support for AVCHD 8.3 filenames.
  + Add player setting for disabling persistent storage.
  + Add bd_set_rate().
  + Add playback time position to BD_EVENT_SEEK.
  + Add BD_VK_ROOT_MENU handling.
  + Add support for heavily fragmented 3D .m2ts files.
  + Improve Win32 dll loading security.
  + Improve playback resume position accuracy.
  + Improve error resilience and stability.
  + Fix using libmmbd with unmounted discs.
  + Fix leaks.
  + Delay BD-J overlay opening until something visible has been
    drawn.
  + Close BD-J overlay when window is not visible.
  + Use temporary storage when cache or persistent root location is
    unknown.
- Fixed patch libbluray-jvm_dir.patch.
- Changed soname version to 2.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 1.0.1:
  + Add possibility to check whether BD-J is functional without
    opening a disc.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Fix Windows dll loading.
  + Fix JAVA_HOME environment variable handling in Windows.
  + Fix build issues when CPPFLAGS is given in make command line.
  + Fix MSVC build issues.
  + Remove --disable-bdjava and --disable-udf configure options.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505044800">- BuildConflict with java-devel &gt;= 1.9. Java 8 is the last to
  support source_version 1.5.</changelog>
  <changelog author="fstrba@suse.com" date="1509364800">- Added patch:
  * libbluray-java9.patch
    + Fix build with jdk9
    + Due to incompatible changes in jdk9, the same code cannot be
    built with jdk9 and jdk &lt;= 1.8
    + Only apply on systems that hava jdk9</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512475200">- Update to version 1.0.2:
  + Add initial support for UHD BluRay discs (without BD-J menus).
  + Detect JRE (from the Java Applet plugin) on MacOS.
  + Improve error resilience and stability.
  + Improve libmmbd support.
  + Fix static build dependencies in pkgconfig file.
  + Fix creation of cache (sub-)directories on windows platforms.
  + Fix BD-J temporary storage when persistent storage is disabled.
  + Fix leaks.
- At least java-devel &gt;= 1.8 ist required for build.</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher, since some removal of
  deprecated SecurityManager functions makes BD-J not buildable
  with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1513684801">- Modified patch:
  * libbluray-java9.patch
    + Some change in hunks integrating upstream fixes that were
    partially different from ours.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637841600">- Update to 1.3.0:
  + Add bd_event_name().
  + Add return value to bd_refcnt_inc().
  + Add cache for parsed clpi file data.
  + Add player setting for JRE location (JAVA_HOME).
  + Improve FreeBSD BD-J support.
  + Improve portability.
  + Improve JVM and .jar file probing.
  + Fix leak.
- Update to 1.2.1:
  + Add initial support for .fmts files.
  + Improve missing/broken playlist handling.
  + Improve UHD metadata support.
  + Improve BD-J compability.
  + Improve error resilience and stability.
  + Fix long delay in "Evangelion, You are (not) alone" menu.
  + Fix JVM bootstrap issues with some Java 9 versions.
  + Fix sign extended bytes when reading single bytes in BDJ.
  + Fix creating organization and disc specific BD-J BUDA
    directories.
  + Use external libudfread when available.
  + Rename list_titles to bd_list_titles and add it to installed
    programs.
- Update to version 1.2.0:
  + Add functions to list and read BD-ROM files.
  + Add support for separate key pressed / typed / released user
    input events.
  + Add support for AWT mouse events (BD-J).
  + Fix build with OpenJDK 12 / 13.
- Update to version 1.1.2:
  + Add libxml version to pkg-config Requires.private.
  + Improve support for NetBSD operating system.
  + Improve BD-J compability.
  + Improve Java 8+ compability.
  + Fix main playlist caching in Windows.
  + Fix mark triggering when multiple marks are passed during
    single read().
  + Fix seek bar pop-up at chapter boundary with some discs.
  + Fix reading resources indirectly from mounted .jar file.
- Update to version 1.1.1:
  + Enable playback without menus when index.bdmv is missing.
  + Improve error resilience and stability.
  + Improve BD-J compability.
  + Fix loading libraries on MacOS / hardened runtime.
  + Fix resetting user-selected streams when playing without menus.
  + Fix stack overflow when using Java9+ with debugger connection.
  + Fix polygon-based BD-J graphics primitives.
  + Fix loading libmmbd in Windows 64-bit.
  + Fix loading classes with Windows Java 8.
  + Fix build with Java 1.6.
  + Fix pkg-config Libs.private.
- Update to version 1.1.0:
  + Add initial support for OpenJDK 11.
  + Add initial support for UHD disc BD-J menus.
  + Add support for compiling .jar file with Java 9+ compiler.
  + Move AWT classes to separate .jar file.
  + Update libudfread submodule repository URL.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Improve BD-J compability.
  + Fix playback of some broken BD-J discs.
  + Fix playback of discs without normal titles (only TopMenu /
    FirstPlay title).
- Remove unused dependencies from pkgconfig(libbluray)
  Our pkg is dynamically linked, so Libs.private is not needed
  Nothing in the exported header files needs paths from
  Requires.private
  * libbluray-pkgconfig.patch
- Refresh libbluray-java9.patch
- Drop libbluray-jvm_dir.patch
- Enable build against java-devel &gt;= 10.</changelog>
  <changelog author="pgajdos@suse.com" date="1652356800">- fix build for both 15sp3 and 15sp4 [bsc#1199463]
- added patches
  implement the new java.io.FileSystem.isInvalid method that entered all
  supported java versions with April 2022 CPU (taken from Factory)
  + libbluray-April2022CPU.patch</changelog>
</package>
<package pkgid="777f0b564eafe8fcb5d6a7ceb36efa19f65b37d314f008aa2739d3fa36876a56" name="libbluray2-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="150000.4.2.1"/>
  <changelog author="tchvatal@suse.com" date="1425643200">- Put the configure args each on its own line</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1430395200">- Update to version 0.8.0:
  + Add security checks to BD-J.
  + Add support for UDF image files and unmounted discs.
  + Add UDF volume identifier to DISC_INFO.
  + Add bd_init(), bd_open_disc() and bd_open_stream().
  + Add /usr/share/libbluray/lib/ to .jar file search paths.
  + Add BD_EVENT_PLAYLIST_STOP (playlist playback is interrupted).
  + Accept directory name (without .jar file name) in LIBBLURAY_CP.
  + Improved error resilence.
  + Improve BD-J compability.
  + Fix Java 8u40 compability.
  + Fix infinite loop with some broken HDMV menus.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.
- Build with UDF support.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1432296000">- Update to version 0.8.1:
  + Notify application when UO mask changes.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix crash after bd_open(NULL).
  + Fix compability problem with libbdplus.
  + Fix memory leak in UDF filesystem parser.
  + Fix crash in freetype.</changelog>
  <changelog author="olaf@aepfle.de" date="1439208000">- Fix build in SLE_11</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1444046400">- Update to version 0.9.0:
  + Add functions to read files from VFS.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix Xlet-initiated font caching.
  + Fix return value when setting BLURAY_PLAYER_SETTING_DECODE_PG.
  + Fix build with C++ compiler</changelog>
  <changelog author="idonmez@suse.com" date="1446638400">- Update to version 0.9.1
  + Improved BD-J security.
  + Improved error resilience.
  + Improved seeking (avoid skipping PAT/PMT/PCR).
  + Fix UO mask check when bd_play_title() is used for Top Menu.
  + Fix re-starting of title bound Xlets when title changes.
  + Fix loading classes with invalid debug info.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1449144000">- Update to version 0.9.2:
  + Add primary audio stream to bd_select_stream().
  + Improve error resilience.
  + Fix Java 8 compability issues.
  + Fix Android build.
  + Fix SecurityException in AWTAutoShutdown.
  + Fix BD-J check when install path in Windows contains
    non-ASCII chars.
  + Fix jvm.dll loading in Windows ($JAVA_HOME/bin should be in
    dll load path).
  + Fix class translating in recent Java 8 versions.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1463486400">- Update to version 0.9.3:
  + Add bd_open_files(). This function deprecates old global file
    system hooks.
  + Add flag for on-disc menu support to DISC_INFO.
  + Add configure argument to disable building of JAR file.
  + Add missing player settings enums.
  + Update linux Java search path list and preferred JVM.
  + Enable UDF support by default.
  + Split developer tools from examples.
  + Improve BDJ_EVENT_CHAPTER triggering.
  + Improve main title detection.
  + Improve error resilience.
  + Improve BD-J compability.
  + Improve detecting of working aacs implementation.
  + Improve libmmbd support.
  + Fix BD-J media player stop().
  + Fix restoring playback rate with some BD-J discs.
  + Fix restoring suspended playback time position.
  + Fix current chapter lookup.
  + Fix lost key focus with multi-HScene discs.
  + Fix playback of discs without Top Menu title.
  + Fix caching of some BD-J files from UDF filesystem.
  + Fix stopping playback from HDMV menus.
  + Fix possible errors in win32 .iso image reading.
  + Fix undefined values in DISC_INFO.
  + Fix memory leaks.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="tchvatal@suse.com" date="1463659200">- Fix download url to not fail on network error</changelog>
  <changelog author="tchvatal@suse.com" date="1471348800">- Drop libbluray-autotools.patch as it has no real benefit and if
  something should be upstreamed</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486036800">- add patch to expose clip_id (as applied by Debian), which is
  necessary to build packages that depend on it (such as Handbrake)
  * A02-expose-clip_id.patch</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486900800">- drop patch A02-expopse-clip_id.patch as Handbrake seems to be the only
  package that needs it, to avoid binary runtime incompatibilities with
  libbluray packages that would stem from other repositories</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Rename %soname to %sover to better reflect its use.
  Fix RPM groups.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1488542400">- Update to version 1.0.0:
  + Add support for Java VM (BD-J) on MacOS.
  + Add clip_id to BLURAY_CLIP_INFO.
  + Add a suitable JVM path for Fedora/RHEL and clones.
  + Add support for AVCHD 8.3 filenames.
  + Add player setting for disabling persistent storage.
  + Add bd_set_rate().
  + Add playback time position to BD_EVENT_SEEK.
  + Add BD_VK_ROOT_MENU handling.
  + Add support for heavily fragmented 3D .m2ts files.
  + Improve Win32 dll loading security.
  + Improve playback resume position accuracy.
  + Improve error resilience and stability.
  + Fix using libmmbd with unmounted discs.
  + Fix leaks.
  + Delay BD-J overlay opening until something visible has been
    drawn.
  + Close BD-J overlay when window is not visible.
  + Use temporary storage when cache or persistent root location is
    unknown.
- Fixed patch libbluray-jvm_dir.patch.
- Changed soname version to 2.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 1.0.1:
  + Add possibility to check whether BD-J is functional without
    opening a disc.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Fix Windows dll loading.
  + Fix JAVA_HOME environment variable handling in Windows.
  + Fix build issues when CPPFLAGS is given in make command line.
  + Fix MSVC build issues.
  + Remove --disable-bdjava and --disable-udf configure options.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505044800">- BuildConflict with java-devel &gt;= 1.9. Java 8 is the last to
  support source_version 1.5.</changelog>
  <changelog author="fstrba@suse.com" date="1509364800">- Added patch:
  * libbluray-java9.patch
    + Fix build with jdk9
    + Due to incompatible changes in jdk9, the same code cannot be
    built with jdk9 and jdk &lt;= 1.8
    + Only apply on systems that hava jdk9</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512475200">- Update to version 1.0.2:
  + Add initial support for UHD BluRay discs (without BD-J menus).
  + Detect JRE (from the Java Applet plugin) on MacOS.
  + Improve error resilience and stability.
  + Improve libmmbd support.
  + Fix static build dependencies in pkgconfig file.
  + Fix creation of cache (sub-)directories on windows platforms.
  + Fix BD-J temporary storage when persistent storage is disabled.
  + Fix leaks.
- At least java-devel &gt;= 1.8 ist required for build.</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher, since some removal of
  deprecated SecurityManager functions makes BD-J not buildable
  with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1513684801">- Modified patch:
  * libbluray-java9.patch
    + Some change in hunks integrating upstream fixes that were
    partially different from ours.</changelog>
</package>
<package pkgid="2bff9c8e8291348a07a027a29787c822b71889bdbfb59f91f33a09ef124be695" name="libbluray2-32bit" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="150300.10.7.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1432296000">- Update to version 0.8.1:
  + Notify application when UO mask changes.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix crash after bd_open(NULL).
  + Fix compability problem with libbdplus.
  + Fix memory leak in UDF filesystem parser.
  + Fix crash in freetype.</changelog>
  <changelog author="olaf@aepfle.de" date="1439208000">- Fix build in SLE_11</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1444046400">- Update to version 0.9.0:
  + Add functions to read files from VFS.
  + Improved error resilience.
  + Improved BD-J compability.
  + Fix Xlet-initiated font caching.
  + Fix return value when setting BLURAY_PLAYER_SETTING_DECODE_PG.
  + Fix build with C++ compiler</changelog>
  <changelog author="idonmez@suse.com" date="1446638400">- Update to version 0.9.1
  + Improved BD-J security.
  + Improved error resilience.
  + Improved seeking (avoid skipping PAT/PMT/PCR).
  + Fix UO mask check when bd_play_title() is used for Top Menu.
  + Fix re-starting of title bound Xlets when title changes.
  + Fix loading classes with invalid debug info.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1449144000">- Update to version 0.9.2:
  + Add primary audio stream to bd_select_stream().
  + Improve error resilience.
  + Fix Java 8 compability issues.
  + Fix Android build.
  + Fix SecurityException in AWTAutoShutdown.
  + Fix BD-J check when install path in Windows contains
    non-ASCII chars.
  + Fix jvm.dll loading in Windows ($JAVA_HOME/bin should be in
    dll load path).
  + Fix class translating in recent Java 8 versions.
- Fixed patches libbluray-autotools.patch and libbluray-jvm_dir.patch.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1463486400">- Update to version 0.9.3:
  + Add bd_open_files(). This function deprecates old global file
    system hooks.
  + Add flag for on-disc menu support to DISC_INFO.
  + Add configure argument to disable building of JAR file.
  + Add missing player settings enums.
  + Update linux Java search path list and preferred JVM.
  + Enable UDF support by default.
  + Split developer tools from examples.
  + Improve BDJ_EVENT_CHAPTER triggering.
  + Improve main title detection.
  + Improve error resilience.
  + Improve BD-J compability.
  + Improve detecting of working aacs implementation.
  + Improve libmmbd support.
  + Fix BD-J media player stop().
  + Fix restoring playback rate with some BD-J discs.
  + Fix restoring suspended playback time position.
  + Fix current chapter lookup.
  + Fix lost key focus with multi-HScene discs.
  + Fix playback of discs without Top Menu title.
  + Fix caching of some BD-J files from UDF filesystem.
  + Fix stopping playback from HDMV menus.
  + Fix possible errors in win32 .iso image reading.
  + Fix undefined values in DISC_INFO.
  + Fix memory leaks.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="tchvatal@suse.com" date="1463659200">- Fix download url to not fail on network error</changelog>
  <changelog author="tchvatal@suse.com" date="1471348800">- Drop libbluray-autotools.patch as it has no real benefit and if
  something should be upstreamed</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486036800">- add patch to expose clip_id (as applied by Debian), which is
  necessary to build packages that depend on it (such as Handbrake)
  * A02-expose-clip_id.patch</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1486900800">- drop patch A02-expopse-clip_id.patch as Handbrake seems to be the only
  package that needs it, to avoid binary runtime incompatibilities with
  libbluray packages that would stem from other repositories</changelog>
  <changelog author="jengelh@inai.de" date="1486987200">- Rename %soname to %sover to better reflect its use.
  Fix RPM groups.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1488542400">- Update to version 1.0.0:
  + Add support for Java VM (BD-J) on MacOS.
  + Add clip_id to BLURAY_CLIP_INFO.
  + Add a suitable JVM path for Fedora/RHEL and clones.
  + Add support for AVCHD 8.3 filenames.
  + Add player setting for disabling persistent storage.
  + Add bd_set_rate().
  + Add playback time position to BD_EVENT_SEEK.
  + Add BD_VK_ROOT_MENU handling.
  + Add support for heavily fragmented 3D .m2ts files.
  + Improve Win32 dll loading security.
  + Improve playback resume position accuracy.
  + Improve error resilience and stability.
  + Fix using libmmbd with unmounted discs.
  + Fix leaks.
  + Delay BD-J overlay opening until something visible has been
    drawn.
  + Close BD-J overlay when window is not visible.
  + Use temporary storage when cache or persistent root location is
    unknown.
- Fixed patch libbluray-jvm_dir.patch.
- Changed soname version to 2.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1497528000">- Update to version 1.0.1:
  + Add possibility to check whether BD-J is functional without
    opening a disc.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Fix Windows dll loading.
  + Fix JAVA_HOME environment variable handling in Windows.
  + Fix build issues when CPPFLAGS is given in make command line.
  + Fix MSVC build issues.
  + Remove --disable-bdjava and --disable-udf configure options.
- Fixed patch libbluray-jvm_dir.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505044800">- BuildConflict with java-devel &gt;= 1.9. Java 8 is the last to
  support source_version 1.5.</changelog>
  <changelog author="fstrba@suse.com" date="1509364800">- Added patch:
  * libbluray-java9.patch
    + Fix build with jdk9
    + Due to incompatible changes in jdk9, the same code cannot be
    built with jdk9 and jdk &lt;= 1.8
    + Only apply on systems that hava jdk9</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1512475200">- Update to version 1.0.2:
  + Add initial support for UHD BluRay discs (without BD-J menus).
  + Detect JRE (from the Java Applet plugin) on MacOS.
  + Improve error resilience and stability.
  + Improve libmmbd support.
  + Fix static build dependencies in pkgconfig file.
  + Fix creation of cache (sub-)directories on windows platforms.
  + Fix BD-J temporary storage when persistent storage is disabled.
  + Fix leaks.
- At least java-devel &gt;= 1.8 ist required for build.</changelog>
  <changelog author="fstrba@suse.com" date="1513684800">- BuildConflict with jdk10 or higher, since some removal of
  deprecated SecurityManager functions makes BD-J not buildable
  with jdk10</changelog>
  <changelog author="fstrba@suse.com" date="1513684801">- Modified patch:
  * libbluray-java9.patch
    + Some change in hunks integrating upstream fixes that were
    partially different from ours.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637841600">- Update to 1.3.0:
  + Add bd_event_name().
  + Add return value to bd_refcnt_inc().
  + Add cache for parsed clpi file data.
  + Add player setting for JRE location (JAVA_HOME).
  + Improve FreeBSD BD-J support.
  + Improve portability.
  + Improve JVM and .jar file probing.
  + Fix leak.
- Update to 1.2.1:
  + Add initial support for .fmts files.
  + Improve missing/broken playlist handling.
  + Improve UHD metadata support.
  + Improve BD-J compability.
  + Improve error resilience and stability.
  + Fix long delay in "Evangelion, You are (not) alone" menu.
  + Fix JVM bootstrap issues with some Java 9 versions.
  + Fix sign extended bytes when reading single bytes in BDJ.
  + Fix creating organization and disc specific BD-J BUDA
    directories.
  + Use external libudfread when available.
  + Rename list_titles to bd_list_titles and add it to installed
    programs.
- Update to version 1.2.0:
  + Add functions to list and read BD-ROM files.
  + Add support for separate key pressed / typed / released user
    input events.
  + Add support for AWT mouse events (BD-J).
  + Fix build with OpenJDK 12 / 13.
- Update to version 1.1.2:
  + Add libxml version to pkg-config Requires.private.
  + Improve support for NetBSD operating system.
  + Improve BD-J compability.
  + Improve Java 8+ compability.
  + Fix main playlist caching in Windows.
  + Fix mark triggering when multiple marks are passed during
    single read().
  + Fix seek bar pop-up at chapter boundary with some discs.
  + Fix reading resources indirectly from mounted .jar file.
- Update to version 1.1.1:
  + Enable playback without menus when index.bdmv is missing.
  + Improve error resilience and stability.
  + Improve BD-J compability.
  + Fix loading libraries on MacOS / hardened runtime.
  + Fix resetting user-selected streams when playing without menus.
  + Fix stack overflow when using Java9+ with debugger connection.
  + Fix polygon-based BD-J graphics primitives.
  + Fix loading libmmbd in Windows 64-bit.
  + Fix loading classes with Windows Java 8.
  + Fix build with Java 1.6.
  + Fix pkg-config Libs.private.
- Update to version 1.1.0:
  + Add initial support for OpenJDK 11.
  + Add initial support for UHD disc BD-J menus.
  + Add support for compiling .jar file with Java 9+ compiler.
  + Move AWT classes to separate .jar file.
  + Update libudfread submodule repository URL.
  + Improve main title selection.
  + Improve error resilience and stability.
  + Improve BD-J compability.
  + Fix playback of some broken BD-J discs.
  + Fix playback of discs without normal titles (only TopMenu /
    FirstPlay title).
- Remove unused dependencies from pkgconfig(libbluray)
  Our pkg is dynamically linked, so Libs.private is not needed
  Nothing in the exported header files needs paths from
  Requires.private
  * libbluray-pkgconfig.patch
- Refresh libbluray-java9.patch
- Drop libbluray-jvm_dir.patch
- Enable build against java-devel &gt;= 10.</changelog>
  <changelog author="pgajdos@suse.com" date="1652356800">- fix build for both 15sp3 and 15sp4 [bsc#1199463]
- added patches
  implement the new java.io.FileSystem.isInvalid method that entered all
  supported java versions with April 2022 CPU (taken from Factory)
  + libbluray-April2022CPU.patch</changelog>
</package>
<package pkgid="c56f62630491a40a040fa665da82e4f710915e02689211c0da659c7efeb906eb" name="libcaca" arch="src">
  <version epoch="0" ver="0.99.beta19.git20171003" rel="150200.11.6.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1412164800">- Cleanup buildRequires, remove use of xorg-x11-*</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1412337600">- Add baselibs.conf as source to make factory-auto bot happy</changelog>
  <changelog author="olaf@aepfle.de" date="1421323200">- Remove __DATE__ usage from cacaclock</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 0.99beta19
  * No changelog available
- Remove automake-1.12.patch; fixed on upstream release</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- Update libcaca-ruby_vendor_install.patch: Use RbConfig::CONFIG
  instead of Config::Config to be compatible with ruby 2.2.</changelog>
  <changelog author="dvlaeev@suse.com" date="1426852800">- Build without Mono by default
  coolo says: "We don't want mono in Factory, if somebody needs it
  it should be set explicit (with_mono) per prjconf"</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Add libcaca-ncurses6.patch: defined against a function name never
  worked, so set_escdelay was actually never used. With curses 6.0,
  though, ESCDELAY is no longer 'a variable', but a reference to a
  function, so we can't assign anything to it. We just assume that
  we always use a recent enough version of ncurses to have
  set_escdelay avaialble.</changelog>
  <changelog author="hguo@suse.com" date="1457697600">- Require imlib2-loaders in caca-utils package.
  All of the utilities fail to load any image without the dependency.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Fix URL
- Mention github repo containing more changes
- Format with spec-cleaner
- Remove support for older distros lets stick with latest only
- Remove for years disabled mono and java integration code snippets
- Use python macros to build python instead of waiting for autotools
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Switch to git repack service in order to get all the latest fixes
  * like python3 porting of the bindings
- Update to version 0.99.beta19+git20171002.da28e96:
  * img2text.c: fix width arg case in example
  * ruby: require 'caca' instead of 'caca.so'
  * Only fail the check-copyright test if more than 10 files are affected.
  * Try to run Coverity from Travis CI.
  * Add some missing breaks (thanks coverity)
  * Fix header copyright.
  * Fix a bug into the autorepeat trigger.
- Refresh patches:
  * libcaca-ruby_am_cflags.patch
  * libcaca-ruby_vendor_install.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop the py2 bindings they fail to build using rpm macros and
  somehow ingnore LD_LIBRARY_PATH, anyway provide py3 variant and
  stick with that</changelog>
  <changelog author="davejplater@gmail.com" date="1517313600">- Deleted _service and use spec file to download git version.
- Shorten version field to joliet usable length.
- Change python headers to allow bindings to build normally with
  python3.
- Use %license for license document.</changelog>
  <changelog author="josef.moellers@suse.com" date="1547553600">- Fix the size of width and height to be of size_t rather than
  unsigned int which may be too small on 64 bit architectures.
  This fixes three CVS and associated bugs.
  [CVE-2018-20545, bsc#1120584, CVE-2018-20548, bsc#1120589,
  CVE-2018-20549, bsc#1120470, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072000">- Fix the size of width and height to be of size_t rather than
  int in struct caca_dither. Re-using existing patch.
  [CVE-2018-20546, bsc#1120503, CVE-2018-20547,
  bsc#1120504, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072001">- Cast intermediate results to 64 bits to prevent overflow of
  calculations with 32-bit quentities.
  [CVE-2018-20544, bsc#1120502,
  Bug1120502-add_cast_to_prevent_overflow.patch]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1564660800">- Add Bug1143286_libcaca_configure_ac_chg_for_lto.patch
  bypass boo#1143286</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1582718400">- Refresh spec-file via spec-cleaner.
- Add Requires:toilet for caca-utils, because need for cacaclock.</changelog>
  <changelog author="josef.moellers@suse.com" date="1583841600">- The contents of libcaca-prevent-overflow.patch
  have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
  and libcaca-variable-type.patch
  [libcaca-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1646308800">- If an image has a size of 0x0, when exporting, no data is written
  and space is allocated for the header only, not taking into
  account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1651060800">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
</package>
<package pkgid="dae8b46aa3505828f98b5e085bd9d12e60ff22eece61059849d73e51ade8c820" name="libcaca-devel" arch="aarch64">
  <version epoch="0" ver="0.99.beta19.git20171003" rel="150200.11.6.1"/>
  <changelog author="olaf@aepfle.de" date="1421323200">- Remove __DATE__ usage from cacaclock</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 0.99beta19
  * No changelog available
- Remove automake-1.12.patch; fixed on upstream release</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- Update libcaca-ruby_vendor_install.patch: Use RbConfig::CONFIG
  instead of Config::Config to be compatible with ruby 2.2.</changelog>
  <changelog author="dvlaeev@suse.com" date="1426852800">- Build without Mono by default
  coolo says: "We don't want mono in Factory, if somebody needs it
  it should be set explicit (with_mono) per prjconf"</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Add libcaca-ncurses6.patch: defined against a function name never
  worked, so set_escdelay was actually never used. With curses 6.0,
  though, ESCDELAY is no longer 'a variable', but a reference to a
  function, so we can't assign anything to it. We just assume that
  we always use a recent enough version of ncurses to have
  set_escdelay avaialble.</changelog>
  <changelog author="hguo@suse.com" date="1457697600">- Require imlib2-loaders in caca-utils package.
  All of the utilities fail to load any image without the dependency.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Fix URL
- Mention github repo containing more changes
- Format with spec-cleaner
- Remove support for older distros lets stick with latest only
- Remove for years disabled mono and java integration code snippets
- Use python macros to build python instead of waiting for autotools
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Switch to git repack service in order to get all the latest fixes
  * like python3 porting of the bindings
- Update to version 0.99.beta19+git20171002.da28e96:
  * img2text.c: fix width arg case in example
  * ruby: require 'caca' instead of 'caca.so'
  * Only fail the check-copyright test if more than 10 files are affected.
  * Try to run Coverity from Travis CI.
  * Add some missing breaks (thanks coverity)
  * Fix header copyright.
  * Fix a bug into the autorepeat trigger.
- Refresh patches:
  * libcaca-ruby_am_cflags.patch
  * libcaca-ruby_vendor_install.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop the py2 bindings they fail to build using rpm macros and
  somehow ingnore LD_LIBRARY_PATH, anyway provide py3 variant and
  stick with that</changelog>
  <changelog author="davejplater@gmail.com" date="1517313600">- Deleted _service and use spec file to download git version.
- Shorten version field to joliet usable length.
- Change python headers to allow bindings to build normally with
  python3.
- Use %license for license document.</changelog>
  <changelog author="josef.moellers@suse.com" date="1547553600">- Fix the size of width and height to be of size_t rather than
  unsigned int which may be too small on 64 bit architectures.
  This fixes three CVS and associated bugs.
  [CVE-2018-20545, bsc#1120584, CVE-2018-20548, bsc#1120589,
  CVE-2018-20549, bsc#1120470, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072000">- Fix the size of width and height to be of size_t rather than
  int in struct caca_dither. Re-using existing patch.
  [CVE-2018-20546, bsc#1120503, CVE-2018-20547,
  bsc#1120504, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072001">- Cast intermediate results to 64 bits to prevent overflow of
  calculations with 32-bit quentities.
  [CVE-2018-20544, bsc#1120502,
  Bug1120502-add_cast_to_prevent_overflow.patch]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1564660800">- Add Bug1143286_libcaca_configure_ac_chg_for_lto.patch
  bypass boo#1143286</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1582718400">- Refresh spec-file via spec-cleaner.
- Add Requires:toilet for caca-utils, because need for cacaclock.</changelog>
  <changelog author="josef.moellers@suse.com" date="1583841600">- The contents of libcaca-prevent-overflow.patch
  have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
  and libcaca-variable-type.patch
  [libcaca-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1646308800">- If an image has a size of 0x0, when exporting, no data is written
  and space is allocated for the header only, not taking into
  account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1651060800">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
</package>
<package pkgid="35a017434aaf5b99334338256a93701ba983fa475e88db20fddfb02686bcf322" name="libcaca-devel" arch="ppc64le">
  <version epoch="0" ver="0.99.beta19.git20171003" rel="150200.11.6.1"/>
  <changelog author="olaf@aepfle.de" date="1421323200">- Remove __DATE__ usage from cacaclock</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 0.99beta19
  * No changelog available
- Remove automake-1.12.patch; fixed on upstream release</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- Update libcaca-ruby_vendor_install.patch: Use RbConfig::CONFIG
  instead of Config::Config to be compatible with ruby 2.2.</changelog>
  <changelog author="dvlaeev@suse.com" date="1426852800">- Build without Mono by default
  coolo says: "We don't want mono in Factory, if somebody needs it
  it should be set explicit (with_mono) per prjconf"</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Add libcaca-ncurses6.patch: defined against a function name never
  worked, so set_escdelay was actually never used. With curses 6.0,
  though, ESCDELAY is no longer 'a variable', but a reference to a
  function, so we can't assign anything to it. We just assume that
  we always use a recent enough version of ncurses to have
  set_escdelay avaialble.</changelog>
  <changelog author="hguo@suse.com" date="1457697600">- Require imlib2-loaders in caca-utils package.
  All of the utilities fail to load any image without the dependency.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Fix URL
- Mention github repo containing more changes
- Format with spec-cleaner
- Remove support for older distros lets stick with latest only
- Remove for years disabled mono and java integration code snippets
- Use python macros to build python instead of waiting for autotools
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Switch to git repack service in order to get all the latest fixes
  * like python3 porting of the bindings
- Update to version 0.99.beta19+git20171002.da28e96:
  * img2text.c: fix width arg case in example
  * ruby: require 'caca' instead of 'caca.so'
  * Only fail the check-copyright test if more than 10 files are affected.
  * Try to run Coverity from Travis CI.
  * Add some missing breaks (thanks coverity)
  * Fix header copyright.
  * Fix a bug into the autorepeat trigger.
- Refresh patches:
  * libcaca-ruby_am_cflags.patch
  * libcaca-ruby_vendor_install.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop the py2 bindings they fail to build using rpm macros and
  somehow ingnore LD_LIBRARY_PATH, anyway provide py3 variant and
  stick with that</changelog>
  <changelog author="davejplater@gmail.com" date="1517313600">- Deleted _service and use spec file to download git version.
- Shorten version field to joliet usable length.
- Change python headers to allow bindings to build normally with
  python3.
- Use %license for license document.</changelog>
  <changelog author="josef.moellers@suse.com" date="1547553600">- Fix the size of width and height to be of size_t rather than
  unsigned int which may be too small on 64 bit architectures.
  This fixes three CVS and associated bugs.
  [CVE-2018-20545, bsc#1120584, CVE-2018-20548, bsc#1120589,
  CVE-2018-20549, bsc#1120470, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072000">- Fix the size of width and height to be of size_t rather than
  int in struct caca_dither. Re-using existing patch.
  [CVE-2018-20546, bsc#1120503, CVE-2018-20547,
  bsc#1120504, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072001">- Cast intermediate results to 64 bits to prevent overflow of
  calculations with 32-bit quentities.
  [CVE-2018-20544, bsc#1120502,
  Bug1120502-add_cast_to_prevent_overflow.patch]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1564660800">- Add Bug1143286_libcaca_configure_ac_chg_for_lto.patch
  bypass boo#1143286</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1582718400">- Refresh spec-file via spec-cleaner.
- Add Requires:toilet for caca-utils, because need for cacaclock.</changelog>
  <changelog author="josef.moellers@suse.com" date="1583841600">- The contents of libcaca-prevent-overflow.patch
  have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
  and libcaca-variable-type.patch
  [libcaca-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1646308800">- If an image has a size of 0x0, when exporting, no data is written
  and space is allocated for the header only, not taking into
  account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1651060800">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
</package>
<package pkgid="a02ef0fb6d1f0798bd27f022451c99fbabd418ad5ac52176a1c2c0fb18dbed55" name="libcaca-devel" arch="s390x">
  <version epoch="0" ver="0.99.beta19.git20171003" rel="150200.11.6.1"/>
  <changelog author="olaf@aepfle.de" date="1421323200">- Remove __DATE__ usage from cacaclock</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 0.99beta19
  * No changelog available
- Remove automake-1.12.patch; fixed on upstream release</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- Update libcaca-ruby_vendor_install.patch: Use RbConfig::CONFIG
  instead of Config::Config to be compatible with ruby 2.2.</changelog>
  <changelog author="dvlaeev@suse.com" date="1426852800">- Build without Mono by default
  coolo says: "We don't want mono in Factory, if somebody needs it
  it should be set explicit (with_mono) per prjconf"</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Add libcaca-ncurses6.patch: defined against a function name never
  worked, so set_escdelay was actually never used. With curses 6.0,
  though, ESCDELAY is no longer 'a variable', but a reference to a
  function, so we can't assign anything to it. We just assume that
  we always use a recent enough version of ncurses to have
  set_escdelay avaialble.</changelog>
  <changelog author="hguo@suse.com" date="1457697600">- Require imlib2-loaders in caca-utils package.
  All of the utilities fail to load any image without the dependency.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Fix URL
- Mention github repo containing more changes
- Format with spec-cleaner
- Remove support for older distros lets stick with latest only
- Remove for years disabled mono and java integration code snippets
- Use python macros to build python instead of waiting for autotools
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Switch to git repack service in order to get all the latest fixes
  * like python3 porting of the bindings
- Update to version 0.99.beta19+git20171002.da28e96:
  * img2text.c: fix width arg case in example
  * ruby: require 'caca' instead of 'caca.so'
  * Only fail the check-copyright test if more than 10 files are affected.
  * Try to run Coverity from Travis CI.
  * Add some missing breaks (thanks coverity)
  * Fix header copyright.
  * Fix a bug into the autorepeat trigger.
- Refresh patches:
  * libcaca-ruby_am_cflags.patch
  * libcaca-ruby_vendor_install.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop the py2 bindings they fail to build using rpm macros and
  somehow ingnore LD_LIBRARY_PATH, anyway provide py3 variant and
  stick with that</changelog>
  <changelog author="davejplater@gmail.com" date="1517313600">- Deleted _service and use spec file to download git version.
- Shorten version field to joliet usable length.
- Change python headers to allow bindings to build normally with
  python3.
- Use %license for license document.</changelog>
  <changelog author="josef.moellers@suse.com" date="1547553600">- Fix the size of width and height to be of size_t rather than
  unsigned int which may be too small on 64 bit architectures.
  This fixes three CVS and associated bugs.
  [CVE-2018-20545, bsc#1120584, CVE-2018-20548, bsc#1120589,
  CVE-2018-20549, bsc#1120470, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072000">- Fix the size of width and height to be of size_t rather than
  int in struct caca_dither. Re-using existing patch.
  [CVE-2018-20546, bsc#1120503, CVE-2018-20547,
  bsc#1120504, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072001">- Cast intermediate results to 64 bits to prevent overflow of
  calculations with 32-bit quentities.
  [CVE-2018-20544, bsc#1120502,
  Bug1120502-add_cast_to_prevent_overflow.patch]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1564660800">- Add Bug1143286_libcaca_configure_ac_chg_for_lto.patch
  bypass boo#1143286</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1582718400">- Refresh spec-file via spec-cleaner.
- Add Requires:toilet for caca-utils, because need for cacaclock.</changelog>
  <changelog author="josef.moellers@suse.com" date="1583841600">- The contents of libcaca-prevent-overflow.patch
  have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
  and libcaca-variable-type.patch
  [libcaca-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1646308800">- If an image has a size of 0x0, when exporting, no data is written
  and space is allocated for the header only, not taking into
  account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1651060800">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
</package>
<package pkgid="87208cd0690de09e92dc5eebd20f542116f55e14bc2deaa98c46021a13adfa7e" name="libcaca-devel" arch="x86_64">
  <version epoch="0" ver="0.99.beta19.git20171003" rel="150200.11.6.1"/>
  <changelog author="olaf@aepfle.de" date="1421323200">- Remove __DATE__ usage from cacaclock</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 0.99beta19
  * No changelog available
- Remove automake-1.12.patch; fixed on upstream release</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- Update libcaca-ruby_vendor_install.patch: Use RbConfig::CONFIG
  instead of Config::Config to be compatible with ruby 2.2.</changelog>
  <changelog author="dvlaeev@suse.com" date="1426852800">- Build without Mono by default
  coolo says: "We don't want mono in Factory, if somebody needs it
  it should be set explicit (with_mono) per prjconf"</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Add libcaca-ncurses6.patch: defined against a function name never
  worked, so set_escdelay was actually never used. With curses 6.0,
  though, ESCDELAY is no longer 'a variable', but a reference to a
  function, so we can't assign anything to it. We just assume that
  we always use a recent enough version of ncurses to have
  set_escdelay avaialble.</changelog>
  <changelog author="hguo@suse.com" date="1457697600">- Require imlib2-loaders in caca-utils package.
  All of the utilities fail to load any image without the dependency.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Fix URL
- Mention github repo containing more changes
- Format with spec-cleaner
- Remove support for older distros lets stick with latest only
- Remove for years disabled mono and java integration code snippets
- Use python macros to build python instead of waiting for autotools
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Switch to git repack service in order to get all the latest fixes
  * like python3 porting of the bindings
- Update to version 0.99.beta19+git20171002.da28e96:
  * img2text.c: fix width arg case in example
  * ruby: require 'caca' instead of 'caca.so'
  * Only fail the check-copyright test if more than 10 files are affected.
  * Try to run Coverity from Travis CI.
  * Add some missing breaks (thanks coverity)
  * Fix header copyright.
  * Fix a bug into the autorepeat trigger.
- Refresh patches:
  * libcaca-ruby_am_cflags.patch
  * libcaca-ruby_vendor_install.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop the py2 bindings they fail to build using rpm macros and
  somehow ingnore LD_LIBRARY_PATH, anyway provide py3 variant and
  stick with that</changelog>
  <changelog author="davejplater@gmail.com" date="1517313600">- Deleted _service and use spec file to download git version.
- Shorten version field to joliet usable length.
- Change python headers to allow bindings to build normally with
  python3.
- Use %license for license document.</changelog>
  <changelog author="josef.moellers@suse.com" date="1547553600">- Fix the size of width and height to be of size_t rather than
  unsigned int which may be too small on 64 bit architectures.
  This fixes three CVS and associated bugs.
  [CVE-2018-20545, bsc#1120584, CVE-2018-20548, bsc#1120589,
  CVE-2018-20549, bsc#1120470, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072000">- Fix the size of width and height to be of size_t rather than
  int in struct caca_dither. Re-using existing patch.
  [CVE-2018-20546, bsc#1120503, CVE-2018-20547,
  bsc#1120504, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072001">- Cast intermediate results to 64 bits to prevent overflow of
  calculations with 32-bit quentities.
  [CVE-2018-20544, bsc#1120502,
  Bug1120502-add_cast_to_prevent_overflow.patch]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1564660800">- Add Bug1143286_libcaca_configure_ac_chg_for_lto.patch
  bypass boo#1143286</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1582718400">- Refresh spec-file via spec-cleaner.
- Add Requires:toilet for caca-utils, because need for cacaclock.</changelog>
  <changelog author="josef.moellers@suse.com" date="1583841600">- The contents of libcaca-prevent-overflow.patch
  have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
  and libcaca-variable-type.patch
  [libcaca-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1646308800">- If an image has a size of 0x0, when exporting, no data is written
  and space is allocated for the header only, not taking into
  account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1651060800">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
</package>
<package pkgid="697422fcf7934997c4aca15b01cbd4d8f78f6bc755b1b507172e63018b7ad174" name="libcaca-ruby" arch="aarch64">
  <version epoch="0" ver="0.99.beta19.git20171003" rel="150200.11.6.1"/>
  <changelog author="olaf@aepfle.de" date="1421323200">- Remove __DATE__ usage from cacaclock</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 0.99beta19
  * No changelog available
- Remove automake-1.12.patch; fixed on upstream release</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- Update libcaca-ruby_vendor_install.patch: Use RbConfig::CONFIG
  instead of Config::Config to be compatible with ruby 2.2.</changelog>
  <changelog author="dvlaeev@suse.com" date="1426852800">- Build without Mono by default
  coolo says: "We don't want mono in Factory, if somebody needs it
  it should be set explicit (with_mono) per prjconf"</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Add libcaca-ncurses6.patch: defined against a function name never
  worked, so set_escdelay was actually never used. With curses 6.0,
  though, ESCDELAY is no longer 'a variable', but a reference to a
  function, so we can't assign anything to it. We just assume that
  we always use a recent enough version of ncurses to have
  set_escdelay avaialble.</changelog>
  <changelog author="hguo@suse.com" date="1457697600">- Require imlib2-loaders in caca-utils package.
  All of the utilities fail to load any image without the dependency.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Fix URL
- Mention github repo containing more changes
- Format with spec-cleaner
- Remove support for older distros lets stick with latest only
- Remove for years disabled mono and java integration code snippets
- Use python macros to build python instead of waiting for autotools
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Switch to git repack service in order to get all the latest fixes
  * like python3 porting of the bindings
- Update to version 0.99.beta19+git20171002.da28e96:
  * img2text.c: fix width arg case in example
  * ruby: require 'caca' instead of 'caca.so'
  * Only fail the check-copyright test if more than 10 files are affected.
  * Try to run Coverity from Travis CI.
  * Add some missing breaks (thanks coverity)
  * Fix header copyright.
  * Fix a bug into the autorepeat trigger.
- Refresh patches:
  * libcaca-ruby_am_cflags.patch
  * libcaca-ruby_vendor_install.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop the py2 bindings they fail to build using rpm macros and
  somehow ingnore LD_LIBRARY_PATH, anyway provide py3 variant and
  stick with that</changelog>
  <changelog author="davejplater@gmail.com" date="1517313600">- Deleted _service and use spec file to download git version.
- Shorten version field to joliet usable length.
- Change python headers to allow bindings to build normally with
  python3.
- Use %license for license document.</changelog>
  <changelog author="josef.moellers@suse.com" date="1547553600">- Fix the size of width and height to be of size_t rather than
  unsigned int which may be too small on 64 bit architectures.
  This fixes three CVS and associated bugs.
  [CVE-2018-20545, bsc#1120584, CVE-2018-20548, bsc#1120589,
  CVE-2018-20549, bsc#1120470, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072000">- Fix the size of width and height to be of size_t rather than
  int in struct caca_dither. Re-using existing patch.
  [CVE-2018-20546, bsc#1120503, CVE-2018-20547,
  bsc#1120504, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072001">- Cast intermediate results to 64 bits to prevent overflow of
  calculations with 32-bit quentities.
  [CVE-2018-20544, bsc#1120502,
  Bug1120502-add_cast_to_prevent_overflow.patch]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1564660800">- Add Bug1143286_libcaca_configure_ac_chg_for_lto.patch
  bypass boo#1143286</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1582718400">- Refresh spec-file via spec-cleaner.
- Add Requires:toilet for caca-utils, because need for cacaclock.</changelog>
  <changelog author="josef.moellers@suse.com" date="1583841600">- The contents of libcaca-prevent-overflow.patch
  have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
  and libcaca-variable-type.patch
  [libcaca-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1646308800">- If an image has a size of 0x0, when exporting, no data is written
  and space is allocated for the header only, not taking into
  account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1651060800">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
</package>
<package pkgid="f8080d80feefc1897ee126db398c1eb46b02e30893fec353a54f9f7b17175788" name="libcaca-ruby" arch="ppc64le">
  <version epoch="0" ver="0.99.beta19.git20171003" rel="150200.11.6.1"/>
  <changelog author="olaf@aepfle.de" date="1421323200">- Remove __DATE__ usage from cacaclock</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 0.99beta19
  * No changelog available
- Remove automake-1.12.patch; fixed on upstream release</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- Update libcaca-ruby_vendor_install.patch: Use RbConfig::CONFIG
  instead of Config::Config to be compatible with ruby 2.2.</changelog>
  <changelog author="dvlaeev@suse.com" date="1426852800">- Build without Mono by default
  coolo says: "We don't want mono in Factory, if somebody needs it
  it should be set explicit (with_mono) per prjconf"</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Add libcaca-ncurses6.patch: defined against a function name never
  worked, so set_escdelay was actually never used. With curses 6.0,
  though, ESCDELAY is no longer 'a variable', but a reference to a
  function, so we can't assign anything to it. We just assume that
  we always use a recent enough version of ncurses to have
  set_escdelay avaialble.</changelog>
  <changelog author="hguo@suse.com" date="1457697600">- Require imlib2-loaders in caca-utils package.
  All of the utilities fail to load any image without the dependency.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Fix URL
- Mention github repo containing more changes
- Format with spec-cleaner
- Remove support for older distros lets stick with latest only
- Remove for years disabled mono and java integration code snippets
- Use python macros to build python instead of waiting for autotools
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Switch to git repack service in order to get all the latest fixes
  * like python3 porting of the bindings
- Update to version 0.99.beta19+git20171002.da28e96:
  * img2text.c: fix width arg case in example
  * ruby: require 'caca' instead of 'caca.so'
  * Only fail the check-copyright test if more than 10 files are affected.
  * Try to run Coverity from Travis CI.
  * Add some missing breaks (thanks coverity)
  * Fix header copyright.
  * Fix a bug into the autorepeat trigger.
- Refresh patches:
  * libcaca-ruby_am_cflags.patch
  * libcaca-ruby_vendor_install.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop the py2 bindings they fail to build using rpm macros and
  somehow ingnore LD_LIBRARY_PATH, anyway provide py3 variant and
  stick with that</changelog>
  <changelog author="davejplater@gmail.com" date="1517313600">- Deleted _service and use spec file to download git version.
- Shorten version field to joliet usable length.
- Change python headers to allow bindings to build normally with
  python3.
- Use %license for license document.</changelog>
  <changelog author="josef.moellers@suse.com" date="1547553600">- Fix the size of width and height to be of size_t rather than
  unsigned int which may be too small on 64 bit architectures.
  This fixes three CVS and associated bugs.
  [CVE-2018-20545, bsc#1120584, CVE-2018-20548, bsc#1120589,
  CVE-2018-20549, bsc#1120470, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072000">- Fix the size of width and height to be of size_t rather than
  int in struct caca_dither. Re-using existing patch.
  [CVE-2018-20546, bsc#1120503, CVE-2018-20547,
  bsc#1120504, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072001">- Cast intermediate results to 64 bits to prevent overflow of
  calculations with 32-bit quentities.
  [CVE-2018-20544, bsc#1120502,
  Bug1120502-add_cast_to_prevent_overflow.patch]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1564660800">- Add Bug1143286_libcaca_configure_ac_chg_for_lto.patch
  bypass boo#1143286</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1582718400">- Refresh spec-file via spec-cleaner.
- Add Requires:toilet for caca-utils, because need for cacaclock.</changelog>
  <changelog author="josef.moellers@suse.com" date="1583841600">- The contents of libcaca-prevent-overflow.patch
  have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
  and libcaca-variable-type.patch
  [libcaca-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1646308800">- If an image has a size of 0x0, when exporting, no data is written
  and space is allocated for the header only, not taking into
  account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1651060800">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
</package>
<package pkgid="fd746e41b7a1cdfb0633eab7b6b2e165bbd8487d802af2654a69d7e8156571c1" name="libcaca-ruby" arch="s390x">
  <version epoch="0" ver="0.99.beta19.git20171003" rel="150200.11.6.1"/>
  <changelog author="olaf@aepfle.de" date="1421323200">- Remove __DATE__ usage from cacaclock</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 0.99beta19
  * No changelog available
- Remove automake-1.12.patch; fixed on upstream release</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- Update libcaca-ruby_vendor_install.patch: Use RbConfig::CONFIG
  instead of Config::Config to be compatible with ruby 2.2.</changelog>
  <changelog author="dvlaeev@suse.com" date="1426852800">- Build without Mono by default
  coolo says: "We don't want mono in Factory, if somebody needs it
  it should be set explicit (with_mono) per prjconf"</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Add libcaca-ncurses6.patch: defined against a function name never
  worked, so set_escdelay was actually never used. With curses 6.0,
  though, ESCDELAY is no longer 'a variable', but a reference to a
  function, so we can't assign anything to it. We just assume that
  we always use a recent enough version of ncurses to have
  set_escdelay avaialble.</changelog>
  <changelog author="hguo@suse.com" date="1457697600">- Require imlib2-loaders in caca-utils package.
  All of the utilities fail to load any image without the dependency.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Fix URL
- Mention github repo containing more changes
- Format with spec-cleaner
- Remove support for older distros lets stick with latest only
- Remove for years disabled mono and java integration code snippets
- Use python macros to build python instead of waiting for autotools
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Switch to git repack service in order to get all the latest fixes
  * like python3 porting of the bindings
- Update to version 0.99.beta19+git20171002.da28e96:
  * img2text.c: fix width arg case in example
  * ruby: require 'caca' instead of 'caca.so'
  * Only fail the check-copyright test if more than 10 files are affected.
  * Try to run Coverity from Travis CI.
  * Add some missing breaks (thanks coverity)
  * Fix header copyright.
  * Fix a bug into the autorepeat trigger.
- Refresh patches:
  * libcaca-ruby_am_cflags.patch
  * libcaca-ruby_vendor_install.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop the py2 bindings they fail to build using rpm macros and
  somehow ingnore LD_LIBRARY_PATH, anyway provide py3 variant and
  stick with that</changelog>
  <changelog author="davejplater@gmail.com" date="1517313600">- Deleted _service and use spec file to download git version.
- Shorten version field to joliet usable length.
- Change python headers to allow bindings to build normally with
  python3.
- Use %license for license document.</changelog>
  <changelog author="josef.moellers@suse.com" date="1547553600">- Fix the size of width and height to be of size_t rather than
  unsigned int which may be too small on 64 bit architectures.
  This fixes three CVS and associated bugs.
  [CVE-2018-20545, bsc#1120584, CVE-2018-20548, bsc#1120589,
  CVE-2018-20549, bsc#1120470, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072000">- Fix the size of width and height to be of size_t rather than
  int in struct caca_dither. Re-using existing patch.
  [CVE-2018-20546, bsc#1120503, CVE-2018-20547,
  bsc#1120504, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072001">- Cast intermediate results to 64 bits to prevent overflow of
  calculations with 32-bit quentities.
  [CVE-2018-20544, bsc#1120502,
  Bug1120502-add_cast_to_prevent_overflow.patch]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1564660800">- Add Bug1143286_libcaca_configure_ac_chg_for_lto.patch
  bypass boo#1143286</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1582718400">- Refresh spec-file via spec-cleaner.
- Add Requires:toilet for caca-utils, because need for cacaclock.</changelog>
  <changelog author="josef.moellers@suse.com" date="1583841600">- The contents of libcaca-prevent-overflow.patch
  have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
  and libcaca-variable-type.patch
  [libcaca-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1646308800">- If an image has a size of 0x0, when exporting, no data is written
  and space is allocated for the header only, not taking into
  account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1651060800">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
</package>
<package pkgid="799ac7c68e2608acd9f86fd1d753e3b3d99a01590185f8c89b32b0bcf4394c96" name="libcaca-ruby" arch="x86_64">
  <version epoch="0" ver="0.99.beta19.git20171003" rel="150200.11.6.1"/>
  <changelog author="olaf@aepfle.de" date="1421323200">- Remove __DATE__ usage from cacaclock</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 0.99beta19
  * No changelog available
- Remove automake-1.12.patch; fixed on upstream release</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- Update libcaca-ruby_vendor_install.patch: Use RbConfig::CONFIG
  instead of Config::Config to be compatible with ruby 2.2.</changelog>
  <changelog author="dvlaeev@suse.com" date="1426852800">- Build without Mono by default
  coolo says: "We don't want mono in Factory, if somebody needs it
  it should be set explicit (with_mono) per prjconf"</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Add libcaca-ncurses6.patch: defined against a function name never
  worked, so set_escdelay was actually never used. With curses 6.0,
  though, ESCDELAY is no longer 'a variable', but a reference to a
  function, so we can't assign anything to it. We just assume that
  we always use a recent enough version of ncurses to have
  set_escdelay avaialble.</changelog>
  <changelog author="hguo@suse.com" date="1457697600">- Require imlib2-loaders in caca-utils package.
  All of the utilities fail to load any image without the dependency.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Fix URL
- Mention github repo containing more changes
- Format with spec-cleaner
- Remove support for older distros lets stick with latest only
- Remove for years disabled mono and java integration code snippets
- Use python macros to build python instead of waiting for autotools
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Switch to git repack service in order to get all the latest fixes
  * like python3 porting of the bindings
- Update to version 0.99.beta19+git20171002.da28e96:
  * img2text.c: fix width arg case in example
  * ruby: require 'caca' instead of 'caca.so'
  * Only fail the check-copyright test if more than 10 files are affected.
  * Try to run Coverity from Travis CI.
  * Add some missing breaks (thanks coverity)
  * Fix header copyright.
  * Fix a bug into the autorepeat trigger.
- Refresh patches:
  * libcaca-ruby_am_cflags.patch
  * libcaca-ruby_vendor_install.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop the py2 bindings they fail to build using rpm macros and
  somehow ingnore LD_LIBRARY_PATH, anyway provide py3 variant and
  stick with that</changelog>
  <changelog author="davejplater@gmail.com" date="1517313600">- Deleted _service and use spec file to download git version.
- Shorten version field to joliet usable length.
- Change python headers to allow bindings to build normally with
  python3.
- Use %license for license document.</changelog>
  <changelog author="josef.moellers@suse.com" date="1547553600">- Fix the size of width and height to be of size_t rather than
  unsigned int which may be too small on 64 bit architectures.
  This fixes three CVS and associated bugs.
  [CVE-2018-20545, bsc#1120584, CVE-2018-20548, bsc#1120589,
  CVE-2018-20549, bsc#1120470, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072000">- Fix the size of width and height to be of size_t rather than
  int in struct caca_dither. Re-using existing patch.
  [CVE-2018-20546, bsc#1120503, CVE-2018-20547,
  bsc#1120504, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072001">- Cast intermediate results to 64 bits to prevent overflow of
  calculations with 32-bit quentities.
  [CVE-2018-20544, bsc#1120502,
  Bug1120502-add_cast_to_prevent_overflow.patch]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1564660800">- Add Bug1143286_libcaca_configure_ac_chg_for_lto.patch
  bypass boo#1143286</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1582718400">- Refresh spec-file via spec-cleaner.
- Add Requires:toilet for caca-utils, because need for cacaclock.</changelog>
  <changelog author="josef.moellers@suse.com" date="1583841600">- The contents of libcaca-prevent-overflow.patch
  have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
  and libcaca-variable-type.patch
  [libcaca-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1646308800">- If an image has a size of 0x0, when exporting, no data is written
  and space is allocated for the header only, not taking into
  account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1651060800">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
</package>
<package pkgid="435a7dc685fa7bbf9ce765c34d9b58ec2408e05c01dba0f6201dd43480ee44ff" name="libcaca0" arch="aarch64">
  <version epoch="0" ver="0.99.beta19.git20171003" rel="150200.11.6.1"/>
  <changelog author="olaf@aepfle.de" date="1421323200">- Remove __DATE__ usage from cacaclock</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 0.99beta19
  * No changelog available
- Remove automake-1.12.patch; fixed on upstream release</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- Update libcaca-ruby_vendor_install.patch: Use RbConfig::CONFIG
  instead of Config::Config to be compatible with ruby 2.2.</changelog>
  <changelog author="dvlaeev@suse.com" date="1426852800">- Build without Mono by default
  coolo says: "We don't want mono in Factory, if somebody needs it
  it should be set explicit (with_mono) per prjconf"</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Add libcaca-ncurses6.patch: defined against a function name never
  worked, so set_escdelay was actually never used. With curses 6.0,
  though, ESCDELAY is no longer 'a variable', but a reference to a
  function, so we can't assign anything to it. We just assume that
  we always use a recent enough version of ncurses to have
  set_escdelay avaialble.</changelog>
  <changelog author="hguo@suse.com" date="1457697600">- Require imlib2-loaders in caca-utils package.
  All of the utilities fail to load any image without the dependency.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Fix URL
- Mention github repo containing more changes
- Format with spec-cleaner
- Remove support for older distros lets stick with latest only
- Remove for years disabled mono and java integration code snippets
- Use python macros to build python instead of waiting for autotools
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Switch to git repack service in order to get all the latest fixes
  * like python3 porting of the bindings
- Update to version 0.99.beta19+git20171002.da28e96:
  * img2text.c: fix width arg case in example
  * ruby: require 'caca' instead of 'caca.so'
  * Only fail the check-copyright test if more than 10 files are affected.
  * Try to run Coverity from Travis CI.
  * Add some missing breaks (thanks coverity)
  * Fix header copyright.
  * Fix a bug into the autorepeat trigger.
- Refresh patches:
  * libcaca-ruby_am_cflags.patch
  * libcaca-ruby_vendor_install.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop the py2 bindings they fail to build using rpm macros and
  somehow ingnore LD_LIBRARY_PATH, anyway provide py3 variant and
  stick with that</changelog>
  <changelog author="davejplater@gmail.com" date="1517313600">- Deleted _service and use spec file to download git version.
- Shorten version field to joliet usable length.
- Change python headers to allow bindings to build normally with
  python3.
- Use %license for license document.</changelog>
  <changelog author="josef.moellers@suse.com" date="1547553600">- Fix the size of width and height to be of size_t rather than
  unsigned int which may be too small on 64 bit architectures.
  This fixes three CVS and associated bugs.
  [CVE-2018-20545, bsc#1120584, CVE-2018-20548, bsc#1120589,
  CVE-2018-20549, bsc#1120470, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072000">- Fix the size of width and height to be of size_t rather than
  int in struct caca_dither. Re-using existing patch.
  [CVE-2018-20546, bsc#1120503, CVE-2018-20547,
  bsc#1120504, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072001">- Cast intermediate results to 64 bits to prevent overflow of
  calculations with 32-bit quentities.
  [CVE-2018-20544, bsc#1120502,
  Bug1120502-add_cast_to_prevent_overflow.patch]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1564660800">- Add Bug1143286_libcaca_configure_ac_chg_for_lto.patch
  bypass boo#1143286</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1582718400">- Refresh spec-file via spec-cleaner.
- Add Requires:toilet for caca-utils, because need for cacaclock.</changelog>
  <changelog author="josef.moellers@suse.com" date="1583841600">- The contents of libcaca-prevent-overflow.patch
  have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
  and libcaca-variable-type.patch
  [libcaca-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1646308800">- If an image has a size of 0x0, when exporting, no data is written
  and space is allocated for the header only, not taking into
  account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1651060800">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
</package>
<package pkgid="aa4b54837cc58466fc117c03726293eced681e75c40bd0f89cca5ae4068313e3" name="libcaca0" arch="ppc64le">
  <version epoch="0" ver="0.99.beta19.git20171003" rel="150200.11.6.1"/>
  <changelog author="olaf@aepfle.de" date="1421323200">- Remove __DATE__ usage from cacaclock</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 0.99beta19
  * No changelog available
- Remove automake-1.12.patch; fixed on upstream release</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- Update libcaca-ruby_vendor_install.patch: Use RbConfig::CONFIG
  instead of Config::Config to be compatible with ruby 2.2.</changelog>
  <changelog author="dvlaeev@suse.com" date="1426852800">- Build without Mono by default
  coolo says: "We don't want mono in Factory, if somebody needs it
  it should be set explicit (with_mono) per prjconf"</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Add libcaca-ncurses6.patch: defined against a function name never
  worked, so set_escdelay was actually never used. With curses 6.0,
  though, ESCDELAY is no longer 'a variable', but a reference to a
  function, so we can't assign anything to it. We just assume that
  we always use a recent enough version of ncurses to have
  set_escdelay avaialble.</changelog>
  <changelog author="hguo@suse.com" date="1457697600">- Require imlib2-loaders in caca-utils package.
  All of the utilities fail to load any image without the dependency.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Fix URL
- Mention github repo containing more changes
- Format with spec-cleaner
- Remove support for older distros lets stick with latest only
- Remove for years disabled mono and java integration code snippets
- Use python macros to build python instead of waiting for autotools
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Switch to git repack service in order to get all the latest fixes
  * like python3 porting of the bindings
- Update to version 0.99.beta19+git20171002.da28e96:
  * img2text.c: fix width arg case in example
  * ruby: require 'caca' instead of 'caca.so'
  * Only fail the check-copyright test if more than 10 files are affected.
  * Try to run Coverity from Travis CI.
  * Add some missing breaks (thanks coverity)
  * Fix header copyright.
  * Fix a bug into the autorepeat trigger.
- Refresh patches:
  * libcaca-ruby_am_cflags.patch
  * libcaca-ruby_vendor_install.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop the py2 bindings they fail to build using rpm macros and
  somehow ingnore LD_LIBRARY_PATH, anyway provide py3 variant and
  stick with that</changelog>
  <changelog author="davejplater@gmail.com" date="1517313600">- Deleted _service and use spec file to download git version.
- Shorten version field to joliet usable length.
- Change python headers to allow bindings to build normally with
  python3.
- Use %license for license document.</changelog>
  <changelog author="josef.moellers@suse.com" date="1547553600">- Fix the size of width and height to be of size_t rather than
  unsigned int which may be too small on 64 bit architectures.
  This fixes three CVS and associated bugs.
  [CVE-2018-20545, bsc#1120584, CVE-2018-20548, bsc#1120589,
  CVE-2018-20549, bsc#1120470, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072000">- Fix the size of width and height to be of size_t rather than
  int in struct caca_dither. Re-using existing patch.
  [CVE-2018-20546, bsc#1120503, CVE-2018-20547,
  bsc#1120504, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072001">- Cast intermediate results to 64 bits to prevent overflow of
  calculations with 32-bit quentities.
  [CVE-2018-20544, bsc#1120502,
  Bug1120502-add_cast_to_prevent_overflow.patch]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1564660800">- Add Bug1143286_libcaca_configure_ac_chg_for_lto.patch
  bypass boo#1143286</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1582718400">- Refresh spec-file via spec-cleaner.
- Add Requires:toilet for caca-utils, because need for cacaclock.</changelog>
  <changelog author="josef.moellers@suse.com" date="1583841600">- The contents of libcaca-prevent-overflow.patch
  have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
  and libcaca-variable-type.patch
  [libcaca-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1646308800">- If an image has a size of 0x0, when exporting, no data is written
  and space is allocated for the header only, not taking into
  account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1651060800">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
</package>
<package pkgid="6de267bedbddab8db4fe0d4e6856a5e55a57d0ea2ec7606c75b15b1d48efb9ca" name="libcaca0" arch="s390x">
  <version epoch="0" ver="0.99.beta19.git20171003" rel="150200.11.6.1"/>
  <changelog author="olaf@aepfle.de" date="1421323200">- Remove __DATE__ usage from cacaclock</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 0.99beta19
  * No changelog available
- Remove automake-1.12.patch; fixed on upstream release</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- Update libcaca-ruby_vendor_install.patch: Use RbConfig::CONFIG
  instead of Config::Config to be compatible with ruby 2.2.</changelog>
  <changelog author="dvlaeev@suse.com" date="1426852800">- Build without Mono by default
  coolo says: "We don't want mono in Factory, if somebody needs it
  it should be set explicit (with_mono) per prjconf"</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Add libcaca-ncurses6.patch: defined against a function name never
  worked, so set_escdelay was actually never used. With curses 6.0,
  though, ESCDELAY is no longer 'a variable', but a reference to a
  function, so we can't assign anything to it. We just assume that
  we always use a recent enough version of ncurses to have
  set_escdelay avaialble.</changelog>
  <changelog author="hguo@suse.com" date="1457697600">- Require imlib2-loaders in caca-utils package.
  All of the utilities fail to load any image without the dependency.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Fix URL
- Mention github repo containing more changes
- Format with spec-cleaner
- Remove support for older distros lets stick with latest only
- Remove for years disabled mono and java integration code snippets
- Use python macros to build python instead of waiting for autotools
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Switch to git repack service in order to get all the latest fixes
  * like python3 porting of the bindings
- Update to version 0.99.beta19+git20171002.da28e96:
  * img2text.c: fix width arg case in example
  * ruby: require 'caca' instead of 'caca.so'
  * Only fail the check-copyright test if more than 10 files are affected.
  * Try to run Coverity from Travis CI.
  * Add some missing breaks (thanks coverity)
  * Fix header copyright.
  * Fix a bug into the autorepeat trigger.
- Refresh patches:
  * libcaca-ruby_am_cflags.patch
  * libcaca-ruby_vendor_install.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop the py2 bindings they fail to build using rpm macros and
  somehow ingnore LD_LIBRARY_PATH, anyway provide py3 variant and
  stick with that</changelog>
  <changelog author="davejplater@gmail.com" date="1517313600">- Deleted _service and use spec file to download git version.
- Shorten version field to joliet usable length.
- Change python headers to allow bindings to build normally with
  python3.
- Use %license for license document.</changelog>
  <changelog author="josef.moellers@suse.com" date="1547553600">- Fix the size of width and height to be of size_t rather than
  unsigned int which may be too small on 64 bit architectures.
  This fixes three CVS and associated bugs.
  [CVE-2018-20545, bsc#1120584, CVE-2018-20548, bsc#1120589,
  CVE-2018-20549, bsc#1120470, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072000">- Fix the size of width and height to be of size_t rather than
  int in struct caca_dither. Re-using existing patch.
  [CVE-2018-20546, bsc#1120503, CVE-2018-20547,
  bsc#1120504, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072001">- Cast intermediate results to 64 bits to prevent overflow of
  calculations with 32-bit quentities.
  [CVE-2018-20544, bsc#1120502,
  Bug1120502-add_cast_to_prevent_overflow.patch]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1564660800">- Add Bug1143286_libcaca_configure_ac_chg_for_lto.patch
  bypass boo#1143286</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1582718400">- Refresh spec-file via spec-cleaner.
- Add Requires:toilet for caca-utils, because need for cacaclock.</changelog>
  <changelog author="josef.moellers@suse.com" date="1583841600">- The contents of libcaca-prevent-overflow.patch
  have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
  and libcaca-variable-type.patch
  [libcaca-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1646308800">- If an image has a size of 0x0, when exporting, no data is written
  and space is allocated for the header only, not taking into
  account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1651060800">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
</package>
<package pkgid="401d8716099a56b434877a6e8a5dd931dbe1789216362e24ec7c97f147c61a2e" name="libcaca0" arch="x86_64">
  <version epoch="0" ver="0.99.beta19.git20171003" rel="150200.11.6.1"/>
  <changelog author="olaf@aepfle.de" date="1421323200">- Remove __DATE__ usage from cacaclock</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 0.99beta19
  * No changelog available
- Remove automake-1.12.patch; fixed on upstream release</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- Update libcaca-ruby_vendor_install.patch: Use RbConfig::CONFIG
  instead of Config::Config to be compatible with ruby 2.2.</changelog>
  <changelog author="dvlaeev@suse.com" date="1426852800">- Build without Mono by default
  coolo says: "We don't want mono in Factory, if somebody needs it
  it should be set explicit (with_mono) per prjconf"</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Add libcaca-ncurses6.patch: defined against a function name never
  worked, so set_escdelay was actually never used. With curses 6.0,
  though, ESCDELAY is no longer 'a variable', but a reference to a
  function, so we can't assign anything to it. We just assume that
  we always use a recent enough version of ncurses to have
  set_escdelay avaialble.</changelog>
  <changelog author="hguo@suse.com" date="1457697600">- Require imlib2-loaders in caca-utils package.
  All of the utilities fail to load any image without the dependency.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Fix URL
- Mention github repo containing more changes
- Format with spec-cleaner
- Remove support for older distros lets stick with latest only
- Remove for years disabled mono and java integration code snippets
- Use python macros to build python instead of waiting for autotools
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Switch to git repack service in order to get all the latest fixes
  * like python3 porting of the bindings
- Update to version 0.99.beta19+git20171002.da28e96:
  * img2text.c: fix width arg case in example
  * ruby: require 'caca' instead of 'caca.so'
  * Only fail the check-copyright test if more than 10 files are affected.
  * Try to run Coverity from Travis CI.
  * Add some missing breaks (thanks coverity)
  * Fix header copyright.
  * Fix a bug into the autorepeat trigger.
- Refresh patches:
  * libcaca-ruby_am_cflags.patch
  * libcaca-ruby_vendor_install.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop the py2 bindings they fail to build using rpm macros and
  somehow ingnore LD_LIBRARY_PATH, anyway provide py3 variant and
  stick with that</changelog>
  <changelog author="davejplater@gmail.com" date="1517313600">- Deleted _service and use spec file to download git version.
- Shorten version field to joliet usable length.
- Change python headers to allow bindings to build normally with
  python3.
- Use %license for license document.</changelog>
  <changelog author="josef.moellers@suse.com" date="1547553600">- Fix the size of width and height to be of size_t rather than
  unsigned int which may be too small on 64 bit architectures.
  This fixes three CVS and associated bugs.
  [CVE-2018-20545, bsc#1120584, CVE-2018-20548, bsc#1120589,
  CVE-2018-20549, bsc#1120470, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072000">- Fix the size of width and height to be of size_t rather than
  int in struct caca_dither. Re-using existing patch.
  [CVE-2018-20546, bsc#1120503, CVE-2018-20547,
  bsc#1120504, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072001">- Cast intermediate results to 64 bits to prevent overflow of
  calculations with 32-bit quentities.
  [CVE-2018-20544, bsc#1120502,
  Bug1120502-add_cast_to_prevent_overflow.patch]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1564660800">- Add Bug1143286_libcaca_configure_ac_chg_for_lto.patch
  bypass boo#1143286</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1582718400">- Refresh spec-file via spec-cleaner.
- Add Requires:toilet for caca-utils, because need for cacaclock.</changelog>
  <changelog author="josef.moellers@suse.com" date="1583841600">- The contents of libcaca-prevent-overflow.patch
  have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
  and libcaca-variable-type.patch
  [libcaca-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1646308800">- If an image has a size of 0x0, when exporting, no data is written
  and space is allocated for the header only, not taking into
  account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1651060800">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
</package>
<package pkgid="57ee76a620edb67f6cc64c810fcda2109633752031b23e58e6ed7cbb3c61316c" name="libcaca0-32bit" arch="x86_64">
  <version epoch="0" ver="0.99.beta19.git20171003" rel="150200.11.6.1"/>
  <changelog author="olaf@aepfle.de" date="1421323200">- Remove __DATE__ usage from cacaclock</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 0.99beta19
  * No changelog available
- Remove automake-1.12.patch; fixed on upstream release</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- Update libcaca-ruby_vendor_install.patch: Use RbConfig::CONFIG
  instead of Config::Config to be compatible with ruby 2.2.</changelog>
  <changelog author="dvlaeev@suse.com" date="1426852800">- Build without Mono by default
  coolo says: "We don't want mono in Factory, if somebody needs it
  it should be set explicit (with_mono) per prjconf"</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Add libcaca-ncurses6.patch: defined against a function name never
  worked, so set_escdelay was actually never used. With curses 6.0,
  though, ESCDELAY is no longer 'a variable', but a reference to a
  function, so we can't assign anything to it. We just assume that
  we always use a recent enough version of ncurses to have
  set_escdelay avaialble.</changelog>
  <changelog author="hguo@suse.com" date="1457697600">- Require imlib2-loaders in caca-utils package.
  All of the utilities fail to load any image without the dependency.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Fix URL
- Mention github repo containing more changes
- Format with spec-cleaner
- Remove support for older distros lets stick with latest only
- Remove for years disabled mono and java integration code snippets
- Use python macros to build python instead of waiting for autotools
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Switch to git repack service in order to get all the latest fixes
  * like python3 porting of the bindings
- Update to version 0.99.beta19+git20171002.da28e96:
  * img2text.c: fix width arg case in example
  * ruby: require 'caca' instead of 'caca.so'
  * Only fail the check-copyright test if more than 10 files are affected.
  * Try to run Coverity from Travis CI.
  * Add some missing breaks (thanks coverity)
  * Fix header copyright.
  * Fix a bug into the autorepeat trigger.
- Refresh patches:
  * libcaca-ruby_am_cflags.patch
  * libcaca-ruby_vendor_install.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop the py2 bindings they fail to build using rpm macros and
  somehow ingnore LD_LIBRARY_PATH, anyway provide py3 variant and
  stick with that</changelog>
  <changelog author="davejplater@gmail.com" date="1517313600">- Deleted _service and use spec file to download git version.
- Shorten version field to joliet usable length.
- Change python headers to allow bindings to build normally with
  python3.
- Use %license for license document.</changelog>
  <changelog author="josef.moellers@suse.com" date="1547553600">- Fix the size of width and height to be of size_t rather than
  unsigned int which may be too small on 64 bit architectures.
  This fixes three CVS and associated bugs.
  [CVE-2018-20545, bsc#1120584, CVE-2018-20548, bsc#1120589,
  CVE-2018-20549, bsc#1120470, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072000">- Fix the size of width and height to be of size_t rather than
  int in struct caca_dither. Re-using existing patch.
  [CVE-2018-20546, bsc#1120503, CVE-2018-20547,
  bsc#1120504, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072001">- Cast intermediate results to 64 bits to prevent overflow of
  calculations with 32-bit quentities.
  [CVE-2018-20544, bsc#1120502,
  Bug1120502-add_cast_to_prevent_overflow.patch]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1564660800">- Add Bug1143286_libcaca_configure_ac_chg_for_lto.patch
  bypass boo#1143286</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1582718400">- Refresh spec-file via spec-cleaner.
- Add Requires:toilet for caca-utils, because need for cacaclock.</changelog>
  <changelog author="josef.moellers@suse.com" date="1583841600">- The contents of libcaca-prevent-overflow.patch
  have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
  and libcaca-variable-type.patch
  [libcaca-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1646308800">- If an image has a size of 0x0, when exporting, no data is written
  and space is allocated for the header only, not taking into
  account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1651060800">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
</package>
<package pkgid="9d9a0d637d8678213497da614485b58472376098b5f1966760771314393c0e47" name="libcaca0-plugins" arch="aarch64">
  <version epoch="0" ver="0.99.beta19.git20171003" rel="150200.11.6.1"/>
  <changelog author="olaf@aepfle.de" date="1421323200">- Remove __DATE__ usage from cacaclock</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 0.99beta19
  * No changelog available
- Remove automake-1.12.patch; fixed on upstream release</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- Update libcaca-ruby_vendor_install.patch: Use RbConfig::CONFIG
  instead of Config::Config to be compatible with ruby 2.2.</changelog>
  <changelog author="dvlaeev@suse.com" date="1426852800">- Build without Mono by default
  coolo says: "We don't want mono in Factory, if somebody needs it
  it should be set explicit (with_mono) per prjconf"</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Add libcaca-ncurses6.patch: defined against a function name never
  worked, so set_escdelay was actually never used. With curses 6.0,
  though, ESCDELAY is no longer 'a variable', but a reference to a
  function, so we can't assign anything to it. We just assume that
  we always use a recent enough version of ncurses to have
  set_escdelay avaialble.</changelog>
  <changelog author="hguo@suse.com" date="1457697600">- Require imlib2-loaders in caca-utils package.
  All of the utilities fail to load any image without the dependency.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Fix URL
- Mention github repo containing more changes
- Format with spec-cleaner
- Remove support for older distros lets stick with latest only
- Remove for years disabled mono and java integration code snippets
- Use python macros to build python instead of waiting for autotools
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Switch to git repack service in order to get all the latest fixes
  * like python3 porting of the bindings
- Update to version 0.99.beta19+git20171002.da28e96:
  * img2text.c: fix width arg case in example
  * ruby: require 'caca' instead of 'caca.so'
  * Only fail the check-copyright test if more than 10 files are affected.
  * Try to run Coverity from Travis CI.
  * Add some missing breaks (thanks coverity)
  * Fix header copyright.
  * Fix a bug into the autorepeat trigger.
- Refresh patches:
  * libcaca-ruby_am_cflags.patch
  * libcaca-ruby_vendor_install.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop the py2 bindings they fail to build using rpm macros and
  somehow ingnore LD_LIBRARY_PATH, anyway provide py3 variant and
  stick with that</changelog>
  <changelog author="davejplater@gmail.com" date="1517313600">- Deleted _service and use spec file to download git version.
- Shorten version field to joliet usable length.
- Change python headers to allow bindings to build normally with
  python3.
- Use %license for license document.</changelog>
  <changelog author="josef.moellers@suse.com" date="1547553600">- Fix the size of width and height to be of size_t rather than
  unsigned int which may be too small on 64 bit architectures.
  This fixes three CVS and associated bugs.
  [CVE-2018-20545, bsc#1120584, CVE-2018-20548, bsc#1120589,
  CVE-2018-20549, bsc#1120470, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072000">- Fix the size of width and height to be of size_t rather than
  int in struct caca_dither. Re-using existing patch.
  [CVE-2018-20546, bsc#1120503, CVE-2018-20547,
  bsc#1120504, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072001">- Cast intermediate results to 64 bits to prevent overflow of
  calculations with 32-bit quentities.
  [CVE-2018-20544, bsc#1120502,
  Bug1120502-add_cast_to_prevent_overflow.patch]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1564660800">- Add Bug1143286_libcaca_configure_ac_chg_for_lto.patch
  bypass boo#1143286</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1582718400">- Refresh spec-file via spec-cleaner.
- Add Requires:toilet for caca-utils, because need for cacaclock.</changelog>
  <changelog author="josef.moellers@suse.com" date="1583841600">- The contents of libcaca-prevent-overflow.patch
  have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
  and libcaca-variable-type.patch
  [libcaca-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1646308800">- If an image has a size of 0x0, when exporting, no data is written
  and space is allocated for the header only, not taking into
  account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1651060800">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
</package>
<package pkgid="ed33c7ec8f23684907afc807498c23689add6647bc57ea6378707aa659c3eb9c" name="libcaca0-plugins" arch="ppc64le">
  <version epoch="0" ver="0.99.beta19.git20171003" rel="150200.11.6.1"/>
  <changelog author="olaf@aepfle.de" date="1421323200">- Remove __DATE__ usage from cacaclock</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 0.99beta19
  * No changelog available
- Remove automake-1.12.patch; fixed on upstream release</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- Update libcaca-ruby_vendor_install.patch: Use RbConfig::CONFIG
  instead of Config::Config to be compatible with ruby 2.2.</changelog>
  <changelog author="dvlaeev@suse.com" date="1426852800">- Build without Mono by default
  coolo says: "We don't want mono in Factory, if somebody needs it
  it should be set explicit (with_mono) per prjconf"</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Add libcaca-ncurses6.patch: defined against a function name never
  worked, so set_escdelay was actually never used. With curses 6.0,
  though, ESCDELAY is no longer 'a variable', but a reference to a
  function, so we can't assign anything to it. We just assume that
  we always use a recent enough version of ncurses to have
  set_escdelay avaialble.</changelog>
  <changelog author="hguo@suse.com" date="1457697600">- Require imlib2-loaders in caca-utils package.
  All of the utilities fail to load any image without the dependency.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Fix URL
- Mention github repo containing more changes
- Format with spec-cleaner
- Remove support for older distros lets stick with latest only
- Remove for years disabled mono and java integration code snippets
- Use python macros to build python instead of waiting for autotools
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Switch to git repack service in order to get all the latest fixes
  * like python3 porting of the bindings
- Update to version 0.99.beta19+git20171002.da28e96:
  * img2text.c: fix width arg case in example
  * ruby: require 'caca' instead of 'caca.so'
  * Only fail the check-copyright test if more than 10 files are affected.
  * Try to run Coverity from Travis CI.
  * Add some missing breaks (thanks coverity)
  * Fix header copyright.
  * Fix a bug into the autorepeat trigger.
- Refresh patches:
  * libcaca-ruby_am_cflags.patch
  * libcaca-ruby_vendor_install.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop the py2 bindings they fail to build using rpm macros and
  somehow ingnore LD_LIBRARY_PATH, anyway provide py3 variant and
  stick with that</changelog>
  <changelog author="davejplater@gmail.com" date="1517313600">- Deleted _service and use spec file to download git version.
- Shorten version field to joliet usable length.
- Change python headers to allow bindings to build normally with
  python3.
- Use %license for license document.</changelog>
  <changelog author="josef.moellers@suse.com" date="1547553600">- Fix the size of width and height to be of size_t rather than
  unsigned int which may be too small on 64 bit architectures.
  This fixes three CVS and associated bugs.
  [CVE-2018-20545, bsc#1120584, CVE-2018-20548, bsc#1120589,
  CVE-2018-20549, bsc#1120470, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072000">- Fix the size of width and height to be of size_t rather than
  int in struct caca_dither. Re-using existing patch.
  [CVE-2018-20546, bsc#1120503, CVE-2018-20547,
  bsc#1120504, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072001">- Cast intermediate results to 64 bits to prevent overflow of
  calculations with 32-bit quentities.
  [CVE-2018-20544, bsc#1120502,
  Bug1120502-add_cast_to_prevent_overflow.patch]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1564660800">- Add Bug1143286_libcaca_configure_ac_chg_for_lto.patch
  bypass boo#1143286</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1582718400">- Refresh spec-file via spec-cleaner.
- Add Requires:toilet for caca-utils, because need for cacaclock.</changelog>
  <changelog author="josef.moellers@suse.com" date="1583841600">- The contents of libcaca-prevent-overflow.patch
  have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
  and libcaca-variable-type.patch
  [libcaca-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1646308800">- If an image has a size of 0x0, when exporting, no data is written
  and space is allocated for the header only, not taking into
  account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1651060800">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
</package>
<package pkgid="3e21dc57383fae450a43b309f9cdb46754b184b7a79467b43fcb0ebad7e78980" name="libcaca0-plugins" arch="s390x">
  <version epoch="0" ver="0.99.beta19.git20171003" rel="150200.11.6.1"/>
  <changelog author="olaf@aepfle.de" date="1421323200">- Remove __DATE__ usage from cacaclock</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 0.99beta19
  * No changelog available
- Remove automake-1.12.patch; fixed on upstream release</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- Update libcaca-ruby_vendor_install.patch: Use RbConfig::CONFIG
  instead of Config::Config to be compatible with ruby 2.2.</changelog>
  <changelog author="dvlaeev@suse.com" date="1426852800">- Build without Mono by default
  coolo says: "We don't want mono in Factory, if somebody needs it
  it should be set explicit (with_mono) per prjconf"</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Add libcaca-ncurses6.patch: defined against a function name never
  worked, so set_escdelay was actually never used. With curses 6.0,
  though, ESCDELAY is no longer 'a variable', but a reference to a
  function, so we can't assign anything to it. We just assume that
  we always use a recent enough version of ncurses to have
  set_escdelay avaialble.</changelog>
  <changelog author="hguo@suse.com" date="1457697600">- Require imlib2-loaders in caca-utils package.
  All of the utilities fail to load any image without the dependency.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Fix URL
- Mention github repo containing more changes
- Format with spec-cleaner
- Remove support for older distros lets stick with latest only
- Remove for years disabled mono and java integration code snippets
- Use python macros to build python instead of waiting for autotools
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Switch to git repack service in order to get all the latest fixes
  * like python3 porting of the bindings
- Update to version 0.99.beta19+git20171002.da28e96:
  * img2text.c: fix width arg case in example
  * ruby: require 'caca' instead of 'caca.so'
  * Only fail the check-copyright test if more than 10 files are affected.
  * Try to run Coverity from Travis CI.
  * Add some missing breaks (thanks coverity)
  * Fix header copyright.
  * Fix a bug into the autorepeat trigger.
- Refresh patches:
  * libcaca-ruby_am_cflags.patch
  * libcaca-ruby_vendor_install.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop the py2 bindings they fail to build using rpm macros and
  somehow ingnore LD_LIBRARY_PATH, anyway provide py3 variant and
  stick with that</changelog>
  <changelog author="davejplater@gmail.com" date="1517313600">- Deleted _service and use spec file to download git version.
- Shorten version field to joliet usable length.
- Change python headers to allow bindings to build normally with
  python3.
- Use %license for license document.</changelog>
  <changelog author="josef.moellers@suse.com" date="1547553600">- Fix the size of width and height to be of size_t rather than
  unsigned int which may be too small on 64 bit architectures.
  This fixes three CVS and associated bugs.
  [CVE-2018-20545, bsc#1120584, CVE-2018-20548, bsc#1120589,
  CVE-2018-20549, bsc#1120470, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072000">- Fix the size of width and height to be of size_t rather than
  int in struct caca_dither. Re-using existing patch.
  [CVE-2018-20546, bsc#1120503, CVE-2018-20547,
  bsc#1120504, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072001">- Cast intermediate results to 64 bits to prevent overflow of
  calculations with 32-bit quentities.
  [CVE-2018-20544, bsc#1120502,
  Bug1120502-add_cast_to_prevent_overflow.patch]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1564660800">- Add Bug1143286_libcaca_configure_ac_chg_for_lto.patch
  bypass boo#1143286</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1582718400">- Refresh spec-file via spec-cleaner.
- Add Requires:toilet for caca-utils, because need for cacaclock.</changelog>
  <changelog author="josef.moellers@suse.com" date="1583841600">- The contents of libcaca-prevent-overflow.patch
  have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
  and libcaca-variable-type.patch
  [libcaca-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1646308800">- If an image has a size of 0x0, when exporting, no data is written
  and space is allocated for the header only, not taking into
  account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1651060800">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
</package>
<package pkgid="06d985ed69062d8efd5208bec7e7f2a05af103283b86abd561a4fa5a0553e9e2" name="libcaca0-plugins" arch="x86_64">
  <version epoch="0" ver="0.99.beta19.git20171003" rel="150200.11.6.1"/>
  <changelog author="olaf@aepfle.de" date="1421323200">- Remove __DATE__ usage from cacaclock</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 0.99beta19
  * No changelog available
- Remove automake-1.12.patch; fixed on upstream release</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- Update libcaca-ruby_vendor_install.patch: Use RbConfig::CONFIG
  instead of Config::Config to be compatible with ruby 2.2.</changelog>
  <changelog author="dvlaeev@suse.com" date="1426852800">- Build without Mono by default
  coolo says: "We don't want mono in Factory, if somebody needs it
  it should be set explicit (with_mono) per prjconf"</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Add libcaca-ncurses6.patch: defined against a function name never
  worked, so set_escdelay was actually never used. With curses 6.0,
  though, ESCDELAY is no longer 'a variable', but a reference to a
  function, so we can't assign anything to it. We just assume that
  we always use a recent enough version of ncurses to have
  set_escdelay avaialble.</changelog>
  <changelog author="hguo@suse.com" date="1457697600">- Require imlib2-loaders in caca-utils package.
  All of the utilities fail to load any image without the dependency.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Fix URL
- Mention github repo containing more changes
- Format with spec-cleaner
- Remove support for older distros lets stick with latest only
- Remove for years disabled mono and java integration code snippets
- Use python macros to build python instead of waiting for autotools
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Switch to git repack service in order to get all the latest fixes
  * like python3 porting of the bindings
- Update to version 0.99.beta19+git20171002.da28e96:
  * img2text.c: fix width arg case in example
  * ruby: require 'caca' instead of 'caca.so'
  * Only fail the check-copyright test if more than 10 files are affected.
  * Try to run Coverity from Travis CI.
  * Add some missing breaks (thanks coverity)
  * Fix header copyright.
  * Fix a bug into the autorepeat trigger.
- Refresh patches:
  * libcaca-ruby_am_cflags.patch
  * libcaca-ruby_vendor_install.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop the py2 bindings they fail to build using rpm macros and
  somehow ingnore LD_LIBRARY_PATH, anyway provide py3 variant and
  stick with that</changelog>
  <changelog author="davejplater@gmail.com" date="1517313600">- Deleted _service and use spec file to download git version.
- Shorten version field to joliet usable length.
- Change python headers to allow bindings to build normally with
  python3.
- Use %license for license document.</changelog>
  <changelog author="josef.moellers@suse.com" date="1547553600">- Fix the size of width and height to be of size_t rather than
  unsigned int which may be too small on 64 bit architectures.
  This fixes three CVS and associated bugs.
  [CVE-2018-20545, bsc#1120584, CVE-2018-20548, bsc#1120589,
  CVE-2018-20549, bsc#1120470, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072000">- Fix the size of width and height to be of size_t rather than
  int in struct caca_dither. Re-using existing patch.
  [CVE-2018-20546, bsc#1120503, CVE-2018-20547,
  bsc#1120504, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072001">- Cast intermediate results to 64 bits to prevent overflow of
  calculations with 32-bit quentities.
  [CVE-2018-20544, bsc#1120502,
  Bug1120502-add_cast_to_prevent_overflow.patch]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1564660800">- Add Bug1143286_libcaca_configure_ac_chg_for_lto.patch
  bypass boo#1143286</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1582718400">- Refresh spec-file via spec-cleaner.
- Add Requires:toilet for caca-utils, because need for cacaclock.</changelog>
  <changelog author="josef.moellers@suse.com" date="1583841600">- The contents of libcaca-prevent-overflow.patch
  have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
  and libcaca-variable-type.patch
  [libcaca-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1646308800">- If an image has a size of 0x0, when exporting, no data is written
  and space is allocated for the header only, not taking into
  account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1651060800">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
</package>
<package pkgid="e391117e07d4ee17f7ca6b7a63619010ce839f55a0a5725cb8980bd950006f7f" name="libcaca0-plugins-32bit" arch="x86_64">
  <version epoch="0" ver="0.99.beta19.git20171003" rel="150200.11.6.1"/>
  <changelog author="olaf@aepfle.de" date="1421323200">- Remove __DATE__ usage from cacaclock</changelog>
  <changelog author="p.drouand@gmail.com" date="1424174400">- Update to version 0.99beta19
  * No changelog available
- Remove automake-1.12.patch; fixed on upstream release</changelog>
  <changelog author="dimstar@opensuse.org" date="1426161600">- Update libcaca-ruby_vendor_install.patch: Use RbConfig::CONFIG
  instead of Config::Config to be compatible with ruby 2.2.</changelog>
  <changelog author="dvlaeev@suse.com" date="1426852800">- Build without Mono by default
  coolo says: "We don't want mono in Factory, if somebody needs it
  it should be set explicit (with_mono) per prjconf"</changelog>
  <changelog author="dimstar@opensuse.org" date="1441195200">- Add libcaca-ncurses6.patch: defined against a function name never
  worked, so set_escdelay was actually never used. With curses 6.0,
  though, ESCDELAY is no longer 'a variable', but a reference to a
  function, so we can't assign anything to it. We just assume that
  we always use a recent enough version of ncurses to have
  set_escdelay avaialble.</changelog>
  <changelog author="hguo@suse.com" date="1457697600">- Require imlib2-loaders in caca-utils package.
  All of the utilities fail to load any image without the dependency.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Fix URL
- Mention github repo containing more changes
- Format with spec-cleaner
- Remove support for older distros lets stick with latest only
- Remove for years disabled mono and java integration code snippets
- Use python macros to build python instead of waiting for autotools
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Switch to git repack service in order to get all the latest fixes
  * like python3 porting of the bindings
- Update to version 0.99.beta19+git20171002.da28e96:
  * img2text.c: fix width arg case in example
  * ruby: require 'caca' instead of 'caca.so'
  * Only fail the check-copyright test if more than 10 files are affected.
  * Try to run Coverity from Travis CI.
  * Add some missing breaks (thanks coverity)
  * Fix header copyright.
  * Fix a bug into the autorepeat trigger.
- Refresh patches:
  * libcaca-ruby_am_cflags.patch
  * libcaca-ruby_vendor_install.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516708801">- Drop the py2 bindings they fail to build using rpm macros and
  somehow ingnore LD_LIBRARY_PATH, anyway provide py3 variant and
  stick with that</changelog>
  <changelog author="davejplater@gmail.com" date="1517313600">- Deleted _service and use spec file to download git version.
- Shorten version field to joliet usable length.
- Change python headers to allow bindings to build normally with
  python3.
- Use %license for license document.</changelog>
  <changelog author="josef.moellers@suse.com" date="1547553600">- Fix the size of width and height to be of size_t rather than
  unsigned int which may be too small on 64 bit architectures.
  This fixes three CVS and associated bugs.
  [CVE-2018-20545, bsc#1120584, CVE-2018-20548, bsc#1120589,
  CVE-2018-20549, bsc#1120470, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072000">- Fix the size of width and height to be of size_t rather than
  int in struct caca_dither. Re-using existing patch.
  [CVE-2018-20546, bsc#1120503, CVE-2018-20547,
  bsc#1120504, libcaca-variable-type.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1548072001">- Cast intermediate results to 64 bits to prevent overflow of
  calculations with 32-bit quentities.
  [CVE-2018-20544, bsc#1120502,
  Bug1120502-add_cast_to_prevent_overflow.patch]</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1564660800">- Add Bug1143286_libcaca_configure_ac_chg_for_lto.patch
  bypass boo#1143286</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1582718400">- Refresh spec-file via spec-cleaner.
- Add Requires:toilet for caca-utils, because need for cacaclock.</changelog>
  <changelog author="josef.moellers@suse.com" date="1583841600">- The contents of libcaca-prevent-overflow.patch
  have been moved to Bug1120502-add_cast_to_prevent_overflow.patch
  and libcaca-variable-type.patch
  [libcaca-prevent-overflow.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1646308800">- If an image has a size of 0x0, when exporting, no data is written
  and space is allocated for the header only, not taking into
  account that sprintf appends a NUL byte.
  [CVE-2021-30498, CVE-2021-30499, bsc#1184751, bsc#1184752,
  bsc1184751-add-space-for-NUL-byte.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1651060800">- When a zero-width or zero-height image is given, a divide-by-zero
  occurs. This patch checks for this and produces a zero-sized
  output.
  [bsc1197028-correctly-handle-zero-width-or-height-images.patch,
  CVE-2022-0856, bsc#1197028]</changelog>
</package>
<package pkgid="004bae9eb45e5bfefb7bcdf63405c0fafbfbeedf7e912d189b1152a2054eadd9" name="libcbor" arch="src">
  <version epoch="0" ver="0.5.0" rel="150100.4.6.1"/>
  <changelog author="t.gruner@katodev.de" date="1524744000">- Initial release 0.5.0</changelog>
  <changelog author="jengelh@inai.de" date="1538136000">- Rename %SONAME to %sover to better reflect its use.
- Expand summary, compact and trim bias from description.</changelog>
  <changelog author="bwiedemann@suse.com" date="1624622400">- Add libcbor-0.5.0-fix-lib.patch to not build shared lib twice
  and make package build reproducible (boo#1102408)</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- do not build manual page for 15sp4, it does not succeed
  [bsc#1197743]
- added sources
  + libcbor.1</changelog>
</package>
<package pkgid="83d07e8b164ddde7c30d9d6aa00b9653f3046fdf9c0a0537c879b66c30a9c9f9" name="libcbor-devel" arch="aarch64">
  <version epoch="0" ver="0.5.0" rel="150100.4.6.1"/>
  <changelog author="t.gruner@katodev.de" date="1524744000">- Initial release 0.5.0</changelog>
  <changelog author="jengelh@inai.de" date="1538136000">- Rename %SONAME to %sover to better reflect its use.
- Expand summary, compact and trim bias from description.</changelog>
  <changelog author="bwiedemann@suse.com" date="1624622400">- Add libcbor-0.5.0-fix-lib.patch to not build shared lib twice
  and make package build reproducible (boo#1102408)</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- do not build manual page for 15sp4, it does not succeed
  [bsc#1197743]
- added sources
  + libcbor.1</changelog>
</package>
<package pkgid="a6d5d1c76ce715c7c32ea09e78e7bd6c619f335c26885582983a20e504f14d61" name="libcbor-devel" arch="ppc64le">
  <version epoch="0" ver="0.5.0" rel="150100.4.6.1"/>
  <changelog author="t.gruner@katodev.de" date="1524744000">- Initial release 0.5.0</changelog>
  <changelog author="jengelh@inai.de" date="1538136000">- Rename %SONAME to %sover to better reflect its use.
- Expand summary, compact and trim bias from description.</changelog>
  <changelog author="bwiedemann@suse.com" date="1624622400">- Add libcbor-0.5.0-fix-lib.patch to not build shared lib twice
  and make package build reproducible (boo#1102408)</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- do not build manual page for 15sp4, it does not succeed
  [bsc#1197743]
- added sources
  + libcbor.1</changelog>
</package>
<package pkgid="49a5f6187f278a87b15c272b6cd9fa49196e5b58da6d9724f53044038d6bc628" name="libcbor-devel" arch="s390x">
  <version epoch="0" ver="0.5.0" rel="150100.4.6.1"/>
  <changelog author="t.gruner@katodev.de" date="1524744000">- Initial release 0.5.0</changelog>
  <changelog author="jengelh@inai.de" date="1538136000">- Rename %SONAME to %sover to better reflect its use.
- Expand summary, compact and trim bias from description.</changelog>
  <changelog author="bwiedemann@suse.com" date="1624622400">- Add libcbor-0.5.0-fix-lib.patch to not build shared lib twice
  and make package build reproducible (boo#1102408)</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- do not build manual page for 15sp4, it does not succeed
  [bsc#1197743]
- added sources
  + libcbor.1</changelog>
</package>
<package pkgid="9dbf8426749f6a2c713a1e8efbf4c0c7200f8f8642d179260af2e4d9da8aa847" name="libcbor-devel" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="150100.4.6.1"/>
  <changelog author="t.gruner@katodev.de" date="1524744000">- Initial release 0.5.0</changelog>
  <changelog author="jengelh@inai.de" date="1538136000">- Rename %SONAME to %sover to better reflect its use.
- Expand summary, compact and trim bias from description.</changelog>
  <changelog author="bwiedemann@suse.com" date="1624622400">- Add libcbor-0.5.0-fix-lib.patch to not build shared lib twice
  and make package build reproducible (boo#1102408)</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- do not build manual page for 15sp4, it does not succeed
  [bsc#1197743]
- added sources
  + libcbor.1</changelog>
</package>
<package pkgid="245c909a90603e6febe4adb5a704a5f54435ae3422ed04b7600cc29224904749" name="libcbor0" arch="aarch64">
  <version epoch="0" ver="0.5.0" rel="150100.4.6.1"/>
  <changelog author="t.gruner@katodev.de" date="1524744000">- Initial release 0.5.0</changelog>
  <changelog author="jengelh@inai.de" date="1538136000">- Rename %SONAME to %sover to better reflect its use.
- Expand summary, compact and trim bias from description.</changelog>
  <changelog author="bwiedemann@suse.com" date="1624622400">- Add libcbor-0.5.0-fix-lib.patch to not build shared lib twice
  and make package build reproducible (boo#1102408)</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- do not build manual page for 15sp4, it does not succeed
  [bsc#1197743]
- added sources
  + libcbor.1</changelog>
</package>
<package pkgid="a766fc04a54d6d41052a9559dd9a2fce9ebbec510851b3adb3f3c06b75c1409e" name="libcbor0" arch="ppc64le">
  <version epoch="0" ver="0.5.0" rel="150100.4.6.1"/>
  <changelog author="t.gruner@katodev.de" date="1524744000">- Initial release 0.5.0</changelog>
  <changelog author="jengelh@inai.de" date="1538136000">- Rename %SONAME to %sover to better reflect its use.
- Expand summary, compact and trim bias from description.</changelog>
  <changelog author="bwiedemann@suse.com" date="1624622400">- Add libcbor-0.5.0-fix-lib.patch to not build shared lib twice
  and make package build reproducible (boo#1102408)</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- do not build manual page for 15sp4, it does not succeed
  [bsc#1197743]
- added sources
  + libcbor.1</changelog>
</package>
<package pkgid="93d49059d443152543804f4976f4e4e45ddede551fedd0d6c478a3d03b96055c" name="libcbor0" arch="s390x">
  <version epoch="0" ver="0.5.0" rel="150100.4.6.1"/>
  <changelog author="t.gruner@katodev.de" date="1524744000">- Initial release 0.5.0</changelog>
  <changelog author="jengelh@inai.de" date="1538136000">- Rename %SONAME to %sover to better reflect its use.
- Expand summary, compact and trim bias from description.</changelog>
  <changelog author="bwiedemann@suse.com" date="1624622400">- Add libcbor-0.5.0-fix-lib.patch to not build shared lib twice
  and make package build reproducible (boo#1102408)</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- do not build manual page for 15sp4, it does not succeed
  [bsc#1197743]
- added sources
  + libcbor.1</changelog>
</package>
<package pkgid="5b4a2a9c9590319e564fc7a1f4082e878169fe44cc17009a05017fd4a2ad3e64" name="libcbor0" arch="x86_64">
  <version epoch="0" ver="0.5.0" rel="150100.4.6.1"/>
  <changelog author="t.gruner@katodev.de" date="1524744000">- Initial release 0.5.0</changelog>
  <changelog author="jengelh@inai.de" date="1538136000">- Rename %SONAME to %sover to better reflect its use.
- Expand summary, compact and trim bias from description.</changelog>
  <changelog author="bwiedemann@suse.com" date="1624622400">- Add libcbor-0.5.0-fix-lib.patch to not build shared lib twice
  and make package build reproducible (boo#1102408)</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- do not build manual page for 15sp4, it does not succeed
  [bsc#1197743]
- added sources
  + libcbor.1</changelog>
</package>
<package pkgid="7c67332207dadcaa5406a95d520520ebd2817ad578d2cf2e6806b936e69950a5" name="libchamplain" arch="src">
  <version epoch="0" ver="0.12.20" rel="150200.3.2.1"/>
  <changelog author="dimstar@opensuse.org" date="1368792000">- Update to version 0.12.4:
  + Add dependency on clutter 1.12 and fix all the deprecation
    warnings.
  + Many internal cleanups and minor improvements.
  + Fix gtk and libsoup deprecation warnings.
  + Deprecate CHAMPLAIN_MAP_SOURCE_OSM_OSMARENDER and
    CHAMPLAIN_MAP_SOURCE_OAM which don't exist any more and remove
    them from the factory.
  + Deprecate ChamplainCustomMarker.
  + Deprecate champlain_view_bin_layout_add().
  + Fix blurry map when view resized.
  + Use more neutral map background color.
  + Add champlain_view_get_bounding_box() and
    champlain_bounding_box_covers().
  + Add a possibility to set a background texture.
  + Add Mapquest Open Aerial map source.
  + Added the possibility to use TMS correct y-axis.
  + Minor fixes and improvements.</changelog>
  <changelog author="dimstar@opensuse.org" date="1379332800">- Update to version 0.12.5:
  + Add properties for animation mode &amp; duration.
  + Add support for OpenWeatherMap overlays.
  + Performance improvements.
  + Minor fixes and improvements.
- Add gtk-doc BuildRequires: needed in order to build the html
  docs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1391515200">- Update to version 0.12.6:
  + Make sure Maemo is disabled when --disable-maemo is used.
  + Add the new weather map sources for Maemo builds as well.
  + ChamplainView:
  - More reliable notifications for max/min-zoom-level
    properties.
  - Add API to determine appropriate zoom-level for a particular
    bounding box.
  + Update project homepage link.
  + Fixes to build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1391688000">- Update to version 0.12.7:
  + Use correct LIBRARY_VERSION string.</changelog>
  <changelog author="dimstar@opensuse.org" date="1404216000">- Update to version 0.12.8:
  + Fix crash when changing a map source.
  + Drop the dependency on libsoup-gnome by using libsoup 2.34 or
    newer.
  + Add basic touchscreen support.</changelog>
  <changelog author="dimstar@opensuse.org" date="1410955200">- Update to version 0.12.9:
  + For privacy reasons use https instead of http in map sources
    that support it.
  + Fixed leaked idle function in ChamplainPathLayer and
    ChamplainScale.
  + Don't deselect all markers when a marker got deselected.
  + Various minor fixes and compilation warning removal.</changelog>
  <changelog author="zaitor@opensuse.org" date="1426680000">- Update to version 0.12.10:
  + Improve key-press event handling to better support custom
    keybindings.
  + Add a simple demo demonstrating custom keybindings.
  + Handle CLUTTER_SCROLL_SMOOTH to fix moouse-wheel zooming with
    newer clutter versions.
  + Make ChamplainLabel shadow optional.
  + Emit animation-completed::zoom signal when zoom ends.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442577600">- Update to version 0.12.11:
  + Improved touch-screen support, pinch-to-zoom.
  + Add champlain_view_set_world() to limit the world to the
    specified bounding box.
  + Various minor fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1449576000">- Update to version 0.12.12:
  + Add possibility to export maps.
  + Fix map getting blank after some mouse actions.
  + Fix tile loading at higher zoom levels.
  + Improve mouse wheel zoom handling.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456488000">- Update to version 0.12.13:
  + Implement ChamplainExportable in MarkerLayer and
    ChamplainPoint.
  + Avoid runtime warnings due to the use of deprecated API.
  + Make sure enums are introspectable.
  + Fix occasional crash when closing map with layers.
  + Various minor fixes and improvements.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1473249600">- Update to version 0.12.14:
  + Add support for horizontal map wrapping.
  + Make the number of parallel connections of network tile source
    configurable.
  + Remove Mapquest map source as the tile server is not accessible
    any more.
  + Remove Maemo-related code.
  + Fix small memory leaks.
  + Bump libsoup dependency requirement to 2.42 and drop deprecated
    function calls.
  + Various minor improvements, fixes, depreciaton warning removals
    and cleanups.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Update to version 0.12.15:
  + Fix path layer surface exporting when no clone is visible.
  + Fix printing in gnome-maps.
  + Fix build on RHEL 7.3.
  + Minor example updates.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 0.12.16:
  + Add possibility to set User-Agent for requests.
  + Fix touch gesture zoom.
  + Python demo fixes and cleanups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Add
  libchamplain-Fix-wrapping-champlain_view_x_to_longitude.patch:
  Fix wrapping in champlain_view_x_to_longitude. Previous
  implementation assumed that after using x_to_wrap_x further
  wrapping would be needed only if x + priv-&gt;viewport_x &gt;= width.
- Do minor spec cleanup, use autosetup, make_build and make_install
  macros, drop obsolete and unused BUILD_FROM_VCS conditional
  gnome-common and gtk-doc BuildRequires and autogen.sh call.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546516800">- No longer build mephis support: Drop memphis-devel BuildRequires,
  memphis upstream is dead and gone from the web for several years.
  libchamplain upstream have disabled mephis support in git 5 years
  ago, so we should not build it either. Pass --disable-memphis to
  configure to be ensure we do not.
- Pkgconfigify spec, align with what configure checks for:
  + Drop clutter-devel, clutter-gtk-devel, gtk3-devel,
    libsoup-devel, sqlite3-devel and vala BuildRequires.
  + Add pkgconfig, pkgconfig(cairo), pkgconfig(clutter-1.0),
    pkgconfig(clutter-gtk-1.0), pkgconfig(gdk-3.0),
    pkgconfig(gio-2.0), pkgconfig(glib-2.0),
    pkgconfig(gobject-2.0), pkgconfig(gtk+-3.0),
    pkgconfig(libsoup-2.4), pkgconfig(sqlite3) and
    pkgconfig(vapigen) BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550750400">- Update to version 0.12.18:
  + Fix incorrect so version when using meson.
  + Avoid exporting marshaler functions by dropping the use of
    glib-genmarshal and using the generic marshaler instead.
  + Don't use glib-mkenums for champlain-gtk where it's not needed.
- Changes from version 0.12.17:
  + Use of meson build system, CI tests and automatized generation
    of documentation.
  + Various map wrapping fixes.
  + Pass data as uint8 pointer in champlain_renderer_set_data() and
    make this function introspectable.
  + Bump versions of some dependencies - clutter (1.24), glib
    (2.38) - and fix depreciation warnings.
  + Use https for all map sources that support it.
  + Don't version-control generated vapi files.
  + Combine champlain and champlain-gtk documentations into one.
  + More helpful README.md with links to pages related to
    libchamplain.
  + Various housekeeping and cleanups.
- Drop patch fixed upstream:
  libchamplain-Fix-wrapping-champlain_view_x_to_longitude.patch.
- Switch to meson build system, add meson BuildRequires and macros.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551614400">- Update to version 0.12.19:
  + Fix incorrect Requires in pc files when using meson.
  + Various meson-related fixes and cleanups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1572350400">- Update to version 0.12.20:
  + Remove autotools-based build and all the related files.
  + Fix gtk-doc module name.
  + Add missing gdk required dependency.
  + Make the build reproducible.</changelog>
</package>
<package pkgid="6c56660811ac59d15c9a36beaabbbda7e91485427983eb0c7f6d40e7978033c6" name="libchamplain-0_12-0" arch="aarch64">
  <version epoch="0" ver="0.12.20" rel="150200.3.2.1"/>
  <changelog author="zaitor@opensuse.org" date="1426680000">- Update to version 0.12.10:
  + Improve key-press event handling to better support custom
    keybindings.
  + Add a simple demo demonstrating custom keybindings.
  + Handle CLUTTER_SCROLL_SMOOTH to fix moouse-wheel zooming with
    newer clutter versions.
  + Make ChamplainLabel shadow optional.
  + Emit animation-completed::zoom signal when zoom ends.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442577600">- Update to version 0.12.11:
  + Improved touch-screen support, pinch-to-zoom.
  + Add champlain_view_set_world() to limit the world to the
    specified bounding box.
  + Various minor fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1449576000">- Update to version 0.12.12:
  + Add possibility to export maps.
  + Fix map getting blank after some mouse actions.
  + Fix tile loading at higher zoom levels.
  + Improve mouse wheel zoom handling.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456488000">- Update to version 0.12.13:
  + Implement ChamplainExportable in MarkerLayer and
    ChamplainPoint.
  + Avoid runtime warnings due to the use of deprecated API.
  + Make sure enums are introspectable.
  + Fix occasional crash when closing map with layers.
  + Various minor fixes and improvements.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1473249600">- Update to version 0.12.14:
  + Add support for horizontal map wrapping.
  + Make the number of parallel connections of network tile source
    configurable.
  + Remove Mapquest map source as the tile server is not accessible
    any more.
  + Remove Maemo-related code.
  + Fix small memory leaks.
  + Bump libsoup dependency requirement to 2.42 and drop deprecated
    function calls.
  + Various minor improvements, fixes, depreciaton warning removals
    and cleanups.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Update to version 0.12.15:
  + Fix path layer surface exporting when no clone is visible.
  + Fix printing in gnome-maps.
  + Fix build on RHEL 7.3.
  + Minor example updates.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 0.12.16:
  + Add possibility to set User-Agent for requests.
  + Fix touch gesture zoom.
  + Python demo fixes and cleanups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Add
  libchamplain-Fix-wrapping-champlain_view_x_to_longitude.patch:
  Fix wrapping in champlain_view_x_to_longitude. Previous
  implementation assumed that after using x_to_wrap_x further
  wrapping would be needed only if x + priv-&gt;viewport_x &gt;= width.
- Do minor spec cleanup, use autosetup, make_build and make_install
  macros, drop obsolete and unused BUILD_FROM_VCS conditional
  gnome-common and gtk-doc BuildRequires and autogen.sh call.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546516800">- No longer build mephis support: Drop memphis-devel BuildRequires,
  memphis upstream is dead and gone from the web for several years.
  libchamplain upstream have disabled mephis support in git 5 years
  ago, so we should not build it either. Pass --disable-memphis to
  configure to be ensure we do not.
- Pkgconfigify spec, align with what configure checks for:
  + Drop clutter-devel, clutter-gtk-devel, gtk3-devel,
    libsoup-devel, sqlite3-devel and vala BuildRequires.
  + Add pkgconfig, pkgconfig(cairo), pkgconfig(clutter-1.0),
    pkgconfig(clutter-gtk-1.0), pkgconfig(gdk-3.0),
    pkgconfig(gio-2.0), pkgconfig(glib-2.0),
    pkgconfig(gobject-2.0), pkgconfig(gtk+-3.0),
    pkgconfig(libsoup-2.4), pkgconfig(sqlite3) and
    pkgconfig(vapigen) BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550750400">- Update to version 0.12.18:
  + Fix incorrect so version when using meson.
  + Avoid exporting marshaler functions by dropping the use of
    glib-genmarshal and using the generic marshaler instead.
  + Don't use glib-mkenums for champlain-gtk where it's not needed.
- Changes from version 0.12.17:
  + Use of meson build system, CI tests and automatized generation
    of documentation.
  + Various map wrapping fixes.
  + Pass data as uint8 pointer in champlain_renderer_set_data() and
    make this function introspectable.
  + Bump versions of some dependencies - clutter (1.24), glib
    (2.38) - and fix depreciation warnings.
  + Use https for all map sources that support it.
  + Don't version-control generated vapi files.
  + Combine champlain and champlain-gtk documentations into one.
  + More helpful README.md with links to pages related to
    libchamplain.
  + Various housekeeping and cleanups.
- Drop patch fixed upstream:
  libchamplain-Fix-wrapping-champlain_view_x_to_longitude.patch.
- Switch to meson build system, add meson BuildRequires and macros.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551614400">- Update to version 0.12.19:
  + Fix incorrect Requires in pc files when using meson.
  + Various meson-related fixes and cleanups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1572350400">- Update to version 0.12.20:
  + Remove autotools-based build and all the related files.
  + Fix gtk-doc module name.
  + Add missing gdk required dependency.
  + Make the build reproducible.</changelog>
</package>
<package pkgid="7c7170d90d42c05001a9e7323284ccae158beaacdc8c00ee6317cc21226cfcae" name="libchamplain-0_12-0" arch="ppc64le">
  <version epoch="0" ver="0.12.20" rel="150200.3.2.1"/>
  <changelog author="zaitor@opensuse.org" date="1426680000">- Update to version 0.12.10:
  + Improve key-press event handling to better support custom
    keybindings.
  + Add a simple demo demonstrating custom keybindings.
  + Handle CLUTTER_SCROLL_SMOOTH to fix moouse-wheel zooming with
    newer clutter versions.
  + Make ChamplainLabel shadow optional.
  + Emit animation-completed::zoom signal when zoom ends.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442577600">- Update to version 0.12.11:
  + Improved touch-screen support, pinch-to-zoom.
  + Add champlain_view_set_world() to limit the world to the
    specified bounding box.
  + Various minor fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1449576000">- Update to version 0.12.12:
  + Add possibility to export maps.
  + Fix map getting blank after some mouse actions.
  + Fix tile loading at higher zoom levels.
  + Improve mouse wheel zoom handling.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456488000">- Update to version 0.12.13:
  + Implement ChamplainExportable in MarkerLayer and
    ChamplainPoint.
  + Avoid runtime warnings due to the use of deprecated API.
  + Make sure enums are introspectable.
  + Fix occasional crash when closing map with layers.
  + Various minor fixes and improvements.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1473249600">- Update to version 0.12.14:
  + Add support for horizontal map wrapping.
  + Make the number of parallel connections of network tile source
    configurable.
  + Remove Mapquest map source as the tile server is not accessible
    any more.
  + Remove Maemo-related code.
  + Fix small memory leaks.
  + Bump libsoup dependency requirement to 2.42 and drop deprecated
    function calls.
  + Various minor improvements, fixes, depreciaton warning removals
    and cleanups.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Update to version 0.12.15:
  + Fix path layer surface exporting when no clone is visible.
  + Fix printing in gnome-maps.
  + Fix build on RHEL 7.3.
  + Minor example updates.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 0.12.16:
  + Add possibility to set User-Agent for requests.
  + Fix touch gesture zoom.
  + Python demo fixes and cleanups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Add
  libchamplain-Fix-wrapping-champlain_view_x_to_longitude.patch:
  Fix wrapping in champlain_view_x_to_longitude. Previous
  implementation assumed that after using x_to_wrap_x further
  wrapping would be needed only if x + priv-&gt;viewport_x &gt;= width.
- Do minor spec cleanup, use autosetup, make_build and make_install
  macros, drop obsolete and unused BUILD_FROM_VCS conditional
  gnome-common and gtk-doc BuildRequires and autogen.sh call.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546516800">- No longer build mephis support: Drop memphis-devel BuildRequires,
  memphis upstream is dead and gone from the web for several years.
  libchamplain upstream have disabled mephis support in git 5 years
  ago, so we should not build it either. Pass --disable-memphis to
  configure to be ensure we do not.
- Pkgconfigify spec, align with what configure checks for:
  + Drop clutter-devel, clutter-gtk-devel, gtk3-devel,
    libsoup-devel, sqlite3-devel and vala BuildRequires.
  + Add pkgconfig, pkgconfig(cairo), pkgconfig(clutter-1.0),
    pkgconfig(clutter-gtk-1.0), pkgconfig(gdk-3.0),
    pkgconfig(gio-2.0), pkgconfig(glib-2.0),
    pkgconfig(gobject-2.0), pkgconfig(gtk+-3.0),
    pkgconfig(libsoup-2.4), pkgconfig(sqlite3) and
    pkgconfig(vapigen) BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550750400">- Update to version 0.12.18:
  + Fix incorrect so version when using meson.
  + Avoid exporting marshaler functions by dropping the use of
    glib-genmarshal and using the generic marshaler instead.
  + Don't use glib-mkenums for champlain-gtk where it's not needed.
- Changes from version 0.12.17:
  + Use of meson build system, CI tests and automatized generation
    of documentation.
  + Various map wrapping fixes.
  + Pass data as uint8 pointer in champlain_renderer_set_data() and
    make this function introspectable.
  + Bump versions of some dependencies - clutter (1.24), glib
    (2.38) - and fix depreciation warnings.
  + Use https for all map sources that support it.
  + Don't version-control generated vapi files.
  + Combine champlain and champlain-gtk documentations into one.
  + More helpful README.md with links to pages related to
    libchamplain.
  + Various housekeeping and cleanups.
- Drop patch fixed upstream:
  libchamplain-Fix-wrapping-champlain_view_x_to_longitude.patch.
- Switch to meson build system, add meson BuildRequires and macros.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551614400">- Update to version 0.12.19:
  + Fix incorrect Requires in pc files when using meson.
  + Various meson-related fixes and cleanups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1572350400">- Update to version 0.12.20:
  + Remove autotools-based build and all the related files.
  + Fix gtk-doc module name.
  + Add missing gdk required dependency.
  + Make the build reproducible.</changelog>
</package>
<package pkgid="2e9a56936cf1af59b93cd8e12bdc449f44284569b2869c323439a0478de4dcec" name="libchamplain-0_12-0" arch="s390x">
  <version epoch="0" ver="0.12.20" rel="150200.3.2.1"/>
  <changelog author="zaitor@opensuse.org" date="1426680000">- Update to version 0.12.10:
  + Improve key-press event handling to better support custom
    keybindings.
  + Add a simple demo demonstrating custom keybindings.
  + Handle CLUTTER_SCROLL_SMOOTH to fix moouse-wheel zooming with
    newer clutter versions.
  + Make ChamplainLabel shadow optional.
  + Emit animation-completed::zoom signal when zoom ends.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442577600">- Update to version 0.12.11:
  + Improved touch-screen support, pinch-to-zoom.
  + Add champlain_view_set_world() to limit the world to the
    specified bounding box.
  + Various minor fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1449576000">- Update to version 0.12.12:
  + Add possibility to export maps.
  + Fix map getting blank after some mouse actions.
  + Fix tile loading at higher zoom levels.
  + Improve mouse wheel zoom handling.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456488000">- Update to version 0.12.13:
  + Implement ChamplainExportable in MarkerLayer and
    ChamplainPoint.
  + Avoid runtime warnings due to the use of deprecated API.
  + Make sure enums are introspectable.
  + Fix occasional crash when closing map with layers.
  + Various minor fixes and improvements.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1473249600">- Update to version 0.12.14:
  + Add support for horizontal map wrapping.
  + Make the number of parallel connections of network tile source
    configurable.
  + Remove Mapquest map source as the tile server is not accessible
    any more.
  + Remove Maemo-related code.
  + Fix small memory leaks.
  + Bump libsoup dependency requirement to 2.42 and drop deprecated
    function calls.
  + Various minor improvements, fixes, depreciaton warning removals
    and cleanups.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Update to version 0.12.15:
  + Fix path layer surface exporting when no clone is visible.
  + Fix printing in gnome-maps.
  + Fix build on RHEL 7.3.
  + Minor example updates.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 0.12.16:
  + Add possibility to set User-Agent for requests.
  + Fix touch gesture zoom.
  + Python demo fixes and cleanups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Add
  libchamplain-Fix-wrapping-champlain_view_x_to_longitude.patch:
  Fix wrapping in champlain_view_x_to_longitude. Previous
  implementation assumed that after using x_to_wrap_x further
  wrapping would be needed only if x + priv-&gt;viewport_x &gt;= width.
- Do minor spec cleanup, use autosetup, make_build and make_install
  macros, drop obsolete and unused BUILD_FROM_VCS conditional
  gnome-common and gtk-doc BuildRequires and autogen.sh call.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546516800">- No longer build mephis support: Drop memphis-devel BuildRequires,
  memphis upstream is dead and gone from the web for several years.
  libchamplain upstream have disabled mephis support in git 5 years
  ago, so we should not build it either. Pass --disable-memphis to
  configure to be ensure we do not.
- Pkgconfigify spec, align with what configure checks for:
  + Drop clutter-devel, clutter-gtk-devel, gtk3-devel,
    libsoup-devel, sqlite3-devel and vala BuildRequires.
  + Add pkgconfig, pkgconfig(cairo), pkgconfig(clutter-1.0),
    pkgconfig(clutter-gtk-1.0), pkgconfig(gdk-3.0),
    pkgconfig(gio-2.0), pkgconfig(glib-2.0),
    pkgconfig(gobject-2.0), pkgconfig(gtk+-3.0),
    pkgconfig(libsoup-2.4), pkgconfig(sqlite3) and
    pkgconfig(vapigen) BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550750400">- Update to version 0.12.18:
  + Fix incorrect so version when using meson.
  + Avoid exporting marshaler functions by dropping the use of
    glib-genmarshal and using the generic marshaler instead.
  + Don't use glib-mkenums for champlain-gtk where it's not needed.
- Changes from version 0.12.17:
  + Use of meson build system, CI tests and automatized generation
    of documentation.
  + Various map wrapping fixes.
  + Pass data as uint8 pointer in champlain_renderer_set_data() and
    make this function introspectable.
  + Bump versions of some dependencies - clutter (1.24), glib
    (2.38) - and fix depreciation warnings.
  + Use https for all map sources that support it.
  + Don't version-control generated vapi files.
  + Combine champlain and champlain-gtk documentations into one.
  + More helpful README.md with links to pages related to
    libchamplain.
  + Various housekeeping and cleanups.
- Drop patch fixed upstream:
  libchamplain-Fix-wrapping-champlain_view_x_to_longitude.patch.
- Switch to meson build system, add meson BuildRequires and macros.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551614400">- Update to version 0.12.19:
  + Fix incorrect Requires in pc files when using meson.
  + Various meson-related fixes and cleanups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1572350400">- Update to version 0.12.20:
  + Remove autotools-based build and all the related files.
  + Fix gtk-doc module name.
  + Add missing gdk required dependency.
  + Make the build reproducible.</changelog>
</package>
<package pkgid="5007126ec4a11e3134bbce5c5dcfd84937173e3b9aa08f22493f10d2cc83a864" name="libchamplain-0_12-0" arch="x86_64">
  <version epoch="0" ver="0.12.20" rel="150200.3.2.1"/>
  <changelog author="zaitor@opensuse.org" date="1426680000">- Update to version 0.12.10:
  + Improve key-press event handling to better support custom
    keybindings.
  + Add a simple demo demonstrating custom keybindings.
  + Handle CLUTTER_SCROLL_SMOOTH to fix moouse-wheel zooming with
    newer clutter versions.
  + Make ChamplainLabel shadow optional.
  + Emit animation-completed::zoom signal when zoom ends.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442577600">- Update to version 0.12.11:
  + Improved touch-screen support, pinch-to-zoom.
  + Add champlain_view_set_world() to limit the world to the
    specified bounding box.
  + Various minor fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1449576000">- Update to version 0.12.12:
  + Add possibility to export maps.
  + Fix map getting blank after some mouse actions.
  + Fix tile loading at higher zoom levels.
  + Improve mouse wheel zoom handling.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456488000">- Update to version 0.12.13:
  + Implement ChamplainExportable in MarkerLayer and
    ChamplainPoint.
  + Avoid runtime warnings due to the use of deprecated API.
  + Make sure enums are introspectable.
  + Fix occasional crash when closing map with layers.
  + Various minor fixes and improvements.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1473249600">- Update to version 0.12.14:
  + Add support for horizontal map wrapping.
  + Make the number of parallel connections of network tile source
    configurable.
  + Remove Mapquest map source as the tile server is not accessible
    any more.
  + Remove Maemo-related code.
  + Fix small memory leaks.
  + Bump libsoup dependency requirement to 2.42 and drop deprecated
    function calls.
  + Various minor improvements, fixes, depreciaton warning removals
    and cleanups.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Update to version 0.12.15:
  + Fix path layer surface exporting when no clone is visible.
  + Fix printing in gnome-maps.
  + Fix build on RHEL 7.3.
  + Minor example updates.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 0.12.16:
  + Add possibility to set User-Agent for requests.
  + Fix touch gesture zoom.
  + Python demo fixes and cleanups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Add
  libchamplain-Fix-wrapping-champlain_view_x_to_longitude.patch:
  Fix wrapping in champlain_view_x_to_longitude. Previous
  implementation assumed that after using x_to_wrap_x further
  wrapping would be needed only if x + priv-&gt;viewport_x &gt;= width.
- Do minor spec cleanup, use autosetup, make_build and make_install
  macros, drop obsolete and unused BUILD_FROM_VCS conditional
  gnome-common and gtk-doc BuildRequires and autogen.sh call.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546516800">- No longer build mephis support: Drop memphis-devel BuildRequires,
  memphis upstream is dead and gone from the web for several years.
  libchamplain upstream have disabled mephis support in git 5 years
  ago, so we should not build it either. Pass --disable-memphis to
  configure to be ensure we do not.
- Pkgconfigify spec, align with what configure checks for:
  + Drop clutter-devel, clutter-gtk-devel, gtk3-devel,
    libsoup-devel, sqlite3-devel and vala BuildRequires.
  + Add pkgconfig, pkgconfig(cairo), pkgconfig(clutter-1.0),
    pkgconfig(clutter-gtk-1.0), pkgconfig(gdk-3.0),
    pkgconfig(gio-2.0), pkgconfig(glib-2.0),
    pkgconfig(gobject-2.0), pkgconfig(gtk+-3.0),
    pkgconfig(libsoup-2.4), pkgconfig(sqlite3) and
    pkgconfig(vapigen) BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550750400">- Update to version 0.12.18:
  + Fix incorrect so version when using meson.
  + Avoid exporting marshaler functions by dropping the use of
    glib-genmarshal and using the generic marshaler instead.
  + Don't use glib-mkenums for champlain-gtk where it's not needed.
- Changes from version 0.12.17:
  + Use of meson build system, CI tests and automatized generation
    of documentation.
  + Various map wrapping fixes.
  + Pass data as uint8 pointer in champlain_renderer_set_data() and
    make this function introspectable.
  + Bump versions of some dependencies - clutter (1.24), glib
    (2.38) - and fix depreciation warnings.
  + Use https for all map sources that support it.
  + Don't version-control generated vapi files.
  + Combine champlain and champlain-gtk documentations into one.
  + More helpful README.md with links to pages related to
    libchamplain.
  + Various housekeeping and cleanups.
- Drop patch fixed upstream:
  libchamplain-Fix-wrapping-champlain_view_x_to_longitude.patch.
- Switch to meson build system, add meson BuildRequires and macros.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551614400">- Update to version 0.12.19:
  + Fix incorrect Requires in pc files when using meson.
  + Various meson-related fixes and cleanups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1572350400">- Update to version 0.12.20:
  + Remove autotools-based build and all the related files.
  + Fix gtk-doc module name.
  + Add missing gdk required dependency.
  + Make the build reproducible.</changelog>
</package>
<package pkgid="4686dc8e92c026c3433106653699e987babea793bd6d7814af30014540c2b65a" name="libchamplain-devel" arch="aarch64">
  <version epoch="0" ver="0.12.20" rel="150200.3.2.1"/>
  <changelog author="zaitor@opensuse.org" date="1426680000">- Update to version 0.12.10:
  + Improve key-press event handling to better support custom
    keybindings.
  + Add a simple demo demonstrating custom keybindings.
  + Handle CLUTTER_SCROLL_SMOOTH to fix moouse-wheel zooming with
    newer clutter versions.
  + Make ChamplainLabel shadow optional.
  + Emit animation-completed::zoom signal when zoom ends.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442577600">- Update to version 0.12.11:
  + Improved touch-screen support, pinch-to-zoom.
  + Add champlain_view_set_world() to limit the world to the
    specified bounding box.
  + Various minor fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1449576000">- Update to version 0.12.12:
  + Add possibility to export maps.
  + Fix map getting blank after some mouse actions.
  + Fix tile loading at higher zoom levels.
  + Improve mouse wheel zoom handling.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456488000">- Update to version 0.12.13:
  + Implement ChamplainExportable in MarkerLayer and
    ChamplainPoint.
  + Avoid runtime warnings due to the use of deprecated API.
  + Make sure enums are introspectable.
  + Fix occasional crash when closing map with layers.
  + Various minor fixes and improvements.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1473249600">- Update to version 0.12.14:
  + Add support for horizontal map wrapping.
  + Make the number of parallel connections of network tile source
    configurable.
  + Remove Mapquest map source as the tile server is not accessible
    any more.
  + Remove Maemo-related code.
  + Fix small memory leaks.
  + Bump libsoup dependency requirement to 2.42 and drop deprecated
    function calls.
  + Various minor improvements, fixes, depreciaton warning removals
    and cleanups.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Update to version 0.12.15:
  + Fix path layer surface exporting when no clone is visible.
  + Fix printing in gnome-maps.
  + Fix build on RHEL 7.3.
  + Minor example updates.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 0.12.16:
  + Add possibility to set User-Agent for requests.
  + Fix touch gesture zoom.
  + Python demo fixes and cleanups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Add
  libchamplain-Fix-wrapping-champlain_view_x_to_longitude.patch:
  Fix wrapping in champlain_view_x_to_longitude. Previous
  implementation assumed that after using x_to_wrap_x further
  wrapping would be needed only if x + priv-&gt;viewport_x &gt;= width.
- Do minor spec cleanup, use autosetup, make_build and make_install
  macros, drop obsolete and unused BUILD_FROM_VCS conditional
  gnome-common and gtk-doc BuildRequires and autogen.sh call.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546516800">- No longer build mephis support: Drop memphis-devel BuildRequires,
  memphis upstream is dead and gone from the web for several years.
  libchamplain upstream have disabled mephis support in git 5 years
  ago, so we should not build it either. Pass --disable-memphis to
  configure to be ensure we do not.
- Pkgconfigify spec, align with what configure checks for:
  + Drop clutter-devel, clutter-gtk-devel, gtk3-devel,
    libsoup-devel, sqlite3-devel and vala BuildRequires.
  + Add pkgconfig, pkgconfig(cairo), pkgconfig(clutter-1.0),
    pkgconfig(clutter-gtk-1.0), pkgconfig(gdk-3.0),
    pkgconfig(gio-2.0), pkgconfig(glib-2.0),
    pkgconfig(gobject-2.0), pkgconfig(gtk+-3.0),
    pkgconfig(libsoup-2.4), pkgconfig(sqlite3) and
    pkgconfig(vapigen) BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550750400">- Update to version 0.12.18:
  + Fix incorrect so version when using meson.
  + Avoid exporting marshaler functions by dropping the use of
    glib-genmarshal and using the generic marshaler instead.
  + Don't use glib-mkenums for champlain-gtk where it's not needed.
- Changes from version 0.12.17:
  + Use of meson build system, CI tests and automatized generation
    of documentation.
  + Various map wrapping fixes.
  + Pass data as uint8 pointer in champlain_renderer_set_data() and
    make this function introspectable.
  + Bump versions of some dependencies - clutter (1.24), glib
    (2.38) - and fix depreciation warnings.
  + Use https for all map sources that support it.
  + Don't version-control generated vapi files.
  + Combine champlain and champlain-gtk documentations into one.
  + More helpful README.md with links to pages related to
    libchamplain.
  + Various housekeeping and cleanups.
- Drop patch fixed upstream:
  libchamplain-Fix-wrapping-champlain_view_x_to_longitude.patch.
- Switch to meson build system, add meson BuildRequires and macros.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551614400">- Update to version 0.12.19:
  + Fix incorrect Requires in pc files when using meson.
  + Various meson-related fixes and cleanups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1572350400">- Update to version 0.12.20:
  + Remove autotools-based build and all the related files.
  + Fix gtk-doc module name.
  + Add missing gdk required dependency.
  + Make the build reproducible.</changelog>
</package>
<package pkgid="567dcef60b896803f7f1d4b0a3d924cc832ca3064e41f994a7e70e7ce2be8560" name="libchamplain-devel" arch="ppc64le">
  <version epoch="0" ver="0.12.20" rel="150200.3.2.1"/>
  <changelog author="zaitor@opensuse.org" date="1426680000">- Update to version 0.12.10:
  + Improve key-press event handling to better support custom
    keybindings.
  + Add a simple demo demonstrating custom keybindings.
  + Handle CLUTTER_SCROLL_SMOOTH to fix moouse-wheel zooming with
    newer clutter versions.
  + Make ChamplainLabel shadow optional.
  + Emit animation-completed::zoom signal when zoom ends.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442577600">- Update to version 0.12.11:
  + Improved touch-screen support, pinch-to-zoom.
  + Add champlain_view_set_world() to limit the world to the
    specified bounding box.
  + Various minor fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1449576000">- Update to version 0.12.12:
  + Add possibility to export maps.
  + Fix map getting blank after some mouse actions.
  + Fix tile loading at higher zoom levels.
  + Improve mouse wheel zoom handling.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456488000">- Update to version 0.12.13:
  + Implement ChamplainExportable in MarkerLayer and
    ChamplainPoint.
  + Avoid runtime warnings due to the use of deprecated API.
  + Make sure enums are introspectable.
  + Fix occasional crash when closing map with layers.
  + Various minor fixes and improvements.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1473249600">- Update to version 0.12.14:
  + Add support for horizontal map wrapping.
  + Make the number of parallel connections of network tile source
    configurable.
  + Remove Mapquest map source as the tile server is not accessible
    any more.
  + Remove Maemo-related code.
  + Fix small memory leaks.
  + Bump libsoup dependency requirement to 2.42 and drop deprecated
    function calls.
  + Various minor improvements, fixes, depreciaton warning removals
    and cleanups.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Update to version 0.12.15:
  + Fix path layer surface exporting when no clone is visible.
  + Fix printing in gnome-maps.
  + Fix build on RHEL 7.3.
  + Minor example updates.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 0.12.16:
  + Add possibility to set User-Agent for requests.
  + Fix touch gesture zoom.
  + Python demo fixes and cleanups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Add
  libchamplain-Fix-wrapping-champlain_view_x_to_longitude.patch:
  Fix wrapping in champlain_view_x_to_longitude. Previous
  implementation assumed that after using x_to_wrap_x further
  wrapping would be needed only if x + priv-&gt;viewport_x &gt;= width.
- Do minor spec cleanup, use autosetup, make_build and make_install
  macros, drop obsolete and unused BUILD_FROM_VCS conditional
  gnome-common and gtk-doc BuildRequires and autogen.sh call.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546516800">- No longer build mephis support: Drop memphis-devel BuildRequires,
  memphis upstream is dead and gone from the web for several years.
  libchamplain upstream have disabled mephis support in git 5 years
  ago, so we should not build it either. Pass --disable-memphis to
  configure to be ensure we do not.
- Pkgconfigify spec, align with what configure checks for:
  + Drop clutter-devel, clutter-gtk-devel, gtk3-devel,
    libsoup-devel, sqlite3-devel and vala BuildRequires.
  + Add pkgconfig, pkgconfig(cairo), pkgconfig(clutter-1.0),
    pkgconfig(clutter-gtk-1.0), pkgconfig(gdk-3.0),
    pkgconfig(gio-2.0), pkgconfig(glib-2.0),
    pkgconfig(gobject-2.0), pkgconfig(gtk+-3.0),
    pkgconfig(libsoup-2.4), pkgconfig(sqlite3) and
    pkgconfig(vapigen) BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550750400">- Update to version 0.12.18:
  + Fix incorrect so version when using meson.
  + Avoid exporting marshaler functions by dropping the use of
    glib-genmarshal and using the generic marshaler instead.
  + Don't use glib-mkenums for champlain-gtk where it's not needed.
- Changes from version 0.12.17:
  + Use of meson build system, CI tests and automatized generation
    of documentation.
  + Various map wrapping fixes.
  + Pass data as uint8 pointer in champlain_renderer_set_data() and
    make this function introspectable.
  + Bump versions of some dependencies - clutter (1.24), glib
    (2.38) - and fix depreciation warnings.
  + Use https for all map sources that support it.
  + Don't version-control generated vapi files.
  + Combine champlain and champlain-gtk documentations into one.
  + More helpful README.md with links to pages related to
    libchamplain.
  + Various housekeeping and cleanups.
- Drop patch fixed upstream:
  libchamplain-Fix-wrapping-champlain_view_x_to_longitude.patch.
- Switch to meson build system, add meson BuildRequires and macros.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551614400">- Update to version 0.12.19:
  + Fix incorrect Requires in pc files when using meson.
  + Various meson-related fixes and cleanups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1572350400">- Update to version 0.12.20:
  + Remove autotools-based build and all the related files.
  + Fix gtk-doc module name.
  + Add missing gdk required dependency.
  + Make the build reproducible.</changelog>
</package>
<package pkgid="eb37f87f78f567c4961f38a80bf57788553e07c8b511d1bac26be32071d30c36" name="libchamplain-devel" arch="s390x">
  <version epoch="0" ver="0.12.20" rel="150200.3.2.1"/>
  <changelog author="zaitor@opensuse.org" date="1426680000">- Update to version 0.12.10:
  + Improve key-press event handling to better support custom
    keybindings.
  + Add a simple demo demonstrating custom keybindings.
  + Handle CLUTTER_SCROLL_SMOOTH to fix moouse-wheel zooming with
    newer clutter versions.
  + Make ChamplainLabel shadow optional.
  + Emit animation-completed::zoom signal when zoom ends.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442577600">- Update to version 0.12.11:
  + Improved touch-screen support, pinch-to-zoom.
  + Add champlain_view_set_world() to limit the world to the
    specified bounding box.
  + Various minor fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1449576000">- Update to version 0.12.12:
  + Add possibility to export maps.
  + Fix map getting blank after some mouse actions.
  + Fix tile loading at higher zoom levels.
  + Improve mouse wheel zoom handling.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456488000">- Update to version 0.12.13:
  + Implement ChamplainExportable in MarkerLayer and
    ChamplainPoint.
  + Avoid runtime warnings due to the use of deprecated API.
  + Make sure enums are introspectable.
  + Fix occasional crash when closing map with layers.
  + Various minor fixes and improvements.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1473249600">- Update to version 0.12.14:
  + Add support for horizontal map wrapping.
  + Make the number of parallel connections of network tile source
    configurable.
  + Remove Mapquest map source as the tile server is not accessible
    any more.
  + Remove Maemo-related code.
  + Fix small memory leaks.
  + Bump libsoup dependency requirement to 2.42 and drop deprecated
    function calls.
  + Various minor improvements, fixes, depreciaton warning removals
    and cleanups.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Update to version 0.12.15:
  + Fix path layer surface exporting when no clone is visible.
  + Fix printing in gnome-maps.
  + Fix build on RHEL 7.3.
  + Minor example updates.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 0.12.16:
  + Add possibility to set User-Agent for requests.
  + Fix touch gesture zoom.
  + Python demo fixes and cleanups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Add
  libchamplain-Fix-wrapping-champlain_view_x_to_longitude.patch:
  Fix wrapping in champlain_view_x_to_longitude. Previous
  implementation assumed that after using x_to_wrap_x further
  wrapping would be needed only if x + priv-&gt;viewport_x &gt;= width.
- Do minor spec cleanup, use autosetup, make_build and make_install
  macros, drop obsolete and unused BUILD_FROM_VCS conditional
  gnome-common and gtk-doc BuildRequires and autogen.sh call.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546516800">- No longer build mephis support: Drop memphis-devel BuildRequires,
  memphis upstream is dead and gone from the web for several years.
  libchamplain upstream have disabled mephis support in git 5 years
  ago, so we should not build it either. Pass --disable-memphis to
  configure to be ensure we do not.
- Pkgconfigify spec, align with what configure checks for:
  + Drop clutter-devel, clutter-gtk-devel, gtk3-devel,
    libsoup-devel, sqlite3-devel and vala BuildRequires.
  + Add pkgconfig, pkgconfig(cairo), pkgconfig(clutter-1.0),
    pkgconfig(clutter-gtk-1.0), pkgconfig(gdk-3.0),
    pkgconfig(gio-2.0), pkgconfig(glib-2.0),
    pkgconfig(gobject-2.0), pkgconfig(gtk+-3.0),
    pkgconfig(libsoup-2.4), pkgconfig(sqlite3) and
    pkgconfig(vapigen) BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550750400">- Update to version 0.12.18:
  + Fix incorrect so version when using meson.
  + Avoid exporting marshaler functions by dropping the use of
    glib-genmarshal and using the generic marshaler instead.
  + Don't use glib-mkenums for champlain-gtk where it's not needed.
- Changes from version 0.12.17:
  + Use of meson build system, CI tests and automatized generation
    of documentation.
  + Various map wrapping fixes.
  + Pass data as uint8 pointer in champlain_renderer_set_data() and
    make this function introspectable.
  + Bump versions of some dependencies - clutter (1.24), glib
    (2.38) - and fix depreciation warnings.
  + Use https for all map sources that support it.
  + Don't version-control generated vapi files.
  + Combine champlain and champlain-gtk documentations into one.
  + More helpful README.md with links to pages related to
    libchamplain.
  + Various housekeeping and cleanups.
- Drop patch fixed upstream:
  libchamplain-Fix-wrapping-champlain_view_x_to_longitude.patch.
- Switch to meson build system, add meson BuildRequires and macros.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551614400">- Update to version 0.12.19:
  + Fix incorrect Requires in pc files when using meson.
  + Various meson-related fixes and cleanups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1572350400">- Update to version 0.12.20:
  + Remove autotools-based build and all the related files.
  + Fix gtk-doc module name.
  + Add missing gdk required dependency.
  + Make the build reproducible.</changelog>
</package>
<package pkgid="023a89bd5cd3a45ef4894b94b0af016896f9c31bbf54338032bf398ee6916e7b" name="libchamplain-devel" arch="x86_64">
  <version epoch="0" ver="0.12.20" rel="150200.3.2.1"/>
  <changelog author="zaitor@opensuse.org" date="1426680000">- Update to version 0.12.10:
  + Improve key-press event handling to better support custom
    keybindings.
  + Add a simple demo demonstrating custom keybindings.
  + Handle CLUTTER_SCROLL_SMOOTH to fix moouse-wheel zooming with
    newer clutter versions.
  + Make ChamplainLabel shadow optional.
  + Emit animation-completed::zoom signal when zoom ends.</changelog>
  <changelog author="zaitor@opensuse.org" date="1442577600">- Update to version 0.12.11:
  + Improved touch-screen support, pinch-to-zoom.
  + Add champlain_view_set_world() to limit the world to the
    specified bounding box.
  + Various minor fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1449576000">- Update to version 0.12.12:
  + Add possibility to export maps.
  + Fix map getting blank after some mouse actions.
  + Fix tile loading at higher zoom levels.
  + Improve mouse wheel zoom handling.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456488000">- Update to version 0.12.13:
  + Implement ChamplainExportable in MarkerLayer and
    ChamplainPoint.
  + Avoid runtime warnings due to the use of deprecated API.
  + Make sure enums are introspectable.
  + Fix occasional crash when closing map with layers.
  + Various minor fixes and improvements.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1473249600">- Update to version 0.12.14:
  + Add support for horizontal map wrapping.
  + Make the number of parallel connections of network tile source
    configurable.
  + Remove Mapquest map source as the tile server is not accessible
    any more.
  + Remove Maemo-related code.
  + Fix small memory leaks.
  + Bump libsoup dependency requirement to 2.42 and drop deprecated
    function calls.
  + Various minor improvements, fixes, depreciaton warning removals
    and cleanups.</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Update to version 0.12.15:
  + Fix path layer surface exporting when no clone is visible.
  + Fix printing in gnome-maps.
  + Fix build on RHEL 7.3.
  + Minor example updates.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- Update to version 0.12.16:
  + Add possibility to set User-Agent for requests.
  + Fix touch gesture zoom.
  + Python demo fixes and cleanups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517140800">- Add
  libchamplain-Fix-wrapping-champlain_view_x_to_longitude.patch:
  Fix wrapping in champlain_view_x_to_longitude. Previous
  implementation assumed that after using x_to_wrap_x further
  wrapping would be needed only if x + priv-&gt;viewport_x &gt;= width.
- Do minor spec cleanup, use autosetup, make_build and make_install
  macros, drop obsolete and unused BUILD_FROM_VCS conditional
  gnome-common and gtk-doc BuildRequires and autogen.sh call.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1546516800">- No longer build mephis support: Drop memphis-devel BuildRequires,
  memphis upstream is dead and gone from the web for several years.
  libchamplain upstream have disabled mephis support in git 5 years
  ago, so we should not build it either. Pass --disable-memphis to
  configure to be ensure we do not.
- Pkgconfigify spec, align with what configure checks for:
  + Drop clutter-devel, clutter-gtk-devel, gtk3-devel,
    libsoup-devel, sqlite3-devel and vala BuildRequires.
  + Add pkgconfig, pkgconfig(cairo), pkgconfig(clutter-1.0),
    pkgconfig(clutter-gtk-1.0), pkgconfig(gdk-3.0),
    pkgconfig(gio-2.0), pkgconfig(glib-2.0),
    pkgconfig(gobject-2.0), pkgconfig(gtk+-3.0),
    pkgconfig(libsoup-2.4), pkgconfig(sqlite3) and
    pkgconfig(vapigen) BuildRequires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1550750400">- Update to version 0.12.18:
  + Fix incorrect so version when using meson.
  + Avoid exporting marshaler functions by dropping the use of
    glib-genmarshal and using the generic marshaler instead.
  + Don't use glib-mkenums for champlain-gtk where it's not needed.
- Changes from version 0.12.17:
  + Use of meson build system, CI tests and automatized generation
    of documentation.
  + Various map wrapping fixes.
  + Pass data as uint8 pointer in champlain_renderer_set_data() and
    make this function introspectable.
  + Bump versions of some dependencies - clutter (1.24), glib
    (2.38) - and fix depreciation warnings.
  + Use https for all map sources that support it.
  + Don't version-control generated vapi files.
  + Combine champlain and champlain-gtk documentations into one.
  + More helpful README.md with links to pages related to
    libchamplain.
  + Various housekeeping and cleanups.
- Drop patch fixed upstream:
  libchamplain-Fix-wrapping-champlain_view_x_to_longitude.patch.
- Switch to meson build system, add meson BuildRequires and macros.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1551614400">- Update to version 0.12.19:
  + Fix incorrect Requires in pc files when using meson.
  + Various meson-related fixes and cleanups.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1572350400">- Update to version 0.12.20:
  + Remove autotools-based build and all the related files.
  + Fix gtk-doc module name.
  + Add missing gdk required dependency.
  + Make the build reproducible.</changelog>
</package>
<package pkgid="c9c5ac37c31dff9667b5dea6adaf39c9cb60653f0f5de389091b2703b98661ec" name="libclamav9" arch="aarch64">
  <version epoch="0" ver="0.103.6" rel="150000.3.38.1"/>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
</package>
<package pkgid="c670e59f88543700028bbc2632919977b50b0000306743f9b2d254cc88dd9ffd" name="libclamav9" arch="ppc64le">
  <version epoch="0" ver="0.103.6" rel="150000.3.38.1"/>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
</package>
<package pkgid="617ea2fd7af3110aae75c15e0d079e062924619fee2343c17a49528bff1ee1c4" name="libclamav9" arch="s390x">
  <version epoch="0" ver="0.103.6" rel="150000.3.38.1"/>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
</package>
<package pkgid="8d3094b162eb912a84aae2afe8edb0e3e5e586ec8cdeff4f92e7ec226bb0b770" name="libclamav9" arch="x86_64">
  <version epoch="0" ver="0.103.6" rel="150000.3.38.1"/>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
</package>
<package pkgid="0f82ea9d493d50e516872eb4ca28d96450c51a237d9861bc2572fd595b25f620" name="libclang7-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="d72c408feeca5c171604a6d0539da50d428cde13172ab6aa26d3e7bad2451d8d" name="libclang7" arch="aarch64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="2572498bbbbe77a035298792cf73c5f9494e6a7af87d0a419d1126efe6ccc1b6" name="libclang7" arch="ppc64le">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="302202d0700351e92b55988936c0f0fbd53ffefa31f41070c71f25f942c1fd42" name="libclang7" arch="s390x">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="20464b7b4d300fc3d2787e3824e4cfdc6679af20c86cbfa0f6196c2740c55453" name="libclang7" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="adb6a0bc3bc8083277b32b07cae590eeaed86cf98c0f46b5e5dddc3a69e7274d" name="libcom_err-devel" arch="aarch64">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="4a86ddf0b693f312e6694c07e3188e63de57a2a8f2216173533474290a6c494b" name="libcom_err-devel" arch="ppc64le">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="81c91672d5eaa142894c93bf1fb1d3aaa51d89d4c81c327808133584abecdc27" name="libcom_err-devel" arch="s390x">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="2632b258e6015c05e3dc5ba8f8141af236c4246c7bdb5beae27093a9dbde1bff" name="libcom_err-devel" arch="x86_64">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="4c35d9d6cda2272433361caeedb39a03d58d1a21c88a94d112ca1e1e53755c4d" name="libcom_err-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="dafc97f8b3e498db8ae9a685d5ffd5691eca1e958cadfb241b419368e177a878" name="libcom_err-devel-static" arch="aarch64">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="e98f6d82afa4cb6fcc74f40e11abf8cb2b1878e0ecbd1831e2096fa83442109b" name="libcom_err-devel-static" arch="ppc64le">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="f8595d1ae1889d9353447e0225541dceacedcc088129278bcb4b81a230038839" name="libcom_err-devel-static" arch="s390x">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="c1a866f760bfc2a66393dc7971771d02806e9603a41ee165da86469ebe159bd2" name="libcom_err-devel-static" arch="x86_64">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="669d2158d80674af93e3603452eb5ca865c1b348fcea766afde3de5e66b254be" name="libcom_err2" arch="aarch64">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="a3c0a527819cdb210edd2c1243224618c4374aff0b02abebaf5e3e46fe9d995f" name="libcom_err2" arch="ppc64le">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="9c19ccb3016825d90d1f31192bc8c75d149332778168eb43a348597860639cdb" name="libcom_err2" arch="s390x">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="3fa37835e0b06e13fc02308918abc7457c047887a49b8c36148bcf054670d49d" name="libcom_err2" arch="x86_64">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="4ae3b3925c40d2ae6f1e084bf6f92da341918e582e460b787a8c179f78d2224b" name="libcom_err2-32bit" arch="x86_64">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="66d8245aacdafe170f3e1d5a53e2268f28354097b9bc2e408e1c8172d1182a98" name="libcsync-devel" arch="aarch64">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="44e1ada1039ade7fe1d322beb4b9b205c8e3c88f35e4b39b69d90e53309c9758" name="libcsync-devel" arch="ppc64le">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="b5dbfbe9cd398030f8d338319a9dc627950c9800be11f3888317eba57c42a2d0" name="libcsync-devel" arch="s390x">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="e0c151f4417aac0bb2af5c1fb36c628a0b9cb4a265f9e66012fa37d057e5d6bc" name="libcsync-devel" arch="x86_64">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="1c13b2cf675ba0899b37a17482ecbdb47a3730062705c3bc3ade76caac0e5319" name="libcsync-devel-doc" arch="aarch64">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="5c6c6a8d16c0ca40a1ecd2eb5a343405e32ad2edb346943e7cd4d64e71d4fb1f" name="libcsync-devel-doc" arch="ppc64le">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="c9df886e4ad5b0acd2f0fcff746b16a66d5eca4b13c89c58c371689cf15e528a" name="libcsync-devel-doc" arch="s390x">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="a6c675d21f337e10c8b28a0173c54b9bd4324dee1280f5146d3d4011fe783eb1" name="libcsync-devel-doc" arch="x86_64">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="040e2cb55082e14bb73e2721223ef3c21b053e015aea1103adb982596902bd28" name="libcsync-doc" arch="aarch64">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="42041ad550b4f5be1472b9cbcf928fe278adb1d7bf34ef3a1c556355cf27445d" name="libcsync-doc" arch="ppc64le">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="c5aadc8902aebaa9be61e1a9ca1bb23512c26ed2fa5dfe4e53cd5f0a804e4194" name="libcsync-doc" arch="s390x">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="990a6d860c0772cd6f758a59071cf019762dda1c71acdad75e7716b20c050081" name="libcsync-doc" arch="x86_64">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="131019a6418e212deae0f47424185a4b2d7059f35e812c95a6d181bddd8b9557" name="libcsync-plugin-owncloud" arch="aarch64">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="666a637b1ab212850f0fe8d9181029129171cbec3e81715557f0f3d9ce2a7d9d" name="libcsync-plugin-owncloud" arch="ppc64le">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="6879683f4edf58f2da677e9fc4c29af1a7e0c38ab9839e7acc7bc4f592b17b98" name="libcsync-plugin-owncloud" arch="s390x">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="a986ae2f0a2aca29f6eb5a52b6c2c9f6e70a620be6fdb82ad6fc72b25cb16935" name="libcsync-plugin-owncloud" arch="x86_64">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="8220cd6b36af544373be1e36ede918f5da080e7bfdb20421ebb8fe86207fa1e5" name="libcsync-plugin-sftp" arch="aarch64">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="23e4cb1ef4e35fe4a64015427ad411e33211524563002ca8d683759651c0c04f" name="libcsync-plugin-sftp" arch="ppc64le">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="b6221eebf0b6f5224f58165ed528932c54c1cc12140c90755ddcb70d48533b12" name="libcsync-plugin-sftp" arch="s390x">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="f083c68a5581198d55afe4fb61f82fb7d927c24d68f87a4a9c44b39184841dbf" name="libcsync-plugin-sftp" arch="x86_64">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="f5962bf8710d44983c9127e3ee701399a1fd26ade29de1c321ea9409e42e194b" name="libcsync-plugin-smb" arch="aarch64">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="24e18c4341580169bbaf3f008146e7642362431073ebdb33d47e8adc4790fe20" name="libcsync-plugin-smb" arch="ppc64le">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="ae5c6765e8b41bda00b66115612a9034e81713625496018452da9d0e113af217" name="libcsync-plugin-smb" arch="s390x">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="17063ee93d0ef5d9a6249e54a3aaa106d17b0592a9f42d4e5bc93abe396513e2" name="libcsync-plugin-smb" arch="x86_64">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="8e97c6f2bb9c629b8df5a20146e11538835edf202a979f06b7ca2c811424660b" name="libcsync0" arch="aarch64">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="53460a9cf29e699bb8e9ccccdbd4f13e18b8df858147e63d3f077464e3475a9b" name="libcsync0" arch="ppc64le">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="50fe2746e7365dc71dc7e8fd960d4584bba4eb5175334210c7b4349e9c1989cb" name="libcsync0" arch="s390x">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="99f0242e96a8b104ab332c201f68454b36fb7fc7dac4c377758b648b24935633" name="libcsync0" arch="x86_64">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="a31ec59cbaee44c5d9432c2244471a832ac7f9149857b7a32e2ec4d62062ccf3" name="libcsync0-32bit" arch="x86_64">
  <version epoch="0" ver="0.50.0" rel="150000.3.8.1"/>
  <changelog author="anschneider@exsuse.de" date="1243252800">- Update to version 0.43.0.
  * Added SFTP support with libssh 0.3.
  * Added possibility to pass userdata to the auth function.
  * Added a better version function.
  * Fixed CMake build.
  * Fixed CMake find modules.
  * Fixed some flaws in cstd functions.
  * Documented all public functions.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="anschneider@exsuse.de" date="1266235200">- Update to version 0.44.0.
  * Migrated sftp module to libssh 0.4.
  * Added more cache entries to the default config.
  * Added missing requirements.
  * Fixed build warnings.
  * Fixed some memory leaks using sftp attributes.
  * Some code cleanups.</changelog>
  <changelog author="anschneider@exsuse.de" date="1266321600">- Build always with libssh support.</changelog>
  <changelog author="jmcdonough@suse.com" date="1379073600">- Update to version 0.50.0.
  * Added an owncloud module
  * Added a backup mode to the reconciler
  * Added new logging framework (removed log4c dependency)
  * Added new config parser (removed iniparser dependency)
  * Added capabilities for modules
  * Added content checking in conflict case
  * Improved database performance and integrity checks
  * Improved error reporting
- Add fix-cmake-on-pre-12.patch: Fix building on older systems</changelog>
  <changelog author="freitag@owncloud.com" date="1404129600">- BuildRequire pkg-config to make cmake find its libraries again.</changelog>
  <changelog author="dimstar@opensuse.org" date="1426507200">- Fix popd usage: since bash 4.3, it only takes a numeric argument.</changelog>
  <changelog author="tjcw@physics.org" date="1435579200">- Fix build break by changing __FUNCTION__ to __func__
  * csync_log.h.patch</changelog>
  <changelog author="opensuse@freisturz.de" date="1540900800">- Add fix-missing-const.patch: Fix a compile error on Leap 15.1
  Fixes boo#1113889</changelog>
  <changelog author="dimstar@opensuse.org" date="1603800000">- Add csync-libssh.patch: Detect libssh version in libssh_version.h
  in case this file exists.</changelog>
</package>
<package pkgid="eec0872c8ba97595dfd3cfa8c274302399a3ddae17dde463be9165c140ebd697" name="libctf-nobfd0" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="71bb754165a3ad65850037030932f610906bb84ef0acfae86efdcd2bfc1f5895" name="libctf-nobfd0" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="eaf867829f002c4152cd7e154f63364f4ede07bc69b4ed066f2e9f109f222141" name="libctf-nobfd0" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="c0d24e99d4e3b737cf78ae2a361292243a111ae3459ac4d82fcaaca581179629" name="libctf-nobfd0" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="2308e63db944e89f6983e95e142c8705d8366bdce777f79d45df993c0064e192" name="libctf0" arch="aarch64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="60b16ab2a8114eaa54c696c6c0829fb78611b321acec89a639db71ea977f4d33" name="libctf0" arch="ppc64le">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="5650d904ed838d72eedb3a7ab73573912bc0ed12172f149492237256beb31bc9" name="libctf0" arch="s390x">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="cc281457f9114fec444de6c62ef0ec3d3f7dbf1852614b89a8157d53553d179a" name="libctf0" arch="x86_64">
  <version epoch="0" ver="2.37" rel="150100.7.29.1"/>
  <changelog author="matz@suse.com" date="1607083200">- Add binutils-fix-relax.diff to fix linking relaxation problems
  with old object files hitting some enterprise software. [bsc#1179341]</changelog>
  <changelog author="mliska@suse.cz" date="1611489600">- Update to binutils 2.36:
  New features in the Assembler:
    General:
  * When setting the link order attribute of ELF sections, it is now
    possible to use a numeric section index instead of symbol name.
  * Added a .nop directive to generate a single no-op instruction in
    a target neutral manner.  This instruction does have an effect on
    DWARF line number generation, if that is active.
  * Removed --reduce-memory-overheads and --hash-size as gas now
    uses hash tables that can be expand and shrink automatically.
    X86/x86_64:
  * Add support for AVX VNNI, HRESET, UINTR, TDX, AMX and Key
    Locker instructions.
  * Support non-absolute segment values for lcall and ljmp.
  * Add {disp16} pseudo prefix to x86 assembler.
  * Configure with --enable-x86-used-note by default for Linux/x86.
    ARM/AArch64:
  * Add support for Cortex-A78, Cortex-A78AE and Cortex-X1,
    Cortex-R82, Neoverse V1, and Neoverse N2 cores.
  * Add support for ETMv4 (Embedded Trace Macrocell), ETE (Embedded
    Trace Extension), TRBE (Trace Buffer Extension), CSRE (Call
    Stack Recorder Extension) and BRBE (Branch Record Buffer
    Extension) system registers.
  * Add support for Armv8-R and Armv8.7-A ISA extensions.
  * Add support for DSB memory nXS barrier, WFET and WFIT
    instruction for Armv8.7.
  * Add support for +csre feature for -march. Add CSR PDEC
    instruction for CSRE feature in AArch64.
  * Add support for +flagm feature for -march in Armv8.4 AArch64.
  * Add support for +ls64 feature for -march in Armv8.7
    AArch64. Add atomic 64-byte load/store instructions for this
    feature.
  * Add support for +pauth (Pointer Authentication) feature for
  - march in AArch64.
    New features in the Linker:
  * Add --error-handling-script=&lt;NAME&gt; command line option to allow
    a helper script to be invoked when an undefined symbol or a
    missing library is encountered.  This option can be suppressed
    via the configure time switch: --enable-error-handling-script=no.
  * Add -z x86-64-{baseline|v[234]} to the x86 ELF linker to mark
    x86-64-{baseline|v[234]} ISA level as needed.
  * Add -z unique-symbol to avoid duplicated local symbol names.
  * The creation of PE format DLLs now defaults to using a more
    secure set of DLL characteristics.
  * The linker now deduplicates the types in .ctf sections.  The new
    command-line option --ctf-share-types describes how to do this:
    its default value, share-unconflicted, produces the most compact
    output.
  * The linker now omits the "variable section" from .ctf sections
    by default, saving space.  This is almost certainly what you
    want unless you are working on a project that has its own
    analogue of symbol tables that are not reflected in the ELF
    symtabs.
  New features in other binary tools:
  * The ar tool's previously unused l modifier is now used for
    specifying dependencies of a static library. The arguments of
    this option (or --record-libdeps long form option) will be
    stored verbatim in the __.LIBDEP member of the archive, which
    the linker may read at link time.
  * Readelf can now display the contents of LTO symbol table
    sections when asked to do so via the --lto-syms command line
    option.
  * Readelf now accepts the -C command line option to enable the
    demangling of symbol names.  In addition the --demangle=&lt;style&gt;,
  - -no-demangle, --recurse-limit and --no-recurse-limit options
    are also now availale.
- Includes fixes for these CVEs:
  bnc#1179898 aka CVE-2020-16590 aka PR25821
  bnc#1179899 aka CVE-2020-16591 aka PR25822
  bnc#1179900 aka CVE-2020-16592 aka PR25823
  bnc#1179901 aka CVE-2020-16593 aka PR25827
  bnc#1179902 aka CVE-2020-16598 aka PR25840
  bnc#1179903 aka CVE-2020-16599 aka PR25842
  bnc#1180451 aka CVE-2020-35493 aka PR25307
  bnc#1180454 aka CVE-2020-35496 aka PR25308
  bnc#1180461 aka CVE-2020-35507 aka PR25308
- Rebase the following patches:
  * binutils-fix-relax.diff
  * binutils-revert-nm-symversion.diff
  * binutils-revert-plt32-in-branches.diff
- Add missing dependency on bc (ld.gold testsuite uses it).
- Use --enable-obsolete for cross builds as ia64 is deprecated now.
- Add binutils-2.36-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1612267200">- Add temporary upstream fix for PR27311
  0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612353600">- Update 2.36 branch diff which should fix PR27311 completely.
  It fixes also PR27284.
- Remove temporary fix 0001-PR27311-ld.bfd-symbol-from-plugin-undefined-referenc.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1612440000">- Bump 2.36 branch diff.</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Bump 2.36 branch diff (includes fix for PR27441 aka bsc#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614772800">- Do not run make TARGET-bfd=headers separately.</changelog>
  <changelog author="mliska@suse.cz" date="1616760000">- Update 2.36 branch diff which fixes PR27587.</changelog>
  <changelog author="schwab@suse.de" date="1620388800">- ppc-ensure-undef-dynamic-weak-undefined.patch: PPC: ensure_undef_dynamic
  on weak undef only in plt
- ppc-use-local-plt.patch: PowerPC use_local_plt (prerequisite for above
  patch)</changelog>
  <changelog author="mliska@suse.cz" date="1626955200">- Update to binutils 2.37:
  * The GNU Binutils sources now requires a C99 compiler and library to
    build.
  * Support for the arm-symbianelf format has been removed.
  * Support for Realm Management Extension (RME) for AArch64 has been
    added.
  * A new linker option '-z report-relative-reloc' for x86 ELF targets
    has been added to report dynamic relative relocations.
  * A new linker option '-z start-stop-gc' has been added to disable
    special treatment of __start_*/__stop_* references when
  - -gc-sections.
  * A new linker options '-Bno-symbolic' has been added which will
    cancel the '-Bsymbolic' and '-Bsymbolic-functions' options.
  * The readelf tool has a new command line option which can be used to
    specify how the numeric values of symbols are reported.
  - -sym-base=0|8|10|16 tells readelf to display the values in base 8,
    base 10 or base 16.  A sym base of 0 represents the default action
    of displaying values under 10000 in base 10 and values above that in
    base 16.
  * A new format has been added to the nm program.  Specifying
    '--format=just-symbols' (or just using -j) will tell the program to
    only display symbol names and nothing else.
  * A new command line option '--keep-section-symbols' has been added to
    objcopy and strip.  This stops the removal of unused section symbols
    when the file is copied.  Removing these symbols saves space, but
    sometimes they are needed by other tools.
  * The '--weaken', '--weaken-symbol' and '--weaken-symbols' options
    supported by objcopy now make undefined symbols weak on targets that
    support weak symbols.
  * Readelf and objdump can now display and use the contents of .debug_sup
    sections.
  * Readelf and objdump will now follow links to separate debug info
    files by default.  This behaviour can be stopped via the use of the
    new '-wN' or '--debug-dump=no-follow-links' options for readelf and
    the '-WN' or '--dwarf=no-follow-links' options for objdump.  Also
    the old behaviour can be restored by the use of the
    '--enable-follow-debug-links=no' configure time option.
    The semantics of the =follow-links option have also been slightly
    changed.  When enabled, the option allows for the loading of symbol
    tables and string tables from the separate files which can be used
    to enhance the information displayed when dumping other sections,
    but it does not automatically imply that information from the
    separate files should be displayed.
    If other debug section display options are also enabled (eg
    '--debug-dump=info') then the contents of matching sections in both
    the main file and the separate debuginfo file *will* be displayed.
    This is because in most cases the debug section will only be present
    in one of the files.
    If however non-debug section display options are enabled (eg
    '--sections') then the contents of matching parts of the separate
    debuginfo file will *not* be displayed.  This is because in most
    cases the user probably only wanted to load the symbol information
    from the separate debuginfo file.  In order to change this behaviour
    a new command line option --process-links can be used.  This will
    allow di0pslay options to applied to both the main file and any
    separate debuginfo files.
  * Nm has a new command line option: '--quiet'.  This suppresses "no
    symbols" diagnostic.
- Includes fixes for these CVEs:
  bnc#1181452 aka CVE-2021-20197 aka PR26945
  bnc#1183511 aka CVE-2021-20284 aka PR26931
  bnc#1184519 aka CVE-2021-20294 aka PR26929
  bnc#1184620 aka CVE-2021-3487 aka PR26946
  bnc#1184794 aka CVE-2020-35448 aka PR26574
- Also fixes:
  bsc#1183909 - slow performance of stripping some binaries
- Rebased patches: binutils-build-as-needed.diff, binutils-fix-abierrormsg.diff,
  binutils-fix-invalid-op-errata.diff, binutils-fix-relax.diff,
  binutils-revert-nm-symversion.diff, binutils-revert-plt32-in-branches.diff
- Removed patches (are in upstream): ppc-ensure-undef-dynamic-weak-undefined.patch and
  ppc-use-local-plt.patch.
- Add binutils-2.37-branch.diff.gz.</changelog>
  <changelog author="mliska@suse.cz" date="1626955201">- Use LTO &amp; PGO build.</changelog>
  <changelog author="mliska@suse.cz" date="1627992000">- Bump binutils-2.37-branch.diff: fixes PR28138.</changelog>
  <changelog author="matz@suse.com" date="1631102400">- Adjust for testsuite fails on older products that configure
  binutils in different ways, adds  binutils-compat-old-behaviour.diff
  and adjusts binutils-revert-nm-symversion.diff and
  binutils-revert-plt32-in-branches.diff.</changelog>
  <changelog author="Stefan Schubert schubi@suse.de" date="1631275200">- Using libalternatives instead of update-alternatives.</changelog>
  <changelog author="matz@suse.com" date="1633694400">- Configure with --disable-x86-used-note on old code streams.
- Disable libalternatives temporarily for build cycle reasons.
- make TARGET-bfd=headers again, we patch bfd-in.h
- This state submitted to SLE12 and SLE15 code streams for annual
  toolchain update. [jsc#PM-2767, jsc#SLE-21561, jsc#SLE-19618]
- Bump binutils-2.37-branch.diff to 66d5c7003, to include fixes for
  PR28422, PR28192, PR28391.  Also adds some s390x arch14
  instructions [jsc#SLE-18637].</changelog>
  <changelog author="mliska@suse.cz" date="1635768000">- Update binutils-skip-rpaths.patch with contained a memory corruption
  (boo#1191473).</changelog>
  <changelog author="matz@suse.com" date="1635854400">- Fix empty man-pages from broken release tarball [PR28144].</changelog>
  <changelog author="mliska@suse.cz" date="1635940800">- Rebase binutils-2.37-branch.diff: fixes PR28523 aka boo#1188941.</changelog>
  <changelog author="matz@suse.com" date="1636113600">- Add binutils-revert-hlasm-insns.diff for compatibility on old
  code stream that expect 'brcl 0,label' to not be disassembled
  as 'jgnop label' on s390x.  [bsc#1192267]</changelog>
  <changelog author="matz@suse.com" date="1649678400">- Add binutils-add-z16-name.diff so that the now official name
  z16 for arch14 is recognized.  [bsc#1198237]</changelog>
</package>
<package pkgid="7ef0c48b0745c47e349592c504e5c79f7d2167a986c1c9887071ce8d5e5d19d8" name="libcups2" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="4cc10024459106bf9da82ed248336a79d509611008a88ece12301320bda23614" name="libcups2" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="dadf6ad98464ad3d3b8e80f5a3d0a6b590bdfaba69b6cd4346249f15a466eccd" name="libcups2" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="55f2dfa2095d75204ace8a01835c32181e118514c61c39df62192d7e093c8393" name="libcups2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="6279e77b6aed2909fdf083f181184f9bc54fd2e061f6363a66ea85d69e8927c6" name="libcups2" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="60e55e5b892d2e725a607f93f5e4970381fd7765829e2d12cc6ec35f312966a3" name="libcups2" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="42d50b3db3e24e22917fb4b4c50433aee42e8b267cdc6ab98cb01d946e959932" name="libcups2" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="7dbf9be9d55ff51ee313d069646b223869fb4b2de18dc1c804afb3f7ed8299a8" name="libcups2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="003dfbc3a4111de226b67cd87ae7ee96994382194e3bfc642784fc53c2028804" name="libcups2-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="c00060185d90c7d7e01ce752a87fc48609bb0f3f1b7ebb585ab738f37299f124" name="libcups2-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="d21cfdf9485638643b6db5b997c89fb55ca3d0c58c4571d4396e76000e883b7b" name="libcupscgi1" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="ceb8a4116e730b3cb4802306ecea15de54640b53ffcb99a98f92f36569dc15ef" name="libcupscgi1" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="16f841bca61f09c4b1147f6ba85327808301b18e75a51c443300abae030db52e" name="libcupscgi1" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="9ebf3adccb02535dd1f9aeee7552940a986af19d1613de4175a55d9811ad601d" name="libcupscgi1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="e2340f493c5cafbfc483e10dae51b2f43aef7e57ad15ebd8b521d55eea792fed" name="libcupscgi1" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="27e08112c7c0316d716368875b4632204742cfa02b54bfe81595d1544454d64a" name="libcupscgi1" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="67d117d28027201a10c48f60adc063b39365eb106f110790ed93a7554b1ba090" name="libcupscgi1" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="ba5ad366d0f64bfe401662589933c8207c7fcc203bb7e74633e1b38369314c24" name="libcupscgi1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="62244d4405b003d7fee46db6a129fc7ca776646e1f8cb07a8ef274eb11c6dc0a" name="libcupscgi1-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="4ec518eddbad67221994562c6e4ade407043d4a51096e7ea88e37cb2808ffa1f" name="libcupscgi1-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="5bb057774128fe6bf55eee832d357f19408b5a695a7e7ec00fb5b16c645dc2a0" name="libcupsimage2" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="f8f1ba55b93fd04385e0d87d3a2fd272e8d72c3011d32db49fd38cebd155aaad" name="libcupsimage2" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="3d75051eab1ab63d0d0dac758699f5606ca071c4f24ce10240803b78ddfc54c5" name="libcupsimage2" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="82a3d61cb46fb1f0e7f08353e70d1bc06f4b37d158b27b2c624b6aa520572add" name="libcupsimage2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="864c3e03f97a9ed4ee8679a95d261c66255d95537fff2fc2cae21fbf563d7c43" name="libcupsimage2" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="4514f2b5fcbf55768e202368667487223de31c4d1097ec563d78de4c0682479b" name="libcupsimage2" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="f3adf95a72dabf3ec30241f3f4f785e8105534ca4eb24fa5c3f45bbf66be30e6" name="libcupsimage2" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="c9028db8f2a954b01bf1dde4550f4e185a3a6564fbc2411073539b83e22e733d" name="libcupsimage2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="5a5b92f68eed08f95809e02cea7a4a016da79068077f899c6c045a0efa3e77ab" name="libcupsimage2-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="c0c2ec95beb7404b152fbd943b1d80ca3898da16f5db0701c834d61b6beb6ace" name="libcupsimage2-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="024d9d5df653679da522deff53ea2c229e9e4d7162f4b4b1bdcc91e8d1f7532c" name="libcupsmime1" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="3e2470188575423e6e5fa258c232c2451f200783a4692606d7faee0f1bba3a51" name="libcupsmime1" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="41e0e45bd0e0b64ece09095c1df97804091e3dc575e8734bccfdd502c145bb57" name="libcupsmime1" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="011174dd40b051766150fa96af076976d2e44f9b50c097f8383d94b24d6969b8" name="libcupsmime1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="c9531797e3855f646dcca582ce3e45e6221f010e4e91221ecc0b9ee0b10519cd" name="libcupsmime1" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="42718412c69de380f7b230a42f279443ba39599e357c2679b69ad496d5372ef3" name="libcupsmime1" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="b060c4145c271152b8f44825b8b7488d606d7c639dc140903a151f8522b28b70" name="libcupsmime1" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="b37fb961089140bb55e67ea66e61767413908e7f038df4f8448bfe19b149085a" name="libcupsmime1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="ddde18ad4f05f5a2922018bce03f2e11fc56d02164a670fa667f5705e05e7e52" name="libcupsmime1-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="4019a548e4998b8417ae12d7582489688d7d3b49a3735524510fe57d1389809d" name="libcupsmime1-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="bae3319a92bd661847e71159b8a77a8cf7a5e4ba5817e9248549b4d295396d3a" name="libcupsppdc1" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="300e6f0bfbc2b3b99b2f83ef9fb9ef0b4343101b7bbcf51238422876349c7287" name="libcupsppdc1" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="3d7dd91d673bd3ac223089cc2c6e7e05df4e12c3ca2a0f1f76ea28085c96e7ef" name="libcupsppdc1" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="781307fe0c3ffb2efb66194b05c1e37912841143c8a3ffb12b127a300205d767" name="libcupsppdc1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="31ccd5734cb30c6e94fbc4b89d333ca5fb40a67247f737da86ed6d39ef72c66b" name="libcupsppdc1" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="669ae13efea8760fc7e1d7dfbaad6ba0a1a783b4f5a0010bc77832a2e908863f" name="libcupsppdc1" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="5f396c7ba9ff03f2afe3d7d7ca674e60436b1d49772c96013deb3abcb2dfea31" name="libcupsppdc1" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="79e80e459a5214d7021090650f94321990235457ef678041853780adb5d5b88d" name="libcupsppdc1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="cebfda82ffa6e35898a07629263707fd61327bfdc432fd98cfdd17b6a301eac8" name="libcupsppdc1-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.29.1"/>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
</package>
<package pkgid="04ae8f4cc6f773f2d425aa635f68b72601f8fa91078688f92fd195c5ad46ce77" name="libcupsppdc1-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.32.1"/>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
</package>
<package pkgid="ea700f26f11e53fad131b6c64047b2c73017ba1203b933c3ca6291daf9131e43" name="libdvbv5-0" arch="aarch64">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="9fe2d4780be756bde1c64899908e7617e249bdac80cdf43f3ea86ab3b41a74dc" name="libdvbv5-0" arch="ppc64le">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="9f818f11f673f4c5664d99bd320b1e498e29f5d3784a10b847c2b4b221c869f5" name="libdvbv5-0" arch="s390x">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="329cc424562abd02c369ff7a2b280b200bbafdd68a63f83314590209b84ced5c" name="libdvbv5-0" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="ed3213d1e92c433e3017bb2ad1879fe1827f24f1919a997e609e4c343c3e69de" name="libdvbv5-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="db4d576c8c9e7d21c67f035357ead2e089f59031f8da37b055cc3bf01190b0b8" name="libdvbv5-0-lang" arch="noarch">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="153a0327e1a28aeee93dcad00ec07fabe824024bb1051c56f37a5a124cf6b9ec" name="libdvbv5-devel" arch="aarch64">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="e584f58645fc08710aadef3fc3eef61e384a0aa8e6eb8f2916da72cf1278636f" name="libdvbv5-devel" arch="ppc64le">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="8f027d7cb155be314ca5981d35c48e46e36ae6e9a3fddd58e320aff3f265851f" name="libdvbv5-devel" arch="s390x">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="edeeea831db3e41d9e83efba6c61ca79f4a11a79f71374d8326d7fca3f03b28b" name="libdvbv5-devel" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="5a30984110e42dc732a22747f25f5f0805482281af3a0238d8aa66a166112e91" name="libdvdread" arch="src">
  <version epoch="0" ver="6.0.0" rel="150000.3.2.1"/>
  <changelog author="stark@suse.de" date="1128427200">- build with -fno-strict-aliasing</changelog>
  <changelog author="stark@suse.de" date="1134734400">- adjusted ldconfig invocation</changelog>
  <changelog author="stark@suse.de" date="1147694400">- update to 0.9.6
  * Various bug fixes
  * Potential memory leak fixes
  * Better error handling
  * Some support for multithreaded apps
  * Added DVDFileStat() call
  * Fixed a missing attribute packed for app_info in audio_attr_t</changelog>
  <changelog author="kukuk@suse.de" date="1150113600">- Cleanup superfluous BuildRequires</changelog>
  <changelog author="sbrabec@suse.cz" date="1185364800">- Updated to version 0.9.7:
  * Properly call dvdinput_free().
- Name package according to shared library packaging policy.</changelog>
  <changelog author="ro@suse.de" date="1185710400">- provide old name</changelog>
  <changelog author="crrodriguez@suse.de" date="1187697600">- fix devel package dependencies
- remote static libraries and pointless libtool archive</changelog>
  <changelog author="hvogel@suse.de" date="1221048000">- update to 4.1.3 fork from mplayer
  * fixes regarding potential memory and resource leaks
  * added dvdread-config
  * added pkgconfig support</changelog>
  <changelog author="davejplater@gmail.com" date="1296129600">- Added Requires: pkg-config to get the .pc file to build.</changelog>
  <changelog author="davejplater@gmail.com" date="1305720000">- Added baselibs.conf. Removed licenses link from spec.</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- add libtool as explicit buildrequire to avoid implicit dependency from prjconf</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1322913600">- update to 4.2.0:
  * fixed ARM memory alignment issue
  * added a missing DVDFileStat function
  * exposed the dvd_stat_t struct in header
  * fixed libdvdread closing stdin if it can't open the file/device
  * fixed a segfault in UDFFileEntry on some badly mastered DVDs
  * fixed big-endian builds
  * provide BUP file support for more issues
  * move UDFReadBlocksRaw declaration to dvdread_internal.h
  * fixed double free of parental management information
  * fixed crash when PTT is too short
  * fixed segfault when reading certain DVDs, for example "Thor"</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1343736000">- Use openssl for crypto, we have too many duplicated
  implementations of common digest algos
- Autotools fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1405684800">- Update to version 4.9.9 (5.0 Release Candidate)
  + 3 years worth of development; please see NEWS file in package.
- Drop libdvdread-strict-aliasing.patch: no longer required.
- Move AUTHORS, COPYING, NEWS and README to the library package.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1418817600">- Update to version 5.0.0:
  * added support for Android
  * fix build support for OS/2
  * fix crashes in IFO parsing (Shark Week The Great Bites Collection)</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1422360000">- Update to version 5.0.1:
  * support DragonFly BSD bswap
  * new md5 implementation, under LGPL
  * fix partial reads
  * fix warnings and code cleanup</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1422619200">- Update to version 5.0.2:
  * Add DVDOpenStream to open a dvd from a set of callbacks</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1427544000">- Update to version 5.0.3:
  * Cache IFO and BUP files (only for ImageFiles) in order to reduce
  the number of read/seek access
  * Fix compilation warnings for OS/2</changelog>
  <changelog author="mpluskal@suse.com" date="1443096000">- Add gpg signature
- Use more explicit dependencies
- Make build more verbose
- Clenup spec file with spec-cleaner</changelog>
  <changelog author="j.lorenzen@kabelmail.de" date="1517054400">- Update to version 6.0.0:
  * restrict the number of symbols to be exposed to the
    shared-object
  * remove dvdinput_error function
  * improve compatibility with some DVDs (notably the eOne ones)
  * fix write after free in ifoFree functions
  * fix possible buffer overflow in open
  * additional checks on DVDReadBytes arguments
  * fix leaks
- Removed libdvdread-no-internal-crypto.patch because it's not
  applied anymore.</changelog>
</package>
<package pkgid="f69fad454cc42691a1e56b2a6c13dc3a5deb262205fa765153f03c1cf11c8695" name="libdvdread-devel" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="150000.3.2.1"/>
  <changelog author="coolo@suse.com" date="1321185600">- add libtool as explicit buildrequire to avoid implicit dependency from prjconf</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1322913600">- update to 4.2.0:
  * fixed ARM memory alignment issue
  * added a missing DVDFileStat function
  * exposed the dvd_stat_t struct in header
  * fixed libdvdread closing stdin if it can't open the file/device
  * fixed a segfault in UDFFileEntry on some badly mastered DVDs
  * fixed big-endian builds
  * provide BUP file support for more issues
  * move UDFReadBlocksRaw declaration to dvdread_internal.h
  * fixed double free of parental management information
  * fixed crash when PTT is too short
  * fixed segfault when reading certain DVDs, for example "Thor"</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1343736000">- Use openssl for crypto, we have too many duplicated
  implementations of common digest algos
- Autotools fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1405684800">- Update to version 4.9.9 (5.0 Release Candidate)
  + 3 years worth of development; please see NEWS file in package.
- Drop libdvdread-strict-aliasing.patch: no longer required.
- Move AUTHORS, COPYING, NEWS and README to the library package.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1418817600">- Update to version 5.0.0:
  * added support for Android
  * fix build support for OS/2
  * fix crashes in IFO parsing (Shark Week The Great Bites Collection)</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1422360000">- Update to version 5.0.1:
  * support DragonFly BSD bswap
  * new md5 implementation, under LGPL
  * fix partial reads
  * fix warnings and code cleanup</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1422619200">- Update to version 5.0.2:
  * Add DVDOpenStream to open a dvd from a set of callbacks</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1427544000">- Update to version 5.0.3:
  * Cache IFO and BUP files (only for ImageFiles) in order to reduce
  the number of read/seek access
  * Fix compilation warnings for OS/2</changelog>
  <changelog author="mpluskal@suse.com" date="1443096000">- Add gpg signature
- Use more explicit dependencies
- Make build more verbose
- Clenup spec file with spec-cleaner</changelog>
  <changelog author="j.lorenzen@kabelmail.de" date="1517054400">- Update to version 6.0.0:
  * restrict the number of symbols to be exposed to the
    shared-object
  * remove dvdinput_error function
  * improve compatibility with some DVDs (notably the eOne ones)
  * fix write after free in ifoFree functions
  * fix possible buffer overflow in open
  * additional checks on DVDReadBytes arguments
  * fix leaks
- Removed libdvdread-no-internal-crypto.patch because it's not
  applied anymore.</changelog>
</package>
<package pkgid="880694b97c2f925850efab8dd7c1c757d215eb83dd5ce0e4a53e82f5c4a1f8a3" name="libdvdread-devel" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="150000.3.2.1"/>
  <changelog author="coolo@suse.com" date="1321185600">- add libtool as explicit buildrequire to avoid implicit dependency from prjconf</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1322913600">- update to 4.2.0:
  * fixed ARM memory alignment issue
  * added a missing DVDFileStat function
  * exposed the dvd_stat_t struct in header
  * fixed libdvdread closing stdin if it can't open the file/device
  * fixed a segfault in UDFFileEntry on some badly mastered DVDs
  * fixed big-endian builds
  * provide BUP file support for more issues
  * move UDFReadBlocksRaw declaration to dvdread_internal.h
  * fixed double free of parental management information
  * fixed crash when PTT is too short
  * fixed segfault when reading certain DVDs, for example "Thor"</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1343736000">- Use openssl for crypto, we have too many duplicated
  implementations of common digest algos
- Autotools fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1405684800">- Update to version 4.9.9 (5.0 Release Candidate)
  + 3 years worth of development; please see NEWS file in package.
- Drop libdvdread-strict-aliasing.patch: no longer required.
- Move AUTHORS, COPYING, NEWS and README to the library package.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1418817600">- Update to version 5.0.0:
  * added support for Android
  * fix build support for OS/2
  * fix crashes in IFO parsing (Shark Week The Great Bites Collection)</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1422360000">- Update to version 5.0.1:
  * support DragonFly BSD bswap
  * new md5 implementation, under LGPL
  * fix partial reads
  * fix warnings and code cleanup</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1422619200">- Update to version 5.0.2:
  * Add DVDOpenStream to open a dvd from a set of callbacks</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1427544000">- Update to version 5.0.3:
  * Cache IFO and BUP files (only for ImageFiles) in order to reduce
  the number of read/seek access
  * Fix compilation warnings for OS/2</changelog>
  <changelog author="mpluskal@suse.com" date="1443096000">- Add gpg signature
- Use more explicit dependencies
- Make build more verbose
- Clenup spec file with spec-cleaner</changelog>
  <changelog author="j.lorenzen@kabelmail.de" date="1517054400">- Update to version 6.0.0:
  * restrict the number of symbols to be exposed to the
    shared-object
  * remove dvdinput_error function
  * improve compatibility with some DVDs (notably the eOne ones)
  * fix write after free in ifoFree functions
  * fix possible buffer overflow in open
  * additional checks on DVDReadBytes arguments
  * fix leaks
- Removed libdvdread-no-internal-crypto.patch because it's not
  applied anymore.</changelog>
</package>
<package pkgid="8651a56f1fd510dc50993f015a8c28b768a99c7e6d75bed3ec3c320a919614af" name="libdvdread-devel" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="150000.3.2.1"/>
  <changelog author="coolo@suse.com" date="1321185600">- add libtool as explicit buildrequire to avoid implicit dependency from prjconf</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1322913600">- update to 4.2.0:
  * fixed ARM memory alignment issue
  * added a missing DVDFileStat function
  * exposed the dvd_stat_t struct in header
  * fixed libdvdread closing stdin if it can't open the file/device
  * fixed a segfault in UDFFileEntry on some badly mastered DVDs
  * fixed big-endian builds
  * provide BUP file support for more issues
  * move UDFReadBlocksRaw declaration to dvdread_internal.h
  * fixed double free of parental management information
  * fixed crash when PTT is too short
  * fixed segfault when reading certain DVDs, for example "Thor"</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1343736000">- Use openssl for crypto, we have too many duplicated
  implementations of common digest algos
- Autotools fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1405684800">- Update to version 4.9.9 (5.0 Release Candidate)
  + 3 years worth of development; please see NEWS file in package.
- Drop libdvdread-strict-aliasing.patch: no longer required.
- Move AUTHORS, COPYING, NEWS and README to the library package.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1418817600">- Update to version 5.0.0:
  * added support for Android
  * fix build support for OS/2
  * fix crashes in IFO parsing (Shark Week The Great Bites Collection)</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1422360000">- Update to version 5.0.1:
  * support DragonFly BSD bswap
  * new md5 implementation, under LGPL
  * fix partial reads
  * fix warnings and code cleanup</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1422619200">- Update to version 5.0.2:
  * Add DVDOpenStream to open a dvd from a set of callbacks</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1427544000">- Update to version 5.0.3:
  * Cache IFO and BUP files (only for ImageFiles) in order to reduce
  the number of read/seek access
  * Fix compilation warnings for OS/2</changelog>
  <changelog author="mpluskal@suse.com" date="1443096000">- Add gpg signature
- Use more explicit dependencies
- Make build more verbose
- Clenup spec file with spec-cleaner</changelog>
  <changelog author="j.lorenzen@kabelmail.de" date="1517054400">- Update to version 6.0.0:
  * restrict the number of symbols to be exposed to the
    shared-object
  * remove dvdinput_error function
  * improve compatibility with some DVDs (notably the eOne ones)
  * fix write after free in ifoFree functions
  * fix possible buffer overflow in open
  * additional checks on DVDReadBytes arguments
  * fix leaks
- Removed libdvdread-no-internal-crypto.patch because it's not
  applied anymore.</changelog>
</package>
<package pkgid="a6baceb203ad65f6f71c77689118877222ef4a585c6e13833989a495183f2bf0" name="libdvdread-devel" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="150000.3.2.1"/>
  <changelog author="coolo@suse.com" date="1321185600">- add libtool as explicit buildrequire to avoid implicit dependency from prjconf</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1322913600">- update to 4.2.0:
  * fixed ARM memory alignment issue
  * added a missing DVDFileStat function
  * exposed the dvd_stat_t struct in header
  * fixed libdvdread closing stdin if it can't open the file/device
  * fixed a segfault in UDFFileEntry on some badly mastered DVDs
  * fixed big-endian builds
  * provide BUP file support for more issues
  * move UDFReadBlocksRaw declaration to dvdread_internal.h
  * fixed double free of parental management information
  * fixed crash when PTT is too short
  * fixed segfault when reading certain DVDs, for example "Thor"</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1343736000">- Use openssl for crypto, we have too many duplicated
  implementations of common digest algos
- Autotools fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1405684800">- Update to version 4.9.9 (5.0 Release Candidate)
  + 3 years worth of development; please see NEWS file in package.
- Drop libdvdread-strict-aliasing.patch: no longer required.
- Move AUTHORS, COPYING, NEWS and README to the library package.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1418817600">- Update to version 5.0.0:
  * added support for Android
  * fix build support for OS/2
  * fix crashes in IFO parsing (Shark Week The Great Bites Collection)</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1422360000">- Update to version 5.0.1:
  * support DragonFly BSD bswap
  * new md5 implementation, under LGPL
  * fix partial reads
  * fix warnings and code cleanup</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1422619200">- Update to version 5.0.2:
  * Add DVDOpenStream to open a dvd from a set of callbacks</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1427544000">- Update to version 5.0.3:
  * Cache IFO and BUP files (only for ImageFiles) in order to reduce
  the number of read/seek access
  * Fix compilation warnings for OS/2</changelog>
  <changelog author="mpluskal@suse.com" date="1443096000">- Add gpg signature
- Use more explicit dependencies
- Make build more verbose
- Clenup spec file with spec-cleaner</changelog>
  <changelog author="j.lorenzen@kabelmail.de" date="1517054400">- Update to version 6.0.0:
  * restrict the number of symbols to be exposed to the
    shared-object
  * remove dvdinput_error function
  * improve compatibility with some DVDs (notably the eOne ones)
  * fix write after free in ifoFree functions
  * fix possible buffer overflow in open
  * additional checks on DVDReadBytes arguments
  * fix leaks
- Removed libdvdread-no-internal-crypto.patch because it's not
  applied anymore.</changelog>
</package>
<package pkgid="c1d9eb200e29792e5eb50347820afa647edf3f959e17eaa99364bf062c75953e" name="libdvdread4-32bit" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="150000.3.2.1"/>
  <changelog author="coolo@suse.com" date="1321185600">- add libtool as explicit buildrequire to avoid implicit dependency from prjconf</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1322913600">- update to 4.2.0:
  * fixed ARM memory alignment issue
  * added a missing DVDFileStat function
  * exposed the dvd_stat_t struct in header
  * fixed libdvdread closing stdin if it can't open the file/device
  * fixed a segfault in UDFFileEntry on some badly mastered DVDs
  * fixed big-endian builds
  * provide BUP file support for more issues
  * move UDFReadBlocksRaw declaration to dvdread_internal.h
  * fixed double free of parental management information
  * fixed crash when PTT is too short
  * fixed segfault when reading certain DVDs, for example "Thor"</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1343736000">- Use openssl for crypto, we have too many duplicated
  implementations of common digest algos
- Autotools fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1405684800">- Update to version 4.9.9 (5.0 Release Candidate)
  + 3 years worth of development; please see NEWS file in package.
- Drop libdvdread-strict-aliasing.patch: no longer required.
- Move AUTHORS, COPYING, NEWS and README to the library package.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1418817600">- Update to version 5.0.0:
  * added support for Android
  * fix build support for OS/2
  * fix crashes in IFO parsing (Shark Week The Great Bites Collection)</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1422360000">- Update to version 5.0.1:
  * support DragonFly BSD bswap
  * new md5 implementation, under LGPL
  * fix partial reads
  * fix warnings and code cleanup</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1422619200">- Update to version 5.0.2:
  * Add DVDOpenStream to open a dvd from a set of callbacks</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1427544000">- Update to version 5.0.3:
  * Cache IFO and BUP files (only for ImageFiles) in order to reduce
  the number of read/seek access
  * Fix compilation warnings for OS/2</changelog>
  <changelog author="mpluskal@suse.com" date="1443096000">- Add gpg signature
- Use more explicit dependencies
- Make build more verbose
- Clenup spec file with spec-cleaner</changelog>
  <changelog author="j.lorenzen@kabelmail.de" date="1517054400">- Update to version 6.0.0:
  * restrict the number of symbols to be exposed to the
    shared-object
  * remove dvdinput_error function
  * improve compatibility with some DVDs (notably the eOne ones)
  * fix write after free in ifoFree functions
  * fix possible buffer overflow in open
  * additional checks on DVDReadBytes arguments
  * fix leaks
- Removed libdvdread-no-internal-crypto.patch because it's not
  applied anymore.</changelog>
</package>
<package pkgid="f813dea95794895e47e181e1e09034a21445b97d4a84071b6195e89b1f4af664" name="libdvdread4" arch="aarch64">
  <version epoch="0" ver="6.0.0" rel="150000.3.2.1"/>
  <changelog author="coolo@suse.com" date="1321185600">- add libtool as explicit buildrequire to avoid implicit dependency from prjconf</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1322913600">- update to 4.2.0:
  * fixed ARM memory alignment issue
  * added a missing DVDFileStat function
  * exposed the dvd_stat_t struct in header
  * fixed libdvdread closing stdin if it can't open the file/device
  * fixed a segfault in UDFFileEntry on some badly mastered DVDs
  * fixed big-endian builds
  * provide BUP file support for more issues
  * move UDFReadBlocksRaw declaration to dvdread_internal.h
  * fixed double free of parental management information
  * fixed crash when PTT is too short
  * fixed segfault when reading certain DVDs, for example "Thor"</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1343736000">- Use openssl for crypto, we have too many duplicated
  implementations of common digest algos
- Autotools fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1405684800">- Update to version 4.9.9 (5.0 Release Candidate)
  + 3 years worth of development; please see NEWS file in package.
- Drop libdvdread-strict-aliasing.patch: no longer required.
- Move AUTHORS, COPYING, NEWS and README to the library package.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1418817600">- Update to version 5.0.0:
  * added support for Android
  * fix build support for OS/2
  * fix crashes in IFO parsing (Shark Week The Great Bites Collection)</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1422360000">- Update to version 5.0.1:
  * support DragonFly BSD bswap
  * new md5 implementation, under LGPL
  * fix partial reads
  * fix warnings and code cleanup</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1422619200">- Update to version 5.0.2:
  * Add DVDOpenStream to open a dvd from a set of callbacks</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1427544000">- Update to version 5.0.3:
  * Cache IFO and BUP files (only for ImageFiles) in order to reduce
  the number of read/seek access
  * Fix compilation warnings for OS/2</changelog>
  <changelog author="mpluskal@suse.com" date="1443096000">- Add gpg signature
- Use more explicit dependencies
- Make build more verbose
- Clenup spec file with spec-cleaner</changelog>
  <changelog author="j.lorenzen@kabelmail.de" date="1517054400">- Update to version 6.0.0:
  * restrict the number of symbols to be exposed to the
    shared-object
  * remove dvdinput_error function
  * improve compatibility with some DVDs (notably the eOne ones)
  * fix write after free in ifoFree functions
  * fix possible buffer overflow in open
  * additional checks on DVDReadBytes arguments
  * fix leaks
- Removed libdvdread-no-internal-crypto.patch because it's not
  applied anymore.</changelog>
</package>
<package pkgid="eefbcf9a42a9ea25d8471ca282039fd94d1a39a043d3a1345d1c67f63998e4f4" name="libdvdread4" arch="ppc64le">
  <version epoch="0" ver="6.0.0" rel="150000.3.2.1"/>
  <changelog author="coolo@suse.com" date="1321185600">- add libtool as explicit buildrequire to avoid implicit dependency from prjconf</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1322913600">- update to 4.2.0:
  * fixed ARM memory alignment issue
  * added a missing DVDFileStat function
  * exposed the dvd_stat_t struct in header
  * fixed libdvdread closing stdin if it can't open the file/device
  * fixed a segfault in UDFFileEntry on some badly mastered DVDs
  * fixed big-endian builds
  * provide BUP file support for more issues
  * move UDFReadBlocksRaw declaration to dvdread_internal.h
  * fixed double free of parental management information
  * fixed crash when PTT is too short
  * fixed segfault when reading certain DVDs, for example "Thor"</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1343736000">- Use openssl for crypto, we have too many duplicated
  implementations of common digest algos
- Autotools fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1405684800">- Update to version 4.9.9 (5.0 Release Candidate)
  + 3 years worth of development; please see NEWS file in package.
- Drop libdvdread-strict-aliasing.patch: no longer required.
- Move AUTHORS, COPYING, NEWS and README to the library package.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1418817600">- Update to version 5.0.0:
  * added support for Android
  * fix build support for OS/2
  * fix crashes in IFO parsing (Shark Week The Great Bites Collection)</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1422360000">- Update to version 5.0.1:
  * support DragonFly BSD bswap
  * new md5 implementation, under LGPL
  * fix partial reads
  * fix warnings and code cleanup</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1422619200">- Update to version 5.0.2:
  * Add DVDOpenStream to open a dvd from a set of callbacks</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1427544000">- Update to version 5.0.3:
  * Cache IFO and BUP files (only for ImageFiles) in order to reduce
  the number of read/seek access
  * Fix compilation warnings for OS/2</changelog>
  <changelog author="mpluskal@suse.com" date="1443096000">- Add gpg signature
- Use more explicit dependencies
- Make build more verbose
- Clenup spec file with spec-cleaner</changelog>
  <changelog author="j.lorenzen@kabelmail.de" date="1517054400">- Update to version 6.0.0:
  * restrict the number of symbols to be exposed to the
    shared-object
  * remove dvdinput_error function
  * improve compatibility with some DVDs (notably the eOne ones)
  * fix write after free in ifoFree functions
  * fix possible buffer overflow in open
  * additional checks on DVDReadBytes arguments
  * fix leaks
- Removed libdvdread-no-internal-crypto.patch because it's not
  applied anymore.</changelog>
</package>
<package pkgid="856fdfa4858f54f1a8d6abdb040fa22c20b60bbd2f12888c87685530c3db52e7" name="libdvdread4" arch="s390x">
  <version epoch="0" ver="6.0.0" rel="150000.3.2.1"/>
  <changelog author="coolo@suse.com" date="1321185600">- add libtool as explicit buildrequire to avoid implicit dependency from prjconf</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1322913600">- update to 4.2.0:
  * fixed ARM memory alignment issue
  * added a missing DVDFileStat function
  * exposed the dvd_stat_t struct in header
  * fixed libdvdread closing stdin if it can't open the file/device
  * fixed a segfault in UDFFileEntry on some badly mastered DVDs
  * fixed big-endian builds
  * provide BUP file support for more issues
  * move UDFReadBlocksRaw declaration to dvdread_internal.h
  * fixed double free of parental management information
  * fixed crash when PTT is too short
  * fixed segfault when reading certain DVDs, for example "Thor"</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1343736000">- Use openssl for crypto, we have too many duplicated
  implementations of common digest algos
- Autotools fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1405684800">- Update to version 4.9.9 (5.0 Release Candidate)
  + 3 years worth of development; please see NEWS file in package.
- Drop libdvdread-strict-aliasing.patch: no longer required.
- Move AUTHORS, COPYING, NEWS and README to the library package.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1418817600">- Update to version 5.0.0:
  * added support for Android
  * fix build support for OS/2
  * fix crashes in IFO parsing (Shark Week The Great Bites Collection)</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1422360000">- Update to version 5.0.1:
  * support DragonFly BSD bswap
  * new md5 implementation, under LGPL
  * fix partial reads
  * fix warnings and code cleanup</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1422619200">- Update to version 5.0.2:
  * Add DVDOpenStream to open a dvd from a set of callbacks</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1427544000">- Update to version 5.0.3:
  * Cache IFO and BUP files (only for ImageFiles) in order to reduce
  the number of read/seek access
  * Fix compilation warnings for OS/2</changelog>
  <changelog author="mpluskal@suse.com" date="1443096000">- Add gpg signature
- Use more explicit dependencies
- Make build more verbose
- Clenup spec file with spec-cleaner</changelog>
  <changelog author="j.lorenzen@kabelmail.de" date="1517054400">- Update to version 6.0.0:
  * restrict the number of symbols to be exposed to the
    shared-object
  * remove dvdinput_error function
  * improve compatibility with some DVDs (notably the eOne ones)
  * fix write after free in ifoFree functions
  * fix possible buffer overflow in open
  * additional checks on DVDReadBytes arguments
  * fix leaks
- Removed libdvdread-no-internal-crypto.patch because it's not
  applied anymore.</changelog>
</package>
<package pkgid="ae535c75976638630fbbdced0e4644a78806b0ccc60fd768ee47e6c7a8dd26b1" name="libdvdread4" arch="x86_64">
  <version epoch="0" ver="6.0.0" rel="150000.3.2.1"/>
  <changelog author="coolo@suse.com" date="1321185600">- add libtool as explicit buildrequire to avoid implicit dependency from prjconf</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1322913600">- update to 4.2.0:
  * fixed ARM memory alignment issue
  * added a missing DVDFileStat function
  * exposed the dvd_stat_t struct in header
  * fixed libdvdread closing stdin if it can't open the file/device
  * fixed a segfault in UDFFileEntry on some badly mastered DVDs
  * fixed big-endian builds
  * provide BUP file support for more issues
  * move UDFReadBlocksRaw declaration to dvdread_internal.h
  * fixed double free of parental management information
  * fixed crash when PTT is too short
  * fixed segfault when reading certain DVDs, for example "Thor"</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1343736000">- Use openssl for crypto, we have too many duplicated
  implementations of common digest algos
- Autotools fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1405684800">- Update to version 4.9.9 (5.0 Release Candidate)
  + 3 years worth of development; please see NEWS file in package.
- Drop libdvdread-strict-aliasing.patch: no longer required.
- Move AUTHORS, COPYING, NEWS and README to the library package.</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1418817600">- Update to version 5.0.0:
  * added support for Android
  * fix build support for OS/2
  * fix crashes in IFO parsing (Shark Week The Great Bites Collection)</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1422360000">- Update to version 5.0.1:
  * support DragonFly BSD bswap
  * new md5 implementation, under LGPL
  * fix partial reads
  * fix warnings and code cleanup</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1422619200">- Update to version 5.0.2:
  * Add DVDOpenStream to open a dvd from a set of callbacks</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1427544000">- Update to version 5.0.3:
  * Cache IFO and BUP files (only for ImageFiles) in order to reduce
  the number of read/seek access
  * Fix compilation warnings for OS/2</changelog>
  <changelog author="mpluskal@suse.com" date="1443096000">- Add gpg signature
- Use more explicit dependencies
- Make build more verbose
- Clenup spec file with spec-cleaner</changelog>
  <changelog author="j.lorenzen@kabelmail.de" date="1517054400">- Update to version 6.0.0:
  * restrict the number of symbols to be exposed to the
    shared-object
  * remove dvdinput_error function
  * improve compatibility with some DVDs (notably the eOne ones)
  * fix write after free in ifoFree functions
  * fix possible buffer overflow in open
  * additional checks on DVDReadBytes arguments
  * fix leaks
- Removed libdvdread-no-internal-crypto.patch because it's not
  applied anymore.</changelog>
</package>
<package pkgid="12a72bcb3ab1d8ea7d84d4a7d2bd138173b07fd051030d0b71b26bf89c40ad15" name="libecpg6" arch="aarch64">
  <version epoch="0" ver="14.2" rel="5.9.2"/>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
  <changelog author="max@suse.com" date="1621425600">- bsc#1185952: llvm12 breaks PostgreSQL 11 and 12 on s390x.
  Use llvm11 as a workaround.</changelog>
  <changelog author="mrueckert@suse.de" date="1621598400">- Upgrade to 14~beta1
  https://www.postgresql.org/about/news/postgresql-14-beta-1-released-2213/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items
- disable postgresql-testsuite-int8.sql.patch:
  it seems it is not needed anymore, need to be double checked.</changelog>
  <changelog author="mrueckert@suse.de" date="1624622400">- Upgrade to 14~beta2
  https://www.postgresql.org/about/news/postgresql-14-beta-2-released-2249/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="mrueckert@suse.de" date="1632571200">- Upgrade to 14~rc1
  https://www.postgresql.org/about/news/postgresql-14-rc-1-released-2309/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="max@suse.com" date="1632744000">- Let genlists skip non-existing binaries to avoid lots of version
  conditionals in the file lists.</changelog>
  <changelog author="mrueckert@suse.de" date="1633003200">- Upgrade to 14.0
  https://www.postgresql.org/about/news/postgresql-14-released-2318/
  https://www.postgresql.org/docs/14/release-14.html</changelog>
  <changelog author="max@suse.com" date="1633435200">- Remove postgresql-testsuite-int8.sql.patch, because its purpose
  is unclear. This affects only the test subpackage.</changelog>
  <changelog author="max@suse.com" date="1634731200">- boo#1191782: Let rpmlint ignore shlib-policy-name-error.</changelog>
  <changelog author="max@suse.com" date="1636545600">- bsc#1192516: Upgrade to 14.1
  * Make the server reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23214).
  * Make libpq reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23222).
  * https://www.postgresql.org/docs/14/release-14-1.html</changelog>
  <changelog author="max@suse.com" date="1637841600">- Add a llvmjit-devel subpackage to pull in the right versions
  of clang and llvm for building extensions.
- Fix some mistakes in the interdependencies between the
  implementation packages and their noarch counterpart.
- Update the BuildIgnore section.</changelog>
  <changelog author="ada.lovelace@gmx.de" date="1639224000">- boo#1190740: Add constraints file with 12GB of memory for s390x
  as a workaround</changelog>
  <changelog author="max@suse.com" date="1644321600">- bsc#1195680: Upgrade to 14.2:
  * https://www.postgresql.org/docs/14/release-14-1.html
  * Reindexing might be needed after applying this upgrade, so
    please read the release notes carefully.</changelog>
</package>
<package pkgid="69488eca6f755bb239b201ca6e977b9f040b5ed633db21411526ae2c1fcdd027" name="libecpg6" arch="ppc64le">
  <version epoch="0" ver="14.2" rel="5.9.2"/>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
  <changelog author="max@suse.com" date="1621425600">- bsc#1185952: llvm12 breaks PostgreSQL 11 and 12 on s390x.
  Use llvm11 as a workaround.</changelog>
  <changelog author="mrueckert@suse.de" date="1621598400">- Upgrade to 14~beta1
  https://www.postgresql.org/about/news/postgresql-14-beta-1-released-2213/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items
- disable postgresql-testsuite-int8.sql.patch:
  it seems it is not needed anymore, need to be double checked.</changelog>
  <changelog author="mrueckert@suse.de" date="1624622400">- Upgrade to 14~beta2
  https://www.postgresql.org/about/news/postgresql-14-beta-2-released-2249/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="mrueckert@suse.de" date="1632571200">- Upgrade to 14~rc1
  https://www.postgresql.org/about/news/postgresql-14-rc-1-released-2309/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="max@suse.com" date="1632744000">- Let genlists skip non-existing binaries to avoid lots of version
  conditionals in the file lists.</changelog>
  <changelog author="mrueckert@suse.de" date="1633003200">- Upgrade to 14.0
  https://www.postgresql.org/about/news/postgresql-14-released-2318/
  https://www.postgresql.org/docs/14/release-14.html</changelog>
  <changelog author="max@suse.com" date="1633435200">- Remove postgresql-testsuite-int8.sql.patch, because its purpose
  is unclear. This affects only the test subpackage.</changelog>
  <changelog author="max@suse.com" date="1634731200">- boo#1191782: Let rpmlint ignore shlib-policy-name-error.</changelog>
  <changelog author="max@suse.com" date="1636545600">- bsc#1192516: Upgrade to 14.1
  * Make the server reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23214).
  * Make libpq reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23222).
  * https://www.postgresql.org/docs/14/release-14-1.html</changelog>
  <changelog author="max@suse.com" date="1637841600">- Add a llvmjit-devel subpackage to pull in the right versions
  of clang and llvm for building extensions.
- Fix some mistakes in the interdependencies between the
  implementation packages and their noarch counterpart.
- Update the BuildIgnore section.</changelog>
  <changelog author="ada.lovelace@gmx.de" date="1639224000">- boo#1190740: Add constraints file with 12GB of memory for s390x
  as a workaround</changelog>
  <changelog author="max@suse.com" date="1644321600">- bsc#1195680: Upgrade to 14.2:
  * https://www.postgresql.org/docs/14/release-14-1.html
  * Reindexing might be needed after applying this upgrade, so
    please read the release notes carefully.</changelog>
</package>
<package pkgid="6f03e7e69bb6ebe49d0e9cba4214572323caf1bb0b6f50ef055e01e82a0d3fc9" name="libecpg6" arch="s390x">
  <version epoch="0" ver="14.2" rel="5.9.2"/>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
  <changelog author="max@suse.com" date="1621425600">- bsc#1185952: llvm12 breaks PostgreSQL 11 and 12 on s390x.
  Use llvm11 as a workaround.</changelog>
  <changelog author="mrueckert@suse.de" date="1621598400">- Upgrade to 14~beta1
  https://www.postgresql.org/about/news/postgresql-14-beta-1-released-2213/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items
- disable postgresql-testsuite-int8.sql.patch:
  it seems it is not needed anymore, need to be double checked.</changelog>
  <changelog author="mrueckert@suse.de" date="1624622400">- Upgrade to 14~beta2
  https://www.postgresql.org/about/news/postgresql-14-beta-2-released-2249/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="mrueckert@suse.de" date="1632571200">- Upgrade to 14~rc1
  https://www.postgresql.org/about/news/postgresql-14-rc-1-released-2309/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="max@suse.com" date="1632744000">- Let genlists skip non-existing binaries to avoid lots of version
  conditionals in the file lists.</changelog>
  <changelog author="mrueckert@suse.de" date="1633003200">- Upgrade to 14.0
  https://www.postgresql.org/about/news/postgresql-14-released-2318/
  https://www.postgresql.org/docs/14/release-14.html</changelog>
  <changelog author="max@suse.com" date="1633435200">- Remove postgresql-testsuite-int8.sql.patch, because its purpose
  is unclear. This affects only the test subpackage.</changelog>
  <changelog author="max@suse.com" date="1634731200">- boo#1191782: Let rpmlint ignore shlib-policy-name-error.</changelog>
  <changelog author="max@suse.com" date="1636545600">- bsc#1192516: Upgrade to 14.1
  * Make the server reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23214).
  * Make libpq reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23222).
  * https://www.postgresql.org/docs/14/release-14-1.html</changelog>
  <changelog author="max@suse.com" date="1637841600">- Add a llvmjit-devel subpackage to pull in the right versions
  of clang and llvm for building extensions.
- Fix some mistakes in the interdependencies between the
  implementation packages and their noarch counterpart.
- Update the BuildIgnore section.</changelog>
  <changelog author="ada.lovelace@gmx.de" date="1639224000">- boo#1190740: Add constraints file with 12GB of memory for s390x
  as a workaround</changelog>
  <changelog author="max@suse.com" date="1644321600">- bsc#1195680: Upgrade to 14.2:
  * https://www.postgresql.org/docs/14/release-14-1.html
  * Reindexing might be needed after applying this upgrade, so
    please read the release notes carefully.</changelog>
</package>
<package pkgid="47198767c8e118104cde113f5f919159e94503040f7bab98336110a4021fb84b" name="libecpg6" arch="x86_64">
  <version epoch="0" ver="14.2" rel="5.9.2"/>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
  <changelog author="max@suse.com" date="1621425600">- bsc#1185952: llvm12 breaks PostgreSQL 11 and 12 on s390x.
  Use llvm11 as a workaround.</changelog>
  <changelog author="mrueckert@suse.de" date="1621598400">- Upgrade to 14~beta1
  https://www.postgresql.org/about/news/postgresql-14-beta-1-released-2213/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items
- disable postgresql-testsuite-int8.sql.patch:
  it seems it is not needed anymore, need to be double checked.</changelog>
  <changelog author="mrueckert@suse.de" date="1624622400">- Upgrade to 14~beta2
  https://www.postgresql.org/about/news/postgresql-14-beta-2-released-2249/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="mrueckert@suse.de" date="1632571200">- Upgrade to 14~rc1
  https://www.postgresql.org/about/news/postgresql-14-rc-1-released-2309/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="max@suse.com" date="1632744000">- Let genlists skip non-existing binaries to avoid lots of version
  conditionals in the file lists.</changelog>
  <changelog author="mrueckert@suse.de" date="1633003200">- Upgrade to 14.0
  https://www.postgresql.org/about/news/postgresql-14-released-2318/
  https://www.postgresql.org/docs/14/release-14.html</changelog>
  <changelog author="max@suse.com" date="1633435200">- Remove postgresql-testsuite-int8.sql.patch, because its purpose
  is unclear. This affects only the test subpackage.</changelog>
  <changelog author="max@suse.com" date="1634731200">- boo#1191782: Let rpmlint ignore shlib-policy-name-error.</changelog>
  <changelog author="max@suse.com" date="1636545600">- bsc#1192516: Upgrade to 14.1
  * Make the server reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23214).
  * Make libpq reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23222).
  * https://www.postgresql.org/docs/14/release-14-1.html</changelog>
  <changelog author="max@suse.com" date="1637841600">- Add a llvmjit-devel subpackage to pull in the right versions
  of clang and llvm for building extensions.
- Fix some mistakes in the interdependencies between the
  implementation packages and their noarch counterpart.
- Update the BuildIgnore section.</changelog>
  <changelog author="ada.lovelace@gmx.de" date="1639224000">- boo#1190740: Add constraints file with 12GB of memory for s390x
  as a workaround</changelog>
  <changelog author="max@suse.com" date="1644321600">- bsc#1195680: Upgrade to 14.2:
  * https://www.postgresql.org/docs/14/release-14-1.html
  * Reindexing might be needed after applying this upgrade, so
    please read the release notes carefully.</changelog>
</package>
<package pkgid="a5415dc365aa70f6d6b05c122e7c26ef0aa2d4d2fe2c3a1a273e04d888d6e3ec" name="libecpg6" arch="aarch64">
  <version epoch="0" ver="14.3" rel="150200.5.12.2"/>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
  <changelog author="max@suse.com" date="1621425600">- bsc#1185952: llvm12 breaks PostgreSQL 11 and 12 on s390x.
  Use llvm11 as a workaround.</changelog>
  <changelog author="mrueckert@suse.de" date="1621598400">- Upgrade to 14~beta1
  https://www.postgresql.org/about/news/postgresql-14-beta-1-released-2213/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items
- disable postgresql-testsuite-int8.sql.patch:
  it seems it is not needed anymore, need to be double checked.</changelog>
  <changelog author="mrueckert@suse.de" date="1624622400">- Upgrade to 14~beta2
  https://www.postgresql.org/about/news/postgresql-14-beta-2-released-2249/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="mrueckert@suse.de" date="1632571200">- Upgrade to 14~rc1
  https://www.postgresql.org/about/news/postgresql-14-rc-1-released-2309/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="max@suse.com" date="1632744000">- Let genlists skip non-existing binaries to avoid lots of version
  conditionals in the file lists.</changelog>
  <changelog author="mrueckert@suse.de" date="1633003200">- Upgrade to 14.0
  https://www.postgresql.org/about/news/postgresql-14-released-2318/
  https://www.postgresql.org/docs/14/release-14.html</changelog>
  <changelog author="max@suse.com" date="1633435200">- Remove postgresql-testsuite-int8.sql.patch, because its purpose
  is unclear. This affects only the test subpackage.</changelog>
  <changelog author="max@suse.com" date="1634731200">- boo#1191782: Let rpmlint ignore shlib-policy-name-error.</changelog>
  <changelog author="max@suse.com" date="1636545600">- bsc#1192516: Upgrade to 14.1
  * Make the server reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23214).
  * Make libpq reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23222).
  * https://www.postgresql.org/docs/14/release-14-1.html</changelog>
  <changelog author="max@suse.com" date="1637841600">- Add a llvmjit-devel subpackage to pull in the right versions
  of clang and llvm for building extensions.
- Fix some mistakes in the interdependencies between the
  implementation packages and their noarch counterpart.
- Update the BuildIgnore section.</changelog>
  <changelog author="ada.lovelace@gmx.de" date="1639224000">- boo#1190740: Add constraints file with 12GB of memory for s390x
  as a workaround</changelog>
  <changelog author="max@suse.com" date="1644321600">- bsc#1195680: Upgrade to 14.2:
  * https://www.postgresql.org/docs/14/release-14-2.html
  * Reindexing might be needed after applying this upgrade, so
    please read the release notes carefully.</changelog>
  <changelog author="max@suse.com" date="1652356800">- Upgrade to 14.3:
  * bsc#1199475, CVE-2022-1552: Confine additional operations
    within "security restricted operation" sandboxes.
  * https://www.postgresql.org/docs/14/release-14-3.html</changelog>
</package>
<package pkgid="f7c0473ba8b6a96e722dccb39c6a357f07a0e088b99676691332cb6e520c8040" name="libecpg6" arch="ppc64le">
  <version epoch="0" ver="14.3" rel="150200.5.12.2"/>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
  <changelog author="max@suse.com" date="1621425600">- bsc#1185952: llvm12 breaks PostgreSQL 11 and 12 on s390x.
  Use llvm11 as a workaround.</changelog>
  <changelog author="mrueckert@suse.de" date="1621598400">- Upgrade to 14~beta1
  https://www.postgresql.org/about/news/postgresql-14-beta-1-released-2213/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items
- disable postgresql-testsuite-int8.sql.patch:
  it seems it is not needed anymore, need to be double checked.</changelog>
  <changelog author="mrueckert@suse.de" date="1624622400">- Upgrade to 14~beta2
  https://www.postgresql.org/about/news/postgresql-14-beta-2-released-2249/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="mrueckert@suse.de" date="1632571200">- Upgrade to 14~rc1
  https://www.postgresql.org/about/news/postgresql-14-rc-1-released-2309/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="max@suse.com" date="1632744000">- Let genlists skip non-existing binaries to avoid lots of version
  conditionals in the file lists.</changelog>
  <changelog author="mrueckert@suse.de" date="1633003200">- Upgrade to 14.0
  https://www.postgresql.org/about/news/postgresql-14-released-2318/
  https://www.postgresql.org/docs/14/release-14.html</changelog>
  <changelog author="max@suse.com" date="1633435200">- Remove postgresql-testsuite-int8.sql.patch, because its purpose
  is unclear. This affects only the test subpackage.</changelog>
  <changelog author="max@suse.com" date="1634731200">- boo#1191782: Let rpmlint ignore shlib-policy-name-error.</changelog>
  <changelog author="max@suse.com" date="1636545600">- bsc#1192516: Upgrade to 14.1
  * Make the server reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23214).
  * Make libpq reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23222).
  * https://www.postgresql.org/docs/14/release-14-1.html</changelog>
  <changelog author="max@suse.com" date="1637841600">- Add a llvmjit-devel subpackage to pull in the right versions
  of clang and llvm for building extensions.
- Fix some mistakes in the interdependencies between the
  implementation packages and their noarch counterpart.
- Update the BuildIgnore section.</changelog>
  <changelog author="ada.lovelace@gmx.de" date="1639224000">- boo#1190740: Add constraints file with 12GB of memory for s390x
  as a workaround</changelog>
  <changelog author="max@suse.com" date="1644321600">- bsc#1195680: Upgrade to 14.2:
  * https://www.postgresql.org/docs/14/release-14-2.html
  * Reindexing might be needed after applying this upgrade, so
    please read the release notes carefully.</changelog>
  <changelog author="max@suse.com" date="1652356800">- Upgrade to 14.3:
  * bsc#1199475, CVE-2022-1552: Confine additional operations
    within "security restricted operation" sandboxes.
  * https://www.postgresql.org/docs/14/release-14-3.html</changelog>
</package>
<package pkgid="9a84bc9a70512e5e1e4a06e4ac15fe8c90905e90d11d55003dfcd015e882590d" name="libecpg6" arch="s390x">
  <version epoch="0" ver="14.3" rel="150200.5.12.2"/>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
  <changelog author="max@suse.com" date="1621425600">- bsc#1185952: llvm12 breaks PostgreSQL 11 and 12 on s390x.
  Use llvm11 as a workaround.</changelog>
  <changelog author="mrueckert@suse.de" date="1621598400">- Upgrade to 14~beta1
  https://www.postgresql.org/about/news/postgresql-14-beta-1-released-2213/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items
- disable postgresql-testsuite-int8.sql.patch:
  it seems it is not needed anymore, need to be double checked.</changelog>
  <changelog author="mrueckert@suse.de" date="1624622400">- Upgrade to 14~beta2
  https://www.postgresql.org/about/news/postgresql-14-beta-2-released-2249/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="mrueckert@suse.de" date="1632571200">- Upgrade to 14~rc1
  https://www.postgresql.org/about/news/postgresql-14-rc-1-released-2309/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="max@suse.com" date="1632744000">- Let genlists skip non-existing binaries to avoid lots of version
  conditionals in the file lists.</changelog>
  <changelog author="mrueckert@suse.de" date="1633003200">- Upgrade to 14.0
  https://www.postgresql.org/about/news/postgresql-14-released-2318/
  https://www.postgresql.org/docs/14/release-14.html</changelog>
  <changelog author="max@suse.com" date="1633435200">- Remove postgresql-testsuite-int8.sql.patch, because its purpose
  is unclear. This affects only the test subpackage.</changelog>
  <changelog author="max@suse.com" date="1634731200">- boo#1191782: Let rpmlint ignore shlib-policy-name-error.</changelog>
  <changelog author="max@suse.com" date="1636545600">- bsc#1192516: Upgrade to 14.1
  * Make the server reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23214).
  * Make libpq reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23222).
  * https://www.postgresql.org/docs/14/release-14-1.html</changelog>
  <changelog author="max@suse.com" date="1637841600">- Add a llvmjit-devel subpackage to pull in the right versions
  of clang and llvm for building extensions.
- Fix some mistakes in the interdependencies between the
  implementation packages and their noarch counterpart.
- Update the BuildIgnore section.</changelog>
  <changelog author="ada.lovelace@gmx.de" date="1639224000">- boo#1190740: Add constraints file with 12GB of memory for s390x
  as a workaround</changelog>
  <changelog author="max@suse.com" date="1644321600">- bsc#1195680: Upgrade to 14.2:
  * https://www.postgresql.org/docs/14/release-14-2.html
  * Reindexing might be needed after applying this upgrade, so
    please read the release notes carefully.</changelog>
  <changelog author="max@suse.com" date="1652356800">- Upgrade to 14.3:
  * bsc#1199475, CVE-2022-1552: Confine additional operations
    within "security restricted operation" sandboxes.
  * https://www.postgresql.org/docs/14/release-14-3.html</changelog>
</package>
<package pkgid="34bc3cc808306ba36586d27e65290175f368467c9781286f870c8f9cfcb015c1" name="libecpg6" arch="x86_64">
  <version epoch="0" ver="14.3" rel="150200.5.12.2"/>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
  <changelog author="max@suse.com" date="1621425600">- bsc#1185952: llvm12 breaks PostgreSQL 11 and 12 on s390x.
  Use llvm11 as a workaround.</changelog>
  <changelog author="mrueckert@suse.de" date="1621598400">- Upgrade to 14~beta1
  https://www.postgresql.org/about/news/postgresql-14-beta-1-released-2213/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items
- disable postgresql-testsuite-int8.sql.patch:
  it seems it is not needed anymore, need to be double checked.</changelog>
  <changelog author="mrueckert@suse.de" date="1624622400">- Upgrade to 14~beta2
  https://www.postgresql.org/about/news/postgresql-14-beta-2-released-2249/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="mrueckert@suse.de" date="1632571200">- Upgrade to 14~rc1
  https://www.postgresql.org/about/news/postgresql-14-rc-1-released-2309/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="max@suse.com" date="1632744000">- Let genlists skip non-existing binaries to avoid lots of version
  conditionals in the file lists.</changelog>
  <changelog author="mrueckert@suse.de" date="1633003200">- Upgrade to 14.0
  https://www.postgresql.org/about/news/postgresql-14-released-2318/
  https://www.postgresql.org/docs/14/release-14.html</changelog>
  <changelog author="max@suse.com" date="1633435200">- Remove postgresql-testsuite-int8.sql.patch, because its purpose
  is unclear. This affects only the test subpackage.</changelog>
  <changelog author="max@suse.com" date="1634731200">- boo#1191782: Let rpmlint ignore shlib-policy-name-error.</changelog>
  <changelog author="max@suse.com" date="1636545600">- bsc#1192516: Upgrade to 14.1
  * Make the server reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23214).
  * Make libpq reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23222).
  * https://www.postgresql.org/docs/14/release-14-1.html</changelog>
  <changelog author="max@suse.com" date="1637841600">- Add a llvmjit-devel subpackage to pull in the right versions
  of clang and llvm for building extensions.
- Fix some mistakes in the interdependencies between the
  implementation packages and their noarch counterpart.
- Update the BuildIgnore section.</changelog>
  <changelog author="ada.lovelace@gmx.de" date="1639224000">- boo#1190740: Add constraints file with 12GB of memory for s390x
  as a workaround</changelog>
  <changelog author="max@suse.com" date="1644321600">- bsc#1195680: Upgrade to 14.2:
  * https://www.postgresql.org/docs/14/release-14-2.html
  * Reindexing might be needed after applying this upgrade, so
    please read the release notes carefully.</changelog>
  <changelog author="max@suse.com" date="1652356800">- Upgrade to 14.3:
  * bsc#1199475, CVE-2022-1552: Confine additional operations
    within "security restricted operation" sandboxes.
  * https://www.postgresql.org/docs/14/release-14-3.html</changelog>
</package>
<package pkgid="71f7a43b4d7c19fab9e7100d3efbe644b23322283d446c3e606f65c45ad9f199" name="libecpg6-32bit" arch="x86_64">
  <version epoch="0" ver="14.2" rel="5.9.2"/>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
  <changelog author="max@suse.com" date="1621425600">- bsc#1185952: llvm12 breaks PostgreSQL 11 and 12 on s390x.
  Use llvm11 as a workaround.</changelog>
  <changelog author="mrueckert@suse.de" date="1621598400">- Upgrade to 14~beta1
  https://www.postgresql.org/about/news/postgresql-14-beta-1-released-2213/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items
- disable postgresql-testsuite-int8.sql.patch:
  it seems it is not needed anymore, need to be double checked.</changelog>
  <changelog author="mrueckert@suse.de" date="1624622400">- Upgrade to 14~beta2
  https://www.postgresql.org/about/news/postgresql-14-beta-2-released-2249/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="mrueckert@suse.de" date="1632571200">- Upgrade to 14~rc1
  https://www.postgresql.org/about/news/postgresql-14-rc-1-released-2309/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="max@suse.com" date="1632744000">- Let genlists skip non-existing binaries to avoid lots of version
  conditionals in the file lists.</changelog>
  <changelog author="mrueckert@suse.de" date="1633003200">- Upgrade to 14.0
  https://www.postgresql.org/about/news/postgresql-14-released-2318/
  https://www.postgresql.org/docs/14/release-14.html</changelog>
  <changelog author="max@suse.com" date="1633435200">- Remove postgresql-testsuite-int8.sql.patch, because its purpose
  is unclear. This affects only the test subpackage.</changelog>
  <changelog author="max@suse.com" date="1634731200">- boo#1191782: Let rpmlint ignore shlib-policy-name-error.</changelog>
  <changelog author="max@suse.com" date="1636545600">- bsc#1192516: Upgrade to 14.1
  * Make the server reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23214).
  * Make libpq reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23222).
  * https://www.postgresql.org/docs/14/release-14-1.html</changelog>
  <changelog author="max@suse.com" date="1637841600">- Add a llvmjit-devel subpackage to pull in the right versions
  of clang and llvm for building extensions.
- Fix some mistakes in the interdependencies between the
  implementation packages and their noarch counterpart.
- Update the BuildIgnore section.</changelog>
  <changelog author="ada.lovelace@gmx.de" date="1639224000">- boo#1190740: Add constraints file with 12GB of memory for s390x
  as a workaround</changelog>
  <changelog author="max@suse.com" date="1644321600">- bsc#1195680: Upgrade to 14.2:
  * https://www.postgresql.org/docs/14/release-14-1.html
  * Reindexing might be needed after applying this upgrade, so
    please read the release notes carefully.</changelog>
</package>
<package pkgid="9aaf6fbb42daac5f6c3f891f788cff6772afc48348b2617a422e6e9c738ddb5d" name="libecpg6-32bit" arch="x86_64">
  <version epoch="0" ver="14.3" rel="150200.5.12.2"/>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
  <changelog author="max@suse.com" date="1621425600">- bsc#1185952: llvm12 breaks PostgreSQL 11 and 12 on s390x.
  Use llvm11 as a workaround.</changelog>
  <changelog author="mrueckert@suse.de" date="1621598400">- Upgrade to 14~beta1
  https://www.postgresql.org/about/news/postgresql-14-beta-1-released-2213/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items
- disable postgresql-testsuite-int8.sql.patch:
  it seems it is not needed anymore, need to be double checked.</changelog>
  <changelog author="mrueckert@suse.de" date="1624622400">- Upgrade to 14~beta2
  https://www.postgresql.org/about/news/postgresql-14-beta-2-released-2249/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="mrueckert@suse.de" date="1632571200">- Upgrade to 14~rc1
  https://www.postgresql.org/about/news/postgresql-14-rc-1-released-2309/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="max@suse.com" date="1632744000">- Let genlists skip non-existing binaries to avoid lots of version
  conditionals in the file lists.</changelog>
  <changelog author="mrueckert@suse.de" date="1633003200">- Upgrade to 14.0
  https://www.postgresql.org/about/news/postgresql-14-released-2318/
  https://www.postgresql.org/docs/14/release-14.html</changelog>
  <changelog author="max@suse.com" date="1633435200">- Remove postgresql-testsuite-int8.sql.patch, because its purpose
  is unclear. This affects only the test subpackage.</changelog>
  <changelog author="max@suse.com" date="1634731200">- boo#1191782: Let rpmlint ignore shlib-policy-name-error.</changelog>
  <changelog author="max@suse.com" date="1636545600">- bsc#1192516: Upgrade to 14.1
  * Make the server reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23214).
  * Make libpq reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23222).
  * https://www.postgresql.org/docs/14/release-14-1.html</changelog>
  <changelog author="max@suse.com" date="1637841600">- Add a llvmjit-devel subpackage to pull in the right versions
  of clang and llvm for building extensions.
- Fix some mistakes in the interdependencies between the
  implementation packages and their noarch counterpart.
- Update the BuildIgnore section.</changelog>
  <changelog author="ada.lovelace@gmx.de" date="1639224000">- boo#1190740: Add constraints file with 12GB of memory for s390x
  as a workaround</changelog>
  <changelog author="max@suse.com" date="1644321600">- bsc#1195680: Upgrade to 14.2:
  * https://www.postgresql.org/docs/14/release-14-2.html
  * Reindexing might be needed after applying this upgrade, so
    please read the release notes carefully.</changelog>
  <changelog author="max@suse.com" date="1652356800">- Upgrade to 14.3:
  * bsc#1199475, CVE-2022-1552: Confine additional operations
    within "security restricted operation" sandboxes.
  * https://www.postgresql.org/docs/14/release-14-3.html</changelog>
</package>
<package pkgid="bd0fbf112592a921cf8c1281e78780f3438b80cd62be3480b988f2380c54cda8" name="libext2fs-devel" arch="aarch64">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="cbb0328e83fff0f19fe1a81dfef0fe7c54d29fa0ff056d1b2c76f830af31d05c" name="libext2fs-devel" arch="ppc64le">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="9cd3232c8b402f1c7721d2176b73edb8d95a37027ece0deef5db212b9809af89" name="libext2fs-devel" arch="s390x">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="80e366ffe4b7d13ffe6e89c811a26f9d5fdff048d1f1fa2471f864575016a9b6" name="libext2fs-devel" arch="x86_64">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="15deaac231005a497790b74e3bf2dcea0aa3b80901d3997b62010a7630dc9293" name="libext2fs-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="b4883ebe9ab37040f3de431a4a0b2d8d1c6a96e619d35d3c35d3f74ce17ac0c3" name="libext2fs-devel-static" arch="aarch64">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="3e165c07a5847430f6f52da20c3728b403aae1d8c9558299d684903bd5606d4f" name="libext2fs-devel-static" arch="ppc64le">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="fd629846b120da65f9375e47440a3cbf1f216f776318aa00acefc53326cbfd9a" name="libext2fs-devel-static" arch="s390x">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="cb5f67449ac763b90c71e936b2caf7cf6cb8db183b4db9d027b5bd34ce8de3f4" name="libext2fs-devel-static" arch="x86_64">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="5e25b33a62b6dd8706fe407e7370be3ee438bb5f96a3f7cd79fdcc569fe29371" name="libext2fs2" arch="aarch64">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="76bcff4f659195248ebca712e69b66cbc6d4001ec6649aa99b313c3f74b8db1f" name="libext2fs2" arch="ppc64le">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="50306fae559f0b7aa619428c7fa91c7e16aed53a833d63bac53c317fb37ddf80" name="libext2fs2" arch="s390x">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="ae13d1b2241f15851078cb03adb59880295b0d38e89c934bd1c01691b5077a2f" name="libext2fs2" arch="x86_64">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="88773cb78c34cd6d1321eee04809fa61aa8946521596f09ccd774e8cc412219a" name="libext2fs2-32bit" arch="x86_64">
  <version epoch="0" ver="1.46.4" rel="150400.3.3.1"/>
  <changelog author="seanlew@opensuse.org" date="1559304000">- Update to 1.45.2
  * Fixed e2scrub_all issues running from cron
  * When mke2fs asks to proceed, fall back on English Y/y
  * Fix spurious complaint of blocks beyond i_size
  * Fixed 'make install' failure when the cron.d dir doesn't exist</changelog>
  <changelog author="jack@suse.cz" date="1559304001">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
</package>
<package pkgid="2940dd38fb3b4a5f68a43b5168c5307f6c78319e69dd48abb4235914ea613150" name="libfreshclam2" arch="aarch64">
  <version epoch="0" ver="0.103.6" rel="150000.3.38.1"/>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
</package>
<package pkgid="da295791a83f7b04690c5405a176ffc9a08e104479fbc3c3024943ce64079b5f" name="libfreshclam2" arch="ppc64le">
  <version epoch="0" ver="0.103.6" rel="150000.3.38.1"/>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
</package>
<package pkgid="8e5919fa02c6df618f5211a7685f68d4a2986d79eeab7f45c7aab80fbeadba37" name="libfreshclam2" arch="s390x">
  <version epoch="0" ver="0.103.6" rel="150000.3.38.1"/>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
</package>
<package pkgid="6f3666a3f35414d315b31dc21c8855b26e6761cb027f72efa44401cbe5c0c62e" name="libfreshclam2" arch="x86_64">
  <version epoch="0" ver="0.103.6" rel="150000.3.38.1"/>
  <changelog author="max@suse.com" date="1565092800">- Update to version 0.101.3:
  * bsc#1144504: ZIP bomb causes extreme CPU spikes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1567598400">- update to 0.101.4:
  * CVE-2019-12900: An out of bounds write in the NSIS bzip2
    (boo#1149458)
  * CVE-2019-12625: Introduce a configurable time limit to mitigate
    zip bomb vulnerability completely. Default is 2 minutes,
    configurable useing the clamscan --max-scantime and for clamd
    using the MaxScanTime config option (boo#1144504)</changelog>
  <changelog author="max@suse.com" date="1572004800">- bsc#1151839: Increase the startup timeout of clamd to 5 minutes
  to cater for the grown virus database as a workaround until
  clamd has learned to talk to systemd to extend the timeout as
  long as needed.</changelog>
  <changelog author="suse+build@de-korte.org" date="1572609600">- update to 0.102.0
  * The On-Access Scanning feature has been migrated out of clamd
    and into a brand new utility named clamonacc. This utility is
    similar to clamdscan and clamav-milter in that it acts as a
    client to clamd. This separation from clamd means that clamd no
    longer needs to run with root privileges while scanning potentially
    malicious files. Instead, clamd may drop privileges to run under an
    account that does not have super-user. In addition to improving the
    security posture of running clamd with On-Access enabled, this
    update fixed a few outstanding defects:
  - On-Access scanning for created and moved files (Extra-Scanning)
    is fixed.
  - VirusEvent for On-Access scans is fixed.
  - With clamonacc, it is now possible to copy, move, or remove a
    file if the scan triggered an alert, just like with clamdscan.
  * The freshclam database update utility has undergone a significant
    update. This includes:
  - Added support for HTTPS.
  - Support for database mirrors hosted on ports other than 80.
  - Removal of the mirror management feature (mirrors.dat).
  - An all new libfreshclam library API.
- created new subpackage libfreshclam2
- dropped clamav-max_patch.patch (upstreamed)
- added clamav-fix_building_milter.patch to fix build of milter</changelog>
  <changelog author="suse+build@de-korte.org" date="1574251200">- update to 0.102.1
  * CVE-2019-15961, bsc#1157763: A Denial-of-Service (DoS)
    vulnerability may occur when scanning a specially crafted email
    file as a result of excessively long scan times. The issue is
    resolved by implementing several maximums in parsing MIME
    messages and by optimizing use of memory allocation.
  * Build system fixes to build clamav-milter, to correctly link
    with libxml2 when detected, and to correctly detect fanotify
    for on-access scanning feature support.
  * Signature load time is significantly reduced by changing to a
    more efficient algorithm for loading signature patterns and
    allocating the AC trie. Patch courtesy of Alberto Wu.
  * Introduced a new configure option to statically link libjson-c
    with libclamav. Static linking with libjson is highly
    recommended to prevent crashes in applications that use
    libclamav alongside another JSON parsing library.
  * Null-dereference fix in email parser when using the
  - -gen-json metadata option.
  * Fixes for Authenticode parsing and certificate signature
    (.crb database) bugs.
- dropped clamav-fix_building_milter.patch (upstreamed)</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="suse+build@de-korte.org" date="1577188800">- The freshclam.service should not be started before the network is
  online (it checks for updates immediately upon service start)</changelog>
  <changelog author="suse+build@de-korte.org" date="1580904000">- update to 0.102.2
  * CVE-2020-3123: A denial-of-service (DoS) condition may occur when
    using the optional credit card data-loss-prevention (DLP) feature.
    Improper bounds checking of an unsigned variable resulted in an
    out-of-bounds read, which causes a crash.
  * Significantly improved the scan speed of PDF files on Windows.
  * Re-applied a fix to alleviate file access issues when scanning RAR
    files in downstream projects that use libclamav where the scanning
    engine is operating in a low-privilege process. This bug was originally
    fixed in 0.101.2 and the fix was mistakenly omitted from 0.102.0.
  * Fixed an issue where freshclam failed to update if the database version
    downloaded is one version older than advertised. This situation may
    occur after a new database version is published. The issue affected
    users downloading the whole CVD database file.
  * Changed the default freshclam ReceiveTimeout setting to 0 (infinite).
    The ReceiveTimeout had caused needless database update failures for
    users with slower internet connections.
  * Correctly display the number of kilobytes (KiB) in progress bar and
    reduced the size of the progress bar to accommodate 80-character width
    terminals.
  * Fixed an issue where running freshclam manually causes a daemonized
    freshclam process to fail when it updates because the manual instance
    deletes the temporary download directory. The freshclam temporary files
    will now download to a unique directory created at the time of an update
    instead of using a hardcoded directory created/destroyed at the program
    start/exit.
  * Fix for freshclam's OnOutdatedExecute config option.
  * Fixes a memory leak in the error condition handling for the email
    parser.
  * Improved bound checking and error handling in ARJ archive parser.
  * Improved error handling in PDF parser.
  * Fix for memory leak in byte-compare signature handler.</changelog>
  <changelog author="mpluskal@suse.com" date="1585742400">- Drop python build dependency as it is not needed</changelog>
  <changelog author="suse+build@de-korte.org" date="1589284800">- Update to 0.102.3
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper bounds checking of an unsigned variable results
    in an out-of-bounds read which causes a crash.
  * CVE-2020-3341: Fix a vulnerability in the PDF parsing module in
    ClamAV 0.101 - 0.102.2 that could cause a Denial-of-Service (DoS)
    condition. Improper size checking of a buffer used to initialize AES
    decryption routines results in an out-of-bounds read which may cause
    a crash.
  * Fix "Attempt to allocate 0 bytes" error when parsing some PDF
    documents.
  * Fix a couple of minor memory leaks.
  * Updated libclamunrar to UnRAR 5.9.2.</changelog>
  <changelog author="suse+build@de-korte.org" date="1594900800">- Update to 0.102.4
  * CVE-2020-3350: Fix a vulnerability wherein a malicious user could
    replace a scan target's directory with a symlink to another path
    to trick clamscan, clamdscan, or clamonacc into removing or moving
    a different file (eg. a critical system file). The issue would
    affect users that use the --move or --remove options for clamscan,
    clamdscan, and clamonacc.
  * CVE-2020-3327: Fix a vulnerability in the ARJ archive parsing
    module in ClamAV 0.102.3 that could cause a Denial-of-Service
    (DoS) condition. Improper bounds checking results in an
    out-of-bounds read which could cause a crash. The previous fix for
    this CVE in 0.102.3 was incomplete. This fix correctly resolves
    the issue.
  * CVE-2020-3481: Fix a vulnerability in the EGG archive module in
    ClamAV 0.102.0 - 0.102.3 could cause a Denial-of-Service (DoS)
    condition. Improper error handling may result in a crash due to a
    NULL pointer dereference. This vulnerability is mitigated for
    those using the official ClamAV signature databases because the
    file type signatures in daily.cvd will not enable the EGG archive
    parser in versions affected by the vulnerability.</changelog>
  <changelog author="suse+build@de-korte.org" date="1600084800">- Update to 0.103.0
  * clamd can now reload the signature database without blocking
    scanning. This multi-threaded database reload improvement was made
    possible thanks to a community effort.
  - Non-blocking database reloads are now the default behavior. Some
    systems that are more constrained on RAM may need to disable
    non-blocking reloads as it will temporarily consume two times as
    much memory. We added a new clamd config option
    ConcurrentDatabaseReload, which may be set to no.
  * Dropped clamav-str-h.patch (no longer needed)
  * Fix clamav-milter.service (requires clamd.service to run)</changelog>
  <changelog author="max@suse.com" date="1605009600">- Sync Factory to SLE-15 to implement jsc#ECO-3010 and bsc#1118459.
- bsc#1119353, clamav-fips.patch: Fix freshclam crash in FIPS mode.
- Keep OBS from installing an existing clamav instance to scan the
  sources, because this makes "make check" use the old library
  instead of the just built one. This is only a workaround until
  we found a way to keep libtool from adding libdir to rpath and
  LD_LIBRARY_PATH of the binaries in the testsuite.</changelog>
  <changelog author="dimstar@opensuse.org" date="1605182400">- Do not hard-depend on systemd: use systemd_ordering instead of
  systemd_requires.</changelog>
  <changelog author="max@suse.com" date="1617969600">- Update clamav.keyring
- Update to 0.103.2
  * CVE-2021-1252, bsc#1184532: Fix for Excel XLM parser infinite
    loop. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1404, bsc#1184533: Fix for PDF parser buffer over-read;
    possible crash. Affects 0.103.0 and 0.103.1 only.
  * CVE-2021-1405, bsc#1184534: Fix for mail parser
    NULL-dereference crash. Affects 0.103.1 and prior.
  * Fix possible memory leak in PNG parser.
  * Fix ClamOnAcc scan on file-creation race condition so files are
    scanned after their contents are written.
  * FreshClam: Deprecate the SafeBrowsing config option. The
    SafeBrowsing option will no longer do anything.
  * For more details, see our blog post from last year about the
    future of the ClamAV Safe Browsing database.
  * FreshClam: Improved HTTP 304, 403, &amp; 429 handling.
  * FreshClam: Added back the mirrors.dat file to the database directory.
  * FreshClam will now exit with a failure in daemon mode if an HTTP 403
    (Forbidden) was received, because retrying later won't help any. The
    FreshClam user will have to take actions to get unblocked.
  * Fix the FreshClam mirror-sync issue where a downloaded database is
    "older than the version advertised."
  * bsc#1181256: Fix errors when scanning files &gt; 4G
  * obsoletes clamav-disable-timestamps.patch
- Update to 0.103.1
  * Added a new scan option to alert on broken media (graphics) file
    formats. This feature mitigates the risk of malformed media files
    intended to exploit vulnerabilities in other software. At present
    media validation exists for JPEG, TIFF, PNG, and GIF files. To
    enable this feature, set AlertBrokenMedia yes in clamd.conf, or
    use the --alert-broken-media option when using clamscan. These
    options are disabled by default in this patch release, but may be
    enabled in a subsequent release. Application developers may enable
    this scan option by enabling CL_SCAN_HEURISTIC_BROKEN_MEDIA for
    the heuristic scan option bit field.
  * Added CL_TYPE_TIFF, CL_TYPE_JPEG types to match GIF, PNG typing
    behavior. BMP and JPEG 2000 files will continue to detect as
    CL_TYPE_GRAPHICS because ClamAV does not yet have BMP or JPEG
    2000 format checking capabilities.
  * Fixed PNG parser logic bugs that caused an excess of parsing
    errors and fixed a stack exhaustion issue affecting some systems
    when scanning PNG files. PNG file type detection was disabled via
    signature database update for ClamAV version 0.103.0 to mitigate
    the effects from these bugs.
  * Fixed an issue where PNG and GIF files no longer work with
    Target:5 graphics signatures if detected as CL_TYPE_PNG/GIF rather
    than as CL_TYPE_GRAPHICS. Target types now support up to 10
    possible file types to make way for additional graphics types in
    future releases.
  * Fixed clamonacc's --fdpass option.
  - Interprocess file descriptor passing for clamonacc was broken
    since version 0.102.0 due to a bug introduced by the switch to
    curl for communicating with clamd. On Linux, passing file
    descriptors from one process to another is handled by the
    kernel, so we reverted clamonacc to use standard system calls
    for socket communication when fd passing is enabled.
  * Fixed a clamonacc stack corruption issue on some systems when
    using an older version of libcurl.
  * Allow clamscan and clamdscan scans to proceed even if the
    realpath lookup failed. This alleviates an issue on Windows
    scanning files hosted on file- systems that do not support the
    GetMappedFileNameW() API such as on ImDisk RAM-disks.
  * Fixed freshclam --on-update-execute=EXIT_1 temporary directory
    cleanup issue.
  * clamd's log output and VirusEvent now provide the scan target's
    file path instead of a file descriptor. The clamd socket API for
    submitting a scan by FD-passing doesn't include a file path, this
    feature works by looking up the file path by file descriptor.
    This feature works on Mac and Linux but is not yet implemented
    for other UNIX operating systems. FD-passing is not available for
    Windows.
  * Fixed an issue where freshclam database validation didn't work
    correctly when run in daemon mode on Linux/Unix.</changelog>
  <changelog author="suse+build@de-korte.org" date="1624276800">- bsc#1188284: Update to 0.103.3
  * Fixed a scan performance issue when ENGINE_OPTIONS_FORCE_TO_DISK is
    enabled. This issue did not impacted most users but for those
    affected it caused every scanned file to be copied to the temp
    directory before the scan.
  * Fix ClamDScan crashes when using the --fdpass --multiscan
    command-line options in combination with the ClamD ExcludePath
    config file options.
  * Fixed an issue where the mirrors.dat file is owned by root when
    starting as root (or with sudo) and using daemon-mode. File
    ownership will be set to the DatabaseOwner just before FreshClam
    switches to run as that user.
  * Renamed the mirrors.dat file to freshclam.dat.
  * Disabled the HTTPUserAgent config option if the DatabaseMirror uses
    clamav.net. This will prevent users from being inadvertently blocked
    and will ensure that we can keep better metrics on which ClamAV
    versions are being used.
  * Moved the detection for Heuristics.PNG.CVE-2010-1205 behind the
    ClamScan --alert-broken-media option (ClamD AlertBrokenMedia yes)
    option. This type of PNG issue appears to be common enough to be an
    annoyance, and the CVE is old enough that no one should be
    vulnerable at this point.
  * Fix ClamSubmit failures after changes to Cloudflare "__cfduid"
    cookies. See: https://blog.cloudflare.com/deprecating-cfduid-cookie/</changelog>
  <changelog author="meissner@suse.com" date="1625054400">- clamav-document-maxsize.patch: in the "clamscan" and "clamdscan" manpages,
  document that files over a certain size by default will silently not be
  scanned and how this can be adjusted (bsc#1187509)</changelog>
  <changelog author="max@suse.com" date="1636372800">- bsc#1192346: Update to 0.103.4
  * FreshClam:
  - Add a 24-hour cool-down for FreshClam clients that have received
    an HTTP 403 (Forbidden) response from the CDN. This is to reduce
    the volume of 403-response data served to blocked FreshClam
    clients that are configured with a tight update-loop.
  - Fixed a bug where FreshClam treats an empty CDIFF as an
    incremental update failure instead of as an intentional request
    to download the whole CVD.
  * ClamDScan: Fix a scan error when broken symlinks are encountered on
    macOS with "FollowDirectorySymlinks" and "FollowFileSymlinks"
    options disabled.
  * Overhauled the scan recursion / nested archive extraction logic and
    added new limits on embedded file-type recognition performed during
    the "raw" scan of each file. This limits embedded file-type
    misidentification and prevents detecting embedded file content that
    is found/extracted and scanned at other layers in the scanning
    process.
  * Fix an issue with the FMap module that failed to read from some
    nested files.
  * Fixed an issue where failing to load some rules from a Yara file
    containing multiple rules may cause a crash.
  * Fixed assorted compiler warnings.
  * Fixed assorted Coverity static code analysis issues.
  * Scan limits:
  - Added virus-name suffixes to the alerts that trigger when a scan
    limit has been exceeded. Rather than simply
    Heuristics.Limits.Exceeded, you may now see limit-specific
    virus-names, to include:
    + Heuristics.Limits.Exceeded.MaxFileSize
    + Heuristics.Limits.Exceeded.MaxScanSize
    + Heuristics.Limits.Exceeded.MaxFiles
    + Heuristics.Limits.Exceeded.MaxRecursion
    + Heuristics.Limits.Exceeded.MaxScanTime
  - Renamed the Heuristics.Email.ExceedsMax.* alerts to align with
    the other limit alerts names. These alerts include:
    + Heuristics.Limits.Exceeded.EmailLineFoldcnt
    + Heuristics.Limits.Exceeded.EmailHeaderBytes
    + Heuristics.Limits.Exceeded.EmailHeaders
    + Heuristics.Limits.Exceeded.EmailMIMEPartsPerMessage
    + Heuristics.Limits.Exceeded.EmailMIMEArguments
  - Fixed an issue where the Email-related scan limits would alert
    even when the "AlertExceedsMax" (--alert-exceeds-max) scan option
    is not enabled.
  - Fixes an issue in the Zip parser where exceeding the "MaxFiles"
    limit or the "MaxFileSize" limit would abort the scan but would
    fail to alert. The Zip scan limit issues were independently
    identified and reported by Aaron Leliaert and Max Allan.
  * Fixed a leak in the Email parser when using the --gen-json scan
    option.
  * Fixed an issue where a failure to record metadata in the Email
    parser when using the --gen-json scan option could cause the Email
    parser to abort the scan early and fail to extract and scan
    additional content.
  * Fixed a file name memory leak in the Zip parser.
  * Fixed an issue where certain signature patterns may cause a crash or
    cause unintended matches on some systems when converting characters
    to uppercase if a UTF-8 unicode single-byte grapheme becomes a
    multi-byte grapheme. Patch courtesy of Andrea De Pasquale.
- Fix unit test
  + clamav-ck_assert_msg.patch</changelog>
  <changelog author="max@suse.com" date="1642420800">- Update to 0.103.5
  * bsc#1194731, CVE-2022-20698:
    Fix for invalid pointer read that may cause a crash.
    This issue affects 0.104.1, 0.103.4 and prior when ClamAV is compiled
    with libjson-c and the CL_SCAN_GENERAL_COLLECT_METADATA scan option
    (the clamscan --gen-json option) is enabled.
  * Fixed ability to disable the file size limit with libclamav C API,
    like this:
    cl_engine_set_num(engine, CL_ENGINE_MAX_FILESIZE, 0);
    This issue didn't affect ClamD or ClamScan which also can disable the
    limit by setting it to zero using MaxFileSize 0 in clamd.conf for ClamD,
    or clamscan --max-filesize=0 for ClamScan.
    Note: Internally, the max file size is still set to 2 GiB. Disabling the
    limit for a scan will fall back on the internal 2 GiB limitation.
  * Increased the maximum line length for ClamAV config files from 512 bytes
    to 1,024 bytes to allow for longer config option strings.
  * SigTool: Fix insufficient buffer size for --list-sigs that caused a
    failure when listing a database containing one or more very long
    signatures. This fix was backported from 0.104.</changelog>
  <changelog author="max@suse.com" date="1651838400">- Update to 0.103.6
  * CVE-2022-20770: Fixed a possible infinite loop vulnerability in the CHM
    file parser. Issue affects versions 0.104.0 through 0.104.2 and LTS
    version 0.103.5 and prior versions. (boo#1199242)
  * CVE-2022-20796: Fixed a possible NULL-pointer dereference crash in the
    scan verdict cache check. Issue affects versions 0.103.4, 0.103.5,
    0.104.1, and 0.104.2. (boo#1199246)
  * CVE-2022-20771: Fixed a possible infinite loop vulnerability in the
    TIFF file parser. Issue affects versions 0.104.0 through 0.104.2 and
    LTS version 0.103.5 and prior versions. The issue only occurs if the
    "--alert-broken-media" ClamScan option is enabled. For ClamD, the
    affected option is "AlertBrokenMedia yes", and for libclamav it is the
    "CL_SCAN_HEURISTIC_BROKEN_MEDIA" scan option. (boo#1199244)
  * CVE-2022-20785: Fixed a possible memory leak in the HTML file parser /
    Javascript normalizer. Issue affects versions 0.104.0 through 0.104.2
    and LTS version 0.103.5 and prior versions. (boo#1199245)
  * CVE-2022-20792: Fixed a possible multi-byte heap buffer overflow write
    vulnerability in the signature database load module. The fix was to
    update the vendored regex library to the latest version. Issue affects
    versions 0.104.0 through 0.104.2 and LTS version 0.103.5 and prior
    versions. (boo#1199274)
  * ClamOnAcc: Fixed a number of assorted stability issues and added
    niceties for debugging ClamOnAcc.
  * Fixed an issue causing byte-compare subsignatures to cause an alert
    when they match even if other conditions of the given logical
    signatures were not met.
  * Fix memleak when using multiple byte-compare subsignatures. This fix
    was backported from 0.104.0.
  * Assorted bug fixes and improvements.
- Remove upstreamed clamav-ck_assert_msg.patch</changelog>
</package>
<package pkgid="e13b8aa37cbe4ff42260df4d151fc7791f8cf922e1311e440422d5d4eb575f57" name="libfribidi0" arch="aarch64">
  <version epoch="0" ver="1.0.10" rel="150400.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="mliska@suse.cz" date="1575028800">- Use %make_build macros.</changelog>
  <changelog author="kieltux@gmail.com" date="1590148800">- Add no-config-h.diff - copied from Debian
  Remove HAVE_CONFIG_H from public API
- Add Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff -
  copied from Debian, CVE-2019-18397
  Truncate isolate_level to FRIBIDI_BIDI_MAX_EXPLICIT_LEVEL
- Run spec-cleaner</changelog>
  <changelog author="elimat@opensuse.org" date="1596974400">- Update to version 1.0.10:
  * Fixed various compilation problems and symbol exports necessary for
    proper compilation under windows.
- Changes from version 1.0.9:
  * A bug fix in the fribidi unicode algorithm where isolate sequences were
    not really isolated.
  * Restored mistakenly removed deprecated function
    fribidi_log2vis_get_embedding_levels()
  * autotools now generates xz archives instead of bzip2 archives
- Changes from version 1.0.8:
  * A bug fix in the fribidi unicode algorithm for multiple isolate
    sequences.
  * Fixed a potential buffer overflow for a long sequence of isolate
    overrides characters (bsc#1156260 CVE-2019-18397)
- Changes from version 1.0.7:
  * This is a minor bugfix that removes symlinks and updates the meson
    version.
- Changes from version 1.0.6:
  * This is a minor bugfix release that fixes a list of minor issues that
    have turned up during the last year.
  * Various compilation and cross compilation issues.
  * Various minor header cleanups.
  * Removed libc's bsearch for performance and portability reasons
- Run spec-cleaner
  * Remove package groups
- Drop patches fixed upstream
  * Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff
  * no-config-h.diff
  * fribidi-CVE-2019-18397.patch</changelog>
  <changelog author="mgorse@suse.com" date="1652443200">- Add fribidi-CVE-2022-25308.patch: fix a stack overflow (boo#1196147
  CVE-2022-25308).
- Add fribidi-CVE-2022-25309.patch: protect against garbage in the
  CapRTL encoder (boo#1196148 CVE-2022-25309).
- Add fribidi-CVE-2022-25310.patch: fix a SEGV in
  fribidi_remove_bidi_marks (boo#1196150 CVE-2022-25310).</changelog>
</package>
<package pkgid="ce9d4ddc9610945d62a915fc6649b60df0140216b1bc6b385ecdc431296a0643" name="libfribidi0" arch="ppc64le">
  <version epoch="0" ver="1.0.10" rel="150400.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="mliska@suse.cz" date="1575028800">- Use %make_build macros.</changelog>
  <changelog author="kieltux@gmail.com" date="1590148800">- Add no-config-h.diff - copied from Debian
  Remove HAVE_CONFIG_H from public API
- Add Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff -
  copied from Debian, CVE-2019-18397
  Truncate isolate_level to FRIBIDI_BIDI_MAX_EXPLICIT_LEVEL
- Run spec-cleaner</changelog>
  <changelog author="elimat@opensuse.org" date="1596974400">- Update to version 1.0.10:
  * Fixed various compilation problems and symbol exports necessary for
    proper compilation under windows.
- Changes from version 1.0.9:
  * A bug fix in the fribidi unicode algorithm where isolate sequences were
    not really isolated.
  * Restored mistakenly removed deprecated function
    fribidi_log2vis_get_embedding_levels()
  * autotools now generates xz archives instead of bzip2 archives
- Changes from version 1.0.8:
  * A bug fix in the fribidi unicode algorithm for multiple isolate
    sequences.
  * Fixed a potential buffer overflow for a long sequence of isolate
    overrides characters (bsc#1156260 CVE-2019-18397)
- Changes from version 1.0.7:
  * This is a minor bugfix that removes symlinks and updates the meson
    version.
- Changes from version 1.0.6:
  * This is a minor bugfix release that fixes a list of minor issues that
    have turned up during the last year.
  * Various compilation and cross compilation issues.
  * Various minor header cleanups.
  * Removed libc's bsearch for performance and portability reasons
- Run spec-cleaner
  * Remove package groups
- Drop patches fixed upstream
  * Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff
  * no-config-h.diff
  * fribidi-CVE-2019-18397.patch</changelog>
  <changelog author="mgorse@suse.com" date="1652443200">- Add fribidi-CVE-2022-25308.patch: fix a stack overflow (boo#1196147
  CVE-2022-25308).
- Add fribidi-CVE-2022-25309.patch: protect against garbage in the
  CapRTL encoder (boo#1196148 CVE-2022-25309).
- Add fribidi-CVE-2022-25310.patch: fix a SEGV in
  fribidi_remove_bidi_marks (boo#1196150 CVE-2022-25310).</changelog>
</package>
<package pkgid="30c3fe7f35f20a7ec57bf5cf9a92b6515219a1cf90907afbe18de413e07378cb" name="libfribidi0" arch="s390x">
  <version epoch="0" ver="1.0.10" rel="150400.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="mliska@suse.cz" date="1575028800">- Use %make_build macros.</changelog>
  <changelog author="kieltux@gmail.com" date="1590148800">- Add no-config-h.diff - copied from Debian
  Remove HAVE_CONFIG_H from public API
- Add Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff -
  copied from Debian, CVE-2019-18397
  Truncate isolate_level to FRIBIDI_BIDI_MAX_EXPLICIT_LEVEL
- Run spec-cleaner</changelog>
  <changelog author="elimat@opensuse.org" date="1596974400">- Update to version 1.0.10:
  * Fixed various compilation problems and symbol exports necessary for
    proper compilation under windows.
- Changes from version 1.0.9:
  * A bug fix in the fribidi unicode algorithm where isolate sequences were
    not really isolated.
  * Restored mistakenly removed deprecated function
    fribidi_log2vis_get_embedding_levels()
  * autotools now generates xz archives instead of bzip2 archives
- Changes from version 1.0.8:
  * A bug fix in the fribidi unicode algorithm for multiple isolate
    sequences.
  * Fixed a potential buffer overflow for a long sequence of isolate
    overrides characters (bsc#1156260 CVE-2019-18397)
- Changes from version 1.0.7:
  * This is a minor bugfix that removes symlinks and updates the meson
    version.
- Changes from version 1.0.6:
  * This is a minor bugfix release that fixes a list of minor issues that
    have turned up during the last year.
  * Various compilation and cross compilation issues.
  * Various minor header cleanups.
  * Removed libc's bsearch for performance and portability reasons
- Run spec-cleaner
  * Remove package groups
- Drop patches fixed upstream
  * Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff
  * no-config-h.diff
  * fribidi-CVE-2019-18397.patch</changelog>
  <changelog author="mgorse@suse.com" date="1652443200">- Add fribidi-CVE-2022-25308.patch: fix a stack overflow (boo#1196147
  CVE-2022-25308).
- Add fribidi-CVE-2022-25309.patch: protect against garbage in the
  CapRTL encoder (boo#1196148 CVE-2022-25309).
- Add fribidi-CVE-2022-25310.patch: fix a SEGV in
  fribidi_remove_bidi_marks (boo#1196150 CVE-2022-25310).</changelog>
</package>
<package pkgid="2641a83c85dc021ea114e950350649d693d04a510ac7d1dda52fcc59e902ea14" name="libfribidi0" arch="x86_64">
  <version epoch="0" ver="1.0.10" rel="150400.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="mliska@suse.cz" date="1575028800">- Use %make_build macros.</changelog>
  <changelog author="kieltux@gmail.com" date="1590148800">- Add no-config-h.diff - copied from Debian
  Remove HAVE_CONFIG_H from public API
- Add Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff -
  copied from Debian, CVE-2019-18397
  Truncate isolate_level to FRIBIDI_BIDI_MAX_EXPLICIT_LEVEL
- Run spec-cleaner</changelog>
  <changelog author="elimat@opensuse.org" date="1596974400">- Update to version 1.0.10:
  * Fixed various compilation problems and symbol exports necessary for
    proper compilation under windows.
- Changes from version 1.0.9:
  * A bug fix in the fribidi unicode algorithm where isolate sequences were
    not really isolated.
  * Restored mistakenly removed deprecated function
    fribidi_log2vis_get_embedding_levels()
  * autotools now generates xz archives instead of bzip2 archives
- Changes from version 1.0.8:
  * A bug fix in the fribidi unicode algorithm for multiple isolate
    sequences.
  * Fixed a potential buffer overflow for a long sequence of isolate
    overrides characters (bsc#1156260 CVE-2019-18397)
- Changes from version 1.0.7:
  * This is a minor bugfix that removes symlinks and updates the meson
    version.
- Changes from version 1.0.6:
  * This is a minor bugfix release that fixes a list of minor issues that
    have turned up during the last year.
  * Various compilation and cross compilation issues.
  * Various minor header cleanups.
  * Removed libc's bsearch for performance and portability reasons
- Run spec-cleaner
  * Remove package groups
- Drop patches fixed upstream
  * Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff
  * no-config-h.diff
  * fribidi-CVE-2019-18397.patch</changelog>
  <changelog author="mgorse@suse.com" date="1652443200">- Add fribidi-CVE-2022-25308.patch: fix a stack overflow (boo#1196147
  CVE-2022-25308).
- Add fribidi-CVE-2022-25309.patch: protect against garbage in the
  CapRTL encoder (boo#1196148 CVE-2022-25309).
- Add fribidi-CVE-2022-25310.patch: fix a SEGV in
  fribidi_remove_bidi_marks (boo#1196150 CVE-2022-25310).</changelog>
</package>
<package pkgid="ca15f145a8d992156dd020d3f3851eaa0d9c307326e009d182acb1e5558a931d" name="libfribidi0-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.10" rel="150400.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1405771200">- Utilize shared library package naming guidelines
- Drop Requires:pkg-config for fribidi-devel, it is implicit
  (due to .pc file being picked up by rpm find-requires)</changelog>
  <changelog author="ftake@geeko.jp" date="1410350400">- libfribidi-devel requires %{lname} = %{version}</changelog>
  <changelog author="i@marguerite.su" date="1415275200">- update version 0.19.6
  * Fix two minor bidi bugs.
  * Build with new libtool to support ppc64le.
- fix boo#903462: -enable-malloc to be thread safe</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1518868800">- Update to version 1.0.1:
  + Minor distribution related fixes.
- Changes from version 1.0.0:
  + Full isolate and parenthesis support as per Unicode 6.3 to
    Unicode 10.0.
  + To get access to the new algorithm calls to the function
    `fribidi_get_par_embedding_levels()` must be replaced with
    calls to `fribidi_get_par_embedding_levels_ex()`. These
    functions are not API compatible. Calling the older function
    will use default values for the new bracket properties and will
    sometimes yield non-complient results.
- Changes from version 0.19.7:
  + Disable thread-unsafe memory pool by default (fdo#79385).
  + Misc fixes.
- Update Url tag to https://github.com/fribidi/fribidi: the current
  Fribidi web page.
- Drop enable-malloc configure option: the thread safety problem is
  already fixed and it's not an available configure option anymore.
- Drop fdupes BuildRequires and its macro: it is no longer needed.</changelog>
  <changelog author="jengelh@inai.de" date="1518955200">- Trim redundancies in the description.</changelog>
  <changelog author="sean@suspend.net" date="1540382400">- Update to version 1.0.5:
  + Updated unicode tables to version 11
  + Bugfix release - character tests were not running previously
  + Small speedup due to small arrays being allocated on the stack</changelog>
  <changelog author="mliska@suse.cz" date="1575028800">- Use %make_build macros.</changelog>
  <changelog author="kieltux@gmail.com" date="1590148800">- Add no-config-h.diff - copied from Debian
  Remove HAVE_CONFIG_H from public API
- Add Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff -
  copied from Debian, CVE-2019-18397
  Truncate isolate_level to FRIBIDI_BIDI_MAX_EXPLICIT_LEVEL
- Run spec-cleaner</changelog>
  <changelog author="elimat@opensuse.org" date="1596974400">- Update to version 1.0.10:
  * Fixed various compilation problems and symbol exports necessary for
    proper compilation under windows.
- Changes from version 1.0.9:
  * A bug fix in the fribidi unicode algorithm where isolate sequences were
    not really isolated.
  * Restored mistakenly removed deprecated function
    fribidi_log2vis_get_embedding_levels()
  * autotools now generates xz archives instead of bzip2 archives
- Changes from version 1.0.8:
  * A bug fix in the fribidi unicode algorithm for multiple isolate
    sequences.
  * Fixed a potential buffer overflow for a long sequence of isolate
    overrides characters (bsc#1156260 CVE-2019-18397)
- Changes from version 1.0.7:
  * This is a minor bugfix that removes symlinks and updates the meson
    version.
- Changes from version 1.0.6:
  * This is a minor bugfix release that fixes a list of minor issues that
    have turned up during the last year.
  * Various compilation and cross compilation issues.
  * Various minor header cleanups.
  * Removed libc's bsearch for performance and portability reasons
- Run spec-cleaner
  * Remove package groups
- Drop patches fixed upstream
  * Truncate-isolate_level-to-FRIBIDI_BIDI_MAX_EXPLICIT_.diff
  * no-config-h.diff
  * fribidi-CVE-2019-18397.patch</changelog>
  <changelog author="mgorse@suse.com" date="1652443200">- Add fribidi-CVE-2022-25308.patch: fix a stack overflow (boo#1196147
  CVE-2022-25308).
- Add fribidi-CVE-2022-25309.patch: protect against garbage in the
  CapRTL encoder (boo#1196148 CVE-2022-25309).
- Add fribidi-CVE-2022-25310.patch: fix a SEGV in
  fribidi_remove_bidi_marks (boo#1196150 CVE-2022-25310).</changelog>
</package>
<package pkgid="05cba14ae211ccbec6f8a6ad76b0331ed3497555192cf740a58705737b4eb2d0" name="libgadu" arch="src">
  <version epoch="0" ver="1.12.2" rel="150000.3.2.1"/>
  <changelog author="sbrabec@suse.cz" date="1178798400">- New SuSE package, version 1.7.1.</changelog>
  <changelog author="aj@suse.de" date="1178884800">- Remove duplicate post/postun sections.</changelog>
  <changelog author="crrodriguez@suse.de" date="1204977600">- update to version 1.8.0
  * using protocol Gadu-Gadu 7.x
  * direct connection fixes
  * minor fixes
- disable static libraries</changelog>
  <changelog author="sbrabec@suse.cz" date="1219147200">- Updated to version 1.8.1:
  * fixed memory corruption in gg_dcc7_send_file()
  * fixes in sending cached data
  * endian fixes
  * documentation fixes</changelog>
  <changelog author="sbrabec@suse.cz" date="1225281600">- Updated to version 1.8.2:
  * fixes remote denial of service via contact description
    (CVE-2008-4776, bnc#439770)</changelog>
  <changelog author="sbrabec@suse.cz" date="1248696000">- Build with threads support (bnc#525312) and SSL support.</changelog>
  <changelog author="fisiu@opensuse.org" date="1274616000">- Update to version 1.9.0:
  + support for new version of gadu-gadu protocol (8 and 10)
  + images sending fixed
  + resolve name schema option
  + doc and test programs
- Add libgadu-mem-leak-fix.patch.</changelog>
  <changelog author="fisiu@opensuse.org" date="1286625600">- Update to version 1.9.1:
  + fixed memory leak in html messages
  + improved converting messages to html
  + status flag can be changed now
  + improved direct connection API
- Drop libgadu-mem-leak-fix.patch: fixed upstream.</changelog>
  <changelog author="fisiu@opensuse.org" date="1298030400">- Update to version 1.10.0:
  + ssl connections restored
  + typing notifications
  + multilogin support
  + buddies' info enhancement
  + support for additional xml events
  + initial file transfer over server
  + partial import of new-api branch
- Spec cleanup.</changelog>
  <changelog author="fisiu@opensuse.org" date="1300449600">- Update to version 1.10.1:
  + improved direct connections
  + improved connections over proxy server
  + some minor changes</changelog>
  <changelog author="fisiu@opensuse.org" date="1307620800">- Update to version 1.11.0:
  + contacts import/export compatible with gadu-gadu 10
  + improved sockets management with direct connections
  + detailed report when connection fails
  + enhanced confirmation for delivered message
  + improved message conversion from html to plain text</changelog>
  <changelog author="vuntz@opensuse.org" date="1308312000">- Change pkgconfig(openssl) BuildRequires to gnutls-devel as this
  seems to be preferred.
- Add curl-devel, libexpat-devel, libgsm-devel, speex-devel and
  pkgconfig(libxml-2.0) BuildRequires, to enable optional features.</changelog>
  <changelog author="fisiu@opensuse.org" date="1323086400">- Fix include path (/usr/local) in .pc file.
- Replace -devel with pkgconfig() in BuildRequires.
- Fix license notation according to spdx.</changelog>
  <changelog author="sbrabec@suse.cz" date="1325246400">- Apply /usr/local include work-around for 12.1 only (bnc#719176).</changelog>
  <changelog author="fisiu@opensuse.org" date="1326974400">- Update to version 1.11.1, bugfix release:
  + improved SSL support with GnuTLS library
  + improved pkg-config handling
  + improved conversion of invalid UTF-8 sequence
  + improved hostname resolving on systems without gethostbyname_r()</changelog>
  <changelog author="fisiu@opensuse.org" date="1340107200">- Update to version 1.11.2, bugfix release:
  + improved hostname resolving in singlethread applications.</changelog>
  <changelog author="fisiu@opensuse.org" date="1399809600">- Update to version 1.11.4, bugfix release:
  + Fix buffer overflow with remote code execution potential.
    Only triggerable by a Gadu-Gadu server or a man-in-the-middle.
    CVE-2013-6487 (bnc#861019, bnc#878540)
  + Fix memory overwrite in file transfer with proxy server.
    CVE-2014-3775 (bnc#878540)
  + Minor fixes reported by Pidgin project members.</changelog>
  <changelog author="twasilczyk@pidgin.im" date="1403006400">- Update to version 1.12.0:
  + supports GG11 protocol
  + important SSL-related API improvements
  + OpenSSL is disabled by default
  + pthread is a default hostname resolving method now
  + stability improvements
- Updated dependencies
  + libgsm and speex are not used at all
  + libexpat, libcurl and libxml are used only for automatic tests
  + libprotobuf-c is an optional dependency
- Removed unnecessary --with-pthread switch (it's default now)</changelog>
  <changelog author="fisiu@opensuse.org" date="1422964800">- Update to version 1.12.1, bugfix release:
  + improved compatibility with GG11 protocol
  + fix segfaults when got incorrect reply from public catalog
  + fixes related to proxy servers</changelog>
  <changelog author="fisiu@opensuse.org" date="1496750400">- Update to version 1.12.2, bugfix release:
  + fixes overwriting memory when updating contacts list
  + fixes TLS connection and improve gnutls errors handling
  + fixes disconnection when joining to room with title set
  + other small fixes</changelog>
</package>
<package pkgid="1200e3d1e7417befbb09f2e890b78b071d4b71cd2a3234ec3de4b9ea06fc8baa" name="libgadu-devel" arch="aarch64">
  <version epoch="0" ver="1.12.2" rel="150000.3.2.1"/>
  <changelog author="fisiu@opensuse.org" date="1307620800">- Update to version 1.11.0:
  + contacts import/export compatible with gadu-gadu 10
  + improved sockets management with direct connections
  + detailed report when connection fails
  + enhanced confirmation for delivered message
  + improved message conversion from html to plain text</changelog>
  <changelog author="vuntz@opensuse.org" date="1308312000">- Change pkgconfig(openssl) BuildRequires to gnutls-devel as this
  seems to be preferred.
- Add curl-devel, libexpat-devel, libgsm-devel, speex-devel and
  pkgconfig(libxml-2.0) BuildRequires, to enable optional features.</changelog>
  <changelog author="fisiu@opensuse.org" date="1323086400">- Fix include path (/usr/local) in .pc file.
- Replace -devel with pkgconfig() in BuildRequires.
- Fix license notation according to spdx.</changelog>
  <changelog author="sbrabec@suse.cz" date="1325246400">- Apply /usr/local include work-around for 12.1 only (bnc#719176).</changelog>
  <changelog author="fisiu@opensuse.org" date="1326974400">- Update to version 1.11.1, bugfix release:
  + improved SSL support with GnuTLS library
  + improved pkg-config handling
  + improved conversion of invalid UTF-8 sequence
  + improved hostname resolving on systems without gethostbyname_r()</changelog>
  <changelog author="fisiu@opensuse.org" date="1340107200">- Update to version 1.11.2, bugfix release:
  + improved hostname resolving in singlethread applications.</changelog>
  <changelog author="fisiu@opensuse.org" date="1399809600">- Update to version 1.11.4, bugfix release:
  + Fix buffer overflow with remote code execution potential.
    Only triggerable by a Gadu-Gadu server or a man-in-the-middle.
    CVE-2013-6487 (bnc#861019, bnc#878540)
  + Fix memory overwrite in file transfer with proxy server.
    CVE-2014-3775 (bnc#878540)
  + Minor fixes reported by Pidgin project members.</changelog>
  <changelog author="twasilczyk@pidgin.im" date="1403006400">- Update to version 1.12.0:
  + supports GG11 protocol
  + important SSL-related API improvements
  + OpenSSL is disabled by default
  + pthread is a default hostname resolving method now
  + stability improvements
- Updated dependencies
  + libgsm and speex are not used at all
  + libexpat, libcurl and libxml are used only for automatic tests
  + libprotobuf-c is an optional dependency
- Removed unnecessary --with-pthread switch (it's default now)</changelog>
  <changelog author="fisiu@opensuse.org" date="1422964800">- Update to version 1.12.1, bugfix release:
  + improved compatibility with GG11 protocol
  + fix segfaults when got incorrect reply from public catalog
  + fixes related to proxy servers</changelog>
  <changelog author="fisiu@opensuse.org" date="1496750400">- Update to version 1.12.2, bugfix release:
  + fixes overwriting memory when updating contacts list
  + fixes TLS connection and improve gnutls errors handling
  + fixes disconnection when joining to room with title set
  + other small fixes</changelog>
</package>
<package pkgid="45c124bf4605f9266e448a1599c2edfb4b29033fe4afe24fb0f2cbde05ca13a9" name="libgadu-devel" arch="ppc64le">
  <version epoch="0" ver="1.12.2" rel="150000.3.2.1"/>
  <changelog author="fisiu@opensuse.org" date="1307620800">- Update to version 1.11.0:
  + contacts import/export compatible with gadu-gadu 10
  + improved sockets management with direct connections
  + detailed report when connection fails
  + enhanced confirmation for delivered message
  + improved message conversion from html to plain text</changelog>
  <changelog author="vuntz@opensuse.org" date="1308312000">- Change pkgconfig(openssl) BuildRequires to gnutls-devel as this
  seems to be preferred.
- Add curl-devel, libexpat-devel, libgsm-devel, speex-devel and
  pkgconfig(libxml-2.0) BuildRequires, to enable optional features.</changelog>
  <changelog author="fisiu@opensuse.org" date="1323086400">- Fix include path (/usr/local) in .pc file.
- Replace -devel with pkgconfig() in BuildRequires.
- Fix license notation according to spdx.</changelog>
  <changelog author="sbrabec@suse.cz" date="1325246400">- Apply /usr/local include work-around for 12.1 only (bnc#719176).</changelog>
  <changelog author="fisiu@opensuse.org" date="1326974400">- Update to version 1.11.1, bugfix release:
  + improved SSL support with GnuTLS library
  + improved pkg-config handling
  + improved conversion of invalid UTF-8 sequence
  + improved hostname resolving on systems without gethostbyname_r()</changelog>
  <changelog author="fisiu@opensuse.org" date="1340107200">- Update to version 1.11.2, bugfix release:
  + improved hostname resolving in singlethread applications.</changelog>
  <changelog author="fisiu@opensuse.org" date="1399809600">- Update to version 1.11.4, bugfix release:
  + Fix buffer overflow with remote code execution potential.
    Only triggerable by a Gadu-Gadu server or a man-in-the-middle.
    CVE-2013-6487 (bnc#861019, bnc#878540)
  + Fix memory overwrite in file transfer with proxy server.
    CVE-2014-3775 (bnc#878540)
  + Minor fixes reported by Pidgin project members.</changelog>
  <changelog author="twasilczyk@pidgin.im" date="1403006400">- Update to version 1.12.0:
  + supports GG11 protocol
  + important SSL-related API improvements
  + OpenSSL is disabled by default
  + pthread is a default hostname resolving method now
  + stability improvements
- Updated dependencies
  + libgsm and speex are not used at all
  + libexpat, libcurl and libxml are used only for automatic tests
  + libprotobuf-c is an optional dependency
- Removed unnecessary --with-pthread switch (it's default now)</changelog>
  <changelog author="fisiu@opensuse.org" date="1422964800">- Update to version 1.12.1, bugfix release:
  + improved compatibility with GG11 protocol
  + fix segfaults when got incorrect reply from public catalog
  + fixes related to proxy servers</changelog>
  <changelog author="fisiu@opensuse.org" date="1496750400">- Update to version 1.12.2, bugfix release:
  + fixes overwriting memory when updating contacts list
  + fixes TLS connection and improve gnutls errors handling
  + fixes disconnection when joining to room with title set
  + other small fixes</changelog>
</package>
<package pkgid="a8ff3ac85e777c244af256904eeca4e9dc00bf31df26dc7267c78deb1519ef8f" name="libgadu-devel" arch="s390x">
  <version epoch="0" ver="1.12.2" rel="150000.3.2.1"/>
  <changelog author="fisiu@opensuse.org" date="1307620800">- Update to version 1.11.0:
  + contacts import/export compatible with gadu-gadu 10
  + improved sockets management with direct connections
  + detailed report when connection fails
  + enhanced confirmation for delivered message
  + improved message conversion from html to plain text</changelog>
  <changelog author="vuntz@opensuse.org" date="1308312000">- Change pkgconfig(openssl) BuildRequires to gnutls-devel as this
  seems to be preferred.
- Add curl-devel, libexpat-devel, libgsm-devel, speex-devel and
  pkgconfig(libxml-2.0) BuildRequires, to enable optional features.</changelog>
  <changelog author="fisiu@opensuse.org" date="1323086400">- Fix include path (/usr/local) in .pc file.
- Replace -devel with pkgconfig() in BuildRequires.
- Fix license notation according to spdx.</changelog>
  <changelog author="sbrabec@suse.cz" date="1325246400">- Apply /usr/local include work-around for 12.1 only (bnc#719176).</changelog>
  <changelog author="fisiu@opensuse.org" date="1326974400">- Update to version 1.11.1, bugfix release:
  + improved SSL support with GnuTLS library
  + improved pkg-config handling
  + improved conversion of invalid UTF-8 sequence
  + improved hostname resolving on systems without gethostbyname_r()</changelog>
  <changelog author="fisiu@opensuse.org" date="1340107200">- Update to version 1.11.2, bugfix release:
  + improved hostname resolving in singlethread applications.</changelog>
  <changelog author="fisiu@opensuse.org" date="1399809600">- Update to version 1.11.4, bugfix release:
  + Fix buffer overflow with remote code execution potential.
    Only triggerable by a Gadu-Gadu server or a man-in-the-middle.
    CVE-2013-6487 (bnc#861019, bnc#878540)
  + Fix memory overwrite in file transfer with proxy server.
    CVE-2014-3775 (bnc#878540)
  + Minor fixes reported by Pidgin project members.</changelog>
  <changelog author="twasilczyk@pidgin.im" date="1403006400">- Update to version 1.12.0:
  + supports GG11 protocol
  + important SSL-related API improvements
  + OpenSSL is disabled by default
  + pthread is a default hostname resolving method now
  + stability improvements
- Updated dependencies
  + libgsm and speex are not used at all
  + libexpat, libcurl and libxml are used only for automatic tests
  + libprotobuf-c is an optional dependency
- Removed unnecessary --with-pthread switch (it's default now)</changelog>
  <changelog author="fisiu@opensuse.org" date="1422964800">- Update to version 1.12.1, bugfix release:
  + improved compatibility with GG11 protocol
  + fix segfaults when got incorrect reply from public catalog
  + fixes related to proxy servers</changelog>
  <changelog author="fisiu@opensuse.org" date="1496750400">- Update to version 1.12.2, bugfix release:
  + fixes overwriting memory when updating contacts list
  + fixes TLS connection and improve gnutls errors handling
  + fixes disconnection when joining to room with title set
  + other small fixes</changelog>
</package>
<package pkgid="9d986f028be1d8b64c238e6c530e6c2eff9f502efce407340b1bfd7f7e889e47" name="libgadu-devel" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="150000.3.2.1"/>
  <changelog author="fisiu@opensuse.org" date="1307620800">- Update to version 1.11.0:
  + contacts import/export compatible with gadu-gadu 10
  + improved sockets management with direct connections
  + detailed report when connection fails
  + enhanced confirmation for delivered message
  + improved message conversion from html to plain text</changelog>
  <changelog author="vuntz@opensuse.org" date="1308312000">- Change pkgconfig(openssl) BuildRequires to gnutls-devel as this
  seems to be preferred.
- Add curl-devel, libexpat-devel, libgsm-devel, speex-devel and
  pkgconfig(libxml-2.0) BuildRequires, to enable optional features.</changelog>
  <changelog author="fisiu@opensuse.org" date="1323086400">- Fix include path (/usr/local) in .pc file.
- Replace -devel with pkgconfig() in BuildRequires.
- Fix license notation according to spdx.</changelog>
  <changelog author="sbrabec@suse.cz" date="1325246400">- Apply /usr/local include work-around for 12.1 only (bnc#719176).</changelog>
  <changelog author="fisiu@opensuse.org" date="1326974400">- Update to version 1.11.1, bugfix release:
  + improved SSL support with GnuTLS library
  + improved pkg-config handling
  + improved conversion of invalid UTF-8 sequence
  + improved hostname resolving on systems without gethostbyname_r()</changelog>
  <changelog author="fisiu@opensuse.org" date="1340107200">- Update to version 1.11.2, bugfix release:
  + improved hostname resolving in singlethread applications.</changelog>
  <changelog author="fisiu@opensuse.org" date="1399809600">- Update to version 1.11.4, bugfix release:
  + Fix buffer overflow with remote code execution potential.
    Only triggerable by a Gadu-Gadu server or a man-in-the-middle.
    CVE-2013-6487 (bnc#861019, bnc#878540)
  + Fix memory overwrite in file transfer with proxy server.
    CVE-2014-3775 (bnc#878540)
  + Minor fixes reported by Pidgin project members.</changelog>
  <changelog author="twasilczyk@pidgin.im" date="1403006400">- Update to version 1.12.0:
  + supports GG11 protocol
  + important SSL-related API improvements
  + OpenSSL is disabled by default
  + pthread is a default hostname resolving method now
  + stability improvements
- Updated dependencies
  + libgsm and speex are not used at all
  + libexpat, libcurl and libxml are used only for automatic tests
  + libprotobuf-c is an optional dependency
- Removed unnecessary --with-pthread switch (it's default now)</changelog>
  <changelog author="fisiu@opensuse.org" date="1422964800">- Update to version 1.12.1, bugfix release:
  + improved compatibility with GG11 protocol
  + fix segfaults when got incorrect reply from public catalog
  + fixes related to proxy servers</changelog>
  <changelog author="fisiu@opensuse.org" date="1496750400">- Update to version 1.12.2, bugfix release:
  + fixes overwriting memory when updating contacts list
  + fixes TLS connection and improve gnutls errors handling
  + fixes disconnection when joining to room with title set
  + other small fixes</changelog>
</package>
<package pkgid="e020419e63459ec97d194c9dac135180d629d986f8c7a64f0155346c5aa83a3a" name="libgadu3" arch="aarch64">
  <version epoch="0" ver="1.12.2" rel="150000.3.2.1"/>
  <changelog author="fisiu@opensuse.org" date="1307620800">- Update to version 1.11.0:
  + contacts import/export compatible with gadu-gadu 10
  + improved sockets management with direct connections
  + detailed report when connection fails
  + enhanced confirmation for delivered message
  + improved message conversion from html to plain text</changelog>
  <changelog author="vuntz@opensuse.org" date="1308312000">- Change pkgconfig(openssl) BuildRequires to gnutls-devel as this
  seems to be preferred.
- Add curl-devel, libexpat-devel, libgsm-devel, speex-devel and
  pkgconfig(libxml-2.0) BuildRequires, to enable optional features.</changelog>
  <changelog author="fisiu@opensuse.org" date="1323086400">- Fix include path (/usr/local) in .pc file.
- Replace -devel with pkgconfig() in BuildRequires.
- Fix license notation according to spdx.</changelog>
  <changelog author="sbrabec@suse.cz" date="1325246400">- Apply /usr/local include work-around for 12.1 only (bnc#719176).</changelog>
  <changelog author="fisiu@opensuse.org" date="1326974400">- Update to version 1.11.1, bugfix release:
  + improved SSL support with GnuTLS library
  + improved pkg-config handling
  + improved conversion of invalid UTF-8 sequence
  + improved hostname resolving on systems without gethostbyname_r()</changelog>
  <changelog author="fisiu@opensuse.org" date="1340107200">- Update to version 1.11.2, bugfix release:
  + improved hostname resolving in singlethread applications.</changelog>
  <changelog author="fisiu@opensuse.org" date="1399809600">- Update to version 1.11.4, bugfix release:
  + Fix buffer overflow with remote code execution potential.
    Only triggerable by a Gadu-Gadu server or a man-in-the-middle.
    CVE-2013-6487 (bnc#861019, bnc#878540)
  + Fix memory overwrite in file transfer with proxy server.
    CVE-2014-3775 (bnc#878540)
  + Minor fixes reported by Pidgin project members.</changelog>
  <changelog author="twasilczyk@pidgin.im" date="1403006400">- Update to version 1.12.0:
  + supports GG11 protocol
  + important SSL-related API improvements
  + OpenSSL is disabled by default
  + pthread is a default hostname resolving method now
  + stability improvements
- Updated dependencies
  + libgsm and speex are not used at all
  + libexpat, libcurl and libxml are used only for automatic tests
  + libprotobuf-c is an optional dependency
- Removed unnecessary --with-pthread switch (it's default now)</changelog>
  <changelog author="fisiu@opensuse.org" date="1422964800">- Update to version 1.12.1, bugfix release:
  + improved compatibility with GG11 protocol
  + fix segfaults when got incorrect reply from public catalog
  + fixes related to proxy servers</changelog>
  <changelog author="fisiu@opensuse.org" date="1496750400">- Update to version 1.12.2, bugfix release:
  + fixes overwriting memory when updating contacts list
  + fixes TLS connection and improve gnutls errors handling
  + fixes disconnection when joining to room with title set
  + other small fixes</changelog>
</package>
<package pkgid="72070f9a91fd744473e2bc8b1ec32f4ba99f934f025030a2b6855868cfbef97a" name="libgadu3" arch="ppc64le">
  <version epoch="0" ver="1.12.2" rel="150000.3.2.1"/>
  <changelog author="fisiu@opensuse.org" date="1307620800">- Update to version 1.11.0:
  + contacts import/export compatible with gadu-gadu 10
  + improved sockets management with direct connections
  + detailed report when connection fails
  + enhanced confirmation for delivered message
  + improved message conversion from html to plain text</changelog>
  <changelog author="vuntz@opensuse.org" date="1308312000">- Change pkgconfig(openssl) BuildRequires to gnutls-devel as this
  seems to be preferred.
- Add curl-devel, libexpat-devel, libgsm-devel, speex-devel and
  pkgconfig(libxml-2.0) BuildRequires, to enable optional features.</changelog>
  <changelog author="fisiu@opensuse.org" date="1323086400">- Fix include path (/usr/local) in .pc file.
- Replace -devel with pkgconfig() in BuildRequires.
- Fix license notation according to spdx.</changelog>
  <changelog author="sbrabec@suse.cz" date="1325246400">- Apply /usr/local include work-around for 12.1 only (bnc#719176).</changelog>
  <changelog author="fisiu@opensuse.org" date="1326974400">- Update to version 1.11.1, bugfix release:
  + improved SSL support with GnuTLS library
  + improved pkg-config handling
  + improved conversion of invalid UTF-8 sequence
  + improved hostname resolving on systems without gethostbyname_r()</changelog>
  <changelog author="fisiu@opensuse.org" date="1340107200">- Update to version 1.11.2, bugfix release:
  + improved hostname resolving in singlethread applications.</changelog>
  <changelog author="fisiu@opensuse.org" date="1399809600">- Update to version 1.11.4, bugfix release:
  + Fix buffer overflow with remote code execution potential.
    Only triggerable by a Gadu-Gadu server or a man-in-the-middle.
    CVE-2013-6487 (bnc#861019, bnc#878540)
  + Fix memory overwrite in file transfer with proxy server.
    CVE-2014-3775 (bnc#878540)
  + Minor fixes reported by Pidgin project members.</changelog>
  <changelog author="twasilczyk@pidgin.im" date="1403006400">- Update to version 1.12.0:
  + supports GG11 protocol
  + important SSL-related API improvements
  + OpenSSL is disabled by default
  + pthread is a default hostname resolving method now
  + stability improvements
- Updated dependencies
  + libgsm and speex are not used at all
  + libexpat, libcurl and libxml are used only for automatic tests
  + libprotobuf-c is an optional dependency
- Removed unnecessary --with-pthread switch (it's default now)</changelog>
  <changelog author="fisiu@opensuse.org" date="1422964800">- Update to version 1.12.1, bugfix release:
  + improved compatibility with GG11 protocol
  + fix segfaults when got incorrect reply from public catalog
  + fixes related to proxy servers</changelog>
  <changelog author="fisiu@opensuse.org" date="1496750400">- Update to version 1.12.2, bugfix release:
  + fixes overwriting memory when updating contacts list
  + fixes TLS connection and improve gnutls errors handling
  + fixes disconnection when joining to room with title set
  + other small fixes</changelog>
</package>
<package pkgid="693ffa3d4ae391f2c2e68881bcbc0286040a1abe522afb1c6fb562232d025d87" name="libgadu3" arch="s390x">
  <version epoch="0" ver="1.12.2" rel="150000.3.2.1"/>
  <changelog author="fisiu@opensuse.org" date="1307620800">- Update to version 1.11.0:
  + contacts import/export compatible with gadu-gadu 10
  + improved sockets management with direct connections
  + detailed report when connection fails
  + enhanced confirmation for delivered message
  + improved message conversion from html to plain text</changelog>
  <changelog author="vuntz@opensuse.org" date="1308312000">- Change pkgconfig(openssl) BuildRequires to gnutls-devel as this
  seems to be preferred.
- Add curl-devel, libexpat-devel, libgsm-devel, speex-devel and
  pkgconfig(libxml-2.0) BuildRequires, to enable optional features.</changelog>
  <changelog author="fisiu@opensuse.org" date="1323086400">- Fix include path (/usr/local) in .pc file.
- Replace -devel with pkgconfig() in BuildRequires.
- Fix license notation according to spdx.</changelog>
  <changelog author="sbrabec@suse.cz" date="1325246400">- Apply /usr/local include work-around for 12.1 only (bnc#719176).</changelog>
  <changelog author="fisiu@opensuse.org" date="1326974400">- Update to version 1.11.1, bugfix release:
  + improved SSL support with GnuTLS library
  + improved pkg-config handling
  + improved conversion of invalid UTF-8 sequence
  + improved hostname resolving on systems without gethostbyname_r()</changelog>
  <changelog author="fisiu@opensuse.org" date="1340107200">- Update to version 1.11.2, bugfix release:
  + improved hostname resolving in singlethread applications.</changelog>
  <changelog author="fisiu@opensuse.org" date="1399809600">- Update to version 1.11.4, bugfix release:
  + Fix buffer overflow with remote code execution potential.
    Only triggerable by a Gadu-Gadu server or a man-in-the-middle.
    CVE-2013-6487 (bnc#861019, bnc#878540)
  + Fix memory overwrite in file transfer with proxy server.
    CVE-2014-3775 (bnc#878540)
  + Minor fixes reported by Pidgin project members.</changelog>
  <changelog author="twasilczyk@pidgin.im" date="1403006400">- Update to version 1.12.0:
  + supports GG11 protocol
  + important SSL-related API improvements
  + OpenSSL is disabled by default
  + pthread is a default hostname resolving method now
  + stability improvements
- Updated dependencies
  + libgsm and speex are not used at all
  + libexpat, libcurl and libxml are used only for automatic tests
  + libprotobuf-c is an optional dependency
- Removed unnecessary --with-pthread switch (it's default now)</changelog>
  <changelog author="fisiu@opensuse.org" date="1422964800">- Update to version 1.12.1, bugfix release:
  + improved compatibility with GG11 protocol
  + fix segfaults when got incorrect reply from public catalog
  + fixes related to proxy servers</changelog>
  <changelog author="fisiu@opensuse.org" date="1496750400">- Update to version 1.12.2, bugfix release:
  + fixes overwriting memory when updating contacts list
  + fixes TLS connection and improve gnutls errors handling
  + fixes disconnection when joining to room with title set
  + other small fixes</changelog>
</package>
<package pkgid="e8fa4612f7c9d6f735c43d44e127dcf3037ec0f8ff721c3f274863492a7063ed" name="libgadu3" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="150000.3.2.1"/>
  <changelog author="fisiu@opensuse.org" date="1307620800">- Update to version 1.11.0:
  + contacts import/export compatible with gadu-gadu 10
  + improved sockets management with direct connections
  + detailed report when connection fails
  + enhanced confirmation for delivered message
  + improved message conversion from html to plain text</changelog>
  <changelog author="vuntz@opensuse.org" date="1308312000">- Change pkgconfig(openssl) BuildRequires to gnutls-devel as this
  seems to be preferred.
- Add curl-devel, libexpat-devel, libgsm-devel, speex-devel and
  pkgconfig(libxml-2.0) BuildRequires, to enable optional features.</changelog>
  <changelog author="fisiu@opensuse.org" date="1323086400">- Fix include path (/usr/local) in .pc file.
- Replace -devel with pkgconfig() in BuildRequires.
- Fix license notation according to spdx.</changelog>
  <changelog author="sbrabec@suse.cz" date="1325246400">- Apply /usr/local include work-around for 12.1 only (bnc#719176).</changelog>
  <changelog author="fisiu@opensuse.org" date="1326974400">- Update to version 1.11.1, bugfix release:
  + improved SSL support with GnuTLS library
  + improved pkg-config handling
  + improved conversion of invalid UTF-8 sequence
  + improved hostname resolving on systems without gethostbyname_r()</changelog>
  <changelog author="fisiu@opensuse.org" date="1340107200">- Update to version 1.11.2, bugfix release:
  + improved hostname resolving in singlethread applications.</changelog>
  <changelog author="fisiu@opensuse.org" date="1399809600">- Update to version 1.11.4, bugfix release:
  + Fix buffer overflow with remote code execution potential.
    Only triggerable by a Gadu-Gadu server or a man-in-the-middle.
    CVE-2013-6487 (bnc#861019, bnc#878540)
  + Fix memory overwrite in file transfer with proxy server.
    CVE-2014-3775 (bnc#878540)
  + Minor fixes reported by Pidgin project members.</changelog>
  <changelog author="twasilczyk@pidgin.im" date="1403006400">- Update to version 1.12.0:
  + supports GG11 protocol
  + important SSL-related API improvements
  + OpenSSL is disabled by default
  + pthread is a default hostname resolving method now
  + stability improvements
- Updated dependencies
  + libgsm and speex are not used at all
  + libexpat, libcurl and libxml are used only for automatic tests
  + libprotobuf-c is an optional dependency
- Removed unnecessary --with-pthread switch (it's default now)</changelog>
  <changelog author="fisiu@opensuse.org" date="1422964800">- Update to version 1.12.1, bugfix release:
  + improved compatibility with GG11 protocol
  + fix segfaults when got incorrect reply from public catalog
  + fixes related to proxy servers</changelog>
  <changelog author="fisiu@opensuse.org" date="1496750400">- Update to version 1.12.2, bugfix release:
  + fixes overwriting memory when updating contacts list
  + fixes TLS connection and improve gnutls errors handling
  + fixes disconnection when joining to room with title set
  + other small fixes</changelog>
</package>
<package pkgid="8172b6d240ecd9a5805c38aa8f769a104c2978c8d3c07ffab402a66c8df9aec6" name="libgcc_s1" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="c84ca9004b5610442226a7b01d14f71af2d2ed6832a7802a6353092020085c87" name="libgcc_s1" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="e24ca3cccfd1ad6256a5d729e74dcf91318c2687431f9db264f67c3cbd7f7dc3" name="libgcc_s1" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="0a76b3bf45ce5396154ce6765c71900f5f3714f4960dd13e24a6b34355cb4d41" name="libgcc_s1" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="0ab4a1ac043675b24e3f99f41e9d31b1b42173752d79e96e61980f70abb3754d" name="libgcc_s1-32bit" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="4a94187ad2b684a70ca045d615a53b71c042093faa89ee76df14ecd8150afd22" name="libgcc_s1-32bit" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="5aff163637fee037143f58e3d974fab0e89a25e3fe41e96f34b6f4c4b007fc11" name="libgdruntime2" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="7e0db35f26089abf8b7d851fad8651a15ca4b18ebc807bd9f847287535b17aa0" name="libgdruntime2" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="7948d1b0e6f1787b6d8e384dbcceeadfa7f620f2c5d4096e104c0b49104c86c9" name="libgdruntime2" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="a75ea04f141838c086f981ceadb363b41a4daf9b75ae851743620035335e82c8" name="libgdruntime2-32bit" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="e3a12d388ee72385e86772e6d2b76537f04842e8f5eb12837b8a6700c1abadaa" name="libgdruntime2-32bit" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="62efa57cdf8155ad184ccd1f3b1c4edcb8564ddc25510155bb1d32882e1da557" name="libgfortran5" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="fb8afe65a87489b9e9e1db495ef1b2331834539c760bb44d544e2409f6fb901f" name="libgfortran5" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="d26d9b6ae7a73cbe2b6b13598eec1d95b8fe8c7ab0b1042a358a762201a93d02" name="libgfortran5" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="31421b8d4d06e7faccde10e47fdb51de2bf531275dea27b3d1b713a1a6609a02" name="libgfortran5" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="2c0bf88770b8ce94615f45e96d45974f6d2916836c5b4ee082df44537f2f573d" name="libgfortran5-32bit" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="40028087985d0e860591d1380566bcc3b5498c16b1e5a62e290a7982dc968c01" name="libgfortran5-32bit" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="e4aae43871e789bc57a12ba8aa912eb8c745ebf6d9c84526039b5ba423b69fa7" name="libgif7-32bit" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="150000.4.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1421236800">- Update to version 5.1.1
  + Numerous minor fixes in getarg.c. Affects only the utilities, not the
    core library.
  + Fix SourceForge bug #59 DGifOpen can segfault if DGifGetScreenDesc fails.
  + SourceForge patch #20: In gifalloc, fix usage of realloc() in case of failure.
  + Fix SourceForge bug #61 Leak in gifsponge.
  + glibtoolize port fix for OS X.</changelog>
  <changelog author="tchvatal@suse.com" date="1421323200">- Cleanup a bit
- Remove obsolete sle10 deprecations
- Fix one tiny rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1453204800">- Update to version 5.1.2 (fixes CVE-2015-7555, bsc#960319)
  * Code Fixes
    + Code hardening using reallocarray() from OpenBSD.
    + Sanity check in giffilter catches files with malformed
  extension records. Fixes SourceForge bug #63: malformed gif
  causes segfault in giffilter.
  + Inexpensive sanity check in DGifSlurp() catches malformed files
    with  no image descriptor. Fixes SourceForge bug #64: malformed
  gif causes crash in giftool.
  + Fix SourceForge bug #66: GifDrawBoxedText8x8() modifying
    constant input parameter.
  + Bail out of GIF read on invalid pixel width. Addresses Savannah
    bug #67: invalid shift in dgif_lib.c
  + Fix SourceForge bug #69: #69 Malformed: Gif file with no
    extension block after a GRAPHICS_EXT_FUNC_CODE extension causes
  segfault (in giftext).
  + Fix SourceForge bug #71: Buffer overwrite when giffixing a
    malformed gif.
  + Fix SourceForge bug #73: Null pointer deference in gifclrmap
    (only reachable with malformed GIF).
  + Fix SourceForge bug #74: Double free in gifsponge under 5.1,1,
    for any valid gif image.
  + Fix SourceForge bug #75: GAGetArgs overflows due to uncounted
    use of va_arg.
  + Sanity check in giffix catches some malformed files. Addresses
    SourceForge bug #77: dgif_lib.c: extension processing error
- Modified patches:
  * giflib-automake-1_13.patch
  * giflib-visibility.patch
    + rediff to changed context</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 5.1.3
  * Prevent malloc randomess from causing the header output routine
  to emit a GIF89 version string even when no GIF89 features are
  present.
  * Prevent malloc randomess from producing sporadic failures by causing
  sanity checks added in 5.1.2 to misfire.
  * Bulletproof gif2rgb against 0-height images. Addressed sf#78:
  Heap overflow in gif2rgb with images of size 0, also sf#82.
  * Remove unnecessary duplicate EGifClose() in gifcolor.c. Fixes sf#83
  introduced in 5.1.2.
  * Fix sf#84: incorrect return of DGifSlurp().
- Add giflib-sf-88.patch to fix sf#88</changelog>
  <changelog author="fstrba@suse.com" date="1460462400">- Update to version 5.1.4
  * Fix SF bug #94: giflib 5 loves to fail to load images... a LOT.
  * Fix SF Bug #92: Fix buffer overread in gifbuild.
  * Fix SF Bug #93: Add bounds check in gifbuild netscape2.0 path
  * Fix SF Bug #89: Fix buffer overread in gifbuild.
- Removed patch:
  * giflib-sf-88.patch
    + Integrated upstream
- Added patch:
  * giflib-CVE-2016-3977.patch
  - Fix CVE-2016-3977: heap buffer overflow in gif2rgb
    (bsc#974847)</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Added fix-autoconf11.patch for fixing build with older autoconf,
  requires for SLE11.</changelog>
  <changelog author="bwiedemann@suse.com" date="1499256000">- Keep timestamps before patch updates them to fix build-compare</changelog>
  <changelog author="schwab@suse.de" date="1541764800">- Remove unused build requires on X libraries
- Use %license</changelog>
  <changelog author="elimat@opensuse.org" date="1594382400">- Update to version 5.2.1
  * In gifbuild.c, avoid a core dump on no color map.
  * Restore inadvertently removed library version numbers in Makefile.
- Changes in version 5.2.0
  * The undocumented and deprecated GifQuantizeBuffer() entry point
    has been moved to the util library to reduce libgif size and attack
    surface. Applications needing this function are couraged to link the
    util library or make their own copy.
  * The following obsolete utility programs are no longer installed:
    gifecho, giffilter, gifinto, gifsponge. These were either installed in
    error or have been obsolesced by modern image-transformmation tools
    like ImageMagick convert. They may be removed entirely in a future
    release.
  * Address SourceForge issue #136: Stack-buffer-overflow in gifcolor.c:84
  * Address SF bug #134: Giflib fails to slurp significant number of gifs
  * Apply SPDX convention for license tagging.
- Changes in version 5.1.9
  * The documentation directory now includes an HTMlified version of the
    GIF89 standard, and a more detailed description of how LZW compression
    is applied to GIFs.
  * Address SF bug #129: The latest version of giflib cannot be build on windows.
  * Address SF bug #126: Cannot compile giflib using c89
- Changes in version 5.1.8
  * Address SF bug #119: MemorySanitizer: FPE on unknown address (CVE-2019-15133 bsc#1146299)
  * Address SF bug #125: 5.1.7: xmlto is still required for tarball
  * Address SF bug #124: 5.1.7: ar invocation is not crosscompile compatible
  * Address SF bug #122: 5.1.7 installs manpages to wrong directory
  * Address SF bug #121: make: getversion: Command not found
  * Address SF bug #120: 5.1.7 does not build a proper library - no
- Changes in version 5.1.7
  * Correct a minor packaging error (superfluous symlinks) in the 5.1.6 tarballs.
- Changes in version 5.1.6
  * Fix library installation in the Makefile.
- Changes in version 5.1.5
  * Fix SF bug #114: Null dereferences in main() of gifclrmp
  * Fix SF bug #113: Heap Buffer Overflow-2 in function DGifDecompressLine()
    in cgif.c.  This had been assigned (CVE-2018-11490 bsc#1094832).
  * Fix SF bug #111: segmentation fault in PrintCodeBlock
  * Fix SF bug #109: Segmentation fault of giftool reading a crafted file
  * Fix SF bug #107: Floating point exception in giftext utility
  * Fix SF bug #105: heap buffer overflow in DumpScreen2RGB in gif2rgb.c:317
  * Fix SF bug #104: Ineffective bounds check in DGifSlurp
  * Fix SF bug #103: GIFLIB 5.1.4: DGifSlurp fails on empty comment
  * Fix SF bug #87: Heap buffer overflow in 5.1.2 (gif2rgb). (CVE-2016-3977 bsc#974847)
  * The horrible old autoconf build system has been removed with extreme prejudice.
    You now build this simply by running "make" from the top-level directory.
- Run spec-cleaner
- Drop patches fixed upstream:
  * giflib-visibility.patch
  * giflib-automake-1_13.patch
  * giflib-CVE-2016-3977.patch
  * fix-autoconf11.patch
- Change build system to Make only (upstream not using autoconf)</changelog>
  <changelog author="fstrba@suse.com" date="1618401600">- Added patch:
  * PIE.patch
    + build path independent objects and inherit CFLAGS from the
    build system (bsc#1184123)</changelog>
  <changelog author="olaf@aepfle.de" date="1618488000">- prep section should just extract and patch,
  further modifications have to be done in the build section</changelog>
</package>
<package pkgid="924df8c8a9463c1c5bc94ef393c3107a47dc16860eb8b71c4e55e2b9a2aa4b80" name="libgif7" arch="aarch64">
  <version epoch="0" ver="5.2.1" rel="150000.4.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1421236800">- Update to version 5.1.1
  + Numerous minor fixes in getarg.c. Affects only the utilities, not the
    core library.
  + Fix SourceForge bug #59 DGifOpen can segfault if DGifGetScreenDesc fails.
  + SourceForge patch #20: In gifalloc, fix usage of realloc() in case of failure.
  + Fix SourceForge bug #61 Leak in gifsponge.
  + glibtoolize port fix for OS X.</changelog>
  <changelog author="tchvatal@suse.com" date="1421323200">- Cleanup a bit
- Remove obsolete sle10 deprecations
- Fix one tiny rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1453204800">- Update to version 5.1.2 (fixes CVE-2015-7555, bsc#960319)
  * Code Fixes
    + Code hardening using reallocarray() from OpenBSD.
    + Sanity check in giffilter catches files with malformed
  extension records. Fixes SourceForge bug #63: malformed gif
  causes segfault in giffilter.
  + Inexpensive sanity check in DGifSlurp() catches malformed files
    with  no image descriptor. Fixes SourceForge bug #64: malformed
  gif causes crash in giftool.
  + Fix SourceForge bug #66: GifDrawBoxedText8x8() modifying
    constant input parameter.
  + Bail out of GIF read on invalid pixel width. Addresses Savannah
    bug #67: invalid shift in dgif_lib.c
  + Fix SourceForge bug #69: #69 Malformed: Gif file with no
    extension block after a GRAPHICS_EXT_FUNC_CODE extension causes
  segfault (in giftext).
  + Fix SourceForge bug #71: Buffer overwrite when giffixing a
    malformed gif.
  + Fix SourceForge bug #73: Null pointer deference in gifclrmap
    (only reachable with malformed GIF).
  + Fix SourceForge bug #74: Double free in gifsponge under 5.1,1,
    for any valid gif image.
  + Fix SourceForge bug #75: GAGetArgs overflows due to uncounted
    use of va_arg.
  + Sanity check in giffix catches some malformed files. Addresses
    SourceForge bug #77: dgif_lib.c: extension processing error
- Modified patches:
  * giflib-automake-1_13.patch
  * giflib-visibility.patch
    + rediff to changed context</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 5.1.3
  * Prevent malloc randomess from causing the header output routine
  to emit a GIF89 version string even when no GIF89 features are
  present.
  * Prevent malloc randomess from producing sporadic failures by causing
  sanity checks added in 5.1.2 to misfire.
  * Bulletproof gif2rgb against 0-height images. Addressed sf#78:
  Heap overflow in gif2rgb with images of size 0, also sf#82.
  * Remove unnecessary duplicate EGifClose() in gifcolor.c. Fixes sf#83
  introduced in 5.1.2.
  * Fix sf#84: incorrect return of DGifSlurp().
- Add giflib-sf-88.patch to fix sf#88</changelog>
  <changelog author="fstrba@suse.com" date="1460462400">- Update to version 5.1.4
  * Fix SF bug #94: giflib 5 loves to fail to load images... a LOT.
  * Fix SF Bug #92: Fix buffer overread in gifbuild.
  * Fix SF Bug #93: Add bounds check in gifbuild netscape2.0 path
  * Fix SF Bug #89: Fix buffer overread in gifbuild.
- Removed patch:
  * giflib-sf-88.patch
    + Integrated upstream
- Added patch:
  * giflib-CVE-2016-3977.patch
  - Fix CVE-2016-3977: heap buffer overflow in gif2rgb
    (bsc#974847)</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Added fix-autoconf11.patch for fixing build with older autoconf,
  requires for SLE11.</changelog>
  <changelog author="bwiedemann@suse.com" date="1499256000">- Keep timestamps before patch updates them to fix build-compare</changelog>
  <changelog author="schwab@suse.de" date="1541764800">- Remove unused build requires on X libraries
- Use %license</changelog>
  <changelog author="elimat@opensuse.org" date="1594382400">- Update to version 5.2.1
  * In gifbuild.c, avoid a core dump on no color map.
  * Restore inadvertently removed library version numbers in Makefile.
- Changes in version 5.2.0
  * The undocumented and deprecated GifQuantizeBuffer() entry point
    has been moved to the util library to reduce libgif size and attack
    surface. Applications needing this function are couraged to link the
    util library or make their own copy.
  * The following obsolete utility programs are no longer installed:
    gifecho, giffilter, gifinto, gifsponge. These were either installed in
    error or have been obsolesced by modern image-transformmation tools
    like ImageMagick convert. They may be removed entirely in a future
    release.
  * Address SourceForge issue #136: Stack-buffer-overflow in gifcolor.c:84
  * Address SF bug #134: Giflib fails to slurp significant number of gifs
  * Apply SPDX convention for license tagging.
- Changes in version 5.1.9
  * The documentation directory now includes an HTMlified version of the
    GIF89 standard, and a more detailed description of how LZW compression
    is applied to GIFs.
  * Address SF bug #129: The latest version of giflib cannot be build on windows.
  * Address SF bug #126: Cannot compile giflib using c89
- Changes in version 5.1.8
  * Address SF bug #119: MemorySanitizer: FPE on unknown address (CVE-2019-15133 bsc#1146299)
  * Address SF bug #125: 5.1.7: xmlto is still required for tarball
  * Address SF bug #124: 5.1.7: ar invocation is not crosscompile compatible
  * Address SF bug #122: 5.1.7 installs manpages to wrong directory
  * Address SF bug #121: make: getversion: Command not found
  * Address SF bug #120: 5.1.7 does not build a proper library - no
- Changes in version 5.1.7
  * Correct a minor packaging error (superfluous symlinks) in the 5.1.6 tarballs.
- Changes in version 5.1.6
  * Fix library installation in the Makefile.
- Changes in version 5.1.5
  * Fix SF bug #114: Null dereferences in main() of gifclrmp
  * Fix SF bug #113: Heap Buffer Overflow-2 in function DGifDecompressLine()
    in cgif.c.  This had been assigned (CVE-2018-11490 bsc#1094832).
  * Fix SF bug #111: segmentation fault in PrintCodeBlock
  * Fix SF bug #109: Segmentation fault of giftool reading a crafted file
  * Fix SF bug #107: Floating point exception in giftext utility
  * Fix SF bug #105: heap buffer overflow in DumpScreen2RGB in gif2rgb.c:317
  * Fix SF bug #104: Ineffective bounds check in DGifSlurp
  * Fix SF bug #103: GIFLIB 5.1.4: DGifSlurp fails on empty comment
  * Fix SF bug #87: Heap buffer overflow in 5.1.2 (gif2rgb). (CVE-2016-3977 bsc#974847)
  * The horrible old autoconf build system has been removed with extreme prejudice.
    You now build this simply by running "make" from the top-level directory.
- Run spec-cleaner
- Drop patches fixed upstream:
  * giflib-visibility.patch
  * giflib-automake-1_13.patch
  * giflib-CVE-2016-3977.patch
  * fix-autoconf11.patch
- Change build system to Make only (upstream not using autoconf)</changelog>
  <changelog author="fstrba@suse.com" date="1618401600">- Added patch:
  * PIE.patch
    + build path independent objects and inherit CFLAGS from the
    build system (bsc#1184123)</changelog>
  <changelog author="olaf@aepfle.de" date="1618488000">- prep section should just extract and patch,
  further modifications have to be done in the build section</changelog>
</package>
<package pkgid="477558f2a83c830145833c354d45e28a00f34b3f89c6fa0831c6a334306c9c58" name="libgif7" arch="ppc64le">
  <version epoch="0" ver="5.2.1" rel="150000.4.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1421236800">- Update to version 5.1.1
  + Numerous minor fixes in getarg.c. Affects only the utilities, not the
    core library.
  + Fix SourceForge bug #59 DGifOpen can segfault if DGifGetScreenDesc fails.
  + SourceForge patch #20: In gifalloc, fix usage of realloc() in case of failure.
  + Fix SourceForge bug #61 Leak in gifsponge.
  + glibtoolize port fix for OS X.</changelog>
  <changelog author="tchvatal@suse.com" date="1421323200">- Cleanup a bit
- Remove obsolete sle10 deprecations
- Fix one tiny rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1453204800">- Update to version 5.1.2 (fixes CVE-2015-7555, bsc#960319)
  * Code Fixes
    + Code hardening using reallocarray() from OpenBSD.
    + Sanity check in giffilter catches files with malformed
  extension records. Fixes SourceForge bug #63: malformed gif
  causes segfault in giffilter.
  + Inexpensive sanity check in DGifSlurp() catches malformed files
    with  no image descriptor. Fixes SourceForge bug #64: malformed
  gif causes crash in giftool.
  + Fix SourceForge bug #66: GifDrawBoxedText8x8() modifying
    constant input parameter.
  + Bail out of GIF read on invalid pixel width. Addresses Savannah
    bug #67: invalid shift in dgif_lib.c
  + Fix SourceForge bug #69: #69 Malformed: Gif file with no
    extension block after a GRAPHICS_EXT_FUNC_CODE extension causes
  segfault (in giftext).
  + Fix SourceForge bug #71: Buffer overwrite when giffixing a
    malformed gif.
  + Fix SourceForge bug #73: Null pointer deference in gifclrmap
    (only reachable with malformed GIF).
  + Fix SourceForge bug #74: Double free in gifsponge under 5.1,1,
    for any valid gif image.
  + Fix SourceForge bug #75: GAGetArgs overflows due to uncounted
    use of va_arg.
  + Sanity check in giffix catches some malformed files. Addresses
    SourceForge bug #77: dgif_lib.c: extension processing error
- Modified patches:
  * giflib-automake-1_13.patch
  * giflib-visibility.patch
    + rediff to changed context</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 5.1.3
  * Prevent malloc randomess from causing the header output routine
  to emit a GIF89 version string even when no GIF89 features are
  present.
  * Prevent malloc randomess from producing sporadic failures by causing
  sanity checks added in 5.1.2 to misfire.
  * Bulletproof gif2rgb against 0-height images. Addressed sf#78:
  Heap overflow in gif2rgb with images of size 0, also sf#82.
  * Remove unnecessary duplicate EGifClose() in gifcolor.c. Fixes sf#83
  introduced in 5.1.2.
  * Fix sf#84: incorrect return of DGifSlurp().
- Add giflib-sf-88.patch to fix sf#88</changelog>
  <changelog author="fstrba@suse.com" date="1460462400">- Update to version 5.1.4
  * Fix SF bug #94: giflib 5 loves to fail to load images... a LOT.
  * Fix SF Bug #92: Fix buffer overread in gifbuild.
  * Fix SF Bug #93: Add bounds check in gifbuild netscape2.0 path
  * Fix SF Bug #89: Fix buffer overread in gifbuild.
- Removed patch:
  * giflib-sf-88.patch
    + Integrated upstream
- Added patch:
  * giflib-CVE-2016-3977.patch
  - Fix CVE-2016-3977: heap buffer overflow in gif2rgb
    (bsc#974847)</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Added fix-autoconf11.patch for fixing build with older autoconf,
  requires for SLE11.</changelog>
  <changelog author="bwiedemann@suse.com" date="1499256000">- Keep timestamps before patch updates them to fix build-compare</changelog>
  <changelog author="schwab@suse.de" date="1541764800">- Remove unused build requires on X libraries
- Use %license</changelog>
  <changelog author="elimat@opensuse.org" date="1594382400">- Update to version 5.2.1
  * In gifbuild.c, avoid a core dump on no color map.
  * Restore inadvertently removed library version numbers in Makefile.
- Changes in version 5.2.0
  * The undocumented and deprecated GifQuantizeBuffer() entry point
    has been moved to the util library to reduce libgif size and attack
    surface. Applications needing this function are couraged to link the
    util library or make their own copy.
  * The following obsolete utility programs are no longer installed:
    gifecho, giffilter, gifinto, gifsponge. These were either installed in
    error or have been obsolesced by modern image-transformmation tools
    like ImageMagick convert. They may be removed entirely in a future
    release.
  * Address SourceForge issue #136: Stack-buffer-overflow in gifcolor.c:84
  * Address SF bug #134: Giflib fails to slurp significant number of gifs
  * Apply SPDX convention for license tagging.
- Changes in version 5.1.9
  * The documentation directory now includes an HTMlified version of the
    GIF89 standard, and a more detailed description of how LZW compression
    is applied to GIFs.
  * Address SF bug #129: The latest version of giflib cannot be build on windows.
  * Address SF bug #126: Cannot compile giflib using c89
- Changes in version 5.1.8
  * Address SF bug #119: MemorySanitizer: FPE on unknown address (CVE-2019-15133 bsc#1146299)
  * Address SF bug #125: 5.1.7: xmlto is still required for tarball
  * Address SF bug #124: 5.1.7: ar invocation is not crosscompile compatible
  * Address SF bug #122: 5.1.7 installs manpages to wrong directory
  * Address SF bug #121: make: getversion: Command not found
  * Address SF bug #120: 5.1.7 does not build a proper library - no
- Changes in version 5.1.7
  * Correct a minor packaging error (superfluous symlinks) in the 5.1.6 tarballs.
- Changes in version 5.1.6
  * Fix library installation in the Makefile.
- Changes in version 5.1.5
  * Fix SF bug #114: Null dereferences in main() of gifclrmp
  * Fix SF bug #113: Heap Buffer Overflow-2 in function DGifDecompressLine()
    in cgif.c.  This had been assigned (CVE-2018-11490 bsc#1094832).
  * Fix SF bug #111: segmentation fault in PrintCodeBlock
  * Fix SF bug #109: Segmentation fault of giftool reading a crafted file
  * Fix SF bug #107: Floating point exception in giftext utility
  * Fix SF bug #105: heap buffer overflow in DumpScreen2RGB in gif2rgb.c:317
  * Fix SF bug #104: Ineffective bounds check in DGifSlurp
  * Fix SF bug #103: GIFLIB 5.1.4: DGifSlurp fails on empty comment
  * Fix SF bug #87: Heap buffer overflow in 5.1.2 (gif2rgb). (CVE-2016-3977 bsc#974847)
  * The horrible old autoconf build system has been removed with extreme prejudice.
    You now build this simply by running "make" from the top-level directory.
- Run spec-cleaner
- Drop patches fixed upstream:
  * giflib-visibility.patch
  * giflib-automake-1_13.patch
  * giflib-CVE-2016-3977.patch
  * fix-autoconf11.patch
- Change build system to Make only (upstream not using autoconf)</changelog>
  <changelog author="fstrba@suse.com" date="1618401600">- Added patch:
  * PIE.patch
    + build path independent objects and inherit CFLAGS from the
    build system (bsc#1184123)</changelog>
  <changelog author="olaf@aepfle.de" date="1618488000">- prep section should just extract and patch,
  further modifications have to be done in the build section</changelog>
</package>
<package pkgid="615cb9d541d8c31c4b87e0d6a3319233e10c06d9c46916ac3e1b0fc14b951248" name="libgif7" arch="s390x">
  <version epoch="0" ver="5.2.1" rel="150000.4.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1421236800">- Update to version 5.1.1
  + Numerous minor fixes in getarg.c. Affects only the utilities, not the
    core library.
  + Fix SourceForge bug #59 DGifOpen can segfault if DGifGetScreenDesc fails.
  + SourceForge patch #20: In gifalloc, fix usage of realloc() in case of failure.
  + Fix SourceForge bug #61 Leak in gifsponge.
  + glibtoolize port fix for OS X.</changelog>
  <changelog author="tchvatal@suse.com" date="1421323200">- Cleanup a bit
- Remove obsolete sle10 deprecations
- Fix one tiny rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1453204800">- Update to version 5.1.2 (fixes CVE-2015-7555, bsc#960319)
  * Code Fixes
    + Code hardening using reallocarray() from OpenBSD.
    + Sanity check in giffilter catches files with malformed
  extension records. Fixes SourceForge bug #63: malformed gif
  causes segfault in giffilter.
  + Inexpensive sanity check in DGifSlurp() catches malformed files
    with  no image descriptor. Fixes SourceForge bug #64: malformed
  gif causes crash in giftool.
  + Fix SourceForge bug #66: GifDrawBoxedText8x8() modifying
    constant input parameter.
  + Bail out of GIF read on invalid pixel width. Addresses Savannah
    bug #67: invalid shift in dgif_lib.c
  + Fix SourceForge bug #69: #69 Malformed: Gif file with no
    extension block after a GRAPHICS_EXT_FUNC_CODE extension causes
  segfault (in giftext).
  + Fix SourceForge bug #71: Buffer overwrite when giffixing a
    malformed gif.
  + Fix SourceForge bug #73: Null pointer deference in gifclrmap
    (only reachable with malformed GIF).
  + Fix SourceForge bug #74: Double free in gifsponge under 5.1,1,
    for any valid gif image.
  + Fix SourceForge bug #75: GAGetArgs overflows due to uncounted
    use of va_arg.
  + Sanity check in giffix catches some malformed files. Addresses
    SourceForge bug #77: dgif_lib.c: extension processing error
- Modified patches:
  * giflib-automake-1_13.patch
  * giflib-visibility.patch
    + rediff to changed context</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 5.1.3
  * Prevent malloc randomess from causing the header output routine
  to emit a GIF89 version string even when no GIF89 features are
  present.
  * Prevent malloc randomess from producing sporadic failures by causing
  sanity checks added in 5.1.2 to misfire.
  * Bulletproof gif2rgb against 0-height images. Addressed sf#78:
  Heap overflow in gif2rgb with images of size 0, also sf#82.
  * Remove unnecessary duplicate EGifClose() in gifcolor.c. Fixes sf#83
  introduced in 5.1.2.
  * Fix sf#84: incorrect return of DGifSlurp().
- Add giflib-sf-88.patch to fix sf#88</changelog>
  <changelog author="fstrba@suse.com" date="1460462400">- Update to version 5.1.4
  * Fix SF bug #94: giflib 5 loves to fail to load images... a LOT.
  * Fix SF Bug #92: Fix buffer overread in gifbuild.
  * Fix SF Bug #93: Add bounds check in gifbuild netscape2.0 path
  * Fix SF Bug #89: Fix buffer overread in gifbuild.
- Removed patch:
  * giflib-sf-88.patch
    + Integrated upstream
- Added patch:
  * giflib-CVE-2016-3977.patch
  - Fix CVE-2016-3977: heap buffer overflow in gif2rgb
    (bsc#974847)</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Added fix-autoconf11.patch for fixing build with older autoconf,
  requires for SLE11.</changelog>
  <changelog author="bwiedemann@suse.com" date="1499256000">- Keep timestamps before patch updates them to fix build-compare</changelog>
  <changelog author="schwab@suse.de" date="1541764800">- Remove unused build requires on X libraries
- Use %license</changelog>
  <changelog author="elimat@opensuse.org" date="1594382400">- Update to version 5.2.1
  * In gifbuild.c, avoid a core dump on no color map.
  * Restore inadvertently removed library version numbers in Makefile.
- Changes in version 5.2.0
  * The undocumented and deprecated GifQuantizeBuffer() entry point
    has been moved to the util library to reduce libgif size and attack
    surface. Applications needing this function are couraged to link the
    util library or make their own copy.
  * The following obsolete utility programs are no longer installed:
    gifecho, giffilter, gifinto, gifsponge. These were either installed in
    error or have been obsolesced by modern image-transformmation tools
    like ImageMagick convert. They may be removed entirely in a future
    release.
  * Address SourceForge issue #136: Stack-buffer-overflow in gifcolor.c:84
  * Address SF bug #134: Giflib fails to slurp significant number of gifs
  * Apply SPDX convention for license tagging.
- Changes in version 5.1.9
  * The documentation directory now includes an HTMlified version of the
    GIF89 standard, and a more detailed description of how LZW compression
    is applied to GIFs.
  * Address SF bug #129: The latest version of giflib cannot be build on windows.
  * Address SF bug #126: Cannot compile giflib using c89
- Changes in version 5.1.8
  * Address SF bug #119: MemorySanitizer: FPE on unknown address (CVE-2019-15133 bsc#1146299)
  * Address SF bug #125: 5.1.7: xmlto is still required for tarball
  * Address SF bug #124: 5.1.7: ar invocation is not crosscompile compatible
  * Address SF bug #122: 5.1.7 installs manpages to wrong directory
  * Address SF bug #121: make: getversion: Command not found
  * Address SF bug #120: 5.1.7 does not build a proper library - no
- Changes in version 5.1.7
  * Correct a minor packaging error (superfluous symlinks) in the 5.1.6 tarballs.
- Changes in version 5.1.6
  * Fix library installation in the Makefile.
- Changes in version 5.1.5
  * Fix SF bug #114: Null dereferences in main() of gifclrmp
  * Fix SF bug #113: Heap Buffer Overflow-2 in function DGifDecompressLine()
    in cgif.c.  This had been assigned (CVE-2018-11490 bsc#1094832).
  * Fix SF bug #111: segmentation fault in PrintCodeBlock
  * Fix SF bug #109: Segmentation fault of giftool reading a crafted file
  * Fix SF bug #107: Floating point exception in giftext utility
  * Fix SF bug #105: heap buffer overflow in DumpScreen2RGB in gif2rgb.c:317
  * Fix SF bug #104: Ineffective bounds check in DGifSlurp
  * Fix SF bug #103: GIFLIB 5.1.4: DGifSlurp fails on empty comment
  * Fix SF bug #87: Heap buffer overflow in 5.1.2 (gif2rgb). (CVE-2016-3977 bsc#974847)
  * The horrible old autoconf build system has been removed with extreme prejudice.
    You now build this simply by running "make" from the top-level directory.
- Run spec-cleaner
- Drop patches fixed upstream:
  * giflib-visibility.patch
  * giflib-automake-1_13.patch
  * giflib-CVE-2016-3977.patch
  * fix-autoconf11.patch
- Change build system to Make only (upstream not using autoconf)</changelog>
  <changelog author="fstrba@suse.com" date="1618401600">- Added patch:
  * PIE.patch
    + build path independent objects and inherit CFLAGS from the
    build system (bsc#1184123)</changelog>
  <changelog author="olaf@aepfle.de" date="1618488000">- prep section should just extract and patch,
  further modifications have to be done in the build section</changelog>
</package>
<package pkgid="e2e064692940d0c471368cc077a59458e69bc38eff3434008faa89d31e5bfc92" name="libgif7" arch="x86_64">
  <version epoch="0" ver="5.2.1" rel="150000.4.8.1"/>
  <changelog author="p.drouand@gmail.com" date="1421236800">- Update to version 5.1.1
  + Numerous minor fixes in getarg.c. Affects only the utilities, not the
    core library.
  + Fix SourceForge bug #59 DGifOpen can segfault if DGifGetScreenDesc fails.
  + SourceForge patch #20: In gifalloc, fix usage of realloc() in case of failure.
  + Fix SourceForge bug #61 Leak in gifsponge.
  + glibtoolize port fix for OS X.</changelog>
  <changelog author="tchvatal@suse.com" date="1421323200">- Cleanup a bit
- Remove obsolete sle10 deprecations
- Fix one tiny rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1453204800">- Update to version 5.1.2 (fixes CVE-2015-7555, bsc#960319)
  * Code Fixes
    + Code hardening using reallocarray() from OpenBSD.
    + Sanity check in giffilter catches files with malformed
  extension records. Fixes SourceForge bug #63: malformed gif
  causes segfault in giffilter.
  + Inexpensive sanity check in DGifSlurp() catches malformed files
    with  no image descriptor. Fixes SourceForge bug #64: malformed
  gif causes crash in giftool.
  + Fix SourceForge bug #66: GifDrawBoxedText8x8() modifying
    constant input parameter.
  + Bail out of GIF read on invalid pixel width. Addresses Savannah
    bug #67: invalid shift in dgif_lib.c
  + Fix SourceForge bug #69: #69 Malformed: Gif file with no
    extension block after a GRAPHICS_EXT_FUNC_CODE extension causes
  segfault (in giftext).
  + Fix SourceForge bug #71: Buffer overwrite when giffixing a
    malformed gif.
  + Fix SourceForge bug #73: Null pointer deference in gifclrmap
    (only reachable with malformed GIF).
  + Fix SourceForge bug #74: Double free in gifsponge under 5.1,1,
    for any valid gif image.
  + Fix SourceForge bug #75: GAGetArgs overflows due to uncounted
    use of va_arg.
  + Sanity check in giffix catches some malformed files. Addresses
    SourceForge bug #77: dgif_lib.c: extension processing error
- Modified patches:
  * giflib-automake-1_13.patch
  * giflib-visibility.patch
    + rediff to changed context</changelog>
  <changelog author="idonmez@suse.com" date="1458734400">- Update to version 5.1.3
  * Prevent malloc randomess from causing the header output routine
  to emit a GIF89 version string even when no GIF89 features are
  present.
  * Prevent malloc randomess from producing sporadic failures by causing
  sanity checks added in 5.1.2 to misfire.
  * Bulletproof gif2rgb against 0-height images. Addressed sf#78:
  Heap overflow in gif2rgb with images of size 0, also sf#82.
  * Remove unnecessary duplicate EGifClose() in gifcolor.c. Fixes sf#83
  introduced in 5.1.2.
  * Fix sf#84: incorrect return of DGifSlurp().
- Add giflib-sf-88.patch to fix sf#88</changelog>
  <changelog author="fstrba@suse.com" date="1460462400">- Update to version 5.1.4
  * Fix SF bug #94: giflib 5 loves to fail to load images... a LOT.
  * Fix SF Bug #92: Fix buffer overread in gifbuild.
  * Fix SF Bug #93: Add bounds check in gifbuild netscape2.0 path
  * Fix SF Bug #89: Fix buffer overread in gifbuild.
- Removed patch:
  * giflib-sf-88.patch
    + Integrated upstream
- Added patch:
  * giflib-CVE-2016-3977.patch
  - Fix CVE-2016-3977: heap buffer overflow in gif2rgb
    (bsc#974847)</changelog>
  <changelog author="rpm@fthiessen.de" date="1463140800">- Added fix-autoconf11.patch for fixing build with older autoconf,
  requires for SLE11.</changelog>
  <changelog author="bwiedemann@suse.com" date="1499256000">- Keep timestamps before patch updates them to fix build-compare</changelog>
  <changelog author="schwab@suse.de" date="1541764800">- Remove unused build requires on X libraries
- Use %license</changelog>
  <changelog author="elimat@opensuse.org" date="1594382400">- Update to version 5.2.1
  * In gifbuild.c, avoid a core dump on no color map.
  * Restore inadvertently removed library version numbers in Makefile.
- Changes in version 5.2.0
  * The undocumented and deprecated GifQuantizeBuffer() entry point
    has been moved to the util library to reduce libgif size and attack
    surface. Applications needing this function are couraged to link the
    util library or make their own copy.
  * The following obsolete utility programs are no longer installed:
    gifecho, giffilter, gifinto, gifsponge. These were either installed in
    error or have been obsolesced by modern image-transformmation tools
    like ImageMagick convert. They may be removed entirely in a future
    release.
  * Address SourceForge issue #136: Stack-buffer-overflow in gifcolor.c:84
  * Address SF bug #134: Giflib fails to slurp significant number of gifs
  * Apply SPDX convention for license tagging.
- Changes in version 5.1.9
  * The documentation directory now includes an HTMlified version of the
    GIF89 standard, and a more detailed description of how LZW compression
    is applied to GIFs.
  * Address SF bug #129: The latest version of giflib cannot be build on windows.
  * Address SF bug #126: Cannot compile giflib using c89
- Changes in version 5.1.8
  * Address SF bug #119: MemorySanitizer: FPE on unknown address (CVE-2019-15133 bsc#1146299)
  * Address SF bug #125: 5.1.7: xmlto is still required for tarball
  * Address SF bug #124: 5.1.7: ar invocation is not crosscompile compatible
  * Address SF bug #122: 5.1.7 installs manpages to wrong directory
  * Address SF bug #121: make: getversion: Command not found
  * Address SF bug #120: 5.1.7 does not build a proper library - no
- Changes in version 5.1.7
  * Correct a minor packaging error (superfluous symlinks) in the 5.1.6 tarballs.
- Changes in version 5.1.6
  * Fix library installation in the Makefile.
- Changes in version 5.1.5
  * Fix SF bug #114: Null dereferences in main() of gifclrmp
  * Fix SF bug #113: Heap Buffer Overflow-2 in function DGifDecompressLine()
    in cgif.c.  This had been assigned (CVE-2018-11490 bsc#1094832).
  * Fix SF bug #111: segmentation fault in PrintCodeBlock
  * Fix SF bug #109: Segmentation fault of giftool reading a crafted file
  * Fix SF bug #107: Floating point exception in giftext utility
  * Fix SF bug #105: heap buffer overflow in DumpScreen2RGB in gif2rgb.c:317
  * Fix SF bug #104: Ineffective bounds check in DGifSlurp
  * Fix SF bug #103: GIFLIB 5.1.4: DGifSlurp fails on empty comment
  * Fix SF bug #87: Heap buffer overflow in 5.1.2 (gif2rgb). (CVE-2016-3977 bsc#974847)
  * The horrible old autoconf build system has been removed with extreme prejudice.
    You now build this simply by running "make" from the top-level directory.
- Run spec-cleaner
- Drop patches fixed upstream:
  * giflib-visibility.patch
  * giflib-automake-1_13.patch
  * giflib-CVE-2016-3977.patch
  * fix-autoconf11.patch
- Change build system to Make only (upstream not using autoconf)</changelog>
  <changelog author="fstrba@suse.com" date="1618401600">- Added patch:
  * PIE.patch
    + build path independent objects and inherit CFLAGS from the
    build system (bsc#1184123)</changelog>
  <changelog author="olaf@aepfle.de" date="1618488000">- prep section should just extract and patch,
  further modifications have to be done in the build section</changelog>
</package>
<package pkgid="70f4c75345ea99f67d91b99a46c5c5bc3dfc48797e51780c7f67317b1e6429e3" name="libgio-fam" arch="aarch64">
  <version epoch="0" ver="2.62.6" rel="150200.3.9.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1560254400">- Update to version 2.60.4:
  + Fixes to improved network status detection with NetworkManager.
  + Leak fixes to some `glib-genmarshal` generated code.
  + Further fixes to the Happy Eyeballs (RFC 8305) implementation.
  + File system permissions fix to clamp down permissions in a
    small time window when copying files (CVE-2019-12450).
  + Bugs fixed: glgo#GNOME/GLib#1755, glgo#GNOME/GLib#1788,
    glgo#GNOME/GLib#1792, glgo#GNOME/GLib#1793,
    glgo#GNOME/GLib#1795, glgo#GNOME/GLib!865, glgo#GNOME/GLib!878.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562673600">- Update to version 2.60.5:
  + Fix implicit use of the `GKeyfileSettingsBackend`.
  + Fix opening a URI using the ?Open URI? portal.
  + Bugs fixed: glgo#GNOME/GLib!910, glgo#GNOME/GLib!949,
    glgo#GNOME/GLib!956, glgo#GNOME/GLib!958, glgo#GNOME/GLib!969,
    glgo#GNOME/GLib!977.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563019200">- Add glib2-keyfile-handle-filename-being-null.patch: key file:
  Handle filename being NULL (glgo#GNOME/GLib!1825,
  glgo#GNOME/GLib#984).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563969600">- Update to version 2.60.6:
  + Fix various bugs with use of the `GKeyfileSettingsBackend`
    within flatpaks (glgo#GNOME/GLib!984, glgo#GNOME/GLib!985,
    glgo#GNOME/GLib#1825).
  + Bugs fixed: glgo#GNOME/GLib!993, glgo#GNOME/GLib!984,
    glgo#GNOME/GLib!985.
- Drop glib2-keyfile-handle-filename-being-null.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567425600">- Update to version 2.60.7:
  + Bugs fixed: glgo#GNOME/GLib#1819, glgo#GNOME/GLib#1847,
    glgo#GNOME/GLib!1012, glgo#GNOME/GLib!1013,
    glgo#GNOME/GLib!1061, glgo#GNOME/GLib!1065,
    glgo#GNOME/GLib!1081.</changelog>
  <changelog author="dimstar@opensuse.org" date="1567425601">- Update to version 2.61.2:
  + Add various new array functions (#236, #269, #373).
  + Rework how D-Bus connections are closed/unreffed when
    `g_test_dbus_down()` is called. Tests which leak a
    `GDBusConnection` may now time out and abort, rather than
    silently leaking. (#787)
  + Add a deprecation macro for GLib macros, and use it;
    third-party uses of long-deprecated GLib macros may now start
    causing warnings. (#1060).
  + Deprecate `GTime` and `GTimeVal`, and various functions which
    use them. Use `GDateTime` and `guint64` UNIX timestamps
    instead.
  + Stop using `G_DISABLE_DEPRECATED` to allow disabling
    deprecation warnings; third-party code should now be using
    `GLIB_VERSION_{MIN_REQUIRED, MAX_ALLOWED}` to control symbol
    usage.
  + Improve `GNetworkMonitor` detection of offline states (#1788).
  + Fix CVE-2019-12450, wide permissions of files when copying
    using GIO.
- Changes from version 2.61.1:
  + Upgrade to Unicode Character Database v12.1.
  + Improve network availability detection with NetworkManager to
    treat lower levels of connectivity as having reduced
    availability.
- Changes from version 2.61.0:
  + Add coloured output support to `gdbus introspect.
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 2.61.3:
  + Support setting thread name on BSD systems.
  + Install previously-uninstalled headers for public
    `GNativeSocketAddress` object.
  + Very initial support for Windows apps (UWP).
  + Add various new valgrind suppressions to `glib.supp`.
  + Bugs fixed: glgo#GNOME/GLib!83, glgo#GNOME/GLib!512,
    glgo#GNOME/GLib!873, glgo#GNOME/GLib!905, glgo#GNOME/GLib!1057,
    glgo#GNOME/GLib!1309, glgo#GNOME/GLib!1620,
    glgo#GNOME/GLib!1761, glgo#GNOME/GLib!1803,
    glgo#GNOME/GLib!1819, glgo#GNOME/GLib!1852,
    glgo#GNOME/GLib!1854, glgo#GNOME/GLib!1860,
    glgo#GNOME/GLib!1863, glgo#GNOME/GLib!1867,
    glgo#GNOME/GLib!1870, glgo#GNOME/GLib!1879,
    glgo#GNOME/GLib!1880, glgo#GNOME/GLib!1881,
    glgo#GNOME/GLib!1002, glgo#GNOME/GLib!1011,
    glgo#GNOME/GLib!1015, glgo#GNOME/GLib!1016,
    glgo#GNOME/GLib!1017, glgo#GNOME/GLib!1023,
    glgo#GNOME/GLib!1026, glgo#GNOME/GLib!1027,
    glgo#GNOME/GLib!1031, glgo#GNOME/GLib!1032,
    glgo#GNOME/GLib!1033, glgo#GNOME/GLib!1034,
    glgo#GNOME/GLib!1036, glgo#GNOME/GLib!1037,
    glgo#GNOME/GLib!1044, glgo#GNOME/GLib!1049,
    glgo#GNOME/GLib!1050, glgo#GNOME/GLib!1054,
    glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1059,
    glgo#GNOME/GLib!1066, glgo#GNOME/GLib!1068,
    glgo#GNOME/GLib!1071, glgo#GNOME/GLib!1074,
    glgo#GNOME/GLib!1075.</changelog>
  <changelog author="luke@ljones.dev" date="1567684801">- Update to version 2.62.0:
  + Fix new `GFileInfo` APIs to work when
    `G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried.
  + Bugs fixed: glgo#GNOME/GLib#487, glgo#GNOME/GLib!1084,
    glgo#GNOME/GLib!1086,glgo#GNOME/GLib!1087.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570190400">- Update to version 2.62.1:
  + Fix regression in g_file_copy() when passing
    `G_FILE_COPY_TARGET_DEFAULT_PERMS` flag; the destination
    permissions would be private rather than following the process?
    umask.
  + Several `GDateTime` parsing fixes.
  + Always build the tests if installed-tests are enabled, so that
    the tests can actually be installed.
  + Bugs fixed: glgo#GNOME/GLib#174, glgo#GNOME/GLib#1865,
    glgo#GNOME/GLib#1875, glgo#GNOME/GLib#1887,
    glgo#GNOME/GLib#1888, glgo#GNOME/GLib!1021,
    glgo#GNOME/GLib!1094, glgo#GNOME/GLib!1101,
    glgo#GNOME/GLib!1102, glgo#GNOME/GLib!1103,
    glgo#GNOME/GLib!1127, glgo#GNOME/GLib!1128,
    glgo#GNOME/GLib!1140, glgo#GNOME/GLib!1141,
    glgo#GNOME/GLib!1142.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="mgorse@suse.com" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1614772800">- Add glib2-CVE-2021-27219-add-g_memdup2.patch: g_memdup takes a
  guint as parameter and sometimes leads into an integer overflow,
  so add a g_memdup2 function which uses gsize to replace it.
  (bsc#1182362, glgo#GNOME/glib!1927, glgo#GNOME/glib!1933,
  glgo#GNOME/glib!1943)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1614859200">- Add glib2-CVE-2021-27218.patch: g_byte_array_new_take takes a
  gsize as length but stores in a guint, this patch will refuse if
  the length is larger than guint. (bsc#1182328,
  glgo#GNOME/glib!1944)</changelog>
  <changelog author="mgorse@suse.com" date="1649851200">- Add glib2-CVE-2021-28153.patch: fix CREATE_REPLACE_DESTINATION
  with symlinks (boo#1183533 glgo#GNOME/glib#2325 CVE-2021-28153).</changelog>
</package>
<package pkgid="398fdd0df47f5fde98092f08c053edef7b52419b99c17dc6e8172f9d80854470" name="libgio-fam" arch="ppc64le">
  <version epoch="0" ver="2.62.6" rel="150200.3.9.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1560254400">- Update to version 2.60.4:
  + Fixes to improved network status detection with NetworkManager.
  + Leak fixes to some `glib-genmarshal` generated code.
  + Further fixes to the Happy Eyeballs (RFC 8305) implementation.
  + File system permissions fix to clamp down permissions in a
    small time window when copying files (CVE-2019-12450).
  + Bugs fixed: glgo#GNOME/GLib#1755, glgo#GNOME/GLib#1788,
    glgo#GNOME/GLib#1792, glgo#GNOME/GLib#1793,
    glgo#GNOME/GLib#1795, glgo#GNOME/GLib!865, glgo#GNOME/GLib!878.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562673600">- Update to version 2.60.5:
  + Fix implicit use of the `GKeyfileSettingsBackend`.
  + Fix opening a URI using the ?Open URI? portal.
  + Bugs fixed: glgo#GNOME/GLib!910, glgo#GNOME/GLib!949,
    glgo#GNOME/GLib!956, glgo#GNOME/GLib!958, glgo#GNOME/GLib!969,
    glgo#GNOME/GLib!977.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563019200">- Add glib2-keyfile-handle-filename-being-null.patch: key file:
  Handle filename being NULL (glgo#GNOME/GLib!1825,
  glgo#GNOME/GLib#984).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563969600">- Update to version 2.60.6:
  + Fix various bugs with use of the `GKeyfileSettingsBackend`
    within flatpaks (glgo#GNOME/GLib!984, glgo#GNOME/GLib!985,
    glgo#GNOME/GLib#1825).
  + Bugs fixed: glgo#GNOME/GLib!993, glgo#GNOME/GLib!984,
    glgo#GNOME/GLib!985.
- Drop glib2-keyfile-handle-filename-being-null.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567425600">- Update to version 2.60.7:
  + Bugs fixed: glgo#GNOME/GLib#1819, glgo#GNOME/GLib#1847,
    glgo#GNOME/GLib!1012, glgo#GNOME/GLib!1013,
    glgo#GNOME/GLib!1061, glgo#GNOME/GLib!1065,
    glgo#GNOME/GLib!1081.</changelog>
  <changelog author="dimstar@opensuse.org" date="1567425601">- Update to version 2.61.2:
  + Add various new array functions (#236, #269, #373).
  + Rework how D-Bus connections are closed/unreffed when
    `g_test_dbus_down()` is called. Tests which leak a
    `GDBusConnection` may now time out and abort, rather than
    silently leaking. (#787)
  + Add a deprecation macro for GLib macros, and use it;
    third-party uses of long-deprecated GLib macros may now start
    causing warnings. (#1060).
  + Deprecate `GTime` and `GTimeVal`, and various functions which
    use them. Use `GDateTime` and `guint64` UNIX timestamps
    instead.
  + Stop using `G_DISABLE_DEPRECATED` to allow disabling
    deprecation warnings; third-party code should now be using
    `GLIB_VERSION_{MIN_REQUIRED, MAX_ALLOWED}` to control symbol
    usage.
  + Improve `GNetworkMonitor` detection of offline states (#1788).
  + Fix CVE-2019-12450, wide permissions of files when copying
    using GIO.
- Changes from version 2.61.1:
  + Upgrade to Unicode Character Database v12.1.
  + Improve network availability detection with NetworkManager to
    treat lower levels of connectivity as having reduced
    availability.
- Changes from version 2.61.0:
  + Add coloured output support to `gdbus introspect.
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 2.61.3:
  + Support setting thread name on BSD systems.
  + Install previously-uninstalled headers for public
    `GNativeSocketAddress` object.
  + Very initial support for Windows apps (UWP).
  + Add various new valgrind suppressions to `glib.supp`.
  + Bugs fixed: glgo#GNOME/GLib!83, glgo#GNOME/GLib!512,
    glgo#GNOME/GLib!873, glgo#GNOME/GLib!905, glgo#GNOME/GLib!1057,
    glgo#GNOME/GLib!1309, glgo#GNOME/GLib!1620,
    glgo#GNOME/GLib!1761, glgo#GNOME/GLib!1803,
    glgo#GNOME/GLib!1819, glgo#GNOME/GLib!1852,
    glgo#GNOME/GLib!1854, glgo#GNOME/GLib!1860,
    glgo#GNOME/GLib!1863, glgo#GNOME/GLib!1867,
    glgo#GNOME/GLib!1870, glgo#GNOME/GLib!1879,
    glgo#GNOME/GLib!1880, glgo#GNOME/GLib!1881,
    glgo#GNOME/GLib!1002, glgo#GNOME/GLib!1011,
    glgo#GNOME/GLib!1015, glgo#GNOME/GLib!1016,
    glgo#GNOME/GLib!1017, glgo#GNOME/GLib!1023,
    glgo#GNOME/GLib!1026, glgo#GNOME/GLib!1027,
    glgo#GNOME/GLib!1031, glgo#GNOME/GLib!1032,
    glgo#GNOME/GLib!1033, glgo#GNOME/GLib!1034,
    glgo#GNOME/GLib!1036, glgo#GNOME/GLib!1037,
    glgo#GNOME/GLib!1044, glgo#GNOME/GLib!1049,
    glgo#GNOME/GLib!1050, glgo#GNOME/GLib!1054,
    glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1059,
    glgo#GNOME/GLib!1066, glgo#GNOME/GLib!1068,
    glgo#GNOME/GLib!1071, glgo#GNOME/GLib!1074,
    glgo#GNOME/GLib!1075.</changelog>
  <changelog author="luke@ljones.dev" date="1567684801">- Update to version 2.62.0:
  + Fix new `GFileInfo` APIs to work when
    `G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried.
  + Bugs fixed: glgo#GNOME/GLib#487, glgo#GNOME/GLib!1084,
    glgo#GNOME/GLib!1086,glgo#GNOME/GLib!1087.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570190400">- Update to version 2.62.1:
  + Fix regression in g_file_copy() when passing
    `G_FILE_COPY_TARGET_DEFAULT_PERMS` flag; the destination
    permissions would be private rather than following the process?
    umask.
  + Several `GDateTime` parsing fixes.
  + Always build the tests if installed-tests are enabled, so that
    the tests can actually be installed.
  + Bugs fixed: glgo#GNOME/GLib#174, glgo#GNOME/GLib#1865,
    glgo#GNOME/GLib#1875, glgo#GNOME/GLib#1887,
    glgo#GNOME/GLib#1888, glgo#GNOME/GLib!1021,
    glgo#GNOME/GLib!1094, glgo#GNOME/GLib!1101,
    glgo#GNOME/GLib!1102, glgo#GNOME/GLib!1103,
    glgo#GNOME/GLib!1127, glgo#GNOME/GLib!1128,
    glgo#GNOME/GLib!1140, glgo#GNOME/GLib!1141,
    glgo#GNOME/GLib!1142.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="mgorse@suse.com" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1614772800">- Add glib2-CVE-2021-27219-add-g_memdup2.patch: g_memdup takes a
  guint as parameter and sometimes leads into an integer overflow,
  so add a g_memdup2 function which uses gsize to replace it.
  (bsc#1182362, glgo#GNOME/glib!1927, glgo#GNOME/glib!1933,
  glgo#GNOME/glib!1943)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1614859200">- Add glib2-CVE-2021-27218.patch: g_byte_array_new_take takes a
  gsize as length but stores in a guint, this patch will refuse if
  the length is larger than guint. (bsc#1182328,
  glgo#GNOME/glib!1944)</changelog>
  <changelog author="mgorse@suse.com" date="1649851200">- Add glib2-CVE-2021-28153.patch: fix CREATE_REPLACE_DESTINATION
  with symlinks (boo#1183533 glgo#GNOME/glib#2325 CVE-2021-28153).</changelog>
</package>
<package pkgid="7a5d8286a988a93e70d1af2a8647b05a74f7f4216569a46ac675deb0610df924" name="libgio-fam" arch="s390x">
  <version epoch="0" ver="2.62.6" rel="150200.3.9.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1560254400">- Update to version 2.60.4:
  + Fixes to improved network status detection with NetworkManager.
  + Leak fixes to some `glib-genmarshal` generated code.
  + Further fixes to the Happy Eyeballs (RFC 8305) implementation.
  + File system permissions fix to clamp down permissions in a
    small time window when copying files (CVE-2019-12450).
  + Bugs fixed: glgo#GNOME/GLib#1755, glgo#GNOME/GLib#1788,
    glgo#GNOME/GLib#1792, glgo#GNOME/GLib#1793,
    glgo#GNOME/GLib#1795, glgo#GNOME/GLib!865, glgo#GNOME/GLib!878.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562673600">- Update to version 2.60.5:
  + Fix implicit use of the `GKeyfileSettingsBackend`.
  + Fix opening a URI using the ?Open URI? portal.
  + Bugs fixed: glgo#GNOME/GLib!910, glgo#GNOME/GLib!949,
    glgo#GNOME/GLib!956, glgo#GNOME/GLib!958, glgo#GNOME/GLib!969,
    glgo#GNOME/GLib!977.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563019200">- Add glib2-keyfile-handle-filename-being-null.patch: key file:
  Handle filename being NULL (glgo#GNOME/GLib!1825,
  glgo#GNOME/GLib#984).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563969600">- Update to version 2.60.6:
  + Fix various bugs with use of the `GKeyfileSettingsBackend`
    within flatpaks (glgo#GNOME/GLib!984, glgo#GNOME/GLib!985,
    glgo#GNOME/GLib#1825).
  + Bugs fixed: glgo#GNOME/GLib!993, glgo#GNOME/GLib!984,
    glgo#GNOME/GLib!985.
- Drop glib2-keyfile-handle-filename-being-null.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567425600">- Update to version 2.60.7:
  + Bugs fixed: glgo#GNOME/GLib#1819, glgo#GNOME/GLib#1847,
    glgo#GNOME/GLib!1012, glgo#GNOME/GLib!1013,
    glgo#GNOME/GLib!1061, glgo#GNOME/GLib!1065,
    glgo#GNOME/GLib!1081.</changelog>
  <changelog author="dimstar@opensuse.org" date="1567425601">- Update to version 2.61.2:
  + Add various new array functions (#236, #269, #373).
  + Rework how D-Bus connections are closed/unreffed when
    `g_test_dbus_down()` is called. Tests which leak a
    `GDBusConnection` may now time out and abort, rather than
    silently leaking. (#787)
  + Add a deprecation macro for GLib macros, and use it;
    third-party uses of long-deprecated GLib macros may now start
    causing warnings. (#1060).
  + Deprecate `GTime` and `GTimeVal`, and various functions which
    use them. Use `GDateTime` and `guint64` UNIX timestamps
    instead.
  + Stop using `G_DISABLE_DEPRECATED` to allow disabling
    deprecation warnings; third-party code should now be using
    `GLIB_VERSION_{MIN_REQUIRED, MAX_ALLOWED}` to control symbol
    usage.
  + Improve `GNetworkMonitor` detection of offline states (#1788).
  + Fix CVE-2019-12450, wide permissions of files when copying
    using GIO.
- Changes from version 2.61.1:
  + Upgrade to Unicode Character Database v12.1.
  + Improve network availability detection with NetworkManager to
    treat lower levels of connectivity as having reduced
    availability.
- Changes from version 2.61.0:
  + Add coloured output support to `gdbus introspect.
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 2.61.3:
  + Support setting thread name on BSD systems.
  + Install previously-uninstalled headers for public
    `GNativeSocketAddress` object.
  + Very initial support for Windows apps (UWP).
  + Add various new valgrind suppressions to `glib.supp`.
  + Bugs fixed: glgo#GNOME/GLib!83, glgo#GNOME/GLib!512,
    glgo#GNOME/GLib!873, glgo#GNOME/GLib!905, glgo#GNOME/GLib!1057,
    glgo#GNOME/GLib!1309, glgo#GNOME/GLib!1620,
    glgo#GNOME/GLib!1761, glgo#GNOME/GLib!1803,
    glgo#GNOME/GLib!1819, glgo#GNOME/GLib!1852,
    glgo#GNOME/GLib!1854, glgo#GNOME/GLib!1860,
    glgo#GNOME/GLib!1863, glgo#GNOME/GLib!1867,
    glgo#GNOME/GLib!1870, glgo#GNOME/GLib!1879,
    glgo#GNOME/GLib!1880, glgo#GNOME/GLib!1881,
    glgo#GNOME/GLib!1002, glgo#GNOME/GLib!1011,
    glgo#GNOME/GLib!1015, glgo#GNOME/GLib!1016,
    glgo#GNOME/GLib!1017, glgo#GNOME/GLib!1023,
    glgo#GNOME/GLib!1026, glgo#GNOME/GLib!1027,
    glgo#GNOME/GLib!1031, glgo#GNOME/GLib!1032,
    glgo#GNOME/GLib!1033, glgo#GNOME/GLib!1034,
    glgo#GNOME/GLib!1036, glgo#GNOME/GLib!1037,
    glgo#GNOME/GLib!1044, glgo#GNOME/GLib!1049,
    glgo#GNOME/GLib!1050, glgo#GNOME/GLib!1054,
    glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1059,
    glgo#GNOME/GLib!1066, glgo#GNOME/GLib!1068,
    glgo#GNOME/GLib!1071, glgo#GNOME/GLib!1074,
    glgo#GNOME/GLib!1075.</changelog>
  <changelog author="luke@ljones.dev" date="1567684801">- Update to version 2.62.0:
  + Fix new `GFileInfo` APIs to work when
    `G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried.
  + Bugs fixed: glgo#GNOME/GLib#487, glgo#GNOME/GLib!1084,
    glgo#GNOME/GLib!1086,glgo#GNOME/GLib!1087.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570190400">- Update to version 2.62.1:
  + Fix regression in g_file_copy() when passing
    `G_FILE_COPY_TARGET_DEFAULT_PERMS` flag; the destination
    permissions would be private rather than following the process?
    umask.
  + Several `GDateTime` parsing fixes.
  + Always build the tests if installed-tests are enabled, so that
    the tests can actually be installed.
  + Bugs fixed: glgo#GNOME/GLib#174, glgo#GNOME/GLib#1865,
    glgo#GNOME/GLib#1875, glgo#GNOME/GLib#1887,
    glgo#GNOME/GLib#1888, glgo#GNOME/GLib!1021,
    glgo#GNOME/GLib!1094, glgo#GNOME/GLib!1101,
    glgo#GNOME/GLib!1102, glgo#GNOME/GLib!1103,
    glgo#GNOME/GLib!1127, glgo#GNOME/GLib!1128,
    glgo#GNOME/GLib!1140, glgo#GNOME/GLib!1141,
    glgo#GNOME/GLib!1142.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="mgorse@suse.com" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1614772800">- Add glib2-CVE-2021-27219-add-g_memdup2.patch: g_memdup takes a
  guint as parameter and sometimes leads into an integer overflow,
  so add a g_memdup2 function which uses gsize to replace it.
  (bsc#1182362, glgo#GNOME/glib!1927, glgo#GNOME/glib!1933,
  glgo#GNOME/glib!1943)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1614859200">- Add glib2-CVE-2021-27218.patch: g_byte_array_new_take takes a
  gsize as length but stores in a guint, this patch will refuse if
  the length is larger than guint. (bsc#1182328,
  glgo#GNOME/glib!1944)</changelog>
  <changelog author="mgorse@suse.com" date="1649851200">- Add glib2-CVE-2021-28153.patch: fix CREATE_REPLACE_DESTINATION
  with symlinks (boo#1183533 glgo#GNOME/glib#2325 CVE-2021-28153).</changelog>
</package>
<package pkgid="13532ec6fcf2a487d661070645751ab20d693ae9219e15e2dd9655ad7c44b2e6" name="libgio-fam" arch="x86_64">
  <version epoch="0" ver="2.62.6" rel="150200.3.9.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1560254400">- Update to version 2.60.4:
  + Fixes to improved network status detection with NetworkManager.
  + Leak fixes to some `glib-genmarshal` generated code.
  + Further fixes to the Happy Eyeballs (RFC 8305) implementation.
  + File system permissions fix to clamp down permissions in a
    small time window when copying files (CVE-2019-12450).
  + Bugs fixed: glgo#GNOME/GLib#1755, glgo#GNOME/GLib#1788,
    glgo#GNOME/GLib#1792, glgo#GNOME/GLib#1793,
    glgo#GNOME/GLib#1795, glgo#GNOME/GLib!865, glgo#GNOME/GLib!878.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562673600">- Update to version 2.60.5:
  + Fix implicit use of the `GKeyfileSettingsBackend`.
  + Fix opening a URI using the ?Open URI? portal.
  + Bugs fixed: glgo#GNOME/GLib!910, glgo#GNOME/GLib!949,
    glgo#GNOME/GLib!956, glgo#GNOME/GLib!958, glgo#GNOME/GLib!969,
    glgo#GNOME/GLib!977.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563019200">- Add glib2-keyfile-handle-filename-being-null.patch: key file:
  Handle filename being NULL (glgo#GNOME/GLib!1825,
  glgo#GNOME/GLib#984).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563969600">- Update to version 2.60.6:
  + Fix various bugs with use of the `GKeyfileSettingsBackend`
    within flatpaks (glgo#GNOME/GLib!984, glgo#GNOME/GLib!985,
    glgo#GNOME/GLib#1825).
  + Bugs fixed: glgo#GNOME/GLib!993, glgo#GNOME/GLib!984,
    glgo#GNOME/GLib!985.
- Drop glib2-keyfile-handle-filename-being-null.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567425600">- Update to version 2.60.7:
  + Bugs fixed: glgo#GNOME/GLib#1819, glgo#GNOME/GLib#1847,
    glgo#GNOME/GLib!1012, glgo#GNOME/GLib!1013,
    glgo#GNOME/GLib!1061, glgo#GNOME/GLib!1065,
    glgo#GNOME/GLib!1081.</changelog>
  <changelog author="dimstar@opensuse.org" date="1567425601">- Update to version 2.61.2:
  + Add various new array functions (#236, #269, #373).
  + Rework how D-Bus connections are closed/unreffed when
    `g_test_dbus_down()` is called. Tests which leak a
    `GDBusConnection` may now time out and abort, rather than
    silently leaking. (#787)
  + Add a deprecation macro for GLib macros, and use it;
    third-party uses of long-deprecated GLib macros may now start
    causing warnings. (#1060).
  + Deprecate `GTime` and `GTimeVal`, and various functions which
    use them. Use `GDateTime` and `guint64` UNIX timestamps
    instead.
  + Stop using `G_DISABLE_DEPRECATED` to allow disabling
    deprecation warnings; third-party code should now be using
    `GLIB_VERSION_{MIN_REQUIRED, MAX_ALLOWED}` to control symbol
    usage.
  + Improve `GNetworkMonitor` detection of offline states (#1788).
  + Fix CVE-2019-12450, wide permissions of files when copying
    using GIO.
- Changes from version 2.61.1:
  + Upgrade to Unicode Character Database v12.1.
  + Improve network availability detection with NetworkManager to
    treat lower levels of connectivity as having reduced
    availability.
- Changes from version 2.61.0:
  + Add coloured output support to `gdbus introspect.
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 2.61.3:
  + Support setting thread name on BSD systems.
  + Install previously-uninstalled headers for public
    `GNativeSocketAddress` object.
  + Very initial support for Windows apps (UWP).
  + Add various new valgrind suppressions to `glib.supp`.
  + Bugs fixed: glgo#GNOME/GLib!83, glgo#GNOME/GLib!512,
    glgo#GNOME/GLib!873, glgo#GNOME/GLib!905, glgo#GNOME/GLib!1057,
    glgo#GNOME/GLib!1309, glgo#GNOME/GLib!1620,
    glgo#GNOME/GLib!1761, glgo#GNOME/GLib!1803,
    glgo#GNOME/GLib!1819, glgo#GNOME/GLib!1852,
    glgo#GNOME/GLib!1854, glgo#GNOME/GLib!1860,
    glgo#GNOME/GLib!1863, glgo#GNOME/GLib!1867,
    glgo#GNOME/GLib!1870, glgo#GNOME/GLib!1879,
    glgo#GNOME/GLib!1880, glgo#GNOME/GLib!1881,
    glgo#GNOME/GLib!1002, glgo#GNOME/GLib!1011,
    glgo#GNOME/GLib!1015, glgo#GNOME/GLib!1016,
    glgo#GNOME/GLib!1017, glgo#GNOME/GLib!1023,
    glgo#GNOME/GLib!1026, glgo#GNOME/GLib!1027,
    glgo#GNOME/GLib!1031, glgo#GNOME/GLib!1032,
    glgo#GNOME/GLib!1033, glgo#GNOME/GLib!1034,
    glgo#GNOME/GLib!1036, glgo#GNOME/GLib!1037,
    glgo#GNOME/GLib!1044, glgo#GNOME/GLib!1049,
    glgo#GNOME/GLib!1050, glgo#GNOME/GLib!1054,
    glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1059,
    glgo#GNOME/GLib!1066, glgo#GNOME/GLib!1068,
    glgo#GNOME/GLib!1071, glgo#GNOME/GLib!1074,
    glgo#GNOME/GLib!1075.</changelog>
  <changelog author="luke@ljones.dev" date="1567684801">- Update to version 2.62.0:
  + Fix new `GFileInfo` APIs to work when
    `G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried.
  + Bugs fixed: glgo#GNOME/GLib#487, glgo#GNOME/GLib!1084,
    glgo#GNOME/GLib!1086,glgo#GNOME/GLib!1087.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570190400">- Update to version 2.62.1:
  + Fix regression in g_file_copy() when passing
    `G_FILE_COPY_TARGET_DEFAULT_PERMS` flag; the destination
    permissions would be private rather than following the process?
    umask.
  + Several `GDateTime` parsing fixes.
  + Always build the tests if installed-tests are enabled, so that
    the tests can actually be installed.
  + Bugs fixed: glgo#GNOME/GLib#174, glgo#GNOME/GLib#1865,
    glgo#GNOME/GLib#1875, glgo#GNOME/GLib#1887,
    glgo#GNOME/GLib#1888, glgo#GNOME/GLib!1021,
    glgo#GNOME/GLib!1094, glgo#GNOME/GLib!1101,
    glgo#GNOME/GLib!1102, glgo#GNOME/GLib!1103,
    glgo#GNOME/GLib!1127, glgo#GNOME/GLib!1128,
    glgo#GNOME/GLib!1140, glgo#GNOME/GLib!1141,
    glgo#GNOME/GLib!1142.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="mgorse@suse.com" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1614772800">- Add glib2-CVE-2021-27219-add-g_memdup2.patch: g_memdup takes a
  guint as parameter and sometimes leads into an integer overflow,
  so add a g_memdup2 function which uses gsize to replace it.
  (bsc#1182362, glgo#GNOME/glib!1927, glgo#GNOME/glib!1933,
  glgo#GNOME/glib!1943)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1614859200">- Add glib2-CVE-2021-27218.patch: g_byte_array_new_take takes a
  gsize as length but stores in a guint, this patch will refuse if
  the length is larger than guint. (bsc#1182328,
  glgo#GNOME/glib!1944)</changelog>
  <changelog author="mgorse@suse.com" date="1649851200">- Add glib2-CVE-2021-28153.patch: fix CREATE_REPLACE_DESTINATION
  with symlinks (boo#1183533 glgo#GNOME/glib#2325 CVE-2021-28153).</changelog>
</package>
<package pkgid="65daeed8337b1e8487bef94fd775c39d1003e96b02e3b3f5f4475ff25af4e064" name="libgio-fam-32bit" arch="x86_64">
  <version epoch="0" ver="2.62.6" rel="150200.3.9.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1560254400">- Update to version 2.60.4:
  + Fixes to improved network status detection with NetworkManager.
  + Leak fixes to some `glib-genmarshal` generated code.
  + Further fixes to the Happy Eyeballs (RFC 8305) implementation.
  + File system permissions fix to clamp down permissions in a
    small time window when copying files (CVE-2019-12450).
  + Bugs fixed: glgo#GNOME/GLib#1755, glgo#GNOME/GLib#1788,
    glgo#GNOME/GLib#1792, glgo#GNOME/GLib#1793,
    glgo#GNOME/GLib#1795, glgo#GNOME/GLib!865, glgo#GNOME/GLib!878.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562673600">- Update to version 2.60.5:
  + Fix implicit use of the `GKeyfileSettingsBackend`.
  + Fix opening a URI using the ?Open URI? portal.
  + Bugs fixed: glgo#GNOME/GLib!910, glgo#GNOME/GLib!949,
    glgo#GNOME/GLib!956, glgo#GNOME/GLib!958, glgo#GNOME/GLib!969,
    glgo#GNOME/GLib!977.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563019200">- Add glib2-keyfile-handle-filename-being-null.patch: key file:
  Handle filename being NULL (glgo#GNOME/GLib!1825,
  glgo#GNOME/GLib#984).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1563969600">- Update to version 2.60.6:
  + Fix various bugs with use of the `GKeyfileSettingsBackend`
    within flatpaks (glgo#GNOME/GLib!984, glgo#GNOME/GLib!985,
    glgo#GNOME/GLib#1825).
  + Bugs fixed: glgo#GNOME/GLib!993, glgo#GNOME/GLib!984,
    glgo#GNOME/GLib!985.
- Drop glib2-keyfile-handle-filename-being-null.patch: Fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567425600">- Update to version 2.60.7:
  + Bugs fixed: glgo#GNOME/GLib#1819, glgo#GNOME/GLib#1847,
    glgo#GNOME/GLib!1012, glgo#GNOME/GLib!1013,
    glgo#GNOME/GLib!1061, glgo#GNOME/GLib!1065,
    glgo#GNOME/GLib!1081.</changelog>
  <changelog author="dimstar@opensuse.org" date="1567425601">- Update to version 2.61.2:
  + Add various new array functions (#236, #269, #373).
  + Rework how D-Bus connections are closed/unreffed when
    `g_test_dbus_down()` is called. Tests which leak a
    `GDBusConnection` may now time out and abort, rather than
    silently leaking. (#787)
  + Add a deprecation macro for GLib macros, and use it;
    third-party uses of long-deprecated GLib macros may now start
    causing warnings. (#1060).
  + Deprecate `GTime` and `GTimeVal`, and various functions which
    use them. Use `GDateTime` and `guint64` UNIX timestamps
    instead.
  + Stop using `G_DISABLE_DEPRECATED` to allow disabling
    deprecation warnings; third-party code should now be using
    `GLIB_VERSION_{MIN_REQUIRED, MAX_ALLOWED}` to control symbol
    usage.
  + Improve `GNetworkMonitor` detection of offline states (#1788).
  + Fix CVE-2019-12450, wide permissions of files when copying
    using GIO.
- Changes from version 2.61.1:
  + Upgrade to Unicode Character Database v12.1.
  + Improve network availability detection with NetworkManager to
    treat lower levels of connectivity as having reduced
    availability.
- Changes from version 2.61.0:
  + Add coloured output support to `gdbus introspect.
  + Updated translations.</changelog>
  <changelog author="luke@ljones.dev" date="1567684800">- Update to version 2.61.3:
  + Support setting thread name on BSD systems.
  + Install previously-uninstalled headers for public
    `GNativeSocketAddress` object.
  + Very initial support for Windows apps (UWP).
  + Add various new valgrind suppressions to `glib.supp`.
  + Bugs fixed: glgo#GNOME/GLib!83, glgo#GNOME/GLib!512,
    glgo#GNOME/GLib!873, glgo#GNOME/GLib!905, glgo#GNOME/GLib!1057,
    glgo#GNOME/GLib!1309, glgo#GNOME/GLib!1620,
    glgo#GNOME/GLib!1761, glgo#GNOME/GLib!1803,
    glgo#GNOME/GLib!1819, glgo#GNOME/GLib!1852,
    glgo#GNOME/GLib!1854, glgo#GNOME/GLib!1860,
    glgo#GNOME/GLib!1863, glgo#GNOME/GLib!1867,
    glgo#GNOME/GLib!1870, glgo#GNOME/GLib!1879,
    glgo#GNOME/GLib!1880, glgo#GNOME/GLib!1881,
    glgo#GNOME/GLib!1002, glgo#GNOME/GLib!1011,
    glgo#GNOME/GLib!1015, glgo#GNOME/GLib!1016,
    glgo#GNOME/GLib!1017, glgo#GNOME/GLib!1023,
    glgo#GNOME/GLib!1026, glgo#GNOME/GLib!1027,
    glgo#GNOME/GLib!1031, glgo#GNOME/GLib!1032,
    glgo#GNOME/GLib!1033, glgo#GNOME/GLib!1034,
    glgo#GNOME/GLib!1036, glgo#GNOME/GLib!1037,
    glgo#GNOME/GLib!1044, glgo#GNOME/GLib!1049,
    glgo#GNOME/GLib!1050, glgo#GNOME/GLib!1054,
    glgo#GNOME/GLib!1057, glgo#GNOME/GLib!1059,
    glgo#GNOME/GLib!1066, glgo#GNOME/GLib!1068,
    glgo#GNOME/GLib!1071, glgo#GNOME/GLib!1074,
    glgo#GNOME/GLib!1075.</changelog>
  <changelog author="luke@ljones.dev" date="1567684801">- Update to version 2.62.0:
  + Fix new `GFileInfo` APIs to work when
    `G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried.
  + Bugs fixed: glgo#GNOME/GLib#487, glgo#GNOME/GLib!1084,
    glgo#GNOME/GLib!1086,glgo#GNOME/GLib!1087.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1570190400">- Update to version 2.62.1:
  + Fix regression in g_file_copy() when passing
    `G_FILE_COPY_TARGET_DEFAULT_PERMS` flag; the destination
    permissions would be private rather than following the process?
    umask.
  + Several `GDateTime` parsing fixes.
  + Always build the tests if installed-tests are enabled, so that
    the tests can actually be installed.
  + Bugs fixed: glgo#GNOME/GLib#174, glgo#GNOME/GLib#1865,
    glgo#GNOME/GLib#1875, glgo#GNOME/GLib#1887,
    glgo#GNOME/GLib#1888, glgo#GNOME/GLib!1021,
    glgo#GNOME/GLib!1094, glgo#GNOME/GLib!1101,
    glgo#GNOME/GLib!1102, glgo#GNOME/GLib!1103,
    glgo#GNOME/GLib!1127, glgo#GNOME/GLib!1128,
    glgo#GNOME/GLib!1140, glgo#GNOME/GLib!1141,
    glgo#GNOME/GLib!1142.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1571659200">- Update to version 2.62.2:
  + Bugs fixed:
  - glgo#GNOME/GLib#1896: Use after free when calling
    g_dbus_connection_flush_sync() in a dedicated thread.
  - glgo#GNOME/GLib!1154: Backport glgo#GNOME/GLib!1152
    ?gwinhttpvfs: Handle g_get_prgname() returning NULL? to
    glib-2-62.
  - glgo#GNOME/GLib!1156: Backport glgo#GNOME/GLib!1146 Solaris
    fixes to glib-2-62.</changelog>
  <changelog author="mgorse@suse.com" date="1572955200">- Re-enable systemtap, and require systemtap-headers and
  systemtap-dtrace, rather than systemtap-sdt-devel, to avoid build
  cycle (boo#1145438).
- Own /usr/share/systemtap{|tapset} directories, since we no
  longer have systemtap-sdt-devel in BuildRequires.
- Disable lto if systemtap is enabled: build fails otherwise.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1574164800">- Update to version 2.62.3:
  + Use `poll()` in `g_spawn_sync()` rather than `select()`, which
    is subject to FD limits.
  + Fix undefined behaviour with `g_utf8_find_prev_char()`.
  + Bugs fixed: glgo#GNOME/GLib#954, glgo#GNOME/GLib#1318,
    glgo#GNOME/GLib#1897, glgo#GNOME/GLib#1903,
    glgo#GNOME/GLib#1916, glgo#GNOME/GLib#1917,
    glgo#GNOME/GLib!1174, glgo#GNOME/GLib!1184,
    glgo#GNOME/GLib!1194, glgo#GNOME/GLib!1203,
    glgo#GNOME/GLib!1207, glgo#GNOME/GLib!1215,
    glgo#GNOME/GLib!1219, glgo#GNOME/GLib!1222,
    glgo#GNOME/GLib!1228.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1576756800">- Update to version 2.62.4:
  + Apply recursion depth limits to variants in D-Bus messages.
  + Bugs fixed: glgo#GNOME/GLib#1938, glgo#GNOME/GLib!1240,
    glgo#GNOME/GLib!1257, glgo#GNOME/GLib!1266,
    glgo#GNOME/GLib!1276, glgo#GNOME/GLib!1290.</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1582027200">- Update to version 2.62.5:
  + Fix potential relative read when calling g_printerr(), which
    could lead to a denial of service from a setuid-root process
    being used to block access to the TTY for another user.
  + Fix SOCKS proxy resolver sometimes not being used when
    resolving addresses via Happy Eyeballs (CVE-2020-6750).
  + Several other Happy Eyeballs fixes for address resolution.
  + Fix parsing of full Julian day range from `$TZ` environment
    variable.
  + Several race condition/crash fixes.
  + Bugs fixed: glgo#GNOME/GLib#1919, glgo#GNOME/GLib#1995,
    glgo#GNOME/GLib#1999, glgo#GNOME/GLib!1323,
    glgo#GNOME/GLib!1331, glgo#GNOME/GLib!1352,
    glgo#GNOME/GLib!1361, glgo#GNOME/GLib!1365,
    glgo#GNOME/GLib!1370, glgo#GNOME/GLib!1371.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1584532800">- Update to version 2.62.6:
  + This is expected to be the final release in the 2.62.x stable
    series; maintenance effort will shift to the newer 2.64.x
    stable series now.
  + Fix SOCKS5 username/password authentication.
  + Exception handling fixes on Windows.
  + Bugs fixed: glgo#GNOME/GLib#1986, glgo#GNOME/GLib#1988,
    glgo#GNOME/GLib#2049, glgo#GNOME/GLib!1378,
    glgo#GNOME/GLib!1380, glgo#GNOME/GLib!1393,
    glgo#GNOME/GLib!1394, glgo#GNOME/GLib!1411.
  + Updated translations.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1604664000">- Add patches to support for slim format of timezone (bsc#1178346):
  + glib2-add-support-for-slim-timezone-format.patch: basic support
    for slim format (glgo#GNOME/glib!1533).
  + glib2-fix-6-days-until-the-end-of-the-month.patch: fix DST
    incorrect end day when using slim format
    (glgo#GNOME/glib!1683).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1614772800">- Add glib2-CVE-2021-27219-add-g_memdup2.patch: g_memdup takes a
  guint as parameter and sometimes leads into an integer overflow,
  so add a g_memdup2 function which uses gsize to replace it.
  (bsc#1182362, glgo#GNOME/glib!1927, glgo#GNOME/glib!1933,
  glgo#GNOME/glib!1943)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1614859200">- Add glib2-CVE-2021-27218.patch: g_byte_array_new_take takes a
  gsize as length but stores in a guint, this patch will refuse if
  the length is larger than guint. (bsc#1182328,
  glgo#GNOME/glib!1944)</changelog>
  <changelog author="mgorse@suse.com" date="1649851200">- Add glib2-CVE-2021-28153.patch: fix CREATE_REPLACE_DESTINATION
  with symlinks (boo#1183533 glgo#GNOME/glib#2325 CVE-2021-28153).</changelog>
</package>
<package pkgid="f87a1a3e6a1bac5f8d18eae2badba2593e2d787e453d5efc363348b4ec5a18ba" name="libglue-devel" arch="aarch64">
  <version epoch="0" ver="1.0.12+v1.git.1587474580.a5fda2bc" rel="150000.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560168000">- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)</changelog>
  <changelog author="xarbulu@suse.com" date="1587988800">- Update to version 1.0.12+v1.git.1587474580.a5fda2bc:
  * Fix EC2 stonith plugin (bsc#1169784)</changelog>
  <changelog author="varkoly@suse.com" date="1645704000">- (jsc#SLE-23490) (jsc#SLE-23491) (jsc#SLE-23492) (jsc#SLE-23494)
  IMDSv2 support in ec2 stonith agent
  * add upstream patch:
    0001-Update-external-ec2-to-support-IMDSv2.patch</changelog>
  <changelog author="varkoly@suse.com" date="1650456000">- Requesting cluster-glue bugfix (bsc#1197681)
  * Add upstream patch:
    0002-bugfix-for-comment-in-external-ec2.patch</changelog>
</package>
<package pkgid="0f4a6d7460c37424951f345394f506f29ba19364eebb4c941bd80ba1e59a22b3" name="libglue-devel" arch="ppc64le">
  <version epoch="0" ver="1.0.12+v1.git.1587474580.a5fda2bc" rel="150000.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560168000">- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)</changelog>
  <changelog author="xarbulu@suse.com" date="1587988800">- Update to version 1.0.12+v1.git.1587474580.a5fda2bc:
  * Fix EC2 stonith plugin (bsc#1169784)</changelog>
  <changelog author="varkoly@suse.com" date="1645704000">- (jsc#SLE-23490) (jsc#SLE-23491) (jsc#SLE-23492) (jsc#SLE-23494)
  IMDSv2 support in ec2 stonith agent
  * add upstream patch:
    0001-Update-external-ec2-to-support-IMDSv2.patch</changelog>
  <changelog author="varkoly@suse.com" date="1650456000">- Requesting cluster-glue bugfix (bsc#1197681)
  * Add upstream patch:
    0002-bugfix-for-comment-in-external-ec2.patch</changelog>
</package>
<package pkgid="292993b9ba0c9a78b45cf51b4866e3fb22f1b28c887f234991136f8caa97f49b" name="libglue-devel" arch="s390x">
  <version epoch="0" ver="1.0.12+v1.git.1587474580.a5fda2bc" rel="150000.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560168000">- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)</changelog>
  <changelog author="xarbulu@suse.com" date="1587988800">- Update to version 1.0.12+v1.git.1587474580.a5fda2bc:
  * Fix EC2 stonith plugin (bsc#1169784)</changelog>
  <changelog author="varkoly@suse.com" date="1645704000">- (jsc#SLE-23490) (jsc#SLE-23491) (jsc#SLE-23492) (jsc#SLE-23494)
  IMDSv2 support in ec2 stonith agent
  * add upstream patch:
    0001-Update-external-ec2-to-support-IMDSv2.patch</changelog>
  <changelog author="varkoly@suse.com" date="1650456000">- Requesting cluster-glue bugfix (bsc#1197681)
  * Add upstream patch:
    0002-bugfix-for-comment-in-external-ec2.patch</changelog>
</package>
<package pkgid="79fd70aab75cceaecdd4e00323857b695fa77a7e2ff6ebb5095e1c90cbdae14d" name="libglue-devel" arch="x86_64">
  <version epoch="0" ver="1.0.12+v1.git.1587474580.a5fda2bc" rel="150000.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560168000">- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)</changelog>
  <changelog author="xarbulu@suse.com" date="1587988800">- Update to version 1.0.12+v1.git.1587474580.a5fda2bc:
  * Fix EC2 stonith plugin (bsc#1169784)</changelog>
  <changelog author="varkoly@suse.com" date="1645704000">- (jsc#SLE-23490) (jsc#SLE-23491) (jsc#SLE-23492) (jsc#SLE-23494)
  IMDSv2 support in ec2 stonith agent
  * add upstream patch:
    0001-Update-external-ec2-to-support-IMDSv2.patch</changelog>
  <changelog author="varkoly@suse.com" date="1650456000">- Requesting cluster-glue bugfix (bsc#1197681)
  * Add upstream patch:
    0002-bugfix-for-comment-in-external-ec2.patch</changelog>
</package>
<package pkgid="22a62152e1db57c2ea00fe0c1c6279452d3454bc29ce0ae02ee151ab4b7e3549" name="libglue-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.12+v1.git.1587474580.a5fda2bc" rel="150000.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560168000">- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)</changelog>
  <changelog author="xarbulu@suse.com" date="1587988800">- Update to version 1.0.12+v1.git.1587474580.a5fda2bc:
  * Fix EC2 stonith plugin (bsc#1169784)</changelog>
  <changelog author="varkoly@suse.com" date="1645704000">- (jsc#SLE-23490) (jsc#SLE-23491) (jsc#SLE-23492) (jsc#SLE-23494)
  IMDSv2 support in ec2 stonith agent
  * add upstream patch:
    0001-Update-external-ec2-to-support-IMDSv2.patch</changelog>
  <changelog author="varkoly@suse.com" date="1650456000">- Requesting cluster-glue bugfix (bsc#1197681)
  * Add upstream patch:
    0002-bugfix-for-comment-in-external-ec2.patch</changelog>
</package>
<package pkgid="9c98e0937543ec1137044b636ba4ec4c60744cfc775506da0d5351cd7a6edca3" name="libglue2" arch="aarch64">
  <version epoch="0" ver="1.0.12+v1.git.1587474580.a5fda2bc" rel="150000.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560168000">- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)</changelog>
  <changelog author="xarbulu@suse.com" date="1587988800">- Update to version 1.0.12+v1.git.1587474580.a5fda2bc:
  * Fix EC2 stonith plugin (bsc#1169784)</changelog>
  <changelog author="varkoly@suse.com" date="1645704000">- (jsc#SLE-23490) (jsc#SLE-23491) (jsc#SLE-23492) (jsc#SLE-23494)
  IMDSv2 support in ec2 stonith agent
  * add upstream patch:
    0001-Update-external-ec2-to-support-IMDSv2.patch</changelog>
  <changelog author="varkoly@suse.com" date="1650456000">- Requesting cluster-glue bugfix (bsc#1197681)
  * Add upstream patch:
    0002-bugfix-for-comment-in-external-ec2.patch</changelog>
</package>
<package pkgid="19137a0c54adc1a489a4714b3b93592f5739890b2aaa86af0f046bce24621dfc" name="libglue2" arch="ppc64le">
  <version epoch="0" ver="1.0.12+v1.git.1587474580.a5fda2bc" rel="150000.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560168000">- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)</changelog>
  <changelog author="xarbulu@suse.com" date="1587988800">- Update to version 1.0.12+v1.git.1587474580.a5fda2bc:
  * Fix EC2 stonith plugin (bsc#1169784)</changelog>
  <changelog author="varkoly@suse.com" date="1645704000">- (jsc#SLE-23490) (jsc#SLE-23491) (jsc#SLE-23492) (jsc#SLE-23494)
  IMDSv2 support in ec2 stonith agent
  * add upstream patch:
    0001-Update-external-ec2-to-support-IMDSv2.patch</changelog>
  <changelog author="varkoly@suse.com" date="1650456000">- Requesting cluster-glue bugfix (bsc#1197681)
  * Add upstream patch:
    0002-bugfix-for-comment-in-external-ec2.patch</changelog>
</package>
<package pkgid="65a7f7226d1d2ba0a7038d96e528db4dfbe9507b6777ebdbea4b46f95e8f983d" name="libglue2" arch="s390x">
  <version epoch="0" ver="1.0.12+v1.git.1587474580.a5fda2bc" rel="150000.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560168000">- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)</changelog>
  <changelog author="xarbulu@suse.com" date="1587988800">- Update to version 1.0.12+v1.git.1587474580.a5fda2bc:
  * Fix EC2 stonith plugin (bsc#1169784)</changelog>
  <changelog author="varkoly@suse.com" date="1645704000">- (jsc#SLE-23490) (jsc#SLE-23491) (jsc#SLE-23492) (jsc#SLE-23494)
  IMDSv2 support in ec2 stonith agent
  * add upstream patch:
    0001-Update-external-ec2-to-support-IMDSv2.patch</changelog>
  <changelog author="varkoly@suse.com" date="1650456000">- Requesting cluster-glue bugfix (bsc#1197681)
  * Add upstream patch:
    0002-bugfix-for-comment-in-external-ec2.patch</changelog>
</package>
<package pkgid="ac0afb7e4f1098edd8a300cc8a5061014bb9ff91913c0a66d89a8d792380e059" name="libglue2" arch="x86_64">
  <version epoch="0" ver="1.0.12+v1.git.1587474580.a5fda2bc" rel="150000.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560168000">- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)</changelog>
  <changelog author="xarbulu@suse.com" date="1587988800">- Update to version 1.0.12+v1.git.1587474580.a5fda2bc:
  * Fix EC2 stonith plugin (bsc#1169784)</changelog>
  <changelog author="varkoly@suse.com" date="1645704000">- (jsc#SLE-23490) (jsc#SLE-23491) (jsc#SLE-23492) (jsc#SLE-23494)
  IMDSv2 support in ec2 stonith agent
  * add upstream patch:
    0001-Update-external-ec2-to-support-IMDSv2.patch</changelog>
  <changelog author="varkoly@suse.com" date="1650456000">- Requesting cluster-glue bugfix (bsc#1197681)
  * Add upstream patch:
    0002-bugfix-for-comment-in-external-ec2.patch</changelog>
</package>
<package pkgid="5e453fb1eb6c97236a63788e79fffdae99674ad7a14f4f18f44900a1c77c49a0" name="libglue2-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.12+v1.git.1587474580.a5fda2bc" rel="150000.3.14.1"/>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="kukuk@suse.de" date="1493812800">- Require user and group nobody</changelog>
  <changelog author="mliska@suse.cz" date="1495108800">- Add 0001-Fix-warnings-reported-by-GCC7.patch to fix bnc#1030241.</changelog>
  <changelog author="mliska@suse.cz" date="1495108801">- Remove openhpi support as the packages is going to be removed.</changelog>
  <changelog author="ygao@suse.com" date="1503489600">- Update to version 1.0.12+v1.git.1501749673.bdd95fd0:
  * stonith: external/vcenter: Reset returns success with RESETPOWERON=0 if vm is already off (bsc#1050908)
  * Remove hb_report from doc/
  * Fix warnings reported by GCC7. (bsc#1030241)
  * * Drop 0001-Fix-warnings-reported-by-GCC7.patch which has been merged upstream</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version 1.0.12+v1.git.1511436818.71ae59fa:
  * Fix: stonith:external/ec2: Enforce en_US.UTF-8 locale when invoking aws client (bsc#1059171)
  * Drop libnet dependency (bsc#1069596)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Port scripts to Python 3
  * Add 0001-Port-scripts-to-Python-3.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1513598400">- Fix Python 3 compatibility in these agents (bsc#1073376):
  * external/ibmrsa-telnet
  * external/dracmc-telnet
  * external/riloe</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Format with spec-cleaner
- Remove old distributions as we build only on SLE12+ (sle11/sle10)
- Always disable fatal warnings, it only turns on -Werror which is
  pointless for distro builds and just could break with gcc updates
- Use the user creation oneliner like other packages</changelog>
  <changelog author="tchvatal@suse.com" date="1516276801">- Switch to pkgconfig dependencies
- Drop asciidoc from deps, even tho configure.ac checks for it
  the mans are generated by docbook</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Stop building static archives only to remove them later.</changelog>
  <changelog author="ygao@suse.com" date="1517572800">- spec: Still use 90 as the consistent gid for the group "haclient" among the cluster</changelog>
  <changelog author="ygao@suse.com" date="1519387200">- Build: Ship cibsecret by pacemaker instead of cluster-glue (bsc#1082456)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 1.0.12+v1.git.1523280117.43b22d15:
  * High: external/ec2: Avoid unicode errors and improve performance (bsc#1088656)
- Medium: external/ec2: Mitigate fence race (bsc#1088656)
  * Add 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1534420800">- Update to version 1.0.12+v1.git.1534346580.be86a9f2:
  * Fix: stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters (bsc#1098758)
- Remove obsolete patch:
  * Remove 0001-Medium-external-ec2-Mitigate-fence-race-bsc-1088656.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1560168000">- Create /var/run/heartbeat/rsctmp directory (bsc#1131545)</changelog>
  <changelog author="kgronlund@suse.com" date="1560340800">- Update to version 1.0.12+v1.git.1560323319.fd5a3bef:
  * ibmhmc: Create /var/run/heartbeat/rsctmp if it doesn't exist (bsc#1131545)</changelog>
  <changelog author="xarbulu@suse.com" date="1587988800">- Update to version 1.0.12+v1.git.1587474580.a5fda2bc:
  * Fix EC2 stonith plugin (bsc#1169784)</changelog>
  <changelog author="varkoly@suse.com" date="1645704000">- (jsc#SLE-23490) (jsc#SLE-23491) (jsc#SLE-23492) (jsc#SLE-23494)
  IMDSv2 support in ec2 stonith agent
  * add upstream patch:
    0001-Update-external-ec2-to-support-IMDSv2.patch</changelog>
  <changelog author="varkoly@suse.com" date="1650456000">- Requesting cluster-glue bugfix (bsc#1197681)
  * Add upstream patch:
    0002-bugfix-for-comment-in-external-ec2.patch</changelog>
</package>
<package pkgid="42237bffa2a94d0c2ac9b181030adce9bc76a4ebc16926f36a2f81e77841e2f5" name="libgo13-32bit" arch="s390x">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="6b40a3c1bbdb7e2a45c761af4fad711563c0e0ca03e26ffe415274808de20cd0" name="libgo13-32bit" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="a366be8898cd296c2cf6820c61f2d68288f1d22f3b38c0d273439a72681c37b7" name="libgo13" arch="aarch64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="8440f3138185be4facb8c1e874c6299e83a4ec42d49a111acf28e0da2bf31c7a" name="libgo13" arch="ppc64le">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="434961f5947b7dc5a9e72ccc35f9e40b8c699e77824093ec20e5ee295e575207" name="libgo13" arch="s390x">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="d8f99801f1e29e94fac0855ec82dc20f524c5d78608b0c3934f7393b5fd8d6d2" name="libgo13" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="10c491ef657fd060c618d32ae3347bed1d0ab12e63af9c8d3227278e5ffa86cb" name="libgo19" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="492eb6f7ce4920e33ed35659ac0887e0f312e085612675417678c44daf512c02" name="libgo19" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="f756007f69dbb2a75d22629a6fff3a4987d8414388b7a0d14946d0177e25294e" name="libgo19" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="aee1c117b05a579cc706462f15d13608317f8869ff1557048a3b75d755faf72a" name="libgo19" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="05266b353a4c7a96af7fb836bc8b919acdaa2f7ad4b448b135ef4d71fd2d7ebb" name="libgo19-32bit" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="2896628ad22516f564f78618ba1f2711aaff95b889ef1262b1f23171f9c34700" name="libgo19-32bit" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="314946cf00de6811cbddbdeda00e60ea9231b53e8a9e47632821633ea688c164" name="libgom-1_0-0" arch="aarch64">
  <version epoch="0" ver="0.4" rel="150200.3.2.1"/>
  <changelog author="zaitor@opensuse.org" date="1408968000">- Initial packaging version 0.2.1</changelog>
  <changelog author="dimstar@opensuse.org" date="1424174400">- Update to version 0.3.0:
  + Update COPYING to LGPL 2.1+ to match headers.
  + Add support for batched writes.
  + Support the GLOB operator.
  + Fix stacking of filters.
  + Fix possible crashes on exit.
  + Remove "adapter" property from GomResourceGroup.
  + Fix a bug in automatic migration.
  + Fix a number of bugs related to using GOM in bindings and in
    multi-thread unsafe interpreters.
  + Make gdk-pixbuf an optional dependency.</changelog>
  <changelog author="zaitor@opensuse.org" date="1430308800">- Update to version 0.3.1:
  + Support g_autoptr() for all gom object types.
  + Add IS NULL and IS NOT NULL filters.
  + Add gom_resource_group_delete_[a]sync functions.
  + Fix crash on 64-bit systems with some compiler/compiler flags.
  + Fix saving a modified resource a second time.
  + Fix setting ID after calling gom_resource_group_write_*.
- Add a %check section and pass %{__make} test to it. Actually run
  the already enabled tests. This adds quite a bit to build time,
  but all testing we can get is good.</changelog>
  <changelog author="damjanovic.ivo@gmail.com" date="1451217600">- Updated to version 0.3.2:
  + Add missing annotation for repository object.
  + Support ordering queries.
  + Add support for creating new tables in a version.
  + Fix memory leak in GomResource.
  + Bindings:
  - Add missing annotation for repository object.
  - Add a working Python example.
  - Make ResourceGroup a sequence in Python bindings.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498132800">- Update to version 0.3.3:
  + Replace hardcoded values in pkg-config file.
  + Add a JavaScript example.
  + Remove i18n support, as there are no user-visible strings.
  + Replace autotools build system with meson.
- Add meson BuildRequires and switch autotools macros configure,
  make, make test and makeinstall to meson, meson_build, meson_test
  and meson_install following upstream switch to Meson build
  system.
- Add explicit python3-gobject BuildRequires to workaround
  build-fail, upstream expects everyone to have moved to python3 as
  default python.
- Drop intltool BuildRequires: No longer needed.
- Following the above, drop lang subpackage and macros handling
  translations, and drop gom-lang Recommends and gom Provides from
  libgom-1_0-0 subpackage. Add gom-lang Obsoletes to ease updates.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500552000">- Temp disable meson_check while we figure out why it randomly
  fails on x86_64.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries an RPM groups. Trim non-telling parts of
  descriptions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505304000">- Split out python3-gom: the python/gi binding were wrongly
  packaged as part of the -devel package.
- Run spec-cleaner: adds pkgconfig-BuildRequires.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 0.4:
  + Fix primary-keys never being monitored, which triggered crashes
    with GLib 2.63.
  + Test for invalid table names.
  + Install Python overrides in correct location.
  + Fix storage of NULL GDateTime values.
  + Fix constraints test under older versions of SQLite.</changelog>
</package>
<package pkgid="dc1c7b5c6c4dbc28fce114044db299cbfc82d3dc0f38078790a181d882491587" name="libgom-1_0-0" arch="ppc64le">
  <version epoch="0" ver="0.4" rel="150200.3.2.1"/>
  <changelog author="zaitor@opensuse.org" date="1408968000">- Initial packaging version 0.2.1</changelog>
  <changelog author="dimstar@opensuse.org" date="1424174400">- Update to version 0.3.0:
  + Update COPYING to LGPL 2.1+ to match headers.
  + Add support for batched writes.
  + Support the GLOB operator.
  + Fix stacking of filters.
  + Fix possible crashes on exit.
  + Remove "adapter" property from GomResourceGroup.
  + Fix a bug in automatic migration.
  + Fix a number of bugs related to using GOM in bindings and in
    multi-thread unsafe interpreters.
  + Make gdk-pixbuf an optional dependency.</changelog>
  <changelog author="zaitor@opensuse.org" date="1430308800">- Update to version 0.3.1:
  + Support g_autoptr() for all gom object types.
  + Add IS NULL and IS NOT NULL filters.
  + Add gom_resource_group_delete_[a]sync functions.
  + Fix crash on 64-bit systems with some compiler/compiler flags.
  + Fix saving a modified resource a second time.
  + Fix setting ID after calling gom_resource_group_write_*.
- Add a %check section and pass %{__make} test to it. Actually run
  the already enabled tests. This adds quite a bit to build time,
  but all testing we can get is good.</changelog>
  <changelog author="damjanovic.ivo@gmail.com" date="1451217600">- Updated to version 0.3.2:
  + Add missing annotation for repository object.
  + Support ordering queries.
  + Add support for creating new tables in a version.
  + Fix memory leak in GomResource.
  + Bindings:
  - Add missing annotation for repository object.
  - Add a working Python example.
  - Make ResourceGroup a sequence in Python bindings.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498132800">- Update to version 0.3.3:
  + Replace hardcoded values in pkg-config file.
  + Add a JavaScript example.
  + Remove i18n support, as there are no user-visible strings.
  + Replace autotools build system with meson.
- Add meson BuildRequires and switch autotools macros configure,
  make, make test and makeinstall to meson, meson_build, meson_test
  and meson_install following upstream switch to Meson build
  system.
- Add explicit python3-gobject BuildRequires to workaround
  build-fail, upstream expects everyone to have moved to python3 as
  default python.
- Drop intltool BuildRequires: No longer needed.
- Following the above, drop lang subpackage and macros handling
  translations, and drop gom-lang Recommends and gom Provides from
  libgom-1_0-0 subpackage. Add gom-lang Obsoletes to ease updates.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500552000">- Temp disable meson_check while we figure out why it randomly
  fails on x86_64.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries an RPM groups. Trim non-telling parts of
  descriptions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505304000">- Split out python3-gom: the python/gi binding were wrongly
  packaged as part of the -devel package.
- Run spec-cleaner: adds pkgconfig-BuildRequires.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 0.4:
  + Fix primary-keys never being monitored, which triggered crashes
    with GLib 2.63.
  + Test for invalid table names.
  + Install Python overrides in correct location.
  + Fix storage of NULL GDateTime values.
  + Fix constraints test under older versions of SQLite.</changelog>
</package>
<package pkgid="c30a77324317cbcdd98d584f10cd51258e916753dbcfa61909e2a395e83c7ed4" name="libgom-1_0-0" arch="s390x">
  <version epoch="0" ver="0.4" rel="150200.3.2.1"/>
  <changelog author="zaitor@opensuse.org" date="1408968000">- Initial packaging version 0.2.1</changelog>
  <changelog author="dimstar@opensuse.org" date="1424174400">- Update to version 0.3.0:
  + Update COPYING to LGPL 2.1+ to match headers.
  + Add support for batched writes.
  + Support the GLOB operator.
  + Fix stacking of filters.
  + Fix possible crashes on exit.
  + Remove "adapter" property from GomResourceGroup.
  + Fix a bug in automatic migration.
  + Fix a number of bugs related to using GOM in bindings and in
    multi-thread unsafe interpreters.
  + Make gdk-pixbuf an optional dependency.</changelog>
  <changelog author="zaitor@opensuse.org" date="1430308800">- Update to version 0.3.1:
  + Support g_autoptr() for all gom object types.
  + Add IS NULL and IS NOT NULL filters.
  + Add gom_resource_group_delete_[a]sync functions.
  + Fix crash on 64-bit systems with some compiler/compiler flags.
  + Fix saving a modified resource a second time.
  + Fix setting ID after calling gom_resource_group_write_*.
- Add a %check section and pass %{__make} test to it. Actually run
  the already enabled tests. This adds quite a bit to build time,
  but all testing we can get is good.</changelog>
  <changelog author="damjanovic.ivo@gmail.com" date="1451217600">- Updated to version 0.3.2:
  + Add missing annotation for repository object.
  + Support ordering queries.
  + Add support for creating new tables in a version.
  + Fix memory leak in GomResource.
  + Bindings:
  - Add missing annotation for repository object.
  - Add a working Python example.
  - Make ResourceGroup a sequence in Python bindings.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498132800">- Update to version 0.3.3:
  + Replace hardcoded values in pkg-config file.
  + Add a JavaScript example.
  + Remove i18n support, as there are no user-visible strings.
  + Replace autotools build system with meson.
- Add meson BuildRequires and switch autotools macros configure,
  make, make test and makeinstall to meson, meson_build, meson_test
  and meson_install following upstream switch to Meson build
  system.
- Add explicit python3-gobject BuildRequires to workaround
  build-fail, upstream expects everyone to have moved to python3 as
  default python.
- Drop intltool BuildRequires: No longer needed.
- Following the above, drop lang subpackage and macros handling
  translations, and drop gom-lang Recommends and gom Provides from
  libgom-1_0-0 subpackage. Add gom-lang Obsoletes to ease updates.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500552000">- Temp disable meson_check while we figure out why it randomly
  fails on x86_64.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries an RPM groups. Trim non-telling parts of
  descriptions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505304000">- Split out python3-gom: the python/gi binding were wrongly
  packaged as part of the -devel package.
- Run spec-cleaner: adds pkgconfig-BuildRequires.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 0.4:
  + Fix primary-keys never being monitored, which triggered crashes
    with GLib 2.63.
  + Test for invalid table names.
  + Install Python overrides in correct location.
  + Fix storage of NULL GDateTime values.
  + Fix constraints test under older versions of SQLite.</changelog>
</package>
<package pkgid="a20b88b73c422a1c65a98183b8d99197e353d8c37348adabfdce34ad3da11b47" name="libgom-1_0-0" arch="x86_64">
  <version epoch="0" ver="0.4" rel="150200.3.2.1"/>
  <changelog author="zaitor@opensuse.org" date="1408968000">- Initial packaging version 0.2.1</changelog>
  <changelog author="dimstar@opensuse.org" date="1424174400">- Update to version 0.3.0:
  + Update COPYING to LGPL 2.1+ to match headers.
  + Add support for batched writes.
  + Support the GLOB operator.
  + Fix stacking of filters.
  + Fix possible crashes on exit.
  + Remove "adapter" property from GomResourceGroup.
  + Fix a bug in automatic migration.
  + Fix a number of bugs related to using GOM in bindings and in
    multi-thread unsafe interpreters.
  + Make gdk-pixbuf an optional dependency.</changelog>
  <changelog author="zaitor@opensuse.org" date="1430308800">- Update to version 0.3.1:
  + Support g_autoptr() for all gom object types.
  + Add IS NULL and IS NOT NULL filters.
  + Add gom_resource_group_delete_[a]sync functions.
  + Fix crash on 64-bit systems with some compiler/compiler flags.
  + Fix saving a modified resource a second time.
  + Fix setting ID after calling gom_resource_group_write_*.
- Add a %check section and pass %{__make} test to it. Actually run
  the already enabled tests. This adds quite a bit to build time,
  but all testing we can get is good.</changelog>
  <changelog author="damjanovic.ivo@gmail.com" date="1451217600">- Updated to version 0.3.2:
  + Add missing annotation for repository object.
  + Support ordering queries.
  + Add support for creating new tables in a version.
  + Fix memory leak in GomResource.
  + Bindings:
  - Add missing annotation for repository object.
  - Add a working Python example.
  - Make ResourceGroup a sequence in Python bindings.</changelog>
  <changelog author="zaitor@opensuse.org" date="1498132800">- Update to version 0.3.3:
  + Replace hardcoded values in pkg-config file.
  + Add a JavaScript example.
  + Remove i18n support, as there are no user-visible strings.
  + Replace autotools build system with meson.
- Add meson BuildRequires and switch autotools macros configure,
  make, make test and makeinstall to meson, meson_build, meson_test
  and meson_install following upstream switch to Meson build
  system.
- Add explicit python3-gobject BuildRequires to workaround
  build-fail, upstream expects everyone to have moved to python3 as
  default python.
- Drop intltool BuildRequires: No longer needed.
- Following the above, drop lang subpackage and macros handling
  translations, and drop gom-lang Recommends and gom Provides from
  libgom-1_0-0 subpackage. Add gom-lang Obsoletes to ease updates.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500552000">- Temp disable meson_check while we figure out why it randomly
  fails on x86_64.</changelog>
  <changelog author="jengelh@inai.de" date="1504872000">- Update summaries an RPM groups. Trim non-telling parts of
  descriptions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505304000">- Split out python3-gom: the python/gi binding were wrongly
  packaged as part of the -devel package.
- Run spec-cleaner: adds pkgconfig-BuildRequires.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581940800">- Update to version 0.4:
  + Fix primary-keys never being monitored, which triggered crashes
    with GLib 2.63.
  + Test for invalid table names.
  + Install Python overrides in correct location.
  + Fix storage of NULL GDateTime values.
  + Fix constraints test under older versions of SQLite.</changelog>
</package>
<package pkgid="05dcd0713619755c73f3dba05c9793886aa589bfa89f59ed7a898041786910ce" name="libgomp1" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="9876ccd4690c6cf93e0d3ab4502ff5aa3ceff1231050f0d23ffed28c1982f029" name="libgomp1" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="8d61cb47ffab11429a5626128af7effda25b1971ce66c3e0507fb58d5446b781" name="libgomp1" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="69d029395b10dd3bad9ce0fe5e1b708791b54568574b13da44a4ff7e20e07064" name="libgomp1" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="24019d5ee7e139780bca106c5d246accb9706e3bcff9c22f5802e90d5472efbb" name="libgomp1-32bit" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="0f0193a8a32982e856837a15e800ea8cb5cc4d9c64df4dc3d6534701cda40d2e" name="libgomp1-32bit" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="2a6de6467ac8e5c373ab9b4357920de215f9b6564744e98995482c83690745bb" name="libgphobos2" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="25b85a9cac6b0779c1a43d58c13dae527c14e62bf4adcefba26aff7d5bd0cb19" name="libgphobos2" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="de84f68d93bbab3c005f604e1d3ff86a37dba963287f44a191ba052c16c4a353" name="libgphobos2" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="99aae448107b8d2f3bd64db3b3aa174ad3c9b82eddc789fe62c448d64d3129cb" name="libgphobos2-32bit" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="7d7edcbfb48b2f48462e303bf24a17b8ff1c3f22e7a325ecc849085a9619cb3d" name="libgphobos2-32bit" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="34fb6c203477eed80f09a6f0c995a58ee87be8399c648121ebf1beef1ed76b5b" name="libgrpc++1" arch="aarch64">
  <version epoch="0" ver="1.25.0" rel="150200.3.5.1"/>
  <changelog author="tbechtold@suse.com" date="1526644800">- update to 1.12.0:
  Core:
  * Update protobuf submodule to 3.5.2 (#15114)
  * Make GrpcBuffer{Reader|Writer} Public (#14541)
  * Compile Out Tracers Option (#15108)
  * Fix bug in an address sorting comparison (#15208)
  * Fix: Check retry timer before starting resolving (#15156)
  * Fix c-ares resolution with default authority (#15073)
  * Fix c-ares resolver crash when DNS server unreachable (#15134)
  * Performance: Avoid low severity log message construction (#14945)
  * Peformance: Enable SIO_LOOPBACK_FAST_PATH on Windows (#14905)
  C#:
  * Add RpcException.StatusCode property (#15140)
  * Improvements to C# build instructions (#15178)
  Python:
  * Eliminate grpcio package dependency on protobuf package (#15034).
    Please pay extra attention if you are using gRPC with Protocol Buffers and
    your deployment scripts do not explicitly list the correct dependencies
    and used to rely on the transitive Python package dependency from grpcio to protobuf.
  * A new grpc.Channel.close method is introduced and correct use of gRPC
    Python now requires that channels be closed after use. No existing code
    should observably break when upgrading to 1.12 but code that creates
    channels but does not close them will not be supported in 1.13 and later.
  Core:
  * Fix: Check retry timer before starting resolving (#15156)
  * Fix c-ares resolution with default authority (#15073)
  * Fix c-ares resolver crash when DNS server unreachable (#15134)
  * Add core underpinnings for TLS session ticket support (#14483)
  * Experimental support for configurable retries (use at your own risk) (#10684)
  * Fail calls with wait_for_ready=false on transient resolver failure (#14733)
  * Fix a call stack ref flake (#14681)
  * c-ares DNS resolver sorts resolved addresses per RFC 6724 (#13290)
  * Use socklen_t instead of size_t for address length (fixes use case for some
    big endian systems) (#14464)
  * Initial part of channel tracing implementation (#13883, #14746, #14751)
  * Avoid crashes on environments with hot-plugged CPUs (#14712)
  * When building from source, Makefile now checks for minimum protobuf
    version 3.5.0 instead 3.0.0 (#14821)
  * gRPC Core public header no longer includes inttypes.h (#14676)
  * CMake improvements:
  * Add well-commented examples and continuous test for various ways of
    building gRPC as a dependency (via ExternalProject_Add in #14822,
    via add_subdirectory in #14864)
  * Remove internal tools from binaries installed by cmake install (#14850)
  * Simplify Android build example (#14885)
  * Enable SO_REUSEPORT in IPv6-only environments as well (#14748)
  C#:
  * Improvements in experimental support for Unity - added useful resources
    and improved support for loading grpc_csharp_ext on Unity (#14576, #14605)
  * Further prevent name collisions by using only fully qualified type
    names in C# code generator (#14524)
  * Fix C# connectivity watcher shutdown race (#14776)
  Objective-C:
  * Support for Keep-Alive (#14781)
  * Experimental C++ podspec now supports Apple framework (#14480)
  * Allow discarding generated implementation (leaving only protocol)
    with macro (#14490)
  * Better handling of network error (#14554)
  PHP:
  * Add missing -O2 compilation flag for pecl (#14768)
  * Update the reserved variable list to check in PHP code generator to
    match protobuf 3.5.0 (#13580)
  Python:
  * Progress towards full Beta API elimination (Beta API is and has been
    unsupported and will go away completely):
    Remove _face_interface_test tests for the Beta API (#14702)
  * Remove Python background poller thread (#14448)
    Note there is a small change in behavior. Before, clients would
    detect disconnected channels immediately.
  * Initial gevent compatibility (EXPERIMENTAL) (#14561)
  * Release the GIL when calling grpc_call_start_batch to improve
    performance under multithreaded scenarios. (#14801)
  Ruby:
  * Correct handling of underscores in package names by Protocol Buffers code
    generator for Ruby (#13634)
  * Source code and locally compiled (not cross-compiled) shared libraries
    (grpc_c.so files) are removed from the linux binary packages. This includes
    the packages targeting the x86_64-linux and x86-linux platforms (#14634)
  * Bug fix for a use-after-free related to access to a garbage collected
    object (#14809)
  * Get rid of the -Wno-format argument to compilation of the ruby extension
  * Documentation improvements (#14535)
  * Don?t raise GRPC::Core::CallErrors for failed reads or writes of bidi
    streaming calls (#14922)
  * Fix a race condition in an interrupt handler that could cause an
    assertion failure (#14953)</changelog>
  <changelog author="jengelh@inai.de" date="1526644801">- Switch to plain makefiles since they generate more shared libs.
- Remove grpc-build.diff, grpc-versioning.diff.</changelog>
  <changelog author="tbechtold@suse.com" date="1527249600">- build grpc python module for python2 and python3
  * add 0001-Allow-building-the-python-module-with-system-openssl.patch
  * add 0002-Allow-building-the-python-module-with-system-zlib.patch
  * add 0003-Allow-building-the-python-module-with-system-cares.patch</changelog>
  <changelog author="jengelh@inai.de" date="1529755200">- Throw out silly -Werror in release builds.</changelog>
  <changelog author="tbechtold@suse.com" date="1541937600">- update to 1.15.1:
  * Document SSL portability and performance considerations. See
    https://github.com/grpc/grpc/blob/master/doc/ssl-performance.md .
  * Simplify call arena size growth.
  * PF: Check connectivity state before watching.
  * Added system roots feature to load roots from OS trust store.
  * Fix re-resolution in pick first.
  * Allow error strings in final_info to propagate to filters on
    call destruction.
  * Add resolver executor.
  * Data race fix for lockfree_event.
  * Channelz: Expose new Core API.
  * cmake: disable assembly optimizations only when necessary.
  * C++ sync server: Return status RESOURCE_EXHAUSTED if no
    thread quota available.
  * Use correct target name for gflags-config.cmake.
  * Make should generate pkg-config file for gpr as well.
  * Restrict the number of threads in C++ sync server.
  * Allow reset of connection backoff.
- update to 1.14.2:
  * Add TROUBLESHOOTING.md guide
  * Fixed gRPC channels blocking indefinitely and not respecting
    deadlines on network disconnect.
  * Add user guide for keepalive.
  * Fix GRPC_ARG_HTTP2_MIN_RECV_PING_INTERVAL_WITHOUT_DATA_MS doc
    to restrict usage to server.
  * Fixed ordering in adding pending picks to Round Robin LB.
  * Implement local channel/server credentials for UDS connections.
  * Allow extra copy in zero-copy protector integrity-only mode.
  * Update to use the canonical version of LB proto.
  * Prefer using https_proxy over http_proxy.
  * Refactor to put c-ares queries under a combiner.
  * Remove already_closed parameter from fd_orphan.
  * Add channel arg to enable/disable http proxy.
  * Fix shutdown of closed fd when c-ares opens a second fd.
  * Fixed segmentation fault when product name from BIOS is empty.
  * Introduce server-side load reporting service.
  * Reorder steps in ServerBuilder::BuildAndStart().
  * Support Per-Method Codegen Generic on Server Side.
  * Protobuf-related headers are available in a subspec of
    gRPC-C++ podspec.
- update to 1.13.1:
  * gRPC stats will only be collected for debug builds or if
    GRPC_COLLECT_STATS is defined. It will be disabled for opt
    builds.
  * Fix for Issue #13553. Unlimited can now be set as the max
    receive message length.
  * cmake install now also installs should also installs the
    roots.pem file.
- Drop 0001-Allow-building-the-python-module-with-system-openssl.patch
  Applied upstream
- Drop 0002-Allow-building-the-python-module-with-system-zlib.patch
  Applied upstream
- 0003-Allow-building-the-python-module-with-system-cares.patch
  Applied upstream</changelog>
  <changelog author="jengelh@inai.de" date="1541937601">- Update to new upstream release 1.16
  * Keepalive watchdog firing should return status UNAVAILABLE.
  * Set TCP_USER_TIMEOUT socket option for Linux.
  * Turn loading system root certificate as default.
  * Change pick_first to not unref unselected subchannels.
  * cmake: prevent C core from depending on libstdc++.
  * Implement Watch method in health check service.</changelog>
  <changelog author="mrostecki@suse.de" date="1546862400">- Add grpc-source package - some Go programs using gRPC need
  protobuf definitions which are included inside the source code,
  but are not included in the devel package.</changelog>
  <changelog author="jengelh@inai.de" date="1552737600">- Update to new upstream release 1.19.1
  * Use 32-bit nanopb fields.
  * Avoid SRV and TXT lookups for localhost.
  * Set c-ares as the default resolver.</changelog>
  <changelog author="sbrabec@suse.com" date="1555070400">- Fix typo in Groups.</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 1.21.3
  * Add SPIFFE security stack to gRPC.
  * Re-enable ALPN check in gRPC C core SSL stack.</changelog>
  <changelog author="jengelh@inai.de" date="1566129600">- Update to new upstream release 1.23 [boo#1144068]
  * Fixed a bug where POST_RECV_MESSAGE was not being triggered.
  * Renamed root certificate bundle in gRPC-C++ pod.
  * Increased lower bound on DNS re-resolution period to 30 seconds.
  * Fixed a segfault when forking while using gevent.
  * Added channel idleness support
  * Added threadpool support</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Disable LTO because it's broken.</changelog>
  <changelog author="jengelh@inai.de" date="1570017600">- Update to release 1.23.1
  * Unspecific refinements, improvements, and bug fixes.
- Add gettid.patch
- Split libgrpc into libgrpc++ because that has a SO version
  group of its own.
- Bump libgrpc6 to libgrpc7 as there is actually .so.7 files.
  Add suitable Conflicts markers.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1570708800">- Make sure that patches are included in the source package.
- Filter out several rpmlintrc warnings for the source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1572955200">- Add patch which replaces BoringSSL with OpenSSL as the SSL
  library when grpc is used as a Bazel dependency:
  * 0001-bazel-Replace-boringssl-with-openssl.patch</changelog>
  <changelog author="mrostecki@opensuse.org" date="1573473600">- Define BoringSSL as a Bazel dependency in WORKSPACE instead of
  grpc_deps.bzl - using new_local_repository function is now always
  allowed in imported modules.</changelog>
  <changelog author="jengelh@inai.de" date="1576497600">- Update to release 1.25
  * Change RR to consider a subchannel in TF if it has failed
    since it was READY.
  * Do not create streams after a GOAWAY has been received.
  * Prevent HTTP2 parser from queueing a lot of induced frames.
- Drop gettid.patch</changelog>
  <changelog author="mrostecki@opensuse.org" date="1578571200">- Remove patch for Bazel files, which is not needed anymore:
  * 0001-bazel-Replace-boringssl-with-openssl.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1584014400">- Add conditional to build without python2 if needed</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1649160000">- Update in SLE-15 (bsc#1197726)</changelog>
</package>
<package pkgid="01d58d6e453b28cf6b260aaf4ef74eda1b1ecb6944ae2f02bfedadc21420ab9a" name="libgrpc++1" arch="ppc64le">
  <version epoch="0" ver="1.25.0" rel="150200.3.5.1"/>
  <changelog author="tbechtold@suse.com" date="1526644800">- update to 1.12.0:
  Core:
  * Update protobuf submodule to 3.5.2 (#15114)
  * Make GrpcBuffer{Reader|Writer} Public (#14541)
  * Compile Out Tracers Option (#15108)
  * Fix bug in an address sorting comparison (#15208)
  * Fix: Check retry timer before starting resolving (#15156)
  * Fix c-ares resolution with default authority (#15073)
  * Fix c-ares resolver crash when DNS server unreachable (#15134)
  * Performance: Avoid low severity log message construction (#14945)
  * Peformance: Enable SIO_LOOPBACK_FAST_PATH on Windows (#14905)
  C#:
  * Add RpcException.StatusCode property (#15140)
  * Improvements to C# build instructions (#15178)
  Python:
  * Eliminate grpcio package dependency on protobuf package (#15034).
    Please pay extra attention if you are using gRPC with Protocol Buffers and
    your deployment scripts do not explicitly list the correct dependencies
    and used to rely on the transitive Python package dependency from grpcio to protobuf.
  * A new grpc.Channel.close method is introduced and correct use of gRPC
    Python now requires that channels be closed after use. No existing code
    should observably break when upgrading to 1.12 but code that creates
    channels but does not close them will not be supported in 1.13 and later.
  Core:
  * Fix: Check retry timer before starting resolving (#15156)
  * Fix c-ares resolution with default authority (#15073)
  * Fix c-ares resolver crash when DNS server unreachable (#15134)
  * Add core underpinnings for TLS session ticket support (#14483)
  * Experimental support for configurable retries (use at your own risk) (#10684)
  * Fail calls with wait_for_ready=false on transient resolver failure (#14733)
  * Fix a call stack ref flake (#14681)
  * c-ares DNS resolver sorts resolved addresses per RFC 6724 (#13290)
  * Use socklen_t instead of size_t for address length (fixes use case for some
    big endian systems) (#14464)
  * Initial part of channel tracing implementation (#13883, #14746, #14751)
  * Avoid crashes on environments with hot-plugged CPUs (#14712)
  * When building from source, Makefile now checks for minimum protobuf
    version 3.5.0 instead 3.0.0 (#14821)
  * gRPC Core public header no longer includes inttypes.h (#14676)
  * CMake improvements:
  * Add well-commented examples and continuous test for various ways of
    building gRPC as a dependency (via ExternalProject_Add in #14822,
    via add_subdirectory in #14864)
  * Remove internal tools from binaries installed by cmake install (#14850)
  * Simplify Android build example (#14885)
  * Enable SO_REUSEPORT in IPv6-only environments as well (#14748)
  C#:
  * Improvements in experimental support for Unity - added useful resources
    and improved support for loading grpc_csharp_ext on Unity (#14576, #14605)
  * Further prevent name collisions by using only fully qualified type
    names in C# code generator (#14524)
  * Fix C# connectivity watcher shutdown race (#14776)
  Objective-C:
  * Support for Keep-Alive (#14781)
  * Experimental C++ podspec now supports Apple framework (#14480)
  * Allow discarding generated implementation (leaving only protocol)
    with macro (#14490)
  * Better handling of network error (#14554)
  PHP:
  * Add missing -O2 compilation flag for pecl (#14768)
  * Update the reserved variable list to check in PHP code generator to
    match protobuf 3.5.0 (#13580)
  Python:
  * Progress towards full Beta API elimination (Beta API is and has been
    unsupported and will go away completely):
    Remove _face_interface_test tests for the Beta API (#14702)
  * Remove Python background poller thread (#14448)
    Note there is a small change in behavior. Before, clients would
    detect disconnected channels immediately.
  * Initial gevent compatibility (EXPERIMENTAL) (#14561)
  * Release the GIL when calling grpc_call_start_batch to improve
    performance under multithreaded scenarios. (#14801)
  Ruby:
  * Correct handling of underscores in package names by Protocol Buffers code
    generator for Ruby (#13634)
  * Source code and locally compiled (not cross-compiled) shared libraries
    (grpc_c.so files) are removed from the linux binary packages. This includes
    the packages targeting the x86_64-linux and x86-linux platforms (#14634)
  * Bug fix for a use-after-free related to access to a garbage collected
    object (#14809)
  * Get rid of the -Wno-format argument to compilation of the ruby extension
  * Documentation improvements (#14535)
  * Don?t raise GRPC::Core::CallErrors for failed reads or writes of bidi
    streaming calls (#14922)
  * Fix a race condition in an interrupt handler that could cause an
    assertion failure (#14953)</changelog>
  <changelog author="jengelh@inai.de" date="1526644801">- Switch to plain makefiles since they generate more shared libs.
- Remove grpc-build.diff, grpc-versioning.diff.</changelog>
  <changelog author="tbechtold@suse.com" date="1527249600">- build grpc python module for python2 and python3
  * add 0001-Allow-building-the-python-module-with-system-openssl.patch
  * add 0002-Allow-building-the-python-module-with-system-zlib.patch
  * add 0003-Allow-building-the-python-module-with-system-cares.patch</changelog>
  <changelog author="jengelh@inai.de" date="1529755200">- Throw out silly -Werror in release builds.</changelog>
  <changelog author="tbechtold@suse.com" date="1541937600">- update to 1.15.1:
  * Document SSL portability and performance considerations. See
    https://github.com/grpc/grpc/blob/master/doc/ssl-performance.md .
  * Simplify call arena size growth.
  * PF: Check connectivity state before watching.
  * Added system roots feature to load roots from OS trust store.
  * Fix re-resolution in pick first.
  * Allow error strings in final_info to propagate to filters on
    call destruction.
  * Add resolver executor.
  * Data race fix for lockfree_event.
  * Channelz: Expose new Core API.
  * cmake: disable assembly optimizations only when necessary.
  * C++ sync server: Return status RESOURCE_EXHAUSTED if no
    thread quota available.
  * Use correct target name for gflags-config.cmake.
  * Make should generate pkg-config file for gpr as well.
  * Restrict the number of threads in C++ sync server.
  * Allow reset of connection backoff.
- update to 1.14.2:
  * Add TROUBLESHOOTING.md guide
  * Fixed gRPC channels blocking indefinitely and not respecting
    deadlines on network disconnect.
  * Add user guide for keepalive.
  * Fix GRPC_ARG_HTTP2_MIN_RECV_PING_INTERVAL_WITHOUT_DATA_MS doc
    to restrict usage to server.
  * Fixed ordering in adding pending picks to Round Robin LB.
  * Implement local channel/server credentials for UDS connections.
  * Allow extra copy in zero-copy protector integrity-only mode.
  * Update to use the canonical version of LB proto.
  * Prefer using https_proxy over http_proxy.
  * Refactor to put c-ares queries under a combiner.
  * Remove already_closed parameter from fd_orphan.
  * Add channel arg to enable/disable http proxy.
  * Fix shutdown of closed fd when c-ares opens a second fd.
  * Fixed segmentation fault when product name from BIOS is empty.
  * Introduce server-side load reporting service.
  * Reorder steps in ServerBuilder::BuildAndStart().
  * Support Per-Method Codegen Generic on Server Side.
  * Protobuf-related headers are available in a subspec of
    gRPC-C++ podspec.
- update to 1.13.1:
  * gRPC stats will only be collected for debug builds or if
    GRPC_COLLECT_STATS is defined. It will be disabled for opt
    builds.
  * Fix for Issue #13553. Unlimited can now be set as the max
    receive message length.
  * cmake install now also installs should also installs the
    roots.pem file.
- Drop 0001-Allow-building-the-python-module-with-system-openssl.patch
  Applied upstream
- Drop 0002-Allow-building-the-python-module-with-system-zlib.patch
  Applied upstream
- 0003-Allow-building-the-python-module-with-system-cares.patch
  Applied upstream</changelog>
  <changelog author="jengelh@inai.de" date="1541937601">- Update to new upstream release 1.16
  * Keepalive watchdog firing should return status UNAVAILABLE.
  * Set TCP_USER_TIMEOUT socket option for Linux.
  * Turn loading system root certificate as default.
  * Change pick_first to not unref unselected subchannels.
  * cmake: prevent C core from depending on libstdc++.
  * Implement Watch method in health check service.</changelog>
  <changelog author="mrostecki@suse.de" date="1546862400">- Add grpc-source package - some Go programs using gRPC need
  protobuf definitions which are included inside the source code,
  but are not included in the devel package.</changelog>
  <changelog author="jengelh@inai.de" date="1552737600">- Update to new upstream release 1.19.1
  * Use 32-bit nanopb fields.
  * Avoid SRV and TXT lookups for localhost.
  * Set c-ares as the default resolver.</changelog>
  <changelog author="sbrabec@suse.com" date="1555070400">- Fix typo in Groups.</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 1.21.3
  * Add SPIFFE security stack to gRPC.
  * Re-enable ALPN check in gRPC C core SSL stack.</changelog>
  <changelog author="jengelh@inai.de" date="1566129600">- Update to new upstream release 1.23 [boo#1144068]
  * Fixed a bug where POST_RECV_MESSAGE was not being triggered.
  * Renamed root certificate bundle in gRPC-C++ pod.
  * Increased lower bound on DNS re-resolution period to 30 seconds.
  * Fixed a segfault when forking while using gevent.
  * Added channel idleness support
  * Added threadpool support</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Disable LTO because it's broken.</changelog>
  <changelog author="jengelh@inai.de" date="1570017600">- Update to release 1.23.1
  * Unspecific refinements, improvements, and bug fixes.
- Add gettid.patch
- Split libgrpc into libgrpc++ because that has a SO version
  group of its own.
- Bump libgrpc6 to libgrpc7 as there is actually .so.7 files.
  Add suitable Conflicts markers.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1570708800">- Make sure that patches are included in the source package.
- Filter out several rpmlintrc warnings for the source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1572955200">- Add patch which replaces BoringSSL with OpenSSL as the SSL
  library when grpc is used as a Bazel dependency:
  * 0001-bazel-Replace-boringssl-with-openssl.patch</changelog>
  <changelog author="mrostecki@opensuse.org" date="1573473600">- Define BoringSSL as a Bazel dependency in WORKSPACE instead of
  grpc_deps.bzl - using new_local_repository function is now always
  allowed in imported modules.</changelog>
  <changelog author="jengelh@inai.de" date="1576497600">- Update to release 1.25
  * Change RR to consider a subchannel in TF if it has failed
    since it was READY.
  * Do not create streams after a GOAWAY has been received.
  * Prevent HTTP2 parser from queueing a lot of induced frames.
- Drop gettid.patch</changelog>
  <changelog author="mrostecki@opensuse.org" date="1578571200">- Remove patch for Bazel files, which is not needed anymore:
  * 0001-bazel-Replace-boringssl-with-openssl.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1584014400">- Add conditional to build without python2 if needed</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1649160000">- Update in SLE-15 (bsc#1197726)</changelog>
</package>
<package pkgid="dfb2a0a1dfef1d0d31f218b818a20e086c658053d5de4b6a004206273289fd8f" name="libgrpc++1" arch="s390x">
  <version epoch="0" ver="1.25.0" rel="150200.3.5.1"/>
  <changelog author="tbechtold@suse.com" date="1526644800">- update to 1.12.0:
  Core:
  * Update protobuf submodule to 3.5.2 (#15114)
  * Make GrpcBuffer{Reader|Writer} Public (#14541)
  * Compile Out Tracers Option (#15108)
  * Fix bug in an address sorting comparison (#15208)
  * Fix: Check retry timer before starting resolving (#15156)
  * Fix c-ares resolution with default authority (#15073)
  * Fix c-ares resolver crash when DNS server unreachable (#15134)
  * Performance: Avoid low severity log message construction (#14945)
  * Peformance: Enable SIO_LOOPBACK_FAST_PATH on Windows (#14905)
  C#:
  * Add RpcException.StatusCode property (#15140)
  * Improvements to C# build instructions (#15178)
  Python:
  * Eliminate grpcio package dependency on protobuf package (#15034).
    Please pay extra attention if you are using gRPC with Protocol Buffers and
    your deployment scripts do not explicitly list the correct dependencies
    and used to rely on the transitive Python package dependency from grpcio to protobuf.
  * A new grpc.Channel.close method is introduced and correct use of gRPC
    Python now requires that channels be closed after use. No existing code
    should observably break when upgrading to 1.12 but code that creates
    channels but does not close them will not be supported in 1.13 and later.
  Core:
  * Fix: Check retry timer before starting resolving (#15156)
  * Fix c-ares resolution with default authority (#15073)
  * Fix c-ares resolver crash when DNS server unreachable (#15134)
  * Add core underpinnings for TLS session ticket support (#14483)
  * Experimental support for configurable retries (use at your own risk) (#10684)
  * Fail calls with wait_for_ready=false on transient resolver failure (#14733)
  * Fix a call stack ref flake (#14681)
  * c-ares DNS resolver sorts resolved addresses per RFC 6724 (#13290)
  * Use socklen_t instead of size_t for address length (fixes use case for some
    big endian systems) (#14464)
  * Initial part of channel tracing implementation (#13883, #14746, #14751)
  * Avoid crashes on environments with hot-plugged CPUs (#14712)
  * When building from source, Makefile now checks for minimum protobuf
    version 3.5.0 instead 3.0.0 (#14821)
  * gRPC Core public header no longer includes inttypes.h (#14676)
  * CMake improvements:
  * Add well-commented examples and continuous test for various ways of
    building gRPC as a dependency (via ExternalProject_Add in #14822,
    via add_subdirectory in #14864)
  * Remove internal tools from binaries installed by cmake install (#14850)
  * Simplify Android build example (#14885)
  * Enable SO_REUSEPORT in IPv6-only environments as well (#14748)
  C#:
  * Improvements in experimental support for Unity - added useful resources
    and improved support for loading grpc_csharp_ext on Unity (#14576, #14605)
  * Further prevent name collisions by using only fully qualified type
    names in C# code generator (#14524)
  * Fix C# connectivity watcher shutdown race (#14776)
  Objective-C:
  * Support for Keep-Alive (#14781)
  * Experimental C++ podspec now supports Apple framework (#14480)
  * Allow discarding generated implementation (leaving only protocol)
    with macro (#14490)
  * Better handling of network error (#14554)
  PHP:
  * Add missing -O2 compilation flag for pecl (#14768)
  * Update the reserved variable list to check in PHP code generator to
    match protobuf 3.5.0 (#13580)
  Python:
  * Progress towards full Beta API elimination (Beta API is and has been
    unsupported and will go away completely):
    Remove _face_interface_test tests for the Beta API (#14702)
  * Remove Python background poller thread (#14448)
    Note there is a small change in behavior. Before, clients would
    detect disconnected channels immediately.
  * Initial gevent compatibility (EXPERIMENTAL) (#14561)
  * Release the GIL when calling grpc_call_start_batch to improve
    performance under multithreaded scenarios. (#14801)
  Ruby:
  * Correct handling of underscores in package names by Protocol Buffers code
    generator for Ruby (#13634)
  * Source code and locally compiled (not cross-compiled) shared libraries
    (grpc_c.so files) are removed from the linux binary packages. This includes
    the packages targeting the x86_64-linux and x86-linux platforms (#14634)
  * Bug fix for a use-after-free related to access to a garbage collected
    object (#14809)
  * Get rid of the -Wno-format argument to compilation of the ruby extension
  * Documentation improvements (#14535)
  * Don?t raise GRPC::Core::CallErrors for failed reads or writes of bidi
    streaming calls (#14922)
  * Fix a race condition in an interrupt handler that could cause an
    assertion failure (#14953)</changelog>
  <changelog author="jengelh@inai.de" date="1526644801">- Switch to plain makefiles since they generate more shared libs.
- Remove grpc-build.diff, grpc-versioning.diff.</changelog>
  <changelog author="tbechtold@suse.com" date="1527249600">- build grpc python module for python2 and python3
  * add 0001-Allow-building-the-python-module-with-system-openssl.patch
  * add 0002-Allow-building-the-python-module-with-system-zlib.patch
  * add 0003-Allow-building-the-python-module-with-system-cares.patch</changelog>
  <changelog author="jengelh@inai.de" date="1529755200">- Throw out silly -Werror in release builds.</changelog>
  <changelog author="tbechtold@suse.com" date="1541937600">- update to 1.15.1:
  * Document SSL portability and performance considerations. See
    https://github.com/grpc/grpc/blob/master/doc/ssl-performance.md .
  * Simplify call arena size growth.
  * PF: Check connectivity state before watching.
  * Added system roots feature to load roots from OS trust store.
  * Fix re-resolution in pick first.
  * Allow error strings in final_info to propagate to filters on
    call destruction.
  * Add resolver executor.
  * Data race fix for lockfree_event.
  * Channelz: Expose new Core API.
  * cmake: disable assembly optimizations only when necessary.
  * C++ sync server: Return status RESOURCE_EXHAUSTED if no
    thread quota available.
  * Use correct target name for gflags-config.cmake.
  * Make should generate pkg-config file for gpr as well.
  * Restrict the number of threads in C++ sync server.
  * Allow reset of connection backoff.
- update to 1.14.2:
  * Add TROUBLESHOOTING.md guide
  * Fixed gRPC channels blocking indefinitely and not respecting
    deadlines on network disconnect.
  * Add user guide for keepalive.
  * Fix GRPC_ARG_HTTP2_MIN_RECV_PING_INTERVAL_WITHOUT_DATA_MS doc
    to restrict usage to server.
  * Fixed ordering in adding pending picks to Round Robin LB.
  * Implement local channel/server credentials for UDS connections.
  * Allow extra copy in zero-copy protector integrity-only mode.
  * Update to use the canonical version of LB proto.
  * Prefer using https_proxy over http_proxy.
  * Refactor to put c-ares queries under a combiner.
  * Remove already_closed parameter from fd_orphan.
  * Add channel arg to enable/disable http proxy.
  * Fix shutdown of closed fd when c-ares opens a second fd.
  * Fixed segmentation fault when product name from BIOS is empty.
  * Introduce server-side load reporting service.
  * Reorder steps in ServerBuilder::BuildAndStart().
  * Support Per-Method Codegen Generic on Server Side.
  * Protobuf-related headers are available in a subspec of
    gRPC-C++ podspec.
- update to 1.13.1:
  * gRPC stats will only be collected for debug builds or if
    GRPC_COLLECT_STATS is defined. It will be disabled for opt
    builds.
  * Fix for Issue #13553. Unlimited can now be set as the max
    receive message length.
  * cmake install now also installs should also installs the
    roots.pem file.
- Drop 0001-Allow-building-the-python-module-with-system-openssl.patch
  Applied upstream
- Drop 0002-Allow-building-the-python-module-with-system-zlib.patch
  Applied upstream
- 0003-Allow-building-the-python-module-with-system-cares.patch
  Applied upstream</changelog>
  <changelog author="jengelh@inai.de" date="1541937601">- Update to new upstream release 1.16
  * Keepalive watchdog firing should return status UNAVAILABLE.
  * Set TCP_USER_TIMEOUT socket option for Linux.
  * Turn loading system root certificate as default.
  * Change pick_first to not unref unselected subchannels.
  * cmake: prevent C core from depending on libstdc++.
  * Implement Watch method in health check service.</changelog>
  <changelog author="mrostecki@suse.de" date="1546862400">- Add grpc-source package - some Go programs using gRPC need
  protobuf definitions which are included inside the source code,
  but are not included in the devel package.</changelog>
  <changelog author="jengelh@inai.de" date="1552737600">- Update to new upstream release 1.19.1
  * Use 32-bit nanopb fields.
  * Avoid SRV and TXT lookups for localhost.
  * Set c-ares as the default resolver.</changelog>
  <changelog author="sbrabec@suse.com" date="1555070400">- Fix typo in Groups.</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 1.21.3
  * Add SPIFFE security stack to gRPC.
  * Re-enable ALPN check in gRPC C core SSL stack.</changelog>
  <changelog author="jengelh@inai.de" date="1566129600">- Update to new upstream release 1.23 [boo#1144068]
  * Fixed a bug where POST_RECV_MESSAGE was not being triggered.
  * Renamed root certificate bundle in gRPC-C++ pod.
  * Increased lower bound on DNS re-resolution period to 30 seconds.
  * Fixed a segfault when forking while using gevent.
  * Added channel idleness support
  * Added threadpool support</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Disable LTO because it's broken.</changelog>
  <changelog author="jengelh@inai.de" date="1570017600">- Update to release 1.23.1
  * Unspecific refinements, improvements, and bug fixes.
- Add gettid.patch
- Split libgrpc into libgrpc++ because that has a SO version
  group of its own.
- Bump libgrpc6 to libgrpc7 as there is actually .so.7 files.
  Add suitable Conflicts markers.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1570708800">- Make sure that patches are included in the source package.
- Filter out several rpmlintrc warnings for the source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1572955200">- Add patch which replaces BoringSSL with OpenSSL as the SSL
  library when grpc is used as a Bazel dependency:
  * 0001-bazel-Replace-boringssl-with-openssl.patch</changelog>
  <changelog author="mrostecki@opensuse.org" date="1573473600">- Define BoringSSL as a Bazel dependency in WORKSPACE instead of
  grpc_deps.bzl - using new_local_repository function is now always
  allowed in imported modules.</changelog>
  <changelog author="jengelh@inai.de" date="1576497600">- Update to release 1.25
  * Change RR to consider a subchannel in TF if it has failed
    since it was READY.
  * Do not create streams after a GOAWAY has been received.
  * Prevent HTTP2 parser from queueing a lot of induced frames.
- Drop gettid.patch</changelog>
  <changelog author="mrostecki@opensuse.org" date="1578571200">- Remove patch for Bazel files, which is not needed anymore:
  * 0001-bazel-Replace-boringssl-with-openssl.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1584014400">- Add conditional to build without python2 if needed</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1649160000">- Update in SLE-15 (bsc#1197726)</changelog>
</package>
<package pkgid="59e1bcd7ad574b239c4f4c26310f4a4a413f214ed97d3b64da629e78a1d8aacc" name="libgrpc++1" arch="x86_64">
  <version epoch="0" ver="1.25.0" rel="150200.3.5.1"/>
  <changelog author="tbechtold@suse.com" date="1526644800">- update to 1.12.0:
  Core:
  * Update protobuf submodule to 3.5.2 (#15114)
  * Make GrpcBuffer{Reader|Writer} Public (#14541)
  * Compile Out Tracers Option (#15108)
  * Fix bug in an address sorting comparison (#15208)
  * Fix: Check retry timer before starting resolving (#15156)
  * Fix c-ares resolution with default authority (#15073)
  * Fix c-ares resolver crash when DNS server unreachable (#15134)
  * Performance: Avoid low severity log message construction (#14945)
  * Peformance: Enable SIO_LOOPBACK_FAST_PATH on Windows (#14905)
  C#:
  * Add RpcException.StatusCode property (#15140)
  * Improvements to C# build instructions (#15178)
  Python:
  * Eliminate grpcio package dependency on protobuf package (#15034).
    Please pay extra attention if you are using gRPC with Protocol Buffers and
    your deployment scripts do not explicitly list the correct dependencies
    and used to rely on the transitive Python package dependency from grpcio to protobuf.
  * A new grpc.Channel.close method is introduced and correct use of gRPC
    Python now requires that channels be closed after use. No existing code
    should observably break when upgrading to 1.12 but code that creates
    channels but does not close them will not be supported in 1.13 and later.
  Core:
  * Fix: Check retry timer before starting resolving (#15156)
  * Fix c-ares resolution with default authority (#15073)
  * Fix c-ares resolver crash when DNS server unreachable (#15134)
  * Add core underpinnings for TLS session ticket support (#14483)
  * Experimental support for configurable retries (use at your own risk) (#10684)
  * Fail calls with wait_for_ready=false on transient resolver failure (#14733)
  * Fix a call stack ref flake (#14681)
  * c-ares DNS resolver sorts resolved addresses per RFC 6724 (#13290)
  * Use socklen_t instead of size_t for address length (fixes use case for some
    big endian systems) (#14464)
  * Initial part of channel tracing implementation (#13883, #14746, #14751)
  * Avoid crashes on environments with hot-plugged CPUs (#14712)
  * When building from source, Makefile now checks for minimum protobuf
    version 3.5.0 instead 3.0.0 (#14821)
  * gRPC Core public header no longer includes inttypes.h (#14676)
  * CMake improvements:
  * Add well-commented examples and continuous test for various ways of
    building gRPC as a dependency (via ExternalProject_Add in #14822,
    via add_subdirectory in #14864)
  * Remove internal tools from binaries installed by cmake install (#14850)
  * Simplify Android build example (#14885)
  * Enable SO_REUSEPORT in IPv6-only environments as well (#14748)
  C#:
  * Improvements in experimental support for Unity - added useful resources
    and improved support for loading grpc_csharp_ext on Unity (#14576, #14605)
  * Further prevent name collisions by using only fully qualified type
    names in C# code generator (#14524)
  * Fix C# connectivity watcher shutdown race (#14776)
  Objective-C:
  * Support for Keep-Alive (#14781)
  * Experimental C++ podspec now supports Apple framework (#14480)
  * Allow discarding generated implementation (leaving only protocol)
    with macro (#14490)
  * Better handling of network error (#14554)
  PHP:
  * Add missing -O2 compilation flag for pecl (#14768)
  * Update the reserved variable list to check in PHP code generator to
    match protobuf 3.5.0 (#13580)
  Python:
  * Progress towards full Beta API elimination (Beta API is and has been
    unsupported and will go away completely):
    Remove _face_interface_test tests for the Beta API (#14702)
  * Remove Python background poller thread (#14448)
    Note there is a small change in behavior. Before, clients would
    detect disconnected channels immediately.
  * Initial gevent compatibility (EXPERIMENTAL) (#14561)
  * Release the GIL when calling grpc_call_start_batch to improve
    performance under multithreaded scenarios. (#14801)
  Ruby:
  * Correct handling of underscores in package names by Protocol Buffers code
    generator for Ruby (#13634)
  * Source code and locally compiled (not cross-compiled) shared libraries
    (grpc_c.so files) are removed from the linux binary packages. This includes
    the packages targeting the x86_64-linux and x86-linux platforms (#14634)
  * Bug fix for a use-after-free related to access to a garbage collected
    object (#14809)
  * Get rid of the -Wno-format argument to compilation of the ruby extension
  * Documentation improvements (#14535)
  * Don?t raise GRPC::Core::CallErrors for failed reads or writes of bidi
    streaming calls (#14922)
  * Fix a race condition in an interrupt handler that could cause an
    assertion failure (#14953)</changelog>
  <changelog author="jengelh@inai.de" date="1526644801">- Switch to plain makefiles since they generate more shared libs.
- Remove grpc-build.diff, grpc-versioning.diff.</changelog>
  <changelog author="tbechtold@suse.com" date="1527249600">- build grpc python module for python2 and python3
  * add 0001-Allow-building-the-python-module-with-system-openssl.patch
  * add 0002-Allow-building-the-python-module-with-system-zlib.patch
  * add 0003-Allow-building-the-python-module-with-system-cares.patch</changelog>
  <changelog author="jengelh@inai.de" date="1529755200">- Throw out silly -Werror in release builds.</changelog>
  <changelog author="tbechtold@suse.com" date="1541937600">- update to 1.15.1:
  * Document SSL portability and performance considerations. See
    https://github.com/grpc/grpc/blob/master/doc/ssl-performance.md .
  * Simplify call arena size growth.
  * PF: Check connectivity state before watching.
  * Added system roots feature to load roots from OS trust store.
  * Fix re-resolution in pick first.
  * Allow error strings in final_info to propagate to filters on
    call destruction.
  * Add resolver executor.
  * Data race fix for lockfree_event.
  * Channelz: Expose new Core API.
  * cmake: disable assembly optimizations only when necessary.
  * C++ sync server: Return status RESOURCE_EXHAUSTED if no
    thread quota available.
  * Use correct target name for gflags-config.cmake.
  * Make should generate pkg-config file for gpr as well.
  * Restrict the number of threads in C++ sync server.
  * Allow reset of connection backoff.
- update to 1.14.2:
  * Add TROUBLESHOOTING.md guide
  * Fixed gRPC channels blocking indefinitely and not respecting
    deadlines on network disconnect.
  * Add user guide for keepalive.
  * Fix GRPC_ARG_HTTP2_MIN_RECV_PING_INTERVAL_WITHOUT_DATA_MS doc
    to restrict usage to server.
  * Fixed ordering in adding pending picks to Round Robin LB.
  * Implement local channel/server credentials for UDS connections.
  * Allow extra copy in zero-copy protector integrity-only mode.
  * Update to use the canonical version of LB proto.
  * Prefer using https_proxy over http_proxy.
  * Refactor to put c-ares queries under a combiner.
  * Remove already_closed parameter from fd_orphan.
  * Add channel arg to enable/disable http proxy.
  * Fix shutdown of closed fd when c-ares opens a second fd.
  * Fixed segmentation fault when product name from BIOS is empty.
  * Introduce server-side load reporting service.
  * Reorder steps in ServerBuilder::BuildAndStart().
  * Support Per-Method Codegen Generic on Server Side.
  * Protobuf-related headers are available in a subspec of
    gRPC-C++ podspec.
- update to 1.13.1:
  * gRPC stats will only be collected for debug builds or if
    GRPC_COLLECT_STATS is defined. It will be disabled for opt
    builds.
  * Fix for Issue #13553. Unlimited can now be set as the max
    receive message length.
  * cmake install now also installs should also installs the
    roots.pem file.
- Drop 0001-Allow-building-the-python-module-with-system-openssl.patch
  Applied upstream
- Drop 0002-Allow-building-the-python-module-with-system-zlib.patch
  Applied upstream
- 0003-Allow-building-the-python-module-with-system-cares.patch
  Applied upstream</changelog>
  <changelog author="jengelh@inai.de" date="1541937601">- Update to new upstream release 1.16
  * Keepalive watchdog firing should return status UNAVAILABLE.
  * Set TCP_USER_TIMEOUT socket option for Linux.
  * Turn loading system root certificate as default.
  * Change pick_first to not unref unselected subchannels.
  * cmake: prevent C core from depending on libstdc++.
  * Implement Watch method in health check service.</changelog>
  <changelog author="mrostecki@suse.de" date="1546862400">- Add grpc-source package - some Go programs using gRPC need
  protobuf definitions which are included inside the source code,
  but are not included in the devel package.</changelog>
  <changelog author="jengelh@inai.de" date="1552737600">- Update to new upstream release 1.19.1
  * Use 32-bit nanopb fields.
  * Avoid SRV and TXT lookups for localhost.
  * Set c-ares as the default resolver.</changelog>
  <changelog author="sbrabec@suse.com" date="1555070400">- Fix typo in Groups.</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 1.21.3
  * Add SPIFFE security stack to gRPC.
  * Re-enable ALPN check in gRPC C core SSL stack.</changelog>
  <changelog author="jengelh@inai.de" date="1566129600">- Update to new upstream release 1.23 [boo#1144068]
  * Fixed a bug where POST_RECV_MESSAGE was not being triggered.
  * Renamed root certificate bundle in gRPC-C++ pod.
  * Increased lower bound on DNS re-resolution period to 30 seconds.
  * Fixed a segfault when forking while using gevent.
  * Added channel idleness support
  * Added threadpool support</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Disable LTO because it's broken.</changelog>
  <changelog author="jengelh@inai.de" date="1570017600">- Update to release 1.23.1
  * Unspecific refinements, improvements, and bug fixes.
- Add gettid.patch
- Split libgrpc into libgrpc++ because that has a SO version
  group of its own.
- Bump libgrpc6 to libgrpc7 as there is actually .so.7 files.
  Add suitable Conflicts markers.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1570708800">- Make sure that patches are included in the source package.
- Filter out several rpmlintrc warnings for the source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1572955200">- Add patch which replaces BoringSSL with OpenSSL as the SSL
  library when grpc is used as a Bazel dependency:
  * 0001-bazel-Replace-boringssl-with-openssl.patch</changelog>
  <changelog author="mrostecki@opensuse.org" date="1573473600">- Define BoringSSL as a Bazel dependency in WORKSPACE instead of
  grpc_deps.bzl - using new_local_repository function is now always
  allowed in imported modules.</changelog>
  <changelog author="jengelh@inai.de" date="1576497600">- Update to release 1.25
  * Change RR to consider a subchannel in TF if it has failed
    since it was READY.
  * Do not create streams after a GOAWAY has been received.
  * Prevent HTTP2 parser from queueing a lot of induced frames.
- Drop gettid.patch</changelog>
  <changelog author="mrostecki@opensuse.org" date="1578571200">- Remove patch for Bazel files, which is not needed anymore:
  * 0001-bazel-Replace-boringssl-with-openssl.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1584014400">- Add conditional to build without python2 if needed</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1649160000">- Update in SLE-15 (bsc#1197726)</changelog>
</package>
<package pkgid="38dbdbc079f3b88eea7e8a96bded2fa2913e4c1cc1a4017682ca1616503375e7" name="libgrpc8" arch="aarch64">
  <version epoch="0" ver="1.25.0" rel="150200.3.5.1"/>
  <changelog author="tbechtold@suse.com" date="1526644800">- update to 1.12.0:
  Core:
  * Update protobuf submodule to 3.5.2 (#15114)
  * Make GrpcBuffer{Reader|Writer} Public (#14541)
  * Compile Out Tracers Option (#15108)
  * Fix bug in an address sorting comparison (#15208)
  * Fix: Check retry timer before starting resolving (#15156)
  * Fix c-ares resolution with default authority (#15073)
  * Fix c-ares resolver crash when DNS server unreachable (#15134)
  * Performance: Avoid low severity log message construction (#14945)
  * Peformance: Enable SIO_LOOPBACK_FAST_PATH on Windows (#14905)
  C#:
  * Add RpcException.StatusCode property (#15140)
  * Improvements to C# build instructions (#15178)
  Python:
  * Eliminate grpcio package dependency on protobuf package (#15034).
    Please pay extra attention if you are using gRPC with Protocol Buffers and
    your deployment scripts do not explicitly list the correct dependencies
    and used to rely on the transitive Python package dependency from grpcio to protobuf.
  * A new grpc.Channel.close method is introduced and correct use of gRPC
    Python now requires that channels be closed after use. No existing code
    should observably break when upgrading to 1.12 but code that creates
    channels but does not close them will not be supported in 1.13 and later.
  Core:
  * Fix: Check retry timer before starting resolving (#15156)
  * Fix c-ares resolution with default authority (#15073)
  * Fix c-ares resolver crash when DNS server unreachable (#15134)
  * Add core underpinnings for TLS session ticket support (#14483)
  * Experimental support for configurable retries (use at your own risk) (#10684)
  * Fail calls with wait_for_ready=false on transient resolver failure (#14733)
  * Fix a call stack ref flake (#14681)
  * c-ares DNS resolver sorts resolved addresses per RFC 6724 (#13290)
  * Use socklen_t instead of size_t for address length (fixes use case for some
    big endian systems) (#14464)
  * Initial part of channel tracing implementation (#13883, #14746, #14751)
  * Avoid crashes on environments with hot-plugged CPUs (#14712)
  * When building from source, Makefile now checks for minimum protobuf
    version 3.5.0 instead 3.0.0 (#14821)
  * gRPC Core public header no longer includes inttypes.h (#14676)
  * CMake improvements:
  * Add well-commented examples and continuous test for various ways of
    building gRPC as a dependency (via ExternalProject_Add in #14822,
    via add_subdirectory in #14864)
  * Remove internal tools from binaries installed by cmake install (#14850)
  * Simplify Android build example (#14885)
  * Enable SO_REUSEPORT in IPv6-only environments as well (#14748)
  C#:
  * Improvements in experimental support for Unity - added useful resources
    and improved support for loading grpc_csharp_ext on Unity (#14576, #14605)
  * Further prevent name collisions by using only fully qualified type
    names in C# code generator (#14524)
  * Fix C# connectivity watcher shutdown race (#14776)
  Objective-C:
  * Support for Keep-Alive (#14781)
  * Experimental C++ podspec now supports Apple framework (#14480)
  * Allow discarding generated implementation (leaving only protocol)
    with macro (#14490)
  * Better handling of network error (#14554)
  PHP:
  * Add missing -O2 compilation flag for pecl (#14768)
  * Update the reserved variable list to check in PHP code generator to
    match protobuf 3.5.0 (#13580)
  Python:
  * Progress towards full Beta API elimination (Beta API is and has been
    unsupported and will go away completely):
    Remove _face_interface_test tests for the Beta API (#14702)
  * Remove Python background poller thread (#14448)
    Note there is a small change in behavior. Before, clients would
    detect disconnected channels immediately.
  * Initial gevent compatibility (EXPERIMENTAL) (#14561)
  * Release the GIL when calling grpc_call_start_batch to improve
    performance under multithreaded scenarios. (#14801)
  Ruby:
  * Correct handling of underscores in package names by Protocol Buffers code
    generator for Ruby (#13634)
  * Source code and locally compiled (not cross-compiled) shared libraries
    (grpc_c.so files) are removed from the linux binary packages. This includes
    the packages targeting the x86_64-linux and x86-linux platforms (#14634)
  * Bug fix for a use-after-free related to access to a garbage collected
    object (#14809)
  * Get rid of the -Wno-format argument to compilation of the ruby extension
  * Documentation improvements (#14535)
  * Don?t raise GRPC::Core::CallErrors for failed reads or writes of bidi
    streaming calls (#14922)
  * Fix a race condition in an interrupt handler that could cause an
    assertion failure (#14953)</changelog>
  <changelog author="jengelh@inai.de" date="1526644801">- Switch to plain makefiles since they generate more shared libs.
- Remove grpc-build.diff, grpc-versioning.diff.</changelog>
  <changelog author="tbechtold@suse.com" date="1527249600">- build grpc python module for python2 and python3
  * add 0001-Allow-building-the-python-module-with-system-openssl.patch
  * add 0002-Allow-building-the-python-module-with-system-zlib.patch
  * add 0003-Allow-building-the-python-module-with-system-cares.patch</changelog>
  <changelog author="jengelh@inai.de" date="1529755200">- Throw out silly -Werror in release builds.</changelog>
  <changelog author="tbechtold@suse.com" date="1541937600">- update to 1.15.1:
  * Document SSL portability and performance considerations. See
    https://github.com/grpc/grpc/blob/master/doc/ssl-performance.md .
  * Simplify call arena size growth.
  * PF: Check connectivity state before watching.
  * Added system roots feature to load roots from OS trust store.
  * Fix re-resolution in pick first.
  * Allow error strings in final_info to propagate to filters on
    call destruction.
  * Add resolver executor.
  * Data race fix for lockfree_event.
  * Channelz: Expose new Core API.
  * cmake: disable assembly optimizations only when necessary.
  * C++ sync server: Return status RESOURCE_EXHAUSTED if no
    thread quota available.
  * Use correct target name for gflags-config.cmake.
  * Make should generate pkg-config file for gpr as well.
  * Restrict the number of threads in C++ sync server.
  * Allow reset of connection backoff.
- update to 1.14.2:
  * Add TROUBLESHOOTING.md guide
  * Fixed gRPC channels blocking indefinitely and not respecting
    deadlines on network disconnect.
  * Add user guide for keepalive.
  * Fix GRPC_ARG_HTTP2_MIN_RECV_PING_INTERVAL_WITHOUT_DATA_MS doc
    to restrict usage to server.
  * Fixed ordering in adding pending picks to Round Robin LB.
  * Implement local channel/server credentials for UDS connections.
  * Allow extra copy in zero-copy protector integrity-only mode.
  * Update to use the canonical version of LB proto.
  * Prefer using https_proxy over http_proxy.
  * Refactor to put c-ares queries under a combiner.
  * Remove already_closed parameter from fd_orphan.
  * Add channel arg to enable/disable http proxy.
  * Fix shutdown of closed fd when c-ares opens a second fd.
  * Fixed segmentation fault when product name from BIOS is empty.
  * Introduce server-side load reporting service.
  * Reorder steps in ServerBuilder::BuildAndStart().
  * Support Per-Method Codegen Generic on Server Side.
  * Protobuf-related headers are available in a subspec of
    gRPC-C++ podspec.
- update to 1.13.1:
  * gRPC stats will only be collected for debug builds or if
    GRPC_COLLECT_STATS is defined. It will be disabled for opt
    builds.
  * Fix for Issue #13553. Unlimited can now be set as the max
    receive message length.
  * cmake install now also installs should also installs the
    roots.pem file.
- Drop 0001-Allow-building-the-python-module-with-system-openssl.patch
  Applied upstream
- Drop 0002-Allow-building-the-python-module-with-system-zlib.patch
  Applied upstream
- 0003-Allow-building-the-python-module-with-system-cares.patch
  Applied upstream</changelog>
  <changelog author="jengelh@inai.de" date="1541937601">- Update to new upstream release 1.16
  * Keepalive watchdog firing should return status UNAVAILABLE.
  * Set TCP_USER_TIMEOUT socket option for Linux.
  * Turn loading system root certificate as default.
  * Change pick_first to not unref unselected subchannels.
  * cmake: prevent C core from depending on libstdc++.
  * Implement Watch method in health check service.</changelog>
  <changelog author="mrostecki@suse.de" date="1546862400">- Add grpc-source package - some Go programs using gRPC need
  protobuf definitions which are included inside the source code,
  but are not included in the devel package.</changelog>
  <changelog author="jengelh@inai.de" date="1552737600">- Update to new upstream release 1.19.1
  * Use 32-bit nanopb fields.
  * Avoid SRV and TXT lookups for localhost.
  * Set c-ares as the default resolver.</changelog>
  <changelog author="sbrabec@suse.com" date="1555070400">- Fix typo in Groups.</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 1.21.3
  * Add SPIFFE security stack to gRPC.
  * Re-enable ALPN check in gRPC C core SSL stack.</changelog>
  <changelog author="jengelh@inai.de" date="1566129600">- Update to new upstream release 1.23 [boo#1144068]
  * Fixed a bug where POST_RECV_MESSAGE was not being triggered.
  * Renamed root certificate bundle in gRPC-C++ pod.
  * Increased lower bound on DNS re-resolution period to 30 seconds.
  * Fixed a segfault when forking while using gevent.
  * Added channel idleness support
  * Added threadpool support</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Disable LTO because it's broken.</changelog>
  <changelog author="jengelh@inai.de" date="1570017600">- Update to release 1.23.1
  * Unspecific refinements, improvements, and bug fixes.
- Add gettid.patch
- Split libgrpc into libgrpc++ because that has a SO version
  group of its own.
- Bump libgrpc6 to libgrpc7 as there is actually .so.7 files.
  Add suitable Conflicts markers.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1570708800">- Make sure that patches are included in the source package.
- Filter out several rpmlintrc warnings for the source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1572955200">- Add patch which replaces BoringSSL with OpenSSL as the SSL
  library when grpc is used as a Bazel dependency:
  * 0001-bazel-Replace-boringssl-with-openssl.patch</changelog>
  <changelog author="mrostecki@opensuse.org" date="1573473600">- Define BoringSSL as a Bazel dependency in WORKSPACE instead of
  grpc_deps.bzl - using new_local_repository function is now always
  allowed in imported modules.</changelog>
  <changelog author="jengelh@inai.de" date="1576497600">- Update to release 1.25
  * Change RR to consider a subchannel in TF if it has failed
    since it was READY.
  * Do not create streams after a GOAWAY has been received.
  * Prevent HTTP2 parser from queueing a lot of induced frames.
- Drop gettid.patch</changelog>
  <changelog author="mrostecki@opensuse.org" date="1578571200">- Remove patch for Bazel files, which is not needed anymore:
  * 0001-bazel-Replace-boringssl-with-openssl.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1584014400">- Add conditional to build without python2 if needed</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1649160000">- Update in SLE-15 (bsc#1197726)</changelog>
</package>
<package pkgid="9f78545a9208472e31a3d1a54874abedd0046e168ffe7903ed7a0fd3b812f9ac" name="libgrpc8" arch="ppc64le">
  <version epoch="0" ver="1.25.0" rel="150200.3.5.1"/>
  <changelog author="tbechtold@suse.com" date="1526644800">- update to 1.12.0:
  Core:
  * Update protobuf submodule to 3.5.2 (#15114)
  * Make GrpcBuffer{Reader|Writer} Public (#14541)
  * Compile Out Tracers Option (#15108)
  * Fix bug in an address sorting comparison (#15208)
  * Fix: Check retry timer before starting resolving (#15156)
  * Fix c-ares resolution with default authority (#15073)
  * Fix c-ares resolver crash when DNS server unreachable (#15134)
  * Performance: Avoid low severity log message construction (#14945)
  * Peformance: Enable SIO_LOOPBACK_FAST_PATH on Windows (#14905)
  C#:
  * Add RpcException.StatusCode property (#15140)
  * Improvements to C# build instructions (#15178)
  Python:
  * Eliminate grpcio package dependency on protobuf package (#15034).
    Please pay extra attention if you are using gRPC with Protocol Buffers and
    your deployment scripts do not explicitly list the correct dependencies
    and used to rely on the transitive Python package dependency from grpcio to protobuf.
  * A new grpc.Channel.close method is introduced and correct use of gRPC
    Python now requires that channels be closed after use. No existing code
    should observably break when upgrading to 1.12 but code that creates
    channels but does not close them will not be supported in 1.13 and later.
  Core:
  * Fix: Check retry timer before starting resolving (#15156)
  * Fix c-ares resolution with default authority (#15073)
  * Fix c-ares resolver crash when DNS server unreachable (#15134)
  * Add core underpinnings for TLS session ticket support (#14483)
  * Experimental support for configurable retries (use at your own risk) (#10684)
  * Fail calls with wait_for_ready=false on transient resolver failure (#14733)
  * Fix a call stack ref flake (#14681)
  * c-ares DNS resolver sorts resolved addresses per RFC 6724 (#13290)
  * Use socklen_t instead of size_t for address length (fixes use case for some
    big endian systems) (#14464)
  * Initial part of channel tracing implementation (#13883, #14746, #14751)
  * Avoid crashes on environments with hot-plugged CPUs (#14712)
  * When building from source, Makefile now checks for minimum protobuf
    version 3.5.0 instead 3.0.0 (#14821)
  * gRPC Core public header no longer includes inttypes.h (#14676)
  * CMake improvements:
  * Add well-commented examples and continuous test for various ways of
    building gRPC as a dependency (via ExternalProject_Add in #14822,
    via add_subdirectory in #14864)
  * Remove internal tools from binaries installed by cmake install (#14850)
  * Simplify Android build example (#14885)
  * Enable SO_REUSEPORT in IPv6-only environments as well (#14748)
  C#:
  * Improvements in experimental support for Unity - added useful resources
    and improved support for loading grpc_csharp_ext on Unity (#14576, #14605)
  * Further prevent name collisions by using only fully qualified type
    names in C# code generator (#14524)
  * Fix C# connectivity watcher shutdown race (#14776)
  Objective-C:
  * Support for Keep-Alive (#14781)
  * Experimental C++ podspec now supports Apple framework (#14480)
  * Allow discarding generated implementation (leaving only protocol)
    with macro (#14490)
  * Better handling of network error (#14554)
  PHP:
  * Add missing -O2 compilation flag for pecl (#14768)
  * Update the reserved variable list to check in PHP code generator to
    match protobuf 3.5.0 (#13580)
  Python:
  * Progress towards full Beta API elimination (Beta API is and has been
    unsupported and will go away completely):
    Remove _face_interface_test tests for the Beta API (#14702)
  * Remove Python background poller thread (#14448)
    Note there is a small change in behavior. Before, clients would
    detect disconnected channels immediately.
  * Initial gevent compatibility (EXPERIMENTAL) (#14561)
  * Release the GIL when calling grpc_call_start_batch to improve
    performance under multithreaded scenarios. (#14801)
  Ruby:
  * Correct handling of underscores in package names by Protocol Buffers code
    generator for Ruby (#13634)
  * Source code and locally compiled (not cross-compiled) shared libraries
    (grpc_c.so files) are removed from the linux binary packages. This includes
    the packages targeting the x86_64-linux and x86-linux platforms (#14634)
  * Bug fix for a use-after-free related to access to a garbage collected
    object (#14809)
  * Get rid of the -Wno-format argument to compilation of the ruby extension
  * Documentation improvements (#14535)
  * Don?t raise GRPC::Core::CallErrors for failed reads or writes of bidi
    streaming calls (#14922)
  * Fix a race condition in an interrupt handler that could cause an
    assertion failure (#14953)</changelog>
  <changelog author="jengelh@inai.de" date="1526644801">- Switch to plain makefiles since they generate more shared libs.
- Remove grpc-build.diff, grpc-versioning.diff.</changelog>
  <changelog author="tbechtold@suse.com" date="1527249600">- build grpc python module for python2 and python3
  * add 0001-Allow-building-the-python-module-with-system-openssl.patch
  * add 0002-Allow-building-the-python-module-with-system-zlib.patch
  * add 0003-Allow-building-the-python-module-with-system-cares.patch</changelog>
  <changelog author="jengelh@inai.de" date="1529755200">- Throw out silly -Werror in release builds.</changelog>
  <changelog author="tbechtold@suse.com" date="1541937600">- update to 1.15.1:
  * Document SSL portability and performance considerations. See
    https://github.com/grpc/grpc/blob/master/doc/ssl-performance.md .
  * Simplify call arena size growth.
  * PF: Check connectivity state before watching.
  * Added system roots feature to load roots from OS trust store.
  * Fix re-resolution in pick first.
  * Allow error strings in final_info to propagate to filters on
    call destruction.
  * Add resolver executor.
  * Data race fix for lockfree_event.
  * Channelz: Expose new Core API.
  * cmake: disable assembly optimizations only when necessary.
  * C++ sync server: Return status RESOURCE_EXHAUSTED if no
    thread quota available.
  * Use correct target name for gflags-config.cmake.
  * Make should generate pkg-config file for gpr as well.
  * Restrict the number of threads in C++ sync server.
  * Allow reset of connection backoff.
- update to 1.14.2:
  * Add TROUBLESHOOTING.md guide
  * Fixed gRPC channels blocking indefinitely and not respecting
    deadlines on network disconnect.
  * Add user guide for keepalive.
  * Fix GRPC_ARG_HTTP2_MIN_RECV_PING_INTERVAL_WITHOUT_DATA_MS doc
    to restrict usage to server.
  * Fixed ordering in adding pending picks to Round Robin LB.
  * Implement local channel/server credentials for UDS connections.
  * Allow extra copy in zero-copy protector integrity-only mode.
  * Update to use the canonical version of LB proto.
  * Prefer using https_proxy over http_proxy.
  * Refactor to put c-ares queries under a combiner.
  * Remove already_closed parameter from fd_orphan.
  * Add channel arg to enable/disable http proxy.
  * Fix shutdown of closed fd when c-ares opens a second fd.
  * Fixed segmentation fault when product name from BIOS is empty.
  * Introduce server-side load reporting service.
  * Reorder steps in ServerBuilder::BuildAndStart().
  * Support Per-Method Codegen Generic on Server Side.
  * Protobuf-related headers are available in a subspec of
    gRPC-C++ podspec.
- update to 1.13.1:
  * gRPC stats will only be collected for debug builds or if
    GRPC_COLLECT_STATS is defined. It will be disabled for opt
    builds.
  * Fix for Issue #13553. Unlimited can now be set as the max
    receive message length.
  * cmake install now also installs should also installs the
    roots.pem file.
- Drop 0001-Allow-building-the-python-module-with-system-openssl.patch
  Applied upstream
- Drop 0002-Allow-building-the-python-module-with-system-zlib.patch
  Applied upstream
- 0003-Allow-building-the-python-module-with-system-cares.patch
  Applied upstream</changelog>
  <changelog author="jengelh@inai.de" date="1541937601">- Update to new upstream release 1.16
  * Keepalive watchdog firing should return status UNAVAILABLE.
  * Set TCP_USER_TIMEOUT socket option for Linux.
  * Turn loading system root certificate as default.
  * Change pick_first to not unref unselected subchannels.
  * cmake: prevent C core from depending on libstdc++.
  * Implement Watch method in health check service.</changelog>
  <changelog author="mrostecki@suse.de" date="1546862400">- Add grpc-source package - some Go programs using gRPC need
  protobuf definitions which are included inside the source code,
  but are not included in the devel package.</changelog>
  <changelog author="jengelh@inai.de" date="1552737600">- Update to new upstream release 1.19.1
  * Use 32-bit nanopb fields.
  * Avoid SRV and TXT lookups for localhost.
  * Set c-ares as the default resolver.</changelog>
  <changelog author="sbrabec@suse.com" date="1555070400">- Fix typo in Groups.</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 1.21.3
  * Add SPIFFE security stack to gRPC.
  * Re-enable ALPN check in gRPC C core SSL stack.</changelog>
  <changelog author="jengelh@inai.de" date="1566129600">- Update to new upstream release 1.23 [boo#1144068]
  * Fixed a bug where POST_RECV_MESSAGE was not being triggered.
  * Renamed root certificate bundle in gRPC-C++ pod.
  * Increased lower bound on DNS re-resolution period to 30 seconds.
  * Fixed a segfault when forking while using gevent.
  * Added channel idleness support
  * Added threadpool support</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Disable LTO because it's broken.</changelog>
  <changelog author="jengelh@inai.de" date="1570017600">- Update to release 1.23.1
  * Unspecific refinements, improvements, and bug fixes.
- Add gettid.patch
- Split libgrpc into libgrpc++ because that has a SO version
  group of its own.
- Bump libgrpc6 to libgrpc7 as there is actually .so.7 files.
  Add suitable Conflicts markers.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1570708800">- Make sure that patches are included in the source package.
- Filter out several rpmlintrc warnings for the source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1572955200">- Add patch which replaces BoringSSL with OpenSSL as the SSL
  library when grpc is used as a Bazel dependency:
  * 0001-bazel-Replace-boringssl-with-openssl.patch</changelog>
  <changelog author="mrostecki@opensuse.org" date="1573473600">- Define BoringSSL as a Bazel dependency in WORKSPACE instead of
  grpc_deps.bzl - using new_local_repository function is now always
  allowed in imported modules.</changelog>
  <changelog author="jengelh@inai.de" date="1576497600">- Update to release 1.25
  * Change RR to consider a subchannel in TF if it has failed
    since it was READY.
  * Do not create streams after a GOAWAY has been received.
  * Prevent HTTP2 parser from queueing a lot of induced frames.
- Drop gettid.patch</changelog>
  <changelog author="mrostecki@opensuse.org" date="1578571200">- Remove patch for Bazel files, which is not needed anymore:
  * 0001-bazel-Replace-boringssl-with-openssl.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1584014400">- Add conditional to build without python2 if needed</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1649160000">- Update in SLE-15 (bsc#1197726)</changelog>
</package>
<package pkgid="84c18fa46a7838e1aa39909dbe2f03f2b09a7675602525609737417f4ff1f72c" name="libgrpc8" arch="s390x">
  <version epoch="0" ver="1.25.0" rel="150200.3.5.1"/>
  <changelog author="tbechtold@suse.com" date="1526644800">- update to 1.12.0:
  Core:
  * Update protobuf submodule to 3.5.2 (#15114)
  * Make GrpcBuffer{Reader|Writer} Public (#14541)
  * Compile Out Tracers Option (#15108)
  * Fix bug in an address sorting comparison (#15208)
  * Fix: Check retry timer before starting resolving (#15156)
  * Fix c-ares resolution with default authority (#15073)
  * Fix c-ares resolver crash when DNS server unreachable (#15134)
  * Performance: Avoid low severity log message construction (#14945)
  * Peformance: Enable SIO_LOOPBACK_FAST_PATH on Windows (#14905)
  C#:
  * Add RpcException.StatusCode property (#15140)
  * Improvements to C# build instructions (#15178)
  Python:
  * Eliminate grpcio package dependency on protobuf package (#15034).
    Please pay extra attention if you are using gRPC with Protocol Buffers and
    your deployment scripts do not explicitly list the correct dependencies
    and used to rely on the transitive Python package dependency from grpcio to protobuf.
  * A new grpc.Channel.close method is introduced and correct use of gRPC
    Python now requires that channels be closed after use. No existing code
    should observably break when upgrading to 1.12 but code that creates
    channels but does not close them will not be supported in 1.13 and later.
  Core:
  * Fix: Check retry timer before starting resolving (#15156)
  * Fix c-ares resolution with default authority (#15073)
  * Fix c-ares resolver crash when DNS server unreachable (#15134)
  * Add core underpinnings for TLS session ticket support (#14483)
  * Experimental support for configurable retries (use at your own risk) (#10684)
  * Fail calls with wait_for_ready=false on transient resolver failure (#14733)
  * Fix a call stack ref flake (#14681)
  * c-ares DNS resolver sorts resolved addresses per RFC 6724 (#13290)
  * Use socklen_t instead of size_t for address length (fixes use case for some
    big endian systems) (#14464)
  * Initial part of channel tracing implementation (#13883, #14746, #14751)
  * Avoid crashes on environments with hot-plugged CPUs (#14712)
  * When building from source, Makefile now checks for minimum protobuf
    version 3.5.0 instead 3.0.0 (#14821)
  * gRPC Core public header no longer includes inttypes.h (#14676)
  * CMake improvements:
  * Add well-commented examples and continuous test for various ways of
    building gRPC as a dependency (via ExternalProject_Add in #14822,
    via add_subdirectory in #14864)
  * Remove internal tools from binaries installed by cmake install (#14850)
  * Simplify Android build example (#14885)
  * Enable SO_REUSEPORT in IPv6-only environments as well (#14748)
  C#:
  * Improvements in experimental support for Unity - added useful resources
    and improved support for loading grpc_csharp_ext on Unity (#14576, #14605)
  * Further prevent name collisions by using only fully qualified type
    names in C# code generator (#14524)
  * Fix C# connectivity watcher shutdown race (#14776)
  Objective-C:
  * Support for Keep-Alive (#14781)
  * Experimental C++ podspec now supports Apple framework (#14480)
  * Allow discarding generated implementation (leaving only protocol)
    with macro (#14490)
  * Better handling of network error (#14554)
  PHP:
  * Add missing -O2 compilation flag for pecl (#14768)
  * Update the reserved variable list to check in PHP code generator to
    match protobuf 3.5.0 (#13580)
  Python:
  * Progress towards full Beta API elimination (Beta API is and has been
    unsupported and will go away completely):
    Remove _face_interface_test tests for the Beta API (#14702)
  * Remove Python background poller thread (#14448)
    Note there is a small change in behavior. Before, clients would
    detect disconnected channels immediately.
  * Initial gevent compatibility (EXPERIMENTAL) (#14561)
  * Release the GIL when calling grpc_call_start_batch to improve
    performance under multithreaded scenarios. (#14801)
  Ruby:
  * Correct handling of underscores in package names by Protocol Buffers code
    generator for Ruby (#13634)
  * Source code and locally compiled (not cross-compiled) shared libraries
    (grpc_c.so files) are removed from the linux binary packages. This includes
    the packages targeting the x86_64-linux and x86-linux platforms (#14634)
  * Bug fix for a use-after-free related to access to a garbage collected
    object (#14809)
  * Get rid of the -Wno-format argument to compilation of the ruby extension
  * Documentation improvements (#14535)
  * Don?t raise GRPC::Core::CallErrors for failed reads or writes of bidi
    streaming calls (#14922)
  * Fix a race condition in an interrupt handler that could cause an
    assertion failure (#14953)</changelog>
  <changelog author="jengelh@inai.de" date="1526644801">- Switch to plain makefiles since they generate more shared libs.
- Remove grpc-build.diff, grpc-versioning.diff.</changelog>
  <changelog author="tbechtold@suse.com" date="1527249600">- build grpc python module for python2 and python3
  * add 0001-Allow-building-the-python-module-with-system-openssl.patch
  * add 0002-Allow-building-the-python-module-with-system-zlib.patch
  * add 0003-Allow-building-the-python-module-with-system-cares.patch</changelog>
  <changelog author="jengelh@inai.de" date="1529755200">- Throw out silly -Werror in release builds.</changelog>
  <changelog author="tbechtold@suse.com" date="1541937600">- update to 1.15.1:
  * Document SSL portability and performance considerations. See
    https://github.com/grpc/grpc/blob/master/doc/ssl-performance.md .
  * Simplify call arena size growth.
  * PF: Check connectivity state before watching.
  * Added system roots feature to load roots from OS trust store.
  * Fix re-resolution in pick first.
  * Allow error strings in final_info to propagate to filters on
    call destruction.
  * Add resolver executor.
  * Data race fix for lockfree_event.
  * Channelz: Expose new Core API.
  * cmake: disable assembly optimizations only when necessary.
  * C++ sync server: Return status RESOURCE_EXHAUSTED if no
    thread quota available.
  * Use correct target name for gflags-config.cmake.
  * Make should generate pkg-config file for gpr as well.
  * Restrict the number of threads in C++ sync server.
  * Allow reset of connection backoff.
- update to 1.14.2:
  * Add TROUBLESHOOTING.md guide
  * Fixed gRPC channels blocking indefinitely and not respecting
    deadlines on network disconnect.
  * Add user guide for keepalive.
  * Fix GRPC_ARG_HTTP2_MIN_RECV_PING_INTERVAL_WITHOUT_DATA_MS doc
    to restrict usage to server.
  * Fixed ordering in adding pending picks to Round Robin LB.
  * Implement local channel/server credentials for UDS connections.
  * Allow extra copy in zero-copy protector integrity-only mode.
  * Update to use the canonical version of LB proto.
  * Prefer using https_proxy over http_proxy.
  * Refactor to put c-ares queries under a combiner.
  * Remove already_closed parameter from fd_orphan.
  * Add channel arg to enable/disable http proxy.
  * Fix shutdown of closed fd when c-ares opens a second fd.
  * Fixed segmentation fault when product name from BIOS is empty.
  * Introduce server-side load reporting service.
  * Reorder steps in ServerBuilder::BuildAndStart().
  * Support Per-Method Codegen Generic on Server Side.
  * Protobuf-related headers are available in a subspec of
    gRPC-C++ podspec.
- update to 1.13.1:
  * gRPC stats will only be collected for debug builds or if
    GRPC_COLLECT_STATS is defined. It will be disabled for opt
    builds.
  * Fix for Issue #13553. Unlimited can now be set as the max
    receive message length.
  * cmake install now also installs should also installs the
    roots.pem file.
- Drop 0001-Allow-building-the-python-module-with-system-openssl.patch
  Applied upstream
- Drop 0002-Allow-building-the-python-module-with-system-zlib.patch
  Applied upstream
- 0003-Allow-building-the-python-module-with-system-cares.patch
  Applied upstream</changelog>
  <changelog author="jengelh@inai.de" date="1541937601">- Update to new upstream release 1.16
  * Keepalive watchdog firing should return status UNAVAILABLE.
  * Set TCP_USER_TIMEOUT socket option for Linux.
  * Turn loading system root certificate as default.
  * Change pick_first to not unref unselected subchannels.
  * cmake: prevent C core from depending on libstdc++.
  * Implement Watch method in health check service.</changelog>
  <changelog author="mrostecki@suse.de" date="1546862400">- Add grpc-source package - some Go programs using gRPC need
  protobuf definitions which are included inside the source code,
  but are not included in the devel package.</changelog>
  <changelog author="jengelh@inai.de" date="1552737600">- Update to new upstream release 1.19.1
  * Use 32-bit nanopb fields.
  * Avoid SRV and TXT lookups for localhost.
  * Set c-ares as the default resolver.</changelog>
  <changelog author="sbrabec@suse.com" date="1555070400">- Fix typo in Groups.</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 1.21.3
  * Add SPIFFE security stack to gRPC.
  * Re-enable ALPN check in gRPC C core SSL stack.</changelog>
  <changelog author="jengelh@inai.de" date="1566129600">- Update to new upstream release 1.23 [boo#1144068]
  * Fixed a bug where POST_RECV_MESSAGE was not being triggered.
  * Renamed root certificate bundle in gRPC-C++ pod.
  * Increased lower bound on DNS re-resolution period to 30 seconds.
  * Fixed a segfault when forking while using gevent.
  * Added channel idleness support
  * Added threadpool support</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Disable LTO because it's broken.</changelog>
  <changelog author="jengelh@inai.de" date="1570017600">- Update to release 1.23.1
  * Unspecific refinements, improvements, and bug fixes.
- Add gettid.patch
- Split libgrpc into libgrpc++ because that has a SO version
  group of its own.
- Bump libgrpc6 to libgrpc7 as there is actually .so.7 files.
  Add suitable Conflicts markers.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1570708800">- Make sure that patches are included in the source package.
- Filter out several rpmlintrc warnings for the source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1572955200">- Add patch which replaces BoringSSL with OpenSSL as the SSL
  library when grpc is used as a Bazel dependency:
  * 0001-bazel-Replace-boringssl-with-openssl.patch</changelog>
  <changelog author="mrostecki@opensuse.org" date="1573473600">- Define BoringSSL as a Bazel dependency in WORKSPACE instead of
  grpc_deps.bzl - using new_local_repository function is now always
  allowed in imported modules.</changelog>
  <changelog author="jengelh@inai.de" date="1576497600">- Update to release 1.25
  * Change RR to consider a subchannel in TF if it has failed
    since it was READY.
  * Do not create streams after a GOAWAY has been received.
  * Prevent HTTP2 parser from queueing a lot of induced frames.
- Drop gettid.patch</changelog>
  <changelog author="mrostecki@opensuse.org" date="1578571200">- Remove patch for Bazel files, which is not needed anymore:
  * 0001-bazel-Replace-boringssl-with-openssl.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1584014400">- Add conditional to build without python2 if needed</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1649160000">- Update in SLE-15 (bsc#1197726)</changelog>
</package>
<package pkgid="86f89ef12a48baf90320e2fde9d6a3d0e162a7252d505777b3dc8d05b8db32db" name="libgrpc8" arch="x86_64">
  <version epoch="0" ver="1.25.0" rel="150200.3.5.1"/>
  <changelog author="tbechtold@suse.com" date="1526644800">- update to 1.12.0:
  Core:
  * Update protobuf submodule to 3.5.2 (#15114)
  * Make GrpcBuffer{Reader|Writer} Public (#14541)
  * Compile Out Tracers Option (#15108)
  * Fix bug in an address sorting comparison (#15208)
  * Fix: Check retry timer before starting resolving (#15156)
  * Fix c-ares resolution with default authority (#15073)
  * Fix c-ares resolver crash when DNS server unreachable (#15134)
  * Performance: Avoid low severity log message construction (#14945)
  * Peformance: Enable SIO_LOOPBACK_FAST_PATH on Windows (#14905)
  C#:
  * Add RpcException.StatusCode property (#15140)
  * Improvements to C# build instructions (#15178)
  Python:
  * Eliminate grpcio package dependency on protobuf package (#15034).
    Please pay extra attention if you are using gRPC with Protocol Buffers and
    your deployment scripts do not explicitly list the correct dependencies
    and used to rely on the transitive Python package dependency from grpcio to protobuf.
  * A new grpc.Channel.close method is introduced and correct use of gRPC
    Python now requires that channels be closed after use. No existing code
    should observably break when upgrading to 1.12 but code that creates
    channels but does not close them will not be supported in 1.13 and later.
  Core:
  * Fix: Check retry timer before starting resolving (#15156)
  * Fix c-ares resolution with default authority (#15073)
  * Fix c-ares resolver crash when DNS server unreachable (#15134)
  * Add core underpinnings for TLS session ticket support (#14483)
  * Experimental support for configurable retries (use at your own risk) (#10684)
  * Fail calls with wait_for_ready=false on transient resolver failure (#14733)
  * Fix a call stack ref flake (#14681)
  * c-ares DNS resolver sorts resolved addresses per RFC 6724 (#13290)
  * Use socklen_t instead of size_t for address length (fixes use case for some
    big endian systems) (#14464)
  * Initial part of channel tracing implementation (#13883, #14746, #14751)
  * Avoid crashes on environments with hot-plugged CPUs (#14712)
  * When building from source, Makefile now checks for minimum protobuf
    version 3.5.0 instead 3.0.0 (#14821)
  * gRPC Core public header no longer includes inttypes.h (#14676)
  * CMake improvements:
  * Add well-commented examples and continuous test for various ways of
    building gRPC as a dependency (via ExternalProject_Add in #14822,
    via add_subdirectory in #14864)
  * Remove internal tools from binaries installed by cmake install (#14850)
  * Simplify Android build example (#14885)
  * Enable SO_REUSEPORT in IPv6-only environments as well (#14748)
  C#:
  * Improvements in experimental support for Unity - added useful resources
    and improved support for loading grpc_csharp_ext on Unity (#14576, #14605)
  * Further prevent name collisions by using only fully qualified type
    names in C# code generator (#14524)
  * Fix C# connectivity watcher shutdown race (#14776)
  Objective-C:
  * Support for Keep-Alive (#14781)
  * Experimental C++ podspec now supports Apple framework (#14480)
  * Allow discarding generated implementation (leaving only protocol)
    with macro (#14490)
  * Better handling of network error (#14554)
  PHP:
  * Add missing -O2 compilation flag for pecl (#14768)
  * Update the reserved variable list to check in PHP code generator to
    match protobuf 3.5.0 (#13580)
  Python:
  * Progress towards full Beta API elimination (Beta API is and has been
    unsupported and will go away completely):
    Remove _face_interface_test tests for the Beta API (#14702)
  * Remove Python background poller thread (#14448)
    Note there is a small change in behavior. Before, clients would
    detect disconnected channels immediately.
  * Initial gevent compatibility (EXPERIMENTAL) (#14561)
  * Release the GIL when calling grpc_call_start_batch to improve
    performance under multithreaded scenarios. (#14801)
  Ruby:
  * Correct handling of underscores in package names by Protocol Buffers code
    generator for Ruby (#13634)
  * Source code and locally compiled (not cross-compiled) shared libraries
    (grpc_c.so files) are removed from the linux binary packages. This includes
    the packages targeting the x86_64-linux and x86-linux platforms (#14634)
  * Bug fix for a use-after-free related to access to a garbage collected
    object (#14809)
  * Get rid of the -Wno-format argument to compilation of the ruby extension
  * Documentation improvements (#14535)
  * Don?t raise GRPC::Core::CallErrors for failed reads or writes of bidi
    streaming calls (#14922)
  * Fix a race condition in an interrupt handler that could cause an
    assertion failure (#14953)</changelog>
  <changelog author="jengelh@inai.de" date="1526644801">- Switch to plain makefiles since they generate more shared libs.
- Remove grpc-build.diff, grpc-versioning.diff.</changelog>
  <changelog author="tbechtold@suse.com" date="1527249600">- build grpc python module for python2 and python3
  * add 0001-Allow-building-the-python-module-with-system-openssl.patch
  * add 0002-Allow-building-the-python-module-with-system-zlib.patch
  * add 0003-Allow-building-the-python-module-with-system-cares.patch</changelog>
  <changelog author="jengelh@inai.de" date="1529755200">- Throw out silly -Werror in release builds.</changelog>
  <changelog author="tbechtold@suse.com" date="1541937600">- update to 1.15.1:
  * Document SSL portability and performance considerations. See
    https://github.com/grpc/grpc/blob/master/doc/ssl-performance.md .
  * Simplify call arena size growth.
  * PF: Check connectivity state before watching.
  * Added system roots feature to load roots from OS trust store.
  * Fix re-resolution in pick first.
  * Allow error strings in final_info to propagate to filters on
    call destruction.
  * Add resolver executor.
  * Data race fix for lockfree_event.
  * Channelz: Expose new Core API.
  * cmake: disable assembly optimizations only when necessary.
  * C++ sync server: Return status RESOURCE_EXHAUSTED if no
    thread quota available.
  * Use correct target name for gflags-config.cmake.
  * Make should generate pkg-config file for gpr as well.
  * Restrict the number of threads in C++ sync server.
  * Allow reset of connection backoff.
- update to 1.14.2:
  * Add TROUBLESHOOTING.md guide
  * Fixed gRPC channels blocking indefinitely and not respecting
    deadlines on network disconnect.
  * Add user guide for keepalive.
  * Fix GRPC_ARG_HTTP2_MIN_RECV_PING_INTERVAL_WITHOUT_DATA_MS doc
    to restrict usage to server.
  * Fixed ordering in adding pending picks to Round Robin LB.
  * Implement local channel/server credentials for UDS connections.
  * Allow extra copy in zero-copy protector integrity-only mode.
  * Update to use the canonical version of LB proto.
  * Prefer using https_proxy over http_proxy.
  * Refactor to put c-ares queries under a combiner.
  * Remove already_closed parameter from fd_orphan.
  * Add channel arg to enable/disable http proxy.
  * Fix shutdown of closed fd when c-ares opens a second fd.
  * Fixed segmentation fault when product name from BIOS is empty.
  * Introduce server-side load reporting service.
  * Reorder steps in ServerBuilder::BuildAndStart().
  * Support Per-Method Codegen Generic on Server Side.
  * Protobuf-related headers are available in a subspec of
    gRPC-C++ podspec.
- update to 1.13.1:
  * gRPC stats will only be collected for debug builds or if
    GRPC_COLLECT_STATS is defined. It will be disabled for opt
    builds.
  * Fix for Issue #13553. Unlimited can now be set as the max
    receive message length.
  * cmake install now also installs should also installs the
    roots.pem file.
- Drop 0001-Allow-building-the-python-module-with-system-openssl.patch
  Applied upstream
- Drop 0002-Allow-building-the-python-module-with-system-zlib.patch
  Applied upstream
- 0003-Allow-building-the-python-module-with-system-cares.patch
  Applied upstream</changelog>
  <changelog author="jengelh@inai.de" date="1541937601">- Update to new upstream release 1.16
  * Keepalive watchdog firing should return status UNAVAILABLE.
  * Set TCP_USER_TIMEOUT socket option for Linux.
  * Turn loading system root certificate as default.
  * Change pick_first to not unref unselected subchannels.
  * cmake: prevent C core from depending on libstdc++.
  * Implement Watch method in health check service.</changelog>
  <changelog author="mrostecki@suse.de" date="1546862400">- Add grpc-source package - some Go programs using gRPC need
  protobuf definitions which are included inside the source code,
  but are not included in the devel package.</changelog>
  <changelog author="jengelh@inai.de" date="1552737600">- Update to new upstream release 1.19.1
  * Use 32-bit nanopb fields.
  * Avoid SRV and TXT lookups for localhost.
  * Set c-ares as the default resolver.</changelog>
  <changelog author="sbrabec@suse.com" date="1555070400">- Fix typo in Groups.</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 1.21.3
  * Add SPIFFE security stack to gRPC.
  * Re-enable ALPN check in gRPC C core SSL stack.</changelog>
  <changelog author="jengelh@inai.de" date="1566129600">- Update to new upstream release 1.23 [boo#1144068]
  * Fixed a bug where POST_RECV_MESSAGE was not being triggered.
  * Renamed root certificate bundle in gRPC-C++ pod.
  * Increased lower bound on DNS re-resolution period to 30 seconds.
  * Fixed a segfault when forking while using gevent.
  * Added channel idleness support
  * Added threadpool support</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Disable LTO because it's broken.</changelog>
  <changelog author="jengelh@inai.de" date="1570017600">- Update to release 1.23.1
  * Unspecific refinements, improvements, and bug fixes.
- Add gettid.patch
- Split libgrpc into libgrpc++ because that has a SO version
  group of its own.
- Bump libgrpc6 to libgrpc7 as there is actually .so.7 files.
  Add suitable Conflicts markers.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1570708800">- Make sure that patches are included in the source package.
- Filter out several rpmlintrc warnings for the source package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1572955200">- Add patch which replaces BoringSSL with OpenSSL as the SSL
  library when grpc is used as a Bazel dependency:
  * 0001-bazel-Replace-boringssl-with-openssl.patch</changelog>
  <changelog author="mrostecki@opensuse.org" date="1573473600">- Define BoringSSL as a Bazel dependency in WORKSPACE instead of
  grpc_deps.bzl - using new_local_repository function is now always
  allowed in imported modules.</changelog>
  <changelog author="jengelh@inai.de" date="1576497600">- Update to release 1.25
  * Change RR to consider a subchannel in TF if it has failed
    since it was READY.
  * Do not create streams after a GOAWAY has been received.
  * Prevent HTTP2 parser from queueing a lot of induced frames.
- Drop gettid.patch</changelog>
  <changelog author="mrostecki@opensuse.org" date="1578571200">- Remove patch for Bazel files, which is not needed anymore:
  * 0001-bazel-Replace-boringssl-with-openssl.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1584014400">- Add conditional to build without python2 if needed</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1649160000">- Update in SLE-15 (bsc#1197726)</changelog>
</package>
<package pkgid="5eb919de47f7790af1a8a0f20e667f6d83ff3a32b57a15a4aaae39f721988d1f" name="libhdf5-gnu-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="ae2940e8e370bdd5f022878b886812c4b224902a59840d125c29b65b480d62b3" name="libhdf5-gnu-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="e72833cdc0a606afa7ee8fd7c43335e1793a9e28e45d638588aa0c6154c6b2b0" name="libhdf5-gnu-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="17d6fc5ff5d77055bbd6943ab5dc380973c4a471b2752b49e5ee45bfc9a95a19" name="libhdf5-gnu-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="37170f8d881941c9451deec30264aa1f9813c7d7ba1920250bf6f93a4507f78e" name="libhdf5-gnu-mpich-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="c661b26c9ad916750f7a77db257000cd5e37839a3bc162cd1ac284f93d983837" name="libhdf5-gnu-mpich-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="850b3d670bec859576ce3954edefdb93aec511f68de89ebd83c7eeca12d5b5e6" name="libhdf5-gnu-mpich-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="561846c3b0072a763d666e3fd004ada84be95dd8a3bf5132bdfec2ae8bb2e0db" name="libhdf5-gnu-mpich-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="09ac6f9e91e0b827f2473c7a4cfcc64009653af77b34a80c9c6f01c59f8f1a8f" name="libhdf5-gnu-mvapich2-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="bf440637f34d3fe1abf4c0149b3a7f867312409100ffed4baebe1330122c0521" name="libhdf5-gnu-mvapich2-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="3303239ec589907d0a9ce045bcbf43f4c2eee99592577617ffbc1848702f8e4a" name="libhdf5-gnu-mvapich2-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="6ec8d5f9edda64d64a493be664f12e4a476809df71d09ac372e387b1a661d0b5" name="libhdf5-gnu-mvapich2-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="e8e3a521d27a89878a27ed80c9a6a6b51678b09f09f8de442ea2309ac01fef47" name="libhdf5-gnu-openmpi3-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="fa7e3250305a8669793552f2db0589b9d1408a55c89db2d1668bc56a044b90f5" name="libhdf5-gnu-openmpi3-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="f8fd7212c567f21faf57718f26bd15d65e41c7ff4bde3a3c4a68391e922534b3" name="libhdf5-gnu-openmpi3-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="da031196f6e4530e1c11c0fde322bdb5c2fa94205dae8f847ab84a554b3397a2" name="libhdf5-gnu-openmpi3-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="099db8b94a81b3dc5d516c29e08a3efa12ecd9478c709adeb41bbeb072dd8f62" name="libhdf5-gnu-openmpi4-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="ed34a00f4b881b7543c6f3aa3f606bd34da0d9b6f2ee8b0d5f48aff21a8dd6b0" name="libhdf5-gnu-openmpi4-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="55a01c82325510e174d464512c3784b44aa9be60b3fc8d668689255f70b738e1" name="libhdf5-gnu-openmpi4-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="9effa369f4938f7a8a7529cc953a4c82cefaa9c557fd13c63f774f22bc620010" name="libhdf5-gnu-openmpi4-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="5cb2ef2433481375b5099bf4ac60a53b010b6a919c87fbf72e03b8d3ae5d8333" name="libhdf5_1_10_8-gnu-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="f221debb0f68aa0f32367c3e678de2959ea3a89d2f1266c2ba40d5f771894e2e" name="libhdf5_1_10_8-gnu-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="17ee0617ed2cfc6375b3302e9047b0139e2f6daef1a5c347ff2352b5b215f141" name="libhdf5_1_10_8-gnu-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="5a3152eab53be81e0743bc2e2576c31491b67cab68a8d6d0c28788de91b39295" name="libhdf5_1_10_8-gnu-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="4dfbfadb5babdfd7414f2063130c1daab5011a24f4a8c41665ea45906914a8fa" name="libhdf5_1_10_8-gnu-mpich-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="2aec30e024dfeaa3fe005531c48230a296bfcc65049183b8df9ac786f1f719b0" name="libhdf5_1_10_8-gnu-mpich-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="e970e6b98f2b8c2f4c80c4c8e0cde6c8fac695df1df204943277df5bf17559a8" name="libhdf5_1_10_8-gnu-mpich-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="7bf28d14706ac9911a7a5ca166aed916116e5d3acae2cd1888c27764d6572eae" name="libhdf5_1_10_8-gnu-mpich-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="8b8f81ec8c0fd1061edd6e92776909b1a993899699d983b977a2aaf215444677" name="libhdf5_1_10_8-gnu-mvapich2-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="58701ef9f8d99858d9de4e3d196679590512762ef73d33ba8742f598b7ab2d4c" name="libhdf5_1_10_8-gnu-mvapich2-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="fcb517a8f929c87ac829c5a2188c44fb9bb66749ea189bb6cb7bb5d9431efdea" name="libhdf5_1_10_8-gnu-mvapich2-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="a589ce18c14b8c9cb519b973017901dc874c90880dd6e713abebd40741d5ad83" name="libhdf5_1_10_8-gnu-mvapich2-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="d9d6ec96c5963a0875713526c6424fbdb279171b549537a2e1ef20fbee1fdfa6" name="libhdf5_1_10_8-gnu-openmpi3-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="c592422c125cedc9db994c8a2d99193596f7c5bb617045dd5328dfe27d9f5640" name="libhdf5_1_10_8-gnu-openmpi3-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="a6699c7ae79d2fec9170acfe01f4775b30bc1b07cba7df0276c21bfa832775a5" name="libhdf5_1_10_8-gnu-openmpi3-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="d69c3aba40baad6674ced930631f7a7516786bf16bffe5a28dcbb06e8361cf25" name="libhdf5_1_10_8-gnu-openmpi3-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="1ae7c0c4301c4ee7a12ec5dc4e051fd4141089f27beb538897e37f824779f5ce" name="libhdf5_1_10_8-gnu-openmpi4-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="66bbd402f04f167adc6300604c45433d352a484c1bf115eb8bf0a24dc6afbde8" name="libhdf5_1_10_8-gnu-openmpi4-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="ee6815f6fdec4d2590c901fdfa6da20bfd48c563ba85568813f473385972ff3e" name="libhdf5_1_10_8-gnu-openmpi4-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="8f8036542d0c2687f21e4cd6726211c918b014df4a47331319ce2e5535772f67" name="libhdf5_1_10_8-gnu-openmpi4-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="7ef41bde04255ac3c37f3bbe38493b43fa3c394c58eba0d81b753b7519370c80" name="libhdf5_cpp-gnu-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="8f880b30811c96c4cf114dd53af0f12ca52491da594dc3727ca643e525cb27f4" name="libhdf5_cpp-gnu-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="0e2836098a1a04a7052259e219300b86ab6bb207d684d0d3f30fe85baef91666" name="libhdf5_cpp-gnu-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="cf873f9a51e3b8106242e7e2e9b464a54f235213a5a7e14af600aa6552601e99" name="libhdf5_cpp-gnu-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="382d77a5fe2e022a4336a33185b55dcb80776fec3cca014cea3942f6325b49ed" name="libhdf5_cpp-gnu-mpich-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="6c31063ba27d655ddf7f2cd459b7b1efaa93e71f86a0eb5dcd39d8deb7686af9" name="libhdf5_cpp-gnu-mpich-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="9a3278f6a05aa53e427f4522988b20a42806025874c250e16af7ae5b0e3695e0" name="libhdf5_cpp-gnu-mpich-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="da32ba3761c3968fcad253861df86d871604b8f5a890f85339e0f6392aeedc0e" name="libhdf5_cpp-gnu-mpich-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="e98d64588018a9ccae92770f598b53d980bfd6f176ea4b0dd2f76b64992cc77a" name="libhdf5_cpp-gnu-mvapich2-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="63c28eb3f9e4fcc9f99669e190e69242e41a9ffc7cf5233ffd923ea5075c3f74" name="libhdf5_cpp-gnu-mvapich2-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="2217eef7e88f8d1f7fbd0232dafe7857e01e2285bd6b52526775d621d38b38d1" name="libhdf5_cpp-gnu-mvapich2-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="8fbb4808092aff4de3ecfd3a2ba874070b6022f2b3304d7d55d638ebf1f12851" name="libhdf5_cpp-gnu-mvapich2-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="8f7d6f4386b42bcb8e0cedb4d5762d23b09e6be161ff964cfbcd10220dfe9be8" name="libhdf5_cpp-gnu-openmpi3-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="82bf731acba93745a1e3b7c3751766918a8d8e561500a2642da6ffcecfc52505" name="libhdf5_cpp-gnu-openmpi3-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="e1a433a9f0bd0919132934acc3bbab381a070923a8f0aeba88ad6bc4a098af0d" name="libhdf5_cpp-gnu-openmpi3-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="44779ee7d18047142567c96558a7f915be14460e9c81d59419a9705b234a44a5" name="libhdf5_cpp-gnu-openmpi3-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="12715aa6274106133f8ac8ed6872ead9c8be5ea878886ae3972f71b00bd13f8f" name="libhdf5_cpp-gnu-openmpi4-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="192db5186f2692b64d4b51ef8254886136f0587a8c3cd794a1a061a08e4a06e2" name="libhdf5_cpp-gnu-openmpi4-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="8185b41a78686a66538fcef7d3220f205079c785da95f6c6e89830af9db84989" name="libhdf5_cpp-gnu-openmpi4-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="7dfa9c37f4179ba435f28321916cb98e6e9903997b8c82b57779420bd70d0d17" name="libhdf5_cpp-gnu-openmpi4-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="f0e1427841c1663d89bd28706d9f4cdf241617578b51840c96ef35906bdfa83a" name="libhdf5_cpp_1_10_8-gnu-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="16a767bea25d91d8998cdb787dfb8352f9b28f3377f3124658ef44e72adcff06" name="libhdf5_cpp_1_10_8-gnu-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="e9c2d0b802dba2fdf148243061124f967596833485a745970c9afd5ffc7c31cc" name="libhdf5_cpp_1_10_8-gnu-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="f6a8b66f2c3a1fc0bf04ab32a340a1ac6a5650aa54f6318fd42f737754c41946" name="libhdf5_cpp_1_10_8-gnu-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="fd932f1e6b5237dd5e28cab6ec06e5faadf208487c68f19308f5ebbfd17251ef" name="libhdf5_cpp_1_10_8-gnu-mpich-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="83445c885151df5af2a0be74843f5e536210599dd5e8ee1efe37c06cbe83405d" name="libhdf5_cpp_1_10_8-gnu-mpich-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="088d4eb05da30327c0b8231293d4ba860e3daf2708331c926810d731f93f43ad" name="libhdf5_cpp_1_10_8-gnu-mpich-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="1447bbeee20973751ec0f08690b00a7ad6fd36553257b76cdd4305e87647a07a" name="libhdf5_cpp_1_10_8-gnu-mpich-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="931df0bfa09ef1aa2044880f55e5bde2d9583f8e93a874c00995c63c97a2beb5" name="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="b690c6357b771f237cff3e522db9f98b6da9bffaa5d0b7a3eabffe95062458ae" name="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="ac4d8e8f6fea19d27d07129e1c3901ed750fb97c78b7917d023c617bc72ff2eb" name="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="58be1a097f18d1fd99d7e4528c050788cd7256c68d04875ee8e2fecb5f22bb9d" name="libhdf5_cpp_1_10_8-gnu-mvapich2-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="589fd284f024d263cac2b791adf128fbacde1c2406e02f4710c4d8b7740632ab" name="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="1bd720d056dfc63dc3c79ba3b59fbb488c307c39cd88d0c8e1619cab38c40a79" name="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="bae74988411b3f84523bb959f0d0dc038db9f5e49579385f17fab741f9755c2f" name="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="c5fb7661eea6d655ebf90e6d718e8e841947ac60661c209fd635ac7c621eddaf" name="libhdf5_cpp_1_10_8-gnu-openmpi3-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="95bbbbe36cfe1c43d4fba4a3a61f3b5446cc9e03600de4f59116753a361dbd0b" name="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="72c629508ed664ed5f1aba54ee426bd5866a7e763261c1321dcda01b8997cbae" name="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="f24b66f7cf63aefb74cced1f02c53e880163c5ccd824224cd7b3f7c1da6486fd" name="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="11df48093a8de22d08ab0e826463cfeb95859fa5b210239cc3cac6f4275f3914" name="libhdf5_cpp_1_10_8-gnu-openmpi4-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="28ea0bc1c6a1b09d1e9c7447dc99c330be837c71017f1cb4fd83c13f68016d1d" name="libhdf5_fortran-gnu-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="3648d7e7e20152ba7da32921dbd6ba3efb461c0dc6fe94d2928247cccd6cddca" name="libhdf5_fortran-gnu-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="e0666dd3790a05e8c42257249ca6f6faac649feaf648ec1647c5426fa074521e" name="libhdf5_fortran-gnu-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="e59f8b4698e5d978232903aee12da35f363f72a80514523c99ab4e0ac9e61032" name="libhdf5_fortran-gnu-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="175dfb63ada855c6d54a0950d50c9d219eadd07b5eae179ca57107e797180b6e" name="libhdf5_fortran-gnu-mpich-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="40c5bf661555a627dab2b794901c2e68ab99bffa73cafa04c358b9f11706cd6b" name="libhdf5_fortran-gnu-mpich-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="c13baf01e884e313c586b9e0f03c68cfb6ed144dc30237eefba8d6eca771eaa9" name="libhdf5_fortran-gnu-mpich-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="ed99f74174c6e918ef192ef1506daaf6a2c307f920883873e4c5f5ffca55902d" name="libhdf5_fortran-gnu-mpich-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="48fb45112660ba56e9fe1e71d3eb99a0ebf657cb7e12c7915984f733e6e62733" name="libhdf5_fortran-gnu-mvapich2-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="e66251bf3c24f3bf876d3a69362bd381d1d54064e4a9a938c8e2154ba919ff76" name="libhdf5_fortran-gnu-mvapich2-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="ea3795249409bf774888b07380f83b29a9a157253987f5eb3ab06c7b0d020fe2" name="libhdf5_fortran-gnu-mvapich2-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="a97b44a6c5a07738f4c2ee8d6a2183927342f622bface0c399180043e24df87b" name="libhdf5_fortran-gnu-mvapich2-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="d2db11525a0d13989338ae7915abf4323de149442406a8f0ef9e34302a36b458" name="libhdf5_fortran-gnu-openmpi3-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="b93099996bc24ac19e92356f6b0442558609af3799db54de66bc4424c61a153d" name="libhdf5_fortran-gnu-openmpi3-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="c998f3dba45890983d9d82133e090ef3e75f67e70dc919c3f2e3789aa3129ff7" name="libhdf5_fortran-gnu-openmpi3-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="f6b87f108d1ae91cde3d72dc730b7ed8a2c888ec290b77e09dbbce11379da803" name="libhdf5_fortran-gnu-openmpi3-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="72aa1a548851c5ad136e719a7417a4dcf2a539ca5a64d70564d598a973d12e22" name="libhdf5_fortran-gnu-openmpi4-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="ce62dca2e410cdc33826df21018d621529806bf0c43a14b70345d28af5725fc4" name="libhdf5_fortran-gnu-openmpi4-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="c4a6a7837496f087fda35377c9301abdac10b939cad8371834ec9ed47bf74b15" name="libhdf5_fortran-gnu-openmpi4-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="37cc223bb23f80358b2710bb3c3eeb8791e9e7a202ac693acc77e9e74eed7a3a" name="libhdf5_fortran-gnu-openmpi4-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="6b8a17a11c4efa0ce2d0767ac0cb37ebe9fee09dd75b1e973705098e722670d3" name="libhdf5_fortran_1_10_8-gnu-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="95f00b63f2d26cb442fc5b4aa6eb0c8e310e2c6252e45b75a013976feb8611ee" name="libhdf5_fortran_1_10_8-gnu-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="98d2291735da60b58288c8bbb3c774800a2c4b74d7e1d043f3f86033b9450c1c" name="libhdf5_fortran_1_10_8-gnu-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="45228542962a5df23a0b5fcc961e85db2a1d438cad41f97a022b9bb68292e7fe" name="libhdf5_fortran_1_10_8-gnu-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="d1cd8abde3578e1eef002ae552f10a27c5ee46489eeefe8e461f9b7c0c8468ad" name="libhdf5_fortran_1_10_8-gnu-mpich-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="6a936b3140b062e95a3eb9ff243f53da314bf839dc2ee4687ae461beccf45fd2" name="libhdf5_fortran_1_10_8-gnu-mpich-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="a29c9728f5334054a48969e3650f6cd4927d6abb27a72063ed4c2636a5f091af" name="libhdf5_fortran_1_10_8-gnu-mpich-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="13c96c0057899e43f7de7c87f554fea01b4772f6480582355d0007347c396c0f" name="libhdf5_fortran_1_10_8-gnu-mpich-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="539a4793e401d5e4d9664951bbc40c931ad52d672f813207cad4d59a4862be88" name="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="01231d320a1e9af94d586a2f013e9beff100ba4dddf9f5e4e1b7713ec2ac8849" name="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="0d48eda0c6e6eb63e06038af2ce7778dfba991cebb8d4299aca2fb0ca9752f39" name="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="e634c13de3f296c6d1db4c21681b9fad91e91984eb4d3e0179153d25e5aaa9fa" name="libhdf5_fortran_1_10_8-gnu-mvapich2-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="04fea333b486bd0db59c732982cfa4858146cb2ec265a8cca0975a2b4f782861" name="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="5a20cb9d025989385431fc09060cf4491b0b2a89e195da6f9eac42168396fd79" name="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="b2e2293058aeeea5b02cd5c2121e118448f17447c39dc4d56cd715c4e5f7b546" name="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="32bcb5bee8c7a50c195a1f27debb1cca4dd4479faf13046c74c283fe5861c604" name="libhdf5_fortran_1_10_8-gnu-openmpi3-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="7fa9780bb9aef39e13116571bad21a17921e56dd1446592abe389071065cac97" name="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="1a04348d7ed65e38d5f9ef59f0b64f9518205d874c6ab301f3a2173a13b33d10" name="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="2d17b1c5e59379e512880f8dec097da02608b455996c182a45c61fd6c69c31dc" name="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="b501604bbb94e661ce2814e7ae20a64089fd9851023f443f1d3af6188d2b5741" name="libhdf5_fortran_1_10_8-gnu-openmpi4-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="a615f1860fa25dc875e5d2fc5b8d045c3ccc6a7cac15ccae19c4d95823d3e08c" name="libhdf5_hl-gnu-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="f1a9ea3f3b3b0ba6888b6e515a38cfa7d0a25caa33ad1e310f5dbffff8885022" name="libhdf5_hl-gnu-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="d94d9b67ad99f65ae857986caa5cac78ce2e4176ee6eadb683b0e32ac36bca3f" name="libhdf5_hl-gnu-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="5f7d29f5a27cf34e3daf1b5d80cd75a7a755c52095c240435765fb4e63f00561" name="libhdf5_hl-gnu-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="ef24244232e428a5aba95117951bd6d22a5f6fc91d6f3b088b747c4562b29af1" name="libhdf5_hl-gnu-mpich-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="3248fb9d6a67f858d5bef7a746b1381d03c132cebbe62c5a241c251da396f9b1" name="libhdf5_hl-gnu-mpich-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="b82da1bd25c4c0785323e71b69512f588f03e742cd1f0a250e6c35aeafeb2b84" name="libhdf5_hl-gnu-mpich-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="de897b8f3979aa49e74fdf34be76ed549096c3cc7cd72a35e88b336c93c42a88" name="libhdf5_hl-gnu-mpich-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="b87f428404a0e020c7fe492433b2ef109d71d96256efa37b538da956435a6932" name="libhdf5_hl-gnu-mvapich2-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="1cb5843c7d94cd1060a069526afcf4ff622bd7654147c3a8cd478160235fa208" name="libhdf5_hl-gnu-mvapich2-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="53369f44dca0537c0e1b75a0049d868cba0532f74d33bfb568bddd84bec4e77d" name="libhdf5_hl-gnu-mvapich2-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="faaa020c74d448e5f12139d344f7327e235882db8de28a3c7c79813bd55fc9a7" name="libhdf5_hl-gnu-mvapich2-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="12ffe920e5a0c53b0b05eea80dd3d8e00f9ee339ed048296f09e19b6dca562b8" name="libhdf5_hl-gnu-openmpi3-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="6fce8b3125ade5e3c7c51d5971921e5776cc3a6c8fe9c1bad41614f2b2b2ede8" name="libhdf5_hl-gnu-openmpi3-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="77f965e557b2a71ded16eb48e7bc2f2b09e38327aa578426601d9eebc9bfb9f6" name="libhdf5_hl-gnu-openmpi3-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="1139098401a130d2c25cc557ed7d305ab005ac5d5ca76eaec3e91f59ac94dfbb" name="libhdf5_hl-gnu-openmpi3-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="0d769f6ea9fde0f278489c470e0ab9a609b577a9dd77d27a5fd98e74c1ed24bb" name="libhdf5_hl-gnu-openmpi4-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="34ed508398749c643a309802158f70b62aa5f58584ef3889e11542fbaba33a69" name="libhdf5_hl-gnu-openmpi4-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="94b0d5b850e21fe2932d0d7f46cbe396c596824357c4e9b9d33db99d250d55d6" name="libhdf5_hl-gnu-openmpi4-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="b59e7e05c1122ccb7949799ba2a506f74b86334413e13cefe30bd99d28de675e" name="libhdf5_hl-gnu-openmpi4-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="a4bf5d041d3fa603bc97ba95e614fc056c70b98b3aa882f4e119425d3f26d25c" name="libhdf5_hl_1_10_8-gnu-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="ecdf2eee4854eccf56dd5dc9a3b203cb1fdd8f5356d54c2a3266e695ef5f64fe" name="libhdf5_hl_1_10_8-gnu-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="838a75013e99445ab6b17e8bc42d802e3df9c2a2c2b61fde5dd57823af76e5fc" name="libhdf5_hl_1_10_8-gnu-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="813fe528dafdd4e79191e3360c0013b3c4d273952b265dff2ab453b170d39285" name="libhdf5_hl_1_10_8-gnu-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="c493271d0b1b8138def3d9ef309be7742b177a4c3f4e892fe8cd17d3259f6545" name="libhdf5_hl_1_10_8-gnu-mpich-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="619c11ad383b8d17caad8efe044400b935f399a89d5eff8283b3027a089ae59c" name="libhdf5_hl_1_10_8-gnu-mpich-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="5827499baa5993759983646536208d00e0f9c861f1687bd870caaf0ea08d7c21" name="libhdf5_hl_1_10_8-gnu-mpich-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="898310ce2d143b7957e54f3c773ef2c6dd66cf878e9ae9611be0aa103b62f16e" name="libhdf5_hl_1_10_8-gnu-mpich-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="5a8a1a89e1b7c30825e858a00ab0e7111dbdea3ee029ae29077bc49f6249cc14" name="libhdf5_hl_1_10_8-gnu-mvapich2-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="54cb33add5de0944e07992cf0bc3663bfb832da354e228c1ac087bd97c1e62b1" name="libhdf5_hl_1_10_8-gnu-mvapich2-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="e5da324b9d078503bca751e01bb7886e5409486f7bc12046757e184e977c513a" name="libhdf5_hl_1_10_8-gnu-mvapich2-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="264607913f7b76112f98b662e7c293e899bfe161d292b4849aa4f3fb50872b24" name="libhdf5_hl_1_10_8-gnu-mvapich2-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="9f5e2315b4828813a295f1b793870c46fa9cc725603fa8a0dfa8971f7e6f8506" name="libhdf5_hl_1_10_8-gnu-openmpi3-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="fa4daa170d1a2b386f1666235427714c7e9fdb5c96cee2291a5f0ab141ebc022" name="libhdf5_hl_1_10_8-gnu-openmpi3-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="a356b62ee5257d1939d726be3bb85dbef2d27a65d59bc7676022dfdd2e68c40f" name="libhdf5_hl_1_10_8-gnu-openmpi3-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="ec5480ffe9b6c45c7f9879e810f9640019a638cdae576c701da785bc55d41066" name="libhdf5_hl_1_10_8-gnu-openmpi3-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="401269549b4c90a545c50591e525d0d372a5b50583b45e849427791627e567bf" name="libhdf5_hl_1_10_8-gnu-openmpi4-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="cbaa729b913da0f876f0392f24d778c6ed1c63942530138f45d64faf3cf01460" name="libhdf5_hl_1_10_8-gnu-openmpi4-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="198be2797925d36c46d53767f89d4be87a2313709f64737e65fb2649d0e79800" name="libhdf5_hl_1_10_8-gnu-openmpi4-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="b0f84eed616b74e7a1d3b090b5388c5c72cbb3569f81f9976ba1c9c589a1c470" name="libhdf5_hl_1_10_8-gnu-openmpi4-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="14e8d98e11d604a1f8742455cad1da2104c449f01789fb7bff7b6a5dc391662d" name="libhdf5_hl_cpp-gnu-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="2dbf39c166aa5ac5d2754a39c5fa303c7c95e1c5a28b093b2b1be16eb5d1e0de" name="libhdf5_hl_cpp-gnu-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="f8f58999e7664030100c5a5632c00b81893d771f33e5b4238f6c62cc7acdd9a8" name="libhdf5_hl_cpp-gnu-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="d8f32df7998dd5fa249e08f5ef5d206eec6ce7994095c2e0abd73b76a9db4721" name="libhdf5_hl_cpp-gnu-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="d859a8e566755be8c87956295d69287de7fe58c90a7a8a998b84cfdea3ac2904" name="libhdf5_hl_cpp-gnu-mpich-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="f4e1fff3b008338505b52c66800234f845b32aac75c478a6a9bfca3a223b8059" name="libhdf5_hl_cpp-gnu-mpich-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="295ae9a26a8e5bd9b7d9eaf37f64e3b2dbb69abfa146dcbbbecf4ed13d027ba9" name="libhdf5_hl_cpp-gnu-mpich-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="a388f29c2babcd6cdb2bd64b9ab13adf752a6f12e2c62aaed18f3262a18be9d0" name="libhdf5_hl_cpp-gnu-mpich-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="380f72ef9cbaf18b1b53e61c6b9952f9837a14193b82f2a44113db51f5e91721" name="libhdf5_hl_cpp-gnu-mvapich2-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="bb50e6f0e34994f8e8b3aafc504e60db1beb41fd8b7fcbf11eed26ed8c010e02" name="libhdf5_hl_cpp-gnu-mvapich2-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="6b0ab6157fef094f0d9c06b61587147d04aebe4c7a8ce059dedf80fb4be48dce" name="libhdf5_hl_cpp-gnu-mvapich2-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="7fd2d0aa74f89cd6ca19d273b8302ae3d6e54783567d38b02ada4cd2026bcfd8" name="libhdf5_hl_cpp-gnu-mvapich2-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="dc0d3724bf6c6e393153b86aba1a70935ccfa1f55e1b2ec6ca7f8842936d7a1f" name="libhdf5_hl_cpp-gnu-openmpi3-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="9263b3424b6a80cb0b5d4e3e905a8743afa2e690c259422d1c9d07685426a0ee" name="libhdf5_hl_cpp-gnu-openmpi3-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="8aa69bc2410b7c458dbf5950a9d5a97ceb467c8f1bf355eda0bae1d11faf9492" name="libhdf5_hl_cpp-gnu-openmpi3-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="f535925e6461140988e0c3d15c8073d99a64a79b6692a54978a9450d3eccb866" name="libhdf5_hl_cpp-gnu-openmpi3-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="963dacf83685b2908cbbdbb4ae151eedfe3cc41cdbdfc23fdf3f23c0e00516db" name="libhdf5_hl_cpp-gnu-openmpi4-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="f6d0b1bb08988252e46b41431b68310b864757e030c0c0d4e61f79b0d82c1123" name="libhdf5_hl_cpp-gnu-openmpi4-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="f2f3d9765f910e50b0a6c6db64a2c1b551329318d47d033a31da3883468dce6c" name="libhdf5_hl_cpp-gnu-openmpi4-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="7e01ba5d92c6c0a2124e33c8d767c81f067fb2e3f75aaaf419346759d2b833e0" name="libhdf5_hl_cpp-gnu-openmpi4-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="4ff3e65344cd3c89af4f99f544b25d02e5ebe04174e8dfa34a0bb6c57bc81918" name="libhdf5_hl_cpp_1_10_8-gnu-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="8c781643eb32e3e6afad8fa0facb28954c319ee4a906754b64c479b8112525a7" name="libhdf5_hl_cpp_1_10_8-gnu-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="036984ef6f7fb9249e60f1922fb615724520120b154ba10fcfe94036badae1e3" name="libhdf5_hl_cpp_1_10_8-gnu-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="3784c67184fe52ebd62725f3680b1df4438d5f1f87933204eeee6f1cd016d1f2" name="libhdf5_hl_cpp_1_10_8-gnu-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="0f34f37ef6c8686d2a87123afe2830486860a27daedabdb8a59d4f68f2dec7c6" name="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="77252e6a7fab5616489e334b88aab64326fe4f6013ec897311632678e9e20fd1" name="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="e134871702c2434afdf7edb98ab2ab4f5c4d591874e26cf9469676f6ea718fbd" name="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="135051942782bbce7dfac8d4848e7a2220df19961b31fee2bd40d21d038e484f" name="libhdf5_hl_cpp_1_10_8-gnu-mpich-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="a639b94ebe88e0f15427d1cad92142babf4bef694cc10187ca9b49bf70afe2b1" name="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="4ab20bb69a00b4a1153df744acdf824da6639a0420b9d4176060ee40322fc6a1" name="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="e6a578130f22b6f6e28131c713c37adb6e9d500ec8b780bff82f7ee11e81bba6" name="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="74f4405eec412df5355352107eacfb00281d359c78c723f7ae8c384b2611dbd0" name="libhdf5_hl_cpp_1_10_8-gnu-mvapich2-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="aa4e182a5a3cc061bf26a3363d1f38fc739aef837012a21c1e1e03ea9573d7a6" name="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="dafb15302495b83f9396088ac2ec5cbf80f1f292a02f03c60476dbc7ce7c0639" name="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="af8e44fe946a9b4b529304951c339af625cdf74d8a9b46f681f2602eb961b867" name="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="4f7454ffc51e9e9e4c8aa6cc5da47e2d039491ab022ed303716ebc5124c7c775" name="libhdf5_hl_cpp_1_10_8-gnu-openmpi3-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="1b4fe98fdf72ced2dcc7f913c31c1644d0748ed0b7779eb216c0f1daac343588" name="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="260b62f0ccc244008e3cb389141c779776f5d07c60197bc59cc583621c4a20d6" name="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="7c13d3ddc65446d955b6ebd45f29c9b2b2189a1386da3d3f7c8ab4764de5fedd" name="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="bbe57793bee9252898162d33129e5639d4f52c979bd853d701587cb2120ef901" name="libhdf5_hl_cpp_1_10_8-gnu-openmpi4-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="bc48836a209310492930cbae26ed4d68b3dd922e1d10534fe3860f19a6ab1aa5" name="libhdf5_hl_fortran-gnu-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="f4d162a0d8b9eab0655cb3a50ec3a2f17a613c921f60e1b7bbf91119f76cb312" name="libhdf5_hl_fortran-gnu-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="abb79413f71f79433f34743fbef51e3fcb2c3f7922521287b5fd414cf004c5a6" name="libhdf5_hl_fortran-gnu-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="fbf884f61c31703eb7b32313b00e4d35d750235e04e847089f0c41ecb92e9b5d" name="libhdf5_hl_fortran-gnu-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="71a8dbcdf52d531ad675eb7903f275f02b2df8fc9742ee0f59f3e16bbece9c9f" name="libhdf5_hl_fortran-gnu-mpich-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="ec4f4c7e10c21355c16cc14ddea6adcc6b9503a84c5815e3389762149ae4c336" name="libhdf5_hl_fortran-gnu-mpich-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="4245f8502986b3af2d73d3968c5b727e53cfd026091295f352163a0e1b71e3ce" name="libhdf5_hl_fortran-gnu-mpich-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="0a4de2e8ba5531f0870c881d9cffa725b49d787b3a8bf248d079c11c063c3cd6" name="libhdf5_hl_fortran-gnu-mpich-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="773581e1a1845c3ca32146e2f24d5b0e9c8b6934210ab738be68ea28ac056863" name="libhdf5_hl_fortran-gnu-mvapich2-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="02a43047fef347637e85f171127256f94a38758425086d86180631d6469e5a60" name="libhdf5_hl_fortran-gnu-mvapich2-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="167bf7298cbc194bc1ad133a038aec73cb303ffb18148cd0d71486c00acc9072" name="libhdf5_hl_fortran-gnu-mvapich2-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="b37dab1e4e33839e2294904cfa9e38196fa86c6de86fb2d02dbcb7207cc780b6" name="libhdf5_hl_fortran-gnu-mvapich2-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="2cc55265d882303d4bb89a92bd049d18e92122aa0f47c22ea11634178e5e3e67" name="libhdf5_hl_fortran-gnu-openmpi3-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="f591e99c1a8fc8e451384fdc792316bb1374c1273f4b817a741d3622a182b045" name="libhdf5_hl_fortran-gnu-openmpi3-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="acd4cd2a49e96f222f399503738aaf68694ebe8a5847fb37b6a1c8e17c12a708" name="libhdf5_hl_fortran-gnu-openmpi3-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="c9140460700a7d9e5438972274f3388d8d20aaadbac6e575177422ef1341c113" name="libhdf5_hl_fortran-gnu-openmpi3-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="36806e84e41a97d5cc4bbeaa4dd9fb88c9ecef527e9713c83a74a928a4893a7d" name="libhdf5_hl_fortran-gnu-openmpi4-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="f0a058b820a18279cb7f0e633200e446f275a95da9bf06df334d3a8832aed909" name="libhdf5_hl_fortran-gnu-openmpi4-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="82ee2470bfa3e2623f775f701b5deb98d3d05a177a6e973ed4aa46feeef61a55" name="libhdf5_hl_fortran-gnu-openmpi4-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="c6d52e453c490a3475766006f9072bf6b6ac6a9f40592e2effb2dd4dfa224d98" name="libhdf5_hl_fortran-gnu-openmpi4-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="f0d95c9774050a284abe5b6e73775f50ed3c345d769b5dd4f62a11f8c4b44c9b" name="libhdf5hl_fortran_1_10_8-gnu-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="651712cf4cdd81253c6c2016c10191957affaf072bdf6c3d38c804d315156195" name="libhdf5hl_fortran_1_10_8-gnu-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="522393989e78ef94c7043d7648fc3cf75d329737c36943b10e80cee3c69df4fc" name="libhdf5hl_fortran_1_10_8-gnu-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="359f2e3fb3763c6862908450a4a81b95d570c08e7d12bafd6788b953eef0104f" name="libhdf5hl_fortran_1_10_8-gnu-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="1b7d08935d28bf45ea1b4caa6b6ab800fbb07151f311fcc03b256ae6a394d686" name="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="97f114ee69aba2dbfe268669ccb64f717b305510e217541f56ce6dce303dd2f0" name="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="8b155bf7568106a334b1713d4cd8ee8964076c3ed3c9bdf8d29691e522dc8329" name="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="25a69ad2b2e31fd0e09036c25f3d2f39590ef5f8f4fc950f92b670422453eb7a" name="libhdf5hl_fortran_1_10_8-gnu-mpich-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="bf3f656d9b1d49278d8d0ab33fb596a29cca99cb4e5b55564068da0bd930f543" name="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="e1b9016cd57de268addf722f9b38628baebf84fc6f168c6b3af7f3ea8a628b04" name="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="2781a20d4dcce32f0f06655e786170ad46ba73c32f077848457f57c7e5bdbdd6" name="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="c1e0ef8079b78d45666b06abc3f3768640cbb0469d5a0ae6a3474cb47f2779d5" name="libhdf5hl_fortran_1_10_8-gnu-mvapich2-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.1"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="4d9637862b6bd2b3fe8b2c3521dad5741b500ed32f6c84fbbb2b6c2b5e251534" name="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="e4c83ae52ac7464ba7b10b25fab3f574440ca8ab496d5af4b95c93c94e673a9f" name="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="e1e4cde1d2ff5057a49df4d9f2fafff7801ca8a62980ae06c514d15cd3856196" name="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="db1b8494e162471cfc55df930d302e93740e5f0c723b50f2febc719366ca6f5a" name="libhdf5hl_fortran_1_10_8-gnu-openmpi3-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="434a151a9c7a4453b4f53fd7010288a3173df94b2c0d9227dd1ac728914664ce" name="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc" arch="aarch64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="a2e9513d74253864429f3a1969f6189086bf931232eefc9a191c546edee73951" name="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc" arch="ppc64le">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="b6bdfb87dff94a90d2822ebe13b6061330088ed6eaf623ab16c81c4edac4ba97" name="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc" arch="s390x">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="654da221b71e19551729e1dcf3f2b703dd1557924206ae0f639058e60d8e7e88" name="libhdf5hl_fortran_1_10_8-gnu-openmpi4-hpc" arch="x86_64">
  <version epoch="0" ver="1.10.8" rel="150300.4.3.2"/>
  <changelog author="eich@suse.com" date="1562241600">- Since build machine size issues do not seem to go way, make
  the %check stage optional: enable with '--with check'.</changelog>
  <changelog author="aguerrero@suse.com" date="1566561600">- Update to version 1.10.5: (jsc#SLE-8501)
  * https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.5/src/hdf5-1.10.5-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-17233: A SIGFPE signal is raised in the function
  H5D__create_chunk_file_map_hyper. (bsc#1109166)
  * CVE-2018-17234: Memory leak in the H5O__chunk_deserialize()
  function in H5Ocache.c (bsc#1109167)
  * CVE-2018-17434: A SIGFPE signal is raised in function apply_filters()
  of h5repack_filters.c (bsc#1109566)
  * CVE-2018-17437: Memory leak in the H5O_dtype_decode_helper() function
  in H5Odtype.c. (bsc#1109569)
  * CVE-2018-17237: A SIGFPE signal is raised in the function
  H5D__chunk_set_info_real (bsc#1109168) (commit 4e31361d).
- Bump fortran library soname, sonum_F from 100 to 102.
- Adjust library installation path, use %hpc_prefix/lib64 in x86_64
  and %hpc_libdir in all other cases
- Patches refreshed:
  * hdf5-LD_LIBRARY_PATH.patch
  * hdf5-1.8.11-abort_unknown_host_config.patch
  * PPC64LE-Fix-long-double-handling.patch
  * hdf5-Remove-timestamps-from-binaries.patch
  * Disable-phdf5-tests.patch
- Patch disabled, upstream have changed the file that was being patched,
  while it could be ported, it's unknown if this patch is still needed.
  * hdf5-mpi.patch
- Patch removed, merged upstream
  * 0001-Fix-return-value-in-test_libver_bounds_open.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1567512000">- Re-list hdf5-mpi.patch in the spec file for the sake of a avoiding
  a script rejecting the package automatically.</changelog>
  <changelog author="aguerrero@suse.com" date="1568116800">- Use -ffat-lto-objects to provide a proper static library.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1571918400">- openmpi has been renamed into openmpi1</changelog>
  <changelog author="eich@suse.com" date="1574942400">- Disable openmpi1 builds for SLE/Leap &gt; 15.1.
- Enable openmpi3 builds for Leap and SLE &gt; 15.1 (jsc#SLE-7773).</changelog>
  <changelog author="eich@suse.com" date="1574942401">- Add HPC support for gcc8 and gcc9 (jsc#SLE-7766 &amp; jsc#SLE-8604).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1575979200">- Add compat provides for renamed hdf5-openmpi{,-devel} package,
  see https://en.opensuse.org/openSUSE:Package_dependencies
- Fix openmpi1 package naming for SLE/Leap &lt;= 15.1</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1579521600">- Remove bogus undefines of suffix and mpi_flavor. suffix is the
  name of an RPM built-in (like expand or echo), and since RPM 4.15
  trying to alter a built-in is an error. Fixes built of serial
  flavor on Tumbleweed. See https://rpm.org/user_doc/macros.html</changelog>
  <changelog author="eich@suse.com" date="1585828800">- Fix library link flags on pkg-config file for HPC builds (boo#1134298).</changelog>
  <changelog author="eich@suse.com" date="1587124800">- Fix .so number in baselibs.conf for libhdf5_fortran libs (boo#1169793).</changelog>
  <changelog author="alinm.elena@gmail.com" date="1593000000">- add openmpi4 packages to build and disable build for leap</changelog>
  <changelog author="eich@suse.com" date="1595246400">- Add missing openmpi4 flavors.
- Enable build of non-HPC flavors for all non-HPC builds.</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc10 to HPC build (bsc#1174439).</changelog>
  <changelog author="aguerrero@suse.com" date="1604664000">- Update to version 1.10.7
  * Add metadata cache optimization to reduce skip list usage.
  * Add BEST_EFFORT value to HDF5_USE_FILE_LOCKING environment variable.
  * Add H5Pset/get_file_locking() API calls.
  * Add Mirror VFD.
    Use TCP/IP sockets to perform write-only (W/O) file I/O on a remote
    machine. Must be used in conjunction with the Splitter VFD.
  * Add Splitter VFD.
    Maintain separate R/W and W/O channels for "concurrent" file writes
    to two files using a single HDF5 file handle.
  * Fixed an assertion failure in the parallel library when collectively
  filling chunks.
  * Fortran/C++ libs: Add wrappers for H5Pset/get_file_locking() API calls.
    h5pget_file_locking_f()
    h5pset_file_locking_f()
  * Added new Fortran parameters:
    H5F_LIBVER_ERROR_F
    H5F_LIBVER_NBOUNDS_F
    H5F_LIBVER_V18_F
    H5F_LIBVER_V110_F
  * Add new Fortran API: h5pget_libver_bounds_f.
  * h5repack added options to control how external links are handled.
  * The tools library was updated by standardizing the error stack process.
  * The H5DSis_scale function was updated to return "not a dimension scale" (0)
    instead of failing (-1), when CLASS or DIMENSION_SCALE attributes are
    not written according to Dimension Scales Specification.
  * Bug Fixes:
    + Fix bug and simplify collective metadata write operation when some ranks
    have no entries to contribute.  This fixes parallel regression test
    failures with IBM SpectrumScale MPI on the Summit system at ORNL.
    + Fixed use-of-uninitialized-value error.
    Appropriate initialization of local structs was added to remove the
    use-of-uninitialized-value errors reported by MemorySanitizer.
    + Creation of dataset with optional filter.
    A fix is applied to allow the creation of a dataset in such
    situation, as specified in the user documentation.
    + Explicitly declared dlopen to use RTLD_LOCAL.
    + H5Sset_extent_none() sets the dataspace class to H5S_NO_CLASS which
    causes asserts/errors when passed to other dataspace API calls.
    + Fixed the segmentation fault when reading attributes with multiple threads
    The problem was fixed by setting the file pointer to the current opened
    file pointer when the attribute was accessed.  Similar patch up was done
    before when reading dataset with variable length string datatype.
    + Don't allocate an empty (0-dimensioned) chunked dataset's chunk
    index, until the dataset's dimensions are increased.
    + Fortan: Corrected INTERFACE INTENT(IN) to INTENT(OUT) for buf_size in
    h5fget_file_image_f.
    + h5diff fixed a command line parsing error.
    + h5diff added a command line option to ignore attributes.
    + h5diff added another level to the verbose argument to print filenames.
    + h5repack was fixed to repack the reference attributes properly.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.7/src/hdf5-1.10.7-RELEASE.txt
- version 1.10.6
  * Added S3 and HDFS Virtual File Drivers (VFDs) to HDF5.
    Instructions to enable them when configuring HDF5 on Linux and Mac
    may be found at.
    https://portal.hdfgroup.org/display/HDF5/Virtual+File+Drivers+-+S3+and+HDFS.
  * Added new wrappers for H5Pset/get_create_intermediate_group()
    LinkCreatPropList::setCreateIntermediateGroup()
    LinkCreatPropList::getCreateIntermediateGroup()
  * h5repack was fixed to repack datasets with external storage
    to other types of storage.
  * Bug Fixes:
    + Improved performance when creating a large number of small datasets by
    retrieving default property values from the API context instead of doing
    skip list searches. More work is required to achieve parity with HDF5 1.8.
    + Fixed user-created data access properties not existing in the property list
    returned by H5Dget_access_plist. Thanks to Steven Varga for submitting a
    reproducer and a patch.
    + Inappropriate linking with deprecated MPI C++ libraries.
    HDF5 does not define *_SKIP_MPICXX in the public headers, so applications
    can inadvertently wind up linking to the deprecated MPI C++ wrappers.
    MPICH_SKIP_MPICXX and OMPI_SKIP_MPICXX have both been defined in H5public.h
    so this should no longer be an issue. HDF5 makes no use of the deprecated
    MPI C++ wrappers.
    + fcntl(2)-based file locking incorrectly passed the lock argument struct
    instead of a pointer to the struct, causing errors on systems where
    flock(2) is not available.
    This bug affects HDF5 1.10.0 through 1.10.5.
    fcntl(2)-based file locking now correctly passes the struct pointer.
    + Fixed a bug caused by a bad tag value when condensing object header
    messages.
    + Fixed an issue when creating a file with non-default file space info
    together with library high bound setting to H5F_LIBVER_V18.
    This was fixed by setting and checking the proper version in the file
    space info message based on the library low and high bounds when creating
    and opening the HDF5 file.
    + Fixed an issue where copying a version 1.8 dataset between files using
    H5Ocopy fails due to an incompatible fill version.
    + Fixed a bug that would cause an error or cause fill values to be
    incorrectly read from a chunked dataset using the "single chunk" index if
    + Fixed a bug that could cause an error or cause fill values to be
    incorrectly read from a dataset that was written to using H5Dwrite_chunk
    if the dataset was not closed after writing.
    + Fixed memory leak in scale offset filter.
  * For details check:
    https://support.hdfgroup.org/ftp/HDF5/releases/hdf5-1.10/hdf5-1.10.6/src/hdf5-1.10.6-RELEASE.txt
- Security bugs fixed:
  * CVE-2018-13870: heap-based buffer over-read in the function
    H5O_link_decode in H5Olink.c  (bsc#1101493)
  * CVE-2018-13869: memcpy parameter overlap in the function
    H5O_link_decode in H5Olink.c (bsc#1101495)
  * CVE-2018-17438:  A SIGFPE signal is raised in the function
    H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3
    (bsc#1109570)
    library during an attempted parse of a crafted HDF file,
    because of incorrect protection against division
    (bsc#1109570)
  * CVE-2018-17435: A heap-based buffer over-read in H5O_attr_decode()
    in H5Oattr.c in the HDF HDF5 through 1.10.3 library allows
    attackers to cause a denial of service via a crafted HDF5 file.
    (bsc#1109567)
- Refresh patches</changelog>
  <changelog author="eich@suse.com" date="1611921600">- Fix update_so_version.sh, write so versions to file being included.</changelog>
  <changelog author="badshah400@gmail.com" date="1645012800">- Update to version 1.10.8:
  * Added new option to control the build of High-Level tools
  * Adds C++ Autotools configuration file for Intel
  * Adds C++ Autotools configuration file for PGI
  * Updates PGI C options
  * CMake will now run the shell script tests in test/ by default
  * Removed unused HDF5_ENABLE_HSIZET option from CMake
  * CMake no longer builds the C++ library by default
  * Removal of pre-VS2015 work-arounds
  * Add CMake variable HDF5_LIB_INFIX
  * Added a configure-time option to control certain compiler
    warnings
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added a configure-time option to consider certain compiler
    warnings
  * Autotools and CMake target added to produce doxygen generated
    documentation
  * CMake option to build the HDF filter plugins project as an
    external project
  * Added CMake option to format source files
  * Change how the release part of version, in major.minor.release
    is checked
  * H5Gcreate1() now rejects size_hint parameters larger than
    UINT32_MAX
  * H5Pset_fapl_log() no longer crashes when passed an invalid
    fapl ID
  * Fixes a segfault when H5Pset_mdc_log_options() is called
    multiple times
  * File locking now works on Windows
  * H5Epush_ret() now requires a trailing semicolon
  * Improved performance of H5Sget_select_elem_pointlist
  * H5Fget_name_f fixed to handle correctly trailing whitespaces
    and newly allocated buffers.
  * Added new H5S functions.
  * Refactored the perform tools and removed dependencies on test
    library.
  * h5repack added help text for user-defined filters.
  * Doxygen documentation is available when configured and
    generated.
  * Fixed CVE-2018-17432 (bsc#1109564)
  * Fixed a segmentation fault
  * Detection of simple data transform function "x"
  * Fixed CVE-2020-10810 - an invalid read and memory leak when
    parsing (bsc#1167401)
  * Fixed CVE-2018-14460 (bsc#1102175)
  * Fixed CVE-2018-11206 (bsc#1093657)
    (same issue as CVE-2018-14032 (bsc#1101474))
  * Fixed CVE-2018-14033 (bsc#1101471)
    (same issue as CVE-2020-10811 (bsc#1167405))
  * Remove underscores on header file guards
  * H5FArray.java class:
  - Convert the entire byte array into a 1-d array of the
    desired type, rather than performing 1 conversion per row;
  - Use the Java Arrays method copyOfRange to grab the section
    of the array from (1) that is desired to be inserted into
    the destination array.
  * Corrected path searched by CMake find_package command
  * Corrected pkg-config compile script
  * Fixed CMake C++ compiler flags
  * Autotools clang debug optimization level change
  * Better support for libaec (open-source Szip library) in CMake
  * Refactor CMake configure for Fortran
  * Remove arbitrary warning flag groups from CMake builds
  * Reclassify CMake messages, to allow new modes and --log-level
    option
  * Fixes Autotools determination of the stat struct having an
    st_blocks field
  * Changed how h5dump and h5ls identify long double.
  * Fixed tools argument parsing.
  * Updated doxygen comments with changes for release
- Minor rebase of patches to apply cleanly.</changelog>
  <changelog author="code@bnavigator.de" date="1648728000">- Add hdf5-1.10.8-pr1494-fix-release-check-version.patch
  * boo#1179521, boo#1196682, gh#HDFGroup/hdf5#1494
  * Avoids package crashes due to an overeager version check.
    Packages depending on the shared libraries are not being
    rebuilt in Factory after a patchlevel version bump of hdf5
    without SONAME changes.</changelog>
  <changelog author="junghans@votca.org" date="1649332800">- add hdf5-wrappers.patch from Fedora, so strip flags from
  wrappers and prefer shared linking
- add missing zlib-devel devel dep</changelog>
  <changelog author="eich@suse.com" date="1651665600">- Security Fix:
  Add configure option --disable-hltools to disable GIF tools as
  recommended in the 1.10.8 release:
  CVE-2018-17433 (bsc#1109565),
  CVE-2018-17436 (bsc#1109568),
  CVE-2020-10809 (bsc#1167404).</changelog>
</package>
<package pkgid="a0feab49907d2b6848676c5cbfb173de7514ecb5400b5d1e779af49d3761dd88" name="libhunspell-1_6-0" arch="aarch64">
  <version epoch="0" ver="1.6.2" rel="150000.3.11.1"/>
  <changelog author="tchvatal@suse.com" date="1459771200">- Version update to 1.3.4:
  * Various updates to the buildsystem
  * Various werror bugfixes
  * Loads of coverity fixes
- Add patch to build with grep 2.24:
  * hunspell-grep2.24.patch
- Remove upstreamed patch:
  * hunspell-emacs-utf8.patch
- Do not search for translations - broken automake from upstream
  * Not worth fixing only bit italian and mostly hungarian translations
    for cli anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1641470400">- suggests english dictionary [bsc#1193627]</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- requires english dictionary [bsc#1199209]</changelog>
</package>
<package pkgid="571cd16894ff14f0bfcf7b609ed9b103acdc5e4dcfb17e0e02f3098986090a03" name="libhunspell-1_6-0" arch="ppc64le">
  <version epoch="0" ver="1.6.2" rel="150000.3.11.1"/>
  <changelog author="tchvatal@suse.com" date="1459771200">- Version update to 1.3.4:
  * Various updates to the buildsystem
  * Various werror bugfixes
  * Loads of coverity fixes
- Add patch to build with grep 2.24:
  * hunspell-grep2.24.patch
- Remove upstreamed patch:
  * hunspell-emacs-utf8.patch
- Do not search for translations - broken automake from upstream
  * Not worth fixing only bit italian and mostly hungarian translations
    for cli anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1641470400">- suggests english dictionary [bsc#1193627]</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- requires english dictionary [bsc#1199209]</changelog>
</package>
<package pkgid="8e56e8163c83faf5063b0f251989c21fdc38adf0d255d0ab704b64ff14d4e0c5" name="libhunspell-1_6-0" arch="s390x">
  <version epoch="0" ver="1.6.2" rel="150000.3.11.1"/>
  <changelog author="tchvatal@suse.com" date="1459771200">- Version update to 1.3.4:
  * Various updates to the buildsystem
  * Various werror bugfixes
  * Loads of coverity fixes
- Add patch to build with grep 2.24:
  * hunspell-grep2.24.patch
- Remove upstreamed patch:
  * hunspell-emacs-utf8.patch
- Do not search for translations - broken automake from upstream
  * Not worth fixing only bit italian and mostly hungarian translations
    for cli anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1641470400">- suggests english dictionary [bsc#1193627]</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- requires english dictionary [bsc#1199209]</changelog>
</package>
<package pkgid="484ac4ab41ab7d398aa4ffa235a9e10eeabc00de695bf5847d02fb841655712c" name="libhunspell-1_6-0" arch="x86_64">
  <version epoch="0" ver="1.6.2" rel="150000.3.11.1"/>
  <changelog author="tchvatal@suse.com" date="1459771200">- Version update to 1.3.4:
  * Various updates to the buildsystem
  * Various werror bugfixes
  * Loads of coverity fixes
- Add patch to build with grep 2.24:
  * hunspell-grep2.24.patch
- Remove upstreamed patch:
  * hunspell-emacs-utf8.patch
- Do not search for translations - broken automake from upstream
  * Not worth fixing only bit italian and mostly hungarian translations
    for cli anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1641470400">- suggests english dictionary [bsc#1193627]</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- requires english dictionary [bsc#1199209]</changelog>
</package>
<package pkgid="ed805fd50d71bd01a2603876e520e33ed22dd30e30c5839222b61c968f8c8336" name="libhunspell-1_6-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.6.2" rel="150000.3.11.1"/>
  <changelog author="tchvatal@suse.com" date="1459771200">- Version update to 1.3.4:
  * Various updates to the buildsystem
  * Various werror bugfixes
  * Loads of coverity fixes
- Add patch to build with grep 2.24:
  * hunspell-grep2.24.patch
- Remove upstreamed patch:
  * hunspell-emacs-utf8.patch
- Do not search for translations - broken automake from upstream
  * Not worth fixing only bit italian and mostly hungarian translations
    for cli anyway</changelog>
  <changelog author="mpluskal@suse.com" date="1461067200">- Update to 1.4.0
  * New release that strips out fixed length buffers from large
    parts of the library
  * Note: dictmgr.hxx header is dropped
- Drop upstreamed hunspell-grep2.24.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1462363200">- Update to 1.4.1:
  * Past begin() iterator decrement error
  * VS Debug build threw error on decrement past begin.
- Split shared library
- Do not call autoreconf
- Move manpages to corresponding packages</changelog>
  <changelog author="mpluskal@suse.com" date="1462968000">- Update baselibs.conf bnc#977784
- Add conflicts to hunspell 1.4.0</changelog>
  <changelog author="jengelh@inai.de" date="1463486400">- Drop Requires: pkgconfig because this is already autodetected
  by rpm. Use mode inheritance for defattr. Edit rpm group and
  description a tiny bit.</changelog>
  <changelog author="pgajdos@suse.com" date="1479729600">- update to 1.5.0:
  * Lot of stability fixes
  * Fixed compilation errors on various systems (Windows, FreeBSD)
  * Small performance improvement compared to 1.4.0
  * API is same as 1.4.</changelog>
  <changelog author="pgajdos@suse.com" date="1480593600">- update to 1.5.4:
  * fix API compatibility with 1.4</changelog>
  <changelog author="mpluskal@suse.com" date="1482494400">- Update to version 1.6.0:
  * Changes in the library:
    + Performance improvement in ngsuggest(), suggestions should be
    faster.
    + Revert MAXWORDLEN to 100 as in 1.3.3 for performance reasons.
    + MAXWORDLEN can be set during build time with -D defines.
    + Fix crash when word with 102 consecutive X is spelled.
  * Changes in the command line tool:
    + -D shows all loaded dictionares insted of only the first.
    + -D properly lists all available dictionaries on Windows.</changelog>
  <changelog author="mpluskal@suse.com" date="1496836800">- Update to version 1.6.1:
  * Library changes:
    + Performance improvements in suggest()
    + Fixes regressions for Hungarian related to compounding.
    + Fixes regressions for Korean related to ICONV.
  * Command line tool:
    + Added Tajik translation
    + Fix regarding serching of OOo dicts installed in user folder
  * Manpages:
    + Fix microsoft-cp1251 to cp1251. Dicts should not use the
    first.
    + Typos.</changelog>
  <changelog author="mpluskal@suse.com" date="1509105600">- Update to version 1.6.2:
  * Command line tool:
    + Added German translation
    + Fixed bug with wrong output encoding, not respecting system
    locale.</changelog>
  <changelog author="pgajdos@suse.com" date="1591704000">- security update
- added patches
  fix CVE-2019-16707 [bsc#1151867], invalid read operation in SuggestMgr:leftcommonsubstring in suggestmgr.cxx
  + hunspell-CVE-2019-16707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1641470400">- suggests english dictionary [bsc#1193627]</changelog>
  <changelog author="pgajdos@suse.com" date="1652184000">- requires english dictionary [bsc#1199209]</changelog>
</package>
<package pkgid="0cb9061d2b1d11fdd85317a3e3f2dd002edf5a506acc94494f94804445c69623" name="libhwasan0" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="2cec7ea46a968cba354166eea1db0827affb1295367f4fb4407c736a2d8f5c68" name="libiterm-devel" arch="aarch64">
  <version epoch="0" ver="0.5.20040304" rel="150000.5.6.1"/>
  <changelog author="pgajdos@suse.com" date="1360843200">- add bdftopcf into build requires [bnc#803276]</changelog>
  <changelog author="pgajdos@suse.com" date="1362484800">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- README.SuSE renamed to README.SUSE [bnc#889032] (internal)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414843200">- Switch to pkgconfig() buildrequires instead of using
  metapackage xorg-x11-devel</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- implict-ptsname-decl.patch: fix implicit declaration of ptsname with
  glibc &gt;= 2.24</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="schwab@suse.de" date="1502884800">- Prerequire group(tty)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Conflict libiterm1 with terminfo-iterm: terminfo-iterm is an
  alternative to xiterm, and the conflict is meant to be.</changelog>
  <changelog author="schwab@suse.de" date="1565265600">- stropts.patch: remove use of obsolete XSI STREAMS interface</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- added patches
  fix do not enable application keypad mode [bsc#1158271]
  + xiterm-no-keypad-application-mode.patch
- big thanks to Stefan Hundhammer</changelog>
</package>
<package pkgid="7c390709ad359a6ccae1630817a5fb4510d17bd9147b5f8360c27d97071298ea" name="libiterm-devel" arch="ppc64le">
  <version epoch="0" ver="0.5.20040304" rel="150000.5.6.1"/>
  <changelog author="pgajdos@suse.com" date="1360843200">- add bdftopcf into build requires [bnc#803276]</changelog>
  <changelog author="pgajdos@suse.com" date="1362484800">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- README.SuSE renamed to README.SUSE [bnc#889032] (internal)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414843200">- Switch to pkgconfig() buildrequires instead of using
  metapackage xorg-x11-devel</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- implict-ptsname-decl.patch: fix implicit declaration of ptsname with
  glibc &gt;= 2.24</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="schwab@suse.de" date="1502884800">- Prerequire group(tty)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Conflict libiterm1 with terminfo-iterm: terminfo-iterm is an
  alternative to xiterm, and the conflict is meant to be.</changelog>
  <changelog author="schwab@suse.de" date="1565265600">- stropts.patch: remove use of obsolete XSI STREAMS interface</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- added patches
  fix do not enable application keypad mode [bsc#1158271]
  + xiterm-no-keypad-application-mode.patch
- big thanks to Stefan Hundhammer</changelog>
</package>
<package pkgid="0f7de5cdedff5a98a5bdc7a4458ff529ba7d24ae30f2106d7405eeddfc936a4a" name="libiterm-devel" arch="s390x">
  <version epoch="0" ver="0.5.20040304" rel="150000.5.6.1"/>
  <changelog author="pgajdos@suse.com" date="1360843200">- add bdftopcf into build requires [bnc#803276]</changelog>
  <changelog author="pgajdos@suse.com" date="1362484800">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- README.SuSE renamed to README.SUSE [bnc#889032] (internal)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414843200">- Switch to pkgconfig() buildrequires instead of using
  metapackage xorg-x11-devel</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- implict-ptsname-decl.patch: fix implicit declaration of ptsname with
  glibc &gt;= 2.24</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="schwab@suse.de" date="1502884800">- Prerequire group(tty)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Conflict libiterm1 with terminfo-iterm: terminfo-iterm is an
  alternative to xiterm, and the conflict is meant to be.</changelog>
  <changelog author="schwab@suse.de" date="1565265600">- stropts.patch: remove use of obsolete XSI STREAMS interface</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- added patches
  fix do not enable application keypad mode [bsc#1158271]
  + xiterm-no-keypad-application-mode.patch
- big thanks to Stefan Hundhammer</changelog>
</package>
<package pkgid="4e7837f667e153095c8477f2e7c6d9872327797b2a827c12af542ed8b8b59803" name="libiterm-devel" arch="x86_64">
  <version epoch="0" ver="0.5.20040304" rel="150000.5.6.1"/>
  <changelog author="pgajdos@suse.com" date="1360843200">- add bdftopcf into build requires [bnc#803276]</changelog>
  <changelog author="pgajdos@suse.com" date="1362484800">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- README.SuSE renamed to README.SUSE [bnc#889032] (internal)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414843200">- Switch to pkgconfig() buildrequires instead of using
  metapackage xorg-x11-devel</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- implict-ptsname-decl.patch: fix implicit declaration of ptsname with
  glibc &gt;= 2.24</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="schwab@suse.de" date="1502884800">- Prerequire group(tty)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Conflict libiterm1 with terminfo-iterm: terminfo-iterm is an
  alternative to xiterm, and the conflict is meant to be.</changelog>
  <changelog author="schwab@suse.de" date="1565265600">- stropts.patch: remove use of obsolete XSI STREAMS interface</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- added patches
  fix do not enable application keypad mode [bsc#1158271]
  + xiterm-no-keypad-application-mode.patch
- big thanks to Stefan Hundhammer</changelog>
</package>
<package pkgid="4d358a0fd556acff71d5e15e0ad74dc30c7123f1e84d5cda86137b51dd88aa24" name="libiterm1" arch="aarch64">
  <version epoch="0" ver="0.5.20040304" rel="150000.5.6.1"/>
  <changelog author="pgajdos@suse.com" date="1360843200">- add bdftopcf into build requires [bnc#803276]</changelog>
  <changelog author="pgajdos@suse.com" date="1362484800">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- README.SuSE renamed to README.SUSE [bnc#889032] (internal)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414843200">- Switch to pkgconfig() buildrequires instead of using
  metapackage xorg-x11-devel</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- implict-ptsname-decl.patch: fix implicit declaration of ptsname with
  glibc &gt;= 2.24</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="schwab@suse.de" date="1502884800">- Prerequire group(tty)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Conflict libiterm1 with terminfo-iterm: terminfo-iterm is an
  alternative to xiterm, and the conflict is meant to be.</changelog>
  <changelog author="schwab@suse.de" date="1565265600">- stropts.patch: remove use of obsolete XSI STREAMS interface</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- added patches
  fix do not enable application keypad mode [bsc#1158271]
  + xiterm-no-keypad-application-mode.patch
- big thanks to Stefan Hundhammer</changelog>
</package>
<package pkgid="b6d0fa8cf78488ce587aded8a46175fc0957633433f5e5ac24108e115f192103" name="libiterm1" arch="ppc64le">
  <version epoch="0" ver="0.5.20040304" rel="150000.5.6.1"/>
  <changelog author="pgajdos@suse.com" date="1360843200">- add bdftopcf into build requires [bnc#803276]</changelog>
  <changelog author="pgajdos@suse.com" date="1362484800">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- README.SuSE renamed to README.SUSE [bnc#889032] (internal)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414843200">- Switch to pkgconfig() buildrequires instead of using
  metapackage xorg-x11-devel</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- implict-ptsname-decl.patch: fix implicit declaration of ptsname with
  glibc &gt;= 2.24</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="schwab@suse.de" date="1502884800">- Prerequire group(tty)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Conflict libiterm1 with terminfo-iterm: terminfo-iterm is an
  alternative to xiterm, and the conflict is meant to be.</changelog>
  <changelog author="schwab@suse.de" date="1565265600">- stropts.patch: remove use of obsolete XSI STREAMS interface</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- added patches
  fix do not enable application keypad mode [bsc#1158271]
  + xiterm-no-keypad-application-mode.patch
- big thanks to Stefan Hundhammer</changelog>
</package>
<package pkgid="208506f5660dad941bce9c080d95f098c4c650bdca5b2911c639e9943cec715c" name="libiterm1" arch="s390x">
  <version epoch="0" ver="0.5.20040304" rel="150000.5.6.1"/>
  <changelog author="pgajdos@suse.com" date="1360843200">- add bdftopcf into build requires [bnc#803276]</changelog>
  <changelog author="pgajdos@suse.com" date="1362484800">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- README.SuSE renamed to README.SUSE [bnc#889032] (internal)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414843200">- Switch to pkgconfig() buildrequires instead of using
  metapackage xorg-x11-devel</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- implict-ptsname-decl.patch: fix implicit declaration of ptsname with
  glibc &gt;= 2.24</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="schwab@suse.de" date="1502884800">- Prerequire group(tty)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Conflict libiterm1 with terminfo-iterm: terminfo-iterm is an
  alternative to xiterm, and the conflict is meant to be.</changelog>
  <changelog author="schwab@suse.de" date="1565265600">- stropts.patch: remove use of obsolete XSI STREAMS interface</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- added patches
  fix do not enable application keypad mode [bsc#1158271]
  + xiterm-no-keypad-application-mode.patch
- big thanks to Stefan Hundhammer</changelog>
</package>
<package pkgid="cc0f6b2f2164290652c242520484c08b537e91da16d7cdb6da350a97d78d2c4d" name="libiterm1" arch="x86_64">
  <version epoch="0" ver="0.5.20040304" rel="150000.5.6.1"/>
  <changelog author="pgajdos@suse.com" date="1360843200">- add bdftopcf into build requires [bnc#803276]</changelog>
  <changelog author="pgajdos@suse.com" date="1362484800">- builds with automake 1.13
  * automake-1.13.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1406548800">- README.SuSE renamed to README.SUSE [bnc#889032] (internal)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1414843200">- Switch to pkgconfig() buildrequires instead of using
  metapackage xorg-x11-devel</changelog>
  <changelog author="schwab@suse.de" date="1468324800">- implict-ptsname-decl.patch: fix implicit declaration of ptsname with
  glibc &gt;= 2.24</changelog>
  <changelog author="bwiedemann@suse.com" date="1493467200">- call gzip -n to make build fully reproducible</changelog>
  <changelog author="schwab@suse.de" date="1502884800">- Prerequire group(tty)</changelog>
  <changelog author="dimstar@opensuse.org" date="1505822400">- Conflict libiterm1 with terminfo-iterm: terminfo-iterm is an
  alternative to xiterm, and the conflict is meant to be.</changelog>
  <changelog author="schwab@suse.de" date="1565265600">- stropts.patch: remove use of obsolete XSI STREAMS interface</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- added patches
  fix do not enable application keypad mode [bsc#1158271]
  + xiterm-no-keypad-application-mode.patch
- big thanks to Stefan Hundhammer</changelog>
</package>
<package pkgid="aa3bebac1bd0efc066f2749c715ae86f5cd22c7d278a856a09f40a0950401b21" name="libitm1" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="fe05bd6389eae0070ddb65092da4542691862dbf61d36210a04d44f93454d907" name="libitm1" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="6258fd3bd412dd007955fe0744e139b20d452d8b741cc5c51ea73ad9a4c2b618" name="libitm1" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="01b41b06b1efa43d7179e0e26b350415a9f43a588033713892227e96b9a098ce" name="libitm1" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="026d62fd89afc5f63545ab90348a6154d7f0d85aea113217137f3a9a13ac21df" name="libitm1-32bit" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="3c4107ccdacd5aa78b9966394fce3ffd0d8071e8f2058b6e190ecbb46fcc8675" name="libitm1-32bit" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="977092e1cd141b8114f35c6fff38948afc543443ee819545e36e2c5f6ee22edf" name="libjasper-devel" arch="aarch64">
  <version epoch="0" ver="2.0.14" rel="150000.3.25.1"/>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="adam.majer@suse.de" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
  <changelog author="mvetter@suse.com" date="1584446400">- bsc#1092115 CVE-2018-9154: Fix possible denial of service
  Add jasper-CVE-2018-9154.patch: dont abort in jpc_dec_process_sot()</changelog>
  <changelog author="mvetter@suse.com" date="1597320000">- bsc#1010980 CVE-2016-9399: Fix assert in calcstepsizes
  Add jasper-CVE-2016-9399.patch
- bsc#1020451 CVE-2017-5499: Validate component depth bit
  Add jasper-CVE-2017-5499.patch
- bsc#1020456 CVE-2017-5503, bsc#1020458 CVE-2017-5504, bsc#1020460 CVE-2017-5505:
  Check bounds in jas_seq2d_bindsub()
  Add jasper-CVE-2017-5503-CVE-2017-5504-CVE-2017-5505.patch</changelog>
  <changelog author="mvetter@suse.com" date="1597665600">- bsc#1120807 CVE-2018-20570: Fix heap based buffer over-read in jp2_encode
  Add jasper-CVE-2018-20570.patch
- bsc#1120805 CVE-2018-20622: Fix memory leak in jas_malloc.c
  Add jasper-CVE-2018-20622.patch
- bsc#1117328 CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup
  Add jasper-CVE-2018-19543-CVE-2017-9782.patch
- bsc#1115637 CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms
  Add jasper-CVE-2018-19139.patch
- bsc#1114498 CVE-2018-18873: Fix null pointer deref in ras_putdatastd
  Add jasper-CVE-2018-18873.patch
- bsc#1088278 CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize
  Add jasper-CVE-2018-9252.patch
- bsc#1057152 CVE-2017-14132: Fix heap base overflow in by checking components
  Add jasper-CVE-2017-14132.patch</changelog>
  <changelog author="mvetter@suse.com" date="1598443200">- bsc#1010979 CVE-2016-9398: Use new fix from upstream where we
  actually check for allowed value range instead of just negating
  Add jasper-CVE-2016-9398-upstream.patch</changelog>
  <changelog author="mvetter@suse.com" date="1612785600">- bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls
  Add jasper-CVE-2020-27828.patch
- bsc#1181483 CVE-2021-3272: Fix heap overflow by ensuring number
  of channels matches image components
  Add jasper-CVE-2021-3272.patch</changelog>
  <changelog author="mvetter@suse.com" date="1643803200">- bsc#1188437 CVE-2021-27845: Fix divide-by-zery in cp_create()
  Add jasper-CVE-2021-27845.patch</changelog>
  <changelog author="mvetter@suse.com" date="1650542400">- bsc#1184757 CVE-2021-3467: Fix NULL pointer deref in jp2_decode()
  Add jasper-CVE-2021-3467.patch
- bsc#1184798 CVE-2021-3443: Fix NULL pointer derefin jp2_decode()
  Add jasper-CVE-2021-3443.patch
- bsc#1182104 CVE-2021-26927: Fix NULL pointer deref in jp2_decode()
  bsc#1182105 CVE-2021-26926: Fix Out of bounds read in jp2_decode()
  Add jasper-CVE-2021-26926-CVE-2021-26927.patch</changelog>
</package>
<package pkgid="9b3cc433e4c78137d701bb96116487a63406194d5b3b2b0c6b1b7c3bf6262d79" name="libjasper-devel" arch="ppc64le">
  <version epoch="0" ver="2.0.14" rel="150000.3.25.1"/>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="adam.majer@suse.de" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
  <changelog author="mvetter@suse.com" date="1584446400">- bsc#1092115 CVE-2018-9154: Fix possible denial of service
  Add jasper-CVE-2018-9154.patch: dont abort in jpc_dec_process_sot()</changelog>
  <changelog author="mvetter@suse.com" date="1597320000">- bsc#1010980 CVE-2016-9399: Fix assert in calcstepsizes
  Add jasper-CVE-2016-9399.patch
- bsc#1020451 CVE-2017-5499: Validate component depth bit
  Add jasper-CVE-2017-5499.patch
- bsc#1020456 CVE-2017-5503, bsc#1020458 CVE-2017-5504, bsc#1020460 CVE-2017-5505:
  Check bounds in jas_seq2d_bindsub()
  Add jasper-CVE-2017-5503-CVE-2017-5504-CVE-2017-5505.patch</changelog>
  <changelog author="mvetter@suse.com" date="1597665600">- bsc#1120807 CVE-2018-20570: Fix heap based buffer over-read in jp2_encode
  Add jasper-CVE-2018-20570.patch
- bsc#1120805 CVE-2018-20622: Fix memory leak in jas_malloc.c
  Add jasper-CVE-2018-20622.patch
- bsc#1117328 CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup
  Add jasper-CVE-2018-19543-CVE-2017-9782.patch
- bsc#1115637 CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms
  Add jasper-CVE-2018-19139.patch
- bsc#1114498 CVE-2018-18873: Fix null pointer deref in ras_putdatastd
  Add jasper-CVE-2018-18873.patch
- bsc#1088278 CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize
  Add jasper-CVE-2018-9252.patch
- bsc#1057152 CVE-2017-14132: Fix heap base overflow in by checking components
  Add jasper-CVE-2017-14132.patch</changelog>
  <changelog author="mvetter@suse.com" date="1598443200">- bsc#1010979 CVE-2016-9398: Use new fix from upstream where we
  actually check for allowed value range instead of just negating
  Add jasper-CVE-2016-9398-upstream.patch</changelog>
  <changelog author="mvetter@suse.com" date="1612785600">- bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls
  Add jasper-CVE-2020-27828.patch
- bsc#1181483 CVE-2021-3272: Fix heap overflow by ensuring number
  of channels matches image components
  Add jasper-CVE-2021-3272.patch</changelog>
  <changelog author="mvetter@suse.com" date="1643803200">- bsc#1188437 CVE-2021-27845: Fix divide-by-zery in cp_create()
  Add jasper-CVE-2021-27845.patch</changelog>
  <changelog author="mvetter@suse.com" date="1650542400">- bsc#1184757 CVE-2021-3467: Fix NULL pointer deref in jp2_decode()
  Add jasper-CVE-2021-3467.patch
- bsc#1184798 CVE-2021-3443: Fix NULL pointer derefin jp2_decode()
  Add jasper-CVE-2021-3443.patch
- bsc#1182104 CVE-2021-26927: Fix NULL pointer deref in jp2_decode()
  bsc#1182105 CVE-2021-26926: Fix Out of bounds read in jp2_decode()
  Add jasper-CVE-2021-26926-CVE-2021-26927.patch</changelog>
</package>
<package pkgid="35ad5830c3efb937e2221cc1c3a7ff17fa9b5c95dec2678be7838f16cd1717ed" name="libjasper-devel" arch="s390x">
  <version epoch="0" ver="2.0.14" rel="150000.3.25.1"/>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="adam.majer@suse.de" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
  <changelog author="mvetter@suse.com" date="1584446400">- bsc#1092115 CVE-2018-9154: Fix possible denial of service
  Add jasper-CVE-2018-9154.patch: dont abort in jpc_dec_process_sot()</changelog>
  <changelog author="mvetter@suse.com" date="1597320000">- bsc#1010980 CVE-2016-9399: Fix assert in calcstepsizes
  Add jasper-CVE-2016-9399.patch
- bsc#1020451 CVE-2017-5499: Validate component depth bit
  Add jasper-CVE-2017-5499.patch
- bsc#1020456 CVE-2017-5503, bsc#1020458 CVE-2017-5504, bsc#1020460 CVE-2017-5505:
  Check bounds in jas_seq2d_bindsub()
  Add jasper-CVE-2017-5503-CVE-2017-5504-CVE-2017-5505.patch</changelog>
  <changelog author="mvetter@suse.com" date="1597665600">- bsc#1120807 CVE-2018-20570: Fix heap based buffer over-read in jp2_encode
  Add jasper-CVE-2018-20570.patch
- bsc#1120805 CVE-2018-20622: Fix memory leak in jas_malloc.c
  Add jasper-CVE-2018-20622.patch
- bsc#1117328 CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup
  Add jasper-CVE-2018-19543-CVE-2017-9782.patch
- bsc#1115637 CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms
  Add jasper-CVE-2018-19139.patch
- bsc#1114498 CVE-2018-18873: Fix null pointer deref in ras_putdatastd
  Add jasper-CVE-2018-18873.patch
- bsc#1088278 CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize
  Add jasper-CVE-2018-9252.patch
- bsc#1057152 CVE-2017-14132: Fix heap base overflow in by checking components
  Add jasper-CVE-2017-14132.patch</changelog>
  <changelog author="mvetter@suse.com" date="1598443200">- bsc#1010979 CVE-2016-9398: Use new fix from upstream where we
  actually check for allowed value range instead of just negating
  Add jasper-CVE-2016-9398-upstream.patch</changelog>
  <changelog author="mvetter@suse.com" date="1612785600">- bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls
  Add jasper-CVE-2020-27828.patch
- bsc#1181483 CVE-2021-3272: Fix heap overflow by ensuring number
  of channels matches image components
  Add jasper-CVE-2021-3272.patch</changelog>
  <changelog author="mvetter@suse.com" date="1643803200">- bsc#1188437 CVE-2021-27845: Fix divide-by-zery in cp_create()
  Add jasper-CVE-2021-27845.patch</changelog>
  <changelog author="mvetter@suse.com" date="1650542400">- bsc#1184757 CVE-2021-3467: Fix NULL pointer deref in jp2_decode()
  Add jasper-CVE-2021-3467.patch
- bsc#1184798 CVE-2021-3443: Fix NULL pointer derefin jp2_decode()
  Add jasper-CVE-2021-3443.patch
- bsc#1182104 CVE-2021-26927: Fix NULL pointer deref in jp2_decode()
  bsc#1182105 CVE-2021-26926: Fix Out of bounds read in jp2_decode()
  Add jasper-CVE-2021-26926-CVE-2021-26927.patch</changelog>
</package>
<package pkgid="6fef69d5c5d47acfecf002846bc3d93c102a191d220c5b36e9b7a72c56bf4be0" name="libjasper-devel" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="150000.3.25.1"/>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="adam.majer@suse.de" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
  <changelog author="mvetter@suse.com" date="1584446400">- bsc#1092115 CVE-2018-9154: Fix possible denial of service
  Add jasper-CVE-2018-9154.patch: dont abort in jpc_dec_process_sot()</changelog>
  <changelog author="mvetter@suse.com" date="1597320000">- bsc#1010980 CVE-2016-9399: Fix assert in calcstepsizes
  Add jasper-CVE-2016-9399.patch
- bsc#1020451 CVE-2017-5499: Validate component depth bit
  Add jasper-CVE-2017-5499.patch
- bsc#1020456 CVE-2017-5503, bsc#1020458 CVE-2017-5504, bsc#1020460 CVE-2017-5505:
  Check bounds in jas_seq2d_bindsub()
  Add jasper-CVE-2017-5503-CVE-2017-5504-CVE-2017-5505.patch</changelog>
  <changelog author="mvetter@suse.com" date="1597665600">- bsc#1120807 CVE-2018-20570: Fix heap based buffer over-read in jp2_encode
  Add jasper-CVE-2018-20570.patch
- bsc#1120805 CVE-2018-20622: Fix memory leak in jas_malloc.c
  Add jasper-CVE-2018-20622.patch
- bsc#1117328 CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup
  Add jasper-CVE-2018-19543-CVE-2017-9782.patch
- bsc#1115637 CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms
  Add jasper-CVE-2018-19139.patch
- bsc#1114498 CVE-2018-18873: Fix null pointer deref in ras_putdatastd
  Add jasper-CVE-2018-18873.patch
- bsc#1088278 CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize
  Add jasper-CVE-2018-9252.patch
- bsc#1057152 CVE-2017-14132: Fix heap base overflow in by checking components
  Add jasper-CVE-2017-14132.patch</changelog>
  <changelog author="mvetter@suse.com" date="1598443200">- bsc#1010979 CVE-2016-9398: Use new fix from upstream where we
  actually check for allowed value range instead of just negating
  Add jasper-CVE-2016-9398-upstream.patch</changelog>
  <changelog author="mvetter@suse.com" date="1612785600">- bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls
  Add jasper-CVE-2020-27828.patch
- bsc#1181483 CVE-2021-3272: Fix heap overflow by ensuring number
  of channels matches image components
  Add jasper-CVE-2021-3272.patch</changelog>
  <changelog author="mvetter@suse.com" date="1643803200">- bsc#1188437 CVE-2021-27845: Fix divide-by-zery in cp_create()
  Add jasper-CVE-2021-27845.patch</changelog>
  <changelog author="mvetter@suse.com" date="1650542400">- bsc#1184757 CVE-2021-3467: Fix NULL pointer deref in jp2_decode()
  Add jasper-CVE-2021-3467.patch
- bsc#1184798 CVE-2021-3443: Fix NULL pointer derefin jp2_decode()
  Add jasper-CVE-2021-3443.patch
- bsc#1182104 CVE-2021-26927: Fix NULL pointer deref in jp2_decode()
  bsc#1182105 CVE-2021-26926: Fix Out of bounds read in jp2_decode()
  Add jasper-CVE-2021-26926-CVE-2021-26927.patch</changelog>
</package>
<package pkgid="2d686819cef71502f22669a00f4e5336686c28ec3fffb6845c0a17586d545102" name="libjasper4" arch="aarch64">
  <version epoch="0" ver="2.0.14" rel="150000.3.25.1"/>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="adam.majer@suse.de" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
  <changelog author="mvetter@suse.com" date="1584446400">- bsc#1092115 CVE-2018-9154: Fix possible denial of service
  Add jasper-CVE-2018-9154.patch: dont abort in jpc_dec_process_sot()</changelog>
  <changelog author="mvetter@suse.com" date="1597320000">- bsc#1010980 CVE-2016-9399: Fix assert in calcstepsizes
  Add jasper-CVE-2016-9399.patch
- bsc#1020451 CVE-2017-5499: Validate component depth bit
  Add jasper-CVE-2017-5499.patch
- bsc#1020456 CVE-2017-5503, bsc#1020458 CVE-2017-5504, bsc#1020460 CVE-2017-5505:
  Check bounds in jas_seq2d_bindsub()
  Add jasper-CVE-2017-5503-CVE-2017-5504-CVE-2017-5505.patch</changelog>
  <changelog author="mvetter@suse.com" date="1597665600">- bsc#1120807 CVE-2018-20570: Fix heap based buffer over-read in jp2_encode
  Add jasper-CVE-2018-20570.patch
- bsc#1120805 CVE-2018-20622: Fix memory leak in jas_malloc.c
  Add jasper-CVE-2018-20622.patch
- bsc#1117328 CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup
  Add jasper-CVE-2018-19543-CVE-2017-9782.patch
- bsc#1115637 CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms
  Add jasper-CVE-2018-19139.patch
- bsc#1114498 CVE-2018-18873: Fix null pointer deref in ras_putdatastd
  Add jasper-CVE-2018-18873.patch
- bsc#1088278 CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize
  Add jasper-CVE-2018-9252.patch
- bsc#1057152 CVE-2017-14132: Fix heap base overflow in by checking components
  Add jasper-CVE-2017-14132.patch</changelog>
  <changelog author="mvetter@suse.com" date="1598443200">- bsc#1010979 CVE-2016-9398: Use new fix from upstream where we
  actually check for allowed value range instead of just negating
  Add jasper-CVE-2016-9398-upstream.patch</changelog>
  <changelog author="mvetter@suse.com" date="1612785600">- bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls
  Add jasper-CVE-2020-27828.patch
- bsc#1181483 CVE-2021-3272: Fix heap overflow by ensuring number
  of channels matches image components
  Add jasper-CVE-2021-3272.patch</changelog>
  <changelog author="mvetter@suse.com" date="1643803200">- bsc#1188437 CVE-2021-27845: Fix divide-by-zery in cp_create()
  Add jasper-CVE-2021-27845.patch</changelog>
  <changelog author="mvetter@suse.com" date="1650542400">- bsc#1184757 CVE-2021-3467: Fix NULL pointer deref in jp2_decode()
  Add jasper-CVE-2021-3467.patch
- bsc#1184798 CVE-2021-3443: Fix NULL pointer derefin jp2_decode()
  Add jasper-CVE-2021-3443.patch
- bsc#1182104 CVE-2021-26927: Fix NULL pointer deref in jp2_decode()
  bsc#1182105 CVE-2021-26926: Fix Out of bounds read in jp2_decode()
  Add jasper-CVE-2021-26926-CVE-2021-26927.patch</changelog>
</package>
<package pkgid="955668f2ed11b84d30d79cd4dae90700a461243a4d5aaab4b744fc659ad54746" name="libjasper4" arch="ppc64le">
  <version epoch="0" ver="2.0.14" rel="150000.3.25.1"/>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="adam.majer@suse.de" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
  <changelog author="mvetter@suse.com" date="1584446400">- bsc#1092115 CVE-2018-9154: Fix possible denial of service
  Add jasper-CVE-2018-9154.patch: dont abort in jpc_dec_process_sot()</changelog>
  <changelog author="mvetter@suse.com" date="1597320000">- bsc#1010980 CVE-2016-9399: Fix assert in calcstepsizes
  Add jasper-CVE-2016-9399.patch
- bsc#1020451 CVE-2017-5499: Validate component depth bit
  Add jasper-CVE-2017-5499.patch
- bsc#1020456 CVE-2017-5503, bsc#1020458 CVE-2017-5504, bsc#1020460 CVE-2017-5505:
  Check bounds in jas_seq2d_bindsub()
  Add jasper-CVE-2017-5503-CVE-2017-5504-CVE-2017-5505.patch</changelog>
  <changelog author="mvetter@suse.com" date="1597665600">- bsc#1120807 CVE-2018-20570: Fix heap based buffer over-read in jp2_encode
  Add jasper-CVE-2018-20570.patch
- bsc#1120805 CVE-2018-20622: Fix memory leak in jas_malloc.c
  Add jasper-CVE-2018-20622.patch
- bsc#1117328 CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup
  Add jasper-CVE-2018-19543-CVE-2017-9782.patch
- bsc#1115637 CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms
  Add jasper-CVE-2018-19139.patch
- bsc#1114498 CVE-2018-18873: Fix null pointer deref in ras_putdatastd
  Add jasper-CVE-2018-18873.patch
- bsc#1088278 CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize
  Add jasper-CVE-2018-9252.patch
- bsc#1057152 CVE-2017-14132: Fix heap base overflow in by checking components
  Add jasper-CVE-2017-14132.patch</changelog>
  <changelog author="mvetter@suse.com" date="1598443200">- bsc#1010979 CVE-2016-9398: Use new fix from upstream where we
  actually check for allowed value range instead of just negating
  Add jasper-CVE-2016-9398-upstream.patch</changelog>
  <changelog author="mvetter@suse.com" date="1612785600">- bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls
  Add jasper-CVE-2020-27828.patch
- bsc#1181483 CVE-2021-3272: Fix heap overflow by ensuring number
  of channels matches image components
  Add jasper-CVE-2021-3272.patch</changelog>
  <changelog author="mvetter@suse.com" date="1643803200">- bsc#1188437 CVE-2021-27845: Fix divide-by-zery in cp_create()
  Add jasper-CVE-2021-27845.patch</changelog>
  <changelog author="mvetter@suse.com" date="1650542400">- bsc#1184757 CVE-2021-3467: Fix NULL pointer deref in jp2_decode()
  Add jasper-CVE-2021-3467.patch
- bsc#1184798 CVE-2021-3443: Fix NULL pointer derefin jp2_decode()
  Add jasper-CVE-2021-3443.patch
- bsc#1182104 CVE-2021-26927: Fix NULL pointer deref in jp2_decode()
  bsc#1182105 CVE-2021-26926: Fix Out of bounds read in jp2_decode()
  Add jasper-CVE-2021-26926-CVE-2021-26927.patch</changelog>
</package>
<package pkgid="40a92aa81723899c857368e4f125367b573544864928305f06e69464237e037a" name="libjasper4" arch="s390x">
  <version epoch="0" ver="2.0.14" rel="150000.3.25.1"/>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="adam.majer@suse.de" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
  <changelog author="mvetter@suse.com" date="1584446400">- bsc#1092115 CVE-2018-9154: Fix possible denial of service
  Add jasper-CVE-2018-9154.patch: dont abort in jpc_dec_process_sot()</changelog>
  <changelog author="mvetter@suse.com" date="1597320000">- bsc#1010980 CVE-2016-9399: Fix assert in calcstepsizes
  Add jasper-CVE-2016-9399.patch
- bsc#1020451 CVE-2017-5499: Validate component depth bit
  Add jasper-CVE-2017-5499.patch
- bsc#1020456 CVE-2017-5503, bsc#1020458 CVE-2017-5504, bsc#1020460 CVE-2017-5505:
  Check bounds in jas_seq2d_bindsub()
  Add jasper-CVE-2017-5503-CVE-2017-5504-CVE-2017-5505.patch</changelog>
  <changelog author="mvetter@suse.com" date="1597665600">- bsc#1120807 CVE-2018-20570: Fix heap based buffer over-read in jp2_encode
  Add jasper-CVE-2018-20570.patch
- bsc#1120805 CVE-2018-20622: Fix memory leak in jas_malloc.c
  Add jasper-CVE-2018-20622.patch
- bsc#1117328 CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup
  Add jasper-CVE-2018-19543-CVE-2017-9782.patch
- bsc#1115637 CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms
  Add jasper-CVE-2018-19139.patch
- bsc#1114498 CVE-2018-18873: Fix null pointer deref in ras_putdatastd
  Add jasper-CVE-2018-18873.patch
- bsc#1088278 CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize
  Add jasper-CVE-2018-9252.patch
- bsc#1057152 CVE-2017-14132: Fix heap base overflow in by checking components
  Add jasper-CVE-2017-14132.patch</changelog>
  <changelog author="mvetter@suse.com" date="1598443200">- bsc#1010979 CVE-2016-9398: Use new fix from upstream where we
  actually check for allowed value range instead of just negating
  Add jasper-CVE-2016-9398-upstream.patch</changelog>
  <changelog author="mvetter@suse.com" date="1612785600">- bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls
  Add jasper-CVE-2020-27828.patch
- bsc#1181483 CVE-2021-3272: Fix heap overflow by ensuring number
  of channels matches image components
  Add jasper-CVE-2021-3272.patch</changelog>
  <changelog author="mvetter@suse.com" date="1643803200">- bsc#1188437 CVE-2021-27845: Fix divide-by-zery in cp_create()
  Add jasper-CVE-2021-27845.patch</changelog>
  <changelog author="mvetter@suse.com" date="1650542400">- bsc#1184757 CVE-2021-3467: Fix NULL pointer deref in jp2_decode()
  Add jasper-CVE-2021-3467.patch
- bsc#1184798 CVE-2021-3443: Fix NULL pointer derefin jp2_decode()
  Add jasper-CVE-2021-3443.patch
- bsc#1182104 CVE-2021-26927: Fix NULL pointer deref in jp2_decode()
  bsc#1182105 CVE-2021-26926: Fix Out of bounds read in jp2_decode()
  Add jasper-CVE-2021-26926-CVE-2021-26927.patch</changelog>
</package>
<package pkgid="1099e38e9036bc3b0504067510337131ee59d79831ec6040294efcc811d88cf0" name="libjasper4" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="150000.3.25.1"/>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="adam.majer@suse.de" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
  <changelog author="mvetter@suse.com" date="1584446400">- bsc#1092115 CVE-2018-9154: Fix possible denial of service
  Add jasper-CVE-2018-9154.patch: dont abort in jpc_dec_process_sot()</changelog>
  <changelog author="mvetter@suse.com" date="1597320000">- bsc#1010980 CVE-2016-9399: Fix assert in calcstepsizes
  Add jasper-CVE-2016-9399.patch
- bsc#1020451 CVE-2017-5499: Validate component depth bit
  Add jasper-CVE-2017-5499.patch
- bsc#1020456 CVE-2017-5503, bsc#1020458 CVE-2017-5504, bsc#1020460 CVE-2017-5505:
  Check bounds in jas_seq2d_bindsub()
  Add jasper-CVE-2017-5503-CVE-2017-5504-CVE-2017-5505.patch</changelog>
  <changelog author="mvetter@suse.com" date="1597665600">- bsc#1120807 CVE-2018-20570: Fix heap based buffer over-read in jp2_encode
  Add jasper-CVE-2018-20570.patch
- bsc#1120805 CVE-2018-20622: Fix memory leak in jas_malloc.c
  Add jasper-CVE-2018-20622.patch
- bsc#1117328 CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup
  Add jasper-CVE-2018-19543-CVE-2017-9782.patch
- bsc#1115637 CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms
  Add jasper-CVE-2018-19139.patch
- bsc#1114498 CVE-2018-18873: Fix null pointer deref in ras_putdatastd
  Add jasper-CVE-2018-18873.patch
- bsc#1088278 CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize
  Add jasper-CVE-2018-9252.patch
- bsc#1057152 CVE-2017-14132: Fix heap base overflow in by checking components
  Add jasper-CVE-2017-14132.patch</changelog>
  <changelog author="mvetter@suse.com" date="1598443200">- bsc#1010979 CVE-2016-9398: Use new fix from upstream where we
  actually check for allowed value range instead of just negating
  Add jasper-CVE-2016-9398-upstream.patch</changelog>
  <changelog author="mvetter@suse.com" date="1612785600">- bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls
  Add jasper-CVE-2020-27828.patch
- bsc#1181483 CVE-2021-3272: Fix heap overflow by ensuring number
  of channels matches image components
  Add jasper-CVE-2021-3272.patch</changelog>
  <changelog author="mvetter@suse.com" date="1643803200">- bsc#1188437 CVE-2021-27845: Fix divide-by-zery in cp_create()
  Add jasper-CVE-2021-27845.patch</changelog>
  <changelog author="mvetter@suse.com" date="1650542400">- bsc#1184757 CVE-2021-3467: Fix NULL pointer deref in jp2_decode()
  Add jasper-CVE-2021-3467.patch
- bsc#1184798 CVE-2021-3443: Fix NULL pointer derefin jp2_decode()
  Add jasper-CVE-2021-3443.patch
- bsc#1182104 CVE-2021-26927: Fix NULL pointer deref in jp2_decode()
  bsc#1182105 CVE-2021-26926: Fix Out of bounds read in jp2_decode()
  Add jasper-CVE-2021-26926-CVE-2021-26927.patch</changelog>
</package>
<package pkgid="bd92fe32bc4cd910418cbdb77f4901c32279dff2da403bb83705ef5761ac163f" name="libjasper4-32bit" arch="x86_64">
  <version epoch="0" ver="2.0.14" rel="150000.3.25.1"/>
  <changelog author="fstrba@suse.com" date="1489665600">- Added patch:
  * jasper-CVE-2016-10251.patch
  - Upstream fix for bsc#1029497, CVE-2016-10251: Use of
    uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c)</changelog>
  <changelog author="fstrba@suse.com" date="1489752000">- Added patches:
  * jasper-CVE-2017-5498.patch
  - Upstream changes putting braces and belts around
    CVE-2017-5498, bsc#1020353, left-shift undefined behaviour
  * jasper-CVE-2016-9600.patch
  - Upstream fix for "Null Pointer Dereference due to missing
    check for UNKNOWN color space in JP2 encoder" (CVE-2016-9600,
    bsc#1018088)</changelog>
  <changelog author="fstrba@suse.com" date="1490184000">- Added patches:
  * jasper-CVE-2016-9583.patch
  - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400,
    CVE-2016-9583)
  * jasper-CVE-2017-6850.patch
  - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c)
    (bsc#1021868, CVE-2017-6850)</changelog>
  <changelog author="fstrba@suse.com" date="1490875200">- Modified patch:
  * jasper-CVE-2016-9583.patch
    + integrate upstream change
    99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null
    pointer dereferencing crash.</changelog>
  <changelog author="fstrba@suse.com" date="1499774400">- Added patch:
  * jasper-CVE-2017-1000050.patch
    + Upstream fix for NULL Pointer Dereference jp2_encode
    (bsc#1047958, CVE-2017-1000050)</changelog>
  <changelog author="fstrba@suse.com" date="1499774401">- Added patch:
  * jasper-CVE-2016-9262.patch
    + Fix for Multiple overflow vulnerabilities leading to use
    after free (bsc#1009994, CVE-2016-9262)</changelog>
  <changelog author="fstrba@suse.com" date="1499860800">- Other bugs fixed by existing patches:
  * jasper-CVE-2016-9395.patch
  - bsc#1010756, CVE-2016-9394: assertion in jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion
    `xstart &lt;= xend &amp;&amp; ystart &lt;= yend'
  - bsc#1010757, CVE-2016-9392: pc_dec.c:1637: void
    calcstepsizes(uint_fast16_t, int, uint_fast16_t *):
    Assertion `!((expn + (numrlvls - 1) - (numrlvls - 1 -
    ((bandno &gt; 0) ? ((bandno + 2) / 3) : (0)))) &amp; (~0x1f))'
    failed.
  - bsc#1010766, CVE-2016-9393: jpc_t2cod.c:297: int
    jpc_pi_nextrpcl(jpc_pi_t *): Assertion
    `pi-&gt;prcno pirlvl-&gt;numprcs' failed.
  - bsc#1010977, CVE-2016-9395: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart
    &lt;= xend &amp;&amp; ystart &lt;= yend' failed.
- Other bugs fixed in current version:
  * bsc#1010774, CVE-2016-9390: jas_seq.c:90: jas_matrix_t
  * jas_seq2d_create(int, int, int, int): Assertion `xstart &lt;=
    xend &amp;&amp; ystart &lt;= yend' failed.
  * bsc#1010782, CVE-2016-9391: jpc_bs.c:197: long
    jpc_bitstream_getbits(jpc_bitstream_t *, int): Assertion
    `n &gt;= 0 &amp;&amp; n &lt; 32' failed.
  * bsc#1010968, CVE-2016-9389: Assertion `((c1)-&gt;numcols_) ==
    numcols &amp;&amp; ((c2)-&gt;numcols_) == numcols' failed.
  * bsc#1010975, CVE-2016-9388: ras_dec.c:330: int
    ras_getcmap(jas_stream_t *, ras_hdr_t *, ras_cmap_t *):
    Assertion `numcolors &lt;= 256' failed.
  * bsc#1010960, CVE-2016-9387: jas_seq.c:90: jas_matrix&lt;= yend'
    failed.</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Upgrade to 2.0.14
  * Soname and package name change libjasper1 to libjasper4
  * Security fixes:
    + CVE-2016-9557 jasper: Signed integer overflow in jas_image.c
- Removed patches:
  * jasper-1.900.1-uninitialized.patch
    + not needed any more
  * jasper-CVE-2016-10251.patch
  * jasper-CVE-2016-8654.patch
  * jasper-CVE-2016-9262.patch
  * jasper-CVE-2016-9395.patch
  * jasper-CVE-2016-9560.patch
  * jasper-CVE-2016-9583.patch
  * jasper-CVE-2016-9591.patch
  * jasper-CVE-2016-9600.patch
  * jasper-CVE-2017-1000050.patch
  * jasper-CVE-2017-5498.patch
  * jasper-CVE-2017-6850.patch
    + Fixed upstream
- Added patches:
  * 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
    + fix assertion failure JPC_NOMINALGAIN() which can be caused
    by a crafted JP2 file.
  * 0001-Added-a-fix-from-nrusch-to-allow-JasPer-to-be-build-.patch
    + allow JasPer to be build with CMake 2.x as well as CMake 3.x.</changelog>
  <changelog author="fstrba@suse.com" date="1522324801">- Added patch:
  * jasper-CVE-2018-9055.patch
    + fix CVE-2018-9055, bsc#1087020: jasper: denial of service via
    a reachable assertion in the function jpc_firstone in
    libjasper/jpc/jpc_math.c.</changelog>
  <changelog author="mvetter@suse.com" date="1552392000">- bsc#1117511 CVE-2018-19539 Fix access violation in jas_image_readcmpt:
  * Add jasper-CVE-2018-19539.patch</changelog>
  <changelog author="mvetter@suse.com" date="1553860800">- bsc#1117505 CVE-2018-19542 Fix NULL pointer dereference jp2_decode:
  Add jasper-CVE-2018-19542.patch
- bsc#1010783 CVE-2016-9396 Fix reachable assertion in jpc_cox_getcompparms:
  * Rename 0001-jpc_cs-reject-all-but-JPC_COX_INS-and-JPC_COX_RFT.patch
  to jasper-CVE-2016-9396.patch</changelog>
  <changelog author="mvetter@suse.com" date="1559822400">- bsc#1117508 CVE-2018-19540: Fix heap based overflow in jas_icctxtdesc_input
  Add jasper-CVE-2018-19540.patch: Make sure asclen is at least 1
- bsc#1117507 CVE-2018-19541: Fix heap based overread in jas_image_depalettize
  Add jasper-CVE-2018-19541.patch: Check number of lutents</changelog>
  <changelog author="adam.majer@suse.de" date="1569844800">- jasper-CVE-2018-19541.patch: verify color palette information
  in j2 files when it's read from the file as per specifications
  of JPEG2000. (bsc#1117507)</changelog>
  <changelog author="mvetter@suse.com" date="1584446400">- bsc#1092115 CVE-2018-9154: Fix possible denial of service
  Add jasper-CVE-2018-9154.patch: dont abort in jpc_dec_process_sot()</changelog>
  <changelog author="mvetter@suse.com" date="1597320000">- bsc#1010980 CVE-2016-9399: Fix assert in calcstepsizes
  Add jasper-CVE-2016-9399.patch
- bsc#1020451 CVE-2017-5499: Validate component depth bit
  Add jasper-CVE-2017-5499.patch
- bsc#1020456 CVE-2017-5503, bsc#1020458 CVE-2017-5504, bsc#1020460 CVE-2017-5505:
  Check bounds in jas_seq2d_bindsub()
  Add jasper-CVE-2017-5503-CVE-2017-5504-CVE-2017-5505.patch</changelog>
  <changelog author="mvetter@suse.com" date="1597665600">- bsc#1120807 CVE-2018-20570: Fix heap based buffer over-read in jp2_encode
  Add jasper-CVE-2018-20570.patch
- bsc#1120805 CVE-2018-20622: Fix memory leak in jas_malloc.c
  Add jasper-CVE-2018-20622.patch
- bsc#1117328 CVE-2018-19543, bsc#1045450 CVE-2017-9782: Fix numchans mixup
  Add jasper-CVE-2018-19543-CVE-2017-9782.patch
- bsc#1115637 CVE-2018-19139: Fix mem leaks by registering jpc_unk_destroyparms
  Add jasper-CVE-2018-19139.patch
- bsc#1114498 CVE-2018-18873: Fix null pointer deref in ras_putdatastd
  Add jasper-CVE-2018-18873.patch
- bsc#1088278 CVE-2018-9252: Fix reachable assertion in jpc_abstorelstepsize
  Add jasper-CVE-2018-9252.patch
- bsc#1057152 CVE-2017-14132: Fix heap base overflow in by checking components
  Add jasper-CVE-2017-14132.patch</changelog>
  <changelog author="mvetter@suse.com" date="1598443200">- bsc#1010979 CVE-2016-9398: Use new fix from upstream where we
  actually check for allowed value range instead of just negating
  Add jasper-CVE-2016-9398-upstream.patch</changelog>
  <changelog author="mvetter@suse.com" date="1612785600">- bsc#1179748 CVE-2020-27828: Fix heap overflow by checking maxrlvls
  Add jasper-CVE-2020-27828.patch
- bsc#1181483 CVE-2021-3272: Fix heap overflow by ensuring number
  of channels matches image components
  Add jasper-CVE-2021-3272.patch</changelog>
  <changelog author="mvetter@suse.com" date="1643803200">- bsc#1188437 CVE-2021-27845: Fix divide-by-zery in cp_create()
  Add jasper-CVE-2021-27845.patch</changelog>
  <changelog author="mvetter@suse.com" date="1650542400">- bsc#1184757 CVE-2021-3467: Fix NULL pointer deref in jp2_decode()
  Add jasper-CVE-2021-3467.patch
- bsc#1184798 CVE-2021-3443: Fix NULL pointer derefin jp2_decode()
  Add jasper-CVE-2021-3443.patch
- bsc#1182104 CVE-2021-26927: Fix NULL pointer deref in jp2_decode()
  bsc#1182105 CVE-2021-26926: Fix Out of bounds read in jp2_decode()
  Add jasper-CVE-2021-26926-CVE-2021-26927.patch</changelog>
</package>
<package pkgid="b83e52ad08da6f97671d8fe1d30aa9a4ea7602af4ebd34dbad1f04f83a9d0769" name="liblangtag" arch="src">
  <version epoch="0" ver="0.6.2" rel="150000.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1352203200">- Initial package. Version 0.4.0.</changelog>
  <changelog author="tchvatal@suse.com" date="1352289600">- Add missing directory to the list.</changelog>
  <changelog author="tchvatal@suse.com" date="1352462400">- Fix desc not to contain mention of libexttextcat.</changelog>
  <changelog author="tchvatal@suse.com" date="1352808000">- Use both lpgl and mpl licenses.
  * thanks to babelworx for the hint (merge request fails to
    complete so doing it myself).</changelog>
  <changelog author="tchvatal@suse.com" date="1352894400">- Fix Requires to demand glib2-devel not gtk1 variant
  (thanks coolo)
  * Fix copy&amp;pasto in one summary.</changelog>
  <changelog author="tchvatal@suse.com" date="1366459200">- Use full download url.
- Apply patches from git to fix few build issues.</changelog>
  <changelog author="tchvatal@suse.com" date="1367064000">- Version bump to 0.5
  * Enhancements:
  * Iterator support
  * Add lt_tag_convert_from_locale_string()
  * Bug Fixes:
  * Fix wrong traversal on keys
  * Fix xml parser for tags in range
  * Improve portability
  * Fix broken lt_tag_transform()
  * Fix the build issue when builddir != srcdir
  * Fix broken lt_tag_convert_from_locale()
  * Fix memory leaks
  * Fix linker issue
  * Use secure_getenv if available
  * more
- Remove upstreamed patches.</changelog>
  <changelog author="tchvatal@suse.com" date="1367409600">- Version bump to 0.5.1
  * resolves abi compatibility issues.</changelog>
  <changelog author="tchvatal@suse.com" date="1379937600">- Version bump to 0.5.2
  * Various autootool fixes
  * coverity fixes
  * For more read up NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1399896000">- Version bump to 0.5.3:
  * Various small fixes detailed in NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1400587200">- Add condition around noarch doc subpkg to work with SLE11</changelog>
  <changelog author="tchvatal@suse.com" date="1403697600">- Version bump to 0.5.4:
  * Various small items detailed in NEWS file
  * Removed language stubtag registry</changelog>
  <changelog author="tchvatal@suse.com" date="1436875200">- Version bump to 0.5.7:
  * Tons of fixes between 0.5.4 and this release. Read NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1450699200">- Version bump to 0.5.8:
  * Fix the build requirement in pkgconfig file
  * Make some header files public (fixes: issue#14)
  * Fix test fail on SunOS
  * Fix unknown node issue</changelog>
  <changelog author="tchvatal@suse.com" date="1474891200">- Version update to 0.6.1:
  * Initialize databases just once.
  * Support BCP47-like locale representation
  * Use deprecation macros
  * Add a lookup table to catch up a script/language from language/script
  * Update to add more files into .gitignore
  * Fix the behavior on lt_tag_transform() according to tr#35
  * Fix a segfault if no territory or script is given to lt_tag_convert_from_locale_string()
  * Add missing header file
  * Add lt_db_set_val() to change the place of database
  * Fix memory leaks
  * missing gobject function for lt_relation_db thing
  * Support the language alias for the canonicalization
  * Fix lt_trie_keys() not working
  * Fix OOM handling
  * Improve the bootup time
  * Add docs
  * Update the library versioning</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Version update to 0.6.2:
  * use standard function
  * fix leak in test</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- allow to build for later service packs of SLE 15 [bsc#1197767]
  (-Wno-error=format-extra-args)</changelog>
</package>
<package pkgid="f82fb7ad643ba373cf1b6b24543a1b382ec750726dd9730b250bc747e08f5124" name="liblangtag-devel" arch="aarch64">
  <version epoch="0" ver="0.6.2" rel="150000.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1367409600">- Version bump to 0.5.1
  * resolves abi compatibility issues.</changelog>
  <changelog author="tchvatal@suse.com" date="1379937600">- Version bump to 0.5.2
  * Various autootool fixes
  * coverity fixes
  * For more read up NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1399896000">- Version bump to 0.5.3:
  * Various small fixes detailed in NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1400587200">- Add condition around noarch doc subpkg to work with SLE11</changelog>
  <changelog author="tchvatal@suse.com" date="1403697600">- Version bump to 0.5.4:
  * Various small items detailed in NEWS file
  * Removed language stubtag registry</changelog>
  <changelog author="tchvatal@suse.com" date="1436875200">- Version bump to 0.5.7:
  * Tons of fixes between 0.5.4 and this release. Read NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1450699200">- Version bump to 0.5.8:
  * Fix the build requirement in pkgconfig file
  * Make some header files public (fixes: issue#14)
  * Fix test fail on SunOS
  * Fix unknown node issue</changelog>
  <changelog author="tchvatal@suse.com" date="1474891200">- Version update to 0.6.1:
  * Initialize databases just once.
  * Support BCP47-like locale representation
  * Use deprecation macros
  * Add a lookup table to catch up a script/language from language/script
  * Update to add more files into .gitignore
  * Fix the behavior on lt_tag_transform() according to tr#35
  * Fix a segfault if no territory or script is given to lt_tag_convert_from_locale_string()
  * Add missing header file
  * Add lt_db_set_val() to change the place of database
  * Fix memory leaks
  * missing gobject function for lt_relation_db thing
  * Support the language alias for the canonicalization
  * Fix lt_trie_keys() not working
  * Fix OOM handling
  * Improve the bootup time
  * Add docs
  * Update the library versioning</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Version update to 0.6.2:
  * use standard function
  * fix leak in test</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- allow to build for later service packs of SLE 15 [bsc#1197767]
  (-Wno-error=format-extra-args)</changelog>
</package>
<package pkgid="49bf1b0f52814973f8d9dfabedb46efd5af54c17a476223c1b264e6528dfe8f8" name="liblangtag-devel" arch="ppc64le">
  <version epoch="0" ver="0.6.2" rel="150000.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1367409600">- Version bump to 0.5.1
  * resolves abi compatibility issues.</changelog>
  <changelog author="tchvatal@suse.com" date="1379937600">- Version bump to 0.5.2
  * Various autootool fixes
  * coverity fixes
  * For more read up NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1399896000">- Version bump to 0.5.3:
  * Various small fixes detailed in NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1400587200">- Add condition around noarch doc subpkg to work with SLE11</changelog>
  <changelog author="tchvatal@suse.com" date="1403697600">- Version bump to 0.5.4:
  * Various small items detailed in NEWS file
  * Removed language stubtag registry</changelog>
  <changelog author="tchvatal@suse.com" date="1436875200">- Version bump to 0.5.7:
  * Tons of fixes between 0.5.4 and this release. Read NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1450699200">- Version bump to 0.5.8:
  * Fix the build requirement in pkgconfig file
  * Make some header files public (fixes: issue#14)
  * Fix test fail on SunOS
  * Fix unknown node issue</changelog>
  <changelog author="tchvatal@suse.com" date="1474891200">- Version update to 0.6.1:
  * Initialize databases just once.
  * Support BCP47-like locale representation
  * Use deprecation macros
  * Add a lookup table to catch up a script/language from language/script
  * Update to add more files into .gitignore
  * Fix the behavior on lt_tag_transform() according to tr#35
  * Fix a segfault if no territory or script is given to lt_tag_convert_from_locale_string()
  * Add missing header file
  * Add lt_db_set_val() to change the place of database
  * Fix memory leaks
  * missing gobject function for lt_relation_db thing
  * Support the language alias for the canonicalization
  * Fix lt_trie_keys() not working
  * Fix OOM handling
  * Improve the bootup time
  * Add docs
  * Update the library versioning</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Version update to 0.6.2:
  * use standard function
  * fix leak in test</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- allow to build for later service packs of SLE 15 [bsc#1197767]
  (-Wno-error=format-extra-args)</changelog>
</package>
<package pkgid="54a29cfc4717d8e0490080e313c09fc387150a9a83d48a52de7da83f7e3a1fab" name="liblangtag-devel" arch="s390x">
  <version epoch="0" ver="0.6.2" rel="150000.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1367409600">- Version bump to 0.5.1
  * resolves abi compatibility issues.</changelog>
  <changelog author="tchvatal@suse.com" date="1379937600">- Version bump to 0.5.2
  * Various autootool fixes
  * coverity fixes
  * For more read up NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1399896000">- Version bump to 0.5.3:
  * Various small fixes detailed in NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1400587200">- Add condition around noarch doc subpkg to work with SLE11</changelog>
  <changelog author="tchvatal@suse.com" date="1403697600">- Version bump to 0.5.4:
  * Various small items detailed in NEWS file
  * Removed language stubtag registry</changelog>
  <changelog author="tchvatal@suse.com" date="1436875200">- Version bump to 0.5.7:
  * Tons of fixes between 0.5.4 and this release. Read NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1450699200">- Version bump to 0.5.8:
  * Fix the build requirement in pkgconfig file
  * Make some header files public (fixes: issue#14)
  * Fix test fail on SunOS
  * Fix unknown node issue</changelog>
  <changelog author="tchvatal@suse.com" date="1474891200">- Version update to 0.6.1:
  * Initialize databases just once.
  * Support BCP47-like locale representation
  * Use deprecation macros
  * Add a lookup table to catch up a script/language from language/script
  * Update to add more files into .gitignore
  * Fix the behavior on lt_tag_transform() according to tr#35
  * Fix a segfault if no territory or script is given to lt_tag_convert_from_locale_string()
  * Add missing header file
  * Add lt_db_set_val() to change the place of database
  * Fix memory leaks
  * missing gobject function for lt_relation_db thing
  * Support the language alias for the canonicalization
  * Fix lt_trie_keys() not working
  * Fix OOM handling
  * Improve the bootup time
  * Add docs
  * Update the library versioning</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Version update to 0.6.2:
  * use standard function
  * fix leak in test</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- allow to build for later service packs of SLE 15 [bsc#1197767]
  (-Wno-error=format-extra-args)</changelog>
</package>
<package pkgid="52c08da24cca88fbb7fd62f3f912e252826771dc19e26948919091a3b59f2862" name="liblangtag-devel" arch="x86_64">
  <version epoch="0" ver="0.6.2" rel="150000.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1367409600">- Version bump to 0.5.1
  * resolves abi compatibility issues.</changelog>
  <changelog author="tchvatal@suse.com" date="1379937600">- Version bump to 0.5.2
  * Various autootool fixes
  * coverity fixes
  * For more read up NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1399896000">- Version bump to 0.5.3:
  * Various small fixes detailed in NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1400587200">- Add condition around noarch doc subpkg to work with SLE11</changelog>
  <changelog author="tchvatal@suse.com" date="1403697600">- Version bump to 0.5.4:
  * Various small items detailed in NEWS file
  * Removed language stubtag registry</changelog>
  <changelog author="tchvatal@suse.com" date="1436875200">- Version bump to 0.5.7:
  * Tons of fixes between 0.5.4 and this release. Read NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1450699200">- Version bump to 0.5.8:
  * Fix the build requirement in pkgconfig file
  * Make some header files public (fixes: issue#14)
  * Fix test fail on SunOS
  * Fix unknown node issue</changelog>
  <changelog author="tchvatal@suse.com" date="1474891200">- Version update to 0.6.1:
  * Initialize databases just once.
  * Support BCP47-like locale representation
  * Use deprecation macros
  * Add a lookup table to catch up a script/language from language/script
  * Update to add more files into .gitignore
  * Fix the behavior on lt_tag_transform() according to tr#35
  * Fix a segfault if no territory or script is given to lt_tag_convert_from_locale_string()
  * Add missing header file
  * Add lt_db_set_val() to change the place of database
  * Fix memory leaks
  * missing gobject function for lt_relation_db thing
  * Support the language alias for the canonicalization
  * Fix lt_trie_keys() not working
  * Fix OOM handling
  * Improve the bootup time
  * Add docs
  * Update the library versioning</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Version update to 0.6.2:
  * use standard function
  * fix leak in test</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- allow to build for later service packs of SLE 15 [bsc#1197767]
  (-Wno-error=format-extra-args)</changelog>
</package>
<package pkgid="f230fc28eeeb6733790eab89406c230a6db7c789f96afd2cbc55167beb78f533" name="liblangtag-doc" arch="noarch">
  <version epoch="0" ver="0.6.2" rel="150000.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1367409600">- Version bump to 0.5.1
  * resolves abi compatibility issues.</changelog>
  <changelog author="tchvatal@suse.com" date="1379937600">- Version bump to 0.5.2
  * Various autootool fixes
  * coverity fixes
  * For more read up NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1399896000">- Version bump to 0.5.3:
  * Various small fixes detailed in NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1400587200">- Add condition around noarch doc subpkg to work with SLE11</changelog>
  <changelog author="tchvatal@suse.com" date="1403697600">- Version bump to 0.5.4:
  * Various small items detailed in NEWS file
  * Removed language stubtag registry</changelog>
  <changelog author="tchvatal@suse.com" date="1436875200">- Version bump to 0.5.7:
  * Tons of fixes between 0.5.4 and this release. Read NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1450699200">- Version bump to 0.5.8:
  * Fix the build requirement in pkgconfig file
  * Make some header files public (fixes: issue#14)
  * Fix test fail on SunOS
  * Fix unknown node issue</changelog>
  <changelog author="tchvatal@suse.com" date="1474891200">- Version update to 0.6.1:
  * Initialize databases just once.
  * Support BCP47-like locale representation
  * Use deprecation macros
  * Add a lookup table to catch up a script/language from language/script
  * Update to add more files into .gitignore
  * Fix the behavior on lt_tag_transform() according to tr#35
  * Fix a segfault if no territory or script is given to lt_tag_convert_from_locale_string()
  * Add missing header file
  * Add lt_db_set_val() to change the place of database
  * Fix memory leaks
  * missing gobject function for lt_relation_db thing
  * Support the language alias for the canonicalization
  * Fix lt_trie_keys() not working
  * Fix OOM handling
  * Improve the bootup time
  * Add docs
  * Update the library versioning</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Version update to 0.6.2:
  * use standard function
  * fix leak in test</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- allow to build for later service packs of SLE 15 [bsc#1197767]
  (-Wno-error=format-extra-args)</changelog>
</package>
<package pkgid="0c652b3bd053ddd9dc8cb671d15037bb35644d1608b935ad35893a7db507b182" name="liblangtag1" arch="aarch64">
  <version epoch="0" ver="0.6.2" rel="150000.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1367409600">- Version bump to 0.5.1
  * resolves abi compatibility issues.</changelog>
  <changelog author="tchvatal@suse.com" date="1379937600">- Version bump to 0.5.2
  * Various autootool fixes
  * coverity fixes
  * For more read up NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1399896000">- Version bump to 0.5.3:
  * Various small fixes detailed in NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1400587200">- Add condition around noarch doc subpkg to work with SLE11</changelog>
  <changelog author="tchvatal@suse.com" date="1403697600">- Version bump to 0.5.4:
  * Various small items detailed in NEWS file
  * Removed language stubtag registry</changelog>
  <changelog author="tchvatal@suse.com" date="1436875200">- Version bump to 0.5.7:
  * Tons of fixes between 0.5.4 and this release. Read NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1450699200">- Version bump to 0.5.8:
  * Fix the build requirement in pkgconfig file
  * Make some header files public (fixes: issue#14)
  * Fix test fail on SunOS
  * Fix unknown node issue</changelog>
  <changelog author="tchvatal@suse.com" date="1474891200">- Version update to 0.6.1:
  * Initialize databases just once.
  * Support BCP47-like locale representation
  * Use deprecation macros
  * Add a lookup table to catch up a script/language from language/script
  * Update to add more files into .gitignore
  * Fix the behavior on lt_tag_transform() according to tr#35
  * Fix a segfault if no territory or script is given to lt_tag_convert_from_locale_string()
  * Add missing header file
  * Add lt_db_set_val() to change the place of database
  * Fix memory leaks
  * missing gobject function for lt_relation_db thing
  * Support the language alias for the canonicalization
  * Fix lt_trie_keys() not working
  * Fix OOM handling
  * Improve the bootup time
  * Add docs
  * Update the library versioning</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Version update to 0.6.2:
  * use standard function
  * fix leak in test</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- allow to build for later service packs of SLE 15 [bsc#1197767]
  (-Wno-error=format-extra-args)</changelog>
</package>
<package pkgid="5a637d8b6a9300e760b899722036516071b69f0317c4b6417c96f2ac6e8881ff" name="liblangtag1" arch="ppc64le">
  <version epoch="0" ver="0.6.2" rel="150000.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1367409600">- Version bump to 0.5.1
  * resolves abi compatibility issues.</changelog>
  <changelog author="tchvatal@suse.com" date="1379937600">- Version bump to 0.5.2
  * Various autootool fixes
  * coverity fixes
  * For more read up NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1399896000">- Version bump to 0.5.3:
  * Various small fixes detailed in NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1400587200">- Add condition around noarch doc subpkg to work with SLE11</changelog>
  <changelog author="tchvatal@suse.com" date="1403697600">- Version bump to 0.5.4:
  * Various small items detailed in NEWS file
  * Removed language stubtag registry</changelog>
  <changelog author="tchvatal@suse.com" date="1436875200">- Version bump to 0.5.7:
  * Tons of fixes between 0.5.4 and this release. Read NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1450699200">- Version bump to 0.5.8:
  * Fix the build requirement in pkgconfig file
  * Make some header files public (fixes: issue#14)
  * Fix test fail on SunOS
  * Fix unknown node issue</changelog>
  <changelog author="tchvatal@suse.com" date="1474891200">- Version update to 0.6.1:
  * Initialize databases just once.
  * Support BCP47-like locale representation
  * Use deprecation macros
  * Add a lookup table to catch up a script/language from language/script
  * Update to add more files into .gitignore
  * Fix the behavior on lt_tag_transform() according to tr#35
  * Fix a segfault if no territory or script is given to lt_tag_convert_from_locale_string()
  * Add missing header file
  * Add lt_db_set_val() to change the place of database
  * Fix memory leaks
  * missing gobject function for lt_relation_db thing
  * Support the language alias for the canonicalization
  * Fix lt_trie_keys() not working
  * Fix OOM handling
  * Improve the bootup time
  * Add docs
  * Update the library versioning</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Version update to 0.6.2:
  * use standard function
  * fix leak in test</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- allow to build for later service packs of SLE 15 [bsc#1197767]
  (-Wno-error=format-extra-args)</changelog>
</package>
<package pkgid="4c4266afeb5abbd97a56ae1002003c1a09bd90320d91cd23d74c261b5d30c458" name="liblangtag1" arch="s390x">
  <version epoch="0" ver="0.6.2" rel="150000.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1367409600">- Version bump to 0.5.1
  * resolves abi compatibility issues.</changelog>
  <changelog author="tchvatal@suse.com" date="1379937600">- Version bump to 0.5.2
  * Various autootool fixes
  * coverity fixes
  * For more read up NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1399896000">- Version bump to 0.5.3:
  * Various small fixes detailed in NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1400587200">- Add condition around noarch doc subpkg to work with SLE11</changelog>
  <changelog author="tchvatal@suse.com" date="1403697600">- Version bump to 0.5.4:
  * Various small items detailed in NEWS file
  * Removed language stubtag registry</changelog>
  <changelog author="tchvatal@suse.com" date="1436875200">- Version bump to 0.5.7:
  * Tons of fixes between 0.5.4 and this release. Read NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1450699200">- Version bump to 0.5.8:
  * Fix the build requirement in pkgconfig file
  * Make some header files public (fixes: issue#14)
  * Fix test fail on SunOS
  * Fix unknown node issue</changelog>
  <changelog author="tchvatal@suse.com" date="1474891200">- Version update to 0.6.1:
  * Initialize databases just once.
  * Support BCP47-like locale representation
  * Use deprecation macros
  * Add a lookup table to catch up a script/language from language/script
  * Update to add more files into .gitignore
  * Fix the behavior on lt_tag_transform() according to tr#35
  * Fix a segfault if no territory or script is given to lt_tag_convert_from_locale_string()
  * Add missing header file
  * Add lt_db_set_val() to change the place of database
  * Fix memory leaks
  * missing gobject function for lt_relation_db thing
  * Support the language alias for the canonicalization
  * Fix lt_trie_keys() not working
  * Fix OOM handling
  * Improve the bootup time
  * Add docs
  * Update the library versioning</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Version update to 0.6.2:
  * use standard function
  * fix leak in test</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- allow to build for later service packs of SLE 15 [bsc#1197767]
  (-Wno-error=format-extra-args)</changelog>
</package>
<package pkgid="a45ccc200fef097a5b255325dc63759de8682fe17737d0a932014f9a0df190c9" name="liblangtag1" arch="x86_64">
  <version epoch="0" ver="0.6.2" rel="150000.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1367409600">- Version bump to 0.5.1
  * resolves abi compatibility issues.</changelog>
  <changelog author="tchvatal@suse.com" date="1379937600">- Version bump to 0.5.2
  * Various autootool fixes
  * coverity fixes
  * For more read up NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1399896000">- Version bump to 0.5.3:
  * Various small fixes detailed in NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1400587200">- Add condition around noarch doc subpkg to work with SLE11</changelog>
  <changelog author="tchvatal@suse.com" date="1403697600">- Version bump to 0.5.4:
  * Various small items detailed in NEWS file
  * Removed language stubtag registry</changelog>
  <changelog author="tchvatal@suse.com" date="1436875200">- Version bump to 0.5.7:
  * Tons of fixes between 0.5.4 and this release. Read NEWS file</changelog>
  <changelog author="tchvatal@suse.com" date="1450699200">- Version bump to 0.5.8:
  * Fix the build requirement in pkgconfig file
  * Make some header files public (fixes: issue#14)
  * Fix test fail on SunOS
  * Fix unknown node issue</changelog>
  <changelog author="tchvatal@suse.com" date="1474891200">- Version update to 0.6.1:
  * Initialize databases just once.
  * Support BCP47-like locale representation
  * Use deprecation macros
  * Add a lookup table to catch up a script/language from language/script
  * Update to add more files into .gitignore
  * Fix the behavior on lt_tag_transform() according to tr#35
  * Fix a segfault if no territory or script is given to lt_tag_convert_from_locale_string()
  * Add missing header file
  * Add lt_db_set_val() to change the place of database
  * Fix memory leaks
  * missing gobject function for lt_relation_db thing
  * Support the language alias for the canonicalization
  * Fix lt_trie_keys() not working
  * Fix OOM handling
  * Improve the bootup time
  * Add docs
  * Update the library versioning</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Version update to 0.6.2:
  * use standard function
  * fix leak in test</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- allow to build for later service packs of SLE 15 [bsc#1197767]
  (-Wno-error=format-extra-args)</changelog>
</package>
<package pkgid="92b8026a42a8860ff5857f3e585aae7171f159c4cbae79526a7d64093ef47306" name="libldap-2_4-2" arch="aarch64">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="b59fe2ba4a836070796dcad650805a072c38e217d81a1422bd06668259946323" name="libldap-2_4-2" arch="ppc64le">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="cd4925dea0601ab06da4262be0124cf05c652452c05d3b6553e8dc17cb93ff32" name="libldap-2_4-2" arch="s390x">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="b05ae26fead2a3ef6eb37d2a7b5f52891c8380ef3c6bf7c019933f47ab8d78cc" name="libldap-2_4-2" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="69443ac146bd4b52c514dfb2200d769da29d2a240813993fb2d49ef890b5e80f" name="libldap-2_4-2-32bit" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="d942406913c7210c53cc0284e087f4bf113e5e14de9575f6ed0b9a4836aad3b2" name="libldap-data" arch="noarch">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="cdc30a2b26dfd4fd2aa9b4b803d1da3c51413978610dd5a3ab078d20a991cf8c" name="libleveldb1" arch="aarch64">
  <version epoch="0" ver="1.18" rel="150000.3.3.1"/>
  <changelog author="ddiss@suse.com" date="1381233600">- Updated to 1.14.0</changelog>
  <changelog author="i@marguerite.su" date="1381665600">- ran spec-cleaner. too casual the specfile was.
- make check/make clean is no more for OBS.
- add Provides/Obsoletes to libleveldb1.
  * no one know that name, provide leveldb itself
  * required by python-leveldb and python3-leveldb</changelog>
  <changelog author="ddiss@suse.com" date="1383480000">- Changed shared libs group to System/Libraries.</changelog>
  <changelog author="ro@suse.de" date="1387368000">- add support for other archs (taken from debian, 0001-debian-ports.patch)</changelog>
  <changelog author="ddiss@suse.com" date="1391601600">- updated to 1.15.0
  + switched from mmap based writing to simpler stdio based writing. Has
    a minor impact (0.5 microseconds) on microbenchmarks for asynchronous
    writes. Synchronous writes speed up from 30ms to 10ms on linux/ext4.
    Should be much more reliable on diverse platforms.
  + compaction errors now immediately put the database into a read-only
    mode (until it is re-opened). As a downside, a disk going out of
    space and then space being created will require a re-open to recover
    from, whereas previously that would happen automatically. On the
    plus side, many corruption possibilities go away.
  + force the DB to enter an error-state so that all future writes fail
    when a synchronous log write succeeds but the sync fails.
  + repair now regenerates sstables that exhibit problems
  + fix issue 218 - Use native memory barriers on OSX
  + fix issue 212 - QNX build is broken
  + fix build on iOS with xcode 5
  + make tests compile and pass on windows
- refreshed 0001-debian-ports.patch
  + moved OS_MACOSX hunk</changelog>
  <changelog author="ddiss@suse.com" date="1396872000">- updated to 1.16.0
  + Make Log::Reader not report a corruption when the last record in a
    log file is truncated.
  + Fix issue 224: variable created but not utilized.
  + Remove comment that referenced a removed feature.</changelog>
  <changelog author="dmueller@suse.com" date="1413806400">- update to 1.18:
  + Replace the basic fprintf call with a call to fwrite
  + Fix ALL the header guards.
  + A new CONTRIBUTING file.
  + leveldb: Remove unused function 'ConsumeChar'.
  + leveldbutil: Remove unused member variables from WriteBatchItemPrinter.
  + Verify checksums of index/meta/filter blocks when paranoid_checks set.
  + Invoke all tools for iOS with xcrun. (This was causing problems with the new XCode 5.1.1 image on pulse.)
  + include only once, and fix the following linter warning: "Found C system header after C++ system header"
  + When encountering a corrupted table file, return Status::Corruption instead of Status::InvalidArgument.
  + Support cygwin as build platform, patch is from https://code.google.com/p/leveldb/issues/detail?id=188
  + Fix typo, merge patch from https://code.google.com/p/leveldb/issues/detail?id=159
  + Fix typos and comments, and address the following two issues:
  + Add missing db synchronize after "fillseq" in the benchmark.
  + Removed unused variable in SeekRandom: value (issue #201)</changelog>
  <changelog author="mpluskal@suse.com" date="1428235200">- Update project url
- Use url for source
- Enable tests</changelog>
  <changelog author="ncutler@suse.com" date="1521028800">- revert to 1.18 because 1.20 causes ceph-osd to crash
  (bsc#1054194, bsc#1083921)
- FATE#319443 (aarch64 enablement) changes were backported by
  https://build.opensuse.org/request/show/294636 and are part
  of this release. Factory version builds on aarch64.
  (bsc#1041611)</changelog>
  <changelog author="pgajdos@suse.com" date="1649073600">- fix tests [bsc#1197742]
- added patches
  https://github.com/google/leveldb/commit/fa6dc010a20b6eb175d92d05651972651278e06f
  + leveldb-compressed-output-size.patch</changelog>
</package>
<package pkgid="0363a56b2a365a117818a6f9af80d7b2b97fbcac30a64d0c8fb112b353e1bfa6" name="libleveldb1" arch="ppc64le">
  <version epoch="0" ver="1.18" rel="150000.3.3.1"/>
  <changelog author="ddiss@suse.com" date="1381233600">- Updated to 1.14.0</changelog>
  <changelog author="i@marguerite.su" date="1381665600">- ran spec-cleaner. too casual the specfile was.
- make check/make clean is no more for OBS.
- add Provides/Obsoletes to libleveldb1.
  * no one know that name, provide leveldb itself
  * required by python-leveldb and python3-leveldb</changelog>
  <changelog author="ddiss@suse.com" date="1383480000">- Changed shared libs group to System/Libraries.</changelog>
  <changelog author="ro@suse.de" date="1387368000">- add support for other archs (taken from debian, 0001-debian-ports.patch)</changelog>
  <changelog author="ddiss@suse.com" date="1391601600">- updated to 1.15.0
  + switched from mmap based writing to simpler stdio based writing. Has
    a minor impact (0.5 microseconds) on microbenchmarks for asynchronous
    writes. Synchronous writes speed up from 30ms to 10ms on linux/ext4.
    Should be much more reliable on diverse platforms.
  + compaction errors now immediately put the database into a read-only
    mode (until it is re-opened). As a downside, a disk going out of
    space and then space being created will require a re-open to recover
    from, whereas previously that would happen automatically. On the
    plus side, many corruption possibilities go away.
  + force the DB to enter an error-state so that all future writes fail
    when a synchronous log write succeeds but the sync fails.
  + repair now regenerates sstables that exhibit problems
  + fix issue 218 - Use native memory barriers on OSX
  + fix issue 212 - QNX build is broken
  + fix build on iOS with xcode 5
  + make tests compile and pass on windows
- refreshed 0001-debian-ports.patch
  + moved OS_MACOSX hunk</changelog>
  <changelog author="ddiss@suse.com" date="1396872000">- updated to 1.16.0
  + Make Log::Reader not report a corruption when the last record in a
    log file is truncated.
  + Fix issue 224: variable created but not utilized.
  + Remove comment that referenced a removed feature.</changelog>
  <changelog author="dmueller@suse.com" date="1413806400">- update to 1.18:
  + Replace the basic fprintf call with a call to fwrite
  + Fix ALL the header guards.
  + A new CONTRIBUTING file.
  + leveldb: Remove unused function 'ConsumeChar'.
  + leveldbutil: Remove unused member variables from WriteBatchItemPrinter.
  + Verify checksums of index/meta/filter blocks when paranoid_checks set.
  + Invoke all tools for iOS with xcrun. (This was causing problems with the new XCode 5.1.1 image on pulse.)
  + include only once, and fix the following linter warning: "Found C system header after C++ system header"
  + When encountering a corrupted table file, return Status::Corruption instead of Status::InvalidArgument.
  + Support cygwin as build platform, patch is from https://code.google.com/p/leveldb/issues/detail?id=188
  + Fix typo, merge patch from https://code.google.com/p/leveldb/issues/detail?id=159
  + Fix typos and comments, and address the following two issues:
  + Add missing db synchronize after "fillseq" in the benchmark.
  + Removed unused variable in SeekRandom: value (issue #201)</changelog>
  <changelog author="mpluskal@suse.com" date="1428235200">- Update project url
- Use url for source
- Enable tests</changelog>
  <changelog author="ncutler@suse.com" date="1521028800">- revert to 1.18 because 1.20 causes ceph-osd to crash
  (bsc#1054194, bsc#1083921)
- FATE#319443 (aarch64 enablement) changes were backported by
  https://build.opensuse.org/request/show/294636 and are part
  of this release. Factory version builds on aarch64.
  (bsc#1041611)</changelog>
  <changelog author="pgajdos@suse.com" date="1649073600">- fix tests [bsc#1197742]
- added patches
  https://github.com/google/leveldb/commit/fa6dc010a20b6eb175d92d05651972651278e06f
  + leveldb-compressed-output-size.patch</changelog>
</package>
<package pkgid="e4d1e73620064985af8dbfff42b6f56656427330f0707dbb0c39e8f8fc4fa497" name="libleveldb1" arch="s390x">
  <version epoch="0" ver="1.18" rel="150000.3.3.1"/>
  <changelog author="ddiss@suse.com" date="1381233600">- Updated to 1.14.0</changelog>
  <changelog author="i@marguerite.su" date="1381665600">- ran spec-cleaner. too casual the specfile was.
- make check/make clean is no more for OBS.
- add Provides/Obsoletes to libleveldb1.
  * no one know that name, provide leveldb itself
  * required by python-leveldb and python3-leveldb</changelog>
  <changelog author="ddiss@suse.com" date="1383480000">- Changed shared libs group to System/Libraries.</changelog>
  <changelog author="ro@suse.de" date="1387368000">- add support for other archs (taken from debian, 0001-debian-ports.patch)</changelog>
  <changelog author="ddiss@suse.com" date="1391601600">- updated to 1.15.0
  + switched from mmap based writing to simpler stdio based writing. Has
    a minor impact (0.5 microseconds) on microbenchmarks for asynchronous
    writes. Synchronous writes speed up from 30ms to 10ms on linux/ext4.
    Should be much more reliable on diverse platforms.
  + compaction errors now immediately put the database into a read-only
    mode (until it is re-opened). As a downside, a disk going out of
    space and then space being created will require a re-open to recover
    from, whereas previously that would happen automatically. On the
    plus side, many corruption possibilities go away.
  + force the DB to enter an error-state so that all future writes fail
    when a synchronous log write succeeds but the sync fails.
  + repair now regenerates sstables that exhibit problems
  + fix issue 218 - Use native memory barriers on OSX
  + fix issue 212 - QNX build is broken
  + fix build on iOS with xcode 5
  + make tests compile and pass on windows
- refreshed 0001-debian-ports.patch
  + moved OS_MACOSX hunk</changelog>
  <changelog author="ddiss@suse.com" date="1396872000">- updated to 1.16.0
  + Make Log::Reader not report a corruption when the last record in a
    log file is truncated.
  + Fix issue 224: variable created but not utilized.
  + Remove comment that referenced a removed feature.</changelog>
  <changelog author="dmueller@suse.com" date="1413806400">- update to 1.18:
  + Replace the basic fprintf call with a call to fwrite
  + Fix ALL the header guards.
  + A new CONTRIBUTING file.
  + leveldb: Remove unused function 'ConsumeChar'.
  + leveldbutil: Remove unused member variables from WriteBatchItemPrinter.
  + Verify checksums of index/meta/filter blocks when paranoid_checks set.
  + Invoke all tools for iOS with xcrun. (This was causing problems with the new XCode 5.1.1 image on pulse.)
  + include only once, and fix the following linter warning: "Found C system header after C++ system header"
  + When encountering a corrupted table file, return Status::Corruption instead of Status::InvalidArgument.
  + Support cygwin as build platform, patch is from https://code.google.com/p/leveldb/issues/detail?id=188
  + Fix typo, merge patch from https://code.google.com/p/leveldb/issues/detail?id=159
  + Fix typos and comments, and address the following two issues:
  + Add missing db synchronize after "fillseq" in the benchmark.
  + Removed unused variable in SeekRandom: value (issue #201)</changelog>
  <changelog author="mpluskal@suse.com" date="1428235200">- Update project url
- Use url for source
- Enable tests</changelog>
  <changelog author="ncutler@suse.com" date="1521028800">- revert to 1.18 because 1.20 causes ceph-osd to crash
  (bsc#1054194, bsc#1083921)
- FATE#319443 (aarch64 enablement) changes were backported by
  https://build.opensuse.org/request/show/294636 and are part
  of this release. Factory version builds on aarch64.
  (bsc#1041611)</changelog>
  <changelog author="pgajdos@suse.com" date="1649073600">- fix tests [bsc#1197742]
- added patches
  https://github.com/google/leveldb/commit/fa6dc010a20b6eb175d92d05651972651278e06f
  + leveldb-compressed-output-size.patch</changelog>
</package>
<package pkgid="94d13ea9f506f679aabf5d84a60c1398f19ce41a3f14165fe75e07c2d5772c2c" name="libleveldb1" arch="x86_64">
  <version epoch="0" ver="1.18" rel="150000.3.3.1"/>
  <changelog author="ddiss@suse.com" date="1381233600">- Updated to 1.14.0</changelog>
  <changelog author="i@marguerite.su" date="1381665600">- ran spec-cleaner. too casual the specfile was.
- make check/make clean is no more for OBS.
- add Provides/Obsoletes to libleveldb1.
  * no one know that name, provide leveldb itself
  * required by python-leveldb and python3-leveldb</changelog>
  <changelog author="ddiss@suse.com" date="1383480000">- Changed shared libs group to System/Libraries.</changelog>
  <changelog author="ro@suse.de" date="1387368000">- add support for other archs (taken from debian, 0001-debian-ports.patch)</changelog>
  <changelog author="ddiss@suse.com" date="1391601600">- updated to 1.15.0
  + switched from mmap based writing to simpler stdio based writing. Has
    a minor impact (0.5 microseconds) on microbenchmarks for asynchronous
    writes. Synchronous writes speed up from 30ms to 10ms on linux/ext4.
    Should be much more reliable on diverse platforms.
  + compaction errors now immediately put the database into a read-only
    mode (until it is re-opened). As a downside, a disk going out of
    space and then space being created will require a re-open to recover
    from, whereas previously that would happen automatically. On the
    plus side, many corruption possibilities go away.
  + force the DB to enter an error-state so that all future writes fail
    when a synchronous log write succeeds but the sync fails.
  + repair now regenerates sstables that exhibit problems
  + fix issue 218 - Use native memory barriers on OSX
  + fix issue 212 - QNX build is broken
  + fix build on iOS with xcode 5
  + make tests compile and pass on windows
- refreshed 0001-debian-ports.patch
  + moved OS_MACOSX hunk</changelog>
  <changelog author="ddiss@suse.com" date="1396872000">- updated to 1.16.0
  + Make Log::Reader not report a corruption when the last record in a
    log file is truncated.
  + Fix issue 224: variable created but not utilized.
  + Remove comment that referenced a removed feature.</changelog>
  <changelog author="dmueller@suse.com" date="1413806400">- update to 1.18:
  + Replace the basic fprintf call with a call to fwrite
  + Fix ALL the header guards.
  + A new CONTRIBUTING file.
  + leveldb: Remove unused function 'ConsumeChar'.
  + leveldbutil: Remove unused member variables from WriteBatchItemPrinter.
  + Verify checksums of index/meta/filter blocks when paranoid_checks set.
  + Invoke all tools for iOS with xcrun. (This was causing problems with the new XCode 5.1.1 image on pulse.)
  + include only once, and fix the following linter warning: "Found C system header after C++ system header"
  + When encountering a corrupted table file, return Status::Corruption instead of Status::InvalidArgument.
  + Support cygwin as build platform, patch is from https://code.google.com/p/leveldb/issues/detail?id=188
  + Fix typo, merge patch from https://code.google.com/p/leveldb/issues/detail?id=159
  + Fix typos and comments, and address the following two issues:
  + Add missing db synchronize after "fillseq" in the benchmark.
  + Removed unused variable in SeekRandom: value (issue #201)</changelog>
  <changelog author="mpluskal@suse.com" date="1428235200">- Update project url
- Use url for source
- Enable tests</changelog>
  <changelog author="ncutler@suse.com" date="1521028800">- revert to 1.18 because 1.20 causes ceph-osd to crash
  (bsc#1054194, bsc#1083921)
- FATE#319443 (aarch64 enablement) changes were backported by
  https://build.opensuse.org/request/show/294636 and are part
  of this release. Factory version builds on aarch64.
  (bsc#1041611)</changelog>
  <changelog author="pgajdos@suse.com" date="1649073600">- fix tests [bsc#1197742]
- added patches
  https://github.com/google/leveldb/commit/fa6dc010a20b6eb175d92d05651972651278e06f
  + leveldb-compressed-output-size.patch</changelog>
</package>
<package pkgid="8803c76dd8e34d4bb67fc57575e9a473f4b7c7535604cb3344db036da5c194a7" name="liblldb7" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="0dbaf6552d77ef309b11e0c81f5a441fd9885fba32f95e3ce1df922202e23260" name="liblpsolve55-0" arch="aarch64">
  <version epoch="0" ver="5.5.2.0" rel="150000.3.2.1"/>
  <changelog author="jengelh@medozas.de" date="1265889600">- SPARC requires large PIC model</changelog>
  <changelog author="tchvatal@suse.com" date="1353499200">- Try to version bump on 5.5.2.0 based of Gentoo.</changelog>
  <changelog author="tchvatal@suse.com" date="1353499201">- Drop useless requires line.</changelog>
  <changelog author="tchvatal@suse.com" date="1353499202">- Last commit was really bad idea.</changelog>
  <changelog author="tchvatal@suse.com" date="1354190400">- Drop duplication of the license string.</changelog>
  <changelog author="tchvatal@suse.com" date="1354276800">- Use the spec-beautifier to make it more readable.</changelog>
  <changelog author="tchvatal@suse.com" date="1354536000">- Add obsoletes/provides for old libname so depending pkgs work.
  * drop no longer needed lpsolve-5.5.0.11-cflags.patch we use
    autotools now.
  * drop no longer needed lpsolve-pic.diff for the same reason.</changelog>
  <changelog author="tchvatal@suse.com" date="1366459200">- Add url for download.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651200">- Pass over with spec-cleaner in the specs overview.</changelog>
  <changelog author="tchvatal@suse.com" date="1400587200">- Add xz to exact dependencies as it is needed on SLE11.</changelog>
</package>
<package pkgid="428e9ea86c9896af12196a93644a9e4e90c8d528b43135ea5c34b865b9e4554a" name="liblpsolve55-0" arch="ppc64le">
  <version epoch="0" ver="5.5.2.0" rel="150000.3.2.1"/>
  <changelog author="jengelh@medozas.de" date="1265889600">- SPARC requires large PIC model</changelog>
  <changelog author="tchvatal@suse.com" date="1353499200">- Try to version bump on 5.5.2.0 based of Gentoo.</changelog>
  <changelog author="tchvatal@suse.com" date="1353499201">- Drop useless requires line.</changelog>
  <changelog author="tchvatal@suse.com" date="1353499202">- Last commit was really bad idea.</changelog>
  <changelog author="tchvatal@suse.com" date="1354190400">- Drop duplication of the license string.</changelog>
  <changelog author="tchvatal@suse.com" date="1354276800">- Use the spec-beautifier to make it more readable.</changelog>
  <changelog author="tchvatal@suse.com" date="1354536000">- Add obsoletes/provides for old libname so depending pkgs work.
  * drop no longer needed lpsolve-5.5.0.11-cflags.patch we use
    autotools now.
  * drop no longer needed lpsolve-pic.diff for the same reason.</changelog>
  <changelog author="tchvatal@suse.com" date="1366459200">- Add url for download.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651200">- Pass over with spec-cleaner in the specs overview.</changelog>
  <changelog author="tchvatal@suse.com" date="1400587200">- Add xz to exact dependencies as it is needed on SLE11.</changelog>
</package>
<package pkgid="6083160ce38683de9a4997df7e8985e480f68f2ce182ac4677c36f0e9238098c" name="liblpsolve55-0" arch="s390x">
  <version epoch="0" ver="5.5.2.0" rel="150000.3.2.1"/>
  <changelog author="jengelh@medozas.de" date="1265889600">- SPARC requires large PIC model</changelog>
  <changelog author="tchvatal@suse.com" date="1353499200">- Try to version bump on 5.5.2.0 based of Gentoo.</changelog>
  <changelog author="tchvatal@suse.com" date="1353499201">- Drop useless requires line.</changelog>
  <changelog author="tchvatal@suse.com" date="1353499202">- Last commit was really bad idea.</changelog>
  <changelog author="tchvatal@suse.com" date="1354190400">- Drop duplication of the license string.</changelog>
  <changelog author="tchvatal@suse.com" date="1354276800">- Use the spec-beautifier to make it more readable.</changelog>
  <changelog author="tchvatal@suse.com" date="1354536000">- Add obsoletes/provides for old libname so depending pkgs work.
  * drop no longer needed lpsolve-5.5.0.11-cflags.patch we use
    autotools now.
  * drop no longer needed lpsolve-pic.diff for the same reason.</changelog>
  <changelog author="tchvatal@suse.com" date="1366459200">- Add url for download.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651200">- Pass over with spec-cleaner in the specs overview.</changelog>
  <changelog author="tchvatal@suse.com" date="1400587200">- Add xz to exact dependencies as it is needed on SLE11.</changelog>
</package>
<package pkgid="1bd607bce6255fc071fc1285b6073161738372937213f677fdb7ce9f183c1b5b" name="liblpsolve55-0" arch="x86_64">
  <version epoch="0" ver="5.5.2.0" rel="150000.3.2.1"/>
  <changelog author="jengelh@medozas.de" date="1265889600">- SPARC requires large PIC model</changelog>
  <changelog author="tchvatal@suse.com" date="1353499200">- Try to version bump on 5.5.2.0 based of Gentoo.</changelog>
  <changelog author="tchvatal@suse.com" date="1353499201">- Drop useless requires line.</changelog>
  <changelog author="tchvatal@suse.com" date="1353499202">- Last commit was really bad idea.</changelog>
  <changelog author="tchvatal@suse.com" date="1354190400">- Drop duplication of the license string.</changelog>
  <changelog author="tchvatal@suse.com" date="1354276800">- Use the spec-beautifier to make it more readable.</changelog>
  <changelog author="tchvatal@suse.com" date="1354536000">- Add obsoletes/provides for old libname so depending pkgs work.
  * drop no longer needed lpsolve-5.5.0.11-cflags.patch we use
    autotools now.
  * drop no longer needed lpsolve-pic.diff for the same reason.</changelog>
  <changelog author="tchvatal@suse.com" date="1366459200">- Add url for download.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651200">- Pass over with spec-cleaner in the specs overview.</changelog>
  <changelog author="tchvatal@suse.com" date="1400587200">- Add xz to exact dependencies as it is needed on SLE11.</changelog>
</package>
<package pkgid="e459cd6a02d5ed0b06ccb69e091d39d3eb81735c275748d7453bd123f8b2ebc9" name="liblsan0" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="8d05bc7132ee477f453270d00bca9947db8a624e7c65ae19629e6eddee515ba5" name="liblsan0" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="8b9bb6c86dfeba0d7c46da3b08ed0da5160ee8c926f474d496557f3ad0798a77" name="liblsan0" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="ca84b12e016f963dd255e2550d4c075f4f6aadd85a956e4c6a5f7cd9a17499ab" name="libmeanwhile1" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="150000.3.2.1"/>
  <changelog author="mls@suse.de" date="1127736000">- make devel package require base package</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="dmueller@suse.de" date="1138363200">- update to 0.4.2 for Kopete support (#118081)</changelog>
  <changelog author="sbrabec@suse.cz" date="1178798400">- Updated to version 1.0.2:
  * Encryption support.
  * Documentation package.
  * Large message support.
  * API changes, new library version.
  * Bug fixes.</changelog>
  <changelog author="rfno@fietze-home.de" date="1242302400">- apply patch to fix status update problem
  (http://sourceforge.net/tracker/index.php?func=detail&amp;aid=1626349&amp;group_id=110565&amp;atid=656718)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1306411200">- Remove "la" files and static libraries
- Disable doxygen docs generation, timestamps break build-compare.</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building
- Employ shlib packaging</changelog>
  <changelog author="dimstar@opensuse.org" date="1322481600">- Add meanwhile-glib-2.31.patch: Fix build with glib 2.31.
- Fix packaging: Do not package files in -doc and the library.
  + Move any files out of the lib package that do not belong there.
    This finally allows to have multiple libmeanwhil&lt;n&gt; installable
    without conflicting on file level.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Use url for source
- Update dependencies
- Cleanup spec file with spec-cleaner</changelog>
</package>
<package pkgid="05b8bc739e7fc57d1d4d8a40c1f9f76411a6c74be493bd131c17d033f3455f1c" name="libmeanwhile1" arch="ppc64le">
  <version epoch="0" ver="1.0.2" rel="150000.3.2.1"/>
  <changelog author="mls@suse.de" date="1127736000">- make devel package require base package</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="dmueller@suse.de" date="1138363200">- update to 0.4.2 for Kopete support (#118081)</changelog>
  <changelog author="sbrabec@suse.cz" date="1178798400">- Updated to version 1.0.2:
  * Encryption support.
  * Documentation package.
  * Large message support.
  * API changes, new library version.
  * Bug fixes.</changelog>
  <changelog author="rfno@fietze-home.de" date="1242302400">- apply patch to fix status update problem
  (http://sourceforge.net/tracker/index.php?func=detail&amp;aid=1626349&amp;group_id=110565&amp;atid=656718)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1306411200">- Remove "la" files and static libraries
- Disable doxygen docs generation, timestamps break build-compare.</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building
- Employ shlib packaging</changelog>
  <changelog author="dimstar@opensuse.org" date="1322481600">- Add meanwhile-glib-2.31.patch: Fix build with glib 2.31.
- Fix packaging: Do not package files in -doc and the library.
  + Move any files out of the lib package that do not belong there.
    This finally allows to have multiple libmeanwhil&lt;n&gt; installable
    without conflicting on file level.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Use url for source
- Update dependencies
- Cleanup spec file with spec-cleaner</changelog>
</package>
<package pkgid="eeb033852a75304a16c4d81c272eceeaa86c6de25254902f451fffe8dd675f87" name="libmeanwhile1" arch="s390x">
  <version epoch="0" ver="1.0.2" rel="150000.3.2.1"/>
  <changelog author="mls@suse.de" date="1127736000">- make devel package require base package</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="dmueller@suse.de" date="1138363200">- update to 0.4.2 for Kopete support (#118081)</changelog>
  <changelog author="sbrabec@suse.cz" date="1178798400">- Updated to version 1.0.2:
  * Encryption support.
  * Documentation package.
  * Large message support.
  * API changes, new library version.
  * Bug fixes.</changelog>
  <changelog author="rfno@fietze-home.de" date="1242302400">- apply patch to fix status update problem
  (http://sourceforge.net/tracker/index.php?func=detail&amp;aid=1626349&amp;group_id=110565&amp;atid=656718)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1306411200">- Remove "la" files and static libraries
- Disable doxygen docs generation, timestamps break build-compare.</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building
- Employ shlib packaging</changelog>
  <changelog author="dimstar@opensuse.org" date="1322481600">- Add meanwhile-glib-2.31.patch: Fix build with glib 2.31.
- Fix packaging: Do not package files in -doc and the library.
  + Move any files out of the lib package that do not belong there.
    This finally allows to have multiple libmeanwhil&lt;n&gt; installable
    without conflicting on file level.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Use url for source
- Update dependencies
- Cleanup spec file with spec-cleaner</changelog>
</package>
<package pkgid="23f22eb71dfa2bbeb77887e2c2c1118f95efbf25cff9c01ba449190e12007a21" name="libmeanwhile1" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="150000.3.2.1"/>
  <changelog author="mls@suse.de" date="1127736000">- make devel package require base package</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="dmueller@suse.de" date="1138363200">- update to 0.4.2 for Kopete support (#118081)</changelog>
  <changelog author="sbrabec@suse.cz" date="1178798400">- Updated to version 1.0.2:
  * Encryption support.
  * Documentation package.
  * Large message support.
  * API changes, new library version.
  * Bug fixes.</changelog>
  <changelog author="rfno@fietze-home.de" date="1242302400">- apply patch to fix status update problem
  (http://sourceforge.net/tracker/index.php?func=detail&amp;aid=1626349&amp;group_id=110565&amp;atid=656718)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1306411200">- Remove "la" files and static libraries
- Disable doxygen docs generation, timestamps break build-compare.</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building
- Employ shlib packaging</changelog>
  <changelog author="dimstar@opensuse.org" date="1322481600">- Add meanwhile-glib-2.31.patch: Fix build with glib 2.31.
- Fix packaging: Do not package files in -doc and the library.
  + Move any files out of the lib package that do not belong there.
    This finally allows to have multiple libmeanwhil&lt;n&gt; installable
    without conflicting on file level.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Use url for source
- Update dependencies
- Cleanup spec file with spec-cleaner</changelog>
</package>
<package pkgid="02369fcdf8fad9aa350c4bcdbd466ee7ab9118a574c765d751b58079a2f59da5" name="libmpeg2-0" arch="aarch64">
  <version epoch="0" ver="0.5.1" rel="150000.3.2.1"/>
  <changelog author="rainer@links2linux.de" date="1108900800">- changes for 64 bit</changelog>
  <changelog author="henne@links2linux.de" date="1144152000">- more x86_64 fixes.</changelog>
  <changelog author="detlef@links2linux.de" date="1220097600">- new upstream version &lt;0.5.1&gt;
  * fix broken installation of headers
  * put back /mpeg2dec in the .pc file's include path</changelog>
  <changelog author="detlef@links2linux.de" date="1222689600">- fix shared lib policy</changelog>
  <changelog author="henne@links2linux.de" date="1251115200">- Fix some build errors by removing stuff from %doc
- specfile cleanup</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025600">- Cleanup the spec file to comply suse standards.
- Apply patches for ppc and arm to work on those archs.</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025601">- Format the spec file.</changelog>
  <changelog author="olaf@aepfle.de" date="1412424000">- Split libmpeg2convert0 to cover old pkg from VideoLAN</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609600">- Rebase patches and use modern macros, prepare for submission to
  openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1519041600">- Fix RPM groups, and use pkgconfig() symbols.</changelog>
</package>
<package pkgid="6804c0cacb4f5ec20cd95f9d1c544183fb98e00f850d46bb0cd478f51c374893" name="libmpeg2-0" arch="ppc64le">
  <version epoch="0" ver="0.5.1" rel="150000.3.2.1"/>
  <changelog author="rainer@links2linux.de" date="1108900800">- changes for 64 bit</changelog>
  <changelog author="henne@links2linux.de" date="1144152000">- more x86_64 fixes.</changelog>
  <changelog author="detlef@links2linux.de" date="1220097600">- new upstream version &lt;0.5.1&gt;
  * fix broken installation of headers
  * put back /mpeg2dec in the .pc file's include path</changelog>
  <changelog author="detlef@links2linux.de" date="1222689600">- fix shared lib policy</changelog>
  <changelog author="henne@links2linux.de" date="1251115200">- Fix some build errors by removing stuff from %doc
- specfile cleanup</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025600">- Cleanup the spec file to comply suse standards.
- Apply patches for ppc and arm to work on those archs.</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025601">- Format the spec file.</changelog>
  <changelog author="olaf@aepfle.de" date="1412424000">- Split libmpeg2convert0 to cover old pkg from VideoLAN</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609600">- Rebase patches and use modern macros, prepare for submission to
  openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1519041600">- Fix RPM groups, and use pkgconfig() symbols.</changelog>
</package>
<package pkgid="0ffcf39f99362f798a648253f10182b6c3b26f3ef753eec3bcf3b415b6e1fb06" name="libmpeg2-0" arch="s390x">
  <version epoch="0" ver="0.5.1" rel="150000.3.2.1"/>
  <changelog author="rainer@links2linux.de" date="1108900800">- changes for 64 bit</changelog>
  <changelog author="henne@links2linux.de" date="1144152000">- more x86_64 fixes.</changelog>
  <changelog author="detlef@links2linux.de" date="1220097600">- new upstream version &lt;0.5.1&gt;
  * fix broken installation of headers
  * put back /mpeg2dec in the .pc file's include path</changelog>
  <changelog author="detlef@links2linux.de" date="1222689600">- fix shared lib policy</changelog>
  <changelog author="henne@links2linux.de" date="1251115200">- Fix some build errors by removing stuff from %doc
- specfile cleanup</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025600">- Cleanup the spec file to comply suse standards.
- Apply patches for ppc and arm to work on those archs.</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025601">- Format the spec file.</changelog>
  <changelog author="olaf@aepfle.de" date="1412424000">- Split libmpeg2convert0 to cover old pkg from VideoLAN</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609600">- Rebase patches and use modern macros, prepare for submission to
  openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1519041600">- Fix RPM groups, and use pkgconfig() symbols.</changelog>
</package>
<package pkgid="9b0a4a5e2adaa916711546056b8f5d09bc56c2cf4d0b34a1aabb2861c6fa8380" name="libmpeg2-0" arch="x86_64">
  <version epoch="0" ver="0.5.1" rel="150000.3.2.1"/>
  <changelog author="rainer@links2linux.de" date="1108900800">- changes for 64 bit</changelog>
  <changelog author="henne@links2linux.de" date="1144152000">- more x86_64 fixes.</changelog>
  <changelog author="detlef@links2linux.de" date="1220097600">- new upstream version &lt;0.5.1&gt;
  * fix broken installation of headers
  * put back /mpeg2dec in the .pc file's include path</changelog>
  <changelog author="detlef@links2linux.de" date="1222689600">- fix shared lib policy</changelog>
  <changelog author="henne@links2linux.de" date="1251115200">- Fix some build errors by removing stuff from %doc
- specfile cleanup</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025600">- Cleanup the spec file to comply suse standards.
- Apply patches for ppc and arm to work on those archs.</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025601">- Format the spec file.</changelog>
  <changelog author="olaf@aepfle.de" date="1412424000">- Split libmpeg2convert0 to cover old pkg from VideoLAN</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609600">- Rebase patches and use modern macros, prepare for submission to
  openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1519041600">- Fix RPM groups, and use pkgconfig() symbols.</changelog>
</package>
<package pkgid="d8ebd9e0c4d0000c6b51bf23a9b91cd957229cdd2679f3bc1dcf2a9cce399bac" name="libmpeg2-0-32bit" arch="x86_64">
  <version epoch="0" ver="0.5.1" rel="150000.3.2.1"/>
  <changelog author="rainer@links2linux.de" date="1108900800">- changes for 64 bit</changelog>
  <changelog author="henne@links2linux.de" date="1144152000">- more x86_64 fixes.</changelog>
  <changelog author="detlef@links2linux.de" date="1220097600">- new upstream version &lt;0.5.1&gt;
  * fix broken installation of headers
  * put back /mpeg2dec in the .pc file's include path</changelog>
  <changelog author="detlef@links2linux.de" date="1222689600">- fix shared lib policy</changelog>
  <changelog author="henne@links2linux.de" date="1251115200">- Fix some build errors by removing stuff from %doc
- specfile cleanup</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025600">- Cleanup the spec file to comply suse standards.
- Apply patches for ppc and arm to work on those archs.</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025601">- Format the spec file.</changelog>
  <changelog author="olaf@aepfle.de" date="1412424000">- Split libmpeg2convert0 to cover old pkg from VideoLAN</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609600">- Rebase patches and use modern macros, prepare for submission to
  openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1519041600">- Fix RPM groups, and use pkgconfig() symbols.</changelog>
</package>
<package pkgid="1c624160016c1c5bbeba9391f741d8698b1a47505fbd0044b9d1543433695fdd" name="libmpeg2" arch="src">
  <version epoch="0" ver="0.5.1" rel="150000.3.2.1"/>
  <changelog author="rainer@links2linux.de" date="1100001600">- removed source from package</changelog>
  <changelog author="rainer@links2linux.de" date="1108900800">- changes for 64 bit</changelog>
  <changelog author="henne@links2linux.de" date="1144152000">- more x86_64 fixes.</changelog>
  <changelog author="detlef@links2linux.de" date="1220097600">- new upstream version &lt;0.5.1&gt;
  * fix broken installation of headers
  * put back /mpeg2dec in the .pc file's include path</changelog>
  <changelog author="detlef@links2linux.de" date="1222689600">- fix shared lib policy</changelog>
  <changelog author="henne@links2linux.de" date="1251115200">- Fix some build errors by removing stuff from %doc
- specfile cleanup</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025600">- Cleanup the spec file to comply suse standards.
- Apply patches for ppc and arm to work on those archs.</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025601">- Format the spec file.</changelog>
  <changelog author="olaf@aepfle.de" date="1412424000">- Split libmpeg2convert0 to cover old pkg from VideoLAN</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609600">- Rebase patches and use modern macros, prepare for submission to
  openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1519041600">- Fix RPM groups, and use pkgconfig() symbols.</changelog>
</package>
<package pkgid="777eaea69e68176c8119c1191050c2fa2d835fb20b524f7ba93a7c0f3c69e6ad" name="libmpeg2-devel" arch="aarch64">
  <version epoch="0" ver="0.5.1" rel="150000.3.2.1"/>
  <changelog author="rainer@links2linux.de" date="1108900800">- changes for 64 bit</changelog>
  <changelog author="henne@links2linux.de" date="1144152000">- more x86_64 fixes.</changelog>
  <changelog author="detlef@links2linux.de" date="1220097600">- new upstream version &lt;0.5.1&gt;
  * fix broken installation of headers
  * put back /mpeg2dec in the .pc file's include path</changelog>
  <changelog author="detlef@links2linux.de" date="1222689600">- fix shared lib policy</changelog>
  <changelog author="henne@links2linux.de" date="1251115200">- Fix some build errors by removing stuff from %doc
- specfile cleanup</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025600">- Cleanup the spec file to comply suse standards.
- Apply patches for ppc and arm to work on those archs.</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025601">- Format the spec file.</changelog>
  <changelog author="olaf@aepfle.de" date="1412424000">- Split libmpeg2convert0 to cover old pkg from VideoLAN</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609600">- Rebase patches and use modern macros, prepare for submission to
  openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1519041600">- Fix RPM groups, and use pkgconfig() symbols.</changelog>
</package>
<package pkgid="434a1922eba7ab12e2aa170ae3c3f2432cf096be9aafe7681df8795f9c6e33a9" name="libmpeg2-devel" arch="ppc64le">
  <version epoch="0" ver="0.5.1" rel="150000.3.2.1"/>
  <changelog author="rainer@links2linux.de" date="1108900800">- changes for 64 bit</changelog>
  <changelog author="henne@links2linux.de" date="1144152000">- more x86_64 fixes.</changelog>
  <changelog author="detlef@links2linux.de" date="1220097600">- new upstream version &lt;0.5.1&gt;
  * fix broken installation of headers
  * put back /mpeg2dec in the .pc file's include path</changelog>
  <changelog author="detlef@links2linux.de" date="1222689600">- fix shared lib policy</changelog>
  <changelog author="henne@links2linux.de" date="1251115200">- Fix some build errors by removing stuff from %doc
- specfile cleanup</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025600">- Cleanup the spec file to comply suse standards.
- Apply patches for ppc and arm to work on those archs.</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025601">- Format the spec file.</changelog>
  <changelog author="olaf@aepfle.de" date="1412424000">- Split libmpeg2convert0 to cover old pkg from VideoLAN</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609600">- Rebase patches and use modern macros, prepare for submission to
  openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1519041600">- Fix RPM groups, and use pkgconfig() symbols.</changelog>
</package>
<package pkgid="f42c96582f88be0150f51618f65391557614d0eb2260d7d2ab6048d5aed037bb" name="libmpeg2-devel" arch="s390x">
  <version epoch="0" ver="0.5.1" rel="150000.3.2.1"/>
  <changelog author="rainer@links2linux.de" date="1108900800">- changes for 64 bit</changelog>
  <changelog author="henne@links2linux.de" date="1144152000">- more x86_64 fixes.</changelog>
  <changelog author="detlef@links2linux.de" date="1220097600">- new upstream version &lt;0.5.1&gt;
  * fix broken installation of headers
  * put back /mpeg2dec in the .pc file's include path</changelog>
  <changelog author="detlef@links2linux.de" date="1222689600">- fix shared lib policy</changelog>
  <changelog author="henne@links2linux.de" date="1251115200">- Fix some build errors by removing stuff from %doc
- specfile cleanup</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025600">- Cleanup the spec file to comply suse standards.
- Apply patches for ppc and arm to work on those archs.</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025601">- Format the spec file.</changelog>
  <changelog author="olaf@aepfle.de" date="1412424000">- Split libmpeg2convert0 to cover old pkg from VideoLAN</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609600">- Rebase patches and use modern macros, prepare for submission to
  openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1519041600">- Fix RPM groups, and use pkgconfig() symbols.</changelog>
</package>
<package pkgid="a2d7b3bc78abf62cf7f9b45a5ec2404f5edde14de05ecb412a4d0ed10c7e8e75" name="libmpeg2-devel" arch="x86_64">
  <version epoch="0" ver="0.5.1" rel="150000.3.2.1"/>
  <changelog author="rainer@links2linux.de" date="1108900800">- changes for 64 bit</changelog>
  <changelog author="henne@links2linux.de" date="1144152000">- more x86_64 fixes.</changelog>
  <changelog author="detlef@links2linux.de" date="1220097600">- new upstream version &lt;0.5.1&gt;
  * fix broken installation of headers
  * put back /mpeg2dec in the .pc file's include path</changelog>
  <changelog author="detlef@links2linux.de" date="1222689600">- fix shared lib policy</changelog>
  <changelog author="henne@links2linux.de" date="1251115200">- Fix some build errors by removing stuff from %doc
- specfile cleanup</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025600">- Cleanup the spec file to comply suse standards.
- Apply patches for ppc and arm to work on those archs.</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025601">- Format the spec file.</changelog>
  <changelog author="olaf@aepfle.de" date="1412424000">- Split libmpeg2convert0 to cover old pkg from VideoLAN</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609600">- Rebase patches and use modern macros, prepare for submission to
  openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1519041600">- Fix RPM groups, and use pkgconfig() symbols.</changelog>
</package>
<package pkgid="d784c908d148a435c46f8a9ffc7128fc2c4b1b395fce5c250a39123c16f11be6" name="libmpeg2convert0" arch="aarch64">
  <version epoch="0" ver="0.5.1" rel="150000.3.2.1"/>
  <changelog author="rainer@links2linux.de" date="1108900800">- changes for 64 bit</changelog>
  <changelog author="henne@links2linux.de" date="1144152000">- more x86_64 fixes.</changelog>
  <changelog author="detlef@links2linux.de" date="1220097600">- new upstream version &lt;0.5.1&gt;
  * fix broken installation of headers
  * put back /mpeg2dec in the .pc file's include path</changelog>
  <changelog author="detlef@links2linux.de" date="1222689600">- fix shared lib policy</changelog>
  <changelog author="henne@links2linux.de" date="1251115200">- Fix some build errors by removing stuff from %doc
- specfile cleanup</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025600">- Cleanup the spec file to comply suse standards.
- Apply patches for ppc and arm to work on those archs.</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025601">- Format the spec file.</changelog>
  <changelog author="olaf@aepfle.de" date="1412424000">- Split libmpeg2convert0 to cover old pkg from VideoLAN</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609600">- Rebase patches and use modern macros, prepare for submission to
  openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1519041600">- Fix RPM groups, and use pkgconfig() symbols.</changelog>
</package>
<package pkgid="d23c7ba180a7e6c1fc7a0a6d8419da174ddff8657bed0bd32d328f803765aba5" name="libmpeg2convert0" arch="ppc64le">
  <version epoch="0" ver="0.5.1" rel="150000.3.2.1"/>
  <changelog author="rainer@links2linux.de" date="1108900800">- changes for 64 bit</changelog>
  <changelog author="henne@links2linux.de" date="1144152000">- more x86_64 fixes.</changelog>
  <changelog author="detlef@links2linux.de" date="1220097600">- new upstream version &lt;0.5.1&gt;
  * fix broken installation of headers
  * put back /mpeg2dec in the .pc file's include path</changelog>
  <changelog author="detlef@links2linux.de" date="1222689600">- fix shared lib policy</changelog>
  <changelog author="henne@links2linux.de" date="1251115200">- Fix some build errors by removing stuff from %doc
- specfile cleanup</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025600">- Cleanup the spec file to comply suse standards.
- Apply patches for ppc and arm to work on those archs.</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025601">- Format the spec file.</changelog>
  <changelog author="olaf@aepfle.de" date="1412424000">- Split libmpeg2convert0 to cover old pkg from VideoLAN</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609600">- Rebase patches and use modern macros, prepare for submission to
  openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1519041600">- Fix RPM groups, and use pkgconfig() symbols.</changelog>
</package>
<package pkgid="99d2af3f2864cdfd25410634f91ca98c26216a6c79ac8dd72cb2735580ce8f3b" name="libmpeg2convert0" arch="s390x">
  <version epoch="0" ver="0.5.1" rel="150000.3.2.1"/>
  <changelog author="rainer@links2linux.de" date="1108900800">- changes for 64 bit</changelog>
  <changelog author="henne@links2linux.de" date="1144152000">- more x86_64 fixes.</changelog>
  <changelog author="detlef@links2linux.de" date="1220097600">- new upstream version &lt;0.5.1&gt;
  * fix broken installation of headers
  * put back /mpeg2dec in the .pc file's include path</changelog>
  <changelog author="detlef@links2linux.de" date="1222689600">- fix shared lib policy</changelog>
  <changelog author="henne@links2linux.de" date="1251115200">- Fix some build errors by removing stuff from %doc
- specfile cleanup</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025600">- Cleanup the spec file to comply suse standards.
- Apply patches for ppc and arm to work on those archs.</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025601">- Format the spec file.</changelog>
  <changelog author="olaf@aepfle.de" date="1412424000">- Split libmpeg2convert0 to cover old pkg from VideoLAN</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609600">- Rebase patches and use modern macros, prepare for submission to
  openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1519041600">- Fix RPM groups, and use pkgconfig() symbols.</changelog>
</package>
<package pkgid="831c6dfe631a21ac01030895788d24c44f1d542573c9758df75bf33caf65d165" name="libmpeg2convert0" arch="x86_64">
  <version epoch="0" ver="0.5.1" rel="150000.3.2.1"/>
  <changelog author="rainer@links2linux.de" date="1108900800">- changes for 64 bit</changelog>
  <changelog author="henne@links2linux.de" date="1144152000">- more x86_64 fixes.</changelog>
  <changelog author="detlef@links2linux.de" date="1220097600">- new upstream version &lt;0.5.1&gt;
  * fix broken installation of headers
  * put back /mpeg2dec in the .pc file's include path</changelog>
  <changelog author="detlef@links2linux.de" date="1222689600">- fix shared lib policy</changelog>
  <changelog author="henne@links2linux.de" date="1251115200">- Fix some build errors by removing stuff from %doc
- specfile cleanup</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025600">- Cleanup the spec file to comply suse standards.
- Apply patches for ppc and arm to work on those archs.</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025601">- Format the spec file.</changelog>
  <changelog author="olaf@aepfle.de" date="1412424000">- Split libmpeg2convert0 to cover old pkg from VideoLAN</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609600">- Rebase patches and use modern macros, prepare for submission to
  openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1519041600">- Fix RPM groups, and use pkgconfig() symbols.</changelog>
</package>
<package pkgid="69d135ca5c104d6bb0c28f8bef1a9a7af2766ec5ffd6764ac5b787dfedc92ef2" name="libmpx2-32bit" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="78bc995ac2898647e0fc85d774650f9c78389273157da7cd8006423ce748e9c5" name="libmpx2" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="d5da4989ab9c57e2895aadcd46688d328ae18e1252e68562315ea7c0d2d00609" name="libmpxwrappers2-32bit" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="3c388d95c7accb3433b4992db6e83edf7c46fe78103d75dbe47a53fc9551fcaa" name="libmpxwrappers2" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="096cfc8a636f1aa33296cbf1f935aeacce02dedeb82cedd1b9ae5b16d4835399" name="libmutter-5-0" arch="aarch64">
  <version epoch="0" ver="3.34.6" rel="150200.3.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1575288000">- Update to version 3.34.1+66:
  * stack: Allow promoting transient windows to their parent's layer
  * shaped-texture: Do not invalidate content on set_cogl_texture()
  * cursor-tracker: Add API to keep the wayland pointer focus while hidden
  * device-manager-x11: Ignore events if no source device is set
  * clutter/cally-root: Use g_clear_signal_handler and fix a signal leak
  * wayland: Move "ownership" of the DnD selection source to the data device
  * wayland: Do not cancel data source on offer destruction
  * wayland: Avoid redundant cancel() call
  * wayland: Drop unused wl_signal structs</changelog>
  <changelog author="fcrozat@suse.com" date="1575288001">- Add mutter-disable-cvt-s390x.patch: do not search cvt on s390x,
  it doesn't exist there (bsc#1158128).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575979200">- Add explicit pkgconfig(fribidi) and pkgconfig(glib-2.0)
  BuildRequires: meson checks for it.</changelog>
  <changelog author="dead_mozay@opensuse.org" date="1576238400">- Update to version 3.34.2+0:
  * Update British English translation
  * backends/native: Fix double free of error
  * kms-impl/simple: Fix meta_set_fallback_feedback_idle
  * kms: Process impl idle callbacks before pre dispatch flush</changelog>
  <changelog author="dimstar@opensuse.org" date="1577188800">- Update to version 3.34.2+1:
  * screen-cast: Fix window recording on HiDPI</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1577880000">- Update to version 3.34.2+2:
  * clutter/stage: Fix picking of rectangles with negative
    positions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578225600">- Update to version 3.34.3+0:
  * Bump version to 3.34.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581854400">- Update to version 3.34.4:
  + Handle mode set race conditions more gracefully.
  + Fix fallback to GLES2.
  + Fix interoperation with wl_data_device_manager v1.
  + Fix visual glitches with offscreen effects applied.
  + Favor text over images in clipboard manager.
  + Fixes crashes.
  + Plugged memory leaks.
  + Misc. bug fixes.
  + Updated translations.</changelog>
  <changelog author="sndirsch@suse.com" date="1582545600">- Add mutter-fix-mesa20.patch: fixes build against Mesa 20
  (boo#1164688).</changelog>
  <changelog author="dimstar@opensuse.org" date="1582632000">- Rework mutter-fix-mesa20.patch: base it on mutter upstream commit
  a444a4c.</changelog>
  <changelog author="alarrosa@suse.com" date="1583150400">- Build with pipewire 0.3.0:
  * Add 0001-Update-to-PipeWire-0.3-API.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1584100800">- Add mutter-wayland-fix-keyboard-move-resize-window.patch:
  move some common code out of X11 only code blocks to fix it
  (bsc#1159976, glgo#GNOME/mutter!997).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1585742400">- Update to version 3.34.5:
  + Fix visibility of initially hidden windows.
  + Fix hardware cursor on GPU hotplug.
  + Fix pasting images from wayland.
  + Fixed crashes.
  + Updated translations.
- Switch to using explicit released tag in _service.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Enable SLE patches on Leap (jsc#SLE-11897).</changelog>
  <changelog author="mgorse@suse.com" date="1589371200">- Update to version 3.34.6:
  + Fix various clipboard issues.
  + Fix locate-pointer feature interfering with keybindings.
  + Fix overview key on X11 when using multiple keyboard layouts.
  + Preserve keyboard state on VT switch.
  + Fixed crashes.
  + Plugged memory leaks.
  + Misc. bug fixes and cleanups.</changelog>
  <changelog author="fcrozat@suse.com" date="1597924800">- Add mutter-meson_options-Use-libGLESv2.so.2-for-COGL_DRIVER-gle.patch:
  don't use libGLESv2.so but libGLESv2.so.2 for COGL driver
  (boo#1175559 glgo#GNOME/mutter!1282).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1598011200">- Added mutter-fix-wine-copy-and-paste.patch: sometimes copy and
  paste will fail in wine applications, this upstream patch fixed
  it (boo#1175532, glgo#GNOME/mutter!1369).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628251200">- Added 0001-stage-x11-Check-that-message-is-WM_PROTOCOLS-before-.patch:
  ClientMessage may have different types such as touch
  synchronization, but mutter just assume it as WM_PROTOCOLS, which
  will destroy all actors include stage wrongly, this patch checks
  type before using it. (bsc#1188759)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1647000000">- Added 0001-Revert-x11-Unminimize-windows-with-initial-IconicSta.patch:
  This fixes xterm -iconic support, by reverting a workaround for
  wrongly behaved wine games. (bsc#1193190, glgo#GNOME/mutter#2043)</changelog>
</package>
<package pkgid="2c8b761241d52d415d71ee493cae16accc51b861123267cbf37c8b7551ac7a76" name="libmutter-5-0" arch="ppc64le">
  <version epoch="0" ver="3.34.6" rel="150200.3.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1575288000">- Update to version 3.34.1+66:
  * stack: Allow promoting transient windows to their parent's layer
  * shaped-texture: Do not invalidate content on set_cogl_texture()
  * cursor-tracker: Add API to keep the wayland pointer focus while hidden
  * device-manager-x11: Ignore events if no source device is set
  * clutter/cally-root: Use g_clear_signal_handler and fix a signal leak
  * wayland: Move "ownership" of the DnD selection source to the data device
  * wayland: Do not cancel data source on offer destruction
  * wayland: Avoid redundant cancel() call
  * wayland: Drop unused wl_signal structs</changelog>
  <changelog author="fcrozat@suse.com" date="1575288001">- Add mutter-disable-cvt-s390x.patch: do not search cvt on s390x,
  it doesn't exist there (bsc#1158128).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575979200">- Add explicit pkgconfig(fribidi) and pkgconfig(glib-2.0)
  BuildRequires: meson checks for it.</changelog>
  <changelog author="dead_mozay@opensuse.org" date="1576238400">- Update to version 3.34.2+0:
  * Update British English translation
  * backends/native: Fix double free of error
  * kms-impl/simple: Fix meta_set_fallback_feedback_idle
  * kms: Process impl idle callbacks before pre dispatch flush</changelog>
  <changelog author="dimstar@opensuse.org" date="1577188800">- Update to version 3.34.2+1:
  * screen-cast: Fix window recording on HiDPI</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1577880000">- Update to version 3.34.2+2:
  * clutter/stage: Fix picking of rectangles with negative
    positions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578225600">- Update to version 3.34.3+0:
  * Bump version to 3.34.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581854400">- Update to version 3.34.4:
  + Handle mode set race conditions more gracefully.
  + Fix fallback to GLES2.
  + Fix interoperation with wl_data_device_manager v1.
  + Fix visual glitches with offscreen effects applied.
  + Favor text over images in clipboard manager.
  + Fixes crashes.
  + Plugged memory leaks.
  + Misc. bug fixes.
  + Updated translations.</changelog>
  <changelog author="sndirsch@suse.com" date="1582545600">- Add mutter-fix-mesa20.patch: fixes build against Mesa 20
  (boo#1164688).</changelog>
  <changelog author="dimstar@opensuse.org" date="1582632000">- Rework mutter-fix-mesa20.patch: base it on mutter upstream commit
  a444a4c.</changelog>
  <changelog author="alarrosa@suse.com" date="1583150400">- Build with pipewire 0.3.0:
  * Add 0001-Update-to-PipeWire-0.3-API.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1584100800">- Add mutter-wayland-fix-keyboard-move-resize-window.patch:
  move some common code out of X11 only code blocks to fix it
  (bsc#1159976, glgo#GNOME/mutter!997).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1585742400">- Update to version 3.34.5:
  + Fix visibility of initially hidden windows.
  + Fix hardware cursor on GPU hotplug.
  + Fix pasting images from wayland.
  + Fixed crashes.
  + Updated translations.
- Switch to using explicit released tag in _service.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Enable SLE patches on Leap (jsc#SLE-11897).</changelog>
  <changelog author="mgorse@suse.com" date="1589371200">- Update to version 3.34.6:
  + Fix various clipboard issues.
  + Fix locate-pointer feature interfering with keybindings.
  + Fix overview key on X11 when using multiple keyboard layouts.
  + Preserve keyboard state on VT switch.
  + Fixed crashes.
  + Plugged memory leaks.
  + Misc. bug fixes and cleanups.</changelog>
  <changelog author="fcrozat@suse.com" date="1597924800">- Add mutter-meson_options-Use-libGLESv2.so.2-for-COGL_DRIVER-gle.patch:
  don't use libGLESv2.so but libGLESv2.so.2 for COGL driver
  (boo#1175559 glgo#GNOME/mutter!1282).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1598011200">- Added mutter-fix-wine-copy-and-paste.patch: sometimes copy and
  paste will fail in wine applications, this upstream patch fixed
  it (boo#1175532, glgo#GNOME/mutter!1369).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628251200">- Added 0001-stage-x11-Check-that-message-is-WM_PROTOCOLS-before-.patch:
  ClientMessage may have different types such as touch
  synchronization, but mutter just assume it as WM_PROTOCOLS, which
  will destroy all actors include stage wrongly, this patch checks
  type before using it. (bsc#1188759)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1647000000">- Added 0001-Revert-x11-Unminimize-windows-with-initial-IconicSta.patch:
  This fixes xterm -iconic support, by reverting a workaround for
  wrongly behaved wine games. (bsc#1193190, glgo#GNOME/mutter#2043)</changelog>
</package>
<package pkgid="f2f33e6d871d2871106dd2ca8d557ab3ed49f93b83bab1d8cbd2b1df8401da09" name="libmutter-5-0" arch="s390x">
  <version epoch="0" ver="3.34.6" rel="150200.3.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1575288000">- Update to version 3.34.1+66:
  * stack: Allow promoting transient windows to their parent's layer
  * shaped-texture: Do not invalidate content on set_cogl_texture()
  * cursor-tracker: Add API to keep the wayland pointer focus while hidden
  * device-manager-x11: Ignore events if no source device is set
  * clutter/cally-root: Use g_clear_signal_handler and fix a signal leak
  * wayland: Move "ownership" of the DnD selection source to the data device
  * wayland: Do not cancel data source on offer destruction
  * wayland: Avoid redundant cancel() call
  * wayland: Drop unused wl_signal structs</changelog>
  <changelog author="fcrozat@suse.com" date="1575288001">- Add mutter-disable-cvt-s390x.patch: do not search cvt on s390x,
  it doesn't exist there (bsc#1158128).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575979200">- Add explicit pkgconfig(fribidi) and pkgconfig(glib-2.0)
  BuildRequires: meson checks for it.</changelog>
  <changelog author="dead_mozay@opensuse.org" date="1576238400">- Update to version 3.34.2+0:
  * Update British English translation
  * backends/native: Fix double free of error
  * kms-impl/simple: Fix meta_set_fallback_feedback_idle
  * kms: Process impl idle callbacks before pre dispatch flush</changelog>
  <changelog author="dimstar@opensuse.org" date="1577188800">- Update to version 3.34.2+1:
  * screen-cast: Fix window recording on HiDPI</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1577880000">- Update to version 3.34.2+2:
  * clutter/stage: Fix picking of rectangles with negative
    positions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578225600">- Update to version 3.34.3+0:
  * Bump version to 3.34.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581854400">- Update to version 3.34.4:
  + Handle mode set race conditions more gracefully.
  + Fix fallback to GLES2.
  + Fix interoperation with wl_data_device_manager v1.
  + Fix visual glitches with offscreen effects applied.
  + Favor text over images in clipboard manager.
  + Fixes crashes.
  + Plugged memory leaks.
  + Misc. bug fixes.
  + Updated translations.</changelog>
  <changelog author="sndirsch@suse.com" date="1582545600">- Add mutter-fix-mesa20.patch: fixes build against Mesa 20
  (boo#1164688).</changelog>
  <changelog author="dimstar@opensuse.org" date="1582632000">- Rework mutter-fix-mesa20.patch: base it on mutter upstream commit
  a444a4c.</changelog>
  <changelog author="alarrosa@suse.com" date="1583150400">- Build with pipewire 0.3.0:
  * Add 0001-Update-to-PipeWire-0.3-API.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1584100800">- Add mutter-wayland-fix-keyboard-move-resize-window.patch:
  move some common code out of X11 only code blocks to fix it
  (bsc#1159976, glgo#GNOME/mutter!997).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1585742400">- Update to version 3.34.5:
  + Fix visibility of initially hidden windows.
  + Fix hardware cursor on GPU hotplug.
  + Fix pasting images from wayland.
  + Fixed crashes.
  + Updated translations.
- Switch to using explicit released tag in _service.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Enable SLE patches on Leap (jsc#SLE-11897).</changelog>
  <changelog author="mgorse@suse.com" date="1589371200">- Update to version 3.34.6:
  + Fix various clipboard issues.
  + Fix locate-pointer feature interfering with keybindings.
  + Fix overview key on X11 when using multiple keyboard layouts.
  + Preserve keyboard state on VT switch.
  + Fixed crashes.
  + Plugged memory leaks.
  + Misc. bug fixes and cleanups.</changelog>
  <changelog author="fcrozat@suse.com" date="1597924800">- Add mutter-meson_options-Use-libGLESv2.so.2-for-COGL_DRIVER-gle.patch:
  don't use libGLESv2.so but libGLESv2.so.2 for COGL driver
  (boo#1175559 glgo#GNOME/mutter!1282).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1598011200">- Added mutter-fix-wine-copy-and-paste.patch: sometimes copy and
  paste will fail in wine applications, this upstream patch fixed
  it (boo#1175532, glgo#GNOME/mutter!1369).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628251200">- Added 0001-stage-x11-Check-that-message-is-WM_PROTOCOLS-before-.patch:
  ClientMessage may have different types such as touch
  synchronization, but mutter just assume it as WM_PROTOCOLS, which
  will destroy all actors include stage wrongly, this patch checks
  type before using it. (bsc#1188759)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1647000000">- Added 0001-Revert-x11-Unminimize-windows-with-initial-IconicSta.patch:
  This fixes xterm -iconic support, by reverting a workaround for
  wrongly behaved wine games. (bsc#1193190, glgo#GNOME/mutter#2043)</changelog>
</package>
<package pkgid="01cc8da164060104bbd2e4976082c5d32310e7167ba73338362d0759306c0ded" name="libmutter-5-0" arch="x86_64">
  <version epoch="0" ver="3.34.6" rel="150200.3.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1575288000">- Update to version 3.34.1+66:
  * stack: Allow promoting transient windows to their parent's layer
  * shaped-texture: Do not invalidate content on set_cogl_texture()
  * cursor-tracker: Add API to keep the wayland pointer focus while hidden
  * device-manager-x11: Ignore events if no source device is set
  * clutter/cally-root: Use g_clear_signal_handler and fix a signal leak
  * wayland: Move "ownership" of the DnD selection source to the data device
  * wayland: Do not cancel data source on offer destruction
  * wayland: Avoid redundant cancel() call
  * wayland: Drop unused wl_signal structs</changelog>
  <changelog author="fcrozat@suse.com" date="1575288001">- Add mutter-disable-cvt-s390x.patch: do not search cvt on s390x,
  it doesn't exist there (bsc#1158128).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575979200">- Add explicit pkgconfig(fribidi) and pkgconfig(glib-2.0)
  BuildRequires: meson checks for it.</changelog>
  <changelog author="dead_mozay@opensuse.org" date="1576238400">- Update to version 3.34.2+0:
  * Update British English translation
  * backends/native: Fix double free of error
  * kms-impl/simple: Fix meta_set_fallback_feedback_idle
  * kms: Process impl idle callbacks before pre dispatch flush</changelog>
  <changelog author="dimstar@opensuse.org" date="1577188800">- Update to version 3.34.2+1:
  * screen-cast: Fix window recording on HiDPI</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1577880000">- Update to version 3.34.2+2:
  * clutter/stage: Fix picking of rectangles with negative
    positions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578225600">- Update to version 3.34.3+0:
  * Bump version to 3.34.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581854400">- Update to version 3.34.4:
  + Handle mode set race conditions more gracefully.
  + Fix fallback to GLES2.
  + Fix interoperation with wl_data_device_manager v1.
  + Fix visual glitches with offscreen effects applied.
  + Favor text over images in clipboard manager.
  + Fixes crashes.
  + Plugged memory leaks.
  + Misc. bug fixes.
  + Updated translations.</changelog>
  <changelog author="sndirsch@suse.com" date="1582545600">- Add mutter-fix-mesa20.patch: fixes build against Mesa 20
  (boo#1164688).</changelog>
  <changelog author="dimstar@opensuse.org" date="1582632000">- Rework mutter-fix-mesa20.patch: base it on mutter upstream commit
  a444a4c.</changelog>
  <changelog author="alarrosa@suse.com" date="1583150400">- Build with pipewire 0.3.0:
  * Add 0001-Update-to-PipeWire-0.3-API.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1584100800">- Add mutter-wayland-fix-keyboard-move-resize-window.patch:
  move some common code out of X11 only code blocks to fix it
  (bsc#1159976, glgo#GNOME/mutter!997).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1585742400">- Update to version 3.34.5:
  + Fix visibility of initially hidden windows.
  + Fix hardware cursor on GPU hotplug.
  + Fix pasting images from wayland.
  + Fixed crashes.
  + Updated translations.
- Switch to using explicit released tag in _service.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Enable SLE patches on Leap (jsc#SLE-11897).</changelog>
  <changelog author="mgorse@suse.com" date="1589371200">- Update to version 3.34.6:
  + Fix various clipboard issues.
  + Fix locate-pointer feature interfering with keybindings.
  + Fix overview key on X11 when using multiple keyboard layouts.
  + Preserve keyboard state on VT switch.
  + Fixed crashes.
  + Plugged memory leaks.
  + Misc. bug fixes and cleanups.</changelog>
  <changelog author="fcrozat@suse.com" date="1597924800">- Add mutter-meson_options-Use-libGLESv2.so.2-for-COGL_DRIVER-gle.patch:
  don't use libGLESv2.so but libGLESv2.so.2 for COGL driver
  (boo#1175559 glgo#GNOME/mutter!1282).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1598011200">- Added mutter-fix-wine-copy-and-paste.patch: sometimes copy and
  paste will fail in wine applications, this upstream patch fixed
  it (boo#1175532, glgo#GNOME/mutter!1369).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628251200">- Added 0001-stage-x11-Check-that-message-is-WM_PROTOCOLS-before-.patch:
  ClientMessage may have different types such as touch
  synchronization, but mutter just assume it as WM_PROTOCOLS, which
  will destroy all actors include stage wrongly, this patch checks
  type before using it. (bsc#1188759)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1647000000">- Added 0001-Revert-x11-Unminimize-windows-with-initial-IconicSta.patch:
  This fixes xterm -iconic support, by reverting a workaround for
  wrongly behaved wine games. (bsc#1193190, glgo#GNOME/mutter#2043)</changelog>
</package>
<package pkgid="226efc4bdafea4be40b28d89a12761303e37f1d603c0c2573cf787ff3d92c582" name="libmysqlcppconn-devel" arch="aarch64">
  <version epoch="0" ver="1.1.9" rel="150000.4.5.1"/>
  <changelog author="mhrusecky@suse.cz" date="1366200000">- Compatibility Obsoletes/Provides</changelog>
  <changelog author="mhrusecky@suse.cz" date="1366372800">- Do not use macro for make install as it doesn't work on SLE</changelog>
  <changelog author="cobexer@gmail.com" date="1406376000">- disable gcov coverage recording
  Gcov is a development tool, it slows down execution and creates
  coverage data that is not useful to users of this library.</changelog>
  <changelog author="tchvatal@suse.com" date="1409313600">- Use cmake macros for building properly.</changelog>
  <changelog author="tchvatal@suse.com" date="1439380800">- Version bump to 1.1.6:
  * See the news files on
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/
- Update soname to libmyslqcppcon7
- Remove needlessly long description
- Drop unneeded/merged patches:
  mysql-connector-cpp-1.1.0-cmake-paths-fix.patch
  mysql-connector-cpp-1.1.0-gcc44.patch
- Refresh patch:
  mysql-connector-cpp-1.1.0-disable_tests_and_examples.patch
- Add patch to build with mariadb:
  mariadb_api.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1496232000">- Update to version 1.1.8:
  * See the news files on
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/</changelog>
  <changelog author="kstreitova@suse.com" date="1504612800">- Update to version 1.1.9:
  * release notes:
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/news-1-1-9.html
- Remove installing of ANNOUNCEMENT and CHANGES files that are no
  longer present
- Add "Requires: libboost_headers-devel" for libmysqlcppconn-devel
  subpackage ("Requires: boost-devel" for the older distros that
  don't have libboost_headers-devel available yet) [bsc#838038]</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- add mysql-connector-cpp-1.1.9-libmysql_dynamic_proxy_typos.patch
  to fix build by fixing copypaste errors in
  libmysql_dynamic_proxy.cpp file [bsc#1067883]
- remove mariadb_api.patch that it's no longer needed because:
  * our current client library already provides mysql_get_option()
  * using MARIADB_BASE_VERSION is no longer working as intended as
    it's not defined in mariadb client library provided by
    mariadb-connector-c
  * hunk for stmt_free_result() was moved to
    mysql-connector-cpp-1.1.9-libmysql_dynamic_proxy_typos.patch</changelog>
  <changelog author="vcizek@suse.com" date="1568289600">- Add missing zlib build dependency, which used to be pulled in
  by libopenssl-devel. The package fails to build since the openssl
  upgrade to 1.1.1 (bsc#1149792)</changelog>
</package>
<package pkgid="4214f2a19a110f7188274b5a0099c362a57e1e4fe53f962850fb9acd1d9dfc9f" name="libmysqlcppconn-devel" arch="ppc64le">
  <version epoch="0" ver="1.1.9" rel="150000.4.5.1"/>
  <changelog author="mhrusecky@suse.cz" date="1366200000">- Compatibility Obsoletes/Provides</changelog>
  <changelog author="mhrusecky@suse.cz" date="1366372800">- Do not use macro for make install as it doesn't work on SLE</changelog>
  <changelog author="cobexer@gmail.com" date="1406376000">- disable gcov coverage recording
  Gcov is a development tool, it slows down execution and creates
  coverage data that is not useful to users of this library.</changelog>
  <changelog author="tchvatal@suse.com" date="1409313600">- Use cmake macros for building properly.</changelog>
  <changelog author="tchvatal@suse.com" date="1439380800">- Version bump to 1.1.6:
  * See the news files on
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/
- Update soname to libmyslqcppcon7
- Remove needlessly long description
- Drop unneeded/merged patches:
  mysql-connector-cpp-1.1.0-cmake-paths-fix.patch
  mysql-connector-cpp-1.1.0-gcc44.patch
- Refresh patch:
  mysql-connector-cpp-1.1.0-disable_tests_and_examples.patch
- Add patch to build with mariadb:
  mariadb_api.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1496232000">- Update to version 1.1.8:
  * See the news files on
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/</changelog>
  <changelog author="kstreitova@suse.com" date="1504612800">- Update to version 1.1.9:
  * release notes:
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/news-1-1-9.html
- Remove installing of ANNOUNCEMENT and CHANGES files that are no
  longer present
- Add "Requires: libboost_headers-devel" for libmysqlcppconn-devel
  subpackage ("Requires: boost-devel" for the older distros that
  don't have libboost_headers-devel available yet) [bsc#838038]</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- add mysql-connector-cpp-1.1.9-libmysql_dynamic_proxy_typos.patch
  to fix build by fixing copypaste errors in
  libmysql_dynamic_proxy.cpp file [bsc#1067883]
- remove mariadb_api.patch that it's no longer needed because:
  * our current client library already provides mysql_get_option()
  * using MARIADB_BASE_VERSION is no longer working as intended as
    it's not defined in mariadb client library provided by
    mariadb-connector-c
  * hunk for stmt_free_result() was moved to
    mysql-connector-cpp-1.1.9-libmysql_dynamic_proxy_typos.patch</changelog>
  <changelog author="vcizek@suse.com" date="1568289600">- Add missing zlib build dependency, which used to be pulled in
  by libopenssl-devel. The package fails to build since the openssl
  upgrade to 1.1.1 (bsc#1149792)</changelog>
</package>
<package pkgid="128bcb60780b2b31a0fb4572ad946932e9303a32683233a475b5e71d97a548e2" name="libmysqlcppconn-devel" arch="s390x">
  <version epoch="0" ver="1.1.9" rel="150000.4.5.1"/>
  <changelog author="mhrusecky@suse.cz" date="1366200000">- Compatibility Obsoletes/Provides</changelog>
  <changelog author="mhrusecky@suse.cz" date="1366372800">- Do not use macro for make install as it doesn't work on SLE</changelog>
  <changelog author="cobexer@gmail.com" date="1406376000">- disable gcov coverage recording
  Gcov is a development tool, it slows down execution and creates
  coverage data that is not useful to users of this library.</changelog>
  <changelog author="tchvatal@suse.com" date="1409313600">- Use cmake macros for building properly.</changelog>
  <changelog author="tchvatal@suse.com" date="1439380800">- Version bump to 1.1.6:
  * See the news files on
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/
- Update soname to libmyslqcppcon7
- Remove needlessly long description
- Drop unneeded/merged patches:
  mysql-connector-cpp-1.1.0-cmake-paths-fix.patch
  mysql-connector-cpp-1.1.0-gcc44.patch
- Refresh patch:
  mysql-connector-cpp-1.1.0-disable_tests_and_examples.patch
- Add patch to build with mariadb:
  mariadb_api.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1496232000">- Update to version 1.1.8:
  * See the news files on
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/</changelog>
  <changelog author="kstreitova@suse.com" date="1504612800">- Update to version 1.1.9:
  * release notes:
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/news-1-1-9.html
- Remove installing of ANNOUNCEMENT and CHANGES files that are no
  longer present
- Add "Requires: libboost_headers-devel" for libmysqlcppconn-devel
  subpackage ("Requires: boost-devel" for the older distros that
  don't have libboost_headers-devel available yet) [bsc#838038]</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- add mysql-connector-cpp-1.1.9-libmysql_dynamic_proxy_typos.patch
  to fix build by fixing copypaste errors in
  libmysql_dynamic_proxy.cpp file [bsc#1067883]
- remove mariadb_api.patch that it's no longer needed because:
  * our current client library already provides mysql_get_option()
  * using MARIADB_BASE_VERSION is no longer working as intended as
    it's not defined in mariadb client library provided by
    mariadb-connector-c
  * hunk for stmt_free_result() was moved to
    mysql-connector-cpp-1.1.9-libmysql_dynamic_proxy_typos.patch</changelog>
  <changelog author="vcizek@suse.com" date="1568289600">- Add missing zlib build dependency, which used to be pulled in
  by libopenssl-devel. The package fails to build since the openssl
  upgrade to 1.1.1 (bsc#1149792)</changelog>
</package>
<package pkgid="735eaeb5933216cf9a0e7bcdd07ab358ea18f9550cc0b6cb5ea3077b468a1378" name="libmysqlcppconn-devel" arch="x86_64">
  <version epoch="0" ver="1.1.9" rel="150000.4.5.1"/>
  <changelog author="mhrusecky@suse.cz" date="1366200000">- Compatibility Obsoletes/Provides</changelog>
  <changelog author="mhrusecky@suse.cz" date="1366372800">- Do not use macro for make install as it doesn't work on SLE</changelog>
  <changelog author="cobexer@gmail.com" date="1406376000">- disable gcov coverage recording
  Gcov is a development tool, it slows down execution and creates
  coverage data that is not useful to users of this library.</changelog>
  <changelog author="tchvatal@suse.com" date="1409313600">- Use cmake macros for building properly.</changelog>
  <changelog author="tchvatal@suse.com" date="1439380800">- Version bump to 1.1.6:
  * See the news files on
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/
- Update soname to libmyslqcppcon7
- Remove needlessly long description
- Drop unneeded/merged patches:
  mysql-connector-cpp-1.1.0-cmake-paths-fix.patch
  mysql-connector-cpp-1.1.0-gcc44.patch
- Refresh patch:
  mysql-connector-cpp-1.1.0-disable_tests_and_examples.patch
- Add patch to build with mariadb:
  mariadb_api.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1496232000">- Update to version 1.1.8:
  * See the news files on
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/</changelog>
  <changelog author="kstreitova@suse.com" date="1504612800">- Update to version 1.1.9:
  * release notes:
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/news-1-1-9.html
- Remove installing of ANNOUNCEMENT and CHANGES files that are no
  longer present
- Add "Requires: libboost_headers-devel" for libmysqlcppconn-devel
  subpackage ("Requires: boost-devel" for the older distros that
  don't have libboost_headers-devel available yet) [bsc#838038]</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- add mysql-connector-cpp-1.1.9-libmysql_dynamic_proxy_typos.patch
  to fix build by fixing copypaste errors in
  libmysql_dynamic_proxy.cpp file [bsc#1067883]
- remove mariadb_api.patch that it's no longer needed because:
  * our current client library already provides mysql_get_option()
  * using MARIADB_BASE_VERSION is no longer working as intended as
    it's not defined in mariadb client library provided by
    mariadb-connector-c
  * hunk for stmt_free_result() was moved to
    mysql-connector-cpp-1.1.9-libmysql_dynamic_proxy_typos.patch</changelog>
  <changelog author="vcizek@suse.com" date="1568289600">- Add missing zlib build dependency, which used to be pulled in
  by libopenssl-devel. The package fails to build since the openssl
  upgrade to 1.1.1 (bsc#1149792)</changelog>
</package>
<package pkgid="78ee56d8b11bf47aa1bfd4b86cc9aefb657a0094aa0d2bd03dbcf873e6367e32" name="libmysqlcppconn7" arch="aarch64">
  <version epoch="0" ver="1.1.9" rel="150000.4.5.1"/>
  <changelog author="mhrusecky@suse.cz" date="1366200000">- Compatibility Obsoletes/Provides</changelog>
  <changelog author="mhrusecky@suse.cz" date="1366372800">- Do not use macro for make install as it doesn't work on SLE</changelog>
  <changelog author="cobexer@gmail.com" date="1406376000">- disable gcov coverage recording
  Gcov is a development tool, it slows down execution and creates
  coverage data that is not useful to users of this library.</changelog>
  <changelog author="tchvatal@suse.com" date="1409313600">- Use cmake macros for building properly.</changelog>
  <changelog author="tchvatal@suse.com" date="1439380800">- Version bump to 1.1.6:
  * See the news files on
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/
- Update soname to libmyslqcppcon7
- Remove needlessly long description
- Drop unneeded/merged patches:
  mysql-connector-cpp-1.1.0-cmake-paths-fix.patch
  mysql-connector-cpp-1.1.0-gcc44.patch
- Refresh patch:
  mysql-connector-cpp-1.1.0-disable_tests_and_examples.patch
- Add patch to build with mariadb:
  mariadb_api.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1496232000">- Update to version 1.1.8:
  * See the news files on
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/</changelog>
  <changelog author="kstreitova@suse.com" date="1504612800">- Update to version 1.1.9:
  * release notes:
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/news-1-1-9.html
- Remove installing of ANNOUNCEMENT and CHANGES files that are no
  longer present
- Add "Requires: libboost_headers-devel" for libmysqlcppconn-devel
  subpackage ("Requires: boost-devel" for the older distros that
  don't have libboost_headers-devel available yet) [bsc#838038]</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- add mysql-connector-cpp-1.1.9-libmysql_dynamic_proxy_typos.patch
  to fix build by fixing copypaste errors in
  libmysql_dynamic_proxy.cpp file [bsc#1067883]
- remove mariadb_api.patch that it's no longer needed because:
  * our current client library already provides mysql_get_option()
  * using MARIADB_BASE_VERSION is no longer working as intended as
    it's not defined in mariadb client library provided by
    mariadb-connector-c
  * hunk for stmt_free_result() was moved to
    mysql-connector-cpp-1.1.9-libmysql_dynamic_proxy_typos.patch</changelog>
  <changelog author="vcizek@suse.com" date="1568289600">- Add missing zlib build dependency, which used to be pulled in
  by libopenssl-devel. The package fails to build since the openssl
  upgrade to 1.1.1 (bsc#1149792)</changelog>
</package>
<package pkgid="12ebc6015eff43bcd11b187e5acf8d751d440b935ce8ea351258fa76378d4795" name="libmysqlcppconn7" arch="ppc64le">
  <version epoch="0" ver="1.1.9" rel="150000.4.5.1"/>
  <changelog author="mhrusecky@suse.cz" date="1366200000">- Compatibility Obsoletes/Provides</changelog>
  <changelog author="mhrusecky@suse.cz" date="1366372800">- Do not use macro for make install as it doesn't work on SLE</changelog>
  <changelog author="cobexer@gmail.com" date="1406376000">- disable gcov coverage recording
  Gcov is a development tool, it slows down execution and creates
  coverage data that is not useful to users of this library.</changelog>
  <changelog author="tchvatal@suse.com" date="1409313600">- Use cmake macros for building properly.</changelog>
  <changelog author="tchvatal@suse.com" date="1439380800">- Version bump to 1.1.6:
  * See the news files on
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/
- Update soname to libmyslqcppcon7
- Remove needlessly long description
- Drop unneeded/merged patches:
  mysql-connector-cpp-1.1.0-cmake-paths-fix.patch
  mysql-connector-cpp-1.1.0-gcc44.patch
- Refresh patch:
  mysql-connector-cpp-1.1.0-disable_tests_and_examples.patch
- Add patch to build with mariadb:
  mariadb_api.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1496232000">- Update to version 1.1.8:
  * See the news files on
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/</changelog>
  <changelog author="kstreitova@suse.com" date="1504612800">- Update to version 1.1.9:
  * release notes:
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/news-1-1-9.html
- Remove installing of ANNOUNCEMENT and CHANGES files that are no
  longer present
- Add "Requires: libboost_headers-devel" for libmysqlcppconn-devel
  subpackage ("Requires: boost-devel" for the older distros that
  don't have libboost_headers-devel available yet) [bsc#838038]</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- add mysql-connector-cpp-1.1.9-libmysql_dynamic_proxy_typos.patch
  to fix build by fixing copypaste errors in
  libmysql_dynamic_proxy.cpp file [bsc#1067883]
- remove mariadb_api.patch that it's no longer needed because:
  * our current client library already provides mysql_get_option()
  * using MARIADB_BASE_VERSION is no longer working as intended as
    it's not defined in mariadb client library provided by
    mariadb-connector-c
  * hunk for stmt_free_result() was moved to
    mysql-connector-cpp-1.1.9-libmysql_dynamic_proxy_typos.patch</changelog>
  <changelog author="vcizek@suse.com" date="1568289600">- Add missing zlib build dependency, which used to be pulled in
  by libopenssl-devel. The package fails to build since the openssl
  upgrade to 1.1.1 (bsc#1149792)</changelog>
</package>
<package pkgid="848d76e40acfe0ba19d2bcea692eebb37f114fe1ffa6443a380f8707af0d38a1" name="libmysqlcppconn7" arch="s390x">
  <version epoch="0" ver="1.1.9" rel="150000.4.5.1"/>
  <changelog author="mhrusecky@suse.cz" date="1366200000">- Compatibility Obsoletes/Provides</changelog>
  <changelog author="mhrusecky@suse.cz" date="1366372800">- Do not use macro for make install as it doesn't work on SLE</changelog>
  <changelog author="cobexer@gmail.com" date="1406376000">- disable gcov coverage recording
  Gcov is a development tool, it slows down execution and creates
  coverage data that is not useful to users of this library.</changelog>
  <changelog author="tchvatal@suse.com" date="1409313600">- Use cmake macros for building properly.</changelog>
  <changelog author="tchvatal@suse.com" date="1439380800">- Version bump to 1.1.6:
  * See the news files on
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/
- Update soname to libmyslqcppcon7
- Remove needlessly long description
- Drop unneeded/merged patches:
  mysql-connector-cpp-1.1.0-cmake-paths-fix.patch
  mysql-connector-cpp-1.1.0-gcc44.patch
- Refresh patch:
  mysql-connector-cpp-1.1.0-disable_tests_and_examples.patch
- Add patch to build with mariadb:
  mariadb_api.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1496232000">- Update to version 1.1.8:
  * See the news files on
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/</changelog>
  <changelog author="kstreitova@suse.com" date="1504612800">- Update to version 1.1.9:
  * release notes:
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/news-1-1-9.html
- Remove installing of ANNOUNCEMENT and CHANGES files that are no
  longer present
- Add "Requires: libboost_headers-devel" for libmysqlcppconn-devel
  subpackage ("Requires: boost-devel" for the older distros that
  don't have libboost_headers-devel available yet) [bsc#838038]</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- add mysql-connector-cpp-1.1.9-libmysql_dynamic_proxy_typos.patch
  to fix build by fixing copypaste errors in
  libmysql_dynamic_proxy.cpp file [bsc#1067883]
- remove mariadb_api.patch that it's no longer needed because:
  * our current client library already provides mysql_get_option()
  * using MARIADB_BASE_VERSION is no longer working as intended as
    it's not defined in mariadb client library provided by
    mariadb-connector-c
  * hunk for stmt_free_result() was moved to
    mysql-connector-cpp-1.1.9-libmysql_dynamic_proxy_typos.patch</changelog>
  <changelog author="vcizek@suse.com" date="1568289600">- Add missing zlib build dependency, which used to be pulled in
  by libopenssl-devel. The package fails to build since the openssl
  upgrade to 1.1.1 (bsc#1149792)</changelog>
</package>
<package pkgid="a3eb097ebac83671d471d8052b70ee7c76ae0845377c205987d8b8f8234922d4" name="libmysqlcppconn7" arch="x86_64">
  <version epoch="0" ver="1.1.9" rel="150000.4.5.1"/>
  <changelog author="mhrusecky@suse.cz" date="1366200000">- Compatibility Obsoletes/Provides</changelog>
  <changelog author="mhrusecky@suse.cz" date="1366372800">- Do not use macro for make install as it doesn't work on SLE</changelog>
  <changelog author="cobexer@gmail.com" date="1406376000">- disable gcov coverage recording
  Gcov is a development tool, it slows down execution and creates
  coverage data that is not useful to users of this library.</changelog>
  <changelog author="tchvatal@suse.com" date="1409313600">- Use cmake macros for building properly.</changelog>
  <changelog author="tchvatal@suse.com" date="1439380800">- Version bump to 1.1.6:
  * See the news files on
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/
- Update soname to libmyslqcppcon7
- Remove needlessly long description
- Drop unneeded/merged patches:
  mysql-connector-cpp-1.1.0-cmake-paths-fix.patch
  mysql-connector-cpp-1.1.0-gcc44.patch
- Refresh patch:
  mysql-connector-cpp-1.1.0-disable_tests_and_examples.patch
- Add patch to build with mariadb:
  mariadb_api.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1496232000">- Update to version 1.1.8:
  * See the news files on
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/</changelog>
  <changelog author="kstreitova@suse.com" date="1504612800">- Update to version 1.1.9:
  * release notes:
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/news-1-1-9.html
- Remove installing of ANNOUNCEMENT and CHANGES files that are no
  longer present
- Add "Requires: libboost_headers-devel" for libmysqlcppconn-devel
  subpackage ("Requires: boost-devel" for the older distros that
  don't have libboost_headers-devel available yet) [bsc#838038]</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- add mysql-connector-cpp-1.1.9-libmysql_dynamic_proxy_typos.patch
  to fix build by fixing copypaste errors in
  libmysql_dynamic_proxy.cpp file [bsc#1067883]
- remove mariadb_api.patch that it's no longer needed because:
  * our current client library already provides mysql_get_option()
  * using MARIADB_BASE_VERSION is no longer working as intended as
    it's not defined in mariadb client library provided by
    mariadb-connector-c
  * hunk for stmt_free_result() was moved to
    mysql-connector-cpp-1.1.9-libmysql_dynamic_proxy_typos.patch</changelog>
  <changelog author="vcizek@suse.com" date="1568289600">- Add missing zlib build dependency, which used to be pulled in
  by libopenssl-devel. The package fails to build since the openssl
  upgrade to 1.1.1 (bsc#1149792)</changelog>
</package>
<package pkgid="dc402b00dc2a5a19f9e7a09c2cb7f15af84a02c2347d2211b3e727aaff951390" name="libndr0-32bit" arch="x86_64">
  <version epoch="0" ver="4.11.14+git.322.4d2b83a55cc" rel="150200.4.38.2"/>
  <changelog author="scabrero@suse.de" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="dmulder@suse.com" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="scabrero@suse.de" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="scabrero@suse.de" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="nopower@suse.com" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="dmulder@suse.com" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="scabrero@suse.de" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="nopower@suse.com" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="nopower@suse.com" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="nopower@suse.com" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="dmulder@suse.com" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="nopower@suse.com" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
  <changelog author="scabrero@suse.de" date="1619697600">- Add msDS-AdditionalDnsHostName to the keytab; (bso#14396);
  (bsc#1185420);
- Add net-ads-join dnshostname option; (bso#14396); (bsc#1185420);
- Fix adding msDS-AdditionalDnsHostName to keytab with Windows DC;
  (bso#14406); (bsc#1185420);</changelog>
  <changelog author="scabrero@suse.de" date="1629892800">- Fix wrong kvno exported to keytab after net ads changetrustpw due
  to replication delay; (bsc#1188727);</changelog>
  <changelog author="nopower@suse.com" date="1635854400">- CVE-2016-2124: SMB1 client connections can be downgraded to
  plaintext authentication (bsc#1014440); (bso#12444);
- CVE-2020-25717: A user in an AD Domain could become root on
  domain members; (bsc#1192284); (bso#14556);
- CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability;
  (bsc#1192214); (bso#14875);</changelog>
  <changelog author="nopower@suse.com" date="1637236800">- The username map [script] advice from CVE-2020-25717 advisory
  note has undesired side effects for the local nt token. Fallback
  to a SID/UID based mapping if the name based lookup fails;
  (bsc#1192849); (bso#14901).</changelog>
  <changelog author="nopower@suse.com" date="1642766400">- CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit
  module; (bsc#1194859); (bso#14914).</changelog>
  <changelog author="scabrero@suse.de" date="1646395200">- Adjust systemd tmpfiles.d configuration, use /run/samba instead of
  /var/run/samba; (bsc#1134046);</changelog>
</package>
<package pkgid="a5d7db4f86d98101ea54178dff74503c8d362678fecce968ce503130d20e1553" name="libndr0" arch="aarch64">
  <version epoch="0" ver="4.11.14+git.322.4d2b83a55cc" rel="150200.4.38.2"/>
  <changelog author="scabrero@suse.de" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="dmulder@suse.com" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="scabrero@suse.de" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="scabrero@suse.de" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="nopower@suse.com" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="dmulder@suse.com" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="scabrero@suse.de" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="nopower@suse.com" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="nopower@suse.com" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="nopower@suse.com" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="dmulder@suse.com" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="nopower@suse.com" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
  <changelog author="scabrero@suse.de" date="1619697600">- Add msDS-AdditionalDnsHostName to the keytab; (bso#14396);
  (bsc#1185420);
- Add net-ads-join dnshostname option; (bso#14396); (bsc#1185420);
- Fix adding msDS-AdditionalDnsHostName to keytab with Windows DC;
  (bso#14406); (bsc#1185420);</changelog>
  <changelog author="scabrero@suse.de" date="1629892800">- Fix wrong kvno exported to keytab after net ads changetrustpw due
  to replication delay; (bsc#1188727);</changelog>
  <changelog author="nopower@suse.com" date="1635854400">- CVE-2016-2124: SMB1 client connections can be downgraded to
  plaintext authentication (bsc#1014440); (bso#12444);
- CVE-2020-25717: A user in an AD Domain could become root on
  domain members; (bsc#1192284); (bso#14556);
- CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability;
  (bsc#1192214); (bso#14875);</changelog>
  <changelog author="nopower@suse.com" date="1637236800">- The username map [script] advice from CVE-2020-25717 advisory
  note has undesired side effects for the local nt token. Fallback
  to a SID/UID based mapping if the name based lookup fails;
  (bsc#1192849); (bso#14901).</changelog>
  <changelog author="nopower@suse.com" date="1642766400">- CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit
  module; (bsc#1194859); (bso#14914).</changelog>
  <changelog author="scabrero@suse.de" date="1646395200">- Adjust systemd tmpfiles.d configuration, use /run/samba instead of
  /var/run/samba; (bsc#1134046);</changelog>
</package>
<package pkgid="45aa6030d6b36dafff8bdf13323dbddb11d696197f2a3bbf27d5311677933c21" name="libndr0" arch="ppc64le">
  <version epoch="0" ver="4.11.14+git.322.4d2b83a55cc" rel="150200.4.38.2"/>
  <changelog author="scabrero@suse.de" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="dmulder@suse.com" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="scabrero@suse.de" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="scabrero@suse.de" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="nopower@suse.com" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="dmulder@suse.com" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="scabrero@suse.de" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="nopower@suse.com" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="nopower@suse.com" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="nopower@suse.com" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="dmulder@suse.com" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="nopower@suse.com" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
  <changelog author="scabrero@suse.de" date="1619697600">- Add msDS-AdditionalDnsHostName to the keytab; (bso#14396);
  (bsc#1185420);
- Add net-ads-join dnshostname option; (bso#14396); (bsc#1185420);
- Fix adding msDS-AdditionalDnsHostName to keytab with Windows DC;
  (bso#14406); (bsc#1185420);</changelog>
  <changelog author="scabrero@suse.de" date="1629892800">- Fix wrong kvno exported to keytab after net ads changetrustpw due
  to replication delay; (bsc#1188727);</changelog>
  <changelog author="nopower@suse.com" date="1635854400">- CVE-2016-2124: SMB1 client connections can be downgraded to
  plaintext authentication (bsc#1014440); (bso#12444);
- CVE-2020-25717: A user in an AD Domain could become root on
  domain members; (bsc#1192284); (bso#14556);
- CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability;
  (bsc#1192214); (bso#14875);</changelog>
  <changelog author="nopower@suse.com" date="1637236800">- The username map [script] advice from CVE-2020-25717 advisory
  note has undesired side effects for the local nt token. Fallback
  to a SID/UID based mapping if the name based lookup fails;
  (bsc#1192849); (bso#14901).</changelog>
  <changelog author="nopower@suse.com" date="1642766400">- CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit
  module; (bsc#1194859); (bso#14914).</changelog>
  <changelog author="scabrero@suse.de" date="1646395200">- Adjust systemd tmpfiles.d configuration, use /run/samba instead of
  /var/run/samba; (bsc#1134046);</changelog>
</package>
<package pkgid="9aa6fc49233f58606ed183aec8dc7399c1572c75f8610bb7017de11babf9d64e" name="libndr0" arch="s390x">
  <version epoch="0" ver="4.11.14+git.322.4d2b83a55cc" rel="150200.4.38.2"/>
  <changelog author="scabrero@suse.de" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="dmulder@suse.com" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="scabrero@suse.de" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="scabrero@suse.de" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="nopower@suse.com" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="dmulder@suse.com" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="scabrero@suse.de" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="nopower@suse.com" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="nopower@suse.com" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="nopower@suse.com" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="dmulder@suse.com" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="nopower@suse.com" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
  <changelog author="scabrero@suse.de" date="1619697600">- Add msDS-AdditionalDnsHostName to the keytab; (bso#14396);
  (bsc#1185420);
- Add net-ads-join dnshostname option; (bso#14396); (bsc#1185420);
- Fix adding msDS-AdditionalDnsHostName to keytab with Windows DC;
  (bso#14406); (bsc#1185420);</changelog>
  <changelog author="scabrero@suse.de" date="1629892800">- Fix wrong kvno exported to keytab after net ads changetrustpw due
  to replication delay; (bsc#1188727);</changelog>
  <changelog author="nopower@suse.com" date="1635854400">- CVE-2016-2124: SMB1 client connections can be downgraded to
  plaintext authentication (bsc#1014440); (bso#12444);
- CVE-2020-25717: A user in an AD Domain could become root on
  domain members; (bsc#1192284); (bso#14556);
- CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability;
  (bsc#1192214); (bso#14875);</changelog>
  <changelog author="nopower@suse.com" date="1637236800">- The username map [script] advice from CVE-2020-25717 advisory
  note has undesired side effects for the local nt token. Fallback
  to a SID/UID based mapping if the name based lookup fails;
  (bsc#1192849); (bso#14901).</changelog>
  <changelog author="nopower@suse.com" date="1642766400">- CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit
  module; (bsc#1194859); (bso#14914).</changelog>
  <changelog author="scabrero@suse.de" date="1646395200">- Adjust systemd tmpfiles.d configuration, use /run/samba instead of
  /var/run/samba; (bsc#1134046);</changelog>
</package>
<package pkgid="8fc4ca1cb19ad5def385686548a218dfc1fe11ec42c0789889b345b9300724fc" name="libndr0" arch="x86_64">
  <version epoch="0" ver="4.11.14+git.322.4d2b83a55cc" rel="150200.4.38.2"/>
  <changelog author="scabrero@suse.de" date="1588593600">- Require libldb2 &gt;= 2.0.10 after security release.</changelog>
  <changelog author="dmulder@suse.com" date="1589457600">- Fix samba_winbind package is installing python3-base without
  python3 package; (bsc#1169521);</changelog>
  <changelog author="scabrero@suse.de" date="1589457601">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="scabrero@suse.de" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="nopower@suse.com" date="1593691200">- Update to samba 4.11.11
  + CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
    and VLV combined; (bso#14364); (bsc#1173159]
  + CVE-2020-10745: invalid DNS or NBT queries containing dots use
    several seconds of CPU each; (bso#14378); (bsc#1173160).
  + CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP
    server with paged_result or VLV; (bso#14402); (bsc#1173161)
  + CVE-2020-14303: Endless loop from empty UDP packet sent to
    AD DC nbt_server; (bso#14417); (bsc#1173359).
- Update to samba 4.11.10
  + Fix segfault when using SMBC_opendir_ctx() routine for share
    folder that contains incorrect symbols in any file name;
    (bso#14374).
  + vfs_shadow_copy2 doesn't fail case looking in
    snapdirseverywhere mode; (bso#14350)
  + ldb_ldap: Fix off-by-one increment in lldb_add_msg_attr;
    (bso#14413).
  + Malicous SMB1 server can crash libsmbclient; (bso#14366)
  + winbindd: Fix a use-after-free when winbind clients exit;
    (bso#14382)
  + ldb: Bump version to 2.0.11, LMDB databases can grow without
    bounds. (bso#14330)
- Update to samba 4.11.9
  + nmblib: Avoid undefined behaviour in handle_name_ptrs();
    (bso#14242).
  + 'samba-tool group' commands do not handle group names with
    special chars correctly; (bso#14296).
  + smbd: avoid calling vfs_file_id_from_sbuf() if statinfo
    is not valid; (bso#14237).
  + Missing check for DMAPI offline status in async DOS
    attributes; (bso#14293).
  + smbd: Ignore set NTACL requests which contain
    S-1-5-88 NFS ACEs; (bso#14307).
  + vfs_recycle: Prevent flooding the log if we're called on
    non-existant paths; (bso#14316)
  + smbd mistakenly updates a file's write-time on close;
    (bso#14320).
  + RPC handles cannot be differentiated in source3 RPC server;
    (bso#14359).
  + librpc: Fix IDL for svcctl_ChangeServiceConfigW; (bso#14313).
  + nsswitch: Fix use-after-free causing segfault in
    _pam_delete_cred; (bso#14327).
  + Fix fruit:time machine max size on arm; (bso#13622)
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294).
  + ctdb: Fix a memleak; (bso#14348).
  + libsmb: Don't try to find posix stat info in SMBC_getatr().
  + ctdb-tcp: Move free of inbound queue to TCP restart;
    (bso#14295); (bsc#1162680).
  + s3/librpc/crypto: Fix double free with unresolved
    credential cache; (bso#14344); (bsc#1169095)
  + s3:libads: Fix ads_get_upn(); (bso#14336).
  + CTDB recovery corner cases can cause record resurrection
    and node banning; (bso#14294)
  + Starting ctdb node that was powered off hard before
    results in recovery loop; (bso#14295); (bsc#1162680).
  + ctdb-recoverd: Avoid dereferencing NULL rec-&gt;nodemap;
    (bso#14324)
- Update to samba 4.11.8
  + CVE-2020-10700: Use-after-free in Samba AD DC LDAP
    Server with ASQ; (bso#14331); (bsc#1169850);
  + CVE-2020-10704: LDAP Denial of Service (stack overflow)
    in Samba AD DC; (bso#14334); (bsc#1169851);
- Update to samba 4.11.7
  + s3: lib: nmblib. Clean up and harden nmb packet
    processing; (bso#14239).
  + s3: VFS: full_audit. Use system session_info if called
    from a temporary share definition; (bso#14283)
  + dsdb: Correctly handle memory in objectclass_attrs;
    (bso#14258).
  + ldb: version 2.0.9, Samba 4.11 and later give incorrect
    results for SCOPE_ONE searches; (bso#14270)
  + auth: Fix CIDs 1458418 and 1458420 Null pointer
    dereferences; (bso#14247).
  + smbd: Handle EINTR from open(2) properly; (bso#14285)
  + winbind member (source3) fails local SAM auth with empty
    domain name; (bso#14247)
  + winbindd: Handling missing idmap in getgrgid(); (bso#14265).
  + lib:util: Log mkdir error on correct debug levels;
    (bso#14253).
  + wafsamba: Do not use 'rU' as the 'U' is deprecated in
    Python 3.9; (bso#14266).
  + ctdb-tcp: Make error handling for outbound connection
    consistent; (bso#14274).
- Update to samba 4.11.6
  + pygpo: Use correct method flags; (bso#14209).
  + vfs_ceph_snapshots: Fix root relative path handling;
    (bso#14216); (bsc#1141320).
  + Avoiding bad call flags with python 3.8, using METH_NOARGS
    instead of zero; (bso#14209).
  + source4/utils/oLschema2ldif: Include stdint.h before
    cmocka.h; (bso#14218).
  + docs-xml/winbindnssinfo: Clarify interaction with
    idmap_ad etc; (bso#14122).
  + smbd: Fix the build with clang; (bso#14251).
  + upgradedns: Ensure lmdb lock files linked; (bso#14199).
  + s3: VFS: glusterfs: Reset nlinks for symlink entries during
    readdir; (bso#14182).
  + smbc_stat() doesn't return the correct st_mode and also
    the uid/gid is not filled (SMBv1) file; (bso#14101).
  + librpc: Fix string length checking in
    ndr_pull_charset_to_null(); (bso#14219).
  + ctdb-scripts: Strip square brackets when gathering
    connection info; (bso#14227).</changelog>
  <changelog author="dmulder@suse.com" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="scabrero@suse.de" date="1600430400">- Update to samba 4.11.13
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Protect
    netr_ServerPasswordSet2 against unencrypted passwords; (bsc#1176579);
    (bso#14497);
  + CVE-2020-1472(ZeroLogon): s3:rpc_server/netlogon: Support
    "server require schannel:WORKSTATION$ = no" about unsecure configurations;
    (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): s4 torture rpc: repeated bytes in client
    challenge; (bsc#1176579); (bso#14497);
  + CVE-2020-1472(ZeroLogon): libcli/auth: Reject weak client challenges in
    netlogon_creds_server_init() "server require schannel:WORKSTATION$ = no";
    (bsc#1176579); (bso#14497);
- Update to samba 4.11.12
  + s3: libsmb: Fix SMB2 client rename bug to a Windows server; (bso#14403);
  + dsdb: Allow "password hash userPassword schemes = CryptSHA256" to work
    on RHEL7; (bso#14424);
  + dbcheck: Allow a dangling forward link outside our known NCs; (bso#14450);
  + lib/debug: Set the correct default backend loglevel to MAX_DEBUG_LEVEL;
    (bso#14426);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + lib/util: do not install "test_util_paths"; (bso#14370);
  + lib:util: Fix smbclient -l basename dir; (bso#14345);
  + s3:smbd: PANIC: assert failed in get_lease_type(); (bso#14428);
  + util: Allow symlinks in directory_create_or_exist; (bso#14166);
  + docs: Fix documentation for require_membership_of of pam_winbind;
    (bso#14358);
  + s3:winbind:idmap_ad: Make failure to get attrnames for schema mode fatal;
    (bso#14425);</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);
- Update to samba 4.11.14
  + lib/util: Do not install /usr/bin/test_util; (bso#14166);
  + smbd: don't log success as error; (bso#14490);
  + idmap_ad does not deal properly with a RFC4511 section 4.4.1 response;
    (bso#14465);
  + winbind: Fix a memleak; (bso#14388);
  + idmap_ad: Pass tldap debug messages on to DEBUG(); (bso#14465);
  + lib/replace: Move lib/replace/closefrom.c from ROKEN_HOSTCC_SOURCE to
    REPLACE_HOSTCC_SOURCE; (bso#14482);
  + ctdb disable/enable can fail due to race condition; (bso#14466);</changelog>
  <changelog author="nopower@suse.com" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="nopower@suse.com" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="nopower@suse.com" date="1615896000">- CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
- CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="dmulder@suse.com" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="nopower@suse.com" date="1618401600">-  CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bnc#14571); (bsc#1184677).</changelog>
  <changelog author="scabrero@suse.de" date="1619697600">- Add msDS-AdditionalDnsHostName to the keytab; (bso#14396);
  (bsc#1185420);
- Add net-ads-join dnshostname option; (bso#14396); (bsc#1185420);
- Fix adding msDS-AdditionalDnsHostName to keytab with Windows DC;
  (bso#14406); (bsc#1185420);</changelog>
  <changelog author="scabrero@suse.de" date="1629892800">- Fix wrong kvno exported to keytab after net ads changetrustpw due
  to replication delay; (bsc#1188727);</changelog>
  <changelog author="nopower@suse.com" date="1635854400">- CVE-2016-2124: SMB1 client connections can be downgraded to
  plaintext authentication (bsc#1014440); (bso#12444);
- CVE-2020-25717: A user in an AD Domain could become root on
  domain members; (bsc#1192284); (bso#14556);
- CVE-2021-23192: Subsequent DCE/RPC fragment injection vulnerability;
  (bsc#1192214); (bso#14875);</changelog>
  <changelog author="nopower@suse.com" date="1637236800">- The username map [script] advice from CVE-2020-25717 advisory
  note has undesired side effects for the local nt token. Fallback
  to a SID/UID based mapping if the name based lookup fails;
  (bsc#1192849); (bso#14901).</changelog>
  <changelog author="nopower@suse.com" date="1642766400">- CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit
  module; (bsc#1194859); (bso#14914).</changelog>
  <changelog author="scabrero@suse.de" date="1646395200">- Adjust systemd tmpfiles.d configuration, use /run/samba instead of
  /var/run/samba; (bsc#1134046);</changelog>
</package>
<package pkgid="264291a46d7d133c230f62883cab520d31fd2f34c828582970b9a4003f497ee3" name="libnftables1" arch="aarch64">
  <version epoch="0" ver="0.9.8" rel="150300.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1464868800">- Update to new upstream release 0.6
  * Rules may be replaced now
  * Flow table support (requires Linux &gt;= 4.3)
  * Support for tracing
  * Ratelimiting now supports units like bytes/second.
  * Matchinv VLAN IDs, DSCP/ECN, ICMP RtAdv &amp; RtSol</changelog>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
</package>
<package pkgid="036c8f37efc5880aaa6a583e29cce64dd9a651bab38b0fda04db17052b33225e" name="libnftables1" arch="ppc64le">
  <version epoch="0" ver="0.9.8" rel="150300.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1464868800">- Update to new upstream release 0.6
  * Rules may be replaced now
  * Flow table support (requires Linux &gt;= 4.3)
  * Support for tracing
  * Ratelimiting now supports units like bytes/second.
  * Matchinv VLAN IDs, DSCP/ECN, ICMP RtAdv &amp; RtSol</changelog>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
</package>
<package pkgid="28003e95499e71ccd2595e8089e5b2620fc0ba7700a23711dcfbc23f9dd94ffc" name="libnftables1" arch="s390x">
  <version epoch="0" ver="0.9.8" rel="150300.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1464868800">- Update to new upstream release 0.6
  * Rules may be replaced now
  * Flow table support (requires Linux &gt;= 4.3)
  * Support for tracing
  * Ratelimiting now supports units like bytes/second.
  * Matchinv VLAN IDs, DSCP/ECN, ICMP RtAdv &amp; RtSol</changelog>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
</package>
<package pkgid="9a27767783d2a86cc05930c3fb56bdefb18300962a22e1cfba6c75b55848761d" name="libnftables1" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150300.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1464868800">- Update to new upstream release 0.6
  * Rules may be replaced now
  * Flow table support (requires Linux &gt;= 4.3)
  * Support for tracing
  * Ratelimiting now supports units like bytes/second.
  * Matchinv VLAN IDs, DSCP/ECN, ICMP RtAdv &amp; RtSol</changelog>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
</package>
<package pkgid="44201e949855a9e0b112f7f46086de31fdab5d9b573b3358d94b5c88db94ca0a" name="libnss_nis" arch="src">
  <version epoch="0" ver="3.0" rel="150000.3.3.1"/>
  <changelog author="kukuk@suse.com" date="1435320000">- Initial version</changelog>
  <changelog author="kukuk@suse.de" date="1455624000">- Update to version 1.1
  - make more glibc independent</changelog>
  <changelog author="kukuk@suse.de" date="1456920000">- Update to version 1.1.1
  - add check for unresolved symbols</changelog>
  <changelog author="kukuk@suse.de" date="1458043200">- Add libtirpc-devel to BuildRequires</changelog>
  <changelog author="kukuk@suse.de" date="1458648000">- Update to version 1.2
  - use additional tirpc header files</changelog>
  <changelog author="kukuk@suse.de" date="1487851200">- Update to version 1.3
  - fix compiler warnings</changelog>
  <changelog author="kukuk@suse.de" date="1504180800">- Add split provides</changelog>
  <changelog author="kukuk@suse.de" date="1505476800">- Filter GLIBC_PRIVATE symbols</changelog>
  <changelog author="kukuk@suse.de" date="1516881600">- Update to version 3.0
  - get ride of GLIBC_PRIVATE symbols</changelog>
  <changelog author="kukuk@suse.com" date="1519387200">- Use %license [bsc#1082318]</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197768] - FTBFS: libnss_nis won't compile on SP4
- added patches
  https://github.com/thkukuk/libnss_nis/commit/e9f0f4286d5a923eca1a9c84ff125268d144822e
  + libnss_nis-glibc-2.30.patch</changelog>
</package>
<package pkgid="a07f93675ae697f2b53580c048d3bc7f7c9a3f6b3743e087de9b8faff33a4417" name="libnss_nis2" arch="aarch64">
  <version epoch="0" ver="3.0" rel="150000.3.3.1"/>
  <changelog author="kukuk@suse.com" date="1435320000">- Initial version</changelog>
  <changelog author="kukuk@suse.de" date="1455624000">- Update to version 1.1
  - make more glibc independent</changelog>
  <changelog author="kukuk@suse.de" date="1456920000">- Update to version 1.1.1
  - add check for unresolved symbols</changelog>
  <changelog author="kukuk@suse.de" date="1458043200">- Add libtirpc-devel to BuildRequires</changelog>
  <changelog author="kukuk@suse.de" date="1458648000">- Update to version 1.2
  - use additional tirpc header files</changelog>
  <changelog author="kukuk@suse.de" date="1487851200">- Update to version 1.3
  - fix compiler warnings</changelog>
  <changelog author="kukuk@suse.de" date="1504180800">- Add split provides</changelog>
  <changelog author="kukuk@suse.de" date="1505476800">- Filter GLIBC_PRIVATE symbols</changelog>
  <changelog author="kukuk@suse.de" date="1516881600">- Update to version 3.0
  - get ride of GLIBC_PRIVATE symbols</changelog>
  <changelog author="kukuk@suse.com" date="1519387200">- Use %license [bsc#1082318]</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197768] - FTBFS: libnss_nis won't compile on SP4
- added patches
  https://github.com/thkukuk/libnss_nis/commit/e9f0f4286d5a923eca1a9c84ff125268d144822e
  + libnss_nis-glibc-2.30.patch</changelog>
</package>
<package pkgid="ce54ebf1e7d14604302fbc3d10f6906dbdbd1c100dfe118c04ce08c5edaaa5cf" name="libnss_nis2" arch="ppc64le">
  <version epoch="0" ver="3.0" rel="150000.3.3.1"/>
  <changelog author="kukuk@suse.com" date="1435320000">- Initial version</changelog>
  <changelog author="kukuk@suse.de" date="1455624000">- Update to version 1.1
  - make more glibc independent</changelog>
  <changelog author="kukuk@suse.de" date="1456920000">- Update to version 1.1.1
  - add check for unresolved symbols</changelog>
  <changelog author="kukuk@suse.de" date="1458043200">- Add libtirpc-devel to BuildRequires</changelog>
  <changelog author="kukuk@suse.de" date="1458648000">- Update to version 1.2
  - use additional tirpc header files</changelog>
  <changelog author="kukuk@suse.de" date="1487851200">- Update to version 1.3
  - fix compiler warnings</changelog>
  <changelog author="kukuk@suse.de" date="1504180800">- Add split provides</changelog>
  <changelog author="kukuk@suse.de" date="1505476800">- Filter GLIBC_PRIVATE symbols</changelog>
  <changelog author="kukuk@suse.de" date="1516881600">- Update to version 3.0
  - get ride of GLIBC_PRIVATE symbols</changelog>
  <changelog author="kukuk@suse.com" date="1519387200">- Use %license [bsc#1082318]</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197768] - FTBFS: libnss_nis won't compile on SP4
- added patches
  https://github.com/thkukuk/libnss_nis/commit/e9f0f4286d5a923eca1a9c84ff125268d144822e
  + libnss_nis-glibc-2.30.patch</changelog>
</package>
<package pkgid="43cdc9ba389c6b2f235a64f4bb6de6fa9e0239c24983da4f2284764f9460313a" name="libnss_nis2" arch="s390x">
  <version epoch="0" ver="3.0" rel="150000.3.3.1"/>
  <changelog author="kukuk@suse.com" date="1435320000">- Initial version</changelog>
  <changelog author="kukuk@suse.de" date="1455624000">- Update to version 1.1
  - make more glibc independent</changelog>
  <changelog author="kukuk@suse.de" date="1456920000">- Update to version 1.1.1
  - add check for unresolved symbols</changelog>
  <changelog author="kukuk@suse.de" date="1458043200">- Add libtirpc-devel to BuildRequires</changelog>
  <changelog author="kukuk@suse.de" date="1458648000">- Update to version 1.2
  - use additional tirpc header files</changelog>
  <changelog author="kukuk@suse.de" date="1487851200">- Update to version 1.3
  - fix compiler warnings</changelog>
  <changelog author="kukuk@suse.de" date="1504180800">- Add split provides</changelog>
  <changelog author="kukuk@suse.de" date="1505476800">- Filter GLIBC_PRIVATE symbols</changelog>
  <changelog author="kukuk@suse.de" date="1516881600">- Update to version 3.0
  - get ride of GLIBC_PRIVATE symbols</changelog>
  <changelog author="kukuk@suse.com" date="1519387200">- Use %license [bsc#1082318]</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197768] - FTBFS: libnss_nis won't compile on SP4
- added patches
  https://github.com/thkukuk/libnss_nis/commit/e9f0f4286d5a923eca1a9c84ff125268d144822e
  + libnss_nis-glibc-2.30.patch</changelog>
</package>
<package pkgid="c1e912c727695c87a544a3f70fa10a313181adf9c442cad676fca0f7c1aeb96c" name="libnss_nis2" arch="x86_64">
  <version epoch="0" ver="3.0" rel="150000.3.3.1"/>
  <changelog author="kukuk@suse.com" date="1435320000">- Initial version</changelog>
  <changelog author="kukuk@suse.de" date="1455624000">- Update to version 1.1
  - make more glibc independent</changelog>
  <changelog author="kukuk@suse.de" date="1456920000">- Update to version 1.1.1
  - add check for unresolved symbols</changelog>
  <changelog author="kukuk@suse.de" date="1458043200">- Add libtirpc-devel to BuildRequires</changelog>
  <changelog author="kukuk@suse.de" date="1458648000">- Update to version 1.2
  - use additional tirpc header files</changelog>
  <changelog author="kukuk@suse.de" date="1487851200">- Update to version 1.3
  - fix compiler warnings</changelog>
  <changelog author="kukuk@suse.de" date="1504180800">- Add split provides</changelog>
  <changelog author="kukuk@suse.de" date="1505476800">- Filter GLIBC_PRIVATE symbols</changelog>
  <changelog author="kukuk@suse.de" date="1516881600">- Update to version 3.0
  - get ride of GLIBC_PRIVATE symbols</changelog>
  <changelog author="kukuk@suse.com" date="1519387200">- Use %license [bsc#1082318]</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197768] - FTBFS: libnss_nis won't compile on SP4
- added patches
  https://github.com/thkukuk/libnss_nis/commit/e9f0f4286d5a923eca1a9c84ff125268d144822e
  + libnss_nis-glibc-2.30.patch</changelog>
</package>
<package pkgid="98199a86c6a77bc520657405ff3a44bd757d8a245b326437b391e5797e919269" name="libnss_nis2-32bit" arch="x86_64">
  <version epoch="0" ver="3.0" rel="150000.3.3.1"/>
  <changelog author="kukuk@suse.com" date="1435320000">- Initial version</changelog>
  <changelog author="kukuk@suse.de" date="1455624000">- Update to version 1.1
  - make more glibc independent</changelog>
  <changelog author="kukuk@suse.de" date="1456920000">- Update to version 1.1.1
  - add check for unresolved symbols</changelog>
  <changelog author="kukuk@suse.de" date="1458043200">- Add libtirpc-devel to BuildRequires</changelog>
  <changelog author="kukuk@suse.de" date="1458648000">- Update to version 1.2
  - use additional tirpc header files</changelog>
  <changelog author="kukuk@suse.de" date="1487851200">- Update to version 1.3
  - fix compiler warnings</changelog>
  <changelog author="kukuk@suse.de" date="1504180800">- Add split provides</changelog>
  <changelog author="kukuk@suse.de" date="1505476800">- Filter GLIBC_PRIVATE symbols</changelog>
  <changelog author="kukuk@suse.de" date="1516881600">- Update to version 3.0
  - get ride of GLIBC_PRIVATE symbols</changelog>
  <changelog author="kukuk@suse.com" date="1519387200">- Use %license [bsc#1082318]</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197768] - FTBFS: libnss_nis won't compile on SP4
- added patches
  https://github.com/thkukuk/libnss_nis/commit/e9f0f4286d5a923eca1a9c84ff125268d144822e
  + libnss_nis-glibc-2.30.patch</changelog>
</package>
<package pkgid="4cb6f4b7087d4eb341bc7e5de5a365d598cf89aee6e4562412b306f516491683" name="libnss_slurm2" arch="aarch64">
  <version epoch="0" ver="20.11.9" rel="150300.4.6.1"/>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
  <changelog author="eich@suse.com" date="1651838400">- Add 'CommunicationParameters=block_null_hash' to slurm.conf, please
  add this parameter to existing configurations as part of CVE-2022-29500:
  This new option provides additional protection against a potential exploit.
- Update to 20.11.9:
  * burst_buffer - add missing common directory to the Makefile SUBDIRS.
  * sacct - fix truncation when printing jobidraw field.
  * GRES - Fix loading state of jobs using --gpus to request gpus.
  * Fix minor logic error in health check node state output
  * Fix GCC 11.1 compiler warnings.
  * Delay steps when memory already used instead of rejecting step request.
  * Fix memory leak in the slurmdbd when requesting wckeys from all clusters.
  * Fix determining if a reservation is used or not.
  * openapi/v0.0.35 - Honor kill_on_invalid_dependency as job parameter.
  * openapi/v0.0.36 - Honor kill_on_invalid_dependency as job parameter.
  * Fix various issues dealing with updates on magnetic reservations that could
    lead to abort slurmctld.
  * openapi/v0.0.36 - Avoid setting default values of min_cpus, job name, cwd,
    mail_type, and contiguous on job update.
  * openapi/v0.0.36 - Clear user hold on job update if hold=false.
  * Fix slurmctld segfault due to a bit_test() call with a MAINT+ANY_NODES
    reservation NULL node_bitmap.
  * Fix slurmctld segfault due to a bit_copy() call with a REPLACE+ANY_NODES
    reservation NULL node_bitmap.
  * Fix error in GPU frequency validation logic.
  * Fix error in pmix logic dealing with the incorrect size of buffer.
  * PMIx v1.1.4 and below are no longer supported.
  * Fix shutdown of slurmdbd plugin to correctly notice when the agent thread
    finishes.
  * Fix slurmctld segfault due to job array  --batch features double free.
  * CVE-2022-29500 - Prevent credential abuse (bsc#1199278).
  * CVE-2022-29501 - Prevent abuse of REQUEST_FORWARD_DATA (bsc#1199279).
- Update to 20.11.8:
  * slurmctld - fix erroneous "StepId=CORRUPT" messages in error logs.
  * Correct the error given when auth plugin fails to pack a credential.
  * Fix unused-variable compiler warning on FreeBSD in fd_resolve_path().
  * acct_gather_filesystem/lustre - only emit collection error once per step.
  * srun - leave SLURM_DIST_UNKNOWN as default for  --interactive.
  * Add GRES environment variables (e.g., CUDA_VISIBLE_DEVICES) into the
    interactive step, the same as is done for the batch step.
  * Fix various potential deadlocks when altering objects in the database
    dealing with every cluster in the database.
  * slurmrestd - handle slurmdbd connection failures without segfaulting.
  * slurmrestd - fix segfault for searches in slurmdb/v0.0.36/jobs.
  * slurmrestd - remove (non-functioning) users query parameter for
    slurmdb/v0.0.36/jobs from openapi.json
  * slurmrestd - fix segfault in slurmrestd db/jobs with numeric queries
  * slurmrestd - add argv handling for job/submit endpoint.
  * srun - fix broken node step allocation in a heterogeneous allocation.
  * Fail step creation if -n is not multiple of  --ntasks-per-gpu.
  * job_container/tmpfs - Fix slowdown on teardown.
  * Fix problem with SlurmctldProlog where requeued jobs would never launch.
  * job_container/tmpfs - Fix issue when restarting slurmd where the namespace
    mount points could disappear.
  * sacct - avoid truncating JobId at 34 characters.
  * scancel - fix segfault when --wckey filtering option is used.
  * select/cons_tres - Fix memory leak.
  * Prevent file descriptor leak in job_container/tmpfs on slurmd restart.
  * slurmrestd/dbv0.0.36 - Fix values dumped in job state/current and
    job step state.
  * slurmrestd/dbv0.0.36 - Correct description for previous state property.
  * perlapi/libslurmdb - expose tres_req_str to job hash.
  * scrontab - close and reopen temporary crontab file to deal with editors
    that do not change the original file, but instead write out then rename
    a new file.
  * sstat - fix linking so that it will work when --without-shared-libslurm
    was used to build Slurm.
  * Clear allocated cpus for running steps in a job before handling requested
    nodes on new step.
  * Don't reject a step if not enough nodes are available. Instead, defer the
    step until enough nodes are available to satisfy the request.
  * Don't reject a step if it requests at least one specific node that is
    already allocated to another step. Instead, defer the step until the
    requested node(s) become available.
  * slurmrestd - add description for slurmdb/job endpoint.
  * Better handling of --mem=0.
  * Ignore DefCpuPerGpu when --cpus-per-task given.
  * sacct - fix segfault when printing StepId (or when using --long).</changelog>
</package>
<package pkgid="bb00562c410575a83f347708dbbadad60563467c2d98519d6c400905252eb105" name="libnss_slurm2" arch="ppc64le">
  <version epoch="0" ver="20.11.9" rel="150300.4.6.1"/>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
  <changelog author="eich@suse.com" date="1651838400">- Add 'CommunicationParameters=block_null_hash' to slurm.conf, please
  add this parameter to existing configurations as part of CVE-2022-29500:
  This new option provides additional protection against a potential exploit.
- Update to 20.11.9:
  * burst_buffer - add missing common directory to the Makefile SUBDIRS.
  * sacct - fix truncation when printing jobidraw field.
  * GRES - Fix loading state of jobs using --gpus to request gpus.
  * Fix minor logic error in health check node state output
  * Fix GCC 11.1 compiler warnings.
  * Delay steps when memory already used instead of rejecting step request.
  * Fix memory leak in the slurmdbd when requesting wckeys from all clusters.
  * Fix determining if a reservation is used or not.
  * openapi/v0.0.35 - Honor kill_on_invalid_dependency as job parameter.
  * openapi/v0.0.36 - Honor kill_on_invalid_dependency as job parameter.
  * Fix various issues dealing with updates on magnetic reservations that could
    lead to abort slurmctld.
  * openapi/v0.0.36 - Avoid setting default values of min_cpus, job name, cwd,
    mail_type, and contiguous on job update.
  * openapi/v0.0.36 - Clear user hold on job update if hold=false.
  * Fix slurmctld segfault due to a bit_test() call with a MAINT+ANY_NODES
    reservation NULL node_bitmap.
  * Fix slurmctld segfault due to a bit_copy() call with a REPLACE+ANY_NODES
    reservation NULL node_bitmap.
  * Fix error in GPU frequency validation logic.
  * Fix error in pmix logic dealing with the incorrect size of buffer.
  * PMIx v1.1.4 and below are no longer supported.
  * Fix shutdown of slurmdbd plugin to correctly notice when the agent thread
    finishes.
  * Fix slurmctld segfault due to job array  --batch features double free.
  * CVE-2022-29500 - Prevent credential abuse (bsc#1199278).
  * CVE-2022-29501 - Prevent abuse of REQUEST_FORWARD_DATA (bsc#1199279).
- Update to 20.11.8:
  * slurmctld - fix erroneous "StepId=CORRUPT" messages in error logs.
  * Correct the error given when auth plugin fails to pack a credential.
  * Fix unused-variable compiler warning on FreeBSD in fd_resolve_path().
  * acct_gather_filesystem/lustre - only emit collection error once per step.
  * srun - leave SLURM_DIST_UNKNOWN as default for  --interactive.
  * Add GRES environment variables (e.g., CUDA_VISIBLE_DEVICES) into the
    interactive step, the same as is done for the batch step.
  * Fix various potential deadlocks when altering objects in the database
    dealing with every cluster in the database.
  * slurmrestd - handle slurmdbd connection failures without segfaulting.
  * slurmrestd - fix segfault for searches in slurmdb/v0.0.36/jobs.
  * slurmrestd - remove (non-functioning) users query parameter for
    slurmdb/v0.0.36/jobs from openapi.json
  * slurmrestd - fix segfault in slurmrestd db/jobs with numeric queries
  * slurmrestd - add argv handling for job/submit endpoint.
  * srun - fix broken node step allocation in a heterogeneous allocation.
  * Fail step creation if -n is not multiple of  --ntasks-per-gpu.
  * job_container/tmpfs - Fix slowdown on teardown.
  * Fix problem with SlurmctldProlog where requeued jobs would never launch.
  * job_container/tmpfs - Fix issue when restarting slurmd where the namespace
    mount points could disappear.
  * sacct - avoid truncating JobId at 34 characters.
  * scancel - fix segfault when --wckey filtering option is used.
  * select/cons_tres - Fix memory leak.
  * Prevent file descriptor leak in job_container/tmpfs on slurmd restart.
  * slurmrestd/dbv0.0.36 - Fix values dumped in job state/current and
    job step state.
  * slurmrestd/dbv0.0.36 - Correct description for previous state property.
  * perlapi/libslurmdb - expose tres_req_str to job hash.
  * scrontab - close and reopen temporary crontab file to deal with editors
    that do not change the original file, but instead write out then rename
    a new file.
  * sstat - fix linking so that it will work when --without-shared-libslurm
    was used to build Slurm.
  * Clear allocated cpus for running steps in a job before handling requested
    nodes on new step.
  * Don't reject a step if not enough nodes are available. Instead, defer the
    step until enough nodes are available to satisfy the request.
  * Don't reject a step if it requests at least one specific node that is
    already allocated to another step. Instead, defer the step until the
    requested node(s) become available.
  * slurmrestd - add description for slurmdb/job endpoint.
  * Better handling of --mem=0.
  * Ignore DefCpuPerGpu when --cpus-per-task given.
  * sacct - fix segfault when printing StepId (or when using --long).</changelog>
</package>
<package pkgid="4ee0cfbb26fc7e8a40404ec56e19fd3adfd8ebed0556496f9f5675862ddc524d" name="libnss_slurm2" arch="s390x">
  <version epoch="0" ver="20.11.9" rel="150300.4.6.1"/>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
  <changelog author="eich@suse.com" date="1651838400">- Add 'CommunicationParameters=block_null_hash' to slurm.conf, please
  add this parameter to existing configurations as part of CVE-2022-29500:
  This new option provides additional protection against a potential exploit.
- Update to 20.11.9:
  * burst_buffer - add missing common directory to the Makefile SUBDIRS.
  * sacct - fix truncation when printing jobidraw field.
  * GRES - Fix loading state of jobs using --gpus to request gpus.
  * Fix minor logic error in health check node state output
  * Fix GCC 11.1 compiler warnings.
  * Delay steps when memory already used instead of rejecting step request.
  * Fix memory leak in the slurmdbd when requesting wckeys from all clusters.
  * Fix determining if a reservation is used or not.
  * openapi/v0.0.35 - Honor kill_on_invalid_dependency as job parameter.
  * openapi/v0.0.36 - Honor kill_on_invalid_dependency as job parameter.
  * Fix various issues dealing with updates on magnetic reservations that could
    lead to abort slurmctld.
  * openapi/v0.0.36 - Avoid setting default values of min_cpus, job name, cwd,
    mail_type, and contiguous on job update.
  * openapi/v0.0.36 - Clear user hold on job update if hold=false.
  * Fix slurmctld segfault due to a bit_test() call with a MAINT+ANY_NODES
    reservation NULL node_bitmap.
  * Fix slurmctld segfault due to a bit_copy() call with a REPLACE+ANY_NODES
    reservation NULL node_bitmap.
  * Fix error in GPU frequency validation logic.
  * Fix error in pmix logic dealing with the incorrect size of buffer.
  * PMIx v1.1.4 and below are no longer supported.
  * Fix shutdown of slurmdbd plugin to correctly notice when the agent thread
    finishes.
  * Fix slurmctld segfault due to job array  --batch features double free.
  * CVE-2022-29500 - Prevent credential abuse (bsc#1199278).
  * CVE-2022-29501 - Prevent abuse of REQUEST_FORWARD_DATA (bsc#1199279).
- Update to 20.11.8:
  * slurmctld - fix erroneous "StepId=CORRUPT" messages in error logs.
  * Correct the error given when auth plugin fails to pack a credential.
  * Fix unused-variable compiler warning on FreeBSD in fd_resolve_path().
  * acct_gather_filesystem/lustre - only emit collection error once per step.
  * srun - leave SLURM_DIST_UNKNOWN as default for  --interactive.
  * Add GRES environment variables (e.g., CUDA_VISIBLE_DEVICES) into the
    interactive step, the same as is done for the batch step.
  * Fix various potential deadlocks when altering objects in the database
    dealing with every cluster in the database.
  * slurmrestd - handle slurmdbd connection failures without segfaulting.
  * slurmrestd - fix segfault for searches in slurmdb/v0.0.36/jobs.
  * slurmrestd - remove (non-functioning) users query parameter for
    slurmdb/v0.0.36/jobs from openapi.json
  * slurmrestd - fix segfault in slurmrestd db/jobs with numeric queries
  * slurmrestd - add argv handling for job/submit endpoint.
  * srun - fix broken node step allocation in a heterogeneous allocation.
  * Fail step creation if -n is not multiple of  --ntasks-per-gpu.
  * job_container/tmpfs - Fix slowdown on teardown.
  * Fix problem with SlurmctldProlog where requeued jobs would never launch.
  * job_container/tmpfs - Fix issue when restarting slurmd where the namespace
    mount points could disappear.
  * sacct - avoid truncating JobId at 34 characters.
  * scancel - fix segfault when --wckey filtering option is used.
  * select/cons_tres - Fix memory leak.
  * Prevent file descriptor leak in job_container/tmpfs on slurmd restart.
  * slurmrestd/dbv0.0.36 - Fix values dumped in job state/current and
    job step state.
  * slurmrestd/dbv0.0.36 - Correct description for previous state property.
  * perlapi/libslurmdb - expose tres_req_str to job hash.
  * scrontab - close and reopen temporary crontab file to deal with editors
    that do not change the original file, but instead write out then rename
    a new file.
  * sstat - fix linking so that it will work when --without-shared-libslurm
    was used to build Slurm.
  * Clear allocated cpus for running steps in a job before handling requested
    nodes on new step.
  * Don't reject a step if not enough nodes are available. Instead, defer the
    step until enough nodes are available to satisfy the request.
  * Don't reject a step if it requests at least one specific node that is
    already allocated to another step. Instead, defer the step until the
    requested node(s) become available.
  * slurmrestd - add description for slurmdb/job endpoint.
  * Better handling of --mem=0.
  * Ignore DefCpuPerGpu when --cpus-per-task given.
  * sacct - fix segfault when printing StepId (or when using --long).</changelog>
</package>
<package pkgid="a6b50a4c8271f784bbb22bf0c4710e6e934cd46a250cce72e37908ba1f0b5f3d" name="libnss_slurm2" arch="x86_64">
  <version epoch="0" ver="20.11.9" rel="150300.4.6.1"/>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
  <changelog author="eich@suse.com" date="1651838400">- Add 'CommunicationParameters=block_null_hash' to slurm.conf, please
  add this parameter to existing configurations as part of CVE-2022-29500:
  This new option provides additional protection against a potential exploit.
- Update to 20.11.9:
  * burst_buffer - add missing common directory to the Makefile SUBDIRS.
  * sacct - fix truncation when printing jobidraw field.
  * GRES - Fix loading state of jobs using --gpus to request gpus.
  * Fix minor logic error in health check node state output
  * Fix GCC 11.1 compiler warnings.
  * Delay steps when memory already used instead of rejecting step request.
  * Fix memory leak in the slurmdbd when requesting wckeys from all clusters.
  * Fix determining if a reservation is used or not.
  * openapi/v0.0.35 - Honor kill_on_invalid_dependency as job parameter.
  * openapi/v0.0.36 - Honor kill_on_invalid_dependency as job parameter.
  * Fix various issues dealing with updates on magnetic reservations that could
    lead to abort slurmctld.
  * openapi/v0.0.36 - Avoid setting default values of min_cpus, job name, cwd,
    mail_type, and contiguous on job update.
  * openapi/v0.0.36 - Clear user hold on job update if hold=false.
  * Fix slurmctld segfault due to a bit_test() call with a MAINT+ANY_NODES
    reservation NULL node_bitmap.
  * Fix slurmctld segfault due to a bit_copy() call with a REPLACE+ANY_NODES
    reservation NULL node_bitmap.
  * Fix error in GPU frequency validation logic.
  * Fix error in pmix logic dealing with the incorrect size of buffer.
  * PMIx v1.1.4 and below are no longer supported.
  * Fix shutdown of slurmdbd plugin to correctly notice when the agent thread
    finishes.
  * Fix slurmctld segfault due to job array  --batch features double free.
  * CVE-2022-29500 - Prevent credential abuse (bsc#1199278).
  * CVE-2022-29501 - Prevent abuse of REQUEST_FORWARD_DATA (bsc#1199279).
- Update to 20.11.8:
  * slurmctld - fix erroneous "StepId=CORRUPT" messages in error logs.
  * Correct the error given when auth plugin fails to pack a credential.
  * Fix unused-variable compiler warning on FreeBSD in fd_resolve_path().
  * acct_gather_filesystem/lustre - only emit collection error once per step.
  * srun - leave SLURM_DIST_UNKNOWN as default for  --interactive.
  * Add GRES environment variables (e.g., CUDA_VISIBLE_DEVICES) into the
    interactive step, the same as is done for the batch step.
  * Fix various potential deadlocks when altering objects in the database
    dealing with every cluster in the database.
  * slurmrestd - handle slurmdbd connection failures without segfaulting.
  * slurmrestd - fix segfault for searches in slurmdb/v0.0.36/jobs.
  * slurmrestd - remove (non-functioning) users query parameter for
    slurmdb/v0.0.36/jobs from openapi.json
  * slurmrestd - fix segfault in slurmrestd db/jobs with numeric queries
  * slurmrestd - add argv handling for job/submit endpoint.
  * srun - fix broken node step allocation in a heterogeneous allocation.
  * Fail step creation if -n is not multiple of  --ntasks-per-gpu.
  * job_container/tmpfs - Fix slowdown on teardown.
  * Fix problem with SlurmctldProlog where requeued jobs would never launch.
  * job_container/tmpfs - Fix issue when restarting slurmd where the namespace
    mount points could disappear.
  * sacct - avoid truncating JobId at 34 characters.
  * scancel - fix segfault when --wckey filtering option is used.
  * select/cons_tres - Fix memory leak.
  * Prevent file descriptor leak in job_container/tmpfs on slurmd restart.
  * slurmrestd/dbv0.0.36 - Fix values dumped in job state/current and
    job step state.
  * slurmrestd/dbv0.0.36 - Correct description for previous state property.
  * perlapi/libslurmdb - expose tres_req_str to job hash.
  * scrontab - close and reopen temporary crontab file to deal with editors
    that do not change the original file, but instead write out then rename
    a new file.
  * sstat - fix linking so that it will work when --without-shared-libslurm
    was used to build Slurm.
  * Clear allocated cpus for running steps in a job before handling requested
    nodes on new step.
  * Don't reject a step if not enough nodes are available. Instead, defer the
    step until enough nodes are available to satisfy the request.
  * Don't reject a step if it requests at least one specific node that is
    already allocated to another step. Instead, defer the step until the
    requested node(s) become available.
  * slurmrestd - add description for slurmdb/job endpoint.
  * Better handling of --mem=0.
  * Ignore DefCpuPerGpu when --cpus-per-task given.
  * sacct - fix segfault when printing StepId (or when using --long).</changelog>
</package>
<package pkgid="98f797140cf4a62c5edbee42e943fbd9c5c8076452f493d2d7ded10a253385f1" name="libnss_slurm2_20_11" arch="aarch64">
  <version epoch="0" ver="20.11.9" rel="150200.6.10.1"/>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
  <changelog author="eich@suse.com" date="1651838400">- Add 'CommunicationParameters=block_null_hash' to slurm.conf, please
  add this parameter to existing configurations as part of CVE-2022-29500:
  This new option provides additional protection against a potential exploit.
- Update to 20.11.9:
  * burst_buffer - add missing common directory to the Makefile SUBDIRS.
  * sacct - fix truncation when printing jobidraw field.
  * GRES - Fix loading state of jobs using --gpus to request gpus.
  * Fix minor logic error in health check node state output
  * Fix GCC 11.1 compiler warnings.
  * Delay steps when memory already used instead of rejecting step request.
  * Fix memory leak in the slurmdbd when requesting wckeys from all clusters.
  * Fix determining if a reservation is used or not.
  * openapi/v0.0.35 - Honor kill_on_invalid_dependency as job parameter.
  * openapi/v0.0.36 - Honor kill_on_invalid_dependency as job parameter.
  * Fix various issues dealing with updates on magnetic reservations that could
    lead to abort slurmctld.
  * openapi/v0.0.36 - Avoid setting default values of min_cpus, job name, cwd,
    mail_type, and contiguous on job update.
  * openapi/v0.0.36 - Clear user hold on job update if hold=false.
  * Fix slurmctld segfault due to a bit_test() call with a MAINT+ANY_NODES
    reservation NULL node_bitmap.
  * Fix slurmctld segfault due to a bit_copy() call with a REPLACE+ANY_NODES
    reservation NULL node_bitmap.
  * Fix error in GPU frequency validation logic.
  * Fix error in pmix logic dealing with the incorrect size of buffer.
  * PMIx v1.1.4 and below are no longer supported.
  * Fix shutdown of slurmdbd plugin to correctly notice when the agent thread
    finishes.
  * Fix slurmctld segfault due to job array  --batch features double free.
  * CVE-2022-29500 - Prevent credential abuse (bsc#1199278).
  * CVE-2022-29501 - Prevent abuse of REQUEST_FORWARD_DATA (bsc#1199279).
- Update to 20.11.8:
  * slurmctld - fix erroneous "StepId=CORRUPT" messages in error logs.
  * Correct the error given when auth plugin fails to pack a credential.
  * Fix unused-variable compiler warning on FreeBSD in fd_resolve_path().
  * acct_gather_filesystem/lustre - only emit collection error once per step.
  * srun - leave SLURM_DIST_UNKNOWN as default for  --interactive.
  * Add GRES environment variables (e.g., CUDA_VISIBLE_DEVICES) into the
    interactive step, the same as is done for the batch step.
  * Fix various potential deadlocks when altering objects in the database
    dealing with every cluster in the database.
  * slurmrestd - handle slurmdbd connection failures without segfaulting.
  * slurmrestd - fix segfault for searches in slurmdb/v0.0.36/jobs.
  * slurmrestd - remove (non-functioning) users query parameter for
    slurmdb/v0.0.36/jobs from openapi.json
  * slurmrestd - fix segfault in slurmrestd db/jobs with numeric queries
  * slurmrestd - add argv handling for job/submit endpoint.
  * srun - fix broken node step allocation in a heterogeneous allocation.
  * Fail step creation if -n is not multiple of  --ntasks-per-gpu.
  * job_container/tmpfs - Fix slowdown on teardown.
  * Fix problem with SlurmctldProlog where requeued jobs would never launch.
  * job_container/tmpfs - Fix issue when restarting slurmd where the namespace
    mount points could disappear.
  * sacct - avoid truncating JobId at 34 characters.
  * scancel - fix segfault when --wckey filtering option is used.
  * select/cons_tres - Fix memory leak.
  * Prevent file descriptor leak in job_container/tmpfs on slurmd restart.
  * slurmrestd/dbv0.0.36 - Fix values dumped in job state/current and
    job step state.
  * slurmrestd/dbv0.0.36 - Correct description for previous state property.
  * perlapi/libslurmdb - expose tres_req_str to job hash.
  * scrontab - close and reopen temporary crontab file to deal with editors
    that do not change the original file, but instead write out then rename
    a new file.
  * sstat - fix linking so that it will work when --without-shared-libslurm
    was used to build Slurm.
  * Clear allocated cpus for running steps in a job before handling requested
    nodes on new step.
  * Don't reject a step if not enough nodes are available. Instead, defer the
    step until enough nodes are available to satisfy the request.
  * Don't reject a step if it requests at least one specific node that is
    already allocated to another step. Instead, defer the step until the
    requested node(s) become available.
  * slurmrestd - add description for slurmdb/job endpoint.
  * Better handling of --mem=0.
  * Ignore DefCpuPerGpu when --cpus-per-task given.
  * sacct - fix segfault when printing StepId (or when using --long).</changelog>
</package>
<package pkgid="2e1699a561ecd29474e5f80c0fb0e532fc84d14de51af1c3237dd1760e19081d" name="libnss_slurm2_20_11" arch="ppc64le">
  <version epoch="0" ver="20.11.9" rel="150200.6.10.1"/>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
  <changelog author="eich@suse.com" date="1651838400">- Add 'CommunicationParameters=block_null_hash' to slurm.conf, please
  add this parameter to existing configurations as part of CVE-2022-29500:
  This new option provides additional protection against a potential exploit.
- Update to 20.11.9:
  * burst_buffer - add missing common directory to the Makefile SUBDIRS.
  * sacct - fix truncation when printing jobidraw field.
  * GRES - Fix loading state of jobs using --gpus to request gpus.
  * Fix minor logic error in health check node state output
  * Fix GCC 11.1 compiler warnings.
  * Delay steps when memory already used instead of rejecting step request.
  * Fix memory leak in the slurmdbd when requesting wckeys from all clusters.
  * Fix determining if a reservation is used or not.
  * openapi/v0.0.35 - Honor kill_on_invalid_dependency as job parameter.
  * openapi/v0.0.36 - Honor kill_on_invalid_dependency as job parameter.
  * Fix various issues dealing with updates on magnetic reservations that could
    lead to abort slurmctld.
  * openapi/v0.0.36 - Avoid setting default values of min_cpus, job name, cwd,
    mail_type, and contiguous on job update.
  * openapi/v0.0.36 - Clear user hold on job update if hold=false.
  * Fix slurmctld segfault due to a bit_test() call with a MAINT+ANY_NODES
    reservation NULL node_bitmap.
  * Fix slurmctld segfault due to a bit_copy() call with a REPLACE+ANY_NODES
    reservation NULL node_bitmap.
  * Fix error in GPU frequency validation logic.
  * Fix error in pmix logic dealing with the incorrect size of buffer.
  * PMIx v1.1.4 and below are no longer supported.
  * Fix shutdown of slurmdbd plugin to correctly notice when the agent thread
    finishes.
  * Fix slurmctld segfault due to job array  --batch features double free.
  * CVE-2022-29500 - Prevent credential abuse (bsc#1199278).
  * CVE-2022-29501 - Prevent abuse of REQUEST_FORWARD_DATA (bsc#1199279).
- Update to 20.11.8:
  * slurmctld - fix erroneous "StepId=CORRUPT" messages in error logs.
  * Correct the error given when auth plugin fails to pack a credential.
  * Fix unused-variable compiler warning on FreeBSD in fd_resolve_path().
  * acct_gather_filesystem/lustre - only emit collection error once per step.
  * srun - leave SLURM_DIST_UNKNOWN as default for  --interactive.
  * Add GRES environment variables (e.g., CUDA_VISIBLE_DEVICES) into the
    interactive step, the same as is done for the batch step.
  * Fix various potential deadlocks when altering objects in the database
    dealing with every cluster in the database.
  * slurmrestd - handle slurmdbd connection failures without segfaulting.
  * slurmrestd - fix segfault for searches in slurmdb/v0.0.36/jobs.
  * slurmrestd - remove (non-functioning) users query parameter for
    slurmdb/v0.0.36/jobs from openapi.json
  * slurmrestd - fix segfault in slurmrestd db/jobs with numeric queries
  * slurmrestd - add argv handling for job/submit endpoint.
  * srun - fix broken node step allocation in a heterogeneous allocation.
  * Fail step creation if -n is not multiple of  --ntasks-per-gpu.
  * job_container/tmpfs - Fix slowdown on teardown.
  * Fix problem with SlurmctldProlog where requeued jobs would never launch.
  * job_container/tmpfs - Fix issue when restarting slurmd where the namespace
    mount points could disappear.
  * sacct - avoid truncating JobId at 34 characters.
  * scancel - fix segfault when --wckey filtering option is used.
  * select/cons_tres - Fix memory leak.
  * Prevent file descriptor leak in job_container/tmpfs on slurmd restart.
  * slurmrestd/dbv0.0.36 - Fix values dumped in job state/current and
    job step state.
  * slurmrestd/dbv0.0.36 - Correct description for previous state property.
  * perlapi/libslurmdb - expose tres_req_str to job hash.
  * scrontab - close and reopen temporary crontab file to deal with editors
    that do not change the original file, but instead write out then rename
    a new file.
  * sstat - fix linking so that it will work when --without-shared-libslurm
    was used to build Slurm.
  * Clear allocated cpus for running steps in a job before handling requested
    nodes on new step.
  * Don't reject a step if not enough nodes are available. Instead, defer the
    step until enough nodes are available to satisfy the request.
  * Don't reject a step if it requests at least one specific node that is
    already allocated to another step. Instead, defer the step until the
    requested node(s) become available.
  * slurmrestd - add description for slurmdb/job endpoint.
  * Better handling of --mem=0.
  * Ignore DefCpuPerGpu when --cpus-per-task given.
  * sacct - fix segfault when printing StepId (or when using --long).</changelog>
</package>
<package pkgid="81636ed16d69c72c112525c3d265831b8ac2fbdcb2e5d8891aa149f6cd08f461" name="libnss_slurm2_20_11" arch="s390x">
  <version epoch="0" ver="20.11.9" rel="150200.6.10.1"/>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
  <changelog author="eich@suse.com" date="1651838400">- Add 'CommunicationParameters=block_null_hash' to slurm.conf, please
  add this parameter to existing configurations as part of CVE-2022-29500:
  This new option provides additional protection against a potential exploit.
- Update to 20.11.9:
  * burst_buffer - add missing common directory to the Makefile SUBDIRS.
  * sacct - fix truncation when printing jobidraw field.
  * GRES - Fix loading state of jobs using --gpus to request gpus.
  * Fix minor logic error in health check node state output
  * Fix GCC 11.1 compiler warnings.
  * Delay steps when memory already used instead of rejecting step request.
  * Fix memory leak in the slurmdbd when requesting wckeys from all clusters.
  * Fix determining if a reservation is used or not.
  * openapi/v0.0.35 - Honor kill_on_invalid_dependency as job parameter.
  * openapi/v0.0.36 - Honor kill_on_invalid_dependency as job parameter.
  * Fix various issues dealing with updates on magnetic reservations that could
    lead to abort slurmctld.
  * openapi/v0.0.36 - Avoid setting default values of min_cpus, job name, cwd,
    mail_type, and contiguous on job update.
  * openapi/v0.0.36 - Clear user hold on job update if hold=false.
  * Fix slurmctld segfault due to a bit_test() call with a MAINT+ANY_NODES
    reservation NULL node_bitmap.
  * Fix slurmctld segfault due to a bit_copy() call with a REPLACE+ANY_NODES
    reservation NULL node_bitmap.
  * Fix error in GPU frequency validation logic.
  * Fix error in pmix logic dealing with the incorrect size of buffer.
  * PMIx v1.1.4 and below are no longer supported.
  * Fix shutdown of slurmdbd plugin to correctly notice when the agent thread
    finishes.
  * Fix slurmctld segfault due to job array  --batch features double free.
  * CVE-2022-29500 - Prevent credential abuse (bsc#1199278).
  * CVE-2022-29501 - Prevent abuse of REQUEST_FORWARD_DATA (bsc#1199279).
- Update to 20.11.8:
  * slurmctld - fix erroneous "StepId=CORRUPT" messages in error logs.
  * Correct the error given when auth plugin fails to pack a credential.
  * Fix unused-variable compiler warning on FreeBSD in fd_resolve_path().
  * acct_gather_filesystem/lustre - only emit collection error once per step.
  * srun - leave SLURM_DIST_UNKNOWN as default for  --interactive.
  * Add GRES environment variables (e.g., CUDA_VISIBLE_DEVICES) into the
    interactive step, the same as is done for the batch step.
  * Fix various potential deadlocks when altering objects in the database
    dealing with every cluster in the database.
  * slurmrestd - handle slurmdbd connection failures without segfaulting.
  * slurmrestd - fix segfault for searches in slurmdb/v0.0.36/jobs.
  * slurmrestd - remove (non-functioning) users query parameter for
    slurmdb/v0.0.36/jobs from openapi.json
  * slurmrestd - fix segfault in slurmrestd db/jobs with numeric queries
  * slurmrestd - add argv handling for job/submit endpoint.
  * srun - fix broken node step allocation in a heterogeneous allocation.
  * Fail step creation if -n is not multiple of  --ntasks-per-gpu.
  * job_container/tmpfs - Fix slowdown on teardown.
  * Fix problem with SlurmctldProlog where requeued jobs would never launch.
  * job_container/tmpfs - Fix issue when restarting slurmd where the namespace
    mount points could disappear.
  * sacct - avoid truncating JobId at 34 characters.
  * scancel - fix segfault when --wckey filtering option is used.
  * select/cons_tres - Fix memory leak.
  * Prevent file descriptor leak in job_container/tmpfs on slurmd restart.
  * slurmrestd/dbv0.0.36 - Fix values dumped in job state/current and
    job step state.
  * slurmrestd/dbv0.0.36 - Correct description for previous state property.
  * perlapi/libslurmdb - expose tres_req_str to job hash.
  * scrontab - close and reopen temporary crontab file to deal with editors
    that do not change the original file, but instead write out then rename
    a new file.
  * sstat - fix linking so that it will work when --without-shared-libslurm
    was used to build Slurm.
  * Clear allocated cpus for running steps in a job before handling requested
    nodes on new step.
  * Don't reject a step if not enough nodes are available. Instead, defer the
    step until enough nodes are available to satisfy the request.
  * Don't reject a step if it requests at least one specific node that is
    already allocated to another step. Instead, defer the step until the
    requested node(s) become available.
  * slurmrestd - add description for slurmdb/job endpoint.
  * Better handling of --mem=0.
  * Ignore DefCpuPerGpu when --cpus-per-task given.
  * sacct - fix segfault when printing StepId (or when using --long).</changelog>
</package>
<package pkgid="595fe116a651dc328f2a2c909ea2bd8e447a762b2942d41faa15494688077620" name="libnss_slurm2_20_11" arch="x86_64">
  <version epoch="0" ver="20.11.9" rel="150200.6.10.1"/>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
  <changelog author="eich@suse.com" date="1651838400">- Add 'CommunicationParameters=block_null_hash' to slurm.conf, please
  add this parameter to existing configurations as part of CVE-2022-29500:
  This new option provides additional protection against a potential exploit.
- Update to 20.11.9:
  * burst_buffer - add missing common directory to the Makefile SUBDIRS.
  * sacct - fix truncation when printing jobidraw field.
  * GRES - Fix loading state of jobs using --gpus to request gpus.
  * Fix minor logic error in health check node state output
  * Fix GCC 11.1 compiler warnings.
  * Delay steps when memory already used instead of rejecting step request.
  * Fix memory leak in the slurmdbd when requesting wckeys from all clusters.
  * Fix determining if a reservation is used or not.
  * openapi/v0.0.35 - Honor kill_on_invalid_dependency as job parameter.
  * openapi/v0.0.36 - Honor kill_on_invalid_dependency as job parameter.
  * Fix various issues dealing with updates on magnetic reservations that could
    lead to abort slurmctld.
  * openapi/v0.0.36 - Avoid setting default values of min_cpus, job name, cwd,
    mail_type, and contiguous on job update.
  * openapi/v0.0.36 - Clear user hold on job update if hold=false.
  * Fix slurmctld segfault due to a bit_test() call with a MAINT+ANY_NODES
    reservation NULL node_bitmap.
  * Fix slurmctld segfault due to a bit_copy() call with a REPLACE+ANY_NODES
    reservation NULL node_bitmap.
  * Fix error in GPU frequency validation logic.
  * Fix error in pmix logic dealing with the incorrect size of buffer.
  * PMIx v1.1.4 and below are no longer supported.
  * Fix shutdown of slurmdbd plugin to correctly notice when the agent thread
    finishes.
  * Fix slurmctld segfault due to job array  --batch features double free.
  * CVE-2022-29500 - Prevent credential abuse (bsc#1199278).
  * CVE-2022-29501 - Prevent abuse of REQUEST_FORWARD_DATA (bsc#1199279).
- Update to 20.11.8:
  * slurmctld - fix erroneous "StepId=CORRUPT" messages in error logs.
  * Correct the error given when auth plugin fails to pack a credential.
  * Fix unused-variable compiler warning on FreeBSD in fd_resolve_path().
  * acct_gather_filesystem/lustre - only emit collection error once per step.
  * srun - leave SLURM_DIST_UNKNOWN as default for  --interactive.
  * Add GRES environment variables (e.g., CUDA_VISIBLE_DEVICES) into the
    interactive step, the same as is done for the batch step.
  * Fix various potential deadlocks when altering objects in the database
    dealing with every cluster in the database.
  * slurmrestd - handle slurmdbd connection failures without segfaulting.
  * slurmrestd - fix segfault for searches in slurmdb/v0.0.36/jobs.
  * slurmrestd - remove (non-functioning) users query parameter for
    slurmdb/v0.0.36/jobs from openapi.json
  * slurmrestd - fix segfault in slurmrestd db/jobs with numeric queries
  * slurmrestd - add argv handling for job/submit endpoint.
  * srun - fix broken node step allocation in a heterogeneous allocation.
  * Fail step creation if -n is not multiple of  --ntasks-per-gpu.
  * job_container/tmpfs - Fix slowdown on teardown.
  * Fix problem with SlurmctldProlog where requeued jobs would never launch.
  * job_container/tmpfs - Fix issue when restarting slurmd where the namespace
    mount points could disappear.
  * sacct - avoid truncating JobId at 34 characters.
  * scancel - fix segfault when --wckey filtering option is used.
  * select/cons_tres - Fix memory leak.
  * Prevent file descriptor leak in job_container/tmpfs on slurmd restart.
  * slurmrestd/dbv0.0.36 - Fix values dumped in job state/current and
    job step state.
  * slurmrestd/dbv0.0.36 - Correct description for previous state property.
  * perlapi/libslurmdb - expose tres_req_str to job hash.
  * scrontab - close and reopen temporary crontab file to deal with editors
    that do not change the original file, but instead write out then rename
    a new file.
  * sstat - fix linking so that it will work when --without-shared-libslurm
    was used to build Slurm.
  * Clear allocated cpus for running steps in a job before handling requested
    nodes on new step.
  * Don't reject a step if not enough nodes are available. Instead, defer the
    step until enough nodes are available to satisfy the request.
  * Don't reject a step if it requests at least one specific node that is
    already allocated to another step. Instead, defer the step until the
    requested node(s) become available.
  * slurmrestd - add description for slurmdb/job endpoint.
  * Better handling of --mem=0.
  * Ignore DefCpuPerGpu when --cpus-per-task given.
  * sacct - fix segfault when printing StepId (or when using --long).</changelog>
</package>
<package pkgid="d5bbd538c6d075efe45b009e0130695ad10510b43c4642ffa88733b4f00e1114" name="liboath-devel" arch="aarch64">
  <version epoch="0" ver="2.6.2" rel="150000.3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1382529600">- Update to version 2.4.0:
  + liboath: Add new API methods for validating TOTP OTPs
- Changes from version 2.2.0:
  + libpskc: Add functions for setting PSKC data.
  + liboath: Permit different passwords for different tokens for
    the same user.
  + liboath: Make header file usable from C++ (extern "C" guard).
  + build: Improve building from git with most recent automake and
    gengetopt.
  + build: Valgrind is not enabled by default.
- Fix license: libraries are LGPL-2.1+ and everything else is
  GPL-3.0+. Also properly package the COPYING files.
- Prepare build libpskc, hidden under a %{build_pskc} define:
  + Add libxml2-devel and pkgconfig(xmlsec1) BuildRequires.
  + Create libpskc0 and libpskc-devel subpackages.
  + Define %{build_pskc} to 0 since we don't have libxmlsec1 yet.
- Rework summaries and descriptions.</changelog>
  <changelog author="darin@darins.net" date="1405080000">- Ran through spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1422100800">- Update to version 2.4.1:
  + liboath: Fix usersfile bug that caused it to update the wrong line.
    When an usersfile contain multiple lines for the same user but with an
    unparseable token type (e.g., HOTP vs TOTP), the code would update the
    wrong line of the file.  Since the then updated line could be a
    commented out line, this can lead to the same OTP being accepted
    multiple times which is a security vulnerability.  Reported by Bas van
    Schaik &lt;bas@sj-vs.net&gt; and patch provided by Ilkka Virta
    &lt;itvirta@iki.fi&gt;.  CVE-2013-7322</changelog>
  <changelog author="t.gruner@katodev.de" date="1441800000">- Update to Version 2.6.1 (released 2015-07-31)
  - liboath: Fix 'make check' on 32-bit systems.
- Version 2.6.0 (released 2015-05-19)
  - liboath: Support TOTP with HMAC-SHA256 and HMAC-SHA512.
    This adds new APIs oath_totp_generate2, oath_totp_validate4 and
    oath_totp_validate4_callback.
  - oathtool: The --totp parameter now take an optional argument to specify MAC.
    For example use --totp=sha256 to use HMAC-SHA256.  When --totp is used
    the default HMAC-SHA1 is used, as before.
  - pam_oath: Mention in README that you shouldn't use insecure keys.
  - pam_oath: Check return value from strdup.
  - The files 'gdoc' and 'expect.oath' are now included in the tarball.</changelog>
  <changelog author="mardnh@gmx.de" date="1472472000">- Update to Version 2.6.2
  - no changes in upstream code
- Fix RPM groups for -devel packages
- build with libpskc on supported suse-versions
- Add patch:
  - 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch</changelog>
  <changelog author="dmarcoux@posteo.de" date="1516104000">- Add patch (last commit which changed source, not released in 2.6.2):
  - 0002-update_gnulibs_files.patch</changelog>
  <changelog author="ncutler@suse.com" date="1523448000">- use %license instead of %doc to package license-related files</changelog>
  <changelog author="ncutler@suse.com" date="1523448001">- bring License line into closer accordance with actual licenses
  mentioned in the tarball
- split off xml/pskc/ directory/files from liboath0 into a separate
  "oath-toolkit-xml" subpackage to prevent conflicts if two versions of the
  liboath library were ever installed at the same time</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Run spe-cleaner
- Drop useless conditions</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197790] -- FTBFS: oath-toolkit won't compile on SP4
- added patches
  part of https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/9b54ca84f92f4747751449aa645f07737b7bc7ea
  + 0003-update_gnulibs_files-fseeko.c.patch</changelog>
</package>
<package pkgid="af84b161d40ab6343dd054797d4f397b16cc39ce9beaffb0a25bd334ea0360b7" name="liboath-devel" arch="ppc64le">
  <version epoch="0" ver="2.6.2" rel="150000.3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1382529600">- Update to version 2.4.0:
  + liboath: Add new API methods for validating TOTP OTPs
- Changes from version 2.2.0:
  + libpskc: Add functions for setting PSKC data.
  + liboath: Permit different passwords for different tokens for
    the same user.
  + liboath: Make header file usable from C++ (extern "C" guard).
  + build: Improve building from git with most recent automake and
    gengetopt.
  + build: Valgrind is not enabled by default.
- Fix license: libraries are LGPL-2.1+ and everything else is
  GPL-3.0+. Also properly package the COPYING files.
- Prepare build libpskc, hidden under a %{build_pskc} define:
  + Add libxml2-devel and pkgconfig(xmlsec1) BuildRequires.
  + Create libpskc0 and libpskc-devel subpackages.
  + Define %{build_pskc} to 0 since we don't have libxmlsec1 yet.
- Rework summaries and descriptions.</changelog>
  <changelog author="darin@darins.net" date="1405080000">- Ran through spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1422100800">- Update to version 2.4.1:
  + liboath: Fix usersfile bug that caused it to update the wrong line.
    When an usersfile contain multiple lines for the same user but with an
    unparseable token type (e.g., HOTP vs TOTP), the code would update the
    wrong line of the file.  Since the then updated line could be a
    commented out line, this can lead to the same OTP being accepted
    multiple times which is a security vulnerability.  Reported by Bas van
    Schaik &lt;bas@sj-vs.net&gt; and patch provided by Ilkka Virta
    &lt;itvirta@iki.fi&gt;.  CVE-2013-7322</changelog>
  <changelog author="t.gruner@katodev.de" date="1441800000">- Update to Version 2.6.1 (released 2015-07-31)
  - liboath: Fix 'make check' on 32-bit systems.
- Version 2.6.0 (released 2015-05-19)
  - liboath: Support TOTP with HMAC-SHA256 and HMAC-SHA512.
    This adds new APIs oath_totp_generate2, oath_totp_validate4 and
    oath_totp_validate4_callback.
  - oathtool: The --totp parameter now take an optional argument to specify MAC.
    For example use --totp=sha256 to use HMAC-SHA256.  When --totp is used
    the default HMAC-SHA1 is used, as before.
  - pam_oath: Mention in README that you shouldn't use insecure keys.
  - pam_oath: Check return value from strdup.
  - The files 'gdoc' and 'expect.oath' are now included in the tarball.</changelog>
  <changelog author="mardnh@gmx.de" date="1472472000">- Update to Version 2.6.2
  - no changes in upstream code
- Fix RPM groups for -devel packages
- build with libpskc on supported suse-versions
- Add patch:
  - 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch</changelog>
  <changelog author="dmarcoux@posteo.de" date="1516104000">- Add patch (last commit which changed source, not released in 2.6.2):
  - 0002-update_gnulibs_files.patch</changelog>
  <changelog author="ncutler@suse.com" date="1523448000">- use %license instead of %doc to package license-related files</changelog>
  <changelog author="ncutler@suse.com" date="1523448001">- bring License line into closer accordance with actual licenses
  mentioned in the tarball
- split off xml/pskc/ directory/files from liboath0 into a separate
  "oath-toolkit-xml" subpackage to prevent conflicts if two versions of the
  liboath library were ever installed at the same time</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Run spe-cleaner
- Drop useless conditions</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197790] -- FTBFS: oath-toolkit won't compile on SP4
- added patches
  part of https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/9b54ca84f92f4747751449aa645f07737b7bc7ea
  + 0003-update_gnulibs_files-fseeko.c.patch</changelog>
</package>
<package pkgid="620a084a8985348fad5f2e04046e6168c230f64ff703ebdc2dc0e0576be14db1" name="liboath-devel" arch="s390x">
  <version epoch="0" ver="2.6.2" rel="150000.3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1382529600">- Update to version 2.4.0:
  + liboath: Add new API methods for validating TOTP OTPs
- Changes from version 2.2.0:
  + libpskc: Add functions for setting PSKC data.
  + liboath: Permit different passwords for different tokens for
    the same user.
  + liboath: Make header file usable from C++ (extern "C" guard).
  + build: Improve building from git with most recent automake and
    gengetopt.
  + build: Valgrind is not enabled by default.
- Fix license: libraries are LGPL-2.1+ and everything else is
  GPL-3.0+. Also properly package the COPYING files.
- Prepare build libpskc, hidden under a %{build_pskc} define:
  + Add libxml2-devel and pkgconfig(xmlsec1) BuildRequires.
  + Create libpskc0 and libpskc-devel subpackages.
  + Define %{build_pskc} to 0 since we don't have libxmlsec1 yet.
- Rework summaries and descriptions.</changelog>
  <changelog author="darin@darins.net" date="1405080000">- Ran through spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1422100800">- Update to version 2.4.1:
  + liboath: Fix usersfile bug that caused it to update the wrong line.
    When an usersfile contain multiple lines for the same user but with an
    unparseable token type (e.g., HOTP vs TOTP), the code would update the
    wrong line of the file.  Since the then updated line could be a
    commented out line, this can lead to the same OTP being accepted
    multiple times which is a security vulnerability.  Reported by Bas van
    Schaik &lt;bas@sj-vs.net&gt; and patch provided by Ilkka Virta
    &lt;itvirta@iki.fi&gt;.  CVE-2013-7322</changelog>
  <changelog author="t.gruner@katodev.de" date="1441800000">- Update to Version 2.6.1 (released 2015-07-31)
  - liboath: Fix 'make check' on 32-bit systems.
- Version 2.6.0 (released 2015-05-19)
  - liboath: Support TOTP with HMAC-SHA256 and HMAC-SHA512.
    This adds new APIs oath_totp_generate2, oath_totp_validate4 and
    oath_totp_validate4_callback.
  - oathtool: The --totp parameter now take an optional argument to specify MAC.
    For example use --totp=sha256 to use HMAC-SHA256.  When --totp is used
    the default HMAC-SHA1 is used, as before.
  - pam_oath: Mention in README that you shouldn't use insecure keys.
  - pam_oath: Check return value from strdup.
  - The files 'gdoc' and 'expect.oath' are now included in the tarball.</changelog>
  <changelog author="mardnh@gmx.de" date="1472472000">- Update to Version 2.6.2
  - no changes in upstream code
- Fix RPM groups for -devel packages
- build with libpskc on supported suse-versions
- Add patch:
  - 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch</changelog>
  <changelog author="dmarcoux@posteo.de" date="1516104000">- Add patch (last commit which changed source, not released in 2.6.2):
  - 0002-update_gnulibs_files.patch</changelog>
  <changelog author="ncutler@suse.com" date="1523448000">- use %license instead of %doc to package license-related files</changelog>
  <changelog author="ncutler@suse.com" date="1523448001">- bring License line into closer accordance with actual licenses
  mentioned in the tarball
- split off xml/pskc/ directory/files from liboath0 into a separate
  "oath-toolkit-xml" subpackage to prevent conflicts if two versions of the
  liboath library were ever installed at the same time</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Run spe-cleaner
- Drop useless conditions</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197790] -- FTBFS: oath-toolkit won't compile on SP4
- added patches
  part of https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/9b54ca84f92f4747751449aa645f07737b7bc7ea
  + 0003-update_gnulibs_files-fseeko.c.patch</changelog>
</package>
<package pkgid="87054ef0c4603e4a742889da021ea76de91185699eafb2f006e35beab21d53ce" name="liboath-devel" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="150000.3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1382529600">- Update to version 2.4.0:
  + liboath: Add new API methods for validating TOTP OTPs
- Changes from version 2.2.0:
  + libpskc: Add functions for setting PSKC data.
  + liboath: Permit different passwords for different tokens for
    the same user.
  + liboath: Make header file usable from C++ (extern "C" guard).
  + build: Improve building from git with most recent automake and
    gengetopt.
  + build: Valgrind is not enabled by default.
- Fix license: libraries are LGPL-2.1+ and everything else is
  GPL-3.0+. Also properly package the COPYING files.
- Prepare build libpskc, hidden under a %{build_pskc} define:
  + Add libxml2-devel and pkgconfig(xmlsec1) BuildRequires.
  + Create libpskc0 and libpskc-devel subpackages.
  + Define %{build_pskc} to 0 since we don't have libxmlsec1 yet.
- Rework summaries and descriptions.</changelog>
  <changelog author="darin@darins.net" date="1405080000">- Ran through spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1422100800">- Update to version 2.4.1:
  + liboath: Fix usersfile bug that caused it to update the wrong line.
    When an usersfile contain multiple lines for the same user but with an
    unparseable token type (e.g., HOTP vs TOTP), the code would update the
    wrong line of the file.  Since the then updated line could be a
    commented out line, this can lead to the same OTP being accepted
    multiple times which is a security vulnerability.  Reported by Bas van
    Schaik &lt;bas@sj-vs.net&gt; and patch provided by Ilkka Virta
    &lt;itvirta@iki.fi&gt;.  CVE-2013-7322</changelog>
  <changelog author="t.gruner@katodev.de" date="1441800000">- Update to Version 2.6.1 (released 2015-07-31)
  - liboath: Fix 'make check' on 32-bit systems.
- Version 2.6.0 (released 2015-05-19)
  - liboath: Support TOTP with HMAC-SHA256 and HMAC-SHA512.
    This adds new APIs oath_totp_generate2, oath_totp_validate4 and
    oath_totp_validate4_callback.
  - oathtool: The --totp parameter now take an optional argument to specify MAC.
    For example use --totp=sha256 to use HMAC-SHA256.  When --totp is used
    the default HMAC-SHA1 is used, as before.
  - pam_oath: Mention in README that you shouldn't use insecure keys.
  - pam_oath: Check return value from strdup.
  - The files 'gdoc' and 'expect.oath' are now included in the tarball.</changelog>
  <changelog author="mardnh@gmx.de" date="1472472000">- Update to Version 2.6.2
  - no changes in upstream code
- Fix RPM groups for -devel packages
- build with libpskc on supported suse-versions
- Add patch:
  - 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch</changelog>
  <changelog author="dmarcoux@posteo.de" date="1516104000">- Add patch (last commit which changed source, not released in 2.6.2):
  - 0002-update_gnulibs_files.patch</changelog>
  <changelog author="ncutler@suse.com" date="1523448000">- use %license instead of %doc to package license-related files</changelog>
  <changelog author="ncutler@suse.com" date="1523448001">- bring License line into closer accordance with actual licenses
  mentioned in the tarball
- split off xml/pskc/ directory/files from liboath0 into a separate
  "oath-toolkit-xml" subpackage to prevent conflicts if two versions of the
  liboath library were ever installed at the same time</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Run spe-cleaner
- Drop useless conditions</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197790] -- FTBFS: oath-toolkit won't compile on SP4
- added patches
  part of https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/9b54ca84f92f4747751449aa645f07737b7bc7ea
  + 0003-update_gnulibs_files-fseeko.c.patch</changelog>
</package>
<package pkgid="705696032c2da207f70341e254b2402262b0a7f394d7d140681734880782b8f2" name="liboath0" arch="aarch64">
  <version epoch="0" ver="2.6.2" rel="150000.3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1382529600">- Update to version 2.4.0:
  + liboath: Add new API methods for validating TOTP OTPs
- Changes from version 2.2.0:
  + libpskc: Add functions for setting PSKC data.
  + liboath: Permit different passwords for different tokens for
    the same user.
  + liboath: Make header file usable from C++ (extern "C" guard).
  + build: Improve building from git with most recent automake and
    gengetopt.
  + build: Valgrind is not enabled by default.
- Fix license: libraries are LGPL-2.1+ and everything else is
  GPL-3.0+. Also properly package the COPYING files.
- Prepare build libpskc, hidden under a %{build_pskc} define:
  + Add libxml2-devel and pkgconfig(xmlsec1) BuildRequires.
  + Create libpskc0 and libpskc-devel subpackages.
  + Define %{build_pskc} to 0 since we don't have libxmlsec1 yet.
- Rework summaries and descriptions.</changelog>
  <changelog author="darin@darins.net" date="1405080000">- Ran through spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1422100800">- Update to version 2.4.1:
  + liboath: Fix usersfile bug that caused it to update the wrong line.
    When an usersfile contain multiple lines for the same user but with an
    unparseable token type (e.g., HOTP vs TOTP), the code would update the
    wrong line of the file.  Since the then updated line could be a
    commented out line, this can lead to the same OTP being accepted
    multiple times which is a security vulnerability.  Reported by Bas van
    Schaik &lt;bas@sj-vs.net&gt; and patch provided by Ilkka Virta
    &lt;itvirta@iki.fi&gt;.  CVE-2013-7322</changelog>
  <changelog author="t.gruner@katodev.de" date="1441800000">- Update to Version 2.6.1 (released 2015-07-31)
  - liboath: Fix 'make check' on 32-bit systems.
- Version 2.6.0 (released 2015-05-19)
  - liboath: Support TOTP with HMAC-SHA256 and HMAC-SHA512.
    This adds new APIs oath_totp_generate2, oath_totp_validate4 and
    oath_totp_validate4_callback.
  - oathtool: The --totp parameter now take an optional argument to specify MAC.
    For example use --totp=sha256 to use HMAC-SHA256.  When --totp is used
    the default HMAC-SHA1 is used, as before.
  - pam_oath: Mention in README that you shouldn't use insecure keys.
  - pam_oath: Check return value from strdup.
  - The files 'gdoc' and 'expect.oath' are now included in the tarball.</changelog>
  <changelog author="mardnh@gmx.de" date="1472472000">- Update to Version 2.6.2
  - no changes in upstream code
- Fix RPM groups for -devel packages
- build with libpskc on supported suse-versions
- Add patch:
  - 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch</changelog>
  <changelog author="dmarcoux@posteo.de" date="1516104000">- Add patch (last commit which changed source, not released in 2.6.2):
  - 0002-update_gnulibs_files.patch</changelog>
  <changelog author="ncutler@suse.com" date="1523448000">- use %license instead of %doc to package license-related files</changelog>
  <changelog author="ncutler@suse.com" date="1523448001">- bring License line into closer accordance with actual licenses
  mentioned in the tarball
- split off xml/pskc/ directory/files from liboath0 into a separate
  "oath-toolkit-xml" subpackage to prevent conflicts if two versions of the
  liboath library were ever installed at the same time</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Run spe-cleaner
- Drop useless conditions</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197790] -- FTBFS: oath-toolkit won't compile on SP4
- added patches
  part of https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/9b54ca84f92f4747751449aa645f07737b7bc7ea
  + 0003-update_gnulibs_files-fseeko.c.patch</changelog>
</package>
<package pkgid="ce53ed408558f173af3ba80dd064158e0473920d51be8bbe76a9b721c2cff42f" name="liboath0" arch="ppc64le">
  <version epoch="0" ver="2.6.2" rel="150000.3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1382529600">- Update to version 2.4.0:
  + liboath: Add new API methods for validating TOTP OTPs
- Changes from version 2.2.0:
  + libpskc: Add functions for setting PSKC data.
  + liboath: Permit different passwords for different tokens for
    the same user.
  + liboath: Make header file usable from C++ (extern "C" guard).
  + build: Improve building from git with most recent automake and
    gengetopt.
  + build: Valgrind is not enabled by default.
- Fix license: libraries are LGPL-2.1+ and everything else is
  GPL-3.0+. Also properly package the COPYING files.
- Prepare build libpskc, hidden under a %{build_pskc} define:
  + Add libxml2-devel and pkgconfig(xmlsec1) BuildRequires.
  + Create libpskc0 and libpskc-devel subpackages.
  + Define %{build_pskc} to 0 since we don't have libxmlsec1 yet.
- Rework summaries and descriptions.</changelog>
  <changelog author="darin@darins.net" date="1405080000">- Ran through spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1422100800">- Update to version 2.4.1:
  + liboath: Fix usersfile bug that caused it to update the wrong line.
    When an usersfile contain multiple lines for the same user but with an
    unparseable token type (e.g., HOTP vs TOTP), the code would update the
    wrong line of the file.  Since the then updated line could be a
    commented out line, this can lead to the same OTP being accepted
    multiple times which is a security vulnerability.  Reported by Bas van
    Schaik &lt;bas@sj-vs.net&gt; and patch provided by Ilkka Virta
    &lt;itvirta@iki.fi&gt;.  CVE-2013-7322</changelog>
  <changelog author="t.gruner@katodev.de" date="1441800000">- Update to Version 2.6.1 (released 2015-07-31)
  - liboath: Fix 'make check' on 32-bit systems.
- Version 2.6.0 (released 2015-05-19)
  - liboath: Support TOTP with HMAC-SHA256 and HMAC-SHA512.
    This adds new APIs oath_totp_generate2, oath_totp_validate4 and
    oath_totp_validate4_callback.
  - oathtool: The --totp parameter now take an optional argument to specify MAC.
    For example use --totp=sha256 to use HMAC-SHA256.  When --totp is used
    the default HMAC-SHA1 is used, as before.
  - pam_oath: Mention in README that you shouldn't use insecure keys.
  - pam_oath: Check return value from strdup.
  - The files 'gdoc' and 'expect.oath' are now included in the tarball.</changelog>
  <changelog author="mardnh@gmx.de" date="1472472000">- Update to Version 2.6.2
  - no changes in upstream code
- Fix RPM groups for -devel packages
- build with libpskc on supported suse-versions
- Add patch:
  - 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch</changelog>
  <changelog author="dmarcoux@posteo.de" date="1516104000">- Add patch (last commit which changed source, not released in 2.6.2):
  - 0002-update_gnulibs_files.patch</changelog>
  <changelog author="ncutler@suse.com" date="1523448000">- use %license instead of %doc to package license-related files</changelog>
  <changelog author="ncutler@suse.com" date="1523448001">- bring License line into closer accordance with actual licenses
  mentioned in the tarball
- split off xml/pskc/ directory/files from liboath0 into a separate
  "oath-toolkit-xml" subpackage to prevent conflicts if two versions of the
  liboath library were ever installed at the same time</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Run spe-cleaner
- Drop useless conditions</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197790] -- FTBFS: oath-toolkit won't compile on SP4
- added patches
  part of https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/9b54ca84f92f4747751449aa645f07737b7bc7ea
  + 0003-update_gnulibs_files-fseeko.c.patch</changelog>
</package>
<package pkgid="5dbea5b182c6eb4e62b0949f4e105cb93f8ba224628aefe86e1a7b011de7e01e" name="liboath0" arch="s390x">
  <version epoch="0" ver="2.6.2" rel="150000.3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1382529600">- Update to version 2.4.0:
  + liboath: Add new API methods for validating TOTP OTPs
- Changes from version 2.2.0:
  + libpskc: Add functions for setting PSKC data.
  + liboath: Permit different passwords for different tokens for
    the same user.
  + liboath: Make header file usable from C++ (extern "C" guard).
  + build: Improve building from git with most recent automake and
    gengetopt.
  + build: Valgrind is not enabled by default.
- Fix license: libraries are LGPL-2.1+ and everything else is
  GPL-3.0+. Also properly package the COPYING files.
- Prepare build libpskc, hidden under a %{build_pskc} define:
  + Add libxml2-devel and pkgconfig(xmlsec1) BuildRequires.
  + Create libpskc0 and libpskc-devel subpackages.
  + Define %{build_pskc} to 0 since we don't have libxmlsec1 yet.
- Rework summaries and descriptions.</changelog>
  <changelog author="darin@darins.net" date="1405080000">- Ran through spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1422100800">- Update to version 2.4.1:
  + liboath: Fix usersfile bug that caused it to update the wrong line.
    When an usersfile contain multiple lines for the same user but with an
    unparseable token type (e.g., HOTP vs TOTP), the code would update the
    wrong line of the file.  Since the then updated line could be a
    commented out line, this can lead to the same OTP being accepted
    multiple times which is a security vulnerability.  Reported by Bas van
    Schaik &lt;bas@sj-vs.net&gt; and patch provided by Ilkka Virta
    &lt;itvirta@iki.fi&gt;.  CVE-2013-7322</changelog>
  <changelog author="t.gruner@katodev.de" date="1441800000">- Update to Version 2.6.1 (released 2015-07-31)
  - liboath: Fix 'make check' on 32-bit systems.
- Version 2.6.0 (released 2015-05-19)
  - liboath: Support TOTP with HMAC-SHA256 and HMAC-SHA512.
    This adds new APIs oath_totp_generate2, oath_totp_validate4 and
    oath_totp_validate4_callback.
  - oathtool: The --totp parameter now take an optional argument to specify MAC.
    For example use --totp=sha256 to use HMAC-SHA256.  When --totp is used
    the default HMAC-SHA1 is used, as before.
  - pam_oath: Mention in README that you shouldn't use insecure keys.
  - pam_oath: Check return value from strdup.
  - The files 'gdoc' and 'expect.oath' are now included in the tarball.</changelog>
  <changelog author="mardnh@gmx.de" date="1472472000">- Update to Version 2.6.2
  - no changes in upstream code
- Fix RPM groups for -devel packages
- build with libpskc on supported suse-versions
- Add patch:
  - 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch</changelog>
  <changelog author="dmarcoux@posteo.de" date="1516104000">- Add patch (last commit which changed source, not released in 2.6.2):
  - 0002-update_gnulibs_files.patch</changelog>
  <changelog author="ncutler@suse.com" date="1523448000">- use %license instead of %doc to package license-related files</changelog>
  <changelog author="ncutler@suse.com" date="1523448001">- bring License line into closer accordance with actual licenses
  mentioned in the tarball
- split off xml/pskc/ directory/files from liboath0 into a separate
  "oath-toolkit-xml" subpackage to prevent conflicts if two versions of the
  liboath library were ever installed at the same time</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Run spe-cleaner
- Drop useless conditions</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197790] -- FTBFS: oath-toolkit won't compile on SP4
- added patches
  part of https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/9b54ca84f92f4747751449aa645f07737b7bc7ea
  + 0003-update_gnulibs_files-fseeko.c.patch</changelog>
</package>
<package pkgid="ac1f7954b1d84ad23220010a625e728f1836b556709b44a105efa8fe0feac8d3" name="liboath0" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="150000.3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1382529600">- Update to version 2.4.0:
  + liboath: Add new API methods for validating TOTP OTPs
- Changes from version 2.2.0:
  + libpskc: Add functions for setting PSKC data.
  + liboath: Permit different passwords for different tokens for
    the same user.
  + liboath: Make header file usable from C++ (extern "C" guard).
  + build: Improve building from git with most recent automake and
    gengetopt.
  + build: Valgrind is not enabled by default.
- Fix license: libraries are LGPL-2.1+ and everything else is
  GPL-3.0+. Also properly package the COPYING files.
- Prepare build libpskc, hidden under a %{build_pskc} define:
  + Add libxml2-devel and pkgconfig(xmlsec1) BuildRequires.
  + Create libpskc0 and libpskc-devel subpackages.
  + Define %{build_pskc} to 0 since we don't have libxmlsec1 yet.
- Rework summaries and descriptions.</changelog>
  <changelog author="darin@darins.net" date="1405080000">- Ran through spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1422100800">- Update to version 2.4.1:
  + liboath: Fix usersfile bug that caused it to update the wrong line.
    When an usersfile contain multiple lines for the same user but with an
    unparseable token type (e.g., HOTP vs TOTP), the code would update the
    wrong line of the file.  Since the then updated line could be a
    commented out line, this can lead to the same OTP being accepted
    multiple times which is a security vulnerability.  Reported by Bas van
    Schaik &lt;bas@sj-vs.net&gt; and patch provided by Ilkka Virta
    &lt;itvirta@iki.fi&gt;.  CVE-2013-7322</changelog>
  <changelog author="t.gruner@katodev.de" date="1441800000">- Update to Version 2.6.1 (released 2015-07-31)
  - liboath: Fix 'make check' on 32-bit systems.
- Version 2.6.0 (released 2015-05-19)
  - liboath: Support TOTP with HMAC-SHA256 and HMAC-SHA512.
    This adds new APIs oath_totp_generate2, oath_totp_validate4 and
    oath_totp_validate4_callback.
  - oathtool: The --totp parameter now take an optional argument to specify MAC.
    For example use --totp=sha256 to use HMAC-SHA256.  When --totp is used
    the default HMAC-SHA1 is used, as before.
  - pam_oath: Mention in README that you shouldn't use insecure keys.
  - pam_oath: Check return value from strdup.
  - The files 'gdoc' and 'expect.oath' are now included in the tarball.</changelog>
  <changelog author="mardnh@gmx.de" date="1472472000">- Update to Version 2.6.2
  - no changes in upstream code
- Fix RPM groups for -devel packages
- build with libpskc on supported suse-versions
- Add patch:
  - 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch</changelog>
  <changelog author="dmarcoux@posteo.de" date="1516104000">- Add patch (last commit which changed source, not released in 2.6.2):
  - 0002-update_gnulibs_files.patch</changelog>
  <changelog author="ncutler@suse.com" date="1523448000">- use %license instead of %doc to package license-related files</changelog>
  <changelog author="ncutler@suse.com" date="1523448001">- bring License line into closer accordance with actual licenses
  mentioned in the tarball
- split off xml/pskc/ directory/files from liboath0 into a separate
  "oath-toolkit-xml" subpackage to prevent conflicts if two versions of the
  liboath library were ever installed at the same time</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Run spe-cleaner
- Drop useless conditions</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197790] -- FTBFS: oath-toolkit won't compile on SP4
- added patches
  part of https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/9b54ca84f92f4747751449aa645f07737b7bc7ea
  + 0003-update_gnulibs_files-fseeko.c.patch</changelog>
</package>
<package pkgid="cdedcaf111a19fabf87079ae81e6d26d6c0ca9d535c5a181f35076e05d7e4f9d" name="libobjc4" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="8fccddc24ac66f0a59aee2bd941f005f910bd3e8e9e1a04b9d9379158027ef5a" name="libobjc4" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="894c1e248a5e5a9ff40d803ba656692040f6859872946ef4062e3b0e443fba1f" name="libobjc4" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="f561b3c8e130a38b8aa50cbf09fed527b9eeebfe35c617d8d813c7a8aa207105" name="libobjc4" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="45c36c9de2b85f47b42b978da08bbb7e99778303236b88a713b6e30be316e908" name="libobjc4-32bit" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="60d321ddce2c8645d8af6ba0c93e38273a25c6f85d80eeb435a86365901d1919" name="libobjc4-32bit" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="227e3862b247adaefe4c3a28e3d2c9490a8734b494a049cd1283fe63ba62fe22" name="libomp7-devel" arch="aarch64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="5566f98e5db1ce1182b734e95cf0e4cc6dbeaa338f493012e7204c730c9609f2" name="libomp7-devel" arch="ppc64le">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="d8e484b78fc26319c2a18925b0376ce314b988101714e5d3a56e96cd0f2a89b9" name="libomp7-devel" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="ea1df41e9d9d2e16efa2d5d4c85f7db6790345ada37332d7c72c1d2ca7beb98e" name="libopagent1" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="150100.8.3.1"/>
  <changelog author="tonyj@suse.com" date="1411128000">- Update to version 1.0.0. THIS IS A MAJOR OPROFILE RELEASE WITH SIGNIFICANT
  CHANGES FROM THE PREVIOUS 0.9.9 RELEASE.  See changelog below.
    Drop patch: oprofile-add-support-for-intel-silvermont-processor.patch
    Drop patch: oprofile-compressed-kernel.patch
    Drop patch: oprofile-configure-error-message-for-missing-libpfm-is-not-informative-enough.patch
    Drop patch: oprofile-enable-for-new-ppc64le-architecture.patch
    Drop patch: oprofile-fix-unable-to-open-cpu_type-file-for-reading-for-ibm-power7.patch
    Drop patch: oprofile-make-cpu-type-power8e-equivalent-to-power8.patch
  Changelog:
    Major changes:
  - The legacy opcontrol-based profiler has been removed. operf is now the
    only supported interface
  - GUI component (i.e., oprof_start) has been removed.
  - IBS events removed from AMD processors
  - Following architectures have been removed (Alpha [except for EV67 which
    is supported by operf/ocount], avr32, ia64,  IBM Cell,  P.A Semi PA64T)
  - RTV (real time clock) mode has been removed
    Other incompatibilities:
  - Sample data collected with previous releases of OProfile are incompatible
    with release 1.0.
  - ophelp schema: Major version changed for removal of unit mask 'extra'
    attribute and addition of unit mask 'name'.
    New features:
  - Enhance ocount to support millisecond time intervals
  - Obtain kernel symbols from /proc/kallsyms if no vmlinux file specified
  - New Processor Support (Freescale e6500, Freescale e500mc,
    Intel Silvermont, ARMv7 Krait, APM X-Gene (ARMv8),
    Intel Broadwell, ARMv8 Cortex A57, ARMv8 Cortex A53
  - Added little endian support for IBM POWER8
  - Update events for IBM POWER8
  - Added edge-detect events for IBM POWER7
  - Update events for Intel Haswell
  Bug Fixes:
  - opreport schema: Fix count field maxOccurs (changed to 'unbounded')
  - Fix compile error on ppc/uClibc platform: 'AT_BASE_PLATFORM' undeclared'
  - Duplicate event specs passed to ocount show up twice in output
  - Fix operf/ocount default unit mask selection
  - ocount: print the unit mask, kernel and user modes if specified for the
    event
  - ophelp schema is not included in installed files
  - Remove unused 'extra' attribute from ophelp schema
  - opreport from 'operf --callgraph' profile shows false recursive calls
  - Fix handling of default named unit masks longer than 11 chars
  - Print unit mask name where applicable in ophelp XML output
  - Fix profiling of multi-threaded apps when using "--pid" option
  - Fix operf/opreport kernel throttling detection
  - Fix sample attribution problem when using multiple events
  - exclude/include files option doesn't work for opannotate -a
  - Fix behavior and documentation for '--threshold' option
  - Remove hard-coded timeout for JIT dump conversion
  - Update Alpha EV67 CPU support and remove all other Alpha CPU support
  - operf main process improperly killing conversion process
  - Fix up S390 support to work with operf/ocount
  - Link ocount with librt for clock_gettime only when needed
  - Fix 'Invalid argument' running 'opcontrol --start --callgraph=&lt;n&gt;' in
    Timer mode
  - Allow root to remove old jitdump files from /tmp/.oprofile/jitdump
  - Remove opreport warnings for /no-vmlinux, [vdso], [hypervisor_bucket]
    not found
  - Fix event codes for marked architected events (IBM ppc64)
  - Make operf/ocount detect invalid timer mode from opcontrol
  - Reduce overhead of operf waiting for profiled app to end
  - Fix "Unable to open cpu_type file for reading" for IBM POWER7+
  - Allow all native events for IBM POWER8 in POWER7 compat mode
  - Fix spurious "backtraces skipped due to no file mapping" log entries
  - Fix the units for the reported CPU frequency</changelog>
  <changelog author="mpluskal@suse.com" date="1451044800">- Update to 1.1.0
  * New/updated Processor Support
    + Broadcom Brahmma-B15 CPU
    + Intel Skylake
    + Intel Airmont
    + Intel Xeon D
  * Bug fixes
    + Prevent dropping of samples when the JVM changes memory
    mappings
    + Better handling of IBM Power JVM generated zero-sized
    mappings
    + Correct handling of anon_hugepage mmap entries for Java
    + Improved oparchive documentation and man page
    + Fixed compile error when using compile fortification
    + Support IBM Power 8 event code larger than sizeof int
    + Avoid changing POSIXLY_CORRECT environment variable for
    processes monitored by operf and ocount
    + Ensure correct setting of the extra bits (edge, inv, cmask)
    for Intel processors
    + Fix default unit masks for Intel Haswell and Broadwell
    processors
    + Correctly initialize operf temporary file header information
- Cleanup spec file with spec-cleaner
- Use url for source
- Drop desktop file since binary it is calling is no longer
  present (at least since version 1.0.0)
- Update dependencies</changelog>
  <changelog author="i@marguerite.su" date="1467460800">- add patch: oprofile-1.1.0-gcc6.patch, fixed boo#985359
  * cherry picked upstream commit 39d4d4, so please
    remember to drop it next release
  * GCC 6 is pickier about some of the type conversions
    avoid the intermediate bool type to make it happy</changelog>
  <changelog author="sfalken@opensuse.org" date="1489233600">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Depend on java-devel instead of deprecated provide</changelog>
  <changelog author="tonyj@suse.com" date="1502107200">- Update to version 1.2.0
  - New/updated Processor Support
  * ARM Cortex A17
  * IBM Power 9
  * IBM Power 8NV and NVL variants
  * IBM z13
  * Intel Goldmont
  * Intel Kabylake
  * Intel Xeon Phi (Knights Landing)
  * Achitecture specific events for Applied Micro X-Gene
  - Bug fixes
  * #286 - Compilation error: left shift of negative value
  * #288 - oprofile fails to build with --enable-pch and gcc-6.2
  - Other fixes
  * Fixed compile warning and errors when using GCC 6 or GCC 7
  * Avoid using deprecated readdir_r function
  * Store samples in the archive and search the appropriate places
    for samples
  * Only start the application if the perf events setup was successful
  * Corrections in the code and i386 events so "make check" tests pass
- Drop local patch oprofile-1.1.0-gcc6.patch (upstream)</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- Remove qt-devel from BuildRequires, it is no needed anymore.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Rectify RPM groups. Update summary of -devel subpackage.
  Do not ignore errors from useradd/groupadd.
  Avoid running fdupes across partitions.</changelog>
  <changelog author="tonyj@suse.com" date="1540814400">- Update to version 1.3.0 (FATE#326121)
  - New/updated processor support
  * Intel Goldmont Plus
  - Bug fixes
  * #289 No manpage for opjitconv binary
  * Avoid operf crashing on samples from exiting processes when running
    on linux 4.14 and newer kernels.
  * Fix compile warning and errors when using GCC 8
- Add patch: oprofile-handle-empty-event-name-spec-gracefully-for-ppc.patch</changelog>
  <changelog author="tonyj@suse.com" date="1650888000">- Resolve build issues due to binutils 2.34 api changes (bsc#1197793)
  New patch: oprofile-macro-wrappers-to-handle-the-binutils-2.34-api-changes.patch
  New patch: oprofile-include-op_bfd_wrappers.h-in-the-distribution.patch</changelog>
</package>
<package pkgid="56866002f7d86683f03133a90e2733df210b34d84e97567b5345f95b1fd402b7" name="libopagent1" arch="ppc64le">
  <version epoch="0" ver="1.3.0" rel="150100.8.3.1"/>
  <changelog author="tonyj@suse.com" date="1411128000">- Update to version 1.0.0. THIS IS A MAJOR OPROFILE RELEASE WITH SIGNIFICANT
  CHANGES FROM THE PREVIOUS 0.9.9 RELEASE.  See changelog below.
    Drop patch: oprofile-add-support-for-intel-silvermont-processor.patch
    Drop patch: oprofile-compressed-kernel.patch
    Drop patch: oprofile-configure-error-message-for-missing-libpfm-is-not-informative-enough.patch
    Drop patch: oprofile-enable-for-new-ppc64le-architecture.patch
    Drop patch: oprofile-fix-unable-to-open-cpu_type-file-for-reading-for-ibm-power7.patch
    Drop patch: oprofile-make-cpu-type-power8e-equivalent-to-power8.patch
  Changelog:
    Major changes:
  - The legacy opcontrol-based profiler has been removed. operf is now the
    only supported interface
  - GUI component (i.e., oprof_start) has been removed.
  - IBS events removed from AMD processors
  - Following architectures have been removed (Alpha [except for EV67 which
    is supported by operf/ocount], avr32, ia64,  IBM Cell,  P.A Semi PA64T)
  - RTV (real time clock) mode has been removed
    Other incompatibilities:
  - Sample data collected with previous releases of OProfile are incompatible
    with release 1.0.
  - ophelp schema: Major version changed for removal of unit mask 'extra'
    attribute and addition of unit mask 'name'.
    New features:
  - Enhance ocount to support millisecond time intervals
  - Obtain kernel symbols from /proc/kallsyms if no vmlinux file specified
  - New Processor Support (Freescale e6500, Freescale e500mc,
    Intel Silvermont, ARMv7 Krait, APM X-Gene (ARMv8),
    Intel Broadwell, ARMv8 Cortex A57, ARMv8 Cortex A53
  - Added little endian support for IBM POWER8
  - Update events for IBM POWER8
  - Added edge-detect events for IBM POWER7
  - Update events for Intel Haswell
  Bug Fixes:
  - opreport schema: Fix count field maxOccurs (changed to 'unbounded')
  - Fix compile error on ppc/uClibc platform: 'AT_BASE_PLATFORM' undeclared'
  - Duplicate event specs passed to ocount show up twice in output
  - Fix operf/ocount default unit mask selection
  - ocount: print the unit mask, kernel and user modes if specified for the
    event
  - ophelp schema is not included in installed files
  - Remove unused 'extra' attribute from ophelp schema
  - opreport from 'operf --callgraph' profile shows false recursive calls
  - Fix handling of default named unit masks longer than 11 chars
  - Print unit mask name where applicable in ophelp XML output
  - Fix profiling of multi-threaded apps when using "--pid" option
  - Fix operf/opreport kernel throttling detection
  - Fix sample attribution problem when using multiple events
  - exclude/include files option doesn't work for opannotate -a
  - Fix behavior and documentation for '--threshold' option
  - Remove hard-coded timeout for JIT dump conversion
  - Update Alpha EV67 CPU support and remove all other Alpha CPU support
  - operf main process improperly killing conversion process
  - Fix up S390 support to work with operf/ocount
  - Link ocount with librt for clock_gettime only when needed
  - Fix 'Invalid argument' running 'opcontrol --start --callgraph=&lt;n&gt;' in
    Timer mode
  - Allow root to remove old jitdump files from /tmp/.oprofile/jitdump
  - Remove opreport warnings for /no-vmlinux, [vdso], [hypervisor_bucket]
    not found
  - Fix event codes for marked architected events (IBM ppc64)
  - Make operf/ocount detect invalid timer mode from opcontrol
  - Reduce overhead of operf waiting for profiled app to end
  - Fix "Unable to open cpu_type file for reading" for IBM POWER7+
  - Allow all native events for IBM POWER8 in POWER7 compat mode
  - Fix spurious "backtraces skipped due to no file mapping" log entries
  - Fix the units for the reported CPU frequency</changelog>
  <changelog author="mpluskal@suse.com" date="1451044800">- Update to 1.1.0
  * New/updated Processor Support
    + Broadcom Brahmma-B15 CPU
    + Intel Skylake
    + Intel Airmont
    + Intel Xeon D
  * Bug fixes
    + Prevent dropping of samples when the JVM changes memory
    mappings
    + Better handling of IBM Power JVM generated zero-sized
    mappings
    + Correct handling of anon_hugepage mmap entries for Java
    + Improved oparchive documentation and man page
    + Fixed compile error when using compile fortification
    + Support IBM Power 8 event code larger than sizeof int
    + Avoid changing POSIXLY_CORRECT environment variable for
    processes monitored by operf and ocount
    + Ensure correct setting of the extra bits (edge, inv, cmask)
    for Intel processors
    + Fix default unit masks for Intel Haswell and Broadwell
    processors
    + Correctly initialize operf temporary file header information
- Cleanup spec file with spec-cleaner
- Use url for source
- Drop desktop file since binary it is calling is no longer
  present (at least since version 1.0.0)
- Update dependencies</changelog>
  <changelog author="i@marguerite.su" date="1467460800">- add patch: oprofile-1.1.0-gcc6.patch, fixed boo#985359
  * cherry picked upstream commit 39d4d4, so please
    remember to drop it next release
  * GCC 6 is pickier about some of the type conversions
    avoid the intermediate bool type to make it happy</changelog>
  <changelog author="sfalken@opensuse.org" date="1489233600">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Depend on java-devel instead of deprecated provide</changelog>
  <changelog author="tonyj@suse.com" date="1502107200">- Update to version 1.2.0
  - New/updated Processor Support
  * ARM Cortex A17
  * IBM Power 9
  * IBM Power 8NV and NVL variants
  * IBM z13
  * Intel Goldmont
  * Intel Kabylake
  * Intel Xeon Phi (Knights Landing)
  * Achitecture specific events for Applied Micro X-Gene
  - Bug fixes
  * #286 - Compilation error: left shift of negative value
  * #288 - oprofile fails to build with --enable-pch and gcc-6.2
  - Other fixes
  * Fixed compile warning and errors when using GCC 6 or GCC 7
  * Avoid using deprecated readdir_r function
  * Store samples in the archive and search the appropriate places
    for samples
  * Only start the application if the perf events setup was successful
  * Corrections in the code and i386 events so "make check" tests pass
- Drop local patch oprofile-1.1.0-gcc6.patch (upstream)</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- Remove qt-devel from BuildRequires, it is no needed anymore.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Rectify RPM groups. Update summary of -devel subpackage.
  Do not ignore errors from useradd/groupadd.
  Avoid running fdupes across partitions.</changelog>
  <changelog author="tonyj@suse.com" date="1540814400">- Update to version 1.3.0 (FATE#326121)
  - New/updated processor support
  * Intel Goldmont Plus
  - Bug fixes
  * #289 No manpage for opjitconv binary
  * Avoid operf crashing on samples from exiting processes when running
    on linux 4.14 and newer kernels.
  * Fix compile warning and errors when using GCC 8
- Add patch: oprofile-handle-empty-event-name-spec-gracefully-for-ppc.patch</changelog>
  <changelog author="tonyj@suse.com" date="1650888000">- Resolve build issues due to binutils 2.34 api changes (bsc#1197793)
  New patch: oprofile-macro-wrappers-to-handle-the-binutils-2.34-api-changes.patch
  New patch: oprofile-include-op_bfd_wrappers.h-in-the-distribution.patch</changelog>
</package>
<package pkgid="f15636e77be87433fe406e2a02373328669037d226acb91e9b647cf1d9e98a54" name="libopagent1" arch="s390x">
  <version epoch="0" ver="1.3.0" rel="150100.8.3.1"/>
  <changelog author="tonyj@suse.com" date="1411128000">- Update to version 1.0.0. THIS IS A MAJOR OPROFILE RELEASE WITH SIGNIFICANT
  CHANGES FROM THE PREVIOUS 0.9.9 RELEASE.  See changelog below.
    Drop patch: oprofile-add-support-for-intel-silvermont-processor.patch
    Drop patch: oprofile-compressed-kernel.patch
    Drop patch: oprofile-configure-error-message-for-missing-libpfm-is-not-informative-enough.patch
    Drop patch: oprofile-enable-for-new-ppc64le-architecture.patch
    Drop patch: oprofile-fix-unable-to-open-cpu_type-file-for-reading-for-ibm-power7.patch
    Drop patch: oprofile-make-cpu-type-power8e-equivalent-to-power8.patch
  Changelog:
    Major changes:
  - The legacy opcontrol-based profiler has been removed. operf is now the
    only supported interface
  - GUI component (i.e., oprof_start) has been removed.
  - IBS events removed from AMD processors
  - Following architectures have been removed (Alpha [except for EV67 which
    is supported by operf/ocount], avr32, ia64,  IBM Cell,  P.A Semi PA64T)
  - RTV (real time clock) mode has been removed
    Other incompatibilities:
  - Sample data collected with previous releases of OProfile are incompatible
    with release 1.0.
  - ophelp schema: Major version changed for removal of unit mask 'extra'
    attribute and addition of unit mask 'name'.
    New features:
  - Enhance ocount to support millisecond time intervals
  - Obtain kernel symbols from /proc/kallsyms if no vmlinux file specified
  - New Processor Support (Freescale e6500, Freescale e500mc,
    Intel Silvermont, ARMv7 Krait, APM X-Gene (ARMv8),
    Intel Broadwell, ARMv8 Cortex A57, ARMv8 Cortex A53
  - Added little endian support for IBM POWER8
  - Update events for IBM POWER8
  - Added edge-detect events for IBM POWER7
  - Update events for Intel Haswell
  Bug Fixes:
  - opreport schema: Fix count field maxOccurs (changed to 'unbounded')
  - Fix compile error on ppc/uClibc platform: 'AT_BASE_PLATFORM' undeclared'
  - Duplicate event specs passed to ocount show up twice in output
  - Fix operf/ocount default unit mask selection
  - ocount: print the unit mask, kernel and user modes if specified for the
    event
  - ophelp schema is not included in installed files
  - Remove unused 'extra' attribute from ophelp schema
  - opreport from 'operf --callgraph' profile shows false recursive calls
  - Fix handling of default named unit masks longer than 11 chars
  - Print unit mask name where applicable in ophelp XML output
  - Fix profiling of multi-threaded apps when using "--pid" option
  - Fix operf/opreport kernel throttling detection
  - Fix sample attribution problem when using multiple events
  - exclude/include files option doesn't work for opannotate -a
  - Fix behavior and documentation for '--threshold' option
  - Remove hard-coded timeout for JIT dump conversion
  - Update Alpha EV67 CPU support and remove all other Alpha CPU support
  - operf main process improperly killing conversion process
  - Fix up S390 support to work with operf/ocount
  - Link ocount with librt for clock_gettime only when needed
  - Fix 'Invalid argument' running 'opcontrol --start --callgraph=&lt;n&gt;' in
    Timer mode
  - Allow root to remove old jitdump files from /tmp/.oprofile/jitdump
  - Remove opreport warnings for /no-vmlinux, [vdso], [hypervisor_bucket]
    not found
  - Fix event codes for marked architected events (IBM ppc64)
  - Make operf/ocount detect invalid timer mode from opcontrol
  - Reduce overhead of operf waiting for profiled app to end
  - Fix "Unable to open cpu_type file for reading" for IBM POWER7+
  - Allow all native events for IBM POWER8 in POWER7 compat mode
  - Fix spurious "backtraces skipped due to no file mapping" log entries
  - Fix the units for the reported CPU frequency</changelog>
  <changelog author="mpluskal@suse.com" date="1451044800">- Update to 1.1.0
  * New/updated Processor Support
    + Broadcom Brahmma-B15 CPU
    + Intel Skylake
    + Intel Airmont
    + Intel Xeon D
  * Bug fixes
    + Prevent dropping of samples when the JVM changes memory
    mappings
    + Better handling of IBM Power JVM generated zero-sized
    mappings
    + Correct handling of anon_hugepage mmap entries for Java
    + Improved oparchive documentation and man page
    + Fixed compile error when using compile fortification
    + Support IBM Power 8 event code larger than sizeof int
    + Avoid changing POSIXLY_CORRECT environment variable for
    processes monitored by operf and ocount
    + Ensure correct setting of the extra bits (edge, inv, cmask)
    for Intel processors
    + Fix default unit masks for Intel Haswell and Broadwell
    processors
    + Correctly initialize operf temporary file header information
- Cleanup spec file with spec-cleaner
- Use url for source
- Drop desktop file since binary it is calling is no longer
  present (at least since version 1.0.0)
- Update dependencies</changelog>
  <changelog author="i@marguerite.su" date="1467460800">- add patch: oprofile-1.1.0-gcc6.patch, fixed boo#985359
  * cherry picked upstream commit 39d4d4, so please
    remember to drop it next release
  * GCC 6 is pickier about some of the type conversions
    avoid the intermediate bool type to make it happy</changelog>
  <changelog author="sfalken@opensuse.org" date="1489233600">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Depend on java-devel instead of deprecated provide</changelog>
  <changelog author="tonyj@suse.com" date="1502107200">- Update to version 1.2.0
  - New/updated Processor Support
  * ARM Cortex A17
  * IBM Power 9
  * IBM Power 8NV and NVL variants
  * IBM z13
  * Intel Goldmont
  * Intel Kabylake
  * Intel Xeon Phi (Knights Landing)
  * Achitecture specific events for Applied Micro X-Gene
  - Bug fixes
  * #286 - Compilation error: left shift of negative value
  * #288 - oprofile fails to build with --enable-pch and gcc-6.2
  - Other fixes
  * Fixed compile warning and errors when using GCC 6 or GCC 7
  * Avoid using deprecated readdir_r function
  * Store samples in the archive and search the appropriate places
    for samples
  * Only start the application if the perf events setup was successful
  * Corrections in the code and i386 events so "make check" tests pass
- Drop local patch oprofile-1.1.0-gcc6.patch (upstream)</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- Remove qt-devel from BuildRequires, it is no needed anymore.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Rectify RPM groups. Update summary of -devel subpackage.
  Do not ignore errors from useradd/groupadd.
  Avoid running fdupes across partitions.</changelog>
  <changelog author="tonyj@suse.com" date="1540814400">- Update to version 1.3.0 (FATE#326121)
  - New/updated processor support
  * Intel Goldmont Plus
  - Bug fixes
  * #289 No manpage for opjitconv binary
  * Avoid operf crashing on samples from exiting processes when running
    on linux 4.14 and newer kernels.
  * Fix compile warning and errors when using GCC 8
- Add patch: oprofile-handle-empty-event-name-spec-gracefully-for-ppc.patch</changelog>
  <changelog author="tonyj@suse.com" date="1650888000">- Resolve build issues due to binutils 2.34 api changes (bsc#1197793)
  New patch: oprofile-macro-wrappers-to-handle-the-binutils-2.34-api-changes.patch
  New patch: oprofile-include-op_bfd_wrappers.h-in-the-distribution.patch</changelog>
</package>
<package pkgid="bdf398e2aeaed636b1a209e36eb838c200767ced78a1d10ed8d7e9a5649ba295" name="libopagent1" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="150100.8.3.1"/>
  <changelog author="tonyj@suse.com" date="1411128000">- Update to version 1.0.0. THIS IS A MAJOR OPROFILE RELEASE WITH SIGNIFICANT
  CHANGES FROM THE PREVIOUS 0.9.9 RELEASE.  See changelog below.
    Drop patch: oprofile-add-support-for-intel-silvermont-processor.patch
    Drop patch: oprofile-compressed-kernel.patch
    Drop patch: oprofile-configure-error-message-for-missing-libpfm-is-not-informative-enough.patch
    Drop patch: oprofile-enable-for-new-ppc64le-architecture.patch
    Drop patch: oprofile-fix-unable-to-open-cpu_type-file-for-reading-for-ibm-power7.patch
    Drop patch: oprofile-make-cpu-type-power8e-equivalent-to-power8.patch
  Changelog:
    Major changes:
  - The legacy opcontrol-based profiler has been removed. operf is now the
    only supported interface
  - GUI component (i.e., oprof_start) has been removed.
  - IBS events removed from AMD processors
  - Following architectures have been removed (Alpha [except for EV67 which
    is supported by operf/ocount], avr32, ia64,  IBM Cell,  P.A Semi PA64T)
  - RTV (real time clock) mode has been removed
    Other incompatibilities:
  - Sample data collected with previous releases of OProfile are incompatible
    with release 1.0.
  - ophelp schema: Major version changed for removal of unit mask 'extra'
    attribute and addition of unit mask 'name'.
    New features:
  - Enhance ocount to support millisecond time intervals
  - Obtain kernel symbols from /proc/kallsyms if no vmlinux file specified
  - New Processor Support (Freescale e6500, Freescale e500mc,
    Intel Silvermont, ARMv7 Krait, APM X-Gene (ARMv8),
    Intel Broadwell, ARMv8 Cortex A57, ARMv8 Cortex A53
  - Added little endian support for IBM POWER8
  - Update events for IBM POWER8
  - Added edge-detect events for IBM POWER7
  - Update events for Intel Haswell
  Bug Fixes:
  - opreport schema: Fix count field maxOccurs (changed to 'unbounded')
  - Fix compile error on ppc/uClibc platform: 'AT_BASE_PLATFORM' undeclared'
  - Duplicate event specs passed to ocount show up twice in output
  - Fix operf/ocount default unit mask selection
  - ocount: print the unit mask, kernel and user modes if specified for the
    event
  - ophelp schema is not included in installed files
  - Remove unused 'extra' attribute from ophelp schema
  - opreport from 'operf --callgraph' profile shows false recursive calls
  - Fix handling of default named unit masks longer than 11 chars
  - Print unit mask name where applicable in ophelp XML output
  - Fix profiling of multi-threaded apps when using "--pid" option
  - Fix operf/opreport kernel throttling detection
  - Fix sample attribution problem when using multiple events
  - exclude/include files option doesn't work for opannotate -a
  - Fix behavior and documentation for '--threshold' option
  - Remove hard-coded timeout for JIT dump conversion
  - Update Alpha EV67 CPU support and remove all other Alpha CPU support
  - operf main process improperly killing conversion process
  - Fix up S390 support to work with operf/ocount
  - Link ocount with librt for clock_gettime only when needed
  - Fix 'Invalid argument' running 'opcontrol --start --callgraph=&lt;n&gt;' in
    Timer mode
  - Allow root to remove old jitdump files from /tmp/.oprofile/jitdump
  - Remove opreport warnings for /no-vmlinux, [vdso], [hypervisor_bucket]
    not found
  - Fix event codes for marked architected events (IBM ppc64)
  - Make operf/ocount detect invalid timer mode from opcontrol
  - Reduce overhead of operf waiting for profiled app to end
  - Fix "Unable to open cpu_type file for reading" for IBM POWER7+
  - Allow all native events for IBM POWER8 in POWER7 compat mode
  - Fix spurious "backtraces skipped due to no file mapping" log entries
  - Fix the units for the reported CPU frequency</changelog>
  <changelog author="mpluskal@suse.com" date="1451044800">- Update to 1.1.0
  * New/updated Processor Support
    + Broadcom Brahmma-B15 CPU
    + Intel Skylake
    + Intel Airmont
    + Intel Xeon D
  * Bug fixes
    + Prevent dropping of samples when the JVM changes memory
    mappings
    + Better handling of IBM Power JVM generated zero-sized
    mappings
    + Correct handling of anon_hugepage mmap entries for Java
    + Improved oparchive documentation and man page
    + Fixed compile error when using compile fortification
    + Support IBM Power 8 event code larger than sizeof int
    + Avoid changing POSIXLY_CORRECT environment variable for
    processes monitored by operf and ocount
    + Ensure correct setting of the extra bits (edge, inv, cmask)
    for Intel processors
    + Fix default unit masks for Intel Haswell and Broadwell
    processors
    + Correctly initialize operf temporary file header information
- Cleanup spec file with spec-cleaner
- Use url for source
- Drop desktop file since binary it is calling is no longer
  present (at least since version 1.0.0)
- Update dependencies</changelog>
  <changelog author="i@marguerite.su" date="1467460800">- add patch: oprofile-1.1.0-gcc6.patch, fixed boo#985359
  * cherry picked upstream commit 39d4d4, so please
    remember to drop it next release
  * GCC 6 is pickier about some of the type conversions
    avoid the intermediate bool type to make it happy</changelog>
  <changelog author="sfalken@opensuse.org" date="1489233600">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Depend on java-devel instead of deprecated provide</changelog>
  <changelog author="tonyj@suse.com" date="1502107200">- Update to version 1.2.0
  - New/updated Processor Support
  * ARM Cortex A17
  * IBM Power 9
  * IBM Power 8NV and NVL variants
  * IBM z13
  * Intel Goldmont
  * Intel Kabylake
  * Intel Xeon Phi (Knights Landing)
  * Achitecture specific events for Applied Micro X-Gene
  - Bug fixes
  * #286 - Compilation error: left shift of negative value
  * #288 - oprofile fails to build with --enable-pch and gcc-6.2
  - Other fixes
  * Fixed compile warning and errors when using GCC 6 or GCC 7
  * Avoid using deprecated readdir_r function
  * Store samples in the archive and search the appropriate places
    for samples
  * Only start the application if the perf events setup was successful
  * Corrections in the code and i386 events so "make check" tests pass
- Drop local patch oprofile-1.1.0-gcc6.patch (upstream)</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- Remove qt-devel from BuildRequires, it is no needed anymore.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Rectify RPM groups. Update summary of -devel subpackage.
  Do not ignore errors from useradd/groupadd.
  Avoid running fdupes across partitions.</changelog>
  <changelog author="tonyj@suse.com" date="1540814400">- Update to version 1.3.0 (FATE#326121)
  - New/updated processor support
  * Intel Goldmont Plus
  - Bug fixes
  * #289 No manpage for opjitconv binary
  * Avoid operf crashing on samples from exiting processes when running
    on linux 4.14 and newer kernels.
  * Fix compile warning and errors when using GCC 8
- Add patch: oprofile-handle-empty-event-name-spec-gracefully-for-ppc.patch</changelog>
  <changelog author="tonyj@suse.com" date="1650888000">- Resolve build issues due to binutils 2.34 api changes (bsc#1197793)
  New patch: oprofile-macro-wrappers-to-handle-the-binutils-2.34-api-changes.patch
  New patch: oprofile-include-op_bfd_wrappers.h-in-the-distribution.patch</changelog>
</package>
<package pkgid="71845bdc53c1874f6509f290def836bbc407867c99c37c77d0d79c43c5c98184" name="libopagent1-32bit" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="150100.8.3.1"/>
  <changelog author="tonyj@suse.com" date="1411128000">- Update to version 1.0.0. THIS IS A MAJOR OPROFILE RELEASE WITH SIGNIFICANT
  CHANGES FROM THE PREVIOUS 0.9.9 RELEASE.  See changelog below.
    Drop patch: oprofile-add-support-for-intel-silvermont-processor.patch
    Drop patch: oprofile-compressed-kernel.patch
    Drop patch: oprofile-configure-error-message-for-missing-libpfm-is-not-informative-enough.patch
    Drop patch: oprofile-enable-for-new-ppc64le-architecture.patch
    Drop patch: oprofile-fix-unable-to-open-cpu_type-file-for-reading-for-ibm-power7.patch
    Drop patch: oprofile-make-cpu-type-power8e-equivalent-to-power8.patch
  Changelog:
    Major changes:
  - The legacy opcontrol-based profiler has been removed. operf is now the
    only supported interface
  - GUI component (i.e., oprof_start) has been removed.
  - IBS events removed from AMD processors
  - Following architectures have been removed (Alpha [except for EV67 which
    is supported by operf/ocount], avr32, ia64,  IBM Cell,  P.A Semi PA64T)
  - RTV (real time clock) mode has been removed
    Other incompatibilities:
  - Sample data collected with previous releases of OProfile are incompatible
    with release 1.0.
  - ophelp schema: Major version changed for removal of unit mask 'extra'
    attribute and addition of unit mask 'name'.
    New features:
  - Enhance ocount to support millisecond time intervals
  - Obtain kernel symbols from /proc/kallsyms if no vmlinux file specified
  - New Processor Support (Freescale e6500, Freescale e500mc,
    Intel Silvermont, ARMv7 Krait, APM X-Gene (ARMv8),
    Intel Broadwell, ARMv8 Cortex A57, ARMv8 Cortex A53
  - Added little endian support for IBM POWER8
  - Update events for IBM POWER8
  - Added edge-detect events for IBM POWER7
  - Update events for Intel Haswell
  Bug Fixes:
  - opreport schema: Fix count field maxOccurs (changed to 'unbounded')
  - Fix compile error on ppc/uClibc platform: 'AT_BASE_PLATFORM' undeclared'
  - Duplicate event specs passed to ocount show up twice in output
  - Fix operf/ocount default unit mask selection
  - ocount: print the unit mask, kernel and user modes if specified for the
    event
  - ophelp schema is not included in installed files
  - Remove unused 'extra' attribute from ophelp schema
  - opreport from 'operf --callgraph' profile shows false recursive calls
  - Fix handling of default named unit masks longer than 11 chars
  - Print unit mask name where applicable in ophelp XML output
  - Fix profiling of multi-threaded apps when using "--pid" option
  - Fix operf/opreport kernel throttling detection
  - Fix sample attribution problem when using multiple events
  - exclude/include files option doesn't work for opannotate -a
  - Fix behavior and documentation for '--threshold' option
  - Remove hard-coded timeout for JIT dump conversion
  - Update Alpha EV67 CPU support and remove all other Alpha CPU support
  - operf main process improperly killing conversion process
  - Fix up S390 support to work with operf/ocount
  - Link ocount with librt for clock_gettime only when needed
  - Fix 'Invalid argument' running 'opcontrol --start --callgraph=&lt;n&gt;' in
    Timer mode
  - Allow root to remove old jitdump files from /tmp/.oprofile/jitdump
  - Remove opreport warnings for /no-vmlinux, [vdso], [hypervisor_bucket]
    not found
  - Fix event codes for marked architected events (IBM ppc64)
  - Make operf/ocount detect invalid timer mode from opcontrol
  - Reduce overhead of operf waiting for profiled app to end
  - Fix "Unable to open cpu_type file for reading" for IBM POWER7+
  - Allow all native events for IBM POWER8 in POWER7 compat mode
  - Fix spurious "backtraces skipped due to no file mapping" log entries
  - Fix the units for the reported CPU frequency</changelog>
  <changelog author="mpluskal@suse.com" date="1451044800">- Update to 1.1.0
  * New/updated Processor Support
    + Broadcom Brahmma-B15 CPU
    + Intel Skylake
    + Intel Airmont
    + Intel Xeon D
  * Bug fixes
    + Prevent dropping of samples when the JVM changes memory
    mappings
    + Better handling of IBM Power JVM generated zero-sized
    mappings
    + Correct handling of anon_hugepage mmap entries for Java
    + Improved oparchive documentation and man page
    + Fixed compile error when using compile fortification
    + Support IBM Power 8 event code larger than sizeof int
    + Avoid changing POSIXLY_CORRECT environment variable for
    processes monitored by operf and ocount
    + Ensure correct setting of the extra bits (edge, inv, cmask)
    for Intel processors
    + Fix default unit masks for Intel Haswell and Broadwell
    processors
    + Correctly initialize operf temporary file header information
- Cleanup spec file with spec-cleaner
- Use url for source
- Drop desktop file since binary it is calling is no longer
  present (at least since version 1.0.0)
- Update dependencies</changelog>
  <changelog author="i@marguerite.su" date="1467460800">- add patch: oprofile-1.1.0-gcc6.patch, fixed boo#985359
  * cherry picked upstream commit 39d4d4, so please
    remember to drop it next release
  * GCC 6 is pickier about some of the type conversions
    avoid the intermediate bool type to make it happy</changelog>
  <changelog author="sfalken@opensuse.org" date="1489233600">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Depend on java-devel instead of deprecated provide</changelog>
  <changelog author="tonyj@suse.com" date="1502107200">- Update to version 1.2.0
  - New/updated Processor Support
  * ARM Cortex A17
  * IBM Power 9
  * IBM Power 8NV and NVL variants
  * IBM z13
  * Intel Goldmont
  * Intel Kabylake
  * Intel Xeon Phi (Knights Landing)
  * Achitecture specific events for Applied Micro X-Gene
  - Bug fixes
  * #286 - Compilation error: left shift of negative value
  * #288 - oprofile fails to build with --enable-pch and gcc-6.2
  - Other fixes
  * Fixed compile warning and errors when using GCC 6 or GCC 7
  * Avoid using deprecated readdir_r function
  * Store samples in the archive and search the appropriate places
    for samples
  * Only start the application if the perf events setup was successful
  * Corrections in the code and i386 events so "make check" tests pass
- Drop local patch oprofile-1.1.0-gcc6.patch (upstream)</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- Remove qt-devel from BuildRequires, it is no needed anymore.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Rectify RPM groups. Update summary of -devel subpackage.
  Do not ignore errors from useradd/groupadd.
  Avoid running fdupes across partitions.</changelog>
  <changelog author="tonyj@suse.com" date="1540814400">- Update to version 1.3.0 (FATE#326121)
  - New/updated processor support
  * Intel Goldmont Plus
  - Bug fixes
  * #289 No manpage for opjitconv binary
  * Avoid operf crashing on samples from exiting processes when running
    on linux 4.14 and newer kernels.
  * Fix compile warning and errors when using GCC 8
- Add patch: oprofile-handle-empty-event-name-spec-gracefully-for-ppc.patch</changelog>
  <changelog author="tonyj@suse.com" date="1650888000">- Resolve build issues due to binutils 2.34 api changes (bsc#1197793)
  New patch: oprofile-macro-wrappers-to-handle-the-binutils-2.34-api-changes.patch
  New patch: oprofile-include-op_bfd_wrappers.h-in-the-distribution.patch</changelog>
</package>
<package pkgid="e6c0d46730a22b3b8ce387c9fe970bd33db9e085fc74c38263267328c45eee75" name="libopenmpi3-gnu-hpc" arch="aarch64">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="382a61b50754807492364d07b9a1b4991bf31683c4bffc5987f1bf18aea9861a" name="libopenmpi3-gnu-hpc" arch="ppc64le">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="5b27f2ba619ab97cc9dea758f4f5fd81dca9405a4d54a01db311914b64ef123c" name="libopenmpi3-gnu-hpc" arch="s390x">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="3ed27db613cd9be5302370693cc8a802833b63a0da296ef98a5af056d209b7e0" name="libopenmpi3-gnu-hpc" arch="x86_64">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="a2f46e03d758fafa41ea520d6f05a52f35640b24a40de42266f53bb0535c59ae" name="libopenmpi_3_1_6-gnu-hpc" arch="aarch64">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="fc4563f52f0efab59bac545946b6c032a58a3cc0b7f99a8ca9837835c382c2e4" name="libopenmpi_3_1_6-gnu-hpc" arch="ppc64le">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="001b8fe362239e60f168466e0f057bb0e7f9a95a0961ef87569c9a127a9413eb" name="libopenmpi_3_1_6-gnu-hpc" arch="s390x">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="603108d4693e7fa3b1c7817415a7101b1d526da36dcecea9ad5a8d2ea715e078" name="libopenmpi_3_1_6-gnu-hpc" arch="x86_64">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="5463c7254e774822d9bcd0afa58363e965334433cc7193513831642cf8673c38" name="libotr" arch="src">
  <version epoch="0" ver="4.1.1" rel="150000.4.2.1"/>
  <changelog author="bwhiteley@suse.de" date="1130846400">- First time suse package (version 2.0.2)</changelog>
  <changelog author="bwhiteley@suse.de" date="1131537600">- update to version 3.0.0</changelog>
  <changelog author="uli@suse.de" date="1132056000">- build with -O1 on ARM (ICE workaround)</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="aj@suse.de" date="1160222400">- Add dependency on base package.</changelog>
  <changelog author="crrodriguez@suse.de" date="1191931200">- update to version 3.1.0
- run ldconfig
- make autobuild happy fixing the warnings
- fix devel package dependencies.
- remove static libraries
- use library packaging policy</changelog>
  <changelog author="crrodriguez@suse.de" date="1222171200">- update to version 3.2.0
  * dozen bugfixes, see Changelog for details</changelog>
  <changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="nmo.marques@gmail.com" date="1348401600">- Update to version 4.0.0:
  + Support v3 of the OTR protocol
  + The main new feature: sensibly handle the case where a user is
    logged in multiple times to the same IM account
  + instance tags, to support multiple simultaneous logins
  + support for asynchronous private key generation
  + the ability to provide an extra symmetric key to applications
    (with forward secrecy)
  + applications can supply a formation conversion callback if they
    do not natively use XHTML-style UTF8 markup
  + error messages formerly provided by libotr are now handled
    using callbacks to the application, for better i18n support
  + otrl_message_sending now handles message fragmentation
    internally
  + Added support for one-way authentication using an explicit
    question, based on the SOUPS 2008 user study
- Soname bump to 5</changelog>
  <changelog author="nmo.marques@gmail.com" date="1348660800">- Update the license fields (bnc#782253)
- Move COPYING and COPYING.LIB documentation to their respective
  (sub)packages.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1371643200">- verify source signature
- remove autoreconf call</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1389009600">- added patch from upstream:
  * pass-opdata-when-sending-message-fragment.patch -- fixes downstream
    kopete crashes: kde#328999, bnc#857501</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413892800">- libotr 4.1.0:
  * Modernized autoconf build system
  * Use constant-time comparisons where needed
  * Use gcrypt secure memory allocation
  * Correctly reject attempts to fragment a message into too many
    pieces
  * Fix a missing opdata when sending message fragments
  * Don't lose the first user message when REQUIRE_ENCRYPTION is
    set
  * Fix some memory leaks
  * Correctly check for children contexts' state when forgetting a
    context
  * API Changes:
    + Added API functions otrl_context_find_recent_instance and
    otrl_context_find_recent_secure_instance.
- remove pass-opdata-when-sending-message-fragment.patch, upstream
- source tarball signature verification covered by source_validator</changelog>
  <changelog author="astieger@suse.com" date="1457352000">- libotr 4.1.1:
  * Fix an integer overflow bug that can cause a heap buffer
    overflow (and from there remote code execution) on 64-bit
    platforms - CVE-2016-2851 (boo#969785)
  * Fix possible free() of an uninitialized pointer
  * Be stricter about parsing v3 fragments
  * Add a testsuite ("make check" to run it)
  * Fix a memory leak when reading a malformed instance tag file
  * Protocol documentation clarifications
- add libotr-4.1.1-fix-base64-tests.patch to fix test suite failure
- skip failing tests on ppc architectures</changelog>
  <changelog author="mgorse@suse.com" date="1526385600">- Add libotr-test-underrun.patch: fix intermittent buffer underrun
  in the regression test client (bsc#1091664).</changelog>
  <changelog author="adam.majer@suse.de" date="1526472000">- Use %license instead of %doc for license files.</changelog>
</package>
<package pkgid="d936d0266ef158380e5826b56ec0dfaf2b3ce138b1d63d4f82b48de3cc3d6b6e" name="libotr-devel" arch="aarch64">
  <version epoch="0" ver="4.1.1" rel="150000.4.2.1"/>
  <changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="nmo.marques@gmail.com" date="1348401600">- Update to version 4.0.0:
  + Support v3 of the OTR protocol
  + The main new feature: sensibly handle the case where a user is
    logged in multiple times to the same IM account
  + instance tags, to support multiple simultaneous logins
  + support for asynchronous private key generation
  + the ability to provide an extra symmetric key to applications
    (with forward secrecy)
  + applications can supply a formation conversion callback if they
    do not natively use XHTML-style UTF8 markup
  + error messages formerly provided by libotr are now handled
    using callbacks to the application, for better i18n support
  + otrl_message_sending now handles message fragmentation
    internally
  + Added support for one-way authentication using an explicit
    question, based on the SOUPS 2008 user study
- Soname bump to 5</changelog>
  <changelog author="nmo.marques@gmail.com" date="1348660800">- Update the license fields (bnc#782253)
- Move COPYING and COPYING.LIB documentation to their respective
  (sub)packages.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1371643200">- verify source signature
- remove autoreconf call</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1389009600">- added patch from upstream:
  * pass-opdata-when-sending-message-fragment.patch -- fixes downstream
    kopete crashes: kde#328999, bnc#857501</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413892800">- libotr 4.1.0:
  * Modernized autoconf build system
  * Use constant-time comparisons where needed
  * Use gcrypt secure memory allocation
  * Correctly reject attempts to fragment a message into too many
    pieces
  * Fix a missing opdata when sending message fragments
  * Don't lose the first user message when REQUIRE_ENCRYPTION is
    set
  * Fix some memory leaks
  * Correctly check for children contexts' state when forgetting a
    context
  * API Changes:
    + Added API functions otrl_context_find_recent_instance and
    otrl_context_find_recent_secure_instance.
- remove pass-opdata-when-sending-message-fragment.patch, upstream
- source tarball signature verification covered by source_validator</changelog>
  <changelog author="astieger@suse.com" date="1457352000">- libotr 4.1.1:
  * Fix an integer overflow bug that can cause a heap buffer
    overflow (and from there remote code execution) on 64-bit
    platforms - CVE-2016-2851 (boo#969785)
  * Fix possible free() of an uninitialized pointer
  * Be stricter about parsing v3 fragments
  * Add a testsuite ("make check" to run it)
  * Fix a memory leak when reading a malformed instance tag file
  * Protocol documentation clarifications
- add libotr-4.1.1-fix-base64-tests.patch to fix test suite failure
- skip failing tests on ppc architectures</changelog>
  <changelog author="mgorse@suse.com" date="1526385600">- Add libotr-test-underrun.patch: fix intermittent buffer underrun
  in the regression test client (bsc#1091664).</changelog>
  <changelog author="adam.majer@suse.de" date="1526472000">- Use %license instead of %doc for license files.</changelog>
</package>
<package pkgid="383e7d1874ef624931345d7d7bfffe100f93fef3eb8c0ff60bf29737303bdf01" name="libotr-devel" arch="ppc64le">
  <version epoch="0" ver="4.1.1" rel="150000.4.2.1"/>
  <changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="nmo.marques@gmail.com" date="1348401600">- Update to version 4.0.0:
  + Support v3 of the OTR protocol
  + The main new feature: sensibly handle the case where a user is
    logged in multiple times to the same IM account
  + instance tags, to support multiple simultaneous logins
  + support for asynchronous private key generation
  + the ability to provide an extra symmetric key to applications
    (with forward secrecy)
  + applications can supply a formation conversion callback if they
    do not natively use XHTML-style UTF8 markup
  + error messages formerly provided by libotr are now handled
    using callbacks to the application, for better i18n support
  + otrl_message_sending now handles message fragmentation
    internally
  + Added support for one-way authentication using an explicit
    question, based on the SOUPS 2008 user study
- Soname bump to 5</changelog>
  <changelog author="nmo.marques@gmail.com" date="1348660800">- Update the license fields (bnc#782253)
- Move COPYING and COPYING.LIB documentation to their respective
  (sub)packages.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1371643200">- verify source signature
- remove autoreconf call</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1389009600">- added patch from upstream:
  * pass-opdata-when-sending-message-fragment.patch -- fixes downstream
    kopete crashes: kde#328999, bnc#857501</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413892800">- libotr 4.1.0:
  * Modernized autoconf build system
  * Use constant-time comparisons where needed
  * Use gcrypt secure memory allocation
  * Correctly reject attempts to fragment a message into too many
    pieces
  * Fix a missing opdata when sending message fragments
  * Don't lose the first user message when REQUIRE_ENCRYPTION is
    set
  * Fix some memory leaks
  * Correctly check for children contexts' state when forgetting a
    context
  * API Changes:
    + Added API functions otrl_context_find_recent_instance and
    otrl_context_find_recent_secure_instance.
- remove pass-opdata-when-sending-message-fragment.patch, upstream
- source tarball signature verification covered by source_validator</changelog>
  <changelog author="astieger@suse.com" date="1457352000">- libotr 4.1.1:
  * Fix an integer overflow bug that can cause a heap buffer
    overflow (and from there remote code execution) on 64-bit
    platforms - CVE-2016-2851 (boo#969785)
  * Fix possible free() of an uninitialized pointer
  * Be stricter about parsing v3 fragments
  * Add a testsuite ("make check" to run it)
  * Fix a memory leak when reading a malformed instance tag file
  * Protocol documentation clarifications
- add libotr-4.1.1-fix-base64-tests.patch to fix test suite failure
- skip failing tests on ppc architectures</changelog>
  <changelog author="mgorse@suse.com" date="1526385600">- Add libotr-test-underrun.patch: fix intermittent buffer underrun
  in the regression test client (bsc#1091664).</changelog>
  <changelog author="adam.majer@suse.de" date="1526472000">- Use %license instead of %doc for license files.</changelog>
</package>
<package pkgid="97f8a7df48681c651f2db5ab3f5433fe9f2f8ea4713b4a0c91f076d0bb80675d" name="libotr-devel" arch="s390x">
  <version epoch="0" ver="4.1.1" rel="150000.4.2.1"/>
  <changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="nmo.marques@gmail.com" date="1348401600">- Update to version 4.0.0:
  + Support v3 of the OTR protocol
  + The main new feature: sensibly handle the case where a user is
    logged in multiple times to the same IM account
  + instance tags, to support multiple simultaneous logins
  + support for asynchronous private key generation
  + the ability to provide an extra symmetric key to applications
    (with forward secrecy)
  + applications can supply a formation conversion callback if they
    do not natively use XHTML-style UTF8 markup
  + error messages formerly provided by libotr are now handled
    using callbacks to the application, for better i18n support
  + otrl_message_sending now handles message fragmentation
    internally
  + Added support for one-way authentication using an explicit
    question, based on the SOUPS 2008 user study
- Soname bump to 5</changelog>
  <changelog author="nmo.marques@gmail.com" date="1348660800">- Update the license fields (bnc#782253)
- Move COPYING and COPYING.LIB documentation to their respective
  (sub)packages.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1371643200">- verify source signature
- remove autoreconf call</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1389009600">- added patch from upstream:
  * pass-opdata-when-sending-message-fragment.patch -- fixes downstream
    kopete crashes: kde#328999, bnc#857501</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413892800">- libotr 4.1.0:
  * Modernized autoconf build system
  * Use constant-time comparisons where needed
  * Use gcrypt secure memory allocation
  * Correctly reject attempts to fragment a message into too many
    pieces
  * Fix a missing opdata when sending message fragments
  * Don't lose the first user message when REQUIRE_ENCRYPTION is
    set
  * Fix some memory leaks
  * Correctly check for children contexts' state when forgetting a
    context
  * API Changes:
    + Added API functions otrl_context_find_recent_instance and
    otrl_context_find_recent_secure_instance.
- remove pass-opdata-when-sending-message-fragment.patch, upstream
- source tarball signature verification covered by source_validator</changelog>
  <changelog author="astieger@suse.com" date="1457352000">- libotr 4.1.1:
  * Fix an integer overflow bug that can cause a heap buffer
    overflow (and from there remote code execution) on 64-bit
    platforms - CVE-2016-2851 (boo#969785)
  * Fix possible free() of an uninitialized pointer
  * Be stricter about parsing v3 fragments
  * Add a testsuite ("make check" to run it)
  * Fix a memory leak when reading a malformed instance tag file
  * Protocol documentation clarifications
- add libotr-4.1.1-fix-base64-tests.patch to fix test suite failure
- skip failing tests on ppc architectures</changelog>
  <changelog author="mgorse@suse.com" date="1526385600">- Add libotr-test-underrun.patch: fix intermittent buffer underrun
  in the regression test client (bsc#1091664).</changelog>
  <changelog author="adam.majer@suse.de" date="1526472000">- Use %license instead of %doc for license files.</changelog>
</package>
<package pkgid="d9f9bd13d21e2d3a5453f19eef7d1519823f7e8ef391b23ddfc6245fc0831f80" name="libotr-devel" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="150000.4.2.1"/>
  <changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="nmo.marques@gmail.com" date="1348401600">- Update to version 4.0.0:
  + Support v3 of the OTR protocol
  + The main new feature: sensibly handle the case where a user is
    logged in multiple times to the same IM account
  + instance tags, to support multiple simultaneous logins
  + support for asynchronous private key generation
  + the ability to provide an extra symmetric key to applications
    (with forward secrecy)
  + applications can supply a formation conversion callback if they
    do not natively use XHTML-style UTF8 markup
  + error messages formerly provided by libotr are now handled
    using callbacks to the application, for better i18n support
  + otrl_message_sending now handles message fragmentation
    internally
  + Added support for one-way authentication using an explicit
    question, based on the SOUPS 2008 user study
- Soname bump to 5</changelog>
  <changelog author="nmo.marques@gmail.com" date="1348660800">- Update the license fields (bnc#782253)
- Move COPYING and COPYING.LIB documentation to their respective
  (sub)packages.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1371643200">- verify source signature
- remove autoreconf call</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1389009600">- added patch from upstream:
  * pass-opdata-when-sending-message-fragment.patch -- fixes downstream
    kopete crashes: kde#328999, bnc#857501</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413892800">- libotr 4.1.0:
  * Modernized autoconf build system
  * Use constant-time comparisons where needed
  * Use gcrypt secure memory allocation
  * Correctly reject attempts to fragment a message into too many
    pieces
  * Fix a missing opdata when sending message fragments
  * Don't lose the first user message when REQUIRE_ENCRYPTION is
    set
  * Fix some memory leaks
  * Correctly check for children contexts' state when forgetting a
    context
  * API Changes:
    + Added API functions otrl_context_find_recent_instance and
    otrl_context_find_recent_secure_instance.
- remove pass-opdata-when-sending-message-fragment.patch, upstream
- source tarball signature verification covered by source_validator</changelog>
  <changelog author="astieger@suse.com" date="1457352000">- libotr 4.1.1:
  * Fix an integer overflow bug that can cause a heap buffer
    overflow (and from there remote code execution) on 64-bit
    platforms - CVE-2016-2851 (boo#969785)
  * Fix possible free() of an uninitialized pointer
  * Be stricter about parsing v3 fragments
  * Add a testsuite ("make check" to run it)
  * Fix a memory leak when reading a malformed instance tag file
  * Protocol documentation clarifications
- add libotr-4.1.1-fix-base64-tests.patch to fix test suite failure
- skip failing tests on ppc architectures</changelog>
  <changelog author="mgorse@suse.com" date="1526385600">- Add libotr-test-underrun.patch: fix intermittent buffer underrun
  in the regression test client (bsc#1091664).</changelog>
  <changelog author="adam.majer@suse.de" date="1526472000">- Use %license instead of %doc for license files.</changelog>
</package>
<package pkgid="2e90b7e61408dd52c8bc17bd082cdd9fdf7639a3e6465bd5a779ac179cd18037" name="libotr-tools" arch="aarch64">
  <version epoch="0" ver="4.1.1" rel="150000.4.2.1"/>
  <changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="nmo.marques@gmail.com" date="1348401600">- Update to version 4.0.0:
  + Support v3 of the OTR protocol
  + The main new feature: sensibly handle the case where a user is
    logged in multiple times to the same IM account
  + instance tags, to support multiple simultaneous logins
  + support for asynchronous private key generation
  + the ability to provide an extra symmetric key to applications
    (with forward secrecy)
  + applications can supply a formation conversion callback if they
    do not natively use XHTML-style UTF8 markup
  + error messages formerly provided by libotr are now handled
    using callbacks to the application, for better i18n support
  + otrl_message_sending now handles message fragmentation
    internally
  + Added support for one-way authentication using an explicit
    question, based on the SOUPS 2008 user study
- Soname bump to 5</changelog>
  <changelog author="nmo.marques@gmail.com" date="1348660800">- Update the license fields (bnc#782253)
- Move COPYING and COPYING.LIB documentation to their respective
  (sub)packages.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1371643200">- verify source signature
- remove autoreconf call</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1389009600">- added patch from upstream:
  * pass-opdata-when-sending-message-fragment.patch -- fixes downstream
    kopete crashes: kde#328999, bnc#857501</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413892800">- libotr 4.1.0:
  * Modernized autoconf build system
  * Use constant-time comparisons where needed
  * Use gcrypt secure memory allocation
  * Correctly reject attempts to fragment a message into too many
    pieces
  * Fix a missing opdata when sending message fragments
  * Don't lose the first user message when REQUIRE_ENCRYPTION is
    set
  * Fix some memory leaks
  * Correctly check for children contexts' state when forgetting a
    context
  * API Changes:
    + Added API functions otrl_context_find_recent_instance and
    otrl_context_find_recent_secure_instance.
- remove pass-opdata-when-sending-message-fragment.patch, upstream
- source tarball signature verification covered by source_validator</changelog>
  <changelog author="astieger@suse.com" date="1457352000">- libotr 4.1.1:
  * Fix an integer overflow bug that can cause a heap buffer
    overflow (and from there remote code execution) on 64-bit
    platforms - CVE-2016-2851 (boo#969785)
  * Fix possible free() of an uninitialized pointer
  * Be stricter about parsing v3 fragments
  * Add a testsuite ("make check" to run it)
  * Fix a memory leak when reading a malformed instance tag file
  * Protocol documentation clarifications
- add libotr-4.1.1-fix-base64-tests.patch to fix test suite failure
- skip failing tests on ppc architectures</changelog>
  <changelog author="mgorse@suse.com" date="1526385600">- Add libotr-test-underrun.patch: fix intermittent buffer underrun
  in the regression test client (bsc#1091664).</changelog>
  <changelog author="adam.majer@suse.de" date="1526472000">- Use %license instead of %doc for license files.</changelog>
</package>
<package pkgid="ec2651ef846ad6465de2b8f6d58a0cc33e82ff821df77c049f9996842e6b49b0" name="libotr-tools" arch="ppc64le">
  <version epoch="0" ver="4.1.1" rel="150000.4.2.1"/>
  <changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="nmo.marques@gmail.com" date="1348401600">- Update to version 4.0.0:
  + Support v3 of the OTR protocol
  + The main new feature: sensibly handle the case where a user is
    logged in multiple times to the same IM account
  + instance tags, to support multiple simultaneous logins
  + support for asynchronous private key generation
  + the ability to provide an extra symmetric key to applications
    (with forward secrecy)
  + applications can supply a formation conversion callback if they
    do not natively use XHTML-style UTF8 markup
  + error messages formerly provided by libotr are now handled
    using callbacks to the application, for better i18n support
  + otrl_message_sending now handles message fragmentation
    internally
  + Added support for one-way authentication using an explicit
    question, based on the SOUPS 2008 user study
- Soname bump to 5</changelog>
  <changelog author="nmo.marques@gmail.com" date="1348660800">- Update the license fields (bnc#782253)
- Move COPYING and COPYING.LIB documentation to their respective
  (sub)packages.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1371643200">- verify source signature
- remove autoreconf call</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1389009600">- added patch from upstream:
  * pass-opdata-when-sending-message-fragment.patch -- fixes downstream
    kopete crashes: kde#328999, bnc#857501</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413892800">- libotr 4.1.0:
  * Modernized autoconf build system
  * Use constant-time comparisons where needed
  * Use gcrypt secure memory allocation
  * Correctly reject attempts to fragment a message into too many
    pieces
  * Fix a missing opdata when sending message fragments
  * Don't lose the first user message when REQUIRE_ENCRYPTION is
    set
  * Fix some memory leaks
  * Correctly check for children contexts' state when forgetting a
    context
  * API Changes:
    + Added API functions otrl_context_find_recent_instance and
    otrl_context_find_recent_secure_instance.
- remove pass-opdata-when-sending-message-fragment.patch, upstream
- source tarball signature verification covered by source_validator</changelog>
  <changelog author="astieger@suse.com" date="1457352000">- libotr 4.1.1:
  * Fix an integer overflow bug that can cause a heap buffer
    overflow (and from there remote code execution) on 64-bit
    platforms - CVE-2016-2851 (boo#969785)
  * Fix possible free() of an uninitialized pointer
  * Be stricter about parsing v3 fragments
  * Add a testsuite ("make check" to run it)
  * Fix a memory leak when reading a malformed instance tag file
  * Protocol documentation clarifications
- add libotr-4.1.1-fix-base64-tests.patch to fix test suite failure
- skip failing tests on ppc architectures</changelog>
  <changelog author="mgorse@suse.com" date="1526385600">- Add libotr-test-underrun.patch: fix intermittent buffer underrun
  in the regression test client (bsc#1091664).</changelog>
  <changelog author="adam.majer@suse.de" date="1526472000">- Use %license instead of %doc for license files.</changelog>
</package>
<package pkgid="0f4c0ba871e7ab84cd839076e759ae30ba0ec8ca5727d5e916b71fac7bc5e693" name="libotr-tools" arch="s390x">
  <version epoch="0" ver="4.1.1" rel="150000.4.2.1"/>
  <changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="nmo.marques@gmail.com" date="1348401600">- Update to version 4.0.0:
  + Support v3 of the OTR protocol
  + The main new feature: sensibly handle the case where a user is
    logged in multiple times to the same IM account
  + instance tags, to support multiple simultaneous logins
  + support for asynchronous private key generation
  + the ability to provide an extra symmetric key to applications
    (with forward secrecy)
  + applications can supply a formation conversion callback if they
    do not natively use XHTML-style UTF8 markup
  + error messages formerly provided by libotr are now handled
    using callbacks to the application, for better i18n support
  + otrl_message_sending now handles message fragmentation
    internally
  + Added support for one-way authentication using an explicit
    question, based on the SOUPS 2008 user study
- Soname bump to 5</changelog>
  <changelog author="nmo.marques@gmail.com" date="1348660800">- Update the license fields (bnc#782253)
- Move COPYING and COPYING.LIB documentation to their respective
  (sub)packages.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1371643200">- verify source signature
- remove autoreconf call</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1389009600">- added patch from upstream:
  * pass-opdata-when-sending-message-fragment.patch -- fixes downstream
    kopete crashes: kde#328999, bnc#857501</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413892800">- libotr 4.1.0:
  * Modernized autoconf build system
  * Use constant-time comparisons where needed
  * Use gcrypt secure memory allocation
  * Correctly reject attempts to fragment a message into too many
    pieces
  * Fix a missing opdata when sending message fragments
  * Don't lose the first user message when REQUIRE_ENCRYPTION is
    set
  * Fix some memory leaks
  * Correctly check for children contexts' state when forgetting a
    context
  * API Changes:
    + Added API functions otrl_context_find_recent_instance and
    otrl_context_find_recent_secure_instance.
- remove pass-opdata-when-sending-message-fragment.patch, upstream
- source tarball signature verification covered by source_validator</changelog>
  <changelog author="astieger@suse.com" date="1457352000">- libotr 4.1.1:
  * Fix an integer overflow bug that can cause a heap buffer
    overflow (and from there remote code execution) on 64-bit
    platforms - CVE-2016-2851 (boo#969785)
  * Fix possible free() of an uninitialized pointer
  * Be stricter about parsing v3 fragments
  * Add a testsuite ("make check" to run it)
  * Fix a memory leak when reading a malformed instance tag file
  * Protocol documentation clarifications
- add libotr-4.1.1-fix-base64-tests.patch to fix test suite failure
- skip failing tests on ppc architectures</changelog>
  <changelog author="mgorse@suse.com" date="1526385600">- Add libotr-test-underrun.patch: fix intermittent buffer underrun
  in the regression test client (bsc#1091664).</changelog>
  <changelog author="adam.majer@suse.de" date="1526472000">- Use %license instead of %doc for license files.</changelog>
</package>
<package pkgid="dc509f8c5cb9d3a61941dc2b22697cd8754c29af60d6b02c5eecbc65427b7e4e" name="libotr-tools" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="150000.4.2.1"/>
  <changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="nmo.marques@gmail.com" date="1348401600">- Update to version 4.0.0:
  + Support v3 of the OTR protocol
  + The main new feature: sensibly handle the case where a user is
    logged in multiple times to the same IM account
  + instance tags, to support multiple simultaneous logins
  + support for asynchronous private key generation
  + the ability to provide an extra symmetric key to applications
    (with forward secrecy)
  + applications can supply a formation conversion callback if they
    do not natively use XHTML-style UTF8 markup
  + error messages formerly provided by libotr are now handled
    using callbacks to the application, for better i18n support
  + otrl_message_sending now handles message fragmentation
    internally
  + Added support for one-way authentication using an explicit
    question, based on the SOUPS 2008 user study
- Soname bump to 5</changelog>
  <changelog author="nmo.marques@gmail.com" date="1348660800">- Update the license fields (bnc#782253)
- Move COPYING and COPYING.LIB documentation to their respective
  (sub)packages.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1371643200">- verify source signature
- remove autoreconf call</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1389009600">- added patch from upstream:
  * pass-opdata-when-sending-message-fragment.patch -- fixes downstream
    kopete crashes: kde#328999, bnc#857501</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413892800">- libotr 4.1.0:
  * Modernized autoconf build system
  * Use constant-time comparisons where needed
  * Use gcrypt secure memory allocation
  * Correctly reject attempts to fragment a message into too many
    pieces
  * Fix a missing opdata when sending message fragments
  * Don't lose the first user message when REQUIRE_ENCRYPTION is
    set
  * Fix some memory leaks
  * Correctly check for children contexts' state when forgetting a
    context
  * API Changes:
    + Added API functions otrl_context_find_recent_instance and
    otrl_context_find_recent_secure_instance.
- remove pass-opdata-when-sending-message-fragment.patch, upstream
- source tarball signature verification covered by source_validator</changelog>
  <changelog author="astieger@suse.com" date="1457352000">- libotr 4.1.1:
  * Fix an integer overflow bug that can cause a heap buffer
    overflow (and from there remote code execution) on 64-bit
    platforms - CVE-2016-2851 (boo#969785)
  * Fix possible free() of an uninitialized pointer
  * Be stricter about parsing v3 fragments
  * Add a testsuite ("make check" to run it)
  * Fix a memory leak when reading a malformed instance tag file
  * Protocol documentation clarifications
- add libotr-4.1.1-fix-base64-tests.patch to fix test suite failure
- skip failing tests on ppc architectures</changelog>
  <changelog author="mgorse@suse.com" date="1526385600">- Add libotr-test-underrun.patch: fix intermittent buffer underrun
  in the regression test client (bsc#1091664).</changelog>
  <changelog author="adam.majer@suse.de" date="1526472000">- Use %license instead of %doc for license files.</changelog>
</package>
<package pkgid="8d2c84104bfc118b0027a480b1d1b211cae68fbfcd55bb6efc0816d2ed464391" name="libotr5" arch="aarch64">
  <version epoch="0" ver="4.1.1" rel="150000.4.2.1"/>
  <changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="nmo.marques@gmail.com" date="1348401600">- Update to version 4.0.0:
  + Support v3 of the OTR protocol
  + The main new feature: sensibly handle the case where a user is
    logged in multiple times to the same IM account
  + instance tags, to support multiple simultaneous logins
  + support for asynchronous private key generation
  + the ability to provide an extra symmetric key to applications
    (with forward secrecy)
  + applications can supply a formation conversion callback if they
    do not natively use XHTML-style UTF8 markup
  + error messages formerly provided by libotr are now handled
    using callbacks to the application, for better i18n support
  + otrl_message_sending now handles message fragmentation
    internally
  + Added support for one-way authentication using an explicit
    question, based on the SOUPS 2008 user study
- Soname bump to 5</changelog>
  <changelog author="nmo.marques@gmail.com" date="1348660800">- Update the license fields (bnc#782253)
- Move COPYING and COPYING.LIB documentation to their respective
  (sub)packages.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1371643200">- verify source signature
- remove autoreconf call</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1389009600">- added patch from upstream:
  * pass-opdata-when-sending-message-fragment.patch -- fixes downstream
    kopete crashes: kde#328999, bnc#857501</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413892800">- libotr 4.1.0:
  * Modernized autoconf build system
  * Use constant-time comparisons where needed
  * Use gcrypt secure memory allocation
  * Correctly reject attempts to fragment a message into too many
    pieces
  * Fix a missing opdata when sending message fragments
  * Don't lose the first user message when REQUIRE_ENCRYPTION is
    set
  * Fix some memory leaks
  * Correctly check for children contexts' state when forgetting a
    context
  * API Changes:
    + Added API functions otrl_context_find_recent_instance and
    otrl_context_find_recent_secure_instance.
- remove pass-opdata-when-sending-message-fragment.patch, upstream
- source tarball signature verification covered by source_validator</changelog>
  <changelog author="astieger@suse.com" date="1457352000">- libotr 4.1.1:
  * Fix an integer overflow bug that can cause a heap buffer
    overflow (and from there remote code execution) on 64-bit
    platforms - CVE-2016-2851 (boo#969785)
  * Fix possible free() of an uninitialized pointer
  * Be stricter about parsing v3 fragments
  * Add a testsuite ("make check" to run it)
  * Fix a memory leak when reading a malformed instance tag file
  * Protocol documentation clarifications
- add libotr-4.1.1-fix-base64-tests.patch to fix test suite failure
- skip failing tests on ppc architectures</changelog>
  <changelog author="mgorse@suse.com" date="1526385600">- Add libotr-test-underrun.patch: fix intermittent buffer underrun
  in the regression test client (bsc#1091664).</changelog>
  <changelog author="adam.majer@suse.de" date="1526472000">- Use %license instead of %doc for license files.</changelog>
</package>
<package pkgid="47071f3c52672debb8fab4a275411f2ca87627aa0674c3c556aa769c6f9057d4" name="libotr5" arch="ppc64le">
  <version epoch="0" ver="4.1.1" rel="150000.4.2.1"/>
  <changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="nmo.marques@gmail.com" date="1348401600">- Update to version 4.0.0:
  + Support v3 of the OTR protocol
  + The main new feature: sensibly handle the case where a user is
    logged in multiple times to the same IM account
  + instance tags, to support multiple simultaneous logins
  + support for asynchronous private key generation
  + the ability to provide an extra symmetric key to applications
    (with forward secrecy)
  + applications can supply a formation conversion callback if they
    do not natively use XHTML-style UTF8 markup
  + error messages formerly provided by libotr are now handled
    using callbacks to the application, for better i18n support
  + otrl_message_sending now handles message fragmentation
    internally
  + Added support for one-way authentication using an explicit
    question, based on the SOUPS 2008 user study
- Soname bump to 5</changelog>
  <changelog author="nmo.marques@gmail.com" date="1348660800">- Update the license fields (bnc#782253)
- Move COPYING and COPYING.LIB documentation to their respective
  (sub)packages.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1371643200">- verify source signature
- remove autoreconf call</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1389009600">- added patch from upstream:
  * pass-opdata-when-sending-message-fragment.patch -- fixes downstream
    kopete crashes: kde#328999, bnc#857501</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413892800">- libotr 4.1.0:
  * Modernized autoconf build system
  * Use constant-time comparisons where needed
  * Use gcrypt secure memory allocation
  * Correctly reject attempts to fragment a message into too many
    pieces
  * Fix a missing opdata when sending message fragments
  * Don't lose the first user message when REQUIRE_ENCRYPTION is
    set
  * Fix some memory leaks
  * Correctly check for children contexts' state when forgetting a
    context
  * API Changes:
    + Added API functions otrl_context_find_recent_instance and
    otrl_context_find_recent_secure_instance.
- remove pass-opdata-when-sending-message-fragment.patch, upstream
- source tarball signature verification covered by source_validator</changelog>
  <changelog author="astieger@suse.com" date="1457352000">- libotr 4.1.1:
  * Fix an integer overflow bug that can cause a heap buffer
    overflow (and from there remote code execution) on 64-bit
    platforms - CVE-2016-2851 (boo#969785)
  * Fix possible free() of an uninitialized pointer
  * Be stricter about parsing v3 fragments
  * Add a testsuite ("make check" to run it)
  * Fix a memory leak when reading a malformed instance tag file
  * Protocol documentation clarifications
- add libotr-4.1.1-fix-base64-tests.patch to fix test suite failure
- skip failing tests on ppc architectures</changelog>
  <changelog author="mgorse@suse.com" date="1526385600">- Add libotr-test-underrun.patch: fix intermittent buffer underrun
  in the regression test client (bsc#1091664).</changelog>
  <changelog author="adam.majer@suse.de" date="1526472000">- Use %license instead of %doc for license files.</changelog>
</package>
<package pkgid="3a14c67f5aa5c27f818c01d884b5a6ca40a8a93e63ee0b34fc2599349e2c657e" name="libotr5" arch="s390x">
  <version epoch="0" ver="4.1.1" rel="150000.4.2.1"/>
  <changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="nmo.marques@gmail.com" date="1348401600">- Update to version 4.0.0:
  + Support v3 of the OTR protocol
  + The main new feature: sensibly handle the case where a user is
    logged in multiple times to the same IM account
  + instance tags, to support multiple simultaneous logins
  + support for asynchronous private key generation
  + the ability to provide an extra symmetric key to applications
    (with forward secrecy)
  + applications can supply a formation conversion callback if they
    do not natively use XHTML-style UTF8 markup
  + error messages formerly provided by libotr are now handled
    using callbacks to the application, for better i18n support
  + otrl_message_sending now handles message fragmentation
    internally
  + Added support for one-way authentication using an explicit
    question, based on the SOUPS 2008 user study
- Soname bump to 5</changelog>
  <changelog author="nmo.marques@gmail.com" date="1348660800">- Update the license fields (bnc#782253)
- Move COPYING and COPYING.LIB documentation to their respective
  (sub)packages.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1371643200">- verify source signature
- remove autoreconf call</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1389009600">- added patch from upstream:
  * pass-opdata-when-sending-message-fragment.patch -- fixes downstream
    kopete crashes: kde#328999, bnc#857501</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413892800">- libotr 4.1.0:
  * Modernized autoconf build system
  * Use constant-time comparisons where needed
  * Use gcrypt secure memory allocation
  * Correctly reject attempts to fragment a message into too many
    pieces
  * Fix a missing opdata when sending message fragments
  * Don't lose the first user message when REQUIRE_ENCRYPTION is
    set
  * Fix some memory leaks
  * Correctly check for children contexts' state when forgetting a
    context
  * API Changes:
    + Added API functions otrl_context_find_recent_instance and
    otrl_context_find_recent_secure_instance.
- remove pass-opdata-when-sending-message-fragment.patch, upstream
- source tarball signature verification covered by source_validator</changelog>
  <changelog author="astieger@suse.com" date="1457352000">- libotr 4.1.1:
  * Fix an integer overflow bug that can cause a heap buffer
    overflow (and from there remote code execution) on 64-bit
    platforms - CVE-2016-2851 (boo#969785)
  * Fix possible free() of an uninitialized pointer
  * Be stricter about parsing v3 fragments
  * Add a testsuite ("make check" to run it)
  * Fix a memory leak when reading a malformed instance tag file
  * Protocol documentation clarifications
- add libotr-4.1.1-fix-base64-tests.patch to fix test suite failure
- skip failing tests on ppc architectures</changelog>
  <changelog author="mgorse@suse.com" date="1526385600">- Add libotr-test-underrun.patch: fix intermittent buffer underrun
  in the regression test client (bsc#1091664).</changelog>
  <changelog author="adam.majer@suse.de" date="1526472000">- Use %license instead of %doc for license files.</changelog>
</package>
<package pkgid="088a36a3a6537489fd54f520125017f7c907377700246915f33dbc7cbe077581" name="libotr5" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="150000.4.2.1"/>
  <changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="nmo.marques@gmail.com" date="1348401600">- Update to version 4.0.0:
  + Support v3 of the OTR protocol
  + The main new feature: sensibly handle the case where a user is
    logged in multiple times to the same IM account
  + instance tags, to support multiple simultaneous logins
  + support for asynchronous private key generation
  + the ability to provide an extra symmetric key to applications
    (with forward secrecy)
  + applications can supply a formation conversion callback if they
    do not natively use XHTML-style UTF8 markup
  + error messages formerly provided by libotr are now handled
    using callbacks to the application, for better i18n support
  + otrl_message_sending now handles message fragmentation
    internally
  + Added support for one-way authentication using an explicit
    question, based on the SOUPS 2008 user study
- Soname bump to 5</changelog>
  <changelog author="nmo.marques@gmail.com" date="1348660800">- Update the license fields (bnc#782253)
- Move COPYING and COPYING.LIB documentation to their respective
  (sub)packages.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1371643200">- verify source signature
- remove autoreconf call</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1389009600">- added patch from upstream:
  * pass-opdata-when-sending-message-fragment.patch -- fixes downstream
    kopete crashes: kde#328999, bnc#857501</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1413892800">- libotr 4.1.0:
  * Modernized autoconf build system
  * Use constant-time comparisons where needed
  * Use gcrypt secure memory allocation
  * Correctly reject attempts to fragment a message into too many
    pieces
  * Fix a missing opdata when sending message fragments
  * Don't lose the first user message when REQUIRE_ENCRYPTION is
    set
  * Fix some memory leaks
  * Correctly check for children contexts' state when forgetting a
    context
  * API Changes:
    + Added API functions otrl_context_find_recent_instance and
    otrl_context_find_recent_secure_instance.
- remove pass-opdata-when-sending-message-fragment.patch, upstream
- source tarball signature verification covered by source_validator</changelog>
  <changelog author="astieger@suse.com" date="1457352000">- libotr 4.1.1:
  * Fix an integer overflow bug that can cause a heap buffer
    overflow (and from there remote code execution) on 64-bit
    platforms - CVE-2016-2851 (boo#969785)
  * Fix possible free() of an uninitialized pointer
  * Be stricter about parsing v3 fragments
  * Add a testsuite ("make check" to run it)
  * Fix a memory leak when reading a malformed instance tag file
  * Protocol documentation clarifications
- add libotr-4.1.1-fix-base64-tests.patch to fix test suite failure
- skip failing tests on ppc architectures</changelog>
  <changelog author="mgorse@suse.com" date="1526385600">- Add libotr-test-underrun.patch: fix intermittent buffer underrun
  in the regression test client (bsc#1091664).</changelog>
  <changelog author="adam.majer@suse.de" date="1526472000">- Use %license instead of %doc for license files.</changelog>
</package>
<package pkgid="b8fafd036a17bfb39880fd6afab58cb08d7c22af84efde0a965436ad12d03d2d" name="libpcre2-16-0" arch="x86_64">
  <version epoch="0" ver="10.31" rel="150000.3.7.1"/>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1434628800">- PCRE2, a re-working of the original PCRE library to provide an
  entirely new API, version 10.10. Not source compatible.
- copy of the pcre package, with the following adjustments:
  * required name changes
  * adjust pcre-8.21-multilib.patch to pcre2-10.10-multilib.patch
  * drop upstreamed pcre-8.32-visibility.patch
  * --enable-{utf8,unicode-properties} became --enable-unicode
  * drop cpp subpackage
  * make test -&gt; check
  * enable 32 bit character support</changelog>
  <changelog author="astieger@suse.com" date="1436875200">- PCRE2 10.20:
  * Callouts with string arguments and the
    pcre2_callout_enumerate() function have been implemented.
  * The PCRE2_NEVER_BACKSLASH_C option, which locks out the use of
    \C, is added.
  * The PCRE2_ALT_CIRCUMFLEX option lets ^ match after a newline at
    the end of a subject in multiline mode.
  * The way named subpatterns are handled has been refactored. The
    previous approach had several bugs.
  * The handling of \c in EBCDIC environments has been changed to
    conform to the perlebcdic document. (Incompatible change)
  * Bugs have been mended, many of them discovered by fuzzers.</changelog>
  <changelog author="jengelh@inai.de" date="1453032000">- Update to new upstream release 10.21
  * Improve JIT matching speed of patterns starting with + or *.
  * Use memchr() to find the first character in an unanchored match
  in 8-bit mode in the interpreter. This gives a significant speed
  improvement.
  * 10.20 broke the handling of [[:&gt;:]] and [[:&lt;:]] in that
  processing them could involve a buffer overflow if the
  following character was an opening parenthesis.
  * 10.20 also introduced a bug in processing this pattern:
  /((?x)(*:0))#(?'/, which was fixed.
  * A callout with a string argument containing an opening square
  bracket, for example /(?C$[$)(?&lt;]/, was incorrectly processed and
  could provoke a buffer overflow.
  * A possessively repeated conditional group that could match an empty
  string, for example, /(?(R))*+/, was incorrectly compiled.
  * The Unicode tables have been updated to Unicode 8.0.0.
  * An empty comment (?#) in a pattern was incorrectly processed and
  could provoke a buffer overflow.
  * Fix infinite recursion in the JIT compiler when certain patterns
  /such as (?:|a|){100}x/ are analysed.
  * Some patterns with character classes involving [: and \\ were
  incorrectly compiled and could cause reading from uninitialized
  memory or an incorrect error diagnosis. Examples are:
  /[[:\\](?&lt;[::]/ and /[[:\\](?'abc')[a:].
  * A missing closing parenthesis for a callout with a string argument
  was not being diagnosed, possibly leading to a buffer overflow.
  * If (?R was followed by - or + incorrect behaviour happened instead
  of a diagnostic.
  * Fixed an issue when \p{Any} inside an xclass did not read the current
  character.
  * About 80 more fixes, which you can read about in the ChangeLog
  shipped with the libpcre2-8-0 package.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- pcre2 10.22:
  * The POSIX wrapper function regcomp() did not used to
    support back references and subroutine calls if called with the
    REG_NOSUB option. It now does.
  * A new function, pcre2_code_copy(), is added, to make a copy of a
    compiled pattern.
  * Support for string callouts is added to pcre2grep.
  * Added the PCRE2_NO_JIT option to pcre2_match().
  * The pcre2_get_error_message() function now returns with a
    negative error code if the error number it is given is unknown.
  * Several updates have been made to pcre2test and test scripts
  * Fix CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487246400">- pcre2 10.23:
  * major re-factoring of the pcre2_compile.c file
  * Back references are now permitted in lookbehind assertions when
    there are no duplicated group numbers (that is, (?| has not
    been used), and, if the reference is by name, there is only one
    group of that name. The referenced group must, of course be of
    fixed length.
  * \g{+&lt;number&gt;} (e.g. \g{+2} ) is now supported. It is a "forward
    back reference" and can be useful in repetitions
    (compare \g{-&lt;number&gt;} ). Perl does not recognize this syntax.
  * pcre2grep now automatically expands its buffer up to a maximum
    set by --max-buffer-size.
  * The -t option (grand total) has been added to pcre2grep.
  * A new function called pcre2_code_copy_with_tables() exists to
    copy a compiled pattern along with a private copy of the
    character tables that is uses.</changelog>
  <changelog author="astieger@suse.com" date="1493726400">- pcre2grep can now read .gz and .bz2 files directly
- pcre2test is now built to support line editing</changelog>
  <changelog author="astieger@suse.com" date="1501934400">- fix SLE 11 build</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update to new upstream release 10.30
  * The main interpreter, pcre2_match(), has been refactored into
    a new version that does not use recursive function calls for
    remembering backtracking positions. The new implementation
    allows backtracking into recursive group calls in patterns,
    making it more compatible with Perl. For patterns that have a
    lot of backtracking, the heap is now used, and there is
    explicit limit on the amount, settable by
    pcre2_set_heap_limit(). The "recursion limit" is retained,
    but is renamed as "depth limit".
  * The new option PCRE2_ENDANCHORED insists that a pattern match
    must end at the end of the subject.
  * The new option PCRE2_EXTENDED_MORE implements Perl's /xx
    feature, and pcre2test is upgraded to support it. Setting
    within the pattern by (?xx) is Also supported.
  * (?n) can be used to set PCRE2_NO_AUTO_CAPTURE, because Perl
    now has this.
  * Additional pattern compile options in the compile context are
    now available: PCRE2_EXTRA_ALLOW_SURROGATE_ESCAPES and
    PCRE2_EXTRA_BAD_ESCAPE_IS LITERAL.
  * The newline type PCRE2_NEWLINE_NUL is now available.
  * The match limit value now also applies to pcre2_dfa_match()
    as there are patterns that can use up a lot of resources
    without necessarily recursing very deeply.
  * Various minor security fixes found by fuzzers:
    + bsc#1037165: crash for forward reference in lookbehind with
    PCRE2_ANCHORED
    + CVE-2017-8786: heap-based buffer overflow write in pcre2test
    (bsc#1036942)
    + CVE-2017-7186: DoS by triggering an invalid Unicode property
    lookup (bsc#1030066)
- Switch source URLs to use HTTP.</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- Update to new upstream release 10.31
  * New pcre2_config() options: PCRE2_CONFIG_NEVER_BACKSLASH_C and
    PCRE2_CONFIG_COMPILED_WIDTHS.
  * New pcre2_pattern_info() option PCRE2_INFO_EXTRAOPTIONS to
    retrieve the extra compile time options.
  * Public names for all pcre2_compile() error numbers.
  * Added PCRE2_CALLOUT_STARTMATCH and PCRE2_CALLOUT_BACKTRACK
    bits to a new field callout_flags in callout blocks.
- use https for main site
- cleanup with spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1627128000">- Added 0001-Fixed-atomic-group-backtracking-bug.patch
  * bsc#1187937
  * PHP 7.6.4 on s390x returns different results for preg_match
    function as compared to older PHP versions and x86
  * Sourced from upstream subversion commit:
    $ svn log -r965 svn://vcs.pcre.org/pcre2/code/trunk</changelog>
  <changelog author="jsikes@suse.com" date="1651924800">- Added pcre2-10.31-bsc1199232-unicode-property-matching.patch
  * bsc#1199232 / CVE-2022-1586
  * Fixes unicode property matching issue</changelog>
</package>
<package pkgid="6d758351823f22db931b8dbed975950746481b277162635717835229b4ffe025" name="libpcre2-16-0-32bit" arch="x86_64">
  <version epoch="0" ver="10.31" rel="150000.3.7.1"/>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1434628800">- PCRE2, a re-working of the original PCRE library to provide an
  entirely new API, version 10.10. Not source compatible.
- copy of the pcre package, with the following adjustments:
  * required name changes
  * adjust pcre-8.21-multilib.patch to pcre2-10.10-multilib.patch
  * drop upstreamed pcre-8.32-visibility.patch
  * --enable-{utf8,unicode-properties} became --enable-unicode
  * drop cpp subpackage
  * make test -&gt; check
  * enable 32 bit character support</changelog>
  <changelog author="astieger@suse.com" date="1436875200">- PCRE2 10.20:
  * Callouts with string arguments and the
    pcre2_callout_enumerate() function have been implemented.
  * The PCRE2_NEVER_BACKSLASH_C option, which locks out the use of
    \C, is added.
  * The PCRE2_ALT_CIRCUMFLEX option lets ^ match after a newline at
    the end of a subject in multiline mode.
  * The way named subpatterns are handled has been refactored. The
    previous approach had several bugs.
  * The handling of \c in EBCDIC environments has been changed to
    conform to the perlebcdic document. (Incompatible change)
  * Bugs have been mended, many of them discovered by fuzzers.</changelog>
  <changelog author="jengelh@inai.de" date="1453032000">- Update to new upstream release 10.21
  * Improve JIT matching speed of patterns starting with + or *.
  * Use memchr() to find the first character in an unanchored match
  in 8-bit mode in the interpreter. This gives a significant speed
  improvement.
  * 10.20 broke the handling of [[:&gt;:]] and [[:&lt;:]] in that
  processing them could involve a buffer overflow if the
  following character was an opening parenthesis.
  * 10.20 also introduced a bug in processing this pattern:
  /((?x)(*:0))#(?'/, which was fixed.
  * A callout with a string argument containing an opening square
  bracket, for example /(?C$[$)(?&lt;]/, was incorrectly processed and
  could provoke a buffer overflow.
  * A possessively repeated conditional group that could match an empty
  string, for example, /(?(R))*+/, was incorrectly compiled.
  * The Unicode tables have been updated to Unicode 8.0.0.
  * An empty comment (?#) in a pattern was incorrectly processed and
  could provoke a buffer overflow.
  * Fix infinite recursion in the JIT compiler when certain patterns
  /such as (?:|a|){100}x/ are analysed.
  * Some patterns with character classes involving [: and \\ were
  incorrectly compiled and could cause reading from uninitialized
  memory or an incorrect error diagnosis. Examples are:
  /[[:\\](?&lt;[::]/ and /[[:\\](?'abc')[a:].
  * A missing closing parenthesis for a callout with a string argument
  was not being diagnosed, possibly leading to a buffer overflow.
  * If (?R was followed by - or + incorrect behaviour happened instead
  of a diagnostic.
  * Fixed an issue when \p{Any} inside an xclass did not read the current
  character.
  * About 80 more fixes, which you can read about in the ChangeLog
  shipped with the libpcre2-8-0 package.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- pcre2 10.22:
  * The POSIX wrapper function regcomp() did not used to
    support back references and subroutine calls if called with the
    REG_NOSUB option. It now does.
  * A new function, pcre2_code_copy(), is added, to make a copy of a
    compiled pattern.
  * Support for string callouts is added to pcre2grep.
  * Added the PCRE2_NO_JIT option to pcre2_match().
  * The pcre2_get_error_message() function now returns with a
    negative error code if the error number it is given is unknown.
  * Several updates have been made to pcre2test and test scripts
  * Fix CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487246400">- pcre2 10.23:
  * major re-factoring of the pcre2_compile.c file
  * Back references are now permitted in lookbehind assertions when
    there are no duplicated group numbers (that is, (?| has not
    been used), and, if the reference is by name, there is only one
    group of that name. The referenced group must, of course be of
    fixed length.
  * \g{+&lt;number&gt;} (e.g. \g{+2} ) is now supported. It is a "forward
    back reference" and can be useful in repetitions
    (compare \g{-&lt;number&gt;} ). Perl does not recognize this syntax.
  * pcre2grep now automatically expands its buffer up to a maximum
    set by --max-buffer-size.
  * The -t option (grand total) has been added to pcre2grep.
  * A new function called pcre2_code_copy_with_tables() exists to
    copy a compiled pattern along with a private copy of the
    character tables that is uses.</changelog>
  <changelog author="astieger@suse.com" date="1493726400">- pcre2grep can now read .gz and .bz2 files directly
- pcre2test is now built to support line editing</changelog>
  <changelog author="astieger@suse.com" date="1501934400">- fix SLE 11 build</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update to new upstream release 10.30
  * The main interpreter, pcre2_match(), has been refactored into
    a new version that does not use recursive function calls for
    remembering backtracking positions. The new implementation
    allows backtracking into recursive group calls in patterns,
    making it more compatible with Perl. For patterns that have a
    lot of backtracking, the heap is now used, and there is
    explicit limit on the amount, settable by
    pcre2_set_heap_limit(). The "recursion limit" is retained,
    but is renamed as "depth limit".
  * The new option PCRE2_ENDANCHORED insists that a pattern match
    must end at the end of the subject.
  * The new option PCRE2_EXTENDED_MORE implements Perl's /xx
    feature, and pcre2test is upgraded to support it. Setting
    within the pattern by (?xx) is Also supported.
  * (?n) can be used to set PCRE2_NO_AUTO_CAPTURE, because Perl
    now has this.
  * Additional pattern compile options in the compile context are
    now available: PCRE2_EXTRA_ALLOW_SURROGATE_ESCAPES and
    PCRE2_EXTRA_BAD_ESCAPE_IS LITERAL.
  * The newline type PCRE2_NEWLINE_NUL is now available.
  * The match limit value now also applies to pcre2_dfa_match()
    as there are patterns that can use up a lot of resources
    without necessarily recursing very deeply.
  * Various minor security fixes found by fuzzers:
    + bsc#1037165: crash for forward reference in lookbehind with
    PCRE2_ANCHORED
    + CVE-2017-8786: heap-based buffer overflow write in pcre2test
    (bsc#1036942)
    + CVE-2017-7186: DoS by triggering an invalid Unicode property
    lookup (bsc#1030066)
- Switch source URLs to use HTTP.</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- Update to new upstream release 10.31
  * New pcre2_config() options: PCRE2_CONFIG_NEVER_BACKSLASH_C and
    PCRE2_CONFIG_COMPILED_WIDTHS.
  * New pcre2_pattern_info() option PCRE2_INFO_EXTRAOPTIONS to
    retrieve the extra compile time options.
  * Public names for all pcre2_compile() error numbers.
  * Added PCRE2_CALLOUT_STARTMATCH and PCRE2_CALLOUT_BACKTRACK
    bits to a new field callout_flags in callout blocks.
- use https for main site
- cleanup with spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1627128000">- Added 0001-Fixed-atomic-group-backtracking-bug.patch
  * bsc#1187937
  * PHP 7.6.4 on s390x returns different results for preg_match
    function as compared to older PHP versions and x86
  * Sourced from upstream subversion commit:
    $ svn log -r965 svn://vcs.pcre.org/pcre2/code/trunk</changelog>
  <changelog author="jsikes@suse.com" date="1651924800">- Added pcre2-10.31-bsc1199232-unicode-property-matching.patch
  * bsc#1199232 / CVE-2022-1586
  * Fixes unicode property matching issue</changelog>
</package>
<package pkgid="6bdddb6eb449c26df8a3ee1f76884be16a0ce5cb5e21cafdd6acfb020b2d5e99" name="libpcre2-32-0" arch="x86_64">
  <version epoch="0" ver="10.31" rel="150000.3.7.1"/>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1434628800">- PCRE2, a re-working of the original PCRE library to provide an
  entirely new API, version 10.10. Not source compatible.
- copy of the pcre package, with the following adjustments:
  * required name changes
  * adjust pcre-8.21-multilib.patch to pcre2-10.10-multilib.patch
  * drop upstreamed pcre-8.32-visibility.patch
  * --enable-{utf8,unicode-properties} became --enable-unicode
  * drop cpp subpackage
  * make test -&gt; check
  * enable 32 bit character support</changelog>
  <changelog author="astieger@suse.com" date="1436875200">- PCRE2 10.20:
  * Callouts with string arguments and the
    pcre2_callout_enumerate() function have been implemented.
  * The PCRE2_NEVER_BACKSLASH_C option, which locks out the use of
    \C, is added.
  * The PCRE2_ALT_CIRCUMFLEX option lets ^ match after a newline at
    the end of a subject in multiline mode.
  * The way named subpatterns are handled has been refactored. The
    previous approach had several bugs.
  * The handling of \c in EBCDIC environments has been changed to
    conform to the perlebcdic document. (Incompatible change)
  * Bugs have been mended, many of them discovered by fuzzers.</changelog>
  <changelog author="jengelh@inai.de" date="1453032000">- Update to new upstream release 10.21
  * Improve JIT matching speed of patterns starting with + or *.
  * Use memchr() to find the first character in an unanchored match
  in 8-bit mode in the interpreter. This gives a significant speed
  improvement.
  * 10.20 broke the handling of [[:&gt;:]] and [[:&lt;:]] in that
  processing them could involve a buffer overflow if the
  following character was an opening parenthesis.
  * 10.20 also introduced a bug in processing this pattern:
  /((?x)(*:0))#(?'/, which was fixed.
  * A callout with a string argument containing an opening square
  bracket, for example /(?C$[$)(?&lt;]/, was incorrectly processed and
  could provoke a buffer overflow.
  * A possessively repeated conditional group that could match an empty
  string, for example, /(?(R))*+/, was incorrectly compiled.
  * The Unicode tables have been updated to Unicode 8.0.0.
  * An empty comment (?#) in a pattern was incorrectly processed and
  could provoke a buffer overflow.
  * Fix infinite recursion in the JIT compiler when certain patterns
  /such as (?:|a|){100}x/ are analysed.
  * Some patterns with character classes involving [: and \\ were
  incorrectly compiled and could cause reading from uninitialized
  memory or an incorrect error diagnosis. Examples are:
  /[[:\\](?&lt;[::]/ and /[[:\\](?'abc')[a:].
  * A missing closing parenthesis for a callout with a string argument
  was not being diagnosed, possibly leading to a buffer overflow.
  * If (?R was followed by - or + incorrect behaviour happened instead
  of a diagnostic.
  * Fixed an issue when \p{Any} inside an xclass did not read the current
  character.
  * About 80 more fixes, which you can read about in the ChangeLog
  shipped with the libpcre2-8-0 package.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- pcre2 10.22:
  * The POSIX wrapper function regcomp() did not used to
    support back references and subroutine calls if called with the
    REG_NOSUB option. It now does.
  * A new function, pcre2_code_copy(), is added, to make a copy of a
    compiled pattern.
  * Support for string callouts is added to pcre2grep.
  * Added the PCRE2_NO_JIT option to pcre2_match().
  * The pcre2_get_error_message() function now returns with a
    negative error code if the error number it is given is unknown.
  * Several updates have been made to pcre2test and test scripts
  * Fix CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487246400">- pcre2 10.23:
  * major re-factoring of the pcre2_compile.c file
  * Back references are now permitted in lookbehind assertions when
    there are no duplicated group numbers (that is, (?| has not
    been used), and, if the reference is by name, there is only one
    group of that name. The referenced group must, of course be of
    fixed length.
  * \g{+&lt;number&gt;} (e.g. \g{+2} ) is now supported. It is a "forward
    back reference" and can be useful in repetitions
    (compare \g{-&lt;number&gt;} ). Perl does not recognize this syntax.
  * pcre2grep now automatically expands its buffer up to a maximum
    set by --max-buffer-size.
  * The -t option (grand total) has been added to pcre2grep.
  * A new function called pcre2_code_copy_with_tables() exists to
    copy a compiled pattern along with a private copy of the
    character tables that is uses.</changelog>
  <changelog author="astieger@suse.com" date="1493726400">- pcre2grep can now read .gz and .bz2 files directly
- pcre2test is now built to support line editing</changelog>
  <changelog author="astieger@suse.com" date="1501934400">- fix SLE 11 build</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update to new upstream release 10.30
  * The main interpreter, pcre2_match(), has been refactored into
    a new version that does not use recursive function calls for
    remembering backtracking positions. The new implementation
    allows backtracking into recursive group calls in patterns,
    making it more compatible with Perl. For patterns that have a
    lot of backtracking, the heap is now used, and there is
    explicit limit on the amount, settable by
    pcre2_set_heap_limit(). The "recursion limit" is retained,
    but is renamed as "depth limit".
  * The new option PCRE2_ENDANCHORED insists that a pattern match
    must end at the end of the subject.
  * The new option PCRE2_EXTENDED_MORE implements Perl's /xx
    feature, and pcre2test is upgraded to support it. Setting
    within the pattern by (?xx) is Also supported.
  * (?n) can be used to set PCRE2_NO_AUTO_CAPTURE, because Perl
    now has this.
  * Additional pattern compile options in the compile context are
    now available: PCRE2_EXTRA_ALLOW_SURROGATE_ESCAPES and
    PCRE2_EXTRA_BAD_ESCAPE_IS LITERAL.
  * The newline type PCRE2_NEWLINE_NUL is now available.
  * The match limit value now also applies to pcre2_dfa_match()
    as there are patterns that can use up a lot of resources
    without necessarily recursing very deeply.
  * Various minor security fixes found by fuzzers:
    + bsc#1037165: crash for forward reference in lookbehind with
    PCRE2_ANCHORED
    + CVE-2017-8786: heap-based buffer overflow write in pcre2test
    (bsc#1036942)
    + CVE-2017-7186: DoS by triggering an invalid Unicode property
    lookup (bsc#1030066)
- Switch source URLs to use HTTP.</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- Update to new upstream release 10.31
  * New pcre2_config() options: PCRE2_CONFIG_NEVER_BACKSLASH_C and
    PCRE2_CONFIG_COMPILED_WIDTHS.
  * New pcre2_pattern_info() option PCRE2_INFO_EXTRAOPTIONS to
    retrieve the extra compile time options.
  * Public names for all pcre2_compile() error numbers.
  * Added PCRE2_CALLOUT_STARTMATCH and PCRE2_CALLOUT_BACKTRACK
    bits to a new field callout_flags in callout blocks.
- use https for main site
- cleanup with spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1627128000">- Added 0001-Fixed-atomic-group-backtracking-bug.patch
  * bsc#1187937
  * PHP 7.6.4 on s390x returns different results for preg_match
    function as compared to older PHP versions and x86
  * Sourced from upstream subversion commit:
    $ svn log -r965 svn://vcs.pcre.org/pcre2/code/trunk</changelog>
  <changelog author="jsikes@suse.com" date="1651924800">- Added pcre2-10.31-bsc1199232-unicode-property-matching.patch
  * bsc#1199232 / CVE-2022-1586
  * Fixes unicode property matching issue</changelog>
</package>
<package pkgid="1ea12bb454a8ece319a65441c9fd2c7284ebb07633fab41e1504eac305295363" name="libpcre2-32-0-32bit" arch="x86_64">
  <version epoch="0" ver="10.31" rel="150000.3.7.1"/>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1434628800">- PCRE2, a re-working of the original PCRE library to provide an
  entirely new API, version 10.10. Not source compatible.
- copy of the pcre package, with the following adjustments:
  * required name changes
  * adjust pcre-8.21-multilib.patch to pcre2-10.10-multilib.patch
  * drop upstreamed pcre-8.32-visibility.patch
  * --enable-{utf8,unicode-properties} became --enable-unicode
  * drop cpp subpackage
  * make test -&gt; check
  * enable 32 bit character support</changelog>
  <changelog author="astieger@suse.com" date="1436875200">- PCRE2 10.20:
  * Callouts with string arguments and the
    pcre2_callout_enumerate() function have been implemented.
  * The PCRE2_NEVER_BACKSLASH_C option, which locks out the use of
    \C, is added.
  * The PCRE2_ALT_CIRCUMFLEX option lets ^ match after a newline at
    the end of a subject in multiline mode.
  * The way named subpatterns are handled has been refactored. The
    previous approach had several bugs.
  * The handling of \c in EBCDIC environments has been changed to
    conform to the perlebcdic document. (Incompatible change)
  * Bugs have been mended, many of them discovered by fuzzers.</changelog>
  <changelog author="jengelh@inai.de" date="1453032000">- Update to new upstream release 10.21
  * Improve JIT matching speed of patterns starting with + or *.
  * Use memchr() to find the first character in an unanchored match
  in 8-bit mode in the interpreter. This gives a significant speed
  improvement.
  * 10.20 broke the handling of [[:&gt;:]] and [[:&lt;:]] in that
  processing them could involve a buffer overflow if the
  following character was an opening parenthesis.
  * 10.20 also introduced a bug in processing this pattern:
  /((?x)(*:0))#(?'/, which was fixed.
  * A callout with a string argument containing an opening square
  bracket, for example /(?C$[$)(?&lt;]/, was incorrectly processed and
  could provoke a buffer overflow.
  * A possessively repeated conditional group that could match an empty
  string, for example, /(?(R))*+/, was incorrectly compiled.
  * The Unicode tables have been updated to Unicode 8.0.0.
  * An empty comment (?#) in a pattern was incorrectly processed and
  could provoke a buffer overflow.
  * Fix infinite recursion in the JIT compiler when certain patterns
  /such as (?:|a|){100}x/ are analysed.
  * Some patterns with character classes involving [: and \\ were
  incorrectly compiled and could cause reading from uninitialized
  memory or an incorrect error diagnosis. Examples are:
  /[[:\\](?&lt;[::]/ and /[[:\\](?'abc')[a:].
  * A missing closing parenthesis for a callout with a string argument
  was not being diagnosed, possibly leading to a buffer overflow.
  * If (?R was followed by - or + incorrect behaviour happened instead
  of a diagnostic.
  * Fixed an issue when \p{Any} inside an xclass did not read the current
  character.
  * About 80 more fixes, which you can read about in the ChangeLog
  shipped with the libpcre2-8-0 package.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- pcre2 10.22:
  * The POSIX wrapper function regcomp() did not used to
    support back references and subroutine calls if called with the
    REG_NOSUB option. It now does.
  * A new function, pcre2_code_copy(), is added, to make a copy of a
    compiled pattern.
  * Support for string callouts is added to pcre2grep.
  * Added the PCRE2_NO_JIT option to pcre2_match().
  * The pcre2_get_error_message() function now returns with a
    negative error code if the error number it is given is unknown.
  * Several updates have been made to pcre2test and test scripts
  * Fix CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487246400">- pcre2 10.23:
  * major re-factoring of the pcre2_compile.c file
  * Back references are now permitted in lookbehind assertions when
    there are no duplicated group numbers (that is, (?| has not
    been used), and, if the reference is by name, there is only one
    group of that name. The referenced group must, of course be of
    fixed length.
  * \g{+&lt;number&gt;} (e.g. \g{+2} ) is now supported. It is a "forward
    back reference" and can be useful in repetitions
    (compare \g{-&lt;number&gt;} ). Perl does not recognize this syntax.
  * pcre2grep now automatically expands its buffer up to a maximum
    set by --max-buffer-size.
  * The -t option (grand total) has been added to pcre2grep.
  * A new function called pcre2_code_copy_with_tables() exists to
    copy a compiled pattern along with a private copy of the
    character tables that is uses.</changelog>
  <changelog author="astieger@suse.com" date="1493726400">- pcre2grep can now read .gz and .bz2 files directly
- pcre2test is now built to support line editing</changelog>
  <changelog author="astieger@suse.com" date="1501934400">- fix SLE 11 build</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update to new upstream release 10.30
  * The main interpreter, pcre2_match(), has been refactored into
    a new version that does not use recursive function calls for
    remembering backtracking positions. The new implementation
    allows backtracking into recursive group calls in patterns,
    making it more compatible with Perl. For patterns that have a
    lot of backtracking, the heap is now used, and there is
    explicit limit on the amount, settable by
    pcre2_set_heap_limit(). The "recursion limit" is retained,
    but is renamed as "depth limit".
  * The new option PCRE2_ENDANCHORED insists that a pattern match
    must end at the end of the subject.
  * The new option PCRE2_EXTENDED_MORE implements Perl's /xx
    feature, and pcre2test is upgraded to support it. Setting
    within the pattern by (?xx) is Also supported.
  * (?n) can be used to set PCRE2_NO_AUTO_CAPTURE, because Perl
    now has this.
  * Additional pattern compile options in the compile context are
    now available: PCRE2_EXTRA_ALLOW_SURROGATE_ESCAPES and
    PCRE2_EXTRA_BAD_ESCAPE_IS LITERAL.
  * The newline type PCRE2_NEWLINE_NUL is now available.
  * The match limit value now also applies to pcre2_dfa_match()
    as there are patterns that can use up a lot of resources
    without necessarily recursing very deeply.
  * Various minor security fixes found by fuzzers:
    + bsc#1037165: crash for forward reference in lookbehind with
    PCRE2_ANCHORED
    + CVE-2017-8786: heap-based buffer overflow write in pcre2test
    (bsc#1036942)
    + CVE-2017-7186: DoS by triggering an invalid Unicode property
    lookup (bsc#1030066)
- Switch source URLs to use HTTP.</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- Update to new upstream release 10.31
  * New pcre2_config() options: PCRE2_CONFIG_NEVER_BACKSLASH_C and
    PCRE2_CONFIG_COMPILED_WIDTHS.
  * New pcre2_pattern_info() option PCRE2_INFO_EXTRAOPTIONS to
    retrieve the extra compile time options.
  * Public names for all pcre2_compile() error numbers.
  * Added PCRE2_CALLOUT_STARTMATCH and PCRE2_CALLOUT_BACKTRACK
    bits to a new field callout_flags in callout blocks.
- use https for main site
- cleanup with spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1627128000">- Added 0001-Fixed-atomic-group-backtracking-bug.patch
  * bsc#1187937
  * PHP 7.6.4 on s390x returns different results for preg_match
    function as compared to older PHP versions and x86
  * Sourced from upstream subversion commit:
    $ svn log -r965 svn://vcs.pcre.org/pcre2/code/trunk</changelog>
  <changelog author="jsikes@suse.com" date="1651924800">- Added pcre2-10.31-bsc1199232-unicode-property-matching.patch
  * bsc#1199232 / CVE-2022-1586
  * Fixes unicode property matching issue</changelog>
</package>
<package pkgid="71ba51368c1b016e3cc4e558bcb7816ce73e0399c9dfc49b4a7a56dc4db4e82c" name="libpcre2-8-0" arch="x86_64">
  <version epoch="0" ver="10.31" rel="150000.3.7.1"/>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1434628800">- PCRE2, a re-working of the original PCRE library to provide an
  entirely new API, version 10.10. Not source compatible.
- copy of the pcre package, with the following adjustments:
  * required name changes
  * adjust pcre-8.21-multilib.patch to pcre2-10.10-multilib.patch
  * drop upstreamed pcre-8.32-visibility.patch
  * --enable-{utf8,unicode-properties} became --enable-unicode
  * drop cpp subpackage
  * make test -&gt; check
  * enable 32 bit character support</changelog>
  <changelog author="astieger@suse.com" date="1436875200">- PCRE2 10.20:
  * Callouts with string arguments and the
    pcre2_callout_enumerate() function have been implemented.
  * The PCRE2_NEVER_BACKSLASH_C option, which locks out the use of
    \C, is added.
  * The PCRE2_ALT_CIRCUMFLEX option lets ^ match after a newline at
    the end of a subject in multiline mode.
  * The way named subpatterns are handled has been refactored. The
    previous approach had several bugs.
  * The handling of \c in EBCDIC environments has been changed to
    conform to the perlebcdic document. (Incompatible change)
  * Bugs have been mended, many of them discovered by fuzzers.</changelog>
  <changelog author="jengelh@inai.de" date="1453032000">- Update to new upstream release 10.21
  * Improve JIT matching speed of patterns starting with + or *.
  * Use memchr() to find the first character in an unanchored match
  in 8-bit mode in the interpreter. This gives a significant speed
  improvement.
  * 10.20 broke the handling of [[:&gt;:]] and [[:&lt;:]] in that
  processing them could involve a buffer overflow if the
  following character was an opening parenthesis.
  * 10.20 also introduced a bug in processing this pattern:
  /((?x)(*:0))#(?'/, which was fixed.
  * A callout with a string argument containing an opening square
  bracket, for example /(?C$[$)(?&lt;]/, was incorrectly processed and
  could provoke a buffer overflow.
  * A possessively repeated conditional group that could match an empty
  string, for example, /(?(R))*+/, was incorrectly compiled.
  * The Unicode tables have been updated to Unicode 8.0.0.
  * An empty comment (?#) in a pattern was incorrectly processed and
  could provoke a buffer overflow.
  * Fix infinite recursion in the JIT compiler when certain patterns
  /such as (?:|a|){100}x/ are analysed.
  * Some patterns with character classes involving [: and \\ were
  incorrectly compiled and could cause reading from uninitialized
  memory or an incorrect error diagnosis. Examples are:
  /[[:\\](?&lt;[::]/ and /[[:\\](?'abc')[a:].
  * A missing closing parenthesis for a callout with a string argument
  was not being diagnosed, possibly leading to a buffer overflow.
  * If (?R was followed by - or + incorrect behaviour happened instead
  of a diagnostic.
  * Fixed an issue when \p{Any} inside an xclass did not read the current
  character.
  * About 80 more fixes, which you can read about in the ChangeLog
  shipped with the libpcre2-8-0 package.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- pcre2 10.22:
  * The POSIX wrapper function regcomp() did not used to
    support back references and subroutine calls if called with the
    REG_NOSUB option. It now does.
  * A new function, pcre2_code_copy(), is added, to make a copy of a
    compiled pattern.
  * Support for string callouts is added to pcre2grep.
  * Added the PCRE2_NO_JIT option to pcre2_match().
  * The pcre2_get_error_message() function now returns with a
    negative error code if the error number it is given is unknown.
  * Several updates have been made to pcre2test and test scripts
  * Fix CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487246400">- pcre2 10.23:
  * major re-factoring of the pcre2_compile.c file
  * Back references are now permitted in lookbehind assertions when
    there are no duplicated group numbers (that is, (?| has not
    been used), and, if the reference is by name, there is only one
    group of that name. The referenced group must, of course be of
    fixed length.
  * \g{+&lt;number&gt;} (e.g. \g{+2} ) is now supported. It is a "forward
    back reference" and can be useful in repetitions
    (compare \g{-&lt;number&gt;} ). Perl does not recognize this syntax.
  * pcre2grep now automatically expands its buffer up to a maximum
    set by --max-buffer-size.
  * The -t option (grand total) has been added to pcre2grep.
  * A new function called pcre2_code_copy_with_tables() exists to
    copy a compiled pattern along with a private copy of the
    character tables that is uses.</changelog>
  <changelog author="astieger@suse.com" date="1493726400">- pcre2grep can now read .gz and .bz2 files directly
- pcre2test is now built to support line editing</changelog>
  <changelog author="astieger@suse.com" date="1501934400">- fix SLE 11 build</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update to new upstream release 10.30
  * The main interpreter, pcre2_match(), has been refactored into
    a new version that does not use recursive function calls for
    remembering backtracking positions. The new implementation
    allows backtracking into recursive group calls in patterns,
    making it more compatible with Perl. For patterns that have a
    lot of backtracking, the heap is now used, and there is
    explicit limit on the amount, settable by
    pcre2_set_heap_limit(). The "recursion limit" is retained,
    but is renamed as "depth limit".
  * The new option PCRE2_ENDANCHORED insists that a pattern match
    must end at the end of the subject.
  * The new option PCRE2_EXTENDED_MORE implements Perl's /xx
    feature, and pcre2test is upgraded to support it. Setting
    within the pattern by (?xx) is Also supported.
  * (?n) can be used to set PCRE2_NO_AUTO_CAPTURE, because Perl
    now has this.
  * Additional pattern compile options in the compile context are
    now available: PCRE2_EXTRA_ALLOW_SURROGATE_ESCAPES and
    PCRE2_EXTRA_BAD_ESCAPE_IS LITERAL.
  * The newline type PCRE2_NEWLINE_NUL is now available.
  * The match limit value now also applies to pcre2_dfa_match()
    as there are patterns that can use up a lot of resources
    without necessarily recursing very deeply.
  * Various minor security fixes found by fuzzers:
    + bsc#1037165: crash for forward reference in lookbehind with
    PCRE2_ANCHORED
    + CVE-2017-8786: heap-based buffer overflow write in pcre2test
    (bsc#1036942)
    + CVE-2017-7186: DoS by triggering an invalid Unicode property
    lookup (bsc#1030066)
- Switch source URLs to use HTTP.</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- Update to new upstream release 10.31
  * New pcre2_config() options: PCRE2_CONFIG_NEVER_BACKSLASH_C and
    PCRE2_CONFIG_COMPILED_WIDTHS.
  * New pcre2_pattern_info() option PCRE2_INFO_EXTRAOPTIONS to
    retrieve the extra compile time options.
  * Public names for all pcre2_compile() error numbers.
  * Added PCRE2_CALLOUT_STARTMATCH and PCRE2_CALLOUT_BACKTRACK
    bits to a new field callout_flags in callout blocks.
- use https for main site
- cleanup with spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1627128000">- Added 0001-Fixed-atomic-group-backtracking-bug.patch
  * bsc#1187937
  * PHP 7.6.4 on s390x returns different results for preg_match
    function as compared to older PHP versions and x86
  * Sourced from upstream subversion commit:
    $ svn log -r965 svn://vcs.pcre.org/pcre2/code/trunk</changelog>
  <changelog author="jsikes@suse.com" date="1651924800">- Added pcre2-10.31-bsc1199232-unicode-property-matching.patch
  * bsc#1199232 / CVE-2022-1586
  * Fixes unicode property matching issue</changelog>
</package>
<package pkgid="862eef8f9bd67501ea069742da91470eae1b06407017c61f8d899cf705fdbbff" name="libpcre2-8-0-32bit" arch="x86_64">
  <version epoch="0" ver="10.31" rel="150000.3.7.1"/>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1434628800">- PCRE2, a re-working of the original PCRE library to provide an
  entirely new API, version 10.10. Not source compatible.
- copy of the pcre package, with the following adjustments:
  * required name changes
  * adjust pcre-8.21-multilib.patch to pcre2-10.10-multilib.patch
  * drop upstreamed pcre-8.32-visibility.patch
  * --enable-{utf8,unicode-properties} became --enable-unicode
  * drop cpp subpackage
  * make test -&gt; check
  * enable 32 bit character support</changelog>
  <changelog author="astieger@suse.com" date="1436875200">- PCRE2 10.20:
  * Callouts with string arguments and the
    pcre2_callout_enumerate() function have been implemented.
  * The PCRE2_NEVER_BACKSLASH_C option, which locks out the use of
    \C, is added.
  * The PCRE2_ALT_CIRCUMFLEX option lets ^ match after a newline at
    the end of a subject in multiline mode.
  * The way named subpatterns are handled has been refactored. The
    previous approach had several bugs.
  * The handling of \c in EBCDIC environments has been changed to
    conform to the perlebcdic document. (Incompatible change)
  * Bugs have been mended, many of them discovered by fuzzers.</changelog>
  <changelog author="jengelh@inai.de" date="1453032000">- Update to new upstream release 10.21
  * Improve JIT matching speed of patterns starting with + or *.
  * Use memchr() to find the first character in an unanchored match
  in 8-bit mode in the interpreter. This gives a significant speed
  improvement.
  * 10.20 broke the handling of [[:&gt;:]] and [[:&lt;:]] in that
  processing them could involve a buffer overflow if the
  following character was an opening parenthesis.
  * 10.20 also introduced a bug in processing this pattern:
  /((?x)(*:0))#(?'/, which was fixed.
  * A callout with a string argument containing an opening square
  bracket, for example /(?C$[$)(?&lt;]/, was incorrectly processed and
  could provoke a buffer overflow.
  * A possessively repeated conditional group that could match an empty
  string, for example, /(?(R))*+/, was incorrectly compiled.
  * The Unicode tables have been updated to Unicode 8.0.0.
  * An empty comment (?#) in a pattern was incorrectly processed and
  could provoke a buffer overflow.
  * Fix infinite recursion in the JIT compiler when certain patterns
  /such as (?:|a|){100}x/ are analysed.
  * Some patterns with character classes involving [: and \\ were
  incorrectly compiled and could cause reading from uninitialized
  memory or an incorrect error diagnosis. Examples are:
  /[[:\\](?&lt;[::]/ and /[[:\\](?'abc')[a:].
  * A missing closing parenthesis for a callout with a string argument
  was not being diagnosed, possibly leading to a buffer overflow.
  * If (?R was followed by - or + incorrect behaviour happened instead
  of a diagnostic.
  * Fixed an issue when \p{Any} inside an xclass did not read the current
  character.
  * About 80 more fixes, which you can read about in the ChangeLog
  shipped with the libpcre2-8-0 package.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- pcre2 10.22:
  * The POSIX wrapper function regcomp() did not used to
    support back references and subroutine calls if called with the
    REG_NOSUB option. It now does.
  * A new function, pcre2_code_copy(), is added, to make a copy of a
    compiled pattern.
  * Support for string callouts is added to pcre2grep.
  * Added the PCRE2_NO_JIT option to pcre2_match().
  * The pcre2_get_error_message() function now returns with a
    negative error code if the error number it is given is unknown.
  * Several updates have been made to pcre2test and test scripts
  * Fix CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487246400">- pcre2 10.23:
  * major re-factoring of the pcre2_compile.c file
  * Back references are now permitted in lookbehind assertions when
    there are no duplicated group numbers (that is, (?| has not
    been used), and, if the reference is by name, there is only one
    group of that name. The referenced group must, of course be of
    fixed length.
  * \g{+&lt;number&gt;} (e.g. \g{+2} ) is now supported. It is a "forward
    back reference" and can be useful in repetitions
    (compare \g{-&lt;number&gt;} ). Perl does not recognize this syntax.
  * pcre2grep now automatically expands its buffer up to a maximum
    set by --max-buffer-size.
  * The -t option (grand total) has been added to pcre2grep.
  * A new function called pcre2_code_copy_with_tables() exists to
    copy a compiled pattern along with a private copy of the
    character tables that is uses.</changelog>
  <changelog author="astieger@suse.com" date="1493726400">- pcre2grep can now read .gz and .bz2 files directly
- pcre2test is now built to support line editing</changelog>
  <changelog author="astieger@suse.com" date="1501934400">- fix SLE 11 build</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update to new upstream release 10.30
  * The main interpreter, pcre2_match(), has been refactored into
    a new version that does not use recursive function calls for
    remembering backtracking positions. The new implementation
    allows backtracking into recursive group calls in patterns,
    making it more compatible with Perl. For patterns that have a
    lot of backtracking, the heap is now used, and there is
    explicit limit on the amount, settable by
    pcre2_set_heap_limit(). The "recursion limit" is retained,
    but is renamed as "depth limit".
  * The new option PCRE2_ENDANCHORED insists that a pattern match
    must end at the end of the subject.
  * The new option PCRE2_EXTENDED_MORE implements Perl's /xx
    feature, and pcre2test is upgraded to support it. Setting
    within the pattern by (?xx) is Also supported.
  * (?n) can be used to set PCRE2_NO_AUTO_CAPTURE, because Perl
    now has this.
  * Additional pattern compile options in the compile context are
    now available: PCRE2_EXTRA_ALLOW_SURROGATE_ESCAPES and
    PCRE2_EXTRA_BAD_ESCAPE_IS LITERAL.
  * The newline type PCRE2_NEWLINE_NUL is now available.
  * The match limit value now also applies to pcre2_dfa_match()
    as there are patterns that can use up a lot of resources
    without necessarily recursing very deeply.
  * Various minor security fixes found by fuzzers:
    + bsc#1037165: crash for forward reference in lookbehind with
    PCRE2_ANCHORED
    + CVE-2017-8786: heap-based buffer overflow write in pcre2test
    (bsc#1036942)
    + CVE-2017-7186: DoS by triggering an invalid Unicode property
    lookup (bsc#1030066)
- Switch source URLs to use HTTP.</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- Update to new upstream release 10.31
  * New pcre2_config() options: PCRE2_CONFIG_NEVER_BACKSLASH_C and
    PCRE2_CONFIG_COMPILED_WIDTHS.
  * New pcre2_pattern_info() option PCRE2_INFO_EXTRAOPTIONS to
    retrieve the extra compile time options.
  * Public names for all pcre2_compile() error numbers.
  * Added PCRE2_CALLOUT_STARTMATCH and PCRE2_CALLOUT_BACKTRACK
    bits to a new field callout_flags in callout blocks.
- use https for main site
- cleanup with spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1627128000">- Added 0001-Fixed-atomic-group-backtracking-bug.patch
  * bsc#1187937
  * PHP 7.6.4 on s390x returns different results for preg_match
    function as compared to older PHP versions and x86
  * Sourced from upstream subversion commit:
    $ svn log -r965 svn://vcs.pcre.org/pcre2/code/trunk</changelog>
  <changelog author="jsikes@suse.com" date="1651924800">- Added pcre2-10.31-bsc1199232-unicode-property-matching.patch
  * bsc#1199232 / CVE-2022-1586
  * Fixes unicode property matching issue</changelog>
</package>
<package pkgid="2a5853b4d3dd2d0390547705f69ee183c86250c02309ee0780cd7feaa8bc723b" name="libpcre2-posix2" arch="x86_64">
  <version epoch="0" ver="10.31" rel="150000.3.7.1"/>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1434628800">- PCRE2, a re-working of the original PCRE library to provide an
  entirely new API, version 10.10. Not source compatible.
- copy of the pcre package, with the following adjustments:
  * required name changes
  * adjust pcre-8.21-multilib.patch to pcre2-10.10-multilib.patch
  * drop upstreamed pcre-8.32-visibility.patch
  * --enable-{utf8,unicode-properties} became --enable-unicode
  * drop cpp subpackage
  * make test -&gt; check
  * enable 32 bit character support</changelog>
  <changelog author="astieger@suse.com" date="1436875200">- PCRE2 10.20:
  * Callouts with string arguments and the
    pcre2_callout_enumerate() function have been implemented.
  * The PCRE2_NEVER_BACKSLASH_C option, which locks out the use of
    \C, is added.
  * The PCRE2_ALT_CIRCUMFLEX option lets ^ match after a newline at
    the end of a subject in multiline mode.
  * The way named subpatterns are handled has been refactored. The
    previous approach had several bugs.
  * The handling of \c in EBCDIC environments has been changed to
    conform to the perlebcdic document. (Incompatible change)
  * Bugs have been mended, many of them discovered by fuzzers.</changelog>
  <changelog author="jengelh@inai.de" date="1453032000">- Update to new upstream release 10.21
  * Improve JIT matching speed of patterns starting with + or *.
  * Use memchr() to find the first character in an unanchored match
  in 8-bit mode in the interpreter. This gives a significant speed
  improvement.
  * 10.20 broke the handling of [[:&gt;:]] and [[:&lt;:]] in that
  processing them could involve a buffer overflow if the
  following character was an opening parenthesis.
  * 10.20 also introduced a bug in processing this pattern:
  /((?x)(*:0))#(?'/, which was fixed.
  * A callout with a string argument containing an opening square
  bracket, for example /(?C$[$)(?&lt;]/, was incorrectly processed and
  could provoke a buffer overflow.
  * A possessively repeated conditional group that could match an empty
  string, for example, /(?(R))*+/, was incorrectly compiled.
  * The Unicode tables have been updated to Unicode 8.0.0.
  * An empty comment (?#) in a pattern was incorrectly processed and
  could provoke a buffer overflow.
  * Fix infinite recursion in the JIT compiler when certain patterns
  /such as (?:|a|){100}x/ are analysed.
  * Some patterns with character classes involving [: and \\ were
  incorrectly compiled and could cause reading from uninitialized
  memory or an incorrect error diagnosis. Examples are:
  /[[:\\](?&lt;[::]/ and /[[:\\](?'abc')[a:].
  * A missing closing parenthesis for a callout with a string argument
  was not being diagnosed, possibly leading to a buffer overflow.
  * If (?R was followed by - or + incorrect behaviour happened instead
  of a diagnostic.
  * Fixed an issue when \p{Any} inside an xclass did not read the current
  character.
  * About 80 more fixes, which you can read about in the ChangeLog
  shipped with the libpcre2-8-0 package.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- pcre2 10.22:
  * The POSIX wrapper function regcomp() did not used to
    support back references and subroutine calls if called with the
    REG_NOSUB option. It now does.
  * A new function, pcre2_code_copy(), is added, to make a copy of a
    compiled pattern.
  * Support for string callouts is added to pcre2grep.
  * Added the PCRE2_NO_JIT option to pcre2_match().
  * The pcre2_get_error_message() function now returns with a
    negative error code if the error number it is given is unknown.
  * Several updates have been made to pcre2test and test scripts
  * Fix CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487246400">- pcre2 10.23:
  * major re-factoring of the pcre2_compile.c file
  * Back references are now permitted in lookbehind assertions when
    there are no duplicated group numbers (that is, (?| has not
    been used), and, if the reference is by name, there is only one
    group of that name. The referenced group must, of course be of
    fixed length.
  * \g{+&lt;number&gt;} (e.g. \g{+2} ) is now supported. It is a "forward
    back reference" and can be useful in repetitions
    (compare \g{-&lt;number&gt;} ). Perl does not recognize this syntax.
  * pcre2grep now automatically expands its buffer up to a maximum
    set by --max-buffer-size.
  * The -t option (grand total) has been added to pcre2grep.
  * A new function called pcre2_code_copy_with_tables() exists to
    copy a compiled pattern along with a private copy of the
    character tables that is uses.</changelog>
  <changelog author="astieger@suse.com" date="1493726400">- pcre2grep can now read .gz and .bz2 files directly
- pcre2test is now built to support line editing</changelog>
  <changelog author="astieger@suse.com" date="1501934400">- fix SLE 11 build</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update to new upstream release 10.30
  * The main interpreter, pcre2_match(), has been refactored into
    a new version that does not use recursive function calls for
    remembering backtracking positions. The new implementation
    allows backtracking into recursive group calls in patterns,
    making it more compatible with Perl. For patterns that have a
    lot of backtracking, the heap is now used, and there is
    explicit limit on the amount, settable by
    pcre2_set_heap_limit(). The "recursion limit" is retained,
    but is renamed as "depth limit".
  * The new option PCRE2_ENDANCHORED insists that a pattern match
    must end at the end of the subject.
  * The new option PCRE2_EXTENDED_MORE implements Perl's /xx
    feature, and pcre2test is upgraded to support it. Setting
    within the pattern by (?xx) is Also supported.
  * (?n) can be used to set PCRE2_NO_AUTO_CAPTURE, because Perl
    now has this.
  * Additional pattern compile options in the compile context are
    now available: PCRE2_EXTRA_ALLOW_SURROGATE_ESCAPES and
    PCRE2_EXTRA_BAD_ESCAPE_IS LITERAL.
  * The newline type PCRE2_NEWLINE_NUL is now available.
  * The match limit value now also applies to pcre2_dfa_match()
    as there are patterns that can use up a lot of resources
    without necessarily recursing very deeply.
  * Various minor security fixes found by fuzzers:
    + bsc#1037165: crash for forward reference in lookbehind with
    PCRE2_ANCHORED
    + CVE-2017-8786: heap-based buffer overflow write in pcre2test
    (bsc#1036942)
    + CVE-2017-7186: DoS by triggering an invalid Unicode property
    lookup (bsc#1030066)
- Switch source URLs to use HTTP.</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- Update to new upstream release 10.31
  * New pcre2_config() options: PCRE2_CONFIG_NEVER_BACKSLASH_C and
    PCRE2_CONFIG_COMPILED_WIDTHS.
  * New pcre2_pattern_info() option PCRE2_INFO_EXTRAOPTIONS to
    retrieve the extra compile time options.
  * Public names for all pcre2_compile() error numbers.
  * Added PCRE2_CALLOUT_STARTMATCH and PCRE2_CALLOUT_BACKTRACK
    bits to a new field callout_flags in callout blocks.
- use https for main site
- cleanup with spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1627128000">- Added 0001-Fixed-atomic-group-backtracking-bug.patch
  * bsc#1187937
  * PHP 7.6.4 on s390x returns different results for preg_match
    function as compared to older PHP versions and x86
  * Sourced from upstream subversion commit:
    $ svn log -r965 svn://vcs.pcre.org/pcre2/code/trunk</changelog>
  <changelog author="jsikes@suse.com" date="1651924800">- Added pcre2-10.31-bsc1199232-unicode-property-matching.patch
  * bsc#1199232 / CVE-2022-1586
  * Fixes unicode property matching issue</changelog>
</package>
<package pkgid="cabaac2a18e7d4fe93ceaaebfb308d9b253a3026148d352d77bdf40ea71e2ef4" name="libpcre2-posix2-32bit" arch="x86_64">
  <version epoch="0" ver="10.31" rel="150000.3.7.1"/>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1434628800">- PCRE2, a re-working of the original PCRE library to provide an
  entirely new API, version 10.10. Not source compatible.
- copy of the pcre package, with the following adjustments:
  * required name changes
  * adjust pcre-8.21-multilib.patch to pcre2-10.10-multilib.patch
  * drop upstreamed pcre-8.32-visibility.patch
  * --enable-{utf8,unicode-properties} became --enable-unicode
  * drop cpp subpackage
  * make test -&gt; check
  * enable 32 bit character support</changelog>
  <changelog author="astieger@suse.com" date="1436875200">- PCRE2 10.20:
  * Callouts with string arguments and the
    pcre2_callout_enumerate() function have been implemented.
  * The PCRE2_NEVER_BACKSLASH_C option, which locks out the use of
    \C, is added.
  * The PCRE2_ALT_CIRCUMFLEX option lets ^ match after a newline at
    the end of a subject in multiline mode.
  * The way named subpatterns are handled has been refactored. The
    previous approach had several bugs.
  * The handling of \c in EBCDIC environments has been changed to
    conform to the perlebcdic document. (Incompatible change)
  * Bugs have been mended, many of them discovered by fuzzers.</changelog>
  <changelog author="jengelh@inai.de" date="1453032000">- Update to new upstream release 10.21
  * Improve JIT matching speed of patterns starting with + or *.
  * Use memchr() to find the first character in an unanchored match
  in 8-bit mode in the interpreter. This gives a significant speed
  improvement.
  * 10.20 broke the handling of [[:&gt;:]] and [[:&lt;:]] in that
  processing them could involve a buffer overflow if the
  following character was an opening parenthesis.
  * 10.20 also introduced a bug in processing this pattern:
  /((?x)(*:0))#(?'/, which was fixed.
  * A callout with a string argument containing an opening square
  bracket, for example /(?C$[$)(?&lt;]/, was incorrectly processed and
  could provoke a buffer overflow.
  * A possessively repeated conditional group that could match an empty
  string, for example, /(?(R))*+/, was incorrectly compiled.
  * The Unicode tables have been updated to Unicode 8.0.0.
  * An empty comment (?#) in a pattern was incorrectly processed and
  could provoke a buffer overflow.
  * Fix infinite recursion in the JIT compiler when certain patterns
  /such as (?:|a|){100}x/ are analysed.
  * Some patterns with character classes involving [: and \\ were
  incorrectly compiled and could cause reading from uninitialized
  memory or an incorrect error diagnosis. Examples are:
  /[[:\\](?&lt;[::]/ and /[[:\\](?'abc')[a:].
  * A missing closing parenthesis for a callout with a string argument
  was not being diagnosed, possibly leading to a buffer overflow.
  * If (?R was followed by - or + incorrect behaviour happened instead
  of a diagnostic.
  * Fixed an issue when \p{Any} inside an xclass did not read the current
  character.
  * About 80 more fixes, which you can read about in the ChangeLog
  shipped with the libpcre2-8-0 package.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- pcre2 10.22:
  * The POSIX wrapper function regcomp() did not used to
    support back references and subroutine calls if called with the
    REG_NOSUB option. It now does.
  * A new function, pcre2_code_copy(), is added, to make a copy of a
    compiled pattern.
  * Support for string callouts is added to pcre2grep.
  * Added the PCRE2_NO_JIT option to pcre2_match().
  * The pcre2_get_error_message() function now returns with a
    negative error code if the error number it is given is unknown.
  * Several updates have been made to pcre2test and test scripts
  * Fix CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487246400">- pcre2 10.23:
  * major re-factoring of the pcre2_compile.c file
  * Back references are now permitted in lookbehind assertions when
    there are no duplicated group numbers (that is, (?| has not
    been used), and, if the reference is by name, there is only one
    group of that name. The referenced group must, of course be of
    fixed length.
  * \g{+&lt;number&gt;} (e.g. \g{+2} ) is now supported. It is a "forward
    back reference" and can be useful in repetitions
    (compare \g{-&lt;number&gt;} ). Perl does not recognize this syntax.
  * pcre2grep now automatically expands its buffer up to a maximum
    set by --max-buffer-size.
  * The -t option (grand total) has been added to pcre2grep.
  * A new function called pcre2_code_copy_with_tables() exists to
    copy a compiled pattern along with a private copy of the
    character tables that is uses.</changelog>
  <changelog author="astieger@suse.com" date="1493726400">- pcre2grep can now read .gz and .bz2 files directly
- pcre2test is now built to support line editing</changelog>
  <changelog author="astieger@suse.com" date="1501934400">- fix SLE 11 build</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update to new upstream release 10.30
  * The main interpreter, pcre2_match(), has been refactored into
    a new version that does not use recursive function calls for
    remembering backtracking positions. The new implementation
    allows backtracking into recursive group calls in patterns,
    making it more compatible with Perl. For patterns that have a
    lot of backtracking, the heap is now used, and there is
    explicit limit on the amount, settable by
    pcre2_set_heap_limit(). The "recursion limit" is retained,
    but is renamed as "depth limit".
  * The new option PCRE2_ENDANCHORED insists that a pattern match
    must end at the end of the subject.
  * The new option PCRE2_EXTENDED_MORE implements Perl's /xx
    feature, and pcre2test is upgraded to support it. Setting
    within the pattern by (?xx) is Also supported.
  * (?n) can be used to set PCRE2_NO_AUTO_CAPTURE, because Perl
    now has this.
  * Additional pattern compile options in the compile context are
    now available: PCRE2_EXTRA_ALLOW_SURROGATE_ESCAPES and
    PCRE2_EXTRA_BAD_ESCAPE_IS LITERAL.
  * The newline type PCRE2_NEWLINE_NUL is now available.
  * The match limit value now also applies to pcre2_dfa_match()
    as there are patterns that can use up a lot of resources
    without necessarily recursing very deeply.
  * Various minor security fixes found by fuzzers:
    + bsc#1037165: crash for forward reference in lookbehind with
    PCRE2_ANCHORED
    + CVE-2017-8786: heap-based buffer overflow write in pcre2test
    (bsc#1036942)
    + CVE-2017-7186: DoS by triggering an invalid Unicode property
    lookup (bsc#1030066)
- Switch source URLs to use HTTP.</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- Update to new upstream release 10.31
  * New pcre2_config() options: PCRE2_CONFIG_NEVER_BACKSLASH_C and
    PCRE2_CONFIG_COMPILED_WIDTHS.
  * New pcre2_pattern_info() option PCRE2_INFO_EXTRAOPTIONS to
    retrieve the extra compile time options.
  * Public names for all pcre2_compile() error numbers.
  * Added PCRE2_CALLOUT_STARTMATCH and PCRE2_CALLOUT_BACKTRACK
    bits to a new field callout_flags in callout blocks.
- use https for main site
- cleanup with spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1627128000">- Added 0001-Fixed-atomic-group-backtracking-bug.patch
  * bsc#1187937
  * PHP 7.6.4 on s390x returns different results for preg_match
    function as compared to older PHP versions and x86
  * Sourced from upstream subversion commit:
    $ svn log -r965 svn://vcs.pcre.org/pcre2/code/trunk</changelog>
  <changelog author="jsikes@suse.com" date="1651924800">- Added pcre2-10.31-bsc1199232-unicode-property-matching.patch
  * bsc#1199232 / CVE-2022-1586
  * Fixes unicode property matching issue</changelog>
</package>
<package pkgid="60872b092b9ba0f3d121822782b12a22ea1793de0c4631dde9a14f0c59effb4e" name="libpmi0" arch="aarch64">
  <version epoch="0" ver="20.11.9" rel="150300.4.6.1"/>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
  <changelog author="eich@suse.com" date="1651838400">- Add 'CommunicationParameters=block_null_hash' to slurm.conf, please
  add this parameter to existing configurations as part of CVE-2022-29500:
  This new option provides additional protection against a potential exploit.
- Update to 20.11.9:
  * burst_buffer - add missing common directory to the Makefile SUBDIRS.
  * sacct - fix truncation when printing jobidraw field.
  * GRES - Fix loading state of jobs using --gpus to request gpus.
  * Fix minor logic error in health check node state output
  * Fix GCC 11.1 compiler warnings.
  * Delay steps when memory already used instead of rejecting step request.
  * Fix memory leak in the slurmdbd when requesting wckeys from all clusters.
  * Fix determining if a reservation is used or not.
  * openapi/v0.0.35 - Honor kill_on_invalid_dependency as job parameter.
  * openapi/v0.0.36 - Honor kill_on_invalid_dependency as job parameter.
  * Fix various issues dealing with updates on magnetic reservations that could
    lead to abort slurmctld.
  * openapi/v0.0.36 - Avoid setting default values of min_cpus, job name, cwd,
    mail_type, and contiguous on job update.
  * openapi/v0.0.36 - Clear user hold on job update if hold=false.
  * Fix slurmctld segfault due to a bit_test() call with a MAINT+ANY_NODES
    reservation NULL node_bitmap.
  * Fix slurmctld segfault due to a bit_copy() call with a REPLACE+ANY_NODES
    reservation NULL node_bitmap.
  * Fix error in GPU frequency validation logic.
  * Fix error in pmix logic dealing with the incorrect size of buffer.
  * PMIx v1.1.4 and below are no longer supported.
  * Fix shutdown of slurmdbd plugin to correctly notice when the agent thread
    finishes.
  * Fix slurmctld segfault due to job array  --batch features double free.
  * CVE-2022-29500 - Prevent credential abuse (bsc#1199278).
  * CVE-2022-29501 - Prevent abuse of REQUEST_FORWARD_DATA (bsc#1199279).
- Update to 20.11.8:
  * slurmctld - fix erroneous "StepId=CORRUPT" messages in error logs.
  * Correct the error given when auth plugin fails to pack a credential.
  * Fix unused-variable compiler warning on FreeBSD in fd_resolve_path().
  * acct_gather_filesystem/lustre - only emit collection error once per step.
  * srun - leave SLURM_DIST_UNKNOWN as default for  --interactive.
  * Add GRES environment variables (e.g., CUDA_VISIBLE_DEVICES) into the
    interactive step, the same as is done for the batch step.
  * Fix various potential deadlocks when altering objects in the database
    dealing with every cluster in the database.
  * slurmrestd - handle slurmdbd connection failures without segfaulting.
  * slurmrestd - fix segfault for searches in slurmdb/v0.0.36/jobs.
  * slurmrestd - remove (non-functioning) users query parameter for
    slurmdb/v0.0.36/jobs from openapi.json
  * slurmrestd - fix segfault in slurmrestd db/jobs with numeric queries
  * slurmrestd - add argv handling for job/submit endpoint.
  * srun - fix broken node step allocation in a heterogeneous allocation.
  * Fail step creation if -n is not multiple of  --ntasks-per-gpu.
  * job_container/tmpfs - Fix slowdown on teardown.
  * Fix problem with SlurmctldProlog where requeued jobs would never launch.
  * job_container/tmpfs - Fix issue when restarting slurmd where the namespace
    mount points could disappear.
  * sacct - avoid truncating JobId at 34 characters.
  * scancel - fix segfault when --wckey filtering option is used.
  * select/cons_tres - Fix memory leak.
  * Prevent file descriptor leak in job_container/tmpfs on slurmd restart.
  * slurmrestd/dbv0.0.36 - Fix values dumped in job state/current and
    job step state.
  * slurmrestd/dbv0.0.36 - Correct description for previous state property.
  * perlapi/libslurmdb - expose tres_req_str to job hash.
  * scrontab - close and reopen temporary crontab file to deal with editors
    that do not change the original file, but instead write out then rename
    a new file.
  * sstat - fix linking so that it will work when --without-shared-libslurm
    was used to build Slurm.
  * Clear allocated cpus for running steps in a job before handling requested
    nodes on new step.
  * Don't reject a step if not enough nodes are available. Instead, defer the
    step until enough nodes are available to satisfy the request.
  * Don't reject a step if it requests at least one specific node that is
    already allocated to another step. Instead, defer the step until the
    requested node(s) become available.
  * slurmrestd - add description for slurmdb/job endpoint.
  * Better handling of --mem=0.
  * Ignore DefCpuPerGpu when --cpus-per-task given.
  * sacct - fix segfault when printing StepId (or when using --long).</changelog>
</package>
<package pkgid="2314117c49f4f050ace9660f70d0b5b30dc930b8fa56802c12ee51fda9cbf5d4" name="libpmi0" arch="ppc64le">
  <version epoch="0" ver="20.11.9" rel="150300.4.6.1"/>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
  <changelog author="eich@suse.com" date="1651838400">- Add 'CommunicationParameters=block_null_hash' to slurm.conf, please
  add this parameter to existing configurations as part of CVE-2022-29500:
  This new option provides additional protection against a potential exploit.
- Update to 20.11.9:
  * burst_buffer - add missing common directory to the Makefile SUBDIRS.
  * sacct - fix truncation when printing jobidraw field.
  * GRES - Fix loading state of jobs using --gpus to request gpus.
  * Fix minor logic error in health check node state output
  * Fix GCC 11.1 compiler warnings.
  * Delay steps when memory already used instead of rejecting step request.
  * Fix memory leak in the slurmdbd when requesting wckeys from all clusters.
  * Fix determining if a reservation is used or not.
  * openapi/v0.0.35 - Honor kill_on_invalid_dependency as job parameter.
  * openapi/v0.0.36 - Honor kill_on_invalid_dependency as job parameter.
  * Fix various issues dealing with updates on magnetic reservations that could
    lead to abort slurmctld.
  * openapi/v0.0.36 - Avoid setting default values of min_cpus, job name, cwd,
    mail_type, and contiguous on job update.
  * openapi/v0.0.36 - Clear user hold on job update if hold=false.
  * Fix slurmctld segfault due to a bit_test() call with a MAINT+ANY_NODES
    reservation NULL node_bitmap.
  * Fix slurmctld segfault due to a bit_copy() call with a REPLACE+ANY_NODES
    reservation NULL node_bitmap.
  * Fix error in GPU frequency validation logic.
  * Fix error in pmix logic dealing with the incorrect size of buffer.
  * PMIx v1.1.4 and below are no longer supported.
  * Fix shutdown of slurmdbd plugin to correctly notice when the agent thread
    finishes.
  * Fix slurmctld segfault due to job array  --batch features double free.
  * CVE-2022-29500 - Prevent credential abuse (bsc#1199278).
  * CVE-2022-29501 - Prevent abuse of REQUEST_FORWARD_DATA (bsc#1199279).
- Update to 20.11.8:
  * slurmctld - fix erroneous "StepId=CORRUPT" messages in error logs.
  * Correct the error given when auth plugin fails to pack a credential.
  * Fix unused-variable compiler warning on FreeBSD in fd_resolve_path().
  * acct_gather_filesystem/lustre - only emit collection error once per step.
  * srun - leave SLURM_DIST_UNKNOWN as default for  --interactive.
  * Add GRES environment variables (e.g., CUDA_VISIBLE_DEVICES) into the
    interactive step, the same as is done for the batch step.
  * Fix various potential deadlocks when altering objects in the database
    dealing with every cluster in the database.
  * slurmrestd - handle slurmdbd connection failures without segfaulting.
  * slurmrestd - fix segfault for searches in slurmdb/v0.0.36/jobs.
  * slurmrestd - remove (non-functioning) users query parameter for
    slurmdb/v0.0.36/jobs from openapi.json
  * slurmrestd - fix segfault in slurmrestd db/jobs with numeric queries
  * slurmrestd - add argv handling for job/submit endpoint.
  * srun - fix broken node step allocation in a heterogeneous allocation.
  * Fail step creation if -n is not multiple of  --ntasks-per-gpu.
  * job_container/tmpfs - Fix slowdown on teardown.
  * Fix problem with SlurmctldProlog where requeued jobs would never launch.
  * job_container/tmpfs - Fix issue when restarting slurmd where the namespace
    mount points could disappear.
  * sacct - avoid truncating JobId at 34 characters.
  * scancel - fix segfault when --wckey filtering option is used.
  * select/cons_tres - Fix memory leak.
  * Prevent file descriptor leak in job_container/tmpfs on slurmd restart.
  * slurmrestd/dbv0.0.36 - Fix values dumped in job state/current and
    job step state.
  * slurmrestd/dbv0.0.36 - Correct description for previous state property.
  * perlapi/libslurmdb - expose tres_req_str to job hash.
  * scrontab - close and reopen temporary crontab file to deal with editors
    that do not change the original file, but instead write out then rename
    a new file.
  * sstat - fix linking so that it will work when --without-shared-libslurm
    was used to build Slurm.
  * Clear allocated cpus for running steps in a job before handling requested
    nodes on new step.
  * Don't reject a step if not enough nodes are available. Instead, defer the
    step until enough nodes are available to satisfy the request.
  * Don't reject a step if it requests at least one specific node that is
    already allocated to another step. Instead, defer the step until the
    requested node(s) become available.
  * slurmrestd - add description for slurmdb/job endpoint.
  * Better handling of --mem=0.
  * Ignore DefCpuPerGpu when --cpus-per-task given.
  * sacct - fix segfault when printing StepId (or when using --long).</changelog>
</package>
<package pkgid="e845f61cc0c90345e8877c1b5c259526ce3b6f1c7db29ecb1539af8dd93b210b" name="libpmi0" arch="s390x">
  <version epoch="0" ver="20.11.9" rel="150300.4.6.1"/>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
  <changelog author="eich@suse.com" date="1651838400">- Add 'CommunicationParameters=block_null_hash' to slurm.conf, please
  add this parameter to existing configurations as part of CVE-2022-29500:
  This new option provides additional protection against a potential exploit.
- Update to 20.11.9:
  * burst_buffer - add missing common directory to the Makefile SUBDIRS.
  * sacct - fix truncation when printing jobidraw field.
  * GRES - Fix loading state of jobs using --gpus to request gpus.
  * Fix minor logic error in health check node state output
  * Fix GCC 11.1 compiler warnings.
  * Delay steps when memory already used instead of rejecting step request.
  * Fix memory leak in the slurmdbd when requesting wckeys from all clusters.
  * Fix determining if a reservation is used or not.
  * openapi/v0.0.35 - Honor kill_on_invalid_dependency as job parameter.
  * openapi/v0.0.36 - Honor kill_on_invalid_dependency as job parameter.
  * Fix various issues dealing with updates on magnetic reservations that could
    lead to abort slurmctld.
  * openapi/v0.0.36 - Avoid setting default values of min_cpus, job name, cwd,
    mail_type, and contiguous on job update.
  * openapi/v0.0.36 - Clear user hold on job update if hold=false.
  * Fix slurmctld segfault due to a bit_test() call with a MAINT+ANY_NODES
    reservation NULL node_bitmap.
  * Fix slurmctld segfault due to a bit_copy() call with a REPLACE+ANY_NODES
    reservation NULL node_bitmap.
  * Fix error in GPU frequency validation logic.
  * Fix error in pmix logic dealing with the incorrect size of buffer.
  * PMIx v1.1.4 and below are no longer supported.
  * Fix shutdown of slurmdbd plugin to correctly notice when the agent thread
    finishes.
  * Fix slurmctld segfault due to job array  --batch features double free.
  * CVE-2022-29500 - Prevent credential abuse (bsc#1199278).
  * CVE-2022-29501 - Prevent abuse of REQUEST_FORWARD_DATA (bsc#1199279).
- Update to 20.11.8:
  * slurmctld - fix erroneous "StepId=CORRUPT" messages in error logs.
  * Correct the error given when auth plugin fails to pack a credential.
  * Fix unused-variable compiler warning on FreeBSD in fd_resolve_path().
  * acct_gather_filesystem/lustre - only emit collection error once per step.
  * srun - leave SLURM_DIST_UNKNOWN as default for  --interactive.
  * Add GRES environment variables (e.g., CUDA_VISIBLE_DEVICES) into the
    interactive step, the same as is done for the batch step.
  * Fix various potential deadlocks when altering objects in the database
    dealing with every cluster in the database.
  * slurmrestd - handle slurmdbd connection failures without segfaulting.
  * slurmrestd - fix segfault for searches in slurmdb/v0.0.36/jobs.
  * slurmrestd - remove (non-functioning) users query parameter for
    slurmdb/v0.0.36/jobs from openapi.json
  * slurmrestd - fix segfault in slurmrestd db/jobs with numeric queries
  * slurmrestd - add argv handling for job/submit endpoint.
  * srun - fix broken node step allocation in a heterogeneous allocation.
  * Fail step creation if -n is not multiple of  --ntasks-per-gpu.
  * job_container/tmpfs - Fix slowdown on teardown.
  * Fix problem with SlurmctldProlog where requeued jobs would never launch.
  * job_container/tmpfs - Fix issue when restarting slurmd where the namespace
    mount points could disappear.
  * sacct - avoid truncating JobId at 34 characters.
  * scancel - fix segfault when --wckey filtering option is used.
  * select/cons_tres - Fix memory leak.
  * Prevent file descriptor leak in job_container/tmpfs on slurmd restart.
  * slurmrestd/dbv0.0.36 - Fix values dumped in job state/current and
    job step state.
  * slurmrestd/dbv0.0.36 - Correct description for previous state property.
  * perlapi/libslurmdb - expose tres_req_str to job hash.
  * scrontab - close and reopen temporary crontab file to deal with editors
    that do not change the original file, but instead write out then rename
    a new file.
  * sstat - fix linking so that it will work when --without-shared-libslurm
    was used to build Slurm.
  * Clear allocated cpus for running steps in a job before handling requested
    nodes on new step.
  * Don't reject a step if not enough nodes are available. Instead, defer the
    step until enough nodes are available to satisfy the request.
  * Don't reject a step if it requests at least one specific node that is
    already allocated to another step. Instead, defer the step until the
    requested node(s) become available.
  * slurmrestd - add description for slurmdb/job endpoint.
  * Better handling of --mem=0.
  * Ignore DefCpuPerGpu when --cpus-per-task given.
  * sacct - fix segfault when printing StepId (or when using --long).</changelog>
</package>
<package pkgid="8b57110fff808f505041ffe519c2546d6ea9a3ad5c9e51eed35e49fb8ad05e83" name="libpmi0" arch="x86_64">
  <version epoch="0" ver="20.11.9" rel="150300.4.6.1"/>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
  <changelog author="eich@suse.com" date="1651838400">- Add 'CommunicationParameters=block_null_hash' to slurm.conf, please
  add this parameter to existing configurations as part of CVE-2022-29500:
  This new option provides additional protection against a potential exploit.
- Update to 20.11.9:
  * burst_buffer - add missing common directory to the Makefile SUBDIRS.
  * sacct - fix truncation when printing jobidraw field.
  * GRES - Fix loading state of jobs using --gpus to request gpus.
  * Fix minor logic error in health check node state output
  * Fix GCC 11.1 compiler warnings.
  * Delay steps when memory already used instead of rejecting step request.
  * Fix memory leak in the slurmdbd when requesting wckeys from all clusters.
  * Fix determining if a reservation is used or not.
  * openapi/v0.0.35 - Honor kill_on_invalid_dependency as job parameter.
  * openapi/v0.0.36 - Honor kill_on_invalid_dependency as job parameter.
  * Fix various issues dealing with updates on magnetic reservations that could
    lead to abort slurmctld.
  * openapi/v0.0.36 - Avoid setting default values of min_cpus, job name, cwd,
    mail_type, and contiguous on job update.
  * openapi/v0.0.36 - Clear user hold on job update if hold=false.
  * Fix slurmctld segfault due to a bit_test() call with a MAINT+ANY_NODES
    reservation NULL node_bitmap.
  * Fix slurmctld segfault due to a bit_copy() call with a REPLACE+ANY_NODES
    reservation NULL node_bitmap.
  * Fix error in GPU frequency validation logic.
  * Fix error in pmix logic dealing with the incorrect size of buffer.
  * PMIx v1.1.4 and below are no longer supported.
  * Fix shutdown of slurmdbd plugin to correctly notice when the agent thread
    finishes.
  * Fix slurmctld segfault due to job array  --batch features double free.
  * CVE-2022-29500 - Prevent credential abuse (bsc#1199278).
  * CVE-2022-29501 - Prevent abuse of REQUEST_FORWARD_DATA (bsc#1199279).
- Update to 20.11.8:
  * slurmctld - fix erroneous "StepId=CORRUPT" messages in error logs.
  * Correct the error given when auth plugin fails to pack a credential.
  * Fix unused-variable compiler warning on FreeBSD in fd_resolve_path().
  * acct_gather_filesystem/lustre - only emit collection error once per step.
  * srun - leave SLURM_DIST_UNKNOWN as default for  --interactive.
  * Add GRES environment variables (e.g., CUDA_VISIBLE_DEVICES) into the
    interactive step, the same as is done for the batch step.
  * Fix various potential deadlocks when altering objects in the database
    dealing with every cluster in the database.
  * slurmrestd - handle slurmdbd connection failures without segfaulting.
  * slurmrestd - fix segfault for searches in slurmdb/v0.0.36/jobs.
  * slurmrestd - remove (non-functioning) users query parameter for
    slurmdb/v0.0.36/jobs from openapi.json
  * slurmrestd - fix segfault in slurmrestd db/jobs with numeric queries
  * slurmrestd - add argv handling for job/submit endpoint.
  * srun - fix broken node step allocation in a heterogeneous allocation.
  * Fail step creation if -n is not multiple of  --ntasks-per-gpu.
  * job_container/tmpfs - Fix slowdown on teardown.
  * Fix problem with SlurmctldProlog where requeued jobs would never launch.
  * job_container/tmpfs - Fix issue when restarting slurmd where the namespace
    mount points could disappear.
  * sacct - avoid truncating JobId at 34 characters.
  * scancel - fix segfault when --wckey filtering option is used.
  * select/cons_tres - Fix memory leak.
  * Prevent file descriptor leak in job_container/tmpfs on slurmd restart.
  * slurmrestd/dbv0.0.36 - Fix values dumped in job state/current and
    job step state.
  * slurmrestd/dbv0.0.36 - Correct description for previous state property.
  * perlapi/libslurmdb - expose tres_req_str to job hash.
  * scrontab - close and reopen temporary crontab file to deal with editors
    that do not change the original file, but instead write out then rename
    a new file.
  * sstat - fix linking so that it will work when --without-shared-libslurm
    was used to build Slurm.
  * Clear allocated cpus for running steps in a job before handling requested
    nodes on new step.
  * Don't reject a step if not enough nodes are available. Instead, defer the
    step until enough nodes are available to satisfy the request.
  * Don't reject a step if it requests at least one specific node that is
    already allocated to another step. Instead, defer the step until the
    requested node(s) become available.
  * slurmrestd - add description for slurmdb/job endpoint.
  * Better handling of --mem=0.
  * Ignore DefCpuPerGpu when --cpus-per-task given.
  * sacct - fix segfault when printing StepId (or when using --long).</changelog>
</package>
<package pkgid="aff0ae1c7a25578c16b4a8802cc01e4f91563378311eea63d6f11bd0eeac1753" name="libpmi0_20_11" arch="aarch64">
  <version epoch="0" ver="20.11.9" rel="150200.6.10.1"/>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
  <changelog author="eich@suse.com" date="1651838400">- Add 'CommunicationParameters=block_null_hash' to slurm.conf, please
  add this parameter to existing configurations as part of CVE-2022-29500:
  This new option provides additional protection against a potential exploit.
- Update to 20.11.9:
  * burst_buffer - add missing common directory to the Makefile SUBDIRS.
  * sacct - fix truncation when printing jobidraw field.
  * GRES - Fix loading state of jobs using --gpus to request gpus.
  * Fix minor logic error in health check node state output
  * Fix GCC 11.1 compiler warnings.
  * Delay steps when memory already used instead of rejecting step request.
  * Fix memory leak in the slurmdbd when requesting wckeys from all clusters.
  * Fix determining if a reservation is used or not.
  * openapi/v0.0.35 - Honor kill_on_invalid_dependency as job parameter.
  * openapi/v0.0.36 - Honor kill_on_invalid_dependency as job parameter.
  * Fix various issues dealing with updates on magnetic reservations that could
    lead to abort slurmctld.
  * openapi/v0.0.36 - Avoid setting default values of min_cpus, job name, cwd,
    mail_type, and contiguous on job update.
  * openapi/v0.0.36 - Clear user hold on job update if hold=false.
  * Fix slurmctld segfault due to a bit_test() call with a MAINT+ANY_NODES
    reservation NULL node_bitmap.
  * Fix slurmctld segfault due to a bit_copy() call with a REPLACE+ANY_NODES
    reservation NULL node_bitmap.
  * Fix error in GPU frequency validation logic.
  * Fix error in pmix logic dealing with the incorrect size of buffer.
  * PMIx v1.1.4 and below are no longer supported.
  * Fix shutdown of slurmdbd plugin to correctly notice when the agent thread
    finishes.
  * Fix slurmctld segfault due to job array  --batch features double free.
  * CVE-2022-29500 - Prevent credential abuse (bsc#1199278).
  * CVE-2022-29501 - Prevent abuse of REQUEST_FORWARD_DATA (bsc#1199279).
- Update to 20.11.8:
  * slurmctld - fix erroneous "StepId=CORRUPT" messages in error logs.
  * Correct the error given when auth plugin fails to pack a credential.
  * Fix unused-variable compiler warning on FreeBSD in fd_resolve_path().
  * acct_gather_filesystem/lustre - only emit collection error once per step.
  * srun - leave SLURM_DIST_UNKNOWN as default for  --interactive.
  * Add GRES environment variables (e.g., CUDA_VISIBLE_DEVICES) into the
    interactive step, the same as is done for the batch step.
  * Fix various potential deadlocks when altering objects in the database
    dealing with every cluster in the database.
  * slurmrestd - handle slurmdbd connection failures without segfaulting.
  * slurmrestd - fix segfault for searches in slurmdb/v0.0.36/jobs.
  * slurmrestd - remove (non-functioning) users query parameter for
    slurmdb/v0.0.36/jobs from openapi.json
  * slurmrestd - fix segfault in slurmrestd db/jobs with numeric queries
  * slurmrestd - add argv handling for job/submit endpoint.
  * srun - fix broken node step allocation in a heterogeneous allocation.
  * Fail step creation if -n is not multiple of  --ntasks-per-gpu.
  * job_container/tmpfs - Fix slowdown on teardown.
  * Fix problem with SlurmctldProlog where requeued jobs would never launch.
  * job_container/tmpfs - Fix issue when restarting slurmd where the namespace
    mount points could disappear.
  * sacct - avoid truncating JobId at 34 characters.
  * scancel - fix segfault when --wckey filtering option is used.
  * select/cons_tres - Fix memory leak.
  * Prevent file descriptor leak in job_container/tmpfs on slurmd restart.
  * slurmrestd/dbv0.0.36 - Fix values dumped in job state/current and
    job step state.
  * slurmrestd/dbv0.0.36 - Correct description for previous state property.
  * perlapi/libslurmdb - expose tres_req_str to job hash.
  * scrontab - close and reopen temporary crontab file to deal with editors
    that do not change the original file, but instead write out then rename
    a new file.
  * sstat - fix linking so that it will work when --without-shared-libslurm
    was used to build Slurm.
  * Clear allocated cpus for running steps in a job before handling requested
    nodes on new step.
  * Don't reject a step if not enough nodes are available. Instead, defer the
    step until enough nodes are available to satisfy the request.
  * Don't reject a step if it requests at least one specific node that is
    already allocated to another step. Instead, defer the step until the
    requested node(s) become available.
  * slurmrestd - add description for slurmdb/job endpoint.
  * Better handling of --mem=0.
  * Ignore DefCpuPerGpu when --cpus-per-task given.
  * sacct - fix segfault when printing StepId (or when using --long).</changelog>
</package>
<package pkgid="c71be9571cf131eb389566ce422594ddc7fee2dfbda2cf34f92bcf46a2cf5a19" name="libpmi0_20_11" arch="ppc64le">
  <version epoch="0" ver="20.11.9" rel="150200.6.10.1"/>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
  <changelog author="eich@suse.com" date="1651838400">- Add 'CommunicationParameters=block_null_hash' to slurm.conf, please
  add this parameter to existing configurations as part of CVE-2022-29500:
  This new option provides additional protection against a potential exploit.
- Update to 20.11.9:
  * burst_buffer - add missing common directory to the Makefile SUBDIRS.
  * sacct - fix truncation when printing jobidraw field.
  * GRES - Fix loading state of jobs using --gpus to request gpus.
  * Fix minor logic error in health check node state output
  * Fix GCC 11.1 compiler warnings.
  * Delay steps when memory already used instead of rejecting step request.
  * Fix memory leak in the slurmdbd when requesting wckeys from all clusters.
  * Fix determining if a reservation is used or not.
  * openapi/v0.0.35 - Honor kill_on_invalid_dependency as job parameter.
  * openapi/v0.0.36 - Honor kill_on_invalid_dependency as job parameter.
  * Fix various issues dealing with updates on magnetic reservations that could
    lead to abort slurmctld.
  * openapi/v0.0.36 - Avoid setting default values of min_cpus, job name, cwd,
    mail_type, and contiguous on job update.
  * openapi/v0.0.36 - Clear user hold on job update if hold=false.
  * Fix slurmctld segfault due to a bit_test() call with a MAINT+ANY_NODES
    reservation NULL node_bitmap.
  * Fix slurmctld segfault due to a bit_copy() call with a REPLACE+ANY_NODES
    reservation NULL node_bitmap.
  * Fix error in GPU frequency validation logic.
  * Fix error in pmix logic dealing with the incorrect size of buffer.
  * PMIx v1.1.4 and below are no longer supported.
  * Fix shutdown of slurmdbd plugin to correctly notice when the agent thread
    finishes.
  * Fix slurmctld segfault due to job array  --batch features double free.
  * CVE-2022-29500 - Prevent credential abuse (bsc#1199278).
  * CVE-2022-29501 - Prevent abuse of REQUEST_FORWARD_DATA (bsc#1199279).
- Update to 20.11.8:
  * slurmctld - fix erroneous "StepId=CORRUPT" messages in error logs.
  * Correct the error given when auth plugin fails to pack a credential.
  * Fix unused-variable compiler warning on FreeBSD in fd_resolve_path().
  * acct_gather_filesystem/lustre - only emit collection error once per step.
  * srun - leave SLURM_DIST_UNKNOWN as default for  --interactive.
  * Add GRES environment variables (e.g., CUDA_VISIBLE_DEVICES) into the
    interactive step, the same as is done for the batch step.
  * Fix various potential deadlocks when altering objects in the database
    dealing with every cluster in the database.
  * slurmrestd - handle slurmdbd connection failures without segfaulting.
  * slurmrestd - fix segfault for searches in slurmdb/v0.0.36/jobs.
  * slurmrestd - remove (non-functioning) users query parameter for
    slurmdb/v0.0.36/jobs from openapi.json
  * slurmrestd - fix segfault in slurmrestd db/jobs with numeric queries
  * slurmrestd - add argv handling for job/submit endpoint.
  * srun - fix broken node step allocation in a heterogeneous allocation.
  * Fail step creation if -n is not multiple of  --ntasks-per-gpu.
  * job_container/tmpfs - Fix slowdown on teardown.
  * Fix problem with SlurmctldProlog where requeued jobs would never launch.
  * job_container/tmpfs - Fix issue when restarting slurmd where the namespace
    mount points could disappear.
  * sacct - avoid truncating JobId at 34 characters.
  * scancel - fix segfault when --wckey filtering option is used.
  * select/cons_tres - Fix memory leak.
  * Prevent file descriptor leak in job_container/tmpfs on slurmd restart.
  * slurmrestd/dbv0.0.36 - Fix values dumped in job state/current and
    job step state.
  * slurmrestd/dbv0.0.36 - Correct description for previous state property.
  * perlapi/libslurmdb - expose tres_req_str to job hash.
  * scrontab - close and reopen temporary crontab file to deal with editors
    that do not change the original file, but instead write out then rename
    a new file.
  * sstat - fix linking so that it will work when --without-shared-libslurm
    was used to build Slurm.
  * Clear allocated cpus for running steps in a job before handling requested
    nodes on new step.
  * Don't reject a step if not enough nodes are available. Instead, defer the
    step until enough nodes are available to satisfy the request.
  * Don't reject a step if it requests at least one specific node that is
    already allocated to another step. Instead, defer the step until the
    requested node(s) become available.
  * slurmrestd - add description for slurmdb/job endpoint.
  * Better handling of --mem=0.
  * Ignore DefCpuPerGpu when --cpus-per-task given.
  * sacct - fix segfault when printing StepId (or when using --long).</changelog>
</package>
<package pkgid="aacc0c098f1542c63b726f0d9bee4be16b7a86c0560f9b11ac8444dccbe1e0d7" name="libpmi0_20_11" arch="s390x">
  <version epoch="0" ver="20.11.9" rel="150200.6.10.1"/>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
  <changelog author="eich@suse.com" date="1651838400">- Add 'CommunicationParameters=block_null_hash' to slurm.conf, please
  add this parameter to existing configurations as part of CVE-2022-29500:
  This new option provides additional protection against a potential exploit.
- Update to 20.11.9:
  * burst_buffer - add missing common directory to the Makefile SUBDIRS.
  * sacct - fix truncation when printing jobidraw field.
  * GRES - Fix loading state of jobs using --gpus to request gpus.
  * Fix minor logic error in health check node state output
  * Fix GCC 11.1 compiler warnings.
  * Delay steps when memory already used instead of rejecting step request.
  * Fix memory leak in the slurmdbd when requesting wckeys from all clusters.
  * Fix determining if a reservation is used or not.
  * openapi/v0.0.35 - Honor kill_on_invalid_dependency as job parameter.
  * openapi/v0.0.36 - Honor kill_on_invalid_dependency as job parameter.
  * Fix various issues dealing with updates on magnetic reservations that could
    lead to abort slurmctld.
  * openapi/v0.0.36 - Avoid setting default values of min_cpus, job name, cwd,
    mail_type, and contiguous on job update.
  * openapi/v0.0.36 - Clear user hold on job update if hold=false.
  * Fix slurmctld segfault due to a bit_test() call with a MAINT+ANY_NODES
    reservation NULL node_bitmap.
  * Fix slurmctld segfault due to a bit_copy() call with a REPLACE+ANY_NODES
    reservation NULL node_bitmap.
  * Fix error in GPU frequency validation logic.
  * Fix error in pmix logic dealing with the incorrect size of buffer.
  * PMIx v1.1.4 and below are no longer supported.
  * Fix shutdown of slurmdbd plugin to correctly notice when the agent thread
    finishes.
  * Fix slurmctld segfault due to job array  --batch features double free.
  * CVE-2022-29500 - Prevent credential abuse (bsc#1199278).
  * CVE-2022-29501 - Prevent abuse of REQUEST_FORWARD_DATA (bsc#1199279).
- Update to 20.11.8:
  * slurmctld - fix erroneous "StepId=CORRUPT" messages in error logs.
  * Correct the error given when auth plugin fails to pack a credential.
  * Fix unused-variable compiler warning on FreeBSD in fd_resolve_path().
  * acct_gather_filesystem/lustre - only emit collection error once per step.
  * srun - leave SLURM_DIST_UNKNOWN as default for  --interactive.
  * Add GRES environment variables (e.g., CUDA_VISIBLE_DEVICES) into the
    interactive step, the same as is done for the batch step.
  * Fix various potential deadlocks when altering objects in the database
    dealing with every cluster in the database.
  * slurmrestd - handle slurmdbd connection failures without segfaulting.
  * slurmrestd - fix segfault for searches in slurmdb/v0.0.36/jobs.
  * slurmrestd - remove (non-functioning) users query parameter for
    slurmdb/v0.0.36/jobs from openapi.json
  * slurmrestd - fix segfault in slurmrestd db/jobs with numeric queries
  * slurmrestd - add argv handling for job/submit endpoint.
  * srun - fix broken node step allocation in a heterogeneous allocation.
  * Fail step creation if -n is not multiple of  --ntasks-per-gpu.
  * job_container/tmpfs - Fix slowdown on teardown.
  * Fix problem with SlurmctldProlog where requeued jobs would never launch.
  * job_container/tmpfs - Fix issue when restarting slurmd where the namespace
    mount points could disappear.
  * sacct - avoid truncating JobId at 34 characters.
  * scancel - fix segfault when --wckey filtering option is used.
  * select/cons_tres - Fix memory leak.
  * Prevent file descriptor leak in job_container/tmpfs on slurmd restart.
  * slurmrestd/dbv0.0.36 - Fix values dumped in job state/current and
    job step state.
  * slurmrestd/dbv0.0.36 - Correct description for previous state property.
  * perlapi/libslurmdb - expose tres_req_str to job hash.
  * scrontab - close and reopen temporary crontab file to deal with editors
    that do not change the original file, but instead write out then rename
    a new file.
  * sstat - fix linking so that it will work when --without-shared-libslurm
    was used to build Slurm.
  * Clear allocated cpus for running steps in a job before handling requested
    nodes on new step.
  * Don't reject a step if not enough nodes are available. Instead, defer the
    step until enough nodes are available to satisfy the request.
  * Don't reject a step if it requests at least one specific node that is
    already allocated to another step. Instead, defer the step until the
    requested node(s) become available.
  * slurmrestd - add description for slurmdb/job endpoint.
  * Better handling of --mem=0.
  * Ignore DefCpuPerGpu when --cpus-per-task given.
  * sacct - fix segfault when printing StepId (or when using --long).</changelog>
</package>
<package pkgid="9233a670d6ee51349fd6afa59a4b779b9393ef3b12fd15f160126cd1c5c393d3" name="libpmi0_20_11" arch="x86_64">
  <version epoch="0" ver="20.11.9" rel="150200.6.10.1"/>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
  <changelog author="eich@suse.com" date="1651838400">- Add 'CommunicationParameters=block_null_hash' to slurm.conf, please
  add this parameter to existing configurations as part of CVE-2022-29500:
  This new option provides additional protection against a potential exploit.
- Update to 20.11.9:
  * burst_buffer - add missing common directory to the Makefile SUBDIRS.
  * sacct - fix truncation when printing jobidraw field.
  * GRES - Fix loading state of jobs using --gpus to request gpus.
  * Fix minor logic error in health check node state output
  * Fix GCC 11.1 compiler warnings.
  * Delay steps when memory already used instead of rejecting step request.
  * Fix memory leak in the slurmdbd when requesting wckeys from all clusters.
  * Fix determining if a reservation is used or not.
  * openapi/v0.0.35 - Honor kill_on_invalid_dependency as job parameter.
  * openapi/v0.0.36 - Honor kill_on_invalid_dependency as job parameter.
  * Fix various issues dealing with updates on magnetic reservations that could
    lead to abort slurmctld.
  * openapi/v0.0.36 - Avoid setting default values of min_cpus, job name, cwd,
    mail_type, and contiguous on job update.
  * openapi/v0.0.36 - Clear user hold on job update if hold=false.
  * Fix slurmctld segfault due to a bit_test() call with a MAINT+ANY_NODES
    reservation NULL node_bitmap.
  * Fix slurmctld segfault due to a bit_copy() call with a REPLACE+ANY_NODES
    reservation NULL node_bitmap.
  * Fix error in GPU frequency validation logic.
  * Fix error in pmix logic dealing with the incorrect size of buffer.
  * PMIx v1.1.4 and below are no longer supported.
  * Fix shutdown of slurmdbd plugin to correctly notice when the agent thread
    finishes.
  * Fix slurmctld segfault due to job array  --batch features double free.
  * CVE-2022-29500 - Prevent credential abuse (bsc#1199278).
  * CVE-2022-29501 - Prevent abuse of REQUEST_FORWARD_DATA (bsc#1199279).
- Update to 20.11.8:
  * slurmctld - fix erroneous "StepId=CORRUPT" messages in error logs.
  * Correct the error given when auth plugin fails to pack a credential.
  * Fix unused-variable compiler warning on FreeBSD in fd_resolve_path().
  * acct_gather_filesystem/lustre - only emit collection error once per step.
  * srun - leave SLURM_DIST_UNKNOWN as default for  --interactive.
  * Add GRES environment variables (e.g., CUDA_VISIBLE_DEVICES) into the
    interactive step, the same as is done for the batch step.
  * Fix various potential deadlocks when altering objects in the database
    dealing with every cluster in the database.
  * slurmrestd - handle slurmdbd connection failures without segfaulting.
  * slurmrestd - fix segfault for searches in slurmdb/v0.0.36/jobs.
  * slurmrestd - remove (non-functioning) users query parameter for
    slurmdb/v0.0.36/jobs from openapi.json
  * slurmrestd - fix segfault in slurmrestd db/jobs with numeric queries
  * slurmrestd - add argv handling for job/submit endpoint.
  * srun - fix broken node step allocation in a heterogeneous allocation.
  * Fail step creation if -n is not multiple of  --ntasks-per-gpu.
  * job_container/tmpfs - Fix slowdown on teardown.
  * Fix problem with SlurmctldProlog where requeued jobs would never launch.
  * job_container/tmpfs - Fix issue when restarting slurmd where the namespace
    mount points could disappear.
  * sacct - avoid truncating JobId at 34 characters.
  * scancel - fix segfault when --wckey filtering option is used.
  * select/cons_tres - Fix memory leak.
  * Prevent file descriptor leak in job_container/tmpfs on slurmd restart.
  * slurmrestd/dbv0.0.36 - Fix values dumped in job state/current and
    job step state.
  * slurmrestd/dbv0.0.36 - Correct description for previous state property.
  * perlapi/libslurmdb - expose tres_req_str to job hash.
  * scrontab - close and reopen temporary crontab file to deal with editors
    that do not change the original file, but instead write out then rename
    a new file.
  * sstat - fix linking so that it will work when --without-shared-libslurm
    was used to build Slurm.
  * Clear allocated cpus for running steps in a job before handling requested
    nodes on new step.
  * Don't reject a step if not enough nodes are available. Instead, defer the
    step until enough nodes are available to satisfy the request.
  * Don't reject a step if it requests at least one specific node that is
    already allocated to another step. Instead, defer the step until the
    requested node(s) become available.
  * slurmrestd - add description for slurmdb/job endpoint.
  * Better handling of --mem=0.
  * Ignore DefCpuPerGpu when --cpus-per-task given.
  * sacct - fix segfault when printing StepId (or when using --long).</changelog>
</package>
<package pkgid="3382c3d1d4f58ac56c073248fcc41b709f3b9c0da9b5bf041c3c4a1d2291052f" name="libpq5" arch="aarch64">
  <version epoch="0" ver="14.2" rel="5.9.2"/>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
  <changelog author="max@suse.com" date="1621425600">- bsc#1185952: llvm12 breaks PostgreSQL 11 and 12 on s390x.
  Use llvm11 as a workaround.</changelog>
  <changelog author="mrueckert@suse.de" date="1621598400">- Upgrade to 14~beta1
  https://www.postgresql.org/about/news/postgresql-14-beta-1-released-2213/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items
- disable postgresql-testsuite-int8.sql.patch:
  it seems it is not needed anymore, need to be double checked.</changelog>
  <changelog author="mrueckert@suse.de" date="1624622400">- Upgrade to 14~beta2
  https://www.postgresql.org/about/news/postgresql-14-beta-2-released-2249/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="mrueckert@suse.de" date="1632571200">- Upgrade to 14~rc1
  https://www.postgresql.org/about/news/postgresql-14-rc-1-released-2309/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="max@suse.com" date="1632744000">- Let genlists skip non-existing binaries to avoid lots of version
  conditionals in the file lists.</changelog>
  <changelog author="mrueckert@suse.de" date="1633003200">- Upgrade to 14.0
  https://www.postgresql.org/about/news/postgresql-14-released-2318/
  https://www.postgresql.org/docs/14/release-14.html</changelog>
  <changelog author="max@suse.com" date="1633435200">- Remove postgresql-testsuite-int8.sql.patch, because its purpose
  is unclear. This affects only the test subpackage.</changelog>
  <changelog author="max@suse.com" date="1634731200">- boo#1191782: Let rpmlint ignore shlib-policy-name-error.</changelog>
  <changelog author="max@suse.com" date="1636545600">- bsc#1192516: Upgrade to 14.1
  * Make the server reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23214).
  * Make libpq reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23222).
  * https://www.postgresql.org/docs/14/release-14-1.html</changelog>
  <changelog author="max@suse.com" date="1637841600">- Add a llvmjit-devel subpackage to pull in the right versions
  of clang and llvm for building extensions.
- Fix some mistakes in the interdependencies between the
  implementation packages and their noarch counterpart.
- Update the BuildIgnore section.</changelog>
  <changelog author="ada.lovelace@gmx.de" date="1639224000">- boo#1190740: Add constraints file with 12GB of memory for s390x
  as a workaround</changelog>
  <changelog author="max@suse.com" date="1644321600">- bsc#1195680: Upgrade to 14.2:
  * https://www.postgresql.org/docs/14/release-14-1.html
  * Reindexing might be needed after applying this upgrade, so
    please read the release notes carefully.</changelog>
</package>
<package pkgid="5ed113fa531c9034d84cbde32da4fb59f79a1f9819d6843b604c09a8fd30cea6" name="libpq5" arch="ppc64le">
  <version epoch="0" ver="14.2" rel="5.9.2"/>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
  <changelog author="max@suse.com" date="1621425600">- bsc#1185952: llvm12 breaks PostgreSQL 11 and 12 on s390x.
  Use llvm11 as a workaround.</changelog>
  <changelog author="mrueckert@suse.de" date="1621598400">- Upgrade to 14~beta1
  https://www.postgresql.org/about/news/postgresql-14-beta-1-released-2213/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items
- disable postgresql-testsuite-int8.sql.patch:
  it seems it is not needed anymore, need to be double checked.</changelog>
  <changelog author="mrueckert@suse.de" date="1624622400">- Upgrade to 14~beta2
  https://www.postgresql.org/about/news/postgresql-14-beta-2-released-2249/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="mrueckert@suse.de" date="1632571200">- Upgrade to 14~rc1
  https://www.postgresql.org/about/news/postgresql-14-rc-1-released-2309/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="max@suse.com" date="1632744000">- Let genlists skip non-existing binaries to avoid lots of version
  conditionals in the file lists.</changelog>
  <changelog author="mrueckert@suse.de" date="1633003200">- Upgrade to 14.0
  https://www.postgresql.org/about/news/postgresql-14-released-2318/
  https://www.postgresql.org/docs/14/release-14.html</changelog>
  <changelog author="max@suse.com" date="1633435200">- Remove postgresql-testsuite-int8.sql.patch, because its purpose
  is unclear. This affects only the test subpackage.</changelog>
  <changelog author="max@suse.com" date="1634731200">- boo#1191782: Let rpmlint ignore shlib-policy-name-error.</changelog>
  <changelog author="max@suse.com" date="1636545600">- bsc#1192516: Upgrade to 14.1
  * Make the server reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23214).
  * Make libpq reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23222).
  * https://www.postgresql.org/docs/14/release-14-1.html</changelog>
  <changelog author="max@suse.com" date="1637841600">- Add a llvmjit-devel subpackage to pull in the right versions
  of clang and llvm for building extensions.
- Fix some mistakes in the interdependencies between the
  implementation packages and their noarch counterpart.
- Update the BuildIgnore section.</changelog>
  <changelog author="ada.lovelace@gmx.de" date="1639224000">- boo#1190740: Add constraints file with 12GB of memory for s390x
  as a workaround</changelog>
  <changelog author="max@suse.com" date="1644321600">- bsc#1195680: Upgrade to 14.2:
  * https://www.postgresql.org/docs/14/release-14-1.html
  * Reindexing might be needed after applying this upgrade, so
    please read the release notes carefully.</changelog>
</package>
<package pkgid="81df94cd6fb32f8d7c36a645cbe85bdb3d40bdca03c13e5e2f198c7019f45cdc" name="libpq5" arch="s390x">
  <version epoch="0" ver="14.2" rel="5.9.2"/>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
  <changelog author="max@suse.com" date="1621425600">- bsc#1185952: llvm12 breaks PostgreSQL 11 and 12 on s390x.
  Use llvm11 as a workaround.</changelog>
  <changelog author="mrueckert@suse.de" date="1621598400">- Upgrade to 14~beta1
  https://www.postgresql.org/about/news/postgresql-14-beta-1-released-2213/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items
- disable postgresql-testsuite-int8.sql.patch:
  it seems it is not needed anymore, need to be double checked.</changelog>
  <changelog author="mrueckert@suse.de" date="1624622400">- Upgrade to 14~beta2
  https://www.postgresql.org/about/news/postgresql-14-beta-2-released-2249/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="mrueckert@suse.de" date="1632571200">- Upgrade to 14~rc1
  https://www.postgresql.org/about/news/postgresql-14-rc-1-released-2309/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="max@suse.com" date="1632744000">- Let genlists skip non-existing binaries to avoid lots of version
  conditionals in the file lists.</changelog>
  <changelog author="mrueckert@suse.de" date="1633003200">- Upgrade to 14.0
  https://www.postgresql.org/about/news/postgresql-14-released-2318/
  https://www.postgresql.org/docs/14/release-14.html</changelog>
  <changelog author="max@suse.com" date="1633435200">- Remove postgresql-testsuite-int8.sql.patch, because its purpose
  is unclear. This affects only the test subpackage.</changelog>
  <changelog author="max@suse.com" date="1634731200">- boo#1191782: Let rpmlint ignore shlib-policy-name-error.</changelog>
  <changelog author="max@suse.com" date="1636545600">- bsc#1192516: Upgrade to 14.1
  * Make the server reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23214).
  * Make libpq reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23222).
  * https://www.postgresql.org/docs/14/release-14-1.html</changelog>
  <changelog author="max@suse.com" date="1637841600">- Add a llvmjit-devel subpackage to pull in the right versions
  of clang and llvm for building extensions.
- Fix some mistakes in the interdependencies between the
  implementation packages and their noarch counterpart.
- Update the BuildIgnore section.</changelog>
  <changelog author="ada.lovelace@gmx.de" date="1639224000">- boo#1190740: Add constraints file with 12GB of memory for s390x
  as a workaround</changelog>
  <changelog author="max@suse.com" date="1644321600">- bsc#1195680: Upgrade to 14.2:
  * https://www.postgresql.org/docs/14/release-14-1.html
  * Reindexing might be needed after applying this upgrade, so
    please read the release notes carefully.</changelog>
</package>
<package pkgid="4a261da53e7dfbdbb520f2f24db399ec4b43793ec41e88ceb7831fd381fe264d" name="libpq5" arch="x86_64">
  <version epoch="0" ver="14.2" rel="5.9.2"/>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
  <changelog author="max@suse.com" date="1621425600">- bsc#1185952: llvm12 breaks PostgreSQL 11 and 12 on s390x.
  Use llvm11 as a workaround.</changelog>
  <changelog author="mrueckert@suse.de" date="1621598400">- Upgrade to 14~beta1
  https://www.postgresql.org/about/news/postgresql-14-beta-1-released-2213/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items
- disable postgresql-testsuite-int8.sql.patch:
  it seems it is not needed anymore, need to be double checked.</changelog>
  <changelog author="mrueckert@suse.de" date="1624622400">- Upgrade to 14~beta2
  https://www.postgresql.org/about/news/postgresql-14-beta-2-released-2249/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="mrueckert@suse.de" date="1632571200">- Upgrade to 14~rc1
  https://www.postgresql.org/about/news/postgresql-14-rc-1-released-2309/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="max@suse.com" date="1632744000">- Let genlists skip non-existing binaries to avoid lots of version
  conditionals in the file lists.</changelog>
  <changelog author="mrueckert@suse.de" date="1633003200">- Upgrade to 14.0
  https://www.postgresql.org/about/news/postgresql-14-released-2318/
  https://www.postgresql.org/docs/14/release-14.html</changelog>
  <changelog author="max@suse.com" date="1633435200">- Remove postgresql-testsuite-int8.sql.patch, because its purpose
  is unclear. This affects only the test subpackage.</changelog>
  <changelog author="max@suse.com" date="1634731200">- boo#1191782: Let rpmlint ignore shlib-policy-name-error.</changelog>
  <changelog author="max@suse.com" date="1636545600">- bsc#1192516: Upgrade to 14.1
  * Make the server reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23214).
  * Make libpq reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23222).
  * https://www.postgresql.org/docs/14/release-14-1.html</changelog>
  <changelog author="max@suse.com" date="1637841600">- Add a llvmjit-devel subpackage to pull in the right versions
  of clang and llvm for building extensions.
- Fix some mistakes in the interdependencies between the
  implementation packages and their noarch counterpart.
- Update the BuildIgnore section.</changelog>
  <changelog author="ada.lovelace@gmx.de" date="1639224000">- boo#1190740: Add constraints file with 12GB of memory for s390x
  as a workaround</changelog>
  <changelog author="max@suse.com" date="1644321600">- bsc#1195680: Upgrade to 14.2:
  * https://www.postgresql.org/docs/14/release-14-1.html
  * Reindexing might be needed after applying this upgrade, so
    please read the release notes carefully.</changelog>
</package>
<package pkgid="3ad2fbe57a60ebc2f82e27d9a9b2eeefb966a88b0294eb5e7a538fb62746992e" name="libpq5" arch="aarch64">
  <version epoch="0" ver="14.3" rel="150200.5.12.2"/>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
  <changelog author="max@suse.com" date="1621425600">- bsc#1185952: llvm12 breaks PostgreSQL 11 and 12 on s390x.
  Use llvm11 as a workaround.</changelog>
  <changelog author="mrueckert@suse.de" date="1621598400">- Upgrade to 14~beta1
  https://www.postgresql.org/about/news/postgresql-14-beta-1-released-2213/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items
- disable postgresql-testsuite-int8.sql.patch:
  it seems it is not needed anymore, need to be double checked.</changelog>
  <changelog author="mrueckert@suse.de" date="1624622400">- Upgrade to 14~beta2
  https://www.postgresql.org/about/news/postgresql-14-beta-2-released-2249/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="mrueckert@suse.de" date="1632571200">- Upgrade to 14~rc1
  https://www.postgresql.org/about/news/postgresql-14-rc-1-released-2309/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="max@suse.com" date="1632744000">- Let genlists skip non-existing binaries to avoid lots of version
  conditionals in the file lists.</changelog>
  <changelog author="mrueckert@suse.de" date="1633003200">- Upgrade to 14.0
  https://www.postgresql.org/about/news/postgresql-14-released-2318/
  https://www.postgresql.org/docs/14/release-14.html</changelog>
  <changelog author="max@suse.com" date="1633435200">- Remove postgresql-testsuite-int8.sql.patch, because its purpose
  is unclear. This affects only the test subpackage.</changelog>
  <changelog author="max@suse.com" date="1634731200">- boo#1191782: Let rpmlint ignore shlib-policy-name-error.</changelog>
  <changelog author="max@suse.com" date="1636545600">- bsc#1192516: Upgrade to 14.1
  * Make the server reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23214).
  * Make libpq reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23222).
  * https://www.postgresql.org/docs/14/release-14-1.html</changelog>
  <changelog author="max@suse.com" date="1637841600">- Add a llvmjit-devel subpackage to pull in the right versions
  of clang and llvm for building extensions.
- Fix some mistakes in the interdependencies between the
  implementation packages and their noarch counterpart.
- Update the BuildIgnore section.</changelog>
  <changelog author="ada.lovelace@gmx.de" date="1639224000">- boo#1190740: Add constraints file with 12GB of memory for s390x
  as a workaround</changelog>
  <changelog author="max@suse.com" date="1644321600">- bsc#1195680: Upgrade to 14.2:
  * https://www.postgresql.org/docs/14/release-14-2.html
  * Reindexing might be needed after applying this upgrade, so
    please read the release notes carefully.</changelog>
  <changelog author="max@suse.com" date="1652356800">- Upgrade to 14.3:
  * bsc#1199475, CVE-2022-1552: Confine additional operations
    within "security restricted operation" sandboxes.
  * https://www.postgresql.org/docs/14/release-14-3.html</changelog>
</package>
<package pkgid="e395bb40b71dbc65b568dd4ab6bf7d70711b503c9c8751372d512c3047d8dc98" name="libpq5" arch="ppc64le">
  <version epoch="0" ver="14.3" rel="150200.5.12.2"/>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
  <changelog author="max@suse.com" date="1621425600">- bsc#1185952: llvm12 breaks PostgreSQL 11 and 12 on s390x.
  Use llvm11 as a workaround.</changelog>
  <changelog author="mrueckert@suse.de" date="1621598400">- Upgrade to 14~beta1
  https://www.postgresql.org/about/news/postgresql-14-beta-1-released-2213/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items
- disable postgresql-testsuite-int8.sql.patch:
  it seems it is not needed anymore, need to be double checked.</changelog>
  <changelog author="mrueckert@suse.de" date="1624622400">- Upgrade to 14~beta2
  https://www.postgresql.org/about/news/postgresql-14-beta-2-released-2249/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="mrueckert@suse.de" date="1632571200">- Upgrade to 14~rc1
  https://www.postgresql.org/about/news/postgresql-14-rc-1-released-2309/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="max@suse.com" date="1632744000">- Let genlists skip non-existing binaries to avoid lots of version
  conditionals in the file lists.</changelog>
  <changelog author="mrueckert@suse.de" date="1633003200">- Upgrade to 14.0
  https://www.postgresql.org/about/news/postgresql-14-released-2318/
  https://www.postgresql.org/docs/14/release-14.html</changelog>
  <changelog author="max@suse.com" date="1633435200">- Remove postgresql-testsuite-int8.sql.patch, because its purpose
  is unclear. This affects only the test subpackage.</changelog>
  <changelog author="max@suse.com" date="1634731200">- boo#1191782: Let rpmlint ignore shlib-policy-name-error.</changelog>
  <changelog author="max@suse.com" date="1636545600">- bsc#1192516: Upgrade to 14.1
  * Make the server reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23214).
  * Make libpq reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23222).
  * https://www.postgresql.org/docs/14/release-14-1.html</changelog>
  <changelog author="max@suse.com" date="1637841600">- Add a llvmjit-devel subpackage to pull in the right versions
  of clang and llvm for building extensions.
- Fix some mistakes in the interdependencies between the
  implementation packages and their noarch counterpart.
- Update the BuildIgnore section.</changelog>
  <changelog author="ada.lovelace@gmx.de" date="1639224000">- boo#1190740: Add constraints file with 12GB of memory for s390x
  as a workaround</changelog>
  <changelog author="max@suse.com" date="1644321600">- bsc#1195680: Upgrade to 14.2:
  * https://www.postgresql.org/docs/14/release-14-2.html
  * Reindexing might be needed after applying this upgrade, so
    please read the release notes carefully.</changelog>
  <changelog author="max@suse.com" date="1652356800">- Upgrade to 14.3:
  * bsc#1199475, CVE-2022-1552: Confine additional operations
    within "security restricted operation" sandboxes.
  * https://www.postgresql.org/docs/14/release-14-3.html</changelog>
</package>
<package pkgid="296e545461deb73fdc17a0a0583fc2d7b3d7684f20d9eab7c120d3416b5e4c5f" name="libpq5" arch="s390x">
  <version epoch="0" ver="14.3" rel="150200.5.12.2"/>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
  <changelog author="max@suse.com" date="1621425600">- bsc#1185952: llvm12 breaks PostgreSQL 11 and 12 on s390x.
  Use llvm11 as a workaround.</changelog>
  <changelog author="mrueckert@suse.de" date="1621598400">- Upgrade to 14~beta1
  https://www.postgresql.org/about/news/postgresql-14-beta-1-released-2213/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items
- disable postgresql-testsuite-int8.sql.patch:
  it seems it is not needed anymore, need to be double checked.</changelog>
  <changelog author="mrueckert@suse.de" date="1624622400">- Upgrade to 14~beta2
  https://www.postgresql.org/about/news/postgresql-14-beta-2-released-2249/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="mrueckert@suse.de" date="1632571200">- Upgrade to 14~rc1
  https://www.postgresql.org/about/news/postgresql-14-rc-1-released-2309/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="max@suse.com" date="1632744000">- Let genlists skip non-existing binaries to avoid lots of version
  conditionals in the file lists.</changelog>
  <changelog author="mrueckert@suse.de" date="1633003200">- Upgrade to 14.0
  https://www.postgresql.org/about/news/postgresql-14-released-2318/
  https://www.postgresql.org/docs/14/release-14.html</changelog>
  <changelog author="max@suse.com" date="1633435200">- Remove postgresql-testsuite-int8.sql.patch, because its purpose
  is unclear. This affects only the test subpackage.</changelog>
  <changelog author="max@suse.com" date="1634731200">- boo#1191782: Let rpmlint ignore shlib-policy-name-error.</changelog>
  <changelog author="max@suse.com" date="1636545600">- bsc#1192516: Upgrade to 14.1
  * Make the server reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23214).
  * Make libpq reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23222).
  * https://www.postgresql.org/docs/14/release-14-1.html</changelog>
  <changelog author="max@suse.com" date="1637841600">- Add a llvmjit-devel subpackage to pull in the right versions
  of clang and llvm for building extensions.
- Fix some mistakes in the interdependencies between the
  implementation packages and their noarch counterpart.
- Update the BuildIgnore section.</changelog>
  <changelog author="ada.lovelace@gmx.de" date="1639224000">- boo#1190740: Add constraints file with 12GB of memory for s390x
  as a workaround</changelog>
  <changelog author="max@suse.com" date="1644321600">- bsc#1195680: Upgrade to 14.2:
  * https://www.postgresql.org/docs/14/release-14-2.html
  * Reindexing might be needed after applying this upgrade, so
    please read the release notes carefully.</changelog>
  <changelog author="max@suse.com" date="1652356800">- Upgrade to 14.3:
  * bsc#1199475, CVE-2022-1552: Confine additional operations
    within "security restricted operation" sandboxes.
  * https://www.postgresql.org/docs/14/release-14-3.html</changelog>
</package>
<package pkgid="596895fe2cb1c3d78daf820a40fe5872465094b0d1e780440e56ccd83e25e5c9" name="libpq5" arch="x86_64">
  <version epoch="0" ver="14.3" rel="150200.5.12.2"/>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
  <changelog author="max@suse.com" date="1621425600">- bsc#1185952: llvm12 breaks PostgreSQL 11 and 12 on s390x.
  Use llvm11 as a workaround.</changelog>
  <changelog author="mrueckert@suse.de" date="1621598400">- Upgrade to 14~beta1
  https://www.postgresql.org/about/news/postgresql-14-beta-1-released-2213/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items
- disable postgresql-testsuite-int8.sql.patch:
  it seems it is not needed anymore, need to be double checked.</changelog>
  <changelog author="mrueckert@suse.de" date="1624622400">- Upgrade to 14~beta2
  https://www.postgresql.org/about/news/postgresql-14-beta-2-released-2249/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="mrueckert@suse.de" date="1632571200">- Upgrade to 14~rc1
  https://www.postgresql.org/about/news/postgresql-14-rc-1-released-2309/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="max@suse.com" date="1632744000">- Let genlists skip non-existing binaries to avoid lots of version
  conditionals in the file lists.</changelog>
  <changelog author="mrueckert@suse.de" date="1633003200">- Upgrade to 14.0
  https://www.postgresql.org/about/news/postgresql-14-released-2318/
  https://www.postgresql.org/docs/14/release-14.html</changelog>
  <changelog author="max@suse.com" date="1633435200">- Remove postgresql-testsuite-int8.sql.patch, because its purpose
  is unclear. This affects only the test subpackage.</changelog>
  <changelog author="max@suse.com" date="1634731200">- boo#1191782: Let rpmlint ignore shlib-policy-name-error.</changelog>
  <changelog author="max@suse.com" date="1636545600">- bsc#1192516: Upgrade to 14.1
  * Make the server reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23214).
  * Make libpq reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23222).
  * https://www.postgresql.org/docs/14/release-14-1.html</changelog>
  <changelog author="max@suse.com" date="1637841600">- Add a llvmjit-devel subpackage to pull in the right versions
  of clang and llvm for building extensions.
- Fix some mistakes in the interdependencies between the
  implementation packages and their noarch counterpart.
- Update the BuildIgnore section.</changelog>
  <changelog author="ada.lovelace@gmx.de" date="1639224000">- boo#1190740: Add constraints file with 12GB of memory for s390x
  as a workaround</changelog>
  <changelog author="max@suse.com" date="1644321600">- bsc#1195680: Upgrade to 14.2:
  * https://www.postgresql.org/docs/14/release-14-2.html
  * Reindexing might be needed after applying this upgrade, so
    please read the release notes carefully.</changelog>
  <changelog author="max@suse.com" date="1652356800">- Upgrade to 14.3:
  * bsc#1199475, CVE-2022-1552: Confine additional operations
    within "security restricted operation" sandboxes.
  * https://www.postgresql.org/docs/14/release-14-3.html</changelog>
</package>
<package pkgid="89ea7db6eb4e889ea8c65bc96755562877d86135e1f20373906fc580e1671271" name="libpq5-32bit" arch="x86_64">
  <version epoch="0" ver="14.2" rel="5.9.2"/>
  <changelog author="max@suse.com" date="1605096000">- Upgrade to version 13.1:
  * CVE-2020-25695, bsc#1178666: Block DECLARE CURSOR ... WITH HOLD
    and firing of deferred triggers within index expressions and
    materialized view queries.
  * CVE-2020-25694, bsc#1178667:
    a) Fix usage of complex connection-string parameters in pg_dump,
    pg_restore, clusterdb, reindexdb, and vacuumdb.
    b) When psql's \connect command re-uses connection parameters,
    ensure that all non-overridden parameters from a previous
    connection string are re-used.
  * CVE-2020-25696, bsc#1178668: Prevent psql's \gset command from
    modifying specially-treated variables.
  * Fix recently-added timetz test case so it works when the USA
    is not observing daylight savings time.
    (obsoletes postgresql-timetz.patch)
  * https://www.postgresql.org/about/news/2111/
  * https://www.postgresql.org/docs/13/release-13-1.html</changelog>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
  <changelog author="max@suse.com" date="1621425600">- bsc#1185952: llvm12 breaks PostgreSQL 11 and 12 on s390x.
  Use llvm11 as a workaround.</changelog>
  <changelog author="mrueckert@suse.de" date="1621598400">- Upgrade to 14~beta1
  https://www.postgresql.org/about/news/postgresql-14-beta-1-released-2213/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items
- disable postgresql-testsuite-int8.sql.patch:
  it seems it is not needed anymore, need to be double checked.</changelog>
  <changelog author="mrueckert@suse.de" date="1624622400">- Upgrade to 14~beta2
  https://www.postgresql.org/about/news/postgresql-14-beta-2-released-2249/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="mrueckert@suse.de" date="1632571200">- Upgrade to 14~rc1
  https://www.postgresql.org/about/news/postgresql-14-rc-1-released-2309/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="max@suse.com" date="1632744000">- Let genlists skip non-existing binaries to avoid lots of version
  conditionals in the file lists.</changelog>
  <changelog author="mrueckert@suse.de" date="1633003200">- Upgrade to 14.0
  https://www.postgresql.org/about/news/postgresql-14-released-2318/
  https://www.postgresql.org/docs/14/release-14.html</changelog>
  <changelog author="max@suse.com" date="1633435200">- Remove postgresql-testsuite-int8.sql.patch, because its purpose
  is unclear. This affects only the test subpackage.</changelog>
  <changelog author="max@suse.com" date="1634731200">- boo#1191782: Let rpmlint ignore shlib-policy-name-error.</changelog>
  <changelog author="max@suse.com" date="1636545600">- bsc#1192516: Upgrade to 14.1
  * Make the server reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23214).
  * Make libpq reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23222).
  * https://www.postgresql.org/docs/14/release-14-1.html</changelog>
  <changelog author="max@suse.com" date="1637841600">- Add a llvmjit-devel subpackage to pull in the right versions
  of clang and llvm for building extensions.
- Fix some mistakes in the interdependencies between the
  implementation packages and their noarch counterpart.
- Update the BuildIgnore section.</changelog>
  <changelog author="ada.lovelace@gmx.de" date="1639224000">- boo#1190740: Add constraints file with 12GB of memory for s390x
  as a workaround</changelog>
  <changelog author="max@suse.com" date="1644321600">- bsc#1195680: Upgrade to 14.2:
  * https://www.postgresql.org/docs/14/release-14-1.html
  * Reindexing might be needed after applying this upgrade, so
    please read the release notes carefully.</changelog>
</package>
<package pkgid="dcd398dd984d60f7baf6a7760a9afd4455387f7778538b5e8e03df85f2070479" name="libpq5-32bit" arch="x86_64">
  <version epoch="0" ver="14.3" rel="150200.5.12.2"/>
  <changelog author="max@suse.com" date="1605873600">- bsc#1178961: %ghost the symlinks to pg_config and ecpg.
- boo#1179765: BuildRequire libpq5 and libecpg6 when not building
  them to avoid dangling symlinks in the devel package.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1607947200">- Add postgresql-icu68.patch: fix build with ICU 68</changelog>
  <changelog author="max@suse.com" date="1612958400">- Upgrade to version 13.2:
  * https://www.postgresql.org/docs/13/release-13-2.html
  * Updating stored views and reindexing might be needed after
    applying this update.
  * CVE-2021-3393, bsc#1182040: Fix information leakage in
    constraint-violation error messages.
  * CVE-2021-20229, bsc#1182039: Fix failure to check per-column
    SELECT privileges in some join queries.
  * Obsoletes postgresql-icu68.patch.</changelog>
  <changelog author="max@suse.com" date="1613736000">- boo#1179945: Disable icu for PostgreSQL 10 (and older) on TW.</changelog>
  <changelog author="max@suse.com" date="1615291200">- Remove leftover PreReq on chkconfig, we stopped using it long
  time ago.</changelog>
  <changelog author="max@suse.com" date="1615809600">- Re-enable build of the llvmjit subpackage on SLE, but it will
  only be delivered on PackageHub for now (boo#1183118).</changelog>
  <changelog author="max@suse.com" date="1620734400">- Upgrade to version 13.3:
  * https://www.postgresql.org/docs/13/release-13-3.html
  * CVE-2021-32027, bsc#1185924:
    Prevent integer overflows in array subscripting calculations.
  * CVE-2021-32028, bsc#1185925: Fix mishandling of ?junk?
    columns in INSERT ... ON CONFLICT ... UPDATE target lists.
  * CVE-2021-32029, bsc#1185926: Fix possibly-incorrect
    computation of UPDATE ... RETURNING
    "pg_psql_temporary_savepoint" does not exist?.
- Don't use %_stop_on_removal, because it was meant to be private
  and got removed from openSUSE. %_restart_on_update is also
  private, but still supported and needed for now (bsc#1183168).</changelog>
  <changelog author="max@suse.com" date="1621425600">- bsc#1185952: llvm12 breaks PostgreSQL 11 and 12 on s390x.
  Use llvm11 as a workaround.</changelog>
  <changelog author="mrueckert@suse.de" date="1621598400">- Upgrade to 14~beta1
  https://www.postgresql.org/about/news/postgresql-14-beta-1-released-2213/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items
- disable postgresql-testsuite-int8.sql.patch:
  it seems it is not needed anymore, need to be double checked.</changelog>
  <changelog author="mrueckert@suse.de" date="1624622400">- Upgrade to 14~beta2
  https://www.postgresql.org/about/news/postgresql-14-beta-2-released-2249/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="mrueckert@suse.de" date="1632571200">- Upgrade to 14~rc1
  https://www.postgresql.org/about/news/postgresql-14-rc-1-released-2309/
  https://www.postgresql.org/docs/14/release-14.html
  https://wiki.postgresql.org/wiki/PostgreSQL_14_Open_Items</changelog>
  <changelog author="max@suse.com" date="1632744000">- Let genlists skip non-existing binaries to avoid lots of version
  conditionals in the file lists.</changelog>
  <changelog author="mrueckert@suse.de" date="1633003200">- Upgrade to 14.0
  https://www.postgresql.org/about/news/postgresql-14-released-2318/
  https://www.postgresql.org/docs/14/release-14.html</changelog>
  <changelog author="max@suse.com" date="1633435200">- Remove postgresql-testsuite-int8.sql.patch, because its purpose
  is unclear. This affects only the test subpackage.</changelog>
  <changelog author="max@suse.com" date="1634731200">- boo#1191782: Let rpmlint ignore shlib-policy-name-error.</changelog>
  <changelog author="max@suse.com" date="1636545600">- bsc#1192516: Upgrade to 14.1
  * Make the server reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23214).
  * Make libpq reject extraneous data after an SSL or GSS
    encryption handshake (CVE-2021-23222).
  * https://www.postgresql.org/docs/14/release-14-1.html</changelog>
  <changelog author="max@suse.com" date="1637841600">- Add a llvmjit-devel subpackage to pull in the right versions
  of clang and llvm for building extensions.
- Fix some mistakes in the interdependencies between the
  implementation packages and their noarch counterpart.
- Update the BuildIgnore section.</changelog>
  <changelog author="ada.lovelace@gmx.de" date="1639224000">- boo#1190740: Add constraints file with 12GB of memory for s390x
  as a workaround</changelog>
  <changelog author="max@suse.com" date="1644321600">- bsc#1195680: Upgrade to 14.2:
  * https://www.postgresql.org/docs/14/release-14-2.html
  * Reindexing might be needed after applying this upgrade, so
    please read the release notes carefully.</changelog>
  <changelog author="max@suse.com" date="1652356800">- Upgrade to 14.3:
  * bsc#1199475, CVE-2022-1552: Confine additional operations
    within "security restricted operation" sandboxes.
  * https://www.postgresql.org/docs/14/release-14-3.html</changelog>
</package>
<package pkgid="af093df6c6f746fae3ea7d7aacc65c651f970d86fffba6bca8c5d787e92fa89a" name="libpskc-devel" arch="aarch64">
  <version epoch="0" ver="2.6.2" rel="150000.3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1382529600">- Update to version 2.4.0:
  + liboath: Add new API methods for validating TOTP OTPs
- Changes from version 2.2.0:
  + libpskc: Add functions for setting PSKC data.
  + liboath: Permit different passwords for different tokens for
    the same user.
  + liboath: Make header file usable from C++ (extern "C" guard).
  + build: Improve building from git with most recent automake and
    gengetopt.
  + build: Valgrind is not enabled by default.
- Fix license: libraries are LGPL-2.1+ and everything else is
  GPL-3.0+. Also properly package the COPYING files.
- Prepare build libpskc, hidden under a %{build_pskc} define:
  + Add libxml2-devel and pkgconfig(xmlsec1) BuildRequires.
  + Create libpskc0 and libpskc-devel subpackages.
  + Define %{build_pskc} to 0 since we don't have libxmlsec1 yet.
- Rework summaries and descriptions.</changelog>
  <changelog author="darin@darins.net" date="1405080000">- Ran through spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1422100800">- Update to version 2.4.1:
  + liboath: Fix usersfile bug that caused it to update the wrong line.
    When an usersfile contain multiple lines for the same user but with an
    unparseable token type (e.g., HOTP vs TOTP), the code would update the
    wrong line of the file.  Since the then updated line could be a
    commented out line, this can lead to the same OTP being accepted
    multiple times which is a security vulnerability.  Reported by Bas van
    Schaik &lt;bas@sj-vs.net&gt; and patch provided by Ilkka Virta
    &lt;itvirta@iki.fi&gt;.  CVE-2013-7322</changelog>
  <changelog author="t.gruner@katodev.de" date="1441800000">- Update to Version 2.6.1 (released 2015-07-31)
  - liboath: Fix 'make check' on 32-bit systems.
- Version 2.6.0 (released 2015-05-19)
  - liboath: Support TOTP with HMAC-SHA256 and HMAC-SHA512.
    This adds new APIs oath_totp_generate2, oath_totp_validate4 and
    oath_totp_validate4_callback.
  - oathtool: The --totp parameter now take an optional argument to specify MAC.
    For example use --totp=sha256 to use HMAC-SHA256.  When --totp is used
    the default HMAC-SHA1 is used, as before.
  - pam_oath: Mention in README that you shouldn't use insecure keys.
  - pam_oath: Check return value from strdup.
  - The files 'gdoc' and 'expect.oath' are now included in the tarball.</changelog>
  <changelog author="mardnh@gmx.de" date="1472472000">- Update to Version 2.6.2
  - no changes in upstream code
- Fix RPM groups for -devel packages
- build with libpskc on supported suse-versions
- Add patch:
  - 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch</changelog>
  <changelog author="dmarcoux@posteo.de" date="1516104000">- Add patch (last commit which changed source, not released in 2.6.2):
  - 0002-update_gnulibs_files.patch</changelog>
  <changelog author="ncutler@suse.com" date="1523448000">- use %license instead of %doc to package license-related files</changelog>
  <changelog author="ncutler@suse.com" date="1523448001">- bring License line into closer accordance with actual licenses
  mentioned in the tarball
- split off xml/pskc/ directory/files from liboath0 into a separate
  "oath-toolkit-xml" subpackage to prevent conflicts if two versions of the
  liboath library were ever installed at the same time</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Run spe-cleaner
- Drop useless conditions</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197790] -- FTBFS: oath-toolkit won't compile on SP4
- added patches
  part of https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/9b54ca84f92f4747751449aa645f07737b7bc7ea
  + 0003-update_gnulibs_files-fseeko.c.patch</changelog>
</package>
<package pkgid="36c087da8dad255775c9ec1aaa216deaa6acbd84c5d15b40fa4f081349e53e13" name="libpskc-devel" arch="ppc64le">
  <version epoch="0" ver="2.6.2" rel="150000.3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1382529600">- Update to version 2.4.0:
  + liboath: Add new API methods for validating TOTP OTPs
- Changes from version 2.2.0:
  + libpskc: Add functions for setting PSKC data.
  + liboath: Permit different passwords for different tokens for
    the same user.
  + liboath: Make header file usable from C++ (extern "C" guard).
  + build: Improve building from git with most recent automake and
    gengetopt.
  + build: Valgrind is not enabled by default.
- Fix license: libraries are LGPL-2.1+ and everything else is
  GPL-3.0+. Also properly package the COPYING files.
- Prepare build libpskc, hidden under a %{build_pskc} define:
  + Add libxml2-devel and pkgconfig(xmlsec1) BuildRequires.
  + Create libpskc0 and libpskc-devel subpackages.
  + Define %{build_pskc} to 0 since we don't have libxmlsec1 yet.
- Rework summaries and descriptions.</changelog>
  <changelog author="darin@darins.net" date="1405080000">- Ran through spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1422100800">- Update to version 2.4.1:
  + liboath: Fix usersfile bug that caused it to update the wrong line.
    When an usersfile contain multiple lines for the same user but with an
    unparseable token type (e.g., HOTP vs TOTP), the code would update the
    wrong line of the file.  Since the then updated line could be a
    commented out line, this can lead to the same OTP being accepted
    multiple times which is a security vulnerability.  Reported by Bas van
    Schaik &lt;bas@sj-vs.net&gt; and patch provided by Ilkka Virta
    &lt;itvirta@iki.fi&gt;.  CVE-2013-7322</changelog>
  <changelog author="t.gruner@katodev.de" date="1441800000">- Update to Version 2.6.1 (released 2015-07-31)
  - liboath: Fix 'make check' on 32-bit systems.
- Version 2.6.0 (released 2015-05-19)
  - liboath: Support TOTP with HMAC-SHA256 and HMAC-SHA512.
    This adds new APIs oath_totp_generate2, oath_totp_validate4 and
    oath_totp_validate4_callback.
  - oathtool: The --totp parameter now take an optional argument to specify MAC.
    For example use --totp=sha256 to use HMAC-SHA256.  When --totp is used
    the default HMAC-SHA1 is used, as before.
  - pam_oath: Mention in README that you shouldn't use insecure keys.
  - pam_oath: Check return value from strdup.
  - The files 'gdoc' and 'expect.oath' are now included in the tarball.</changelog>
  <changelog author="mardnh@gmx.de" date="1472472000">- Update to Version 2.6.2
  - no changes in upstream code
- Fix RPM groups for -devel packages
- build with libpskc on supported suse-versions
- Add patch:
  - 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch</changelog>
  <changelog author="dmarcoux@posteo.de" date="1516104000">- Add patch (last commit which changed source, not released in 2.6.2):
  - 0002-update_gnulibs_files.patch</changelog>
  <changelog author="ncutler@suse.com" date="1523448000">- use %license instead of %doc to package license-related files</changelog>
  <changelog author="ncutler@suse.com" date="1523448001">- bring License line into closer accordance with actual licenses
  mentioned in the tarball
- split off xml/pskc/ directory/files from liboath0 into a separate
  "oath-toolkit-xml" subpackage to prevent conflicts if two versions of the
  liboath library were ever installed at the same time</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Run spe-cleaner
- Drop useless conditions</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197790] -- FTBFS: oath-toolkit won't compile on SP4
- added patches
  part of https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/9b54ca84f92f4747751449aa645f07737b7bc7ea
  + 0003-update_gnulibs_files-fseeko.c.patch</changelog>
</package>
<package pkgid="658af03db66478cbabef4a96a4a23bb0cda73984fac11fdc0e8c0049d8025079" name="libpskc-devel" arch="s390x">
  <version epoch="0" ver="2.6.2" rel="150000.3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1382529600">- Update to version 2.4.0:
  + liboath: Add new API methods for validating TOTP OTPs
- Changes from version 2.2.0:
  + libpskc: Add functions for setting PSKC data.
  + liboath: Permit different passwords for different tokens for
    the same user.
  + liboath: Make header file usable from C++ (extern "C" guard).
  + build: Improve building from git with most recent automake and
    gengetopt.
  + build: Valgrind is not enabled by default.
- Fix license: libraries are LGPL-2.1+ and everything else is
  GPL-3.0+. Also properly package the COPYING files.
- Prepare build libpskc, hidden under a %{build_pskc} define:
  + Add libxml2-devel and pkgconfig(xmlsec1) BuildRequires.
  + Create libpskc0 and libpskc-devel subpackages.
  + Define %{build_pskc} to 0 since we don't have libxmlsec1 yet.
- Rework summaries and descriptions.</changelog>
  <changelog author="darin@darins.net" date="1405080000">- Ran through spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1422100800">- Update to version 2.4.1:
  + liboath: Fix usersfile bug that caused it to update the wrong line.
    When an usersfile contain multiple lines for the same user but with an
    unparseable token type (e.g., HOTP vs TOTP), the code would update the
    wrong line of the file.  Since the then updated line could be a
    commented out line, this can lead to the same OTP being accepted
    multiple times which is a security vulnerability.  Reported by Bas van
    Schaik &lt;bas@sj-vs.net&gt; and patch provided by Ilkka Virta
    &lt;itvirta@iki.fi&gt;.  CVE-2013-7322</changelog>
  <changelog author="t.gruner@katodev.de" date="1441800000">- Update to Version 2.6.1 (released 2015-07-31)
  - liboath: Fix 'make check' on 32-bit systems.
- Version 2.6.0 (released 2015-05-19)
  - liboath: Support TOTP with HMAC-SHA256 and HMAC-SHA512.
    This adds new APIs oath_totp_generate2, oath_totp_validate4 and
    oath_totp_validate4_callback.
  - oathtool: The --totp parameter now take an optional argument to specify MAC.
    For example use --totp=sha256 to use HMAC-SHA256.  When --totp is used
    the default HMAC-SHA1 is used, as before.
  - pam_oath: Mention in README that you shouldn't use insecure keys.
  - pam_oath: Check return value from strdup.
  - The files 'gdoc' and 'expect.oath' are now included in the tarball.</changelog>
  <changelog author="mardnh@gmx.de" date="1472472000">- Update to Version 2.6.2
  - no changes in upstream code
- Fix RPM groups for -devel packages
- build with libpskc on supported suse-versions
- Add patch:
  - 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch</changelog>
  <changelog author="dmarcoux@posteo.de" date="1516104000">- Add patch (last commit which changed source, not released in 2.6.2):
  - 0002-update_gnulibs_files.patch</changelog>
  <changelog author="ncutler@suse.com" date="1523448000">- use %license instead of %doc to package license-related files</changelog>
  <changelog author="ncutler@suse.com" date="1523448001">- bring License line into closer accordance with actual licenses
  mentioned in the tarball
- split off xml/pskc/ directory/files from liboath0 into a separate
  "oath-toolkit-xml" subpackage to prevent conflicts if two versions of the
  liboath library were ever installed at the same time</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Run spe-cleaner
- Drop useless conditions</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197790] -- FTBFS: oath-toolkit won't compile on SP4
- added patches
  part of https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/9b54ca84f92f4747751449aa645f07737b7bc7ea
  + 0003-update_gnulibs_files-fseeko.c.patch</changelog>
</package>
<package pkgid="15bca3891732da9158fef4a6d6f06ee5ecd9a610a17b8f4f2d360899354a056c" name="libpskc-devel" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="150000.3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1382529600">- Update to version 2.4.0:
  + liboath: Add new API methods for validating TOTP OTPs
- Changes from version 2.2.0:
  + libpskc: Add functions for setting PSKC data.
  + liboath: Permit different passwords for different tokens for
    the same user.
  + liboath: Make header file usable from C++ (extern "C" guard).
  + build: Improve building from git with most recent automake and
    gengetopt.
  + build: Valgrind is not enabled by default.
- Fix license: libraries are LGPL-2.1+ and everything else is
  GPL-3.0+. Also properly package the COPYING files.
- Prepare build libpskc, hidden under a %{build_pskc} define:
  + Add libxml2-devel and pkgconfig(xmlsec1) BuildRequires.
  + Create libpskc0 and libpskc-devel subpackages.
  + Define %{build_pskc} to 0 since we don't have libxmlsec1 yet.
- Rework summaries and descriptions.</changelog>
  <changelog author="darin@darins.net" date="1405080000">- Ran through spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1422100800">- Update to version 2.4.1:
  + liboath: Fix usersfile bug that caused it to update the wrong line.
    When an usersfile contain multiple lines for the same user but with an
    unparseable token type (e.g., HOTP vs TOTP), the code would update the
    wrong line of the file.  Since the then updated line could be a
    commented out line, this can lead to the same OTP being accepted
    multiple times which is a security vulnerability.  Reported by Bas van
    Schaik &lt;bas@sj-vs.net&gt; and patch provided by Ilkka Virta
    &lt;itvirta@iki.fi&gt;.  CVE-2013-7322</changelog>
  <changelog author="t.gruner@katodev.de" date="1441800000">- Update to Version 2.6.1 (released 2015-07-31)
  - liboath: Fix 'make check' on 32-bit systems.
- Version 2.6.0 (released 2015-05-19)
  - liboath: Support TOTP with HMAC-SHA256 and HMAC-SHA512.
    This adds new APIs oath_totp_generate2, oath_totp_validate4 and
    oath_totp_validate4_callback.
  - oathtool: The --totp parameter now take an optional argument to specify MAC.
    For example use --totp=sha256 to use HMAC-SHA256.  When --totp is used
    the default HMAC-SHA1 is used, as before.
  - pam_oath: Mention in README that you shouldn't use insecure keys.
  - pam_oath: Check return value from strdup.
  - The files 'gdoc' and 'expect.oath' are now included in the tarball.</changelog>
  <changelog author="mardnh@gmx.de" date="1472472000">- Update to Version 2.6.2
  - no changes in upstream code
- Fix RPM groups for -devel packages
- build with libpskc on supported suse-versions
- Add patch:
  - 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch</changelog>
  <changelog author="dmarcoux@posteo.de" date="1516104000">- Add patch (last commit which changed source, not released in 2.6.2):
  - 0002-update_gnulibs_files.patch</changelog>
  <changelog author="ncutler@suse.com" date="1523448000">- use %license instead of %doc to package license-related files</changelog>
  <changelog author="ncutler@suse.com" date="1523448001">- bring License line into closer accordance with actual licenses
  mentioned in the tarball
- split off xml/pskc/ directory/files from liboath0 into a separate
  "oath-toolkit-xml" subpackage to prevent conflicts if two versions of the
  liboath library were ever installed at the same time</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Run spe-cleaner
- Drop useless conditions</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197790] -- FTBFS: oath-toolkit won't compile on SP4
- added patches
  part of https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/9b54ca84f92f4747751449aa645f07737b7bc7ea
  + 0003-update_gnulibs_files-fseeko.c.patch</changelog>
</package>
<package pkgid="c49da1ae0192423745c6dc565d1c6b3b13e0d8e53779351db8fe87303912e93e" name="libpskc0" arch="aarch64">
  <version epoch="0" ver="2.6.2" rel="150000.3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1382529600">- Update to version 2.4.0:
  + liboath: Add new API methods for validating TOTP OTPs
- Changes from version 2.2.0:
  + libpskc: Add functions for setting PSKC data.
  + liboath: Permit different passwords for different tokens for
    the same user.
  + liboath: Make header file usable from C++ (extern "C" guard).
  + build: Improve building from git with most recent automake and
    gengetopt.
  + build: Valgrind is not enabled by default.
- Fix license: libraries are LGPL-2.1+ and everything else is
  GPL-3.0+. Also properly package the COPYING files.
- Prepare build libpskc, hidden under a %{build_pskc} define:
  + Add libxml2-devel and pkgconfig(xmlsec1) BuildRequires.
  + Create libpskc0 and libpskc-devel subpackages.
  + Define %{build_pskc} to 0 since we don't have libxmlsec1 yet.
- Rework summaries and descriptions.</changelog>
  <changelog author="darin@darins.net" date="1405080000">- Ran through spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1422100800">- Update to version 2.4.1:
  + liboath: Fix usersfile bug that caused it to update the wrong line.
    When an usersfile contain multiple lines for the same user but with an
    unparseable token type (e.g., HOTP vs TOTP), the code would update the
    wrong line of the file.  Since the then updated line could be a
    commented out line, this can lead to the same OTP being accepted
    multiple times which is a security vulnerability.  Reported by Bas van
    Schaik &lt;bas@sj-vs.net&gt; and patch provided by Ilkka Virta
    &lt;itvirta@iki.fi&gt;.  CVE-2013-7322</changelog>
  <changelog author="t.gruner@katodev.de" date="1441800000">- Update to Version 2.6.1 (released 2015-07-31)
  - liboath: Fix 'make check' on 32-bit systems.
- Version 2.6.0 (released 2015-05-19)
  - liboath: Support TOTP with HMAC-SHA256 and HMAC-SHA512.
    This adds new APIs oath_totp_generate2, oath_totp_validate4 and
    oath_totp_validate4_callback.
  - oathtool: The --totp parameter now take an optional argument to specify MAC.
    For example use --totp=sha256 to use HMAC-SHA256.  When --totp is used
    the default HMAC-SHA1 is used, as before.
  - pam_oath: Mention in README that you shouldn't use insecure keys.
  - pam_oath: Check return value from strdup.
  - The files 'gdoc' and 'expect.oath' are now included in the tarball.</changelog>
  <changelog author="mardnh@gmx.de" date="1472472000">- Update to Version 2.6.2
  - no changes in upstream code
- Fix RPM groups for -devel packages
- build with libpskc on supported suse-versions
- Add patch:
  - 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch</changelog>
  <changelog author="dmarcoux@posteo.de" date="1516104000">- Add patch (last commit which changed source, not released in 2.6.2):
  - 0002-update_gnulibs_files.patch</changelog>
  <changelog author="ncutler@suse.com" date="1523448000">- use %license instead of %doc to package license-related files</changelog>
  <changelog author="ncutler@suse.com" date="1523448001">- bring License line into closer accordance with actual licenses
  mentioned in the tarball
- split off xml/pskc/ directory/files from liboath0 into a separate
  "oath-toolkit-xml" subpackage to prevent conflicts if two versions of the
  liboath library were ever installed at the same time</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Run spe-cleaner
- Drop useless conditions</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197790] -- FTBFS: oath-toolkit won't compile on SP4
- added patches
  part of https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/9b54ca84f92f4747751449aa645f07737b7bc7ea
  + 0003-update_gnulibs_files-fseeko.c.patch</changelog>
</package>
<package pkgid="f3e70fad2e8cd52df29892384173d8c4462f1127c07b40c2795d8240ca07b916" name="libpskc0" arch="ppc64le">
  <version epoch="0" ver="2.6.2" rel="150000.3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1382529600">- Update to version 2.4.0:
  + liboath: Add new API methods for validating TOTP OTPs
- Changes from version 2.2.0:
  + libpskc: Add functions for setting PSKC data.
  + liboath: Permit different passwords for different tokens for
    the same user.
  + liboath: Make header file usable from C++ (extern "C" guard).
  + build: Improve building from git with most recent automake and
    gengetopt.
  + build: Valgrind is not enabled by default.
- Fix license: libraries are LGPL-2.1+ and everything else is
  GPL-3.0+. Also properly package the COPYING files.
- Prepare build libpskc, hidden under a %{build_pskc} define:
  + Add libxml2-devel and pkgconfig(xmlsec1) BuildRequires.
  + Create libpskc0 and libpskc-devel subpackages.
  + Define %{build_pskc} to 0 since we don't have libxmlsec1 yet.
- Rework summaries and descriptions.</changelog>
  <changelog author="darin@darins.net" date="1405080000">- Ran through spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1422100800">- Update to version 2.4.1:
  + liboath: Fix usersfile bug that caused it to update the wrong line.
    When an usersfile contain multiple lines for the same user but with an
    unparseable token type (e.g., HOTP vs TOTP), the code would update the
    wrong line of the file.  Since the then updated line could be a
    commented out line, this can lead to the same OTP being accepted
    multiple times which is a security vulnerability.  Reported by Bas van
    Schaik &lt;bas@sj-vs.net&gt; and patch provided by Ilkka Virta
    &lt;itvirta@iki.fi&gt;.  CVE-2013-7322</changelog>
  <changelog author="t.gruner@katodev.de" date="1441800000">- Update to Version 2.6.1 (released 2015-07-31)
  - liboath: Fix 'make check' on 32-bit systems.
- Version 2.6.0 (released 2015-05-19)
  - liboath: Support TOTP with HMAC-SHA256 and HMAC-SHA512.
    This adds new APIs oath_totp_generate2, oath_totp_validate4 and
    oath_totp_validate4_callback.
  - oathtool: The --totp parameter now take an optional argument to specify MAC.
    For example use --totp=sha256 to use HMAC-SHA256.  When --totp is used
    the default HMAC-SHA1 is used, as before.
  - pam_oath: Mention in README that you shouldn't use insecure keys.
  - pam_oath: Check return value from strdup.
  - The files 'gdoc' and 'expect.oath' are now included in the tarball.</changelog>
  <changelog author="mardnh@gmx.de" date="1472472000">- Update to Version 2.6.2
  - no changes in upstream code
- Fix RPM groups for -devel packages
- build with libpskc on supported suse-versions
- Add patch:
  - 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch</changelog>
  <changelog author="dmarcoux@posteo.de" date="1516104000">- Add patch (last commit which changed source, not released in 2.6.2):
  - 0002-update_gnulibs_files.patch</changelog>
  <changelog author="ncutler@suse.com" date="1523448000">- use %license instead of %doc to package license-related files</changelog>
  <changelog author="ncutler@suse.com" date="1523448001">- bring License line into closer accordance with actual licenses
  mentioned in the tarball
- split off xml/pskc/ directory/files from liboath0 into a separate
  "oath-toolkit-xml" subpackage to prevent conflicts if two versions of the
  liboath library were ever installed at the same time</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Run spe-cleaner
- Drop useless conditions</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197790] -- FTBFS: oath-toolkit won't compile on SP4
- added patches
  part of https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/9b54ca84f92f4747751449aa645f07737b7bc7ea
  + 0003-update_gnulibs_files-fseeko.c.patch</changelog>
</package>
<package pkgid="7e0329f445e20cdcbb479d02a0f2f2467921381ef22d5e3ce0a0db85653bc331" name="libpskc0" arch="s390x">
  <version epoch="0" ver="2.6.2" rel="150000.3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1382529600">- Update to version 2.4.0:
  + liboath: Add new API methods for validating TOTP OTPs
- Changes from version 2.2.0:
  + libpskc: Add functions for setting PSKC data.
  + liboath: Permit different passwords for different tokens for
    the same user.
  + liboath: Make header file usable from C++ (extern "C" guard).
  + build: Improve building from git with most recent automake and
    gengetopt.
  + build: Valgrind is not enabled by default.
- Fix license: libraries are LGPL-2.1+ and everything else is
  GPL-3.0+. Also properly package the COPYING files.
- Prepare build libpskc, hidden under a %{build_pskc} define:
  + Add libxml2-devel and pkgconfig(xmlsec1) BuildRequires.
  + Create libpskc0 and libpskc-devel subpackages.
  + Define %{build_pskc} to 0 since we don't have libxmlsec1 yet.
- Rework summaries and descriptions.</changelog>
  <changelog author="darin@darins.net" date="1405080000">- Ran through spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1422100800">- Update to version 2.4.1:
  + liboath: Fix usersfile bug that caused it to update the wrong line.
    When an usersfile contain multiple lines for the same user but with an
    unparseable token type (e.g., HOTP vs TOTP), the code would update the
    wrong line of the file.  Since the then updated line could be a
    commented out line, this can lead to the same OTP being accepted
    multiple times which is a security vulnerability.  Reported by Bas van
    Schaik &lt;bas@sj-vs.net&gt; and patch provided by Ilkka Virta
    &lt;itvirta@iki.fi&gt;.  CVE-2013-7322</changelog>
  <changelog author="t.gruner@katodev.de" date="1441800000">- Update to Version 2.6.1 (released 2015-07-31)
  - liboath: Fix 'make check' on 32-bit systems.
- Version 2.6.0 (released 2015-05-19)
  - liboath: Support TOTP with HMAC-SHA256 and HMAC-SHA512.
    This adds new APIs oath_totp_generate2, oath_totp_validate4 and
    oath_totp_validate4_callback.
  - oathtool: The --totp parameter now take an optional argument to specify MAC.
    For example use --totp=sha256 to use HMAC-SHA256.  When --totp is used
    the default HMAC-SHA1 is used, as before.
  - pam_oath: Mention in README that you shouldn't use insecure keys.
  - pam_oath: Check return value from strdup.
  - The files 'gdoc' and 'expect.oath' are now included in the tarball.</changelog>
  <changelog author="mardnh@gmx.de" date="1472472000">- Update to Version 2.6.2
  - no changes in upstream code
- Fix RPM groups for -devel packages
- build with libpskc on supported suse-versions
- Add patch:
  - 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch</changelog>
  <changelog author="dmarcoux@posteo.de" date="1516104000">- Add patch (last commit which changed source, not released in 2.6.2):
  - 0002-update_gnulibs_files.patch</changelog>
  <changelog author="ncutler@suse.com" date="1523448000">- use %license instead of %doc to package license-related files</changelog>
  <changelog author="ncutler@suse.com" date="1523448001">- bring License line into closer accordance with actual licenses
  mentioned in the tarball
- split off xml/pskc/ directory/files from liboath0 into a separate
  "oath-toolkit-xml" subpackage to prevent conflicts if two versions of the
  liboath library were ever installed at the same time</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Run spe-cleaner
- Drop useless conditions</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197790] -- FTBFS: oath-toolkit won't compile on SP4
- added patches
  part of https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/9b54ca84f92f4747751449aa645f07737b7bc7ea
  + 0003-update_gnulibs_files-fseeko.c.patch</changelog>
</package>
<package pkgid="319b5f526c53c946a211686282283e0e42ca9d1cf8a5aceb0619cb4513fc3244" name="libpskc0" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="150000.3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1382529600">- Update to version 2.4.0:
  + liboath: Add new API methods for validating TOTP OTPs
- Changes from version 2.2.0:
  + libpskc: Add functions for setting PSKC data.
  + liboath: Permit different passwords for different tokens for
    the same user.
  + liboath: Make header file usable from C++ (extern "C" guard).
  + build: Improve building from git with most recent automake and
    gengetopt.
  + build: Valgrind is not enabled by default.
- Fix license: libraries are LGPL-2.1+ and everything else is
  GPL-3.0+. Also properly package the COPYING files.
- Prepare build libpskc, hidden under a %{build_pskc} define:
  + Add libxml2-devel and pkgconfig(xmlsec1) BuildRequires.
  + Create libpskc0 and libpskc-devel subpackages.
  + Define %{build_pskc} to 0 since we don't have libxmlsec1 yet.
- Rework summaries and descriptions.</changelog>
  <changelog author="darin@darins.net" date="1405080000">- Ran through spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1422100800">- Update to version 2.4.1:
  + liboath: Fix usersfile bug that caused it to update the wrong line.
    When an usersfile contain multiple lines for the same user but with an
    unparseable token type (e.g., HOTP vs TOTP), the code would update the
    wrong line of the file.  Since the then updated line could be a
    commented out line, this can lead to the same OTP being accepted
    multiple times which is a security vulnerability.  Reported by Bas van
    Schaik &lt;bas@sj-vs.net&gt; and patch provided by Ilkka Virta
    &lt;itvirta@iki.fi&gt;.  CVE-2013-7322</changelog>
  <changelog author="t.gruner@katodev.de" date="1441800000">- Update to Version 2.6.1 (released 2015-07-31)
  - liboath: Fix 'make check' on 32-bit systems.
- Version 2.6.0 (released 2015-05-19)
  - liboath: Support TOTP with HMAC-SHA256 and HMAC-SHA512.
    This adds new APIs oath_totp_generate2, oath_totp_validate4 and
    oath_totp_validate4_callback.
  - oathtool: The --totp parameter now take an optional argument to specify MAC.
    For example use --totp=sha256 to use HMAC-SHA256.  When --totp is used
    the default HMAC-SHA1 is used, as before.
  - pam_oath: Mention in README that you shouldn't use insecure keys.
  - pam_oath: Check return value from strdup.
  - The files 'gdoc' and 'expect.oath' are now included in the tarball.</changelog>
  <changelog author="mardnh@gmx.de" date="1472472000">- Update to Version 2.6.2
  - no changes in upstream code
- Fix RPM groups for -devel packages
- build with libpskc on supported suse-versions
- Add patch:
  - 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch</changelog>
  <changelog author="dmarcoux@posteo.de" date="1516104000">- Add patch (last commit which changed source, not released in 2.6.2):
  - 0002-update_gnulibs_files.patch</changelog>
  <changelog author="ncutler@suse.com" date="1523448000">- use %license instead of %doc to package license-related files</changelog>
  <changelog author="ncutler@suse.com" date="1523448001">- bring License line into closer accordance with actual licenses
  mentioned in the tarball
- split off xml/pskc/ directory/files from liboath0 into a separate
  "oath-toolkit-xml" subpackage to prevent conflicts if two versions of the
  liboath library were ever installed at the same time</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Run spe-cleaner
- Drop useless conditions</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197790] -- FTBFS: oath-toolkit won't compile on SP4
- added patches
  part of https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/9b54ca84f92f4747751449aa645f07737b7bc7ea
  + 0003-update_gnulibs_files-fseeko.c.patch</changelog>
</package>
<package pkgid="2e65dcb5601818d8c272f6c2764ec7790e81eaeef1a5652a561ea88aa44baeed" name="libpsl" arch="src">
  <version epoch="0" ver="0.20.1" rel="150000.3.3.1"/>
  <changelog author="astieger@suse.com" date="1447588800">- initial package for libpsl based on Fedora Spec</changelog>
  <changelog author="astieger@suse.com" date="1448712000">- fix SLE 11 build:
  * adding 0001-Remove-include-of-bits-stat.h.patch
  * skip IDN feature
- update descriptions and categories</changelog>
  <changelog author="astieger@suse.com" date="1452168000">- libpsl 0.12.0 (libpsl.so.5 5:0:0)
  * Remove psl_builtin_compile_time()
  * Add function psl_is_public_suffix2()
  * Avoid libicu dependency with --enable-runtime=no
- drop upstreamed 0001-Remove-include-of-bits-stat.h.patch</changelog>
  <changelog author="idonmez@suse.com" date="1454673600">- Add baselibs.conf</changelog>
  <changelog author="astieger@suse.com" date="1457524800">- libpsl 0.13.0:
  * Use tests.txt as PSL test file by default
  * Slightly shorter DAFSA array when sorting input
  * Check for python 2.7+ in configure.ac
  * Fix python3 incompatibilities in make_dafsa.py</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- libpsl 0.14.0:
  * Remove unneeded libraries from tools/psl link step
  * Use https instead of http where possible
  * Add man page for tools/psl
  * Add header magic to DAFSA files
  * Rename make_dafsa.py to psl-make-dafsa
  * Add man page for psl-make-dafsa</changelog>
  <changelog author="astieger@suse.com" date="1479124800">- libpsl 0.15.0:
  * Python3 compatibility for psl-make-dafsa
  * Support for UTF-8 in DAFSA data
  * Skip punycode conversion if DAFSA has UTF-8
  * Better code coverage by test suite
  * Code cleanup and enhancements
  * Install man pages for psl-make-dafsa and psl
  * Enhancements to the documentation</changelog>
  <changelog author="astieger@suse.com" date="1481803200">- libpsl 0.16.1:
  This version enables consumers of the library to dynamically load
  the latest public suffix data from a binary data file in the
  publicsuffix package which can then updated without re-building
  libpsl.
  * Add functions psl_latest() and psl_dist_filename()
  * Do not taint out variable on error in psl_str_to_utf8lower()
  * Replace psl2c by psl-make-dafsa
- correct licenses for package and subpackages
- package HTML docs in -devel package</changelog>
  <changelog author="shshyukriev@suse.com" date="1484827200">- libpsl 0.17.0:
  * Use TR46 non-transitional for IDNA (libicu, libidn2 &gt;= 0.14)
  * Fix coverage upload from TravisCI to Coveralls
  * New tests to cover psl_latest() and psl_dist_filename()</changelog>
  <changelog author="coolo@suse.com" date="1491480000">- Use idn2 runtime instead of libicu - as libicu requires 30MB
  of unicode data - while idn2 is already part of minimal system</changelog>
  <changelog author="astieger@suse.com" date="1500552000">- update to 0.18.0:
  * Fix order of files in psl_latest()
  * Add fuzzing architecture
  * Fix memleak in _psl_is_public_suffix()
  * Add configure option --enable-asan (Address sanitizer)
  * Add configure option --enable-usan (Undefined sanitizer)
  * Add configure option --enable-cfi (Control Flow Integrity)
  * Fix finding libidn2 for static builds
  * Fix use of uninitialized stack value
  * Fix buffer overflow in libicu build
  * Use libidn2 as default for builds (former libicu)
  * Add pkg-config support for libidn and libidn2</changelog>
  <changelog author="astieger@suse.com" date="1510228800">- update to 0.19.1:
  * New function psl_free_string()
  * psl_make_dafsa now works with python2 and python3
  * psl_*count() functions now return -1 if info is not available
  * Fixed unsigned integer overflow in _mem_is_ascii()
  * Add -fsanitize-address-use-after-scope to --enable-asan if
    available</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Make sure to use python3 during build instead of calling env</changelog>
  <changelog author="astieger@suse.com" date="1519300800">- update to 0.20.0:
  * Remove hard-coded gcc flag in Makefile.am
  * Prevent excessive CPU cycles on large inputs
  * New flag PSL_TYPE_NO_STAR_RULE to skip star rule</changelog>
  <changelog author="fvogt@suse.com" date="1519300801">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519732800">- update to 0.20.1:
  * Fix issue introduced with PSL_TYPE_NO_STAR_RULE in V0.20.0
  * Fix SO_VERSION to 8:0:3
  * Improve unit tests</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197771] - FTBFS: libpsl won't compile on SP4
- added patches
  https://github.com/rockdaboot/libpsl/commit/f364cea73e351ce62e0b337fd1fbc21e70b52d56
  + libpsl-fix-test-data.patch</changelog>
</package>
<package pkgid="b292762e3814ad4f2685ffe143d7eff05239334e88eff1c341b188f751c7862b" name="libpsl-devel" arch="aarch64">
  <version epoch="0" ver="0.20.1" rel="150000.3.3.1"/>
  <changelog author="astieger@suse.com" date="1447588800">- initial package for libpsl based on Fedora Spec</changelog>
  <changelog author="astieger@suse.com" date="1448712000">- fix SLE 11 build:
  * adding 0001-Remove-include-of-bits-stat.h.patch
  * skip IDN feature
- update descriptions and categories</changelog>
  <changelog author="astieger@suse.com" date="1452168000">- libpsl 0.12.0 (libpsl.so.5 5:0:0)
  * Remove psl_builtin_compile_time()
  * Add function psl_is_public_suffix2()
  * Avoid libicu dependency with --enable-runtime=no
- drop upstreamed 0001-Remove-include-of-bits-stat.h.patch</changelog>
  <changelog author="idonmez@suse.com" date="1454673600">- Add baselibs.conf</changelog>
  <changelog author="astieger@suse.com" date="1457524800">- libpsl 0.13.0:
  * Use tests.txt as PSL test file by default
  * Slightly shorter DAFSA array when sorting input
  * Check for python 2.7+ in configure.ac
  * Fix python3 incompatibilities in make_dafsa.py</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- libpsl 0.14.0:
  * Remove unneeded libraries from tools/psl link step
  * Use https instead of http where possible
  * Add man page for tools/psl
  * Add header magic to DAFSA files
  * Rename make_dafsa.py to psl-make-dafsa
  * Add man page for psl-make-dafsa</changelog>
  <changelog author="astieger@suse.com" date="1479124800">- libpsl 0.15.0:
  * Python3 compatibility for psl-make-dafsa
  * Support for UTF-8 in DAFSA data
  * Skip punycode conversion if DAFSA has UTF-8
  * Better code coverage by test suite
  * Code cleanup and enhancements
  * Install man pages for psl-make-dafsa and psl
  * Enhancements to the documentation</changelog>
  <changelog author="astieger@suse.com" date="1481803200">- libpsl 0.16.1:
  This version enables consumers of the library to dynamically load
  the latest public suffix data from a binary data file in the
  publicsuffix package which can then updated without re-building
  libpsl.
  * Add functions psl_latest() and psl_dist_filename()
  * Do not taint out variable on error in psl_str_to_utf8lower()
  * Replace psl2c by psl-make-dafsa
- correct licenses for package and subpackages
- package HTML docs in -devel package</changelog>
  <changelog author="shshyukriev@suse.com" date="1484827200">- libpsl 0.17.0:
  * Use TR46 non-transitional for IDNA (libicu, libidn2 &gt;= 0.14)
  * Fix coverage upload from TravisCI to Coveralls
  * New tests to cover psl_latest() and psl_dist_filename()</changelog>
  <changelog author="coolo@suse.com" date="1491480000">- Use idn2 runtime instead of libicu - as libicu requires 30MB
  of unicode data - while idn2 is already part of minimal system</changelog>
  <changelog author="astieger@suse.com" date="1500552000">- update to 0.18.0:
  * Fix order of files in psl_latest()
  * Add fuzzing architecture
  * Fix memleak in _psl_is_public_suffix()
  * Add configure option --enable-asan (Address sanitizer)
  * Add configure option --enable-usan (Undefined sanitizer)
  * Add configure option --enable-cfi (Control Flow Integrity)
  * Fix finding libidn2 for static builds
  * Fix use of uninitialized stack value
  * Fix buffer overflow in libicu build
  * Use libidn2 as default for builds (former libicu)
  * Add pkg-config support for libidn and libidn2</changelog>
  <changelog author="astieger@suse.com" date="1510228800">- update to 0.19.1:
  * New function psl_free_string()
  * psl_make_dafsa now works with python2 and python3
  * psl_*count() functions now return -1 if info is not available
  * Fixed unsigned integer overflow in _mem_is_ascii()
  * Add -fsanitize-address-use-after-scope to --enable-asan if
    available</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Make sure to use python3 during build instead of calling env</changelog>
  <changelog author="astieger@suse.com" date="1519300800">- update to 0.20.0:
  * Remove hard-coded gcc flag in Makefile.am
  * Prevent excessive CPU cycles on large inputs
  * New flag PSL_TYPE_NO_STAR_RULE to skip star rule</changelog>
  <changelog author="fvogt@suse.com" date="1519300801">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519732800">- update to 0.20.1:
  * Fix issue introduced with PSL_TYPE_NO_STAR_RULE in V0.20.0
  * Fix SO_VERSION to 8:0:3
  * Improve unit tests</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197771] - FTBFS: libpsl won't compile on SP4
- added patches
  https://github.com/rockdaboot/libpsl/commit/f364cea73e351ce62e0b337fd1fbc21e70b52d56
  + libpsl-fix-test-data.patch</changelog>
</package>
<package pkgid="5c7778e36f4e1ff6e1f52693e488ce4c2d7ae5969a51b118d7312221df18ad68" name="libpsl-devel" arch="ppc64le">
  <version epoch="0" ver="0.20.1" rel="150000.3.3.1"/>
  <changelog author="astieger@suse.com" date="1447588800">- initial package for libpsl based on Fedora Spec</changelog>
  <changelog author="astieger@suse.com" date="1448712000">- fix SLE 11 build:
  * adding 0001-Remove-include-of-bits-stat.h.patch
  * skip IDN feature
- update descriptions and categories</changelog>
  <changelog author="astieger@suse.com" date="1452168000">- libpsl 0.12.0 (libpsl.so.5 5:0:0)
  * Remove psl_builtin_compile_time()
  * Add function psl_is_public_suffix2()
  * Avoid libicu dependency with --enable-runtime=no
- drop upstreamed 0001-Remove-include-of-bits-stat.h.patch</changelog>
  <changelog author="idonmez@suse.com" date="1454673600">- Add baselibs.conf</changelog>
  <changelog author="astieger@suse.com" date="1457524800">- libpsl 0.13.0:
  * Use tests.txt as PSL test file by default
  * Slightly shorter DAFSA array when sorting input
  * Check for python 2.7+ in configure.ac
  * Fix python3 incompatibilities in make_dafsa.py</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- libpsl 0.14.0:
  * Remove unneeded libraries from tools/psl link step
  * Use https instead of http where possible
  * Add man page for tools/psl
  * Add header magic to DAFSA files
  * Rename make_dafsa.py to psl-make-dafsa
  * Add man page for psl-make-dafsa</changelog>
  <changelog author="astieger@suse.com" date="1479124800">- libpsl 0.15.0:
  * Python3 compatibility for psl-make-dafsa
  * Support for UTF-8 in DAFSA data
  * Skip punycode conversion if DAFSA has UTF-8
  * Better code coverage by test suite
  * Code cleanup and enhancements
  * Install man pages for psl-make-dafsa and psl
  * Enhancements to the documentation</changelog>
  <changelog author="astieger@suse.com" date="1481803200">- libpsl 0.16.1:
  This version enables consumers of the library to dynamically load
  the latest public suffix data from a binary data file in the
  publicsuffix package which can then updated without re-building
  libpsl.
  * Add functions psl_latest() and psl_dist_filename()
  * Do not taint out variable on error in psl_str_to_utf8lower()
  * Replace psl2c by psl-make-dafsa
- correct licenses for package and subpackages
- package HTML docs in -devel package</changelog>
  <changelog author="shshyukriev@suse.com" date="1484827200">- libpsl 0.17.0:
  * Use TR46 non-transitional for IDNA (libicu, libidn2 &gt;= 0.14)
  * Fix coverage upload from TravisCI to Coveralls
  * New tests to cover psl_latest() and psl_dist_filename()</changelog>
  <changelog author="coolo@suse.com" date="1491480000">- Use idn2 runtime instead of libicu - as libicu requires 30MB
  of unicode data - while idn2 is already part of minimal system</changelog>
  <changelog author="astieger@suse.com" date="1500552000">- update to 0.18.0:
  * Fix order of files in psl_latest()
  * Add fuzzing architecture
  * Fix memleak in _psl_is_public_suffix()
  * Add configure option --enable-asan (Address sanitizer)
  * Add configure option --enable-usan (Undefined sanitizer)
  * Add configure option --enable-cfi (Control Flow Integrity)
  * Fix finding libidn2 for static builds
  * Fix use of uninitialized stack value
  * Fix buffer overflow in libicu build
  * Use libidn2 as default for builds (former libicu)
  * Add pkg-config support for libidn and libidn2</changelog>
  <changelog author="astieger@suse.com" date="1510228800">- update to 0.19.1:
  * New function psl_free_string()
  * psl_make_dafsa now works with python2 and python3
  * psl_*count() functions now return -1 if info is not available
  * Fixed unsigned integer overflow in _mem_is_ascii()
  * Add -fsanitize-address-use-after-scope to --enable-asan if
    available</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Make sure to use python3 during build instead of calling env</changelog>
  <changelog author="astieger@suse.com" date="1519300800">- update to 0.20.0:
  * Remove hard-coded gcc flag in Makefile.am
  * Prevent excessive CPU cycles on large inputs
  * New flag PSL_TYPE_NO_STAR_RULE to skip star rule</changelog>
  <changelog author="fvogt@suse.com" date="1519300801">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519732800">- update to 0.20.1:
  * Fix issue introduced with PSL_TYPE_NO_STAR_RULE in V0.20.0
  * Fix SO_VERSION to 8:0:3
  * Improve unit tests</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197771] - FTBFS: libpsl won't compile on SP4
- added patches
  https://github.com/rockdaboot/libpsl/commit/f364cea73e351ce62e0b337fd1fbc21e70b52d56
  + libpsl-fix-test-data.patch</changelog>
</package>
<package pkgid="abcfed20da6ec7f38255dd7ae858f8c8c131d2574d3c2651c35b8a4b79b417e3" name="libpsl-devel" arch="s390x">
  <version epoch="0" ver="0.20.1" rel="150000.3.3.1"/>
  <changelog author="astieger@suse.com" date="1447588800">- initial package for libpsl based on Fedora Spec</changelog>
  <changelog author="astieger@suse.com" date="1448712000">- fix SLE 11 build:
  * adding 0001-Remove-include-of-bits-stat.h.patch
  * skip IDN feature
- update descriptions and categories</changelog>
  <changelog author="astieger@suse.com" date="1452168000">- libpsl 0.12.0 (libpsl.so.5 5:0:0)
  * Remove psl_builtin_compile_time()
  * Add function psl_is_public_suffix2()
  * Avoid libicu dependency with --enable-runtime=no
- drop upstreamed 0001-Remove-include-of-bits-stat.h.patch</changelog>
  <changelog author="idonmez@suse.com" date="1454673600">- Add baselibs.conf</changelog>
  <changelog author="astieger@suse.com" date="1457524800">- libpsl 0.13.0:
  * Use tests.txt as PSL test file by default
  * Slightly shorter DAFSA array when sorting input
  * Check for python 2.7+ in configure.ac
  * Fix python3 incompatibilities in make_dafsa.py</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- libpsl 0.14.0:
  * Remove unneeded libraries from tools/psl link step
  * Use https instead of http where possible
  * Add man page for tools/psl
  * Add header magic to DAFSA files
  * Rename make_dafsa.py to psl-make-dafsa
  * Add man page for psl-make-dafsa</changelog>
  <changelog author="astieger@suse.com" date="1479124800">- libpsl 0.15.0:
  * Python3 compatibility for psl-make-dafsa
  * Support for UTF-8 in DAFSA data
  * Skip punycode conversion if DAFSA has UTF-8
  * Better code coverage by test suite
  * Code cleanup and enhancements
  * Install man pages for psl-make-dafsa and psl
  * Enhancements to the documentation</changelog>
  <changelog author="astieger@suse.com" date="1481803200">- libpsl 0.16.1:
  This version enables consumers of the library to dynamically load
  the latest public suffix data from a binary data file in the
  publicsuffix package which can then updated without re-building
  libpsl.
  * Add functions psl_latest() and psl_dist_filename()
  * Do not taint out variable on error in psl_str_to_utf8lower()
  * Replace psl2c by psl-make-dafsa
- correct licenses for package and subpackages
- package HTML docs in -devel package</changelog>
  <changelog author="shshyukriev@suse.com" date="1484827200">- libpsl 0.17.0:
  * Use TR46 non-transitional for IDNA (libicu, libidn2 &gt;= 0.14)
  * Fix coverage upload from TravisCI to Coveralls
  * New tests to cover psl_latest() and psl_dist_filename()</changelog>
  <changelog author="coolo@suse.com" date="1491480000">- Use idn2 runtime instead of libicu - as libicu requires 30MB
  of unicode data - while idn2 is already part of minimal system</changelog>
  <changelog author="astieger@suse.com" date="1500552000">- update to 0.18.0:
  * Fix order of files in psl_latest()
  * Add fuzzing architecture
  * Fix memleak in _psl_is_public_suffix()
  * Add configure option --enable-asan (Address sanitizer)
  * Add configure option --enable-usan (Undefined sanitizer)
  * Add configure option --enable-cfi (Control Flow Integrity)
  * Fix finding libidn2 for static builds
  * Fix use of uninitialized stack value
  * Fix buffer overflow in libicu build
  * Use libidn2 as default for builds (former libicu)
  * Add pkg-config support for libidn and libidn2</changelog>
  <changelog author="astieger@suse.com" date="1510228800">- update to 0.19.1:
  * New function psl_free_string()
  * psl_make_dafsa now works with python2 and python3
  * psl_*count() functions now return -1 if info is not available
  * Fixed unsigned integer overflow in _mem_is_ascii()
  * Add -fsanitize-address-use-after-scope to --enable-asan if
    available</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Make sure to use python3 during build instead of calling env</changelog>
  <changelog author="astieger@suse.com" date="1519300800">- update to 0.20.0:
  * Remove hard-coded gcc flag in Makefile.am
  * Prevent excessive CPU cycles on large inputs
  * New flag PSL_TYPE_NO_STAR_RULE to skip star rule</changelog>
  <changelog author="fvogt@suse.com" date="1519300801">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519732800">- update to 0.20.1:
  * Fix issue introduced with PSL_TYPE_NO_STAR_RULE in V0.20.0
  * Fix SO_VERSION to 8:0:3
  * Improve unit tests</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197771] - FTBFS: libpsl won't compile on SP4
- added patches
  https://github.com/rockdaboot/libpsl/commit/f364cea73e351ce62e0b337fd1fbc21e70b52d56
  + libpsl-fix-test-data.patch</changelog>
</package>
<package pkgid="0dbb48884fb582f2016c6f7c2d81a15e62e49e5a7823129c0fe507fea4d4e352" name="libpsl-devel" arch="x86_64">
  <version epoch="0" ver="0.20.1" rel="150000.3.3.1"/>
  <changelog author="astieger@suse.com" date="1447588800">- initial package for libpsl based on Fedora Spec</changelog>
  <changelog author="astieger@suse.com" date="1448712000">- fix SLE 11 build:
  * adding 0001-Remove-include-of-bits-stat.h.patch
  * skip IDN feature
- update descriptions and categories</changelog>
  <changelog author="astieger@suse.com" date="1452168000">- libpsl 0.12.0 (libpsl.so.5 5:0:0)
  * Remove psl_builtin_compile_time()
  * Add function psl_is_public_suffix2()
  * Avoid libicu dependency with --enable-runtime=no
- drop upstreamed 0001-Remove-include-of-bits-stat.h.patch</changelog>
  <changelog author="idonmez@suse.com" date="1454673600">- Add baselibs.conf</changelog>
  <changelog author="astieger@suse.com" date="1457524800">- libpsl 0.13.0:
  * Use tests.txt as PSL test file by default
  * Slightly shorter DAFSA array when sorting input
  * Check for python 2.7+ in configure.ac
  * Fix python3 incompatibilities in make_dafsa.py</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- libpsl 0.14.0:
  * Remove unneeded libraries from tools/psl link step
  * Use https instead of http where possible
  * Add man page for tools/psl
  * Add header magic to DAFSA files
  * Rename make_dafsa.py to psl-make-dafsa
  * Add man page for psl-make-dafsa</changelog>
  <changelog author="astieger@suse.com" date="1479124800">- libpsl 0.15.0:
  * Python3 compatibility for psl-make-dafsa
  * Support for UTF-8 in DAFSA data
  * Skip punycode conversion if DAFSA has UTF-8
  * Better code coverage by test suite
  * Code cleanup and enhancements
  * Install man pages for psl-make-dafsa and psl
  * Enhancements to the documentation</changelog>
  <changelog author="astieger@suse.com" date="1481803200">- libpsl 0.16.1:
  This version enables consumers of the library to dynamically load
  the latest public suffix data from a binary data file in the
  publicsuffix package which can then updated without re-building
  libpsl.
  * Add functions psl_latest() and psl_dist_filename()
  * Do not taint out variable on error in psl_str_to_utf8lower()
  * Replace psl2c by psl-make-dafsa
- correct licenses for package and subpackages
- package HTML docs in -devel package</changelog>
  <changelog author="shshyukriev@suse.com" date="1484827200">- libpsl 0.17.0:
  * Use TR46 non-transitional for IDNA (libicu, libidn2 &gt;= 0.14)
  * Fix coverage upload from TravisCI to Coveralls
  * New tests to cover psl_latest() and psl_dist_filename()</changelog>
  <changelog author="coolo@suse.com" date="1491480000">- Use idn2 runtime instead of libicu - as libicu requires 30MB
  of unicode data - while idn2 is already part of minimal system</changelog>
  <changelog author="astieger@suse.com" date="1500552000">- update to 0.18.0:
  * Fix order of files in psl_latest()
  * Add fuzzing architecture
  * Fix memleak in _psl_is_public_suffix()
  * Add configure option --enable-asan (Address sanitizer)
  * Add configure option --enable-usan (Undefined sanitizer)
  * Add configure option --enable-cfi (Control Flow Integrity)
  * Fix finding libidn2 for static builds
  * Fix use of uninitialized stack value
  * Fix buffer overflow in libicu build
  * Use libidn2 as default for builds (former libicu)
  * Add pkg-config support for libidn and libidn2</changelog>
  <changelog author="astieger@suse.com" date="1510228800">- update to 0.19.1:
  * New function psl_free_string()
  * psl_make_dafsa now works with python2 and python3
  * psl_*count() functions now return -1 if info is not available
  * Fixed unsigned integer overflow in _mem_is_ascii()
  * Add -fsanitize-address-use-after-scope to --enable-asan if
    available</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Make sure to use python3 during build instead of calling env</changelog>
  <changelog author="astieger@suse.com" date="1519300800">- update to 0.20.0:
  * Remove hard-coded gcc flag in Makefile.am
  * Prevent excessive CPU cycles on large inputs
  * New flag PSL_TYPE_NO_STAR_RULE to skip star rule</changelog>
  <changelog author="fvogt@suse.com" date="1519300801">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519732800">- update to 0.20.1:
  * Fix issue introduced with PSL_TYPE_NO_STAR_RULE in V0.20.0
  * Fix SO_VERSION to 8:0:3
  * Improve unit tests</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197771] - FTBFS: libpsl won't compile on SP4
- added patches
  https://github.com/rockdaboot/libpsl/commit/f364cea73e351ce62e0b337fd1fbc21e70b52d56
  + libpsl-fix-test-data.patch</changelog>
</package>
<package pkgid="d3c70e616b15a88b8f61e282c887256ecb3e63b25acb16a88da12094d2cb99a1" name="libpsl5" arch="aarch64">
  <version epoch="0" ver="0.20.1" rel="150000.3.3.1"/>
  <changelog author="astieger@suse.com" date="1447588800">- initial package for libpsl based on Fedora Spec</changelog>
  <changelog author="astieger@suse.com" date="1448712000">- fix SLE 11 build:
  * adding 0001-Remove-include-of-bits-stat.h.patch
  * skip IDN feature
- update descriptions and categories</changelog>
  <changelog author="astieger@suse.com" date="1452168000">- libpsl 0.12.0 (libpsl.so.5 5:0:0)
  * Remove psl_builtin_compile_time()
  * Add function psl_is_public_suffix2()
  * Avoid libicu dependency with --enable-runtime=no
- drop upstreamed 0001-Remove-include-of-bits-stat.h.patch</changelog>
  <changelog author="idonmez@suse.com" date="1454673600">- Add baselibs.conf</changelog>
  <changelog author="astieger@suse.com" date="1457524800">- libpsl 0.13.0:
  * Use tests.txt as PSL test file by default
  * Slightly shorter DAFSA array when sorting input
  * Check for python 2.7+ in configure.ac
  * Fix python3 incompatibilities in make_dafsa.py</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- libpsl 0.14.0:
  * Remove unneeded libraries from tools/psl link step
  * Use https instead of http where possible
  * Add man page for tools/psl
  * Add header magic to DAFSA files
  * Rename make_dafsa.py to psl-make-dafsa
  * Add man page for psl-make-dafsa</changelog>
  <changelog author="astieger@suse.com" date="1479124800">- libpsl 0.15.0:
  * Python3 compatibility for psl-make-dafsa
  * Support for UTF-8 in DAFSA data
  * Skip punycode conversion if DAFSA has UTF-8
  * Better code coverage by test suite
  * Code cleanup and enhancements
  * Install man pages for psl-make-dafsa and psl
  * Enhancements to the documentation</changelog>
  <changelog author="astieger@suse.com" date="1481803200">- libpsl 0.16.1:
  This version enables consumers of the library to dynamically load
  the latest public suffix data from a binary data file in the
  publicsuffix package which can then updated without re-building
  libpsl.
  * Add functions psl_latest() and psl_dist_filename()
  * Do not taint out variable on error in psl_str_to_utf8lower()
  * Replace psl2c by psl-make-dafsa
- correct licenses for package and subpackages
- package HTML docs in -devel package</changelog>
  <changelog author="shshyukriev@suse.com" date="1484827200">- libpsl 0.17.0:
  * Use TR46 non-transitional for IDNA (libicu, libidn2 &gt;= 0.14)
  * Fix coverage upload from TravisCI to Coveralls
  * New tests to cover psl_latest() and psl_dist_filename()</changelog>
  <changelog author="coolo@suse.com" date="1491480000">- Use idn2 runtime instead of libicu - as libicu requires 30MB
  of unicode data - while idn2 is already part of minimal system</changelog>
  <changelog author="astieger@suse.com" date="1500552000">- update to 0.18.0:
  * Fix order of files in psl_latest()
  * Add fuzzing architecture
  * Fix memleak in _psl_is_public_suffix()
  * Add configure option --enable-asan (Address sanitizer)
  * Add configure option --enable-usan (Undefined sanitizer)
  * Add configure option --enable-cfi (Control Flow Integrity)
  * Fix finding libidn2 for static builds
  * Fix use of uninitialized stack value
  * Fix buffer overflow in libicu build
  * Use libidn2 as default for builds (former libicu)
  * Add pkg-config support for libidn and libidn2</changelog>
  <changelog author="astieger@suse.com" date="1510228800">- update to 0.19.1:
  * New function psl_free_string()
  * psl_make_dafsa now works with python2 and python3
  * psl_*count() functions now return -1 if info is not available
  * Fixed unsigned integer overflow in _mem_is_ascii()
  * Add -fsanitize-address-use-after-scope to --enable-asan if
    available</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Make sure to use python3 during build instead of calling env</changelog>
  <changelog author="astieger@suse.com" date="1519300800">- update to 0.20.0:
  * Remove hard-coded gcc flag in Makefile.am
  * Prevent excessive CPU cycles on large inputs
  * New flag PSL_TYPE_NO_STAR_RULE to skip star rule</changelog>
  <changelog author="fvogt@suse.com" date="1519300801">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519732800">- update to 0.20.1:
  * Fix issue introduced with PSL_TYPE_NO_STAR_RULE in V0.20.0
  * Fix SO_VERSION to 8:0:3
  * Improve unit tests</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197771] - FTBFS: libpsl won't compile on SP4
- added patches
  https://github.com/rockdaboot/libpsl/commit/f364cea73e351ce62e0b337fd1fbc21e70b52d56
  + libpsl-fix-test-data.patch</changelog>
</package>
<package pkgid="e132970944eb17923b32c97d7ce00e5c36209a7fa9332c6a3e32131081c9324e" name="libpsl5" arch="ppc64le">
  <version epoch="0" ver="0.20.1" rel="150000.3.3.1"/>
  <changelog author="astieger@suse.com" date="1447588800">- initial package for libpsl based on Fedora Spec</changelog>
  <changelog author="astieger@suse.com" date="1448712000">- fix SLE 11 build:
  * adding 0001-Remove-include-of-bits-stat.h.patch
  * skip IDN feature
- update descriptions and categories</changelog>
  <changelog author="astieger@suse.com" date="1452168000">- libpsl 0.12.0 (libpsl.so.5 5:0:0)
  * Remove psl_builtin_compile_time()
  * Add function psl_is_public_suffix2()
  * Avoid libicu dependency with --enable-runtime=no
- drop upstreamed 0001-Remove-include-of-bits-stat.h.patch</changelog>
  <changelog author="idonmez@suse.com" date="1454673600">- Add baselibs.conf</changelog>
  <changelog author="astieger@suse.com" date="1457524800">- libpsl 0.13.0:
  * Use tests.txt as PSL test file by default
  * Slightly shorter DAFSA array when sorting input
  * Check for python 2.7+ in configure.ac
  * Fix python3 incompatibilities in make_dafsa.py</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- libpsl 0.14.0:
  * Remove unneeded libraries from tools/psl link step
  * Use https instead of http where possible
  * Add man page for tools/psl
  * Add header magic to DAFSA files
  * Rename make_dafsa.py to psl-make-dafsa
  * Add man page for psl-make-dafsa</changelog>
  <changelog author="astieger@suse.com" date="1479124800">- libpsl 0.15.0:
  * Python3 compatibility for psl-make-dafsa
  * Support for UTF-8 in DAFSA data
  * Skip punycode conversion if DAFSA has UTF-8
  * Better code coverage by test suite
  * Code cleanup and enhancements
  * Install man pages for psl-make-dafsa and psl
  * Enhancements to the documentation</changelog>
  <changelog author="astieger@suse.com" date="1481803200">- libpsl 0.16.1:
  This version enables consumers of the library to dynamically load
  the latest public suffix data from a binary data file in the
  publicsuffix package which can then updated without re-building
  libpsl.
  * Add functions psl_latest() and psl_dist_filename()
  * Do not taint out variable on error in psl_str_to_utf8lower()
  * Replace psl2c by psl-make-dafsa
- correct licenses for package and subpackages
- package HTML docs in -devel package</changelog>
  <changelog author="shshyukriev@suse.com" date="1484827200">- libpsl 0.17.0:
  * Use TR46 non-transitional for IDNA (libicu, libidn2 &gt;= 0.14)
  * Fix coverage upload from TravisCI to Coveralls
  * New tests to cover psl_latest() and psl_dist_filename()</changelog>
  <changelog author="coolo@suse.com" date="1491480000">- Use idn2 runtime instead of libicu - as libicu requires 30MB
  of unicode data - while idn2 is already part of minimal system</changelog>
  <changelog author="astieger@suse.com" date="1500552000">- update to 0.18.0:
  * Fix order of files in psl_latest()
  * Add fuzzing architecture
  * Fix memleak in _psl_is_public_suffix()
  * Add configure option --enable-asan (Address sanitizer)
  * Add configure option --enable-usan (Undefined sanitizer)
  * Add configure option --enable-cfi (Control Flow Integrity)
  * Fix finding libidn2 for static builds
  * Fix use of uninitialized stack value
  * Fix buffer overflow in libicu build
  * Use libidn2 as default for builds (former libicu)
  * Add pkg-config support for libidn and libidn2</changelog>
  <changelog author="astieger@suse.com" date="1510228800">- update to 0.19.1:
  * New function psl_free_string()
  * psl_make_dafsa now works with python2 and python3
  * psl_*count() functions now return -1 if info is not available
  * Fixed unsigned integer overflow in _mem_is_ascii()
  * Add -fsanitize-address-use-after-scope to --enable-asan if
    available</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Make sure to use python3 during build instead of calling env</changelog>
  <changelog author="astieger@suse.com" date="1519300800">- update to 0.20.0:
  * Remove hard-coded gcc flag in Makefile.am
  * Prevent excessive CPU cycles on large inputs
  * New flag PSL_TYPE_NO_STAR_RULE to skip star rule</changelog>
  <changelog author="fvogt@suse.com" date="1519300801">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519732800">- update to 0.20.1:
  * Fix issue introduced with PSL_TYPE_NO_STAR_RULE in V0.20.0
  * Fix SO_VERSION to 8:0:3
  * Improve unit tests</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197771] - FTBFS: libpsl won't compile on SP4
- added patches
  https://github.com/rockdaboot/libpsl/commit/f364cea73e351ce62e0b337fd1fbc21e70b52d56
  + libpsl-fix-test-data.patch</changelog>
</package>
<package pkgid="de798449cfb0531813da4983b05ec5a6be3b6c9215055e4d8bd525de80dc3560" name="libpsl5" arch="s390x">
  <version epoch="0" ver="0.20.1" rel="150000.3.3.1"/>
  <changelog author="astieger@suse.com" date="1447588800">- initial package for libpsl based on Fedora Spec</changelog>
  <changelog author="astieger@suse.com" date="1448712000">- fix SLE 11 build:
  * adding 0001-Remove-include-of-bits-stat.h.patch
  * skip IDN feature
- update descriptions and categories</changelog>
  <changelog author="astieger@suse.com" date="1452168000">- libpsl 0.12.0 (libpsl.so.5 5:0:0)
  * Remove psl_builtin_compile_time()
  * Add function psl_is_public_suffix2()
  * Avoid libicu dependency with --enable-runtime=no
- drop upstreamed 0001-Remove-include-of-bits-stat.h.patch</changelog>
  <changelog author="idonmez@suse.com" date="1454673600">- Add baselibs.conf</changelog>
  <changelog author="astieger@suse.com" date="1457524800">- libpsl 0.13.0:
  * Use tests.txt as PSL test file by default
  * Slightly shorter DAFSA array when sorting input
  * Check for python 2.7+ in configure.ac
  * Fix python3 incompatibilities in make_dafsa.py</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- libpsl 0.14.0:
  * Remove unneeded libraries from tools/psl link step
  * Use https instead of http where possible
  * Add man page for tools/psl
  * Add header magic to DAFSA files
  * Rename make_dafsa.py to psl-make-dafsa
  * Add man page for psl-make-dafsa</changelog>
  <changelog author="astieger@suse.com" date="1479124800">- libpsl 0.15.0:
  * Python3 compatibility for psl-make-dafsa
  * Support for UTF-8 in DAFSA data
  * Skip punycode conversion if DAFSA has UTF-8
  * Better code coverage by test suite
  * Code cleanup and enhancements
  * Install man pages for psl-make-dafsa and psl
  * Enhancements to the documentation</changelog>
  <changelog author="astieger@suse.com" date="1481803200">- libpsl 0.16.1:
  This version enables consumers of the library to dynamically load
  the latest public suffix data from a binary data file in the
  publicsuffix package which can then updated without re-building
  libpsl.
  * Add functions psl_latest() and psl_dist_filename()
  * Do not taint out variable on error in psl_str_to_utf8lower()
  * Replace psl2c by psl-make-dafsa
- correct licenses for package and subpackages
- package HTML docs in -devel package</changelog>
  <changelog author="shshyukriev@suse.com" date="1484827200">- libpsl 0.17.0:
  * Use TR46 non-transitional for IDNA (libicu, libidn2 &gt;= 0.14)
  * Fix coverage upload from TravisCI to Coveralls
  * New tests to cover psl_latest() and psl_dist_filename()</changelog>
  <changelog author="coolo@suse.com" date="1491480000">- Use idn2 runtime instead of libicu - as libicu requires 30MB
  of unicode data - while idn2 is already part of minimal system</changelog>
  <changelog author="astieger@suse.com" date="1500552000">- update to 0.18.0:
  * Fix order of files in psl_latest()
  * Add fuzzing architecture
  * Fix memleak in _psl_is_public_suffix()
  * Add configure option --enable-asan (Address sanitizer)
  * Add configure option --enable-usan (Undefined sanitizer)
  * Add configure option --enable-cfi (Control Flow Integrity)
  * Fix finding libidn2 for static builds
  * Fix use of uninitialized stack value
  * Fix buffer overflow in libicu build
  * Use libidn2 as default for builds (former libicu)
  * Add pkg-config support for libidn and libidn2</changelog>
  <changelog author="astieger@suse.com" date="1510228800">- update to 0.19.1:
  * New function psl_free_string()
  * psl_make_dafsa now works with python2 and python3
  * psl_*count() functions now return -1 if info is not available
  * Fixed unsigned integer overflow in _mem_is_ascii()
  * Add -fsanitize-address-use-after-scope to --enable-asan if
    available</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Make sure to use python3 during build instead of calling env</changelog>
  <changelog author="astieger@suse.com" date="1519300800">- update to 0.20.0:
  * Remove hard-coded gcc flag in Makefile.am
  * Prevent excessive CPU cycles on large inputs
  * New flag PSL_TYPE_NO_STAR_RULE to skip star rule</changelog>
  <changelog author="fvogt@suse.com" date="1519300801">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519732800">- update to 0.20.1:
  * Fix issue introduced with PSL_TYPE_NO_STAR_RULE in V0.20.0
  * Fix SO_VERSION to 8:0:3
  * Improve unit tests</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197771] - FTBFS: libpsl won't compile on SP4
- added patches
  https://github.com/rockdaboot/libpsl/commit/f364cea73e351ce62e0b337fd1fbc21e70b52d56
  + libpsl-fix-test-data.patch</changelog>
</package>
<package pkgid="da560d22112ebbdb4de9fb535c2c84e17cbfd08738f954b105899de973c3584a" name="libpsl5" arch="x86_64">
  <version epoch="0" ver="0.20.1" rel="150000.3.3.1"/>
  <changelog author="astieger@suse.com" date="1447588800">- initial package for libpsl based on Fedora Spec</changelog>
  <changelog author="astieger@suse.com" date="1448712000">- fix SLE 11 build:
  * adding 0001-Remove-include-of-bits-stat.h.patch
  * skip IDN feature
- update descriptions and categories</changelog>
  <changelog author="astieger@suse.com" date="1452168000">- libpsl 0.12.0 (libpsl.so.5 5:0:0)
  * Remove psl_builtin_compile_time()
  * Add function psl_is_public_suffix2()
  * Avoid libicu dependency with --enable-runtime=no
- drop upstreamed 0001-Remove-include-of-bits-stat.h.patch</changelog>
  <changelog author="idonmez@suse.com" date="1454673600">- Add baselibs.conf</changelog>
  <changelog author="astieger@suse.com" date="1457524800">- libpsl 0.13.0:
  * Use tests.txt as PSL test file by default
  * Slightly shorter DAFSA array when sorting input
  * Check for python 2.7+ in configure.ac
  * Fix python3 incompatibilities in make_dafsa.py</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- libpsl 0.14.0:
  * Remove unneeded libraries from tools/psl link step
  * Use https instead of http where possible
  * Add man page for tools/psl
  * Add header magic to DAFSA files
  * Rename make_dafsa.py to psl-make-dafsa
  * Add man page for psl-make-dafsa</changelog>
  <changelog author="astieger@suse.com" date="1479124800">- libpsl 0.15.0:
  * Python3 compatibility for psl-make-dafsa
  * Support for UTF-8 in DAFSA data
  * Skip punycode conversion if DAFSA has UTF-8
  * Better code coverage by test suite
  * Code cleanup and enhancements
  * Install man pages for psl-make-dafsa and psl
  * Enhancements to the documentation</changelog>
  <changelog author="astieger@suse.com" date="1481803200">- libpsl 0.16.1:
  This version enables consumers of the library to dynamically load
  the latest public suffix data from a binary data file in the
  publicsuffix package which can then updated without re-building
  libpsl.
  * Add functions psl_latest() and psl_dist_filename()
  * Do not taint out variable on error in psl_str_to_utf8lower()
  * Replace psl2c by psl-make-dafsa
- correct licenses for package and subpackages
- package HTML docs in -devel package</changelog>
  <changelog author="shshyukriev@suse.com" date="1484827200">- libpsl 0.17.0:
  * Use TR46 non-transitional for IDNA (libicu, libidn2 &gt;= 0.14)
  * Fix coverage upload from TravisCI to Coveralls
  * New tests to cover psl_latest() and psl_dist_filename()</changelog>
  <changelog author="coolo@suse.com" date="1491480000">- Use idn2 runtime instead of libicu - as libicu requires 30MB
  of unicode data - while idn2 is already part of minimal system</changelog>
  <changelog author="astieger@suse.com" date="1500552000">- update to 0.18.0:
  * Fix order of files in psl_latest()
  * Add fuzzing architecture
  * Fix memleak in _psl_is_public_suffix()
  * Add configure option --enable-asan (Address sanitizer)
  * Add configure option --enable-usan (Undefined sanitizer)
  * Add configure option --enable-cfi (Control Flow Integrity)
  * Fix finding libidn2 for static builds
  * Fix use of uninitialized stack value
  * Fix buffer overflow in libicu build
  * Use libidn2 as default for builds (former libicu)
  * Add pkg-config support for libidn and libidn2</changelog>
  <changelog author="astieger@suse.com" date="1510228800">- update to 0.19.1:
  * New function psl_free_string()
  * psl_make_dafsa now works with python2 and python3
  * psl_*count() functions now return -1 if info is not available
  * Fixed unsigned integer overflow in _mem_is_ascii()
  * Add -fsanitize-address-use-after-scope to --enable-asan if
    available</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Make sure to use python3 during build instead of calling env</changelog>
  <changelog author="astieger@suse.com" date="1519300800">- update to 0.20.0:
  * Remove hard-coded gcc flag in Makefile.am
  * Prevent excessive CPU cycles on large inputs
  * New flag PSL_TYPE_NO_STAR_RULE to skip star rule</changelog>
  <changelog author="fvogt@suse.com" date="1519300801">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519732800">- update to 0.20.1:
  * Fix issue introduced with PSL_TYPE_NO_STAR_RULE in V0.20.0
  * Fix SO_VERSION to 8:0:3
  * Improve unit tests</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197771] - FTBFS: libpsl won't compile on SP4
- added patches
  https://github.com/rockdaboot/libpsl/commit/f364cea73e351ce62e0b337fd1fbc21e70b52d56
  + libpsl-fix-test-data.patch</changelog>
</package>
<package pkgid="b4b4d7d83239e7b14e1887dca720eae74ce9507ff4fc62a3e88920620bea8952" name="libpsl5-32bit" arch="x86_64">
  <version epoch="0" ver="0.20.1" rel="150000.3.3.1"/>
  <changelog author="astieger@suse.com" date="1447588800">- initial package for libpsl based on Fedora Spec</changelog>
  <changelog author="astieger@suse.com" date="1448712000">- fix SLE 11 build:
  * adding 0001-Remove-include-of-bits-stat.h.patch
  * skip IDN feature
- update descriptions and categories</changelog>
  <changelog author="astieger@suse.com" date="1452168000">- libpsl 0.12.0 (libpsl.so.5 5:0:0)
  * Remove psl_builtin_compile_time()
  * Add function psl_is_public_suffix2()
  * Avoid libicu dependency with --enable-runtime=no
- drop upstreamed 0001-Remove-include-of-bits-stat.h.patch</changelog>
  <changelog author="idonmez@suse.com" date="1454673600">- Add baselibs.conf</changelog>
  <changelog author="astieger@suse.com" date="1457524800">- libpsl 0.13.0:
  * Use tests.txt as PSL test file by default
  * Slightly shorter DAFSA array when sorting input
  * Check for python 2.7+ in configure.ac
  * Fix python3 incompatibilities in make_dafsa.py</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- libpsl 0.14.0:
  * Remove unneeded libraries from tools/psl link step
  * Use https instead of http where possible
  * Add man page for tools/psl
  * Add header magic to DAFSA files
  * Rename make_dafsa.py to psl-make-dafsa
  * Add man page for psl-make-dafsa</changelog>
  <changelog author="astieger@suse.com" date="1479124800">- libpsl 0.15.0:
  * Python3 compatibility for psl-make-dafsa
  * Support for UTF-8 in DAFSA data
  * Skip punycode conversion if DAFSA has UTF-8
  * Better code coverage by test suite
  * Code cleanup and enhancements
  * Install man pages for psl-make-dafsa and psl
  * Enhancements to the documentation</changelog>
  <changelog author="astieger@suse.com" date="1481803200">- libpsl 0.16.1:
  This version enables consumers of the library to dynamically load
  the latest public suffix data from a binary data file in the
  publicsuffix package which can then updated without re-building
  libpsl.
  * Add functions psl_latest() and psl_dist_filename()
  * Do not taint out variable on error in psl_str_to_utf8lower()
  * Replace psl2c by psl-make-dafsa
- correct licenses for package and subpackages
- package HTML docs in -devel package</changelog>
  <changelog author="shshyukriev@suse.com" date="1484827200">- libpsl 0.17.0:
  * Use TR46 non-transitional for IDNA (libicu, libidn2 &gt;= 0.14)
  * Fix coverage upload from TravisCI to Coveralls
  * New tests to cover psl_latest() and psl_dist_filename()</changelog>
  <changelog author="coolo@suse.com" date="1491480000">- Use idn2 runtime instead of libicu - as libicu requires 30MB
  of unicode data - while idn2 is already part of minimal system</changelog>
  <changelog author="astieger@suse.com" date="1500552000">- update to 0.18.0:
  * Fix order of files in psl_latest()
  * Add fuzzing architecture
  * Fix memleak in _psl_is_public_suffix()
  * Add configure option --enable-asan (Address sanitizer)
  * Add configure option --enable-usan (Undefined sanitizer)
  * Add configure option --enable-cfi (Control Flow Integrity)
  * Fix finding libidn2 for static builds
  * Fix use of uninitialized stack value
  * Fix buffer overflow in libicu build
  * Use libidn2 as default for builds (former libicu)
  * Add pkg-config support for libidn and libidn2</changelog>
  <changelog author="astieger@suse.com" date="1510228800">- update to 0.19.1:
  * New function psl_free_string()
  * psl_make_dafsa now works with python2 and python3
  * psl_*count() functions now return -1 if info is not available
  * Fixed unsigned integer overflow in _mem_is_ascii()
  * Add -fsanitize-address-use-after-scope to --enable-asan if
    available</changelog>
  <changelog author="tchvatal@suse.com" date="1514980800">- Make sure to use python3 during build instead of calling env</changelog>
  <changelog author="astieger@suse.com" date="1519300800">- update to 0.20.0:
  * Remove hard-coded gcc flag in Makefile.am
  * Prevent excessive CPU cycles on large inputs
  * New flag PSL_TYPE_NO_STAR_RULE to skip star rule</changelog>
  <changelog author="fvogt@suse.com" date="1519300801">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519732800">- update to 0.20.1:
  * Fix issue introduced with PSL_TYPE_NO_STAR_RULE in V0.20.0
  * Fix SO_VERSION to 8:0:3
  * Improve unit tests</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197771] - FTBFS: libpsl won't compile on SP4
- added patches
  https://github.com/rockdaboot/libpsl/commit/f364cea73e351ce62e0b337fd1fbc21e70b52d56
  + libpsl-fix-test-data.patch</changelog>
</package>
<package pkgid="27031ba7b590b543a4e819b2a69278f62d9c4809eb35b7107dfb31e58373edf4" name="libpurple" arch="aarch64">
  <version epoch="0" ver="2.13.0" rel="150200.12.6.1"/>
  <changelog author="jengelh@inai.de" date="1469188800">- Drop additional pkgconfig require (already implicitly detected),
  but explicitly buildrequire it for /usr/lib/rpm/pkgconfigdeps.sh.</changelog>
  <changelog author="fezhang@suse.com" date="1479816000">- Add pidgin-sasl-skip-external.patch:
  Backport upstream commit 6106566. Makes Freenode and other
  servers that prefer SASL EXTERNAL fingerprint authentication
  work again (bsc#1009974).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481112000">- Build with GStreamer 1.x on SLE 12 SP2.
- Apply pidgin-use-default-alsa.patch for SLE 12+ only properly.
- Provide libpurple-branding-upstream for SLE 11 as well.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481198400">- Make libpurple require libpurple-branding.
- Correctly remove *.so files for plugins
  (fixes devel-file-in-non-devel-package).
- Rename libpurple-meanwhile to libpurple-plugin-sametime.
- Remove generation of a plugin list to package, simply add it all
  in %files with exclusions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489147200">- Update to version 2.12.0 (FATE#323136):
  + libpurple:
  - Fix an out of bounds memory read in
    purple_markup_unescape_entity (CVE-2017-2640, bsc#1028835).
  - Fix the use of uninitialised memory if running
    non-debug-enabled versions of glib.
  - Update AIM dev and dist ID's to new ones that were assigned
    by AOL.
  - TLS certificate verification now uses SHA-256 checksums.
  - Fix the SASL external auth for Freenode (boo#1009974).
  - Remove the MSN protocol plugin. It has been unusable and
    dormant for some time.
  - Remove the Mxit protocol plugin. The service was closed at
    the end ofSeptember 2016.
  - Remove the MySpaceIM protocol plugin. The service has been
    defunct for a long time (pidgin.im#15356).
  - Remove the Yahoo! protocol plugin. Yahoo has completely
    reimplemented their protocol, so this version is no longer
    operable as of August 5th, 2016.
  - Remove the Facebook (XMPP) account option. According to
    https://developers.facebook.com/docs/chat the XMPP Chat API
    service ended April 30th, 2015.
  - Fix gnutls certificate validation errors that mainly
    affected Google.
  + General:
  - Replace instances of d.pidgin.im with developer.pidgin.im and
    update the urls to use https (pidgin.im#17036).
  + IRC:
  - Fix an issue of messages being silently cut off at 500
    characters. Large messages are now split into parts and sent
    one by one (pidgin.im#4753).
- Rebase pidgin-nonblock-common.patch.
- Remove pidgin-sasl-skip-external.patch.
- Remove pidgin-NLD-smiley-theme.tar.bz2, deprecated.
- Remove pidgin-Tango-smiley-theme.tar.bz2, deprecated</changelog>
  <changelog author="tchvatal@suse.com" date="1500724800">- Drop dependency over silc-toolkit-devel as we want to remove
  it from the distribution</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Explicitly require python2</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510056000">- Correct the licence to GPL-2.0.</changelog>
  <changelog author="fezhang@suse.com" date="1511265600">- Add purple-import-empathy Recommends for SLE15 (FATE#322984).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Remove pidgin-crash-missing-gst-registry.patch: is useless now
  and is potentially harmful.
- Merge pidgin-nonblock-common2.patch to
  pidgin-nonblock-common.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Update pidgin-ncurses-6.0-accessors.patch to cope with ncurses
  enabling opaque-panels. Pidgin should not access internal
  structures of ncurses.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520337601">- Drop support for SLE 11 and openSUSE older than 42.x.
- Remove pidgin-gnome-keyring.patch: was only useful for SLE 11.</changelog>
  <changelog author="mgorse@suse.com" date="1520337602">- Add pidgin-2.10.11-purple-remote-python3.patch: port
  purple-remote to python 3 (bsc#1084147).
- Export PYTHON=python3 in %build.
- Adjust scripts to invoke python3, not python2.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 2.13.0:
  + libpurple:
  * Unified string comparison.
  * Properlly shell escape URI's when opening them.
  * Fix a one byte buffer overread in function
    purple_markup_linkify.
  * Fix an issue were utf8 was incorrectly truncated which could
    lead to crashes as we were potentially feeding garbage into
    glib/gtk.
  + libgnt:
  * Partially fix building against curses 6.0 with opaque
    structs set (pidgin.im#16764).
  * Fix a crash when resizing the window (pidgin.im#16680).
  + General:
  * Fix a bashism in autotools (pidgin.im#16836).
  + XMPP:
  * Show XEP-0066 OOB URLs in any message, not just headlines.
  * Fix a user after free (pidgin.im#17200).
  * Remove pipelining from BOSH connections (pidgin.im#17025).
  * Don't try to TLS already secured BOSH connections
    (pidgin.im#17270).
  + IRC:
  * Fix "Registration timeout" on SASL auth with InspIRCd
    servers (and possibly others not based on
    charybdis/ratbox/ircd-seven).
  * Fix issues with plugins that modify outgoing messages (such
    as the custom PART/QUIT feature of the IRC More plugin).
  * Fix IRC buffer handling (pidgin.im#12562).
  * Properly handle AUTHENTICATE as a normal command with server
    prefix.
  * Fix a crash caused by a use after free of the MOTD.
  * Fix an out of bounds read in irc_nick_skip_mode.
  * Fix a write of a single byte before the start of a buffer in
    irc_parse_ctcp.
  + Pidgin:
  * Better support for dark themes (pidgin.im#12572).
  * Fix IPv6 links by not escaping []'s. (pidgin.im#16391).
  * Only write buddy icons to the cache if they're not already
    cached.
  * Rejoin persistent chats after reconnect (pidgin.im#15687).
  * Make the WIN32 Transparency plugin work on all platforms
    (pidgin.im#3124).
  * Ensure search results buttons are labelled.
  * Fix matching unicode emoticons (pidgin.im#17232).
  * Correctly update mute/unmute status when the remote side
    mutes/unmutes us (pidgin.im#17273).
  * Rework the status icon blinking to not use deprecated API
    (pidgin.im#17174).
  * Do not allow adding a buddy to protocols that don't have an
    add_buddy callback.
  + Finch:
  * Fix handling of search results (pidgin.im#17238).
  + Voice &amp; Video:
  * Port backend-fs to newer api for farstream relay-info
    property (pidgin.im#17274).
- Rebase pidgin-ncurses-6.0-accessors.patch.
- Remove pidgin-2.10.11-purple-remote-python3.patch: fixed
  upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Instead of removing the libjabber.so, liboscar.so symlinks, move
  them to the devel package.</changelog>
  <changelog author="fezhang@suse.com" date="1523534400">- Add pidgin-enable-sni-gnutls.patch: Enable SNI for gnutls to
  avoid SSL handshake failure, patch written by Tiago Herrmann
  (therrmann@suse.com) (bsc#1086439, pidgin.im#17300).</changelog>
  <changelog author="dimstar@opensuse.org" date="1523966400">- Drop pkgconfig(NetworkManager) BuildRequires and Requires: this
  legacy symbol is no longer maintained and pidgin is not yet
  ready to move to libnm. As a side-effect, we no longer depend on
  NM for all situations, even if the system were to run wicked.
- Replace --enable-nm configure parameter with --disable-nm.</changelog>
  <changelog author="fezhang@suse.com" date="1571745600">- Add pidgin-Leaky-deprecation-clean-ups.patch: Fix warnings of
  deprecation of GParameter that result in build failures of
  plugins that build with -Werror (pidgin.im#17415).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624536000">- Add pidgin-add-no_proxy-support.patch: add support of no_proxy
  environment variable. (jsc#SLE-17111, pidgin.im#17518)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1652097600">- Add pidgin-CVE-2022-26491.patch: Remove _xmppconnect support
  (bsc#1199025, CVE-2022-26491).</changelog>
</package>
<package pkgid="e1373c5d00e12198ced9b1ac38ae68998180bd0198ac3a63c5ca78a838365b7b" name="libpurple" arch="ppc64le">
  <version epoch="0" ver="2.13.0" rel="150200.12.6.1"/>
  <changelog author="jengelh@inai.de" date="1469188800">- Drop additional pkgconfig require (already implicitly detected),
  but explicitly buildrequire it for /usr/lib/rpm/pkgconfigdeps.sh.</changelog>
  <changelog author="fezhang@suse.com" date="1479816000">- Add pidgin-sasl-skip-external.patch:
  Backport upstream commit 6106566. Makes Freenode and other
  servers that prefer SASL EXTERNAL fingerprint authentication
  work again (bsc#1009974).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481112000">- Build with GStreamer 1.x on SLE 12 SP2.
- Apply pidgin-use-default-alsa.patch for SLE 12+ only properly.
- Provide libpurple-branding-upstream for SLE 11 as well.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481198400">- Make libpurple require libpurple-branding.
- Correctly remove *.so files for plugins
  (fixes devel-file-in-non-devel-package).
- Rename libpurple-meanwhile to libpurple-plugin-sametime.
- Remove generation of a plugin list to package, simply add it all
  in %files with exclusions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489147200">- Update to version 2.12.0 (FATE#323136):
  + libpurple:
  - Fix an out of bounds memory read in
    purple_markup_unescape_entity (CVE-2017-2640, bsc#1028835).
  - Fix the use of uninitialised memory if running
    non-debug-enabled versions of glib.
  - Update AIM dev and dist ID's to new ones that were assigned
    by AOL.
  - TLS certificate verification now uses SHA-256 checksums.
  - Fix the SASL external auth for Freenode (boo#1009974).
  - Remove the MSN protocol plugin. It has been unusable and
    dormant for some time.
  - Remove the Mxit protocol plugin. The service was closed at
    the end ofSeptember 2016.
  - Remove the MySpaceIM protocol plugin. The service has been
    defunct for a long time (pidgin.im#15356).
  - Remove the Yahoo! protocol plugin. Yahoo has completely
    reimplemented their protocol, so this version is no longer
    operable as of August 5th, 2016.
  - Remove the Facebook (XMPP) account option. According to
    https://developers.facebook.com/docs/chat the XMPP Chat API
    service ended April 30th, 2015.
  - Fix gnutls certificate validation errors that mainly
    affected Google.
  + General:
  - Replace instances of d.pidgin.im with developer.pidgin.im and
    update the urls to use https (pidgin.im#17036).
  + IRC:
  - Fix an issue of messages being silently cut off at 500
    characters. Large messages are now split into parts and sent
    one by one (pidgin.im#4753).
- Rebase pidgin-nonblock-common.patch.
- Remove pidgin-sasl-skip-external.patch.
- Remove pidgin-NLD-smiley-theme.tar.bz2, deprecated.
- Remove pidgin-Tango-smiley-theme.tar.bz2, deprecated</changelog>
  <changelog author="tchvatal@suse.com" date="1500724800">- Drop dependency over silc-toolkit-devel as we want to remove
  it from the distribution</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Explicitly require python2</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510056000">- Correct the licence to GPL-2.0.</changelog>
  <changelog author="fezhang@suse.com" date="1511265600">- Add purple-import-empathy Recommends for SLE15 (FATE#322984).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Remove pidgin-crash-missing-gst-registry.patch: is useless now
  and is potentially harmful.
- Merge pidgin-nonblock-common2.patch to
  pidgin-nonblock-common.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Update pidgin-ncurses-6.0-accessors.patch to cope with ncurses
  enabling opaque-panels. Pidgin should not access internal
  structures of ncurses.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520337601">- Drop support for SLE 11 and openSUSE older than 42.x.
- Remove pidgin-gnome-keyring.patch: was only useful for SLE 11.</changelog>
  <changelog author="mgorse@suse.com" date="1520337602">- Add pidgin-2.10.11-purple-remote-python3.patch: port
  purple-remote to python 3 (bsc#1084147).
- Export PYTHON=python3 in %build.
- Adjust scripts to invoke python3, not python2.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 2.13.0:
  + libpurple:
  * Unified string comparison.
  * Properlly shell escape URI's when opening them.
  * Fix a one byte buffer overread in function
    purple_markup_linkify.
  * Fix an issue were utf8 was incorrectly truncated which could
    lead to crashes as we were potentially feeding garbage into
    glib/gtk.
  + libgnt:
  * Partially fix building against curses 6.0 with opaque
    structs set (pidgin.im#16764).
  * Fix a crash when resizing the window (pidgin.im#16680).
  + General:
  * Fix a bashism in autotools (pidgin.im#16836).
  + XMPP:
  * Show XEP-0066 OOB URLs in any message, not just headlines.
  * Fix a user after free (pidgin.im#17200).
  * Remove pipelining from BOSH connections (pidgin.im#17025).
  * Don't try to TLS already secured BOSH connections
    (pidgin.im#17270).
  + IRC:
  * Fix "Registration timeout" on SASL auth with InspIRCd
    servers (and possibly others not based on
    charybdis/ratbox/ircd-seven).
  * Fix issues with plugins that modify outgoing messages (such
    as the custom PART/QUIT feature of the IRC More plugin).
  * Fix IRC buffer handling (pidgin.im#12562).
  * Properly handle AUTHENTICATE as a normal command with server
    prefix.
  * Fix a crash caused by a use after free of the MOTD.
  * Fix an out of bounds read in irc_nick_skip_mode.
  * Fix a write of a single byte before the start of a buffer in
    irc_parse_ctcp.
  + Pidgin:
  * Better support for dark themes (pidgin.im#12572).
  * Fix IPv6 links by not escaping []'s. (pidgin.im#16391).
  * Only write buddy icons to the cache if they're not already
    cached.
  * Rejoin persistent chats after reconnect (pidgin.im#15687).
  * Make the WIN32 Transparency plugin work on all platforms
    (pidgin.im#3124).
  * Ensure search results buttons are labelled.
  * Fix matching unicode emoticons (pidgin.im#17232).
  * Correctly update mute/unmute status when the remote side
    mutes/unmutes us (pidgin.im#17273).
  * Rework the status icon blinking to not use deprecated API
    (pidgin.im#17174).
  * Do not allow adding a buddy to protocols that don't have an
    add_buddy callback.
  + Finch:
  * Fix handling of search results (pidgin.im#17238).
  + Voice &amp; Video:
  * Port backend-fs to newer api for farstream relay-info
    property (pidgin.im#17274).
- Rebase pidgin-ncurses-6.0-accessors.patch.
- Remove pidgin-2.10.11-purple-remote-python3.patch: fixed
  upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Instead of removing the libjabber.so, liboscar.so symlinks, move
  them to the devel package.</changelog>
  <changelog author="fezhang@suse.com" date="1523534400">- Add pidgin-enable-sni-gnutls.patch: Enable SNI for gnutls to
  avoid SSL handshake failure, patch written by Tiago Herrmann
  (therrmann@suse.com) (bsc#1086439, pidgin.im#17300).</changelog>
  <changelog author="dimstar@opensuse.org" date="1523966400">- Drop pkgconfig(NetworkManager) BuildRequires and Requires: this
  legacy symbol is no longer maintained and pidgin is not yet
  ready to move to libnm. As a side-effect, we no longer depend on
  NM for all situations, even if the system were to run wicked.
- Replace --enable-nm configure parameter with --disable-nm.</changelog>
  <changelog author="fezhang@suse.com" date="1571745600">- Add pidgin-Leaky-deprecation-clean-ups.patch: Fix warnings of
  deprecation of GParameter that result in build failures of
  plugins that build with -Werror (pidgin.im#17415).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624536000">- Add pidgin-add-no_proxy-support.patch: add support of no_proxy
  environment variable. (jsc#SLE-17111, pidgin.im#17518)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1652097600">- Add pidgin-CVE-2022-26491.patch: Remove _xmppconnect support
  (bsc#1199025, CVE-2022-26491).</changelog>
</package>
<package pkgid="f02c3aa2d7928e0461737ec59ed48305d2bc6b485883957bfb2eb991957a3bd7" name="libpurple" arch="s390x">
  <version epoch="0" ver="2.13.0" rel="150200.12.6.1"/>
  <changelog author="jengelh@inai.de" date="1469188800">- Drop additional pkgconfig require (already implicitly detected),
  but explicitly buildrequire it for /usr/lib/rpm/pkgconfigdeps.sh.</changelog>
  <changelog author="fezhang@suse.com" date="1479816000">- Add pidgin-sasl-skip-external.patch:
  Backport upstream commit 6106566. Makes Freenode and other
  servers that prefer SASL EXTERNAL fingerprint authentication
  work again (bsc#1009974).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481112000">- Build with GStreamer 1.x on SLE 12 SP2.
- Apply pidgin-use-default-alsa.patch for SLE 12+ only properly.
- Provide libpurple-branding-upstream for SLE 11 as well.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481198400">- Make libpurple require libpurple-branding.
- Correctly remove *.so files for plugins
  (fixes devel-file-in-non-devel-package).
- Rename libpurple-meanwhile to libpurple-plugin-sametime.
- Remove generation of a plugin list to package, simply add it all
  in %files with exclusions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489147200">- Update to version 2.12.0 (FATE#323136):
  + libpurple:
  - Fix an out of bounds memory read in
    purple_markup_unescape_entity (CVE-2017-2640, bsc#1028835).
  - Fix the use of uninitialised memory if running
    non-debug-enabled versions of glib.
  - Update AIM dev and dist ID's to new ones that were assigned
    by AOL.
  - TLS certificate verification now uses SHA-256 checksums.
  - Fix the SASL external auth for Freenode (boo#1009974).
  - Remove the MSN protocol plugin. It has been unusable and
    dormant for some time.
  - Remove the Mxit protocol plugin. The service was closed at
    the end ofSeptember 2016.
  - Remove the MySpaceIM protocol plugin. The service has been
    defunct for a long time (pidgin.im#15356).
  - Remove the Yahoo! protocol plugin. Yahoo has completely
    reimplemented their protocol, so this version is no longer
    operable as of August 5th, 2016.
  - Remove the Facebook (XMPP) account option. According to
    https://developers.facebook.com/docs/chat the XMPP Chat API
    service ended April 30th, 2015.
  - Fix gnutls certificate validation errors that mainly
    affected Google.
  + General:
  - Replace instances of d.pidgin.im with developer.pidgin.im and
    update the urls to use https (pidgin.im#17036).
  + IRC:
  - Fix an issue of messages being silently cut off at 500
    characters. Large messages are now split into parts and sent
    one by one (pidgin.im#4753).
- Rebase pidgin-nonblock-common.patch.
- Remove pidgin-sasl-skip-external.patch.
- Remove pidgin-NLD-smiley-theme.tar.bz2, deprecated.
- Remove pidgin-Tango-smiley-theme.tar.bz2, deprecated</changelog>
  <changelog author="tchvatal@suse.com" date="1500724800">- Drop dependency over silc-toolkit-devel as we want to remove
  it from the distribution</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Explicitly require python2</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510056000">- Correct the licence to GPL-2.0.</changelog>
  <changelog author="fezhang@suse.com" date="1511265600">- Add purple-import-empathy Recommends for SLE15 (FATE#322984).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Remove pidgin-crash-missing-gst-registry.patch: is useless now
  and is potentially harmful.
- Merge pidgin-nonblock-common2.patch to
  pidgin-nonblock-common.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Update pidgin-ncurses-6.0-accessors.patch to cope with ncurses
  enabling opaque-panels. Pidgin should not access internal
  structures of ncurses.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520337601">- Drop support for SLE 11 and openSUSE older than 42.x.
- Remove pidgin-gnome-keyring.patch: was only useful for SLE 11.</changelog>
  <changelog author="mgorse@suse.com" date="1520337602">- Add pidgin-2.10.11-purple-remote-python3.patch: port
  purple-remote to python 3 (bsc#1084147).
- Export PYTHON=python3 in %build.
- Adjust scripts to invoke python3, not python2.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 2.13.0:
  + libpurple:
  * Unified string comparison.
  * Properlly shell escape URI's when opening them.
  * Fix a one byte buffer overread in function
    purple_markup_linkify.
  * Fix an issue were utf8 was incorrectly truncated which could
    lead to crashes as we were potentially feeding garbage into
    glib/gtk.
  + libgnt:
  * Partially fix building against curses 6.0 with opaque
    structs set (pidgin.im#16764).
  * Fix a crash when resizing the window (pidgin.im#16680).
  + General:
  * Fix a bashism in autotools (pidgin.im#16836).
  + XMPP:
  * Show XEP-0066 OOB URLs in any message, not just headlines.
  * Fix a user after free (pidgin.im#17200).
  * Remove pipelining from BOSH connections (pidgin.im#17025).
  * Don't try to TLS already secured BOSH connections
    (pidgin.im#17270).
  + IRC:
  * Fix "Registration timeout" on SASL auth with InspIRCd
    servers (and possibly others not based on
    charybdis/ratbox/ircd-seven).
  * Fix issues with plugins that modify outgoing messages (such
    as the custom PART/QUIT feature of the IRC More plugin).
  * Fix IRC buffer handling (pidgin.im#12562).
  * Properly handle AUTHENTICATE as a normal command with server
    prefix.
  * Fix a crash caused by a use after free of the MOTD.
  * Fix an out of bounds read in irc_nick_skip_mode.
  * Fix a write of a single byte before the start of a buffer in
    irc_parse_ctcp.
  + Pidgin:
  * Better support for dark themes (pidgin.im#12572).
  * Fix IPv6 links by not escaping []'s. (pidgin.im#16391).
  * Only write buddy icons to the cache if they're not already
    cached.
  * Rejoin persistent chats after reconnect (pidgin.im#15687).
  * Make the WIN32 Transparency plugin work on all platforms
    (pidgin.im#3124).
  * Ensure search results buttons are labelled.
  * Fix matching unicode emoticons (pidgin.im#17232).
  * Correctly update mute/unmute status when the remote side
    mutes/unmutes us (pidgin.im#17273).
  * Rework the status icon blinking to not use deprecated API
    (pidgin.im#17174).
  * Do not allow adding a buddy to protocols that don't have an
    add_buddy callback.
  + Finch:
  * Fix handling of search results (pidgin.im#17238).
  + Voice &amp; Video:
  * Port backend-fs to newer api for farstream relay-info
    property (pidgin.im#17274).
- Rebase pidgin-ncurses-6.0-accessors.patch.
- Remove pidgin-2.10.11-purple-remote-python3.patch: fixed
  upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Instead of removing the libjabber.so, liboscar.so symlinks, move
  them to the devel package.</changelog>
  <changelog author="fezhang@suse.com" date="1523534400">- Add pidgin-enable-sni-gnutls.patch: Enable SNI for gnutls to
  avoid SSL handshake failure, patch written by Tiago Herrmann
  (therrmann@suse.com) (bsc#1086439, pidgin.im#17300).</changelog>
  <changelog author="dimstar@opensuse.org" date="1523966400">- Drop pkgconfig(NetworkManager) BuildRequires and Requires: this
  legacy symbol is no longer maintained and pidgin is not yet
  ready to move to libnm. As a side-effect, we no longer depend on
  NM for all situations, even if the system were to run wicked.
- Replace --enable-nm configure parameter with --disable-nm.</changelog>
  <changelog author="fezhang@suse.com" date="1571745600">- Add pidgin-Leaky-deprecation-clean-ups.patch: Fix warnings of
  deprecation of GParameter that result in build failures of
  plugins that build with -Werror (pidgin.im#17415).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624536000">- Add pidgin-add-no_proxy-support.patch: add support of no_proxy
  environment variable. (jsc#SLE-17111, pidgin.im#17518)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1652097600">- Add pidgin-CVE-2022-26491.patch: Remove _xmppconnect support
  (bsc#1199025, CVE-2022-26491).</changelog>
</package>
<package pkgid="f239aedc75d0c48f92e282eaad4febcab54513966b9f61e460b9cede08826d91" name="libpurple" arch="x86_64">
  <version epoch="0" ver="2.13.0" rel="150200.12.6.1"/>
  <changelog author="jengelh@inai.de" date="1469188800">- Drop additional pkgconfig require (already implicitly detected),
  but explicitly buildrequire it for /usr/lib/rpm/pkgconfigdeps.sh.</changelog>
  <changelog author="fezhang@suse.com" date="1479816000">- Add pidgin-sasl-skip-external.patch:
  Backport upstream commit 6106566. Makes Freenode and other
  servers that prefer SASL EXTERNAL fingerprint authentication
  work again (bsc#1009974).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481112000">- Build with GStreamer 1.x on SLE 12 SP2.
- Apply pidgin-use-default-alsa.patch for SLE 12+ only properly.
- Provide libpurple-branding-upstream for SLE 11 as well.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481198400">- Make libpurple require libpurple-branding.
- Correctly remove *.so files for plugins
  (fixes devel-file-in-non-devel-package).
- Rename libpurple-meanwhile to libpurple-plugin-sametime.
- Remove generation of a plugin list to package, simply add it all
  in %files with exclusions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489147200">- Update to version 2.12.0 (FATE#323136):
  + libpurple:
  - Fix an out of bounds memory read in
    purple_markup_unescape_entity (CVE-2017-2640, bsc#1028835).
  - Fix the use of uninitialised memory if running
    non-debug-enabled versions of glib.
  - Update AIM dev and dist ID's to new ones that were assigned
    by AOL.
  - TLS certificate verification now uses SHA-256 checksums.
  - Fix the SASL external auth for Freenode (boo#1009974).
  - Remove the MSN protocol plugin. It has been unusable and
    dormant for some time.
  - Remove the Mxit protocol plugin. The service was closed at
    the end ofSeptember 2016.
  - Remove the MySpaceIM protocol plugin. The service has been
    defunct for a long time (pidgin.im#15356).
  - Remove the Yahoo! protocol plugin. Yahoo has completely
    reimplemented their protocol, so this version is no longer
    operable as of August 5th, 2016.
  - Remove the Facebook (XMPP) account option. According to
    https://developers.facebook.com/docs/chat the XMPP Chat API
    service ended April 30th, 2015.
  - Fix gnutls certificate validation errors that mainly
    affected Google.
  + General:
  - Replace instances of d.pidgin.im with developer.pidgin.im and
    update the urls to use https (pidgin.im#17036).
  + IRC:
  - Fix an issue of messages being silently cut off at 500
    characters. Large messages are now split into parts and sent
    one by one (pidgin.im#4753).
- Rebase pidgin-nonblock-common.patch.
- Remove pidgin-sasl-skip-external.patch.
- Remove pidgin-NLD-smiley-theme.tar.bz2, deprecated.
- Remove pidgin-Tango-smiley-theme.tar.bz2, deprecated</changelog>
  <changelog author="tchvatal@suse.com" date="1500724800">- Drop dependency over silc-toolkit-devel as we want to remove
  it from the distribution</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Explicitly require python2</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510056000">- Correct the licence to GPL-2.0.</changelog>
  <changelog author="fezhang@suse.com" date="1511265600">- Add purple-import-empathy Recommends for SLE15 (FATE#322984).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Remove pidgin-crash-missing-gst-registry.patch: is useless now
  and is potentially harmful.
- Merge pidgin-nonblock-common2.patch to
  pidgin-nonblock-common.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Update pidgin-ncurses-6.0-accessors.patch to cope with ncurses
  enabling opaque-panels. Pidgin should not access internal
  structures of ncurses.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520337601">- Drop support for SLE 11 and openSUSE older than 42.x.
- Remove pidgin-gnome-keyring.patch: was only useful for SLE 11.</changelog>
  <changelog author="mgorse@suse.com" date="1520337602">- Add pidgin-2.10.11-purple-remote-python3.patch: port
  purple-remote to python 3 (bsc#1084147).
- Export PYTHON=python3 in %build.
- Adjust scripts to invoke python3, not python2.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 2.13.0:
  + libpurple:
  * Unified string comparison.
  * Properlly shell escape URI's when opening them.
  * Fix a one byte buffer overread in function
    purple_markup_linkify.
  * Fix an issue were utf8 was incorrectly truncated which could
    lead to crashes as we were potentially feeding garbage into
    glib/gtk.
  + libgnt:
  * Partially fix building against curses 6.0 with opaque
    structs set (pidgin.im#16764).
  * Fix a crash when resizing the window (pidgin.im#16680).
  + General:
  * Fix a bashism in autotools (pidgin.im#16836).
  + XMPP:
  * Show XEP-0066 OOB URLs in any message, not just headlines.
  * Fix a user after free (pidgin.im#17200).
  * Remove pipelining from BOSH connections (pidgin.im#17025).
  * Don't try to TLS already secured BOSH connections
    (pidgin.im#17270).
  + IRC:
  * Fix "Registration timeout" on SASL auth with InspIRCd
    servers (and possibly others not based on
    charybdis/ratbox/ircd-seven).
  * Fix issues with plugins that modify outgoing messages (such
    as the custom PART/QUIT feature of the IRC More plugin).
  * Fix IRC buffer handling (pidgin.im#12562).
  * Properly handle AUTHENTICATE as a normal command with server
    prefix.
  * Fix a crash caused by a use after free of the MOTD.
  * Fix an out of bounds read in irc_nick_skip_mode.
  * Fix a write of a single byte before the start of a buffer in
    irc_parse_ctcp.
  + Pidgin:
  * Better support for dark themes (pidgin.im#12572).
  * Fix IPv6 links by not escaping []'s. (pidgin.im#16391).
  * Only write buddy icons to the cache if they're not already
    cached.
  * Rejoin persistent chats after reconnect (pidgin.im#15687).
  * Make the WIN32 Transparency plugin work on all platforms
    (pidgin.im#3124).
  * Ensure search results buttons are labelled.
  * Fix matching unicode emoticons (pidgin.im#17232).
  * Correctly update mute/unmute status when the remote side
    mutes/unmutes us (pidgin.im#17273).
  * Rework the status icon blinking to not use deprecated API
    (pidgin.im#17174).
  * Do not allow adding a buddy to protocols that don't have an
    add_buddy callback.
  + Finch:
  * Fix handling of search results (pidgin.im#17238).
  + Voice &amp; Video:
  * Port backend-fs to newer api for farstream relay-info
    property (pidgin.im#17274).
- Rebase pidgin-ncurses-6.0-accessors.patch.
- Remove pidgin-2.10.11-purple-remote-python3.patch: fixed
  upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Instead of removing the libjabber.so, liboscar.so symlinks, move
  them to the devel package.</changelog>
  <changelog author="fezhang@suse.com" date="1523534400">- Add pidgin-enable-sni-gnutls.patch: Enable SNI for gnutls to
  avoid SSL handshake failure, patch written by Tiago Herrmann
  (therrmann@suse.com) (bsc#1086439, pidgin.im#17300).</changelog>
  <changelog author="dimstar@opensuse.org" date="1523966400">- Drop pkgconfig(NetworkManager) BuildRequires and Requires: this
  legacy symbol is no longer maintained and pidgin is not yet
  ready to move to libnm. As a side-effect, we no longer depend on
  NM for all situations, even if the system were to run wicked.
- Replace --enable-nm configure parameter with --disable-nm.</changelog>
  <changelog author="fezhang@suse.com" date="1571745600">- Add pidgin-Leaky-deprecation-clean-ups.patch: Fix warnings of
  deprecation of GParameter that result in build failures of
  plugins that build with -Werror (pidgin.im#17415).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624536000">- Add pidgin-add-no_proxy-support.patch: add support of no_proxy
  environment variable. (jsc#SLE-17111, pidgin.im#17518)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1652097600">- Add pidgin-CVE-2022-26491.patch: Remove _xmppconnect support
  (bsc#1199025, CVE-2022-26491).</changelog>
</package>
<package pkgid="5c5f0f8d88abd0e30d27ea7aa2e4715fca765f84fbd8c62d1c764fd53f4b8561" name="libpurple-branding-upstream" arch="noarch">
  <version epoch="0" ver="2.13.0" rel="150200.12.6.1"/>
  <changelog author="jengelh@inai.de" date="1469188800">- Drop additional pkgconfig require (already implicitly detected),
  but explicitly buildrequire it for /usr/lib/rpm/pkgconfigdeps.sh.</changelog>
  <changelog author="fezhang@suse.com" date="1479816000">- Add pidgin-sasl-skip-external.patch:
  Backport upstream commit 6106566. Makes Freenode and other
  servers that prefer SASL EXTERNAL fingerprint authentication
  work again (bsc#1009974).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481112000">- Build with GStreamer 1.x on SLE 12 SP2.
- Apply pidgin-use-default-alsa.patch for SLE 12+ only properly.
- Provide libpurple-branding-upstream for SLE 11 as well.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481198400">- Make libpurple require libpurple-branding.
- Correctly remove *.so files for plugins
  (fixes devel-file-in-non-devel-package).
- Rename libpurple-meanwhile to libpurple-plugin-sametime.
- Remove generation of a plugin list to package, simply add it all
  in %files with exclusions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489147200">- Update to version 2.12.0 (FATE#323136):
  + libpurple:
  - Fix an out of bounds memory read in
    purple_markup_unescape_entity (CVE-2017-2640, bsc#1028835).
  - Fix the use of uninitialised memory if running
    non-debug-enabled versions of glib.
  - Update AIM dev and dist ID's to new ones that were assigned
    by AOL.
  - TLS certificate verification now uses SHA-256 checksums.
  - Fix the SASL external auth for Freenode (boo#1009974).
  - Remove the MSN protocol plugin. It has been unusable and
    dormant for some time.
  - Remove the Mxit protocol plugin. The service was closed at
    the end ofSeptember 2016.
  - Remove the MySpaceIM protocol plugin. The service has been
    defunct for a long time (pidgin.im#15356).
  - Remove the Yahoo! protocol plugin. Yahoo has completely
    reimplemented their protocol, so this version is no longer
    operable as of August 5th, 2016.
  - Remove the Facebook (XMPP) account option. According to
    https://developers.facebook.com/docs/chat the XMPP Chat API
    service ended April 30th, 2015.
  - Fix gnutls certificate validation errors that mainly
    affected Google.
  + General:
  - Replace instances of d.pidgin.im with developer.pidgin.im and
    update the urls to use https (pidgin.im#17036).
  + IRC:
  - Fix an issue of messages being silently cut off at 500
    characters. Large messages are now split into parts and sent
    one by one (pidgin.im#4753).
- Rebase pidgin-nonblock-common.patch.
- Remove pidgin-sasl-skip-external.patch.
- Remove pidgin-NLD-smiley-theme.tar.bz2, deprecated.
- Remove pidgin-Tango-smiley-theme.tar.bz2, deprecated</changelog>
  <changelog author="tchvatal@suse.com" date="1500724800">- Drop dependency over silc-toolkit-devel as we want to remove
  it from the distribution</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Explicitly require python2</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510056000">- Correct the licence to GPL-2.0.</changelog>
  <changelog author="fezhang@suse.com" date="1511265600">- Add purple-import-empathy Recommends for SLE15 (FATE#322984).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Remove pidgin-crash-missing-gst-registry.patch: is useless now
  and is potentially harmful.
- Merge pidgin-nonblock-common2.patch to
  pidgin-nonblock-common.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Update pidgin-ncurses-6.0-accessors.patch to cope with ncurses
  enabling opaque-panels. Pidgin should not access internal
  structures of ncurses.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520337601">- Drop support for SLE 11 and openSUSE older than 42.x.
- Remove pidgin-gnome-keyring.patch: was only useful for SLE 11.</changelog>
  <changelog author="mgorse@suse.com" date="1520337602">- Add pidgin-2.10.11-purple-remote-python3.patch: port
  purple-remote to python 3 (bsc#1084147).
- Export PYTHON=python3 in %build.
- Adjust scripts to invoke python3, not python2.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 2.13.0:
  + libpurple:
  * Unified string comparison.
  * Properlly shell escape URI's when opening them.
  * Fix a one byte buffer overread in function
    purple_markup_linkify.
  * Fix an issue were utf8 was incorrectly truncated which could
    lead to crashes as we were potentially feeding garbage into
    glib/gtk.
  + libgnt:
  * Partially fix building against curses 6.0 with opaque
    structs set (pidgin.im#16764).
  * Fix a crash when resizing the window (pidgin.im#16680).
  + General:
  * Fix a bashism in autotools (pidgin.im#16836).
  + XMPP:
  * Show XEP-0066 OOB URLs in any message, not just headlines.
  * Fix a user after free (pidgin.im#17200).
  * Remove pipelining from BOSH connections (pidgin.im#17025).
  * Don't try to TLS already secured BOSH connections
    (pidgin.im#17270).
  + IRC:
  * Fix "Registration timeout" on SASL auth with InspIRCd
    servers (and possibly others not based on
    charybdis/ratbox/ircd-seven).
  * Fix issues with plugins that modify outgoing messages (such
    as the custom PART/QUIT feature of the IRC More plugin).
  * Fix IRC buffer handling (pidgin.im#12562).
  * Properly handle AUTHENTICATE as a normal command with server
    prefix.
  * Fix a crash caused by a use after free of the MOTD.
  * Fix an out of bounds read in irc_nick_skip_mode.
  * Fix a write of a single byte before the start of a buffer in
    irc_parse_ctcp.
  + Pidgin:
  * Better support for dark themes (pidgin.im#12572).
  * Fix IPv6 links by not escaping []'s. (pidgin.im#16391).
  * Only write buddy icons to the cache if they're not already
    cached.
  * Rejoin persistent chats after reconnect (pidgin.im#15687).
  * Make the WIN32 Transparency plugin work on all platforms
    (pidgin.im#3124).
  * Ensure search results buttons are labelled.
  * Fix matching unicode emoticons (pidgin.im#17232).
  * Correctly update mute/unmute status when the remote side
    mutes/unmutes us (pidgin.im#17273).
  * Rework the status icon blinking to not use deprecated API
    (pidgin.im#17174).
  * Do not allow adding a buddy to protocols that don't have an
    add_buddy callback.
  + Finch:
  * Fix handling of search results (pidgin.im#17238).
  + Voice &amp; Video:
  * Port backend-fs to newer api for farstream relay-info
    property (pidgin.im#17274).
- Rebase pidgin-ncurses-6.0-accessors.patch.
- Remove pidgin-2.10.11-purple-remote-python3.patch: fixed
  upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Instead of removing the libjabber.so, liboscar.so symlinks, move
  them to the devel package.</changelog>
  <changelog author="fezhang@suse.com" date="1523534400">- Add pidgin-enable-sni-gnutls.patch: Enable SNI for gnutls to
  avoid SSL handshake failure, patch written by Tiago Herrmann
  (therrmann@suse.com) (bsc#1086439, pidgin.im#17300).</changelog>
  <changelog author="dimstar@opensuse.org" date="1523966400">- Drop pkgconfig(NetworkManager) BuildRequires and Requires: this
  legacy symbol is no longer maintained and pidgin is not yet
  ready to move to libnm. As a side-effect, we no longer depend on
  NM for all situations, even if the system were to run wicked.
- Replace --enable-nm configure parameter with --disable-nm.</changelog>
  <changelog author="fezhang@suse.com" date="1571745600">- Add pidgin-Leaky-deprecation-clean-ups.patch: Fix warnings of
  deprecation of GParameter that result in build failures of
  plugins that build with -Werror (pidgin.im#17415).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624536000">- Add pidgin-add-no_proxy-support.patch: add support of no_proxy
  environment variable. (jsc#SLE-17111, pidgin.im#17518)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1652097600">- Add pidgin-CVE-2022-26491.patch: Remove _xmppconnect support
  (bsc#1199025, CVE-2022-26491).</changelog>
</package>
<package pkgid="e679f4d3e4a0a9d5437c744f54b341349e2f28d674fe799fcbe107096089206c" name="libpurple-devel" arch="aarch64">
  <version epoch="0" ver="2.13.0" rel="150200.12.6.1"/>
  <changelog author="jengelh@inai.de" date="1469188800">- Drop additional pkgconfig require (already implicitly detected),
  but explicitly buildrequire it for /usr/lib/rpm/pkgconfigdeps.sh.</changelog>
  <changelog author="fezhang@suse.com" date="1479816000">- Add pidgin-sasl-skip-external.patch:
  Backport upstream commit 6106566. Makes Freenode and other
  servers that prefer SASL EXTERNAL fingerprint authentication
  work again (bsc#1009974).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481112000">- Build with GStreamer 1.x on SLE 12 SP2.
- Apply pidgin-use-default-alsa.patch for SLE 12+ only properly.
- Provide libpurple-branding-upstream for SLE 11 as well.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481198400">- Make libpurple require libpurple-branding.
- Correctly remove *.so files for plugins
  (fixes devel-file-in-non-devel-package).
- Rename libpurple-meanwhile to libpurple-plugin-sametime.
- Remove generation of a plugin list to package, simply add it all
  in %files with exclusions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489147200">- Update to version 2.12.0 (FATE#323136):
  + libpurple:
  - Fix an out of bounds memory read in
    purple_markup_unescape_entity (CVE-2017-2640, bsc#1028835).
  - Fix the use of uninitialised memory if running
    non-debug-enabled versions of glib.
  - Update AIM dev and dist ID's to new ones that were assigned
    by AOL.
  - TLS certificate verification now uses SHA-256 checksums.
  - Fix the SASL external auth for Freenode (boo#1009974).
  - Remove the MSN protocol plugin. It has been unusable and
    dormant for some time.
  - Remove the Mxit protocol plugin. The service was closed at
    the end ofSeptember 2016.
  - Remove the MySpaceIM protocol plugin. The service has been
    defunct for a long time (pidgin.im#15356).
  - Remove the Yahoo! protocol plugin. Yahoo has completely
    reimplemented their protocol, so this version is no longer
    operable as of August 5th, 2016.
  - Remove the Facebook (XMPP) account option. According to
    https://developers.facebook.com/docs/chat the XMPP Chat API
    service ended April 30th, 2015.
  - Fix gnutls certificate validation errors that mainly
    affected Google.
  + General:
  - Replace instances of d.pidgin.im with developer.pidgin.im and
    update the urls to use https (pidgin.im#17036).
  + IRC:
  - Fix an issue of messages being silently cut off at 500
    characters. Large messages are now split into parts and sent
    one by one (pidgin.im#4753).
- Rebase pidgin-nonblock-common.patch.
- Remove pidgin-sasl-skip-external.patch.
- Remove pidgin-NLD-smiley-theme.tar.bz2, deprecated.
- Remove pidgin-Tango-smiley-theme.tar.bz2, deprecated</changelog>
  <changelog author="tchvatal@suse.com" date="1500724800">- Drop dependency over silc-toolkit-devel as we want to remove
  it from the distribution</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Explicitly require python2</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510056000">- Correct the licence to GPL-2.0.</changelog>
  <changelog author="fezhang@suse.com" date="1511265600">- Add purple-import-empathy Recommends for SLE15 (FATE#322984).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Remove pidgin-crash-missing-gst-registry.patch: is useless now
  and is potentially harmful.
- Merge pidgin-nonblock-common2.patch to
  pidgin-nonblock-common.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Update pidgin-ncurses-6.0-accessors.patch to cope with ncurses
  enabling opaque-panels. Pidgin should not access internal
  structures of ncurses.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520337601">- Drop support for SLE 11 and openSUSE older than 42.x.
- Remove pidgin-gnome-keyring.patch: was only useful for SLE 11.</changelog>
  <changelog author="mgorse@suse.com" date="1520337602">- Add pidgin-2.10.11-purple-remote-python3.patch: port
  purple-remote to python 3 (bsc#1084147).
- Export PYTHON=python3 in %build.
- Adjust scripts to invoke python3, not python2.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 2.13.0:
  + libpurple:
  * Unified string comparison.
  * Properlly shell escape URI's when opening them.
  * Fix a one byte buffer overread in function
    purple_markup_linkify.
  * Fix an issue were utf8 was incorrectly truncated which could
    lead to crashes as we were potentially feeding garbage into
    glib/gtk.
  + libgnt:
  * Partially fix building against curses 6.0 with opaque
    structs set (pidgin.im#16764).
  * Fix a crash when resizing the window (pidgin.im#16680).
  + General:
  * Fix a bashism in autotools (pidgin.im#16836).
  + XMPP:
  * Show XEP-0066 OOB URLs in any message, not just headlines.
  * Fix a user after free (pidgin.im#17200).
  * Remove pipelining from BOSH connections (pidgin.im#17025).
  * Don't try to TLS already secured BOSH connections
    (pidgin.im#17270).
  + IRC:
  * Fix "Registration timeout" on SASL auth with InspIRCd
    servers (and possibly others not based on
    charybdis/ratbox/ircd-seven).
  * Fix issues with plugins that modify outgoing messages (such
    as the custom PART/QUIT feature of the IRC More plugin).
  * Fix IRC buffer handling (pidgin.im#12562).
  * Properly handle AUTHENTICATE as a normal command with server
    prefix.
  * Fix a crash caused by a use after free of the MOTD.
  * Fix an out of bounds read in irc_nick_skip_mode.
  * Fix a write of a single byte before the start of a buffer in
    irc_parse_ctcp.
  + Pidgin:
  * Better support for dark themes (pidgin.im#12572).
  * Fix IPv6 links by not escaping []'s. (pidgin.im#16391).
  * Only write buddy icons to the cache if they're not already
    cached.
  * Rejoin persistent chats after reconnect (pidgin.im#15687).
  * Make the WIN32 Transparency plugin work on all platforms
    (pidgin.im#3124).
  * Ensure search results buttons are labelled.
  * Fix matching unicode emoticons (pidgin.im#17232).
  * Correctly update mute/unmute status when the remote side
    mutes/unmutes us (pidgin.im#17273).
  * Rework the status icon blinking to not use deprecated API
    (pidgin.im#17174).
  * Do not allow adding a buddy to protocols that don't have an
    add_buddy callback.
  + Finch:
  * Fix handling of search results (pidgin.im#17238).
  + Voice &amp; Video:
  * Port backend-fs to newer api for farstream relay-info
    property (pidgin.im#17274).
- Rebase pidgin-ncurses-6.0-accessors.patch.
- Remove pidgin-2.10.11-purple-remote-python3.patch: fixed
  upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Instead of removing the libjabber.so, liboscar.so symlinks, move
  them to the devel package.</changelog>
  <changelog author="fezhang@suse.com" date="1523534400">- Add pidgin-enable-sni-gnutls.patch: Enable SNI for gnutls to
  avoid SSL handshake failure, patch written by Tiago Herrmann
  (therrmann@suse.com) (bsc#1086439, pidgin.im#17300).</changelog>
  <changelog author="dimstar@opensuse.org" date="1523966400">- Drop pkgconfig(NetworkManager) BuildRequires and Requires: this
  legacy symbol is no longer maintained and pidgin is not yet
  ready to move to libnm. As a side-effect, we no longer depend on
  NM for all situations, even if the system were to run wicked.
- Replace --enable-nm configure parameter with --disable-nm.</changelog>
  <changelog author="fezhang@suse.com" date="1571745600">- Add pidgin-Leaky-deprecation-clean-ups.patch: Fix warnings of
  deprecation of GParameter that result in build failures of
  plugins that build with -Werror (pidgin.im#17415).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624536000">- Add pidgin-add-no_proxy-support.patch: add support of no_proxy
  environment variable. (jsc#SLE-17111, pidgin.im#17518)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1652097600">- Add pidgin-CVE-2022-26491.patch: Remove _xmppconnect support
  (bsc#1199025, CVE-2022-26491).</changelog>
</package>
<package pkgid="12c4b05503824294878f837532a84bd22145ef9b97779f3c8f84802a6dc3bc9e" name="libpurple-devel" arch="ppc64le">
  <version epoch="0" ver="2.13.0" rel="150200.12.6.1"/>
  <changelog author="jengelh@inai.de" date="1469188800">- Drop additional pkgconfig require (already implicitly detected),
  but explicitly buildrequire it for /usr/lib/rpm/pkgconfigdeps.sh.</changelog>
  <changelog author="fezhang@suse.com" date="1479816000">- Add pidgin-sasl-skip-external.patch:
  Backport upstream commit 6106566. Makes Freenode and other
  servers that prefer SASL EXTERNAL fingerprint authentication
  work again (bsc#1009974).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481112000">- Build with GStreamer 1.x on SLE 12 SP2.
- Apply pidgin-use-default-alsa.patch for SLE 12+ only properly.
- Provide libpurple-branding-upstream for SLE 11 as well.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481198400">- Make libpurple require libpurple-branding.
- Correctly remove *.so files for plugins
  (fixes devel-file-in-non-devel-package).
- Rename libpurple-meanwhile to libpurple-plugin-sametime.
- Remove generation of a plugin list to package, simply add it all
  in %files with exclusions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489147200">- Update to version 2.12.0 (FATE#323136):
  + libpurple:
  - Fix an out of bounds memory read in
    purple_markup_unescape_entity (CVE-2017-2640, bsc#1028835).
  - Fix the use of uninitialised memory if running
    non-debug-enabled versions of glib.
  - Update AIM dev and dist ID's to new ones that were assigned
    by AOL.
  - TLS certificate verification now uses SHA-256 checksums.
  - Fix the SASL external auth for Freenode (boo#1009974).
  - Remove the MSN protocol plugin. It has been unusable and
    dormant for some time.
  - Remove the Mxit protocol plugin. The service was closed at
    the end ofSeptember 2016.
  - Remove the MySpaceIM protocol plugin. The service has been
    defunct for a long time (pidgin.im#15356).
  - Remove the Yahoo! protocol plugin. Yahoo has completely
    reimplemented their protocol, so this version is no longer
    operable as of August 5th, 2016.
  - Remove the Facebook (XMPP) account option. According to
    https://developers.facebook.com/docs/chat the XMPP Chat API
    service ended April 30th, 2015.
  - Fix gnutls certificate validation errors that mainly
    affected Google.
  + General:
  - Replace instances of d.pidgin.im with developer.pidgin.im and
    update the urls to use https (pidgin.im#17036).
  + IRC:
  - Fix an issue of messages being silently cut off at 500
    characters. Large messages are now split into parts and sent
    one by one (pidgin.im#4753).
- Rebase pidgin-nonblock-common.patch.
- Remove pidgin-sasl-skip-external.patch.
- Remove pidgin-NLD-smiley-theme.tar.bz2, deprecated.
- Remove pidgin-Tango-smiley-theme.tar.bz2, deprecated</changelog>
  <changelog author="tchvatal@suse.com" date="1500724800">- Drop dependency over silc-toolkit-devel as we want to remove
  it from the distribution</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Explicitly require python2</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510056000">- Correct the licence to GPL-2.0.</changelog>
  <changelog author="fezhang@suse.com" date="1511265600">- Add purple-import-empathy Recommends for SLE15 (FATE#322984).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Remove pidgin-crash-missing-gst-registry.patch: is useless now
  and is potentially harmful.
- Merge pidgin-nonblock-common2.patch to
  pidgin-nonblock-common.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Update pidgin-ncurses-6.0-accessors.patch to cope with ncurses
  enabling opaque-panels. Pidgin should not access internal
  structures of ncurses.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520337601">- Drop support for SLE 11 and openSUSE older than 42.x.
- Remove pidgin-gnome-keyring.patch: was only useful for SLE 11.</changelog>
  <changelog author="mgorse@suse.com" date="1520337602">- Add pidgin-2.10.11-purple-remote-python3.patch: port
  purple-remote to python 3 (bsc#1084147).
- Export PYTHON=python3 in %build.
- Adjust scripts to invoke python3, not python2.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 2.13.0:
  + libpurple:
  * Unified string comparison.
  * Properlly shell escape URI's when opening them.
  * Fix a one byte buffer overread in function
    purple_markup_linkify.
  * Fix an issue were utf8 was incorrectly truncated which could
    lead to crashes as we were potentially feeding garbage into
    glib/gtk.
  + libgnt:
  * Partially fix building against curses 6.0 with opaque
    structs set (pidgin.im#16764).
  * Fix a crash when resizing the window (pidgin.im#16680).
  + General:
  * Fix a bashism in autotools (pidgin.im#16836).
  + XMPP:
  * Show XEP-0066 OOB URLs in any message, not just headlines.
  * Fix a user after free (pidgin.im#17200).
  * Remove pipelining from BOSH connections (pidgin.im#17025).
  * Don't try to TLS already secured BOSH connections
    (pidgin.im#17270).
  + IRC:
  * Fix "Registration timeout" on SASL auth with InspIRCd
    servers (and possibly others not based on
    charybdis/ratbox/ircd-seven).
  * Fix issues with plugins that modify outgoing messages (such
    as the custom PART/QUIT feature of the IRC More plugin).
  * Fix IRC buffer handling (pidgin.im#12562).
  * Properly handle AUTHENTICATE as a normal command with server
    prefix.
  * Fix a crash caused by a use after free of the MOTD.
  * Fix an out of bounds read in irc_nick_skip_mode.
  * Fix a write of a single byte before the start of a buffer in
    irc_parse_ctcp.
  + Pidgin:
  * Better support for dark themes (pidgin.im#12572).
  * Fix IPv6 links by not escaping []'s. (pidgin.im#16391).
  * Only write buddy icons to the cache if they're not already
    cached.
  * Rejoin persistent chats after reconnect (pidgin.im#15687).
  * Make the WIN32 Transparency plugin work on all platforms
    (pidgin.im#3124).
  * Ensure search results buttons are labelled.
  * Fix matching unicode emoticons (pidgin.im#17232).
  * Correctly update mute/unmute status when the remote side
    mutes/unmutes us (pidgin.im#17273).
  * Rework the status icon blinking to not use deprecated API
    (pidgin.im#17174).
  * Do not allow adding a buddy to protocols that don't have an
    add_buddy callback.
  + Finch:
  * Fix handling of search results (pidgin.im#17238).
  + Voice &amp; Video:
  * Port backend-fs to newer api for farstream relay-info
    property (pidgin.im#17274).
- Rebase pidgin-ncurses-6.0-accessors.patch.
- Remove pidgin-2.10.11-purple-remote-python3.patch: fixed
  upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Instead of removing the libjabber.so, liboscar.so symlinks, move
  them to the devel package.</changelog>
  <changelog author="fezhang@suse.com" date="1523534400">- Add pidgin-enable-sni-gnutls.patch: Enable SNI for gnutls to
  avoid SSL handshake failure, patch written by Tiago Herrmann
  (therrmann@suse.com) (bsc#1086439, pidgin.im#17300).</changelog>
  <changelog author="dimstar@opensuse.org" date="1523966400">- Drop pkgconfig(NetworkManager) BuildRequires and Requires: this
  legacy symbol is no longer maintained and pidgin is not yet
  ready to move to libnm. As a side-effect, we no longer depend on
  NM for all situations, even if the system were to run wicked.
- Replace --enable-nm configure parameter with --disable-nm.</changelog>
  <changelog author="fezhang@suse.com" date="1571745600">- Add pidgin-Leaky-deprecation-clean-ups.patch: Fix warnings of
  deprecation of GParameter that result in build failures of
  plugins that build with -Werror (pidgin.im#17415).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624536000">- Add pidgin-add-no_proxy-support.patch: add support of no_proxy
  environment variable. (jsc#SLE-17111, pidgin.im#17518)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1652097600">- Add pidgin-CVE-2022-26491.patch: Remove _xmppconnect support
  (bsc#1199025, CVE-2022-26491).</changelog>
</package>
<package pkgid="f078a4fda597f811fe78579a95628b071ba292e2e8cbeb29bf8bb1bdd8c95251" name="libpurple-devel" arch="s390x">
  <version epoch="0" ver="2.13.0" rel="150200.12.6.1"/>
  <changelog author="jengelh@inai.de" date="1469188800">- Drop additional pkgconfig require (already implicitly detected),
  but explicitly buildrequire it for /usr/lib/rpm/pkgconfigdeps.sh.</changelog>
  <changelog author="fezhang@suse.com" date="1479816000">- Add pidgin-sasl-skip-external.patch:
  Backport upstream commit 6106566. Makes Freenode and other
  servers that prefer SASL EXTERNAL fingerprint authentication
  work again (bsc#1009974).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481112000">- Build with GStreamer 1.x on SLE 12 SP2.
- Apply pidgin-use-default-alsa.patch for SLE 12+ only properly.
- Provide libpurple-branding-upstream for SLE 11 as well.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481198400">- Make libpurple require libpurple-branding.
- Correctly remove *.so files for plugins
  (fixes devel-file-in-non-devel-package).
- Rename libpurple-meanwhile to libpurple-plugin-sametime.
- Remove generation of a plugin list to package, simply add it all
  in %files with exclusions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489147200">- Update to version 2.12.0 (FATE#323136):
  + libpurple:
  - Fix an out of bounds memory read in
    purple_markup_unescape_entity (CVE-2017-2640, bsc#1028835).
  - Fix the use of uninitialised memory if running
    non-debug-enabled versions of glib.
  - Update AIM dev and dist ID's to new ones that were assigned
    by AOL.
  - TLS certificate verification now uses SHA-256 checksums.
  - Fix the SASL external auth for Freenode (boo#1009974).
  - Remove the MSN protocol plugin. It has been unusable and
    dormant for some time.
  - Remove the Mxit protocol plugin. The service was closed at
    the end ofSeptember 2016.
  - Remove the MySpaceIM protocol plugin. The service has been
    defunct for a long time (pidgin.im#15356).
  - Remove the Yahoo! protocol plugin. Yahoo has completely
    reimplemented their protocol, so this version is no longer
    operable as of August 5th, 2016.
  - Remove the Facebook (XMPP) account option. According to
    https://developers.facebook.com/docs/chat the XMPP Chat API
    service ended April 30th, 2015.
  - Fix gnutls certificate validation errors that mainly
    affected Google.
  + General:
  - Replace instances of d.pidgin.im with developer.pidgin.im and
    update the urls to use https (pidgin.im#17036).
  + IRC:
  - Fix an issue of messages being silently cut off at 500
    characters. Large messages are now split into parts and sent
    one by one (pidgin.im#4753).
- Rebase pidgin-nonblock-common.patch.
- Remove pidgin-sasl-skip-external.patch.
- Remove pidgin-NLD-smiley-theme.tar.bz2, deprecated.
- Remove pidgin-Tango-smiley-theme.tar.bz2, deprecated</changelog>
  <changelog author="tchvatal@suse.com" date="1500724800">- Drop dependency over silc-toolkit-devel as we want to remove
  it from the distribution</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Explicitly require python2</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510056000">- Correct the licence to GPL-2.0.</changelog>
  <changelog author="fezhang@suse.com" date="1511265600">- Add purple-import-empathy Recommends for SLE15 (FATE#322984).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Remove pidgin-crash-missing-gst-registry.patch: is useless now
  and is potentially harmful.
- Merge pidgin-nonblock-common2.patch to
  pidgin-nonblock-common.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Update pidgin-ncurses-6.0-accessors.patch to cope with ncurses
  enabling opaque-panels. Pidgin should not access internal
  structures of ncurses.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520337601">- Drop support for SLE 11 and openSUSE older than 42.x.
- Remove pidgin-gnome-keyring.patch: was only useful for SLE 11.</changelog>
  <changelog author="mgorse@suse.com" date="1520337602">- Add pidgin-2.10.11-purple-remote-python3.patch: port
  purple-remote to python 3 (bsc#1084147).
- Export PYTHON=python3 in %build.
- Adjust scripts to invoke python3, not python2.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 2.13.0:
  + libpurple:
  * Unified string comparison.
  * Properlly shell escape URI's when opening them.
  * Fix a one byte buffer overread in function
    purple_markup_linkify.
  * Fix an issue were utf8 was incorrectly truncated which could
    lead to crashes as we were potentially feeding garbage into
    glib/gtk.
  + libgnt:
  * Partially fix building against curses 6.0 with opaque
    structs set (pidgin.im#16764).
  * Fix a crash when resizing the window (pidgin.im#16680).
  + General:
  * Fix a bashism in autotools (pidgin.im#16836).
  + XMPP:
  * Show XEP-0066 OOB URLs in any message, not just headlines.
  * Fix a user after free (pidgin.im#17200).
  * Remove pipelining from BOSH connections (pidgin.im#17025).
  * Don't try to TLS already secured BOSH connections
    (pidgin.im#17270).
  + IRC:
  * Fix "Registration timeout" on SASL auth with InspIRCd
    servers (and possibly others not based on
    charybdis/ratbox/ircd-seven).
  * Fix issues with plugins that modify outgoing messages (such
    as the custom PART/QUIT feature of the IRC More plugin).
  * Fix IRC buffer handling (pidgin.im#12562).
  * Properly handle AUTHENTICATE as a normal command with server
    prefix.
  * Fix a crash caused by a use after free of the MOTD.
  * Fix an out of bounds read in irc_nick_skip_mode.
  * Fix a write of a single byte before the start of a buffer in
    irc_parse_ctcp.
  + Pidgin:
  * Better support for dark themes (pidgin.im#12572).
  * Fix IPv6 links by not escaping []'s. (pidgin.im#16391).
  * Only write buddy icons to the cache if they're not already
    cached.
  * Rejoin persistent chats after reconnect (pidgin.im#15687).
  * Make the WIN32 Transparency plugin work on all platforms
    (pidgin.im#3124).
  * Ensure search results buttons are labelled.
  * Fix matching unicode emoticons (pidgin.im#17232).
  * Correctly update mute/unmute status when the remote side
    mutes/unmutes us (pidgin.im#17273).
  * Rework the status icon blinking to not use deprecated API
    (pidgin.im#17174).
  * Do not allow adding a buddy to protocols that don't have an
    add_buddy callback.
  + Finch:
  * Fix handling of search results (pidgin.im#17238).
  + Voice &amp; Video:
  * Port backend-fs to newer api for farstream relay-info
    property (pidgin.im#17274).
- Rebase pidgin-ncurses-6.0-accessors.patch.
- Remove pidgin-2.10.11-purple-remote-python3.patch: fixed
  upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Instead of removing the libjabber.so, liboscar.so symlinks, move
  them to the devel package.</changelog>
  <changelog author="fezhang@suse.com" date="1523534400">- Add pidgin-enable-sni-gnutls.patch: Enable SNI for gnutls to
  avoid SSL handshake failure, patch written by Tiago Herrmann
  (therrmann@suse.com) (bsc#1086439, pidgin.im#17300).</changelog>
  <changelog author="dimstar@opensuse.org" date="1523966400">- Drop pkgconfig(NetworkManager) BuildRequires and Requires: this
  legacy symbol is no longer maintained and pidgin is not yet
  ready to move to libnm. As a side-effect, we no longer depend on
  NM for all situations, even if the system were to run wicked.
- Replace --enable-nm configure parameter with --disable-nm.</changelog>
  <changelog author="fezhang@suse.com" date="1571745600">- Add pidgin-Leaky-deprecation-clean-ups.patch: Fix warnings of
  deprecation of GParameter that result in build failures of
  plugins that build with -Werror (pidgin.im#17415).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624536000">- Add pidgin-add-no_proxy-support.patch: add support of no_proxy
  environment variable. (jsc#SLE-17111, pidgin.im#17518)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1652097600">- Add pidgin-CVE-2022-26491.patch: Remove _xmppconnect support
  (bsc#1199025, CVE-2022-26491).</changelog>
</package>
<package pkgid="65864010a0a0de12f6ba3bbb70b7cb916888004a3456f3bda33c9d2ba3fdfc37" name="libpurple-devel" arch="x86_64">
  <version epoch="0" ver="2.13.0" rel="150200.12.6.1"/>
  <changelog author="jengelh@inai.de" date="1469188800">- Drop additional pkgconfig require (already implicitly detected),
  but explicitly buildrequire it for /usr/lib/rpm/pkgconfigdeps.sh.</changelog>
  <changelog author="fezhang@suse.com" date="1479816000">- Add pidgin-sasl-skip-external.patch:
  Backport upstream commit 6106566. Makes Freenode and other
  servers that prefer SASL EXTERNAL fingerprint authentication
  work again (bsc#1009974).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481112000">- Build with GStreamer 1.x on SLE 12 SP2.
- Apply pidgin-use-default-alsa.patch for SLE 12+ only properly.
- Provide libpurple-branding-upstream for SLE 11 as well.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481198400">- Make libpurple require libpurple-branding.
- Correctly remove *.so files for plugins
  (fixes devel-file-in-non-devel-package).
- Rename libpurple-meanwhile to libpurple-plugin-sametime.
- Remove generation of a plugin list to package, simply add it all
  in %files with exclusions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489147200">- Update to version 2.12.0 (FATE#323136):
  + libpurple:
  - Fix an out of bounds memory read in
    purple_markup_unescape_entity (CVE-2017-2640, bsc#1028835).
  - Fix the use of uninitialised memory if running
    non-debug-enabled versions of glib.
  - Update AIM dev and dist ID's to new ones that were assigned
    by AOL.
  - TLS certificate verification now uses SHA-256 checksums.
  - Fix the SASL external auth for Freenode (boo#1009974).
  - Remove the MSN protocol plugin. It has been unusable and
    dormant for some time.
  - Remove the Mxit protocol plugin. The service was closed at
    the end ofSeptember 2016.
  - Remove the MySpaceIM protocol plugin. The service has been
    defunct for a long time (pidgin.im#15356).
  - Remove the Yahoo! protocol plugin. Yahoo has completely
    reimplemented their protocol, so this version is no longer
    operable as of August 5th, 2016.
  - Remove the Facebook (XMPP) account option. According to
    https://developers.facebook.com/docs/chat the XMPP Chat API
    service ended April 30th, 2015.
  - Fix gnutls certificate validation errors that mainly
    affected Google.
  + General:
  - Replace instances of d.pidgin.im with developer.pidgin.im and
    update the urls to use https (pidgin.im#17036).
  + IRC:
  - Fix an issue of messages being silently cut off at 500
    characters. Large messages are now split into parts and sent
    one by one (pidgin.im#4753).
- Rebase pidgin-nonblock-common.patch.
- Remove pidgin-sasl-skip-external.patch.
- Remove pidgin-NLD-smiley-theme.tar.bz2, deprecated.
- Remove pidgin-Tango-smiley-theme.tar.bz2, deprecated</changelog>
  <changelog author="tchvatal@suse.com" date="1500724800">- Drop dependency over silc-toolkit-devel as we want to remove
  it from the distribution</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Explicitly require python2</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510056000">- Correct the licence to GPL-2.0.</changelog>
  <changelog author="fezhang@suse.com" date="1511265600">- Add purple-import-empathy Recommends for SLE15 (FATE#322984).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Remove pidgin-crash-missing-gst-registry.patch: is useless now
  and is potentially harmful.
- Merge pidgin-nonblock-common2.patch to
  pidgin-nonblock-common.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Update pidgin-ncurses-6.0-accessors.patch to cope with ncurses
  enabling opaque-panels. Pidgin should not access internal
  structures of ncurses.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520337601">- Drop support for SLE 11 and openSUSE older than 42.x.
- Remove pidgin-gnome-keyring.patch: was only useful for SLE 11.</changelog>
  <changelog author="mgorse@suse.com" date="1520337602">- Add pidgin-2.10.11-purple-remote-python3.patch: port
  purple-remote to python 3 (bsc#1084147).
- Export PYTHON=python3 in %build.
- Adjust scripts to invoke python3, not python2.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 2.13.0:
  + libpurple:
  * Unified string comparison.
  * Properlly shell escape URI's when opening them.
  * Fix a one byte buffer overread in function
    purple_markup_linkify.
  * Fix an issue were utf8 was incorrectly truncated which could
    lead to crashes as we were potentially feeding garbage into
    glib/gtk.
  + libgnt:
  * Partially fix building against curses 6.0 with opaque
    structs set (pidgin.im#16764).
  * Fix a crash when resizing the window (pidgin.im#16680).
  + General:
  * Fix a bashism in autotools (pidgin.im#16836).
  + XMPP:
  * Show XEP-0066 OOB URLs in any message, not just headlines.
  * Fix a user after free (pidgin.im#17200).
  * Remove pipelining from BOSH connections (pidgin.im#17025).
  * Don't try to TLS already secured BOSH connections
    (pidgin.im#17270).
  + IRC:
  * Fix "Registration timeout" on SASL auth with InspIRCd
    servers (and possibly others not based on
    charybdis/ratbox/ircd-seven).
  * Fix issues with plugins that modify outgoing messages (such
    as the custom PART/QUIT feature of the IRC More plugin).
  * Fix IRC buffer handling (pidgin.im#12562).
  * Properly handle AUTHENTICATE as a normal command with server
    prefix.
  * Fix a crash caused by a use after free of the MOTD.
  * Fix an out of bounds read in irc_nick_skip_mode.
  * Fix a write of a single byte before the start of a buffer in
    irc_parse_ctcp.
  + Pidgin:
  * Better support for dark themes (pidgin.im#12572).
  * Fix IPv6 links by not escaping []'s. (pidgin.im#16391).
  * Only write buddy icons to the cache if they're not already
    cached.
  * Rejoin persistent chats after reconnect (pidgin.im#15687).
  * Make the WIN32 Transparency plugin work on all platforms
    (pidgin.im#3124).
  * Ensure search results buttons are labelled.
  * Fix matching unicode emoticons (pidgin.im#17232).
  * Correctly update mute/unmute status when the remote side
    mutes/unmutes us (pidgin.im#17273).
  * Rework the status icon blinking to not use deprecated API
    (pidgin.im#17174).
  * Do not allow adding a buddy to protocols that don't have an
    add_buddy callback.
  + Finch:
  * Fix handling of search results (pidgin.im#17238).
  + Voice &amp; Video:
  * Port backend-fs to newer api for farstream relay-info
    property (pidgin.im#17274).
- Rebase pidgin-ncurses-6.0-accessors.patch.
- Remove pidgin-2.10.11-purple-remote-python3.patch: fixed
  upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Instead of removing the libjabber.so, liboscar.so symlinks, move
  them to the devel package.</changelog>
  <changelog author="fezhang@suse.com" date="1523534400">- Add pidgin-enable-sni-gnutls.patch: Enable SNI for gnutls to
  avoid SSL handshake failure, patch written by Tiago Herrmann
  (therrmann@suse.com) (bsc#1086439, pidgin.im#17300).</changelog>
  <changelog author="dimstar@opensuse.org" date="1523966400">- Drop pkgconfig(NetworkManager) BuildRequires and Requires: this
  legacy symbol is no longer maintained and pidgin is not yet
  ready to move to libnm. As a side-effect, we no longer depend on
  NM for all situations, even if the system were to run wicked.
- Replace --enable-nm configure parameter with --disable-nm.</changelog>
  <changelog author="fezhang@suse.com" date="1571745600">- Add pidgin-Leaky-deprecation-clean-ups.patch: Fix warnings of
  deprecation of GParameter that result in build failures of
  plugins that build with -Werror (pidgin.im#17415).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624536000">- Add pidgin-add-no_proxy-support.patch: add support of no_proxy
  environment variable. (jsc#SLE-17111, pidgin.im#17518)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1652097600">- Add pidgin-CVE-2022-26491.patch: Remove _xmppconnect support
  (bsc#1199025, CVE-2022-26491).</changelog>
</package>
<package pkgid="e663d31a30bd32d5127e8a65c46b22fa024c6440c0fd658c7810a3abc2019711" name="libpurple-lang" arch="noarch">
  <version epoch="0" ver="2.13.0" rel="150200.12.6.1"/>
  <changelog author="jengelh@inai.de" date="1469188800">- Drop additional pkgconfig require (already implicitly detected),
  but explicitly buildrequire it for /usr/lib/rpm/pkgconfigdeps.sh.</changelog>
  <changelog author="fezhang@suse.com" date="1479816000">- Add pidgin-sasl-skip-external.patch:
  Backport upstream commit 6106566. Makes Freenode and other
  servers that prefer SASL EXTERNAL fingerprint authentication
  work again (bsc#1009974).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481112000">- Build with GStreamer 1.x on SLE 12 SP2.
- Apply pidgin-use-default-alsa.patch for SLE 12+ only properly.
- Provide libpurple-branding-upstream for SLE 11 as well.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481198400">- Make libpurple require libpurple-branding.
- Correctly remove *.so files for plugins
  (fixes devel-file-in-non-devel-package).
- Rename libpurple-meanwhile to libpurple-plugin-sametime.
- Remove generation of a plugin list to package, simply add it all
  in %files with exclusions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489147200">- Update to version 2.12.0 (FATE#323136):
  + libpurple:
  - Fix an out of bounds memory read in
    purple_markup_unescape_entity (CVE-2017-2640, bsc#1028835).
  - Fix the use of uninitialised memory if running
    non-debug-enabled versions of glib.
  - Update AIM dev and dist ID's to new ones that were assigned
    by AOL.
  - TLS certificate verification now uses SHA-256 checksums.
  - Fix the SASL external auth for Freenode (boo#1009974).
  - Remove the MSN protocol plugin. It has been unusable and
    dormant for some time.
  - Remove the Mxit protocol plugin. The service was closed at
    the end ofSeptember 2016.
  - Remove the MySpaceIM protocol plugin. The service has been
    defunct for a long time (pidgin.im#15356).
  - Remove the Yahoo! protocol plugin. Yahoo has completely
    reimplemented their protocol, so this version is no longer
    operable as of August 5th, 2016.
  - Remove the Facebook (XMPP) account option. According to
    https://developers.facebook.com/docs/chat the XMPP Chat API
    service ended April 30th, 2015.
  - Fix gnutls certificate validation errors that mainly
    affected Google.
  + General:
  - Replace instances of d.pidgin.im with developer.pidgin.im and
    update the urls to use https (pidgin.im#17036).
  + IRC:
  - Fix an issue of messages being silently cut off at 500
    characters. Large messages are now split into parts and sent
    one by one (pidgin.im#4753).
- Rebase pidgin-nonblock-common.patch.
- Remove pidgin-sasl-skip-external.patch.
- Remove pidgin-NLD-smiley-theme.tar.bz2, deprecated.
- Remove pidgin-Tango-smiley-theme.tar.bz2, deprecated</changelog>
  <changelog author="tchvatal@suse.com" date="1500724800">- Drop dependency over silc-toolkit-devel as we want to remove
  it from the distribution</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Explicitly require python2</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510056000">- Correct the licence to GPL-2.0.</changelog>
  <changelog author="fezhang@suse.com" date="1511265600">- Add purple-import-empathy Recommends for SLE15 (FATE#322984).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Remove pidgin-crash-missing-gst-registry.patch: is useless now
  and is potentially harmful.
- Merge pidgin-nonblock-common2.patch to
  pidgin-nonblock-common.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Update pidgin-ncurses-6.0-accessors.patch to cope with ncurses
  enabling opaque-panels. Pidgin should not access internal
  structures of ncurses.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520337601">- Drop support for SLE 11 and openSUSE older than 42.x.
- Remove pidgin-gnome-keyring.patch: was only useful for SLE 11.</changelog>
  <changelog author="mgorse@suse.com" date="1520337602">- Add pidgin-2.10.11-purple-remote-python3.patch: port
  purple-remote to python 3 (bsc#1084147).
- Export PYTHON=python3 in %build.
- Adjust scripts to invoke python3, not python2.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 2.13.0:
  + libpurple:
  * Unified string comparison.
  * Properlly shell escape URI's when opening them.
  * Fix a one byte buffer overread in function
    purple_markup_linkify.
  * Fix an issue were utf8 was incorrectly truncated which could
    lead to crashes as we were potentially feeding garbage into
    glib/gtk.
  + libgnt:
  * Partially fix building against curses 6.0 with opaque
    structs set (pidgin.im#16764).
  * Fix a crash when resizing the window (pidgin.im#16680).
  + General:
  * Fix a bashism in autotools (pidgin.im#16836).
  + XMPP:
  * Show XEP-0066 OOB URLs in any message, not just headlines.
  * Fix a user after free (pidgin.im#17200).
  * Remove pipelining from BOSH connections (pidgin.im#17025).
  * Don't try to TLS already secured BOSH connections
    (pidgin.im#17270).
  + IRC:
  * Fix "Registration timeout" on SASL auth with InspIRCd
    servers (and possibly others not based on
    charybdis/ratbox/ircd-seven).
  * Fix issues with plugins that modify outgoing messages (such
    as the custom PART/QUIT feature of the IRC More plugin).
  * Fix IRC buffer handling (pidgin.im#12562).
  * Properly handle AUTHENTICATE as a normal command with server
    prefix.
  * Fix a crash caused by a use after free of the MOTD.
  * Fix an out of bounds read in irc_nick_skip_mode.
  * Fix a write of a single byte before the start of a buffer in
    irc_parse_ctcp.
  + Pidgin:
  * Better support for dark themes (pidgin.im#12572).
  * Fix IPv6 links by not escaping []'s. (pidgin.im#16391).
  * Only write buddy icons to the cache if they're not already
    cached.
  * Rejoin persistent chats after reconnect (pidgin.im#15687).
  * Make the WIN32 Transparency plugin work on all platforms
    (pidgin.im#3124).
  * Ensure search results buttons are labelled.
  * Fix matching unicode emoticons (pidgin.im#17232).
  * Correctly update mute/unmute status when the remote side
    mutes/unmutes us (pidgin.im#17273).
  * Rework the status icon blinking to not use deprecated API
    (pidgin.im#17174).
  * Do not allow adding a buddy to protocols that don't have an
    add_buddy callback.
  + Finch:
  * Fix handling of search results (pidgin.im#17238).
  + Voice &amp; Video:
  * Port backend-fs to newer api for farstream relay-info
    property (pidgin.im#17274).
- Rebase pidgin-ncurses-6.0-accessors.patch.
- Remove pidgin-2.10.11-purple-remote-python3.patch: fixed
  upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Instead of removing the libjabber.so, liboscar.so symlinks, move
  them to the devel package.</changelog>
  <changelog author="fezhang@suse.com" date="1523534400">- Add pidgin-enable-sni-gnutls.patch: Enable SNI for gnutls to
  avoid SSL handshake failure, patch written by Tiago Herrmann
  (therrmann@suse.com) (bsc#1086439, pidgin.im#17300).</changelog>
  <changelog author="dimstar@opensuse.org" date="1523966400">- Drop pkgconfig(NetworkManager) BuildRequires and Requires: this
  legacy symbol is no longer maintained and pidgin is not yet
  ready to move to libnm. As a side-effect, we no longer depend on
  NM for all situations, even if the system were to run wicked.
- Replace --enable-nm configure parameter with --disable-nm.</changelog>
  <changelog author="fezhang@suse.com" date="1571745600">- Add pidgin-Leaky-deprecation-clean-ups.patch: Fix warnings of
  deprecation of GParameter that result in build failures of
  plugins that build with -Werror (pidgin.im#17415).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624536000">- Add pidgin-add-no_proxy-support.patch: add support of no_proxy
  environment variable. (jsc#SLE-17111, pidgin.im#17518)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1652097600">- Add pidgin-CVE-2022-26491.patch: Remove _xmppconnect support
  (bsc#1199025, CVE-2022-26491).</changelog>
</package>
<package pkgid="02f096d0c5a7507cba87ca49612da8ffbe7dca2fda25493c4df32745df82d9dd" name="libpurple-plugin-sametime" arch="aarch64">
  <version epoch="0" ver="2.13.0" rel="150200.12.6.1"/>
  <changelog author="jengelh@inai.de" date="1469188800">- Drop additional pkgconfig require (already implicitly detected),
  but explicitly buildrequire it for /usr/lib/rpm/pkgconfigdeps.sh.</changelog>
  <changelog author="fezhang@suse.com" date="1479816000">- Add pidgin-sasl-skip-external.patch:
  Backport upstream commit 6106566. Makes Freenode and other
  servers that prefer SASL EXTERNAL fingerprint authentication
  work again (bsc#1009974).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481112000">- Build with GStreamer 1.x on SLE 12 SP2.
- Apply pidgin-use-default-alsa.patch for SLE 12+ only properly.
- Provide libpurple-branding-upstream for SLE 11 as well.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481198400">- Make libpurple require libpurple-branding.
- Correctly remove *.so files for plugins
  (fixes devel-file-in-non-devel-package).
- Rename libpurple-meanwhile to libpurple-plugin-sametime.
- Remove generation of a plugin list to package, simply add it all
  in %files with exclusions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489147200">- Update to version 2.12.0 (FATE#323136):
  + libpurple:
  - Fix an out of bounds memory read in
    purple_markup_unescape_entity (CVE-2017-2640, bsc#1028835).
  - Fix the use of uninitialised memory if running
    non-debug-enabled versions of glib.
  - Update AIM dev and dist ID's to new ones that were assigned
    by AOL.
  - TLS certificate verification now uses SHA-256 checksums.
  - Fix the SASL external auth for Freenode (boo#1009974).
  - Remove the MSN protocol plugin. It has been unusable and
    dormant for some time.
  - Remove the Mxit protocol plugin. The service was closed at
    the end ofSeptember 2016.
  - Remove the MySpaceIM protocol plugin. The service has been
    defunct for a long time (pidgin.im#15356).
  - Remove the Yahoo! protocol plugin. Yahoo has completely
    reimplemented their protocol, so this version is no longer
    operable as of August 5th, 2016.
  - Remove the Facebook (XMPP) account option. According to
    https://developers.facebook.com/docs/chat the XMPP Chat API
    service ended April 30th, 2015.
  - Fix gnutls certificate validation errors that mainly
    affected Google.
  + General:
  - Replace instances of d.pidgin.im with developer.pidgin.im and
    update the urls to use https (pidgin.im#17036).
  + IRC:
  - Fix an issue of messages being silently cut off at 500
    characters. Large messages are now split into parts and sent
    one by one (pidgin.im#4753).
- Rebase pidgin-nonblock-common.patch.
- Remove pidgin-sasl-skip-external.patch.
- Remove pidgin-NLD-smiley-theme.tar.bz2, deprecated.
- Remove pidgin-Tango-smiley-theme.tar.bz2, deprecated</changelog>
  <changelog author="tchvatal@suse.com" date="1500724800">- Drop dependency over silc-toolkit-devel as we want to remove
  it from the distribution</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Explicitly require python2</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510056000">- Correct the licence to GPL-2.0.</changelog>
  <changelog author="fezhang@suse.com" date="1511265600">- Add purple-import-empathy Recommends for SLE15 (FATE#322984).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Remove pidgin-crash-missing-gst-registry.patch: is useless now
  and is potentially harmful.
- Merge pidgin-nonblock-common2.patch to
  pidgin-nonblock-common.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Update pidgin-ncurses-6.0-accessors.patch to cope with ncurses
  enabling opaque-panels. Pidgin should not access internal
  structures of ncurses.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520337601">- Drop support for SLE 11 and openSUSE older than 42.x.
- Remove pidgin-gnome-keyring.patch: was only useful for SLE 11.</changelog>
  <changelog author="mgorse@suse.com" date="1520337602">- Add pidgin-2.10.11-purple-remote-python3.patch: port
  purple-remote to python 3 (bsc#1084147).
- Export PYTHON=python3 in %build.
- Adjust scripts to invoke python3, not python2.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 2.13.0:
  + libpurple:
  * Unified string comparison.
  * Properlly shell escape URI's when opening them.
  * Fix a one byte buffer overread in function
    purple_markup_linkify.
  * Fix an issue were utf8 was incorrectly truncated which could
    lead to crashes as we were potentially feeding garbage into
    glib/gtk.
  + libgnt:
  * Partially fix building against curses 6.0 with opaque
    structs set (pidgin.im#16764).
  * Fix a crash when resizing the window (pidgin.im#16680).
  + General:
  * Fix a bashism in autotools (pidgin.im#16836).
  + XMPP:
  * Show XEP-0066 OOB URLs in any message, not just headlines.
  * Fix a user after free (pidgin.im#17200).
  * Remove pipelining from BOSH connections (pidgin.im#17025).
  * Don't try to TLS already secured BOSH connections
    (pidgin.im#17270).
  + IRC:
  * Fix "Registration timeout" on SASL auth with InspIRCd
    servers (and possibly others not based on
    charybdis/ratbox/ircd-seven).
  * Fix issues with plugins that modify outgoing messages (such
    as the custom PART/QUIT feature of the IRC More plugin).
  * Fix IRC buffer handling (pidgin.im#12562).
  * Properly handle AUTHENTICATE as a normal command with server
    prefix.
  * Fix a crash caused by a use after free of the MOTD.
  * Fix an out of bounds read in irc_nick_skip_mode.
  * Fix a write of a single byte before the start of a buffer in
    irc_parse_ctcp.
  + Pidgin:
  * Better support for dark themes (pidgin.im#12572).
  * Fix IPv6 links by not escaping []'s. (pidgin.im#16391).
  * Only write buddy icons to the cache if they're not already
    cached.
  * Rejoin persistent chats after reconnect (pidgin.im#15687).
  * Make the WIN32 Transparency plugin work on all platforms
    (pidgin.im#3124).
  * Ensure search results buttons are labelled.
  * Fix matching unicode emoticons (pidgin.im#17232).
  * Correctly update mute/unmute status when the remote side
    mutes/unmutes us (pidgin.im#17273).
  * Rework the status icon blinking to not use deprecated API
    (pidgin.im#17174).
  * Do not allow adding a buddy to protocols that don't have an
    add_buddy callback.
  + Finch:
  * Fix handling of search results (pidgin.im#17238).
  + Voice &amp; Video:
  * Port backend-fs to newer api for farstream relay-info
    property (pidgin.im#17274).
- Rebase pidgin-ncurses-6.0-accessors.patch.
- Remove pidgin-2.10.11-purple-remote-python3.patch: fixed
  upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Instead of removing the libjabber.so, liboscar.so symlinks, move
  them to the devel package.</changelog>
  <changelog author="fezhang@suse.com" date="1523534400">- Add pidgin-enable-sni-gnutls.patch: Enable SNI for gnutls to
  avoid SSL handshake failure, patch written by Tiago Herrmann
  (therrmann@suse.com) (bsc#1086439, pidgin.im#17300).</changelog>
  <changelog author="dimstar@opensuse.org" date="1523966400">- Drop pkgconfig(NetworkManager) BuildRequires and Requires: this
  legacy symbol is no longer maintained and pidgin is not yet
  ready to move to libnm. As a side-effect, we no longer depend on
  NM for all situations, even if the system were to run wicked.
- Replace --enable-nm configure parameter with --disable-nm.</changelog>
  <changelog author="fezhang@suse.com" date="1571745600">- Add pidgin-Leaky-deprecation-clean-ups.patch: Fix warnings of
  deprecation of GParameter that result in build failures of
  plugins that build with -Werror (pidgin.im#17415).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624536000">- Add pidgin-add-no_proxy-support.patch: add support of no_proxy
  environment variable. (jsc#SLE-17111, pidgin.im#17518)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1652097600">- Add pidgin-CVE-2022-26491.patch: Remove _xmppconnect support
  (bsc#1199025, CVE-2022-26491).</changelog>
</package>
<package pkgid="04f8de77c3458cf6d3dc64e1efd06948c56777919f900072b7f106dc3e1dbc8d" name="libpurple-plugin-sametime" arch="ppc64le">
  <version epoch="0" ver="2.13.0" rel="150200.12.6.1"/>
  <changelog author="jengelh@inai.de" date="1469188800">- Drop additional pkgconfig require (already implicitly detected),
  but explicitly buildrequire it for /usr/lib/rpm/pkgconfigdeps.sh.</changelog>
  <changelog author="fezhang@suse.com" date="1479816000">- Add pidgin-sasl-skip-external.patch:
  Backport upstream commit 6106566. Makes Freenode and other
  servers that prefer SASL EXTERNAL fingerprint authentication
  work again (bsc#1009974).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481112000">- Build with GStreamer 1.x on SLE 12 SP2.
- Apply pidgin-use-default-alsa.patch for SLE 12+ only properly.
- Provide libpurple-branding-upstream for SLE 11 as well.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481198400">- Make libpurple require libpurple-branding.
- Correctly remove *.so files for plugins
  (fixes devel-file-in-non-devel-package).
- Rename libpurple-meanwhile to libpurple-plugin-sametime.
- Remove generation of a plugin list to package, simply add it all
  in %files with exclusions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489147200">- Update to version 2.12.0 (FATE#323136):
  + libpurple:
  - Fix an out of bounds memory read in
    purple_markup_unescape_entity (CVE-2017-2640, bsc#1028835).
  - Fix the use of uninitialised memory if running
    non-debug-enabled versions of glib.
  - Update AIM dev and dist ID's to new ones that were assigned
    by AOL.
  - TLS certificate verification now uses SHA-256 checksums.
  - Fix the SASL external auth for Freenode (boo#1009974).
  - Remove the MSN protocol plugin. It has been unusable and
    dormant for some time.
  - Remove the Mxit protocol plugin. The service was closed at
    the end ofSeptember 2016.
  - Remove the MySpaceIM protocol plugin. The service has been
    defunct for a long time (pidgin.im#15356).
  - Remove the Yahoo! protocol plugin. Yahoo has completely
    reimplemented their protocol, so this version is no longer
    operable as of August 5th, 2016.
  - Remove the Facebook (XMPP) account option. According to
    https://developers.facebook.com/docs/chat the XMPP Chat API
    service ended April 30th, 2015.
  - Fix gnutls certificate validation errors that mainly
    affected Google.
  + General:
  - Replace instances of d.pidgin.im with developer.pidgin.im and
    update the urls to use https (pidgin.im#17036).
  + IRC:
  - Fix an issue of messages being silently cut off at 500
    characters. Large messages are now split into parts and sent
    one by one (pidgin.im#4753).
- Rebase pidgin-nonblock-common.patch.
- Remove pidgin-sasl-skip-external.patch.
- Remove pidgin-NLD-smiley-theme.tar.bz2, deprecated.
- Remove pidgin-Tango-smiley-theme.tar.bz2, deprecated</changelog>
  <changelog author="tchvatal@suse.com" date="1500724800">- Drop dependency over silc-toolkit-devel as we want to remove
  it from the distribution</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Explicitly require python2</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510056000">- Correct the licence to GPL-2.0.</changelog>
  <changelog author="fezhang@suse.com" date="1511265600">- Add purple-import-empathy Recommends for SLE15 (FATE#322984).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Remove pidgin-crash-missing-gst-registry.patch: is useless now
  and is potentially harmful.
- Merge pidgin-nonblock-common2.patch to
  pidgin-nonblock-common.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Update pidgin-ncurses-6.0-accessors.patch to cope with ncurses
  enabling opaque-panels. Pidgin should not access internal
  structures of ncurses.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520337601">- Drop support for SLE 11 and openSUSE older than 42.x.
- Remove pidgin-gnome-keyring.patch: was only useful for SLE 11.</changelog>
  <changelog author="mgorse@suse.com" date="1520337602">- Add pidgin-2.10.11-purple-remote-python3.patch: port
  purple-remote to python 3 (bsc#1084147).
- Export PYTHON=python3 in %build.
- Adjust scripts to invoke python3, not python2.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 2.13.0:
  + libpurple:
  * Unified string comparison.
  * Properlly shell escape URI's when opening them.
  * Fix a one byte buffer overread in function
    purple_markup_linkify.
  * Fix an issue were utf8 was incorrectly truncated which could
    lead to crashes as we were potentially feeding garbage into
    glib/gtk.
  + libgnt:
  * Partially fix building against curses 6.0 with opaque
    structs set (pidgin.im#16764).
  * Fix a crash when resizing the window (pidgin.im#16680).
  + General:
  * Fix a bashism in autotools (pidgin.im#16836).
  + XMPP:
  * Show XEP-0066 OOB URLs in any message, not just headlines.
  * Fix a user after free (pidgin.im#17200).
  * Remove pipelining from BOSH connections (pidgin.im#17025).
  * Don't try to TLS already secured BOSH connections
    (pidgin.im#17270).
  + IRC:
  * Fix "Registration timeout" on SASL auth with InspIRCd
    servers (and possibly others not based on
    charybdis/ratbox/ircd-seven).
  * Fix issues with plugins that modify outgoing messages (such
    as the custom PART/QUIT feature of the IRC More plugin).
  * Fix IRC buffer handling (pidgin.im#12562).
  * Properly handle AUTHENTICATE as a normal command with server
    prefix.
  * Fix a crash caused by a use after free of the MOTD.
  * Fix an out of bounds read in irc_nick_skip_mode.
  * Fix a write of a single byte before the start of a buffer in
    irc_parse_ctcp.
  + Pidgin:
  * Better support for dark themes (pidgin.im#12572).
  * Fix IPv6 links by not escaping []'s. (pidgin.im#16391).
  * Only write buddy icons to the cache if they're not already
    cached.
  * Rejoin persistent chats after reconnect (pidgin.im#15687).
  * Make the WIN32 Transparency plugin work on all platforms
    (pidgin.im#3124).
  * Ensure search results buttons are labelled.
  * Fix matching unicode emoticons (pidgin.im#17232).
  * Correctly update mute/unmute status when the remote side
    mutes/unmutes us (pidgin.im#17273).
  * Rework the status icon blinking to not use deprecated API
    (pidgin.im#17174).
  * Do not allow adding a buddy to protocols that don't have an
    add_buddy callback.
  + Finch:
  * Fix handling of search results (pidgin.im#17238).
  + Voice &amp; Video:
  * Port backend-fs to newer api for farstream relay-info
    property (pidgin.im#17274).
- Rebase pidgin-ncurses-6.0-accessors.patch.
- Remove pidgin-2.10.11-purple-remote-python3.patch: fixed
  upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Instead of removing the libjabber.so, liboscar.so symlinks, move
  them to the devel package.</changelog>
  <changelog author="fezhang@suse.com" date="1523534400">- Add pidgin-enable-sni-gnutls.patch: Enable SNI for gnutls to
  avoid SSL handshake failure, patch written by Tiago Herrmann
  (therrmann@suse.com) (bsc#1086439, pidgin.im#17300).</changelog>
  <changelog author="dimstar@opensuse.org" date="1523966400">- Drop pkgconfig(NetworkManager) BuildRequires and Requires: this
  legacy symbol is no longer maintained and pidgin is not yet
  ready to move to libnm. As a side-effect, we no longer depend on
  NM for all situations, even if the system were to run wicked.
- Replace --enable-nm configure parameter with --disable-nm.</changelog>
  <changelog author="fezhang@suse.com" date="1571745600">- Add pidgin-Leaky-deprecation-clean-ups.patch: Fix warnings of
  deprecation of GParameter that result in build failures of
  plugins that build with -Werror (pidgin.im#17415).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624536000">- Add pidgin-add-no_proxy-support.patch: add support of no_proxy
  environment variable. (jsc#SLE-17111, pidgin.im#17518)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1652097600">- Add pidgin-CVE-2022-26491.patch: Remove _xmppconnect support
  (bsc#1199025, CVE-2022-26491).</changelog>
</package>
<package pkgid="6251f6588b0c73244e01888edbfc5f91cc825a822a978567e99e00b68f2199e3" name="libpurple-plugin-sametime" arch="s390x">
  <version epoch="0" ver="2.13.0" rel="150200.12.6.1"/>
  <changelog author="jengelh@inai.de" date="1469188800">- Drop additional pkgconfig require (already implicitly detected),
  but explicitly buildrequire it for /usr/lib/rpm/pkgconfigdeps.sh.</changelog>
  <changelog author="fezhang@suse.com" date="1479816000">- Add pidgin-sasl-skip-external.patch:
  Backport upstream commit 6106566. Makes Freenode and other
  servers that prefer SASL EXTERNAL fingerprint authentication
  work again (bsc#1009974).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481112000">- Build with GStreamer 1.x on SLE 12 SP2.
- Apply pidgin-use-default-alsa.patch for SLE 12+ only properly.
- Provide libpurple-branding-upstream for SLE 11 as well.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481198400">- Make libpurple require libpurple-branding.
- Correctly remove *.so files for plugins
  (fixes devel-file-in-non-devel-package).
- Rename libpurple-meanwhile to libpurple-plugin-sametime.
- Remove generation of a plugin list to package, simply add it all
  in %files with exclusions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489147200">- Update to version 2.12.0 (FATE#323136):
  + libpurple:
  - Fix an out of bounds memory read in
    purple_markup_unescape_entity (CVE-2017-2640, bsc#1028835).
  - Fix the use of uninitialised memory if running
    non-debug-enabled versions of glib.
  - Update AIM dev and dist ID's to new ones that were assigned
    by AOL.
  - TLS certificate verification now uses SHA-256 checksums.
  - Fix the SASL external auth for Freenode (boo#1009974).
  - Remove the MSN protocol plugin. It has been unusable and
    dormant for some time.
  - Remove the Mxit protocol plugin. The service was closed at
    the end ofSeptember 2016.
  - Remove the MySpaceIM protocol plugin. The service has been
    defunct for a long time (pidgin.im#15356).
  - Remove the Yahoo! protocol plugin. Yahoo has completely
    reimplemented their protocol, so this version is no longer
    operable as of August 5th, 2016.
  - Remove the Facebook (XMPP) account option. According to
    https://developers.facebook.com/docs/chat the XMPP Chat API
    service ended April 30th, 2015.
  - Fix gnutls certificate validation errors that mainly
    affected Google.
  + General:
  - Replace instances of d.pidgin.im with developer.pidgin.im and
    update the urls to use https (pidgin.im#17036).
  + IRC:
  - Fix an issue of messages being silently cut off at 500
    characters. Large messages are now split into parts and sent
    one by one (pidgin.im#4753).
- Rebase pidgin-nonblock-common.patch.
- Remove pidgin-sasl-skip-external.patch.
- Remove pidgin-NLD-smiley-theme.tar.bz2, deprecated.
- Remove pidgin-Tango-smiley-theme.tar.bz2, deprecated</changelog>
  <changelog author="tchvatal@suse.com" date="1500724800">- Drop dependency over silc-toolkit-devel as we want to remove
  it from the distribution</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Explicitly require python2</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510056000">- Correct the licence to GPL-2.0.</changelog>
  <changelog author="fezhang@suse.com" date="1511265600">- Add purple-import-empathy Recommends for SLE15 (FATE#322984).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Remove pidgin-crash-missing-gst-registry.patch: is useless now
  and is potentially harmful.
- Merge pidgin-nonblock-common2.patch to
  pidgin-nonblock-common.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Update pidgin-ncurses-6.0-accessors.patch to cope with ncurses
  enabling opaque-panels. Pidgin should not access internal
  structures of ncurses.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520337601">- Drop support for SLE 11 and openSUSE older than 42.x.
- Remove pidgin-gnome-keyring.patch: was only useful for SLE 11.</changelog>
  <changelog author="mgorse@suse.com" date="1520337602">- Add pidgin-2.10.11-purple-remote-python3.patch: port
  purple-remote to python 3 (bsc#1084147).
- Export PYTHON=python3 in %build.
- Adjust scripts to invoke python3, not python2.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 2.13.0:
  + libpurple:
  * Unified string comparison.
  * Properlly shell escape URI's when opening them.
  * Fix a one byte buffer overread in function
    purple_markup_linkify.
  * Fix an issue were utf8 was incorrectly truncated which could
    lead to crashes as we were potentially feeding garbage into
    glib/gtk.
  + libgnt:
  * Partially fix building against curses 6.0 with opaque
    structs set (pidgin.im#16764).
  * Fix a crash when resizing the window (pidgin.im#16680).
  + General:
  * Fix a bashism in autotools (pidgin.im#16836).
  + XMPP:
  * Show XEP-0066 OOB URLs in any message, not just headlines.
  * Fix a user after free (pidgin.im#17200).
  * Remove pipelining from BOSH connections (pidgin.im#17025).
  * Don't try to TLS already secured BOSH connections
    (pidgin.im#17270).
  + IRC:
  * Fix "Registration timeout" on SASL auth with InspIRCd
    servers (and possibly others not based on
    charybdis/ratbox/ircd-seven).
  * Fix issues with plugins that modify outgoing messages (such
    as the custom PART/QUIT feature of the IRC More plugin).
  * Fix IRC buffer handling (pidgin.im#12562).
  * Properly handle AUTHENTICATE as a normal command with server
    prefix.
  * Fix a crash caused by a use after free of the MOTD.
  * Fix an out of bounds read in irc_nick_skip_mode.
  * Fix a write of a single byte before the start of a buffer in
    irc_parse_ctcp.
  + Pidgin:
  * Better support for dark themes (pidgin.im#12572).
  * Fix IPv6 links by not escaping []'s. (pidgin.im#16391).
  * Only write buddy icons to the cache if they're not already
    cached.
  * Rejoin persistent chats after reconnect (pidgin.im#15687).
  * Make the WIN32 Transparency plugin work on all platforms
    (pidgin.im#3124).
  * Ensure search results buttons are labelled.
  * Fix matching unicode emoticons (pidgin.im#17232).
  * Correctly update mute/unmute status when the remote side
    mutes/unmutes us (pidgin.im#17273).
  * Rework the status icon blinking to not use deprecated API
    (pidgin.im#17174).
  * Do not allow adding a buddy to protocols that don't have an
    add_buddy callback.
  + Finch:
  * Fix handling of search results (pidgin.im#17238).
  + Voice &amp; Video:
  * Port backend-fs to newer api for farstream relay-info
    property (pidgin.im#17274).
- Rebase pidgin-ncurses-6.0-accessors.patch.
- Remove pidgin-2.10.11-purple-remote-python3.patch: fixed
  upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Instead of removing the libjabber.so, liboscar.so symlinks, move
  them to the devel package.</changelog>
  <changelog author="fezhang@suse.com" date="1523534400">- Add pidgin-enable-sni-gnutls.patch: Enable SNI for gnutls to
  avoid SSL handshake failure, patch written by Tiago Herrmann
  (therrmann@suse.com) (bsc#1086439, pidgin.im#17300).</changelog>
  <changelog author="dimstar@opensuse.org" date="1523966400">- Drop pkgconfig(NetworkManager) BuildRequires and Requires: this
  legacy symbol is no longer maintained and pidgin is not yet
  ready to move to libnm. As a side-effect, we no longer depend on
  NM for all situations, even if the system were to run wicked.
- Replace --enable-nm configure parameter with --disable-nm.</changelog>
  <changelog author="fezhang@suse.com" date="1571745600">- Add pidgin-Leaky-deprecation-clean-ups.patch: Fix warnings of
  deprecation of GParameter that result in build failures of
  plugins that build with -Werror (pidgin.im#17415).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624536000">- Add pidgin-add-no_proxy-support.patch: add support of no_proxy
  environment variable. (jsc#SLE-17111, pidgin.im#17518)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1652097600">- Add pidgin-CVE-2022-26491.patch: Remove _xmppconnect support
  (bsc#1199025, CVE-2022-26491).</changelog>
</package>
<package pkgid="4aa59a8b66b9db58309da146f3a0ee0650abe2aaf72a46e844fd7b1c53cb4ffe" name="libpurple-plugin-sametime" arch="x86_64">
  <version epoch="0" ver="2.13.0" rel="150200.12.6.1"/>
  <changelog author="jengelh@inai.de" date="1469188800">- Drop additional pkgconfig require (already implicitly detected),
  but explicitly buildrequire it for /usr/lib/rpm/pkgconfigdeps.sh.</changelog>
  <changelog author="fezhang@suse.com" date="1479816000">- Add pidgin-sasl-skip-external.patch:
  Backport upstream commit 6106566. Makes Freenode and other
  servers that prefer SASL EXTERNAL fingerprint authentication
  work again (bsc#1009974).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481112000">- Build with GStreamer 1.x on SLE 12 SP2.
- Apply pidgin-use-default-alsa.patch for SLE 12+ only properly.
- Provide libpurple-branding-upstream for SLE 11 as well.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481198400">- Make libpurple require libpurple-branding.
- Correctly remove *.so files for plugins
  (fixes devel-file-in-non-devel-package).
- Rename libpurple-meanwhile to libpurple-plugin-sametime.
- Remove generation of a plugin list to package, simply add it all
  in %files with exclusions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489147200">- Update to version 2.12.0 (FATE#323136):
  + libpurple:
  - Fix an out of bounds memory read in
    purple_markup_unescape_entity (CVE-2017-2640, bsc#1028835).
  - Fix the use of uninitialised memory if running
    non-debug-enabled versions of glib.
  - Update AIM dev and dist ID's to new ones that were assigned
    by AOL.
  - TLS certificate verification now uses SHA-256 checksums.
  - Fix the SASL external auth for Freenode (boo#1009974).
  - Remove the MSN protocol plugin. It has been unusable and
    dormant for some time.
  - Remove the Mxit protocol plugin. The service was closed at
    the end ofSeptember 2016.
  - Remove the MySpaceIM protocol plugin. The service has been
    defunct for a long time (pidgin.im#15356).
  - Remove the Yahoo! protocol plugin. Yahoo has completely
    reimplemented their protocol, so this version is no longer
    operable as of August 5th, 2016.
  - Remove the Facebook (XMPP) account option. According to
    https://developers.facebook.com/docs/chat the XMPP Chat API
    service ended April 30th, 2015.
  - Fix gnutls certificate validation errors that mainly
    affected Google.
  + General:
  - Replace instances of d.pidgin.im with developer.pidgin.im and
    update the urls to use https (pidgin.im#17036).
  + IRC:
  - Fix an issue of messages being silently cut off at 500
    characters. Large messages are now split into parts and sent
    one by one (pidgin.im#4753).
- Rebase pidgin-nonblock-common.patch.
- Remove pidgin-sasl-skip-external.patch.
- Remove pidgin-NLD-smiley-theme.tar.bz2, deprecated.
- Remove pidgin-Tango-smiley-theme.tar.bz2, deprecated</changelog>
  <changelog author="tchvatal@suse.com" date="1500724800">- Drop dependency over silc-toolkit-devel as we want to remove
  it from the distribution</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Explicitly require python2</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510056000">- Correct the licence to GPL-2.0.</changelog>
  <changelog author="fezhang@suse.com" date="1511265600">- Add purple-import-empathy Recommends for SLE15 (FATE#322984).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Remove pidgin-crash-missing-gst-registry.patch: is useless now
  and is potentially harmful.
- Merge pidgin-nonblock-common2.patch to
  pidgin-nonblock-common.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Update pidgin-ncurses-6.0-accessors.patch to cope with ncurses
  enabling opaque-panels. Pidgin should not access internal
  structures of ncurses.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520337601">- Drop support for SLE 11 and openSUSE older than 42.x.
- Remove pidgin-gnome-keyring.patch: was only useful for SLE 11.</changelog>
  <changelog author="mgorse@suse.com" date="1520337602">- Add pidgin-2.10.11-purple-remote-python3.patch: port
  purple-remote to python 3 (bsc#1084147).
- Export PYTHON=python3 in %build.
- Adjust scripts to invoke python3, not python2.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 2.13.0:
  + libpurple:
  * Unified string comparison.
  * Properlly shell escape URI's when opening them.
  * Fix a one byte buffer overread in function
    purple_markup_linkify.
  * Fix an issue were utf8 was incorrectly truncated which could
    lead to crashes as we were potentially feeding garbage into
    glib/gtk.
  + libgnt:
  * Partially fix building against curses 6.0 with opaque
    structs set (pidgin.im#16764).
  * Fix a crash when resizing the window (pidgin.im#16680).
  + General:
  * Fix a bashism in autotools (pidgin.im#16836).
  + XMPP:
  * Show XEP-0066 OOB URLs in any message, not just headlines.
  * Fix a user after free (pidgin.im#17200).
  * Remove pipelining from BOSH connections (pidgin.im#17025).
  * Don't try to TLS already secured BOSH connections
    (pidgin.im#17270).
  + IRC:
  * Fix "Registration timeout" on SASL auth with InspIRCd
    servers (and possibly others not based on
    charybdis/ratbox/ircd-seven).
  * Fix issues with plugins that modify outgoing messages (such
    as the custom PART/QUIT feature of the IRC More plugin).
  * Fix IRC buffer handling (pidgin.im#12562).
  * Properly handle AUTHENTICATE as a normal command with server
    prefix.
  * Fix a crash caused by a use after free of the MOTD.
  * Fix an out of bounds read in irc_nick_skip_mode.
  * Fix a write of a single byte before the start of a buffer in
    irc_parse_ctcp.
  + Pidgin:
  * Better support for dark themes (pidgin.im#12572).
  * Fix IPv6 links by not escaping []'s. (pidgin.im#16391).
  * Only write buddy icons to the cache if they're not already
    cached.
  * Rejoin persistent chats after reconnect (pidgin.im#15687).
  * Make the WIN32 Transparency plugin work on all platforms
    (pidgin.im#3124).
  * Ensure search results buttons are labelled.
  * Fix matching unicode emoticons (pidgin.im#17232).
  * Correctly update mute/unmute status when the remote side
    mutes/unmutes us (pidgin.im#17273).
  * Rework the status icon blinking to not use deprecated API
    (pidgin.im#17174).
  * Do not allow adding a buddy to protocols that don't have an
    add_buddy callback.
  + Finch:
  * Fix handling of search results (pidgin.im#17238).
  + Voice &amp; Video:
  * Port backend-fs to newer api for farstream relay-info
    property (pidgin.im#17274).
- Rebase pidgin-ncurses-6.0-accessors.patch.
- Remove pidgin-2.10.11-purple-remote-python3.patch: fixed
  upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Instead of removing the libjabber.so, liboscar.so symlinks, move
  them to the devel package.</changelog>
  <changelog author="fezhang@suse.com" date="1523534400">- Add pidgin-enable-sni-gnutls.patch: Enable SNI for gnutls to
  avoid SSL handshake failure, patch written by Tiago Herrmann
  (therrmann@suse.com) (bsc#1086439, pidgin.im#17300).</changelog>
  <changelog author="dimstar@opensuse.org" date="1523966400">- Drop pkgconfig(NetworkManager) BuildRequires and Requires: this
  legacy symbol is no longer maintained and pidgin is not yet
  ready to move to libnm. As a side-effect, we no longer depend on
  NM for all situations, even if the system were to run wicked.
- Replace --enable-nm configure parameter with --disable-nm.</changelog>
  <changelog author="fezhang@suse.com" date="1571745600">- Add pidgin-Leaky-deprecation-clean-ups.patch: Fix warnings of
  deprecation of GParameter that result in build failures of
  plugins that build with -Werror (pidgin.im#17415).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624536000">- Add pidgin-add-no_proxy-support.patch: add support of no_proxy
  environment variable. (jsc#SLE-17111, pidgin.im#17518)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1652097600">- Add pidgin-CVE-2022-26491.patch: Remove _xmppconnect support
  (bsc#1199025, CVE-2022-26491).</changelog>
</package>
<package pkgid="0b9fd0957486b3142d77313e6e81bf21ef1686d4a6dc844e405fa96df6cc44f4" name="libpurple-tcl" arch="aarch64">
  <version epoch="0" ver="2.13.0" rel="150200.12.6.1"/>
  <changelog author="jengelh@inai.de" date="1469188800">- Drop additional pkgconfig require (already implicitly detected),
  but explicitly buildrequire it for /usr/lib/rpm/pkgconfigdeps.sh.</changelog>
  <changelog author="fezhang@suse.com" date="1479816000">- Add pidgin-sasl-skip-external.patch:
  Backport upstream commit 6106566. Makes Freenode and other
  servers that prefer SASL EXTERNAL fingerprint authentication
  work again (bsc#1009974).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481112000">- Build with GStreamer 1.x on SLE 12 SP2.
- Apply pidgin-use-default-alsa.patch for SLE 12+ only properly.
- Provide libpurple-branding-upstream for SLE 11 as well.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481198400">- Make libpurple require libpurple-branding.
- Correctly remove *.so files for plugins
  (fixes devel-file-in-non-devel-package).
- Rename libpurple-meanwhile to libpurple-plugin-sametime.
- Remove generation of a plugin list to package, simply add it all
  in %files with exclusions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489147200">- Update to version 2.12.0 (FATE#323136):
  + libpurple:
  - Fix an out of bounds memory read in
    purple_markup_unescape_entity (CVE-2017-2640, bsc#1028835).
  - Fix the use of uninitialised memory if running
    non-debug-enabled versions of glib.
  - Update AIM dev and dist ID's to new ones that were assigned
    by AOL.
  - TLS certificate verification now uses SHA-256 checksums.
  - Fix the SASL external auth for Freenode (boo#1009974).
  - Remove the MSN protocol plugin. It has been unusable and
    dormant for some time.
  - Remove the Mxit protocol plugin. The service was closed at
    the end ofSeptember 2016.
  - Remove the MySpaceIM protocol plugin. The service has been
    defunct for a long time (pidgin.im#15356).
  - Remove the Yahoo! protocol plugin. Yahoo has completely
    reimplemented their protocol, so this version is no longer
    operable as of August 5th, 2016.
  - Remove the Facebook (XMPP) account option. According to
    https://developers.facebook.com/docs/chat the XMPP Chat API
    service ended April 30th, 2015.
  - Fix gnutls certificate validation errors that mainly
    affected Google.
  + General:
  - Replace instances of d.pidgin.im with developer.pidgin.im and
    update the urls to use https (pidgin.im#17036).
  + IRC:
  - Fix an issue of messages being silently cut off at 500
    characters. Large messages are now split into parts and sent
    one by one (pidgin.im#4753).
- Rebase pidgin-nonblock-common.patch.
- Remove pidgin-sasl-skip-external.patch.
- Remove pidgin-NLD-smiley-theme.tar.bz2, deprecated.
- Remove pidgin-Tango-smiley-theme.tar.bz2, deprecated</changelog>
  <changelog author="tchvatal@suse.com" date="1500724800">- Drop dependency over silc-toolkit-devel as we want to remove
  it from the distribution</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Explicitly require python2</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510056000">- Correct the licence to GPL-2.0.</changelog>
  <changelog author="fezhang@suse.com" date="1511265600">- Add purple-import-empathy Recommends for SLE15 (FATE#322984).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Remove pidgin-crash-missing-gst-registry.patch: is useless now
  and is potentially harmful.
- Merge pidgin-nonblock-common2.patch to
  pidgin-nonblock-common.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Update pidgin-ncurses-6.0-accessors.patch to cope with ncurses
  enabling opaque-panels. Pidgin should not access internal
  structures of ncurses.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520337601">- Drop support for SLE 11 and openSUSE older than 42.x.
- Remove pidgin-gnome-keyring.patch: was only useful for SLE 11.</changelog>
  <changelog author="mgorse@suse.com" date="1520337602">- Add pidgin-2.10.11-purple-remote-python3.patch: port
  purple-remote to python 3 (bsc#1084147).
- Export PYTHON=python3 in %build.
- Adjust scripts to invoke python3, not python2.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 2.13.0:
  + libpurple:
  * Unified string comparison.
  * Properlly shell escape URI's when opening them.
  * Fix a one byte buffer overread in function
    purple_markup_linkify.
  * Fix an issue were utf8 was incorrectly truncated which could
    lead to crashes as we were potentially feeding garbage into
    glib/gtk.
  + libgnt:
  * Partially fix building against curses 6.0 with opaque
    structs set (pidgin.im#16764).
  * Fix a crash when resizing the window (pidgin.im#16680).
  + General:
  * Fix a bashism in autotools (pidgin.im#16836).
  + XMPP:
  * Show XEP-0066 OOB URLs in any message, not just headlines.
  * Fix a user after free (pidgin.im#17200).
  * Remove pipelining from BOSH connections (pidgin.im#17025).
  * Don't try to TLS already secured BOSH connections
    (pidgin.im#17270).
  + IRC:
  * Fix "Registration timeout" on SASL auth with InspIRCd
    servers (and possibly others not based on
    charybdis/ratbox/ircd-seven).
  * Fix issues with plugins that modify outgoing messages (such
    as the custom PART/QUIT feature of the IRC More plugin).
  * Fix IRC buffer handling (pidgin.im#12562).
  * Properly handle AUTHENTICATE as a normal command with server
    prefix.
  * Fix a crash caused by a use after free of the MOTD.
  * Fix an out of bounds read in irc_nick_skip_mode.
  * Fix a write of a single byte before the start of a buffer in
    irc_parse_ctcp.
  + Pidgin:
  * Better support for dark themes (pidgin.im#12572).
  * Fix IPv6 links by not escaping []'s. (pidgin.im#16391).
  * Only write buddy icons to the cache if they're not already
    cached.
  * Rejoin persistent chats after reconnect (pidgin.im#15687).
  * Make the WIN32 Transparency plugin work on all platforms
    (pidgin.im#3124).
  * Ensure search results buttons are labelled.
  * Fix matching unicode emoticons (pidgin.im#17232).
  * Correctly update mute/unmute status when the remote side
    mutes/unmutes us (pidgin.im#17273).
  * Rework the status icon blinking to not use deprecated API
    (pidgin.im#17174).
  * Do not allow adding a buddy to protocols that don't have an
    add_buddy callback.
  + Finch:
  * Fix handling of search results (pidgin.im#17238).
  + Voice &amp; Video:
  * Port backend-fs to newer api for farstream relay-info
    property (pidgin.im#17274).
- Rebase pidgin-ncurses-6.0-accessors.patch.
- Remove pidgin-2.10.11-purple-remote-python3.patch: fixed
  upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Instead of removing the libjabber.so, liboscar.so symlinks, move
  them to the devel package.</changelog>
  <changelog author="fezhang@suse.com" date="1523534400">- Add pidgin-enable-sni-gnutls.patch: Enable SNI for gnutls to
  avoid SSL handshake failure, patch written by Tiago Herrmann
  (therrmann@suse.com) (bsc#1086439, pidgin.im#17300).</changelog>
  <changelog author="dimstar@opensuse.org" date="1523966400">- Drop pkgconfig(NetworkManager) BuildRequires and Requires: this
  legacy symbol is no longer maintained and pidgin is not yet
  ready to move to libnm. As a side-effect, we no longer depend on
  NM for all situations, even if the system were to run wicked.
- Replace --enable-nm configure parameter with --disable-nm.</changelog>
  <changelog author="fezhang@suse.com" date="1571745600">- Add pidgin-Leaky-deprecation-clean-ups.patch: Fix warnings of
  deprecation of GParameter that result in build failures of
  plugins that build with -Werror (pidgin.im#17415).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624536000">- Add pidgin-add-no_proxy-support.patch: add support of no_proxy
  environment variable. (jsc#SLE-17111, pidgin.im#17518)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1652097600">- Add pidgin-CVE-2022-26491.patch: Remove _xmppconnect support
  (bsc#1199025, CVE-2022-26491).</changelog>
</package>
<package pkgid="d9e0e1a1690fde7ab9f9fca00c2104c88a341f20c0991f346282e42c95059c2e" name="libpurple-tcl" arch="ppc64le">
  <version epoch="0" ver="2.13.0" rel="150200.12.6.1"/>
  <changelog author="jengelh@inai.de" date="1469188800">- Drop additional pkgconfig require (already implicitly detected),
  but explicitly buildrequire it for /usr/lib/rpm/pkgconfigdeps.sh.</changelog>
  <changelog author="fezhang@suse.com" date="1479816000">- Add pidgin-sasl-skip-external.patch:
  Backport upstream commit 6106566. Makes Freenode and other
  servers that prefer SASL EXTERNAL fingerprint authentication
  work again (bsc#1009974).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481112000">- Build with GStreamer 1.x on SLE 12 SP2.
- Apply pidgin-use-default-alsa.patch for SLE 12+ only properly.
- Provide libpurple-branding-upstream for SLE 11 as well.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481198400">- Make libpurple require libpurple-branding.
- Correctly remove *.so files for plugins
  (fixes devel-file-in-non-devel-package).
- Rename libpurple-meanwhile to libpurple-plugin-sametime.
- Remove generation of a plugin list to package, simply add it all
  in %files with exclusions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489147200">- Update to version 2.12.0 (FATE#323136):
  + libpurple:
  - Fix an out of bounds memory read in
    purple_markup_unescape_entity (CVE-2017-2640, bsc#1028835).
  - Fix the use of uninitialised memory if running
    non-debug-enabled versions of glib.
  - Update AIM dev and dist ID's to new ones that were assigned
    by AOL.
  - TLS certificate verification now uses SHA-256 checksums.
  - Fix the SASL external auth for Freenode (boo#1009974).
  - Remove the MSN protocol plugin. It has been unusable and
    dormant for some time.
  - Remove the Mxit protocol plugin. The service was closed at
    the end ofSeptember 2016.
  - Remove the MySpaceIM protocol plugin. The service has been
    defunct for a long time (pidgin.im#15356).
  - Remove the Yahoo! protocol plugin. Yahoo has completely
    reimplemented their protocol, so this version is no longer
    operable as of August 5th, 2016.
  - Remove the Facebook (XMPP) account option. According to
    https://developers.facebook.com/docs/chat the XMPP Chat API
    service ended April 30th, 2015.
  - Fix gnutls certificate validation errors that mainly
    affected Google.
  + General:
  - Replace instances of d.pidgin.im with developer.pidgin.im and
    update the urls to use https (pidgin.im#17036).
  + IRC:
  - Fix an issue of messages being silently cut off at 500
    characters. Large messages are now split into parts and sent
    one by one (pidgin.im#4753).
- Rebase pidgin-nonblock-common.patch.
- Remove pidgin-sasl-skip-external.patch.
- Remove pidgin-NLD-smiley-theme.tar.bz2, deprecated.
- Remove pidgin-Tango-smiley-theme.tar.bz2, deprecated</changelog>
  <changelog author="tchvatal@suse.com" date="1500724800">- Drop dependency over silc-toolkit-devel as we want to remove
  it from the distribution</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Explicitly require python2</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510056000">- Correct the licence to GPL-2.0.</changelog>
  <changelog author="fezhang@suse.com" date="1511265600">- Add purple-import-empathy Recommends for SLE15 (FATE#322984).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Remove pidgin-crash-missing-gst-registry.patch: is useless now
  and is potentially harmful.
- Merge pidgin-nonblock-common2.patch to
  pidgin-nonblock-common.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Update pidgin-ncurses-6.0-accessors.patch to cope with ncurses
  enabling opaque-panels. Pidgin should not access internal
  structures of ncurses.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520337601">- Drop support for SLE 11 and openSUSE older than 42.x.
- Remove pidgin-gnome-keyring.patch: was only useful for SLE 11.</changelog>
  <changelog author="mgorse@suse.com" date="1520337602">- Add pidgin-2.10.11-purple-remote-python3.patch: port
  purple-remote to python 3 (bsc#1084147).
- Export PYTHON=python3 in %build.
- Adjust scripts to invoke python3, not python2.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 2.13.0:
  + libpurple:
  * Unified string comparison.
  * Properlly shell escape URI's when opening them.
  * Fix a one byte buffer overread in function
    purple_markup_linkify.
  * Fix an issue were utf8 was incorrectly truncated which could
    lead to crashes as we were potentially feeding garbage into
    glib/gtk.
  + libgnt:
  * Partially fix building against curses 6.0 with opaque
    structs set (pidgin.im#16764).
  * Fix a crash when resizing the window (pidgin.im#16680).
  + General:
  * Fix a bashism in autotools (pidgin.im#16836).
  + XMPP:
  * Show XEP-0066 OOB URLs in any message, not just headlines.
  * Fix a user after free (pidgin.im#17200).
  * Remove pipelining from BOSH connections (pidgin.im#17025).
  * Don't try to TLS already secured BOSH connections
    (pidgin.im#17270).
  + IRC:
  * Fix "Registration timeout" on SASL auth with InspIRCd
    servers (and possibly others not based on
    charybdis/ratbox/ircd-seven).
  * Fix issues with plugins that modify outgoing messages (such
    as the custom PART/QUIT feature of the IRC More plugin).
  * Fix IRC buffer handling (pidgin.im#12562).
  * Properly handle AUTHENTICATE as a normal command with server
    prefix.
  * Fix a crash caused by a use after free of the MOTD.
  * Fix an out of bounds read in irc_nick_skip_mode.
  * Fix a write of a single byte before the start of a buffer in
    irc_parse_ctcp.
  + Pidgin:
  * Better support for dark themes (pidgin.im#12572).
  * Fix IPv6 links by not escaping []'s. (pidgin.im#16391).
  * Only write buddy icons to the cache if they're not already
    cached.
  * Rejoin persistent chats after reconnect (pidgin.im#15687).
  * Make the WIN32 Transparency plugin work on all platforms
    (pidgin.im#3124).
  * Ensure search results buttons are labelled.
  * Fix matching unicode emoticons (pidgin.im#17232).
  * Correctly update mute/unmute status when the remote side
    mutes/unmutes us (pidgin.im#17273).
  * Rework the status icon blinking to not use deprecated API
    (pidgin.im#17174).
  * Do not allow adding a buddy to protocols that don't have an
    add_buddy callback.
  + Finch:
  * Fix handling of search results (pidgin.im#17238).
  + Voice &amp; Video:
  * Port backend-fs to newer api for farstream relay-info
    property (pidgin.im#17274).
- Rebase pidgin-ncurses-6.0-accessors.patch.
- Remove pidgin-2.10.11-purple-remote-python3.patch: fixed
  upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Instead of removing the libjabber.so, liboscar.so symlinks, move
  them to the devel package.</changelog>
  <changelog author="fezhang@suse.com" date="1523534400">- Add pidgin-enable-sni-gnutls.patch: Enable SNI for gnutls to
  avoid SSL handshake failure, patch written by Tiago Herrmann
  (therrmann@suse.com) (bsc#1086439, pidgin.im#17300).</changelog>
  <changelog author="dimstar@opensuse.org" date="1523966400">- Drop pkgconfig(NetworkManager) BuildRequires and Requires: this
  legacy symbol is no longer maintained and pidgin is not yet
  ready to move to libnm. As a side-effect, we no longer depend on
  NM for all situations, even if the system were to run wicked.
- Replace --enable-nm configure parameter with --disable-nm.</changelog>
  <changelog author="fezhang@suse.com" date="1571745600">- Add pidgin-Leaky-deprecation-clean-ups.patch: Fix warnings of
  deprecation of GParameter that result in build failures of
  plugins that build with -Werror (pidgin.im#17415).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624536000">- Add pidgin-add-no_proxy-support.patch: add support of no_proxy
  environment variable. (jsc#SLE-17111, pidgin.im#17518)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1652097600">- Add pidgin-CVE-2022-26491.patch: Remove _xmppconnect support
  (bsc#1199025, CVE-2022-26491).</changelog>
</package>
<package pkgid="43398e753f2963fe77348a524b94ede6a04af8dba313306a1d1b39655fec309e" name="libpurple-tcl" arch="s390x">
  <version epoch="0" ver="2.13.0" rel="150200.12.6.1"/>
  <changelog author="jengelh@inai.de" date="1469188800">- Drop additional pkgconfig require (already implicitly detected),
  but explicitly buildrequire it for /usr/lib/rpm/pkgconfigdeps.sh.</changelog>
  <changelog author="fezhang@suse.com" date="1479816000">- Add pidgin-sasl-skip-external.patch:
  Backport upstream commit 6106566. Makes Freenode and other
  servers that prefer SASL EXTERNAL fingerprint authentication
  work again (bsc#1009974).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481112000">- Build with GStreamer 1.x on SLE 12 SP2.
- Apply pidgin-use-default-alsa.patch for SLE 12+ only properly.
- Provide libpurple-branding-upstream for SLE 11 as well.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481198400">- Make libpurple require libpurple-branding.
- Correctly remove *.so files for plugins
  (fixes devel-file-in-non-devel-package).
- Rename libpurple-meanwhile to libpurple-plugin-sametime.
- Remove generation of a plugin list to package, simply add it all
  in %files with exclusions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489147200">- Update to version 2.12.0 (FATE#323136):
  + libpurple:
  - Fix an out of bounds memory read in
    purple_markup_unescape_entity (CVE-2017-2640, bsc#1028835).
  - Fix the use of uninitialised memory if running
    non-debug-enabled versions of glib.
  - Update AIM dev and dist ID's to new ones that were assigned
    by AOL.
  - TLS certificate verification now uses SHA-256 checksums.
  - Fix the SASL external auth for Freenode (boo#1009974).
  - Remove the MSN protocol plugin. It has been unusable and
    dormant for some time.
  - Remove the Mxit protocol plugin. The service was closed at
    the end ofSeptember 2016.
  - Remove the MySpaceIM protocol plugin. The service has been
    defunct for a long time (pidgin.im#15356).
  - Remove the Yahoo! protocol plugin. Yahoo has completely
    reimplemented their protocol, so this version is no longer
    operable as of August 5th, 2016.
  - Remove the Facebook (XMPP) account option. According to
    https://developers.facebook.com/docs/chat the XMPP Chat API
    service ended April 30th, 2015.
  - Fix gnutls certificate validation errors that mainly
    affected Google.
  + General:
  - Replace instances of d.pidgin.im with developer.pidgin.im and
    update the urls to use https (pidgin.im#17036).
  + IRC:
  - Fix an issue of messages being silently cut off at 500
    characters. Large messages are now split into parts and sent
    one by one (pidgin.im#4753).
- Rebase pidgin-nonblock-common.patch.
- Remove pidgin-sasl-skip-external.patch.
- Remove pidgin-NLD-smiley-theme.tar.bz2, deprecated.
- Remove pidgin-Tango-smiley-theme.tar.bz2, deprecated</changelog>
  <changelog author="tchvatal@suse.com" date="1500724800">- Drop dependency over silc-toolkit-devel as we want to remove
  it from the distribution</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Explicitly require python2</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510056000">- Correct the licence to GPL-2.0.</changelog>
  <changelog author="fezhang@suse.com" date="1511265600">- Add purple-import-empathy Recommends for SLE15 (FATE#322984).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Remove pidgin-crash-missing-gst-registry.patch: is useless now
  and is potentially harmful.
- Merge pidgin-nonblock-common2.patch to
  pidgin-nonblock-common.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Update pidgin-ncurses-6.0-accessors.patch to cope with ncurses
  enabling opaque-panels. Pidgin should not access internal
  structures of ncurses.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520337601">- Drop support for SLE 11 and openSUSE older than 42.x.
- Remove pidgin-gnome-keyring.patch: was only useful for SLE 11.</changelog>
  <changelog author="mgorse@suse.com" date="1520337602">- Add pidgin-2.10.11-purple-remote-python3.patch: port
  purple-remote to python 3 (bsc#1084147).
- Export PYTHON=python3 in %build.
- Adjust scripts to invoke python3, not python2.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 2.13.0:
  + libpurple:
  * Unified string comparison.
  * Properlly shell escape URI's when opening them.
  * Fix a one byte buffer overread in function
    purple_markup_linkify.
  * Fix an issue were utf8 was incorrectly truncated which could
    lead to crashes as we were potentially feeding garbage into
    glib/gtk.
  + libgnt:
  * Partially fix building against curses 6.0 with opaque
    structs set (pidgin.im#16764).
  * Fix a crash when resizing the window (pidgin.im#16680).
  + General:
  * Fix a bashism in autotools (pidgin.im#16836).
  + XMPP:
  * Show XEP-0066 OOB URLs in any message, not just headlines.
  * Fix a user after free (pidgin.im#17200).
  * Remove pipelining from BOSH connections (pidgin.im#17025).
  * Don't try to TLS already secured BOSH connections
    (pidgin.im#17270).
  + IRC:
  * Fix "Registration timeout" on SASL auth with InspIRCd
    servers (and possibly others not based on
    charybdis/ratbox/ircd-seven).
  * Fix issues with plugins that modify outgoing messages (such
    as the custom PART/QUIT feature of the IRC More plugin).
  * Fix IRC buffer handling (pidgin.im#12562).
  * Properly handle AUTHENTICATE as a normal command with server
    prefix.
  * Fix a crash caused by a use after free of the MOTD.
  * Fix an out of bounds read in irc_nick_skip_mode.
  * Fix a write of a single byte before the start of a buffer in
    irc_parse_ctcp.
  + Pidgin:
  * Better support for dark themes (pidgin.im#12572).
  * Fix IPv6 links by not escaping []'s. (pidgin.im#16391).
  * Only write buddy icons to the cache if they're not already
    cached.
  * Rejoin persistent chats after reconnect (pidgin.im#15687).
  * Make the WIN32 Transparency plugin work on all platforms
    (pidgin.im#3124).
  * Ensure search results buttons are labelled.
  * Fix matching unicode emoticons (pidgin.im#17232).
  * Correctly update mute/unmute status when the remote side
    mutes/unmutes us (pidgin.im#17273).
  * Rework the status icon blinking to not use deprecated API
    (pidgin.im#17174).
  * Do not allow adding a buddy to protocols that don't have an
    add_buddy callback.
  + Finch:
  * Fix handling of search results (pidgin.im#17238).
  + Voice &amp; Video:
  * Port backend-fs to newer api for farstream relay-info
    property (pidgin.im#17274).
- Rebase pidgin-ncurses-6.0-accessors.patch.
- Remove pidgin-2.10.11-purple-remote-python3.patch: fixed
  upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Instead of removing the libjabber.so, liboscar.so symlinks, move
  them to the devel package.</changelog>
  <changelog author="fezhang@suse.com" date="1523534400">- Add pidgin-enable-sni-gnutls.patch: Enable SNI for gnutls to
  avoid SSL handshake failure, patch written by Tiago Herrmann
  (therrmann@suse.com) (bsc#1086439, pidgin.im#17300).</changelog>
  <changelog author="dimstar@opensuse.org" date="1523966400">- Drop pkgconfig(NetworkManager) BuildRequires and Requires: this
  legacy symbol is no longer maintained and pidgin is not yet
  ready to move to libnm. As a side-effect, we no longer depend on
  NM for all situations, even if the system were to run wicked.
- Replace --enable-nm configure parameter with --disable-nm.</changelog>
  <changelog author="fezhang@suse.com" date="1571745600">- Add pidgin-Leaky-deprecation-clean-ups.patch: Fix warnings of
  deprecation of GParameter that result in build failures of
  plugins that build with -Werror (pidgin.im#17415).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624536000">- Add pidgin-add-no_proxy-support.patch: add support of no_proxy
  environment variable. (jsc#SLE-17111, pidgin.im#17518)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1652097600">- Add pidgin-CVE-2022-26491.patch: Remove _xmppconnect support
  (bsc#1199025, CVE-2022-26491).</changelog>
</package>
<package pkgid="5f9a430f25597c308e2119428ec476231cd7b41e4278cc3bdcb37a0f50693856" name="libpurple-tcl" arch="x86_64">
  <version epoch="0" ver="2.13.0" rel="150200.12.6.1"/>
  <changelog author="jengelh@inai.de" date="1469188800">- Drop additional pkgconfig require (already implicitly detected),
  but explicitly buildrequire it for /usr/lib/rpm/pkgconfigdeps.sh.</changelog>
  <changelog author="fezhang@suse.com" date="1479816000">- Add pidgin-sasl-skip-external.patch:
  Backport upstream commit 6106566. Makes Freenode and other
  servers that prefer SASL EXTERNAL fingerprint authentication
  work again (bsc#1009974).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481112000">- Build with GStreamer 1.x on SLE 12 SP2.
- Apply pidgin-use-default-alsa.patch for SLE 12+ only properly.
- Provide libpurple-branding-upstream for SLE 11 as well.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1481198400">- Make libpurple require libpurple-branding.
- Correctly remove *.so files for plugins
  (fixes devel-file-in-non-devel-package).
- Rename libpurple-meanwhile to libpurple-plugin-sametime.
- Remove generation of a plugin list to package, simply add it all
  in %files with exclusions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489147200">- Update to version 2.12.0 (FATE#323136):
  + libpurple:
  - Fix an out of bounds memory read in
    purple_markup_unescape_entity (CVE-2017-2640, bsc#1028835).
  - Fix the use of uninitialised memory if running
    non-debug-enabled versions of glib.
  - Update AIM dev and dist ID's to new ones that were assigned
    by AOL.
  - TLS certificate verification now uses SHA-256 checksums.
  - Fix the SASL external auth for Freenode (boo#1009974).
  - Remove the MSN protocol plugin. It has been unusable and
    dormant for some time.
  - Remove the Mxit protocol plugin. The service was closed at
    the end ofSeptember 2016.
  - Remove the MySpaceIM protocol plugin. The service has been
    defunct for a long time (pidgin.im#15356).
  - Remove the Yahoo! protocol plugin. Yahoo has completely
    reimplemented their protocol, so this version is no longer
    operable as of August 5th, 2016.
  - Remove the Facebook (XMPP) account option. According to
    https://developers.facebook.com/docs/chat the XMPP Chat API
    service ended April 30th, 2015.
  - Fix gnutls certificate validation errors that mainly
    affected Google.
  + General:
  - Replace instances of d.pidgin.im with developer.pidgin.im and
    update the urls to use https (pidgin.im#17036).
  + IRC:
  - Fix an issue of messages being silently cut off at 500
    characters. Large messages are now split into parts and sent
    one by one (pidgin.im#4753).
- Rebase pidgin-nonblock-common.patch.
- Remove pidgin-sasl-skip-external.patch.
- Remove pidgin-NLD-smiley-theme.tar.bz2, deprecated.
- Remove pidgin-Tango-smiley-theme.tar.bz2, deprecated</changelog>
  <changelog author="tchvatal@suse.com" date="1500724800">- Drop dependency over silc-toolkit-devel as we want to remove
  it from the distribution</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Explicitly require python2</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510056000">- Correct the licence to GPL-2.0.</changelog>
  <changelog author="fezhang@suse.com" date="1511265600">- Add purple-import-empathy Recommends for SLE15 (FATE#322984).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Remove pidgin-crash-missing-gst-registry.patch: is useless now
  and is potentially harmful.
- Merge pidgin-nonblock-common2.patch to
  pidgin-nonblock-common.patch.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520337600">- Update pidgin-ncurses-6.0-accessors.patch to cope with ncurses
  enabling opaque-panels. Pidgin should not access internal
  structures of ncurses.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520337601">- Drop support for SLE 11 and openSUSE older than 42.x.
- Remove pidgin-gnome-keyring.patch: was only useful for SLE 11.</changelog>
  <changelog author="mgorse@suse.com" date="1520337602">- Add pidgin-2.10.11-purple-remote-python3.patch: port
  purple-remote to python 3 (bsc#1084147).
- Export PYTHON=python3 in %build.
- Adjust scripts to invoke python3, not python2.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 2.13.0:
  + libpurple:
  * Unified string comparison.
  * Properlly shell escape URI's when opening them.
  * Fix a one byte buffer overread in function
    purple_markup_linkify.
  * Fix an issue were utf8 was incorrectly truncated which could
    lead to crashes as we were potentially feeding garbage into
    glib/gtk.
  + libgnt:
  * Partially fix building against curses 6.0 with opaque
    structs set (pidgin.im#16764).
  * Fix a crash when resizing the window (pidgin.im#16680).
  + General:
  * Fix a bashism in autotools (pidgin.im#16836).
  + XMPP:
  * Show XEP-0066 OOB URLs in any message, not just headlines.
  * Fix a user after free (pidgin.im#17200).
  * Remove pipelining from BOSH connections (pidgin.im#17025).
  * Don't try to TLS already secured BOSH connections
    (pidgin.im#17270).
  + IRC:
  * Fix "Registration timeout" on SASL auth with InspIRCd
    servers (and possibly others not based on
    charybdis/ratbox/ircd-seven).
  * Fix issues with plugins that modify outgoing messages (such
    as the custom PART/QUIT feature of the IRC More plugin).
  * Fix IRC buffer handling (pidgin.im#12562).
  * Properly handle AUTHENTICATE as a normal command with server
    prefix.
  * Fix a crash caused by a use after free of the MOTD.
  * Fix an out of bounds read in irc_nick_skip_mode.
  * Fix a write of a single byte before the start of a buffer in
    irc_parse_ctcp.
  + Pidgin:
  * Better support for dark themes (pidgin.im#12572).
  * Fix IPv6 links by not escaping []'s. (pidgin.im#16391).
  * Only write buddy icons to the cache if they're not already
    cached.
  * Rejoin persistent chats after reconnect (pidgin.im#15687).
  * Make the WIN32 Transparency plugin work on all platforms
    (pidgin.im#3124).
  * Ensure search results buttons are labelled.
  * Fix matching unicode emoticons (pidgin.im#17232).
  * Correctly update mute/unmute status when the remote side
    mutes/unmutes us (pidgin.im#17273).
  * Rework the status icon blinking to not use deprecated API
    (pidgin.im#17174).
  * Do not allow adding a buddy to protocols that don't have an
    add_buddy callback.
  + Finch:
  * Fix handling of search results (pidgin.im#17238).
  + Voice &amp; Video:
  * Port backend-fs to newer api for farstream relay-info
    property (pidgin.im#17274).
- Rebase pidgin-ncurses-6.0-accessors.patch.
- Remove pidgin-2.10.11-purple-remote-python3.patch: fixed
  upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521115200">- Instead of removing the libjabber.so, liboscar.so symlinks, move
  them to the devel package.</changelog>
  <changelog author="fezhang@suse.com" date="1523534400">- Add pidgin-enable-sni-gnutls.patch: Enable SNI for gnutls to
  avoid SSL handshake failure, patch written by Tiago Herrmann
  (therrmann@suse.com) (bsc#1086439, pidgin.im#17300).</changelog>
  <changelog author="dimstar@opensuse.org" date="1523966400">- Drop pkgconfig(NetworkManager) BuildRequires and Requires: this
  legacy symbol is no longer maintained and pidgin is not yet
  ready to move to libnm. As a side-effect, we no longer depend on
  NM for all situations, even if the system were to run wicked.
- Replace --enable-nm configure parameter with --disable-nm.</changelog>
  <changelog author="fezhang@suse.com" date="1571745600">- Add pidgin-Leaky-deprecation-clean-ups.patch: Fix warnings of
  deprecation of GParameter that result in build failures of
  plugins that build with -Werror (pidgin.im#17415).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1624536000">- Add pidgin-add-no_proxy-support.patch: add support of no_proxy
  environment variable. (jsc#SLE-17111, pidgin.im#17518)</changelog>
  <changelog author="songchuan.kang@suse.com" date="1652097600">- Add pidgin-CVE-2022-26491.patch: Remove _xmppconnect support
  (bsc#1199025, CVE-2022-26491).</changelog>
</package>
<package pkgid="8feaf4aaee44a584ae5bfb4b5b07d3cd6b15fbf47b6bfd621497ac13d02c3eb7" name="libpython3_9-1_0" arch="aarch64">
  <version epoch="0" ver="3.9.10" rel="150300.4.8.1"/>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
  <changelog author="mcepl@suse.com" date="1620216000">- Update to 3.9.5:
  * Security
  - bpo-43434: Creating a sqlite3.Connection object now also
    produces a sqlite3.connect auditing event. Previously this
    event was only produced by sqlite3.connect() calls. Patch
    by Erlend E. Aasland.
  - bpo-43882: The presence of newline or tab characters in
    parts of a URL could allow some forms of attacks.
  - Following the controlling specification for URLs defined by
    WHATWG urllib.parse() now removes ASCII newlines and tabs
    from URLs, preventing such attacks.
  - bpo-43472: Ensures interpreter-level audit hooks receive
    the cpython.PyInterpreterState_New event when called
    through the _xxsubinterpreters module.
  - bpo-36384 (bsc#1185706, CVE-2021-29921): ipaddress module
    no longer accepts any leading zeros in IPv4 address
    strings. Leading zeros are ambiguous and interpreted as
    octal notation by some libraries. For example the legacy
    function socket.inet_aton() treats leading zeros as octal
    notatation. glibc implementation of modern inet_pton() does
    not accept any leading zeros. For a while the ipaddress
    module used to accept ambiguous leading zeros.
  - bpo-43075 (CVE-2021-3733, bsc#1189287): Fix Regular
    Expression Denial of Service (ReDoS) vulnerability in
    urllib.request.AbstractBasicAuthHandler. The
    ReDoS-vulnerable regex has quadratic worst-case complexity
    and it allows cause a denial of service when identifying
    crafted invalid RFCs. This ReDoS issue is on the client
    side and needs remote attackers to control the HTTP server.
  - bpo-42800: Audit hooks are now fired for frame.f_code,
    traceback.tb_frame, and generator code/frame attribute
    access.
  * Core and Builtins
  - bpo-43105: Importlib now resolves relative paths when
    creating module spec objects from file locations.
  - bpo-42924: Fix bytearray repetition incorrectly copying
    data from the start of the buffer, even if the data is
    offset within the buffer (e.g. after reassigning a slice at
    the start of the bytearray to a shorter byte string).
  * Library
  - bpo-43993: Update bundled pip to 21.1.1.
  - bpo-43937: Fixed the turtle module working with non-default
    root window.
  - bpo-43930: Update bundled pip to 21.1 and setuptools to
    56.0.0
  - bpo-43920: OpenSSL 3.0.0: load_verify_locations() now
    returns a consistent error message when cadata contains no
    valid certificate.
  - bpo-43607: urllib can now convert Windows paths with \\?\
    prefixes into URL paths.
  - bpo-43284: platform.win32_ver derives the windows version
    from sys.getwindowsversion().platform_version which in turn
    derives the version from kernel32.dll (which can be of
    a different version than Windows itself). Therefore change
    the platform.win32_ver to determine the version using the
    platform module?s _syscmd_ver private function to return an
    accurate version.
  - bpo-42248: [Enum] ensure exceptions raised in _missing__
    are released
  - bpo-43799: OpenSSL 3.0.0: define OPENSSL_API_COMPAT 1.1.1
    to suppress deprecation warnings. Python requires OpenSSL
    1.1.1 APIs.
  - bpo-43794: Add ssl.OP_IGNORE_UNEXPECTED_EOF constants
    (OpenSSL 3.0.0)
  - bpo-43789: OpenSSL 3.0.0: Don?t call the password callback
    function a second time when first call has signaled an
    error condition.
  - bpo-43788: The header files for ssl error codes are now
    OpenSSL version-specific. Exceptions will now show correct
    reason and library codes. The make_ssl_data.py script has
    been rewritten to use OpenSSL?s text file with error codes.
  - bpo-43655: tkinter dialog windows are now recognized as
    dialogs by window managers on macOS and X Window.
  - bpo-43534: turtle.textinput() and turtle.numinput() create
    now a transient window working on behalf of the canvas
    window.
  - bpo-43522: Fix problem with hostname_checks_common_name.
    OpenSSL does not copy hostflags from struct SSL_CTX to
    struct SSL.
  - bpo-42967: Allow bytes separator argument in
    urllib.parse.parse_qs and urllib.parse.parse_qsl when
    parsing str query strings. Previously, this raised
    a TypeError.
  - bpo-43176: Fixed processing of a dataclass that inherits
    from a frozen dataclass with no fields. It is now correctly
    detected as an error.
  - bpo-41735: Fix thread locks in zlib module may go wrong in
    rare case. Patch by Ma Lin.
  - bpo-36470: Fix dataclasses with InitVars and replace().
    Patch by Claudiu Popa.
  - bpo-32745: Fix a regression in the handling of ctypes?
    ctypes.c_wchar_p type: embedded null characters would cause
    a ValueError to be raised. Patch by Zackery Spytz.
  * Documentation
  - bpo-43959: The documentation on the PyContextVar C-API was
    clarified.
  - bpo-43938: Update dataclasses documentation to express that
    FrozenInstanceError is derived from AttributeError.
  - bpo-43755: Update documentation to reflect that
    unparenthesized lambda expressions can no longer be the
    expression part in an if clause in comprehensions and
    generator expressions since Python 3.9.
  - bpo-43739: Fixing the example code in
    Doc/extending/extending.rst to declare and initialize the
    pmodule variable to be of the right type.
  * Tests
  - bpo-43961: Fix
    test_logging.test_namer_rotator_inheritance() on Windows:
    use os.replace() rather than os.rename(). Patch by Victor
    Stinner.
  - bpo-43842: Fix a race condition in the SMTP test of
    test_logging. Don?t close a file descriptor (socket) from
    a different thread while asyncore.loop() is polling the
    file descriptor. Patch by Victor Stinner.
  - bpo-43811: Tests multiple OpenSSL versions on GitHub
    Actions. Use ccache to speed up testing.
  - bpo-43791: OpenSSL 3.0.0: Disable testing of legacy
    protocols TLS 1.0 and 1.1. Tests are failing with
    TLSV1_ALERT_INTERNAL_ERROR.
- Refreshed patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - python-3.3.0b1-fix_date_time_compiler.patch
- Add vendorized files from bluez-devel to enable building support for
  Bluetooth.</changelog>
  <changelog author="mcepl@suse.com" date="1621598400">- Stop providing "python" symbol (bsc#1185588), which means
  python2 currently.</changelog>
  <changelog author="dcermak@suse.com" date="1622635200">- Exclude test_capi on Leap (test fails there)</changelog>
  <changelog author="dmueller@suse.com" date="1622808000">- allow build with Sphinx &gt;= 3.x</changelog>
  <changelog author="mcepl@suse.com" date="1622894400">- Revert previous skip over test_capi
- Add skip-test_pyobject_freed_is_freed.patch to skip failing
  test on SLE-15.</changelog>
  <changelog author="mcepl@suse.com" date="1624104000">- Add bpo44426-complex-keyword-sphinx.patch allowing generating
  documentation with Sphinx 4 (bpo#44426).</changelog>
  <changelog author="mcepl@suse.com" date="1627905600">- Use versioned python-Sphinx to avoid dependency on other
  version of Python (bsc#1183858).</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1628510400">- Update to 3.9.6:
  * Security
  - bpo-44022 (bsc#1189241, CVE-2021-3737): http.client now
    avoids infinitely reading potential HTTP headers after
    a 100 Continue status response from the server.
  * Core and Builtins
  - bpo-44168: Fix error message in the parser involving keyword
    arguments with invalid expressions. Patch by Pablo Galindo
  - bpo-44114: Fix incorrect dictkeys_reversed and
    dictitems_reversed function signatures in C code, which broke
    webassembly builds.
  - bpo-44070: No longer eagerly makes import filenames absolute,
    except for extension modules, which was introduced in 3.9.5.
  - bpo-28146: Fix a confusing error message in str.format().
  - bpo-11105: When compiling ast.AST objects with recursive
    references through compile(), the interpreter doesn?t crash
    anymore instead it raises a RecursionError.
  * Library
  - bpo-43972: When http.server.SimpleHTTPRequestHandler sends a
    301 (Moved Permanently) for a directory path not ending with
    /, add a Content-Length: 0 header. This improves the behavior
    for certain clients.
  - bpo-43776: When subprocess.Popen args are provided as a
    string or as pathlib.Path, the Popen instance repr now shows
    the right thing.
  - bpo-43318: Fix a bug where pdb does not always echo cleared
    breakpoints.
  - bpo-43295: datetime.datetime.strptime() now raises ValueError
    instead of IndexError when matching 'z' with the %z format
    specifier.
  - bpo-37022: pdb now displays exceptions from repr() with its p
    and pp commands.
  * IDLE
  - bpo-33962: Move the indent space setting from the Font tab to
    the new Windows tab. Patch by Mark Roseman and Terry Jan
    Reedy.
  - bpo-40468: Split the settings dialog General tab into Windows
    and Shell/ED tabs. Move help sources, which extend the Help
    menu, to the Extensions tab. Make space for new options and
    shorten the dialog. The latter makes the dialog better fit
    small screens.
  - bpo-41611: Avoid uncaught exceptions in
    AutoCompleteWindow.winconfig_event().
  - bpo-41611: Fix IDLE sometimes freezing upon tab-completion on
    macOS.
  * Tools/Demos
  - bpo-44074: Make patchcheck automatically detect the correct
    base branch name (previously it was hardcoded to ?master?)
- Upstreamed patches were removed:
  - bpo44426-complex-keyword-sphinx.patch
- Refreshed patches:
  - subprocess-raise-timeout.patch</changelog>
  <changelog author="schwab@suse.de" date="1629979200">- test_faulthandler is still problematic under qemu linux-user emulation,
  disable it there
- Reenable profileopt with qemu emulation, test_faulthandler is no longer
  run during profiling</changelog>
  <changelog author="mcepl@suse.com" date="1630065600">- Add decimal.patch to add building with --with-system-libmpdec
  option (bsc#1189356).</changelog>
  <changelog author="mcepl@suse.com" date="1630411200">- Update to 3.9.7:
  - Security
  - Replaced usage of tempfile.mktemp() with TemporaryDirectory
    to avoid a potential race condition.
  - Add auditing events to the marshal module, and stop raising
    code.__init__ events for every unmarshalled code object.
    Directly instantiated code objects will continue to raise
    an event, and audit event handlers should inspect or
    collect the raw marshal data. This reduces a significant
    performance overhead when loading from .pyc files.
  - Made the internal putcmd function in smtplib sanitize input
    for presence of \r and \n characters to avoid (unlikely)
    command injection.
  - Core and Builtins
  - Fixed pickling of range iterators that iterated for over
    2**32 times.
  - Fix a race in WeakKeyDictionary, WeakValueDictionary and
    WeakSet when two threads attempt to commit the last pending
    removal. This fixes asyncio.create_task and fixes a data
    loss in asyncio.run where shutdown_asyncgens is not run
  - Fixed a corner case bug where the result of
    float.fromhex('0x.8p-1074') was rounded the wrong way.
  - Refine the syntax error for trailing commas in import
    statements. Patch by Pablo Galindo.
  - Restore behaviour of complex exponentiation with
    integer-valued exponent of type float or complex.
  - Correct the ast locations of f-strings with format specs
    and repeated expressions. Patch by Pablo Galindo
  - Use new trashcan macros (Py_TRASHCAN_BEGIN/END) in
    frameobject.c instead of the old ones
    (Py_TRASHCAN_SAFE_BEGIN/END).
  - Fix segmentation fault with deep recursion when cleaning
    method objects. Patch by Augusto Goulart and Pablo Galindo.
  - Fix bug where PyErr_SetObject hangs when the current
    exception has a cycle in its context chain.
  - Fix reference leaks in the error paths of update_bases()
    and __build_class__. Patch by Pablo Galindo.
  - Fix undefined behaviour in complex object exponentiation.
  - Remove uses of PyObject_GC_Del() in error path when
    initializing types.GenericAlias.
  - Remove the pass-through for hash() of weakref.proxy objects
    to prevent unintended consequences when the original
    referred object dies while the proxy is part of a hashable
    object. Patch by Pablo Galindo.
  - Fix ltrace functionality when exceptions are raised. Patch
    by Pablo Galindo
  - Fix a crash at Python exit when a deallocator function
    removes the last strong reference to a heap type. Patch by
    Victor Stinner.
  - Fix crash when using passing a non-exception to
    a generator?s throw() method. Patch by Noah Oxer
  - Library
  - run() now always return a TestResult instance. Previously
    it returned None if the test class or method was decorated
    with a skipping decorator.
  - Fix bugs in cleaning up classes and modules in unittest:
  - Functions registered with addModuleCleanup() were not
    called unless the user defines tearDownModule() in
    their test module.
  - Functions registered with addClassCleanup() were not
    called if tearDownClass is set to None.
  - Buffering in TestResult did not work with functions
    registered with addClassCleanup() and
    addModuleCleanup().
  - Errors in functions registered with addClassCleanup()
    and addModuleCleanup() were not handled correctly in
    buffered and debug modes.
  - Errors in setUpModule() and functions registered with
    addModuleCleanup() were reported in wrong order.
  - And several lesser bugs.
  - Made email date parsing more robust against malformed
    input, namely a whitespace-only Date: header. Patch by
    Wouter Bolsterlee.
  - Fix a crash in the signal handler of the faulthandler
    module: no longer modify the reference count of frame
    objects. Patch by Victor Stinner.
  - Method stopTestRun() is now always called in pair with
    method startTestRun() for TestResult objects implicitly
    created in run(). Previously it was not called for test
    methods and classes decorated with a skipping decorator.
  - argparse.BooleanOptionalAction?s default value is no longer
    printed twice when used with
    argparse.ArgumentDefaultsHelpFormatter.
  - Upgrade bundled pip to 21.2.3 and setuptools to 57.4.0
  - Fix the os.set_inheritable() function on FreeBSD 14 for
    file descriptor opened with the O_PATH flag: ignore the
    EBADF error on ioctl(), fallback on the fcntl()
    implementation. Patch by Victor Stinner.
  - The @functools.total_ordering() decorator now works with
    metaclasses.
  - sqlite3 user-defined functions and aggregators returning
    strings with embedded NUL characters are no longer
    truncated. Patch by Erlend E. Aasland.
  - Always show loop= arg deprecations in asyncio.gather() and
    asyncio.sleep()
  - Non-protocol subclasses of typing.Protocol ignore now the
    __init__ method inherited from protocol base classes.
  - The tokenize.tokenize() doesn?t incorrectly generate
    a NEWLINE token if the source doesn?t end with a new line
    character but the last line is a comment, as the function
    is already generating a NL token. Patch by Pablo Galindo
  - Fix http.client.HTTPSConnection fails to download &gt;2GiB
    data.
  - rcompleter does not call getattr() on property objects to
    avoid the side-effect of evaluating the corresponding
    method.
  - weakref.proxy objects referencing non-iterators now raise
    TypeError rather than dereferencing the null tp_iternext
    slot and crashing.
  - The implementation of collections.abc.Set._hash() now
    matches that of frozenset.__hash__().
  - Fixed issue in compileall.compile_file() when sys.stdout is
    redirected. Patch by Stefan Hölzl.
  - Give priority to using the current class constructor in
    inspect.signature(). Patch by Weipeng Hong.
  - Fix memory leak in _tkinter._flatten() if it is called with
    a sequence or set, but not list or tuple.
  - Update shutil.copyfile() to raise FileNotFoundError instead
    of confusing IsADirectoryError when a path ending with
    a os.path.sep does not exist; shutil.copy() and
    shutil.copy2() are also affected.
  - handle StopIteration subclass raised from
    @contextlib.contextmanager generator
  - Make the implementation consistency of indexOf() between
    C and Python versions. Patch by Dong-hee Na.
  - Fixes TypedDict to work with typing.get_type_hints() and
    postponed evaluation of annotations across modules.
  - Fix bug with pdb?s handling of import error due to
    a package which does not have a __main__ module
  - Fixed an exception thrown while parsing a malformed
    multipart email by email.message.EmailMessage.
  - pathlib.PureWindowsPath.is_reserved() now identifies
    a greater range of reserved filenames, including those with
    trailing spaces or colons.
  - Handle exceptions from parsing the arg of pdb?s run/restart
    command.
  - The sqlite3 context manager now performs a rollback (thus
    releasing the database lock) if commit failed. Patch by
    Luca Citi and Erlend E. Aasland.
  - Improved string handling for sqlite3 user-defined functions
    and aggregates:
  - It is now possible to pass strings with embedded null
    characters to UDFs
  - Conversion failures now correctly raise MemoryError
  - Patch by Erlend E. Aasland.
  - Handle RecursionError in TracebackException?s constructor,
    so that long exceptions chains are truncated instead of
    causing traceback formatting to fail.
  - Fix email.message.EmailMessage.set_content() when called
    with binary data and 7bit content transfer encoding.
  - The compresslevel and preset keyword arguments of
    tarfile.open() are now both documented and tested.
  - Fixed a Y2k38 bug in the compileall module where it would
    fail to compile files with a modification time after the
    year 2038.
  - Fix test___all__ on platforms lacking a shared memory
    implementation.
  - Pass multiprocessing BaseProxy argument manager_owned
    through AutoProxy.
  - email.utils.getaddresses() now accepts email.header.Header
    objects along with string values. Patch by Zackery Spytz.
  - lib2to3 now recognizes async generators everywhere.
  - Fix TypeError when required subparsers without dest do not
    receive arguments. Patch by Anthony Sottile.
  - Documentation
  - Removed the othergui.rst file, any references to it, and
    the list of GUI frameworks in the FAQ. In their place I?ve
    added links to the Python Wiki page on GUI frameworks.
  - Update the definition of __future__ in the glossary by
    replacing the confusing word ?pseudo-module? with a more
    accurate description.
  - Add typical examples to os.path.splitext docs
  - Clarify that shutil.make_archive() is not thread-safe due
    to reliance on changing the current working directory.
  - Update of three expired hyperlinks in
    Doc/distributing/index.rst: ?Project structure?, ?Building
    and packaging the project?, and ?Uploading the project to
    the Python Packaging Index?.
  - Updated the docstring and docs of filecmp.cmp() to be more
    accurate and less confusing especially in respect to
    shallow arg.
  - Match the docstring and python implementation of countOf()
    to the behavior of its c implementation.
  - List all kwargs for textwrap.wrap(), textwrap.fill(), and
    textwrap.shorten(). Now, there are nav links to attributes
    of TextWrap, which makes navigation much easier while
    minimizing duplication in the documentation.
  - Clarify that atexit uses equality comparisons internally.
  - Documentation of csv.Dialect is more descriptive.
  - Fix documentation for the return type of
    sysconfig.get_path().
  - Add a ?Security Considerations? index which links to
    standard library modules that have explicitly documented
    security considerations.
  - Remove the unqualified claim that tkinter is threadsafe. It
    has not been true for several years and likely never was.
    An explanation of what is true may be added later, after
    more discussion, and possibly after patching _tkinter.c,
  - Tests
  - Add calls of gc.collect() in tests to support PyPy.
  - Made tests relying on the _asyncio C extension module
    optional to allow running on alternative Python
    implementations. Patch by Serhiy Storchaka.
  - Fix auto history tests of test_readline: sometimes, the
    newline character is not written at the end, so don?t
    expect it in the output.
  - Add ability to wholesale silence DeprecationWarnings while
    running the regression test suite.
  - Notify users running test_decimal regression tests on macOS
    of potential harmless ?malloc can?t allocate region?
    messages spewed by test_decimal.
  - Fixed floating point precision issue in turtle tests.
  - Regression tests, when run with -w, are now re-running only
    the affected test methods instead of re-running the entire
    test file.
  - Add test for nested queues when using multiprocessing
    shared objects AutoProxy[Queue] inside ListProxy and
    DictProxy</changelog>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635595200">- Add incorrect-deprecation-warn-asyncio.patch to fix bpo#45097
  (from gh#python/cpython#28153) to remove incorrect deprecation
  warnings in asyncio.</changelog>
  <changelog author="mcepl@suse.com" date="1636200000">- rpm-build-python dependency is available on the current
  Factory, not with SLE.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637150400">- Update to 3.9.9:
  * Core and Builtins
    + bpo-30570: Fixed a crash in issubclass() from infinite recursion when searching pathological __bases__ tuples.
    + bpo-45494: Fix parser crash when reporting errors involving invalid continuation characters. Patch by Pablo Galindo.
    + bpo-45385: Fix reference leak from descr_check. Patch by Dong-hee Na.
    + bpo-45167: Fix deepcopying of types.GenericAlias objects.
    + bpo-44219: Release the GIL while performing isatty system calls on arbitrary file descriptors. In particular, this affects os.isatty(), os.device_encoding() and io.TextIOWrapper. By extension, io.open() in text mode is also affected. This change solves a deadlock in os.isatty(). Patch by Vincent Michel in bpo-44219.
    + bpo-44959: Added fallback to extension modules with ?.sl? suffix on HP-UX
    + bpo-44050: Extensions that indicate they use global state (by setting m_size to -1) can again be used in multiple interpreters. This reverts to behavior of Python 3.8.
    + bpo-45121: Fix issue where Protocol.__init__ raises RecursionError when it?s called directly or via super(). Patch provided by Yurii Karabas.
    + bpo-45083: When the interpreter renders an exception, its name now has a complete qualname. Previously only the class name was concatenated to the module name, which sometimes resulted in an incorrect full name being displayed.
    + bpo-45738: Fix computation of error location for invalid continuation characters in the parser. Patch by Pablo Galindo.
    + Library
    + bpo-45678: Fix bug in Python 3.9 that meant functools.singledispatchmethod failed to properly wrap the attributes of the target method. Patch by Alex Waygood.
    + bpo-45679: Fix caching of multi-value typing.Literal. Literal[True, 2] is no longer equal to Literal[1, 2].
    + bpo-45438: Fix typing.Signature string representation for generic builtin types.
    + bpo-45581: sqlite3.connect() now correctly raises MemoryError if the underlying SQLite API signals memory error. Patch by Erlend E. Aasland.
    + bpo-39679: Fix bug in functools.singledispatchmethod that caused it to fail when attempting to register a classmethod() or staticmethod() using type annotations. Patch contributed by Alex Waygood.
    + bpo-45515: Add references to zoneinfo in the datetime documentation, mostly replacing outdated references to dateutil.tz. Change by Paul Ganssle.
    + bpo-45467: Fix incremental decoder and stream reader in the ?raw-unicode-escape? codec. Previously they failed if the escape sequence was split.
    + bpo-45461: Fix incremental decoder and stream reader in the ?unicode-escape? codec. Previously they failed if the escape sequence was split.
    + bpo-45239: Fixed email.utils.parsedate_tz() crashing with UnboundLocalError on certain invalid input instead of returning None. Patch by Ben Hoyt.
    + bpo-44904: Fix bug in the doctest module that caused it to fail if a docstring included an example with a classmethod property. Patch by Alex Waygood.
    + bpo-45406: Make inspect.getmodule() catch FileNotFoundError raised by :?func:inspect.getabsfile, and return None to indicate that the module could not be determined.
    + bpo-45262: Prevent use-after-free in asyncio. Make sure the cached running loop holder gets cleared on dealloc to prevent use-after-free in get_running_loop
    + bpo-45386: Make xmlrpc.client more robust to C runtimes where the underlying C strftime function results in a ValueError when testing for year formatting options.
    + bpo-45371: Fix clang rpath issue in distutils. The UnixCCompiler now uses correct clang option to add a runtime library directory (rpath) to a shared library.
    + bpo-20028: Improve error message of csv.Dialect when initializing. Patch by Vajrasky Kok and Dong-hee Na.
    + bpo-45343: Update bundled pip to 21.2.4 and setuptools to 58.1.0
    + bpo-41710: On Unix, if the sem_clockwait() function is available in the C library (glibc 2.30 and newer), the threading.Lock.acquire() method now uses the monotonic clock (time.CLOCK_MONOTONIC) for the timeout, rather than using the system clock (time.CLOCK_REALTIME), to not be affected by system clock changes. Patch by Victor Stinner.
    + bpo-45328: Fixed http.client.HTTPConnection to work properly in OSs that don?t support the TCP_NODELAY socket option.
    + bpo-1596321: Fix the threading._shutdown() function when the threading module was imported first from a thread different than the main thread: no longer log an error at Python exit.
    + bpo-45274: Fix a race condition in the Thread.join() method of the threading module. If the function is interrupted by a signal and the signal handler raises an exception, make sure that the thread remains in a consistent state to prevent a deadlock. Patch by Victor Stinner.
    + bpo-45238: Fix unittest.IsolatedAsyncioTestCase.debug(): it runs now asynchronous methods and callbacks.
    + bpo-36674: unittest.TestCase.debug() raises now a unittest.SkipTest if the class or the test method are decorated with the skipping decorator.
    + bpo-45235: Fix an issue where argparse would not preserve values in a provided namespace when using a subparser with defaults.
    + bpo-45234: Fixed a regression in copyfile(), copy(), copy2() raising FileNotFoundError when source is a directory, which should raise IsADirectoryError
    + bpo-45228: Fix stack buffer overflow in parsing J1939 network address.
    + bpo-45192: Fix the tempfile._infer_return_type function so that the dir argument of the tempfile functions accepts an object implementing the os.PathLike protocol.
    + bpo-45160: When tracing a tkinter variable used by a ttk OptionMenu, callbacks are no longer made twice.
    + bpo-35474: Calling mimetypes.guess_all_extensions() with strict=False no longer affects the result of the following call with strict=True. Also, mutating the returned list no longer affects the global state.
    + bpo-45166: typing.get_type_hints() now works with Final wrapped in ForwardRef.
    + bpo-45097: Remove deprecation warnings about the loop argument in asyncio incorrectly emitted in cases when the user does not pass the loop argument.
    + bpo-45081: Fix issue when dataclasses that inherit from typing.Protocol subclasses have wrong __init__. Patch provided by Yurii Karabas.
    + bpo-24444: Fixed an error raised in argparse help display when help for an option is set to 1+ blank spaces or when choices arg is an empty container.
    + bpo-45021: Fix a potential deadlock at shutdown of forked children when using concurrent.futures module
    + bpo-45030: Fix integer overflow in pickling and copying the range iterator.
    + bpo-39039: tarfile.open raises ReadError when a zlib error occurs during file extraction.
    + bpo-44594: Fix an edge case of ExitStack and AsyncExitStack exception chaining. They will now match with block behavior when __context__ is explicitly set to None when the exception is in flight.
  * Documentation
    + bpo-45726: Improve documentation for functools.singledispatch() and functools.singledispatchmethod.
    + bpo-45680: Amend the docs on GenericAlias objects to clarify that non-container classes can also implement __class_getitem__. Patch contributed by Alex Waygood.
    + bpo-45655: Add a new ?relevant PEPs? section to the top of the documentation for the typing module. Patch by Alex Waygood.
    + bpo-45604: Add level argument to multiprocessing.log_to_stderr function docs.
    + bpo-45464: Mention in the documentation of Built-in Exceptions that inheriting from multiple exception types in a single subclass is not recommended due to possible memory layout incompatibility.
    + bpo-45449: Add note about PEP 585 in collections.abc.
    + bpo-45516: Add protocol description to the importlib.abc.Traversable documentation.
    + bpo-20692: Add Programming FAQ entry explaining that int literal attribute access requires either a space after or parentheses around the literal.
    + bpo-45216: Remove extra documentation listing methods in difflib. It was rendering twice in pydoc and was outdated in some places.
    + bpo-45772: socket.socket documentation is corrected to a class from a function.
    + bpo-45392: Update the docstring of the type built-in to remove a redundant line and to mention keyword arguments for the constructor.
  * Tests
    + bpo-45578: Add tests for dis.distb()
    + bpo-45577: Add subtests for all pickle protocols in test_zoneinfo.
    + bpo-43592: test.libregrtest now raises the soft resource limit for the maximum number of file descriptors when the default is too low for our test suite as was often the case on macOS.
    + bpo-40173: Fix test.support.import_helper.import_fresh_module().
    + bpo-45280: Add a test case for empty typing.NamedTuple.
    + bpo-45269: Cover case when invalid markers type is supplied to c_make_encoder.
    + bpo-45209: Fix UserWarning: resource_tracker warning in _test_multiprocessing._TestSharedMemory.test_shared_memory_cleaned_after_process_termination
    + bpo-45195: Fix test_readline.test_nonascii(): sometimes, the newline character is not written at the end, so don?t expect it in the output. Patch by Victor Stinner.
    + bpo-45156: Fixes infinite loop on unittest.mock.seal() of mocks created by create_autospec().
    + bpo-45042: Fixes that test classes decorated with @hashlib_helper.requires_hashdigest were skipped all the time.
    + bpo-45235: Reverted an argparse bugfix that caused regression in the handling of default arguments for subparsers. This prevented leaf level arguments from taking precedence over root level arguments.
    + bpo-45765: In importlib.metadata, fix distribution discovery for an empty path.
    + bpo-45644: In-place JSON file formatting using python3 -m json.tool infile infile now works correctly, previously it left the file empty. Patch by Chris Wesseling.
  * Build
    + bpo-43158: setup.py now uses values from configure script to build the _uuid extension module. Configure now detects util-linux?s libuuid, too.
    + bpo-45571: Modules/Setup now use PY_CFLAGS_NODIST instead of PY_CFLAGS to compile shared modules.
    + bpo-45532: Update sys.version to use main as fallback information. Patch by Jeong YunWon.
    + bpo-45405: Prevent internal configure error when running configure with recent versions of non-Apple clang. Patch by David Bohman.
    + bpo-45220: Avoid building with the Windows 11 SDK previews automatically. This may be overridden by setting the DefaultWindowsSDKVersion environment variable before building.
  * C API
    + bpo-44687: BufferedReader.peek() no longer raises ValueError when the entire file has already been buffered.
    + bpo-44751: Remove crypt.h include from the public Python.h header.
- Drop patch incorrect-deprecation-warn-asyncio.patch, fix included.</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1642593600">- Update to 3.9.10:
  Bugfix-only release</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
</package>
<package pkgid="b1e10c1847f7abbed55016e7e5afa505be2f98b61803244babbdce0c92ebce56" name="libpython3_9-1_0" arch="ppc64le">
  <version epoch="0" ver="3.9.10" rel="150300.4.8.1"/>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
  <changelog author="mcepl@suse.com" date="1620216000">- Update to 3.9.5:
  * Security
  - bpo-43434: Creating a sqlite3.Connection object now also
    produces a sqlite3.connect auditing event. Previously this
    event was only produced by sqlite3.connect() calls. Patch
    by Erlend E. Aasland.
  - bpo-43882: The presence of newline or tab characters in
    parts of a URL could allow some forms of attacks.
  - Following the controlling specification for URLs defined by
    WHATWG urllib.parse() now removes ASCII newlines and tabs
    from URLs, preventing such attacks.
  - bpo-43472: Ensures interpreter-level audit hooks receive
    the cpython.PyInterpreterState_New event when called
    through the _xxsubinterpreters module.
  - bpo-36384 (bsc#1185706, CVE-2021-29921): ipaddress module
    no longer accepts any leading zeros in IPv4 address
    strings. Leading zeros are ambiguous and interpreted as
    octal notation by some libraries. For example the legacy
    function socket.inet_aton() treats leading zeros as octal
    notatation. glibc implementation of modern inet_pton() does
    not accept any leading zeros. For a while the ipaddress
    module used to accept ambiguous leading zeros.
  - bpo-43075 (CVE-2021-3733, bsc#1189287): Fix Regular
    Expression Denial of Service (ReDoS) vulnerability in
    urllib.request.AbstractBasicAuthHandler. The
    ReDoS-vulnerable regex has quadratic worst-case complexity
    and it allows cause a denial of service when identifying
    crafted invalid RFCs. This ReDoS issue is on the client
    side and needs remote attackers to control the HTTP server.
  - bpo-42800: Audit hooks are now fired for frame.f_code,
    traceback.tb_frame, and generator code/frame attribute
    access.
  * Core and Builtins
  - bpo-43105: Importlib now resolves relative paths when
    creating module spec objects from file locations.
  - bpo-42924: Fix bytearray repetition incorrectly copying
    data from the start of the buffer, even if the data is
    offset within the buffer (e.g. after reassigning a slice at
    the start of the bytearray to a shorter byte string).
  * Library
  - bpo-43993: Update bundled pip to 21.1.1.
  - bpo-43937: Fixed the turtle module working with non-default
    root window.
  - bpo-43930: Update bundled pip to 21.1 and setuptools to
    56.0.0
  - bpo-43920: OpenSSL 3.0.0: load_verify_locations() now
    returns a consistent error message when cadata contains no
    valid certificate.
  - bpo-43607: urllib can now convert Windows paths with \\?\
    prefixes into URL paths.
  - bpo-43284: platform.win32_ver derives the windows version
    from sys.getwindowsversion().platform_version which in turn
    derives the version from kernel32.dll (which can be of
    a different version than Windows itself). Therefore change
    the platform.win32_ver to determine the version using the
    platform module?s _syscmd_ver private function to return an
    accurate version.
  - bpo-42248: [Enum] ensure exceptions raised in _missing__
    are released
  - bpo-43799: OpenSSL 3.0.0: define OPENSSL_API_COMPAT 1.1.1
    to suppress deprecation warnings. Python requires OpenSSL
    1.1.1 APIs.
  - bpo-43794: Add ssl.OP_IGNORE_UNEXPECTED_EOF constants
    (OpenSSL 3.0.0)
  - bpo-43789: OpenSSL 3.0.0: Don?t call the password callback
    function a second time when first call has signaled an
    error condition.
  - bpo-43788: The header files for ssl error codes are now
    OpenSSL version-specific. Exceptions will now show correct
    reason and library codes. The make_ssl_data.py script has
    been rewritten to use OpenSSL?s text file with error codes.
  - bpo-43655: tkinter dialog windows are now recognized as
    dialogs by window managers on macOS and X Window.
  - bpo-43534: turtle.textinput() and turtle.numinput() create
    now a transient window working on behalf of the canvas
    window.
  - bpo-43522: Fix problem with hostname_checks_common_name.
    OpenSSL does not copy hostflags from struct SSL_CTX to
    struct SSL.
  - bpo-42967: Allow bytes separator argument in
    urllib.parse.parse_qs and urllib.parse.parse_qsl when
    parsing str query strings. Previously, this raised
    a TypeError.
  - bpo-43176: Fixed processing of a dataclass that inherits
    from a frozen dataclass with no fields. It is now correctly
    detected as an error.
  - bpo-41735: Fix thread locks in zlib module may go wrong in
    rare case. Patch by Ma Lin.
  - bpo-36470: Fix dataclasses with InitVars and replace().
    Patch by Claudiu Popa.
  - bpo-32745: Fix a regression in the handling of ctypes?
    ctypes.c_wchar_p type: embedded null characters would cause
    a ValueError to be raised. Patch by Zackery Spytz.
  * Documentation
  - bpo-43959: The documentation on the PyContextVar C-API was
    clarified.
  - bpo-43938: Update dataclasses documentation to express that
    FrozenInstanceError is derived from AttributeError.
  - bpo-43755: Update documentation to reflect that
    unparenthesized lambda expressions can no longer be the
    expression part in an if clause in comprehensions and
    generator expressions since Python 3.9.
  - bpo-43739: Fixing the example code in
    Doc/extending/extending.rst to declare and initialize the
    pmodule variable to be of the right type.
  * Tests
  - bpo-43961: Fix
    test_logging.test_namer_rotator_inheritance() on Windows:
    use os.replace() rather than os.rename(). Patch by Victor
    Stinner.
  - bpo-43842: Fix a race condition in the SMTP test of
    test_logging. Don?t close a file descriptor (socket) from
    a different thread while asyncore.loop() is polling the
    file descriptor. Patch by Victor Stinner.
  - bpo-43811: Tests multiple OpenSSL versions on GitHub
    Actions. Use ccache to speed up testing.
  - bpo-43791: OpenSSL 3.0.0: Disable testing of legacy
    protocols TLS 1.0 and 1.1. Tests are failing with
    TLSV1_ALERT_INTERNAL_ERROR.
- Refreshed patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - python-3.3.0b1-fix_date_time_compiler.patch
- Add vendorized files from bluez-devel to enable building support for
  Bluetooth.</changelog>
  <changelog author="mcepl@suse.com" date="1621598400">- Stop providing "python" symbol (bsc#1185588), which means
  python2 currently.</changelog>
  <changelog author="dcermak@suse.com" date="1622635200">- Exclude test_capi on Leap (test fails there)</changelog>
  <changelog author="dmueller@suse.com" date="1622808000">- allow build with Sphinx &gt;= 3.x</changelog>
  <changelog author="mcepl@suse.com" date="1622894400">- Revert previous skip over test_capi
- Add skip-test_pyobject_freed_is_freed.patch to skip failing
  test on SLE-15.</changelog>
  <changelog author="mcepl@suse.com" date="1624104000">- Add bpo44426-complex-keyword-sphinx.patch allowing generating
  documentation with Sphinx 4 (bpo#44426).</changelog>
  <changelog author="mcepl@suse.com" date="1627905600">- Use versioned python-Sphinx to avoid dependency on other
  version of Python (bsc#1183858).</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1628510400">- Update to 3.9.6:
  * Security
  - bpo-44022 (bsc#1189241, CVE-2021-3737): http.client now
    avoids infinitely reading potential HTTP headers after
    a 100 Continue status response from the server.
  * Core and Builtins
  - bpo-44168: Fix error message in the parser involving keyword
    arguments with invalid expressions. Patch by Pablo Galindo
  - bpo-44114: Fix incorrect dictkeys_reversed and
    dictitems_reversed function signatures in C code, which broke
    webassembly builds.
  - bpo-44070: No longer eagerly makes import filenames absolute,
    except for extension modules, which was introduced in 3.9.5.
  - bpo-28146: Fix a confusing error message in str.format().
  - bpo-11105: When compiling ast.AST objects with recursive
    references through compile(), the interpreter doesn?t crash
    anymore instead it raises a RecursionError.
  * Library
  - bpo-43972: When http.server.SimpleHTTPRequestHandler sends a
    301 (Moved Permanently) for a directory path not ending with
    /, add a Content-Length: 0 header. This improves the behavior
    for certain clients.
  - bpo-43776: When subprocess.Popen args are provided as a
    string or as pathlib.Path, the Popen instance repr now shows
    the right thing.
  - bpo-43318: Fix a bug where pdb does not always echo cleared
    breakpoints.
  - bpo-43295: datetime.datetime.strptime() now raises ValueError
    instead of IndexError when matching 'z' with the %z format
    specifier.
  - bpo-37022: pdb now displays exceptions from repr() with its p
    and pp commands.
  * IDLE
  - bpo-33962: Move the indent space setting from the Font tab to
    the new Windows tab. Patch by Mark Roseman and Terry Jan
    Reedy.
  - bpo-40468: Split the settings dialog General tab into Windows
    and Shell/ED tabs. Move help sources, which extend the Help
    menu, to the Extensions tab. Make space for new options and
    shorten the dialog. The latter makes the dialog better fit
    small screens.
  - bpo-41611: Avoid uncaught exceptions in
    AutoCompleteWindow.winconfig_event().
  - bpo-41611: Fix IDLE sometimes freezing upon tab-completion on
    macOS.
  * Tools/Demos
  - bpo-44074: Make patchcheck automatically detect the correct
    base branch name (previously it was hardcoded to ?master?)
- Upstreamed patches were removed:
  - bpo44426-complex-keyword-sphinx.patch
- Refreshed patches:
  - subprocess-raise-timeout.patch</changelog>
  <changelog author="schwab@suse.de" date="1629979200">- test_faulthandler is still problematic under qemu linux-user emulation,
  disable it there
- Reenable profileopt with qemu emulation, test_faulthandler is no longer
  run during profiling</changelog>
  <changelog author="mcepl@suse.com" date="1630065600">- Add decimal.patch to add building with --with-system-libmpdec
  option (bsc#1189356).</changelog>
  <changelog author="mcepl@suse.com" date="1630411200">- Update to 3.9.7:
  - Security
  - Replaced usage of tempfile.mktemp() with TemporaryDirectory
    to avoid a potential race condition.
  - Add auditing events to the marshal module, and stop raising
    code.__init__ events for every unmarshalled code object.
    Directly instantiated code objects will continue to raise
    an event, and audit event handlers should inspect or
    collect the raw marshal data. This reduces a significant
    performance overhead when loading from .pyc files.
  - Made the internal putcmd function in smtplib sanitize input
    for presence of \r and \n characters to avoid (unlikely)
    command injection.
  - Core and Builtins
  - Fixed pickling of range iterators that iterated for over
    2**32 times.
  - Fix a race in WeakKeyDictionary, WeakValueDictionary and
    WeakSet when two threads attempt to commit the last pending
    removal. This fixes asyncio.create_task and fixes a data
    loss in asyncio.run where shutdown_asyncgens is not run
  - Fixed a corner case bug where the result of
    float.fromhex('0x.8p-1074') was rounded the wrong way.
  - Refine the syntax error for trailing commas in import
    statements. Patch by Pablo Galindo.
  - Restore behaviour of complex exponentiation with
    integer-valued exponent of type float or complex.
  - Correct the ast locations of f-strings with format specs
    and repeated expressions. Patch by Pablo Galindo
  - Use new trashcan macros (Py_TRASHCAN_BEGIN/END) in
    frameobject.c instead of the old ones
    (Py_TRASHCAN_SAFE_BEGIN/END).
  - Fix segmentation fault with deep recursion when cleaning
    method objects. Patch by Augusto Goulart and Pablo Galindo.
  - Fix bug where PyErr_SetObject hangs when the current
    exception has a cycle in its context chain.
  - Fix reference leaks in the error paths of update_bases()
    and __build_class__. Patch by Pablo Galindo.
  - Fix undefined behaviour in complex object exponentiation.
  - Remove uses of PyObject_GC_Del() in error path when
    initializing types.GenericAlias.
  - Remove the pass-through for hash() of weakref.proxy objects
    to prevent unintended consequences when the original
    referred object dies while the proxy is part of a hashable
    object. Patch by Pablo Galindo.
  - Fix ltrace functionality when exceptions are raised. Patch
    by Pablo Galindo
  - Fix a crash at Python exit when a deallocator function
    removes the last strong reference to a heap type. Patch by
    Victor Stinner.
  - Fix crash when using passing a non-exception to
    a generator?s throw() method. Patch by Noah Oxer
  - Library
  - run() now always return a TestResult instance. Previously
    it returned None if the test class or method was decorated
    with a skipping decorator.
  - Fix bugs in cleaning up classes and modules in unittest:
  - Functions registered with addModuleCleanup() were not
    called unless the user defines tearDownModule() in
    their test module.
  - Functions registered with addClassCleanup() were not
    called if tearDownClass is set to None.
  - Buffering in TestResult did not work with functions
    registered with addClassCleanup() and
    addModuleCleanup().
  - Errors in functions registered with addClassCleanup()
    and addModuleCleanup() were not handled correctly in
    buffered and debug modes.
  - Errors in setUpModule() and functions registered with
    addModuleCleanup() were reported in wrong order.
  - And several lesser bugs.
  - Made email date parsing more robust against malformed
    input, namely a whitespace-only Date: header. Patch by
    Wouter Bolsterlee.
  - Fix a crash in the signal handler of the faulthandler
    module: no longer modify the reference count of frame
    objects. Patch by Victor Stinner.
  - Method stopTestRun() is now always called in pair with
    method startTestRun() for TestResult objects implicitly
    created in run(). Previously it was not called for test
    methods and classes decorated with a skipping decorator.
  - argparse.BooleanOptionalAction?s default value is no longer
    printed twice when used with
    argparse.ArgumentDefaultsHelpFormatter.
  - Upgrade bundled pip to 21.2.3 and setuptools to 57.4.0
  - Fix the os.set_inheritable() function on FreeBSD 14 for
    file descriptor opened with the O_PATH flag: ignore the
    EBADF error on ioctl(), fallback on the fcntl()
    implementation. Patch by Victor Stinner.
  - The @functools.total_ordering() decorator now works with
    metaclasses.
  - sqlite3 user-defined functions and aggregators returning
    strings with embedded NUL characters are no longer
    truncated. Patch by Erlend E. Aasland.
  - Always show loop= arg deprecations in asyncio.gather() and
    asyncio.sleep()
  - Non-protocol subclasses of typing.Protocol ignore now the
    __init__ method inherited from protocol base classes.
  - The tokenize.tokenize() doesn?t incorrectly generate
    a NEWLINE token if the source doesn?t end with a new line
    character but the last line is a comment, as the function
    is already generating a NL token. Patch by Pablo Galindo
  - Fix http.client.HTTPSConnection fails to download &gt;2GiB
    data.
  - rcompleter does not call getattr() on property objects to
    avoid the side-effect of evaluating the corresponding
    method.
  - weakref.proxy objects referencing non-iterators now raise
    TypeError rather than dereferencing the null tp_iternext
    slot and crashing.
  - The implementation of collections.abc.Set._hash() now
    matches that of frozenset.__hash__().
  - Fixed issue in compileall.compile_file() when sys.stdout is
    redirected. Patch by Stefan Hölzl.
  - Give priority to using the current class constructor in
    inspect.signature(). Patch by Weipeng Hong.
  - Fix memory leak in _tkinter._flatten() if it is called with
    a sequence or set, but not list or tuple.
  - Update shutil.copyfile() to raise FileNotFoundError instead
    of confusing IsADirectoryError when a path ending with
    a os.path.sep does not exist; shutil.copy() and
    shutil.copy2() are also affected.
  - handle StopIteration subclass raised from
    @contextlib.contextmanager generator
  - Make the implementation consistency of indexOf() between
    C and Python versions. Patch by Dong-hee Na.
  - Fixes TypedDict to work with typing.get_type_hints() and
    postponed evaluation of annotations across modules.
  - Fix bug with pdb?s handling of import error due to
    a package which does not have a __main__ module
  - Fixed an exception thrown while parsing a malformed
    multipart email by email.message.EmailMessage.
  - pathlib.PureWindowsPath.is_reserved() now identifies
    a greater range of reserved filenames, including those with
    trailing spaces or colons.
  - Handle exceptions from parsing the arg of pdb?s run/restart
    command.
  - The sqlite3 context manager now performs a rollback (thus
    releasing the database lock) if commit failed. Patch by
    Luca Citi and Erlend E. Aasland.
  - Improved string handling for sqlite3 user-defined functions
    and aggregates:
  - It is now possible to pass strings with embedded null
    characters to UDFs
  - Conversion failures now correctly raise MemoryError
  - Patch by Erlend E. Aasland.
  - Handle RecursionError in TracebackException?s constructor,
    so that long exceptions chains are truncated instead of
    causing traceback formatting to fail.
  - Fix email.message.EmailMessage.set_content() when called
    with binary data and 7bit content transfer encoding.
  - The compresslevel and preset keyword arguments of
    tarfile.open() are now both documented and tested.
  - Fixed a Y2k38 bug in the compileall module where it would
    fail to compile files with a modification time after the
    year 2038.
  - Fix test___all__ on platforms lacking a shared memory
    implementation.
  - Pass multiprocessing BaseProxy argument manager_owned
    through AutoProxy.
  - email.utils.getaddresses() now accepts email.header.Header
    objects along with string values. Patch by Zackery Spytz.
  - lib2to3 now recognizes async generators everywhere.
  - Fix TypeError when required subparsers without dest do not
    receive arguments. Patch by Anthony Sottile.
  - Documentation
  - Removed the othergui.rst file, any references to it, and
    the list of GUI frameworks in the FAQ. In their place I?ve
    added links to the Python Wiki page on GUI frameworks.
  - Update the definition of __future__ in the glossary by
    replacing the confusing word ?pseudo-module? with a more
    accurate description.
  - Add typical examples to os.path.splitext docs
  - Clarify that shutil.make_archive() is not thread-safe due
    to reliance on changing the current working directory.
  - Update of three expired hyperlinks in
    Doc/distributing/index.rst: ?Project structure?, ?Building
    and packaging the project?, and ?Uploading the project to
    the Python Packaging Index?.
  - Updated the docstring and docs of filecmp.cmp() to be more
    accurate and less confusing especially in respect to
    shallow arg.
  - Match the docstring and python implementation of countOf()
    to the behavior of its c implementation.
  - List all kwargs for textwrap.wrap(), textwrap.fill(), and
    textwrap.shorten(). Now, there are nav links to attributes
    of TextWrap, which makes navigation much easier while
    minimizing duplication in the documentation.
  - Clarify that atexit uses equality comparisons internally.
  - Documentation of csv.Dialect is more descriptive.
  - Fix documentation for the return type of
    sysconfig.get_path().
  - Add a ?Security Considerations? index which links to
    standard library modules that have explicitly documented
    security considerations.
  - Remove the unqualified claim that tkinter is threadsafe. It
    has not been true for several years and likely never was.
    An explanation of what is true may be added later, after
    more discussion, and possibly after patching _tkinter.c,
  - Tests
  - Add calls of gc.collect() in tests to support PyPy.
  - Made tests relying on the _asyncio C extension module
    optional to allow running on alternative Python
    implementations. Patch by Serhiy Storchaka.
  - Fix auto history tests of test_readline: sometimes, the
    newline character is not written at the end, so don?t
    expect it in the output.
  - Add ability to wholesale silence DeprecationWarnings while
    running the regression test suite.
  - Notify users running test_decimal regression tests on macOS
    of potential harmless ?malloc can?t allocate region?
    messages spewed by test_decimal.
  - Fixed floating point precision issue in turtle tests.
  - Regression tests, when run with -w, are now re-running only
    the affected test methods instead of re-running the entire
    test file.
  - Add test for nested queues when using multiprocessing
    shared objects AutoProxy[Queue] inside ListProxy and
    DictProxy</changelog>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635595200">- Add incorrect-deprecation-warn-asyncio.patch to fix bpo#45097
  (from gh#python/cpython#28153) to remove incorrect deprecation
  warnings in asyncio.</changelog>
  <changelog author="mcepl@suse.com" date="1636200000">- rpm-build-python dependency is available on the current
  Factory, not with SLE.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637150400">- Update to 3.9.9:
  * Core and Builtins
    + bpo-30570: Fixed a crash in issubclass() from infinite recursion when searching pathological __bases__ tuples.
    + bpo-45494: Fix parser crash when reporting errors involving invalid continuation characters. Patch by Pablo Galindo.
    + bpo-45385: Fix reference leak from descr_check. Patch by Dong-hee Na.
    + bpo-45167: Fix deepcopying of types.GenericAlias objects.
    + bpo-44219: Release the GIL while performing isatty system calls on arbitrary file descriptors. In particular, this affects os.isatty(), os.device_encoding() and io.TextIOWrapper. By extension, io.open() in text mode is also affected. This change solves a deadlock in os.isatty(). Patch by Vincent Michel in bpo-44219.
    + bpo-44959: Added fallback to extension modules with ?.sl? suffix on HP-UX
    + bpo-44050: Extensions that indicate they use global state (by setting m_size to -1) can again be used in multiple interpreters. This reverts to behavior of Python 3.8.
    + bpo-45121: Fix issue where Protocol.__init__ raises RecursionError when it?s called directly or via super(). Patch provided by Yurii Karabas.
    + bpo-45083: When the interpreter renders an exception, its name now has a complete qualname. Previously only the class name was concatenated to the module name, which sometimes resulted in an incorrect full name being displayed.
    + bpo-45738: Fix computation of error location for invalid continuation characters in the parser. Patch by Pablo Galindo.
    + Library
    + bpo-45678: Fix bug in Python 3.9 that meant functools.singledispatchmethod failed to properly wrap the attributes of the target method. Patch by Alex Waygood.
    + bpo-45679: Fix caching of multi-value typing.Literal. Literal[True, 2] is no longer equal to Literal[1, 2].
    + bpo-45438: Fix typing.Signature string representation for generic builtin types.
    + bpo-45581: sqlite3.connect() now correctly raises MemoryError if the underlying SQLite API signals memory error. Patch by Erlend E. Aasland.
    + bpo-39679: Fix bug in functools.singledispatchmethod that caused it to fail when attempting to register a classmethod() or staticmethod() using type annotations. Patch contributed by Alex Waygood.
    + bpo-45515: Add references to zoneinfo in the datetime documentation, mostly replacing outdated references to dateutil.tz. Change by Paul Ganssle.
    + bpo-45467: Fix incremental decoder and stream reader in the ?raw-unicode-escape? codec. Previously they failed if the escape sequence was split.
    + bpo-45461: Fix incremental decoder and stream reader in the ?unicode-escape? codec. Previously they failed if the escape sequence was split.
    + bpo-45239: Fixed email.utils.parsedate_tz() crashing with UnboundLocalError on certain invalid input instead of returning None. Patch by Ben Hoyt.
    + bpo-44904: Fix bug in the doctest module that caused it to fail if a docstring included an example with a classmethod property. Patch by Alex Waygood.
    + bpo-45406: Make inspect.getmodule() catch FileNotFoundError raised by :?func:inspect.getabsfile, and return None to indicate that the module could not be determined.
    + bpo-45262: Prevent use-after-free in asyncio. Make sure the cached running loop holder gets cleared on dealloc to prevent use-after-free in get_running_loop
    + bpo-45386: Make xmlrpc.client more robust to C runtimes where the underlying C strftime function results in a ValueError when testing for year formatting options.
    + bpo-45371: Fix clang rpath issue in distutils. The UnixCCompiler now uses correct clang option to add a runtime library directory (rpath) to a shared library.
    + bpo-20028: Improve error message of csv.Dialect when initializing. Patch by Vajrasky Kok and Dong-hee Na.
    + bpo-45343: Update bundled pip to 21.2.4 and setuptools to 58.1.0
    + bpo-41710: On Unix, if the sem_clockwait() function is available in the C library (glibc 2.30 and newer), the threading.Lock.acquire() method now uses the monotonic clock (time.CLOCK_MONOTONIC) for the timeout, rather than using the system clock (time.CLOCK_REALTIME), to not be affected by system clock changes. Patch by Victor Stinner.
    + bpo-45328: Fixed http.client.HTTPConnection to work properly in OSs that don?t support the TCP_NODELAY socket option.
    + bpo-1596321: Fix the threading._shutdown() function when the threading module was imported first from a thread different than the main thread: no longer log an error at Python exit.
    + bpo-45274: Fix a race condition in the Thread.join() method of the threading module. If the function is interrupted by a signal and the signal handler raises an exception, make sure that the thread remains in a consistent state to prevent a deadlock. Patch by Victor Stinner.
    + bpo-45238: Fix unittest.IsolatedAsyncioTestCase.debug(): it runs now asynchronous methods and callbacks.
    + bpo-36674: unittest.TestCase.debug() raises now a unittest.SkipTest if the class or the test method are decorated with the skipping decorator.
    + bpo-45235: Fix an issue where argparse would not preserve values in a provided namespace when using a subparser with defaults.
    + bpo-45234: Fixed a regression in copyfile(), copy(), copy2() raising FileNotFoundError when source is a directory, which should raise IsADirectoryError
    + bpo-45228: Fix stack buffer overflow in parsing J1939 network address.
    + bpo-45192: Fix the tempfile._infer_return_type function so that the dir argument of the tempfile functions accepts an object implementing the os.PathLike protocol.
    + bpo-45160: When tracing a tkinter variable used by a ttk OptionMenu, callbacks are no longer made twice.
    + bpo-35474: Calling mimetypes.guess_all_extensions() with strict=False no longer affects the result of the following call with strict=True. Also, mutating the returned list no longer affects the global state.
    + bpo-45166: typing.get_type_hints() now works with Final wrapped in ForwardRef.
    + bpo-45097: Remove deprecation warnings about the loop argument in asyncio incorrectly emitted in cases when the user does not pass the loop argument.
    + bpo-45081: Fix issue when dataclasses that inherit from typing.Protocol subclasses have wrong __init__. Patch provided by Yurii Karabas.
    + bpo-24444: Fixed an error raised in argparse help display when help for an option is set to 1+ blank spaces or when choices arg is an empty container.
    + bpo-45021: Fix a potential deadlock at shutdown of forked children when using concurrent.futures module
    + bpo-45030: Fix integer overflow in pickling and copying the range iterator.
    + bpo-39039: tarfile.open raises ReadError when a zlib error occurs during file extraction.
    + bpo-44594: Fix an edge case of ExitStack and AsyncExitStack exception chaining. They will now match with block behavior when __context__ is explicitly set to None when the exception is in flight.
  * Documentation
    + bpo-45726: Improve documentation for functools.singledispatch() and functools.singledispatchmethod.
    + bpo-45680: Amend the docs on GenericAlias objects to clarify that non-container classes can also implement __class_getitem__. Patch contributed by Alex Waygood.
    + bpo-45655: Add a new ?relevant PEPs? section to the top of the documentation for the typing module. Patch by Alex Waygood.
    + bpo-45604: Add level argument to multiprocessing.log_to_stderr function docs.
    + bpo-45464: Mention in the documentation of Built-in Exceptions that inheriting from multiple exception types in a single subclass is not recommended due to possible memory layout incompatibility.
    + bpo-45449: Add note about PEP 585 in collections.abc.
    + bpo-45516: Add protocol description to the importlib.abc.Traversable documentation.
    + bpo-20692: Add Programming FAQ entry explaining that int literal attribute access requires either a space after or parentheses around the literal.
    + bpo-45216: Remove extra documentation listing methods in difflib. It was rendering twice in pydoc and was outdated in some places.
    + bpo-45772: socket.socket documentation is corrected to a class from a function.
    + bpo-45392: Update the docstring of the type built-in to remove a redundant line and to mention keyword arguments for the constructor.
  * Tests
    + bpo-45578: Add tests for dis.distb()
    + bpo-45577: Add subtests for all pickle protocols in test_zoneinfo.
    + bpo-43592: test.libregrtest now raises the soft resource limit for the maximum number of file descriptors when the default is too low for our test suite as was often the case on macOS.
    + bpo-40173: Fix test.support.import_helper.import_fresh_module().
    + bpo-45280: Add a test case for empty typing.NamedTuple.
    + bpo-45269: Cover case when invalid markers type is supplied to c_make_encoder.
    + bpo-45209: Fix UserWarning: resource_tracker warning in _test_multiprocessing._TestSharedMemory.test_shared_memory_cleaned_after_process_termination
    + bpo-45195: Fix test_readline.test_nonascii(): sometimes, the newline character is not written at the end, so don?t expect it in the output. Patch by Victor Stinner.
    + bpo-45156: Fixes infinite loop on unittest.mock.seal() of mocks created by create_autospec().
    + bpo-45042: Fixes that test classes decorated with @hashlib_helper.requires_hashdigest were skipped all the time.
    + bpo-45235: Reverted an argparse bugfix that caused regression in the handling of default arguments for subparsers. This prevented leaf level arguments from taking precedence over root level arguments.
    + bpo-45765: In importlib.metadata, fix distribution discovery for an empty path.
    + bpo-45644: In-place JSON file formatting using python3 -m json.tool infile infile now works correctly, previously it left the file empty. Patch by Chris Wesseling.
  * Build
    + bpo-43158: setup.py now uses values from configure script to build the _uuid extension module. Configure now detects util-linux?s libuuid, too.
    + bpo-45571: Modules/Setup now use PY_CFLAGS_NODIST instead of PY_CFLAGS to compile shared modules.
    + bpo-45532: Update sys.version to use main as fallback information. Patch by Jeong YunWon.
    + bpo-45405: Prevent internal configure error when running configure with recent versions of non-Apple clang. Patch by David Bohman.
    + bpo-45220: Avoid building with the Windows 11 SDK previews automatically. This may be overridden by setting the DefaultWindowsSDKVersion environment variable before building.
  * C API
    + bpo-44687: BufferedReader.peek() no longer raises ValueError when the entire file has already been buffered.
    + bpo-44751: Remove crypt.h include from the public Python.h header.
- Drop patch incorrect-deprecation-warn-asyncio.patch, fix included.</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1642593600">- Update to 3.9.10:
  Bugfix-only release</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
</package>
<package pkgid="b0a442dc5f4644ac47535c42776d1bd97273a99f22e21ead69716a5f772ec3f5" name="libpython3_9-1_0" arch="s390x">
  <version epoch="0" ver="3.9.10" rel="150300.4.8.1"/>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
  <changelog author="mcepl@suse.com" date="1620216000">- Update to 3.9.5:
  * Security
  - bpo-43434: Creating a sqlite3.Connection object now also
    produces a sqlite3.connect auditing event. Previously this
    event was only produced by sqlite3.connect() calls. Patch
    by Erlend E. Aasland.
  - bpo-43882: The presence of newline or tab characters in
    parts of a URL could allow some forms of attacks.
  - Following the controlling specification for URLs defined by
    WHATWG urllib.parse() now removes ASCII newlines and tabs
    from URLs, preventing such attacks.
  - bpo-43472: Ensures interpreter-level audit hooks receive
    the cpython.PyInterpreterState_New event when called
    through the _xxsubinterpreters module.
  - bpo-36384 (bsc#1185706, CVE-2021-29921): ipaddress module
    no longer accepts any leading zeros in IPv4 address
    strings. Leading zeros are ambiguous and interpreted as
    octal notation by some libraries. For example the legacy
    function socket.inet_aton() treats leading zeros as octal
    notatation. glibc implementation of modern inet_pton() does
    not accept any leading zeros. For a while the ipaddress
    module used to accept ambiguous leading zeros.
  - bpo-43075 (CVE-2021-3733, bsc#1189287): Fix Regular
    Expression Denial of Service (ReDoS) vulnerability in
    urllib.request.AbstractBasicAuthHandler. The
    ReDoS-vulnerable regex has quadratic worst-case complexity
    and it allows cause a denial of service when identifying
    crafted invalid RFCs. This ReDoS issue is on the client
    side and needs remote attackers to control the HTTP server.
  - bpo-42800: Audit hooks are now fired for frame.f_code,
    traceback.tb_frame, and generator code/frame attribute
    access.
  * Core and Builtins
  - bpo-43105: Importlib now resolves relative paths when
    creating module spec objects from file locations.
  - bpo-42924: Fix bytearray repetition incorrectly copying
    data from the start of the buffer, even if the data is
    offset within the buffer (e.g. after reassigning a slice at
    the start of the bytearray to a shorter byte string).
  * Library
  - bpo-43993: Update bundled pip to 21.1.1.
  - bpo-43937: Fixed the turtle module working with non-default
    root window.
  - bpo-43930: Update bundled pip to 21.1 and setuptools to
    56.0.0
  - bpo-43920: OpenSSL 3.0.0: load_verify_locations() now
    returns a consistent error message when cadata contains no
    valid certificate.
  - bpo-43607: urllib can now convert Windows paths with \\?\
    prefixes into URL paths.
  - bpo-43284: platform.win32_ver derives the windows version
    from sys.getwindowsversion().platform_version which in turn
    derives the version from kernel32.dll (which can be of
    a different version than Windows itself). Therefore change
    the platform.win32_ver to determine the version using the
    platform module?s _syscmd_ver private function to return an
    accurate version.
  - bpo-42248: [Enum] ensure exceptions raised in _missing__
    are released
  - bpo-43799: OpenSSL 3.0.0: define OPENSSL_API_COMPAT 1.1.1
    to suppress deprecation warnings. Python requires OpenSSL
    1.1.1 APIs.
  - bpo-43794: Add ssl.OP_IGNORE_UNEXPECTED_EOF constants
    (OpenSSL 3.0.0)
  - bpo-43789: OpenSSL 3.0.0: Don?t call the password callback
    function a second time when first call has signaled an
    error condition.
  - bpo-43788: The header files for ssl error codes are now
    OpenSSL version-specific. Exceptions will now show correct
    reason and library codes. The make_ssl_data.py script has
    been rewritten to use OpenSSL?s text file with error codes.
  - bpo-43655: tkinter dialog windows are now recognized as
    dialogs by window managers on macOS and X Window.
  - bpo-43534: turtle.textinput() and turtle.numinput() create
    now a transient window working on behalf of the canvas
    window.
  - bpo-43522: Fix problem with hostname_checks_common_name.
    OpenSSL does not copy hostflags from struct SSL_CTX to
    struct SSL.
  - bpo-42967: Allow bytes separator argument in
    urllib.parse.parse_qs and urllib.parse.parse_qsl when
    parsing str query strings. Previously, this raised
    a TypeError.
  - bpo-43176: Fixed processing of a dataclass that inherits
    from a frozen dataclass with no fields. It is now correctly
    detected as an error.
  - bpo-41735: Fix thread locks in zlib module may go wrong in
    rare case. Patch by Ma Lin.
  - bpo-36470: Fix dataclasses with InitVars and replace().
    Patch by Claudiu Popa.
  - bpo-32745: Fix a regression in the handling of ctypes?
    ctypes.c_wchar_p type: embedded null characters would cause
    a ValueError to be raised. Patch by Zackery Spytz.
  * Documentation
  - bpo-43959: The documentation on the PyContextVar C-API was
    clarified.
  - bpo-43938: Update dataclasses documentation to express that
    FrozenInstanceError is derived from AttributeError.
  - bpo-43755: Update documentation to reflect that
    unparenthesized lambda expressions can no longer be the
    expression part in an if clause in comprehensions and
    generator expressions since Python 3.9.
  - bpo-43739: Fixing the example code in
    Doc/extending/extending.rst to declare and initialize the
    pmodule variable to be of the right type.
  * Tests
  - bpo-43961: Fix
    test_logging.test_namer_rotator_inheritance() on Windows:
    use os.replace() rather than os.rename(). Patch by Victor
    Stinner.
  - bpo-43842: Fix a race condition in the SMTP test of
    test_logging. Don?t close a file descriptor (socket) from
    a different thread while asyncore.loop() is polling the
    file descriptor. Patch by Victor Stinner.
  - bpo-43811: Tests multiple OpenSSL versions on GitHub
    Actions. Use ccache to speed up testing.
  - bpo-43791: OpenSSL 3.0.0: Disable testing of legacy
    protocols TLS 1.0 and 1.1. Tests are failing with
    TLSV1_ALERT_INTERNAL_ERROR.
- Refreshed patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - python-3.3.0b1-fix_date_time_compiler.patch
- Add vendorized files from bluez-devel to enable building support for
  Bluetooth.</changelog>
  <changelog author="mcepl@suse.com" date="1621598400">- Stop providing "python" symbol (bsc#1185588), which means
  python2 currently.</changelog>
  <changelog author="dcermak@suse.com" date="1622635200">- Exclude test_capi on Leap (test fails there)</changelog>
  <changelog author="dmueller@suse.com" date="1622808000">- allow build with Sphinx &gt;= 3.x</changelog>
  <changelog author="mcepl@suse.com" date="1622894400">- Revert previous skip over test_capi
- Add skip-test_pyobject_freed_is_freed.patch to skip failing
  test on SLE-15.</changelog>
  <changelog author="mcepl@suse.com" date="1624104000">- Add bpo44426-complex-keyword-sphinx.patch allowing generating
  documentation with Sphinx 4 (bpo#44426).</changelog>
  <changelog author="mcepl@suse.com" date="1627905600">- Use versioned python-Sphinx to avoid dependency on other
  version of Python (bsc#1183858).</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1628510400">- Update to 3.9.6:
  * Security
  - bpo-44022 (bsc#1189241, CVE-2021-3737): http.client now
    avoids infinitely reading potential HTTP headers after
    a 100 Continue status response from the server.
  * Core and Builtins
  - bpo-44168: Fix error message in the parser involving keyword
    arguments with invalid expressions. Patch by Pablo Galindo
  - bpo-44114: Fix incorrect dictkeys_reversed and
    dictitems_reversed function signatures in C code, which broke
    webassembly builds.
  - bpo-44070: No longer eagerly makes import filenames absolute,
    except for extension modules, which was introduced in 3.9.5.
  - bpo-28146: Fix a confusing error message in str.format().
  - bpo-11105: When compiling ast.AST objects with recursive
    references through compile(), the interpreter doesn?t crash
    anymore instead it raises a RecursionError.
  * Library
  - bpo-43972: When http.server.SimpleHTTPRequestHandler sends a
    301 (Moved Permanently) for a directory path not ending with
    /, add a Content-Length: 0 header. This improves the behavior
    for certain clients.
  - bpo-43776: When subprocess.Popen args are provided as a
    string or as pathlib.Path, the Popen instance repr now shows
    the right thing.
  - bpo-43318: Fix a bug where pdb does not always echo cleared
    breakpoints.
  - bpo-43295: datetime.datetime.strptime() now raises ValueError
    instead of IndexError when matching 'z' with the %z format
    specifier.
  - bpo-37022: pdb now displays exceptions from repr() with its p
    and pp commands.
  * IDLE
  - bpo-33962: Move the indent space setting from the Font tab to
    the new Windows tab. Patch by Mark Roseman and Terry Jan
    Reedy.
  - bpo-40468: Split the settings dialog General tab into Windows
    and Shell/ED tabs. Move help sources, which extend the Help
    menu, to the Extensions tab. Make space for new options and
    shorten the dialog. The latter makes the dialog better fit
    small screens.
  - bpo-41611: Avoid uncaught exceptions in
    AutoCompleteWindow.winconfig_event().
  - bpo-41611: Fix IDLE sometimes freezing upon tab-completion on
    macOS.
  * Tools/Demos
  - bpo-44074: Make patchcheck automatically detect the correct
    base branch name (previously it was hardcoded to ?master?)
- Upstreamed patches were removed:
  - bpo44426-complex-keyword-sphinx.patch
- Refreshed patches:
  - subprocess-raise-timeout.patch</changelog>
  <changelog author="schwab@suse.de" date="1629979200">- test_faulthandler is still problematic under qemu linux-user emulation,
  disable it there
- Reenable profileopt with qemu emulation, test_faulthandler is no longer
  run during profiling</changelog>
  <changelog author="mcepl@suse.com" date="1630065600">- Add decimal.patch to add building with --with-system-libmpdec
  option (bsc#1189356).</changelog>
  <changelog author="mcepl@suse.com" date="1630411200">- Update to 3.9.7:
  - Security
  - Replaced usage of tempfile.mktemp() with TemporaryDirectory
    to avoid a potential race condition.
  - Add auditing events to the marshal module, and stop raising
    code.__init__ events for every unmarshalled code object.
    Directly instantiated code objects will continue to raise
    an event, and audit event handlers should inspect or
    collect the raw marshal data. This reduces a significant
    performance overhead when loading from .pyc files.
  - Made the internal putcmd function in smtplib sanitize input
    for presence of \r and \n characters to avoid (unlikely)
    command injection.
  - Core and Builtins
  - Fixed pickling of range iterators that iterated for over
    2**32 times.
  - Fix a race in WeakKeyDictionary, WeakValueDictionary and
    WeakSet when two threads attempt to commit the last pending
    removal. This fixes asyncio.create_task and fixes a data
    loss in asyncio.run where shutdown_asyncgens is not run
  - Fixed a corner case bug where the result of
    float.fromhex('0x.8p-1074') was rounded the wrong way.
  - Refine the syntax error for trailing commas in import
    statements. Patch by Pablo Galindo.
  - Restore behaviour of complex exponentiation with
    integer-valued exponent of type float or complex.
  - Correct the ast locations of f-strings with format specs
    and repeated expressions. Patch by Pablo Galindo
  - Use new trashcan macros (Py_TRASHCAN_BEGIN/END) in
    frameobject.c instead of the old ones
    (Py_TRASHCAN_SAFE_BEGIN/END).
  - Fix segmentation fault with deep recursion when cleaning
    method objects. Patch by Augusto Goulart and Pablo Galindo.
  - Fix bug where PyErr_SetObject hangs when the current
    exception has a cycle in its context chain.
  - Fix reference leaks in the error paths of update_bases()
    and __build_class__. Patch by Pablo Galindo.
  - Fix undefined behaviour in complex object exponentiation.
  - Remove uses of PyObject_GC_Del() in error path when
    initializing types.GenericAlias.
  - Remove the pass-through for hash() of weakref.proxy objects
    to prevent unintended consequences when the original
    referred object dies while the proxy is part of a hashable
    object. Patch by Pablo Galindo.
  - Fix ltrace functionality when exceptions are raised. Patch
    by Pablo Galindo
  - Fix a crash at Python exit when a deallocator function
    removes the last strong reference to a heap type. Patch by
    Victor Stinner.
  - Fix crash when using passing a non-exception to
    a generator?s throw() method. Patch by Noah Oxer
  - Library
  - run() now always return a TestResult instance. Previously
    it returned None if the test class or method was decorated
    with a skipping decorator.
  - Fix bugs in cleaning up classes and modules in unittest:
  - Functions registered with addModuleCleanup() were not
    called unless the user defines tearDownModule() in
    their test module.
  - Functions registered with addClassCleanup() were not
    called if tearDownClass is set to None.
  - Buffering in TestResult did not work with functions
    registered with addClassCleanup() and
    addModuleCleanup().
  - Errors in functions registered with addClassCleanup()
    and addModuleCleanup() were not handled correctly in
    buffered and debug modes.
  - Errors in setUpModule() and functions registered with
    addModuleCleanup() were reported in wrong order.
  - And several lesser bugs.
  - Made email date parsing more robust against malformed
    input, namely a whitespace-only Date: header. Patch by
    Wouter Bolsterlee.
  - Fix a crash in the signal handler of the faulthandler
    module: no longer modify the reference count of frame
    objects. Patch by Victor Stinner.
  - Method stopTestRun() is now always called in pair with
    method startTestRun() for TestResult objects implicitly
    created in run(). Previously it was not called for test
    methods and classes decorated with a skipping decorator.
  - argparse.BooleanOptionalAction?s default value is no longer
    printed twice when used with
    argparse.ArgumentDefaultsHelpFormatter.
  - Upgrade bundled pip to 21.2.3 and setuptools to 57.4.0
  - Fix the os.set_inheritable() function on FreeBSD 14 for
    file descriptor opened with the O_PATH flag: ignore the
    EBADF error on ioctl(), fallback on the fcntl()
    implementation. Patch by Victor Stinner.
  - The @functools.total_ordering() decorator now works with
    metaclasses.
  - sqlite3 user-defined functions and aggregators returning
    strings with embedded NUL characters are no longer
    truncated. Patch by Erlend E. Aasland.
  - Always show loop= arg deprecations in asyncio.gather() and
    asyncio.sleep()
  - Non-protocol subclasses of typing.Protocol ignore now the
    __init__ method inherited from protocol base classes.
  - The tokenize.tokenize() doesn?t incorrectly generate
    a NEWLINE token if the source doesn?t end with a new line
    character but the last line is a comment, as the function
    is already generating a NL token. Patch by Pablo Galindo
  - Fix http.client.HTTPSConnection fails to download &gt;2GiB
    data.
  - rcompleter does not call getattr() on property objects to
    avoid the side-effect of evaluating the corresponding
    method.
  - weakref.proxy objects referencing non-iterators now raise
    TypeError rather than dereferencing the null tp_iternext
    slot and crashing.
  - The implementation of collections.abc.Set._hash() now
    matches that of frozenset.__hash__().
  - Fixed issue in compileall.compile_file() when sys.stdout is
    redirected. Patch by Stefan Hölzl.
  - Give priority to using the current class constructor in
    inspect.signature(). Patch by Weipeng Hong.
  - Fix memory leak in _tkinter._flatten() if it is called with
    a sequence or set, but not list or tuple.
  - Update shutil.copyfile() to raise FileNotFoundError instead
    of confusing IsADirectoryError when a path ending with
    a os.path.sep does not exist; shutil.copy() and
    shutil.copy2() are also affected.
  - handle StopIteration subclass raised from
    @contextlib.contextmanager generator
  - Make the implementation consistency of indexOf() between
    C and Python versions. Patch by Dong-hee Na.
  - Fixes TypedDict to work with typing.get_type_hints() and
    postponed evaluation of annotations across modules.
  - Fix bug with pdb?s handling of import error due to
    a package which does not have a __main__ module
  - Fixed an exception thrown while parsing a malformed
    multipart email by email.message.EmailMessage.
  - pathlib.PureWindowsPath.is_reserved() now identifies
    a greater range of reserved filenames, including those with
    trailing spaces or colons.
  - Handle exceptions from parsing the arg of pdb?s run/restart
    command.
  - The sqlite3 context manager now performs a rollback (thus
    releasing the database lock) if commit failed. Patch by
    Luca Citi and Erlend E. Aasland.
  - Improved string handling for sqlite3 user-defined functions
    and aggregates:
  - It is now possible to pass strings with embedded null
    characters to UDFs
  - Conversion failures now correctly raise MemoryError
  - Patch by Erlend E. Aasland.
  - Handle RecursionError in TracebackException?s constructor,
    so that long exceptions chains are truncated instead of
    causing traceback formatting to fail.
  - Fix email.message.EmailMessage.set_content() when called
    with binary data and 7bit content transfer encoding.
  - The compresslevel and preset keyword arguments of
    tarfile.open() are now both documented and tested.
  - Fixed a Y2k38 bug in the compileall module where it would
    fail to compile files with a modification time after the
    year 2038.
  - Fix test___all__ on platforms lacking a shared memory
    implementation.
  - Pass multiprocessing BaseProxy argument manager_owned
    through AutoProxy.
  - email.utils.getaddresses() now accepts email.header.Header
    objects along with string values. Patch by Zackery Spytz.
  - lib2to3 now recognizes async generators everywhere.
  - Fix TypeError when required subparsers without dest do not
    receive arguments. Patch by Anthony Sottile.
  - Documentation
  - Removed the othergui.rst file, any references to it, and
    the list of GUI frameworks in the FAQ. In their place I?ve
    added links to the Python Wiki page on GUI frameworks.
  - Update the definition of __future__ in the glossary by
    replacing the confusing word ?pseudo-module? with a more
    accurate description.
  - Add typical examples to os.path.splitext docs
  - Clarify that shutil.make_archive() is not thread-safe due
    to reliance on changing the current working directory.
  - Update of three expired hyperlinks in
    Doc/distributing/index.rst: ?Project structure?, ?Building
    and packaging the project?, and ?Uploading the project to
    the Python Packaging Index?.
  - Updated the docstring and docs of filecmp.cmp() to be more
    accurate and less confusing especially in respect to
    shallow arg.
  - Match the docstring and python implementation of countOf()
    to the behavior of its c implementation.
  - List all kwargs for textwrap.wrap(), textwrap.fill(), and
    textwrap.shorten(). Now, there are nav links to attributes
    of TextWrap, which makes navigation much easier while
    minimizing duplication in the documentation.
  - Clarify that atexit uses equality comparisons internally.
  - Documentation of csv.Dialect is more descriptive.
  - Fix documentation for the return type of
    sysconfig.get_path().
  - Add a ?Security Considerations? index which links to
    standard library modules that have explicitly documented
    security considerations.
  - Remove the unqualified claim that tkinter is threadsafe. It
    has not been true for several years and likely never was.
    An explanation of what is true may be added later, after
    more discussion, and possibly after patching _tkinter.c,
  - Tests
  - Add calls of gc.collect() in tests to support PyPy.
  - Made tests relying on the _asyncio C extension module
    optional to allow running on alternative Python
    implementations. Patch by Serhiy Storchaka.
  - Fix auto history tests of test_readline: sometimes, the
    newline character is not written at the end, so don?t
    expect it in the output.
  - Add ability to wholesale silence DeprecationWarnings while
    running the regression test suite.
  - Notify users running test_decimal regression tests on macOS
    of potential harmless ?malloc can?t allocate region?
    messages spewed by test_decimal.
  - Fixed floating point precision issue in turtle tests.
  - Regression tests, when run with -w, are now re-running only
    the affected test methods instead of re-running the entire
    test file.
  - Add test for nested queues when using multiprocessing
    shared objects AutoProxy[Queue] inside ListProxy and
    DictProxy</changelog>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635595200">- Add incorrect-deprecation-warn-asyncio.patch to fix bpo#45097
  (from gh#python/cpython#28153) to remove incorrect deprecation
  warnings in asyncio.</changelog>
  <changelog author="mcepl@suse.com" date="1636200000">- rpm-build-python dependency is available on the current
  Factory, not with SLE.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637150400">- Update to 3.9.9:
  * Core and Builtins
    + bpo-30570: Fixed a crash in issubclass() from infinite recursion when searching pathological __bases__ tuples.
    + bpo-45494: Fix parser crash when reporting errors involving invalid continuation characters. Patch by Pablo Galindo.
    + bpo-45385: Fix reference leak from descr_check. Patch by Dong-hee Na.
    + bpo-45167: Fix deepcopying of types.GenericAlias objects.
    + bpo-44219: Release the GIL while performing isatty system calls on arbitrary file descriptors. In particular, this affects os.isatty(), os.device_encoding() and io.TextIOWrapper. By extension, io.open() in text mode is also affected. This change solves a deadlock in os.isatty(). Patch by Vincent Michel in bpo-44219.
    + bpo-44959: Added fallback to extension modules with ?.sl? suffix on HP-UX
    + bpo-44050: Extensions that indicate they use global state (by setting m_size to -1) can again be used in multiple interpreters. This reverts to behavior of Python 3.8.
    + bpo-45121: Fix issue where Protocol.__init__ raises RecursionError when it?s called directly or via super(). Patch provided by Yurii Karabas.
    + bpo-45083: When the interpreter renders an exception, its name now has a complete qualname. Previously only the class name was concatenated to the module name, which sometimes resulted in an incorrect full name being displayed.
    + bpo-45738: Fix computation of error location for invalid continuation characters in the parser. Patch by Pablo Galindo.
    + Library
    + bpo-45678: Fix bug in Python 3.9 that meant functools.singledispatchmethod failed to properly wrap the attributes of the target method. Patch by Alex Waygood.
    + bpo-45679: Fix caching of multi-value typing.Literal. Literal[True, 2] is no longer equal to Literal[1, 2].
    + bpo-45438: Fix typing.Signature string representation for generic builtin types.
    + bpo-45581: sqlite3.connect() now correctly raises MemoryError if the underlying SQLite API signals memory error. Patch by Erlend E. Aasland.
    + bpo-39679: Fix bug in functools.singledispatchmethod that caused it to fail when attempting to register a classmethod() or staticmethod() using type annotations. Patch contributed by Alex Waygood.
    + bpo-45515: Add references to zoneinfo in the datetime documentation, mostly replacing outdated references to dateutil.tz. Change by Paul Ganssle.
    + bpo-45467: Fix incremental decoder and stream reader in the ?raw-unicode-escape? codec. Previously they failed if the escape sequence was split.
    + bpo-45461: Fix incremental decoder and stream reader in the ?unicode-escape? codec. Previously they failed if the escape sequence was split.
    + bpo-45239: Fixed email.utils.parsedate_tz() crashing with UnboundLocalError on certain invalid input instead of returning None. Patch by Ben Hoyt.
    + bpo-44904: Fix bug in the doctest module that caused it to fail if a docstring included an example with a classmethod property. Patch by Alex Waygood.
    + bpo-45406: Make inspect.getmodule() catch FileNotFoundError raised by :?func:inspect.getabsfile, and return None to indicate that the module could not be determined.
    + bpo-45262: Prevent use-after-free in asyncio. Make sure the cached running loop holder gets cleared on dealloc to prevent use-after-free in get_running_loop
    + bpo-45386: Make xmlrpc.client more robust to C runtimes where the underlying C strftime function results in a ValueError when testing for year formatting options.
    + bpo-45371: Fix clang rpath issue in distutils. The UnixCCompiler now uses correct clang option to add a runtime library directory (rpath) to a shared library.
    + bpo-20028: Improve error message of csv.Dialect when initializing. Patch by Vajrasky Kok and Dong-hee Na.
    + bpo-45343: Update bundled pip to 21.2.4 and setuptools to 58.1.0
    + bpo-41710: On Unix, if the sem_clockwait() function is available in the C library (glibc 2.30 and newer), the threading.Lock.acquire() method now uses the monotonic clock (time.CLOCK_MONOTONIC) for the timeout, rather than using the system clock (time.CLOCK_REALTIME), to not be affected by system clock changes. Patch by Victor Stinner.
    + bpo-45328: Fixed http.client.HTTPConnection to work properly in OSs that don?t support the TCP_NODELAY socket option.
    + bpo-1596321: Fix the threading._shutdown() function when the threading module was imported first from a thread different than the main thread: no longer log an error at Python exit.
    + bpo-45274: Fix a race condition in the Thread.join() method of the threading module. If the function is interrupted by a signal and the signal handler raises an exception, make sure that the thread remains in a consistent state to prevent a deadlock. Patch by Victor Stinner.
    + bpo-45238: Fix unittest.IsolatedAsyncioTestCase.debug(): it runs now asynchronous methods and callbacks.
    + bpo-36674: unittest.TestCase.debug() raises now a unittest.SkipTest if the class or the test method are decorated with the skipping decorator.
    + bpo-45235: Fix an issue where argparse would not preserve values in a provided namespace when using a subparser with defaults.
    + bpo-45234: Fixed a regression in copyfile(), copy(), copy2() raising FileNotFoundError when source is a directory, which should raise IsADirectoryError
    + bpo-45228: Fix stack buffer overflow in parsing J1939 network address.
    + bpo-45192: Fix the tempfile._infer_return_type function so that the dir argument of the tempfile functions accepts an object implementing the os.PathLike protocol.
    + bpo-45160: When tracing a tkinter variable used by a ttk OptionMenu, callbacks are no longer made twice.
    + bpo-35474: Calling mimetypes.guess_all_extensions() with strict=False no longer affects the result of the following call with strict=True. Also, mutating the returned list no longer affects the global state.
    + bpo-45166: typing.get_type_hints() now works with Final wrapped in ForwardRef.
    + bpo-45097: Remove deprecation warnings about the loop argument in asyncio incorrectly emitted in cases when the user does not pass the loop argument.
    + bpo-45081: Fix issue when dataclasses that inherit from typing.Protocol subclasses have wrong __init__. Patch provided by Yurii Karabas.
    + bpo-24444: Fixed an error raised in argparse help display when help for an option is set to 1+ blank spaces or when choices arg is an empty container.
    + bpo-45021: Fix a potential deadlock at shutdown of forked children when using concurrent.futures module
    + bpo-45030: Fix integer overflow in pickling and copying the range iterator.
    + bpo-39039: tarfile.open raises ReadError when a zlib error occurs during file extraction.
    + bpo-44594: Fix an edge case of ExitStack and AsyncExitStack exception chaining. They will now match with block behavior when __context__ is explicitly set to None when the exception is in flight.
  * Documentation
    + bpo-45726: Improve documentation for functools.singledispatch() and functools.singledispatchmethod.
    + bpo-45680: Amend the docs on GenericAlias objects to clarify that non-container classes can also implement __class_getitem__. Patch contributed by Alex Waygood.
    + bpo-45655: Add a new ?relevant PEPs? section to the top of the documentation for the typing module. Patch by Alex Waygood.
    + bpo-45604: Add level argument to multiprocessing.log_to_stderr function docs.
    + bpo-45464: Mention in the documentation of Built-in Exceptions that inheriting from multiple exception types in a single subclass is not recommended due to possible memory layout incompatibility.
    + bpo-45449: Add note about PEP 585 in collections.abc.
    + bpo-45516: Add protocol description to the importlib.abc.Traversable documentation.
    + bpo-20692: Add Programming FAQ entry explaining that int literal attribute access requires either a space after or parentheses around the literal.
    + bpo-45216: Remove extra documentation listing methods in difflib. It was rendering twice in pydoc and was outdated in some places.
    + bpo-45772: socket.socket documentation is corrected to a class from a function.
    + bpo-45392: Update the docstring of the type built-in to remove a redundant line and to mention keyword arguments for the constructor.
  * Tests
    + bpo-45578: Add tests for dis.distb()
    + bpo-45577: Add subtests for all pickle protocols in test_zoneinfo.
    + bpo-43592: test.libregrtest now raises the soft resource limit for the maximum number of file descriptors when the default is too low for our test suite as was often the case on macOS.
    + bpo-40173: Fix test.support.import_helper.import_fresh_module().
    + bpo-45280: Add a test case for empty typing.NamedTuple.
    + bpo-45269: Cover case when invalid markers type is supplied to c_make_encoder.
    + bpo-45209: Fix UserWarning: resource_tracker warning in _test_multiprocessing._TestSharedMemory.test_shared_memory_cleaned_after_process_termination
    + bpo-45195: Fix test_readline.test_nonascii(): sometimes, the newline character is not written at the end, so don?t expect it in the output. Patch by Victor Stinner.
    + bpo-45156: Fixes infinite loop on unittest.mock.seal() of mocks created by create_autospec().
    + bpo-45042: Fixes that test classes decorated with @hashlib_helper.requires_hashdigest were skipped all the time.
    + bpo-45235: Reverted an argparse bugfix that caused regression in the handling of default arguments for subparsers. This prevented leaf level arguments from taking precedence over root level arguments.
    + bpo-45765: In importlib.metadata, fix distribution discovery for an empty path.
    + bpo-45644: In-place JSON file formatting using python3 -m json.tool infile infile now works correctly, previously it left the file empty. Patch by Chris Wesseling.
  * Build
    + bpo-43158: setup.py now uses values from configure script to build the _uuid extension module. Configure now detects util-linux?s libuuid, too.
    + bpo-45571: Modules/Setup now use PY_CFLAGS_NODIST instead of PY_CFLAGS to compile shared modules.
    + bpo-45532: Update sys.version to use main as fallback information. Patch by Jeong YunWon.
    + bpo-45405: Prevent internal configure error when running configure with recent versions of non-Apple clang. Patch by David Bohman.
    + bpo-45220: Avoid building with the Windows 11 SDK previews automatically. This may be overridden by setting the DefaultWindowsSDKVersion environment variable before building.
  * C API
    + bpo-44687: BufferedReader.peek() no longer raises ValueError when the entire file has already been buffered.
    + bpo-44751: Remove crypt.h include from the public Python.h header.
- Drop patch incorrect-deprecation-warn-asyncio.patch, fix included.</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1642593600">- Update to 3.9.10:
  Bugfix-only release</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
</package>
<package pkgid="96f93fe548dba547ed09c64dfb95b57a4cdb1c7d495ae27de2f642498077b11d" name="libpython3_9-1_0" arch="x86_64">
  <version epoch="0" ver="3.9.10" rel="150300.4.8.1"/>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
  <changelog author="mcepl@suse.com" date="1620216000">- Update to 3.9.5:
  * Security
  - bpo-43434: Creating a sqlite3.Connection object now also
    produces a sqlite3.connect auditing event. Previously this
    event was only produced by sqlite3.connect() calls. Patch
    by Erlend E. Aasland.
  - bpo-43882: The presence of newline or tab characters in
    parts of a URL could allow some forms of attacks.
  - Following the controlling specification for URLs defined by
    WHATWG urllib.parse() now removes ASCII newlines and tabs
    from URLs, preventing such attacks.
  - bpo-43472: Ensures interpreter-level audit hooks receive
    the cpython.PyInterpreterState_New event when called
    through the _xxsubinterpreters module.
  - bpo-36384 (bsc#1185706, CVE-2021-29921): ipaddress module
    no longer accepts any leading zeros in IPv4 address
    strings. Leading zeros are ambiguous and interpreted as
    octal notation by some libraries. For example the legacy
    function socket.inet_aton() treats leading zeros as octal
    notatation. glibc implementation of modern inet_pton() does
    not accept any leading zeros. For a while the ipaddress
    module used to accept ambiguous leading zeros.
  - bpo-43075 (CVE-2021-3733, bsc#1189287): Fix Regular
    Expression Denial of Service (ReDoS) vulnerability in
    urllib.request.AbstractBasicAuthHandler. The
    ReDoS-vulnerable regex has quadratic worst-case complexity
    and it allows cause a denial of service when identifying
    crafted invalid RFCs. This ReDoS issue is on the client
    side and needs remote attackers to control the HTTP server.
  - bpo-42800: Audit hooks are now fired for frame.f_code,
    traceback.tb_frame, and generator code/frame attribute
    access.
  * Core and Builtins
  - bpo-43105: Importlib now resolves relative paths when
    creating module spec objects from file locations.
  - bpo-42924: Fix bytearray repetition incorrectly copying
    data from the start of the buffer, even if the data is
    offset within the buffer (e.g. after reassigning a slice at
    the start of the bytearray to a shorter byte string).
  * Library
  - bpo-43993: Update bundled pip to 21.1.1.
  - bpo-43937: Fixed the turtle module working with non-default
    root window.
  - bpo-43930: Update bundled pip to 21.1 and setuptools to
    56.0.0
  - bpo-43920: OpenSSL 3.0.0: load_verify_locations() now
    returns a consistent error message when cadata contains no
    valid certificate.
  - bpo-43607: urllib can now convert Windows paths with \\?\
    prefixes into URL paths.
  - bpo-43284: platform.win32_ver derives the windows version
    from sys.getwindowsversion().platform_version which in turn
    derives the version from kernel32.dll (which can be of
    a different version than Windows itself). Therefore change
    the platform.win32_ver to determine the version using the
    platform module?s _syscmd_ver private function to return an
    accurate version.
  - bpo-42248: [Enum] ensure exceptions raised in _missing__
    are released
  - bpo-43799: OpenSSL 3.0.0: define OPENSSL_API_COMPAT 1.1.1
    to suppress deprecation warnings. Python requires OpenSSL
    1.1.1 APIs.
  - bpo-43794: Add ssl.OP_IGNORE_UNEXPECTED_EOF constants
    (OpenSSL 3.0.0)
  - bpo-43789: OpenSSL 3.0.0: Don?t call the password callback
    function a second time when first call has signaled an
    error condition.
  - bpo-43788: The header files for ssl error codes are now
    OpenSSL version-specific. Exceptions will now show correct
    reason and library codes. The make_ssl_data.py script has
    been rewritten to use OpenSSL?s text file with error codes.
  - bpo-43655: tkinter dialog windows are now recognized as
    dialogs by window managers on macOS and X Window.
  - bpo-43534: turtle.textinput() and turtle.numinput() create
    now a transient window working on behalf of the canvas
    window.
  - bpo-43522: Fix problem with hostname_checks_common_name.
    OpenSSL does not copy hostflags from struct SSL_CTX to
    struct SSL.
  - bpo-42967: Allow bytes separator argument in
    urllib.parse.parse_qs and urllib.parse.parse_qsl when
    parsing str query strings. Previously, this raised
    a TypeError.
  - bpo-43176: Fixed processing of a dataclass that inherits
    from a frozen dataclass with no fields. It is now correctly
    detected as an error.
  - bpo-41735: Fix thread locks in zlib module may go wrong in
    rare case. Patch by Ma Lin.
  - bpo-36470: Fix dataclasses with InitVars and replace().
    Patch by Claudiu Popa.
  - bpo-32745: Fix a regression in the handling of ctypes?
    ctypes.c_wchar_p type: embedded null characters would cause
    a ValueError to be raised. Patch by Zackery Spytz.
  * Documentation
  - bpo-43959: The documentation on the PyContextVar C-API was
    clarified.
  - bpo-43938: Update dataclasses documentation to express that
    FrozenInstanceError is derived from AttributeError.
  - bpo-43755: Update documentation to reflect that
    unparenthesized lambda expressions can no longer be the
    expression part in an if clause in comprehensions and
    generator expressions since Python 3.9.
  - bpo-43739: Fixing the example code in
    Doc/extending/extending.rst to declare and initialize the
    pmodule variable to be of the right type.
  * Tests
  - bpo-43961: Fix
    test_logging.test_namer_rotator_inheritance() on Windows:
    use os.replace() rather than os.rename(). Patch by Victor
    Stinner.
  - bpo-43842: Fix a race condition in the SMTP test of
    test_logging. Don?t close a file descriptor (socket) from
    a different thread while asyncore.loop() is polling the
    file descriptor. Patch by Victor Stinner.
  - bpo-43811: Tests multiple OpenSSL versions on GitHub
    Actions. Use ccache to speed up testing.
  - bpo-43791: OpenSSL 3.0.0: Disable testing of legacy
    protocols TLS 1.0 and 1.1. Tests are failing with
    TLSV1_ALERT_INTERNAL_ERROR.
- Refreshed patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - python-3.3.0b1-fix_date_time_compiler.patch
- Add vendorized files from bluez-devel to enable building support for
  Bluetooth.</changelog>
  <changelog author="mcepl@suse.com" date="1621598400">- Stop providing "python" symbol (bsc#1185588), which means
  python2 currently.</changelog>
  <changelog author="dcermak@suse.com" date="1622635200">- Exclude test_capi on Leap (test fails there)</changelog>
  <changelog author="dmueller@suse.com" date="1622808000">- allow build with Sphinx &gt;= 3.x</changelog>
  <changelog author="mcepl@suse.com" date="1622894400">- Revert previous skip over test_capi
- Add skip-test_pyobject_freed_is_freed.patch to skip failing
  test on SLE-15.</changelog>
  <changelog author="mcepl@suse.com" date="1624104000">- Add bpo44426-complex-keyword-sphinx.patch allowing generating
  documentation with Sphinx 4 (bpo#44426).</changelog>
  <changelog author="mcepl@suse.com" date="1627905600">- Use versioned python-Sphinx to avoid dependency on other
  version of Python (bsc#1183858).</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1628510400">- Update to 3.9.6:
  * Security
  - bpo-44022 (bsc#1189241, CVE-2021-3737): http.client now
    avoids infinitely reading potential HTTP headers after
    a 100 Continue status response from the server.
  * Core and Builtins
  - bpo-44168: Fix error message in the parser involving keyword
    arguments with invalid expressions. Patch by Pablo Galindo
  - bpo-44114: Fix incorrect dictkeys_reversed and
    dictitems_reversed function signatures in C code, which broke
    webassembly builds.
  - bpo-44070: No longer eagerly makes import filenames absolute,
    except for extension modules, which was introduced in 3.9.5.
  - bpo-28146: Fix a confusing error message in str.format().
  - bpo-11105: When compiling ast.AST objects with recursive
    references through compile(), the interpreter doesn?t crash
    anymore instead it raises a RecursionError.
  * Library
  - bpo-43972: When http.server.SimpleHTTPRequestHandler sends a
    301 (Moved Permanently) for a directory path not ending with
    /, add a Content-Length: 0 header. This improves the behavior
    for certain clients.
  - bpo-43776: When subprocess.Popen args are provided as a
    string or as pathlib.Path, the Popen instance repr now shows
    the right thing.
  - bpo-43318: Fix a bug where pdb does not always echo cleared
    breakpoints.
  - bpo-43295: datetime.datetime.strptime() now raises ValueError
    instead of IndexError when matching 'z' with the %z format
    specifier.
  - bpo-37022: pdb now displays exceptions from repr() with its p
    and pp commands.
  * IDLE
  - bpo-33962: Move the indent space setting from the Font tab to
    the new Windows tab. Patch by Mark Roseman and Terry Jan
    Reedy.
  - bpo-40468: Split the settings dialog General tab into Windows
    and Shell/ED tabs. Move help sources, which extend the Help
    menu, to the Extensions tab. Make space for new options and
    shorten the dialog. The latter makes the dialog better fit
    small screens.
  - bpo-41611: Avoid uncaught exceptions in
    AutoCompleteWindow.winconfig_event().
  - bpo-41611: Fix IDLE sometimes freezing upon tab-completion on
    macOS.
  * Tools/Demos
  - bpo-44074: Make patchcheck automatically detect the correct
    base branch name (previously it was hardcoded to ?master?)
- Upstreamed patches were removed:
  - bpo44426-complex-keyword-sphinx.patch
- Refreshed patches:
  - subprocess-raise-timeout.patch</changelog>
  <changelog author="schwab@suse.de" date="1629979200">- test_faulthandler is still problematic under qemu linux-user emulation,
  disable it there
- Reenable profileopt with qemu emulation, test_faulthandler is no longer
  run during profiling</changelog>
  <changelog author="mcepl@suse.com" date="1630065600">- Add decimal.patch to add building with --with-system-libmpdec
  option (bsc#1189356).</changelog>
  <changelog author="mcepl@suse.com" date="1630411200">- Update to 3.9.7:
  - Security
  - Replaced usage of tempfile.mktemp() with TemporaryDirectory
    to avoid a potential race condition.
  - Add auditing events to the marshal module, and stop raising
    code.__init__ events for every unmarshalled code object.
    Directly instantiated code objects will continue to raise
    an event, and audit event handlers should inspect or
    collect the raw marshal data. This reduces a significant
    performance overhead when loading from .pyc files.
  - Made the internal putcmd function in smtplib sanitize input
    for presence of \r and \n characters to avoid (unlikely)
    command injection.
  - Core and Builtins
  - Fixed pickling of range iterators that iterated for over
    2**32 times.
  - Fix a race in WeakKeyDictionary, WeakValueDictionary and
    WeakSet when two threads attempt to commit the last pending
    removal. This fixes asyncio.create_task and fixes a data
    loss in asyncio.run where shutdown_asyncgens is not run
  - Fixed a corner case bug where the result of
    float.fromhex('0x.8p-1074') was rounded the wrong way.
  - Refine the syntax error for trailing commas in import
    statements. Patch by Pablo Galindo.
  - Restore behaviour of complex exponentiation with
    integer-valued exponent of type float or complex.
  - Correct the ast locations of f-strings with format specs
    and repeated expressions. Patch by Pablo Galindo
  - Use new trashcan macros (Py_TRASHCAN_BEGIN/END) in
    frameobject.c instead of the old ones
    (Py_TRASHCAN_SAFE_BEGIN/END).
  - Fix segmentation fault with deep recursion when cleaning
    method objects. Patch by Augusto Goulart and Pablo Galindo.
  - Fix bug where PyErr_SetObject hangs when the current
    exception has a cycle in its context chain.
  - Fix reference leaks in the error paths of update_bases()
    and __build_class__. Patch by Pablo Galindo.
  - Fix undefined behaviour in complex object exponentiation.
  - Remove uses of PyObject_GC_Del() in error path when
    initializing types.GenericAlias.
  - Remove the pass-through for hash() of weakref.proxy objects
    to prevent unintended consequences when the original
    referred object dies while the proxy is part of a hashable
    object. Patch by Pablo Galindo.
  - Fix ltrace functionality when exceptions are raised. Patch
    by Pablo Galindo
  - Fix a crash at Python exit when a deallocator function
    removes the last strong reference to a heap type. Patch by
    Victor Stinner.
  - Fix crash when using passing a non-exception to
    a generator?s throw() method. Patch by Noah Oxer
  - Library
  - run() now always return a TestResult instance. Previously
    it returned None if the test class or method was decorated
    with a skipping decorator.
  - Fix bugs in cleaning up classes and modules in unittest:
  - Functions registered with addModuleCleanup() were not
    called unless the user defines tearDownModule() in
    their test module.
  - Functions registered with addClassCleanup() were not
    called if tearDownClass is set to None.
  - Buffering in TestResult did not work with functions
    registered with addClassCleanup() and
    addModuleCleanup().
  - Errors in functions registered with addClassCleanup()
    and addModuleCleanup() were not handled correctly in
    buffered and debug modes.
  - Errors in setUpModule() and functions registered with
    addModuleCleanup() were reported in wrong order.
  - And several lesser bugs.
  - Made email date parsing more robust against malformed
    input, namely a whitespace-only Date: header. Patch by
    Wouter Bolsterlee.
  - Fix a crash in the signal handler of the faulthandler
    module: no longer modify the reference count of frame
    objects. Patch by Victor Stinner.
  - Method stopTestRun() is now always called in pair with
    method startTestRun() for TestResult objects implicitly
    created in run(). Previously it was not called for test
    methods and classes decorated with a skipping decorator.
  - argparse.BooleanOptionalAction?s default value is no longer
    printed twice when used with
    argparse.ArgumentDefaultsHelpFormatter.
  - Upgrade bundled pip to 21.2.3 and setuptools to 57.4.0
  - Fix the os.set_inheritable() function on FreeBSD 14 for
    file descriptor opened with the O_PATH flag: ignore the
    EBADF error on ioctl(), fallback on the fcntl()
    implementation. Patch by Victor Stinner.
  - The @functools.total_ordering() decorator now works with
    metaclasses.
  - sqlite3 user-defined functions and aggregators returning
    strings with embedded NUL characters are no longer
    truncated. Patch by Erlend E. Aasland.
  - Always show loop= arg deprecations in asyncio.gather() and
    asyncio.sleep()
  - Non-protocol subclasses of typing.Protocol ignore now the
    __init__ method inherited from protocol base classes.
  - The tokenize.tokenize() doesn?t incorrectly generate
    a NEWLINE token if the source doesn?t end with a new line
    character but the last line is a comment, as the function
    is already generating a NL token. Patch by Pablo Galindo
  - Fix http.client.HTTPSConnection fails to download &gt;2GiB
    data.
  - rcompleter does not call getattr() on property objects to
    avoid the side-effect of evaluating the corresponding
    method.
  - weakref.proxy objects referencing non-iterators now raise
    TypeError rather than dereferencing the null tp_iternext
    slot and crashing.
  - The implementation of collections.abc.Set._hash() now
    matches that of frozenset.__hash__().
  - Fixed issue in compileall.compile_file() when sys.stdout is
    redirected. Patch by Stefan Hölzl.
  - Give priority to using the current class constructor in
    inspect.signature(). Patch by Weipeng Hong.
  - Fix memory leak in _tkinter._flatten() if it is called with
    a sequence or set, but not list or tuple.
  - Update shutil.copyfile() to raise FileNotFoundError instead
    of confusing IsADirectoryError when a path ending with
    a os.path.sep does not exist; shutil.copy() and
    shutil.copy2() are also affected.
  - handle StopIteration subclass raised from
    @contextlib.contextmanager generator
  - Make the implementation consistency of indexOf() between
    C and Python versions. Patch by Dong-hee Na.
  - Fixes TypedDict to work with typing.get_type_hints() and
    postponed evaluation of annotations across modules.
  - Fix bug with pdb?s handling of import error due to
    a package which does not have a __main__ module
  - Fixed an exception thrown while parsing a malformed
    multipart email by email.message.EmailMessage.
  - pathlib.PureWindowsPath.is_reserved() now identifies
    a greater range of reserved filenames, including those with
    trailing spaces or colons.
  - Handle exceptions from parsing the arg of pdb?s run/restart
    command.
  - The sqlite3 context manager now performs a rollback (thus
    releasing the database lock) if commit failed. Patch by
    Luca Citi and Erlend E. Aasland.
  - Improved string handling for sqlite3 user-defined functions
    and aggregates:
  - It is now possible to pass strings with embedded null
    characters to UDFs
  - Conversion failures now correctly raise MemoryError
  - Patch by Erlend E. Aasland.
  - Handle RecursionError in TracebackException?s constructor,
    so that long exceptions chains are truncated instead of
    causing traceback formatting to fail.
  - Fix email.message.EmailMessage.set_content() when called
    with binary data and 7bit content transfer encoding.
  - The compresslevel and preset keyword arguments of
    tarfile.open() are now both documented and tested.
  - Fixed a Y2k38 bug in the compileall module where it would
    fail to compile files with a modification time after the
    year 2038.
  - Fix test___all__ on platforms lacking a shared memory
    implementation.
  - Pass multiprocessing BaseProxy argument manager_owned
    through AutoProxy.
  - email.utils.getaddresses() now accepts email.header.Header
    objects along with string values. Patch by Zackery Spytz.
  - lib2to3 now recognizes async generators everywhere.
  - Fix TypeError when required subparsers without dest do not
    receive arguments. Patch by Anthony Sottile.
  - Documentation
  - Removed the othergui.rst file, any references to it, and
    the list of GUI frameworks in the FAQ. In their place I?ve
    added links to the Python Wiki page on GUI frameworks.
  - Update the definition of __future__ in the glossary by
    replacing the confusing word ?pseudo-module? with a more
    accurate description.
  - Add typical examples to os.path.splitext docs
  - Clarify that shutil.make_archive() is not thread-safe due
    to reliance on changing the current working directory.
  - Update of three expired hyperlinks in
    Doc/distributing/index.rst: ?Project structure?, ?Building
    and packaging the project?, and ?Uploading the project to
    the Python Packaging Index?.
  - Updated the docstring and docs of filecmp.cmp() to be more
    accurate and less confusing especially in respect to
    shallow arg.
  - Match the docstring and python implementation of countOf()
    to the behavior of its c implementation.
  - List all kwargs for textwrap.wrap(), textwrap.fill(), and
    textwrap.shorten(). Now, there are nav links to attributes
    of TextWrap, which makes navigation much easier while
    minimizing duplication in the documentation.
  - Clarify that atexit uses equality comparisons internally.
  - Documentation of csv.Dialect is more descriptive.
  - Fix documentation for the return type of
    sysconfig.get_path().
  - Add a ?Security Considerations? index which links to
    standard library modules that have explicitly documented
    security considerations.
  - Remove the unqualified claim that tkinter is threadsafe. It
    has not been true for several years and likely never was.
    An explanation of what is true may be added later, after
    more discussion, and possibly after patching _tkinter.c,
  - Tests
  - Add calls of gc.collect() in tests to support PyPy.
  - Made tests relying on the _asyncio C extension module
    optional to allow running on alternative Python
    implementations. Patch by Serhiy Storchaka.
  - Fix auto history tests of test_readline: sometimes, the
    newline character is not written at the end, so don?t
    expect it in the output.
  - Add ability to wholesale silence DeprecationWarnings while
    running the regression test suite.
  - Notify users running test_decimal regression tests on macOS
    of potential harmless ?malloc can?t allocate region?
    messages spewed by test_decimal.
  - Fixed floating point precision issue in turtle tests.
  - Regression tests, when run with -w, are now re-running only
    the affected test methods instead of re-running the entire
    test file.
  - Add test for nested queues when using multiprocessing
    shared objects AutoProxy[Queue] inside ListProxy and
    DictProxy</changelog>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635595200">- Add incorrect-deprecation-warn-asyncio.patch to fix bpo#45097
  (from gh#python/cpython#28153) to remove incorrect deprecation
  warnings in asyncio.</changelog>
  <changelog author="mcepl@suse.com" date="1636200000">- rpm-build-python dependency is available on the current
  Factory, not with SLE.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637150400">- Update to 3.9.9:
  * Core and Builtins
    + bpo-30570: Fixed a crash in issubclass() from infinite recursion when searching pathological __bases__ tuples.
    + bpo-45494: Fix parser crash when reporting errors involving invalid continuation characters. Patch by Pablo Galindo.
    + bpo-45385: Fix reference leak from descr_check. Patch by Dong-hee Na.
    + bpo-45167: Fix deepcopying of types.GenericAlias objects.
    + bpo-44219: Release the GIL while performing isatty system calls on arbitrary file descriptors. In particular, this affects os.isatty(), os.device_encoding() and io.TextIOWrapper. By extension, io.open() in text mode is also affected. This change solves a deadlock in os.isatty(). Patch by Vincent Michel in bpo-44219.
    + bpo-44959: Added fallback to extension modules with ?.sl? suffix on HP-UX
    + bpo-44050: Extensions that indicate they use global state (by setting m_size to -1) can again be used in multiple interpreters. This reverts to behavior of Python 3.8.
    + bpo-45121: Fix issue where Protocol.__init__ raises RecursionError when it?s called directly or via super(). Patch provided by Yurii Karabas.
    + bpo-45083: When the interpreter renders an exception, its name now has a complete qualname. Previously only the class name was concatenated to the module name, which sometimes resulted in an incorrect full name being displayed.
    + bpo-45738: Fix computation of error location for invalid continuation characters in the parser. Patch by Pablo Galindo.
    + Library
    + bpo-45678: Fix bug in Python 3.9 that meant functools.singledispatchmethod failed to properly wrap the attributes of the target method. Patch by Alex Waygood.
    + bpo-45679: Fix caching of multi-value typing.Literal. Literal[True, 2] is no longer equal to Literal[1, 2].
    + bpo-45438: Fix typing.Signature string representation for generic builtin types.
    + bpo-45581: sqlite3.connect() now correctly raises MemoryError if the underlying SQLite API signals memory error. Patch by Erlend E. Aasland.
    + bpo-39679: Fix bug in functools.singledispatchmethod that caused it to fail when attempting to register a classmethod() or staticmethod() using type annotations. Patch contributed by Alex Waygood.
    + bpo-45515: Add references to zoneinfo in the datetime documentation, mostly replacing outdated references to dateutil.tz. Change by Paul Ganssle.
    + bpo-45467: Fix incremental decoder and stream reader in the ?raw-unicode-escape? codec. Previously they failed if the escape sequence was split.
    + bpo-45461: Fix incremental decoder and stream reader in the ?unicode-escape? codec. Previously they failed if the escape sequence was split.
    + bpo-45239: Fixed email.utils.parsedate_tz() crashing with UnboundLocalError on certain invalid input instead of returning None. Patch by Ben Hoyt.
    + bpo-44904: Fix bug in the doctest module that caused it to fail if a docstring included an example with a classmethod property. Patch by Alex Waygood.
    + bpo-45406: Make inspect.getmodule() catch FileNotFoundError raised by :?func:inspect.getabsfile, and return None to indicate that the module could not be determined.
    + bpo-45262: Prevent use-after-free in asyncio. Make sure the cached running loop holder gets cleared on dealloc to prevent use-after-free in get_running_loop
    + bpo-45386: Make xmlrpc.client more robust to C runtimes where the underlying C strftime function results in a ValueError when testing for year formatting options.
    + bpo-45371: Fix clang rpath issue in distutils. The UnixCCompiler now uses correct clang option to add a runtime library directory (rpath) to a shared library.
    + bpo-20028: Improve error message of csv.Dialect when initializing. Patch by Vajrasky Kok and Dong-hee Na.
    + bpo-45343: Update bundled pip to 21.2.4 and setuptools to 58.1.0
    + bpo-41710: On Unix, if the sem_clockwait() function is available in the C library (glibc 2.30 and newer), the threading.Lock.acquire() method now uses the monotonic clock (time.CLOCK_MONOTONIC) for the timeout, rather than using the system clock (time.CLOCK_REALTIME), to not be affected by system clock changes. Patch by Victor Stinner.
    + bpo-45328: Fixed http.client.HTTPConnection to work properly in OSs that don?t support the TCP_NODELAY socket option.
    + bpo-1596321: Fix the threading._shutdown() function when the threading module was imported first from a thread different than the main thread: no longer log an error at Python exit.
    + bpo-45274: Fix a race condition in the Thread.join() method of the threading module. If the function is interrupted by a signal and the signal handler raises an exception, make sure that the thread remains in a consistent state to prevent a deadlock. Patch by Victor Stinner.
    + bpo-45238: Fix unittest.IsolatedAsyncioTestCase.debug(): it runs now asynchronous methods and callbacks.
    + bpo-36674: unittest.TestCase.debug() raises now a unittest.SkipTest if the class or the test method are decorated with the skipping decorator.
    + bpo-45235: Fix an issue where argparse would not preserve values in a provided namespace when using a subparser with defaults.
    + bpo-45234: Fixed a regression in copyfile(), copy(), copy2() raising FileNotFoundError when source is a directory, which should raise IsADirectoryError
    + bpo-45228: Fix stack buffer overflow in parsing J1939 network address.
    + bpo-45192: Fix the tempfile._infer_return_type function so that the dir argument of the tempfile functions accepts an object implementing the os.PathLike protocol.
    + bpo-45160: When tracing a tkinter variable used by a ttk OptionMenu, callbacks are no longer made twice.
    + bpo-35474: Calling mimetypes.guess_all_extensions() with strict=False no longer affects the result of the following call with strict=True. Also, mutating the returned list no longer affects the global state.
    + bpo-45166: typing.get_type_hints() now works with Final wrapped in ForwardRef.
    + bpo-45097: Remove deprecation warnings about the loop argument in asyncio incorrectly emitted in cases when the user does not pass the loop argument.
    + bpo-45081: Fix issue when dataclasses that inherit from typing.Protocol subclasses have wrong __init__. Patch provided by Yurii Karabas.
    + bpo-24444: Fixed an error raised in argparse help display when help for an option is set to 1+ blank spaces or when choices arg is an empty container.
    + bpo-45021: Fix a potential deadlock at shutdown of forked children when using concurrent.futures module
    + bpo-45030: Fix integer overflow in pickling and copying the range iterator.
    + bpo-39039: tarfile.open raises ReadError when a zlib error occurs during file extraction.
    + bpo-44594: Fix an edge case of ExitStack and AsyncExitStack exception chaining. They will now match with block behavior when __context__ is explicitly set to None when the exception is in flight.
  * Documentation
    + bpo-45726: Improve documentation for functools.singledispatch() and functools.singledispatchmethod.
    + bpo-45680: Amend the docs on GenericAlias objects to clarify that non-container classes can also implement __class_getitem__. Patch contributed by Alex Waygood.
    + bpo-45655: Add a new ?relevant PEPs? section to the top of the documentation for the typing module. Patch by Alex Waygood.
    + bpo-45604: Add level argument to multiprocessing.log_to_stderr function docs.
    + bpo-45464: Mention in the documentation of Built-in Exceptions that inheriting from multiple exception types in a single subclass is not recommended due to possible memory layout incompatibility.
    + bpo-45449: Add note about PEP 585 in collections.abc.
    + bpo-45516: Add protocol description to the importlib.abc.Traversable documentation.
    + bpo-20692: Add Programming FAQ entry explaining that int literal attribute access requires either a space after or parentheses around the literal.
    + bpo-45216: Remove extra documentation listing methods in difflib. It was rendering twice in pydoc and was outdated in some places.
    + bpo-45772: socket.socket documentation is corrected to a class from a function.
    + bpo-45392: Update the docstring of the type built-in to remove a redundant line and to mention keyword arguments for the constructor.
  * Tests
    + bpo-45578: Add tests for dis.distb()
    + bpo-45577: Add subtests for all pickle protocols in test_zoneinfo.
    + bpo-43592: test.libregrtest now raises the soft resource limit for the maximum number of file descriptors when the default is too low for our test suite as was often the case on macOS.
    + bpo-40173: Fix test.support.import_helper.import_fresh_module().
    + bpo-45280: Add a test case for empty typing.NamedTuple.
    + bpo-45269: Cover case when invalid markers type is supplied to c_make_encoder.
    + bpo-45209: Fix UserWarning: resource_tracker warning in _test_multiprocessing._TestSharedMemory.test_shared_memory_cleaned_after_process_termination
    + bpo-45195: Fix test_readline.test_nonascii(): sometimes, the newline character is not written at the end, so don?t expect it in the output. Patch by Victor Stinner.
    + bpo-45156: Fixes infinite loop on unittest.mock.seal() of mocks created by create_autospec().
    + bpo-45042: Fixes that test classes decorated with @hashlib_helper.requires_hashdigest were skipped all the time.
    + bpo-45235: Reverted an argparse bugfix that caused regression in the handling of default arguments for subparsers. This prevented leaf level arguments from taking precedence over root level arguments.
    + bpo-45765: In importlib.metadata, fix distribution discovery for an empty path.
    + bpo-45644: In-place JSON file formatting using python3 -m json.tool infile infile now works correctly, previously it left the file empty. Patch by Chris Wesseling.
  * Build
    + bpo-43158: setup.py now uses values from configure script to build the _uuid extension module. Configure now detects util-linux?s libuuid, too.
    + bpo-45571: Modules/Setup now use PY_CFLAGS_NODIST instead of PY_CFLAGS to compile shared modules.
    + bpo-45532: Update sys.version to use main as fallback information. Patch by Jeong YunWon.
    + bpo-45405: Prevent internal configure error when running configure with recent versions of non-Apple clang. Patch by David Bohman.
    + bpo-45220: Avoid building with the Windows 11 SDK previews automatically. This may be overridden by setting the DefaultWindowsSDKVersion environment variable before building.
  * C API
    + bpo-44687: BufferedReader.peek() no longer raises ValueError when the entire file has already been buffered.
    + bpo-44751: Remove crypt.h include from the public Python.h header.
- Drop patch incorrect-deprecation-warn-asyncio.patch, fix included.</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1642593600">- Update to 3.9.10:
  Bugfix-only release</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
</package>
<package pkgid="16fcdcb16e26243686be6a10fd6c4c77cfaeccd86c458d0b1f725e306e100bcf" name="libpython3_9-1_0-32bit" arch="x86_64">
  <version epoch="0" ver="3.9.10" rel="150300.4.8.1"/>
  <changelog author="code@bnavigator.de" date="1619956800">- Make sure to close the import_failed.map file after the exception
  has been raised in order to avoid ResourceWarnings when the
  failing import is part of a try...except block.</changelog>
  <changelog author="mcepl@suse.com" date="1620216000">- Update to 3.9.5:
  * Security
  - bpo-43434: Creating a sqlite3.Connection object now also
    produces a sqlite3.connect auditing event. Previously this
    event was only produced by sqlite3.connect() calls. Patch
    by Erlend E. Aasland.
  - bpo-43882: The presence of newline or tab characters in
    parts of a URL could allow some forms of attacks.
  - Following the controlling specification for URLs defined by
    WHATWG urllib.parse() now removes ASCII newlines and tabs
    from URLs, preventing such attacks.
  - bpo-43472: Ensures interpreter-level audit hooks receive
    the cpython.PyInterpreterState_New event when called
    through the _xxsubinterpreters module.
  - bpo-36384 (bsc#1185706, CVE-2021-29921): ipaddress module
    no longer accepts any leading zeros in IPv4 address
    strings. Leading zeros are ambiguous and interpreted as
    octal notation by some libraries. For example the legacy
    function socket.inet_aton() treats leading zeros as octal
    notatation. glibc implementation of modern inet_pton() does
    not accept any leading zeros. For a while the ipaddress
    module used to accept ambiguous leading zeros.
  - bpo-43075 (CVE-2021-3733, bsc#1189287): Fix Regular
    Expression Denial of Service (ReDoS) vulnerability in
    urllib.request.AbstractBasicAuthHandler. The
    ReDoS-vulnerable regex has quadratic worst-case complexity
    and it allows cause a denial of service when identifying
    crafted invalid RFCs. This ReDoS issue is on the client
    side and needs remote attackers to control the HTTP server.
  - bpo-42800: Audit hooks are now fired for frame.f_code,
    traceback.tb_frame, and generator code/frame attribute
    access.
  * Core and Builtins
  - bpo-43105: Importlib now resolves relative paths when
    creating module spec objects from file locations.
  - bpo-42924: Fix bytearray repetition incorrectly copying
    data from the start of the buffer, even if the data is
    offset within the buffer (e.g. after reassigning a slice at
    the start of the bytearray to a shorter byte string).
  * Library
  - bpo-43993: Update bundled pip to 21.1.1.
  - bpo-43937: Fixed the turtle module working with non-default
    root window.
  - bpo-43930: Update bundled pip to 21.1 and setuptools to
    56.0.0
  - bpo-43920: OpenSSL 3.0.0: load_verify_locations() now
    returns a consistent error message when cadata contains no
    valid certificate.
  - bpo-43607: urllib can now convert Windows paths with \\?\
    prefixes into URL paths.
  - bpo-43284: platform.win32_ver derives the windows version
    from sys.getwindowsversion().platform_version which in turn
    derives the version from kernel32.dll (which can be of
    a different version than Windows itself). Therefore change
    the platform.win32_ver to determine the version using the
    platform module?s _syscmd_ver private function to return an
    accurate version.
  - bpo-42248: [Enum] ensure exceptions raised in _missing__
    are released
  - bpo-43799: OpenSSL 3.0.0: define OPENSSL_API_COMPAT 1.1.1
    to suppress deprecation warnings. Python requires OpenSSL
    1.1.1 APIs.
  - bpo-43794: Add ssl.OP_IGNORE_UNEXPECTED_EOF constants
    (OpenSSL 3.0.0)
  - bpo-43789: OpenSSL 3.0.0: Don?t call the password callback
    function a second time when first call has signaled an
    error condition.
  - bpo-43788: The header files for ssl error codes are now
    OpenSSL version-specific. Exceptions will now show correct
    reason and library codes. The make_ssl_data.py script has
    been rewritten to use OpenSSL?s text file with error codes.
  - bpo-43655: tkinter dialog windows are now recognized as
    dialogs by window managers on macOS and X Window.
  - bpo-43534: turtle.textinput() and turtle.numinput() create
    now a transient window working on behalf of the canvas
    window.
  - bpo-43522: Fix problem with hostname_checks_common_name.
    OpenSSL does not copy hostflags from struct SSL_CTX to
    struct SSL.
  - bpo-42967: Allow bytes separator argument in
    urllib.parse.parse_qs and urllib.parse.parse_qsl when
    parsing str query strings. Previously, this raised
    a TypeError.
  - bpo-43176: Fixed processing of a dataclass that inherits
    from a frozen dataclass with no fields. It is now correctly
    detected as an error.
  - bpo-41735: Fix thread locks in zlib module may go wrong in
    rare case. Patch by Ma Lin.
  - bpo-36470: Fix dataclasses with InitVars and replace().
    Patch by Claudiu Popa.
  - bpo-32745: Fix a regression in the handling of ctypes?
    ctypes.c_wchar_p type: embedded null characters would cause
    a ValueError to be raised. Patch by Zackery Spytz.
  * Documentation
  - bpo-43959: The documentation on the PyContextVar C-API was
    clarified.
  - bpo-43938: Update dataclasses documentation to express that
    FrozenInstanceError is derived from AttributeError.
  - bpo-43755: Update documentation to reflect that
    unparenthesized lambda expressions can no longer be the
    expression part in an if clause in comprehensions and
    generator expressions since Python 3.9.
  - bpo-43739: Fixing the example code in
    Doc/extending/extending.rst to declare and initialize the
    pmodule variable to be of the right type.
  * Tests
  - bpo-43961: Fix
    test_logging.test_namer_rotator_inheritance() on Windows:
    use os.replace() rather than os.rename(). Patch by Victor
    Stinner.
  - bpo-43842: Fix a race condition in the SMTP test of
    test_logging. Don?t close a file descriptor (socket) from
    a different thread while asyncore.loop() is polling the
    file descriptor. Patch by Victor Stinner.
  - bpo-43811: Tests multiple OpenSSL versions on GitHub
    Actions. Use ccache to speed up testing.
  - bpo-43791: OpenSSL 3.0.0: Disable testing of legacy
    protocols TLS 1.0 and 1.1. Tests are failing with
    TLSV1_ALERT_INTERNAL_ERROR.
- Refreshed patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - python-3.3.0b1-fix_date_time_compiler.patch
- Add vendorized files from bluez-devel to enable building support for
  Bluetooth.</changelog>
  <changelog author="mcepl@suse.com" date="1621598400">- Stop providing "python" symbol (bsc#1185588), which means
  python2 currently.</changelog>
  <changelog author="dcermak@suse.com" date="1622635200">- Exclude test_capi on Leap (test fails there)</changelog>
  <changelog author="dmueller@suse.com" date="1622808000">- allow build with Sphinx &gt;= 3.x</changelog>
  <changelog author="mcepl@suse.com" date="1622894400">- Revert previous skip over test_capi
- Add skip-test_pyobject_freed_is_freed.patch to skip failing
  test on SLE-15.</changelog>
  <changelog author="mcepl@suse.com" date="1624104000">- Add bpo44426-complex-keyword-sphinx.patch allowing generating
  documentation with Sphinx 4 (bpo#44426).</changelog>
  <changelog author="mcepl@suse.com" date="1627905600">- Use versioned python-Sphinx to avoid dependency on other
  version of Python (bsc#1183858).</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1628510400">- Update to 3.9.6:
  * Security
  - bpo-44022 (bsc#1189241, CVE-2021-3737): http.client now
    avoids infinitely reading potential HTTP headers after
    a 100 Continue status response from the server.
  * Core and Builtins
  - bpo-44168: Fix error message in the parser involving keyword
    arguments with invalid expressions. Patch by Pablo Galindo
  - bpo-44114: Fix incorrect dictkeys_reversed and
    dictitems_reversed function signatures in C code, which broke
    webassembly builds.
  - bpo-44070: No longer eagerly makes import filenames absolute,
    except for extension modules, which was introduced in 3.9.5.
  - bpo-28146: Fix a confusing error message in str.format().
  - bpo-11105: When compiling ast.AST objects with recursive
    references through compile(), the interpreter doesn?t crash
    anymore instead it raises a RecursionError.
  * Library
  - bpo-43972: When http.server.SimpleHTTPRequestHandler sends a
    301 (Moved Permanently) for a directory path not ending with
    /, add a Content-Length: 0 header. This improves the behavior
    for certain clients.
  - bpo-43776: When subprocess.Popen args are provided as a
    string or as pathlib.Path, the Popen instance repr now shows
    the right thing.
  - bpo-43318: Fix a bug where pdb does not always echo cleared
    breakpoints.
  - bpo-43295: datetime.datetime.strptime() now raises ValueError
    instead of IndexError when matching 'z' with the %z format
    specifier.
  - bpo-37022: pdb now displays exceptions from repr() with its p
    and pp commands.
  * IDLE
  - bpo-33962: Move the indent space setting from the Font tab to
    the new Windows tab. Patch by Mark Roseman and Terry Jan
    Reedy.
  - bpo-40468: Split the settings dialog General tab into Windows
    and Shell/ED tabs. Move help sources, which extend the Help
    menu, to the Extensions tab. Make space for new options and
    shorten the dialog. The latter makes the dialog better fit
    small screens.
  - bpo-41611: Avoid uncaught exceptions in
    AutoCompleteWindow.winconfig_event().
  - bpo-41611: Fix IDLE sometimes freezing upon tab-completion on
    macOS.
  * Tools/Demos
  - bpo-44074: Make patchcheck automatically detect the correct
    base branch name (previously it was hardcoded to ?master?)
- Upstreamed patches were removed:
  - bpo44426-complex-keyword-sphinx.patch
- Refreshed patches:
  - subprocess-raise-timeout.patch</changelog>
  <changelog author="schwab@suse.de" date="1629979200">- test_faulthandler is still problematic under qemu linux-user emulation,
  disable it there
- Reenable profileopt with qemu emulation, test_faulthandler is no longer
  run during profiling</changelog>
  <changelog author="mcepl@suse.com" date="1630065600">- Add decimal.patch to add building with --with-system-libmpdec
  option (bsc#1189356).</changelog>
  <changelog author="mcepl@suse.com" date="1630411200">- Update to 3.9.7:
  - Security
  - Replaced usage of tempfile.mktemp() with TemporaryDirectory
    to avoid a potential race condition.
  - Add auditing events to the marshal module, and stop raising
    code.__init__ events for every unmarshalled code object.
    Directly instantiated code objects will continue to raise
    an event, and audit event handlers should inspect or
    collect the raw marshal data. This reduces a significant
    performance overhead when loading from .pyc files.
  - Made the internal putcmd function in smtplib sanitize input
    for presence of \r and \n characters to avoid (unlikely)
    command injection.
  - Core and Builtins
  - Fixed pickling of range iterators that iterated for over
    2**32 times.
  - Fix a race in WeakKeyDictionary, WeakValueDictionary and
    WeakSet when two threads attempt to commit the last pending
    removal. This fixes asyncio.create_task and fixes a data
    loss in asyncio.run where shutdown_asyncgens is not run
  - Fixed a corner case bug where the result of
    float.fromhex('0x.8p-1074') was rounded the wrong way.
  - Refine the syntax error for trailing commas in import
    statements. Patch by Pablo Galindo.
  - Restore behaviour of complex exponentiation with
    integer-valued exponent of type float or complex.
  - Correct the ast locations of f-strings with format specs
    and repeated expressions. Patch by Pablo Galindo
  - Use new trashcan macros (Py_TRASHCAN_BEGIN/END) in
    frameobject.c instead of the old ones
    (Py_TRASHCAN_SAFE_BEGIN/END).
  - Fix segmentation fault with deep recursion when cleaning
    method objects. Patch by Augusto Goulart and Pablo Galindo.
  - Fix bug where PyErr_SetObject hangs when the current
    exception has a cycle in its context chain.
  - Fix reference leaks in the error paths of update_bases()
    and __build_class__. Patch by Pablo Galindo.
  - Fix undefined behaviour in complex object exponentiation.
  - Remove uses of PyObject_GC_Del() in error path when
    initializing types.GenericAlias.
  - Remove the pass-through for hash() of weakref.proxy objects
    to prevent unintended consequences when the original
    referred object dies while the proxy is part of a hashable
    object. Patch by Pablo Galindo.
  - Fix ltrace functionality when exceptions are raised. Patch
    by Pablo Galindo
  - Fix a crash at Python exit when a deallocator function
    removes the last strong reference to a heap type. Patch by
    Victor Stinner.
  - Fix crash when using passing a non-exception to
    a generator?s throw() method. Patch by Noah Oxer
  - Library
  - run() now always return a TestResult instance. Previously
    it returned None if the test class or method was decorated
    with a skipping decorator.
  - Fix bugs in cleaning up classes and modules in unittest:
  - Functions registered with addModuleCleanup() were not
    called unless the user defines tearDownModule() in
    their test module.
  - Functions registered with addClassCleanup() were not
    called if tearDownClass is set to None.
  - Buffering in TestResult did not work with functions
    registered with addClassCleanup() and
    addModuleCleanup().
  - Errors in functions registered with addClassCleanup()
    and addModuleCleanup() were not handled correctly in
    buffered and debug modes.
  - Errors in setUpModule() and functions registered with
    addModuleCleanup() were reported in wrong order.
  - And several lesser bugs.
  - Made email date parsing more robust against malformed
    input, namely a whitespace-only Date: header. Patch by
    Wouter Bolsterlee.
  - Fix a crash in the signal handler of the faulthandler
    module: no longer modify the reference count of frame
    objects. Patch by Victor Stinner.
  - Method stopTestRun() is now always called in pair with
    method startTestRun() for TestResult objects implicitly
    created in run(). Previously it was not called for test
    methods and classes decorated with a skipping decorator.
  - argparse.BooleanOptionalAction?s default value is no longer
    printed twice when used with
    argparse.ArgumentDefaultsHelpFormatter.
  - Upgrade bundled pip to 21.2.3 and setuptools to 57.4.0
  - Fix the os.set_inheritable() function on FreeBSD 14 for
    file descriptor opened with the O_PATH flag: ignore the
    EBADF error on ioctl(), fallback on the fcntl()
    implementation. Patch by Victor Stinner.
  - The @functools.total_ordering() decorator now works with
    metaclasses.
  - sqlite3 user-defined functions and aggregators returning
    strings with embedded NUL characters are no longer
    truncated. Patch by Erlend E. Aasland.
  - Always show loop= arg deprecations in asyncio.gather() and
    asyncio.sleep()
  - Non-protocol subclasses of typing.Protocol ignore now the
    __init__ method inherited from protocol base classes.
  - The tokenize.tokenize() doesn?t incorrectly generate
    a NEWLINE token if the source doesn?t end with a new line
    character but the last line is a comment, as the function
    is already generating a NL token. Patch by Pablo Galindo
  - Fix http.client.HTTPSConnection fails to download &gt;2GiB
    data.
  - rcompleter does not call getattr() on property objects to
    avoid the side-effect of evaluating the corresponding
    method.
  - weakref.proxy objects referencing non-iterators now raise
    TypeError rather than dereferencing the null tp_iternext
    slot and crashing.
  - The implementation of collections.abc.Set._hash() now
    matches that of frozenset.__hash__().
  - Fixed issue in compileall.compile_file() when sys.stdout is
    redirected. Patch by Stefan Hölzl.
  - Give priority to using the current class constructor in
    inspect.signature(). Patch by Weipeng Hong.
  - Fix memory leak in _tkinter._flatten() if it is called with
    a sequence or set, but not list or tuple.
  - Update shutil.copyfile() to raise FileNotFoundError instead
    of confusing IsADirectoryError when a path ending with
    a os.path.sep does not exist; shutil.copy() and
    shutil.copy2() are also affected.
  - handle StopIteration subclass raised from
    @contextlib.contextmanager generator
  - Make the implementation consistency of indexOf() between
    C and Python versions. Patch by Dong-hee Na.
  - Fixes TypedDict to work with typing.get_type_hints() and
    postponed evaluation of annotations across modules.
  - Fix bug with pdb?s handling of import error due to
    a package which does not have a __main__ module
  - Fixed an exception thrown while parsing a malformed
    multipart email by email.message.EmailMessage.
  - pathlib.PureWindowsPath.is_reserved() now identifies
    a greater range of reserved filenames, including those with
    trailing spaces or colons.
  - Handle exceptions from parsing the arg of pdb?s run/restart
    command.
  - The sqlite3 context manager now performs a rollback (thus
    releasing the database lock) if commit failed. Patch by
    Luca Citi and Erlend E. Aasland.
  - Improved string handling for sqlite3 user-defined functions
    and aggregates:
  - It is now possible to pass strings with embedded null
    characters to UDFs
  - Conversion failures now correctly raise MemoryError
  - Patch by Erlend E. Aasland.
  - Handle RecursionError in TracebackException?s constructor,
    so that long exceptions chains are truncated instead of
    causing traceback formatting to fail.
  - Fix email.message.EmailMessage.set_content() when called
    with binary data and 7bit content transfer encoding.
  - The compresslevel and preset keyword arguments of
    tarfile.open() are now both documented and tested.
  - Fixed a Y2k38 bug in the compileall module where it would
    fail to compile files with a modification time after the
    year 2038.
  - Fix test___all__ on platforms lacking a shared memory
    implementation.
  - Pass multiprocessing BaseProxy argument manager_owned
    through AutoProxy.
  - email.utils.getaddresses() now accepts email.header.Header
    objects along with string values. Patch by Zackery Spytz.
  - lib2to3 now recognizes async generators everywhere.
  - Fix TypeError when required subparsers without dest do not
    receive arguments. Patch by Anthony Sottile.
  - Documentation
  - Removed the othergui.rst file, any references to it, and
    the list of GUI frameworks in the FAQ. In their place I?ve
    added links to the Python Wiki page on GUI frameworks.
  - Update the definition of __future__ in the glossary by
    replacing the confusing word ?pseudo-module? with a more
    accurate description.
  - Add typical examples to os.path.splitext docs
  - Clarify that shutil.make_archive() is not thread-safe due
    to reliance on changing the current working directory.
  - Update of three expired hyperlinks in
    Doc/distributing/index.rst: ?Project structure?, ?Building
    and packaging the project?, and ?Uploading the project to
    the Python Packaging Index?.
  - Updated the docstring and docs of filecmp.cmp() to be more
    accurate and less confusing especially in respect to
    shallow arg.
  - Match the docstring and python implementation of countOf()
    to the behavior of its c implementation.
  - List all kwargs for textwrap.wrap(), textwrap.fill(), and
    textwrap.shorten(). Now, there are nav links to attributes
    of TextWrap, which makes navigation much easier while
    minimizing duplication in the documentation.
  - Clarify that atexit uses equality comparisons internally.
  - Documentation of csv.Dialect is more descriptive.
  - Fix documentation for the return type of
    sysconfig.get_path().
  - Add a ?Security Considerations? index which links to
    standard library modules that have explicitly documented
    security considerations.
  - Remove the unqualified claim that tkinter is threadsafe. It
    has not been true for several years and likely never was.
    An explanation of what is true may be added later, after
    more discussion, and possibly after patching _tkinter.c,
  - Tests
  - Add calls of gc.collect() in tests to support PyPy.
  - Made tests relying on the _asyncio C extension module
    optional to allow running on alternative Python
    implementations. Patch by Serhiy Storchaka.
  - Fix auto history tests of test_readline: sometimes, the
    newline character is not written at the end, so don?t
    expect it in the output.
  - Add ability to wholesale silence DeprecationWarnings while
    running the regression test suite.
  - Notify users running test_decimal regression tests on macOS
    of potential harmless ?malloc can?t allocate region?
    messages spewed by test_decimal.
  - Fixed floating point precision issue in turtle tests.
  - Regression tests, when run with -w, are now re-running only
    the affected test methods instead of re-running the entire
    test file.
  - Add test for nested queues when using multiprocessing
    shared objects AutoProxy[Queue] inside ListProxy and
    DictProxy</changelog>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635595200">- Add incorrect-deprecation-warn-asyncio.patch to fix bpo#45097
  (from gh#python/cpython#28153) to remove incorrect deprecation
  warnings in asyncio.</changelog>
  <changelog author="mcepl@suse.com" date="1636200000">- rpm-build-python dependency is available on the current
  Factory, not with SLE.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637150400">- Update to 3.9.9:
  * Core and Builtins
    + bpo-30570: Fixed a crash in issubclass() from infinite recursion when searching pathological __bases__ tuples.
    + bpo-45494: Fix parser crash when reporting errors involving invalid continuation characters. Patch by Pablo Galindo.
    + bpo-45385: Fix reference leak from descr_check. Patch by Dong-hee Na.
    + bpo-45167: Fix deepcopying of types.GenericAlias objects.
    + bpo-44219: Release the GIL while performing isatty system calls on arbitrary file descriptors. In particular, this affects os.isatty(), os.device_encoding() and io.TextIOWrapper. By extension, io.open() in text mode is also affected. This change solves a deadlock in os.isatty(). Patch by Vincent Michel in bpo-44219.
    + bpo-44959: Added fallback to extension modules with ?.sl? suffix on HP-UX
    + bpo-44050: Extensions that indicate they use global state (by setting m_size to -1) can again be used in multiple interpreters. This reverts to behavior of Python 3.8.
    + bpo-45121: Fix issue where Protocol.__init__ raises RecursionError when it?s called directly or via super(). Patch provided by Yurii Karabas.
    + bpo-45083: When the interpreter renders an exception, its name now has a complete qualname. Previously only the class name was concatenated to the module name, which sometimes resulted in an incorrect full name being displayed.
    + bpo-45738: Fix computation of error location for invalid continuation characters in the parser. Patch by Pablo Galindo.
    + Library
    + bpo-45678: Fix bug in Python 3.9 that meant functools.singledispatchmethod failed to properly wrap the attributes of the target method. Patch by Alex Waygood.
    + bpo-45679: Fix caching of multi-value typing.Literal. Literal[True, 2] is no longer equal to Literal[1, 2].
    + bpo-45438: Fix typing.Signature string representation for generic builtin types.
    + bpo-45581: sqlite3.connect() now correctly raises MemoryError if the underlying SQLite API signals memory error. Patch by Erlend E. Aasland.
    + bpo-39679: Fix bug in functools.singledispatchmethod that caused it to fail when attempting to register a classmethod() or staticmethod() using type annotations. Patch contributed by Alex Waygood.
    + bpo-45515: Add references to zoneinfo in the datetime documentation, mostly replacing outdated references to dateutil.tz. Change by Paul Ganssle.
    + bpo-45467: Fix incremental decoder and stream reader in the ?raw-unicode-escape? codec. Previously they failed if the escape sequence was split.
    + bpo-45461: Fix incremental decoder and stream reader in the ?unicode-escape? codec. Previously they failed if the escape sequence was split.
    + bpo-45239: Fixed email.utils.parsedate_tz() crashing with UnboundLocalError on certain invalid input instead of returning None. Patch by Ben Hoyt.
    + bpo-44904: Fix bug in the doctest module that caused it to fail if a docstring included an example with a classmethod property. Patch by Alex Waygood.
    + bpo-45406: Make inspect.getmodule() catch FileNotFoundError raised by :?func:inspect.getabsfile, and return None to indicate that the module could not be determined.
    + bpo-45262: Prevent use-after-free in asyncio. Make sure the cached running loop holder gets cleared on dealloc to prevent use-after-free in get_running_loop
    + bpo-45386: Make xmlrpc.client more robust to C runtimes where the underlying C strftime function results in a ValueError when testing for year formatting options.
    + bpo-45371: Fix clang rpath issue in distutils. The UnixCCompiler now uses correct clang option to add a runtime library directory (rpath) to a shared library.
    + bpo-20028: Improve error message of csv.Dialect when initializing. Patch by Vajrasky Kok and Dong-hee Na.
    + bpo-45343: Update bundled pip to 21.2.4 and setuptools to 58.1.0
    + bpo-41710: On Unix, if the sem_clockwait() function is available in the C library (glibc 2.30 and newer), the threading.Lock.acquire() method now uses the monotonic clock (time.CLOCK_MONOTONIC) for the timeout, rather than using the system clock (time.CLOCK_REALTIME), to not be affected by system clock changes. Patch by Victor Stinner.
    + bpo-45328: Fixed http.client.HTTPConnection to work properly in OSs that don?t support the TCP_NODELAY socket option.
    + bpo-1596321: Fix the threading._shutdown() function when the threading module was imported first from a thread different than the main thread: no longer log an error at Python exit.
    + bpo-45274: Fix a race condition in the Thread.join() method of the threading module. If the function is interrupted by a signal and the signal handler raises an exception, make sure that the thread remains in a consistent state to prevent a deadlock. Patch by Victor Stinner.
    + bpo-45238: Fix unittest.IsolatedAsyncioTestCase.debug(): it runs now asynchronous methods and callbacks.
    + bpo-36674: unittest.TestCase.debug() raises now a unittest.SkipTest if the class or the test method are decorated with the skipping decorator.
    + bpo-45235: Fix an issue where argparse would not preserve values in a provided namespace when using a subparser with defaults.
    + bpo-45234: Fixed a regression in copyfile(), copy(), copy2() raising FileNotFoundError when source is a directory, which should raise IsADirectoryError
    + bpo-45228: Fix stack buffer overflow in parsing J1939 network address.
    + bpo-45192: Fix the tempfile._infer_return_type function so that the dir argument of the tempfile functions accepts an object implementing the os.PathLike protocol.
    + bpo-45160: When tracing a tkinter variable used by a ttk OptionMenu, callbacks are no longer made twice.
    + bpo-35474: Calling mimetypes.guess_all_extensions() with strict=False no longer affects the result of the following call with strict=True. Also, mutating the returned list no longer affects the global state.
    + bpo-45166: typing.get_type_hints() now works with Final wrapped in ForwardRef.
    + bpo-45097: Remove deprecation warnings about the loop argument in asyncio incorrectly emitted in cases when the user does not pass the loop argument.
    + bpo-45081: Fix issue when dataclasses that inherit from typing.Protocol subclasses have wrong __init__. Patch provided by Yurii Karabas.
    + bpo-24444: Fixed an error raised in argparse help display when help for an option is set to 1+ blank spaces or when choices arg is an empty container.
    + bpo-45021: Fix a potential deadlock at shutdown of forked children when using concurrent.futures module
    + bpo-45030: Fix integer overflow in pickling and copying the range iterator.
    + bpo-39039: tarfile.open raises ReadError when a zlib error occurs during file extraction.
    + bpo-44594: Fix an edge case of ExitStack and AsyncExitStack exception chaining. They will now match with block behavior when __context__ is explicitly set to None when the exception is in flight.
  * Documentation
    + bpo-45726: Improve documentation for functools.singledispatch() and functools.singledispatchmethod.
    + bpo-45680: Amend the docs on GenericAlias objects to clarify that non-container classes can also implement __class_getitem__. Patch contributed by Alex Waygood.
    + bpo-45655: Add a new ?relevant PEPs? section to the top of the documentation for the typing module. Patch by Alex Waygood.
    + bpo-45604: Add level argument to multiprocessing.log_to_stderr function docs.
    + bpo-45464: Mention in the documentation of Built-in Exceptions that inheriting from multiple exception types in a single subclass is not recommended due to possible memory layout incompatibility.
    + bpo-45449: Add note about PEP 585 in collections.abc.
    + bpo-45516: Add protocol description to the importlib.abc.Traversable documentation.
    + bpo-20692: Add Programming FAQ entry explaining that int literal attribute access requires either a space after or parentheses around the literal.
    + bpo-45216: Remove extra documentation listing methods in difflib. It was rendering twice in pydoc and was outdated in some places.
    + bpo-45772: socket.socket documentation is corrected to a class from a function.
    + bpo-45392: Update the docstring of the type built-in to remove a redundant line and to mention keyword arguments for the constructor.
  * Tests
    + bpo-45578: Add tests for dis.distb()
    + bpo-45577: Add subtests for all pickle protocols in test_zoneinfo.
    + bpo-43592: test.libregrtest now raises the soft resource limit for the maximum number of file descriptors when the default is too low for our test suite as was often the case on macOS.
    + bpo-40173: Fix test.support.import_helper.import_fresh_module().
    + bpo-45280: Add a test case for empty typing.NamedTuple.
    + bpo-45269: Cover case when invalid markers type is supplied to c_make_encoder.
    + bpo-45209: Fix UserWarning: resource_tracker warning in _test_multiprocessing._TestSharedMemory.test_shared_memory_cleaned_after_process_termination
    + bpo-45195: Fix test_readline.test_nonascii(): sometimes, the newline character is not written at the end, so don?t expect it in the output. Patch by Victor Stinner.
    + bpo-45156: Fixes infinite loop on unittest.mock.seal() of mocks created by create_autospec().
    + bpo-45042: Fixes that test classes decorated with @hashlib_helper.requires_hashdigest were skipped all the time.
    + bpo-45235: Reverted an argparse bugfix that caused regression in the handling of default arguments for subparsers. This prevented leaf level arguments from taking precedence over root level arguments.
    + bpo-45765: In importlib.metadata, fix distribution discovery for an empty path.
    + bpo-45644: In-place JSON file formatting using python3 -m json.tool infile infile now works correctly, previously it left the file empty. Patch by Chris Wesseling.
  * Build
    + bpo-43158: setup.py now uses values from configure script to build the _uuid extension module. Configure now detects util-linux?s libuuid, too.
    + bpo-45571: Modules/Setup now use PY_CFLAGS_NODIST instead of PY_CFLAGS to compile shared modules.
    + bpo-45532: Update sys.version to use main as fallback information. Patch by Jeong YunWon.
    + bpo-45405: Prevent internal configure error when running configure with recent versions of non-Apple clang. Patch by David Bohman.
    + bpo-45220: Avoid building with the Windows 11 SDK previews automatically. This may be overridden by setting the DefaultWindowsSDKVersion environment variable before building.
  * C API
    + bpo-44687: BufferedReader.peek() no longer raises ValueError when the entire file has already been buffered.
    + bpo-44751: Remove crypt.h include from the public Python.h header.
- Drop patch incorrect-deprecation-warn-asyncio.patch, fix included.</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1642593600">- Update to 3.9.10:
  Bugfix-only release</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
</package>
<package pkgid="ec6009ea9cb79dc42f732eba9c12b57db16dcfa6f2370a95960c544bba981683" name="libquadmath0" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="f37623b2bb0db47bdec063f9388049a754fbcead39010daaa9cdd51feeb58935" name="libquadmath0" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="6d38fc953ffaf0b98c088313c4dcc9e8e2d50319664b604796bdee17baedbd80" name="libquadmath0-32bit" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="d6f265d0c96e97c38cd5d8d7a60a84a3b2ac28a51db6b0fc2d5bdb57f6148c28" name="librabbitmq-devel" arch="aarch64">
  <version epoch="0" ver="0.10.0" rel="150300.5.3.1"/>
  <changelog author="tuukka.pasanen@ilmi.fi" date="1527508800">- Update to version 0.9.0
  * amqp-publish: added support for specifying headers via the -H flag
  * Add support for specifying timeout for amqp_login calls via
  * amqp_set_handshake_timeout
  * Add support for specifying timeouts in RPC-style AMQP methods via
  * amqp_set_rpc_timeout
  * Add define for AMQP_DEFAULT_VHOST
  * Support for SSL SNI
  * Support for OpenSSL v1.1.0
- Changed:
  * rabbitmq-c now requires Windows Vista or better
  * rabbitmq-c enables TCP keep-alive by default on platforms that support it
  * dropped support for compiling rabbitmq-c without threading support
  * OpenSSL is no longer un-intialized automatically by default. OpenSSL can be
    explicitly initialized by calling amqp_initialize_ssl_library and
    uninitialized by calling amqp_uninitialize_ssl_library.
- Fixed:
  * Correct bugs in processing of --url flag in tools (#364).
  * Improve documentation on AMQP_SASL_METHOD_EXTERNAL (#349)
  * Improve support for compiling under mingw-w64
  * Better support for handing SIGPIPE on Linux over SSL (#401)
  * Improve publish performance on Linux by not specifying MSG_MORE on last part
    of message.
  * Fix connection logic where multiple hostnames won't be tried if
    connection to doesn't fail immediately (#430)
- Removed:
  * autotools build system has been removed
  * many duplicate amqps_* examples, they did not add a lot of value</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- rework the package [jsc#SLE-12262]:
  * run spec-cleaner
  * use cmake macros
  * source package name after github project, library package
    as subpackage
  * update to 0.10.0
  - amqp_ssl_socket_get_context can be used to get the current OpenSSL CTX*
    associated with a connection.
  - openssl: missing OpenSSL config is ignored as an OpenSSL init error (#523)
  - AMQP_DEFAULT_MAX_CHANNELS is now set to 2047 to follow current default channel
    limit in the RabbitMQ broker. (#513)
  - add additional input validation to prevent integer overflow when parsing a
    frame header. This addresses CVE-2019-18609.</changelog>
  <changelog author="pgajdos@suse.com" date="1599134400">- do not skip test_basic, try to run rabbitmq-server instead
- deleted patches
  - rabbitmq-c-remove_failing_test-0.9.0.patch (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1604059200">- fix tests for SLE15</changelog>
  <changelog author="pgajdos@suse.com" date="1608206400">- %check: use rabbitmqctl await_startup to wait for RabbitMQ
  server start and rabbitmqctl stop for stopping the server
  [bsc#1180096]</changelog>
  <changelog author="bwiedemann@suse.com" date="1608638400">- Add reproducible.patch to override build date (boo#1047218)</changelog>
  <changelog author="pgajdos@suse.com" date="1651060800">- give up to run testsuite when the server will not start in time
  [bsc#1198202]</changelog>
</package>
<package pkgid="a44cfd68778102976a6d81c9847816e78b2f2f1ff1fb81b79817ef3943970db6" name="librabbitmq-devel" arch="ppc64le">
  <version epoch="0" ver="0.10.0" rel="150300.5.3.1"/>
  <changelog author="tuukka.pasanen@ilmi.fi" date="1527508800">- Update to version 0.9.0
  * amqp-publish: added support for specifying headers via the -H flag
  * Add support for specifying timeout for amqp_login calls via
  * amqp_set_handshake_timeout
  * Add support for specifying timeouts in RPC-style AMQP methods via
  * amqp_set_rpc_timeout
  * Add define for AMQP_DEFAULT_VHOST
  * Support for SSL SNI
  * Support for OpenSSL v1.1.0
- Changed:
  * rabbitmq-c now requires Windows Vista or better
  * rabbitmq-c enables TCP keep-alive by default on platforms that support it
  * dropped support for compiling rabbitmq-c without threading support
  * OpenSSL is no longer un-intialized automatically by default. OpenSSL can be
    explicitly initialized by calling amqp_initialize_ssl_library and
    uninitialized by calling amqp_uninitialize_ssl_library.
- Fixed:
  * Correct bugs in processing of --url flag in tools (#364).
  * Improve documentation on AMQP_SASL_METHOD_EXTERNAL (#349)
  * Improve support for compiling under mingw-w64
  * Better support for handing SIGPIPE on Linux over SSL (#401)
  * Improve publish performance on Linux by not specifying MSG_MORE on last part
    of message.
  * Fix connection logic where multiple hostnames won't be tried if
    connection to doesn't fail immediately (#430)
- Removed:
  * autotools build system has been removed
  * many duplicate amqps_* examples, they did not add a lot of value</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- rework the package [jsc#SLE-12262]:
  * run spec-cleaner
  * use cmake macros
  * source package name after github project, library package
    as subpackage
  * update to 0.10.0
  - amqp_ssl_socket_get_context can be used to get the current OpenSSL CTX*
    associated with a connection.
  - openssl: missing OpenSSL config is ignored as an OpenSSL init error (#523)
  - AMQP_DEFAULT_MAX_CHANNELS is now set to 2047 to follow current default channel
    limit in the RabbitMQ broker. (#513)
  - add additional input validation to prevent integer overflow when parsing a
    frame header. This addresses CVE-2019-18609.</changelog>
  <changelog author="pgajdos@suse.com" date="1599134400">- do not skip test_basic, try to run rabbitmq-server instead
- deleted patches
  - rabbitmq-c-remove_failing_test-0.9.0.patch (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1604059200">- fix tests for SLE15</changelog>
  <changelog author="pgajdos@suse.com" date="1608206400">- %check: use rabbitmqctl await_startup to wait for RabbitMQ
  server start and rabbitmqctl stop for stopping the server
  [bsc#1180096]</changelog>
  <changelog author="bwiedemann@suse.com" date="1608638400">- Add reproducible.patch to override build date (boo#1047218)</changelog>
  <changelog author="pgajdos@suse.com" date="1651060800">- give up to run testsuite when the server will not start in time
  [bsc#1198202]</changelog>
</package>
<package pkgid="97916956edcbed2c599a023a3d688ff35e08c8af81864aa32476f68d65b548d6" name="librabbitmq-devel" arch="s390x">
  <version epoch="0" ver="0.10.0" rel="150300.5.3.1"/>
  <changelog author="tuukka.pasanen@ilmi.fi" date="1527508800">- Update to version 0.9.0
  * amqp-publish: added support for specifying headers via the -H flag
  * Add support for specifying timeout for amqp_login calls via
  * amqp_set_handshake_timeout
  * Add support for specifying timeouts in RPC-style AMQP methods via
  * amqp_set_rpc_timeout
  * Add define for AMQP_DEFAULT_VHOST
  * Support for SSL SNI
  * Support for OpenSSL v1.1.0
- Changed:
  * rabbitmq-c now requires Windows Vista or better
  * rabbitmq-c enables TCP keep-alive by default on platforms that support it
  * dropped support for compiling rabbitmq-c without threading support
  * OpenSSL is no longer un-intialized automatically by default. OpenSSL can be
    explicitly initialized by calling amqp_initialize_ssl_library and
    uninitialized by calling amqp_uninitialize_ssl_library.
- Fixed:
  * Correct bugs in processing of --url flag in tools (#364).
  * Improve documentation on AMQP_SASL_METHOD_EXTERNAL (#349)
  * Improve support for compiling under mingw-w64
  * Better support for handing SIGPIPE on Linux over SSL (#401)
  * Improve publish performance on Linux by not specifying MSG_MORE on last part
    of message.
  * Fix connection logic where multiple hostnames won't be tried if
    connection to doesn't fail immediately (#430)
- Removed:
  * autotools build system has been removed
  * many duplicate amqps_* examples, they did not add a lot of value</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- rework the package [jsc#SLE-12262]:
  * run spec-cleaner
  * use cmake macros
  * source package name after github project, library package
    as subpackage
  * update to 0.10.0
  - amqp_ssl_socket_get_context can be used to get the current OpenSSL CTX*
    associated with a connection.
  - openssl: missing OpenSSL config is ignored as an OpenSSL init error (#523)
  - AMQP_DEFAULT_MAX_CHANNELS is now set to 2047 to follow current default channel
    limit in the RabbitMQ broker. (#513)
  - add additional input validation to prevent integer overflow when parsing a
    frame header. This addresses CVE-2019-18609.</changelog>
  <changelog author="pgajdos@suse.com" date="1599134400">- do not skip test_basic, try to run rabbitmq-server instead
- deleted patches
  - rabbitmq-c-remove_failing_test-0.9.0.patch (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1604059200">- fix tests for SLE15</changelog>
  <changelog author="pgajdos@suse.com" date="1608206400">- %check: use rabbitmqctl await_startup to wait for RabbitMQ
  server start and rabbitmqctl stop for stopping the server
  [bsc#1180096]</changelog>
  <changelog author="bwiedemann@suse.com" date="1608638400">- Add reproducible.patch to override build date (boo#1047218)</changelog>
  <changelog author="pgajdos@suse.com" date="1651060800">- give up to run testsuite when the server will not start in time
  [bsc#1198202]</changelog>
</package>
<package pkgid="5a15e9ab074975d1e1631a84e9f943606bf582a7b223f6b4c9b4504f00cd7455" name="librabbitmq-devel" arch="x86_64">
  <version epoch="0" ver="0.10.0" rel="150300.5.3.1"/>
  <changelog author="tuukka.pasanen@ilmi.fi" date="1527508800">- Update to version 0.9.0
  * amqp-publish: added support for specifying headers via the -H flag
  * Add support for specifying timeout for amqp_login calls via
  * amqp_set_handshake_timeout
  * Add support for specifying timeouts in RPC-style AMQP methods via
  * amqp_set_rpc_timeout
  * Add define for AMQP_DEFAULT_VHOST
  * Support for SSL SNI
  * Support for OpenSSL v1.1.0
- Changed:
  * rabbitmq-c now requires Windows Vista or better
  * rabbitmq-c enables TCP keep-alive by default on platforms that support it
  * dropped support for compiling rabbitmq-c without threading support
  * OpenSSL is no longer un-intialized automatically by default. OpenSSL can be
    explicitly initialized by calling amqp_initialize_ssl_library and
    uninitialized by calling amqp_uninitialize_ssl_library.
- Fixed:
  * Correct bugs in processing of --url flag in tools (#364).
  * Improve documentation on AMQP_SASL_METHOD_EXTERNAL (#349)
  * Improve support for compiling under mingw-w64
  * Better support for handing SIGPIPE on Linux over SSL (#401)
  * Improve publish performance on Linux by not specifying MSG_MORE on last part
    of message.
  * Fix connection logic where multiple hostnames won't be tried if
    connection to doesn't fail immediately (#430)
- Removed:
  * autotools build system has been removed
  * many duplicate amqps_* examples, they did not add a lot of value</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- rework the package [jsc#SLE-12262]:
  * run spec-cleaner
  * use cmake macros
  * source package name after github project, library package
    as subpackage
  * update to 0.10.0
  - amqp_ssl_socket_get_context can be used to get the current OpenSSL CTX*
    associated with a connection.
  - openssl: missing OpenSSL config is ignored as an OpenSSL init error (#523)
  - AMQP_DEFAULT_MAX_CHANNELS is now set to 2047 to follow current default channel
    limit in the RabbitMQ broker. (#513)
  - add additional input validation to prevent integer overflow when parsing a
    frame header. This addresses CVE-2019-18609.</changelog>
  <changelog author="pgajdos@suse.com" date="1599134400">- do not skip test_basic, try to run rabbitmq-server instead
- deleted patches
  - rabbitmq-c-remove_failing_test-0.9.0.patch (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1604059200">- fix tests for SLE15</changelog>
  <changelog author="pgajdos@suse.com" date="1608206400">- %check: use rabbitmqctl await_startup to wait for RabbitMQ
  server start and rabbitmqctl stop for stopping the server
  [bsc#1180096]</changelog>
  <changelog author="bwiedemann@suse.com" date="1608638400">- Add reproducible.patch to override build date (boo#1047218)</changelog>
  <changelog author="pgajdos@suse.com" date="1651060800">- give up to run testsuite when the server will not start in time
  [bsc#1198202]</changelog>
</package>
<package pkgid="ed0ea7581dc87182554920daee9d5642f3ef1aa3d9c94e8e6a35d16f21ab3d11" name="librabbitmq4" arch="aarch64">
  <version epoch="0" ver="0.10.0" rel="150300.5.3.1"/>
  <changelog author="tuukka.pasanen@ilmi.fi" date="1527508800">- Update to version 0.9.0
  * amqp-publish: added support for specifying headers via the -H flag
  * Add support for specifying timeout for amqp_login calls via
  * amqp_set_handshake_timeout
  * Add support for specifying timeouts in RPC-style AMQP methods via
  * amqp_set_rpc_timeout
  * Add define for AMQP_DEFAULT_VHOST
  * Support for SSL SNI
  * Support for OpenSSL v1.1.0
- Changed:
  * rabbitmq-c now requires Windows Vista or better
  * rabbitmq-c enables TCP keep-alive by default on platforms that support it
  * dropped support for compiling rabbitmq-c without threading support
  * OpenSSL is no longer un-intialized automatically by default. OpenSSL can be
    explicitly initialized by calling amqp_initialize_ssl_library and
    uninitialized by calling amqp_uninitialize_ssl_library.
- Fixed:
  * Correct bugs in processing of --url flag in tools (#364).
  * Improve documentation on AMQP_SASL_METHOD_EXTERNAL (#349)
  * Improve support for compiling under mingw-w64
  * Better support for handing SIGPIPE on Linux over SSL (#401)
  * Improve publish performance on Linux by not specifying MSG_MORE on last part
    of message.
  * Fix connection logic where multiple hostnames won't be tried if
    connection to doesn't fail immediately (#430)
- Removed:
  * autotools build system has been removed
  * many duplicate amqps_* examples, they did not add a lot of value</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- rework the package [jsc#SLE-12262]:
  * run spec-cleaner
  * use cmake macros
  * source package name after github project, library package
    as subpackage
  * update to 0.10.0
  - amqp_ssl_socket_get_context can be used to get the current OpenSSL CTX*
    associated with a connection.
  - openssl: missing OpenSSL config is ignored as an OpenSSL init error (#523)
  - AMQP_DEFAULT_MAX_CHANNELS is now set to 2047 to follow current default channel
    limit in the RabbitMQ broker. (#513)
  - add additional input validation to prevent integer overflow when parsing a
    frame header. This addresses CVE-2019-18609.</changelog>
  <changelog author="pgajdos@suse.com" date="1599134400">- do not skip test_basic, try to run rabbitmq-server instead
- deleted patches
  - rabbitmq-c-remove_failing_test-0.9.0.patch (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1604059200">- fix tests for SLE15</changelog>
  <changelog author="pgajdos@suse.com" date="1608206400">- %check: use rabbitmqctl await_startup to wait for RabbitMQ
  server start and rabbitmqctl stop for stopping the server
  [bsc#1180096]</changelog>
  <changelog author="bwiedemann@suse.com" date="1608638400">- Add reproducible.patch to override build date (boo#1047218)</changelog>
  <changelog author="pgajdos@suse.com" date="1651060800">- give up to run testsuite when the server will not start in time
  [bsc#1198202]</changelog>
</package>
<package pkgid="fa54b9078827fc1fd5c29c7aec5e3195fe40fbda1b9ba738dbb9938447dd291c" name="librabbitmq4" arch="ppc64le">
  <version epoch="0" ver="0.10.0" rel="150300.5.3.1"/>
  <changelog author="tuukka.pasanen@ilmi.fi" date="1527508800">- Update to version 0.9.0
  * amqp-publish: added support for specifying headers via the -H flag
  * Add support for specifying timeout for amqp_login calls via
  * amqp_set_handshake_timeout
  * Add support for specifying timeouts in RPC-style AMQP methods via
  * amqp_set_rpc_timeout
  * Add define for AMQP_DEFAULT_VHOST
  * Support for SSL SNI
  * Support for OpenSSL v1.1.0
- Changed:
  * rabbitmq-c now requires Windows Vista or better
  * rabbitmq-c enables TCP keep-alive by default on platforms that support it
  * dropped support for compiling rabbitmq-c without threading support
  * OpenSSL is no longer un-intialized automatically by default. OpenSSL can be
    explicitly initialized by calling amqp_initialize_ssl_library and
    uninitialized by calling amqp_uninitialize_ssl_library.
- Fixed:
  * Correct bugs in processing of --url flag in tools (#364).
  * Improve documentation on AMQP_SASL_METHOD_EXTERNAL (#349)
  * Improve support for compiling under mingw-w64
  * Better support for handing SIGPIPE on Linux over SSL (#401)
  * Improve publish performance on Linux by not specifying MSG_MORE on last part
    of message.
  * Fix connection logic where multiple hostnames won't be tried if
    connection to doesn't fail immediately (#430)
- Removed:
  * autotools build system has been removed
  * many duplicate amqps_* examples, they did not add a lot of value</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- rework the package [jsc#SLE-12262]:
  * run spec-cleaner
  * use cmake macros
  * source package name after github project, library package
    as subpackage
  * update to 0.10.0
  - amqp_ssl_socket_get_context can be used to get the current OpenSSL CTX*
    associated with a connection.
  - openssl: missing OpenSSL config is ignored as an OpenSSL init error (#523)
  - AMQP_DEFAULT_MAX_CHANNELS is now set to 2047 to follow current default channel
    limit in the RabbitMQ broker. (#513)
  - add additional input validation to prevent integer overflow when parsing a
    frame header. This addresses CVE-2019-18609.</changelog>
  <changelog author="pgajdos@suse.com" date="1599134400">- do not skip test_basic, try to run rabbitmq-server instead
- deleted patches
  - rabbitmq-c-remove_failing_test-0.9.0.patch (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1604059200">- fix tests for SLE15</changelog>
  <changelog author="pgajdos@suse.com" date="1608206400">- %check: use rabbitmqctl await_startup to wait for RabbitMQ
  server start and rabbitmqctl stop for stopping the server
  [bsc#1180096]</changelog>
  <changelog author="bwiedemann@suse.com" date="1608638400">- Add reproducible.patch to override build date (boo#1047218)</changelog>
  <changelog author="pgajdos@suse.com" date="1651060800">- give up to run testsuite when the server will not start in time
  [bsc#1198202]</changelog>
</package>
<package pkgid="f6513191849e0ffb221f986f690d581fe5c20810ad05d1b253419878dde2b1d1" name="librabbitmq4" arch="s390x">
  <version epoch="0" ver="0.10.0" rel="150300.5.3.1"/>
  <changelog author="tuukka.pasanen@ilmi.fi" date="1527508800">- Update to version 0.9.0
  * amqp-publish: added support for specifying headers via the -H flag
  * Add support for specifying timeout for amqp_login calls via
  * amqp_set_handshake_timeout
  * Add support for specifying timeouts in RPC-style AMQP methods via
  * amqp_set_rpc_timeout
  * Add define for AMQP_DEFAULT_VHOST
  * Support for SSL SNI
  * Support for OpenSSL v1.1.0
- Changed:
  * rabbitmq-c now requires Windows Vista or better
  * rabbitmq-c enables TCP keep-alive by default on platforms that support it
  * dropped support for compiling rabbitmq-c without threading support
  * OpenSSL is no longer un-intialized automatically by default. OpenSSL can be
    explicitly initialized by calling amqp_initialize_ssl_library and
    uninitialized by calling amqp_uninitialize_ssl_library.
- Fixed:
  * Correct bugs in processing of --url flag in tools (#364).
  * Improve documentation on AMQP_SASL_METHOD_EXTERNAL (#349)
  * Improve support for compiling under mingw-w64
  * Better support for handing SIGPIPE on Linux over SSL (#401)
  * Improve publish performance on Linux by not specifying MSG_MORE on last part
    of message.
  * Fix connection logic where multiple hostnames won't be tried if
    connection to doesn't fail immediately (#430)
- Removed:
  * autotools build system has been removed
  * many duplicate amqps_* examples, they did not add a lot of value</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- rework the package [jsc#SLE-12262]:
  * run spec-cleaner
  * use cmake macros
  * source package name after github project, library package
    as subpackage
  * update to 0.10.0
  - amqp_ssl_socket_get_context can be used to get the current OpenSSL CTX*
    associated with a connection.
  - openssl: missing OpenSSL config is ignored as an OpenSSL init error (#523)
  - AMQP_DEFAULT_MAX_CHANNELS is now set to 2047 to follow current default channel
    limit in the RabbitMQ broker. (#513)
  - add additional input validation to prevent integer overflow when parsing a
    frame header. This addresses CVE-2019-18609.</changelog>
  <changelog author="pgajdos@suse.com" date="1599134400">- do not skip test_basic, try to run rabbitmq-server instead
- deleted patches
  - rabbitmq-c-remove_failing_test-0.9.0.patch (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1604059200">- fix tests for SLE15</changelog>
  <changelog author="pgajdos@suse.com" date="1608206400">- %check: use rabbitmqctl await_startup to wait for RabbitMQ
  server start and rabbitmqctl stop for stopping the server
  [bsc#1180096]</changelog>
  <changelog author="bwiedemann@suse.com" date="1608638400">- Add reproducible.patch to override build date (boo#1047218)</changelog>
  <changelog author="pgajdos@suse.com" date="1651060800">- give up to run testsuite when the server will not start in time
  [bsc#1198202]</changelog>
</package>
<package pkgid="6bc6079be65b87ca7ac54c9d5ce02e5581cc241c75f285579a9875cdd581d2eb" name="librabbitmq4" arch="x86_64">
  <version epoch="0" ver="0.10.0" rel="150300.5.3.1"/>
  <changelog author="tuukka.pasanen@ilmi.fi" date="1527508800">- Update to version 0.9.0
  * amqp-publish: added support for specifying headers via the -H flag
  * Add support for specifying timeout for amqp_login calls via
  * amqp_set_handshake_timeout
  * Add support for specifying timeouts in RPC-style AMQP methods via
  * amqp_set_rpc_timeout
  * Add define for AMQP_DEFAULT_VHOST
  * Support for SSL SNI
  * Support for OpenSSL v1.1.0
- Changed:
  * rabbitmq-c now requires Windows Vista or better
  * rabbitmq-c enables TCP keep-alive by default on platforms that support it
  * dropped support for compiling rabbitmq-c without threading support
  * OpenSSL is no longer un-intialized automatically by default. OpenSSL can be
    explicitly initialized by calling amqp_initialize_ssl_library and
    uninitialized by calling amqp_uninitialize_ssl_library.
- Fixed:
  * Correct bugs in processing of --url flag in tools (#364).
  * Improve documentation on AMQP_SASL_METHOD_EXTERNAL (#349)
  * Improve support for compiling under mingw-w64
  * Better support for handing SIGPIPE on Linux over SSL (#401)
  * Improve publish performance on Linux by not specifying MSG_MORE on last part
    of message.
  * Fix connection logic where multiple hostnames won't be tried if
    connection to doesn't fail immediately (#430)
- Removed:
  * autotools build system has been removed
  * many duplicate amqps_* examples, they did not add a lot of value</changelog>
  <changelog author="pgajdos@suse.com" date="1599048000">- rework the package [jsc#SLE-12262]:
  * run spec-cleaner
  * use cmake macros
  * source package name after github project, library package
    as subpackage
  * update to 0.10.0
  - amqp_ssl_socket_get_context can be used to get the current OpenSSL CTX*
    associated with a connection.
  - openssl: missing OpenSSL config is ignored as an OpenSSL init error (#523)
  - AMQP_DEFAULT_MAX_CHANNELS is now set to 2047 to follow current default channel
    limit in the RabbitMQ broker. (#513)
  - add additional input validation to prevent integer overflow when parsing a
    frame header. This addresses CVE-2019-18609.</changelog>
  <changelog author="pgajdos@suse.com" date="1599134400">- do not skip test_basic, try to run rabbitmq-server instead
- deleted patches
  - rabbitmq-c-remove_failing_test-0.9.0.patch (not needed)</changelog>
  <changelog author="pgajdos@suse.com" date="1604059200">- fix tests for SLE15</changelog>
  <changelog author="pgajdos@suse.com" date="1608206400">- %check: use rabbitmqctl await_startup to wait for RabbitMQ
  server start and rabbitmqctl stop for stopping the server
  [bsc#1180096]</changelog>
  <changelog author="bwiedemann@suse.com" date="1608638400">- Add reproducible.patch to override build date (boo#1047218)</changelog>
  <changelog author="pgajdos@suse.com" date="1651060800">- give up to run testsuite when the server will not start in time
  [bsc#1198202]</changelog>
</package>
<package pkgid="39998cb2ff647099fdc002ed11af294bf2bff5c29217e3e047b628cd3b6e0986" name="libraptor-devel" arch="aarch64">
  <version epoch="0" ver="2.0.15" rel="150200.9.9.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1333713600">- Update to v2.0.7
  * CVE-2012-0037 fixed (bnc#745298)
  * Removed Expat support
  * Removed internal Unicode NFC code for better and optional ICU
  * Added options for denying file requests and XML entity loading
  * Added options for SSL certificate verifying</changelog>
  <changelog author="mlin@suse.com" date="1340884800">- Update to version 2.0.8
  * Added support for RDFa 1.1 via updated librdfa
  * Multiple portability fixes for Windows and Solarises. (Daniel Richard G.)
  * Multiple minor fixes and improvements
  * Fixed reported issues: 0000381, 0000487, 0000505 and 0000507</changelog>
  <changelog author="cfarrell@suse.com" date="1342440000">- license update: LGPL-2.1+ or GPL-2.0+ or Apache-2.0
  Updating to those licenses stated in the LICENSE.txt file (even though
  the LGPL-2.1 has a migration clause to GPL-2.0 anyway"</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353412800">- Fix build on SLES: pkgconfig(libxml-2.0) fails</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Update Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1369915200">- Update to version 2.0.9
  * Added full parsing and serializing support for Turtle Terse RDF
    Triple Language W3C Candidate Recommendation 19 February 2013
  * Added CMake build framework for building Raptor on Microsoft
  * Made a few minor fixes and improvements
  * Fixed reported issues: 0000499, 0000508, 0000520, 0000521
    and 0000526</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379160000">- Update to version 2.0.10
  * Completed support for Turtle Terse RDF Triple Language W3C Candidate
  Recommendation 19 February 2013 (Turtle 2013)
  * Added support for N-Triples W3C Working Group Note 09 April 2013
  (N-Triples 2013)
  * Added a few new Turtle and N-Triples support functions
  * Update configure to better handle mixed pkg-config settings
  * Fixed reported issues: 0000532, 0000535, 0000545 and 0000548</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.0.15
  * Made several fixes to Turtle / N-Triples family of parsers and serializers
  * Added utility functions for re-entrant sorting of objects and sequences.
  * Made other fixes and improvements including fixing reported issues:
    0000574, 0000575, 0000576, 0000577, 0000579, 0000581 and 0000584.</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Add gpg signature
- Update dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1605009600">- add 0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1,
  ubsan.patch (bsc#1178593, CVE-2017-18926)</changelog>
</package>
<package pkgid="b7b7bfe357e2efa7dc142a96bc7b477a92a1ae6db34282e21a468b87a838c02f" name="libraptor-devel" arch="ppc64le">
  <version epoch="0" ver="2.0.15" rel="150200.9.9.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1333713600">- Update to v2.0.7
  * CVE-2012-0037 fixed (bnc#745298)
  * Removed Expat support
  * Removed internal Unicode NFC code for better and optional ICU
  * Added options for denying file requests and XML entity loading
  * Added options for SSL certificate verifying</changelog>
  <changelog author="mlin@suse.com" date="1340884800">- Update to version 2.0.8
  * Added support for RDFa 1.1 via updated librdfa
  * Multiple portability fixes for Windows and Solarises. (Daniel Richard G.)
  * Multiple minor fixes and improvements
  * Fixed reported issues: 0000381, 0000487, 0000505 and 0000507</changelog>
  <changelog author="cfarrell@suse.com" date="1342440000">- license update: LGPL-2.1+ or GPL-2.0+ or Apache-2.0
  Updating to those licenses stated in the LICENSE.txt file (even though
  the LGPL-2.1 has a migration clause to GPL-2.0 anyway"</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353412800">- Fix build on SLES: pkgconfig(libxml-2.0) fails</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Update Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1369915200">- Update to version 2.0.9
  * Added full parsing and serializing support for Turtle Terse RDF
    Triple Language W3C Candidate Recommendation 19 February 2013
  * Added CMake build framework for building Raptor on Microsoft
  * Made a few minor fixes and improvements
  * Fixed reported issues: 0000499, 0000508, 0000520, 0000521
    and 0000526</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379160000">- Update to version 2.0.10
  * Completed support for Turtle Terse RDF Triple Language W3C Candidate
  Recommendation 19 February 2013 (Turtle 2013)
  * Added support for N-Triples W3C Working Group Note 09 April 2013
  (N-Triples 2013)
  * Added a few new Turtle and N-Triples support functions
  * Update configure to better handle mixed pkg-config settings
  * Fixed reported issues: 0000532, 0000535, 0000545 and 0000548</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.0.15
  * Made several fixes to Turtle / N-Triples family of parsers and serializers
  * Added utility functions for re-entrant sorting of objects and sequences.
  * Made other fixes and improvements including fixing reported issues:
    0000574, 0000575, 0000576, 0000577, 0000579, 0000581 and 0000584.</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Add gpg signature
- Update dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1605009600">- add 0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1,
  ubsan.patch (bsc#1178593, CVE-2017-18926)</changelog>
</package>
<package pkgid="abaad92e3f86f184e0dcfed75685645838cca44654dfae3b226437bd1da77843" name="libraptor-devel" arch="s390x">
  <version epoch="0" ver="2.0.15" rel="150200.9.9.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1333713600">- Update to v2.0.7
  * CVE-2012-0037 fixed (bnc#745298)
  * Removed Expat support
  * Removed internal Unicode NFC code for better and optional ICU
  * Added options for denying file requests and XML entity loading
  * Added options for SSL certificate verifying</changelog>
  <changelog author="mlin@suse.com" date="1340884800">- Update to version 2.0.8
  * Added support for RDFa 1.1 via updated librdfa
  * Multiple portability fixes for Windows and Solarises. (Daniel Richard G.)
  * Multiple minor fixes and improvements
  * Fixed reported issues: 0000381, 0000487, 0000505 and 0000507</changelog>
  <changelog author="cfarrell@suse.com" date="1342440000">- license update: LGPL-2.1+ or GPL-2.0+ or Apache-2.0
  Updating to those licenses stated in the LICENSE.txt file (even though
  the LGPL-2.1 has a migration clause to GPL-2.0 anyway"</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353412800">- Fix build on SLES: pkgconfig(libxml-2.0) fails</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Update Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1369915200">- Update to version 2.0.9
  * Added full parsing and serializing support for Turtle Terse RDF
    Triple Language W3C Candidate Recommendation 19 February 2013
  * Added CMake build framework for building Raptor on Microsoft
  * Made a few minor fixes and improvements
  * Fixed reported issues: 0000499, 0000508, 0000520, 0000521
    and 0000526</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379160000">- Update to version 2.0.10
  * Completed support for Turtle Terse RDF Triple Language W3C Candidate
  Recommendation 19 February 2013 (Turtle 2013)
  * Added support for N-Triples W3C Working Group Note 09 April 2013
  (N-Triples 2013)
  * Added a few new Turtle and N-Triples support functions
  * Update configure to better handle mixed pkg-config settings
  * Fixed reported issues: 0000532, 0000535, 0000545 and 0000548</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.0.15
  * Made several fixes to Turtle / N-Triples family of parsers and serializers
  * Added utility functions for re-entrant sorting of objects and sequences.
  * Made other fixes and improvements including fixing reported issues:
    0000574, 0000575, 0000576, 0000577, 0000579, 0000581 and 0000584.</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Add gpg signature
- Update dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1605009600">- add 0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1,
  ubsan.patch (bsc#1178593, CVE-2017-18926)</changelog>
</package>
<package pkgid="ac4a30f694ca9609759ba7ca01ce67489c9147764f762976859b1ef7d4c9e166" name="libraptor-devel" arch="x86_64">
  <version epoch="0" ver="2.0.15" rel="150200.9.9.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1333713600">- Update to v2.0.7
  * CVE-2012-0037 fixed (bnc#745298)
  * Removed Expat support
  * Removed internal Unicode NFC code for better and optional ICU
  * Added options for denying file requests and XML entity loading
  * Added options for SSL certificate verifying</changelog>
  <changelog author="mlin@suse.com" date="1340884800">- Update to version 2.0.8
  * Added support for RDFa 1.1 via updated librdfa
  * Multiple portability fixes for Windows and Solarises. (Daniel Richard G.)
  * Multiple minor fixes and improvements
  * Fixed reported issues: 0000381, 0000487, 0000505 and 0000507</changelog>
  <changelog author="cfarrell@suse.com" date="1342440000">- license update: LGPL-2.1+ or GPL-2.0+ or Apache-2.0
  Updating to those licenses stated in the LICENSE.txt file (even though
  the LGPL-2.1 has a migration clause to GPL-2.0 anyway"</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353412800">- Fix build on SLES: pkgconfig(libxml-2.0) fails</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Update Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1369915200">- Update to version 2.0.9
  * Added full parsing and serializing support for Turtle Terse RDF
    Triple Language W3C Candidate Recommendation 19 February 2013
  * Added CMake build framework for building Raptor on Microsoft
  * Made a few minor fixes and improvements
  * Fixed reported issues: 0000499, 0000508, 0000520, 0000521
    and 0000526</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379160000">- Update to version 2.0.10
  * Completed support for Turtle Terse RDF Triple Language W3C Candidate
  Recommendation 19 February 2013 (Turtle 2013)
  * Added support for N-Triples W3C Working Group Note 09 April 2013
  (N-Triples 2013)
  * Added a few new Turtle and N-Triples support functions
  * Update configure to better handle mixed pkg-config settings
  * Fixed reported issues: 0000532, 0000535, 0000545 and 0000548</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.0.15
  * Made several fixes to Turtle / N-Triples family of parsers and serializers
  * Added utility functions for re-entrant sorting of objects and sequences.
  * Made other fixes and improvements including fixing reported issues:
    0000574, 0000575, 0000576, 0000577, 0000579, 0000581 and 0000584.</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Add gpg signature
- Update dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1605009600">- add 0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1,
  ubsan.patch (bsc#1178593, CVE-2017-18926)</changelog>
</package>
<package pkgid="13b81e704cb01dd84adcfc4c4952cbcd7d67ab4c339146795e70b28c66b1cbc7" name="libraptor2-0" arch="aarch64">
  <version epoch="0" ver="2.0.15" rel="150200.9.9.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1333713600">- Update to v2.0.7
  * CVE-2012-0037 fixed (bnc#745298)
  * Removed Expat support
  * Removed internal Unicode NFC code for better and optional ICU
  * Added options for denying file requests and XML entity loading
  * Added options for SSL certificate verifying</changelog>
  <changelog author="mlin@suse.com" date="1340884800">- Update to version 2.0.8
  * Added support for RDFa 1.1 via updated librdfa
  * Multiple portability fixes for Windows and Solarises. (Daniel Richard G.)
  * Multiple minor fixes and improvements
  * Fixed reported issues: 0000381, 0000487, 0000505 and 0000507</changelog>
  <changelog author="cfarrell@suse.com" date="1342440000">- license update: LGPL-2.1+ or GPL-2.0+ or Apache-2.0
  Updating to those licenses stated in the LICENSE.txt file (even though
  the LGPL-2.1 has a migration clause to GPL-2.0 anyway"</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353412800">- Fix build on SLES: pkgconfig(libxml-2.0) fails</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Update Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1369915200">- Update to version 2.0.9
  * Added full parsing and serializing support for Turtle Terse RDF
    Triple Language W3C Candidate Recommendation 19 February 2013
  * Added CMake build framework for building Raptor on Microsoft
  * Made a few minor fixes and improvements
  * Fixed reported issues: 0000499, 0000508, 0000520, 0000521
    and 0000526</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379160000">- Update to version 2.0.10
  * Completed support for Turtle Terse RDF Triple Language W3C Candidate
  Recommendation 19 February 2013 (Turtle 2013)
  * Added support for N-Triples W3C Working Group Note 09 April 2013
  (N-Triples 2013)
  * Added a few new Turtle and N-Triples support functions
  * Update configure to better handle mixed pkg-config settings
  * Fixed reported issues: 0000532, 0000535, 0000545 and 0000548</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.0.15
  * Made several fixes to Turtle / N-Triples family of parsers and serializers
  * Added utility functions for re-entrant sorting of objects and sequences.
  * Made other fixes and improvements including fixing reported issues:
    0000574, 0000575, 0000576, 0000577, 0000579, 0000581 and 0000584.</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Add gpg signature
- Update dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1605009600">- add 0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1,
  ubsan.patch (bsc#1178593, CVE-2017-18926)</changelog>
</package>
<package pkgid="30db0b3e0c657928d162284df2d6c25b6918a1ec4df2318c1861417b610e9e6a" name="libraptor2-0" arch="ppc64le">
  <version epoch="0" ver="2.0.15" rel="150200.9.9.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1333713600">- Update to v2.0.7
  * CVE-2012-0037 fixed (bnc#745298)
  * Removed Expat support
  * Removed internal Unicode NFC code for better and optional ICU
  * Added options for denying file requests and XML entity loading
  * Added options for SSL certificate verifying</changelog>
  <changelog author="mlin@suse.com" date="1340884800">- Update to version 2.0.8
  * Added support for RDFa 1.1 via updated librdfa
  * Multiple portability fixes for Windows and Solarises. (Daniel Richard G.)
  * Multiple minor fixes and improvements
  * Fixed reported issues: 0000381, 0000487, 0000505 and 0000507</changelog>
  <changelog author="cfarrell@suse.com" date="1342440000">- license update: LGPL-2.1+ or GPL-2.0+ or Apache-2.0
  Updating to those licenses stated in the LICENSE.txt file (even though
  the LGPL-2.1 has a migration clause to GPL-2.0 anyway"</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353412800">- Fix build on SLES: pkgconfig(libxml-2.0) fails</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Update Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1369915200">- Update to version 2.0.9
  * Added full parsing and serializing support for Turtle Terse RDF
    Triple Language W3C Candidate Recommendation 19 February 2013
  * Added CMake build framework for building Raptor on Microsoft
  * Made a few minor fixes and improvements
  * Fixed reported issues: 0000499, 0000508, 0000520, 0000521
    and 0000526</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379160000">- Update to version 2.0.10
  * Completed support for Turtle Terse RDF Triple Language W3C Candidate
  Recommendation 19 February 2013 (Turtle 2013)
  * Added support for N-Triples W3C Working Group Note 09 April 2013
  (N-Triples 2013)
  * Added a few new Turtle and N-Triples support functions
  * Update configure to better handle mixed pkg-config settings
  * Fixed reported issues: 0000532, 0000535, 0000545 and 0000548</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.0.15
  * Made several fixes to Turtle / N-Triples family of parsers and serializers
  * Added utility functions for re-entrant sorting of objects and sequences.
  * Made other fixes and improvements including fixing reported issues:
    0000574, 0000575, 0000576, 0000577, 0000579, 0000581 and 0000584.</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Add gpg signature
- Update dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1605009600">- add 0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1,
  ubsan.patch (bsc#1178593, CVE-2017-18926)</changelog>
</package>
<package pkgid="b7532e4c0a9a75e428024013e43c7f7dcf76ae337a20c5d761b803c3bc6210e9" name="libraptor2-0" arch="s390x">
  <version epoch="0" ver="2.0.15" rel="150200.9.9.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1333713600">- Update to v2.0.7
  * CVE-2012-0037 fixed (bnc#745298)
  * Removed Expat support
  * Removed internal Unicode NFC code for better and optional ICU
  * Added options for denying file requests and XML entity loading
  * Added options for SSL certificate verifying</changelog>
  <changelog author="mlin@suse.com" date="1340884800">- Update to version 2.0.8
  * Added support for RDFa 1.1 via updated librdfa
  * Multiple portability fixes for Windows and Solarises. (Daniel Richard G.)
  * Multiple minor fixes and improvements
  * Fixed reported issues: 0000381, 0000487, 0000505 and 0000507</changelog>
  <changelog author="cfarrell@suse.com" date="1342440000">- license update: LGPL-2.1+ or GPL-2.0+ or Apache-2.0
  Updating to those licenses stated in the LICENSE.txt file (even though
  the LGPL-2.1 has a migration clause to GPL-2.0 anyway"</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353412800">- Fix build on SLES: pkgconfig(libxml-2.0) fails</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Update Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1369915200">- Update to version 2.0.9
  * Added full parsing and serializing support for Turtle Terse RDF
    Triple Language W3C Candidate Recommendation 19 February 2013
  * Added CMake build framework for building Raptor on Microsoft
  * Made a few minor fixes and improvements
  * Fixed reported issues: 0000499, 0000508, 0000520, 0000521
    and 0000526</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379160000">- Update to version 2.0.10
  * Completed support for Turtle Terse RDF Triple Language W3C Candidate
  Recommendation 19 February 2013 (Turtle 2013)
  * Added support for N-Triples W3C Working Group Note 09 April 2013
  (N-Triples 2013)
  * Added a few new Turtle and N-Triples support functions
  * Update configure to better handle mixed pkg-config settings
  * Fixed reported issues: 0000532, 0000535, 0000545 and 0000548</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.0.15
  * Made several fixes to Turtle / N-Triples family of parsers and serializers
  * Added utility functions for re-entrant sorting of objects and sequences.
  * Made other fixes and improvements including fixing reported issues:
    0000574, 0000575, 0000576, 0000577, 0000579, 0000581 and 0000584.</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Add gpg signature
- Update dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1605009600">- add 0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1,
  ubsan.patch (bsc#1178593, CVE-2017-18926)</changelog>
</package>
<package pkgid="0672d920523035fa466ab4764c2fac86391e4807441a753c5ca6a0080f5fdf29" name="libraptor2-0" arch="x86_64">
  <version epoch="0" ver="2.0.15" rel="150200.9.9.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1333713600">- Update to v2.0.7
  * CVE-2012-0037 fixed (bnc#745298)
  * Removed Expat support
  * Removed internal Unicode NFC code for better and optional ICU
  * Added options for denying file requests and XML entity loading
  * Added options for SSL certificate verifying</changelog>
  <changelog author="mlin@suse.com" date="1340884800">- Update to version 2.0.8
  * Added support for RDFa 1.1 via updated librdfa
  * Multiple portability fixes for Windows and Solarises. (Daniel Richard G.)
  * Multiple minor fixes and improvements
  * Fixed reported issues: 0000381, 0000487, 0000505 and 0000507</changelog>
  <changelog author="cfarrell@suse.com" date="1342440000">- license update: LGPL-2.1+ or GPL-2.0+ or Apache-2.0
  Updating to those licenses stated in the LICENSE.txt file (even though
  the LGPL-2.1 has a migration clause to GPL-2.0 anyway"</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353412800">- Fix build on SLES: pkgconfig(libxml-2.0) fails</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Update Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1369915200">- Update to version 2.0.9
  * Added full parsing and serializing support for Turtle Terse RDF
    Triple Language W3C Candidate Recommendation 19 February 2013
  * Added CMake build framework for building Raptor on Microsoft
  * Made a few minor fixes and improvements
  * Fixed reported issues: 0000499, 0000508, 0000520, 0000521
    and 0000526</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379160000">- Update to version 2.0.10
  * Completed support for Turtle Terse RDF Triple Language W3C Candidate
  Recommendation 19 February 2013 (Turtle 2013)
  * Added support for N-Triples W3C Working Group Note 09 April 2013
  (N-Triples 2013)
  * Added a few new Turtle and N-Triples support functions
  * Update configure to better handle mixed pkg-config settings
  * Fixed reported issues: 0000532, 0000535, 0000545 and 0000548</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.0.15
  * Made several fixes to Turtle / N-Triples family of parsers and serializers
  * Added utility functions for re-entrant sorting of objects and sequences.
  * Made other fixes and improvements including fixing reported issues:
    0000574, 0000575, 0000576, 0000577, 0000579, 0000581 and 0000584.</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Add gpg signature
- Update dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1605009600">- add 0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1,
  ubsan.patch (bsc#1178593, CVE-2017-18926)</changelog>
</package>
<package pkgid="7269f0a9e2ef9553ea303895b1bc449feed8a12bf72173d118ef37df0cb900a9" name="libraptor2-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.0.15" rel="150200.9.9.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1333713600">- Update to v2.0.7
  * CVE-2012-0037 fixed (bnc#745298)
  * Removed Expat support
  * Removed internal Unicode NFC code for better and optional ICU
  * Added options for denying file requests and XML entity loading
  * Added options for SSL certificate verifying</changelog>
  <changelog author="mlin@suse.com" date="1340884800">- Update to version 2.0.8
  * Added support for RDFa 1.1 via updated librdfa
  * Multiple portability fixes for Windows and Solarises. (Daniel Richard G.)
  * Multiple minor fixes and improvements
  * Fixed reported issues: 0000381, 0000487, 0000505 and 0000507</changelog>
  <changelog author="cfarrell@suse.com" date="1342440000">- license update: LGPL-2.1+ or GPL-2.0+ or Apache-2.0
  Updating to those licenses stated in the LICENSE.txt file (even though
  the LGPL-2.1 has a migration clause to GPL-2.0 anyway"</changelog>
  <changelog author="cgiboudeaux@gmx.com" date="1353412800">- Fix build on SLES: pkgconfig(libxml-2.0) fails</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Update Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1369915200">- Update to version 2.0.9
  * Added full parsing and serializing support for Turtle Terse RDF
    Triple Language W3C Candidate Recommendation 19 February 2013
  * Added CMake build framework for building Raptor on Microsoft
  * Made a few minor fixes and improvements
  * Fixed reported issues: 0000499, 0000508, 0000520, 0000521
    and 0000526</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379160000">- Update to version 2.0.10
  * Completed support for Turtle Terse RDF Triple Language W3C Candidate
  Recommendation 19 February 2013 (Turtle 2013)
  * Added support for N-Triples W3C Working Group Note 09 April 2013
  (N-Triples 2013)
  * Added a few new Turtle and N-Triples support functions
  * Update configure to better handle mixed pkg-config settings
  * Fixed reported issues: 0000532, 0000535, 0000545 and 0000548</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 2.0.15
  * Made several fixes to Turtle / N-Triples family of parsers and serializers
  * Added utility functions for re-entrant sorting of objects and sequences.
  * Made other fixes and improvements including fixing reported issues:
    0000574, 0000575, 0000576, 0000577, 0000579, 0000581 and 0000584.</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Add gpg signature
- Update dependencies</changelog>
  <changelog author="dmueller@suse.com" date="1605009600">- add 0001-Calcualte-max-nspace-declarations-correctly-for-XML-.patch.1,
  ubsan.patch (bsc#1178593, CVE-2017-18926)</changelog>
</package>
<package pkgid="fb8ff9015745c39ca45d43e349ce89fa193b138fd4c1e6ffb6a09e3e68e5ff3e" name="librasqal-devel" arch="aarch64">
  <version epoch="0" ver="0.9.33" rel="150000.3.2.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1316433600">- Update to 0.9.27
  * sub-SELECTs can now be executed
  * OPTIONAL and UNION fully execute correctly
  * Grouping over sub-graph patterns fully executes correctly
  * CONSTRUCT WHERE abbreviation is supported and executes
  * CONSTRUCT works when working over a query with optionals
  * Updated the CSV and TSV outputs to match the editor's draft
    SPARQL 1.1 Query Results CSV and TSV Formats
  * Fixed issues: [1]#0000127, [2]#0000423, [3]#0000434, [4]#0000454
    and [5]#0000459.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1318075200">- Split documentation package (fix for RPMLINT warning)
- Added mhash buildrequires
- Cleaned up spec file formatting</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468800">- Update to 0.9.28
  * Added full support for SPARQL 1.1 draft STRBEFORE, STRAFTER
    and REPLACE.
  * Add internal Mersenne Twister PRNG or choose others via
    configure
  * Language name 'sparql' is now SPARQL 1.1
  * The query result formats now all use the W3C Format URIs as
    their primary URI
  * Improved configure check for for ceil(), floor() and round()
    to prevent GCC optimizing the test away and getting the wrong
    answer
  * Bugfixes</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468801">- Remove the specific -32bit compilation for 64bit systems. This
  as that rasqal depends on mhash for which there is no -32bit
  package</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1325678400">- remove libmhash buildrequires, which development was
  abandoned on 2007-08-18 and therefore should not be used.
  the library will fallback to internal hashing routines.
- remove obsolete configure options/cflags</changelog>
  <changelog author="dmueller@suse.de" date="1327320000">- add baselibs.conf</changelog>
  <changelog author="zaitor@opensuse.org" date="1337601600">- Update to version 0.9.29:
  + Supports all of SPARQL 1.0 by passing 100% of the approved
    tests.
  + Added support for XSD date.
  + Made XSD dateTime and XSD date equality and comparison work
  + Make limit and offset check work properly in a subquery
  + Correctly handle errors during aggregation expressions
    evaluation
  + Fix blank node generation when made in a CONSTRUCT to match
    SPARQL
  + Added SPARQL 1.1 draft UUID() and STRUUID() support
  + Requires Raptor 2.0.7+
  + RDQL support will be removed in the next release (0.9.30)
  + Made other fixes and improvements including fixing reported
    issues: 0000493, 0000494 0000504 (http://bugs.librdf.org/)</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license again</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1359806400">- Update to version 0.9.30:
  + Removed RDQL support
  + Improved floating equality, comparison and promotion rules
  + Other fixes and improvements</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 0.9.33
  * Added support for reading and writing boolean result formats.
  * Fixed several query engine operator evaluations (AVG, STRBEFORE,
  * STRAFTER, CONCAT)
  * Updated query results class constructor and methods, deprecating older.
  * Portability fixes for ICC, clang and GCC 5.
  * New internal test runner utility
  * Variable bindings query results can be formatted in mKR CSV format.
  * Multiple other fixes and improvements including fixing reported issues:
    0000546, 0000568, 0000583 and 0000588.
- Remove redundant %clean section</changelog>
</package>
<package pkgid="b643794de4aca18389e88a21ac34d163d327cce230bc432c4f09dcef51699445" name="librasqal-devel" arch="ppc64le">
  <version epoch="0" ver="0.9.33" rel="150000.3.2.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1316433600">- Update to 0.9.27
  * sub-SELECTs can now be executed
  * OPTIONAL and UNION fully execute correctly
  * Grouping over sub-graph patterns fully executes correctly
  * CONSTRUCT WHERE abbreviation is supported and executes
  * CONSTRUCT works when working over a query with optionals
  * Updated the CSV and TSV outputs to match the editor's draft
    SPARQL 1.1 Query Results CSV and TSV Formats
  * Fixed issues: [1]#0000127, [2]#0000423, [3]#0000434, [4]#0000454
    and [5]#0000459.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1318075200">- Split documentation package (fix for RPMLINT warning)
- Added mhash buildrequires
- Cleaned up spec file formatting</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468800">- Update to 0.9.28
  * Added full support for SPARQL 1.1 draft STRBEFORE, STRAFTER
    and REPLACE.
  * Add internal Mersenne Twister PRNG or choose others via
    configure
  * Language name 'sparql' is now SPARQL 1.1
  * The query result formats now all use the W3C Format URIs as
    their primary URI
  * Improved configure check for for ceil(), floor() and round()
    to prevent GCC optimizing the test away and getting the wrong
    answer
  * Bugfixes</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468801">- Remove the specific -32bit compilation for 64bit systems. This
  as that rasqal depends on mhash for which there is no -32bit
  package</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1325678400">- remove libmhash buildrequires, which development was
  abandoned on 2007-08-18 and therefore should not be used.
  the library will fallback to internal hashing routines.
- remove obsolete configure options/cflags</changelog>
  <changelog author="dmueller@suse.de" date="1327320000">- add baselibs.conf</changelog>
  <changelog author="zaitor@opensuse.org" date="1337601600">- Update to version 0.9.29:
  + Supports all of SPARQL 1.0 by passing 100% of the approved
    tests.
  + Added support for XSD date.
  + Made XSD dateTime and XSD date equality and comparison work
  + Make limit and offset check work properly in a subquery
  + Correctly handle errors during aggregation expressions
    evaluation
  + Fix blank node generation when made in a CONSTRUCT to match
    SPARQL
  + Added SPARQL 1.1 draft UUID() and STRUUID() support
  + Requires Raptor 2.0.7+
  + RDQL support will be removed in the next release (0.9.30)
  + Made other fixes and improvements including fixing reported
    issues: 0000493, 0000494 0000504 (http://bugs.librdf.org/)</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license again</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1359806400">- Update to version 0.9.30:
  + Removed RDQL support
  + Improved floating equality, comparison and promotion rules
  + Other fixes and improvements</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 0.9.33
  * Added support for reading and writing boolean result formats.
  * Fixed several query engine operator evaluations (AVG, STRBEFORE,
  * STRAFTER, CONCAT)
  * Updated query results class constructor and methods, deprecating older.
  * Portability fixes for ICC, clang and GCC 5.
  * New internal test runner utility
  * Variable bindings query results can be formatted in mKR CSV format.
  * Multiple other fixes and improvements including fixing reported issues:
    0000546, 0000568, 0000583 and 0000588.
- Remove redundant %clean section</changelog>
</package>
<package pkgid="513fe3a2bc3c7c8a739c84ab99d60e3736e9c3b4e47aec537b9eb5b4bd1ed51c" name="librasqal-devel" arch="s390x">
  <version epoch="0" ver="0.9.33" rel="150000.3.2.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1316433600">- Update to 0.9.27
  * sub-SELECTs can now be executed
  * OPTIONAL and UNION fully execute correctly
  * Grouping over sub-graph patterns fully executes correctly
  * CONSTRUCT WHERE abbreviation is supported and executes
  * CONSTRUCT works when working over a query with optionals
  * Updated the CSV and TSV outputs to match the editor's draft
    SPARQL 1.1 Query Results CSV and TSV Formats
  * Fixed issues: [1]#0000127, [2]#0000423, [3]#0000434, [4]#0000454
    and [5]#0000459.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1318075200">- Split documentation package (fix for RPMLINT warning)
- Added mhash buildrequires
- Cleaned up spec file formatting</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468800">- Update to 0.9.28
  * Added full support for SPARQL 1.1 draft STRBEFORE, STRAFTER
    and REPLACE.
  * Add internal Mersenne Twister PRNG or choose others via
    configure
  * Language name 'sparql' is now SPARQL 1.1
  * The query result formats now all use the W3C Format URIs as
    their primary URI
  * Improved configure check for for ceil(), floor() and round()
    to prevent GCC optimizing the test away and getting the wrong
    answer
  * Bugfixes</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468801">- Remove the specific -32bit compilation for 64bit systems. This
  as that rasqal depends on mhash for which there is no -32bit
  package</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1325678400">- remove libmhash buildrequires, which development was
  abandoned on 2007-08-18 and therefore should not be used.
  the library will fallback to internal hashing routines.
- remove obsolete configure options/cflags</changelog>
  <changelog author="dmueller@suse.de" date="1327320000">- add baselibs.conf</changelog>
  <changelog author="zaitor@opensuse.org" date="1337601600">- Update to version 0.9.29:
  + Supports all of SPARQL 1.0 by passing 100% of the approved
    tests.
  + Added support for XSD date.
  + Made XSD dateTime and XSD date equality and comparison work
  + Make limit and offset check work properly in a subquery
  + Correctly handle errors during aggregation expressions
    evaluation
  + Fix blank node generation when made in a CONSTRUCT to match
    SPARQL
  + Added SPARQL 1.1 draft UUID() and STRUUID() support
  + Requires Raptor 2.0.7+
  + RDQL support will be removed in the next release (0.9.30)
  + Made other fixes and improvements including fixing reported
    issues: 0000493, 0000494 0000504 (http://bugs.librdf.org/)</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license again</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1359806400">- Update to version 0.9.30:
  + Removed RDQL support
  + Improved floating equality, comparison and promotion rules
  + Other fixes and improvements</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 0.9.33
  * Added support for reading and writing boolean result formats.
  * Fixed several query engine operator evaluations (AVG, STRBEFORE,
  * STRAFTER, CONCAT)
  * Updated query results class constructor and methods, deprecating older.
  * Portability fixes for ICC, clang and GCC 5.
  * New internal test runner utility
  * Variable bindings query results can be formatted in mKR CSV format.
  * Multiple other fixes and improvements including fixing reported issues:
    0000546, 0000568, 0000583 and 0000588.
- Remove redundant %clean section</changelog>
</package>
<package pkgid="3c6e185d4a9ac751e30b47c58ed96392d54ea489c26d87d8b64f82fda87094b0" name="librasqal-devel" arch="x86_64">
  <version epoch="0" ver="0.9.33" rel="150000.3.2.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1316433600">- Update to 0.9.27
  * sub-SELECTs can now be executed
  * OPTIONAL and UNION fully execute correctly
  * Grouping over sub-graph patterns fully executes correctly
  * CONSTRUCT WHERE abbreviation is supported and executes
  * CONSTRUCT works when working over a query with optionals
  * Updated the CSV and TSV outputs to match the editor's draft
    SPARQL 1.1 Query Results CSV and TSV Formats
  * Fixed issues: [1]#0000127, [2]#0000423, [3]#0000434, [4]#0000454
    and [5]#0000459.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1318075200">- Split documentation package (fix for RPMLINT warning)
- Added mhash buildrequires
- Cleaned up spec file formatting</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468800">- Update to 0.9.28
  * Added full support for SPARQL 1.1 draft STRBEFORE, STRAFTER
    and REPLACE.
  * Add internal Mersenne Twister PRNG or choose others via
    configure
  * Language name 'sparql' is now SPARQL 1.1
  * The query result formats now all use the W3C Format URIs as
    their primary URI
  * Improved configure check for for ceil(), floor() and round()
    to prevent GCC optimizing the test away and getting the wrong
    answer
  * Bugfixes</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468801">- Remove the specific -32bit compilation for 64bit systems. This
  as that rasqal depends on mhash for which there is no -32bit
  package</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1325678400">- remove libmhash buildrequires, which development was
  abandoned on 2007-08-18 and therefore should not be used.
  the library will fallback to internal hashing routines.
- remove obsolete configure options/cflags</changelog>
  <changelog author="dmueller@suse.de" date="1327320000">- add baselibs.conf</changelog>
  <changelog author="zaitor@opensuse.org" date="1337601600">- Update to version 0.9.29:
  + Supports all of SPARQL 1.0 by passing 100% of the approved
    tests.
  + Added support for XSD date.
  + Made XSD dateTime and XSD date equality and comparison work
  + Make limit and offset check work properly in a subquery
  + Correctly handle errors during aggregation expressions
    evaluation
  + Fix blank node generation when made in a CONSTRUCT to match
    SPARQL
  + Added SPARQL 1.1 draft UUID() and STRUUID() support
  + Requires Raptor 2.0.7+
  + RDQL support will be removed in the next release (0.9.30)
  + Made other fixes and improvements including fixing reported
    issues: 0000493, 0000494 0000504 (http://bugs.librdf.org/)</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license again</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1359806400">- Update to version 0.9.30:
  + Removed RDQL support
  + Improved floating equality, comparison and promotion rules
  + Other fixes and improvements</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 0.9.33
  * Added support for reading and writing boolean result formats.
  * Fixed several query engine operator evaluations (AVG, STRBEFORE,
  * STRAFTER, CONCAT)
  * Updated query results class constructor and methods, deprecating older.
  * Portability fixes for ICC, clang and GCC 5.
  * New internal test runner utility
  * Variable bindings query results can be formatted in mKR CSV format.
  * Multiple other fixes and improvements including fixing reported issues:
    0000546, 0000568, 0000583 and 0000588.
- Remove redundant %clean section</changelog>
</package>
<package pkgid="782d95dc6ae06fcdead963e2b7073ca0178f122425125e0a09760b6ef7365349" name="librasqal-devel-doc" arch="aarch64">
  <version epoch="0" ver="0.9.33" rel="150000.3.2.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1316433600">- Update to 0.9.27
  * sub-SELECTs can now be executed
  * OPTIONAL and UNION fully execute correctly
  * Grouping over sub-graph patterns fully executes correctly
  * CONSTRUCT WHERE abbreviation is supported and executes
  * CONSTRUCT works when working over a query with optionals
  * Updated the CSV and TSV outputs to match the editor's draft
    SPARQL 1.1 Query Results CSV and TSV Formats
  * Fixed issues: [1]#0000127, [2]#0000423, [3]#0000434, [4]#0000454
    and [5]#0000459.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1318075200">- Split documentation package (fix for RPMLINT warning)
- Added mhash buildrequires
- Cleaned up spec file formatting</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468800">- Update to 0.9.28
  * Added full support for SPARQL 1.1 draft STRBEFORE, STRAFTER
    and REPLACE.
  * Add internal Mersenne Twister PRNG or choose others via
    configure
  * Language name 'sparql' is now SPARQL 1.1
  * The query result formats now all use the W3C Format URIs as
    their primary URI
  * Improved configure check for for ceil(), floor() and round()
    to prevent GCC optimizing the test away and getting the wrong
    answer
  * Bugfixes</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468801">- Remove the specific -32bit compilation for 64bit systems. This
  as that rasqal depends on mhash for which there is no -32bit
  package</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1325678400">- remove libmhash buildrequires, which development was
  abandoned on 2007-08-18 and therefore should not be used.
  the library will fallback to internal hashing routines.
- remove obsolete configure options/cflags</changelog>
  <changelog author="dmueller@suse.de" date="1327320000">- add baselibs.conf</changelog>
  <changelog author="zaitor@opensuse.org" date="1337601600">- Update to version 0.9.29:
  + Supports all of SPARQL 1.0 by passing 100% of the approved
    tests.
  + Added support for XSD date.
  + Made XSD dateTime and XSD date equality and comparison work
  + Make limit and offset check work properly in a subquery
  + Correctly handle errors during aggregation expressions
    evaluation
  + Fix blank node generation when made in a CONSTRUCT to match
    SPARQL
  + Added SPARQL 1.1 draft UUID() and STRUUID() support
  + Requires Raptor 2.0.7+
  + RDQL support will be removed in the next release (0.9.30)
  + Made other fixes and improvements including fixing reported
    issues: 0000493, 0000494 0000504 (http://bugs.librdf.org/)</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license again</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1359806400">- Update to version 0.9.30:
  + Removed RDQL support
  + Improved floating equality, comparison and promotion rules
  + Other fixes and improvements</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 0.9.33
  * Added support for reading and writing boolean result formats.
  * Fixed several query engine operator evaluations (AVG, STRBEFORE,
  * STRAFTER, CONCAT)
  * Updated query results class constructor and methods, deprecating older.
  * Portability fixes for ICC, clang and GCC 5.
  * New internal test runner utility
  * Variable bindings query results can be formatted in mKR CSV format.
  * Multiple other fixes and improvements including fixing reported issues:
    0000546, 0000568, 0000583 and 0000588.
- Remove redundant %clean section</changelog>
</package>
<package pkgid="cd731478f67d8de276f0af397481ab300a0de53ec343f2ff451cd5e56c2c221d" name="librasqal-devel-doc" arch="ppc64le">
  <version epoch="0" ver="0.9.33" rel="150000.3.2.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1316433600">- Update to 0.9.27
  * sub-SELECTs can now be executed
  * OPTIONAL and UNION fully execute correctly
  * Grouping over sub-graph patterns fully executes correctly
  * CONSTRUCT WHERE abbreviation is supported and executes
  * CONSTRUCT works when working over a query with optionals
  * Updated the CSV and TSV outputs to match the editor's draft
    SPARQL 1.1 Query Results CSV and TSV Formats
  * Fixed issues: [1]#0000127, [2]#0000423, [3]#0000434, [4]#0000454
    and [5]#0000459.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1318075200">- Split documentation package (fix for RPMLINT warning)
- Added mhash buildrequires
- Cleaned up spec file formatting</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468800">- Update to 0.9.28
  * Added full support for SPARQL 1.1 draft STRBEFORE, STRAFTER
    and REPLACE.
  * Add internal Mersenne Twister PRNG or choose others via
    configure
  * Language name 'sparql' is now SPARQL 1.1
  * The query result formats now all use the W3C Format URIs as
    their primary URI
  * Improved configure check for for ceil(), floor() and round()
    to prevent GCC optimizing the test away and getting the wrong
    answer
  * Bugfixes</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468801">- Remove the specific -32bit compilation for 64bit systems. This
  as that rasqal depends on mhash for which there is no -32bit
  package</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1325678400">- remove libmhash buildrequires, which development was
  abandoned on 2007-08-18 and therefore should not be used.
  the library will fallback to internal hashing routines.
- remove obsolete configure options/cflags</changelog>
  <changelog author="dmueller@suse.de" date="1327320000">- add baselibs.conf</changelog>
  <changelog author="zaitor@opensuse.org" date="1337601600">- Update to version 0.9.29:
  + Supports all of SPARQL 1.0 by passing 100% of the approved
    tests.
  + Added support for XSD date.
  + Made XSD dateTime and XSD date equality and comparison work
  + Make limit and offset check work properly in a subquery
  + Correctly handle errors during aggregation expressions
    evaluation
  + Fix blank node generation when made in a CONSTRUCT to match
    SPARQL
  + Added SPARQL 1.1 draft UUID() and STRUUID() support
  + Requires Raptor 2.0.7+
  + RDQL support will be removed in the next release (0.9.30)
  + Made other fixes and improvements including fixing reported
    issues: 0000493, 0000494 0000504 (http://bugs.librdf.org/)</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license again</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1359806400">- Update to version 0.9.30:
  + Removed RDQL support
  + Improved floating equality, comparison and promotion rules
  + Other fixes and improvements</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 0.9.33
  * Added support for reading and writing boolean result formats.
  * Fixed several query engine operator evaluations (AVG, STRBEFORE,
  * STRAFTER, CONCAT)
  * Updated query results class constructor and methods, deprecating older.
  * Portability fixes for ICC, clang and GCC 5.
  * New internal test runner utility
  * Variable bindings query results can be formatted in mKR CSV format.
  * Multiple other fixes and improvements including fixing reported issues:
    0000546, 0000568, 0000583 and 0000588.
- Remove redundant %clean section</changelog>
</package>
<package pkgid="95ec5a3005918b1bed622a492658a8273e8df327ef6d3d3bde0103e79a64c48e" name="librasqal-devel-doc" arch="s390x">
  <version epoch="0" ver="0.9.33" rel="150000.3.2.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1316433600">- Update to 0.9.27
  * sub-SELECTs can now be executed
  * OPTIONAL and UNION fully execute correctly
  * Grouping over sub-graph patterns fully executes correctly
  * CONSTRUCT WHERE abbreviation is supported and executes
  * CONSTRUCT works when working over a query with optionals
  * Updated the CSV and TSV outputs to match the editor's draft
    SPARQL 1.1 Query Results CSV and TSV Formats
  * Fixed issues: [1]#0000127, [2]#0000423, [3]#0000434, [4]#0000454
    and [5]#0000459.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1318075200">- Split documentation package (fix for RPMLINT warning)
- Added mhash buildrequires
- Cleaned up spec file formatting</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468800">- Update to 0.9.28
  * Added full support for SPARQL 1.1 draft STRBEFORE, STRAFTER
    and REPLACE.
  * Add internal Mersenne Twister PRNG or choose others via
    configure
  * Language name 'sparql' is now SPARQL 1.1
  * The query result formats now all use the W3C Format URIs as
    their primary URI
  * Improved configure check for for ceil(), floor() and round()
    to prevent GCC optimizing the test away and getting the wrong
    answer
  * Bugfixes</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468801">- Remove the specific -32bit compilation for 64bit systems. This
  as that rasqal depends on mhash for which there is no -32bit
  package</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1325678400">- remove libmhash buildrequires, which development was
  abandoned on 2007-08-18 and therefore should not be used.
  the library will fallback to internal hashing routines.
- remove obsolete configure options/cflags</changelog>
  <changelog author="dmueller@suse.de" date="1327320000">- add baselibs.conf</changelog>
  <changelog author="zaitor@opensuse.org" date="1337601600">- Update to version 0.9.29:
  + Supports all of SPARQL 1.0 by passing 100% of the approved
    tests.
  + Added support for XSD date.
  + Made XSD dateTime and XSD date equality and comparison work
  + Make limit and offset check work properly in a subquery
  + Correctly handle errors during aggregation expressions
    evaluation
  + Fix blank node generation when made in a CONSTRUCT to match
    SPARQL
  + Added SPARQL 1.1 draft UUID() and STRUUID() support
  + Requires Raptor 2.0.7+
  + RDQL support will be removed in the next release (0.9.30)
  + Made other fixes and improvements including fixing reported
    issues: 0000493, 0000494 0000504 (http://bugs.librdf.org/)</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license again</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1359806400">- Update to version 0.9.30:
  + Removed RDQL support
  + Improved floating equality, comparison and promotion rules
  + Other fixes and improvements</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 0.9.33
  * Added support for reading and writing boolean result formats.
  * Fixed several query engine operator evaluations (AVG, STRBEFORE,
  * STRAFTER, CONCAT)
  * Updated query results class constructor and methods, deprecating older.
  * Portability fixes for ICC, clang and GCC 5.
  * New internal test runner utility
  * Variable bindings query results can be formatted in mKR CSV format.
  * Multiple other fixes and improvements including fixing reported issues:
    0000546, 0000568, 0000583 and 0000588.
- Remove redundant %clean section</changelog>
</package>
<package pkgid="d4b8bbce078ecd2d53f96523d8159c9915ca68af346001a3f73e75733b515076" name="librasqal-devel-doc" arch="x86_64">
  <version epoch="0" ver="0.9.33" rel="150000.3.2.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1316433600">- Update to 0.9.27
  * sub-SELECTs can now be executed
  * OPTIONAL and UNION fully execute correctly
  * Grouping over sub-graph patterns fully executes correctly
  * CONSTRUCT WHERE abbreviation is supported and executes
  * CONSTRUCT works when working over a query with optionals
  * Updated the CSV and TSV outputs to match the editor's draft
    SPARQL 1.1 Query Results CSV and TSV Formats
  * Fixed issues: [1]#0000127, [2]#0000423, [3]#0000434, [4]#0000454
    and [5]#0000459.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1318075200">- Split documentation package (fix for RPMLINT warning)
- Added mhash buildrequires
- Cleaned up spec file formatting</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468800">- Update to 0.9.28
  * Added full support for SPARQL 1.1 draft STRBEFORE, STRAFTER
    and REPLACE.
  * Add internal Mersenne Twister PRNG or choose others via
    configure
  * Language name 'sparql' is now SPARQL 1.1
  * The query result formats now all use the W3C Format URIs as
    their primary URI
  * Improved configure check for for ceil(), floor() and round()
    to prevent GCC optimizing the test away and getting the wrong
    answer
  * Bugfixes</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468801">- Remove the specific -32bit compilation for 64bit systems. This
  as that rasqal depends on mhash for which there is no -32bit
  package</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1325678400">- remove libmhash buildrequires, which development was
  abandoned on 2007-08-18 and therefore should not be used.
  the library will fallback to internal hashing routines.
- remove obsolete configure options/cflags</changelog>
  <changelog author="dmueller@suse.de" date="1327320000">- add baselibs.conf</changelog>
  <changelog author="zaitor@opensuse.org" date="1337601600">- Update to version 0.9.29:
  + Supports all of SPARQL 1.0 by passing 100% of the approved
    tests.
  + Added support for XSD date.
  + Made XSD dateTime and XSD date equality and comparison work
  + Make limit and offset check work properly in a subquery
  + Correctly handle errors during aggregation expressions
    evaluation
  + Fix blank node generation when made in a CONSTRUCT to match
    SPARQL
  + Added SPARQL 1.1 draft UUID() and STRUUID() support
  + Requires Raptor 2.0.7+
  + RDQL support will be removed in the next release (0.9.30)
  + Made other fixes and improvements including fixing reported
    issues: 0000493, 0000494 0000504 (http://bugs.librdf.org/)</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license again</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1359806400">- Update to version 0.9.30:
  + Removed RDQL support
  + Improved floating equality, comparison and promotion rules
  + Other fixes and improvements</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 0.9.33
  * Added support for reading and writing boolean result formats.
  * Fixed several query engine operator evaluations (AVG, STRBEFORE,
  * STRAFTER, CONCAT)
  * Updated query results class constructor and methods, deprecating older.
  * Portability fixes for ICC, clang and GCC 5.
  * New internal test runner utility
  * Variable bindings query results can be formatted in mKR CSV format.
  * Multiple other fixes and improvements including fixing reported issues:
    0000546, 0000568, 0000583 and 0000588.
- Remove redundant %clean section</changelog>
</package>
<package pkgid="4f300eced1d1c5984fa37239a77f50e6430352d584453a8e298fae030ef5a821" name="librasqal3" arch="aarch64">
  <version epoch="0" ver="0.9.33" rel="150000.3.2.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1316433600">- Update to 0.9.27
  * sub-SELECTs can now be executed
  * OPTIONAL and UNION fully execute correctly
  * Grouping over sub-graph patterns fully executes correctly
  * CONSTRUCT WHERE abbreviation is supported and executes
  * CONSTRUCT works when working over a query with optionals
  * Updated the CSV and TSV outputs to match the editor's draft
    SPARQL 1.1 Query Results CSV and TSV Formats
  * Fixed issues: [1]#0000127, [2]#0000423, [3]#0000434, [4]#0000454
    and [5]#0000459.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1318075200">- Split documentation package (fix for RPMLINT warning)
- Added mhash buildrequires
- Cleaned up spec file formatting</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468800">- Update to 0.9.28
  * Added full support for SPARQL 1.1 draft STRBEFORE, STRAFTER
    and REPLACE.
  * Add internal Mersenne Twister PRNG or choose others via
    configure
  * Language name 'sparql' is now SPARQL 1.1
  * The query result formats now all use the W3C Format URIs as
    their primary URI
  * Improved configure check for for ceil(), floor() and round()
    to prevent GCC optimizing the test away and getting the wrong
    answer
  * Bugfixes</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468801">- Remove the specific -32bit compilation for 64bit systems. This
  as that rasqal depends on mhash for which there is no -32bit
  package</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1325678400">- remove libmhash buildrequires, which development was
  abandoned on 2007-08-18 and therefore should not be used.
  the library will fallback to internal hashing routines.
- remove obsolete configure options/cflags</changelog>
  <changelog author="dmueller@suse.de" date="1327320000">- add baselibs.conf</changelog>
  <changelog author="zaitor@opensuse.org" date="1337601600">- Update to version 0.9.29:
  + Supports all of SPARQL 1.0 by passing 100% of the approved
    tests.
  + Added support for XSD date.
  + Made XSD dateTime and XSD date equality and comparison work
  + Make limit and offset check work properly in a subquery
  + Correctly handle errors during aggregation expressions
    evaluation
  + Fix blank node generation when made in a CONSTRUCT to match
    SPARQL
  + Added SPARQL 1.1 draft UUID() and STRUUID() support
  + Requires Raptor 2.0.7+
  + RDQL support will be removed in the next release (0.9.30)
  + Made other fixes and improvements including fixing reported
    issues: 0000493, 0000494 0000504 (http://bugs.librdf.org/)</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license again</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1359806400">- Update to version 0.9.30:
  + Removed RDQL support
  + Improved floating equality, comparison and promotion rules
  + Other fixes and improvements</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 0.9.33
  * Added support for reading and writing boolean result formats.
  * Fixed several query engine operator evaluations (AVG, STRBEFORE,
  * STRAFTER, CONCAT)
  * Updated query results class constructor and methods, deprecating older.
  * Portability fixes for ICC, clang and GCC 5.
  * New internal test runner utility
  * Variable bindings query results can be formatted in mKR CSV format.
  * Multiple other fixes and improvements including fixing reported issues:
    0000546, 0000568, 0000583 and 0000588.
- Remove redundant %clean section</changelog>
</package>
<package pkgid="9a2f045450a2a11543f4874a17693daafbae726fdc0b4d8bd8f5bd8e0c4f97f9" name="librasqal3" arch="ppc64le">
  <version epoch="0" ver="0.9.33" rel="150000.3.2.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1316433600">- Update to 0.9.27
  * sub-SELECTs can now be executed
  * OPTIONAL and UNION fully execute correctly
  * Grouping over sub-graph patterns fully executes correctly
  * CONSTRUCT WHERE abbreviation is supported and executes
  * CONSTRUCT works when working over a query with optionals
  * Updated the CSV and TSV outputs to match the editor's draft
    SPARQL 1.1 Query Results CSV and TSV Formats
  * Fixed issues: [1]#0000127, [2]#0000423, [3]#0000434, [4]#0000454
    and [5]#0000459.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1318075200">- Split documentation package (fix for RPMLINT warning)
- Added mhash buildrequires
- Cleaned up spec file formatting</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468800">- Update to 0.9.28
  * Added full support for SPARQL 1.1 draft STRBEFORE, STRAFTER
    and REPLACE.
  * Add internal Mersenne Twister PRNG or choose others via
    configure
  * Language name 'sparql' is now SPARQL 1.1
  * The query result formats now all use the W3C Format URIs as
    their primary URI
  * Improved configure check for for ceil(), floor() and round()
    to prevent GCC optimizing the test away and getting the wrong
    answer
  * Bugfixes</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468801">- Remove the specific -32bit compilation for 64bit systems. This
  as that rasqal depends on mhash for which there is no -32bit
  package</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1325678400">- remove libmhash buildrequires, which development was
  abandoned on 2007-08-18 and therefore should not be used.
  the library will fallback to internal hashing routines.
- remove obsolete configure options/cflags</changelog>
  <changelog author="dmueller@suse.de" date="1327320000">- add baselibs.conf</changelog>
  <changelog author="zaitor@opensuse.org" date="1337601600">- Update to version 0.9.29:
  + Supports all of SPARQL 1.0 by passing 100% of the approved
    tests.
  + Added support for XSD date.
  + Made XSD dateTime and XSD date equality and comparison work
  + Make limit and offset check work properly in a subquery
  + Correctly handle errors during aggregation expressions
    evaluation
  + Fix blank node generation when made in a CONSTRUCT to match
    SPARQL
  + Added SPARQL 1.1 draft UUID() and STRUUID() support
  + Requires Raptor 2.0.7+
  + RDQL support will be removed in the next release (0.9.30)
  + Made other fixes and improvements including fixing reported
    issues: 0000493, 0000494 0000504 (http://bugs.librdf.org/)</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license again</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1359806400">- Update to version 0.9.30:
  + Removed RDQL support
  + Improved floating equality, comparison and promotion rules
  + Other fixes and improvements</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 0.9.33
  * Added support for reading and writing boolean result formats.
  * Fixed several query engine operator evaluations (AVG, STRBEFORE,
  * STRAFTER, CONCAT)
  * Updated query results class constructor and methods, deprecating older.
  * Portability fixes for ICC, clang and GCC 5.
  * New internal test runner utility
  * Variable bindings query results can be formatted in mKR CSV format.
  * Multiple other fixes and improvements including fixing reported issues:
    0000546, 0000568, 0000583 and 0000588.
- Remove redundant %clean section</changelog>
</package>
<package pkgid="e0d343ce4c4049548d4847ceed886ce156b6d688565d2b3eb8c795af46cbb6ee" name="librasqal3" arch="s390x">
  <version epoch="0" ver="0.9.33" rel="150000.3.2.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1316433600">- Update to 0.9.27
  * sub-SELECTs can now be executed
  * OPTIONAL and UNION fully execute correctly
  * Grouping over sub-graph patterns fully executes correctly
  * CONSTRUCT WHERE abbreviation is supported and executes
  * CONSTRUCT works when working over a query with optionals
  * Updated the CSV and TSV outputs to match the editor's draft
    SPARQL 1.1 Query Results CSV and TSV Formats
  * Fixed issues: [1]#0000127, [2]#0000423, [3]#0000434, [4]#0000454
    and [5]#0000459.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1318075200">- Split documentation package (fix for RPMLINT warning)
- Added mhash buildrequires
- Cleaned up spec file formatting</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468800">- Update to 0.9.28
  * Added full support for SPARQL 1.1 draft STRBEFORE, STRAFTER
    and REPLACE.
  * Add internal Mersenne Twister PRNG or choose others via
    configure
  * Language name 'sparql' is now SPARQL 1.1
  * The query result formats now all use the W3C Format URIs as
    their primary URI
  * Improved configure check for for ceil(), floor() and round()
    to prevent GCC optimizing the test away and getting the wrong
    answer
  * Bugfixes</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468801">- Remove the specific -32bit compilation for 64bit systems. This
  as that rasqal depends on mhash for which there is no -32bit
  package</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1325678400">- remove libmhash buildrequires, which development was
  abandoned on 2007-08-18 and therefore should not be used.
  the library will fallback to internal hashing routines.
- remove obsolete configure options/cflags</changelog>
  <changelog author="dmueller@suse.de" date="1327320000">- add baselibs.conf</changelog>
  <changelog author="zaitor@opensuse.org" date="1337601600">- Update to version 0.9.29:
  + Supports all of SPARQL 1.0 by passing 100% of the approved
    tests.
  + Added support for XSD date.
  + Made XSD dateTime and XSD date equality and comparison work
  + Make limit and offset check work properly in a subquery
  + Correctly handle errors during aggregation expressions
    evaluation
  + Fix blank node generation when made in a CONSTRUCT to match
    SPARQL
  + Added SPARQL 1.1 draft UUID() and STRUUID() support
  + Requires Raptor 2.0.7+
  + RDQL support will be removed in the next release (0.9.30)
  + Made other fixes and improvements including fixing reported
    issues: 0000493, 0000494 0000504 (http://bugs.librdf.org/)</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license again</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1359806400">- Update to version 0.9.30:
  + Removed RDQL support
  + Improved floating equality, comparison and promotion rules
  + Other fixes and improvements</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 0.9.33
  * Added support for reading and writing boolean result formats.
  * Fixed several query engine operator evaluations (AVG, STRBEFORE,
  * STRAFTER, CONCAT)
  * Updated query results class constructor and methods, deprecating older.
  * Portability fixes for ICC, clang and GCC 5.
  * New internal test runner utility
  * Variable bindings query results can be formatted in mKR CSV format.
  * Multiple other fixes and improvements including fixing reported issues:
    0000546, 0000568, 0000583 and 0000588.
- Remove redundant %clean section</changelog>
</package>
<package pkgid="7b9d15791af050454fc46321574dc5dfa43856553c057ed5435509c7c73c62dc" name="librasqal3" arch="x86_64">
  <version epoch="0" ver="0.9.33" rel="150000.3.2.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1316433600">- Update to 0.9.27
  * sub-SELECTs can now be executed
  * OPTIONAL and UNION fully execute correctly
  * Grouping over sub-graph patterns fully executes correctly
  * CONSTRUCT WHERE abbreviation is supported and executes
  * CONSTRUCT works when working over a query with optionals
  * Updated the CSV and TSV outputs to match the editor's draft
    SPARQL 1.1 Query Results CSV and TSV Formats
  * Fixed issues: [1]#0000127, [2]#0000423, [3]#0000434, [4]#0000454
    and [5]#0000459.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1318075200">- Split documentation package (fix for RPMLINT warning)
- Added mhash buildrequires
- Cleaned up spec file formatting</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468800">- Update to 0.9.28
  * Added full support for SPARQL 1.1 draft STRBEFORE, STRAFTER
    and REPLACE.
  * Add internal Mersenne Twister PRNG or choose others via
    configure
  * Language name 'sparql' is now SPARQL 1.1
  * The query result formats now all use the W3C Format URIs as
    their primary URI
  * Improved configure check for for ceil(), floor() and round()
    to prevent GCC optimizing the test away and getting the wrong
    answer
  * Bugfixes</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468801">- Remove the specific -32bit compilation for 64bit systems. This
  as that rasqal depends on mhash for which there is no -32bit
  package</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1325678400">- remove libmhash buildrequires, which development was
  abandoned on 2007-08-18 and therefore should not be used.
  the library will fallback to internal hashing routines.
- remove obsolete configure options/cflags</changelog>
  <changelog author="dmueller@suse.de" date="1327320000">- add baselibs.conf</changelog>
  <changelog author="zaitor@opensuse.org" date="1337601600">- Update to version 0.9.29:
  + Supports all of SPARQL 1.0 by passing 100% of the approved
    tests.
  + Added support for XSD date.
  + Made XSD dateTime and XSD date equality and comparison work
  + Make limit and offset check work properly in a subquery
  + Correctly handle errors during aggregation expressions
    evaluation
  + Fix blank node generation when made in a CONSTRUCT to match
    SPARQL
  + Added SPARQL 1.1 draft UUID() and STRUUID() support
  + Requires Raptor 2.0.7+
  + RDQL support will be removed in the next release (0.9.30)
  + Made other fixes and improvements including fixing reported
    issues: 0000493, 0000494 0000504 (http://bugs.librdf.org/)</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license again</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1359806400">- Update to version 0.9.30:
  + Removed RDQL support
  + Improved floating equality, comparison and promotion rules
  + Other fixes and improvements</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 0.9.33
  * Added support for reading and writing boolean result formats.
  * Fixed several query engine operator evaluations (AVG, STRBEFORE,
  * STRAFTER, CONCAT)
  * Updated query results class constructor and methods, deprecating older.
  * Portability fixes for ICC, clang and GCC 5.
  * New internal test runner utility
  * Variable bindings query results can be formatted in mKR CSV format.
  * Multiple other fixes and improvements including fixing reported issues:
    0000546, 0000568, 0000583 and 0000588.
- Remove redundant %clean section</changelog>
</package>
<package pkgid="c34761fe4d8065ad1768a826f545d27a386267ff8052c3beecd56196ba24e584" name="librasqal3-32bit" arch="x86_64">
  <version epoch="0" ver="0.9.33" rel="150000.3.2.1"/>
  <changelog author="tittiatcoke@gmail.com" date="1316433600">- Update to 0.9.27
  * sub-SELECTs can now be executed
  * OPTIONAL and UNION fully execute correctly
  * Grouping over sub-graph patterns fully executes correctly
  * CONSTRUCT WHERE abbreviation is supported and executes
  * CONSTRUCT works when working over a query with optionals
  * Updated the CSV and TSV outputs to match the editor's draft
    SPARQL 1.1 Query Results CSV and TSV Formats
  * Fixed issues: [1]#0000127, [2]#0000423, [3]#0000434, [4]#0000454
    and [5]#0000459.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1318075200">- Split documentation package (fix for RPMLINT warning)
- Added mhash buildrequires
- Cleaned up spec file formatting</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468800">- Update to 0.9.28
  * Added full support for SPARQL 1.1 draft STRBEFORE, STRAFTER
    and REPLACE.
  * Add internal Mersenne Twister PRNG or choose others via
    configure
  * Language name 'sparql' is now SPARQL 1.1
  * The query result formats now all use the W3C Format URIs as
    their primary URI
  * Improved configure check for for ceil(), floor() and round()
    to prevent GCC optimizing the test away and getting the wrong
    answer
  * Bugfixes</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468801">- Remove the specific -32bit compilation for 64bit systems. This
  as that rasqal depends on mhash for which there is no -32bit
  package</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1325678400">- remove libmhash buildrequires, which development was
  abandoned on 2007-08-18 and therefore should not be used.
  the library will fallback to internal hashing routines.
- remove obsolete configure options/cflags</changelog>
  <changelog author="dmueller@suse.de" date="1327320000">- add baselibs.conf</changelog>
  <changelog author="zaitor@opensuse.org" date="1337601600">- Update to version 0.9.29:
  + Supports all of SPARQL 1.0 by passing 100% of the approved
    tests.
  + Added support for XSD date.
  + Made XSD dateTime and XSD date equality and comparison work
  + Make limit and offset check work properly in a subquery
  + Correctly handle errors during aggregation expressions
    evaluation
  + Fix blank node generation when made in a CONSTRUCT to match
    SPARQL
  + Added SPARQL 1.1 draft UUID() and STRUUID() support
  + Requires Raptor 2.0.7+
  + RDQL support will be removed in the next release (0.9.30)
  + Made other fixes and improvements including fixing reported
    issues: 0000493, 0000494 0000504 (http://bugs.librdf.org/)</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license again</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1359806400">- Update to version 0.9.30:
  + Removed RDQL support
  + Improved floating equality, comparison and promotion rules
  + Other fixes and improvements</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 0.9.33
  * Added support for reading and writing boolean result formats.
  * Fixed several query engine operator evaluations (AVG, STRBEFORE,
  * STRAFTER, CONCAT)
  * Updated query results class constructor and methods, deprecating older.
  * Portability fixes for ICC, clang and GCC 5.
  * New internal test runner utility
  * Variable bindings query results can be formatted in mKR CSV format.
  * Multiple other fixes and improvements including fixing reported issues:
    0000546, 0000568, 0000583 and 0000588.
- Remove redundant %clean section</changelog>
</package>
<package pkgid="f41772aec0b85a402d5d2f20ac03377ff2a5eafb424762cdfbb24e2b2cdb88db" name="librdf0" arch="aarch64">
  <version epoch="0" ver="1.0.17" rel="150200.10.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1321272000">- open all file descriptors with O_CLOEXEC to avoid
  races and leaks.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1321444800">- Ensure that the patch regarding O_CLOEXEC is only applied on
  versions equal or higher than 12.1</changelog>
  <changelog author="coolo@suse.com" date="1324468800">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468801">- Update to 1.0.15
  Issues Fixed:
    0000461: librdf error - query language vsparql already
    registered
    0000468: xlc on AIX configure tests for both
    HAVE_BDB_OPEN_7_ARGS and HAVE_BDB_OPEN_6_ARGS pass
    0000475: Freeing a counted_string returned by redland on a
    modern Windows system crashes
    0000478: Object returned from librdf_stream_get_object must
    be copied, but may not copiable
    0000483: Documentation of
    librdf_parser_get_namespaces_seen_count return is
    incorrect
    0000485: No rule to make target `-lltdl', needed by
    `librdf.la'. Stop.</changelog>
  <changelog author="darin@darins.net" date="1336478400">- Updated to include postgresql storage support and development
  packages</changelog>
  <changelog author="darin@darins.net" date="1336564800">- removed unnecessary postgresl-devel package and it's .la
- removed libpq5 require</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1357128000">- Update to 1.0.16
  * Fixed Issues: [1]#0000443, [2]#0000460, [3]#0000497, [4]#0000518,
    [5]#0000519
  * Postgres, MySQL and Hashes storage bug fixes.
  * Multiple other API bug fixes
  * Multiple build fixes to help building on Windows.
  * Requires Raptor 2.0.7 or newer
  * librdf_model_contains_statement() and librdf_storage_contains_
    statement() now return 0 for invalid statements</changelog>
  <changelog author="jengelh@inai.de" date="1371297600">- Add redland-db6.diff to make it look for libdb 6.0
- Implement shlib packaging guidelines
  (rename libredland0 -&gt; librdf0)</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 1.17
  * Configuration and build improvements
  * Fixed Issues: [1]0000529, [2]0000540, [3]0000541, [4]0000542 and
    [5]0000543
- Adapt redland-ocloexec.patch to upstream changes</changelog>
  <changelog author="max@suse.com" date="1551441600">- PostrgeSQL's pg_config is meant for linking server extensions,
  use libpq's pkg-config instead (redland-postgresql.patch).
  This is needed to fix build with PostgreSQL 11.</changelog>
</package>
<package pkgid="9a4f2a6c1c5ac8e4c802c6ca127fee81edf3e8b7982d83d52a702fe69ff38bce" name="librdf0" arch="ppc64le">
  <version epoch="0" ver="1.0.17" rel="150200.10.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1321272000">- open all file descriptors with O_CLOEXEC to avoid
  races and leaks.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1321444800">- Ensure that the patch regarding O_CLOEXEC is only applied on
  versions equal or higher than 12.1</changelog>
  <changelog author="coolo@suse.com" date="1324468800">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468801">- Update to 1.0.15
  Issues Fixed:
    0000461: librdf error - query language vsparql already
    registered
    0000468: xlc on AIX configure tests for both
    HAVE_BDB_OPEN_7_ARGS and HAVE_BDB_OPEN_6_ARGS pass
    0000475: Freeing a counted_string returned by redland on a
    modern Windows system crashes
    0000478: Object returned from librdf_stream_get_object must
    be copied, but may not copiable
    0000483: Documentation of
    librdf_parser_get_namespaces_seen_count return is
    incorrect
    0000485: No rule to make target `-lltdl', needed by
    `librdf.la'. Stop.</changelog>
  <changelog author="darin@darins.net" date="1336478400">- Updated to include postgresql storage support and development
  packages</changelog>
  <changelog author="darin@darins.net" date="1336564800">- removed unnecessary postgresl-devel package and it's .la
- removed libpq5 require</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1357128000">- Update to 1.0.16
  * Fixed Issues: [1]#0000443, [2]#0000460, [3]#0000497, [4]#0000518,
    [5]#0000519
  * Postgres, MySQL and Hashes storage bug fixes.
  * Multiple other API bug fixes
  * Multiple build fixes to help building on Windows.
  * Requires Raptor 2.0.7 or newer
  * librdf_model_contains_statement() and librdf_storage_contains_
    statement() now return 0 for invalid statements</changelog>
  <changelog author="jengelh@inai.de" date="1371297600">- Add redland-db6.diff to make it look for libdb 6.0
- Implement shlib packaging guidelines
  (rename libredland0 -&gt; librdf0)</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 1.17
  * Configuration and build improvements
  * Fixed Issues: [1]0000529, [2]0000540, [3]0000541, [4]0000542 and
    [5]0000543
- Adapt redland-ocloexec.patch to upstream changes</changelog>
  <changelog author="max@suse.com" date="1551441600">- PostrgeSQL's pg_config is meant for linking server extensions,
  use libpq's pkg-config instead (redland-postgresql.patch).
  This is needed to fix build with PostgreSQL 11.</changelog>
</package>
<package pkgid="8f87c4d288d8999e692e16f9d24ac77b035833b8ebb823e71c2f74255fea1bef" name="librdf0" arch="s390x">
  <version epoch="0" ver="1.0.17" rel="150200.10.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1321272000">- open all file descriptors with O_CLOEXEC to avoid
  races and leaks.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1321444800">- Ensure that the patch regarding O_CLOEXEC is only applied on
  versions equal or higher than 12.1</changelog>
  <changelog author="coolo@suse.com" date="1324468800">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468801">- Update to 1.0.15
  Issues Fixed:
    0000461: librdf error - query language vsparql already
    registered
    0000468: xlc on AIX configure tests for both
    HAVE_BDB_OPEN_7_ARGS and HAVE_BDB_OPEN_6_ARGS pass
    0000475: Freeing a counted_string returned by redland on a
    modern Windows system crashes
    0000478: Object returned from librdf_stream_get_object must
    be copied, but may not copiable
    0000483: Documentation of
    librdf_parser_get_namespaces_seen_count return is
    incorrect
    0000485: No rule to make target `-lltdl', needed by
    `librdf.la'. Stop.</changelog>
  <changelog author="darin@darins.net" date="1336478400">- Updated to include postgresql storage support and development
  packages</changelog>
  <changelog author="darin@darins.net" date="1336564800">- removed unnecessary postgresl-devel package and it's .la
- removed libpq5 require</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1357128000">- Update to 1.0.16
  * Fixed Issues: [1]#0000443, [2]#0000460, [3]#0000497, [4]#0000518,
    [5]#0000519
  * Postgres, MySQL and Hashes storage bug fixes.
  * Multiple other API bug fixes
  * Multiple build fixes to help building on Windows.
  * Requires Raptor 2.0.7 or newer
  * librdf_model_contains_statement() and librdf_storage_contains_
    statement() now return 0 for invalid statements</changelog>
  <changelog author="jengelh@inai.de" date="1371297600">- Add redland-db6.diff to make it look for libdb 6.0
- Implement shlib packaging guidelines
  (rename libredland0 -&gt; librdf0)</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 1.17
  * Configuration and build improvements
  * Fixed Issues: [1]0000529, [2]0000540, [3]0000541, [4]0000542 and
    [5]0000543
- Adapt redland-ocloexec.patch to upstream changes</changelog>
  <changelog author="max@suse.com" date="1551441600">- PostrgeSQL's pg_config is meant for linking server extensions,
  use libpq's pkg-config instead (redland-postgresql.patch).
  This is needed to fix build with PostgreSQL 11.</changelog>
</package>
<package pkgid="3765f0f113b71fc455c9b6e0a2fc77c65821bac5a8bc7244186c9ce2e58e85c0" name="librdf0" arch="x86_64">
  <version epoch="0" ver="1.0.17" rel="150200.10.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1321272000">- open all file descriptors with O_CLOEXEC to avoid
  races and leaks.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1321444800">- Ensure that the patch regarding O_CLOEXEC is only applied on
  versions equal or higher than 12.1</changelog>
  <changelog author="coolo@suse.com" date="1324468800">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468801">- Update to 1.0.15
  Issues Fixed:
    0000461: librdf error - query language vsparql already
    registered
    0000468: xlc on AIX configure tests for both
    HAVE_BDB_OPEN_7_ARGS and HAVE_BDB_OPEN_6_ARGS pass
    0000475: Freeing a counted_string returned by redland on a
    modern Windows system crashes
    0000478: Object returned from librdf_stream_get_object must
    be copied, but may not copiable
    0000483: Documentation of
    librdf_parser_get_namespaces_seen_count return is
    incorrect
    0000485: No rule to make target `-lltdl', needed by
    `librdf.la'. Stop.</changelog>
  <changelog author="darin@darins.net" date="1336478400">- Updated to include postgresql storage support and development
  packages</changelog>
  <changelog author="darin@darins.net" date="1336564800">- removed unnecessary postgresl-devel package and it's .la
- removed libpq5 require</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1357128000">- Update to 1.0.16
  * Fixed Issues: [1]#0000443, [2]#0000460, [3]#0000497, [4]#0000518,
    [5]#0000519
  * Postgres, MySQL and Hashes storage bug fixes.
  * Multiple other API bug fixes
  * Multiple build fixes to help building on Windows.
  * Requires Raptor 2.0.7 or newer
  * librdf_model_contains_statement() and librdf_storage_contains_
    statement() now return 0 for invalid statements</changelog>
  <changelog author="jengelh@inai.de" date="1371297600">- Add redland-db6.diff to make it look for libdb 6.0
- Implement shlib packaging guidelines
  (rename libredland0 -&gt; librdf0)</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 1.17
  * Configuration and build improvements
  * Fixed Issues: [1]0000529, [2]0000540, [3]0000541, [4]0000542 and
    [5]0000543
- Adapt redland-ocloexec.patch to upstream changes</changelog>
  <changelog author="max@suse.com" date="1551441600">- PostrgeSQL's pg_config is meant for linking server extensions,
  use libpq's pkg-config instead (redland-postgresql.patch).
  This is needed to fix build with PostgreSQL 11.</changelog>
</package>
<package pkgid="c1eb3a3d49391a8e509e4d8db0a3422157d7b189b5ab471c3e2dfb13aa79219b" name="librdf0-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.17" rel="150200.10.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1321272000">- open all file descriptors with O_CLOEXEC to avoid
  races and leaks.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1321444800">- Ensure that the patch regarding O_CLOEXEC is only applied on
  versions equal or higher than 12.1</changelog>
  <changelog author="coolo@suse.com" date="1324468800">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468801">- Update to 1.0.15
  Issues Fixed:
    0000461: librdf error - query language vsparql already
    registered
    0000468: xlc on AIX configure tests for both
    HAVE_BDB_OPEN_7_ARGS and HAVE_BDB_OPEN_6_ARGS pass
    0000475: Freeing a counted_string returned by redland on a
    modern Windows system crashes
    0000478: Object returned from librdf_stream_get_object must
    be copied, but may not copiable
    0000483: Documentation of
    librdf_parser_get_namespaces_seen_count return is
    incorrect
    0000485: No rule to make target `-lltdl', needed by
    `librdf.la'. Stop.</changelog>
  <changelog author="darin@darins.net" date="1336478400">- Updated to include postgresql storage support and development
  packages</changelog>
  <changelog author="darin@darins.net" date="1336564800">- removed unnecessary postgresl-devel package and it's .la
- removed libpq5 require</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1357128000">- Update to 1.0.16
  * Fixed Issues: [1]#0000443, [2]#0000460, [3]#0000497, [4]#0000518,
    [5]#0000519
  * Postgres, MySQL and Hashes storage bug fixes.
  * Multiple other API bug fixes
  * Multiple build fixes to help building on Windows.
  * Requires Raptor 2.0.7 or newer
  * librdf_model_contains_statement() and librdf_storage_contains_
    statement() now return 0 for invalid statements</changelog>
  <changelog author="jengelh@inai.de" date="1371297600">- Add redland-db6.diff to make it look for libdb 6.0
- Implement shlib packaging guidelines
  (rename libredland0 -&gt; librdf0)</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 1.17
  * Configuration and build improvements
  * Fixed Issues: [1]0000529, [2]0000540, [3]0000541, [4]0000542 and
    [5]0000543
- Adapt redland-ocloexec.patch to upstream changes</changelog>
  <changelog author="max@suse.com" date="1551441600">- PostrgeSQL's pg_config is meant for linking server extensions,
  use libpq's pkg-config instead (redland-postgresql.patch).
  This is needed to fix build with PostgreSQL 11.</changelog>
</package>
<package pkgid="7e333417686faeef39e2b112bf91cb422d8d5d1b0af70d6e8e4744efd3cadc16" name="libredland-devel" arch="aarch64">
  <version epoch="0" ver="1.0.17" rel="150200.10.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1321272000">- open all file descriptors with O_CLOEXEC to avoid
  races and leaks.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1321444800">- Ensure that the patch regarding O_CLOEXEC is only applied on
  versions equal or higher than 12.1</changelog>
  <changelog author="coolo@suse.com" date="1324468800">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468801">- Update to 1.0.15
  Issues Fixed:
    0000461: librdf error - query language vsparql already
    registered
    0000468: xlc on AIX configure tests for both
    HAVE_BDB_OPEN_7_ARGS and HAVE_BDB_OPEN_6_ARGS pass
    0000475: Freeing a counted_string returned by redland on a
    modern Windows system crashes
    0000478: Object returned from librdf_stream_get_object must
    be copied, but may not copiable
    0000483: Documentation of
    librdf_parser_get_namespaces_seen_count return is
    incorrect
    0000485: No rule to make target `-lltdl', needed by
    `librdf.la'. Stop.</changelog>
  <changelog author="darin@darins.net" date="1336478400">- Updated to include postgresql storage support and development
  packages</changelog>
  <changelog author="darin@darins.net" date="1336564800">- removed unnecessary postgresl-devel package and it's .la
- removed libpq5 require</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1357128000">- Update to 1.0.16
  * Fixed Issues: [1]#0000443, [2]#0000460, [3]#0000497, [4]#0000518,
    [5]#0000519
  * Postgres, MySQL and Hashes storage bug fixes.
  * Multiple other API bug fixes
  * Multiple build fixes to help building on Windows.
  * Requires Raptor 2.0.7 or newer
  * librdf_model_contains_statement() and librdf_storage_contains_
    statement() now return 0 for invalid statements</changelog>
  <changelog author="jengelh@inai.de" date="1371297600">- Add redland-db6.diff to make it look for libdb 6.0
- Implement shlib packaging guidelines
  (rename libredland0 -&gt; librdf0)</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 1.17
  * Configuration and build improvements
  * Fixed Issues: [1]0000529, [2]0000540, [3]0000541, [4]0000542 and
    [5]0000543
- Adapt redland-ocloexec.patch to upstream changes</changelog>
  <changelog author="max@suse.com" date="1551441600">- PostrgeSQL's pg_config is meant for linking server extensions,
  use libpq's pkg-config instead (redland-postgresql.patch).
  This is needed to fix build with PostgreSQL 11.</changelog>
</package>
<package pkgid="6d100095f1e225afccf5edbb72020a7af17721937423d33692709f670e208dbf" name="libredland-devel" arch="ppc64le">
  <version epoch="0" ver="1.0.17" rel="150200.10.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1321272000">- open all file descriptors with O_CLOEXEC to avoid
  races and leaks.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1321444800">- Ensure that the patch regarding O_CLOEXEC is only applied on
  versions equal or higher than 12.1</changelog>
  <changelog author="coolo@suse.com" date="1324468800">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468801">- Update to 1.0.15
  Issues Fixed:
    0000461: librdf error - query language vsparql already
    registered
    0000468: xlc on AIX configure tests for both
    HAVE_BDB_OPEN_7_ARGS and HAVE_BDB_OPEN_6_ARGS pass
    0000475: Freeing a counted_string returned by redland on a
    modern Windows system crashes
    0000478: Object returned from librdf_stream_get_object must
    be copied, but may not copiable
    0000483: Documentation of
    librdf_parser_get_namespaces_seen_count return is
    incorrect
    0000485: No rule to make target `-lltdl', needed by
    `librdf.la'. Stop.</changelog>
  <changelog author="darin@darins.net" date="1336478400">- Updated to include postgresql storage support and development
  packages</changelog>
  <changelog author="darin@darins.net" date="1336564800">- removed unnecessary postgresl-devel package and it's .la
- removed libpq5 require</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1357128000">- Update to 1.0.16
  * Fixed Issues: [1]#0000443, [2]#0000460, [3]#0000497, [4]#0000518,
    [5]#0000519
  * Postgres, MySQL and Hashes storage bug fixes.
  * Multiple other API bug fixes
  * Multiple build fixes to help building on Windows.
  * Requires Raptor 2.0.7 or newer
  * librdf_model_contains_statement() and librdf_storage_contains_
    statement() now return 0 for invalid statements</changelog>
  <changelog author="jengelh@inai.de" date="1371297600">- Add redland-db6.diff to make it look for libdb 6.0
- Implement shlib packaging guidelines
  (rename libredland0 -&gt; librdf0)</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 1.17
  * Configuration and build improvements
  * Fixed Issues: [1]0000529, [2]0000540, [3]0000541, [4]0000542 and
    [5]0000543
- Adapt redland-ocloexec.patch to upstream changes</changelog>
  <changelog author="max@suse.com" date="1551441600">- PostrgeSQL's pg_config is meant for linking server extensions,
  use libpq's pkg-config instead (redland-postgresql.patch).
  This is needed to fix build with PostgreSQL 11.</changelog>
</package>
<package pkgid="5c7e0c3031b1c49b71c950e77ead1e58a0379701cd435ea57337c6b7516b5da0" name="libredland-devel" arch="s390x">
  <version epoch="0" ver="1.0.17" rel="150200.10.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1321272000">- open all file descriptors with O_CLOEXEC to avoid
  races and leaks.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1321444800">- Ensure that the patch regarding O_CLOEXEC is only applied on
  versions equal or higher than 12.1</changelog>
  <changelog author="coolo@suse.com" date="1324468800">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468801">- Update to 1.0.15
  Issues Fixed:
    0000461: librdf error - query language vsparql already
    registered
    0000468: xlc on AIX configure tests for both
    HAVE_BDB_OPEN_7_ARGS and HAVE_BDB_OPEN_6_ARGS pass
    0000475: Freeing a counted_string returned by redland on a
    modern Windows system crashes
    0000478: Object returned from librdf_stream_get_object must
    be copied, but may not copiable
    0000483: Documentation of
    librdf_parser_get_namespaces_seen_count return is
    incorrect
    0000485: No rule to make target `-lltdl', needed by
    `librdf.la'. Stop.</changelog>
  <changelog author="darin@darins.net" date="1336478400">- Updated to include postgresql storage support and development
  packages</changelog>
  <changelog author="darin@darins.net" date="1336564800">- removed unnecessary postgresl-devel package and it's .la
- removed libpq5 require</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1357128000">- Update to 1.0.16
  * Fixed Issues: [1]#0000443, [2]#0000460, [3]#0000497, [4]#0000518,
    [5]#0000519
  * Postgres, MySQL and Hashes storage bug fixes.
  * Multiple other API bug fixes
  * Multiple build fixes to help building on Windows.
  * Requires Raptor 2.0.7 or newer
  * librdf_model_contains_statement() and librdf_storage_contains_
    statement() now return 0 for invalid statements</changelog>
  <changelog author="jengelh@inai.de" date="1371297600">- Add redland-db6.diff to make it look for libdb 6.0
- Implement shlib packaging guidelines
  (rename libredland0 -&gt; librdf0)</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 1.17
  * Configuration and build improvements
  * Fixed Issues: [1]0000529, [2]0000540, [3]0000541, [4]0000542 and
    [5]0000543
- Adapt redland-ocloexec.patch to upstream changes</changelog>
  <changelog author="max@suse.com" date="1551441600">- PostrgeSQL's pg_config is meant for linking server extensions,
  use libpq's pkg-config instead (redland-postgresql.patch).
  This is needed to fix build with PostgreSQL 11.</changelog>
</package>
<package pkgid="f89dbe5ba594671dbfa2af6ba8dcb7ced0036acac8005783b01d07de399d74aa" name="libredland-devel" arch="x86_64">
  <version epoch="0" ver="1.0.17" rel="150200.10.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1321272000">- open all file descriptors with O_CLOEXEC to avoid
  races and leaks.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1321444800">- Ensure that the patch regarding O_CLOEXEC is only applied on
  versions equal or higher than 12.1</changelog>
  <changelog author="coolo@suse.com" date="1324468800">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1324468801">- Update to 1.0.15
  Issues Fixed:
    0000461: librdf error - query language vsparql already
    registered
    0000468: xlc on AIX configure tests for both
    HAVE_BDB_OPEN_7_ARGS and HAVE_BDB_OPEN_6_ARGS pass
    0000475: Freeing a counted_string returned by redland on a
    modern Windows system crashes
    0000478: Object returned from librdf_stream_get_object must
    be copied, but may not copiable
    0000483: Documentation of
    librdf_parser_get_namespaces_seen_count return is
    incorrect
    0000485: No rule to make target `-lltdl', needed by
    `librdf.la'. Stop.</changelog>
  <changelog author="darin@darins.net" date="1336478400">- Updated to include postgresql storage support and development
  packages</changelog>
  <changelog author="darin@darins.net" date="1336564800">- removed unnecessary postgresl-devel package and it's .la
- removed libpq5 require</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1357128000">- Update to 1.0.16
  * Fixed Issues: [1]#0000443, [2]#0000460, [3]#0000497, [4]#0000518,
    [5]#0000519
  * Postgres, MySQL and Hashes storage bug fixes.
  * Multiple other API bug fixes
  * Multiple build fixes to help building on Windows.
  * Requires Raptor 2.0.7 or newer
  * librdf_model_contains_statement() and librdf_storage_contains_
    statement() now return 0 for invalid statements</changelog>
  <changelog author="jengelh@inai.de" date="1371297600">- Add redland-db6.diff to make it look for libdb 6.0
- Implement shlib packaging guidelines
  (rename libredland0 -&gt; librdf0)</changelog>
  <changelog author="p.drouand@gmail.com" date="1426420800">- Update to version 1.17
  * Configuration and build improvements
  * Fixed Issues: [1]0000529, [2]0000540, [3]0000541, [4]0000542 and
    [5]0000543
- Adapt redland-ocloexec.patch to upstream changes</changelog>
  <changelog author="max@suse.com" date="1551441600">- PostrgeSQL's pg_config is meant for linking server extensions,
  use libpq's pkg-config instead (redland-postgresql.patch).
  This is needed to fix build with PostgreSQL 11.</changelog>
</package>
<package pkgid="31e0d030ed1a2a54b2af5b3daeda96082e6f0084c906e0e33518b9d37e640da0" name="libreiserfs" arch="src">
  <version epoch="0" ver="0.3.0.5" rel="150000.3.3.1"/>
  <changelog author="garloff@suse.de" date="1125835200">- Initial creation of package (0.3.0.5).
- Use .so as extension for shared libs.</changelog>
  <changelog author="garloff@suse.de" date="1134993600">- Fix strict-aliasing issues.
- Fix some more compiler warnings.</changelog>
  <changelog author="mmj@suse.de" date="1135166400">- This package conflicts with reiserfs</changelog>
  <changelog author="kukuk@suse.de" date="1137067200">- Correct last fix for Bug [#140302]
- Create -devel subpackage</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="schwab@suse.de" date="1160913600">- Make sure config.rpath is present.</changelog>
  <changelog author="dmueller@suse.de" date="1204286400">- various rpmlint fixes</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="jeffm@suse.de" date="1234353600">- Fixed underquoted AC_CHECK_LIBREISERFS (bnc#458369)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1259150400">- Do not package static libraries and "la" files
- fix -devel package dependencies</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- Package baselibs.conf</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@inai.de" date="1337860800">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Follow shlib naming policy, simplify file list
- Trim description, remove visions and deep implementation details</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Ensure libreiserfs-0_3-0-32bit obsoletes libreiserfs-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failures with automake-1.14</changelog>
  <changelog author="sflees@suse.de" date="1621598400">- Resolve autoreconf issue
  * Update libreiserfs-autoconf-fixups.patch with
  + AM_GNU_GETTEXT([external])
  - AM_GNU_GETTEXT</changelog>
</package>
<package pkgid="83c4b5f968b4af6f8050a57a16e46b8c233399b47b8f91075e954303bae32dfc" name="libreiserfs-0_3-0" arch="aarch64">
  <version epoch="0" ver="0.3.0.5" rel="150000.3.3.1"/>
  <changelog author="dmueller@suse.de" date="1204286400">- various rpmlint fixes</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="jeffm@suse.de" date="1234353600">- Fixed underquoted AC_CHECK_LIBREISERFS (bnc#458369)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1259150400">- Do not package static libraries and "la" files
- fix -devel package dependencies</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- Package baselibs.conf</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@inai.de" date="1337860800">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Follow shlib naming policy, simplify file list
- Trim description, remove visions and deep implementation details</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Ensure libreiserfs-0_3-0-32bit obsoletes libreiserfs-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failures with automake-1.14</changelog>
  <changelog author="sflees@suse.de" date="1621598400">- Resolve autoreconf issue
  * Update libreiserfs-autoconf-fixups.patch with
  + AM_GNU_GETTEXT([external])
  - AM_GNU_GETTEXT</changelog>
</package>
<package pkgid="8ea081dcc556d90841f64bfee5172d0893be45a93ba02a4b15ee1468f908b69f" name="libreiserfs-0_3-0" arch="ppc64le">
  <version epoch="0" ver="0.3.0.5" rel="150000.3.3.1"/>
  <changelog author="dmueller@suse.de" date="1204286400">- various rpmlint fixes</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="jeffm@suse.de" date="1234353600">- Fixed underquoted AC_CHECK_LIBREISERFS (bnc#458369)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1259150400">- Do not package static libraries and "la" files
- fix -devel package dependencies</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- Package baselibs.conf</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@inai.de" date="1337860800">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Follow shlib naming policy, simplify file list
- Trim description, remove visions and deep implementation details</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Ensure libreiserfs-0_3-0-32bit obsoletes libreiserfs-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failures with automake-1.14</changelog>
  <changelog author="sflees@suse.de" date="1621598400">- Resolve autoreconf issue
  * Update libreiserfs-autoconf-fixups.patch with
  + AM_GNU_GETTEXT([external])
  - AM_GNU_GETTEXT</changelog>
</package>
<package pkgid="01d9cfb0b839db1ae5a6aff1b0a1db9b57e5c356617ad47cf6fdcd0c38cc1f13" name="libreiserfs-0_3-0" arch="s390x">
  <version epoch="0" ver="0.3.0.5" rel="150000.3.3.1"/>
  <changelog author="dmueller@suse.de" date="1204286400">- various rpmlint fixes</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="jeffm@suse.de" date="1234353600">- Fixed underquoted AC_CHECK_LIBREISERFS (bnc#458369)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1259150400">- Do not package static libraries and "la" files
- fix -devel package dependencies</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- Package baselibs.conf</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@inai.de" date="1337860800">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Follow shlib naming policy, simplify file list
- Trim description, remove visions and deep implementation details</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Ensure libreiserfs-0_3-0-32bit obsoletes libreiserfs-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failures with automake-1.14</changelog>
  <changelog author="sflees@suse.de" date="1621598400">- Resolve autoreconf issue
  * Update libreiserfs-autoconf-fixups.patch with
  + AM_GNU_GETTEXT([external])
  - AM_GNU_GETTEXT</changelog>
</package>
<package pkgid="d895581f13c786d51e4c51de52c506a0235e03b087bef6b05f2463eaf0f65ab4" name="libreiserfs-0_3-0" arch="x86_64">
  <version epoch="0" ver="0.3.0.5" rel="150000.3.3.1"/>
  <changelog author="dmueller@suse.de" date="1204286400">- various rpmlint fixes</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="jeffm@suse.de" date="1234353600">- Fixed underquoted AC_CHECK_LIBREISERFS (bnc#458369)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1259150400">- Do not package static libraries and "la" files
- fix -devel package dependencies</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- Package baselibs.conf</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@inai.de" date="1337860800">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Follow shlib naming policy, simplify file list
- Trim description, remove visions and deep implementation details</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Ensure libreiserfs-0_3-0-32bit obsoletes libreiserfs-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failures with automake-1.14</changelog>
  <changelog author="sflees@suse.de" date="1621598400">- Resolve autoreconf issue
  * Update libreiserfs-autoconf-fixups.patch with
  + AM_GNU_GETTEXT([external])
  - AM_GNU_GETTEXT</changelog>
</package>
<package pkgid="ce31fd6887acab952beea85e95bb181ce741d5529cae4d05e1353900f4d9e141" name="libreiserfs-0_3-0-32bit" arch="x86_64">
  <version epoch="0" ver="0.3.0.5" rel="150000.3.3.1"/>
  <changelog author="dmueller@suse.de" date="1204286400">- various rpmlint fixes</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="jeffm@suse.de" date="1234353600">- Fixed underquoted AC_CHECK_LIBREISERFS (bnc#458369)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1259150400">- Do not package static libraries and "la" files
- fix -devel package dependencies</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- Package baselibs.conf</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@inai.de" date="1337860800">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Follow shlib naming policy, simplify file list
- Trim description, remove visions and deep implementation details</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Ensure libreiserfs-0_3-0-32bit obsoletes libreiserfs-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failures with automake-1.14</changelog>
  <changelog author="sflees@suse.de" date="1621598400">- Resolve autoreconf issue
  * Update libreiserfs-autoconf-fixups.patch with
  + AM_GNU_GETTEXT([external])
  - AM_GNU_GETTEXT</changelog>
</package>
<package pkgid="318c73a69767d17fbccc86a9a92701f26b61ed874efacfb6ae418852a7b33d10" name="libreiserfs-devel" arch="aarch64">
  <version epoch="0" ver="0.3.0.5" rel="150000.3.3.1"/>
  <changelog author="dmueller@suse.de" date="1204286400">- various rpmlint fixes</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="jeffm@suse.de" date="1234353600">- Fixed underquoted AC_CHECK_LIBREISERFS (bnc#458369)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1259150400">- Do not package static libraries and "la" files
- fix -devel package dependencies</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- Package baselibs.conf</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@inai.de" date="1337860800">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Follow shlib naming policy, simplify file list
- Trim description, remove visions and deep implementation details</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Ensure libreiserfs-0_3-0-32bit obsoletes libreiserfs-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failures with automake-1.14</changelog>
  <changelog author="sflees@suse.de" date="1621598400">- Resolve autoreconf issue
  * Update libreiserfs-autoconf-fixups.patch with
  + AM_GNU_GETTEXT([external])
  - AM_GNU_GETTEXT</changelog>
</package>
<package pkgid="a78e3c65191d96d0ed65e7f97f2d3a2e0768cc5ce9d326a13cba59cc81a28f1c" name="libreiserfs-devel" arch="ppc64le">
  <version epoch="0" ver="0.3.0.5" rel="150000.3.3.1"/>
  <changelog author="dmueller@suse.de" date="1204286400">- various rpmlint fixes</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="jeffm@suse.de" date="1234353600">- Fixed underquoted AC_CHECK_LIBREISERFS (bnc#458369)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1259150400">- Do not package static libraries and "la" files
- fix -devel package dependencies</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- Package baselibs.conf</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@inai.de" date="1337860800">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Follow shlib naming policy, simplify file list
- Trim description, remove visions and deep implementation details</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Ensure libreiserfs-0_3-0-32bit obsoletes libreiserfs-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failures with automake-1.14</changelog>
  <changelog author="sflees@suse.de" date="1621598400">- Resolve autoreconf issue
  * Update libreiserfs-autoconf-fixups.patch with
  + AM_GNU_GETTEXT([external])
  - AM_GNU_GETTEXT</changelog>
</package>
<package pkgid="2d38ff9e293ac18f989085b7b2713b4b59445f90dcd39749abfc2c863863fa05" name="libreiserfs-devel" arch="s390x">
  <version epoch="0" ver="0.3.0.5" rel="150000.3.3.1"/>
  <changelog author="dmueller@suse.de" date="1204286400">- various rpmlint fixes</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="jeffm@suse.de" date="1234353600">- Fixed underquoted AC_CHECK_LIBREISERFS (bnc#458369)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1259150400">- Do not package static libraries and "la" files
- fix -devel package dependencies</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- Package baselibs.conf</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@inai.de" date="1337860800">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Follow shlib naming policy, simplify file list
- Trim description, remove visions and deep implementation details</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Ensure libreiserfs-0_3-0-32bit obsoletes libreiserfs-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failures with automake-1.14</changelog>
  <changelog author="sflees@suse.de" date="1621598400">- Resolve autoreconf issue
  * Update libreiserfs-autoconf-fixups.patch with
  + AM_GNU_GETTEXT([external])
  - AM_GNU_GETTEXT</changelog>
</package>
<package pkgid="9538da5c67f19aae9cf3e280e9c3489b42129c8d3d0a1b83b8d9022b3bfa9b59" name="libreiserfs-devel" arch="x86_64">
  <version epoch="0" ver="0.3.0.5" rel="150000.3.3.1"/>
  <changelog author="dmueller@suse.de" date="1204286400">- various rpmlint fixes</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="jeffm@suse.de" date="1234353600">- Fixed underquoted AC_CHECK_LIBREISERFS (bnc#458369)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1259150400">- Do not package static libraries and "la" files
- fix -devel package dependencies</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- Package baselibs.conf</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@inai.de" date="1337860800">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Follow shlib naming policy, simplify file list
- Trim description, remove visions and deep implementation details</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Ensure libreiserfs-0_3-0-32bit obsoletes libreiserfs-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failures with automake-1.14</changelog>
  <changelog author="sflees@suse.de" date="1621598400">- Resolve autoreconf issue
  * Update libreiserfs-autoconf-fixups.patch with
  + AM_GNU_GETTEXT([external])
  - AM_GNU_GETTEXT</changelog>
</package>
<package pkgid="129892079628dc9cc0b7bd0af7e89ddb922f803492a9bf6c2011e253890b7859" name="libreiserfs-devel-32bit" arch="x86_64">
  <version epoch="0" ver="0.3.0.5" rel="150000.3.3.1"/>
  <changelog author="dmueller@suse.de" date="1204286400">- various rpmlint fixes</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="jeffm@suse.de" date="1234353600">- Fixed underquoted AC_CHECK_LIBREISERFS (bnc#458369)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1259150400">- Do not package static libraries and "la" files
- fix -devel package dependencies</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- Package baselibs.conf</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@inai.de" date="1337860800">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Follow shlib naming policy, simplify file list
- Trim description, remove visions and deep implementation details</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Ensure libreiserfs-0_3-0-32bit obsoletes libreiserfs-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failures with automake-1.14</changelog>
  <changelog author="sflees@suse.de" date="1621598400">- Resolve autoreconf issue
  * Update libreiserfs-autoconf-fixups.patch with
  + AM_GNU_GETTEXT([external])
  - AM_GNU_GETTEXT</changelog>
</package>
<package pkgid="7f594656105523bc2995b8ef4f8f23ee9ec49f39638b56254831790966f07984" name="libreiserfs-progs" arch="aarch64">
  <version epoch="0" ver="0.3.0.5" rel="150000.3.3.1"/>
  <changelog author="dmueller@suse.de" date="1204286400">- various rpmlint fixes</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="jeffm@suse.de" date="1234353600">- Fixed underquoted AC_CHECK_LIBREISERFS (bnc#458369)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1259150400">- Do not package static libraries and "la" files
- fix -devel package dependencies</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- Package baselibs.conf</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@inai.de" date="1337860800">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Follow shlib naming policy, simplify file list
- Trim description, remove visions and deep implementation details</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Ensure libreiserfs-0_3-0-32bit obsoletes libreiserfs-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failures with automake-1.14</changelog>
  <changelog author="sflees@suse.de" date="1621598400">- Resolve autoreconf issue
  * Update libreiserfs-autoconf-fixups.patch with
  + AM_GNU_GETTEXT([external])
  - AM_GNU_GETTEXT</changelog>
</package>
<package pkgid="9c9cc7f056f4cbb565eb842f7679972dd8f41d3450db253efce8323f3902438a" name="libreiserfs-progs" arch="ppc64le">
  <version epoch="0" ver="0.3.0.5" rel="150000.3.3.1"/>
  <changelog author="dmueller@suse.de" date="1204286400">- various rpmlint fixes</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="jeffm@suse.de" date="1234353600">- Fixed underquoted AC_CHECK_LIBREISERFS (bnc#458369)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1259150400">- Do not package static libraries and "la" files
- fix -devel package dependencies</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- Package baselibs.conf</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@inai.de" date="1337860800">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Follow shlib naming policy, simplify file list
- Trim description, remove visions and deep implementation details</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Ensure libreiserfs-0_3-0-32bit obsoletes libreiserfs-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failures with automake-1.14</changelog>
  <changelog author="sflees@suse.de" date="1621598400">- Resolve autoreconf issue
  * Update libreiserfs-autoconf-fixups.patch with
  + AM_GNU_GETTEXT([external])
  - AM_GNU_GETTEXT</changelog>
</package>
<package pkgid="31f6a880405155e1aa34d5cad27f82a7cc9678b774b2ad0e52f2d5a6f0c1e669" name="libreiserfs-progs" arch="s390x">
  <version epoch="0" ver="0.3.0.5" rel="150000.3.3.1"/>
  <changelog author="dmueller@suse.de" date="1204286400">- various rpmlint fixes</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="jeffm@suse.de" date="1234353600">- Fixed underquoted AC_CHECK_LIBREISERFS (bnc#458369)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1259150400">- Do not package static libraries and "la" files
- fix -devel package dependencies</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- Package baselibs.conf</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@inai.de" date="1337860800">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Follow shlib naming policy, simplify file list
- Trim description, remove visions and deep implementation details</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Ensure libreiserfs-0_3-0-32bit obsoletes libreiserfs-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failures with automake-1.14</changelog>
  <changelog author="sflees@suse.de" date="1621598400">- Resolve autoreconf issue
  * Update libreiserfs-autoconf-fixups.patch with
  + AM_GNU_GETTEXT([external])
  - AM_GNU_GETTEXT</changelog>
</package>
<package pkgid="5eb75fc9bc32182a80dd8e048c90dfc1bcf638e4d6e22e2b648da10c27b43810" name="libreiserfs-progs" arch="x86_64">
  <version epoch="0" ver="0.3.0.5" rel="150000.3.3.1"/>
  <changelog author="dmueller@suse.de" date="1204286400">- various rpmlint fixes</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="jeffm@suse.de" date="1234353600">- Fixed underquoted AC_CHECK_LIBREISERFS (bnc#458369)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1259150400">- Do not package static libraries and "la" files
- fix -devel package dependencies</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- Package baselibs.conf</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@inai.de" date="1337860800">- Remove redundant tags/sections from specfile
- Parallel build with %_smp_mflags
- Follow shlib naming policy, simplify file list
- Trim description, remove visions and deep implementation details</changelog>
  <changelog author="fcrozat@suse.com" date="1408017600">- Ensure libreiserfs-0_3-0-32bit obsoletes libreiserfs-32bit.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failures with automake-1.14</changelog>
  <changelog author="sflees@suse.de" date="1621598400">- Resolve autoreconf issue
  * Update libreiserfs-autoconf-fixups.patch with
  + AM_GNU_GETTEXT([external])
  - AM_GNU_GETTEXT</changelog>
</package>
<package pkgid="fdc3f87e21aa67fba8d180d799971e22ebb7086e4056ee945cbcd6b4ffc29cc1" name="libruby2_5-2_5" arch="aarch64">
  <version epoch="0" ver="2.5.9" rel="150000.4.23.1"/>
  <changelog author="mrueckert@suse.de" date="1541592000">- update to 2.5.3
  This release includes some bug fixes and some security fixes.
  - CVE-2018-16396: Tainted flags are not propagated in Array#pack
    and String#unpack with some directives (boo#1112532)
  - CVE-2018-16395: OpenSSL::X509::Name equality check does not
    work correctly (boo#1112530)
  https://github.com/ruby/ruby/compare/v2_5_1...v2_5_3
- drop frozen-pop3.patch</changelog>
  <changelog author="mliska@suse.cz" date="1542888000">- Disable compressed sections as they are not supported by rpm
  (https://bugs.ruby-lang.org/issues/12934).</changelog>
  <changelog author="mliska@suse.cz" date="1542974400">- Use parallel make.</changelog>
  <changelog author="mrueckert@suse.de" date="1549540800">- replace the awk based provides generation with the new file-attr
  handler in ruby-bundled-gems-rpmhelper
  This kills one provides rubygem-name = version
  But this should not have be used since a while anymore.
- add option to build without docs for testing
- provide support to undo the split of the stdlib:
  pass --without=separate_stdlib to "osc build"</changelog>
  <changelog author="mrueckert@suse.de" date="1552651200">- update to 2.5.5
  https://www.ruby-lang.org/en/news/2019/03/13/ruby-2-5-4-released/
  - CVE-2019-8320: Delete directory using symlink when
    decompressing tar (boo#1130627)
  - CVE-2019-8321: Escape sequence injection vulnerability in
    verbose  (boo#1130623)
  - CVE-2019-8322: Escape sequence injection vulnerability in gem
    owner  (boo#1130622)
  - CVE-2019-8323: Escape sequence injection vulnerability in API
    response handling  (boo#1130620)
  - CVE-2019-8324: Installing a malicious gem may lead to arbitrary
    code execution  (boo#1130617)
  - CVE-2019-8325: Escape sequence injection vulnerability in
    errors  (boo#1130611)
  https://www.ruby-lang.org/en/news/2019/03/15/ruby-2-5-5-released/</changelog>
  <changelog author="mrueckert@suse.de" date="1553688000">- for some reason the --enable-pie option does not work as
  expected. Fix this for now with a patch that just injects the
  - pie flag in the Makefile (adds use-pie.patch) (boo#1130028)</changelog>
  <changelog author="mrueckert@suse.de" date="1560427200">- refreshed patches with new patch series:
  0001-make-gem-build-reproducible.patch
  0002-gc.c-tick-for-POWER-arch.patch
  0003-Mark-Gemspec-reproducible-change-fixing-784225-too.patch
  0004-Make-gemspecs-reproducible.patch
- rename patch now that it is generated from git:
  old: 450160263aed8c446ce5b142d71f921ab4118f3a.patch
  new: 0005-Include-the-alternative-malloc-header-instead-of-mal.patch
  old: use-pie.patch
  new: 0006-Use-PIE-for-the-binaries.patch
- ruby: change over of the Japanese Era to the new emperor May
  1st 2019 (boo#1133790)
  0007-date-support-for-Reiwa-new-Japanese-era.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1562673600">- fix running tests (boo#1140844)
  just passing the DISABLED_TESTS variable is wrong. probably a
  relict from calling the test scripts directly. use TESTOPTS now.</changelog>
  <changelog author="mrueckert@suse.de" date="1570536000">- update to 2.5.7
  - https://www.ruby-lang.org/en/news/2019/10/01/ruby-2-5-7-released/
  - CVE-2019-16255: A code injection vulnerability of Shell#[]
    and Shell#test (boo#1152990)
  - CVE-2019-16254: HTTP response splitting in WEBrick
    (Additional fix) (boo#1152992)
  - CVE-2019-15845: A NUL injection vulnerability of File.fnmatch
    and File.fnmatch? (boo#1152994)
  - CVE-2019-16201: Regular Expression Denial of Service
    vulnerability of WEBrick?s Digest access authentication
    (boo#1152995)
  - https://www.ruby-lang.org/en/news/2019/08/28/ruby-2-5-6-released/
  - Multiple jQuery vulnerabilities in RDoc (CVE-2012-6708
    CVE-2015-9251)</changelog>
  <changelog author="mrueckert@suse.de" date="1580990400">- remove test files which are not needed at runtime (boo#1162396)
  - adds remove-unneeded-files.patch and did_you_mean-1.2.0.gem</changelog>
  <changelog author="mrueckert@suse.de" date="1583496000">- Fix CVE-2020-8130 (boo# 1164804) for the intree copy of rake:
  - add CVE-2020-8130.patch and rake-12.3.0.gem</changelog>
  <changelog author="mrueckert@suse.de" date="1586260800">- Update to 2.5.8 (boo#1167244 boo#1168938)
  - CVE-2020-10663: Unsafe Object Creation Vulnerability in JSON
    (Additional fix)
  - CVE-2020-10933: Heap exposure vulnerability in the socket
    library
  https://github.com/ruby/ruby/compare/v2_5_7...v2_5_8
- drop CVE-2020-8130.patch and rake-12.3.0.gem: included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1588075200">- make the update-alternative weight based on the ruby version</changelog>
  <changelog author="mrueckert@suse.de" date="1588075201">- make sure that update-alternative weight for the default
  distribution is always greater than our normal weight</changelog>
  <changelog author="mrueckert@suse.de" date="1602849600">- replace all patches with suse.patch (v2_5_8..2.5-suse)
  (we keep remove-unneeded-files.patch as it can not be done in our
  backports branch)
- backport patch to enable optimizations also on ARM64
  (boo#1177222)</changelog>
  <changelog author="mrueckert@suse.de" date="1615809600">- Update suse.patch: (boo#1177125)
  Backport fix CVE-2020-25613: Potential HTTP Request Smuggling
  Vulnerability in WEBrick</changelog>
  <changelog author="mrueckert@suse.de" date="1618315200">- Update to 2.5.9 (boo#1184644)
  https://www.ruby-lang.org/en/news/2021/04/05/ruby-2-5-9-released/
  - CVE-2020-25613: Potential HTTP Request Smuggling Vulnerability
    in WEBrick
  - CVE-2021-28965: XML round-trip vulnerability in REXML
  Complete list of changes at
  https://github.com/ruby/ruby/compare/v2_5_8...v2_5_9
- Update suse.patch:
  Remove fix for CVE-2020-25613 as it is included in the update</changelog>
  <changelog author="ali.abdallah@suse.com" date="1636632000">Add patches to fix the following CVE's:
  - CVE-2021-32066.patch (CVE-2021-32066): Fix StartTLS stripping
    vulnerability in Net:IMAP (bsc#1188160)
  - CVE-2021-31810.patch (CVE-2021-31810): Fix trusting FTP PASV
    responses vulnerability in  Net:FTP (bsc#1188161)
  - CVE-2021-31799.patch (CVE-2021-31799): Fix Command injection
    vulnerability in RDoc (bsc#1190375)</changelog>
  <changelog author="mrueckert@suse.de" date="1650456000">- Add Requires to make and gcc to ruby-devel to make the default
  extconf.rb work</changelog>
  <changelog author="mrueckert@suse.de" date="1650456001">- Update suse.patch:
  - backport fix for CVE-2022-28739: ruby: Buffer overrun in
    String-to-Float conversion (boo#1198441)
  - back port date 2.0.3 CVE-2021-41817 (boo#1193035)
  - merge the previous bug fixes into suse.patch
  - CVE-2021-32066.patch
  - CVE-2021-31810.patch
  - CVE-2021-31799.patch</changelog>
</package>
<package pkgid="85b9d8deee6563adcee14877f6e68f4750658715f74cdd439ed796512f9e066e" name="libruby2_5-2_5" arch="ppc64le">
  <version epoch="0" ver="2.5.9" rel="150000.4.23.1"/>
  <changelog author="mrueckert@suse.de" date="1541592000">- update to 2.5.3
  This release includes some bug fixes and some security fixes.
  - CVE-2018-16396: Tainted flags are not propagated in Array#pack
    and String#unpack with some directives (boo#1112532)
  - CVE-2018-16395: OpenSSL::X509::Name equality check does not
    work correctly (boo#1112530)
  https://github.com/ruby/ruby/compare/v2_5_1...v2_5_3
- drop frozen-pop3.patch</changelog>
  <changelog author="mliska@suse.cz" date="1542888000">- Disable compressed sections as they are not supported by rpm
  (https://bugs.ruby-lang.org/issues/12934).</changelog>
  <changelog author="mliska@suse.cz" date="1542974400">- Use parallel make.</changelog>
  <changelog author="mrueckert@suse.de" date="1549540800">- replace the awk based provides generation with the new file-attr
  handler in ruby-bundled-gems-rpmhelper
  This kills one provides rubygem-name = version
  But this should not have be used since a while anymore.
- add option to build without docs for testing
- provide support to undo the split of the stdlib:
  pass --without=separate_stdlib to "osc build"</changelog>
  <changelog author="mrueckert@suse.de" date="1552651200">- update to 2.5.5
  https://www.ruby-lang.org/en/news/2019/03/13/ruby-2-5-4-released/
  - CVE-2019-8320: Delete directory using symlink when
    decompressing tar (boo#1130627)
  - CVE-2019-8321: Escape sequence injection vulnerability in
    verbose  (boo#1130623)
  - CVE-2019-8322: Escape sequence injection vulnerability in gem
    owner  (boo#1130622)
  - CVE-2019-8323: Escape sequence injection vulnerability in API
    response handling  (boo#1130620)
  - CVE-2019-8324: Installing a malicious gem may lead to arbitrary
    code execution  (boo#1130617)
  - CVE-2019-8325: Escape sequence injection vulnerability in
    errors  (boo#1130611)
  https://www.ruby-lang.org/en/news/2019/03/15/ruby-2-5-5-released/</changelog>
  <changelog author="mrueckert@suse.de" date="1553688000">- for some reason the --enable-pie option does not work as
  expected. Fix this for now with a patch that just injects the
  - pie flag in the Makefile (adds use-pie.patch) (boo#1130028)</changelog>
  <changelog author="mrueckert@suse.de" date="1560427200">- refreshed patches with new patch series:
  0001-make-gem-build-reproducible.patch
  0002-gc.c-tick-for-POWER-arch.patch
  0003-Mark-Gemspec-reproducible-change-fixing-784225-too.patch
  0004-Make-gemspecs-reproducible.patch
- rename patch now that it is generated from git:
  old: 450160263aed8c446ce5b142d71f921ab4118f3a.patch
  new: 0005-Include-the-alternative-malloc-header-instead-of-mal.patch
  old: use-pie.patch
  new: 0006-Use-PIE-for-the-binaries.patch
- ruby: change over of the Japanese Era to the new emperor May
  1st 2019 (boo#1133790)
  0007-date-support-for-Reiwa-new-Japanese-era.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1562673600">- fix running tests (boo#1140844)
  just passing the DISABLED_TESTS variable is wrong. probably a
  relict from calling the test scripts directly. use TESTOPTS now.</changelog>
  <changelog author="mrueckert@suse.de" date="1570536000">- update to 2.5.7
  - https://www.ruby-lang.org/en/news/2019/10/01/ruby-2-5-7-released/
  - CVE-2019-16255: A code injection vulnerability of Shell#[]
    and Shell#test (boo#1152990)
  - CVE-2019-16254: HTTP response splitting in WEBrick
    (Additional fix) (boo#1152992)
  - CVE-2019-15845: A NUL injection vulnerability of File.fnmatch
    and File.fnmatch? (boo#1152994)
  - CVE-2019-16201: Regular Expression Denial of Service
    vulnerability of WEBrick?s Digest access authentication
    (boo#1152995)
  - https://www.ruby-lang.org/en/news/2019/08/28/ruby-2-5-6-released/
  - Multiple jQuery vulnerabilities in RDoc (CVE-2012-6708
    CVE-2015-9251)</changelog>
  <changelog author="mrueckert@suse.de" date="1580990400">- remove test files which are not needed at runtime (boo#1162396)
  - adds remove-unneeded-files.patch and did_you_mean-1.2.0.gem</changelog>
  <changelog author="mrueckert@suse.de" date="1583496000">- Fix CVE-2020-8130 (boo# 1164804) for the intree copy of rake:
  - add CVE-2020-8130.patch and rake-12.3.0.gem</changelog>
  <changelog author="mrueckert@suse.de" date="1586260800">- Update to 2.5.8 (boo#1167244 boo#1168938)
  - CVE-2020-10663: Unsafe Object Creation Vulnerability in JSON
    (Additional fix)
  - CVE-2020-10933: Heap exposure vulnerability in the socket
    library
  https://github.com/ruby/ruby/compare/v2_5_7...v2_5_8
- drop CVE-2020-8130.patch and rake-12.3.0.gem: included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1588075200">- make the update-alternative weight based on the ruby version</changelog>
  <changelog author="mrueckert@suse.de" date="1588075201">- make sure that update-alternative weight for the default
  distribution is always greater than our normal weight</changelog>
  <changelog author="mrueckert@suse.de" date="1602849600">- replace all patches with suse.patch (v2_5_8..2.5-suse)
  (we keep remove-unneeded-files.patch as it can not be done in our
  backports branch)
- backport patch to enable optimizations also on ARM64
  (boo#1177222)</changelog>
  <changelog author="mrueckert@suse.de" date="1615809600">- Update suse.patch: (boo#1177125)
  Backport fix CVE-2020-25613: Potential HTTP Request Smuggling
  Vulnerability in WEBrick</changelog>
  <changelog author="mrueckert@suse.de" date="1618315200">- Update to 2.5.9 (boo#1184644)
  https://www.ruby-lang.org/en/news/2021/04/05/ruby-2-5-9-released/
  - CVE-2020-25613: Potential HTTP Request Smuggling Vulnerability
    in WEBrick
  - CVE-2021-28965: XML round-trip vulnerability in REXML
  Complete list of changes at
  https://github.com/ruby/ruby/compare/v2_5_8...v2_5_9
- Update suse.patch:
  Remove fix for CVE-2020-25613 as it is included in the update</changelog>
  <changelog author="ali.abdallah@suse.com" date="1636632000">Add patches to fix the following CVE's:
  - CVE-2021-32066.patch (CVE-2021-32066): Fix StartTLS stripping
    vulnerability in Net:IMAP (bsc#1188160)
  - CVE-2021-31810.patch (CVE-2021-31810): Fix trusting FTP PASV
    responses vulnerability in  Net:FTP (bsc#1188161)
  - CVE-2021-31799.patch (CVE-2021-31799): Fix Command injection
    vulnerability in RDoc (bsc#1190375)</changelog>
  <changelog author="mrueckert@suse.de" date="1650456000">- Add Requires to make and gcc to ruby-devel to make the default
  extconf.rb work</changelog>
  <changelog author="mrueckert@suse.de" date="1650456001">- Update suse.patch:
  - backport fix for CVE-2022-28739: ruby: Buffer overrun in
    String-to-Float conversion (boo#1198441)
  - back port date 2.0.3 CVE-2021-41817 (boo#1193035)
  - merge the previous bug fixes into suse.patch
  - CVE-2021-32066.patch
  - CVE-2021-31810.patch
  - CVE-2021-31799.patch</changelog>
</package>
<package pkgid="8dc682a6c854e3d753b31c998e8004eb1676fde1630272a1bf1c73f41205d68c" name="libruby2_5-2_5" arch="s390x">
  <version epoch="0" ver="2.5.9" rel="150000.4.23.1"/>
  <changelog author="mrueckert@suse.de" date="1541592000">- update to 2.5.3
  This release includes some bug fixes and some security fixes.
  - CVE-2018-16396: Tainted flags are not propagated in Array#pack
    and String#unpack with some directives (boo#1112532)
  - CVE-2018-16395: OpenSSL::X509::Name equality check does not
    work correctly (boo#1112530)
  https://github.com/ruby/ruby/compare/v2_5_1...v2_5_3
- drop frozen-pop3.patch</changelog>
  <changelog author="mliska@suse.cz" date="1542888000">- Disable compressed sections as they are not supported by rpm
  (https://bugs.ruby-lang.org/issues/12934).</changelog>
  <changelog author="mliska@suse.cz" date="1542974400">- Use parallel make.</changelog>
  <changelog author="mrueckert@suse.de" date="1549540800">- replace the awk based provides generation with the new file-attr
  handler in ruby-bundled-gems-rpmhelper
  This kills one provides rubygem-name = version
  But this should not have be used since a while anymore.
- add option to build without docs for testing
- provide support to undo the split of the stdlib:
  pass --without=separate_stdlib to "osc build"</changelog>
  <changelog author="mrueckert@suse.de" date="1552651200">- update to 2.5.5
  https://www.ruby-lang.org/en/news/2019/03/13/ruby-2-5-4-released/
  - CVE-2019-8320: Delete directory using symlink when
    decompressing tar (boo#1130627)
  - CVE-2019-8321: Escape sequence injection vulnerability in
    verbose  (boo#1130623)
  - CVE-2019-8322: Escape sequence injection vulnerability in gem
    owner  (boo#1130622)
  - CVE-2019-8323: Escape sequence injection vulnerability in API
    response handling  (boo#1130620)
  - CVE-2019-8324: Installing a malicious gem may lead to arbitrary
    code execution  (boo#1130617)
  - CVE-2019-8325: Escape sequence injection vulnerability in
    errors  (boo#1130611)
  https://www.ruby-lang.org/en/news/2019/03/15/ruby-2-5-5-released/</changelog>
  <changelog author="mrueckert@suse.de" date="1553688000">- for some reason the --enable-pie option does not work as
  expected. Fix this for now with a patch that just injects the
  - pie flag in the Makefile (adds use-pie.patch) (boo#1130028)</changelog>
  <changelog author="mrueckert@suse.de" date="1560427200">- refreshed patches with new patch series:
  0001-make-gem-build-reproducible.patch
  0002-gc.c-tick-for-POWER-arch.patch
  0003-Mark-Gemspec-reproducible-change-fixing-784225-too.patch
  0004-Make-gemspecs-reproducible.patch
- rename patch now that it is generated from git:
  old: 450160263aed8c446ce5b142d71f921ab4118f3a.patch
  new: 0005-Include-the-alternative-malloc-header-instead-of-mal.patch
  old: use-pie.patch
  new: 0006-Use-PIE-for-the-binaries.patch
- ruby: change over of the Japanese Era to the new emperor May
  1st 2019 (boo#1133790)
  0007-date-support-for-Reiwa-new-Japanese-era.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1562673600">- fix running tests (boo#1140844)
  just passing the DISABLED_TESTS variable is wrong. probably a
  relict from calling the test scripts directly. use TESTOPTS now.</changelog>
  <changelog author="mrueckert@suse.de" date="1570536000">- update to 2.5.7
  - https://www.ruby-lang.org/en/news/2019/10/01/ruby-2-5-7-released/
  - CVE-2019-16255: A code injection vulnerability of Shell#[]
    and Shell#test (boo#1152990)
  - CVE-2019-16254: HTTP response splitting in WEBrick
    (Additional fix) (boo#1152992)
  - CVE-2019-15845: A NUL injection vulnerability of File.fnmatch
    and File.fnmatch? (boo#1152994)
  - CVE-2019-16201: Regular Expression Denial of Service
    vulnerability of WEBrick?s Digest access authentication
    (boo#1152995)
  - https://www.ruby-lang.org/en/news/2019/08/28/ruby-2-5-6-released/
  - Multiple jQuery vulnerabilities in RDoc (CVE-2012-6708
    CVE-2015-9251)</changelog>
  <changelog author="mrueckert@suse.de" date="1580990400">- remove test files which are not needed at runtime (boo#1162396)
  - adds remove-unneeded-files.patch and did_you_mean-1.2.0.gem</changelog>
  <changelog author="mrueckert@suse.de" date="1583496000">- Fix CVE-2020-8130 (boo# 1164804) for the intree copy of rake:
  - add CVE-2020-8130.patch and rake-12.3.0.gem</changelog>
  <changelog author="mrueckert@suse.de" date="1586260800">- Update to 2.5.8 (boo#1167244 boo#1168938)
  - CVE-2020-10663: Unsafe Object Creation Vulnerability in JSON
    (Additional fix)
  - CVE-2020-10933: Heap exposure vulnerability in the socket
    library
  https://github.com/ruby/ruby/compare/v2_5_7...v2_5_8
- drop CVE-2020-8130.patch and rake-12.3.0.gem: included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1588075200">- make the update-alternative weight based on the ruby version</changelog>
  <changelog author="mrueckert@suse.de" date="1588075201">- make sure that update-alternative weight for the default
  distribution is always greater than our normal weight</changelog>
  <changelog author="mrueckert@suse.de" date="1602849600">- replace all patches with suse.patch (v2_5_8..2.5-suse)
  (we keep remove-unneeded-files.patch as it can not be done in our
  backports branch)
- backport patch to enable optimizations also on ARM64
  (boo#1177222)</changelog>
  <changelog author="mrueckert@suse.de" date="1615809600">- Update suse.patch: (boo#1177125)
  Backport fix CVE-2020-25613: Potential HTTP Request Smuggling
  Vulnerability in WEBrick</changelog>
  <changelog author="mrueckert@suse.de" date="1618315200">- Update to 2.5.9 (boo#1184644)
  https://www.ruby-lang.org/en/news/2021/04/05/ruby-2-5-9-released/
  - CVE-2020-25613: Potential HTTP Request Smuggling Vulnerability
    in WEBrick
  - CVE-2021-28965: XML round-trip vulnerability in REXML
  Complete list of changes at
  https://github.com/ruby/ruby/compare/v2_5_8...v2_5_9
- Update suse.patch:
  Remove fix for CVE-2020-25613 as it is included in the update</changelog>
  <changelog author="ali.abdallah@suse.com" date="1636632000">Add patches to fix the following CVE's:
  - CVE-2021-32066.patch (CVE-2021-32066): Fix StartTLS stripping
    vulnerability in Net:IMAP (bsc#1188160)
  - CVE-2021-31810.patch (CVE-2021-31810): Fix trusting FTP PASV
    responses vulnerability in  Net:FTP (bsc#1188161)
  - CVE-2021-31799.patch (CVE-2021-31799): Fix Command injection
    vulnerability in RDoc (bsc#1190375)</changelog>
  <changelog author="mrueckert@suse.de" date="1650456000">- Add Requires to make and gcc to ruby-devel to make the default
  extconf.rb work</changelog>
  <changelog author="mrueckert@suse.de" date="1650456001">- Update suse.patch:
  - backport fix for CVE-2022-28739: ruby: Buffer overrun in
    String-to-Float conversion (boo#1198441)
  - back port date 2.0.3 CVE-2021-41817 (boo#1193035)
  - merge the previous bug fixes into suse.patch
  - CVE-2021-32066.patch
  - CVE-2021-31810.patch
  - CVE-2021-31799.patch</changelog>
</package>
<package pkgid="7fb01964e24e44c1183c0b1a19f1ddd08c3b92af941243f11ea1df5c89febff6" name="libruby2_5-2_5" arch="x86_64">
  <version epoch="0" ver="2.5.9" rel="150000.4.23.1"/>
  <changelog author="mrueckert@suse.de" date="1541592000">- update to 2.5.3
  This release includes some bug fixes and some security fixes.
  - CVE-2018-16396: Tainted flags are not propagated in Array#pack
    and String#unpack with some directives (boo#1112532)
  - CVE-2018-16395: OpenSSL::X509::Name equality check does not
    work correctly (boo#1112530)
  https://github.com/ruby/ruby/compare/v2_5_1...v2_5_3
- drop frozen-pop3.patch</changelog>
  <changelog author="mliska@suse.cz" date="1542888000">- Disable compressed sections as they are not supported by rpm
  (https://bugs.ruby-lang.org/issues/12934).</changelog>
  <changelog author="mliska@suse.cz" date="1542974400">- Use parallel make.</changelog>
  <changelog author="mrueckert@suse.de" date="1549540800">- replace the awk based provides generation with the new file-attr
  handler in ruby-bundled-gems-rpmhelper
  This kills one provides rubygem-name = version
  But this should not have be used since a while anymore.
- add option to build without docs for testing
- provide support to undo the split of the stdlib:
  pass --without=separate_stdlib to "osc build"</changelog>
  <changelog author="mrueckert@suse.de" date="1552651200">- update to 2.5.5
  https://www.ruby-lang.org/en/news/2019/03/13/ruby-2-5-4-released/
  - CVE-2019-8320: Delete directory using symlink when
    decompressing tar (boo#1130627)
  - CVE-2019-8321: Escape sequence injection vulnerability in
    verbose  (boo#1130623)
  - CVE-2019-8322: Escape sequence injection vulnerability in gem
    owner  (boo#1130622)
  - CVE-2019-8323: Escape sequence injection vulnerability in API
    response handling  (boo#1130620)
  - CVE-2019-8324: Installing a malicious gem may lead to arbitrary
    code execution  (boo#1130617)
  - CVE-2019-8325: Escape sequence injection vulnerability in
    errors  (boo#1130611)
  https://www.ruby-lang.org/en/news/2019/03/15/ruby-2-5-5-released/</changelog>
  <changelog author="mrueckert@suse.de" date="1553688000">- for some reason the --enable-pie option does not work as
  expected. Fix this for now with a patch that just injects the
  - pie flag in the Makefile (adds use-pie.patch) (boo#1130028)</changelog>
  <changelog author="mrueckert@suse.de" date="1560427200">- refreshed patches with new patch series:
  0001-make-gem-build-reproducible.patch
  0002-gc.c-tick-for-POWER-arch.patch
  0003-Mark-Gemspec-reproducible-change-fixing-784225-too.patch
  0004-Make-gemspecs-reproducible.patch
- rename patch now that it is generated from git:
  old: 450160263aed8c446ce5b142d71f921ab4118f3a.patch
  new: 0005-Include-the-alternative-malloc-header-instead-of-mal.patch
  old: use-pie.patch
  new: 0006-Use-PIE-for-the-binaries.patch
- ruby: change over of the Japanese Era to the new emperor May
  1st 2019 (boo#1133790)
  0007-date-support-for-Reiwa-new-Japanese-era.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1562673600">- fix running tests (boo#1140844)
  just passing the DISABLED_TESTS variable is wrong. probably a
  relict from calling the test scripts directly. use TESTOPTS now.</changelog>
  <changelog author="mrueckert@suse.de" date="1570536000">- update to 2.5.7
  - https://www.ruby-lang.org/en/news/2019/10/01/ruby-2-5-7-released/
  - CVE-2019-16255: A code injection vulnerability of Shell#[]
    and Shell#test (boo#1152990)
  - CVE-2019-16254: HTTP response splitting in WEBrick
    (Additional fix) (boo#1152992)
  - CVE-2019-15845: A NUL injection vulnerability of File.fnmatch
    and File.fnmatch? (boo#1152994)
  - CVE-2019-16201: Regular Expression Denial of Service
    vulnerability of WEBrick?s Digest access authentication
    (boo#1152995)
  - https://www.ruby-lang.org/en/news/2019/08/28/ruby-2-5-6-released/
  - Multiple jQuery vulnerabilities in RDoc (CVE-2012-6708
    CVE-2015-9251)</changelog>
  <changelog author="mrueckert@suse.de" date="1580990400">- remove test files which are not needed at runtime (boo#1162396)
  - adds remove-unneeded-files.patch and did_you_mean-1.2.0.gem</changelog>
  <changelog author="mrueckert@suse.de" date="1583496000">- Fix CVE-2020-8130 (boo# 1164804) for the intree copy of rake:
  - add CVE-2020-8130.patch and rake-12.3.0.gem</changelog>
  <changelog author="mrueckert@suse.de" date="1586260800">- Update to 2.5.8 (boo#1167244 boo#1168938)
  - CVE-2020-10663: Unsafe Object Creation Vulnerability in JSON
    (Additional fix)
  - CVE-2020-10933: Heap exposure vulnerability in the socket
    library
  https://github.com/ruby/ruby/compare/v2_5_7...v2_5_8
- drop CVE-2020-8130.patch and rake-12.3.0.gem: included upstream</changelog>
  <changelog author="mrueckert@suse.de" date="1588075200">- make the update-alternative weight based on the ruby version</changelog>
  <changelog author="mrueckert@suse.de" date="1588075201">- make sure that update-alternative weight for the default
  distribution is always greater than our normal weight</changelog>
  <changelog author="mrueckert@suse.de" date="1602849600">- replace all patches with suse.patch (v2_5_8..2.5-suse)
  (we keep remove-unneeded-files.patch as it can not be done in our
  backports branch)
- backport patch to enable optimizations also on ARM64
  (boo#1177222)</changelog>
  <changelog author="mrueckert@suse.de" date="1615809600">- Update suse.patch: (boo#1177125)
  Backport fix CVE-2020-25613: Potential HTTP Request Smuggling
  Vulnerability in WEBrick</changelog>
  <changelog author="mrueckert@suse.de" date="1618315200">- Update to 2.5.9 (boo#1184644)
  https://www.ruby-lang.org/en/news/2021/04/05/ruby-2-5-9-released/
  - CVE-2020-25613: Potential HTTP Request Smuggling Vulnerability
    in WEBrick
  - CVE-2021-28965: XML round-trip vulnerability in REXML
  Complete list of changes at
  https://github.com/ruby/ruby/compare/v2_5_8...v2_5_9
- Update suse.patch:
  Remove fix for CVE-2020-25613 as it is included in the update</changelog>
  <changelog author="ali.abdallah@suse.com" date="1636632000">Add patches to fix the following CVE's:
  - CVE-2021-32066.patch (CVE-2021-32066): Fix StartTLS stripping
    vulnerability in Net:IMAP (bsc#1188160)
  - CVE-2021-31810.patch (CVE-2021-31810): Fix trusting FTP PASV
    responses vulnerability in  Net:FTP (bsc#1188161)
  - CVE-2021-31799.patch (CVE-2021-31799): Fix Command injection
    vulnerability in RDoc (bsc#1190375)</changelog>
  <changelog author="mrueckert@suse.de" date="1650456000">- Add Requires to make and gcc to ruby-devel to make the default
  extconf.rb work</changelog>
  <changelog author="mrueckert@suse.de" date="1650456001">- Update suse.patch:
  - backport fix for CVE-2022-28739: ruby: Buffer overrun in
    String-to-Float conversion (boo#1198441)
  - back port date 2.0.3 CVE-2021-41817 (boo#1193035)
  - merge the previous bug fixes into suse.patch
  - CVE-2021-32066.patch
  - CVE-2021-31810.patch
  - CVE-2021-31799.patch</changelog>
</package>
<package pkgid="ed0e3c99a9802994dbbd50599f928b53f8628b5fd5df7036cc9c9efecc2a5151" name="libsamba-policy-python-devel" arch="aarch64">
  <version epoch="0" ver="4.9.5+git.487.9b5717b962b" rel="150100.3.67.2"/>
  <changelog author="dmulder@suse.com" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="scabrero@suse.de" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="nopower@suse.com" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="nopower@suse.com" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
  <changelog author="dmulder@suse.com" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="scabrero@suse.de" date="1600430400">- CVE-2020-1472: Unauthenticated domain takeover via netlogon ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against
    unencrypted passwords; (bsc#1176579); (bso#14497);
  + s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no"
    about unsecure configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge; (bsc#1176579);
    (bso#14497);
  + libcli/auth: Reject weak client challenges in netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497);</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
  <changelog author="nopower@suse.com" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="nopower@suse.com" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="nopower@suse.com" date="1615896000">-  CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
-  CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="dmulder@suse.com" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="nopower@suse.com" date="1618401600">- CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bso#14571); (bsc#1184677).</changelog>
  <changelog author="scabrero@suse.de" date="1621598400">- s3-libads: Do not turn on canonicalization flag. Fixes a regression
  changing the computer account password; (bsc#1185089); (bso#14155);</changelog>
  <changelog author="scabrero@suse.de" date="1636372800">- CVE-2016-2124: Don't fallback to non spnego authentication if
  kerberos is required; (bsc#1014440); (bso#12444);
- CVE-2020-25717: A user in an AD Domain could become root on
  domain members; (bsc#1192284); (bso#14556);</changelog>
  <changelog author="nopower@suse.com" date="1637236800">- The username map [script] advice from CVE-2020-25717 advisory
  note has undesired side effects for the local nt token. Fallback
  to a SID/UID based mapping if the name based lookup fails;
  (bsc#1192849); (bso#14901).</changelog>
  <changelog author="nopower@suse.com" date="1642766400">- CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit
  module; (bsc#1194859); (bso#14914).</changelog>
  <changelog author="scabrero@suse.de" date="1646395200">- Adjust systemd tmpfiles.d configuration, use /run/samba instead of
  /var/run/samba; (bsc#1134046);</changelog>
</package>
<package pkgid="4f98033a5158755086fada18e80c3999c84198cb5157f2de85770c1a1495ba98" name="libsamba-policy-python-devel" arch="ppc64le">
  <version epoch="0" ver="4.9.5+git.487.9b5717b962b" rel="150100.3.67.2"/>
  <changelog author="dmulder@suse.com" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="scabrero@suse.de" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="nopower@suse.com" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="nopower@suse.com" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
  <changelog author="dmulder@suse.com" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="scabrero@suse.de" date="1600430400">- CVE-2020-1472: Unauthenticated domain takeover via netlogon ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against
    unencrypted passwords; (bsc#1176579); (bso#14497);
  + s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no"
    about unsecure configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge; (bsc#1176579);
    (bso#14497);
  + libcli/auth: Reject weak client challenges in netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497);</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
  <changelog author="nopower@suse.com" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="nopower@suse.com" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="nopower@suse.com" date="1615896000">-  CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
-  CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="dmulder@suse.com" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="nopower@suse.com" date="1618401600">- CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bso#14571); (bsc#1184677).</changelog>
  <changelog author="scabrero@suse.de" date="1621598400">- s3-libads: Do not turn on canonicalization flag. Fixes a regression
  changing the computer account password; (bsc#1185089); (bso#14155);</changelog>
  <changelog author="scabrero@suse.de" date="1636372800">- CVE-2016-2124: Don't fallback to non spnego authentication if
  kerberos is required; (bsc#1014440); (bso#12444);
- CVE-2020-25717: A user in an AD Domain could become root on
  domain members; (bsc#1192284); (bso#14556);</changelog>
  <changelog author="nopower@suse.com" date="1637236800">- The username map [script] advice from CVE-2020-25717 advisory
  note has undesired side effects for the local nt token. Fallback
  to a SID/UID based mapping if the name based lookup fails;
  (bsc#1192849); (bso#14901).</changelog>
  <changelog author="nopower@suse.com" date="1642766400">- CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit
  module; (bsc#1194859); (bso#14914).</changelog>
  <changelog author="scabrero@suse.de" date="1646395200">- Adjust systemd tmpfiles.d configuration, use /run/samba instead of
  /var/run/samba; (bsc#1134046);</changelog>
</package>
<package pkgid="8f54a7cce759933d016856506331bc7d3964e8b63c832ce009295e2d332f46a5" name="libsamba-policy-python-devel" arch="s390x">
  <version epoch="0" ver="4.9.5+git.487.9b5717b962b" rel="150100.3.67.2"/>
  <changelog author="dmulder@suse.com" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="scabrero@suse.de" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="nopower@suse.com" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="nopower@suse.com" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
  <changelog author="dmulder@suse.com" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="scabrero@suse.de" date="1600430400">- CVE-2020-1472: Unauthenticated domain takeover via netlogon ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against
    unencrypted passwords; (bsc#1176579); (bso#14497);
  + s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no"
    about unsecure configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge; (bsc#1176579);
    (bso#14497);
  + libcli/auth: Reject weak client challenges in netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497);</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
  <changelog author="nopower@suse.com" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="nopower@suse.com" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="nopower@suse.com" date="1615896000">-  CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
-  CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="dmulder@suse.com" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="nopower@suse.com" date="1618401600">- CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bso#14571); (bsc#1184677).</changelog>
  <changelog author="scabrero@suse.de" date="1621598400">- s3-libads: Do not turn on canonicalization flag. Fixes a regression
  changing the computer account password; (bsc#1185089); (bso#14155);</changelog>
  <changelog author="scabrero@suse.de" date="1636372800">- CVE-2016-2124: Don't fallback to non spnego authentication if
  kerberos is required; (bsc#1014440); (bso#12444);
- CVE-2020-25717: A user in an AD Domain could become root on
  domain members; (bsc#1192284); (bso#14556);</changelog>
  <changelog author="nopower@suse.com" date="1637236800">- The username map [script] advice from CVE-2020-25717 advisory
  note has undesired side effects for the local nt token. Fallback
  to a SID/UID based mapping if the name based lookup fails;
  (bsc#1192849); (bso#14901).</changelog>
  <changelog author="nopower@suse.com" date="1642766400">- CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit
  module; (bsc#1194859); (bso#14914).</changelog>
  <changelog author="scabrero@suse.de" date="1646395200">- Adjust systemd tmpfiles.d configuration, use /run/samba instead of
  /var/run/samba; (bsc#1134046);</changelog>
</package>
<package pkgid="65a17fef2eebe0c1fb8c361821f3d0d246bed34b5c54560dd89f6fd52df68fc6" name="libsamba-policy-python-devel" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.487.9b5717b962b" rel="150100.3.67.2"/>
  <changelog author="dmulder@suse.com" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="scabrero@suse.de" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="nopower@suse.com" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="nopower@suse.com" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
  <changelog author="dmulder@suse.com" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="scabrero@suse.de" date="1600430400">- CVE-2020-1472: Unauthenticated domain takeover via netlogon ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against
    unencrypted passwords; (bsc#1176579); (bso#14497);
  + s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no"
    about unsecure configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge; (bsc#1176579);
    (bso#14497);
  + libcli/auth: Reject weak client challenges in netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497);</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
  <changelog author="nopower@suse.com" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="nopower@suse.com" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="nopower@suse.com" date="1615896000">-  CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
-  CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="dmulder@suse.com" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="nopower@suse.com" date="1618401600">- CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bso#14571); (bsc#1184677).</changelog>
  <changelog author="scabrero@suse.de" date="1621598400">- s3-libads: Do not turn on canonicalization flag. Fixes a regression
  changing the computer account password; (bsc#1185089); (bso#14155);</changelog>
  <changelog author="scabrero@suse.de" date="1636372800">- CVE-2016-2124: Don't fallback to non spnego authentication if
  kerberos is required; (bsc#1014440); (bso#12444);
- CVE-2020-25717: A user in an AD Domain could become root on
  domain members; (bsc#1192284); (bso#14556);</changelog>
  <changelog author="nopower@suse.com" date="1637236800">- The username map [script] advice from CVE-2020-25717 advisory
  note has undesired side effects for the local nt token. Fallback
  to a SID/UID based mapping if the name based lookup fails;
  (bsc#1192849); (bso#14901).</changelog>
  <changelog author="nopower@suse.com" date="1642766400">- CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit
  module; (bsc#1194859); (bso#14914).</changelog>
  <changelog author="scabrero@suse.de" date="1646395200">- Adjust systemd tmpfiles.d configuration, use /run/samba instead of
  /var/run/samba; (bsc#1134046);</changelog>
</package>
<package pkgid="239ebafbb4f14eef21a28c968a2b6dce670907eec224066eeb6f8d85465ea675" name="libsamba-policy0-32bit" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.487.9b5717b962b" rel="150100.3.67.2"/>
  <changelog author="dmulder@suse.com" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="scabrero@suse.de" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="nopower@suse.com" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="nopower@suse.com" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
  <changelog author="dmulder@suse.com" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="scabrero@suse.de" date="1600430400">- CVE-2020-1472: Unauthenticated domain takeover via netlogon ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against
    unencrypted passwords; (bsc#1176579); (bso#14497);
  + s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no"
    about unsecure configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge; (bsc#1176579);
    (bso#14497);
  + libcli/auth: Reject weak client challenges in netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497);</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
  <changelog author="nopower@suse.com" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="nopower@suse.com" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="nopower@suse.com" date="1615896000">-  CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
-  CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="dmulder@suse.com" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="nopower@suse.com" date="1618401600">- CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bso#14571); (bsc#1184677).</changelog>
  <changelog author="scabrero@suse.de" date="1621598400">- s3-libads: Do not turn on canonicalization flag. Fixes a regression
  changing the computer account password; (bsc#1185089); (bso#14155);</changelog>
  <changelog author="scabrero@suse.de" date="1636372800">- CVE-2016-2124: Don't fallback to non spnego authentication if
  kerberos is required; (bsc#1014440); (bso#12444);
- CVE-2020-25717: A user in an AD Domain could become root on
  domain members; (bsc#1192284); (bso#14556);</changelog>
  <changelog author="nopower@suse.com" date="1637236800">- The username map [script] advice from CVE-2020-25717 advisory
  note has undesired side effects for the local nt token. Fallback
  to a SID/UID based mapping if the name based lookup fails;
  (bsc#1192849); (bso#14901).</changelog>
  <changelog author="nopower@suse.com" date="1642766400">- CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit
  module; (bsc#1194859); (bso#14914).</changelog>
  <changelog author="scabrero@suse.de" date="1646395200">- Adjust systemd tmpfiles.d configuration, use /run/samba instead of
  /var/run/samba; (bsc#1134046);</changelog>
</package>
<package pkgid="6d2dddc0ade4805fa2c63de02ea200dc43070e7ab3bab7483f69a0376a35f9c9" name="libsamba-policy0" arch="aarch64">
  <version epoch="0" ver="4.9.5+git.487.9b5717b962b" rel="150100.3.67.2"/>
  <changelog author="dmulder@suse.com" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="scabrero@suse.de" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="nopower@suse.com" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="nopower@suse.com" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
  <changelog author="dmulder@suse.com" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="scabrero@suse.de" date="1600430400">- CVE-2020-1472: Unauthenticated domain takeover via netlogon ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against
    unencrypted passwords; (bsc#1176579); (bso#14497);
  + s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no"
    about unsecure configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge; (bsc#1176579);
    (bso#14497);
  + libcli/auth: Reject weak client challenges in netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497);</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
  <changelog author="nopower@suse.com" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="nopower@suse.com" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="nopower@suse.com" date="1615896000">-  CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
-  CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="dmulder@suse.com" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="nopower@suse.com" date="1618401600">- CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bso#14571); (bsc#1184677).</changelog>
  <changelog author="scabrero@suse.de" date="1621598400">- s3-libads: Do not turn on canonicalization flag. Fixes a regression
  changing the computer account password; (bsc#1185089); (bso#14155);</changelog>
  <changelog author="scabrero@suse.de" date="1636372800">- CVE-2016-2124: Don't fallback to non spnego authentication if
  kerberos is required; (bsc#1014440); (bso#12444);
- CVE-2020-25717: A user in an AD Domain could become root on
  domain members; (bsc#1192284); (bso#14556);</changelog>
  <changelog author="nopower@suse.com" date="1637236800">- The username map [script] advice from CVE-2020-25717 advisory
  note has undesired side effects for the local nt token. Fallback
  to a SID/UID based mapping if the name based lookup fails;
  (bsc#1192849); (bso#14901).</changelog>
  <changelog author="nopower@suse.com" date="1642766400">- CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit
  module; (bsc#1194859); (bso#14914).</changelog>
  <changelog author="scabrero@suse.de" date="1646395200">- Adjust systemd tmpfiles.d configuration, use /run/samba instead of
  /var/run/samba; (bsc#1134046);</changelog>
</package>
<package pkgid="b4d267e3e9b037c5f10a610b64a971d6c509b3840b7a7217c8c256101aba8f78" name="libsamba-policy0" arch="ppc64le">
  <version epoch="0" ver="4.9.5+git.487.9b5717b962b" rel="150100.3.67.2"/>
  <changelog author="dmulder@suse.com" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="scabrero@suse.de" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="nopower@suse.com" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="nopower@suse.com" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
  <changelog author="dmulder@suse.com" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="scabrero@suse.de" date="1600430400">- CVE-2020-1472: Unauthenticated domain takeover via netlogon ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against
    unencrypted passwords; (bsc#1176579); (bso#14497);
  + s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no"
    about unsecure configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge; (bsc#1176579);
    (bso#14497);
  + libcli/auth: Reject weak client challenges in netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497);</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
  <changelog author="nopower@suse.com" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="nopower@suse.com" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="nopower@suse.com" date="1615896000">-  CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
-  CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="dmulder@suse.com" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="nopower@suse.com" date="1618401600">- CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bso#14571); (bsc#1184677).</changelog>
  <changelog author="scabrero@suse.de" date="1621598400">- s3-libads: Do not turn on canonicalization flag. Fixes a regression
  changing the computer account password; (bsc#1185089); (bso#14155);</changelog>
  <changelog author="scabrero@suse.de" date="1636372800">- CVE-2016-2124: Don't fallback to non spnego authentication if
  kerberos is required; (bsc#1014440); (bso#12444);
- CVE-2020-25717: A user in an AD Domain could become root on
  domain members; (bsc#1192284); (bso#14556);</changelog>
  <changelog author="nopower@suse.com" date="1637236800">- The username map [script] advice from CVE-2020-25717 advisory
  note has undesired side effects for the local nt token. Fallback
  to a SID/UID based mapping if the name based lookup fails;
  (bsc#1192849); (bso#14901).</changelog>
  <changelog author="nopower@suse.com" date="1642766400">- CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit
  module; (bsc#1194859); (bso#14914).</changelog>
  <changelog author="scabrero@suse.de" date="1646395200">- Adjust systemd tmpfiles.d configuration, use /run/samba instead of
  /var/run/samba; (bsc#1134046);</changelog>
</package>
<package pkgid="76074a32e4a6a3c7bb6efcbed30a0d91a4a357d3af416992b84d8c669e96aa16" name="libsamba-policy0" arch="s390x">
  <version epoch="0" ver="4.9.5+git.487.9b5717b962b" rel="150100.3.67.2"/>
  <changelog author="dmulder@suse.com" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="scabrero@suse.de" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="nopower@suse.com" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="nopower@suse.com" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
  <changelog author="dmulder@suse.com" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="scabrero@suse.de" date="1600430400">- CVE-2020-1472: Unauthenticated domain takeover via netlogon ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against
    unencrypted passwords; (bsc#1176579); (bso#14497);
  + s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no"
    about unsecure configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge; (bsc#1176579);
    (bso#14497);
  + libcli/auth: Reject weak client challenges in netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497);</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
  <changelog author="nopower@suse.com" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="nopower@suse.com" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="nopower@suse.com" date="1615896000">-  CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
-  CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="dmulder@suse.com" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="nopower@suse.com" date="1618401600">- CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bso#14571); (bsc#1184677).</changelog>
  <changelog author="scabrero@suse.de" date="1621598400">- s3-libads: Do not turn on canonicalization flag. Fixes a regression
  changing the computer account password; (bsc#1185089); (bso#14155);</changelog>
  <changelog author="scabrero@suse.de" date="1636372800">- CVE-2016-2124: Don't fallback to non spnego authentication if
  kerberos is required; (bsc#1014440); (bso#12444);
- CVE-2020-25717: A user in an AD Domain could become root on
  domain members; (bsc#1192284); (bso#14556);</changelog>
  <changelog author="nopower@suse.com" date="1637236800">- The username map [script] advice from CVE-2020-25717 advisory
  note has undesired side effects for the local nt token. Fallback
  to a SID/UID based mapping if the name based lookup fails;
  (bsc#1192849); (bso#14901).</changelog>
  <changelog author="nopower@suse.com" date="1642766400">- CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit
  module; (bsc#1194859); (bso#14914).</changelog>
  <changelog author="scabrero@suse.de" date="1646395200">- Adjust systemd tmpfiles.d configuration, use /run/samba instead of
  /var/run/samba; (bsc#1134046);</changelog>
</package>
<package pkgid="fe4e039c48312c6a016bf5b5dd51ef2267bc60e499045a0921d13dc130ab0ff9" name="libsamba-policy0" arch="x86_64">
  <version epoch="0" ver="4.9.5+git.487.9b5717b962b" rel="150100.3.67.2"/>
  <changelog author="dmulder@suse.com" date="1586865600">- Fix spnego fallback from kerberos to ntlmssp in smbd server;
  (bso#14106); (bsc#1169473);</changelog>
  <changelog author="nopower@suse.com" date="1587556800">- CVE-2020-10704: samba: Stack overflow in AD DC (C)LDAP server;
  (bso#14334); (bsc#1169851).</changelog>
  <changelog author="scabrero@suse.de" date="1589457600">- Installing: samba - samba-ad-dc.service does not exist and unit
  not found; (bsc#1171437);</changelog>
  <changelog author="scabrero@suse.de" date="1591012800">- Add libnetapi-devel to baselibs conf, for wine usage; (bsc#1172307);</changelog>
  <changelog author="nopower@suse.com" date="1592827200">- CVE-2020-10730: NULL de-reference in AD DC LDAP server when ASQ
  and VLV combined; (bso#14364); (bsc#1173159].
- CVE-2020-10745: invalid DNS or NBT queries containing dots use
  several seconds of CPU each; (bso#14378); (bsc#1173160).
- CVE-2020-10760: Use-after-free in AD DC Global Catalog LDAP server
  with paged_result or VLV; (bso#14402); (bsc#1173161).</changelog>
  <changelog author="nopower@suse.com" date="1593086400">- CVE-2020-14303: Endless loop from empty UDP packet sent to AD DC
  nbt_server; (bso#14417); (bsc#1173359).</changelog>
  <changelog author="dmulder@suse.com" date="1594728000">- Fix net command unable to negotiate SMB2; (bsc#1174120);</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Add obsoletes to libsmbldap2 package to fix upgrades from previous
  versions; (bsc#1172810);</changelog>
  <changelog author="scabrero@suse.de" date="1600430400">- CVE-2020-1472: Unauthenticated domain takeover via netlogon ("ZeroLogon").
  + s3:rpc_server/netlogon: Protect netr_ServerPasswordSet2 against
    unencrypted passwords; (bsc#1176579); (bso#14497);
  + s3:rpc_server/netlogon: Support "server require schannel:WORKSTATION$ = no"
    about unsecure configurations; (bsc#1176579); (bso#14497);
  + s4 torture rpc: repeated bytes in client challenge; (bsc#1176579);
    (bso#14497);
  + libcli/auth: Reject weak client challenges in netlogon_creds_server_init()
    "server require schannel:WORKSTATION$ = no"; (bsc#1176579); (bso#14497);</changelog>
  <changelog author="scabrero@suse.de" date="1602590400">- CVE-2020-14383: An authenticated user can crash the DCE/RPC DNS with
  easily crafted records; (bsc#1177613); (bso#14472);
- CVE-2020-14323: Unprivileged user can crash winbind; (bsc#1173994);
  (bso#14436);
- CVE-2020-14318: Missing handle permissions check in SMB1/2/3 ChangeNotify;
  (bsc#1173902); (bso#14434);</changelog>
  <changelog author="nopower@suse.com" date="1604577600">- Adjust smbcacls '--propagate-inheritance' feature to align with
  upstream; (bsc#1178469).</changelog>
  <changelog author="nopower@suse.com" date="1612440000">- Avoid free'ing our own pointer in memcache when memcache_trim
  attempts to reduce cache size; (bso#14625); (bnc#1179156).</changelog>
  <changelog author="nopower@suse.com" date="1615896000">-  CVE-2020-27840: samba: Unauthenticated remote heap corruption
  via bad DNs; (bso#14595); (bsc#1183572).
-  CVE-2021-20277: samba: out of bounds read in ldb_handler_fold;
  (bso#14655); (bsc#1183574).</changelog>
  <changelog author="dmulder@suse.com" date="1616760000">- s3-libads: use dns name to open a ldap session; (bso#13124);
  (bsc#1184310).</changelog>
  <changelog author="nopower@suse.com" date="1618401600">- CVE-2021-20254 Buffer overrun in sids_to_unixids();
  (bso#14571); (bsc#1184677).</changelog>
  <changelog author="scabrero@suse.de" date="1621598400">- s3-libads: Do not turn on canonicalization flag. Fixes a regression
  changing the computer account password; (bsc#1185089); (bso#14155);</changelog>
  <changelog author="scabrero@suse.de" date="1636372800">- CVE-2016-2124: Don't fallback to non spnego authentication if
  kerberos is required; (bsc#1014440); (bso#12444);
- CVE-2020-25717: A user in an AD Domain could become root on
  domain members; (bsc#1192284); (bso#14556);</changelog>
  <changelog author="nopower@suse.com" date="1637236800">- The username map [script] advice from CVE-2020-25717 advisory
  note has undesired side effects for the local nt token. Fallback
  to a SID/UID based mapping if the name based lookup fails;
  (bsc#1192849); (bso#14901).</changelog>
  <changelog author="nopower@suse.com" date="1642766400">- CVE-2021-44142: Out-of-Bound Read/Write on Samba vfs_fruit
  module; (bsc#1194859); (bso#14914).</changelog>
  <changelog author="scabrero@suse.de" date="1646395200">- Adjust systemd tmpfiles.d configuration, use /run/samba instead of
  /var/run/samba; (bsc#1134046);</changelog>
</package>
<package pkgid="a320ea3c19f4b56d8eb09f13993c4b0dd2e2322b1e4e77ee71ff4cebb44d5873" name="libsanlock1" arch="aarch64">
  <version epoch="0" ver="3.6.0" rel="150000.4.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1426939200">- Update to version 3.2.2
  * reset: native timeout
  * reset: Reduce logging noise to stderr and syslog
  * sanlock, reset: coverity fixes
- Refactor specfile to be policy compliant
- Use download Url as source
- Add xz build requires; needed as the source tarball is compressed
  with xz
- Do not provide both systemd and sysvinit support on a same system;
  it's redundant
- Add systemd backward compatibility links
- Update patchs:
  * suse-no-date-time.patch
  * suse-systemd.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1434715200">- Update to sanlock 3.2.4
  - Add conf file sanlock.conf
  - Add pkgconfig files
  - Numerous improvements and bug fixes.  For details, see
    https://git.fedorahosted.org/cgit/sanlock.git/log/</changelog>
  <changelog author="kukuk@suse.com" date="1489233600">- Add group disk as Prerequires</changelog>
  <changelog author="zren@suse.com" date="1489579200">- Update to sanlock 3.4.0
- Enable fence_sanlockd so that lvm2 can use the new lvmlocked
  feature in cluster environment
  * fix unpackaged file - /usr/sbin/rcfence_sanlockd
  * refresh suse-no-date-time.patch to cover the same issue
    in fence_sanlockd
  * adjust fence_sanlockd.init and suse-systemd.patch
- Enable sanlk-reset subpackage
- Fix "undefined symbol to io_suspend" at runtime, bsc#1030060
  suse-fix-link-errors.patch</changelog>
  <changelog author="meissner@suse.com" date="1490788800">- prerequire groupadd and useradd.</changelog>
  <changelog author="mpluskal@suse.com" date="1491220800">- Use correct permissions on unit files (bsc#1032046)</changelog>
  <changelog author="jfehlig@suse.com" date="1491220801">- Use System/Base in fence and reset subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1491220802">- spec: fix permissions on config files</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Remove redundant %if guards around %package and scriptlets.
  They are only really needed for %files.
- Replace $RPM_ shell vars by modern macros.
- Trim descriptions a little.</changelog>
  <changelog author="jfehlig@suse.com" date="1496836800">- Update to sanlock 3.5.0
  - increase open file limit to 2048
  - add option to log UTC timestamps
  - doc improvements
- Remove support for old, non-systemd distros</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jfehlig@suse.com" date="1512475200">- Update to sanlock 3.6.0
  - preserve dblock values when setting shared flag
  - fix detection of shared lease
  - fix release interference with paxos
  - retry ballot when new lver is seen
  - add a NOWAIT flag for convert</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Cleanup with spec-cleaner (only support SLE12 and newer)
- Add -fno-strict-aliasing to python subpkg
- Create rcsanlk-resetd link for the service control</changelog>
  <changelog author="tchvatal@suse.com" date="1521633601">- Add code to build with both python2 and python3 bindings with
  provided condition so we can later on optionalize python2 builds
  sanlock-python3.patch
  bsc#1076414</changelog>
  <changelog author="jfehlig@suse.com" date="1522065600">- Fix module initialization to work with both python2 and python3
  Updated sanlock-python3.patch
  bsc#1076414</changelog>
  <changelog author="jfehlig@suse.com" date="1649160000">- spec: Add libuuid as a build requirement to fix compilation on
  SLE15 SP4
  bsc#1197853</changelog>
</package>
<package pkgid="c8e45c3167a9c64d9b0f7ed98e439911d7dc6f854e214ba681cefe003ade844c" name="libsanlock1" arch="ppc64le">
  <version epoch="0" ver="3.6.0" rel="150000.4.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1426939200">- Update to version 3.2.2
  * reset: native timeout
  * reset: Reduce logging noise to stderr and syslog
  * sanlock, reset: coverity fixes
- Refactor specfile to be policy compliant
- Use download Url as source
- Add xz build requires; needed as the source tarball is compressed
  with xz
- Do not provide both systemd and sysvinit support on a same system;
  it's redundant
- Add systemd backward compatibility links
- Update patchs:
  * suse-no-date-time.patch
  * suse-systemd.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1434715200">- Update to sanlock 3.2.4
  - Add conf file sanlock.conf
  - Add pkgconfig files
  - Numerous improvements and bug fixes.  For details, see
    https://git.fedorahosted.org/cgit/sanlock.git/log/</changelog>
  <changelog author="kukuk@suse.com" date="1489233600">- Add group disk as Prerequires</changelog>
  <changelog author="zren@suse.com" date="1489579200">- Update to sanlock 3.4.0
- Enable fence_sanlockd so that lvm2 can use the new lvmlocked
  feature in cluster environment
  * fix unpackaged file - /usr/sbin/rcfence_sanlockd
  * refresh suse-no-date-time.patch to cover the same issue
    in fence_sanlockd
  * adjust fence_sanlockd.init and suse-systemd.patch
- Enable sanlk-reset subpackage
- Fix "undefined symbol to io_suspend" at runtime, bsc#1030060
  suse-fix-link-errors.patch</changelog>
  <changelog author="meissner@suse.com" date="1490788800">- prerequire groupadd and useradd.</changelog>
  <changelog author="mpluskal@suse.com" date="1491220800">- Use correct permissions on unit files (bsc#1032046)</changelog>
  <changelog author="jfehlig@suse.com" date="1491220801">- Use System/Base in fence and reset subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1491220802">- spec: fix permissions on config files</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Remove redundant %if guards around %package and scriptlets.
  They are only really needed for %files.
- Replace $RPM_ shell vars by modern macros.
- Trim descriptions a little.</changelog>
  <changelog author="jfehlig@suse.com" date="1496836800">- Update to sanlock 3.5.0
  - increase open file limit to 2048
  - add option to log UTC timestamps
  - doc improvements
- Remove support for old, non-systemd distros</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jfehlig@suse.com" date="1512475200">- Update to sanlock 3.6.0
  - preserve dblock values when setting shared flag
  - fix detection of shared lease
  - fix release interference with paxos
  - retry ballot when new lver is seen
  - add a NOWAIT flag for convert</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Cleanup with spec-cleaner (only support SLE12 and newer)
- Add -fno-strict-aliasing to python subpkg
- Create rcsanlk-resetd link for the service control</changelog>
  <changelog author="tchvatal@suse.com" date="1521633601">- Add code to build with both python2 and python3 bindings with
  provided condition so we can later on optionalize python2 builds
  sanlock-python3.patch
  bsc#1076414</changelog>
  <changelog author="jfehlig@suse.com" date="1522065600">- Fix module initialization to work with both python2 and python3
  Updated sanlock-python3.patch
  bsc#1076414</changelog>
  <changelog author="jfehlig@suse.com" date="1649160000">- spec: Add libuuid as a build requirement to fix compilation on
  SLE15 SP4
  bsc#1197853</changelog>
</package>
<package pkgid="f0ad5c44e91a1898a749ab8ea2f973f4a454b7246df2c26a3e06dae2af51fdce" name="libsanlock1" arch="s390x">
  <version epoch="0" ver="3.6.0" rel="150000.4.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1426939200">- Update to version 3.2.2
  * reset: native timeout
  * reset: Reduce logging noise to stderr and syslog
  * sanlock, reset: coverity fixes
- Refactor specfile to be policy compliant
- Use download Url as source
- Add xz build requires; needed as the source tarball is compressed
  with xz
- Do not provide both systemd and sysvinit support on a same system;
  it's redundant
- Add systemd backward compatibility links
- Update patchs:
  * suse-no-date-time.patch
  * suse-systemd.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1434715200">- Update to sanlock 3.2.4
  - Add conf file sanlock.conf
  - Add pkgconfig files
  - Numerous improvements and bug fixes.  For details, see
    https://git.fedorahosted.org/cgit/sanlock.git/log/</changelog>
  <changelog author="kukuk@suse.com" date="1489233600">- Add group disk as Prerequires</changelog>
  <changelog author="zren@suse.com" date="1489579200">- Update to sanlock 3.4.0
- Enable fence_sanlockd so that lvm2 can use the new lvmlocked
  feature in cluster environment
  * fix unpackaged file - /usr/sbin/rcfence_sanlockd
  * refresh suse-no-date-time.patch to cover the same issue
    in fence_sanlockd
  * adjust fence_sanlockd.init and suse-systemd.patch
- Enable sanlk-reset subpackage
- Fix "undefined symbol to io_suspend" at runtime, bsc#1030060
  suse-fix-link-errors.patch</changelog>
  <changelog author="meissner@suse.com" date="1490788800">- prerequire groupadd and useradd.</changelog>
  <changelog author="mpluskal@suse.com" date="1491220800">- Use correct permissions on unit files (bsc#1032046)</changelog>
  <changelog author="jfehlig@suse.com" date="1491220801">- Use System/Base in fence and reset subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1491220802">- spec: fix permissions on config files</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Remove redundant %if guards around %package and scriptlets.
  They are only really needed for %files.
- Replace $RPM_ shell vars by modern macros.
- Trim descriptions a little.</changelog>
  <changelog author="jfehlig@suse.com" date="1496836800">- Update to sanlock 3.5.0
  - increase open file limit to 2048
  - add option to log UTC timestamps
  - doc improvements
- Remove support for old, non-systemd distros</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jfehlig@suse.com" date="1512475200">- Update to sanlock 3.6.0
  - preserve dblock values when setting shared flag
  - fix detection of shared lease
  - fix release interference with paxos
  - retry ballot when new lver is seen
  - add a NOWAIT flag for convert</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Cleanup with spec-cleaner (only support SLE12 and newer)
- Add -fno-strict-aliasing to python subpkg
- Create rcsanlk-resetd link for the service control</changelog>
  <changelog author="tchvatal@suse.com" date="1521633601">- Add code to build with both python2 and python3 bindings with
  provided condition so we can later on optionalize python2 builds
  sanlock-python3.patch
  bsc#1076414</changelog>
  <changelog author="jfehlig@suse.com" date="1522065600">- Fix module initialization to work with both python2 and python3
  Updated sanlock-python3.patch
  bsc#1076414</changelog>
  <changelog author="jfehlig@suse.com" date="1649160000">- spec: Add libuuid as a build requirement to fix compilation on
  SLE15 SP4
  bsc#1197853</changelog>
</package>
<package pkgid="0c8c55a8db0030a986a0041a505beba025613359b8194b425682cf422b37568c" name="libsanlock1" arch="x86_64">
  <version epoch="0" ver="3.6.0" rel="150000.4.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1426939200">- Update to version 3.2.2
  * reset: native timeout
  * reset: Reduce logging noise to stderr and syslog
  * sanlock, reset: coverity fixes
- Refactor specfile to be policy compliant
- Use download Url as source
- Add xz build requires; needed as the source tarball is compressed
  with xz
- Do not provide both systemd and sysvinit support on a same system;
  it's redundant
- Add systemd backward compatibility links
- Update patchs:
  * suse-no-date-time.patch
  * suse-systemd.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1434715200">- Update to sanlock 3.2.4
  - Add conf file sanlock.conf
  - Add pkgconfig files
  - Numerous improvements and bug fixes.  For details, see
    https://git.fedorahosted.org/cgit/sanlock.git/log/</changelog>
  <changelog author="kukuk@suse.com" date="1489233600">- Add group disk as Prerequires</changelog>
  <changelog author="zren@suse.com" date="1489579200">- Update to sanlock 3.4.0
- Enable fence_sanlockd so that lvm2 can use the new lvmlocked
  feature in cluster environment
  * fix unpackaged file - /usr/sbin/rcfence_sanlockd
  * refresh suse-no-date-time.patch to cover the same issue
    in fence_sanlockd
  * adjust fence_sanlockd.init and suse-systemd.patch
- Enable sanlk-reset subpackage
- Fix "undefined symbol to io_suspend" at runtime, bsc#1030060
  suse-fix-link-errors.patch</changelog>
  <changelog author="meissner@suse.com" date="1490788800">- prerequire groupadd and useradd.</changelog>
  <changelog author="mpluskal@suse.com" date="1491220800">- Use correct permissions on unit files (bsc#1032046)</changelog>
  <changelog author="jfehlig@suse.com" date="1491220801">- Use System/Base in fence and reset subpackages</changelog>
  <changelog author="jfehlig@suse.com" date="1491220802">- spec: fix permissions on config files</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Remove redundant %if guards around %package and scriptlets.
  They are only really needed for %files.
- Replace $RPM_ shell vars by modern macros.
- Trim descriptions a little.</changelog>
  <changelog author="jfehlig@suse.com" date="1496836800">- Update to sanlock 3.5.0
  - increase open file limit to 2048
  - add option to log UTC timestamps
  - doc improvements
- Remove support for old, non-systemd distros</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="jfehlig@suse.com" date="1512475200">- Update to sanlock 3.6.0
  - preserve dblock values when setting shared flag
  - fix detection of shared lease
  - fix release interference with paxos
  - retry ballot when new lver is seen
  - add a NOWAIT flag for convert</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Cleanup with spec-cleaner (only support SLE12 and newer)
- Add -fno-strict-aliasing to python subpkg
- Create rcsanlk-resetd link for the service control</changelog>
  <changelog author="tchvatal@suse.com" date="1521633601">- Add code to build with both python2 and python3 bindings with
  provided condition so we can later on optionalize python2 builds
  sanlock-python3.patch
  bsc#1076414</changelog>
  <changelog author="jfehlig@suse.com" date="1522065600">- Fix module initialization to work with both python2 and python3
  Updated sanlock-python3.patch
  bsc#1076414</changelog>
  <changelog author="jfehlig@suse.com" date="1649160000">- spec: Add libuuid as a build requirement to fix compilation on
  SLE15 SP4
  bsc#1197853</changelog>
</package>
<package pkgid="172a61f5f84af5c2f5d5842c59717138195a0edfd351c9ad0e4c6ce7cbf62bb7" name="libslirp" arch="src">
  <version epoch="0" ver="4.3.1" rel="150300.2.7.1"/>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Initial package, adapted specfile from Fedora to work on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1588593600">- Update to 4.3.0
- Fix use-afte-free in ip_reass() (CVE-2020-1983)</changelog>
  <changelog author="rhafer@suse.com" date="1594209600">- Update to 4.3.1 (bsc#1172380)
  - A silent truncation could occur in `slirp_fmt()`, which will
    now print a critical message. See also #22.
  - CVE-2020-10756 - Drop bogus IPv6 messages that could lead to
    data leakage.  See !44 and !42.
  - Fix win32 builds by using the SLIRP_PACKED definition.
  - Various coverity scan errors fixed. !41
  - Fix new GCC warnings. !43
- Packaging changes
  - Enable "set_version" source service in _service file
  - Move "tar" and "recompress" service to "buildtime" as outlined
    in the OBS user guide
  - Enable "package-meta" as the libslirp build process now
    requires access to the git metadata.</changelog>
  <changelog author="pgajdos@suse.com" date="1645617600">- security update
- added patches
  fix CVE-2021-3592 [bsc#1187364], invalid pointer initialization may lead to information disclosure (bootp)
  + libslirp-CVE-2021-3592.patch
  fix CVE-2021-3594 [bsc#1187367], invalid pointer initialization may lead to information disclosure (udp)
  + libslirp-CVE-2021-3594.patch
  fix CVE-2021-3595 [bsc#1187366], invalid pointer initialization may lead to information disclosure (tftp)
  + libslirp-CVE-2021-3595.patch</changelog>
  <changelog author="sflees@suse.de" date="1650888000">- Fix a dhcp regression [bsc#1198773]
  +libslirp-fix-dhcp-1.patch
  +libslirp-fix-dhcp-2.patch</changelog>
</package>
<package pkgid="a18861be81db9258d295121c2fc1b6e2d86f2815c03569d343ef9a62c5e21f67" name="libslirp" arch="src">
  <version epoch="0" ver="4.3.1" rel="150300.6.2"/>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Initial package, adapted specfile from Fedora to work on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1588593600">- Update to 4.3.0
- Fix use-afte-free in ip_reass() (CVE-2020-1983)</changelog>
  <changelog author="rhafer@suse.com" date="1594209600">- Update to 4.3.1 (bsc#1172380)
  - A silent truncation could occur in `slirp_fmt()`, which will
    now print a critical message. See also #22.
  - CVE-2020-10756 - Drop bogus IPv6 messages that could lead to
    data leakage.  See !44 and !42.
  - Fix win32 builds by using the SLIRP_PACKED definition.
  - Various coverity scan errors fixed. !41
  - Fix new GCC warnings. !43
- Packaging changes
  - Enable "set_version" source service in _service file
  - Move "tar" and "recompress" service to "buildtime" as outlined
    in the OBS user guide
  - Enable "package-meta" as the libslirp build process now
    requires access to the git metadata.</changelog>
  <changelog author="pgajdos@suse.com" date="1645617600">- security update
- added patches
  fix CVE-2021-3592 [bsc#1187364], invalid pointer initialization may lead to information disclosure (bootp)
  + libslirp-CVE-2021-3592.patch
  fix CVE-2021-3594 [bsc#1187367], invalid pointer initialization may lead to information disclosure (udp)
  + libslirp-CVE-2021-3594.patch
  fix CVE-2021-3595 [bsc#1187366], invalid pointer initialization may lead to information disclosure (tftp)
  + libslirp-CVE-2021-3595.patch</changelog>
  <changelog author="sflees@suse.de" date="1650888000">- Fix a dhcp regression [bsc#1198773]
  +libslirp-fix-dhcp-1.patch
  +libslirp-fix-dhcp-2.patch</changelog>
</package>
<package pkgid="61f57c77a7d15936406ded7a67483198171e8b54a6f7c0660199db9d9e320232" name="libslirp-devel" arch="aarch64">
  <version epoch="0" ver="4.3.1" rel="150300.2.7.1"/>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Initial package, adapted specfile from Fedora to work on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1588593600">- Update to 4.3.0
- Fix use-afte-free in ip_reass() (CVE-2020-1983)</changelog>
  <changelog author="rhafer@suse.com" date="1594209600">- Update to 4.3.1 (bsc#1172380)
  - A silent truncation could occur in `slirp_fmt()`, which will
    now print a critical message. See also #22.
  - CVE-2020-10756 - Drop bogus IPv6 messages that could lead to
    data leakage.  See !44 and !42.
  - Fix win32 builds by using the SLIRP_PACKED definition.
  - Various coverity scan errors fixed. !41
  - Fix new GCC warnings. !43
- Packaging changes
  - Enable "set_version" source service in _service file
  - Move "tar" and "recompress" service to "buildtime" as outlined
    in the OBS user guide
  - Enable "package-meta" as the libslirp build process now
    requires access to the git metadata.</changelog>
  <changelog author="pgajdos@suse.com" date="1645617600">- security update
- added patches
  fix CVE-2021-3592 [bsc#1187364], invalid pointer initialization may lead to information disclosure (bootp)
  + libslirp-CVE-2021-3592.patch
  fix CVE-2021-3594 [bsc#1187367], invalid pointer initialization may lead to information disclosure (udp)
  + libslirp-CVE-2021-3594.patch
  fix CVE-2021-3595 [bsc#1187366], invalid pointer initialization may lead to information disclosure (tftp)
  + libslirp-CVE-2021-3595.patch</changelog>
  <changelog author="sflees@suse.de" date="1650888000">- Fix a dhcp regression [bsc#1198773]
  +libslirp-fix-dhcp-1.patch
  +libslirp-fix-dhcp-2.patch</changelog>
</package>
<package pkgid="04897170f773d3be7419e58389ad8404fd4f2f98afa72f933c825c2b2e8e734c" name="libslirp-devel" arch="ppc64le">
  <version epoch="0" ver="4.3.1" rel="150300.2.7.1"/>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Initial package, adapted specfile from Fedora to work on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1588593600">- Update to 4.3.0
- Fix use-afte-free in ip_reass() (CVE-2020-1983)</changelog>
  <changelog author="rhafer@suse.com" date="1594209600">- Update to 4.3.1 (bsc#1172380)
  - A silent truncation could occur in `slirp_fmt()`, which will
    now print a critical message. See also #22.
  - CVE-2020-10756 - Drop bogus IPv6 messages that could lead to
    data leakage.  See !44 and !42.
  - Fix win32 builds by using the SLIRP_PACKED definition.
  - Various coverity scan errors fixed. !41
  - Fix new GCC warnings. !43
- Packaging changes
  - Enable "set_version" source service in _service file
  - Move "tar" and "recompress" service to "buildtime" as outlined
    in the OBS user guide
  - Enable "package-meta" as the libslirp build process now
    requires access to the git metadata.</changelog>
  <changelog author="pgajdos@suse.com" date="1645617600">- security update
- added patches
  fix CVE-2021-3592 [bsc#1187364], invalid pointer initialization may lead to information disclosure (bootp)
  + libslirp-CVE-2021-3592.patch
  fix CVE-2021-3594 [bsc#1187367], invalid pointer initialization may lead to information disclosure (udp)
  + libslirp-CVE-2021-3594.patch
  fix CVE-2021-3595 [bsc#1187366], invalid pointer initialization may lead to information disclosure (tftp)
  + libslirp-CVE-2021-3595.patch</changelog>
  <changelog author="sflees@suse.de" date="1650888000">- Fix a dhcp regression [bsc#1198773]
  +libslirp-fix-dhcp-1.patch
  +libslirp-fix-dhcp-2.patch</changelog>
</package>
<package pkgid="71d7a6498051769a635c966ff1b2c4a3d019b21af3df9c91d9f139ab1ef4cd3c" name="libslirp-devel" arch="s390x">
  <version epoch="0" ver="4.3.1" rel="150300.2.7.1"/>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Initial package, adapted specfile from Fedora to work on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1588593600">- Update to 4.3.0
- Fix use-afte-free in ip_reass() (CVE-2020-1983)</changelog>
  <changelog author="rhafer@suse.com" date="1594209600">- Update to 4.3.1 (bsc#1172380)
  - A silent truncation could occur in `slirp_fmt()`, which will
    now print a critical message. See also #22.
  - CVE-2020-10756 - Drop bogus IPv6 messages that could lead to
    data leakage.  See !44 and !42.
  - Fix win32 builds by using the SLIRP_PACKED definition.
  - Various coverity scan errors fixed. !41
  - Fix new GCC warnings. !43
- Packaging changes
  - Enable "set_version" source service in _service file
  - Move "tar" and "recompress" service to "buildtime" as outlined
    in the OBS user guide
  - Enable "package-meta" as the libslirp build process now
    requires access to the git metadata.</changelog>
  <changelog author="pgajdos@suse.com" date="1645617600">- security update
- added patches
  fix CVE-2021-3592 [bsc#1187364], invalid pointer initialization may lead to information disclosure (bootp)
  + libslirp-CVE-2021-3592.patch
  fix CVE-2021-3594 [bsc#1187367], invalid pointer initialization may lead to information disclosure (udp)
  + libslirp-CVE-2021-3594.patch
  fix CVE-2021-3595 [bsc#1187366], invalid pointer initialization may lead to information disclosure (tftp)
  + libslirp-CVE-2021-3595.patch</changelog>
  <changelog author="sflees@suse.de" date="1650888000">- Fix a dhcp regression [bsc#1198773]
  +libslirp-fix-dhcp-1.patch
  +libslirp-fix-dhcp-2.patch</changelog>
</package>
<package pkgid="912d6e16c4d4dc58dcd03e6619738838c4f23a38eca3ccbb0d612577d918dc9f" name="libslirp-devel" arch="x86_64">
  <version epoch="0" ver="4.3.1" rel="150300.2.7.1"/>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Initial package, adapted specfile from Fedora to work on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1588593600">- Update to 4.3.0
- Fix use-afte-free in ip_reass() (CVE-2020-1983)</changelog>
  <changelog author="rhafer@suse.com" date="1594209600">- Update to 4.3.1 (bsc#1172380)
  - A silent truncation could occur in `slirp_fmt()`, which will
    now print a critical message. See also #22.
  - CVE-2020-10756 - Drop bogus IPv6 messages that could lead to
    data leakage.  See !44 and !42.
  - Fix win32 builds by using the SLIRP_PACKED definition.
  - Various coverity scan errors fixed. !41
  - Fix new GCC warnings. !43
- Packaging changes
  - Enable "set_version" source service in _service file
  - Move "tar" and "recompress" service to "buildtime" as outlined
    in the OBS user guide
  - Enable "package-meta" as the libslirp build process now
    requires access to the git metadata.</changelog>
  <changelog author="pgajdos@suse.com" date="1645617600">- security update
- added patches
  fix CVE-2021-3592 [bsc#1187364], invalid pointer initialization may lead to information disclosure (bootp)
  + libslirp-CVE-2021-3592.patch
  fix CVE-2021-3594 [bsc#1187367], invalid pointer initialization may lead to information disclosure (udp)
  + libslirp-CVE-2021-3594.patch
  fix CVE-2021-3595 [bsc#1187366], invalid pointer initialization may lead to information disclosure (tftp)
  + libslirp-CVE-2021-3595.patch</changelog>
  <changelog author="sflees@suse.de" date="1650888000">- Fix a dhcp regression [bsc#1198773]
  +libslirp-fix-dhcp-1.patch
  +libslirp-fix-dhcp-2.patch</changelog>
</package>
<package pkgid="5ea7159dfc3cb9fa7256331839909b84abcc47c6a8f295bcf107f6a3fe37b8d4" name="libslirp-devel" arch="aarch64">
  <version epoch="0" ver="4.3.1" rel="150300.6.2"/>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Initial package, adapted specfile from Fedora to work on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1588593600">- Update to 4.3.0
- Fix use-afte-free in ip_reass() (CVE-2020-1983)</changelog>
  <changelog author="rhafer@suse.com" date="1594209600">- Update to 4.3.1 (bsc#1172380)
  - A silent truncation could occur in `slirp_fmt()`, which will
    now print a critical message. See also #22.
  - CVE-2020-10756 - Drop bogus IPv6 messages that could lead to
    data leakage.  See !44 and !42.
  - Fix win32 builds by using the SLIRP_PACKED definition.
  - Various coverity scan errors fixed. !41
  - Fix new GCC warnings. !43
- Packaging changes
  - Enable "set_version" source service in _service file
  - Move "tar" and "recompress" service to "buildtime" as outlined
    in the OBS user guide
  - Enable "package-meta" as the libslirp build process now
    requires access to the git metadata.</changelog>
  <changelog author="pgajdos@suse.com" date="1645617600">- security update
- added patches
  fix CVE-2021-3592 [bsc#1187364], invalid pointer initialization may lead to information disclosure (bootp)
  + libslirp-CVE-2021-3592.patch
  fix CVE-2021-3594 [bsc#1187367], invalid pointer initialization may lead to information disclosure (udp)
  + libslirp-CVE-2021-3594.patch
  fix CVE-2021-3595 [bsc#1187366], invalid pointer initialization may lead to information disclosure (tftp)
  + libslirp-CVE-2021-3595.patch</changelog>
  <changelog author="sflees@suse.de" date="1650888000">- Fix a dhcp regression [bsc#1198773]
  +libslirp-fix-dhcp-1.patch
  +libslirp-fix-dhcp-2.patch</changelog>
</package>
<package pkgid="04b1811ce0c8402f49f55bb7dc2092c978e92b93dfee5e2a32378465c5da6277" name="libslirp-devel" arch="ppc64le">
  <version epoch="0" ver="4.3.1" rel="150300.6.2"/>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Initial package, adapted specfile from Fedora to work on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1588593600">- Update to 4.3.0
- Fix use-afte-free in ip_reass() (CVE-2020-1983)</changelog>
  <changelog author="rhafer@suse.com" date="1594209600">- Update to 4.3.1 (bsc#1172380)
  - A silent truncation could occur in `slirp_fmt()`, which will
    now print a critical message. See also #22.
  - CVE-2020-10756 - Drop bogus IPv6 messages that could lead to
    data leakage.  See !44 and !42.
  - Fix win32 builds by using the SLIRP_PACKED definition.
  - Various coverity scan errors fixed. !41
  - Fix new GCC warnings. !43
- Packaging changes
  - Enable "set_version" source service in _service file
  - Move "tar" and "recompress" service to "buildtime" as outlined
    in the OBS user guide
  - Enable "package-meta" as the libslirp build process now
    requires access to the git metadata.</changelog>
  <changelog author="pgajdos@suse.com" date="1645617600">- security update
- added patches
  fix CVE-2021-3592 [bsc#1187364], invalid pointer initialization may lead to information disclosure (bootp)
  + libslirp-CVE-2021-3592.patch
  fix CVE-2021-3594 [bsc#1187367], invalid pointer initialization may lead to information disclosure (udp)
  + libslirp-CVE-2021-3594.patch
  fix CVE-2021-3595 [bsc#1187366], invalid pointer initialization may lead to information disclosure (tftp)
  + libslirp-CVE-2021-3595.patch</changelog>
  <changelog author="sflees@suse.de" date="1650888000">- Fix a dhcp regression [bsc#1198773]
  +libslirp-fix-dhcp-1.patch
  +libslirp-fix-dhcp-2.patch</changelog>
</package>
<package pkgid="07f440bf667c028ddbcd0d289355503897316c021e42751419ff6e687409bb81" name="libslirp-devel" arch="s390x">
  <version epoch="0" ver="4.3.1" rel="150300.6.2"/>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Initial package, adapted specfile from Fedora to work on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1588593600">- Update to 4.3.0
- Fix use-afte-free in ip_reass() (CVE-2020-1983)</changelog>
  <changelog author="rhafer@suse.com" date="1594209600">- Update to 4.3.1 (bsc#1172380)
  - A silent truncation could occur in `slirp_fmt()`, which will
    now print a critical message. See also #22.
  - CVE-2020-10756 - Drop bogus IPv6 messages that could lead to
    data leakage.  See !44 and !42.
  - Fix win32 builds by using the SLIRP_PACKED definition.
  - Various coverity scan errors fixed. !41
  - Fix new GCC warnings. !43
- Packaging changes
  - Enable "set_version" source service in _service file
  - Move "tar" and "recompress" service to "buildtime" as outlined
    in the OBS user guide
  - Enable "package-meta" as the libslirp build process now
    requires access to the git metadata.</changelog>
  <changelog author="pgajdos@suse.com" date="1645617600">- security update
- added patches
  fix CVE-2021-3592 [bsc#1187364], invalid pointer initialization may lead to information disclosure (bootp)
  + libslirp-CVE-2021-3592.patch
  fix CVE-2021-3594 [bsc#1187367], invalid pointer initialization may lead to information disclosure (udp)
  + libslirp-CVE-2021-3594.patch
  fix CVE-2021-3595 [bsc#1187366], invalid pointer initialization may lead to information disclosure (tftp)
  + libslirp-CVE-2021-3595.patch</changelog>
  <changelog author="sflees@suse.de" date="1650888000">- Fix a dhcp regression [bsc#1198773]
  +libslirp-fix-dhcp-1.patch
  +libslirp-fix-dhcp-2.patch</changelog>
</package>
<package pkgid="2f67aa3c404d19f40c42b7418253088e7d5b8a272c17f55816fdef5d3d4a2614" name="libslirp-devel" arch="x86_64">
  <version epoch="0" ver="4.3.1" rel="150300.6.2"/>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Initial package, adapted specfile from Fedora to work on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1588593600">- Update to 4.3.0
- Fix use-afte-free in ip_reass() (CVE-2020-1983)</changelog>
  <changelog author="rhafer@suse.com" date="1594209600">- Update to 4.3.1 (bsc#1172380)
  - A silent truncation could occur in `slirp_fmt()`, which will
    now print a critical message. See also #22.
  - CVE-2020-10756 - Drop bogus IPv6 messages that could lead to
    data leakage.  See !44 and !42.
  - Fix win32 builds by using the SLIRP_PACKED definition.
  - Various coverity scan errors fixed. !41
  - Fix new GCC warnings. !43
- Packaging changes
  - Enable "set_version" source service in _service file
  - Move "tar" and "recompress" service to "buildtime" as outlined
    in the OBS user guide
  - Enable "package-meta" as the libslirp build process now
    requires access to the git metadata.</changelog>
  <changelog author="pgajdos@suse.com" date="1645617600">- security update
- added patches
  fix CVE-2021-3592 [bsc#1187364], invalid pointer initialization may lead to information disclosure (bootp)
  + libslirp-CVE-2021-3592.patch
  fix CVE-2021-3594 [bsc#1187367], invalid pointer initialization may lead to information disclosure (udp)
  + libslirp-CVE-2021-3594.patch
  fix CVE-2021-3595 [bsc#1187366], invalid pointer initialization may lead to information disclosure (tftp)
  + libslirp-CVE-2021-3595.patch</changelog>
  <changelog author="sflees@suse.de" date="1650888000">- Fix a dhcp regression [bsc#1198773]
  +libslirp-fix-dhcp-1.patch
  +libslirp-fix-dhcp-2.patch</changelog>
</package>
<package pkgid="7a04c2112c10d01357f31ccbac6ac33617e3328b3bd633a85eb850fc44fef388" name="libslirp0" arch="aarch64">
  <version epoch="0" ver="4.3.1" rel="150300.2.7.1"/>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Initial package, adapted specfile from Fedora to work on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1588593600">- Update to 4.3.0
- Fix use-afte-free in ip_reass() (CVE-2020-1983)</changelog>
  <changelog author="rhafer@suse.com" date="1594209600">- Update to 4.3.1 (bsc#1172380)
  - A silent truncation could occur in `slirp_fmt()`, which will
    now print a critical message. See also #22.
  - CVE-2020-10756 - Drop bogus IPv6 messages that could lead to
    data leakage.  See !44 and !42.
  - Fix win32 builds by using the SLIRP_PACKED definition.
  - Various coverity scan errors fixed. !41
  - Fix new GCC warnings. !43
- Packaging changes
  - Enable "set_version" source service in _service file
  - Move "tar" and "recompress" service to "buildtime" as outlined
    in the OBS user guide
  - Enable "package-meta" as the libslirp build process now
    requires access to the git metadata.</changelog>
  <changelog author="pgajdos@suse.com" date="1645617600">- security update
- added patches
  fix CVE-2021-3592 [bsc#1187364], invalid pointer initialization may lead to information disclosure (bootp)
  + libslirp-CVE-2021-3592.patch
  fix CVE-2021-3594 [bsc#1187367], invalid pointer initialization may lead to information disclosure (udp)
  + libslirp-CVE-2021-3594.patch
  fix CVE-2021-3595 [bsc#1187366], invalid pointer initialization may lead to information disclosure (tftp)
  + libslirp-CVE-2021-3595.patch</changelog>
  <changelog author="sflees@suse.de" date="1650888000">- Fix a dhcp regression [bsc#1198773]
  +libslirp-fix-dhcp-1.patch
  +libslirp-fix-dhcp-2.patch</changelog>
</package>
<package pkgid="d863049424901dacf9c6e28f4cdd4118ec2469b5550035654cf463732aadb284" name="libslirp0" arch="ppc64le">
  <version epoch="0" ver="4.3.1" rel="150300.2.7.1"/>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Initial package, adapted specfile from Fedora to work on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1588593600">- Update to 4.3.0
- Fix use-afte-free in ip_reass() (CVE-2020-1983)</changelog>
  <changelog author="rhafer@suse.com" date="1594209600">- Update to 4.3.1 (bsc#1172380)
  - A silent truncation could occur in `slirp_fmt()`, which will
    now print a critical message. See also #22.
  - CVE-2020-10756 - Drop bogus IPv6 messages that could lead to
    data leakage.  See !44 and !42.
  - Fix win32 builds by using the SLIRP_PACKED definition.
  - Various coverity scan errors fixed. !41
  - Fix new GCC warnings. !43
- Packaging changes
  - Enable "set_version" source service in _service file
  - Move "tar" and "recompress" service to "buildtime" as outlined
    in the OBS user guide
  - Enable "package-meta" as the libslirp build process now
    requires access to the git metadata.</changelog>
  <changelog author="pgajdos@suse.com" date="1645617600">- security update
- added patches
  fix CVE-2021-3592 [bsc#1187364], invalid pointer initialization may lead to information disclosure (bootp)
  + libslirp-CVE-2021-3592.patch
  fix CVE-2021-3594 [bsc#1187367], invalid pointer initialization may lead to information disclosure (udp)
  + libslirp-CVE-2021-3594.patch
  fix CVE-2021-3595 [bsc#1187366], invalid pointer initialization may lead to information disclosure (tftp)
  + libslirp-CVE-2021-3595.patch</changelog>
  <changelog author="sflees@suse.de" date="1650888000">- Fix a dhcp regression [bsc#1198773]
  +libslirp-fix-dhcp-1.patch
  +libslirp-fix-dhcp-2.patch</changelog>
</package>
<package pkgid="2061739df6624b5e78a65a9e6dfbb2aae0060429cbf3759f1b422ca1aaee5d3c" name="libslirp0" arch="s390x">
  <version epoch="0" ver="4.3.1" rel="150300.2.7.1"/>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Initial package, adapted specfile from Fedora to work on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1588593600">- Update to 4.3.0
- Fix use-afte-free in ip_reass() (CVE-2020-1983)</changelog>
  <changelog author="rhafer@suse.com" date="1594209600">- Update to 4.3.1 (bsc#1172380)
  - A silent truncation could occur in `slirp_fmt()`, which will
    now print a critical message. See also #22.
  - CVE-2020-10756 - Drop bogus IPv6 messages that could lead to
    data leakage.  See !44 and !42.
  - Fix win32 builds by using the SLIRP_PACKED definition.
  - Various coverity scan errors fixed. !41
  - Fix new GCC warnings. !43
- Packaging changes
  - Enable "set_version" source service in _service file
  - Move "tar" and "recompress" service to "buildtime" as outlined
    in the OBS user guide
  - Enable "package-meta" as the libslirp build process now
    requires access to the git metadata.</changelog>
  <changelog author="pgajdos@suse.com" date="1645617600">- security update
- added patches
  fix CVE-2021-3592 [bsc#1187364], invalid pointer initialization may lead to information disclosure (bootp)
  + libslirp-CVE-2021-3592.patch
  fix CVE-2021-3594 [bsc#1187367], invalid pointer initialization may lead to information disclosure (udp)
  + libslirp-CVE-2021-3594.patch
  fix CVE-2021-3595 [bsc#1187366], invalid pointer initialization may lead to information disclosure (tftp)
  + libslirp-CVE-2021-3595.patch</changelog>
  <changelog author="sflees@suse.de" date="1650888000">- Fix a dhcp regression [bsc#1198773]
  +libslirp-fix-dhcp-1.patch
  +libslirp-fix-dhcp-2.patch</changelog>
</package>
<package pkgid="b5401cb74c0f2014242937bb6984f1f5dbdbc73b549a5cffd5ba22898364f41d" name="libslirp0" arch="x86_64">
  <version epoch="0" ver="4.3.1" rel="150300.2.7.1"/>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Initial package, adapted specfile from Fedora to work on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1588593600">- Update to 4.3.0
- Fix use-afte-free in ip_reass() (CVE-2020-1983)</changelog>
  <changelog author="rhafer@suse.com" date="1594209600">- Update to 4.3.1 (bsc#1172380)
  - A silent truncation could occur in `slirp_fmt()`, which will
    now print a critical message. See also #22.
  - CVE-2020-10756 - Drop bogus IPv6 messages that could lead to
    data leakage.  See !44 and !42.
  - Fix win32 builds by using the SLIRP_PACKED definition.
  - Various coverity scan errors fixed. !41
  - Fix new GCC warnings. !43
- Packaging changes
  - Enable "set_version" source service in _service file
  - Move "tar" and "recompress" service to "buildtime" as outlined
    in the OBS user guide
  - Enable "package-meta" as the libslirp build process now
    requires access to the git metadata.</changelog>
  <changelog author="pgajdos@suse.com" date="1645617600">- security update
- added patches
  fix CVE-2021-3592 [bsc#1187364], invalid pointer initialization may lead to information disclosure (bootp)
  + libslirp-CVE-2021-3592.patch
  fix CVE-2021-3594 [bsc#1187367], invalid pointer initialization may lead to information disclosure (udp)
  + libslirp-CVE-2021-3594.patch
  fix CVE-2021-3595 [bsc#1187366], invalid pointer initialization may lead to information disclosure (tftp)
  + libslirp-CVE-2021-3595.patch</changelog>
  <changelog author="sflees@suse.de" date="1650888000">- Fix a dhcp regression [bsc#1198773]
  +libslirp-fix-dhcp-1.patch
  +libslirp-fix-dhcp-2.patch</changelog>
</package>
<package pkgid="ef8fa2423c1e3a95800bf0b0cd14040aba94bfe3c615c15adb2d59ead2b2c8b2" name="libslirp0" arch="aarch64">
  <version epoch="0" ver="4.3.1" rel="150300.6.2"/>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Initial package, adapted specfile from Fedora to work on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1588593600">- Update to 4.3.0
- Fix use-afte-free in ip_reass() (CVE-2020-1983)</changelog>
  <changelog author="rhafer@suse.com" date="1594209600">- Update to 4.3.1 (bsc#1172380)
  - A silent truncation could occur in `slirp_fmt()`, which will
    now print a critical message. See also #22.
  - CVE-2020-10756 - Drop bogus IPv6 messages that could lead to
    data leakage.  See !44 and !42.
  - Fix win32 builds by using the SLIRP_PACKED definition.
  - Various coverity scan errors fixed. !41
  - Fix new GCC warnings. !43
- Packaging changes
  - Enable "set_version" source service in _service file
  - Move "tar" and "recompress" service to "buildtime" as outlined
    in the OBS user guide
  - Enable "package-meta" as the libslirp build process now
    requires access to the git metadata.</changelog>
  <changelog author="pgajdos@suse.com" date="1645617600">- security update
- added patches
  fix CVE-2021-3592 [bsc#1187364], invalid pointer initialization may lead to information disclosure (bootp)
  + libslirp-CVE-2021-3592.patch
  fix CVE-2021-3594 [bsc#1187367], invalid pointer initialization may lead to information disclosure (udp)
  + libslirp-CVE-2021-3594.patch
  fix CVE-2021-3595 [bsc#1187366], invalid pointer initialization may lead to information disclosure (tftp)
  + libslirp-CVE-2021-3595.patch</changelog>
  <changelog author="sflees@suse.de" date="1650888000">- Fix a dhcp regression [bsc#1198773]
  +libslirp-fix-dhcp-1.patch
  +libslirp-fix-dhcp-2.patch</changelog>
</package>
<package pkgid="96f8957dcbef66aa470f4c7acfaa69b72ee406269f9d23e283bce4113d5afd1a" name="libslirp0" arch="ppc64le">
  <version epoch="0" ver="4.3.1" rel="150300.6.2"/>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Initial package, adapted specfile from Fedora to work on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1588593600">- Update to 4.3.0
- Fix use-afte-free in ip_reass() (CVE-2020-1983)</changelog>
  <changelog author="rhafer@suse.com" date="1594209600">- Update to 4.3.1 (bsc#1172380)
  - A silent truncation could occur in `slirp_fmt()`, which will
    now print a critical message. See also #22.
  - CVE-2020-10756 - Drop bogus IPv6 messages that could lead to
    data leakage.  See !44 and !42.
  - Fix win32 builds by using the SLIRP_PACKED definition.
  - Various coverity scan errors fixed. !41
  - Fix new GCC warnings. !43
- Packaging changes
  - Enable "set_version" source service in _service file
  - Move "tar" and "recompress" service to "buildtime" as outlined
    in the OBS user guide
  - Enable "package-meta" as the libslirp build process now
    requires access to the git metadata.</changelog>
  <changelog author="pgajdos@suse.com" date="1645617600">- security update
- added patches
  fix CVE-2021-3592 [bsc#1187364], invalid pointer initialization may lead to information disclosure (bootp)
  + libslirp-CVE-2021-3592.patch
  fix CVE-2021-3594 [bsc#1187367], invalid pointer initialization may lead to information disclosure (udp)
  + libslirp-CVE-2021-3594.patch
  fix CVE-2021-3595 [bsc#1187366], invalid pointer initialization may lead to information disclosure (tftp)
  + libslirp-CVE-2021-3595.patch</changelog>
  <changelog author="sflees@suse.de" date="1650888000">- Fix a dhcp regression [bsc#1198773]
  +libslirp-fix-dhcp-1.patch
  +libslirp-fix-dhcp-2.patch</changelog>
</package>
<package pkgid="ca3058d8aef5d123983148a1cd3654f32eede8dcbd1a88db3d904e3b4990efd9" name="libslirp0" arch="s390x">
  <version epoch="0" ver="4.3.1" rel="150300.6.2"/>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Initial package, adapted specfile from Fedora to work on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1588593600">- Update to 4.3.0
- Fix use-afte-free in ip_reass() (CVE-2020-1983)</changelog>
  <changelog author="rhafer@suse.com" date="1594209600">- Update to 4.3.1 (bsc#1172380)
  - A silent truncation could occur in `slirp_fmt()`, which will
    now print a critical message. See also #22.
  - CVE-2020-10756 - Drop bogus IPv6 messages that could lead to
    data leakage.  See !44 and !42.
  - Fix win32 builds by using the SLIRP_PACKED definition.
  - Various coverity scan errors fixed. !41
  - Fix new GCC warnings. !43
- Packaging changes
  - Enable "set_version" source service in _service file
  - Move "tar" and "recompress" service to "buildtime" as outlined
    in the OBS user guide
  - Enable "package-meta" as the libslirp build process now
    requires access to the git metadata.</changelog>
  <changelog author="pgajdos@suse.com" date="1645617600">- security update
- added patches
  fix CVE-2021-3592 [bsc#1187364], invalid pointer initialization may lead to information disclosure (bootp)
  + libslirp-CVE-2021-3592.patch
  fix CVE-2021-3594 [bsc#1187367], invalid pointer initialization may lead to information disclosure (udp)
  + libslirp-CVE-2021-3594.patch
  fix CVE-2021-3595 [bsc#1187366], invalid pointer initialization may lead to information disclosure (tftp)
  + libslirp-CVE-2021-3595.patch</changelog>
  <changelog author="sflees@suse.de" date="1650888000">- Fix a dhcp regression [bsc#1198773]
  +libslirp-fix-dhcp-1.patch
  +libslirp-fix-dhcp-2.patch</changelog>
</package>
<package pkgid="2551d83795abedf2985ccfee5b65143babe6ac32f2fb90432bd20ae77eab3f2e" name="libslirp0" arch="x86_64">
  <version epoch="0" ver="4.3.1" rel="150300.6.2"/>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Initial package, adapted specfile from Fedora to work on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1588593600">- Update to 4.3.0
- Fix use-afte-free in ip_reass() (CVE-2020-1983)</changelog>
  <changelog author="rhafer@suse.com" date="1594209600">- Update to 4.3.1 (bsc#1172380)
  - A silent truncation could occur in `slirp_fmt()`, which will
    now print a critical message. See also #22.
  - CVE-2020-10756 - Drop bogus IPv6 messages that could lead to
    data leakage.  See !44 and !42.
  - Fix win32 builds by using the SLIRP_PACKED definition.
  - Various coverity scan errors fixed. !41
  - Fix new GCC warnings. !43
- Packaging changes
  - Enable "set_version" source service in _service file
  - Move "tar" and "recompress" service to "buildtime" as outlined
    in the OBS user guide
  - Enable "package-meta" as the libslirp build process now
    requires access to the git metadata.</changelog>
  <changelog author="pgajdos@suse.com" date="1645617600">- security update
- added patches
  fix CVE-2021-3592 [bsc#1187364], invalid pointer initialization may lead to information disclosure (bootp)
  + libslirp-CVE-2021-3592.patch
  fix CVE-2021-3594 [bsc#1187367], invalid pointer initialization may lead to information disclosure (udp)
  + libslirp-CVE-2021-3594.patch
  fix CVE-2021-3595 [bsc#1187366], invalid pointer initialization may lead to information disclosure (tftp)
  + libslirp-CVE-2021-3595.patch</changelog>
  <changelog author="sflees@suse.de" date="1650888000">- Fix a dhcp regression [bsc#1198773]
  +libslirp-fix-dhcp-1.patch
  +libslirp-fix-dhcp-2.patch</changelog>
</package>
<package pkgid="956117ae3efb09bde71807785508b2a75f7d8d04e054b31a833cfc0e9acf5834" name="libslurm36" arch="aarch64">
  <version epoch="0" ver="20.11.9" rel="150300.4.6.1"/>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
  <changelog author="eich@suse.com" date="1651838400">- Add 'CommunicationParameters=block_null_hash' to slurm.conf, please
  add this parameter to existing configurations as part of CVE-2022-29500:
  This new option provides additional protection against a potential exploit.
- Update to 20.11.9:
  * burst_buffer - add missing common directory to the Makefile SUBDIRS.
  * sacct - fix truncation when printing jobidraw field.
  * GRES - Fix loading state of jobs using --gpus to request gpus.
  * Fix minor logic error in health check node state output
  * Fix GCC 11.1 compiler warnings.
  * Delay steps when memory already used instead of rejecting step request.
  * Fix memory leak in the slurmdbd when requesting wckeys from all clusters.
  * Fix determining if a reservation is used or not.
  * openapi/v0.0.35 - Honor kill_on_invalid_dependency as job parameter.
  * openapi/v0.0.36 - Honor kill_on_invalid_dependency as job parameter.
  * Fix various issues dealing with updates on magnetic reservations that could
    lead to abort slurmctld.
  * openapi/v0.0.36 - Avoid setting default values of min_cpus, job name, cwd,
    mail_type, and contiguous on job update.
  * openapi/v0.0.36 - Clear user hold on job update if hold=false.
  * Fix slurmctld segfault due to a bit_test() call with a MAINT+ANY_NODES
    reservation NULL node_bitmap.
  * Fix slurmctld segfault due to a bit_copy() call with a REPLACE+ANY_NODES
    reservation NULL node_bitmap.
  * Fix error in GPU frequency validation logic.
  * Fix error in pmix logic dealing with the incorrect size of buffer.
  * PMIx v1.1.4 and below are no longer supported.
  * Fix shutdown of slurmdbd plugin to correctly notice when the agent thread
    finishes.
  * Fix slurmctld segfault due to job array  --batch features double free.
  * CVE-2022-29500 - Prevent credential abuse (bsc#1199278).
  * CVE-2022-29501 - Prevent abuse of REQUEST_FORWARD_DATA (bsc#1199279).
- Update to 20.11.8:
  * slurmctld - fix erroneous "StepId=CORRUPT" messages in error logs.
  * Correct the error given when auth plugin fails to pack a credential.
  * Fix unused-variable compiler warning on FreeBSD in fd_resolve_path().
  * acct_gather_filesystem/lustre - only emit collection error once per step.
  * srun - leave SLURM_DIST_UNKNOWN as default for  --interactive.
  * Add GRES environment variables (e.g., CUDA_VISIBLE_DEVICES) into the
    interactive step, the same as is done for the batch step.
  * Fix various potential deadlocks when altering objects in the database
    dealing with every cluster in the database.
  * slurmrestd - handle slurmdbd connection failures without segfaulting.
  * slurmrestd - fix segfault for searches in slurmdb/v0.0.36/jobs.
  * slurmrestd - remove (non-functioning) users query parameter for
    slurmdb/v0.0.36/jobs from openapi.json
  * slurmrestd - fix segfault in slurmrestd db/jobs with numeric queries
  * slurmrestd - add argv handling for job/submit endpoint.
  * srun - fix broken node step allocation in a heterogeneous allocation.
  * Fail step creation if -n is not multiple of  --ntasks-per-gpu.
  * job_container/tmpfs - Fix slowdown on teardown.
  * Fix problem with SlurmctldProlog where requeued jobs would never launch.
  * job_container/tmpfs - Fix issue when restarting slurmd where the namespace
    mount points could disappear.
  * sacct - avoid truncating JobId at 34 characters.
  * scancel - fix segfault when --wckey filtering option is used.
  * select/cons_tres - Fix memory leak.
  * Prevent file descriptor leak in job_container/tmpfs on slurmd restart.
  * slurmrestd/dbv0.0.36 - Fix values dumped in job state/current and
    job step state.
  * slurmrestd/dbv0.0.36 - Correct description for previous state property.
  * perlapi/libslurmdb - expose tres_req_str to job hash.
  * scrontab - close and reopen temporary crontab file to deal with editors
    that do not change the original file, but instead write out then rename
    a new file.
  * sstat - fix linking so that it will work when --without-shared-libslurm
    was used to build Slurm.
  * Clear allocated cpus for running steps in a job before handling requested
    nodes on new step.
  * Don't reject a step if not enough nodes are available. Instead, defer the
    step until enough nodes are available to satisfy the request.
  * Don't reject a step if it requests at least one specific node that is
    already allocated to another step. Instead, defer the step until the
    requested node(s) become available.
  * slurmrestd - add description for slurmdb/job endpoint.
  * Better handling of --mem=0.
  * Ignore DefCpuPerGpu when --cpus-per-task given.
  * sacct - fix segfault when printing StepId (or when using --long).</changelog>
</package>
<package pkgid="b8e9a18a3669437318eb8126e7ceb909615d7e40f26eb43ad8fb2a41e9a8ceda" name="libslurm36" arch="ppc64le">
  <version epoch="0" ver="20.11.9" rel="150300.4.6.1"/>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
  <changelog author="eich@suse.com" date="1651838400">- Add 'CommunicationParameters=block_null_hash' to slurm.conf, please
  add this parameter to existing configurations as part of CVE-2022-29500:
  This new option provides additional protection against a potential exploit.
- Update to 20.11.9:
  * burst_buffer - add missing common directory to the Makefile SUBDIRS.
  * sacct - fix truncation when printing jobidraw field.
  * GRES - Fix loading state of jobs using --gpus to request gpus.
  * Fix minor logic error in health check node state output
  * Fix GCC 11.1 compiler warnings.
  * Delay steps when memory already used instead of rejecting step request.
  * Fix memory leak in the slurmdbd when requesting wckeys from all clusters.
  * Fix determining if a reservation is used or not.
  * openapi/v0.0.35 - Honor kill_on_invalid_dependency as job parameter.
  * openapi/v0.0.36 - Honor kill_on_invalid_dependency as job parameter.
  * Fix various issues dealing with updates on magnetic reservations that could
    lead to abort slurmctld.
  * openapi/v0.0.36 - Avoid setting default values of min_cpus, job name, cwd,
    mail_type, and contiguous on job update.
  * openapi/v0.0.36 - Clear user hold on job update if hold=false.
  * Fix slurmctld segfault due to a bit_test() call with a MAINT+ANY_NODES
    reservation NULL node_bitmap.
  * Fix slurmctld segfault due to a bit_copy() call with a REPLACE+ANY_NODES
    reservation NULL node_bitmap.
  * Fix error in GPU frequency validation logic.
  * Fix error in pmix logic dealing with the incorrect size of buffer.
  * PMIx v1.1.4 and below are no longer supported.
  * Fix shutdown of slurmdbd plugin to correctly notice when the agent thread
    finishes.
  * Fix slurmctld segfault due to job array  --batch features double free.
  * CVE-2022-29500 - Prevent credential abuse (bsc#1199278).
  * CVE-2022-29501 - Prevent abuse of REQUEST_FORWARD_DATA (bsc#1199279).
- Update to 20.11.8:
  * slurmctld - fix erroneous "StepId=CORRUPT" messages in error logs.
  * Correct the error given when auth plugin fails to pack a credential.
  * Fix unused-variable compiler warning on FreeBSD in fd_resolve_path().
  * acct_gather_filesystem/lustre - only emit collection error once per step.
  * srun - leave SLURM_DIST_UNKNOWN as default for  --interactive.
  * Add GRES environment variables (e.g., CUDA_VISIBLE_DEVICES) into the
    interactive step, the same as is done for the batch step.
  * Fix various potential deadlocks when altering objects in the database
    dealing with every cluster in the database.
  * slurmrestd - handle slurmdbd connection failures without segfaulting.
  * slurmrestd - fix segfault for searches in slurmdb/v0.0.36/jobs.
  * slurmrestd - remove (non-functioning) users query parameter for
    slurmdb/v0.0.36/jobs from openapi.json
  * slurmrestd - fix segfault in slurmrestd db/jobs with numeric queries
  * slurmrestd - add argv handling for job/submit endpoint.
  * srun - fix broken node step allocation in a heterogeneous allocation.
  * Fail step creation if -n is not multiple of  --ntasks-per-gpu.
  * job_container/tmpfs - Fix slowdown on teardown.
  * Fix problem with SlurmctldProlog where requeued jobs would never launch.
  * job_container/tmpfs - Fix issue when restarting slurmd where the namespace
    mount points could disappear.
  * sacct - avoid truncating JobId at 34 characters.
  * scancel - fix segfault when --wckey filtering option is used.
  * select/cons_tres - Fix memory leak.
  * Prevent file descriptor leak in job_container/tmpfs on slurmd restart.
  * slurmrestd/dbv0.0.36 - Fix values dumped in job state/current and
    job step state.
  * slurmrestd/dbv0.0.36 - Correct description for previous state property.
  * perlapi/libslurmdb - expose tres_req_str to job hash.
  * scrontab - close and reopen temporary crontab file to deal with editors
    that do not change the original file, but instead write out then rename
    a new file.
  * sstat - fix linking so that it will work when --without-shared-libslurm
    was used to build Slurm.
  * Clear allocated cpus for running steps in a job before handling requested
    nodes on new step.
  * Don't reject a step if not enough nodes are available. Instead, defer the
    step until enough nodes are available to satisfy the request.
  * Don't reject a step if it requests at least one specific node that is
    already allocated to another step. Instead, defer the step until the
    requested node(s) become available.
  * slurmrestd - add description for slurmdb/job endpoint.
  * Better handling of --mem=0.
  * Ignore DefCpuPerGpu when --cpus-per-task given.
  * sacct - fix segfault when printing StepId (or when using --long).</changelog>
</package>
<package pkgid="104381df327cbffda45e931f4e1c494df767a382cdd03e0a0980a555e363bcd9" name="libslurm36" arch="s390x">
  <version epoch="0" ver="20.11.9" rel="150300.4.6.1"/>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
  <changelog author="eich@suse.com" date="1651838400">- Add 'CommunicationParameters=block_null_hash' to slurm.conf, please
  add this parameter to existing configurations as part of CVE-2022-29500:
  This new option provides additional protection against a potential exploit.
- Update to 20.11.9:
  * burst_buffer - add missing common directory to the Makefile SUBDIRS.
  * sacct - fix truncation when printing jobidraw field.
  * GRES - Fix loading state of jobs using --gpus to request gpus.
  * Fix minor logic error in health check node state output
  * Fix GCC 11.1 compiler warnings.
  * Delay steps when memory already used instead of rejecting step request.
  * Fix memory leak in the slurmdbd when requesting wckeys from all clusters.
  * Fix determining if a reservation is used or not.
  * openapi/v0.0.35 - Honor kill_on_invalid_dependency as job parameter.
  * openapi/v0.0.36 - Honor kill_on_invalid_dependency as job parameter.
  * Fix various issues dealing with updates on magnetic reservations that could
    lead to abort slurmctld.
  * openapi/v0.0.36 - Avoid setting default values of min_cpus, job name, cwd,
    mail_type, and contiguous on job update.
  * openapi/v0.0.36 - Clear user hold on job update if hold=false.
  * Fix slurmctld segfault due to a bit_test() call with a MAINT+ANY_NODES
    reservation NULL node_bitmap.
  * Fix slurmctld segfault due to a bit_copy() call with a REPLACE+ANY_NODES
    reservation NULL node_bitmap.
  * Fix error in GPU frequency validation logic.
  * Fix error in pmix logic dealing with the incorrect size of buffer.
  * PMIx v1.1.4 and below are no longer supported.
  * Fix shutdown of slurmdbd plugin to correctly notice when the agent thread
    finishes.
  * Fix slurmctld segfault due to job array  --batch features double free.
  * CVE-2022-29500 - Prevent credential abuse (bsc#1199278).
  * CVE-2022-29501 - Prevent abuse of REQUEST_FORWARD_DATA (bsc#1199279).
- Update to 20.11.8:
  * slurmctld - fix erroneous "StepId=CORRUPT" messages in error logs.
  * Correct the error given when auth plugin fails to pack a credential.
  * Fix unused-variable compiler warning on FreeBSD in fd_resolve_path().
  * acct_gather_filesystem/lustre - only emit collection error once per step.
  * srun - leave SLURM_DIST_UNKNOWN as default for  --interactive.
  * Add GRES environment variables (e.g., CUDA_VISIBLE_DEVICES) into the
    interactive step, the same as is done for the batch step.
  * Fix various potential deadlocks when altering objects in the database
    dealing with every cluster in the database.
  * slurmrestd - handle slurmdbd connection failures without segfaulting.
  * slurmrestd - fix segfault for searches in slurmdb/v0.0.36/jobs.
  * slurmrestd - remove (non-functioning) users query parameter for
    slurmdb/v0.0.36/jobs from openapi.json
  * slurmrestd - fix segfault in slurmrestd db/jobs with numeric queries
  * slurmrestd - add argv handling for job/submit endpoint.
  * srun - fix broken node step allocation in a heterogeneous allocation.
  * Fail step creation if -n is not multiple of  --ntasks-per-gpu.
  * job_container/tmpfs - Fix slowdown on teardown.
  * Fix problem with SlurmctldProlog where requeued jobs would never launch.
  * job_container/tmpfs - Fix issue when restarting slurmd where the namespace
    mount points could disappear.
  * sacct - avoid truncating JobId at 34 characters.
  * scancel - fix segfault when --wckey filtering option is used.
  * select/cons_tres - Fix memory leak.
  * Prevent file descriptor leak in job_container/tmpfs on slurmd restart.
  * slurmrestd/dbv0.0.36 - Fix values dumped in job state/current and
    job step state.
  * slurmrestd/dbv0.0.36 - Correct description for previous state property.
  * perlapi/libslurmdb - expose tres_req_str to job hash.
  * scrontab - close and reopen temporary crontab file to deal with editors
    that do not change the original file, but instead write out then rename
    a new file.
  * sstat - fix linking so that it will work when --without-shared-libslurm
    was used to build Slurm.
  * Clear allocated cpus for running steps in a job before handling requested
    nodes on new step.
  * Don't reject a step if not enough nodes are available. Instead, defer the
    step until enough nodes are available to satisfy the request.
  * Don't reject a step if it requests at least one specific node that is
    already allocated to another step. Instead, defer the step until the
    requested node(s) become available.
  * slurmrestd - add description for slurmdb/job endpoint.
  * Better handling of --mem=0.
  * Ignore DefCpuPerGpu when --cpus-per-task given.
  * sacct - fix segfault when printing StepId (or when using --long).</changelog>
</package>
<package pkgid="7e7e673e1aa1be9e2e74aa703a445c8c9eb6d1f7fd3d6ac3315f0f1e161b5a38" name="libslurm36" arch="x86_64">
  <version epoch="0" ver="20.11.9" rel="150300.4.6.1"/>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
  <changelog author="eich@suse.com" date="1651838400">- Add 'CommunicationParameters=block_null_hash' to slurm.conf, please
  add this parameter to existing configurations as part of CVE-2022-29500:
  This new option provides additional protection against a potential exploit.
- Update to 20.11.9:
  * burst_buffer - add missing common directory to the Makefile SUBDIRS.
  * sacct - fix truncation when printing jobidraw field.
  * GRES - Fix loading state of jobs using --gpus to request gpus.
  * Fix minor logic error in health check node state output
  * Fix GCC 11.1 compiler warnings.
  * Delay steps when memory already used instead of rejecting step request.
  * Fix memory leak in the slurmdbd when requesting wckeys from all clusters.
  * Fix determining if a reservation is used or not.
  * openapi/v0.0.35 - Honor kill_on_invalid_dependency as job parameter.
  * openapi/v0.0.36 - Honor kill_on_invalid_dependency as job parameter.
  * Fix various issues dealing with updates on magnetic reservations that could
    lead to abort slurmctld.
  * openapi/v0.0.36 - Avoid setting default values of min_cpus, job name, cwd,
    mail_type, and contiguous on job update.
  * openapi/v0.0.36 - Clear user hold on job update if hold=false.
  * Fix slurmctld segfault due to a bit_test() call with a MAINT+ANY_NODES
    reservation NULL node_bitmap.
  * Fix slurmctld segfault due to a bit_copy() call with a REPLACE+ANY_NODES
    reservation NULL node_bitmap.
  * Fix error in GPU frequency validation logic.
  * Fix error in pmix logic dealing with the incorrect size of buffer.
  * PMIx v1.1.4 and below are no longer supported.
  * Fix shutdown of slurmdbd plugin to correctly notice when the agent thread
    finishes.
  * Fix slurmctld segfault due to job array  --batch features double free.
  * CVE-2022-29500 - Prevent credential abuse (bsc#1199278).
  * CVE-2022-29501 - Prevent abuse of REQUEST_FORWARD_DATA (bsc#1199279).
- Update to 20.11.8:
  * slurmctld - fix erroneous "StepId=CORRUPT" messages in error logs.
  * Correct the error given when auth plugin fails to pack a credential.
  * Fix unused-variable compiler warning on FreeBSD in fd_resolve_path().
  * acct_gather_filesystem/lustre - only emit collection error once per step.
  * srun - leave SLURM_DIST_UNKNOWN as default for  --interactive.
  * Add GRES environment variables (e.g., CUDA_VISIBLE_DEVICES) into the
    interactive step, the same as is done for the batch step.
  * Fix various potential deadlocks when altering objects in the database
    dealing with every cluster in the database.
  * slurmrestd - handle slurmdbd connection failures without segfaulting.
  * slurmrestd - fix segfault for searches in slurmdb/v0.0.36/jobs.
  * slurmrestd - remove (non-functioning) users query parameter for
    slurmdb/v0.0.36/jobs from openapi.json
  * slurmrestd - fix segfault in slurmrestd db/jobs with numeric queries
  * slurmrestd - add argv handling for job/submit endpoint.
  * srun - fix broken node step allocation in a heterogeneous allocation.
  * Fail step creation if -n is not multiple of  --ntasks-per-gpu.
  * job_container/tmpfs - Fix slowdown on teardown.
  * Fix problem with SlurmctldProlog where requeued jobs would never launch.
  * job_container/tmpfs - Fix issue when restarting slurmd where the namespace
    mount points could disappear.
  * sacct - avoid truncating JobId at 34 characters.
  * scancel - fix segfault when --wckey filtering option is used.
  * select/cons_tres - Fix memory leak.
  * Prevent file descriptor leak in job_container/tmpfs on slurmd restart.
  * slurmrestd/dbv0.0.36 - Fix values dumped in job state/current and
    job step state.
  * slurmrestd/dbv0.0.36 - Correct description for previous state property.
  * perlapi/libslurmdb - expose tres_req_str to job hash.
  * scrontab - close and reopen temporary crontab file to deal with editors
    that do not change the original file, but instead write out then rename
    a new file.
  * sstat - fix linking so that it will work when --without-shared-libslurm
    was used to build Slurm.
  * Clear allocated cpus for running steps in a job before handling requested
    nodes on new step.
  * Don't reject a step if not enough nodes are available. Instead, defer the
    step until enough nodes are available to satisfy the request.
  * Don't reject a step if it requests at least one specific node that is
    already allocated to another step. Instead, defer the step until the
    requested node(s) become available.
  * slurmrestd - add description for slurmdb/job endpoint.
  * Better handling of --mem=0.
  * Ignore DefCpuPerGpu when --cpus-per-task given.
  * sacct - fix segfault when printing StepId (or when using --long).</changelog>
</package>
<package pkgid="9f9aa54f9f3b4f48dc210fbcf58aba1772b53d0af1fc090c15c55a96e5df0d31" name="libstdc++6" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="de614822fc73cae5bb2968632c984ecfed147a5601208f46e14cdb1249956df1" name="libstdc++6" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="ec9db854f7b00e53c6f38e8dd5698f7b144d02deb8b42090f0535fb096bba02b" name="libstdc++6" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="b0c82fb571e028aa1d6be23023b8fb21570b66fbe3153e6dccf5c7f024edef0e" name="libstdc++6" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="190378bb6557332b887a03d4be16e2701f6420ed67f2f702c71bf7db0ff7a58b" name="libstdc++6-32bit" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="32c6dcf701dce05169be8cbee367466e92cf058a3079f208bc89eac2a3af95f3" name="libstdc++6-32bit" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="459f839775b5513bf200e89bdc9aedb45a88d7a45d4154d96d5a5d1196e6e397" name="libstdc++6-devel-gcc11" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="c8cfefee803588c25198a8ecd975225655d02f89b0f8258a4ece04e37f37fc8e" name="libstdc++6-devel-gcc11" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="980517b52b72dc734c24c292ef587c08652726e3993ab0239d65e54bba8e4b26" name="libstdc++6-devel-gcc11" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="410c5cac6fdf691acb33666dbb4e946ad4dc36786b4d8918a84de3c5c0828894" name="libstdc++6-devel-gcc11" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="2b7076f0242fd68b604a2e6bf0098496b480b628013cb42f62c882b519939dbe" name="libstdc++6-devel-gcc11-32bit" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="40f7120327d0cad91e5540f334a708b57fbebd7250d577999a579e5241346394" name="libstdc++6-devel-gcc11-32bit" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="4281226462d5bc5be659042bca83c8e2948a8d78634d01e3eba583aa05290155" name="libstdc++6-devel-gcc8-32bit" arch="s390x">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="19d8b2b5969e35a7a60e5b341ba8e876fc40b8cacad9e27fc110a53dac71597c" name="libstdc++6-devel-gcc8-32bit" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="36923bc16461c8666726926293b0bb774911afa74cca26cd8d6fe0f8dcc58229" name="libstdc++6-devel-gcc8" arch="aarch64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="50d442ef5ef626a0b90ff70e2367af5998b19e4ae176e8657111ec40408472ca" name="libstdc++6-devel-gcc8" arch="ppc64le">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="89ce3989ebe27b6d9e9d067b00fd7146077151dcc6d7f57b264101801de36772" name="libstdc++6-devel-gcc8" arch="s390x">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="108459dfb6b0cb53287248d1f0fb713f1dfe54a67b38baec181e42cba66c6d59" name="libstdc++6-devel-gcc8" arch="x86_64">
  <version epoch="0" ver="8.2.1+r264010" rel="150000.1.6.4"/>
  <changelog author="rguenther@suse.com" date="1520510400">- Update to SVN trunk head (r258365).
  * adds pconfigintrin.h and wbnoinvdintrin.h intrinsic headers
    for x86</changelog>
  <changelog author="rguenther@suse.com" date="1520856000">- Update to SVN trunk head (r258445).</changelog>
  <changelog author="rguenther@suse.com" date="1521547200">- Update to SVN trunk head (r258674).
  * Add gcc8-pr84990.patch to fix bootstrap with Ada.
- Switch to release-checking builds.</changelog>
  <changelog author="rguenther@suse.com" date="1522756800">- Update to SVN trunk head (r259024).
  * Includes gcc8-pr84990.patch.
- Enable --enable-fix-cortex-a53-843419 for aarch64.  [bnc#1084812]</changelog>
  <changelog author="rguenther@suse.com" date="1523016000">- Update to SVN trunk head (r259162).
- Enable --enable-fix-cortex-a53-835769 for aarch64.
- Add gcc7-bnc1087550.diff to revert the ios_base::failure ABI
  back to compatible behavior with the default ABI.  [bnc#1087550]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Set SUSE_ASNEEDED to zero during %install so libasan keeps its
  NEEDED entry for libstdc++.so.  [GCC#84428]</changelog>
  <changelog author="rguenther@suse.com" date="1523448000">- Update to SVN trunk head (r259308).
  * contains fix for ios_base::failure ABI breakage.  [bnc#1087550]
- Remove now obsolete gcc7-bnc1087550.diff.</changelog>
  <changelog author="rguenther@suse.com" date="1524052800">- Update to SVN trunk head (r259467).</changelog>
  <changelog author="rguenther@suse.com" date="1524657600">- Update to gcc-8-branch head (r259636).
  * GCC 8.1 first release candidate.
  * package x86_64 movdirintrin.h</changelog>
  <changelog author="rguenther@suse.com" date="1525089600">- Update to gcc-8-branch head (r259752).
  * GCC 8.1 second release candidate.</changelog>
  <changelog author="rguenther@suse.com" date="1525262400">- Update to GCC 8.1 release.</changelog>
  <changelog author="schwab@suse.de" date="1525867200">- libffi-riscv.patch: Backport of RISC-V support for libffi</changelog>
  <changelog author="afaerber@suse.de" date="1526126400">- Add riscv64-elf cross target.
  Suffix has become necessary to distinguish from openSUSE target.</changelog>
  <changelog author="rguenther@suse.com" date="1527076800">- Update to gcc-8-branch head (r260570).
  * Adds fix for qtscript miscompile.
  * Avoids bogus strict-overflow warnings.  [bnc#1094222]</changelog>
  <changelog author="schwab@suse.de" date="1528804800">- riscv-builtin-eh-return.patch: Don't clobber retval when
  __builtin_eh_return called</changelog>
  <changelog author="rguenther@suse.com" date="1528977600">- Update to gcc-8-branch head (r261583).
  * Includes fix for C++ ABI issue with passing a class with a
    trivial move constructor and deleted copy constructor.
    [GCC#86094]</changelog>
  <changelog author="rguenther@suse.com" date="1532001600">- Update to gcc-8-branch head (r262873).
  * Includes fix to no longer try linking -lieee with -mieee-fp.
    [bnc#1084842]
  * Includes changes up to GCC 8.2 RC1.</changelog>
  <changelog author="rguenther@suse.com" date="1534507200">- Update to gcc-8-branch head (r263610).
  * Includes GCC 8.2 release.
  * Includes fix for build with ISL 0.20.</changelog>
  <changelog author="rguenther@suse.com" date="1535716800">- Update to gcc-8-branch head (r264010).
  * GCC 8 Toolchain Module state.  [bnc#1102564] [fate#326486]</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Add gcc7-sanitizer-cyclades.patch, gcc8-pr100144.patch and
  gcc8-pr92154.patch to fix build against SP4.  [bsc#1197716]
- Remove bogus fixed include bits/statx.h from glibc 2.30.
  [gcc#91085, bsc#1197716]</changelog>
</package>
<package pkgid="18958a644b68767b68fb489df44c3c1613c68a3909c2435a281ef55758f4ec0b" name="libstdc++6-locale" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="1aff8cf14447211d441f5bbba9f924216cccd6ae896264e1141790a3f076f9ba" name="libstdc++6-locale" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="ab62f56e5782dbb46ef89f7a6f8107a2765b21384ae1585b139baec3fb2cf83b" name="libstdc++6-locale" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="cfe4bda85c4fd8b7685c1e188fab86ca234106401e68e2da276551a85b7675af" name="libstdc++6-locale" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="27310737f629e53bbe29243eca11e1a207f5b25e25a6fc05ddf508a27385d103" name="libstdc++6-pp-gcc11" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="339eda0206886caba7a1f9e1ab791dd54b52678a1d310d63520d19c2e3c4b534" name="libstdc++6-pp-gcc11" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="ded77d4517e89f53716e702cbe56b4180a39790d0ffb65206032d609b03f0473" name="libstdc++6-pp-gcc11" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="35aacf1dfb12cc49c565214fbe372e377b2f38d0704a1a1619622b91129012de" name="libstdc++6-pp-gcc11" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="21ad50fb4650df87c95e7d084931f91047ea05e8350c8bc6e762cd3411a25b05" name="libstdc++6-pp-gcc11-32bit" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="1a451cd2cb66fba1960e6791ab4d20e134c33dc7827d923f7f0fb95b7451efc5" name="libstdc++6-pp-gcc11-32bit" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="7a011954a6fdc41a5b921c7c8f4bdfa23ceeb02894a310bb36489375410714fe" name="libstoken1" arch="aarch64">
  <version epoch="0" ver="0.81" rel="150000.3.2.1"/>
  <changelog author="rel-eng@lists.fedoraproject.org" date="1375617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="negativo17@gmail.com" date="1395057600">- Update to 0.5.
- Removed upstreamed patch.</changelog>
  <changelog author="rel-eng@lists.fedoraproject.org" date="1402228800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="negativo17@gmail.com" date="1403524800">- Update to 0.6.</changelog>
  <changelog author="darin@darins.net" date="1403784000">- Initial inclusion in openSUSE
  * Ported .spec from Fedora</changelog>
  <changelog author="darin@darins.net" date="1403784001">- fix requires</changelog>
  <changelog author="darin@darins.net" date="1404388800">- set deps to libtomcrypt0 which is the correct package name</changelog>
  <changelog author="darin@darins.net" date="1404388801">- fix libtomcrypt dep due to rename</changelog>
  <changelog author="darin@darins.net" date="1405425600">- define BuildRoot
- add Group for all packages
- add --disable-static to %configure</changelog>
  <changelog author="p.drouand@gmail.com" date="1427371200">- Update to version 0.81
  * Fix "make check" failures in GMT+xx timezones (xx &gt;= 1)
- Changes from version 0.8
  * Update GUI from GTK+2 to GTK+3; use glade to define the layouts
  * Add next tokencode and other information to the full GUI (stoken-gui).
    The "stoken-gui --small" layout is unchanged.
  * Add a list of known GUIDs used to bind tokens to specific device classes
    (i.e. tokens can be bound to "any BlackBerry 10").  stoken will now try
    each one of these IDs when importing a new bound token.
  * Add new --qr and --show-qr export options to make it easy to pass tokens
    to a mobile device
  * Add "stoken --next" option to show the next tokencode
  * Support using nettle+gmp as an alternative to libtomcrypt
  * Generate valid TKNTrailer BatchSignature sections in .sdtid output files,
    allowing use with RSA's official TokenConverter utility
  * Fix parsing of RSA-supplied hard token seed files
  * Add "make check" and several test cases
  * Fix build errors on Mac OSX, enable OSX Travis builds, and submit a
    Homebrew formula
  * Fix build errors when using uClibc instead of glibc
  * Add experimental Windows build using MinGW (see README for instructions)
  * Relicense the JNI wrapper (BSD-3-clause) so that it is easier to incorporate
    into non-free Android apps
  * Various fixes for minor bugs, memory leaks, etc.
- Replace pkgconfig(gtk+-2.0) require with pkgconfig(gtk+-3.0);
  follow upstream changes
- Fix license to LGPL-2.0+ and BSD-3-Clause; upstream has relicensed
  the JNI wrapper
- Add pkgconfig(nettle) require; new upstream dependency
- Add CHANGES and TODO to copied documentation list</changelog>
</package>
<package pkgid="8494aabaeb04335acf51d02b96fa0f7ab8cab07c8eeeb8296ef9905c0f121870" name="libstoken1" arch="ppc64le">
  <version epoch="0" ver="0.81" rel="150000.3.2.1"/>
  <changelog author="rel-eng@lists.fedoraproject.org" date="1375617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="negativo17@gmail.com" date="1395057600">- Update to 0.5.
- Removed upstreamed patch.</changelog>
  <changelog author="rel-eng@lists.fedoraproject.org" date="1402228800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="negativo17@gmail.com" date="1403524800">- Update to 0.6.</changelog>
  <changelog author="darin@darins.net" date="1403784000">- Initial inclusion in openSUSE
  * Ported .spec from Fedora</changelog>
  <changelog author="darin@darins.net" date="1403784001">- fix requires</changelog>
  <changelog author="darin@darins.net" date="1404388800">- set deps to libtomcrypt0 which is the correct package name</changelog>
  <changelog author="darin@darins.net" date="1404388801">- fix libtomcrypt dep due to rename</changelog>
  <changelog author="darin@darins.net" date="1405425600">- define BuildRoot
- add Group for all packages
- add --disable-static to %configure</changelog>
  <changelog author="p.drouand@gmail.com" date="1427371200">- Update to version 0.81
  * Fix "make check" failures in GMT+xx timezones (xx &gt;= 1)
- Changes from version 0.8
  * Update GUI from GTK+2 to GTK+3; use glade to define the layouts
  * Add next tokencode and other information to the full GUI (stoken-gui).
    The "stoken-gui --small" layout is unchanged.
  * Add a list of known GUIDs used to bind tokens to specific device classes
    (i.e. tokens can be bound to "any BlackBerry 10").  stoken will now try
    each one of these IDs when importing a new bound token.
  * Add new --qr and --show-qr export options to make it easy to pass tokens
    to a mobile device
  * Add "stoken --next" option to show the next tokencode
  * Support using nettle+gmp as an alternative to libtomcrypt
  * Generate valid TKNTrailer BatchSignature sections in .sdtid output files,
    allowing use with RSA's official TokenConverter utility
  * Fix parsing of RSA-supplied hard token seed files
  * Add "make check" and several test cases
  * Fix build errors on Mac OSX, enable OSX Travis builds, and submit a
    Homebrew formula
  * Fix build errors when using uClibc instead of glibc
  * Add experimental Windows build using MinGW (see README for instructions)
  * Relicense the JNI wrapper (BSD-3-clause) so that it is easier to incorporate
    into non-free Android apps
  * Various fixes for minor bugs, memory leaks, etc.
- Replace pkgconfig(gtk+-2.0) require with pkgconfig(gtk+-3.0);
  follow upstream changes
- Fix license to LGPL-2.0+ and BSD-3-Clause; upstream has relicensed
  the JNI wrapper
- Add pkgconfig(nettle) require; new upstream dependency
- Add CHANGES and TODO to copied documentation list</changelog>
</package>
<package pkgid="4d75026cf98280aaf321b6f40dee29b143541e3692c45e21ea9e2480016e6c06" name="libstoken1" arch="s390x">
  <version epoch="0" ver="0.81" rel="150000.3.2.1"/>
  <changelog author="rel-eng@lists.fedoraproject.org" date="1375617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="negativo17@gmail.com" date="1395057600">- Update to 0.5.
- Removed upstreamed patch.</changelog>
  <changelog author="rel-eng@lists.fedoraproject.org" date="1402228800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="negativo17@gmail.com" date="1403524800">- Update to 0.6.</changelog>
  <changelog author="darin@darins.net" date="1403784000">- Initial inclusion in openSUSE
  * Ported .spec from Fedora</changelog>
  <changelog author="darin@darins.net" date="1403784001">- fix requires</changelog>
  <changelog author="darin@darins.net" date="1404388800">- set deps to libtomcrypt0 which is the correct package name</changelog>
  <changelog author="darin@darins.net" date="1404388801">- fix libtomcrypt dep due to rename</changelog>
  <changelog author="darin@darins.net" date="1405425600">- define BuildRoot
- add Group for all packages
- add --disable-static to %configure</changelog>
  <changelog author="p.drouand@gmail.com" date="1427371200">- Update to version 0.81
  * Fix "make check" failures in GMT+xx timezones (xx &gt;= 1)
- Changes from version 0.8
  * Update GUI from GTK+2 to GTK+3; use glade to define the layouts
  * Add next tokencode and other information to the full GUI (stoken-gui).
    The "stoken-gui --small" layout is unchanged.
  * Add a list of known GUIDs used to bind tokens to specific device classes
    (i.e. tokens can be bound to "any BlackBerry 10").  stoken will now try
    each one of these IDs when importing a new bound token.
  * Add new --qr and --show-qr export options to make it easy to pass tokens
    to a mobile device
  * Add "stoken --next" option to show the next tokencode
  * Support using nettle+gmp as an alternative to libtomcrypt
  * Generate valid TKNTrailer BatchSignature sections in .sdtid output files,
    allowing use with RSA's official TokenConverter utility
  * Fix parsing of RSA-supplied hard token seed files
  * Add "make check" and several test cases
  * Fix build errors on Mac OSX, enable OSX Travis builds, and submit a
    Homebrew formula
  * Fix build errors when using uClibc instead of glibc
  * Add experimental Windows build using MinGW (see README for instructions)
  * Relicense the JNI wrapper (BSD-3-clause) so that it is easier to incorporate
    into non-free Android apps
  * Various fixes for minor bugs, memory leaks, etc.
- Replace pkgconfig(gtk+-2.0) require with pkgconfig(gtk+-3.0);
  follow upstream changes
- Fix license to LGPL-2.0+ and BSD-3-Clause; upstream has relicensed
  the JNI wrapper
- Add pkgconfig(nettle) require; new upstream dependency
- Add CHANGES and TODO to copied documentation list</changelog>
</package>
<package pkgid="ca5576792350515a6b2e55318050d1e0c5141f690f3c755cd5225d01730312a1" name="libstoken1" arch="x86_64">
  <version epoch="0" ver="0.81" rel="150000.3.2.1"/>
  <changelog author="rel-eng@lists.fedoraproject.org" date="1375617600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild</changelog>
  <changelog author="negativo17@gmail.com" date="1395057600">- Update to 0.5.
- Removed upstreamed patch.</changelog>
  <changelog author="rel-eng@lists.fedoraproject.org" date="1402228800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild</changelog>
  <changelog author="negativo17@gmail.com" date="1403524800">- Update to 0.6.</changelog>
  <changelog author="darin@darins.net" date="1403784000">- Initial inclusion in openSUSE
  * Ported .spec from Fedora</changelog>
  <changelog author="darin@darins.net" date="1403784001">- fix requires</changelog>
  <changelog author="darin@darins.net" date="1404388800">- set deps to libtomcrypt0 which is the correct package name</changelog>
  <changelog author="darin@darins.net" date="1404388801">- fix libtomcrypt dep due to rename</changelog>
  <changelog author="darin@darins.net" date="1405425600">- define BuildRoot
- add Group for all packages
- add --disable-static to %configure</changelog>
  <changelog author="p.drouand@gmail.com" date="1427371200">- Update to version 0.81
  * Fix "make check" failures in GMT+xx timezones (xx &gt;= 1)
- Changes from version 0.8
  * Update GUI from GTK+2 to GTK+3; use glade to define the layouts
  * Add next tokencode and other information to the full GUI (stoken-gui).
    The "stoken-gui --small" layout is unchanged.
  * Add a list of known GUIDs used to bind tokens to specific device classes
    (i.e. tokens can be bound to "any BlackBerry 10").  stoken will now try
    each one of these IDs when importing a new bound token.
  * Add new --qr and --show-qr export options to make it easy to pass tokens
    to a mobile device
  * Add "stoken --next" option to show the next tokencode
  * Support using nettle+gmp as an alternative to libtomcrypt
  * Generate valid TKNTrailer BatchSignature sections in .sdtid output files,
    allowing use with RSA's official TokenConverter utility
  * Fix parsing of RSA-supplied hard token seed files
  * Add "make check" and several test cases
  * Fix build errors on Mac OSX, enable OSX Travis builds, and submit a
    Homebrew formula
  * Fix build errors when using uClibc instead of glibc
  * Add experimental Windows build using MinGW (see README for instructions)
  * Relicense the JNI wrapper (BSD-3-clause) so that it is easier to incorporate
    into non-free Android apps
  * Various fixes for minor bugs, memory leaks, etc.
- Replace pkgconfig(gtk+-2.0) require with pkgconfig(gtk+-3.0);
  follow upstream changes
- Fix license to LGPL-2.0+ and BSD-3-Clause; upstream has relicensed
  the JNI wrapper
- Add pkgconfig(nettle) require; new upstream dependency
- Add CHANGES and TODO to copied documentation list</changelog>
</package>
<package pkgid="b58fe8e598a33a91127d12da9a0dfb714807f99f0835c71aba4c4b1a22ce549f" name="libtbb2" arch="aarch64">
  <version epoch="0" ver="2019_20190605" rel="150200.3.2.1"/>
  <changelog author="idonmez@suse.com" date="1474113600">- Updated to version 2017_20160722
  * static_partitioner class is now a fully supported feature.
  * async_node class is now a fully supported feature.
  * For 64-bit platforms, quadrupled the worst-case limit on the amount
    of memory the Intel TBB allocator can handle.
  * Added TBB_USE_GLIBCXX_VERSION macro to specify the version of GNU
    libstdc++ when it cannot be properly recognized, e.g. when used
    with Clang on Linux* OS. Inspired by a contribution from David A.
  * Added graph/stereo example to demostrate tbb::flow::async_msg.
  * Removed a few cases of excessive user data copying in the flow graph.
  * Reworked split_node to eliminate unnecessary overheads.
  * Added support for C++11 move semantics to the argument of
    tbb::parallel_do_feeder::add() method.
  * Added C++11 move constructor and assignment operator to
    tbb::combinable template class.
  * Added tbb::this_task_arena::max_concurrency() function and
    max_concurrency() method of class task_arena returning the maximal
    number of threads that can work inside an arena.
  * Deprecated tbb::task_arena::current_thread_index() static method;
    use tbb::this_task_arena::current_thread_index() function instead.
- License changed to Apache-2.0
- Please see included CHANGES file for all changes.</changelog>
  <changelog author="idonmez@suse.com" date="1478174400">- Update to version 2017_20161004
  * Fixed the issue with task_arena::execute() not being processed
    when the calling thread cannot join the arena.</changelog>
  <changelog author="idonmez@suse.com" date="1481544000">- Update to 2017_20161128 release
  * Added template class gfx_factory to the flow graph API. It
    implements the Factory concept for streaming_node to offload
    computations to Intel processor graphics.
  * Fixed a possible deadlock caused by missed wakeup signals in
    task_arena::execute().</changelog>
  <changelog author="idonmez@suse.com" date="1488715200">- Update to 2017_20170226 release
  * Added support for C++11 move semantics in parallel_do.
  * Constructors for many classes, including graph nodes, concurrent
    containers, thread-local containers, etc., are declared explicit
    and cannot be used for implicit conversions anymore.
  * Added a workaround for bug 16657 in the GNU C Library (glibc)
    affecting the debug version of tbb::mutex.
  * Fixed a crash in pool_identify() called for an object allocated in
    another thread.</changelog>
  <changelog author="idonmez@suse.com" date="1492603200">- Add missing include files boo#1034842</changelog>
  <changelog author="idonmez@suse.com" date="1495627200">- Update to version 2017_20170412 release
  * Added a blocking terminate extension to the task_scheduler_init
    class that allows an object to wait for termination of worker
    threads.</changelog>
  <changelog author="bwiedemann@suse.com" date="1496145600">- Add reproducible.patch to not add build hostname+kernel to binary</changelog>
  <changelog author="idonmez@suse.com" date="1505995200">- Update to version 2018 release
  * Now fully supports this_task_arena::isolate() function.
  * Parallel STL, an implementation of the C++ standard library
    algorithms with support for execution policies, has been
    introduced.
  * Fixed a bug preventing use of streaming_node and opencl_node
    with Clang.
  * Fixed this_task_arena::isolate() function to work correctly
    with parallel_invoke and parallel_do algorithms.
  * Fixed a memory leak in composite_node.
  * Fixed an assertion failure in debug tbbmalloc binaries when
    TBBMALLOC_CLEAN_ALL_BUFFERS is used.</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Build python2 and python3 bindings
- Do not bundle python bindings with shared library</changelog>
  <changelog author="idonmez@suse.com" date="1513425600">- Update to version 2018_U2
  * lambda-friendly overloads for parallel_scan.
  * support of static and simple partitioners in
    parallel_deterministic_reduce.
  * initial support for Flow Graph Analyzer to do parallel_for.
  * reservation support in overwrite_node and write_once_node.
  * Fixed a potential deadlock scenario in the flow graph that
    affected Intel TBB 2018 Initial Release.
  * Fixed constructors of concurrent_hash_map to be exception-safe.
  * Fixed auto-initialization in the main thread to be cleaned up at shutdown.
  * Fixed a crash when tbbmalloc_proxy is used together with dbghelp.
  * Fixed static_partitioner to assign tasks properly in case of nested parallelism.</changelog>
  <changelog author="idonmez@suse.com" date="1513857600">- Add disable-irml.patch to disable linking to libirml
- Actually update to tarball to 2018_U2 release</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Add conditions to build with py2 and py3 respectively in order
  to allow us disable one based on codestream</changelog>
  <changelog author="bwiedemann@suse.com" date="1533124800">- Extend reproducible.patch to override build date (boo#1047218)</changelog>
  <changelog author="bwiedemann@suse.com" date="1535112000">- Extend reproducible.patch to not capture build kernel version (boo#1101107)</changelog>
  <changelog author="idonmez@suse.com" date="1556193600">- Update to version 2019_U5
  * Too many changes to list, please see the included CHANGES file.
- Install TBBConfig*.cmake</changelog>
  <changelog author="idonmez@suse.com" date="1557835200">- Update to version 2019_U6
  * Added support for enqueuing tbb::task into tbb::task_arena
    (https://github.com/01org/tbb/issues/116).
  * Improved support for allocator propagation on concurrent_hash_map
    assigning and swapping.
  * Improved scalable_allocation_command cleanup operations to release
    more memory buffered by the calling thread.
  * Separated allocation of small and large objects into distinct memory
    regions, which helps to reduce excessive memory caching inside the
    TBB allocator.
- Disable python2 support</changelog>
  <changelog author="idonmez@suse.com" date="1559649600">- Update to version 2019_U7
  * Added TBBMALLOC_SET_HUGE_SIZE_THRESHOLD parameter to set the
    lower bound for allocations that are not released back to OS
    unless a cleanup is explicitly requested.
  * Added zip_iterator::base() method to get the tuple of underlying
    iterators.
  * Improved async_node to never block a thread that sends a message
    through its gateway.
  * Extended decrement port of the tbb::flow::limiter_node to accept
    messages of integral types.
  * Removed the number_of_decrement_predecessors parameter from the
    constructor of flow::limiter_node. To allow its usage, set
    TBB_DEPRECATED_LIMITER_NODE_CONSTRUCTOR macro to 1.
  * Added ordered associative containers:
    concurrent_{map,multimap,set,multiset} (requires C++11).</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Update to version 2019_U8
  * Fixed a bug in TBB 2019 Update 7 that could lead to incorrect memory
    reallocation on Linux (https://github.com/intel/tbb/issues/148).
  * Fixed enqueuing tbb::task into tbb::task_arena not to fail on threads
    with no task scheduler initialized
    (https://github.com/intel/tbb/issues/116).</changelog>
  <changelog author="idonmez@suse.com" date="1559908800">- Add cmake-remove-include-path.patch to remove setting include
  path since we already install under /usr/include and this fixes
  idiot OpenCV trying to do -isystem $TBB_INCLUDE_DIR</changelog>
  <changelog author="idonmez@suse.com" date="1570708800">- Update to version 2019_u9
  * Multiple APIs are deprecated. For details, please see
    Deprecated Features appendix in the TBB reference manual.
  * Added C++17 deduction guides for flow graph nodes.
  Preview Features
  * Added isolated_task_group class that allows multiple threads to add
    and execute tasks sharing the same isolation.
  * Extended the flow graph API to simplify connecting nodes.
  * Added erase() by heterogeneous keys for concurrent ordered containers.
  * Added a possibility to suspend task execution at a specific point
    and resume it later.
  Bugs fixed
  * Fixed the emplace() method of concurrent unordered containers to
    destroy a temporary element that was not inserted.
  * Fixed a bug in the merge() method of concurrent unordered
    containers.
  * Fixed behavior of a continue_node that follows buffering nodes.
  * Added support for move-only types to tbb::parallel_pipeline
  * Fixed detection of clang version when CUDA toolkit is installed
- Refresh patches:
  * cmake-remove-include-path.patch
  * disable-irml.patch
  * optflags.patch</changelog>
</package>
<package pkgid="6c2193a17125462b421fed7095ea8624db70e3346bbc57e2e48e199a8221ddcf" name="libtbb2" arch="ppc64le">
  <version epoch="0" ver="2019_20190605" rel="150200.3.2.1"/>
  <changelog author="idonmez@suse.com" date="1474113600">- Updated to version 2017_20160722
  * static_partitioner class is now a fully supported feature.
  * async_node class is now a fully supported feature.
  * For 64-bit platforms, quadrupled the worst-case limit on the amount
    of memory the Intel TBB allocator can handle.
  * Added TBB_USE_GLIBCXX_VERSION macro to specify the version of GNU
    libstdc++ when it cannot be properly recognized, e.g. when used
    with Clang on Linux* OS. Inspired by a contribution from David A.
  * Added graph/stereo example to demostrate tbb::flow::async_msg.
  * Removed a few cases of excessive user data copying in the flow graph.
  * Reworked split_node to eliminate unnecessary overheads.
  * Added support for C++11 move semantics to the argument of
    tbb::parallel_do_feeder::add() method.
  * Added C++11 move constructor and assignment operator to
    tbb::combinable template class.
  * Added tbb::this_task_arena::max_concurrency() function and
    max_concurrency() method of class task_arena returning the maximal
    number of threads that can work inside an arena.
  * Deprecated tbb::task_arena::current_thread_index() static method;
    use tbb::this_task_arena::current_thread_index() function instead.
- License changed to Apache-2.0
- Please see included CHANGES file for all changes.</changelog>
  <changelog author="idonmez@suse.com" date="1478174400">- Update to version 2017_20161004
  * Fixed the issue with task_arena::execute() not being processed
    when the calling thread cannot join the arena.</changelog>
  <changelog author="idonmez@suse.com" date="1481544000">- Update to 2017_20161128 release
  * Added template class gfx_factory to the flow graph API. It
    implements the Factory concept for streaming_node to offload
    computations to Intel processor graphics.
  * Fixed a possible deadlock caused by missed wakeup signals in
    task_arena::execute().</changelog>
  <changelog author="idonmez@suse.com" date="1488715200">- Update to 2017_20170226 release
  * Added support for C++11 move semantics in parallel_do.
  * Constructors for many classes, including graph nodes, concurrent
    containers, thread-local containers, etc., are declared explicit
    and cannot be used for implicit conversions anymore.
  * Added a workaround for bug 16657 in the GNU C Library (glibc)
    affecting the debug version of tbb::mutex.
  * Fixed a crash in pool_identify() called for an object allocated in
    another thread.</changelog>
  <changelog author="idonmez@suse.com" date="1492603200">- Add missing include files boo#1034842</changelog>
  <changelog author="idonmez@suse.com" date="1495627200">- Update to version 2017_20170412 release
  * Added a blocking terminate extension to the task_scheduler_init
    class that allows an object to wait for termination of worker
    threads.</changelog>
  <changelog author="bwiedemann@suse.com" date="1496145600">- Add reproducible.patch to not add build hostname+kernel to binary</changelog>
  <changelog author="idonmez@suse.com" date="1505995200">- Update to version 2018 release
  * Now fully supports this_task_arena::isolate() function.
  * Parallel STL, an implementation of the C++ standard library
    algorithms with support for execution policies, has been
    introduced.
  * Fixed a bug preventing use of streaming_node and opencl_node
    with Clang.
  * Fixed this_task_arena::isolate() function to work correctly
    with parallel_invoke and parallel_do algorithms.
  * Fixed a memory leak in composite_node.
  * Fixed an assertion failure in debug tbbmalloc binaries when
    TBBMALLOC_CLEAN_ALL_BUFFERS is used.</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Build python2 and python3 bindings
- Do not bundle python bindings with shared library</changelog>
  <changelog author="idonmez@suse.com" date="1513425600">- Update to version 2018_U2
  * lambda-friendly overloads for parallel_scan.
  * support of static and simple partitioners in
    parallel_deterministic_reduce.
  * initial support for Flow Graph Analyzer to do parallel_for.
  * reservation support in overwrite_node and write_once_node.
  * Fixed a potential deadlock scenario in the flow graph that
    affected Intel TBB 2018 Initial Release.
  * Fixed constructors of concurrent_hash_map to be exception-safe.
  * Fixed auto-initialization in the main thread to be cleaned up at shutdown.
  * Fixed a crash when tbbmalloc_proxy is used together with dbghelp.
  * Fixed static_partitioner to assign tasks properly in case of nested parallelism.</changelog>
  <changelog author="idonmez@suse.com" date="1513857600">- Add disable-irml.patch to disable linking to libirml
- Actually update to tarball to 2018_U2 release</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Add conditions to build with py2 and py3 respectively in order
  to allow us disable one based on codestream</changelog>
  <changelog author="bwiedemann@suse.com" date="1533124800">- Extend reproducible.patch to override build date (boo#1047218)</changelog>
  <changelog author="bwiedemann@suse.com" date="1535112000">- Extend reproducible.patch to not capture build kernel version (boo#1101107)</changelog>
  <changelog author="idonmez@suse.com" date="1556193600">- Update to version 2019_U5
  * Too many changes to list, please see the included CHANGES file.
- Install TBBConfig*.cmake</changelog>
  <changelog author="idonmez@suse.com" date="1557835200">- Update to version 2019_U6
  * Added support for enqueuing tbb::task into tbb::task_arena
    (https://github.com/01org/tbb/issues/116).
  * Improved support for allocator propagation on concurrent_hash_map
    assigning and swapping.
  * Improved scalable_allocation_command cleanup operations to release
    more memory buffered by the calling thread.
  * Separated allocation of small and large objects into distinct memory
    regions, which helps to reduce excessive memory caching inside the
    TBB allocator.
- Disable python2 support</changelog>
  <changelog author="idonmez@suse.com" date="1559649600">- Update to version 2019_U7
  * Added TBBMALLOC_SET_HUGE_SIZE_THRESHOLD parameter to set the
    lower bound for allocations that are not released back to OS
    unless a cleanup is explicitly requested.
  * Added zip_iterator::base() method to get the tuple of underlying
    iterators.
  * Improved async_node to never block a thread that sends a message
    through its gateway.
  * Extended decrement port of the tbb::flow::limiter_node to accept
    messages of integral types.
  * Removed the number_of_decrement_predecessors parameter from the
    constructor of flow::limiter_node. To allow its usage, set
    TBB_DEPRECATED_LIMITER_NODE_CONSTRUCTOR macro to 1.
  * Added ordered associative containers:
    concurrent_{map,multimap,set,multiset} (requires C++11).</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Update to version 2019_U8
  * Fixed a bug in TBB 2019 Update 7 that could lead to incorrect memory
    reallocation on Linux (https://github.com/intel/tbb/issues/148).
  * Fixed enqueuing tbb::task into tbb::task_arena not to fail on threads
    with no task scheduler initialized
    (https://github.com/intel/tbb/issues/116).</changelog>
  <changelog author="idonmez@suse.com" date="1559908800">- Add cmake-remove-include-path.patch to remove setting include
  path since we already install under /usr/include and this fixes
  idiot OpenCV trying to do -isystem $TBB_INCLUDE_DIR</changelog>
  <changelog author="idonmez@suse.com" date="1570708800">- Update to version 2019_u9
  * Multiple APIs are deprecated. For details, please see
    Deprecated Features appendix in the TBB reference manual.
  * Added C++17 deduction guides for flow graph nodes.
  Preview Features
  * Added isolated_task_group class that allows multiple threads to add
    and execute tasks sharing the same isolation.
  * Extended the flow graph API to simplify connecting nodes.
  * Added erase() by heterogeneous keys for concurrent ordered containers.
  * Added a possibility to suspend task execution at a specific point
    and resume it later.
  Bugs fixed
  * Fixed the emplace() method of concurrent unordered containers to
    destroy a temporary element that was not inserted.
  * Fixed a bug in the merge() method of concurrent unordered
    containers.
  * Fixed behavior of a continue_node that follows buffering nodes.
  * Added support for move-only types to tbb::parallel_pipeline
  * Fixed detection of clang version when CUDA toolkit is installed
- Refresh patches:
  * cmake-remove-include-path.patch
  * disable-irml.patch
  * optflags.patch</changelog>
</package>
<package pkgid="24b47270c48110d508fdb6ce05ba8bb8f12b4d6ea13fe57e4113e1def71466a0" name="libtbb2" arch="s390x">
  <version epoch="0" ver="2019_20190605" rel="150200.3.2.1"/>
  <changelog author="idonmez@suse.com" date="1474113600">- Updated to version 2017_20160722
  * static_partitioner class is now a fully supported feature.
  * async_node class is now a fully supported feature.
  * For 64-bit platforms, quadrupled the worst-case limit on the amount
    of memory the Intel TBB allocator can handle.
  * Added TBB_USE_GLIBCXX_VERSION macro to specify the version of GNU
    libstdc++ when it cannot be properly recognized, e.g. when used
    with Clang on Linux* OS. Inspired by a contribution from David A.
  * Added graph/stereo example to demostrate tbb::flow::async_msg.
  * Removed a few cases of excessive user data copying in the flow graph.
  * Reworked split_node to eliminate unnecessary overheads.
  * Added support for C++11 move semantics to the argument of
    tbb::parallel_do_feeder::add() method.
  * Added C++11 move constructor and assignment operator to
    tbb::combinable template class.
  * Added tbb::this_task_arena::max_concurrency() function and
    max_concurrency() method of class task_arena returning the maximal
    number of threads that can work inside an arena.
  * Deprecated tbb::task_arena::current_thread_index() static method;
    use tbb::this_task_arena::current_thread_index() function instead.
- License changed to Apache-2.0
- Please see included CHANGES file for all changes.</changelog>
  <changelog author="idonmez@suse.com" date="1478174400">- Update to version 2017_20161004
  * Fixed the issue with task_arena::execute() not being processed
    when the calling thread cannot join the arena.</changelog>
  <changelog author="idonmez@suse.com" date="1481544000">- Update to 2017_20161128 release
  * Added template class gfx_factory to the flow graph API. It
    implements the Factory concept for streaming_node to offload
    computations to Intel processor graphics.
  * Fixed a possible deadlock caused by missed wakeup signals in
    task_arena::execute().</changelog>
  <changelog author="idonmez@suse.com" date="1488715200">- Update to 2017_20170226 release
  * Added support for C++11 move semantics in parallel_do.
  * Constructors for many classes, including graph nodes, concurrent
    containers, thread-local containers, etc., are declared explicit
    and cannot be used for implicit conversions anymore.
  * Added a workaround for bug 16657 in the GNU C Library (glibc)
    affecting the debug version of tbb::mutex.
  * Fixed a crash in pool_identify() called for an object allocated in
    another thread.</changelog>
  <changelog author="idonmez@suse.com" date="1492603200">- Add missing include files boo#1034842</changelog>
  <changelog author="idonmez@suse.com" date="1495627200">- Update to version 2017_20170412 release
  * Added a blocking terminate extension to the task_scheduler_init
    class that allows an object to wait for termination of worker
    threads.</changelog>
  <changelog author="bwiedemann@suse.com" date="1496145600">- Add reproducible.patch to not add build hostname+kernel to binary</changelog>
  <changelog author="idonmez@suse.com" date="1505995200">- Update to version 2018 release
  * Now fully supports this_task_arena::isolate() function.
  * Parallel STL, an implementation of the C++ standard library
    algorithms with support for execution policies, has been
    introduced.
  * Fixed a bug preventing use of streaming_node and opencl_node
    with Clang.
  * Fixed this_task_arena::isolate() function to work correctly
    with parallel_invoke and parallel_do algorithms.
  * Fixed a memory leak in composite_node.
  * Fixed an assertion failure in debug tbbmalloc binaries when
    TBBMALLOC_CLEAN_ALL_BUFFERS is used.</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Build python2 and python3 bindings
- Do not bundle python bindings with shared library</changelog>
  <changelog author="idonmez@suse.com" date="1513425600">- Update to version 2018_U2
  * lambda-friendly overloads for parallel_scan.
  * support of static and simple partitioners in
    parallel_deterministic_reduce.
  * initial support for Flow Graph Analyzer to do parallel_for.
  * reservation support in overwrite_node and write_once_node.
  * Fixed a potential deadlock scenario in the flow graph that
    affected Intel TBB 2018 Initial Release.
  * Fixed constructors of concurrent_hash_map to be exception-safe.
  * Fixed auto-initialization in the main thread to be cleaned up at shutdown.
  * Fixed a crash when tbbmalloc_proxy is used together with dbghelp.
  * Fixed static_partitioner to assign tasks properly in case of nested parallelism.</changelog>
  <changelog author="idonmez@suse.com" date="1513857600">- Add disable-irml.patch to disable linking to libirml
- Actually update to tarball to 2018_U2 release</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Add conditions to build with py2 and py3 respectively in order
  to allow us disable one based on codestream</changelog>
  <changelog author="bwiedemann@suse.com" date="1533124800">- Extend reproducible.patch to override build date (boo#1047218)</changelog>
  <changelog author="bwiedemann@suse.com" date="1535112000">- Extend reproducible.patch to not capture build kernel version (boo#1101107)</changelog>
  <changelog author="idonmez@suse.com" date="1556193600">- Update to version 2019_U5
  * Too many changes to list, please see the included CHANGES file.
- Install TBBConfig*.cmake</changelog>
  <changelog author="idonmez@suse.com" date="1557835200">- Update to version 2019_U6
  * Added support for enqueuing tbb::task into tbb::task_arena
    (https://github.com/01org/tbb/issues/116).
  * Improved support for allocator propagation on concurrent_hash_map
    assigning and swapping.
  * Improved scalable_allocation_command cleanup operations to release
    more memory buffered by the calling thread.
  * Separated allocation of small and large objects into distinct memory
    regions, which helps to reduce excessive memory caching inside the
    TBB allocator.
- Disable python2 support</changelog>
  <changelog author="idonmez@suse.com" date="1559649600">- Update to version 2019_U7
  * Added TBBMALLOC_SET_HUGE_SIZE_THRESHOLD parameter to set the
    lower bound for allocations that are not released back to OS
    unless a cleanup is explicitly requested.
  * Added zip_iterator::base() method to get the tuple of underlying
    iterators.
  * Improved async_node to never block a thread that sends a message
    through its gateway.
  * Extended decrement port of the tbb::flow::limiter_node to accept
    messages of integral types.
  * Removed the number_of_decrement_predecessors parameter from the
    constructor of flow::limiter_node. To allow its usage, set
    TBB_DEPRECATED_LIMITER_NODE_CONSTRUCTOR macro to 1.
  * Added ordered associative containers:
    concurrent_{map,multimap,set,multiset} (requires C++11).</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Update to version 2019_U8
  * Fixed a bug in TBB 2019 Update 7 that could lead to incorrect memory
    reallocation on Linux (https://github.com/intel/tbb/issues/148).
  * Fixed enqueuing tbb::task into tbb::task_arena not to fail on threads
    with no task scheduler initialized
    (https://github.com/intel/tbb/issues/116).</changelog>
  <changelog author="idonmez@suse.com" date="1559908800">- Add cmake-remove-include-path.patch to remove setting include
  path since we already install under /usr/include and this fixes
  idiot OpenCV trying to do -isystem $TBB_INCLUDE_DIR</changelog>
  <changelog author="idonmez@suse.com" date="1570708800">- Update to version 2019_u9
  * Multiple APIs are deprecated. For details, please see
    Deprecated Features appendix in the TBB reference manual.
  * Added C++17 deduction guides for flow graph nodes.
  Preview Features
  * Added isolated_task_group class that allows multiple threads to add
    and execute tasks sharing the same isolation.
  * Extended the flow graph API to simplify connecting nodes.
  * Added erase() by heterogeneous keys for concurrent ordered containers.
  * Added a possibility to suspend task execution at a specific point
    and resume it later.
  Bugs fixed
  * Fixed the emplace() method of concurrent unordered containers to
    destroy a temporary element that was not inserted.
  * Fixed a bug in the merge() method of concurrent unordered
    containers.
  * Fixed behavior of a continue_node that follows buffering nodes.
  * Added support for move-only types to tbb::parallel_pipeline
  * Fixed detection of clang version when CUDA toolkit is installed
- Refresh patches:
  * cmake-remove-include-path.patch
  * disable-irml.patch
  * optflags.patch</changelog>
</package>
<package pkgid="04e8b37daab35b3985f1242158ebe7c8b192e549edcb4c59e9af55cf1b9616a8" name="libtbb2" arch="x86_64">
  <version epoch="0" ver="2019_20190605" rel="150200.3.2.1"/>
  <changelog author="idonmez@suse.com" date="1474113600">- Updated to version 2017_20160722
  * static_partitioner class is now a fully supported feature.
  * async_node class is now a fully supported feature.
  * For 64-bit platforms, quadrupled the worst-case limit on the amount
    of memory the Intel TBB allocator can handle.
  * Added TBB_USE_GLIBCXX_VERSION macro to specify the version of GNU
    libstdc++ when it cannot be properly recognized, e.g. when used
    with Clang on Linux* OS. Inspired by a contribution from David A.
  * Added graph/stereo example to demostrate tbb::flow::async_msg.
  * Removed a few cases of excessive user data copying in the flow graph.
  * Reworked split_node to eliminate unnecessary overheads.
  * Added support for C++11 move semantics to the argument of
    tbb::parallel_do_feeder::add() method.
  * Added C++11 move constructor and assignment operator to
    tbb::combinable template class.
  * Added tbb::this_task_arena::max_concurrency() function and
    max_concurrency() method of class task_arena returning the maximal
    number of threads that can work inside an arena.
  * Deprecated tbb::task_arena::current_thread_index() static method;
    use tbb::this_task_arena::current_thread_index() function instead.
- License changed to Apache-2.0
- Please see included CHANGES file for all changes.</changelog>
  <changelog author="idonmez@suse.com" date="1478174400">- Update to version 2017_20161004
  * Fixed the issue with task_arena::execute() not being processed
    when the calling thread cannot join the arena.</changelog>
  <changelog author="idonmez@suse.com" date="1481544000">- Update to 2017_20161128 release
  * Added template class gfx_factory to the flow graph API. It
    implements the Factory concept for streaming_node to offload
    computations to Intel processor graphics.
  * Fixed a possible deadlock caused by missed wakeup signals in
    task_arena::execute().</changelog>
  <changelog author="idonmez@suse.com" date="1488715200">- Update to 2017_20170226 release
  * Added support for C++11 move semantics in parallel_do.
  * Constructors for many classes, including graph nodes, concurrent
    containers, thread-local containers, etc., are declared explicit
    and cannot be used for implicit conversions anymore.
  * Added a workaround for bug 16657 in the GNU C Library (glibc)
    affecting the debug version of tbb::mutex.
  * Fixed a crash in pool_identify() called for an object allocated in
    another thread.</changelog>
  <changelog author="idonmez@suse.com" date="1492603200">- Add missing include files boo#1034842</changelog>
  <changelog author="idonmez@suse.com" date="1495627200">- Update to version 2017_20170412 release
  * Added a blocking terminate extension to the task_scheduler_init
    class that allows an object to wait for termination of worker
    threads.</changelog>
  <changelog author="bwiedemann@suse.com" date="1496145600">- Add reproducible.patch to not add build hostname+kernel to binary</changelog>
  <changelog author="idonmez@suse.com" date="1505995200">- Update to version 2018 release
  * Now fully supports this_task_arena::isolate() function.
  * Parallel STL, an implementation of the C++ standard library
    algorithms with support for execution policies, has been
    introduced.
  * Fixed a bug preventing use of streaming_node and opencl_node
    with Clang.
  * Fixed this_task_arena::isolate() function to work correctly
    with parallel_invoke and parallel_do algorithms.
  * Fixed a memory leak in composite_node.
  * Fixed an assertion failure in debug tbbmalloc binaries when
    TBBMALLOC_CLEAN_ALL_BUFFERS is used.</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Build python2 and python3 bindings
- Do not bundle python bindings with shared library</changelog>
  <changelog author="idonmez@suse.com" date="1513425600">- Update to version 2018_U2
  * lambda-friendly overloads for parallel_scan.
  * support of static and simple partitioners in
    parallel_deterministic_reduce.
  * initial support for Flow Graph Analyzer to do parallel_for.
  * reservation support in overwrite_node and write_once_node.
  * Fixed a potential deadlock scenario in the flow graph that
    affected Intel TBB 2018 Initial Release.
  * Fixed constructors of concurrent_hash_map to be exception-safe.
  * Fixed auto-initialization in the main thread to be cleaned up at shutdown.
  * Fixed a crash when tbbmalloc_proxy is used together with dbghelp.
  * Fixed static_partitioner to assign tasks properly in case of nested parallelism.</changelog>
  <changelog author="idonmez@suse.com" date="1513857600">- Add disable-irml.patch to disable linking to libirml
- Actually update to tarball to 2018_U2 release</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Add conditions to build with py2 and py3 respectively in order
  to allow us disable one based on codestream</changelog>
  <changelog author="bwiedemann@suse.com" date="1533124800">- Extend reproducible.patch to override build date (boo#1047218)</changelog>
  <changelog author="bwiedemann@suse.com" date="1535112000">- Extend reproducible.patch to not capture build kernel version (boo#1101107)</changelog>
  <changelog author="idonmez@suse.com" date="1556193600">- Update to version 2019_U5
  * Too many changes to list, please see the included CHANGES file.
- Install TBBConfig*.cmake</changelog>
  <changelog author="idonmez@suse.com" date="1557835200">- Update to version 2019_U6
  * Added support for enqueuing tbb::task into tbb::task_arena
    (https://github.com/01org/tbb/issues/116).
  * Improved support for allocator propagation on concurrent_hash_map
    assigning and swapping.
  * Improved scalable_allocation_command cleanup operations to release
    more memory buffered by the calling thread.
  * Separated allocation of small and large objects into distinct memory
    regions, which helps to reduce excessive memory caching inside the
    TBB allocator.
- Disable python2 support</changelog>
  <changelog author="idonmez@suse.com" date="1559649600">- Update to version 2019_U7
  * Added TBBMALLOC_SET_HUGE_SIZE_THRESHOLD parameter to set the
    lower bound for allocations that are not released back to OS
    unless a cleanup is explicitly requested.
  * Added zip_iterator::base() method to get the tuple of underlying
    iterators.
  * Improved async_node to never block a thread that sends a message
    through its gateway.
  * Extended decrement port of the tbb::flow::limiter_node to accept
    messages of integral types.
  * Removed the number_of_decrement_predecessors parameter from the
    constructor of flow::limiter_node. To allow its usage, set
    TBB_DEPRECATED_LIMITER_NODE_CONSTRUCTOR macro to 1.
  * Added ordered associative containers:
    concurrent_{map,multimap,set,multiset} (requires C++11).</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Update to version 2019_U8
  * Fixed a bug in TBB 2019 Update 7 that could lead to incorrect memory
    reallocation on Linux (https://github.com/intel/tbb/issues/148).
  * Fixed enqueuing tbb::task into tbb::task_arena not to fail on threads
    with no task scheduler initialized
    (https://github.com/intel/tbb/issues/116).</changelog>
  <changelog author="idonmez@suse.com" date="1559908800">- Add cmake-remove-include-path.patch to remove setting include
  path since we already install under /usr/include and this fixes
  idiot OpenCV trying to do -isystem $TBB_INCLUDE_DIR</changelog>
  <changelog author="idonmez@suse.com" date="1570708800">- Update to version 2019_u9
  * Multiple APIs are deprecated. For details, please see
    Deprecated Features appendix in the TBB reference manual.
  * Added C++17 deduction guides for flow graph nodes.
  Preview Features
  * Added isolated_task_group class that allows multiple threads to add
    and execute tasks sharing the same isolation.
  * Extended the flow graph API to simplify connecting nodes.
  * Added erase() by heterogeneous keys for concurrent ordered containers.
  * Added a possibility to suspend task execution at a specific point
    and resume it later.
  Bugs fixed
  * Fixed the emplace() method of concurrent unordered containers to
    destroy a temporary element that was not inserted.
  * Fixed a bug in the merge() method of concurrent unordered
    containers.
  * Fixed behavior of a continue_node that follows buffering nodes.
  * Added support for move-only types to tbb::parallel_pipeline
  * Fixed detection of clang version when CUDA toolkit is installed
- Refresh patches:
  * cmake-remove-include-path.patch
  * disable-irml.patch
  * optflags.patch</changelog>
</package>
<package pkgid="dbd04f418b29cf57eff8975d1e2566903b5d04be7a8e395666b83ae609a94015" name="libtbbmalloc2" arch="aarch64">
  <version epoch="0" ver="2019_20190605" rel="150200.3.2.1"/>
  <changelog author="idonmez@suse.com" date="1474113600">- Updated to version 2017_20160722
  * static_partitioner class is now a fully supported feature.
  * async_node class is now a fully supported feature.
  * For 64-bit platforms, quadrupled the worst-case limit on the amount
    of memory the Intel TBB allocator can handle.
  * Added TBB_USE_GLIBCXX_VERSION macro to specify the version of GNU
    libstdc++ when it cannot be properly recognized, e.g. when used
    with Clang on Linux* OS. Inspired by a contribution from David A.
  * Added graph/stereo example to demostrate tbb::flow::async_msg.
  * Removed a few cases of excessive user data copying in the flow graph.
  * Reworked split_node to eliminate unnecessary overheads.
  * Added support for C++11 move semantics to the argument of
    tbb::parallel_do_feeder::add() method.
  * Added C++11 move constructor and assignment operator to
    tbb::combinable template class.
  * Added tbb::this_task_arena::max_concurrency() function and
    max_concurrency() method of class task_arena returning the maximal
    number of threads that can work inside an arena.
  * Deprecated tbb::task_arena::current_thread_index() static method;
    use tbb::this_task_arena::current_thread_index() function instead.
- License changed to Apache-2.0
- Please see included CHANGES file for all changes.</changelog>
  <changelog author="idonmez@suse.com" date="1478174400">- Update to version 2017_20161004
  * Fixed the issue with task_arena::execute() not being processed
    when the calling thread cannot join the arena.</changelog>
  <changelog author="idonmez@suse.com" date="1481544000">- Update to 2017_20161128 release
  * Added template class gfx_factory to the flow graph API. It
    implements the Factory concept for streaming_node to offload
    computations to Intel processor graphics.
  * Fixed a possible deadlock caused by missed wakeup signals in
    task_arena::execute().</changelog>
  <changelog author="idonmez@suse.com" date="1488715200">- Update to 2017_20170226 release
  * Added support for C++11 move semantics in parallel_do.
  * Constructors for many classes, including graph nodes, concurrent
    containers, thread-local containers, etc., are declared explicit
    and cannot be used for implicit conversions anymore.
  * Added a workaround for bug 16657 in the GNU C Library (glibc)
    affecting the debug version of tbb::mutex.
  * Fixed a crash in pool_identify() called for an object allocated in
    another thread.</changelog>
  <changelog author="idonmez@suse.com" date="1492603200">- Add missing include files boo#1034842</changelog>
  <changelog author="idonmez@suse.com" date="1495627200">- Update to version 2017_20170412 release
  * Added a blocking terminate extension to the task_scheduler_init
    class that allows an object to wait for termination of worker
    threads.</changelog>
  <changelog author="bwiedemann@suse.com" date="1496145600">- Add reproducible.patch to not add build hostname+kernel to binary</changelog>
  <changelog author="idonmez@suse.com" date="1505995200">- Update to version 2018 release
  * Now fully supports this_task_arena::isolate() function.
  * Parallel STL, an implementation of the C++ standard library
    algorithms with support for execution policies, has been
    introduced.
  * Fixed a bug preventing use of streaming_node and opencl_node
    with Clang.
  * Fixed this_task_arena::isolate() function to work correctly
    with parallel_invoke and parallel_do algorithms.
  * Fixed a memory leak in composite_node.
  * Fixed an assertion failure in debug tbbmalloc binaries when
    TBBMALLOC_CLEAN_ALL_BUFFERS is used.</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Build python2 and python3 bindings
- Do not bundle python bindings with shared library</changelog>
  <changelog author="idonmez@suse.com" date="1513425600">- Update to version 2018_U2
  * lambda-friendly overloads for parallel_scan.
  * support of static and simple partitioners in
    parallel_deterministic_reduce.
  * initial support for Flow Graph Analyzer to do parallel_for.
  * reservation support in overwrite_node and write_once_node.
  * Fixed a potential deadlock scenario in the flow graph that
    affected Intel TBB 2018 Initial Release.
  * Fixed constructors of concurrent_hash_map to be exception-safe.
  * Fixed auto-initialization in the main thread to be cleaned up at shutdown.
  * Fixed a crash when tbbmalloc_proxy is used together with dbghelp.
  * Fixed static_partitioner to assign tasks properly in case of nested parallelism.</changelog>
  <changelog author="idonmez@suse.com" date="1513857600">- Add disable-irml.patch to disable linking to libirml
- Actually update to tarball to 2018_U2 release</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Add conditions to build with py2 and py3 respectively in order
  to allow us disable one based on codestream</changelog>
  <changelog author="bwiedemann@suse.com" date="1533124800">- Extend reproducible.patch to override build date (boo#1047218)</changelog>
  <changelog author="bwiedemann@suse.com" date="1535112000">- Extend reproducible.patch to not capture build kernel version (boo#1101107)</changelog>
  <changelog author="idonmez@suse.com" date="1556193600">- Update to version 2019_U5
  * Too many changes to list, please see the included CHANGES file.
- Install TBBConfig*.cmake</changelog>
  <changelog author="idonmez@suse.com" date="1557835200">- Update to version 2019_U6
  * Added support for enqueuing tbb::task into tbb::task_arena
    (https://github.com/01org/tbb/issues/116).
  * Improved support for allocator propagation on concurrent_hash_map
    assigning and swapping.
  * Improved scalable_allocation_command cleanup operations to release
    more memory buffered by the calling thread.
  * Separated allocation of small and large objects into distinct memory
    regions, which helps to reduce excessive memory caching inside the
    TBB allocator.
- Disable python2 support</changelog>
  <changelog author="idonmez@suse.com" date="1559649600">- Update to version 2019_U7
  * Added TBBMALLOC_SET_HUGE_SIZE_THRESHOLD parameter to set the
    lower bound for allocations that are not released back to OS
    unless a cleanup is explicitly requested.
  * Added zip_iterator::base() method to get the tuple of underlying
    iterators.
  * Improved async_node to never block a thread that sends a message
    through its gateway.
  * Extended decrement port of the tbb::flow::limiter_node to accept
    messages of integral types.
  * Removed the number_of_decrement_predecessors parameter from the
    constructor of flow::limiter_node. To allow its usage, set
    TBB_DEPRECATED_LIMITER_NODE_CONSTRUCTOR macro to 1.
  * Added ordered associative containers:
    concurrent_{map,multimap,set,multiset} (requires C++11).</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Update to version 2019_U8
  * Fixed a bug in TBB 2019 Update 7 that could lead to incorrect memory
    reallocation on Linux (https://github.com/intel/tbb/issues/148).
  * Fixed enqueuing tbb::task into tbb::task_arena not to fail on threads
    with no task scheduler initialized
    (https://github.com/intel/tbb/issues/116).</changelog>
  <changelog author="idonmez@suse.com" date="1559908800">- Add cmake-remove-include-path.patch to remove setting include
  path since we already install under /usr/include and this fixes
  idiot OpenCV trying to do -isystem $TBB_INCLUDE_DIR</changelog>
  <changelog author="idonmez@suse.com" date="1570708800">- Update to version 2019_u9
  * Multiple APIs are deprecated. For details, please see
    Deprecated Features appendix in the TBB reference manual.
  * Added C++17 deduction guides for flow graph nodes.
  Preview Features
  * Added isolated_task_group class that allows multiple threads to add
    and execute tasks sharing the same isolation.
  * Extended the flow graph API to simplify connecting nodes.
  * Added erase() by heterogeneous keys for concurrent ordered containers.
  * Added a possibility to suspend task execution at a specific point
    and resume it later.
  Bugs fixed
  * Fixed the emplace() method of concurrent unordered containers to
    destroy a temporary element that was not inserted.
  * Fixed a bug in the merge() method of concurrent unordered
    containers.
  * Fixed behavior of a continue_node that follows buffering nodes.
  * Added support for move-only types to tbb::parallel_pipeline
  * Fixed detection of clang version when CUDA toolkit is installed
- Refresh patches:
  * cmake-remove-include-path.patch
  * disable-irml.patch
  * optflags.patch</changelog>
</package>
<package pkgid="3fe482c536ece2ee340b688c9e24cf5ef45b54d230b23da05e5f77f6be9a10fa" name="libtbbmalloc2" arch="ppc64le">
  <version epoch="0" ver="2019_20190605" rel="150200.3.2.1"/>
  <changelog author="idonmez@suse.com" date="1474113600">- Updated to version 2017_20160722
  * static_partitioner class is now a fully supported feature.
  * async_node class is now a fully supported feature.
  * For 64-bit platforms, quadrupled the worst-case limit on the amount
    of memory the Intel TBB allocator can handle.
  * Added TBB_USE_GLIBCXX_VERSION macro to specify the version of GNU
    libstdc++ when it cannot be properly recognized, e.g. when used
    with Clang on Linux* OS. Inspired by a contribution from David A.
  * Added graph/stereo example to demostrate tbb::flow::async_msg.
  * Removed a few cases of excessive user data copying in the flow graph.
  * Reworked split_node to eliminate unnecessary overheads.
  * Added support for C++11 move semantics to the argument of
    tbb::parallel_do_feeder::add() method.
  * Added C++11 move constructor and assignment operator to
    tbb::combinable template class.
  * Added tbb::this_task_arena::max_concurrency() function and
    max_concurrency() method of class task_arena returning the maximal
    number of threads that can work inside an arena.
  * Deprecated tbb::task_arena::current_thread_index() static method;
    use tbb::this_task_arena::current_thread_index() function instead.
- License changed to Apache-2.0
- Please see included CHANGES file for all changes.</changelog>
  <changelog author="idonmez@suse.com" date="1478174400">- Update to version 2017_20161004
  * Fixed the issue with task_arena::execute() not being processed
    when the calling thread cannot join the arena.</changelog>
  <changelog author="idonmez@suse.com" date="1481544000">- Update to 2017_20161128 release
  * Added template class gfx_factory to the flow graph API. It
    implements the Factory concept for streaming_node to offload
    computations to Intel processor graphics.
  * Fixed a possible deadlock caused by missed wakeup signals in
    task_arena::execute().</changelog>
  <changelog author="idonmez@suse.com" date="1488715200">- Update to 2017_20170226 release
  * Added support for C++11 move semantics in parallel_do.
  * Constructors for many classes, including graph nodes, concurrent
    containers, thread-local containers, etc., are declared explicit
    and cannot be used for implicit conversions anymore.
  * Added a workaround for bug 16657 in the GNU C Library (glibc)
    affecting the debug version of tbb::mutex.
  * Fixed a crash in pool_identify() called for an object allocated in
    another thread.</changelog>
  <changelog author="idonmez@suse.com" date="1492603200">- Add missing include files boo#1034842</changelog>
  <changelog author="idonmez@suse.com" date="1495627200">- Update to version 2017_20170412 release
  * Added a blocking terminate extension to the task_scheduler_init
    class that allows an object to wait for termination of worker
    threads.</changelog>
  <changelog author="bwiedemann@suse.com" date="1496145600">- Add reproducible.patch to not add build hostname+kernel to binary</changelog>
  <changelog author="idonmez@suse.com" date="1505995200">- Update to version 2018 release
  * Now fully supports this_task_arena::isolate() function.
  * Parallel STL, an implementation of the C++ standard library
    algorithms with support for execution policies, has been
    introduced.
  * Fixed a bug preventing use of streaming_node and opencl_node
    with Clang.
  * Fixed this_task_arena::isolate() function to work correctly
    with parallel_invoke and parallel_do algorithms.
  * Fixed a memory leak in composite_node.
  * Fixed an assertion failure in debug tbbmalloc binaries when
    TBBMALLOC_CLEAN_ALL_BUFFERS is used.</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Build python2 and python3 bindings
- Do not bundle python bindings with shared library</changelog>
  <changelog author="idonmez@suse.com" date="1513425600">- Update to version 2018_U2
  * lambda-friendly overloads for parallel_scan.
  * support of static and simple partitioners in
    parallel_deterministic_reduce.
  * initial support for Flow Graph Analyzer to do parallel_for.
  * reservation support in overwrite_node and write_once_node.
  * Fixed a potential deadlock scenario in the flow graph that
    affected Intel TBB 2018 Initial Release.
  * Fixed constructors of concurrent_hash_map to be exception-safe.
  * Fixed auto-initialization in the main thread to be cleaned up at shutdown.
  * Fixed a crash when tbbmalloc_proxy is used together with dbghelp.
  * Fixed static_partitioner to assign tasks properly in case of nested parallelism.</changelog>
  <changelog author="idonmez@suse.com" date="1513857600">- Add disable-irml.patch to disable linking to libirml
- Actually update to tarball to 2018_U2 release</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Add conditions to build with py2 and py3 respectively in order
  to allow us disable one based on codestream</changelog>
  <changelog author="bwiedemann@suse.com" date="1533124800">- Extend reproducible.patch to override build date (boo#1047218)</changelog>
  <changelog author="bwiedemann@suse.com" date="1535112000">- Extend reproducible.patch to not capture build kernel version (boo#1101107)</changelog>
  <changelog author="idonmez@suse.com" date="1556193600">- Update to version 2019_U5
  * Too many changes to list, please see the included CHANGES file.
- Install TBBConfig*.cmake</changelog>
  <changelog author="idonmez@suse.com" date="1557835200">- Update to version 2019_U6
  * Added support for enqueuing tbb::task into tbb::task_arena
    (https://github.com/01org/tbb/issues/116).
  * Improved support for allocator propagation on concurrent_hash_map
    assigning and swapping.
  * Improved scalable_allocation_command cleanup operations to release
    more memory buffered by the calling thread.
  * Separated allocation of small and large objects into distinct memory
    regions, which helps to reduce excessive memory caching inside the
    TBB allocator.
- Disable python2 support</changelog>
  <changelog author="idonmez@suse.com" date="1559649600">- Update to version 2019_U7
  * Added TBBMALLOC_SET_HUGE_SIZE_THRESHOLD parameter to set the
    lower bound for allocations that are not released back to OS
    unless a cleanup is explicitly requested.
  * Added zip_iterator::base() method to get the tuple of underlying
    iterators.
  * Improved async_node to never block a thread that sends a message
    through its gateway.
  * Extended decrement port of the tbb::flow::limiter_node to accept
    messages of integral types.
  * Removed the number_of_decrement_predecessors parameter from the
    constructor of flow::limiter_node. To allow its usage, set
    TBB_DEPRECATED_LIMITER_NODE_CONSTRUCTOR macro to 1.
  * Added ordered associative containers:
    concurrent_{map,multimap,set,multiset} (requires C++11).</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Update to version 2019_U8
  * Fixed a bug in TBB 2019 Update 7 that could lead to incorrect memory
    reallocation on Linux (https://github.com/intel/tbb/issues/148).
  * Fixed enqueuing tbb::task into tbb::task_arena not to fail on threads
    with no task scheduler initialized
    (https://github.com/intel/tbb/issues/116).</changelog>
  <changelog author="idonmez@suse.com" date="1559908800">- Add cmake-remove-include-path.patch to remove setting include
  path since we already install under /usr/include and this fixes
  idiot OpenCV trying to do -isystem $TBB_INCLUDE_DIR</changelog>
  <changelog author="idonmez@suse.com" date="1570708800">- Update to version 2019_u9
  * Multiple APIs are deprecated. For details, please see
    Deprecated Features appendix in the TBB reference manual.
  * Added C++17 deduction guides for flow graph nodes.
  Preview Features
  * Added isolated_task_group class that allows multiple threads to add
    and execute tasks sharing the same isolation.
  * Extended the flow graph API to simplify connecting nodes.
  * Added erase() by heterogeneous keys for concurrent ordered containers.
  * Added a possibility to suspend task execution at a specific point
    and resume it later.
  Bugs fixed
  * Fixed the emplace() method of concurrent unordered containers to
    destroy a temporary element that was not inserted.
  * Fixed a bug in the merge() method of concurrent unordered
    containers.
  * Fixed behavior of a continue_node that follows buffering nodes.
  * Added support for move-only types to tbb::parallel_pipeline
  * Fixed detection of clang version when CUDA toolkit is installed
- Refresh patches:
  * cmake-remove-include-path.patch
  * disable-irml.patch
  * optflags.patch</changelog>
</package>
<package pkgid="0f00443e49071422270fc98638ad1a5833d75b0680dc2cd2956d28970bac6f7a" name="libtbbmalloc2" arch="s390x">
  <version epoch="0" ver="2019_20190605" rel="150200.3.2.1"/>
  <changelog author="idonmez@suse.com" date="1474113600">- Updated to version 2017_20160722
  * static_partitioner class is now a fully supported feature.
  * async_node class is now a fully supported feature.
  * For 64-bit platforms, quadrupled the worst-case limit on the amount
    of memory the Intel TBB allocator can handle.
  * Added TBB_USE_GLIBCXX_VERSION macro to specify the version of GNU
    libstdc++ when it cannot be properly recognized, e.g. when used
    with Clang on Linux* OS. Inspired by a contribution from David A.
  * Added graph/stereo example to demostrate tbb::flow::async_msg.
  * Removed a few cases of excessive user data copying in the flow graph.
  * Reworked split_node to eliminate unnecessary overheads.
  * Added support for C++11 move semantics to the argument of
    tbb::parallel_do_feeder::add() method.
  * Added C++11 move constructor and assignment operator to
    tbb::combinable template class.
  * Added tbb::this_task_arena::max_concurrency() function and
    max_concurrency() method of class task_arena returning the maximal
    number of threads that can work inside an arena.
  * Deprecated tbb::task_arena::current_thread_index() static method;
    use tbb::this_task_arena::current_thread_index() function instead.
- License changed to Apache-2.0
- Please see included CHANGES file for all changes.</changelog>
  <changelog author="idonmez@suse.com" date="1478174400">- Update to version 2017_20161004
  * Fixed the issue with task_arena::execute() not being processed
    when the calling thread cannot join the arena.</changelog>
  <changelog author="idonmez@suse.com" date="1481544000">- Update to 2017_20161128 release
  * Added template class gfx_factory to the flow graph API. It
    implements the Factory concept for streaming_node to offload
    computations to Intel processor graphics.
  * Fixed a possible deadlock caused by missed wakeup signals in
    task_arena::execute().</changelog>
  <changelog author="idonmez@suse.com" date="1488715200">- Update to 2017_20170226 release
  * Added support for C++11 move semantics in parallel_do.
  * Constructors for many classes, including graph nodes, concurrent
    containers, thread-local containers, etc., are declared explicit
    and cannot be used for implicit conversions anymore.
  * Added a workaround for bug 16657 in the GNU C Library (glibc)
    affecting the debug version of tbb::mutex.
  * Fixed a crash in pool_identify() called for an object allocated in
    another thread.</changelog>
  <changelog author="idonmez@suse.com" date="1492603200">- Add missing include files boo#1034842</changelog>
  <changelog author="idonmez@suse.com" date="1495627200">- Update to version 2017_20170412 release
  * Added a blocking terminate extension to the task_scheduler_init
    class that allows an object to wait for termination of worker
    threads.</changelog>
  <changelog author="bwiedemann@suse.com" date="1496145600">- Add reproducible.patch to not add build hostname+kernel to binary</changelog>
  <changelog author="idonmez@suse.com" date="1505995200">- Update to version 2018 release
  * Now fully supports this_task_arena::isolate() function.
  * Parallel STL, an implementation of the C++ standard library
    algorithms with support for execution policies, has been
    introduced.
  * Fixed a bug preventing use of streaming_node and opencl_node
    with Clang.
  * Fixed this_task_arena::isolate() function to work correctly
    with parallel_invoke and parallel_do algorithms.
  * Fixed a memory leak in composite_node.
  * Fixed an assertion failure in debug tbbmalloc binaries when
    TBBMALLOC_CLEAN_ALL_BUFFERS is used.</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Build python2 and python3 bindings
- Do not bundle python bindings with shared library</changelog>
  <changelog author="idonmez@suse.com" date="1513425600">- Update to version 2018_U2
  * lambda-friendly overloads for parallel_scan.
  * support of static and simple partitioners in
    parallel_deterministic_reduce.
  * initial support for Flow Graph Analyzer to do parallel_for.
  * reservation support in overwrite_node and write_once_node.
  * Fixed a potential deadlock scenario in the flow graph that
    affected Intel TBB 2018 Initial Release.
  * Fixed constructors of concurrent_hash_map to be exception-safe.
  * Fixed auto-initialization in the main thread to be cleaned up at shutdown.
  * Fixed a crash when tbbmalloc_proxy is used together with dbghelp.
  * Fixed static_partitioner to assign tasks properly in case of nested parallelism.</changelog>
  <changelog author="idonmez@suse.com" date="1513857600">- Add disable-irml.patch to disable linking to libirml
- Actually update to tarball to 2018_U2 release</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Add conditions to build with py2 and py3 respectively in order
  to allow us disable one based on codestream</changelog>
  <changelog author="bwiedemann@suse.com" date="1533124800">- Extend reproducible.patch to override build date (boo#1047218)</changelog>
  <changelog author="bwiedemann@suse.com" date="1535112000">- Extend reproducible.patch to not capture build kernel version (boo#1101107)</changelog>
  <changelog author="idonmez@suse.com" date="1556193600">- Update to version 2019_U5
  * Too many changes to list, please see the included CHANGES file.
- Install TBBConfig*.cmake</changelog>
  <changelog author="idonmez@suse.com" date="1557835200">- Update to version 2019_U6
  * Added support for enqueuing tbb::task into tbb::task_arena
    (https://github.com/01org/tbb/issues/116).
  * Improved support for allocator propagation on concurrent_hash_map
    assigning and swapping.
  * Improved scalable_allocation_command cleanup operations to release
    more memory buffered by the calling thread.
  * Separated allocation of small and large objects into distinct memory
    regions, which helps to reduce excessive memory caching inside the
    TBB allocator.
- Disable python2 support</changelog>
  <changelog author="idonmez@suse.com" date="1559649600">- Update to version 2019_U7
  * Added TBBMALLOC_SET_HUGE_SIZE_THRESHOLD parameter to set the
    lower bound for allocations that are not released back to OS
    unless a cleanup is explicitly requested.
  * Added zip_iterator::base() method to get the tuple of underlying
    iterators.
  * Improved async_node to never block a thread that sends a message
    through its gateway.
  * Extended decrement port of the tbb::flow::limiter_node to accept
    messages of integral types.
  * Removed the number_of_decrement_predecessors parameter from the
    constructor of flow::limiter_node. To allow its usage, set
    TBB_DEPRECATED_LIMITER_NODE_CONSTRUCTOR macro to 1.
  * Added ordered associative containers:
    concurrent_{map,multimap,set,multiset} (requires C++11).</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Update to version 2019_U8
  * Fixed a bug in TBB 2019 Update 7 that could lead to incorrect memory
    reallocation on Linux (https://github.com/intel/tbb/issues/148).
  * Fixed enqueuing tbb::task into tbb::task_arena not to fail on threads
    with no task scheduler initialized
    (https://github.com/intel/tbb/issues/116).</changelog>
  <changelog author="idonmez@suse.com" date="1559908800">- Add cmake-remove-include-path.patch to remove setting include
  path since we already install under /usr/include and this fixes
  idiot OpenCV trying to do -isystem $TBB_INCLUDE_DIR</changelog>
  <changelog author="idonmez@suse.com" date="1570708800">- Update to version 2019_u9
  * Multiple APIs are deprecated. For details, please see
    Deprecated Features appendix in the TBB reference manual.
  * Added C++17 deduction guides for flow graph nodes.
  Preview Features
  * Added isolated_task_group class that allows multiple threads to add
    and execute tasks sharing the same isolation.
  * Extended the flow graph API to simplify connecting nodes.
  * Added erase() by heterogeneous keys for concurrent ordered containers.
  * Added a possibility to suspend task execution at a specific point
    and resume it later.
  Bugs fixed
  * Fixed the emplace() method of concurrent unordered containers to
    destroy a temporary element that was not inserted.
  * Fixed a bug in the merge() method of concurrent unordered
    containers.
  * Fixed behavior of a continue_node that follows buffering nodes.
  * Added support for move-only types to tbb::parallel_pipeline
  * Fixed detection of clang version when CUDA toolkit is installed
- Refresh patches:
  * cmake-remove-include-path.patch
  * disable-irml.patch
  * optflags.patch</changelog>
</package>
<package pkgid="9705e3bb00b51682f22ef3db0dcb5dac8602f8663de833b810eb4aee4e0aed19" name="libtbbmalloc2" arch="x86_64">
  <version epoch="0" ver="2019_20190605" rel="150200.3.2.1"/>
  <changelog author="idonmez@suse.com" date="1474113600">- Updated to version 2017_20160722
  * static_partitioner class is now a fully supported feature.
  * async_node class is now a fully supported feature.
  * For 64-bit platforms, quadrupled the worst-case limit on the amount
    of memory the Intel TBB allocator can handle.
  * Added TBB_USE_GLIBCXX_VERSION macro to specify the version of GNU
    libstdc++ when it cannot be properly recognized, e.g. when used
    with Clang on Linux* OS. Inspired by a contribution from David A.
  * Added graph/stereo example to demostrate tbb::flow::async_msg.
  * Removed a few cases of excessive user data copying in the flow graph.
  * Reworked split_node to eliminate unnecessary overheads.
  * Added support for C++11 move semantics to the argument of
    tbb::parallel_do_feeder::add() method.
  * Added C++11 move constructor and assignment operator to
    tbb::combinable template class.
  * Added tbb::this_task_arena::max_concurrency() function and
    max_concurrency() method of class task_arena returning the maximal
    number of threads that can work inside an arena.
  * Deprecated tbb::task_arena::current_thread_index() static method;
    use tbb::this_task_arena::current_thread_index() function instead.
- License changed to Apache-2.0
- Please see included CHANGES file for all changes.</changelog>
  <changelog author="idonmez@suse.com" date="1478174400">- Update to version 2017_20161004
  * Fixed the issue with task_arena::execute() not being processed
    when the calling thread cannot join the arena.</changelog>
  <changelog author="idonmez@suse.com" date="1481544000">- Update to 2017_20161128 release
  * Added template class gfx_factory to the flow graph API. It
    implements the Factory concept for streaming_node to offload
    computations to Intel processor graphics.
  * Fixed a possible deadlock caused by missed wakeup signals in
    task_arena::execute().</changelog>
  <changelog author="idonmez@suse.com" date="1488715200">- Update to 2017_20170226 release
  * Added support for C++11 move semantics in parallel_do.
  * Constructors for many classes, including graph nodes, concurrent
    containers, thread-local containers, etc., are declared explicit
    and cannot be used for implicit conversions anymore.
  * Added a workaround for bug 16657 in the GNU C Library (glibc)
    affecting the debug version of tbb::mutex.
  * Fixed a crash in pool_identify() called for an object allocated in
    another thread.</changelog>
  <changelog author="idonmez@suse.com" date="1492603200">- Add missing include files boo#1034842</changelog>
  <changelog author="idonmez@suse.com" date="1495627200">- Update to version 2017_20170412 release
  * Added a blocking terminate extension to the task_scheduler_init
    class that allows an object to wait for termination of worker
    threads.</changelog>
  <changelog author="bwiedemann@suse.com" date="1496145600">- Add reproducible.patch to not add build hostname+kernel to binary</changelog>
  <changelog author="idonmez@suse.com" date="1505995200">- Update to version 2018 release
  * Now fully supports this_task_arena::isolate() function.
  * Parallel STL, an implementation of the C++ standard library
    algorithms with support for execution policies, has been
    introduced.
  * Fixed a bug preventing use of streaming_node and opencl_node
    with Clang.
  * Fixed this_task_arena::isolate() function to work correctly
    with parallel_invoke and parallel_do algorithms.
  * Fixed a memory leak in composite_node.
  * Fixed an assertion failure in debug tbbmalloc binaries when
    TBBMALLOC_CLEAN_ALL_BUFFERS is used.</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Build python2 and python3 bindings
- Do not bundle python bindings with shared library</changelog>
  <changelog author="idonmez@suse.com" date="1513425600">- Update to version 2018_U2
  * lambda-friendly overloads for parallel_scan.
  * support of static and simple partitioners in
    parallel_deterministic_reduce.
  * initial support for Flow Graph Analyzer to do parallel_for.
  * reservation support in overwrite_node and write_once_node.
  * Fixed a potential deadlock scenario in the flow graph that
    affected Intel TBB 2018 Initial Release.
  * Fixed constructors of concurrent_hash_map to be exception-safe.
  * Fixed auto-initialization in the main thread to be cleaned up at shutdown.
  * Fixed a crash when tbbmalloc_proxy is used together with dbghelp.
  * Fixed static_partitioner to assign tasks properly in case of nested parallelism.</changelog>
  <changelog author="idonmez@suse.com" date="1513857600">- Add disable-irml.patch to disable linking to libirml
- Actually update to tarball to 2018_U2 release</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Add conditions to build with py2 and py3 respectively in order
  to allow us disable one based on codestream</changelog>
  <changelog author="bwiedemann@suse.com" date="1533124800">- Extend reproducible.patch to override build date (boo#1047218)</changelog>
  <changelog author="bwiedemann@suse.com" date="1535112000">- Extend reproducible.patch to not capture build kernel version (boo#1101107)</changelog>
  <changelog author="idonmez@suse.com" date="1556193600">- Update to version 2019_U5
  * Too many changes to list, please see the included CHANGES file.
- Install TBBConfig*.cmake</changelog>
  <changelog author="idonmez@suse.com" date="1557835200">- Update to version 2019_U6
  * Added support for enqueuing tbb::task into tbb::task_arena
    (https://github.com/01org/tbb/issues/116).
  * Improved support for allocator propagation on concurrent_hash_map
    assigning and swapping.
  * Improved scalable_allocation_command cleanup operations to release
    more memory buffered by the calling thread.
  * Separated allocation of small and large objects into distinct memory
    regions, which helps to reduce excessive memory caching inside the
    TBB allocator.
- Disable python2 support</changelog>
  <changelog author="idonmez@suse.com" date="1559649600">- Update to version 2019_U7
  * Added TBBMALLOC_SET_HUGE_SIZE_THRESHOLD parameter to set the
    lower bound for allocations that are not released back to OS
    unless a cleanup is explicitly requested.
  * Added zip_iterator::base() method to get the tuple of underlying
    iterators.
  * Improved async_node to never block a thread that sends a message
    through its gateway.
  * Extended decrement port of the tbb::flow::limiter_node to accept
    messages of integral types.
  * Removed the number_of_decrement_predecessors parameter from the
    constructor of flow::limiter_node. To allow its usage, set
    TBB_DEPRECATED_LIMITER_NODE_CONSTRUCTOR macro to 1.
  * Added ordered associative containers:
    concurrent_{map,multimap,set,multiset} (requires C++11).</changelog>
  <changelog author="idonmez@suse.com" date="1559822400">- Update to version 2019_U8
  * Fixed a bug in TBB 2019 Update 7 that could lead to incorrect memory
    reallocation on Linux (https://github.com/intel/tbb/issues/148).
  * Fixed enqueuing tbb::task into tbb::task_arena not to fail on threads
    with no task scheduler initialized
    (https://github.com/intel/tbb/issues/116).</changelog>
  <changelog author="idonmez@suse.com" date="1559908800">- Add cmake-remove-include-path.patch to remove setting include
  path since we already install under /usr/include and this fixes
  idiot OpenCV trying to do -isystem $TBB_INCLUDE_DIR</changelog>
  <changelog author="idonmez@suse.com" date="1570708800">- Update to version 2019_u9
  * Multiple APIs are deprecated. For details, please see
    Deprecated Features appendix in the TBB reference manual.
  * Added C++17 deduction guides for flow graph nodes.
  Preview Features
  * Added isolated_task_group class that allows multiple threads to add
    and execute tasks sharing the same isolation.
  * Extended the flow graph API to simplify connecting nodes.
  * Added erase() by heterogeneous keys for concurrent ordered containers.
  * Added a possibility to suspend task execution at a specific point
    and resume it later.
  Bugs fixed
  * Fixed the emplace() method of concurrent unordered containers to
    destroy a temporary element that was not inserted.
  * Fixed a bug in the merge() method of concurrent unordered
    containers.
  * Fixed behavior of a continue_node that follows buffering nodes.
  * Added support for move-only types to tbb::parallel_pipeline
  * Fixed detection of clang version when CUDA toolkit is installed
- Refresh patches:
  * cmake-remove-include-path.patch
  * disable-irml.patch
  * optflags.patch</changelog>
</package>
<package pkgid="94b6d20d569517b03b80b8c43e3ccddaa2d0725efce418523be14fa920a52389" name="libtiff-devel-32bit" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.8.1"/>
  <changelog author="mvetter@suse.com" date="1518782400">- bsc#1046077: Add tiff-4.0.9-bsc1046077-CVE-2017-9935.patch
  Fix Heap-based buffer overflow in t2p_write_pdf</changelog>
  <changelog author="mvetter@suse.com" date="1519128000">- bsc#1081690: Add tiff-4.0.9-bsc1081690-CVE-2018-5784.patch
  Fix uncontrolled resource consumption in TIFFSetDirectory</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- security update
  * CVE-2018-10963 [bsc#1092949]
    + tiff-CVE-2018-10963.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526644800">- security update
  * CVE-2017-18013 [bsc#1074317]
    + tiff-CVE-2017-18013.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113600">- security update
  * CVE-2018-7456 [bsc#1082825]
    + tiff-CVE-2018-7456.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113601">- security update
  * CVE-2017-11613 [bsc#1082332]
    + tiff-CVE-2017-11613.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528200000">- security update
  * CVE-2018-8905 [bsc#1086408]
    + tiff-CVE-2018-8905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534334400">- security update
  * CVE-2018-10779 [bsc#1092480]
    + tiff-CVE-2018-10779.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
</package>
<package pkgid="4c6d70e1a750282d51153cd7c1d206589121a794d9f06a6dc46bca4f2cd1e019" name="libtiff-devel" arch="aarch64">
  <version epoch="0" ver="4.0.9" rel="150000.45.8.1"/>
  <changelog author="mvetter@suse.com" date="1518782400">- bsc#1046077: Add tiff-4.0.9-bsc1046077-CVE-2017-9935.patch
  Fix Heap-based buffer overflow in t2p_write_pdf</changelog>
  <changelog author="mvetter@suse.com" date="1519128000">- bsc#1081690: Add tiff-4.0.9-bsc1081690-CVE-2018-5784.patch
  Fix uncontrolled resource consumption in TIFFSetDirectory</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- security update
  * CVE-2018-10963 [bsc#1092949]
    + tiff-CVE-2018-10963.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526644800">- security update
  * CVE-2017-18013 [bsc#1074317]
    + tiff-CVE-2017-18013.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113600">- security update
  * CVE-2018-7456 [bsc#1082825]
    + tiff-CVE-2018-7456.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113601">- security update
  * CVE-2017-11613 [bsc#1082332]
    + tiff-CVE-2017-11613.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528200000">- security update
  * CVE-2018-8905 [bsc#1086408]
    + tiff-CVE-2018-8905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534334400">- security update
  * CVE-2018-10779 [bsc#1092480]
    + tiff-CVE-2018-10779.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
</package>
<package pkgid="cfe8ca443327f3374416790d0f9a7e7d942192b9469355c2a59079ee8375fd6f" name="libtiff-devel" arch="ppc64le">
  <version epoch="0" ver="4.0.9" rel="150000.45.8.1"/>
  <changelog author="mvetter@suse.com" date="1518782400">- bsc#1046077: Add tiff-4.0.9-bsc1046077-CVE-2017-9935.patch
  Fix Heap-based buffer overflow in t2p_write_pdf</changelog>
  <changelog author="mvetter@suse.com" date="1519128000">- bsc#1081690: Add tiff-4.0.9-bsc1081690-CVE-2018-5784.patch
  Fix uncontrolled resource consumption in TIFFSetDirectory</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- security update
  * CVE-2018-10963 [bsc#1092949]
    + tiff-CVE-2018-10963.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526644800">- security update
  * CVE-2017-18013 [bsc#1074317]
    + tiff-CVE-2017-18013.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113600">- security update
  * CVE-2018-7456 [bsc#1082825]
    + tiff-CVE-2018-7456.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113601">- security update
  * CVE-2017-11613 [bsc#1082332]
    + tiff-CVE-2017-11613.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528200000">- security update
  * CVE-2018-8905 [bsc#1086408]
    + tiff-CVE-2018-8905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534334400">- security update
  * CVE-2018-10779 [bsc#1092480]
    + tiff-CVE-2018-10779.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
</package>
<package pkgid="bdc89b8db22d224e3aeaf75508f080f358731d6e18e21ef43c41e067ec51480c" name="libtiff-devel" arch="s390x">
  <version epoch="0" ver="4.0.9" rel="150000.45.8.1"/>
  <changelog author="mvetter@suse.com" date="1518782400">- bsc#1046077: Add tiff-4.0.9-bsc1046077-CVE-2017-9935.patch
  Fix Heap-based buffer overflow in t2p_write_pdf</changelog>
  <changelog author="mvetter@suse.com" date="1519128000">- bsc#1081690: Add tiff-4.0.9-bsc1081690-CVE-2018-5784.patch
  Fix uncontrolled resource consumption in TIFFSetDirectory</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- security update
  * CVE-2018-10963 [bsc#1092949]
    + tiff-CVE-2018-10963.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526644800">- security update
  * CVE-2017-18013 [bsc#1074317]
    + tiff-CVE-2017-18013.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113600">- security update
  * CVE-2018-7456 [bsc#1082825]
    + tiff-CVE-2018-7456.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113601">- security update
  * CVE-2017-11613 [bsc#1082332]
    + tiff-CVE-2017-11613.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528200000">- security update
  * CVE-2018-8905 [bsc#1086408]
    + tiff-CVE-2018-8905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534334400">- security update
  * CVE-2018-10779 [bsc#1092480]
    + tiff-CVE-2018-10779.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
</package>
<package pkgid="833dd47768c73a7e6a6e2d2dba4e1e0139ead2d630314f513adeffa6cef9f2ff" name="libtiff-devel" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.8.1"/>
  <changelog author="mvetter@suse.com" date="1518782400">- bsc#1046077: Add tiff-4.0.9-bsc1046077-CVE-2017-9935.patch
  Fix Heap-based buffer overflow in t2p_write_pdf</changelog>
  <changelog author="mvetter@suse.com" date="1519128000">- bsc#1081690: Add tiff-4.0.9-bsc1081690-CVE-2018-5784.patch
  Fix uncontrolled resource consumption in TIFFSetDirectory</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- security update
  * CVE-2018-10963 [bsc#1092949]
    + tiff-CVE-2018-10963.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526644800">- security update
  * CVE-2017-18013 [bsc#1074317]
    + tiff-CVE-2017-18013.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113600">- security update
  * CVE-2018-7456 [bsc#1082825]
    + tiff-CVE-2018-7456.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113601">- security update
  * CVE-2017-11613 [bsc#1082332]
    + tiff-CVE-2017-11613.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528200000">- security update
  * CVE-2018-8905 [bsc#1086408]
    + tiff-CVE-2018-8905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534334400">- security update
  * CVE-2018-10779 [bsc#1092480]
    + tiff-CVE-2018-10779.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
</package>
<package pkgid="891a7efc5d60755caa177fd7b60a1cb7a05c600ee210debb95b173d6f78bd087" name="libtiff5-32bit" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.8.1"/>
  <changelog author="mvetter@suse.com" date="1518782400">- bsc#1046077: Add tiff-4.0.9-bsc1046077-CVE-2017-9935.patch
  Fix Heap-based buffer overflow in t2p_write_pdf</changelog>
  <changelog author="mvetter@suse.com" date="1519128000">- bsc#1081690: Add tiff-4.0.9-bsc1081690-CVE-2018-5784.patch
  Fix uncontrolled resource consumption in TIFFSetDirectory</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- security update
  * CVE-2018-10963 [bsc#1092949]
    + tiff-CVE-2018-10963.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526644800">- security update
  * CVE-2017-18013 [bsc#1074317]
    + tiff-CVE-2017-18013.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113600">- security update
  * CVE-2018-7456 [bsc#1082825]
    + tiff-CVE-2018-7456.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113601">- security update
  * CVE-2017-11613 [bsc#1082332]
    + tiff-CVE-2017-11613.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528200000">- security update
  * CVE-2018-8905 [bsc#1086408]
    + tiff-CVE-2018-8905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534334400">- security update
  * CVE-2018-10779 [bsc#1092480]
    + tiff-CVE-2018-10779.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
</package>
<package pkgid="9f48da38e4f87fa88488c3481d1230dbe301b4b3d5704b5bdbd8f3023a59a481" name="libtiff5" arch="aarch64">
  <version epoch="0" ver="4.0.9" rel="150000.45.8.1"/>
  <changelog author="mvetter@suse.com" date="1518782400">- bsc#1046077: Add tiff-4.0.9-bsc1046077-CVE-2017-9935.patch
  Fix Heap-based buffer overflow in t2p_write_pdf</changelog>
  <changelog author="mvetter@suse.com" date="1519128000">- bsc#1081690: Add tiff-4.0.9-bsc1081690-CVE-2018-5784.patch
  Fix uncontrolled resource consumption in TIFFSetDirectory</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- security update
  * CVE-2018-10963 [bsc#1092949]
    + tiff-CVE-2018-10963.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526644800">- security update
  * CVE-2017-18013 [bsc#1074317]
    + tiff-CVE-2017-18013.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113600">- security update
  * CVE-2018-7456 [bsc#1082825]
    + tiff-CVE-2018-7456.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113601">- security update
  * CVE-2017-11613 [bsc#1082332]
    + tiff-CVE-2017-11613.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528200000">- security update
  * CVE-2018-8905 [bsc#1086408]
    + tiff-CVE-2018-8905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534334400">- security update
  * CVE-2018-10779 [bsc#1092480]
    + tiff-CVE-2018-10779.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
</package>
<package pkgid="a77dd56e2aa57521698719149be35cf17da0c69fbca3467843777bbe30ad9b57" name="libtiff5" arch="ppc64le">
  <version epoch="0" ver="4.0.9" rel="150000.45.8.1"/>
  <changelog author="mvetter@suse.com" date="1518782400">- bsc#1046077: Add tiff-4.0.9-bsc1046077-CVE-2017-9935.patch
  Fix Heap-based buffer overflow in t2p_write_pdf</changelog>
  <changelog author="mvetter@suse.com" date="1519128000">- bsc#1081690: Add tiff-4.0.9-bsc1081690-CVE-2018-5784.patch
  Fix uncontrolled resource consumption in TIFFSetDirectory</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- security update
  * CVE-2018-10963 [bsc#1092949]
    + tiff-CVE-2018-10963.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526644800">- security update
  * CVE-2017-18013 [bsc#1074317]
    + tiff-CVE-2017-18013.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113600">- security update
  * CVE-2018-7456 [bsc#1082825]
    + tiff-CVE-2018-7456.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113601">- security update
  * CVE-2017-11613 [bsc#1082332]
    + tiff-CVE-2017-11613.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528200000">- security update
  * CVE-2018-8905 [bsc#1086408]
    + tiff-CVE-2018-8905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534334400">- security update
  * CVE-2018-10779 [bsc#1092480]
    + tiff-CVE-2018-10779.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
</package>
<package pkgid="63603efe74b859778b2166ee9d5edf1648dbd6761121ac7f8909c497927d9d06" name="libtiff5" arch="s390x">
  <version epoch="0" ver="4.0.9" rel="150000.45.8.1"/>
  <changelog author="mvetter@suse.com" date="1518782400">- bsc#1046077: Add tiff-4.0.9-bsc1046077-CVE-2017-9935.patch
  Fix Heap-based buffer overflow in t2p_write_pdf</changelog>
  <changelog author="mvetter@suse.com" date="1519128000">- bsc#1081690: Add tiff-4.0.9-bsc1081690-CVE-2018-5784.patch
  Fix uncontrolled resource consumption in TIFFSetDirectory</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- security update
  * CVE-2018-10963 [bsc#1092949]
    + tiff-CVE-2018-10963.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526644800">- security update
  * CVE-2017-18013 [bsc#1074317]
    + tiff-CVE-2017-18013.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113600">- security update
  * CVE-2018-7456 [bsc#1082825]
    + tiff-CVE-2018-7456.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113601">- security update
  * CVE-2017-11613 [bsc#1082332]
    + tiff-CVE-2017-11613.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528200000">- security update
  * CVE-2018-8905 [bsc#1086408]
    + tiff-CVE-2018-8905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534334400">- security update
  * CVE-2018-10779 [bsc#1092480]
    + tiff-CVE-2018-10779.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
</package>
<package pkgid="9714fcbe99f86e9f03ed283adda923d84457c2d5047e9d878cef339213a237f8" name="libtiff5" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.8.1"/>
  <changelog author="mvetter@suse.com" date="1518782400">- bsc#1046077: Add tiff-4.0.9-bsc1046077-CVE-2017-9935.patch
  Fix Heap-based buffer overflow in t2p_write_pdf</changelog>
  <changelog author="mvetter@suse.com" date="1519128000">- bsc#1081690: Add tiff-4.0.9-bsc1081690-CVE-2018-5784.patch
  Fix uncontrolled resource consumption in TIFFSetDirectory</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- security update
  * CVE-2018-10963 [bsc#1092949]
    + tiff-CVE-2018-10963.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526644800">- security update
  * CVE-2017-18013 [bsc#1074317]
    + tiff-CVE-2017-18013.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113600">- security update
  * CVE-2018-7456 [bsc#1082825]
    + tiff-CVE-2018-7456.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113601">- security update
  * CVE-2017-11613 [bsc#1082332]
    + tiff-CVE-2017-11613.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528200000">- security update
  * CVE-2018-8905 [bsc#1086408]
    + tiff-CVE-2018-8905.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534334400">- security update
  * CVE-2018-10779 [bsc#1092480]
    + tiff-CVE-2018-10779.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
</package>
<package pkgid="a7f6fb1789f9b64ddc4321f8bf9b1261c327858f364210e35dcbc582773c5302" name="libtirpc" arch="src">
  <version epoch="0" ver="1.2.6" rel="150300.3.6.1"/>
  <changelog author="kukuk@suse.de" date="1510574400">- 003-rpc-types.patch: Add some typedefs to rpc/types.h to allow
  applications be compiled with -std=iso9899:1990</changelog>
  <changelog author="kukuk@suse.de" date="1510574401">- Update to version 1.0.2
  - 002-old-automake.patch: not needed anymore
  - 005-libtirpc-1.0.2-rc1.patch: dropped
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch:
    removed, merged upstream
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch:
    removed, merged upstream
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch:
    removed, merged upstream
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch:
    removed, merged upstream
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch:
    removed, merged upstream
  - 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch:
    removed, merged upstream
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch:
    removed, merged upstream
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch:
    removed, merged upstream
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch:
    removed, merged upstream
  - patch6_7.diff: obsolete
  - Replace explicit_bzero.patch with
    004-replace-bzero-with-memset.patch from git
  - Rename libtirpc-new-path-rpcbindsock.patch to
    001-new-rpcbindsock-path.patch</changelog>
  <changelog author="kukuk@suse.de" date="1510660800">- 005-missing-includes.patch: add missing includes to make headers
  compatible to sunrpc.</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add COPYING.GPLv2 and install Licenses for GPLv2 code.</changelog>
  <changelog author="kukuk@suse.de" date="1516017600">- Move /usr/include/tirpc to /usr/include</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
</package>
<package pkgid="b53825360cc631255bc20d5f73cdf92a684cbac98c5e80ce3f790c93d6ff6d84" name="libtirpc-devel" arch="aarch64">
  <version epoch="0" ver="1.2.6" rel="150300.3.6.1"/>
  <changelog author="kukuk@suse.de" date="1510574400">- 003-rpc-types.patch: Add some typedefs to rpc/types.h to allow
  applications be compiled with -std=iso9899:1990</changelog>
  <changelog author="kukuk@suse.de" date="1510574401">- Update to version 1.0.2
  - 002-old-automake.patch: not needed anymore
  - 005-libtirpc-1.0.2-rc1.patch: dropped
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch:
    removed, merged upstream
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch:
    removed, merged upstream
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch:
    removed, merged upstream
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch:
    removed, merged upstream
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch:
    removed, merged upstream
  - 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch:
    removed, merged upstream
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch:
    removed, merged upstream
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch:
    removed, merged upstream
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch:
    removed, merged upstream
  - patch6_7.diff: obsolete
  - Replace explicit_bzero.patch with
    004-replace-bzero-with-memset.patch from git
  - Rename libtirpc-new-path-rpcbindsock.patch to
    001-new-rpcbindsock-path.patch</changelog>
  <changelog author="kukuk@suse.de" date="1510660800">- 005-missing-includes.patch: add missing includes to make headers
  compatible to sunrpc.</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add COPYING.GPLv2 and install Licenses for GPLv2 code.</changelog>
  <changelog author="kukuk@suse.de" date="1516017600">- Move /usr/include/tirpc to /usr/include</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
</package>
<package pkgid="428784ebfa74be7e90f638c07ccdaf4263993f8a3552de083da7971869b0264d" name="libtirpc-devel" arch="ppc64le">
  <version epoch="0" ver="1.2.6" rel="150300.3.6.1"/>
  <changelog author="kukuk@suse.de" date="1510574400">- 003-rpc-types.patch: Add some typedefs to rpc/types.h to allow
  applications be compiled with -std=iso9899:1990</changelog>
  <changelog author="kukuk@suse.de" date="1510574401">- Update to version 1.0.2
  - 002-old-automake.patch: not needed anymore
  - 005-libtirpc-1.0.2-rc1.patch: dropped
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch:
    removed, merged upstream
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch:
    removed, merged upstream
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch:
    removed, merged upstream
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch:
    removed, merged upstream
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch:
    removed, merged upstream
  - 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch:
    removed, merged upstream
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch:
    removed, merged upstream
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch:
    removed, merged upstream
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch:
    removed, merged upstream
  - patch6_7.diff: obsolete
  - Replace explicit_bzero.patch with
    004-replace-bzero-with-memset.patch from git
  - Rename libtirpc-new-path-rpcbindsock.patch to
    001-new-rpcbindsock-path.patch</changelog>
  <changelog author="kukuk@suse.de" date="1510660800">- 005-missing-includes.patch: add missing includes to make headers
  compatible to sunrpc.</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add COPYING.GPLv2 and install Licenses for GPLv2 code.</changelog>
  <changelog author="kukuk@suse.de" date="1516017600">- Move /usr/include/tirpc to /usr/include</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
</package>
<package pkgid="979a5a3050741d9fbc959722053c0ed949e9a2dea4ae9d589e1f2841281dcb32" name="libtirpc-devel" arch="s390x">
  <version epoch="0" ver="1.2.6" rel="150300.3.6.1"/>
  <changelog author="kukuk@suse.de" date="1510574400">- 003-rpc-types.patch: Add some typedefs to rpc/types.h to allow
  applications be compiled with -std=iso9899:1990</changelog>
  <changelog author="kukuk@suse.de" date="1510574401">- Update to version 1.0.2
  - 002-old-automake.patch: not needed anymore
  - 005-libtirpc-1.0.2-rc1.patch: dropped
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch:
    removed, merged upstream
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch:
    removed, merged upstream
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch:
    removed, merged upstream
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch:
    removed, merged upstream
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch:
    removed, merged upstream
  - 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch:
    removed, merged upstream
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch:
    removed, merged upstream
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch:
    removed, merged upstream
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch:
    removed, merged upstream
  - patch6_7.diff: obsolete
  - Replace explicit_bzero.patch with
    004-replace-bzero-with-memset.patch from git
  - Rename libtirpc-new-path-rpcbindsock.patch to
    001-new-rpcbindsock-path.patch</changelog>
  <changelog author="kukuk@suse.de" date="1510660800">- 005-missing-includes.patch: add missing includes to make headers
  compatible to sunrpc.</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add COPYING.GPLv2 and install Licenses for GPLv2 code.</changelog>
  <changelog author="kukuk@suse.de" date="1516017600">- Move /usr/include/tirpc to /usr/include</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
</package>
<package pkgid="edc4935e4df4f01a5305e4f7385737d3b7e13159e4ed866417ac68efdb01971a" name="libtirpc-devel" arch="x86_64">
  <version epoch="0" ver="1.2.6" rel="150300.3.6.1"/>
  <changelog author="kukuk@suse.de" date="1510574400">- 003-rpc-types.patch: Add some typedefs to rpc/types.h to allow
  applications be compiled with -std=iso9899:1990</changelog>
  <changelog author="kukuk@suse.de" date="1510574401">- Update to version 1.0.2
  - 002-old-automake.patch: not needed anymore
  - 005-libtirpc-1.0.2-rc1.patch: dropped
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch:
    removed, merged upstream
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch:
    removed, merged upstream
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch:
    removed, merged upstream
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch:
    removed, merged upstream
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch:
    removed, merged upstream
  - 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch:
    removed, merged upstream
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch:
    removed, merged upstream
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch:
    removed, merged upstream
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch:
    removed, merged upstream
  - patch6_7.diff: obsolete
  - Replace explicit_bzero.patch with
    004-replace-bzero-with-memset.patch from git
  - Rename libtirpc-new-path-rpcbindsock.patch to
    001-new-rpcbindsock-path.patch</changelog>
  <changelog author="kukuk@suse.de" date="1510660800">- 005-missing-includes.patch: add missing includes to make headers
  compatible to sunrpc.</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add COPYING.GPLv2 and install Licenses for GPLv2 code.</changelog>
  <changelog author="kukuk@suse.de" date="1516017600">- Move /usr/include/tirpc to /usr/include</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
</package>
<package pkgid="e6071f5d678d3b6016fdd72e80dfe56a3a3936cae233b3f9dc733d896b80d316" name="libtirpc-netconfig" arch="aarch64">
  <version epoch="0" ver="1.2.6" rel="150300.3.6.1"/>
  <changelog author="kukuk@suse.de" date="1510574400">- 003-rpc-types.patch: Add some typedefs to rpc/types.h to allow
  applications be compiled with -std=iso9899:1990</changelog>
  <changelog author="kukuk@suse.de" date="1510574401">- Update to version 1.0.2
  - 002-old-automake.patch: not needed anymore
  - 005-libtirpc-1.0.2-rc1.patch: dropped
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch:
    removed, merged upstream
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch:
    removed, merged upstream
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch:
    removed, merged upstream
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch:
    removed, merged upstream
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch:
    removed, merged upstream
  - 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch:
    removed, merged upstream
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch:
    removed, merged upstream
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch:
    removed, merged upstream
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch:
    removed, merged upstream
  - patch6_7.diff: obsolete
  - Replace explicit_bzero.patch with
    004-replace-bzero-with-memset.patch from git
  - Rename libtirpc-new-path-rpcbindsock.patch to
    001-new-rpcbindsock-path.patch</changelog>
  <changelog author="kukuk@suse.de" date="1510660800">- 005-missing-includes.patch: add missing includes to make headers
  compatible to sunrpc.</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add COPYING.GPLv2 and install Licenses for GPLv2 code.</changelog>
  <changelog author="kukuk@suse.de" date="1516017600">- Move /usr/include/tirpc to /usr/include</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
</package>
<package pkgid="5799e021cbf3511a4688480edbb2ed70223505344f0f7f33c91cbba745860dec" name="libtirpc-netconfig" arch="ppc64le">
  <version epoch="0" ver="1.2.6" rel="150300.3.6.1"/>
  <changelog author="kukuk@suse.de" date="1510574400">- 003-rpc-types.patch: Add some typedefs to rpc/types.h to allow
  applications be compiled with -std=iso9899:1990</changelog>
  <changelog author="kukuk@suse.de" date="1510574401">- Update to version 1.0.2
  - 002-old-automake.patch: not needed anymore
  - 005-libtirpc-1.0.2-rc1.patch: dropped
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch:
    removed, merged upstream
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch:
    removed, merged upstream
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch:
    removed, merged upstream
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch:
    removed, merged upstream
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch:
    removed, merged upstream
  - 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch:
    removed, merged upstream
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch:
    removed, merged upstream
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch:
    removed, merged upstream
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch:
    removed, merged upstream
  - patch6_7.diff: obsolete
  - Replace explicit_bzero.patch with
    004-replace-bzero-with-memset.patch from git
  - Rename libtirpc-new-path-rpcbindsock.patch to
    001-new-rpcbindsock-path.patch</changelog>
  <changelog author="kukuk@suse.de" date="1510660800">- 005-missing-includes.patch: add missing includes to make headers
  compatible to sunrpc.</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add COPYING.GPLv2 and install Licenses for GPLv2 code.</changelog>
  <changelog author="kukuk@suse.de" date="1516017600">- Move /usr/include/tirpc to /usr/include</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
</package>
<package pkgid="9d6f3ad4dd0e49ce53eacde7846a6382b3b6c4f4b867ba3052ee88200298bf82" name="libtirpc-netconfig" arch="s390x">
  <version epoch="0" ver="1.2.6" rel="150300.3.6.1"/>
  <changelog author="kukuk@suse.de" date="1510574400">- 003-rpc-types.patch: Add some typedefs to rpc/types.h to allow
  applications be compiled with -std=iso9899:1990</changelog>
  <changelog author="kukuk@suse.de" date="1510574401">- Update to version 1.0.2
  - 002-old-automake.patch: not needed anymore
  - 005-libtirpc-1.0.2-rc1.patch: dropped
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch:
    removed, merged upstream
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch:
    removed, merged upstream
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch:
    removed, merged upstream
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch:
    removed, merged upstream
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch:
    removed, merged upstream
  - 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch:
    removed, merged upstream
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch:
    removed, merged upstream
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch:
    removed, merged upstream
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch:
    removed, merged upstream
  - patch6_7.diff: obsolete
  - Replace explicit_bzero.patch with
    004-replace-bzero-with-memset.patch from git
  - Rename libtirpc-new-path-rpcbindsock.patch to
    001-new-rpcbindsock-path.patch</changelog>
  <changelog author="kukuk@suse.de" date="1510660800">- 005-missing-includes.patch: add missing includes to make headers
  compatible to sunrpc.</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add COPYING.GPLv2 and install Licenses for GPLv2 code.</changelog>
  <changelog author="kukuk@suse.de" date="1516017600">- Move /usr/include/tirpc to /usr/include</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
</package>
<package pkgid="14763979c7b0ba044c6174cf90237e8892d9a2012c11bcbafbb18657cc62c21a" name="libtirpc-netconfig" arch="x86_64">
  <version epoch="0" ver="1.2.6" rel="150300.3.6.1"/>
  <changelog author="kukuk@suse.de" date="1510574400">- 003-rpc-types.patch: Add some typedefs to rpc/types.h to allow
  applications be compiled with -std=iso9899:1990</changelog>
  <changelog author="kukuk@suse.de" date="1510574401">- Update to version 1.0.2
  - 002-old-automake.patch: not needed anymore
  - 005-libtirpc-1.0.2-rc1.patch: dropped
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch:
    removed, merged upstream
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch:
    removed, merged upstream
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch:
    removed, merged upstream
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch:
    removed, merged upstream
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch:
    removed, merged upstream
  - 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch:
    removed, merged upstream
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch:
    removed, merged upstream
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch:
    removed, merged upstream
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch:
    removed, merged upstream
  - patch6_7.diff: obsolete
  - Replace explicit_bzero.patch with
    004-replace-bzero-with-memset.patch from git
  - Rename libtirpc-new-path-rpcbindsock.patch to
    001-new-rpcbindsock-path.patch</changelog>
  <changelog author="kukuk@suse.de" date="1510660800">- 005-missing-includes.patch: add missing includes to make headers
  compatible to sunrpc.</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add COPYING.GPLv2 and install Licenses for GPLv2 code.</changelog>
  <changelog author="kukuk@suse.de" date="1516017600">- Move /usr/include/tirpc to /usr/include</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
</package>
<package pkgid="7c48bb6b24a52d19fc35c8532fa394395682696be6911a2b9b4a1225ba74a66e" name="libtirpc3" arch="aarch64">
  <version epoch="0" ver="1.2.6" rel="150300.3.6.1"/>
  <changelog author="kukuk@suse.de" date="1510574400">- 003-rpc-types.patch: Add some typedefs to rpc/types.h to allow
  applications be compiled with -std=iso9899:1990</changelog>
  <changelog author="kukuk@suse.de" date="1510574401">- Update to version 1.0.2
  - 002-old-automake.patch: not needed anymore
  - 005-libtirpc-1.0.2-rc1.patch: dropped
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch:
    removed, merged upstream
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch:
    removed, merged upstream
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch:
    removed, merged upstream
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch:
    removed, merged upstream
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch:
    removed, merged upstream
  - 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch:
    removed, merged upstream
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch:
    removed, merged upstream
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch:
    removed, merged upstream
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch:
    removed, merged upstream
  - patch6_7.diff: obsolete
  - Replace explicit_bzero.patch with
    004-replace-bzero-with-memset.patch from git
  - Rename libtirpc-new-path-rpcbindsock.patch to
    001-new-rpcbindsock-path.patch</changelog>
  <changelog author="kukuk@suse.de" date="1510660800">- 005-missing-includes.patch: add missing includes to make headers
  compatible to sunrpc.</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add COPYING.GPLv2 and install Licenses for GPLv2 code.</changelog>
  <changelog author="kukuk@suse.de" date="1516017600">- Move /usr/include/tirpc to /usr/include</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
</package>
<package pkgid="19afd84556370dd0418cb9679f5a38a9b2a6fa35234f597b02567a58cb83094a" name="libtirpc3" arch="ppc64le">
  <version epoch="0" ver="1.2.6" rel="150300.3.6.1"/>
  <changelog author="kukuk@suse.de" date="1510574400">- 003-rpc-types.patch: Add some typedefs to rpc/types.h to allow
  applications be compiled with -std=iso9899:1990</changelog>
  <changelog author="kukuk@suse.de" date="1510574401">- Update to version 1.0.2
  - 002-old-automake.patch: not needed anymore
  - 005-libtirpc-1.0.2-rc1.patch: dropped
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch:
    removed, merged upstream
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch:
    removed, merged upstream
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch:
    removed, merged upstream
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch:
    removed, merged upstream
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch:
    removed, merged upstream
  - 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch:
    removed, merged upstream
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch:
    removed, merged upstream
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch:
    removed, merged upstream
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch:
    removed, merged upstream
  - patch6_7.diff: obsolete
  - Replace explicit_bzero.patch with
    004-replace-bzero-with-memset.patch from git
  - Rename libtirpc-new-path-rpcbindsock.patch to
    001-new-rpcbindsock-path.patch</changelog>
  <changelog author="kukuk@suse.de" date="1510660800">- 005-missing-includes.patch: add missing includes to make headers
  compatible to sunrpc.</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add COPYING.GPLv2 and install Licenses for GPLv2 code.</changelog>
  <changelog author="kukuk@suse.de" date="1516017600">- Move /usr/include/tirpc to /usr/include</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
</package>
<package pkgid="f2438a98803776e181039261efac77b115c5e89cfaa091d5299ea452c2e8a3cb" name="libtirpc3" arch="s390x">
  <version epoch="0" ver="1.2.6" rel="150300.3.6.1"/>
  <changelog author="kukuk@suse.de" date="1510574400">- 003-rpc-types.patch: Add some typedefs to rpc/types.h to allow
  applications be compiled with -std=iso9899:1990</changelog>
  <changelog author="kukuk@suse.de" date="1510574401">- Update to version 1.0.2
  - 002-old-automake.patch: not needed anymore
  - 005-libtirpc-1.0.2-rc1.patch: dropped
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch:
    removed, merged upstream
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch:
    removed, merged upstream
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch:
    removed, merged upstream
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch:
    removed, merged upstream
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch:
    removed, merged upstream
  - 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch:
    removed, merged upstream
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch:
    removed, merged upstream
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch:
    removed, merged upstream
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch:
    removed, merged upstream
  - patch6_7.diff: obsolete
  - Replace explicit_bzero.patch with
    004-replace-bzero-with-memset.patch from git
  - Rename libtirpc-new-path-rpcbindsock.patch to
    001-new-rpcbindsock-path.patch</changelog>
  <changelog author="kukuk@suse.de" date="1510660800">- 005-missing-includes.patch: add missing includes to make headers
  compatible to sunrpc.</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add COPYING.GPLv2 and install Licenses for GPLv2 code.</changelog>
  <changelog author="kukuk@suse.de" date="1516017600">- Move /usr/include/tirpc to /usr/include</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
</package>
<package pkgid="04a7013e892a0dfaaf7acc23011c8088f52e3703e086b6ef49fcbeb373779e97" name="libtirpc3" arch="x86_64">
  <version epoch="0" ver="1.2.6" rel="150300.3.6.1"/>
  <changelog author="kukuk@suse.de" date="1510574400">- 003-rpc-types.patch: Add some typedefs to rpc/types.h to allow
  applications be compiled with -std=iso9899:1990</changelog>
  <changelog author="kukuk@suse.de" date="1510574401">- Update to version 1.0.2
  - 002-old-automake.patch: not needed anymore
  - 005-libtirpc-1.0.2-rc1.patch: dropped
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch:
    removed, merged upstream
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch:
    removed, merged upstream
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch:
    removed, merged upstream
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch:
    removed, merged upstream
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch:
    removed, merged upstream
  - 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch:
    removed, merged upstream
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch:
    removed, merged upstream
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch:
    removed, merged upstream
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch:
    removed, merged upstream
  - patch6_7.diff: obsolete
  - Replace explicit_bzero.patch with
    004-replace-bzero-with-memset.patch from git
  - Rename libtirpc-new-path-rpcbindsock.patch to
    001-new-rpcbindsock-path.patch</changelog>
  <changelog author="kukuk@suse.de" date="1510660800">- 005-missing-includes.patch: add missing includes to make headers
  compatible to sunrpc.</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add COPYING.GPLv2 and install Licenses for GPLv2 code.</changelog>
  <changelog author="kukuk@suse.de" date="1516017600">- Move /usr/include/tirpc to /usr/include</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
</package>
<package pkgid="2e8af4711e6e1417ca85c96d5bdc622b82c53b44d020c24b6bf9bedfdf341c0e" name="libtirpc3-32bit" arch="x86_64">
  <version epoch="0" ver="1.2.6" rel="150300.3.6.1"/>
  <changelog author="kukuk@suse.de" date="1510574400">- 003-rpc-types.patch: Add some typedefs to rpc/types.h to allow
  applications be compiled with -std=iso9899:1990</changelog>
  <changelog author="kukuk@suse.de" date="1510574401">- Update to version 1.0.2
  - 002-old-automake.patch: not needed anymore
  - 005-libtirpc-1.0.2-rc1.patch: dropped
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch:
    removed, merged upstream
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch:
    removed, merged upstream
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch:
    removed, merged upstream
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch:
    removed, merged upstream
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch:
    removed, merged upstream
  - 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch:
    removed, merged upstream
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch:
    removed, merged upstream
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch:
    removed, merged upstream
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch:
    removed, merged upstream
  - patch6_7.diff: obsolete
  - Replace explicit_bzero.patch with
    004-replace-bzero-with-memset.patch from git
  - Rename libtirpc-new-path-rpcbindsock.patch to
    001-new-rpcbindsock-path.patch</changelog>
  <changelog author="kukuk@suse.de" date="1510660800">- 005-missing-includes.patch: add missing includes to make headers
  compatible to sunrpc.</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add COPYING.GPLv2 and install Licenses for GPLv2 code.</changelog>
  <changelog author="kukuk@suse.de" date="1516017600">- Move /usr/include/tirpc to /usr/include</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
</package>
<package pkgid="86845f5c4d7c990929cd466c6214b565dcc5e09acc6bd12db5cd3964fe573364" name="libtrilinos-gnu-mpich-hpc" arch="aarch64">
  <version epoch="0" ver="13.2.0" rel="150300.3.6.1"/>
  <changelog author="okurz@suse.com" date="1586520000">- Use ninja as cmake builder for potential speedup</changelog>
  <changelog author="junghans@votca.org" date="1587729600">- nvcc_wrapper is a compiler wrapper and should go in -devel
  package
- fix "extra tokens" RPM build errors</changelog>
  <changelog author="eich@suse.com" date="1587902400">- Fix build for gmake 4.3 in a backward compatible way (boo#1170523),
  Fix-Makefiles-for-gmake-4.3.patch was added.</changelog>
  <changelog author="eich@suse.com" date="1587988800">- Eliminate trilinos base package, move %doc and %license files
  to the lib-package and remaining binary files to the devel-package.</changelog>
  <changelog author="eich@suse.com" date="1588248000">- Don't use ninja as cmake generator for Leap/SLE &lt; 15.2
  as it doesn't support fortran.</changelog>
  <changelog author="eich@suse.com" date="1588680000">- Fix dependencies for devel package after eliminating the
  base package:
  * Remove dependency to base package
  * for HPC add dependency to library package</changelog>
  <changelog author="eich@suse.com" date="1588852800">- Again try to fix up dependencies after removing the
  base package.
- Let (non-HPC) trilinos-devel conflict with kokkos-devel</changelog>
  <changelog author="bwiedemann@suse.com" date="1597147200">- Add reproducible.patch to override build date (boo#1047218)
- Add reproducible-docs.patch to sort the file list (boo#1041090)</changelog>
  <changelog author="mliska@suse.cz" date="1597924800">- Use memoryperjob constraint instead of %limit_build macro.</changelog>
  <changelog author="eich@suse.com" date="1599825600">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Revert: Use memoryperjob constraint instead of %limit_build macro.
  This would attempt to find a work whose memory matches the number
  of jobs available * memoryperjob. Such workers may not exist.
- Use 'module load netcdf' - this is now the load command for
  all variants of netcdf.</changelog>
  <changelog author="eich@suse.com" date="1602676800">- Update to version 13.0.0
  For information on changes consult the release notes of
  its sub-packages.
- Update patches:
  * Replace: reproducible.patch by
    Make-kokkos-build-reproducible.patch
  * Remove: reproducible-docs.patch,
    no longer applicable
  * Remove: Fix-Makefiles-for-gmake-4.3.patch,
    no longer applicable
  * Remove: trilinos-11.14.3-no-return-in-non-void.patch,
    int main() -&gt; void main() conversion makes no sense.
  * Add: Add-missing-ENV-DESTDIR.patch
    DESTDIR isn't taken into account.</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1613476800">- Remove /etc/ld.so.conf file that existed for non-HPC, non-MPI.
  It is no longer needed $_lib/trilinos no longer exists.</changelog>
  <changelog author="eich@suse.com" date="1616500800">- Update to version 13.0.1
  For information on changes consult the release notes of
  its sub-packages.</changelog>
  <changelog author="eich@suse.com" date="1642161600">- Update to version 13.2.0
  For information on changes consult the release notes of
  its sub-packages.
  * Remove: Make-kokkos-build-reproducible.patch
    Add-missing-ENV-DESTDIR.patch
  * Add: Fix-control-reaches-end-of-non-void-function-error.patch
    Convert-python2-isms-to-python3.patch
  Not-a-shell-script.patch
- Add dependency for library package to devel package.
- Fix cmake include path (boo#1194648):
  cmake/tribits/core/package_arch/TribitsWriteClientExportFiles.cmake
  uses a logic to calculate the relative path elements between
  the cmake directory and the installation directory. This works
  only if Trilinos_INSTALL_LIB_DIR is relative, while other parts
  of the code allow it to be absolute.
  See also: https://github.com/trilinos/Trilinos/issues/10100
- Fix doc building.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1643544000">- Lower disk and memory constraints to match actual requirements,
  dito %limit_build (now 16 GByte disk and 5 GByte memory).
- Add memoryperjob constraint for a worker preselection, so
  limit_build only lowers the number of jobs slightly.
- Fix cmake files for non-HPC MPI build.
- Add openmpi4 non-HPC flavor</changelog>
  <changelog author="eich@suse.com" date="1643803200">- Fix python modules to use the right include and lib dir:
  Make-include-and-library-path-configurable-using-Cmake-variables.patch
  See also: https://github.com/gsjaardema/seacas/pull/279
- Make sure python modules for serial and MPI variants don't
  overlap.
  NOTE: mpi-selector is not setting PYTHONPATH!
- Free package of all python2 traces.</changelog>
  <changelog author="eich@suse.com" date="1644235200">- Make use of the newly introduced %%hpc_pyton_sitelib macro.</changelog>
  <changelog author="eich@suse.com" date="1648814400">- Tie %python_flavor to python3 on Leap/SLE 15 &lt; SP3
  (bsc#1197781).</changelog>
  <changelog author="eich@suse.com" date="1650628800">- Add an 'Obsoletes:/Provides:' for a bogus package name that
  was released to SLE/Leap by accident.
  This may be removed once we move past version 13.2.0.</changelog>
</package>
<package pkgid="04ca5099ce616476968a93f85cdc131eea2ea63ca130f2e2a345705241c98784" name="libtrilinos-gnu-mpich-hpc" arch="ppc64le">
  <version epoch="0" ver="13.2.0" rel="150300.3.6.1"/>
  <changelog author="okurz@suse.com" date="1586520000">- Use ninja as cmake builder for potential speedup</changelog>
  <changelog author="junghans@votca.org" date="1587729600">- nvcc_wrapper is a compiler wrapper and should go in -devel
  package
- fix "extra tokens" RPM build errors</changelog>
  <changelog author="eich@suse.com" date="1587902400">- Fix build for gmake 4.3 in a backward compatible way (boo#1170523),
  Fix-Makefiles-for-gmake-4.3.patch was added.</changelog>
  <changelog author="eich@suse.com" date="1587988800">- Eliminate trilinos base package, move %doc and %license files
  to the lib-package and remaining binary files to the devel-package.</changelog>
  <changelog author="eich@suse.com" date="1588248000">- Don't use ninja as cmake generator for Leap/SLE &lt; 15.2
  as it doesn't support fortran.</changelog>
  <changelog author="eich@suse.com" date="1588680000">- Fix dependencies for devel package after eliminating the
  base package:
  * Remove dependency to base package
  * for HPC add dependency to library package</changelog>
  <changelog author="eich@suse.com" date="1588852800">- Again try to fix up dependencies after removing the
  base package.
- Let (non-HPC) trilinos-devel conflict with kokkos-devel</changelog>
  <changelog author="bwiedemann@suse.com" date="1597147200">- Add reproducible.patch to override build date (boo#1047218)
- Add reproducible-docs.patch to sort the file list (boo#1041090)</changelog>
  <changelog author="mliska@suse.cz" date="1597924800">- Use memoryperjob constraint instead of %limit_build macro.</changelog>
  <changelog author="eich@suse.com" date="1599825600">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Revert: Use memoryperjob constraint instead of %limit_build macro.
  This would attempt to find a work whose memory matches the number
  of jobs available * memoryperjob. Such workers may not exist.
- Use 'module load netcdf' - this is now the load command for
  all variants of netcdf.</changelog>
  <changelog author="eich@suse.com" date="1602676800">- Update to version 13.0.0
  For information on changes consult the release notes of
  its sub-packages.
- Update patches:
  * Replace: reproducible.patch by
    Make-kokkos-build-reproducible.patch
  * Remove: reproducible-docs.patch,
    no longer applicable
  * Remove: Fix-Makefiles-for-gmake-4.3.patch,
    no longer applicable
  * Remove: trilinos-11.14.3-no-return-in-non-void.patch,
    int main() -&gt; void main() conversion makes no sense.
  * Add: Add-missing-ENV-DESTDIR.patch
    DESTDIR isn't taken into account.</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1613476800">- Remove /etc/ld.so.conf file that existed for non-HPC, non-MPI.
  It is no longer needed $_lib/trilinos no longer exists.</changelog>
  <changelog author="eich@suse.com" date="1616500800">- Update to version 13.0.1
  For information on changes consult the release notes of
  its sub-packages.</changelog>
  <changelog author="eich@suse.com" date="1642161600">- Update to version 13.2.0
  For information on changes consult the release notes of
  its sub-packages.
  * Remove: Make-kokkos-build-reproducible.patch
    Add-missing-ENV-DESTDIR.patch
  * Add: Fix-control-reaches-end-of-non-void-function-error.patch
    Convert-python2-isms-to-python3.patch
  Not-a-shell-script.patch
- Add dependency for library package to devel package.
- Fix cmake include path (boo#1194648):
  cmake/tribits/core/package_arch/TribitsWriteClientExportFiles.cmake
  uses a logic to calculate the relative path elements between
  the cmake directory and the installation directory. This works
  only if Trilinos_INSTALL_LIB_DIR is relative, while other parts
  of the code allow it to be absolute.
  See also: https://github.com/trilinos/Trilinos/issues/10100
- Fix doc building.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1643544000">- Lower disk and memory constraints to match actual requirements,
  dito %limit_build (now 16 GByte disk and 5 GByte memory).
- Add memoryperjob constraint for a worker preselection, so
  limit_build only lowers the number of jobs slightly.
- Fix cmake files for non-HPC MPI build.
- Add openmpi4 non-HPC flavor</changelog>
  <changelog author="eich@suse.com" date="1643803200">- Fix python modules to use the right include and lib dir:
  Make-include-and-library-path-configurable-using-Cmake-variables.patch
  See also: https://github.com/gsjaardema/seacas/pull/279
- Make sure python modules for serial and MPI variants don't
  overlap.
  NOTE: mpi-selector is not setting PYTHONPATH!
- Free package of all python2 traces.</changelog>
  <changelog author="eich@suse.com" date="1644235200">- Make use of the newly introduced %%hpc_pyton_sitelib macro.</changelog>
  <changelog author="eich@suse.com" date="1648814400">- Tie %python_flavor to python3 on Leap/SLE 15 &lt; SP3
  (bsc#1197781).</changelog>
  <changelog author="eich@suse.com" date="1650628800">- Add an 'Obsoletes:/Provides:' for a bogus package name that
  was released to SLE/Leap by accident.
  This may be removed once we move past version 13.2.0.</changelog>
</package>
<package pkgid="864ae8d2b221b7817f93842df1f6271e4158cb27ef6b1db8a1e3d1685df519a8" name="libtrilinos-gnu-mpich-hpc" arch="x86_64">
  <version epoch="0" ver="13.2.0" rel="150300.3.6.1"/>
  <changelog author="okurz@suse.com" date="1586520000">- Use ninja as cmake builder for potential speedup</changelog>
  <changelog author="junghans@votca.org" date="1587729600">- nvcc_wrapper is a compiler wrapper and should go in -devel
  package
- fix "extra tokens" RPM build errors</changelog>
  <changelog author="eich@suse.com" date="1587902400">- Fix build for gmake 4.3 in a backward compatible way (boo#1170523),
  Fix-Makefiles-for-gmake-4.3.patch was added.</changelog>
  <changelog author="eich@suse.com" date="1587988800">- Eliminate trilinos base package, move %doc and %license files
  to the lib-package and remaining binary files to the devel-package.</changelog>
  <changelog author="eich@suse.com" date="1588248000">- Don't use ninja as cmake generator for Leap/SLE &lt; 15.2
  as it doesn't support fortran.</changelog>
  <changelog author="eich@suse.com" date="1588680000">- Fix dependencies for devel package after eliminating the
  base package:
  * Remove dependency to base package
  * for HPC add dependency to library package</changelog>
  <changelog author="eich@suse.com" date="1588852800">- Again try to fix up dependencies after removing the
  base package.
- Let (non-HPC) trilinos-devel conflict with kokkos-devel</changelog>
  <changelog author="bwiedemann@suse.com" date="1597147200">- Add reproducible.patch to override build date (boo#1047218)
- Add reproducible-docs.patch to sort the file list (boo#1041090)</changelog>
  <changelog author="mliska@suse.cz" date="1597924800">- Use memoryperjob constraint instead of %limit_build macro.</changelog>
  <changelog author="eich@suse.com" date="1599825600">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Revert: Use memoryperjob constraint instead of %limit_build macro.
  This would attempt to find a work whose memory matches the number
  of jobs available * memoryperjob. Such workers may not exist.
- Use 'module load netcdf' - this is now the load command for
  all variants of netcdf.</changelog>
  <changelog author="eich@suse.com" date="1602676800">- Update to version 13.0.0
  For information on changes consult the release notes of
  its sub-packages.
- Update patches:
  * Replace: reproducible.patch by
    Make-kokkos-build-reproducible.patch
  * Remove: reproducible-docs.patch,
    no longer applicable
  * Remove: Fix-Makefiles-for-gmake-4.3.patch,
    no longer applicable
  * Remove: trilinos-11.14.3-no-return-in-non-void.patch,
    int main() -&gt; void main() conversion makes no sense.
  * Add: Add-missing-ENV-DESTDIR.patch
    DESTDIR isn't taken into account.</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1613476800">- Remove /etc/ld.so.conf file that existed for non-HPC, non-MPI.
  It is no longer needed $_lib/trilinos no longer exists.</changelog>
  <changelog author="eich@suse.com" date="1616500800">- Update to version 13.0.1
  For information on changes consult the release notes of
  its sub-packages.</changelog>
  <changelog author="eich@suse.com" date="1642161600">- Update to version 13.2.0
  For information on changes consult the release notes of
  its sub-packages.
  * Remove: Make-kokkos-build-reproducible.patch
    Add-missing-ENV-DESTDIR.patch
  * Add: Fix-control-reaches-end-of-non-void-function-error.patch
    Convert-python2-isms-to-python3.patch
  Not-a-shell-script.patch
- Add dependency for library package to devel package.
- Fix cmake include path (boo#1194648):
  cmake/tribits/core/package_arch/TribitsWriteClientExportFiles.cmake
  uses a logic to calculate the relative path elements between
  the cmake directory and the installation directory. This works
  only if Trilinos_INSTALL_LIB_DIR is relative, while other parts
  of the code allow it to be absolute.
  See also: https://github.com/trilinos/Trilinos/issues/10100
- Fix doc building.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1643544000">- Lower disk and memory constraints to match actual requirements,
  dito %limit_build (now 16 GByte disk and 5 GByte memory).
- Add memoryperjob constraint for a worker preselection, so
  limit_build only lowers the number of jobs slightly.
- Fix cmake files for non-HPC MPI build.
- Add openmpi4 non-HPC flavor</changelog>
  <changelog author="eich@suse.com" date="1643803200">- Fix python modules to use the right include and lib dir:
  Make-include-and-library-path-configurable-using-Cmake-variables.patch
  See also: https://github.com/gsjaardema/seacas/pull/279
- Make sure python modules for serial and MPI variants don't
  overlap.
  NOTE: mpi-selector is not setting PYTHONPATH!
- Free package of all python2 traces.</changelog>
  <changelog author="eich@suse.com" date="1644235200">- Make use of the newly introduced %%hpc_pyton_sitelib macro.</changelog>
  <changelog author="eich@suse.com" date="1648814400">- Tie %python_flavor to python3 on Leap/SLE 15 &lt; SP3
  (bsc#1197781).</changelog>
  <changelog author="eich@suse.com" date="1650628800">- Add an 'Obsoletes:/Provides:' for a bogus package name that
  was released to SLE/Leap by accident.
  This may be removed once we move past version 13.2.0.</changelog>
</package>
<package pkgid="3145344f6d842929c4acd511e9281dc0a3d5f70d3277054c3744bed13fca57ad" name="libtrilinos-gnu-mvapich2-hpc" arch="aarch64">
  <version epoch="0" ver="13.2.0" rel="150300.3.6.1"/>
  <changelog author="okurz@suse.com" date="1586520000">- Use ninja as cmake builder for potential speedup</changelog>
  <changelog author="junghans@votca.org" date="1587729600">- nvcc_wrapper is a compiler wrapper and should go in -devel
  package
- fix "extra tokens" RPM build errors</changelog>
  <changelog author="eich@suse.com" date="1587902400">- Fix build for gmake 4.3 in a backward compatible way (boo#1170523),
  Fix-Makefiles-for-gmake-4.3.patch was added.</changelog>
  <changelog author="eich@suse.com" date="1587988800">- Eliminate trilinos base package, move %doc and %license files
  to the lib-package and remaining binary files to the devel-package.</changelog>
  <changelog author="eich@suse.com" date="1588248000">- Don't use ninja as cmake generator for Leap/SLE &lt; 15.2
  as it doesn't support fortran.</changelog>
  <changelog author="eich@suse.com" date="1588680000">- Fix dependencies for devel package after eliminating the
  base package:
  * Remove dependency to base package
  * for HPC add dependency to library package</changelog>
  <changelog author="eich@suse.com" date="1588852800">- Again try to fix up dependencies after removing the
  base package.
- Let (non-HPC) trilinos-devel conflict with kokkos-devel</changelog>
  <changelog author="bwiedemann@suse.com" date="1597147200">- Add reproducible.patch to override build date (boo#1047218)
- Add reproducible-docs.patch to sort the file list (boo#1041090)</changelog>
  <changelog author="mliska@suse.cz" date="1597924800">- Use memoryperjob constraint instead of %limit_build macro.</changelog>
  <changelog author="eich@suse.com" date="1599825600">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Revert: Use memoryperjob constraint instead of %limit_build macro.
  This would attempt to find a work whose memory matches the number
  of jobs available * memoryperjob. Such workers may not exist.
- Use 'module load netcdf' - this is now the load command for
  all variants of netcdf.</changelog>
  <changelog author="eich@suse.com" date="1602676800">- Update to version 13.0.0
  For information on changes consult the release notes of
  its sub-packages.
- Update patches:
  * Replace: reproducible.patch by
    Make-kokkos-build-reproducible.patch
  * Remove: reproducible-docs.patch,
    no longer applicable
  * Remove: Fix-Makefiles-for-gmake-4.3.patch,
    no longer applicable
  * Remove: trilinos-11.14.3-no-return-in-non-void.patch,
    int main() -&gt; void main() conversion makes no sense.
  * Add: Add-missing-ENV-DESTDIR.patch
    DESTDIR isn't taken into account.</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1613476800">- Remove /etc/ld.so.conf file that existed for non-HPC, non-MPI.
  It is no longer needed $_lib/trilinos no longer exists.</changelog>
  <changelog author="eich@suse.com" date="1616500800">- Update to version 13.0.1
  For information on changes consult the release notes of
  its sub-packages.</changelog>
  <changelog author="eich@suse.com" date="1642161600">- Update to version 13.2.0
  For information on changes consult the release notes of
  its sub-packages.
  * Remove: Make-kokkos-build-reproducible.patch
    Add-missing-ENV-DESTDIR.patch
  * Add: Fix-control-reaches-end-of-non-void-function-error.patch
    Convert-python2-isms-to-python3.patch
  Not-a-shell-script.patch
- Add dependency for library package to devel package.
- Fix cmake include path (boo#1194648):
  cmake/tribits/core/package_arch/TribitsWriteClientExportFiles.cmake
  uses a logic to calculate the relative path elements between
  the cmake directory and the installation directory. This works
  only if Trilinos_INSTALL_LIB_DIR is relative, while other parts
  of the code allow it to be absolute.
  See also: https://github.com/trilinos/Trilinos/issues/10100
- Fix doc building.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1643544000">- Lower disk and memory constraints to match actual requirements,
  dito %limit_build (now 16 GByte disk and 5 GByte memory).
- Add memoryperjob constraint for a worker preselection, so
  limit_build only lowers the number of jobs slightly.
- Fix cmake files for non-HPC MPI build.
- Add openmpi4 non-HPC flavor</changelog>
  <changelog author="eich@suse.com" date="1643803200">- Fix python modules to use the right include and lib dir:
  Make-include-and-library-path-configurable-using-Cmake-variables.patch
  See also: https://github.com/gsjaardema/seacas/pull/279
- Make sure python modules for serial and MPI variants don't
  overlap.
  NOTE: mpi-selector is not setting PYTHONPATH!
- Free package of all python2 traces.</changelog>
  <changelog author="eich@suse.com" date="1644235200">- Make use of the newly introduced %%hpc_pyton_sitelib macro.</changelog>
  <changelog author="eich@suse.com" date="1648814400">- Tie %python_flavor to python3 on Leap/SLE 15 &lt; SP3
  (bsc#1197781).</changelog>
  <changelog author="eich@suse.com" date="1650628800">- Add an 'Obsoletes:/Provides:' for a bogus package name that
  was released to SLE/Leap by accident.
  This may be removed once we move past version 13.2.0.</changelog>
</package>
<package pkgid="4da7da5bbb5f3c2bd88e520e5eefbe90d3bfb2896453513219ff96c7d47d5e7f" name="libtrilinos-gnu-mvapich2-hpc" arch="ppc64le">
  <version epoch="0" ver="13.2.0" rel="150300.3.6.1"/>
  <changelog author="okurz@suse.com" date="1586520000">- Use ninja as cmake builder for potential speedup</changelog>
  <changelog author="junghans@votca.org" date="1587729600">- nvcc_wrapper is a compiler wrapper and should go in -devel
  package
- fix "extra tokens" RPM build errors</changelog>
  <changelog author="eich@suse.com" date="1587902400">- Fix build for gmake 4.3 in a backward compatible way (boo#1170523),
  Fix-Makefiles-for-gmake-4.3.patch was added.</changelog>
  <changelog author="eich@suse.com" date="1587988800">- Eliminate trilinos base package, move %doc and %license files
  to the lib-package and remaining binary files to the devel-package.</changelog>
  <changelog author="eich@suse.com" date="1588248000">- Don't use ninja as cmake generator for Leap/SLE &lt; 15.2
  as it doesn't support fortran.</changelog>
  <changelog author="eich@suse.com" date="1588680000">- Fix dependencies for devel package after eliminating the
  base package:
  * Remove dependency to base package
  * for HPC add dependency to library package</changelog>
  <changelog author="eich@suse.com" date="1588852800">- Again try to fix up dependencies after removing the
  base package.
- Let (non-HPC) trilinos-devel conflict with kokkos-devel</changelog>
  <changelog author="bwiedemann@suse.com" date="1597147200">- Add reproducible.patch to override build date (boo#1047218)
- Add reproducible-docs.patch to sort the file list (boo#1041090)</changelog>
  <changelog author="mliska@suse.cz" date="1597924800">- Use memoryperjob constraint instead of %limit_build macro.</changelog>
  <changelog author="eich@suse.com" date="1599825600">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Revert: Use memoryperjob constraint instead of %limit_build macro.
  This would attempt to find a work whose memory matches the number
  of jobs available * memoryperjob. Such workers may not exist.
- Use 'module load netcdf' - this is now the load command for
  all variants of netcdf.</changelog>
  <changelog author="eich@suse.com" date="1602676800">- Update to version 13.0.0
  For information on changes consult the release notes of
  its sub-packages.
- Update patches:
  * Replace: reproducible.patch by
    Make-kokkos-build-reproducible.patch
  * Remove: reproducible-docs.patch,
    no longer applicable
  * Remove: Fix-Makefiles-for-gmake-4.3.patch,
    no longer applicable
  * Remove: trilinos-11.14.3-no-return-in-non-void.patch,
    int main() -&gt; void main() conversion makes no sense.
  * Add: Add-missing-ENV-DESTDIR.patch
    DESTDIR isn't taken into account.</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1613476800">- Remove /etc/ld.so.conf file that existed for non-HPC, non-MPI.
  It is no longer needed $_lib/trilinos no longer exists.</changelog>
  <changelog author="eich@suse.com" date="1616500800">- Update to version 13.0.1
  For information on changes consult the release notes of
  its sub-packages.</changelog>
  <changelog author="eich@suse.com" date="1642161600">- Update to version 13.2.0
  For information on changes consult the release notes of
  its sub-packages.
  * Remove: Make-kokkos-build-reproducible.patch
    Add-missing-ENV-DESTDIR.patch
  * Add: Fix-control-reaches-end-of-non-void-function-error.patch
    Convert-python2-isms-to-python3.patch
  Not-a-shell-script.patch
- Add dependency for library package to devel package.
- Fix cmake include path (boo#1194648):
  cmake/tribits/core/package_arch/TribitsWriteClientExportFiles.cmake
  uses a logic to calculate the relative path elements between
  the cmake directory and the installation directory. This works
  only if Trilinos_INSTALL_LIB_DIR is relative, while other parts
  of the code allow it to be absolute.
  See also: https://github.com/trilinos/Trilinos/issues/10100
- Fix doc building.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1643544000">- Lower disk and memory constraints to match actual requirements,
  dito %limit_build (now 16 GByte disk and 5 GByte memory).
- Add memoryperjob constraint for a worker preselection, so
  limit_build only lowers the number of jobs slightly.
- Fix cmake files for non-HPC MPI build.
- Add openmpi4 non-HPC flavor</changelog>
  <changelog author="eich@suse.com" date="1643803200">- Fix python modules to use the right include and lib dir:
  Make-include-and-library-path-configurable-using-Cmake-variables.patch
  See also: https://github.com/gsjaardema/seacas/pull/279
- Make sure python modules for serial and MPI variants don't
  overlap.
  NOTE: mpi-selector is not setting PYTHONPATH!
- Free package of all python2 traces.</changelog>
  <changelog author="eich@suse.com" date="1644235200">- Make use of the newly introduced %%hpc_pyton_sitelib macro.</changelog>
  <changelog author="eich@suse.com" date="1648814400">- Tie %python_flavor to python3 on Leap/SLE 15 &lt; SP3
  (bsc#1197781).</changelog>
  <changelog author="eich@suse.com" date="1650628800">- Add an 'Obsoletes:/Provides:' for a bogus package name that
  was released to SLE/Leap by accident.
  This may be removed once we move past version 13.2.0.</changelog>
</package>
<package pkgid="574cff0b33cb42ec2eff8f0c5cfddd5d7f383bfd1dff6c634b4df86a285128cb" name="libtrilinos-gnu-mvapich2-hpc" arch="x86_64">
  <version epoch="0" ver="13.2.0" rel="150300.3.6.1"/>
  <changelog author="okurz@suse.com" date="1586520000">- Use ninja as cmake builder for potential speedup</changelog>
  <changelog author="junghans@votca.org" date="1587729600">- nvcc_wrapper is a compiler wrapper and should go in -devel
  package
- fix "extra tokens" RPM build errors</changelog>
  <changelog author="eich@suse.com" date="1587902400">- Fix build for gmake 4.3 in a backward compatible way (boo#1170523),
  Fix-Makefiles-for-gmake-4.3.patch was added.</changelog>
  <changelog author="eich@suse.com" date="1587988800">- Eliminate trilinos base package, move %doc and %license files
  to the lib-package and remaining binary files to the devel-package.</changelog>
  <changelog author="eich@suse.com" date="1588248000">- Don't use ninja as cmake generator for Leap/SLE &lt; 15.2
  as it doesn't support fortran.</changelog>
  <changelog author="eich@suse.com" date="1588680000">- Fix dependencies for devel package after eliminating the
  base package:
  * Remove dependency to base package
  * for HPC add dependency to library package</changelog>
  <changelog author="eich@suse.com" date="1588852800">- Again try to fix up dependencies after removing the
  base package.
- Let (non-HPC) trilinos-devel conflict with kokkos-devel</changelog>
  <changelog author="bwiedemann@suse.com" date="1597147200">- Add reproducible.patch to override build date (boo#1047218)
- Add reproducible-docs.patch to sort the file list (boo#1041090)</changelog>
  <changelog author="mliska@suse.cz" date="1597924800">- Use memoryperjob constraint instead of %limit_build macro.</changelog>
  <changelog author="eich@suse.com" date="1599825600">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Revert: Use memoryperjob constraint instead of %limit_build macro.
  This would attempt to find a work whose memory matches the number
  of jobs available * memoryperjob. Such workers may not exist.
- Use 'module load netcdf' - this is now the load command for
  all variants of netcdf.</changelog>
  <changelog author="eich@suse.com" date="1602676800">- Update to version 13.0.0
  For information on changes consult the release notes of
  its sub-packages.
- Update patches:
  * Replace: reproducible.patch by
    Make-kokkos-build-reproducible.patch
  * Remove: reproducible-docs.patch,
    no longer applicable
  * Remove: Fix-Makefiles-for-gmake-4.3.patch,
    no longer applicable
  * Remove: trilinos-11.14.3-no-return-in-non-void.patch,
    int main() -&gt; void main() conversion makes no sense.
  * Add: Add-missing-ENV-DESTDIR.patch
    DESTDIR isn't taken into account.</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1613476800">- Remove /etc/ld.so.conf file that existed for non-HPC, non-MPI.
  It is no longer needed $_lib/trilinos no longer exists.</changelog>
  <changelog author="eich@suse.com" date="1616500800">- Update to version 13.0.1
  For information on changes consult the release notes of
  its sub-packages.</changelog>
  <changelog author="eich@suse.com" date="1642161600">- Update to version 13.2.0
  For information on changes consult the release notes of
  its sub-packages.
  * Remove: Make-kokkos-build-reproducible.patch
    Add-missing-ENV-DESTDIR.patch
  * Add: Fix-control-reaches-end-of-non-void-function-error.patch
    Convert-python2-isms-to-python3.patch
  Not-a-shell-script.patch
- Add dependency for library package to devel package.
- Fix cmake include path (boo#1194648):
  cmake/tribits/core/package_arch/TribitsWriteClientExportFiles.cmake
  uses a logic to calculate the relative path elements between
  the cmake directory and the installation directory. This works
  only if Trilinos_INSTALL_LIB_DIR is relative, while other parts
  of the code allow it to be absolute.
  See also: https://github.com/trilinos/Trilinos/issues/10100
- Fix doc building.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1643544000">- Lower disk and memory constraints to match actual requirements,
  dito %limit_build (now 16 GByte disk and 5 GByte memory).
- Add memoryperjob constraint for a worker preselection, so
  limit_build only lowers the number of jobs slightly.
- Fix cmake files for non-HPC MPI build.
- Add openmpi4 non-HPC flavor</changelog>
  <changelog author="eich@suse.com" date="1643803200">- Fix python modules to use the right include and lib dir:
  Make-include-and-library-path-configurable-using-Cmake-variables.patch
  See also: https://github.com/gsjaardema/seacas/pull/279
- Make sure python modules for serial and MPI variants don't
  overlap.
  NOTE: mpi-selector is not setting PYTHONPATH!
- Free package of all python2 traces.</changelog>
  <changelog author="eich@suse.com" date="1644235200">- Make use of the newly introduced %%hpc_pyton_sitelib macro.</changelog>
  <changelog author="eich@suse.com" date="1648814400">- Tie %python_flavor to python3 on Leap/SLE 15 &lt; SP3
  (bsc#1197781).</changelog>
  <changelog author="eich@suse.com" date="1650628800">- Add an 'Obsoletes:/Provides:' for a bogus package name that
  was released to SLE/Leap by accident.
  This may be removed once we move past version 13.2.0.</changelog>
</package>
<package pkgid="5373a31930fe47310c223427dc3a012e350cdded732e1180409c5efa01fce0c1" name="libtrilinos-gnu-openmpi2-hpc" arch="aarch64">
  <version epoch="0" ver="13.2.0" rel="150300.3.6.1"/>
  <changelog author="okurz@suse.com" date="1586520000">- Use ninja as cmake builder for potential speedup</changelog>
  <changelog author="junghans@votca.org" date="1587729600">- nvcc_wrapper is a compiler wrapper and should go in -devel
  package
- fix "extra tokens" RPM build errors</changelog>
  <changelog author="eich@suse.com" date="1587902400">- Fix build for gmake 4.3 in a backward compatible way (boo#1170523),
  Fix-Makefiles-for-gmake-4.3.patch was added.</changelog>
  <changelog author="eich@suse.com" date="1587988800">- Eliminate trilinos base package, move %doc and %license files
  to the lib-package and remaining binary files to the devel-package.</changelog>
  <changelog author="eich@suse.com" date="1588248000">- Don't use ninja as cmake generator for Leap/SLE &lt; 15.2
  as it doesn't support fortran.</changelog>
  <changelog author="eich@suse.com" date="1588680000">- Fix dependencies for devel package after eliminating the
  base package:
  * Remove dependency to base package
  * for HPC add dependency to library package</changelog>
  <changelog author="eich@suse.com" date="1588852800">- Again try to fix up dependencies after removing the
  base package.
- Let (non-HPC) trilinos-devel conflict with kokkos-devel</changelog>
  <changelog author="bwiedemann@suse.com" date="1597147200">- Add reproducible.patch to override build date (boo#1047218)
- Add reproducible-docs.patch to sort the file list (boo#1041090)</changelog>
  <changelog author="mliska@suse.cz" date="1597924800">- Use memoryperjob constraint instead of %limit_build macro.</changelog>
  <changelog author="eich@suse.com" date="1599825600">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Revert: Use memoryperjob constraint instead of %limit_build macro.
  This would attempt to find a work whose memory matches the number
  of jobs available * memoryperjob. Such workers may not exist.
- Use 'module load netcdf' - this is now the load command for
  all variants of netcdf.</changelog>
  <changelog author="eich@suse.com" date="1602676800">- Update to version 13.0.0
  For information on changes consult the release notes of
  its sub-packages.
- Update patches:
  * Replace: reproducible.patch by
    Make-kokkos-build-reproducible.patch
  * Remove: reproducible-docs.patch,
    no longer applicable
  * Remove: Fix-Makefiles-for-gmake-4.3.patch,
    no longer applicable
  * Remove: trilinos-11.14.3-no-return-in-non-void.patch,
    int main() -&gt; void main() conversion makes no sense.
  * Add: Add-missing-ENV-DESTDIR.patch
    DESTDIR isn't taken into account.</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1613476800">- Remove /etc/ld.so.conf file that existed for non-HPC, non-MPI.
  It is no longer needed $_lib/trilinos no longer exists.</changelog>
  <changelog author="eich@suse.com" date="1616500800">- Update to version 13.0.1
  For information on changes consult the release notes of
  its sub-packages.</changelog>
  <changelog author="eich@suse.com" date="1642161600">- Update to version 13.2.0
  For information on changes consult the release notes of
  its sub-packages.
  * Remove: Make-kokkos-build-reproducible.patch
    Add-missing-ENV-DESTDIR.patch
  * Add: Fix-control-reaches-end-of-non-void-function-error.patch
    Convert-python2-isms-to-python3.patch
  Not-a-shell-script.patch
- Add dependency for library package to devel package.
- Fix cmake include path (boo#1194648):
  cmake/tribits/core/package_arch/TribitsWriteClientExportFiles.cmake
  uses a logic to calculate the relative path elements between
  the cmake directory and the installation directory. This works
  only if Trilinos_INSTALL_LIB_DIR is relative, while other parts
  of the code allow it to be absolute.
  See also: https://github.com/trilinos/Trilinos/issues/10100
- Fix doc building.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1643544000">- Lower disk and memory constraints to match actual requirements,
  dito %limit_build (now 16 GByte disk and 5 GByte memory).
- Add memoryperjob constraint for a worker preselection, so
  limit_build only lowers the number of jobs slightly.
- Fix cmake files for non-HPC MPI build.
- Add openmpi4 non-HPC flavor</changelog>
  <changelog author="eich@suse.com" date="1643803200">- Fix python modules to use the right include and lib dir:
  Make-include-and-library-path-configurable-using-Cmake-variables.patch
  See also: https://github.com/gsjaardema/seacas/pull/279
- Make sure python modules for serial and MPI variants don't
  overlap.
  NOTE: mpi-selector is not setting PYTHONPATH!
- Free package of all python2 traces.</changelog>
  <changelog author="eich@suse.com" date="1644235200">- Make use of the newly introduced %%hpc_pyton_sitelib macro.</changelog>
  <changelog author="eich@suse.com" date="1648814400">- Tie %python_flavor to python3 on Leap/SLE 15 &lt; SP3
  (bsc#1197781).</changelog>
  <changelog author="eich@suse.com" date="1650628800">- Add an 'Obsoletes:/Provides:' for a bogus package name that
  was released to SLE/Leap by accident.
  This may be removed once we move past version 13.2.0.</changelog>
</package>
<package pkgid="42676d25f29e74aa0caa9855114281ba138d3ad1d3dd6728f746c7cd5947bfa6" name="libtrilinos-gnu-openmpi2-hpc" arch="ppc64le">
  <version epoch="0" ver="13.2.0" rel="150300.3.6.1"/>
  <changelog author="okurz@suse.com" date="1586520000">- Use ninja as cmake builder for potential speedup</changelog>
  <changelog author="junghans@votca.org" date="1587729600">- nvcc_wrapper is a compiler wrapper and should go in -devel
  package
- fix "extra tokens" RPM build errors</changelog>
  <changelog author="eich@suse.com" date="1587902400">- Fix build for gmake 4.3 in a backward compatible way (boo#1170523),
  Fix-Makefiles-for-gmake-4.3.patch was added.</changelog>
  <changelog author="eich@suse.com" date="1587988800">- Eliminate trilinos base package, move %doc and %license files
  to the lib-package and remaining binary files to the devel-package.</changelog>
  <changelog author="eich@suse.com" date="1588248000">- Don't use ninja as cmake generator for Leap/SLE &lt; 15.2
  as it doesn't support fortran.</changelog>
  <changelog author="eich@suse.com" date="1588680000">- Fix dependencies for devel package after eliminating the
  base package:
  * Remove dependency to base package
  * for HPC add dependency to library package</changelog>
  <changelog author="eich@suse.com" date="1588852800">- Again try to fix up dependencies after removing the
  base package.
- Let (non-HPC) trilinos-devel conflict with kokkos-devel</changelog>
  <changelog author="bwiedemann@suse.com" date="1597147200">- Add reproducible.patch to override build date (boo#1047218)
- Add reproducible-docs.patch to sort the file list (boo#1041090)</changelog>
  <changelog author="mliska@suse.cz" date="1597924800">- Use memoryperjob constraint instead of %limit_build macro.</changelog>
  <changelog author="eich@suse.com" date="1599825600">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Revert: Use memoryperjob constraint instead of %limit_build macro.
  This would attempt to find a work whose memory matches the number
  of jobs available * memoryperjob. Such workers may not exist.
- Use 'module load netcdf' - this is now the load command for
  all variants of netcdf.</changelog>
  <changelog author="eich@suse.com" date="1602676800">- Update to version 13.0.0
  For information on changes consult the release notes of
  its sub-packages.
- Update patches:
  * Replace: reproducible.patch by
    Make-kokkos-build-reproducible.patch
  * Remove: reproducible-docs.patch,
    no longer applicable
  * Remove: Fix-Makefiles-for-gmake-4.3.patch,
    no longer applicable
  * Remove: trilinos-11.14.3-no-return-in-non-void.patch,
    int main() -&gt; void main() conversion makes no sense.
  * Add: Add-missing-ENV-DESTDIR.patch
    DESTDIR isn't taken into account.</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1613476800">- Remove /etc/ld.so.conf file that existed for non-HPC, non-MPI.
  It is no longer needed $_lib/trilinos no longer exists.</changelog>
  <changelog author="eich@suse.com" date="1616500800">- Update to version 13.0.1
  For information on changes consult the release notes of
  its sub-packages.</changelog>
  <changelog author="eich@suse.com" date="1642161600">- Update to version 13.2.0
  For information on changes consult the release notes of
  its sub-packages.
  * Remove: Make-kokkos-build-reproducible.patch
    Add-missing-ENV-DESTDIR.patch
  * Add: Fix-control-reaches-end-of-non-void-function-error.patch
    Convert-python2-isms-to-python3.patch
  Not-a-shell-script.patch
- Add dependency for library package to devel package.
- Fix cmake include path (boo#1194648):
  cmake/tribits/core/package_arch/TribitsWriteClientExportFiles.cmake
  uses a logic to calculate the relative path elements between
  the cmake directory and the installation directory. This works
  only if Trilinos_INSTALL_LIB_DIR is relative, while other parts
  of the code allow it to be absolute.
  See also: https://github.com/trilinos/Trilinos/issues/10100
- Fix doc building.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1643544000">- Lower disk and memory constraints to match actual requirements,
  dito %limit_build (now 16 GByte disk and 5 GByte memory).
- Add memoryperjob constraint for a worker preselection, so
  limit_build only lowers the number of jobs slightly.
- Fix cmake files for non-HPC MPI build.
- Add openmpi4 non-HPC flavor</changelog>
  <changelog author="eich@suse.com" date="1643803200">- Fix python modules to use the right include and lib dir:
  Make-include-and-library-path-configurable-using-Cmake-variables.patch
  See also: https://github.com/gsjaardema/seacas/pull/279
- Make sure python modules for serial and MPI variants don't
  overlap.
  NOTE: mpi-selector is not setting PYTHONPATH!
- Free package of all python2 traces.</changelog>
  <changelog author="eich@suse.com" date="1644235200">- Make use of the newly introduced %%hpc_pyton_sitelib macro.</changelog>
  <changelog author="eich@suse.com" date="1648814400">- Tie %python_flavor to python3 on Leap/SLE 15 &lt; SP3
  (bsc#1197781).</changelog>
  <changelog author="eich@suse.com" date="1650628800">- Add an 'Obsoletes:/Provides:' for a bogus package name that
  was released to SLE/Leap by accident.
  This may be removed once we move past version 13.2.0.</changelog>
</package>
<package pkgid="28a1206aa7c55793867d2f42e33e8db87a15690d8b5cb48d7c411a449078479b" name="libtrilinos-gnu-openmpi2-hpc" arch="x86_64">
  <version epoch="0" ver="13.2.0" rel="150300.3.6.1"/>
  <changelog author="okurz@suse.com" date="1586520000">- Use ninja as cmake builder for potential speedup</changelog>
  <changelog author="junghans@votca.org" date="1587729600">- nvcc_wrapper is a compiler wrapper and should go in -devel
  package
- fix "extra tokens" RPM build errors</changelog>
  <changelog author="eich@suse.com" date="1587902400">- Fix build for gmake 4.3 in a backward compatible way (boo#1170523),
  Fix-Makefiles-for-gmake-4.3.patch was added.</changelog>
  <changelog author="eich@suse.com" date="1587988800">- Eliminate trilinos base package, move %doc and %license files
  to the lib-package and remaining binary files to the devel-package.</changelog>
  <changelog author="eich@suse.com" date="1588248000">- Don't use ninja as cmake generator for Leap/SLE &lt; 15.2
  as it doesn't support fortran.</changelog>
  <changelog author="eich@suse.com" date="1588680000">- Fix dependencies for devel package after eliminating the
  base package:
  * Remove dependency to base package
  * for HPC add dependency to library package</changelog>
  <changelog author="eich@suse.com" date="1588852800">- Again try to fix up dependencies after removing the
  base package.
- Let (non-HPC) trilinos-devel conflict with kokkos-devel</changelog>
  <changelog author="bwiedemann@suse.com" date="1597147200">- Add reproducible.patch to override build date (boo#1047218)
- Add reproducible-docs.patch to sort the file list (boo#1041090)</changelog>
  <changelog author="mliska@suse.cz" date="1597924800">- Use memoryperjob constraint instead of %limit_build macro.</changelog>
  <changelog author="eich@suse.com" date="1599825600">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Revert: Use memoryperjob constraint instead of %limit_build macro.
  This would attempt to find a work whose memory matches the number
  of jobs available * memoryperjob. Such workers may not exist.
- Use 'module load netcdf' - this is now the load command for
  all variants of netcdf.</changelog>
  <changelog author="eich@suse.com" date="1602676800">- Update to version 13.0.0
  For information on changes consult the release notes of
  its sub-packages.
- Update patches:
  * Replace: reproducible.patch by
    Make-kokkos-build-reproducible.patch
  * Remove: reproducible-docs.patch,
    no longer applicable
  * Remove: Fix-Makefiles-for-gmake-4.3.patch,
    no longer applicable
  * Remove: trilinos-11.14.3-no-return-in-non-void.patch,
    int main() -&gt; void main() conversion makes no sense.
  * Add: Add-missing-ENV-DESTDIR.patch
    DESTDIR isn't taken into account.</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1613476800">- Remove /etc/ld.so.conf file that existed for non-HPC, non-MPI.
  It is no longer needed $_lib/trilinos no longer exists.</changelog>
  <changelog author="eich@suse.com" date="1616500800">- Update to version 13.0.1
  For information on changes consult the release notes of
  its sub-packages.</changelog>
  <changelog author="eich@suse.com" date="1642161600">- Update to version 13.2.0
  For information on changes consult the release notes of
  its sub-packages.
  * Remove: Make-kokkos-build-reproducible.patch
    Add-missing-ENV-DESTDIR.patch
  * Add: Fix-control-reaches-end-of-non-void-function-error.patch
    Convert-python2-isms-to-python3.patch
  Not-a-shell-script.patch
- Add dependency for library package to devel package.
- Fix cmake include path (boo#1194648):
  cmake/tribits/core/package_arch/TribitsWriteClientExportFiles.cmake
  uses a logic to calculate the relative path elements between
  the cmake directory and the installation directory. This works
  only if Trilinos_INSTALL_LIB_DIR is relative, while other parts
  of the code allow it to be absolute.
  See also: https://github.com/trilinos/Trilinos/issues/10100
- Fix doc building.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1643544000">- Lower disk and memory constraints to match actual requirements,
  dito %limit_build (now 16 GByte disk and 5 GByte memory).
- Add memoryperjob constraint for a worker preselection, so
  limit_build only lowers the number of jobs slightly.
- Fix cmake files for non-HPC MPI build.
- Add openmpi4 non-HPC flavor</changelog>
  <changelog author="eich@suse.com" date="1643803200">- Fix python modules to use the right include and lib dir:
  Make-include-and-library-path-configurable-using-Cmake-variables.patch
  See also: https://github.com/gsjaardema/seacas/pull/279
- Make sure python modules for serial and MPI variants don't
  overlap.
  NOTE: mpi-selector is not setting PYTHONPATH!
- Free package of all python2 traces.</changelog>
  <changelog author="eich@suse.com" date="1644235200">- Make use of the newly introduced %%hpc_pyton_sitelib macro.</changelog>
  <changelog author="eich@suse.com" date="1648814400">- Tie %python_flavor to python3 on Leap/SLE 15 &lt; SP3
  (bsc#1197781).</changelog>
  <changelog author="eich@suse.com" date="1650628800">- Add an 'Obsoletes:/Provides:' for a bogus package name that
  was released to SLE/Leap by accident.
  This may be removed once we move past version 13.2.0.</changelog>
</package>
<package pkgid="d915b715a15f5fd932f83ed9f494afc56676cc2d77ffab5f2ac3a17d12996559" name="libtrilinos-gnu-openmpi3-hpc" arch="aarch64">
  <version epoch="0" ver="13.2.0" rel="150300.3.6.2"/>
  <changelog author="okurz@suse.com" date="1586520000">- Use ninja as cmake builder for potential speedup</changelog>
  <changelog author="junghans@votca.org" date="1587729600">- nvcc_wrapper is a compiler wrapper and should go in -devel
  package
- fix "extra tokens" RPM build errors</changelog>
  <changelog author="eich@suse.com" date="1587902400">- Fix build for gmake 4.3 in a backward compatible way (boo#1170523),
  Fix-Makefiles-for-gmake-4.3.patch was added.</changelog>
  <changelog author="eich@suse.com" date="1587988800">- Eliminate trilinos base package, move %doc and %license files
  to the lib-package and remaining binary files to the devel-package.</changelog>
  <changelog author="eich@suse.com" date="1588248000">- Don't use ninja as cmake generator for Leap/SLE &lt; 15.2
  as it doesn't support fortran.</changelog>
  <changelog author="eich@suse.com" date="1588680000">- Fix dependencies for devel package after eliminating the
  base package:
  * Remove dependency to base package
  * for HPC add dependency to library package</changelog>
  <changelog author="eich@suse.com" date="1588852800">- Again try to fix up dependencies after removing the
  base package.
- Let (non-HPC) trilinos-devel conflict with kokkos-devel</changelog>
  <changelog author="bwiedemann@suse.com" date="1597147200">- Add reproducible.patch to override build date (boo#1047218)
- Add reproducible-docs.patch to sort the file list (boo#1041090)</changelog>
  <changelog author="mliska@suse.cz" date="1597924800">- Use memoryperjob constraint instead of %limit_build macro.</changelog>
  <changelog author="eich@suse.com" date="1599825600">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Revert: Use memoryperjob constraint instead of %limit_build macro.
  This would attempt to find a work whose memory matches the number
  of jobs available * memoryperjob. Such workers may not exist.
- Use 'module load netcdf' - this is now the load command for
  all variants of netcdf.</changelog>
  <changelog author="eich@suse.com" date="1602676800">- Update to version 13.0.0
  For information on changes consult the release notes of
  its sub-packages.
- Update patches:
  * Replace: reproducible.patch by
    Make-kokkos-build-reproducible.patch
  * Remove: reproducible-docs.patch,
    no longer applicable
  * Remove: Fix-Makefiles-for-gmake-4.3.patch,
    no longer applicable
  * Remove: trilinos-11.14.3-no-return-in-non-void.patch,
    int main() -&gt; void main() conversion makes no sense.
  * Add: Add-missing-ENV-DESTDIR.patch
    DESTDIR isn't taken into account.</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1613476800">- Remove /etc/ld.so.conf file that existed for non-HPC, non-MPI.
  It is no longer needed $_lib/trilinos no longer exists.</changelog>
  <changelog author="eich@suse.com" date="1616500800">- Update to version 13.0.1
  For information on changes consult the release notes of
  its sub-packages.</changelog>
  <changelog author="eich@suse.com" date="1642161600">- Update to version 13.2.0
  For information on changes consult the release notes of
  its sub-packages.
  * Remove: Make-kokkos-build-reproducible.patch
    Add-missing-ENV-DESTDIR.patch
  * Add: Fix-control-reaches-end-of-non-void-function-error.patch
    Convert-python2-isms-to-python3.patch
  Not-a-shell-script.patch
- Add dependency for library package to devel package.
- Fix cmake include path (boo#1194648):
  cmake/tribits/core/package_arch/TribitsWriteClientExportFiles.cmake
  uses a logic to calculate the relative path elements between
  the cmake directory and the installation directory. This works
  only if Trilinos_INSTALL_LIB_DIR is relative, while other parts
  of the code allow it to be absolute.
  See also: https://github.com/trilinos/Trilinos/issues/10100
- Fix doc building.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1643544000">- Lower disk and memory constraints to match actual requirements,
  dito %limit_build (now 16 GByte disk and 5 GByte memory).
- Add memoryperjob constraint for a worker preselection, so
  limit_build only lowers the number of jobs slightly.
- Fix cmake files for non-HPC MPI build.
- Add openmpi4 non-HPC flavor</changelog>
  <changelog author="eich@suse.com" date="1643803200">- Fix python modules to use the right include and lib dir:
  Make-include-and-library-path-configurable-using-Cmake-variables.patch
  See also: https://github.com/gsjaardema/seacas/pull/279
- Make sure python modules for serial and MPI variants don't
  overlap.
  NOTE: mpi-selector is not setting PYTHONPATH!
- Free package of all python2 traces.</changelog>
  <changelog author="eich@suse.com" date="1644235200">- Make use of the newly introduced %%hpc_pyton_sitelib macro.</changelog>
  <changelog author="eich@suse.com" date="1648814400">- Tie %python_flavor to python3 on Leap/SLE 15 &lt; SP3
  (bsc#1197781).</changelog>
  <changelog author="eich@suse.com" date="1650628800">- Add an 'Obsoletes:/Provides:' for a bogus package name that
  was released to SLE/Leap by accident.
  This may be removed once we move past version 13.2.0.</changelog>
</package>
<package pkgid="e22258cc82b86fdc726599635c46f98ebf8ed57e4f31664d683b8977db94edd8" name="libtrilinos-gnu-openmpi3-hpc" arch="ppc64le">
  <version epoch="0" ver="13.2.0" rel="150300.3.6.2"/>
  <changelog author="okurz@suse.com" date="1586520000">- Use ninja as cmake builder for potential speedup</changelog>
  <changelog author="junghans@votca.org" date="1587729600">- nvcc_wrapper is a compiler wrapper and should go in -devel
  package
- fix "extra tokens" RPM build errors</changelog>
  <changelog author="eich@suse.com" date="1587902400">- Fix build for gmake 4.3 in a backward compatible way (boo#1170523),
  Fix-Makefiles-for-gmake-4.3.patch was added.</changelog>
  <changelog author="eich@suse.com" date="1587988800">- Eliminate trilinos base package, move %doc and %license files
  to the lib-package and remaining binary files to the devel-package.</changelog>
  <changelog author="eich@suse.com" date="1588248000">- Don't use ninja as cmake generator for Leap/SLE &lt; 15.2
  as it doesn't support fortran.</changelog>
  <changelog author="eich@suse.com" date="1588680000">- Fix dependencies for devel package after eliminating the
  base package:
  * Remove dependency to base package
  * for HPC add dependency to library package</changelog>
  <changelog author="eich@suse.com" date="1588852800">- Again try to fix up dependencies after removing the
  base package.
- Let (non-HPC) trilinos-devel conflict with kokkos-devel</changelog>
  <changelog author="bwiedemann@suse.com" date="1597147200">- Add reproducible.patch to override build date (boo#1047218)
- Add reproducible-docs.patch to sort the file list (boo#1041090)</changelog>
  <changelog author="mliska@suse.cz" date="1597924800">- Use memoryperjob constraint instead of %limit_build macro.</changelog>
  <changelog author="eich@suse.com" date="1599825600">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Revert: Use memoryperjob constraint instead of %limit_build macro.
  This would attempt to find a work whose memory matches the number
  of jobs available * memoryperjob. Such workers may not exist.
- Use 'module load netcdf' - this is now the load command for
  all variants of netcdf.</changelog>
  <changelog author="eich@suse.com" date="1602676800">- Update to version 13.0.0
  For information on changes consult the release notes of
  its sub-packages.
- Update patches:
  * Replace: reproducible.patch by
    Make-kokkos-build-reproducible.patch
  * Remove: reproducible-docs.patch,
    no longer applicable
  * Remove: Fix-Makefiles-for-gmake-4.3.patch,
    no longer applicable
  * Remove: trilinos-11.14.3-no-return-in-non-void.patch,
    int main() -&gt; void main() conversion makes no sense.
  * Add: Add-missing-ENV-DESTDIR.patch
    DESTDIR isn't taken into account.</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1613476800">- Remove /etc/ld.so.conf file that existed for non-HPC, non-MPI.
  It is no longer needed $_lib/trilinos no longer exists.</changelog>
  <changelog author="eich@suse.com" date="1616500800">- Update to version 13.0.1
  For information on changes consult the release notes of
  its sub-packages.</changelog>
  <changelog author="eich@suse.com" date="1642161600">- Update to version 13.2.0
  For information on changes consult the release notes of
  its sub-packages.
  * Remove: Make-kokkos-build-reproducible.patch
    Add-missing-ENV-DESTDIR.patch
  * Add: Fix-control-reaches-end-of-non-void-function-error.patch
    Convert-python2-isms-to-python3.patch
  Not-a-shell-script.patch
- Add dependency for library package to devel package.
- Fix cmake include path (boo#1194648):
  cmake/tribits/core/package_arch/TribitsWriteClientExportFiles.cmake
  uses a logic to calculate the relative path elements between
  the cmake directory and the installation directory. This works
  only if Trilinos_INSTALL_LIB_DIR is relative, while other parts
  of the code allow it to be absolute.
  See also: https://github.com/trilinos/Trilinos/issues/10100
- Fix doc building.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1643544000">- Lower disk and memory constraints to match actual requirements,
  dito %limit_build (now 16 GByte disk and 5 GByte memory).
- Add memoryperjob constraint for a worker preselection, so
  limit_build only lowers the number of jobs slightly.
- Fix cmake files for non-HPC MPI build.
- Add openmpi4 non-HPC flavor</changelog>
  <changelog author="eich@suse.com" date="1643803200">- Fix python modules to use the right include and lib dir:
  Make-include-and-library-path-configurable-using-Cmake-variables.patch
  See also: https://github.com/gsjaardema/seacas/pull/279
- Make sure python modules for serial and MPI variants don't
  overlap.
  NOTE: mpi-selector is not setting PYTHONPATH!
- Free package of all python2 traces.</changelog>
  <changelog author="eich@suse.com" date="1644235200">- Make use of the newly introduced %%hpc_pyton_sitelib macro.</changelog>
  <changelog author="eich@suse.com" date="1648814400">- Tie %python_flavor to python3 on Leap/SLE 15 &lt; SP3
  (bsc#1197781).</changelog>
  <changelog author="eich@suse.com" date="1650628800">- Add an 'Obsoletes:/Provides:' for a bogus package name that
  was released to SLE/Leap by accident.
  This may be removed once we move past version 13.2.0.</changelog>
</package>
<package pkgid="73382d474d7fd740f948da60690486baea09cf20cf0512c2ae0146d689a95176" name="libtrilinos-gnu-openmpi3-hpc" arch="x86_64">
  <version epoch="0" ver="13.2.0" rel="150300.3.6.2"/>
  <changelog author="okurz@suse.com" date="1586520000">- Use ninja as cmake builder for potential speedup</changelog>
  <changelog author="junghans@votca.org" date="1587729600">- nvcc_wrapper is a compiler wrapper and should go in -devel
  package
- fix "extra tokens" RPM build errors</changelog>
  <changelog author="eich@suse.com" date="1587902400">- Fix build for gmake 4.3 in a backward compatible way (boo#1170523),
  Fix-Makefiles-for-gmake-4.3.patch was added.</changelog>
  <changelog author="eich@suse.com" date="1587988800">- Eliminate trilinos base package, move %doc and %license files
  to the lib-package and remaining binary files to the devel-package.</changelog>
  <changelog author="eich@suse.com" date="1588248000">- Don't use ninja as cmake generator for Leap/SLE &lt; 15.2
  as it doesn't support fortran.</changelog>
  <changelog author="eich@suse.com" date="1588680000">- Fix dependencies for devel package after eliminating the
  base package:
  * Remove dependency to base package
  * for HPC add dependency to library package</changelog>
  <changelog author="eich@suse.com" date="1588852800">- Again try to fix up dependencies after removing the
  base package.
- Let (non-HPC) trilinos-devel conflict with kokkos-devel</changelog>
  <changelog author="bwiedemann@suse.com" date="1597147200">- Add reproducible.patch to override build date (boo#1047218)
- Add reproducible-docs.patch to sort the file list (boo#1041090)</changelog>
  <changelog author="mliska@suse.cz" date="1597924800">- Use memoryperjob constraint instead of %limit_build macro.</changelog>
  <changelog author="eich@suse.com" date="1599825600">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Revert: Use memoryperjob constraint instead of %limit_build macro.
  This would attempt to find a work whose memory matches the number
  of jobs available * memoryperjob. Such workers may not exist.
- Use 'module load netcdf' - this is now the load command for
  all variants of netcdf.</changelog>
  <changelog author="eich@suse.com" date="1602676800">- Update to version 13.0.0
  For information on changes consult the release notes of
  its sub-packages.
- Update patches:
  * Replace: reproducible.patch by
    Make-kokkos-build-reproducible.patch
  * Remove: reproducible-docs.patch,
    no longer applicable
  * Remove: Fix-Makefiles-for-gmake-4.3.patch,
    no longer applicable
  * Remove: trilinos-11.14.3-no-return-in-non-void.patch,
    int main() -&gt; void main() conversion makes no sense.
  * Add: Add-missing-ENV-DESTDIR.patch
    DESTDIR isn't taken into account.</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1613476800">- Remove /etc/ld.so.conf file that existed for non-HPC, non-MPI.
  It is no longer needed $_lib/trilinos no longer exists.</changelog>
  <changelog author="eich@suse.com" date="1616500800">- Update to version 13.0.1
  For information on changes consult the release notes of
  its sub-packages.</changelog>
  <changelog author="eich@suse.com" date="1642161600">- Update to version 13.2.0
  For information on changes consult the release notes of
  its sub-packages.
  * Remove: Make-kokkos-build-reproducible.patch
    Add-missing-ENV-DESTDIR.patch
  * Add: Fix-control-reaches-end-of-non-void-function-error.patch
    Convert-python2-isms-to-python3.patch
  Not-a-shell-script.patch
- Add dependency for library package to devel package.
- Fix cmake include path (boo#1194648):
  cmake/tribits/core/package_arch/TribitsWriteClientExportFiles.cmake
  uses a logic to calculate the relative path elements between
  the cmake directory and the installation directory. This works
  only if Trilinos_INSTALL_LIB_DIR is relative, while other parts
  of the code allow it to be absolute.
  See also: https://github.com/trilinos/Trilinos/issues/10100
- Fix doc building.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1643544000">- Lower disk and memory constraints to match actual requirements,
  dito %limit_build (now 16 GByte disk and 5 GByte memory).
- Add memoryperjob constraint for a worker preselection, so
  limit_build only lowers the number of jobs slightly.
- Fix cmake files for non-HPC MPI build.
- Add openmpi4 non-HPC flavor</changelog>
  <changelog author="eich@suse.com" date="1643803200">- Fix python modules to use the right include and lib dir:
  Make-include-and-library-path-configurable-using-Cmake-variables.patch
  See also: https://github.com/gsjaardema/seacas/pull/279
- Make sure python modules for serial and MPI variants don't
  overlap.
  NOTE: mpi-selector is not setting PYTHONPATH!
- Free package of all python2 traces.</changelog>
  <changelog author="eich@suse.com" date="1644235200">- Make use of the newly introduced %%hpc_pyton_sitelib macro.</changelog>
  <changelog author="eich@suse.com" date="1648814400">- Tie %python_flavor to python3 on Leap/SLE 15 &lt; SP3
  (bsc#1197781).</changelog>
  <changelog author="eich@suse.com" date="1650628800">- Add an 'Obsoletes:/Provides:' for a bogus package name that
  was released to SLE/Leap by accident.
  This may be removed once we move past version 13.2.0.</changelog>
</package>
<package pkgid="26154c37cc636f13d27fc9c4ead6e80d4b3e13d76e22898f45327ea41446c131" name="libtrilinos-gnu-openmpi4-hpc" arch="aarch64">
  <version epoch="0" ver="13.2.0" rel="150300.3.6.1"/>
  <changelog author="okurz@suse.com" date="1586520000">- Use ninja as cmake builder for potential speedup</changelog>
  <changelog author="junghans@votca.org" date="1587729600">- nvcc_wrapper is a compiler wrapper and should go in -devel
  package
- fix "extra tokens" RPM build errors</changelog>
  <changelog author="eich@suse.com" date="1587902400">- Fix build for gmake 4.3 in a backward compatible way (boo#1170523),
  Fix-Makefiles-for-gmake-4.3.patch was added.</changelog>
  <changelog author="eich@suse.com" date="1587988800">- Eliminate trilinos base package, move %doc and %license files
  to the lib-package and remaining binary files to the devel-package.</changelog>
  <changelog author="eich@suse.com" date="1588248000">- Don't use ninja as cmake generator for Leap/SLE &lt; 15.2
  as it doesn't support fortran.</changelog>
  <changelog author="eich@suse.com" date="1588680000">- Fix dependencies for devel package after eliminating the
  base package:
  * Remove dependency to base package
  * for HPC add dependency to library package</changelog>
  <changelog author="eich@suse.com" date="1588852800">- Again try to fix up dependencies after removing the
  base package.
- Let (non-HPC) trilinos-devel conflict with kokkos-devel</changelog>
  <changelog author="bwiedemann@suse.com" date="1597147200">- Add reproducible.patch to override build date (boo#1047218)
- Add reproducible-docs.patch to sort the file list (boo#1041090)</changelog>
  <changelog author="mliska@suse.cz" date="1597924800">- Use memoryperjob constraint instead of %limit_build macro.</changelog>
  <changelog author="eich@suse.com" date="1599825600">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Revert: Use memoryperjob constraint instead of %limit_build macro.
  This would attempt to find a work whose memory matches the number
  of jobs available * memoryperjob. Such workers may not exist.
- Use 'module load netcdf' - this is now the load command for
  all variants of netcdf.</changelog>
  <changelog author="eich@suse.com" date="1602676800">- Update to version 13.0.0
  For information on changes consult the release notes of
  its sub-packages.
- Update patches:
  * Replace: reproducible.patch by
    Make-kokkos-build-reproducible.patch
  * Remove: reproducible-docs.patch,
    no longer applicable
  * Remove: Fix-Makefiles-for-gmake-4.3.patch,
    no longer applicable
  * Remove: trilinos-11.14.3-no-return-in-non-void.patch,
    int main() -&gt; void main() conversion makes no sense.
  * Add: Add-missing-ENV-DESTDIR.patch
    DESTDIR isn't taken into account.</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1613476800">- Remove /etc/ld.so.conf file that existed for non-HPC, non-MPI.
  It is no longer needed $_lib/trilinos no longer exists.</changelog>
  <changelog author="eich@suse.com" date="1616500800">- Update to version 13.0.1
  For information on changes consult the release notes of
  its sub-packages.</changelog>
  <changelog author="eich@suse.com" date="1642161600">- Update to version 13.2.0
  For information on changes consult the release notes of
  its sub-packages.
  * Remove: Make-kokkos-build-reproducible.patch
    Add-missing-ENV-DESTDIR.patch
  * Add: Fix-control-reaches-end-of-non-void-function-error.patch
    Convert-python2-isms-to-python3.patch
  Not-a-shell-script.patch
- Add dependency for library package to devel package.
- Fix cmake include path (boo#1194648):
  cmake/tribits/core/package_arch/TribitsWriteClientExportFiles.cmake
  uses a logic to calculate the relative path elements between
  the cmake directory and the installation directory. This works
  only if Trilinos_INSTALL_LIB_DIR is relative, while other parts
  of the code allow it to be absolute.
  See also: https://github.com/trilinos/Trilinos/issues/10100
- Fix doc building.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1643544000">- Lower disk and memory constraints to match actual requirements,
  dito %limit_build (now 16 GByte disk and 5 GByte memory).
- Add memoryperjob constraint for a worker preselection, so
  limit_build only lowers the number of jobs slightly.
- Fix cmake files for non-HPC MPI build.
- Add openmpi4 non-HPC flavor</changelog>
  <changelog author="eich@suse.com" date="1643803200">- Fix python modules to use the right include and lib dir:
  Make-include-and-library-path-configurable-using-Cmake-variables.patch
  See also: https://github.com/gsjaardema/seacas/pull/279
- Make sure python modules for serial and MPI variants don't
  overlap.
  NOTE: mpi-selector is not setting PYTHONPATH!
- Free package of all python2 traces.</changelog>
  <changelog author="eich@suse.com" date="1644235200">- Make use of the newly introduced %%hpc_pyton_sitelib macro.</changelog>
  <changelog author="eich@suse.com" date="1648814400">- Tie %python_flavor to python3 on Leap/SLE 15 &lt; SP3
  (bsc#1197781).</changelog>
  <changelog author="eich@suse.com" date="1650628800">- Add an 'Obsoletes:/Provides:' for a bogus package name that
  was released to SLE/Leap by accident.
  This may be removed once we move past version 13.2.0.</changelog>
</package>
<package pkgid="050174dfb6db8f0f43cb11d6e34d4e9c766713390a0065804aa09c854750ff5f" name="libtrilinos-gnu-openmpi4-hpc" arch="ppc64le">
  <version epoch="0" ver="13.2.0" rel="150300.3.6.1"/>
  <changelog author="okurz@suse.com" date="1586520000">- Use ninja as cmake builder for potential speedup</changelog>
  <changelog author="junghans@votca.org" date="1587729600">- nvcc_wrapper is a compiler wrapper and should go in -devel
  package
- fix "extra tokens" RPM build errors</changelog>
  <changelog author="eich@suse.com" date="1587902400">- Fix build for gmake 4.3 in a backward compatible way (boo#1170523),
  Fix-Makefiles-for-gmake-4.3.patch was added.</changelog>
  <changelog author="eich@suse.com" date="1587988800">- Eliminate trilinos base package, move %doc and %license files
  to the lib-package and remaining binary files to the devel-package.</changelog>
  <changelog author="eich@suse.com" date="1588248000">- Don't use ninja as cmake generator for Leap/SLE &lt; 15.2
  as it doesn't support fortran.</changelog>
  <changelog author="eich@suse.com" date="1588680000">- Fix dependencies for devel package after eliminating the
  base package:
  * Remove dependency to base package
  * for HPC add dependency to library package</changelog>
  <changelog author="eich@suse.com" date="1588852800">- Again try to fix up dependencies after removing the
  base package.
- Let (non-HPC) trilinos-devel conflict with kokkos-devel</changelog>
  <changelog author="bwiedemann@suse.com" date="1597147200">- Add reproducible.patch to override build date (boo#1047218)
- Add reproducible-docs.patch to sort the file list (boo#1041090)</changelog>
  <changelog author="mliska@suse.cz" date="1597924800">- Use memoryperjob constraint instead of %limit_build macro.</changelog>
  <changelog author="eich@suse.com" date="1599825600">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Revert: Use memoryperjob constraint instead of %limit_build macro.
  This would attempt to find a work whose memory matches the number
  of jobs available * memoryperjob. Such workers may not exist.
- Use 'module load netcdf' - this is now the load command for
  all variants of netcdf.</changelog>
  <changelog author="eich@suse.com" date="1602676800">- Update to version 13.0.0
  For information on changes consult the release notes of
  its sub-packages.
- Update patches:
  * Replace: reproducible.patch by
    Make-kokkos-build-reproducible.patch
  * Remove: reproducible-docs.patch,
    no longer applicable
  * Remove: Fix-Makefiles-for-gmake-4.3.patch,
    no longer applicable
  * Remove: trilinos-11.14.3-no-return-in-non-void.patch,
    int main() -&gt; void main() conversion makes no sense.
  * Add: Add-missing-ENV-DESTDIR.patch
    DESTDIR isn't taken into account.</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1613476800">- Remove /etc/ld.so.conf file that existed for non-HPC, non-MPI.
  It is no longer needed $_lib/trilinos no longer exists.</changelog>
  <changelog author="eich@suse.com" date="1616500800">- Update to version 13.0.1
  For information on changes consult the release notes of
  its sub-packages.</changelog>
  <changelog author="eich@suse.com" date="1642161600">- Update to version 13.2.0
  For information on changes consult the release notes of
  its sub-packages.
  * Remove: Make-kokkos-build-reproducible.patch
    Add-missing-ENV-DESTDIR.patch
  * Add: Fix-control-reaches-end-of-non-void-function-error.patch
    Convert-python2-isms-to-python3.patch
  Not-a-shell-script.patch
- Add dependency for library package to devel package.
- Fix cmake include path (boo#1194648):
  cmake/tribits/core/package_arch/TribitsWriteClientExportFiles.cmake
  uses a logic to calculate the relative path elements between
  the cmake directory and the installation directory. This works
  only if Trilinos_INSTALL_LIB_DIR is relative, while other parts
  of the code allow it to be absolute.
  See also: https://github.com/trilinos/Trilinos/issues/10100
- Fix doc building.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1643544000">- Lower disk and memory constraints to match actual requirements,
  dito %limit_build (now 16 GByte disk and 5 GByte memory).
- Add memoryperjob constraint for a worker preselection, so
  limit_build only lowers the number of jobs slightly.
- Fix cmake files for non-HPC MPI build.
- Add openmpi4 non-HPC flavor</changelog>
  <changelog author="eich@suse.com" date="1643803200">- Fix python modules to use the right include and lib dir:
  Make-include-and-library-path-configurable-using-Cmake-variables.patch
  See also: https://github.com/gsjaardema/seacas/pull/279
- Make sure python modules for serial and MPI variants don't
  overlap.
  NOTE: mpi-selector is not setting PYTHONPATH!
- Free package of all python2 traces.</changelog>
  <changelog author="eich@suse.com" date="1644235200">- Make use of the newly introduced %%hpc_pyton_sitelib macro.</changelog>
  <changelog author="eich@suse.com" date="1648814400">- Tie %python_flavor to python3 on Leap/SLE 15 &lt; SP3
  (bsc#1197781).</changelog>
  <changelog author="eich@suse.com" date="1650628800">- Add an 'Obsoletes:/Provides:' for a bogus package name that
  was released to SLE/Leap by accident.
  This may be removed once we move past version 13.2.0.</changelog>
</package>
<package pkgid="624ec900fbb12bab46a55ea440b23b120a8eb636ffcff2f9a8e5189ccad445c8" name="libtrilinos-gnu-openmpi4-hpc" arch="x86_64">
  <version epoch="0" ver="13.2.0" rel="150300.3.6.1"/>
  <changelog author="okurz@suse.com" date="1586520000">- Use ninja as cmake builder for potential speedup</changelog>
  <changelog author="junghans@votca.org" date="1587729600">- nvcc_wrapper is a compiler wrapper and should go in -devel
  package
- fix "extra tokens" RPM build errors</changelog>
  <changelog author="eich@suse.com" date="1587902400">- Fix build for gmake 4.3 in a backward compatible way (boo#1170523),
  Fix-Makefiles-for-gmake-4.3.patch was added.</changelog>
  <changelog author="eich@suse.com" date="1587988800">- Eliminate trilinos base package, move %doc and %license files
  to the lib-package and remaining binary files to the devel-package.</changelog>
  <changelog author="eich@suse.com" date="1588248000">- Don't use ninja as cmake generator for Leap/SLE &lt; 15.2
  as it doesn't support fortran.</changelog>
  <changelog author="eich@suse.com" date="1588680000">- Fix dependencies for devel package after eliminating the
  base package:
  * Remove dependency to base package
  * for HPC add dependency to library package</changelog>
  <changelog author="eich@suse.com" date="1588852800">- Again try to fix up dependencies after removing the
  base package.
- Let (non-HPC) trilinos-devel conflict with kokkos-devel</changelog>
  <changelog author="bwiedemann@suse.com" date="1597147200">- Add reproducible.patch to override build date (boo#1047218)
- Add reproducible-docs.patch to sort the file list (boo#1041090)</changelog>
  <changelog author="mliska@suse.cz" date="1597924800">- Use memoryperjob constraint instead of %limit_build macro.</changelog>
  <changelog author="eich@suse.com" date="1599825600">- Add build support for gcc10 to HPC build (bsc#1174439).
- Add openmpi4 flavors.
- Revert: Use memoryperjob constraint instead of %limit_build macro.
  This would attempt to find a work whose memory matches the number
  of jobs available * memoryperjob. Such workers may not exist.
- Use 'module load netcdf' - this is now the load command for
  all variants of netcdf.</changelog>
  <changelog author="eich@suse.com" date="1602676800">- Update to version 13.0.0
  For information on changes consult the release notes of
  its sub-packages.
- Update patches:
  * Replace: reproducible.patch by
    Make-kokkos-build-reproducible.patch
  * Remove: reproducible-docs.patch,
    no longer applicable
  * Remove: Fix-Makefiles-for-gmake-4.3.patch,
    no longer applicable
  * Remove: trilinos-11.14.3-no-return-in-non-void.patch,
    int main() -&gt; void main() conversion makes no sense.
  * Add: Add-missing-ENV-DESTDIR.patch
    DESTDIR isn't taken into account.</changelog>
  <changelog author="eich@suse.com" date="1612353600">- Change 'Requires:' to other HPC packages to %requires_eq to depend
  on the exact version. This should take care of HPC packages ignoring
  proper ABI versioning.</changelog>
  <changelog author="eich@suse.com" date="1613476800">- Remove /etc/ld.so.conf file that existed for non-HPC, non-MPI.
  It is no longer needed $_lib/trilinos no longer exists.</changelog>
  <changelog author="eich@suse.com" date="1616500800">- Update to version 13.0.1
  For information on changes consult the release notes of
  its sub-packages.</changelog>
  <changelog author="eich@suse.com" date="1642161600">- Update to version 13.2.0
  For information on changes consult the release notes of
  its sub-packages.
  * Remove: Make-kokkos-build-reproducible.patch
    Add-missing-ENV-DESTDIR.patch
  * Add: Fix-control-reaches-end-of-non-void-function-error.patch
    Convert-python2-isms-to-python3.patch
  Not-a-shell-script.patch
- Add dependency for library package to devel package.
- Fix cmake include path (boo#1194648):
  cmake/tribits/core/package_arch/TribitsWriteClientExportFiles.cmake
  uses a logic to calculate the relative path elements between
  the cmake directory and the installation directory. This works
  only if Trilinos_INSTALL_LIB_DIR is relative, while other parts
  of the code allow it to be absolute.
  See also: https://github.com/trilinos/Trilinos/issues/10100
- Fix doc building.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1643544000">- Lower disk and memory constraints to match actual requirements,
  dito %limit_build (now 16 GByte disk and 5 GByte memory).
- Add memoryperjob constraint for a worker preselection, so
  limit_build only lowers the number of jobs slightly.
- Fix cmake files for non-HPC MPI build.
- Add openmpi4 non-HPC flavor</changelog>
  <changelog author="eich@suse.com" date="1643803200">- Fix python modules to use the right include and lib dir:
  Make-include-and-library-path-configurable-using-Cmake-variables.patch
  See also: https://github.com/gsjaardema/seacas/pull/279
- Make sure python modules for serial and MPI variants don't
  overlap.
  NOTE: mpi-selector is not setting PYTHONPATH!
- Free package of all python2 traces.</changelog>
  <changelog author="eich@suse.com" date="1644235200">- Make use of the newly introduced %%hpc_pyton_sitelib macro.</changelog>
  <changelog author="eich@suse.com" date="1648814400">- Tie %python_flavor to python3 on Leap/SLE 15 &lt; SP3
  (bsc#1197781).</changelog>
  <changelog author="eich@suse.com" date="1650628800">- Add an 'Obsoletes:/Provides:' for a bogus package name that
  was released to SLE/Leap by accident.
  This may be removed once we move past version 13.2.0.</changelog>
</package>
<package pkgid="af2870871f2fe5b345e583d6599e127e4675c27ebc3c7578b26e8103e529f72c" name="libtsan0" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="128c6c77ecc2ca29a57a1a828f4fcf034302fae9892315ffb174efd1895e71f4" name="libtsan0" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="9e20d9b80b0dcabf43bfd0bf3db086ef549b26720bf87863fda6ab211a821861" name="libtsan0" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="6e4cf93c999d07c0cfc146c1445f56fff511401146035a7ee2243515134e542d" name="libubsan1" arch="aarch64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="49eb60a921b9f74257ed7a245dd3bd4494b519f77f2286a687eda99cd5d9df95" name="libubsan1" arch="ppc64le">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="b5b78d1df5f4faf8ddf79509cfef89f10db8abcd61cabe9b56286ad47f68d198" name="libubsan1" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="b58bbf07af9c96fa68bbc892e359e7ffa0c50cb16af375bc498666368dcc2219" name="libubsan1" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="a566cb7877469cdde275d176ffa509fe9e78a3d7adfa76b3c33a6ca35f8ff202" name="libubsan1-32bit" arch="s390x">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="630b3ac951dcaadf32cb5e9c4e0ce9c83adaaca708dde89d9c7fff5761bb2064" name="libubsan1-32bit" arch="x86_64">
  <version epoch="0" ver="11.3.0+git1637" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1625832000">- Add BuildRequires on netcfg for the testsuite when testing Go.</changelog>
  <changelog author="schwab@suse.de" date="1626696000">- Remove bits/unistd_ext.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1626868800">- Properly adjust GPL-3.0 WITH GCC-exception-3.1 to
  GPL-3.0-or-later WITH GCC-exception-3.1</changelog>
  <changelog author="rguenther@suse.com" date="1626868801">- Update to gcc-11 branch head (076930b9690ac3564638636f6b), git536
  * Includes GCC 11.2 RC1.
- Refresh gcc10-foffload-default.patch</changelog>
  <changelog author="rguenther@suse.com" date="1629115200">- Update to gcc-11 branch head (056e324ce46a7924b5cf10f610), git610
  * Includes GCC 11.2 release
  * Includes fix for opie build with glibc 2.34  [boo#1188623]</changelog>
  <changelog author="schwab@suse.de" date="1629288000">- Require libgccjit%{libgccjit_sover}%{libgccjit_suffix} from
  libgccjit%{libgccjit_sover}-devel%{libdevel_suffix}.</changelog>
  <changelog author="matz@suse.com" date="1632139200">- Enable the full cross compiler, cross-aarch64-gcc11 and
  cross-riscv64-gcc11 now provide a fully hosted C (and C++)
  cross compiler, not just a freestanding one.  I.e. with a cross
  glibc.  They don't yet support the sanitizer libraries.
  Part of [jsc#OBS-124].</changelog>
  <changelog author="rguenther@suse.com" date="1634731200">- Remove spurious exit from change_spec.</changelog>
  <changelog author="rguenther@suse.com" date="1637755200">- Update to gcc-11 branch head (7510c23c1ec53aa4a62705f03), git1018
  * fixes issue with debug dumping together with -o /dev/null
  * fixes libgccjit issue showing up in emacs build  [boo#1192951]
- Package mwaitintrin.h</changelog>
  <changelog author="matz@suse.com" date="1637928000">- Enable the cross compilers also on i586
- Enable some cross compilers also in rings
- Remove cross compilers for i386 target</changelog>
  <changelog author="mliska@suse.cz" date="1639569600">- Update to gcc-11 branch head (d4a1d3c4b377f1d4acb), git1173
  * Fix D memory corruption in -M output.
  * Fix ICE in is_this_parameter with coroutines.  [boo#1193659]</changelog>
  <changelog author="schwab@suse.de" date="1642507200">- Remove sys/rseq.h from include-fixed</changelog>
  <changelog author="rguenther@suse.com" date="1644408000">- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.</changelog>
  <changelog author="rguenther@suse.com" date="1644494400">- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]</changelog>
  <changelog author="rguenther@suse.com" date="1646222400">- Add a list of Obsoletes to libstdc++6-pp-gcc11 so updates from
  packages provided by older GCC work.  Add a requires from that
  package to the corresponding libstc++6 package to keep those
  at the same version.  [bsc#1196107]</changelog>
  <changelog author="dmueller@suse.com" date="1646654400">- drop armv5tel, merge arm and armv6hl
- use --with-cpu rather than specifying --with-arch/--with-tune</changelog>
  <changelog author="rguenther@suse.com" date="1647432000">- Update to gcc-11 branch head (6a1150d1524aeda3381b21717), git1406
  * includes change to adjust gnats idea of the target, fixing
    the build of gprbuild.  [bsc#1196861]
- Add gcc11-pr104931.patch to fix miscompile of embedded premake
  in 0ad on i586.  [bsc#1197065]</changelog>
  <changelog author="rguenther@suse.com" date="1648814400">- Add provides/conflicts to glibc crosses since only one GCC version
  for the same target can be installed at the same time.
- Add provides/conflicts to libgccjit.</changelog>
  <changelog author="rguenther@suse.com" date="1650456000">- Update to gcc-11 branch head (691af15031e00227ba6d5935c), git1635
  * includes gcc11-pr104931.patch
  * includes fix for Firefox ICE  [gcc#105256]</changelog>
  <changelog author="rguenther@suse.com" date="1650542400">- Update to the GCC 11.3.0 release.
  * includes SLS hardening backport on x86_64.  [bsc#1195283]</changelog>
</package>
<package pkgid="e9e2954e3f47930c839d601c045f1e302fb224ac9eeca8b6644889923cc88b6c" name="libudev-devel" arch="aarch64">
  <version epoch="0" ver="246.16" rel="150300.7.45.1"/>
  <changelog author="fbui@suse.com" date="1631275200">- Drop 1007-tmpfiles-follow-SUSE-policies.patch
  Since most of the tmpfiles config files shipped by upstream are
  ignored (see previous commit "Drop most of the tmpfiles that deal
  with generic paths"), this patch is no more relevant.</changelog>
  <changelog author="fbui@suse.com" date="1631707200">- Import commit 263f7076bc77475045193653a785bbdc0457b5c6
  239e0ce5e7 journalctl: never fail at flushing when the flushed flag is set (bsc#1188588)
  0db7e590e1 manager: reexecute on SIGRTMIN+25, user instances only
  ef8afc4545 core: Make sure cgroup_oom_queue is flushed on manager exit
  f794e01080 cgroup: do 'catchup' for unit cgroup inotify watch files
  54369b7660 manager: Fix HW watchdog when systemd starts before driver loaded (bsc#1189446)
  1d0524bd54 pid1: various minor watchdog modernizations</changelog>
  <changelog author="fbui@suse.com" date="1632398400">- Enable support for Portable Services (jsc#SLE-21694)
  Will be released in Leap only.</changelog>
  <changelog author="fbui@suse.com" date="1635336000">- Import commit 5d20af26eee6507bfa9fdb6e5dd4bfc187e3399e
  37e021ee84 mount-util: fix fd_is_mount_point() when both the parent and directory are network fs (bsc#1190984)
  2aee16afd0 mountpoint-util: rebreak some comments
  962e487cb4 virt: Support detection for ARM64 Hyper-V guests (bsc#1186071)
  8545a66afd Use BIOS characteristics to distinguish EC2 bare-metal from VMs
  03311b59c3 machine-id-setup: generate machine-id from DMI product ID on Amazon EC2
  0fc3118a67 id128-util: use common implementation of helper to get/validate product ID
  83bfa06ebc virt: detect Amazon EC2 Nitro instance (bsc#1190440)
  e8b8df3ed9 core: move several source files to src/shared</changelog>
  <changelog author="fbui@suse.com" date="1635422400">- Import commit f2f061f1da064bfd47e2201967a854bb9281ca5b
  98e87fc3fd busctl: use usec granularity for the timestamp printed by the busctl monitor command (jsc#SLE-17798)</changelog>
  <changelog author="mwilck@suse.com" date="1636459200">- Fix IO scheduler udev rules
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="fbui@suse.com" date="1639396800">- Import commit 34eba0c28cb02d15fdbf55ce28bdfa56142ae4d1
  0a8cb60af6 Bump the max number of inodes for /dev to a million (bsc#1192858)
  848c9207cb Bump the max number of inodes for /dev to 128k (bsc#1192858)
  ea44eb34f2 sleep: don't skip resume device with low priority/available space (bsc#1192423)
  9325a68316 test: use kbd-mode-map we ship in one more test case
  8ff379e11d test-keymap-util: always use kbd-model-map we ship</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">* 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)</changelog>
  <changelog author="fbui@suse.com" date="1641297600">- Suppress PAM warning when the credentials for user@.service service are
  established (bsc#1190515)
  systemd-user PAM service needs to define a default implementation of
  pam_setcred() otherwise the fallback (defined by /etc/pam.d/other) is used,
  which consists of pam_warn.so + pam_deny.so, and will throw a warning each
  time a user logs in.
  The new default simply consists in calling pam_deny.so alone.</changelog>
  <changelog author="fbui@suse.com" date="1641470400">- Import commit 3850086c6580291188fe574ad37c8026012894fb
  c0505cbb8d tmpfiles: 'st' may have been used uninitialized
  d3f7c9e806 macro: add new helper RET_NERRNO()
  4a95baa5de rm-rf: optionally fsync() after removing directory tree
  dd8137a589 rm-rf: refactor rm_rf_children(), split out body of directory iteration loop
  3f8765ed2c rm-rf: fstatat() might fail if containing dir has limited access mode, patch that too
  87d39407b7 btrfs-util: add helper that abstracts "might be btrfs subvol?" check
  71ed335c7a rm-rf: add new flag REMOVE_CHMOD
  611376f830 rules: don't ignore Xen virtual interfaces anymore (bsc#1178561)
  All these commits except the last one (611376f830) are preparation for
  CVE-2021-3997.
- Drop 0001-rules-don-t-ignore-Xen-interfaces-anymore.patch
  It's been merged in the git repo (commit 611376f830).</changelog>
  <changelog author="fbui@suse.com" date="1641470401">- Added patches to fix CVE-2021-3997 (bsc#1194178)
  5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  These patches will be moved to the git repo once the bug will become
  public.</changelog>
  <changelog author="fbui@suse.com" date="1641816000">- Add 1009-Drop-or-soften-some-of-the-deprecation-warnings.patch (bsc#1193086)</changelog>
  <changelog author="fbui@suse.com" date="1643198400">- resolved: disable DNSSEC until the following issue is solved:
  https://github.com/systemd/systemd/issues/10579
- resolved: disable fallback DNS servers and fail when no DNS server info could
  be obtained from the links. It's better to let the sysadmin know that
  something is likely misconfigured rather than silently handing over the DNS
  queries to Google or Cloudflare.
- resolved: DNSSEC support (build) requires openssl therefore document this
  build dependency in systemd-network sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1643371200">- Import commit 6a96632f26f20a68578f9d620a593ceab2a0e3b6
  c4aa40982c shared/rm-rf: loop over nested directories instead of instead of recursing (CVE-2021-3997 bsc#1194178)
  ae13ea6511 shared/rm_rf: refactor rm_rf() to shorten code a bit
  3266d7f5c8 shared/rm_rf: refactor rm_rf_children_inner() to shorten code a bit
- Drop 5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  Drop 5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  Drop 5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  They have been merged into 'SUSE/v246' branch.</changelog>
  <changelog author="fbui@suse.com" date="1643889600">- Import commit 773652879446a81689c39aea23a486627992409b
  a76263ced9 meson: allow extra net naming schemes to be defined during configuration
  301bf4f1bf meson: drop the list of valid net naming schemes
  b89924793d netif-naming: inline one iterator variable
  da4a4df29c udev: fix potential memleak
  d60486bf1b udev: allow onboard index up to 65535
  ac2baecc84 udev: use snprintf_ok()
  8aad315c7c udev: fix potential infinite loop
  471ea73eb0 udev: make dev_pci_slot() return earlier when PCI bridge is found
  69b7c9a6bd udev: use uint32_t for hotplug_slot
  cdd0e89c0e udev: split out logic of parsing s390 PCI slots
  84e1a91baa udev: it is not necessary that the path is readable
  03548e8d0e udev: add missing initialization to fix freeing invalid address
  772f964bf6 udev: fix slot based network names on s390
  c5071cf699 tree-wide: fix typo
  06640d06df net_id: fix newly added naming scheme name
  58f9592f1f udev/net_id: don't generate slot based names if multiple devices might claim the same slot (bsc#1192637)
  df9e240c92 udev/net_id: parse _SUN ACPI index as a signed integer
  cfcaddfa74 localectl: don't omit keymaps files that are symlinks (bsc#1191826)
- Add in quarantine 6000-udev-net_id-add-debug-logging-for-construction-of-de.patch
  Add in quarantine 6001-udev-net_id-show-the-correct-identifier-in-the-debug.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1647518400">- update s390 udev rules conversion script to include the case when
  the legacy rule was also 41-* (bsc#1195247)
  * change scripts-udev-convert-rules.sh</changelog>
  <changelog author="fbui@suse.com" date="1647518401">- Import commit 117e7b96f8e8c63a9eec3459147f5352015a6d08
  3a395b156d Don't open /var journals in volatile mode when runtime_journal==NULL
  1cd65c15e4 udev: 60-persistent-storage-tape.rules: handle duplicate device ID (bsc#1195529)
  3ee9953dd4 man: tweak description of auto/noauto (bsc#1191502)
  6cfeacbf86 shared/install: ignore failures for auxiliary files
  37083278ed install: make UnitFileChangeType enum anonymous
  0a02185526 shared/install: reduce scope of iterator variables
  86c55bde7f systemd-coredump: allow setting external core size to infinity (bsc#1195899 jsc#SLE-23867)</changelog>
  <changelog author="fbui@suse.com" date="1647518402">- Fix the default target when it's been incorrectly set to one of the runlevel
  targets (bsc#1196567)
  The script 'upgrade-from-pre-210.sh' used to initialize the default target
  during migration from sysvinit to systemd. However it created symlinks to
  runlevel targets, which are deprecated. If such symlinks are found the script
  now renames them to point to 'true' systemd target units.
- When migrating from sysvinit to systemd (it probably won't happen anymore),
  let's use the default systemd target, which is the graphical.target one. In
  most cases it will do the right thing anyway.</changelog>
  <changelog author="fbui@suse.com" date="1648036800">- spec: cope with %{_modprobedir} being /lib/modprobe.d on SLE</changelog>
  <changelog author="fbui@suse.com" date="1650369600">- Import commit 12b0904b9117aeaef138784e5b118b82cd87d7cb
  b579fe1e09 tmpfiles: constify item_compatible() parameters
  01f4af3573 test: add test checking tmpfiles conf file precedence
  e8f4d24e97 test tmpfiles: add a test for 'w+'
  9c559f3854 tmpfiles.d: only 'w+' can have multiple lines for the same path (bsc#1198090)
  7fab6b6a6e journald: make use of CLAMP() in cache_space_refresh()
  1c8b02567c journald: make sure journal_file_open() doesn't leave a corrupted file around after failing (bsc#1198114)
  0007446abc journal-file: port journal_file_open() to openat_report_new()
  a07ad29813 fs-util: make sure openat_report_new() initializes return param also on shortcut
  6bb087a1fc fs-util: fix typos in comments
  42532a8bfb fs-util: add openat_report_new() wrapper around openat()</changelog>
</package>
<package pkgid="28d8e2e2bb49133717cd2c74e71fee68e2afb27d8064cbd29dce431c78d8e759" name="libudev-devel" arch="ppc64le">
  <version epoch="0" ver="246.16" rel="150300.7.45.1"/>
  <changelog author="fbui@suse.com" date="1631275200">- Drop 1007-tmpfiles-follow-SUSE-policies.patch
  Since most of the tmpfiles config files shipped by upstream are
  ignored (see previous commit "Drop most of the tmpfiles that deal
  with generic paths"), this patch is no more relevant.</changelog>
  <changelog author="fbui@suse.com" date="1631707200">- Import commit 263f7076bc77475045193653a785bbdc0457b5c6
  239e0ce5e7 journalctl: never fail at flushing when the flushed flag is set (bsc#1188588)
  0db7e590e1 manager: reexecute on SIGRTMIN+25, user instances only
  ef8afc4545 core: Make sure cgroup_oom_queue is flushed on manager exit
  f794e01080 cgroup: do 'catchup' for unit cgroup inotify watch files
  54369b7660 manager: Fix HW watchdog when systemd starts before driver loaded (bsc#1189446)
  1d0524bd54 pid1: various minor watchdog modernizations</changelog>
  <changelog author="fbui@suse.com" date="1632398400">- Enable support for Portable Services (jsc#SLE-21694)
  Will be released in Leap only.</changelog>
  <changelog author="fbui@suse.com" date="1635336000">- Import commit 5d20af26eee6507bfa9fdb6e5dd4bfc187e3399e
  37e021ee84 mount-util: fix fd_is_mount_point() when both the parent and directory are network fs (bsc#1190984)
  2aee16afd0 mountpoint-util: rebreak some comments
  962e487cb4 virt: Support detection for ARM64 Hyper-V guests (bsc#1186071)
  8545a66afd Use BIOS characteristics to distinguish EC2 bare-metal from VMs
  03311b59c3 machine-id-setup: generate machine-id from DMI product ID on Amazon EC2
  0fc3118a67 id128-util: use common implementation of helper to get/validate product ID
  83bfa06ebc virt: detect Amazon EC2 Nitro instance (bsc#1190440)
  e8b8df3ed9 core: move several source files to src/shared</changelog>
  <changelog author="fbui@suse.com" date="1635422400">- Import commit f2f061f1da064bfd47e2201967a854bb9281ca5b
  98e87fc3fd busctl: use usec granularity for the timestamp printed by the busctl monitor command (jsc#SLE-17798)</changelog>
  <changelog author="mwilck@suse.com" date="1636459200">- Fix IO scheduler udev rules
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="fbui@suse.com" date="1639396800">- Import commit 34eba0c28cb02d15fdbf55ce28bdfa56142ae4d1
  0a8cb60af6 Bump the max number of inodes for /dev to a million (bsc#1192858)
  848c9207cb Bump the max number of inodes for /dev to 128k (bsc#1192858)
  ea44eb34f2 sleep: don't skip resume device with low priority/available space (bsc#1192423)
  9325a68316 test: use kbd-mode-map we ship in one more test case
  8ff379e11d test-keymap-util: always use kbd-model-map we ship</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">* 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)</changelog>
  <changelog author="fbui@suse.com" date="1641297600">- Suppress PAM warning when the credentials for user@.service service are
  established (bsc#1190515)
  systemd-user PAM service needs to define a default implementation of
  pam_setcred() otherwise the fallback (defined by /etc/pam.d/other) is used,
  which consists of pam_warn.so + pam_deny.so, and will throw a warning each
  time a user logs in.
  The new default simply consists in calling pam_deny.so alone.</changelog>
  <changelog author="fbui@suse.com" date="1641470400">- Import commit 3850086c6580291188fe574ad37c8026012894fb
  c0505cbb8d tmpfiles: 'st' may have been used uninitialized
  d3f7c9e806 macro: add new helper RET_NERRNO()
  4a95baa5de rm-rf: optionally fsync() after removing directory tree
  dd8137a589 rm-rf: refactor rm_rf_children(), split out body of directory iteration loop
  3f8765ed2c rm-rf: fstatat() might fail if containing dir has limited access mode, patch that too
  87d39407b7 btrfs-util: add helper that abstracts "might be btrfs subvol?" check
  71ed335c7a rm-rf: add new flag REMOVE_CHMOD
  611376f830 rules: don't ignore Xen virtual interfaces anymore (bsc#1178561)
  All these commits except the last one (611376f830) are preparation for
  CVE-2021-3997.
- Drop 0001-rules-don-t-ignore-Xen-interfaces-anymore.patch
  It's been merged in the git repo (commit 611376f830).</changelog>
  <changelog author="fbui@suse.com" date="1641470401">- Added patches to fix CVE-2021-3997 (bsc#1194178)
  5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  These patches will be moved to the git repo once the bug will become
  public.</changelog>
  <changelog author="fbui@suse.com" date="1641816000">- Add 1009-Drop-or-soften-some-of-the-deprecation-warnings.patch (bsc#1193086)</changelog>
  <changelog author="fbui@suse.com" date="1643198400">- resolved: disable DNSSEC until the following issue is solved:
  https://github.com/systemd/systemd/issues/10579
- resolved: disable fallback DNS servers and fail when no DNS server info could
  be obtained from the links. It's better to let the sysadmin know that
  something is likely misconfigured rather than silently handing over the DNS
  queries to Google or Cloudflare.
- resolved: DNSSEC support (build) requires openssl therefore document this
  build dependency in systemd-network sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1643371200">- Import commit 6a96632f26f20a68578f9d620a593ceab2a0e3b6
  c4aa40982c shared/rm-rf: loop over nested directories instead of instead of recursing (CVE-2021-3997 bsc#1194178)
  ae13ea6511 shared/rm_rf: refactor rm_rf() to shorten code a bit
  3266d7f5c8 shared/rm_rf: refactor rm_rf_children_inner() to shorten code a bit
- Drop 5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  Drop 5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  Drop 5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  They have been merged into 'SUSE/v246' branch.</changelog>
  <changelog author="fbui@suse.com" date="1643889600">- Import commit 773652879446a81689c39aea23a486627992409b
  a76263ced9 meson: allow extra net naming schemes to be defined during configuration
  301bf4f1bf meson: drop the list of valid net naming schemes
  b89924793d netif-naming: inline one iterator variable
  da4a4df29c udev: fix potential memleak
  d60486bf1b udev: allow onboard index up to 65535
  ac2baecc84 udev: use snprintf_ok()
  8aad315c7c udev: fix potential infinite loop
  471ea73eb0 udev: make dev_pci_slot() return earlier when PCI bridge is found
  69b7c9a6bd udev: use uint32_t for hotplug_slot
  cdd0e89c0e udev: split out logic of parsing s390 PCI slots
  84e1a91baa udev: it is not necessary that the path is readable
  03548e8d0e udev: add missing initialization to fix freeing invalid address
  772f964bf6 udev: fix slot based network names on s390
  c5071cf699 tree-wide: fix typo
  06640d06df net_id: fix newly added naming scheme name
  58f9592f1f udev/net_id: don't generate slot based names if multiple devices might claim the same slot (bsc#1192637)
  df9e240c92 udev/net_id: parse _SUN ACPI index as a signed integer
  cfcaddfa74 localectl: don't omit keymaps files that are symlinks (bsc#1191826)
- Add in quarantine 6000-udev-net_id-add-debug-logging-for-construction-of-de.patch
  Add in quarantine 6001-udev-net_id-show-the-correct-identifier-in-the-debug.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1647518400">- update s390 udev rules conversion script to include the case when
  the legacy rule was also 41-* (bsc#1195247)
  * change scripts-udev-convert-rules.sh</changelog>
  <changelog author="fbui@suse.com" date="1647518401">- Import commit 117e7b96f8e8c63a9eec3459147f5352015a6d08
  3a395b156d Don't open /var journals in volatile mode when runtime_journal==NULL
  1cd65c15e4 udev: 60-persistent-storage-tape.rules: handle duplicate device ID (bsc#1195529)
  3ee9953dd4 man: tweak description of auto/noauto (bsc#1191502)
  6cfeacbf86 shared/install: ignore failures for auxiliary files
  37083278ed install: make UnitFileChangeType enum anonymous
  0a02185526 shared/install: reduce scope of iterator variables
  86c55bde7f systemd-coredump: allow setting external core size to infinity (bsc#1195899 jsc#SLE-23867)</changelog>
  <changelog author="fbui@suse.com" date="1647518402">- Fix the default target when it's been incorrectly set to one of the runlevel
  targets (bsc#1196567)
  The script 'upgrade-from-pre-210.sh' used to initialize the default target
  during migration from sysvinit to systemd. However it created symlinks to
  runlevel targets, which are deprecated. If such symlinks are found the script
  now renames them to point to 'true' systemd target units.
- When migrating from sysvinit to systemd (it probably won't happen anymore),
  let's use the default systemd target, which is the graphical.target one. In
  most cases it will do the right thing anyway.</changelog>
  <changelog author="fbui@suse.com" date="1648036800">- spec: cope with %{_modprobedir} being /lib/modprobe.d on SLE</changelog>
  <changelog author="fbui@suse.com" date="1650369600">- Import commit 12b0904b9117aeaef138784e5b118b82cd87d7cb
  b579fe1e09 tmpfiles: constify item_compatible() parameters
  01f4af3573 test: add test checking tmpfiles conf file precedence
  e8f4d24e97 test tmpfiles: add a test for 'w+'
  9c559f3854 tmpfiles.d: only 'w+' can have multiple lines for the same path (bsc#1198090)
  7fab6b6a6e journald: make use of CLAMP() in cache_space_refresh()
  1c8b02567c journald: make sure journal_file_open() doesn't leave a corrupted file around after failing (bsc#1198114)
  0007446abc journal-file: port journal_file_open() to openat_report_new()
  a07ad29813 fs-util: make sure openat_report_new() initializes return param also on shortcut
  6bb087a1fc fs-util: fix typos in comments
  42532a8bfb fs-util: add openat_report_new() wrapper around openat()</changelog>
</package>
<package pkgid="fa0bde6108e964d8102b940295747d8a09dee662ec31b9edf25a8d25ee39d309" name="libudev-devel" arch="s390x">
  <version epoch="0" ver="246.16" rel="150300.7.45.1"/>
  <changelog author="fbui@suse.com" date="1631275200">- Drop 1007-tmpfiles-follow-SUSE-policies.patch
  Since most of the tmpfiles config files shipped by upstream are
  ignored (see previous commit "Drop most of the tmpfiles that deal
  with generic paths"), this patch is no more relevant.</changelog>
  <changelog author="fbui@suse.com" date="1631707200">- Import commit 263f7076bc77475045193653a785bbdc0457b5c6
  239e0ce5e7 journalctl: never fail at flushing when the flushed flag is set (bsc#1188588)
  0db7e590e1 manager: reexecute on SIGRTMIN+25, user instances only
  ef8afc4545 core: Make sure cgroup_oom_queue is flushed on manager exit
  f794e01080 cgroup: do 'catchup' for unit cgroup inotify watch files
  54369b7660 manager: Fix HW watchdog when systemd starts before driver loaded (bsc#1189446)
  1d0524bd54 pid1: various minor watchdog modernizations</changelog>
  <changelog author="fbui@suse.com" date="1632398400">- Enable support for Portable Services (jsc#SLE-21694)
  Will be released in Leap only.</changelog>
  <changelog author="fbui@suse.com" date="1635336000">- Import commit 5d20af26eee6507bfa9fdb6e5dd4bfc187e3399e
  37e021ee84 mount-util: fix fd_is_mount_point() when both the parent and directory are network fs (bsc#1190984)
  2aee16afd0 mountpoint-util: rebreak some comments
  962e487cb4 virt: Support detection for ARM64 Hyper-V guests (bsc#1186071)
  8545a66afd Use BIOS characteristics to distinguish EC2 bare-metal from VMs
  03311b59c3 machine-id-setup: generate machine-id from DMI product ID on Amazon EC2
  0fc3118a67 id128-util: use common implementation of helper to get/validate product ID
  83bfa06ebc virt: detect Amazon EC2 Nitro instance (bsc#1190440)
  e8b8df3ed9 core: move several source files to src/shared</changelog>
  <changelog author="fbui@suse.com" date="1635422400">- Import commit f2f061f1da064bfd47e2201967a854bb9281ca5b
  98e87fc3fd busctl: use usec granularity for the timestamp printed by the busctl monitor command (jsc#SLE-17798)</changelog>
  <changelog author="mwilck@suse.com" date="1636459200">- Fix IO scheduler udev rules
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="fbui@suse.com" date="1639396800">- Import commit 34eba0c28cb02d15fdbf55ce28bdfa56142ae4d1
  0a8cb60af6 Bump the max number of inodes for /dev to a million (bsc#1192858)
  848c9207cb Bump the max number of inodes for /dev to 128k (bsc#1192858)
  ea44eb34f2 sleep: don't skip resume device with low priority/available space (bsc#1192423)
  9325a68316 test: use kbd-mode-map we ship in one more test case
  8ff379e11d test-keymap-util: always use kbd-model-map we ship</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">* 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)</changelog>
  <changelog author="fbui@suse.com" date="1641297600">- Suppress PAM warning when the credentials for user@.service service are
  established (bsc#1190515)
  systemd-user PAM service needs to define a default implementation of
  pam_setcred() otherwise the fallback (defined by /etc/pam.d/other) is used,
  which consists of pam_warn.so + pam_deny.so, and will throw a warning each
  time a user logs in.
  The new default simply consists in calling pam_deny.so alone.</changelog>
  <changelog author="fbui@suse.com" date="1641470400">- Import commit 3850086c6580291188fe574ad37c8026012894fb
  c0505cbb8d tmpfiles: 'st' may have been used uninitialized
  d3f7c9e806 macro: add new helper RET_NERRNO()
  4a95baa5de rm-rf: optionally fsync() after removing directory tree
  dd8137a589 rm-rf: refactor rm_rf_children(), split out body of directory iteration loop
  3f8765ed2c rm-rf: fstatat() might fail if containing dir has limited access mode, patch that too
  87d39407b7 btrfs-util: add helper that abstracts "might be btrfs subvol?" check
  71ed335c7a rm-rf: add new flag REMOVE_CHMOD
  611376f830 rules: don't ignore Xen virtual interfaces anymore (bsc#1178561)
  All these commits except the last one (611376f830) are preparation for
  CVE-2021-3997.
- Drop 0001-rules-don-t-ignore-Xen-interfaces-anymore.patch
  It's been merged in the git repo (commit 611376f830).</changelog>
  <changelog author="fbui@suse.com" date="1641470401">- Added patches to fix CVE-2021-3997 (bsc#1194178)
  5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  These patches will be moved to the git repo once the bug will become
  public.</changelog>
  <changelog author="fbui@suse.com" date="1641816000">- Add 1009-Drop-or-soften-some-of-the-deprecation-warnings.patch (bsc#1193086)</changelog>
  <changelog author="fbui@suse.com" date="1643198400">- resolved: disable DNSSEC until the following issue is solved:
  https://github.com/systemd/systemd/issues/10579
- resolved: disable fallback DNS servers and fail when no DNS server info could
  be obtained from the links. It's better to let the sysadmin know that
  something is likely misconfigured rather than silently handing over the DNS
  queries to Google or Cloudflare.
- resolved: DNSSEC support (build) requires openssl therefore document this
  build dependency in systemd-network sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1643371200">- Import commit 6a96632f26f20a68578f9d620a593ceab2a0e3b6
  c4aa40982c shared/rm-rf: loop over nested directories instead of instead of recursing (CVE-2021-3997 bsc#1194178)
  ae13ea6511 shared/rm_rf: refactor rm_rf() to shorten code a bit
  3266d7f5c8 shared/rm_rf: refactor rm_rf_children_inner() to shorten code a bit
- Drop 5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  Drop 5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  Drop 5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  They have been merged into 'SUSE/v246' branch.</changelog>
  <changelog author="fbui@suse.com" date="1643889600">- Import commit 773652879446a81689c39aea23a486627992409b
  a76263ced9 meson: allow extra net naming schemes to be defined during configuration
  301bf4f1bf meson: drop the list of valid net naming schemes
  b89924793d netif-naming: inline one iterator variable
  da4a4df29c udev: fix potential memleak
  d60486bf1b udev: allow onboard index up to 65535
  ac2baecc84 udev: use snprintf_ok()
  8aad315c7c udev: fix potential infinite loop
  471ea73eb0 udev: make dev_pci_slot() return earlier when PCI bridge is found
  69b7c9a6bd udev: use uint32_t for hotplug_slot
  cdd0e89c0e udev: split out logic of parsing s390 PCI slots
  84e1a91baa udev: it is not necessary that the path is readable
  03548e8d0e udev: add missing initialization to fix freeing invalid address
  772f964bf6 udev: fix slot based network names on s390
  c5071cf699 tree-wide: fix typo
  06640d06df net_id: fix newly added naming scheme name
  58f9592f1f udev/net_id: don't generate slot based names if multiple devices might claim the same slot (bsc#1192637)
  df9e240c92 udev/net_id: parse _SUN ACPI index as a signed integer
  cfcaddfa74 localectl: don't omit keymaps files that are symlinks (bsc#1191826)
- Add in quarantine 6000-udev-net_id-add-debug-logging-for-construction-of-de.patch
  Add in quarantine 6001-udev-net_id-show-the-correct-identifier-in-the-debug.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1647518400">- update s390 udev rules conversion script to include the case when
  the legacy rule was also 41-* (bsc#1195247)
  * change scripts-udev-convert-rules.sh</changelog>
  <changelog author="fbui@suse.com" date="1647518401">- Import commit 117e7b96f8e8c63a9eec3459147f5352015a6d08
  3a395b156d Don't open /var journals in volatile mode when runtime_journal==NULL
  1cd65c15e4 udev: 60-persistent-storage-tape.rules: handle duplicate device ID (bsc#1195529)
  3ee9953dd4 man: tweak description of auto/noauto (bsc#1191502)
  6cfeacbf86 shared/install: ignore failures for auxiliary files
  37083278ed install: make UnitFileChangeType enum anonymous
  0a02185526 shared/install: reduce scope of iterator variables
  86c55bde7f systemd-coredump: allow setting external core size to infinity (bsc#1195899 jsc#SLE-23867)</changelog>
  <changelog author="fbui@suse.com" date="1647518402">- Fix the default target when it's been incorrectly set to one of the runlevel
  targets (bsc#1196567)
  The script 'upgrade-from-pre-210.sh' used to initialize the default target
  during migration from sysvinit to systemd. However it created symlinks to
  runlevel targets, which are deprecated. If such symlinks are found the script
  now renames them to point to 'true' systemd target units.
- When migrating from sysvinit to systemd (it probably won't happen anymore),
  let's use the default systemd target, which is the graphical.target one. In
  most cases it will do the right thing anyway.</changelog>
  <changelog author="fbui@suse.com" date="1648036800">- spec: cope with %{_modprobedir} being /lib/modprobe.d on SLE</changelog>
  <changelog author="fbui@suse.com" date="1650369600">- Import commit 12b0904b9117aeaef138784e5b118b82cd87d7cb
  b579fe1e09 tmpfiles: constify item_compatible() parameters
  01f4af3573 test: add test checking tmpfiles conf file precedence
  e8f4d24e97 test tmpfiles: add a test for 'w+'
  9c559f3854 tmpfiles.d: only 'w+' can have multiple lines for the same path (bsc#1198090)
  7fab6b6a6e journald: make use of CLAMP() in cache_space_refresh()
  1c8b02567c journald: make sure journal_file_open() doesn't leave a corrupted file around after failing (bsc#1198114)
  0007446abc journal-file: port journal_file_open() to openat_report_new()
  a07ad29813 fs-util: make sure openat_report_new() initializes return param also on shortcut
  6bb087a1fc fs-util: fix typos in comments
  42532a8bfb fs-util: add openat_report_new() wrapper around openat()</changelog>
</package>
<package pkgid="cebaf9214c12b6d0a85b8c02e789f417aee66a4069f4999e50f0122634d6aad6" name="libudev-devel" arch="x86_64">
  <version epoch="0" ver="246.16" rel="150300.7.45.1"/>
  <changelog author="fbui@suse.com" date="1631275200">- Drop 1007-tmpfiles-follow-SUSE-policies.patch
  Since most of the tmpfiles config files shipped by upstream are
  ignored (see previous commit "Drop most of the tmpfiles that deal
  with generic paths"), this patch is no more relevant.</changelog>
  <changelog author="fbui@suse.com" date="1631707200">- Import commit 263f7076bc77475045193653a785bbdc0457b5c6
  239e0ce5e7 journalctl: never fail at flushing when the flushed flag is set (bsc#1188588)
  0db7e590e1 manager: reexecute on SIGRTMIN+25, user instances only
  ef8afc4545 core: Make sure cgroup_oom_queue is flushed on manager exit
  f794e01080 cgroup: do 'catchup' for unit cgroup inotify watch files
  54369b7660 manager: Fix HW watchdog when systemd starts before driver loaded (bsc#1189446)
  1d0524bd54 pid1: various minor watchdog modernizations</changelog>
  <changelog author="fbui@suse.com" date="1632398400">- Enable support for Portable Services (jsc#SLE-21694)
  Will be released in Leap only.</changelog>
  <changelog author="fbui@suse.com" date="1635336000">- Import commit 5d20af26eee6507bfa9fdb6e5dd4bfc187e3399e
  37e021ee84 mount-util: fix fd_is_mount_point() when both the parent and directory are network fs (bsc#1190984)
  2aee16afd0 mountpoint-util: rebreak some comments
  962e487cb4 virt: Support detection for ARM64 Hyper-V guests (bsc#1186071)
  8545a66afd Use BIOS characteristics to distinguish EC2 bare-metal from VMs
  03311b59c3 machine-id-setup: generate machine-id from DMI product ID on Amazon EC2
  0fc3118a67 id128-util: use common implementation of helper to get/validate product ID
  83bfa06ebc virt: detect Amazon EC2 Nitro instance (bsc#1190440)
  e8b8df3ed9 core: move several source files to src/shared</changelog>
  <changelog author="fbui@suse.com" date="1635422400">- Import commit f2f061f1da064bfd47e2201967a854bb9281ca5b
  98e87fc3fd busctl: use usec granularity for the timestamp printed by the busctl monitor command (jsc#SLE-17798)</changelog>
  <changelog author="mwilck@suse.com" date="1636459200">- Fix IO scheduler udev rules
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="fbui@suse.com" date="1639396800">- Import commit 34eba0c28cb02d15fdbf55ce28bdfa56142ae4d1
  0a8cb60af6 Bump the max number of inodes for /dev to a million (bsc#1192858)
  848c9207cb Bump the max number of inodes for /dev to 128k (bsc#1192858)
  ea44eb34f2 sleep: don't skip resume device with low priority/available space (bsc#1192423)
  9325a68316 test: use kbd-mode-map we ship in one more test case
  8ff379e11d test-keymap-util: always use kbd-model-map we ship</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">* 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)</changelog>
  <changelog author="fbui@suse.com" date="1641297600">- Suppress PAM warning when the credentials for user@.service service are
  established (bsc#1190515)
  systemd-user PAM service needs to define a default implementation of
  pam_setcred() otherwise the fallback (defined by /etc/pam.d/other) is used,
  which consists of pam_warn.so + pam_deny.so, and will throw a warning each
  time a user logs in.
  The new default simply consists in calling pam_deny.so alone.</changelog>
  <changelog author="fbui@suse.com" date="1641470400">- Import commit 3850086c6580291188fe574ad37c8026012894fb
  c0505cbb8d tmpfiles: 'st' may have been used uninitialized
  d3f7c9e806 macro: add new helper RET_NERRNO()
  4a95baa5de rm-rf: optionally fsync() after removing directory tree
  dd8137a589 rm-rf: refactor rm_rf_children(), split out body of directory iteration loop
  3f8765ed2c rm-rf: fstatat() might fail if containing dir has limited access mode, patch that too
  87d39407b7 btrfs-util: add helper that abstracts "might be btrfs subvol?" check
  71ed335c7a rm-rf: add new flag REMOVE_CHMOD
  611376f830 rules: don't ignore Xen virtual interfaces anymore (bsc#1178561)
  All these commits except the last one (611376f830) are preparation for
  CVE-2021-3997.
- Drop 0001-rules-don-t-ignore-Xen-interfaces-anymore.patch
  It's been merged in the git repo (commit 611376f830).</changelog>
  <changelog author="fbui@suse.com" date="1641470401">- Added patches to fix CVE-2021-3997 (bsc#1194178)
  5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  These patches will be moved to the git repo once the bug will become
  public.</changelog>
  <changelog author="fbui@suse.com" date="1641816000">- Add 1009-Drop-or-soften-some-of-the-deprecation-warnings.patch (bsc#1193086)</changelog>
  <changelog author="fbui@suse.com" date="1643198400">- resolved: disable DNSSEC until the following issue is solved:
  https://github.com/systemd/systemd/issues/10579
- resolved: disable fallback DNS servers and fail when no DNS server info could
  be obtained from the links. It's better to let the sysadmin know that
  something is likely misconfigured rather than silently handing over the DNS
  queries to Google or Cloudflare.
- resolved: DNSSEC support (build) requires openssl therefore document this
  build dependency in systemd-network sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1643371200">- Import commit 6a96632f26f20a68578f9d620a593ceab2a0e3b6
  c4aa40982c shared/rm-rf: loop over nested directories instead of instead of recursing (CVE-2021-3997 bsc#1194178)
  ae13ea6511 shared/rm_rf: refactor rm_rf() to shorten code a bit
  3266d7f5c8 shared/rm_rf: refactor rm_rf_children_inner() to shorten code a bit
- Drop 5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  Drop 5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  Drop 5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  They have been merged into 'SUSE/v246' branch.</changelog>
  <changelog author="fbui@suse.com" date="1643889600">- Import commit 773652879446a81689c39aea23a486627992409b
  a76263ced9 meson: allow extra net naming schemes to be defined during configuration
  301bf4f1bf meson: drop the list of valid net naming schemes
  b89924793d netif-naming: inline one iterator variable
  da4a4df29c udev: fix potential memleak
  d60486bf1b udev: allow onboard index up to 65535
  ac2baecc84 udev: use snprintf_ok()
  8aad315c7c udev: fix potential infinite loop
  471ea73eb0 udev: make dev_pci_slot() return earlier when PCI bridge is found
  69b7c9a6bd udev: use uint32_t for hotplug_slot
  cdd0e89c0e udev: split out logic of parsing s390 PCI slots
  84e1a91baa udev: it is not necessary that the path is readable
  03548e8d0e udev: add missing initialization to fix freeing invalid address
  772f964bf6 udev: fix slot based network names on s390
  c5071cf699 tree-wide: fix typo
  06640d06df net_id: fix newly added naming scheme name
  58f9592f1f udev/net_id: don't generate slot based names if multiple devices might claim the same slot (bsc#1192637)
  df9e240c92 udev/net_id: parse _SUN ACPI index as a signed integer
  cfcaddfa74 localectl: don't omit keymaps files that are symlinks (bsc#1191826)
- Add in quarantine 6000-udev-net_id-add-debug-logging-for-construction-of-de.patch
  Add in quarantine 6001-udev-net_id-show-the-correct-identifier-in-the-debug.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1647518400">- update s390 udev rules conversion script to include the case when
  the legacy rule was also 41-* (bsc#1195247)
  * change scripts-udev-convert-rules.sh</changelog>
  <changelog author="fbui@suse.com" date="1647518401">- Import commit 117e7b96f8e8c63a9eec3459147f5352015a6d08
  3a395b156d Don't open /var journals in volatile mode when runtime_journal==NULL
  1cd65c15e4 udev: 60-persistent-storage-tape.rules: handle duplicate device ID (bsc#1195529)
  3ee9953dd4 man: tweak description of auto/noauto (bsc#1191502)
  6cfeacbf86 shared/install: ignore failures for auxiliary files
  37083278ed install: make UnitFileChangeType enum anonymous
  0a02185526 shared/install: reduce scope of iterator variables
  86c55bde7f systemd-coredump: allow setting external core size to infinity (bsc#1195899 jsc#SLE-23867)</changelog>
  <changelog author="fbui@suse.com" date="1647518402">- Fix the default target when it's been incorrectly set to one of the runlevel
  targets (bsc#1196567)
  The script 'upgrade-from-pre-210.sh' used to initialize the default target
  during migration from sysvinit to systemd. However it created symlinks to
  runlevel targets, which are deprecated. If such symlinks are found the script
  now renames them to point to 'true' systemd target units.
- When migrating from sysvinit to systemd (it probably won't happen anymore),
  let's use the default systemd target, which is the graphical.target one. In
  most cases it will do the right thing anyway.</changelog>
  <changelog author="fbui@suse.com" date="1648036800">- spec: cope with %{_modprobedir} being /lib/modprobe.d on SLE</changelog>
  <changelog author="fbui@suse.com" date="1650369600">- Import commit 12b0904b9117aeaef138784e5b118b82cd87d7cb
  b579fe1e09 tmpfiles: constify item_compatible() parameters
  01f4af3573 test: add test checking tmpfiles conf file precedence
  e8f4d24e97 test tmpfiles: add a test for 'w+'
  9c559f3854 tmpfiles.d: only 'w+' can have multiple lines for the same path (bsc#1198090)
  7fab6b6a6e journald: make use of CLAMP() in cache_space_refresh()
  1c8b02567c journald: make sure journal_file_open() doesn't leave a corrupted file around after failing (bsc#1198114)
  0007446abc journal-file: port journal_file_open() to openat_report_new()
  a07ad29813 fs-util: make sure openat_report_new() initializes return param also on shortcut
  6bb087a1fc fs-util: fix typos in comments
  42532a8bfb fs-util: add openat_report_new() wrapper around openat()</changelog>
</package>
<package pkgid="1c269481ba23e90f6b657739ffbaf5968354e29bc2f312d378c8f29f9c4f09c1" name="libudev-devel-32bit" arch="x86_64">
  <version epoch="0" ver="246.16" rel="150300.7.45.1"/>
  <changelog author="fbui@suse.com" date="1631275200">- Drop 1007-tmpfiles-follow-SUSE-policies.patch
  Since most of the tmpfiles config files shipped by upstream are
  ignored (see previous commit "Drop most of the tmpfiles that deal
  with generic paths"), this patch is no more relevant.</changelog>
  <changelog author="fbui@suse.com" date="1631707200">- Import commit 263f7076bc77475045193653a785bbdc0457b5c6
  239e0ce5e7 journalctl: never fail at flushing when the flushed flag is set (bsc#1188588)
  0db7e590e1 manager: reexecute on SIGRTMIN+25, user instances only
  ef8afc4545 core: Make sure cgroup_oom_queue is flushed on manager exit
  f794e01080 cgroup: do 'catchup' for unit cgroup inotify watch files
  54369b7660 manager: Fix HW watchdog when systemd starts before driver loaded (bsc#1189446)
  1d0524bd54 pid1: various minor watchdog modernizations</changelog>
  <changelog author="fbui@suse.com" date="1632398400">- Enable support for Portable Services (jsc#SLE-21694)
  Will be released in Leap only.</changelog>
  <changelog author="fbui@suse.com" date="1635336000">- Import commit 5d20af26eee6507bfa9fdb6e5dd4bfc187e3399e
  37e021ee84 mount-util: fix fd_is_mount_point() when both the parent and directory are network fs (bsc#1190984)
  2aee16afd0 mountpoint-util: rebreak some comments
  962e487cb4 virt: Support detection for ARM64 Hyper-V guests (bsc#1186071)
  8545a66afd Use BIOS characteristics to distinguish EC2 bare-metal from VMs
  03311b59c3 machine-id-setup: generate machine-id from DMI product ID on Amazon EC2
  0fc3118a67 id128-util: use common implementation of helper to get/validate product ID
  83bfa06ebc virt: detect Amazon EC2 Nitro instance (bsc#1190440)
  e8b8df3ed9 core: move several source files to src/shared</changelog>
  <changelog author="fbui@suse.com" date="1635422400">- Import commit f2f061f1da064bfd47e2201967a854bb9281ca5b
  98e87fc3fd busctl: use usec granularity for the timestamp printed by the busctl monitor command (jsc#SLE-17798)</changelog>
  <changelog author="mwilck@suse.com" date="1636459200">- Fix IO scheduler udev rules
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="fbui@suse.com" date="1639396800">- Import commit 34eba0c28cb02d15fdbf55ce28bdfa56142ae4d1
  0a8cb60af6 Bump the max number of inodes for /dev to a million (bsc#1192858)
  848c9207cb Bump the max number of inodes for /dev to 128k (bsc#1192858)
  ea44eb34f2 sleep: don't skip resume device with low priority/available space (bsc#1192423)
  9325a68316 test: use kbd-mode-map we ship in one more test case
  8ff379e11d test-keymap-util: always use kbd-model-map we ship</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">* 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)</changelog>
  <changelog author="fbui@suse.com" date="1641297600">- Suppress PAM warning when the credentials for user@.service service are
  established (bsc#1190515)
  systemd-user PAM service needs to define a default implementation of
  pam_setcred() otherwise the fallback (defined by /etc/pam.d/other) is used,
  which consists of pam_warn.so + pam_deny.so, and will throw a warning each
  time a user logs in.
  The new default simply consists in calling pam_deny.so alone.</changelog>
  <changelog author="fbui@suse.com" date="1641470400">- Import commit 3850086c6580291188fe574ad37c8026012894fb
  c0505cbb8d tmpfiles: 'st' may have been used uninitialized
  d3f7c9e806 macro: add new helper RET_NERRNO()
  4a95baa5de rm-rf: optionally fsync() after removing directory tree
  dd8137a589 rm-rf: refactor rm_rf_children(), split out body of directory iteration loop
  3f8765ed2c rm-rf: fstatat() might fail if containing dir has limited access mode, patch that too
  87d39407b7 btrfs-util: add helper that abstracts "might be btrfs subvol?" check
  71ed335c7a rm-rf: add new flag REMOVE_CHMOD
  611376f830 rules: don't ignore Xen virtual interfaces anymore (bsc#1178561)
  All these commits except the last one (611376f830) are preparation for
  CVE-2021-3997.
- Drop 0001-rules-don-t-ignore-Xen-interfaces-anymore.patch
  It's been merged in the git repo (commit 611376f830).</changelog>
  <changelog author="fbui@suse.com" date="1641470401">- Added patches to fix CVE-2021-3997 (bsc#1194178)
  5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  These patches will be moved to the git repo once the bug will become
  public.</changelog>
  <changelog author="fbui@suse.com" date="1641816000">- Add 1009-Drop-or-soften-some-of-the-deprecation-warnings.patch (bsc#1193086)</changelog>
  <changelog author="fbui@suse.com" date="1643198400">- resolved: disable DNSSEC until the following issue is solved:
  https://github.com/systemd/systemd/issues/10579
- resolved: disable fallback DNS servers and fail when no DNS server info could
  be obtained from the links. It's better to let the sysadmin know that
  something is likely misconfigured rather than silently handing over the DNS
  queries to Google or Cloudflare.
- resolved: DNSSEC support (build) requires openssl therefore document this
  build dependency in systemd-network sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1643371200">- Import commit 6a96632f26f20a68578f9d620a593ceab2a0e3b6
  c4aa40982c shared/rm-rf: loop over nested directories instead of instead of recursing (CVE-2021-3997 bsc#1194178)
  ae13ea6511 shared/rm_rf: refactor rm_rf() to shorten code a bit
  3266d7f5c8 shared/rm_rf: refactor rm_rf_children_inner() to shorten code a bit
- Drop 5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  Drop 5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  Drop 5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  They have been merged into 'SUSE/v246' branch.</changelog>
  <changelog author="fbui@suse.com" date="1643889600">- Import commit 773652879446a81689c39aea23a486627992409b
  a76263ced9 meson: allow extra net naming schemes to be defined during configuration
  301bf4f1bf meson: drop the list of valid net naming schemes
  b89924793d netif-naming: inline one iterator variable
  da4a4df29c udev: fix potential memleak
  d60486bf1b udev: allow onboard index up to 65535
  ac2baecc84 udev: use snprintf_ok()
  8aad315c7c udev: fix potential infinite loop
  471ea73eb0 udev: make dev_pci_slot() return earlier when PCI bridge is found
  69b7c9a6bd udev: use uint32_t for hotplug_slot
  cdd0e89c0e udev: split out logic of parsing s390 PCI slots
  84e1a91baa udev: it is not necessary that the path is readable
  03548e8d0e udev: add missing initialization to fix freeing invalid address
  772f964bf6 udev: fix slot based network names on s390
  c5071cf699 tree-wide: fix typo
  06640d06df net_id: fix newly added naming scheme name
  58f9592f1f udev/net_id: don't generate slot based names if multiple devices might claim the same slot (bsc#1192637)
  df9e240c92 udev/net_id: parse _SUN ACPI index as a signed integer
  cfcaddfa74 localectl: don't omit keymaps files that are symlinks (bsc#1191826)
- Add in quarantine 6000-udev-net_id-add-debug-logging-for-construction-of-de.patch
  Add in quarantine 6001-udev-net_id-show-the-correct-identifier-in-the-debug.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1647518400">- update s390 udev rules conversion script to include the case when
  the legacy rule was also 41-* (bsc#1195247)
  * change scripts-udev-convert-rules.sh</changelog>
  <changelog author="fbui@suse.com" date="1647518401">- Import commit 117e7b96f8e8c63a9eec3459147f5352015a6d08
  3a395b156d Don't open /var journals in volatile mode when runtime_journal==NULL
  1cd65c15e4 udev: 60-persistent-storage-tape.rules: handle duplicate device ID (bsc#1195529)
  3ee9953dd4 man: tweak description of auto/noauto (bsc#1191502)
  6cfeacbf86 shared/install: ignore failures for auxiliary files
  37083278ed install: make UnitFileChangeType enum anonymous
  0a02185526 shared/install: reduce scope of iterator variables
  86c55bde7f systemd-coredump: allow setting external core size to infinity (bsc#1195899 jsc#SLE-23867)</changelog>
  <changelog author="fbui@suse.com" date="1647518402">- Fix the default target when it's been incorrectly set to one of the runlevel
  targets (bsc#1196567)
  The script 'upgrade-from-pre-210.sh' used to initialize the default target
  during migration from sysvinit to systemd. However it created symlinks to
  runlevel targets, which are deprecated. If such symlinks are found the script
  now renames them to point to 'true' systemd target units.
- When migrating from sysvinit to systemd (it probably won't happen anymore),
  let's use the default systemd target, which is the graphical.target one. In
  most cases it will do the right thing anyway.</changelog>
  <changelog author="fbui@suse.com" date="1648036800">- spec: cope with %{_modprobedir} being /lib/modprobe.d on SLE</changelog>
  <changelog author="fbui@suse.com" date="1650369600">- Import commit 12b0904b9117aeaef138784e5b118b82cd87d7cb
  b579fe1e09 tmpfiles: constify item_compatible() parameters
  01f4af3573 test: add test checking tmpfiles conf file precedence
  e8f4d24e97 test tmpfiles: add a test for 'w+'
  9c559f3854 tmpfiles.d: only 'w+' can have multiple lines for the same path (bsc#1198090)
  7fab6b6a6e journald: make use of CLAMP() in cache_space_refresh()
  1c8b02567c journald: make sure journal_file_open() doesn't leave a corrupted file around after failing (bsc#1198114)
  0007446abc journal-file: port journal_file_open() to openat_report_new()
  a07ad29813 fs-util: make sure openat_report_new() initializes return param also on shortcut
  6bb087a1fc fs-util: fix typos in comments
  42532a8bfb fs-util: add openat_report_new() wrapper around openat()</changelog>
</package>
<package pkgid="c8a65d6167d3b033beff626bfc57d68b6ee93db67c8e46f10f9ba31855f051ae" name="libudisks2-0" arch="aarch64">
  <version epoch="0" ver="2.9.2" rel="150400.3.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 2.7.6:
  + Add: UdisksUtabEntry and read-write lock.
  + Fix escaping mountpoint for the cleanup service.
  + Check for all LUKS devices when looking for
    CryptoBackingDevice.
  + First implementation of udisksutabmonitor.
  + Invoke job_complete in the proper context in order to avoid
    deadlocks.
  + Generate autocleanup functions for interfaces.
  + Update documentation.
- Changes from version 2.7.5:
  + Add:
  - 'no-discard' option to formatting methods.
  - An assertion method for checking an objects interfaces.
  + Fix:
  - Possible NULL pointer dereference in:
    udiskslinuxdrive.c, udiskslinuxmdraidobject.c and
    udisksclient.c
  - Resource leak.
  - size_str memory leaks in UDisksObjectInfo.
  - Copy-paste error in apply_configuration_thread_func from
    udiskslinuxdriveata.c.
  - "Deadcode" and ignore "check return" warnings in udisksctl.c.
  + Resolve mountpoint to the real path.
  + Include exFAT as a possible partition type for ID 0x07.
  + Always try to read configuration from crypttab in
    handle_unlock.
  + Make sure the table_type is consistent in
    handle_create_partition.
  + Wait for device to become initialized before probing it.
  + Use different mode/dmode for shared file systems.
- Changes from version 2.7.4:
  + Add: New function to set label on swap devices.
  + Fix:
  - Uninitalized value in "udisks_linux_loop_update";
  - Loop device automounting in GNOME.
  + Run cryptsetup before returning from non-blocking Format.
  + Use new libblockdev functionality to disable checks during
    init.
  + Do not try to create file watchers for RAIDs without
    redundancy.
  + Try to use libblockdev to get RAID array size.
  + Re-add support the legacy BIOS bootable GPT flag.
- Changes from version 2.7.3:
  + Add:
  - Version info to docstrings of the partition Resize function;
  - New ResolveDevice function;
  - New OpenDevice function;
  - some missing functions to doc/udisks2-sections.txt.in.in.
  + Fix:
  - Wrong GSList pointer declaration in
    "handle_get_block_devices";
  - "supports_owners" flag for UDF;
  - ExFAT partition type;
  - Bash completion for udisksctl;
  - Force unmounting;
  - Building documentation with new gtk-doc.
  + Process partition resize update before return.
  + Wait for cleartext device object to disappear on Lock().
  + Ignore Asus Zendisk virtual CDROM and ZFS member partitions.
  + Set corrent part type/id and GUID for UDF formatted partitions.
  + Use LUKS specific partition ID and GUID.
  + Make iSCSI Login and Logout wait for DBus objects update.
  + Disable cleaning using blivet for now.
  + Start even if a libblockdev plugin fails to load.
- Changes from version 2.7.2:
  + Add:
  - Filesystem Resize, Check and Repair;
  - A new "Partitions" property to "PartitionTable" interface;
  - A function to:
    . "take ownership" of a filesystem;
    . List all block devices.
  - A function to wait for an object to disappear.
  + Fix:
  - Detection of drives created using isohybrid images
    (fdo#1437791);
  - Setting "SetupByUID" property when adding a new loop device;
  - How we create UDF file systems.
  + Wait for:
  - The bcache object to disappear after BcacheDestroy;
  - Zram objects to disappear on DestroyDevices().
  + Resize method for Partition interface.
  + Trigger change uevent on disk after adding partitions to it.
  + Use the assert with multiple tries for Block.Configuration.
  + Do not wait for partitions to appear after LoopSetup.
  + Try harder to ignore WD SmartWare virtual CDs.
- Changes from version 2.7.1:
  + Don't always fail on missing LibStorageMgmt support.
  + Fix:
  - Broken partition authorization code;
  - How UDisksClient filters property changes;
  - The position to wait for a partition to appear at.
  + Don't use serial as unique ID for drive objects.
  + udiskslinuxblockbcache.c: Fix uninitialized variable.
  + udisksiscsiutil.c: Correct strncpy lengths.
  + udiskslinuxiscsisessionobject.c: Correct precondition check.
  + lsm_linux_drive.c: Remove std_lsm_vol_data_free error case.
  + udiskslinuxvolumegroupobject.c: Remove variable shadow lvs_p.
  + udiskssimplejob.c: Allow NULL for message.
  + Re-create sysfs watchers for changed mdraid devices.
  + UDisksClient: Do not try remove changed_blacklist hash table in
    finalize.
  + Query methods for available utility binaries.
  + Clear GError after calling "bd_part_get_part_by_pos".
  + Use "model_serial" as unique ID for drive objects.
  + Add "--yes" arg when resizing filesystem with "lvresize".
  + Do not trigger extra uevents for newly created partitions.
  + Free the partition spec libblockdev gives us.
  + Allow the user to specify the partition type.
- Changes from version 2.7.0:
  + udisksdaemonutil.c: Fix GVariant resource leak.
  + Use libblockdev swap plugin for swapspace.
  + Use libblockdev FS plugin for mounting and unmounting devices.
  + Use libblockdev:
  - For:
    . Partitioning code;
    . Wiping newly created partitions;
    . LUKS operations.
  - To get LUKS UUID for LUKS open;
  - As a library not just the plugins;
  - MDRAID code and wipefs calls in MDRAID code.
  + Use libblockdev-lvm for:
  - LV and VG operations;
  - VolumeGroupCreate() too;
  - When updating VG on Poll() call.
  + Fix:
  - bd_reinit and g_clear_error calls in btrfs, zram and bcache;
  - Docstring of 'CreateSnapshot' method in '.Filesystem.BTRFS';
  - Requires and BuildRequires for libblockdev;
  - API for BcacheCreate function.
  + Add:
  - Libblockdev MDRAID and FS plugins to BuildRequires;
  - 'options' parameter do zRAM 'Refresh' function;
  - A function for running threaded jobs synchronously;
  - A new configure option --enable-available-modules.
  + Remove unused variables in handle_mdraid_create.
  + Create Job objects for partitioning related actions.
  + Change:
  - btrfs module API to be consistent with udisks core;
  - bcache properties do CamelCase;
  - ZRAM 'CreateDevices' function to return newly created;
  - zRAM properties to CamelCase.
  + Bcache, btrfs and zRAM modules: Handle invocations in threads.
  + Do not try to set GError over the top of a previous GError.
  + zRAM: Extract used CompAlgorithm as a single value.
    ZRAMs.
  + Move new partition start if overlaps with extended partition
    metadata.
  + Do not start threaded jobs automatically
  + Require and initialize the libblockdev-lvm plugin
  + Check that blockdev/lvm.h is available if LVM2 support
    requested.
  + Also create thin pools using libblockdev-lvm.
  + Get VGs with bd_lvm_vgs() run in a thread.
  + Update information about PVs, LVs and VGs using
    libblockdev-lvm.
  + Get rid of the udisks-lvm helper program.
  + Use:
  - Info for metadata LV when updating LV which has one;
  - Systemd-defined macros in the spec file template;
  - bd_lvm_vgreduce() instead of running 'vgreduce'.
  + REMOVE-ME: use the CLI-based libblockdev-lvm plugin.
  + Make sure we have the AX_CHECK_ENABLE_DEBUG macro.
  + Also check if libblockdev supports bcache.
  + Require 'udev' not 'systemd-udev'.
- Adopt the use of %make_build and %make_install while dropping
  deprecated use of raw commands, following the best practices.
- Pass disable-static to configure as static libs are enabled by
  default. And enable-bcache, enable-btrfs, enable-lsm,
  enable-lvm2, enable-lvmcache and enable-zram to enable new
  available features.
- Add blkid, blockdev, libsystemd and mount pkgconfig modules, and
  libbd_btrfs-devel, libbd_crypto-devel, libbd_fs-devel,
  libbd_kbd-devel, libbd_loop-devel, libbd_lvm-devel,
  libbd_mdraid-devel, libbd_part-devel, libbd_swap-devel,
  libconfig-devel, libstoragemgmt-devel, lvm2-devel BuildRequires
  as new dependencies.
- Add libblockdev, libbd_crypto, libbd_fs, libbd_loop,
  libbd_mdraid, libbd_part and libbd_swap Requires as new run time
  requirements.
- Add e2fsprogs, xfsprogs, and dosfstools Requires, being the first
  needed by mkfs.ext3, mkfs.ext3 and e2label. The second, by
  mkfs.xfs and xfs_admin. And the third, by mkfs.vfat.
- Add gio-unix-2.0 and gmodule-2.0 pkgconfig BuildRequires: note
  that they was already being pulled with pkgconfig(glib-2.0) and
  used, once they live in the same devel package.
- Drop pkgconfig(udev) BuildRequires: no longer needed.
- Replace libgudev-1_0-devel and pkgconfig(systemd) BuildRequires
  by gudev-1.0 and libsystemd, respectively.
- Add LGPL-2.0+ to the preamble License tag once the preamble
  License tag is used for the source RPM and binary RPM packages.
- Correct some subpackages LGPL-2.1+ License tags to LGPL-2.0+ as
  pointed by the COPYING and source files.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
</package>
<package pkgid="72d9e6cf06ed401124c5b01ee084f9908eae19fc08fd8de2d83e4bb32ef1cfe1" name="libudisks2-0" arch="ppc64le">
  <version epoch="0" ver="2.9.2" rel="150400.3.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 2.7.6:
  + Add: UdisksUtabEntry and read-write lock.
  + Fix escaping mountpoint for the cleanup service.
  + Check for all LUKS devices when looking for
    CryptoBackingDevice.
  + First implementation of udisksutabmonitor.
  + Invoke job_complete in the proper context in order to avoid
    deadlocks.
  + Generate autocleanup functions for interfaces.
  + Update documentation.
- Changes from version 2.7.5:
  + Add:
  - 'no-discard' option to formatting methods.
  - An assertion method for checking an objects interfaces.
  + Fix:
  - Possible NULL pointer dereference in:
    udiskslinuxdrive.c, udiskslinuxmdraidobject.c and
    udisksclient.c
  - Resource leak.
  - size_str memory leaks in UDisksObjectInfo.
  - Copy-paste error in apply_configuration_thread_func from
    udiskslinuxdriveata.c.
  - "Deadcode" and ignore "check return" warnings in udisksctl.c.
  + Resolve mountpoint to the real path.
  + Include exFAT as a possible partition type for ID 0x07.
  + Always try to read configuration from crypttab in
    handle_unlock.
  + Make sure the table_type is consistent in
    handle_create_partition.
  + Wait for device to become initialized before probing it.
  + Use different mode/dmode for shared file systems.
- Changes from version 2.7.4:
  + Add: New function to set label on swap devices.
  + Fix:
  - Uninitalized value in "udisks_linux_loop_update";
  - Loop device automounting in GNOME.
  + Run cryptsetup before returning from non-blocking Format.
  + Use new libblockdev functionality to disable checks during
    init.
  + Do not try to create file watchers for RAIDs without
    redundancy.
  + Try to use libblockdev to get RAID array size.
  + Re-add support the legacy BIOS bootable GPT flag.
- Changes from version 2.7.3:
  + Add:
  - Version info to docstrings of the partition Resize function;
  - New ResolveDevice function;
  - New OpenDevice function;
  - some missing functions to doc/udisks2-sections.txt.in.in.
  + Fix:
  - Wrong GSList pointer declaration in
    "handle_get_block_devices";
  - "supports_owners" flag for UDF;
  - ExFAT partition type;
  - Bash completion for udisksctl;
  - Force unmounting;
  - Building documentation with new gtk-doc.
  + Process partition resize update before return.
  + Wait for cleartext device object to disappear on Lock().
  + Ignore Asus Zendisk virtual CDROM and ZFS member partitions.
  + Set corrent part type/id and GUID for UDF formatted partitions.
  + Use LUKS specific partition ID and GUID.
  + Make iSCSI Login and Logout wait for DBus objects update.
  + Disable cleaning using blivet for now.
  + Start even if a libblockdev plugin fails to load.
- Changes from version 2.7.2:
  + Add:
  - Filesystem Resize, Check and Repair;
  - A new "Partitions" property to "PartitionTable" interface;
  - A function to:
    . "take ownership" of a filesystem;
    . List all block devices.
  - A function to wait for an object to disappear.
  + Fix:
  - Detection of drives created using isohybrid images
    (fdo#1437791);
  - Setting "SetupByUID" property when adding a new loop device;
  - How we create UDF file systems.
  + Wait for:
  - The bcache object to disappear after BcacheDestroy;
  - Zram objects to disappear on DestroyDevices().
  + Resize method for Partition interface.
  + Trigger change uevent on disk after adding partitions to it.
  + Use the assert with multiple tries for Block.Configuration.
  + Do not wait for partitions to appear after LoopSetup.
  + Try harder to ignore WD SmartWare virtual CDs.
- Changes from version 2.7.1:
  + Don't always fail on missing LibStorageMgmt support.
  + Fix:
  - Broken partition authorization code;
  - How UDisksClient filters property changes;
  - The position to wait for a partition to appear at.
  + Don't use serial as unique ID for drive objects.
  + udiskslinuxblockbcache.c: Fix uninitialized variable.
  + udisksiscsiutil.c: Correct strncpy lengths.
  + udiskslinuxiscsisessionobject.c: Correct precondition check.
  + lsm_linux_drive.c: Remove std_lsm_vol_data_free error case.
  + udiskslinuxvolumegroupobject.c: Remove variable shadow lvs_p.
  + udiskssimplejob.c: Allow NULL for message.
  + Re-create sysfs watchers for changed mdraid devices.
  + UDisksClient: Do not try remove changed_blacklist hash table in
    finalize.
  + Query methods for available utility binaries.
  + Clear GError after calling "bd_part_get_part_by_pos".
  + Use "model_serial" as unique ID for drive objects.
  + Add "--yes" arg when resizing filesystem with "lvresize".
  + Do not trigger extra uevents for newly created partitions.
  + Free the partition spec libblockdev gives us.
  + Allow the user to specify the partition type.
- Changes from version 2.7.0:
  + udisksdaemonutil.c: Fix GVariant resource leak.
  + Use libblockdev swap plugin for swapspace.
  + Use libblockdev FS plugin for mounting and unmounting devices.
  + Use libblockdev:
  - For:
    . Partitioning code;
    . Wiping newly created partitions;
    . LUKS operations.
  - To get LUKS UUID for LUKS open;
  - As a library not just the plugins;
  - MDRAID code and wipefs calls in MDRAID code.
  + Use libblockdev-lvm for:
  - LV and VG operations;
  - VolumeGroupCreate() too;
  - When updating VG on Poll() call.
  + Fix:
  - bd_reinit and g_clear_error calls in btrfs, zram and bcache;
  - Docstring of 'CreateSnapshot' method in '.Filesystem.BTRFS';
  - Requires and BuildRequires for libblockdev;
  - API for BcacheCreate function.
  + Add:
  - Libblockdev MDRAID and FS plugins to BuildRequires;
  - 'options' parameter do zRAM 'Refresh' function;
  - A function for running threaded jobs synchronously;
  - A new configure option --enable-available-modules.
  + Remove unused variables in handle_mdraid_create.
  + Create Job objects for partitioning related actions.
  + Change:
  - btrfs module API to be consistent with udisks core;
  - bcache properties do CamelCase;
  - ZRAM 'CreateDevices' function to return newly created;
  - zRAM properties to CamelCase.
  + Bcache, btrfs and zRAM modules: Handle invocations in threads.
  + Do not try to set GError over the top of a previous GError.
  + zRAM: Extract used CompAlgorithm as a single value.
    ZRAMs.
  + Move new partition start if overlaps with extended partition
    metadata.
  + Do not start threaded jobs automatically
  + Require and initialize the libblockdev-lvm plugin
  + Check that blockdev/lvm.h is available if LVM2 support
    requested.
  + Also create thin pools using libblockdev-lvm.
  + Get VGs with bd_lvm_vgs() run in a thread.
  + Update information about PVs, LVs and VGs using
    libblockdev-lvm.
  + Get rid of the udisks-lvm helper program.
  + Use:
  - Info for metadata LV when updating LV which has one;
  - Systemd-defined macros in the spec file template;
  - bd_lvm_vgreduce() instead of running 'vgreduce'.
  + REMOVE-ME: use the CLI-based libblockdev-lvm plugin.
  + Make sure we have the AX_CHECK_ENABLE_DEBUG macro.
  + Also check if libblockdev supports bcache.
  + Require 'udev' not 'systemd-udev'.
- Adopt the use of %make_build and %make_install while dropping
  deprecated use of raw commands, following the best practices.
- Pass disable-static to configure as static libs are enabled by
  default. And enable-bcache, enable-btrfs, enable-lsm,
  enable-lvm2, enable-lvmcache and enable-zram to enable new
  available features.
- Add blkid, blockdev, libsystemd and mount pkgconfig modules, and
  libbd_btrfs-devel, libbd_crypto-devel, libbd_fs-devel,
  libbd_kbd-devel, libbd_loop-devel, libbd_lvm-devel,
  libbd_mdraid-devel, libbd_part-devel, libbd_swap-devel,
  libconfig-devel, libstoragemgmt-devel, lvm2-devel BuildRequires
  as new dependencies.
- Add libblockdev, libbd_crypto, libbd_fs, libbd_loop,
  libbd_mdraid, libbd_part and libbd_swap Requires as new run time
  requirements.
- Add e2fsprogs, xfsprogs, and dosfstools Requires, being the first
  needed by mkfs.ext3, mkfs.ext3 and e2label. The second, by
  mkfs.xfs and xfs_admin. And the third, by mkfs.vfat.
- Add gio-unix-2.0 and gmodule-2.0 pkgconfig BuildRequires: note
  that they was already being pulled with pkgconfig(glib-2.0) and
  used, once they live in the same devel package.
- Drop pkgconfig(udev) BuildRequires: no longer needed.
- Replace libgudev-1_0-devel and pkgconfig(systemd) BuildRequires
  by gudev-1.0 and libsystemd, respectively.
- Add LGPL-2.0+ to the preamble License tag once the preamble
  License tag is used for the source RPM and binary RPM packages.
- Correct some subpackages LGPL-2.1+ License tags to LGPL-2.0+ as
  pointed by the COPYING and source files.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
</package>
<package pkgid="9e58367b43cf2bee78a6fab9ce9827313794ee7c0b8612967fd395eb14b5499d" name="libudisks2-0" arch="s390x">
  <version epoch="0" ver="2.9.2" rel="150400.3.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 2.7.6:
  + Add: UdisksUtabEntry and read-write lock.
  + Fix escaping mountpoint for the cleanup service.
  + Check for all LUKS devices when looking for
    CryptoBackingDevice.
  + First implementation of udisksutabmonitor.
  + Invoke job_complete in the proper context in order to avoid
    deadlocks.
  + Generate autocleanup functions for interfaces.
  + Update documentation.
- Changes from version 2.7.5:
  + Add:
  - 'no-discard' option to formatting methods.
  - An assertion method for checking an objects interfaces.
  + Fix:
  - Possible NULL pointer dereference in:
    udiskslinuxdrive.c, udiskslinuxmdraidobject.c and
    udisksclient.c
  - Resource leak.
  - size_str memory leaks in UDisksObjectInfo.
  - Copy-paste error in apply_configuration_thread_func from
    udiskslinuxdriveata.c.
  - "Deadcode" and ignore "check return" warnings in udisksctl.c.
  + Resolve mountpoint to the real path.
  + Include exFAT as a possible partition type for ID 0x07.
  + Always try to read configuration from crypttab in
    handle_unlock.
  + Make sure the table_type is consistent in
    handle_create_partition.
  + Wait for device to become initialized before probing it.
  + Use different mode/dmode for shared file systems.
- Changes from version 2.7.4:
  + Add: New function to set label on swap devices.
  + Fix:
  - Uninitalized value in "udisks_linux_loop_update";
  - Loop device automounting in GNOME.
  + Run cryptsetup before returning from non-blocking Format.
  + Use new libblockdev functionality to disable checks during
    init.
  + Do not try to create file watchers for RAIDs without
    redundancy.
  + Try to use libblockdev to get RAID array size.
  + Re-add support the legacy BIOS bootable GPT flag.
- Changes from version 2.7.3:
  + Add:
  - Version info to docstrings of the partition Resize function;
  - New ResolveDevice function;
  - New OpenDevice function;
  - some missing functions to doc/udisks2-sections.txt.in.in.
  + Fix:
  - Wrong GSList pointer declaration in
    "handle_get_block_devices";
  - "supports_owners" flag for UDF;
  - ExFAT partition type;
  - Bash completion for udisksctl;
  - Force unmounting;
  - Building documentation with new gtk-doc.
  + Process partition resize update before return.
  + Wait for cleartext device object to disappear on Lock().
  + Ignore Asus Zendisk virtual CDROM and ZFS member partitions.
  + Set corrent part type/id and GUID for UDF formatted partitions.
  + Use LUKS specific partition ID and GUID.
  + Make iSCSI Login and Logout wait for DBus objects update.
  + Disable cleaning using blivet for now.
  + Start even if a libblockdev plugin fails to load.
- Changes from version 2.7.2:
  + Add:
  - Filesystem Resize, Check and Repair;
  - A new "Partitions" property to "PartitionTable" interface;
  - A function to:
    . "take ownership" of a filesystem;
    . List all block devices.
  - A function to wait for an object to disappear.
  + Fix:
  - Detection of drives created using isohybrid images
    (fdo#1437791);
  - Setting "SetupByUID" property when adding a new loop device;
  - How we create UDF file systems.
  + Wait for:
  - The bcache object to disappear after BcacheDestroy;
  - Zram objects to disappear on DestroyDevices().
  + Resize method for Partition interface.
  + Trigger change uevent on disk after adding partitions to it.
  + Use the assert with multiple tries for Block.Configuration.
  + Do not wait for partitions to appear after LoopSetup.
  + Try harder to ignore WD SmartWare virtual CDs.
- Changes from version 2.7.1:
  + Don't always fail on missing LibStorageMgmt support.
  + Fix:
  - Broken partition authorization code;
  - How UDisksClient filters property changes;
  - The position to wait for a partition to appear at.
  + Don't use serial as unique ID for drive objects.
  + udiskslinuxblockbcache.c: Fix uninitialized variable.
  + udisksiscsiutil.c: Correct strncpy lengths.
  + udiskslinuxiscsisessionobject.c: Correct precondition check.
  + lsm_linux_drive.c: Remove std_lsm_vol_data_free error case.
  + udiskslinuxvolumegroupobject.c: Remove variable shadow lvs_p.
  + udiskssimplejob.c: Allow NULL for message.
  + Re-create sysfs watchers for changed mdraid devices.
  + UDisksClient: Do not try remove changed_blacklist hash table in
    finalize.
  + Query methods for available utility binaries.
  + Clear GError after calling "bd_part_get_part_by_pos".
  + Use "model_serial" as unique ID for drive objects.
  + Add "--yes" arg when resizing filesystem with "lvresize".
  + Do not trigger extra uevents for newly created partitions.
  + Free the partition spec libblockdev gives us.
  + Allow the user to specify the partition type.
- Changes from version 2.7.0:
  + udisksdaemonutil.c: Fix GVariant resource leak.
  + Use libblockdev swap plugin for swapspace.
  + Use libblockdev FS plugin for mounting and unmounting devices.
  + Use libblockdev:
  - For:
    . Partitioning code;
    . Wiping newly created partitions;
    . LUKS operations.
  - To get LUKS UUID for LUKS open;
  - As a library not just the plugins;
  - MDRAID code and wipefs calls in MDRAID code.
  + Use libblockdev-lvm for:
  - LV and VG operations;
  - VolumeGroupCreate() too;
  - When updating VG on Poll() call.
  + Fix:
  - bd_reinit and g_clear_error calls in btrfs, zram and bcache;
  - Docstring of 'CreateSnapshot' method in '.Filesystem.BTRFS';
  - Requires and BuildRequires for libblockdev;
  - API for BcacheCreate function.
  + Add:
  - Libblockdev MDRAID and FS plugins to BuildRequires;
  - 'options' parameter do zRAM 'Refresh' function;
  - A function for running threaded jobs synchronously;
  - A new configure option --enable-available-modules.
  + Remove unused variables in handle_mdraid_create.
  + Create Job objects for partitioning related actions.
  + Change:
  - btrfs module API to be consistent with udisks core;
  - bcache properties do CamelCase;
  - ZRAM 'CreateDevices' function to return newly created;
  - zRAM properties to CamelCase.
  + Bcache, btrfs and zRAM modules: Handle invocations in threads.
  + Do not try to set GError over the top of a previous GError.
  + zRAM: Extract used CompAlgorithm as a single value.
    ZRAMs.
  + Move new partition start if overlaps with extended partition
    metadata.
  + Do not start threaded jobs automatically
  + Require and initialize the libblockdev-lvm plugin
  + Check that blockdev/lvm.h is available if LVM2 support
    requested.
  + Also create thin pools using libblockdev-lvm.
  + Get VGs with bd_lvm_vgs() run in a thread.
  + Update information about PVs, LVs and VGs using
    libblockdev-lvm.
  + Get rid of the udisks-lvm helper program.
  + Use:
  - Info for metadata LV when updating LV which has one;
  - Systemd-defined macros in the spec file template;
  - bd_lvm_vgreduce() instead of running 'vgreduce'.
  + REMOVE-ME: use the CLI-based libblockdev-lvm plugin.
  + Make sure we have the AX_CHECK_ENABLE_DEBUG macro.
  + Also check if libblockdev supports bcache.
  + Require 'udev' not 'systemd-udev'.
- Adopt the use of %make_build and %make_install while dropping
  deprecated use of raw commands, following the best practices.
- Pass disable-static to configure as static libs are enabled by
  default. And enable-bcache, enable-btrfs, enable-lsm,
  enable-lvm2, enable-lvmcache and enable-zram to enable new
  available features.
- Add blkid, blockdev, libsystemd and mount pkgconfig modules, and
  libbd_btrfs-devel, libbd_crypto-devel, libbd_fs-devel,
  libbd_kbd-devel, libbd_loop-devel, libbd_lvm-devel,
  libbd_mdraid-devel, libbd_part-devel, libbd_swap-devel,
  libconfig-devel, libstoragemgmt-devel, lvm2-devel BuildRequires
  as new dependencies.
- Add libblockdev, libbd_crypto, libbd_fs, libbd_loop,
  libbd_mdraid, libbd_part and libbd_swap Requires as new run time
  requirements.
- Add e2fsprogs, xfsprogs, and dosfstools Requires, being the first
  needed by mkfs.ext3, mkfs.ext3 and e2label. The second, by
  mkfs.xfs and xfs_admin. And the third, by mkfs.vfat.
- Add gio-unix-2.0 and gmodule-2.0 pkgconfig BuildRequires: note
  that they was already being pulled with pkgconfig(glib-2.0) and
  used, once they live in the same devel package.
- Drop pkgconfig(udev) BuildRequires: no longer needed.
- Replace libgudev-1_0-devel and pkgconfig(systemd) BuildRequires
  by gudev-1.0 and libsystemd, respectively.
- Add LGPL-2.0+ to the preamble License tag once the preamble
  License tag is used for the source RPM and binary RPM packages.
- Correct some subpackages LGPL-2.1+ License tags to LGPL-2.0+ as
  pointed by the COPYING and source files.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
</package>
<package pkgid="0dccd660e4f5f5da317a1383100e7acd56bd607505b64423e04b2f302b7a9ac1" name="libudisks2-0" arch="x86_64">
  <version epoch="0" ver="2.9.2" rel="150400.3.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 2.7.6:
  + Add: UdisksUtabEntry and read-write lock.
  + Fix escaping mountpoint for the cleanup service.
  + Check for all LUKS devices when looking for
    CryptoBackingDevice.
  + First implementation of udisksutabmonitor.
  + Invoke job_complete in the proper context in order to avoid
    deadlocks.
  + Generate autocleanup functions for interfaces.
  + Update documentation.
- Changes from version 2.7.5:
  + Add:
  - 'no-discard' option to formatting methods.
  - An assertion method for checking an objects interfaces.
  + Fix:
  - Possible NULL pointer dereference in:
    udiskslinuxdrive.c, udiskslinuxmdraidobject.c and
    udisksclient.c
  - Resource leak.
  - size_str memory leaks in UDisksObjectInfo.
  - Copy-paste error in apply_configuration_thread_func from
    udiskslinuxdriveata.c.
  - "Deadcode" and ignore "check return" warnings in udisksctl.c.
  + Resolve mountpoint to the real path.
  + Include exFAT as a possible partition type for ID 0x07.
  + Always try to read configuration from crypttab in
    handle_unlock.
  + Make sure the table_type is consistent in
    handle_create_partition.
  + Wait for device to become initialized before probing it.
  + Use different mode/dmode for shared file systems.
- Changes from version 2.7.4:
  + Add: New function to set label on swap devices.
  + Fix:
  - Uninitalized value in "udisks_linux_loop_update";
  - Loop device automounting in GNOME.
  + Run cryptsetup before returning from non-blocking Format.
  + Use new libblockdev functionality to disable checks during
    init.
  + Do not try to create file watchers for RAIDs without
    redundancy.
  + Try to use libblockdev to get RAID array size.
  + Re-add support the legacy BIOS bootable GPT flag.
- Changes from version 2.7.3:
  + Add:
  - Version info to docstrings of the partition Resize function;
  - New ResolveDevice function;
  - New OpenDevice function;
  - some missing functions to doc/udisks2-sections.txt.in.in.
  + Fix:
  - Wrong GSList pointer declaration in
    "handle_get_block_devices";
  - "supports_owners" flag for UDF;
  - ExFAT partition type;
  - Bash completion for udisksctl;
  - Force unmounting;
  - Building documentation with new gtk-doc.
  + Process partition resize update before return.
  + Wait for cleartext device object to disappear on Lock().
  + Ignore Asus Zendisk virtual CDROM and ZFS member partitions.
  + Set corrent part type/id and GUID for UDF formatted partitions.
  + Use LUKS specific partition ID and GUID.
  + Make iSCSI Login and Logout wait for DBus objects update.
  + Disable cleaning using blivet for now.
  + Start even if a libblockdev plugin fails to load.
- Changes from version 2.7.2:
  + Add:
  - Filesystem Resize, Check and Repair;
  - A new "Partitions" property to "PartitionTable" interface;
  - A function to:
    . "take ownership" of a filesystem;
    . List all block devices.
  - A function to wait for an object to disappear.
  + Fix:
  - Detection of drives created using isohybrid images
    (fdo#1437791);
  - Setting "SetupByUID" property when adding a new loop device;
  - How we create UDF file systems.
  + Wait for:
  - The bcache object to disappear after BcacheDestroy;
  - Zram objects to disappear on DestroyDevices().
  + Resize method for Partition interface.
  + Trigger change uevent on disk after adding partitions to it.
  + Use the assert with multiple tries for Block.Configuration.
  + Do not wait for partitions to appear after LoopSetup.
  + Try harder to ignore WD SmartWare virtual CDs.
- Changes from version 2.7.1:
  + Don't always fail on missing LibStorageMgmt support.
  + Fix:
  - Broken partition authorization code;
  - How UDisksClient filters property changes;
  - The position to wait for a partition to appear at.
  + Don't use serial as unique ID for drive objects.
  + udiskslinuxblockbcache.c: Fix uninitialized variable.
  + udisksiscsiutil.c: Correct strncpy lengths.
  + udiskslinuxiscsisessionobject.c: Correct precondition check.
  + lsm_linux_drive.c: Remove std_lsm_vol_data_free error case.
  + udiskslinuxvolumegroupobject.c: Remove variable shadow lvs_p.
  + udiskssimplejob.c: Allow NULL for message.
  + Re-create sysfs watchers for changed mdraid devices.
  + UDisksClient: Do not try remove changed_blacklist hash table in
    finalize.
  + Query methods for available utility binaries.
  + Clear GError after calling "bd_part_get_part_by_pos".
  + Use "model_serial" as unique ID for drive objects.
  + Add "--yes" arg when resizing filesystem with "lvresize".
  + Do not trigger extra uevents for newly created partitions.
  + Free the partition spec libblockdev gives us.
  + Allow the user to specify the partition type.
- Changes from version 2.7.0:
  + udisksdaemonutil.c: Fix GVariant resource leak.
  + Use libblockdev swap plugin for swapspace.
  + Use libblockdev FS plugin for mounting and unmounting devices.
  + Use libblockdev:
  - For:
    . Partitioning code;
    . Wiping newly created partitions;
    . LUKS operations.
  - To get LUKS UUID for LUKS open;
  - As a library not just the plugins;
  - MDRAID code and wipefs calls in MDRAID code.
  + Use libblockdev-lvm for:
  - LV and VG operations;
  - VolumeGroupCreate() too;
  - When updating VG on Poll() call.
  + Fix:
  - bd_reinit and g_clear_error calls in btrfs, zram and bcache;
  - Docstring of 'CreateSnapshot' method in '.Filesystem.BTRFS';
  - Requires and BuildRequires for libblockdev;
  - API for BcacheCreate function.
  + Add:
  - Libblockdev MDRAID and FS plugins to BuildRequires;
  - 'options' parameter do zRAM 'Refresh' function;
  - A function for running threaded jobs synchronously;
  - A new configure option --enable-available-modules.
  + Remove unused variables in handle_mdraid_create.
  + Create Job objects for partitioning related actions.
  + Change:
  - btrfs module API to be consistent with udisks core;
  - bcache properties do CamelCase;
  - ZRAM 'CreateDevices' function to return newly created;
  - zRAM properties to CamelCase.
  + Bcache, btrfs and zRAM modules: Handle invocations in threads.
  + Do not try to set GError over the top of a previous GError.
  + zRAM: Extract used CompAlgorithm as a single value.
    ZRAMs.
  + Move new partition start if overlaps with extended partition
    metadata.
  + Do not start threaded jobs automatically
  + Require and initialize the libblockdev-lvm plugin
  + Check that blockdev/lvm.h is available if LVM2 support
    requested.
  + Also create thin pools using libblockdev-lvm.
  + Get VGs with bd_lvm_vgs() run in a thread.
  + Update information about PVs, LVs and VGs using
    libblockdev-lvm.
  + Get rid of the udisks-lvm helper program.
  + Use:
  - Info for metadata LV when updating LV which has one;
  - Systemd-defined macros in the spec file template;
  - bd_lvm_vgreduce() instead of running 'vgreduce'.
  + REMOVE-ME: use the CLI-based libblockdev-lvm plugin.
  + Make sure we have the AX_CHECK_ENABLE_DEBUG macro.
  + Also check if libblockdev supports bcache.
  + Require 'udev' not 'systemd-udev'.
- Adopt the use of %make_build and %make_install while dropping
  deprecated use of raw commands, following the best practices.
- Pass disable-static to configure as static libs are enabled by
  default. And enable-bcache, enable-btrfs, enable-lsm,
  enable-lvm2, enable-lvmcache and enable-zram to enable new
  available features.
- Add blkid, blockdev, libsystemd and mount pkgconfig modules, and
  libbd_btrfs-devel, libbd_crypto-devel, libbd_fs-devel,
  libbd_kbd-devel, libbd_loop-devel, libbd_lvm-devel,
  libbd_mdraid-devel, libbd_part-devel, libbd_swap-devel,
  libconfig-devel, libstoragemgmt-devel, lvm2-devel BuildRequires
  as new dependencies.
- Add libblockdev, libbd_crypto, libbd_fs, libbd_loop,
  libbd_mdraid, libbd_part and libbd_swap Requires as new run time
  requirements.
- Add e2fsprogs, xfsprogs, and dosfstools Requires, being the first
  needed by mkfs.ext3, mkfs.ext3 and e2label. The second, by
  mkfs.xfs and xfs_admin. And the third, by mkfs.vfat.
- Add gio-unix-2.0 and gmodule-2.0 pkgconfig BuildRequires: note
  that they was already being pulled with pkgconfig(glib-2.0) and
  used, once they live in the same devel package.
- Drop pkgconfig(udev) BuildRequires: no longer needed.
- Replace libgudev-1_0-devel and pkgconfig(systemd) BuildRequires
  by gudev-1.0 and libsystemd, respectively.
- Add LGPL-2.0+ to the preamble License tag once the preamble
  License tag is used for the source RPM and binary RPM packages.
- Correct some subpackages LGPL-2.1+ License tags to LGPL-2.0+ as
  pointed by the COPYING and source files.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
</package>
<package pkgid="d4184fdc332d1a1b042e8b27d36e975241a5fe13ff2c9dc0e4fd4c92d3d90cc5" name="libudisks2-0-devel" arch="aarch64">
  <version epoch="0" ver="2.9.2" rel="150400.3.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 2.7.6:
  + Add: UdisksUtabEntry and read-write lock.
  + Fix escaping mountpoint for the cleanup service.
  + Check for all LUKS devices when looking for
    CryptoBackingDevice.
  + First implementation of udisksutabmonitor.
  + Invoke job_complete in the proper context in order to avoid
    deadlocks.
  + Generate autocleanup functions for interfaces.
  + Update documentation.
- Changes from version 2.7.5:
  + Add:
  - 'no-discard' option to formatting methods.
  - An assertion method for checking an objects interfaces.
  + Fix:
  - Possible NULL pointer dereference in:
    udiskslinuxdrive.c, udiskslinuxmdraidobject.c and
    udisksclient.c
  - Resource leak.
  - size_str memory leaks in UDisksObjectInfo.
  - Copy-paste error in apply_configuration_thread_func from
    udiskslinuxdriveata.c.
  - "Deadcode" and ignore "check return" warnings in udisksctl.c.
  + Resolve mountpoint to the real path.
  + Include exFAT as a possible partition type for ID 0x07.
  + Always try to read configuration from crypttab in
    handle_unlock.
  + Make sure the table_type is consistent in
    handle_create_partition.
  + Wait for device to become initialized before probing it.
  + Use different mode/dmode for shared file systems.
- Changes from version 2.7.4:
  + Add: New function to set label on swap devices.
  + Fix:
  - Uninitalized value in "udisks_linux_loop_update";
  - Loop device automounting in GNOME.
  + Run cryptsetup before returning from non-blocking Format.
  + Use new libblockdev functionality to disable checks during
    init.
  + Do not try to create file watchers for RAIDs without
    redundancy.
  + Try to use libblockdev to get RAID array size.
  + Re-add support the legacy BIOS bootable GPT flag.
- Changes from version 2.7.3:
  + Add:
  - Version info to docstrings of the partition Resize function;
  - New ResolveDevice function;
  - New OpenDevice function;
  - some missing functions to doc/udisks2-sections.txt.in.in.
  + Fix:
  - Wrong GSList pointer declaration in
    "handle_get_block_devices";
  - "supports_owners" flag for UDF;
  - ExFAT partition type;
  - Bash completion for udisksctl;
  - Force unmounting;
  - Building documentation with new gtk-doc.
  + Process partition resize update before return.
  + Wait for cleartext device object to disappear on Lock().
  + Ignore Asus Zendisk virtual CDROM and ZFS member partitions.
  + Set corrent part type/id and GUID for UDF formatted partitions.
  + Use LUKS specific partition ID and GUID.
  + Make iSCSI Login and Logout wait for DBus objects update.
  + Disable cleaning using blivet for now.
  + Start even if a libblockdev plugin fails to load.
- Changes from version 2.7.2:
  + Add:
  - Filesystem Resize, Check and Repair;
  - A new "Partitions" property to "PartitionTable" interface;
  - A function to:
    . "take ownership" of a filesystem;
    . List all block devices.
  - A function to wait for an object to disappear.
  + Fix:
  - Detection of drives created using isohybrid images
    (fdo#1437791);
  - Setting "SetupByUID" property when adding a new loop device;
  - How we create UDF file systems.
  + Wait for:
  - The bcache object to disappear after BcacheDestroy;
  - Zram objects to disappear on DestroyDevices().
  + Resize method for Partition interface.
  + Trigger change uevent on disk after adding partitions to it.
  + Use the assert with multiple tries for Block.Configuration.
  + Do not wait for partitions to appear after LoopSetup.
  + Try harder to ignore WD SmartWare virtual CDs.
- Changes from version 2.7.1:
  + Don't always fail on missing LibStorageMgmt support.
  + Fix:
  - Broken partition authorization code;
  - How UDisksClient filters property changes;
  - The position to wait for a partition to appear at.
  + Don't use serial as unique ID for drive objects.
  + udiskslinuxblockbcache.c: Fix uninitialized variable.
  + udisksiscsiutil.c: Correct strncpy lengths.
  + udiskslinuxiscsisessionobject.c: Correct precondition check.
  + lsm_linux_drive.c: Remove std_lsm_vol_data_free error case.
  + udiskslinuxvolumegroupobject.c: Remove variable shadow lvs_p.
  + udiskssimplejob.c: Allow NULL for message.
  + Re-create sysfs watchers for changed mdraid devices.
  + UDisksClient: Do not try remove changed_blacklist hash table in
    finalize.
  + Query methods for available utility binaries.
  + Clear GError after calling "bd_part_get_part_by_pos".
  + Use "model_serial" as unique ID for drive objects.
  + Add "--yes" arg when resizing filesystem with "lvresize".
  + Do not trigger extra uevents for newly created partitions.
  + Free the partition spec libblockdev gives us.
  + Allow the user to specify the partition type.
- Changes from version 2.7.0:
  + udisksdaemonutil.c: Fix GVariant resource leak.
  + Use libblockdev swap plugin for swapspace.
  + Use libblockdev FS plugin for mounting and unmounting devices.
  + Use libblockdev:
  - For:
    . Partitioning code;
    . Wiping newly created partitions;
    . LUKS operations.
  - To get LUKS UUID for LUKS open;
  - As a library not just the plugins;
  - MDRAID code and wipefs calls in MDRAID code.
  + Use libblockdev-lvm for:
  - LV and VG operations;
  - VolumeGroupCreate() too;
  - When updating VG on Poll() call.
  + Fix:
  - bd_reinit and g_clear_error calls in btrfs, zram and bcache;
  - Docstring of 'CreateSnapshot' method in '.Filesystem.BTRFS';
  - Requires and BuildRequires for libblockdev;
  - API for BcacheCreate function.
  + Add:
  - Libblockdev MDRAID and FS plugins to BuildRequires;
  - 'options' parameter do zRAM 'Refresh' function;
  - A function for running threaded jobs synchronously;
  - A new configure option --enable-available-modules.
  + Remove unused variables in handle_mdraid_create.
  + Create Job objects for partitioning related actions.
  + Change:
  - btrfs module API to be consistent with udisks core;
  - bcache properties do CamelCase;
  - ZRAM 'CreateDevices' function to return newly created;
  - zRAM properties to CamelCase.
  + Bcache, btrfs and zRAM modules: Handle invocations in threads.
  + Do not try to set GError over the top of a previous GError.
  + zRAM: Extract used CompAlgorithm as a single value.
    ZRAMs.
  + Move new partition start if overlaps with extended partition
    metadata.
  + Do not start threaded jobs automatically
  + Require and initialize the libblockdev-lvm plugin
  + Check that blockdev/lvm.h is available if LVM2 support
    requested.
  + Also create thin pools using libblockdev-lvm.
  + Get VGs with bd_lvm_vgs() run in a thread.
  + Update information about PVs, LVs and VGs using
    libblockdev-lvm.
  + Get rid of the udisks-lvm helper program.
  + Use:
  - Info for metadata LV when updating LV which has one;
  - Systemd-defined macros in the spec file template;
  - bd_lvm_vgreduce() instead of running 'vgreduce'.
  + REMOVE-ME: use the CLI-based libblockdev-lvm plugin.
  + Make sure we have the AX_CHECK_ENABLE_DEBUG macro.
  + Also check if libblockdev supports bcache.
  + Require 'udev' not 'systemd-udev'.
- Adopt the use of %make_build and %make_install while dropping
  deprecated use of raw commands, following the best practices.
- Pass disable-static to configure as static libs are enabled by
  default. And enable-bcache, enable-btrfs, enable-lsm,
  enable-lvm2, enable-lvmcache and enable-zram to enable new
  available features.
- Add blkid, blockdev, libsystemd and mount pkgconfig modules, and
  libbd_btrfs-devel, libbd_crypto-devel, libbd_fs-devel,
  libbd_kbd-devel, libbd_loop-devel, libbd_lvm-devel,
  libbd_mdraid-devel, libbd_part-devel, libbd_swap-devel,
  libconfig-devel, libstoragemgmt-devel, lvm2-devel BuildRequires
  as new dependencies.
- Add libblockdev, libbd_crypto, libbd_fs, libbd_loop,
  libbd_mdraid, libbd_part and libbd_swap Requires as new run time
  requirements.
- Add e2fsprogs, xfsprogs, and dosfstools Requires, being the first
  needed by mkfs.ext3, mkfs.ext3 and e2label. The second, by
  mkfs.xfs and xfs_admin. And the third, by mkfs.vfat.
- Add gio-unix-2.0 and gmodule-2.0 pkgconfig BuildRequires: note
  that they was already being pulled with pkgconfig(glib-2.0) and
  used, once they live in the same devel package.
- Drop pkgconfig(udev) BuildRequires: no longer needed.
- Replace libgudev-1_0-devel and pkgconfig(systemd) BuildRequires
  by gudev-1.0 and libsystemd, respectively.
- Add LGPL-2.0+ to the preamble License tag once the preamble
  License tag is used for the source RPM and binary RPM packages.
- Correct some subpackages LGPL-2.1+ License tags to LGPL-2.0+ as
  pointed by the COPYING and source files.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
</package>
<package pkgid="2307bc7cc488b4a26f32fc1b53638a19b3eb275e70b428b08607c5a34c141321" name="libudisks2-0-devel" arch="ppc64le">
  <version epoch="0" ver="2.9.2" rel="150400.3.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 2.7.6:
  + Add: UdisksUtabEntry and read-write lock.
  + Fix escaping mountpoint for the cleanup service.
  + Check for all LUKS devices when looking for
    CryptoBackingDevice.
  + First implementation of udisksutabmonitor.
  + Invoke job_complete in the proper context in order to avoid
    deadlocks.
  + Generate autocleanup functions for interfaces.
  + Update documentation.
- Changes from version 2.7.5:
  + Add:
  - 'no-discard' option to formatting methods.
  - An assertion method for checking an objects interfaces.
  + Fix:
  - Possible NULL pointer dereference in:
    udiskslinuxdrive.c, udiskslinuxmdraidobject.c and
    udisksclient.c
  - Resource leak.
  - size_str memory leaks in UDisksObjectInfo.
  - Copy-paste error in apply_configuration_thread_func from
    udiskslinuxdriveata.c.
  - "Deadcode" and ignore "check return" warnings in udisksctl.c.
  + Resolve mountpoint to the real path.
  + Include exFAT as a possible partition type for ID 0x07.
  + Always try to read configuration from crypttab in
    handle_unlock.
  + Make sure the table_type is consistent in
    handle_create_partition.
  + Wait for device to become initialized before probing it.
  + Use different mode/dmode for shared file systems.
- Changes from version 2.7.4:
  + Add: New function to set label on swap devices.
  + Fix:
  - Uninitalized value in "udisks_linux_loop_update";
  - Loop device automounting in GNOME.
  + Run cryptsetup before returning from non-blocking Format.
  + Use new libblockdev functionality to disable checks during
    init.
  + Do not try to create file watchers for RAIDs without
    redundancy.
  + Try to use libblockdev to get RAID array size.
  + Re-add support the legacy BIOS bootable GPT flag.
- Changes from version 2.7.3:
  + Add:
  - Version info to docstrings of the partition Resize function;
  - New ResolveDevice function;
  - New OpenDevice function;
  - some missing functions to doc/udisks2-sections.txt.in.in.
  + Fix:
  - Wrong GSList pointer declaration in
    "handle_get_block_devices";
  - "supports_owners" flag for UDF;
  - ExFAT partition type;
  - Bash completion for udisksctl;
  - Force unmounting;
  - Building documentation with new gtk-doc.
  + Process partition resize update before return.
  + Wait for cleartext device object to disappear on Lock().
  + Ignore Asus Zendisk virtual CDROM and ZFS member partitions.
  + Set corrent part type/id and GUID for UDF formatted partitions.
  + Use LUKS specific partition ID and GUID.
  + Make iSCSI Login and Logout wait for DBus objects update.
  + Disable cleaning using blivet for now.
  + Start even if a libblockdev plugin fails to load.
- Changes from version 2.7.2:
  + Add:
  - Filesystem Resize, Check and Repair;
  - A new "Partitions" property to "PartitionTable" interface;
  - A function to:
    . "take ownership" of a filesystem;
    . List all block devices.
  - A function to wait for an object to disappear.
  + Fix:
  - Detection of drives created using isohybrid images
    (fdo#1437791);
  - Setting "SetupByUID" property when adding a new loop device;
  - How we create UDF file systems.
  + Wait for:
  - The bcache object to disappear after BcacheDestroy;
  - Zram objects to disappear on DestroyDevices().
  + Resize method for Partition interface.
  + Trigger change uevent on disk after adding partitions to it.
  + Use the assert with multiple tries for Block.Configuration.
  + Do not wait for partitions to appear after LoopSetup.
  + Try harder to ignore WD SmartWare virtual CDs.
- Changes from version 2.7.1:
  + Don't always fail on missing LibStorageMgmt support.
  + Fix:
  - Broken partition authorization code;
  - How UDisksClient filters property changes;
  - The position to wait for a partition to appear at.
  + Don't use serial as unique ID for drive objects.
  + udiskslinuxblockbcache.c: Fix uninitialized variable.
  + udisksiscsiutil.c: Correct strncpy lengths.
  + udiskslinuxiscsisessionobject.c: Correct precondition check.
  + lsm_linux_drive.c: Remove std_lsm_vol_data_free error case.
  + udiskslinuxvolumegroupobject.c: Remove variable shadow lvs_p.
  + udiskssimplejob.c: Allow NULL for message.
  + Re-create sysfs watchers for changed mdraid devices.
  + UDisksClient: Do not try remove changed_blacklist hash table in
    finalize.
  + Query methods for available utility binaries.
  + Clear GError after calling "bd_part_get_part_by_pos".
  + Use "model_serial" as unique ID for drive objects.
  + Add "--yes" arg when resizing filesystem with "lvresize".
  + Do not trigger extra uevents for newly created partitions.
  + Free the partition spec libblockdev gives us.
  + Allow the user to specify the partition type.
- Changes from version 2.7.0:
  + udisksdaemonutil.c: Fix GVariant resource leak.
  + Use libblockdev swap plugin for swapspace.
  + Use libblockdev FS plugin for mounting and unmounting devices.
  + Use libblockdev:
  - For:
    . Partitioning code;
    . Wiping newly created partitions;
    . LUKS operations.
  - To get LUKS UUID for LUKS open;
  - As a library not just the plugins;
  - MDRAID code and wipefs calls in MDRAID code.
  + Use libblockdev-lvm for:
  - LV and VG operations;
  - VolumeGroupCreate() too;
  - When updating VG on Poll() call.
  + Fix:
  - bd_reinit and g_clear_error calls in btrfs, zram and bcache;
  - Docstring of 'CreateSnapshot' method in '.Filesystem.BTRFS';
  - Requires and BuildRequires for libblockdev;
  - API for BcacheCreate function.
  + Add:
  - Libblockdev MDRAID and FS plugins to BuildRequires;
  - 'options' parameter do zRAM 'Refresh' function;
  - A function for running threaded jobs synchronously;
  - A new configure option --enable-available-modules.
  + Remove unused variables in handle_mdraid_create.
  + Create Job objects for partitioning related actions.
  + Change:
  - btrfs module API to be consistent with udisks core;
  - bcache properties do CamelCase;
  - ZRAM 'CreateDevices' function to return newly created;
  - zRAM properties to CamelCase.
  + Bcache, btrfs and zRAM modules: Handle invocations in threads.
  + Do not try to set GError over the top of a previous GError.
  + zRAM: Extract used CompAlgorithm as a single value.
    ZRAMs.
  + Move new partition start if overlaps with extended partition
    metadata.
  + Do not start threaded jobs automatically
  + Require and initialize the libblockdev-lvm plugin
  + Check that blockdev/lvm.h is available if LVM2 support
    requested.
  + Also create thin pools using libblockdev-lvm.
  + Get VGs with bd_lvm_vgs() run in a thread.
  + Update information about PVs, LVs and VGs using
    libblockdev-lvm.
  + Get rid of the udisks-lvm helper program.
  + Use:
  - Info for metadata LV when updating LV which has one;
  - Systemd-defined macros in the spec file template;
  - bd_lvm_vgreduce() instead of running 'vgreduce'.
  + REMOVE-ME: use the CLI-based libblockdev-lvm plugin.
  + Make sure we have the AX_CHECK_ENABLE_DEBUG macro.
  + Also check if libblockdev supports bcache.
  + Require 'udev' not 'systemd-udev'.
- Adopt the use of %make_build and %make_install while dropping
  deprecated use of raw commands, following the best practices.
- Pass disable-static to configure as static libs are enabled by
  default. And enable-bcache, enable-btrfs, enable-lsm,
  enable-lvm2, enable-lvmcache and enable-zram to enable new
  available features.
- Add blkid, blockdev, libsystemd and mount pkgconfig modules, and
  libbd_btrfs-devel, libbd_crypto-devel, libbd_fs-devel,
  libbd_kbd-devel, libbd_loop-devel, libbd_lvm-devel,
  libbd_mdraid-devel, libbd_part-devel, libbd_swap-devel,
  libconfig-devel, libstoragemgmt-devel, lvm2-devel BuildRequires
  as new dependencies.
- Add libblockdev, libbd_crypto, libbd_fs, libbd_loop,
  libbd_mdraid, libbd_part and libbd_swap Requires as new run time
  requirements.
- Add e2fsprogs, xfsprogs, and dosfstools Requires, being the first
  needed by mkfs.ext3, mkfs.ext3 and e2label. The second, by
  mkfs.xfs and xfs_admin. And the third, by mkfs.vfat.
- Add gio-unix-2.0 and gmodule-2.0 pkgconfig BuildRequires: note
  that they was already being pulled with pkgconfig(glib-2.0) and
  used, once they live in the same devel package.
- Drop pkgconfig(udev) BuildRequires: no longer needed.
- Replace libgudev-1_0-devel and pkgconfig(systemd) BuildRequires
  by gudev-1.0 and libsystemd, respectively.
- Add LGPL-2.0+ to the preamble License tag once the preamble
  License tag is used for the source RPM and binary RPM packages.
- Correct some subpackages LGPL-2.1+ License tags to LGPL-2.0+ as
  pointed by the COPYING and source files.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
</package>
<package pkgid="d5a4b73d1c1760d927fba6b1419e8d761276c473d0f5d78db9f96f50ddaa4290" name="libudisks2-0-devel" arch="s390x">
  <version epoch="0" ver="2.9.2" rel="150400.3.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 2.7.6:
  + Add: UdisksUtabEntry and read-write lock.
  + Fix escaping mountpoint for the cleanup service.
  + Check for all LUKS devices when looking for
    CryptoBackingDevice.
  + First implementation of udisksutabmonitor.
  + Invoke job_complete in the proper context in order to avoid
    deadlocks.
  + Generate autocleanup functions for interfaces.
  + Update documentation.
- Changes from version 2.7.5:
  + Add:
  - 'no-discard' option to formatting methods.
  - An assertion method for checking an objects interfaces.
  + Fix:
  - Possible NULL pointer dereference in:
    udiskslinuxdrive.c, udiskslinuxmdraidobject.c and
    udisksclient.c
  - Resource leak.
  - size_str memory leaks in UDisksObjectInfo.
  - Copy-paste error in apply_configuration_thread_func from
    udiskslinuxdriveata.c.
  - "Deadcode" and ignore "check return" warnings in udisksctl.c.
  + Resolve mountpoint to the real path.
  + Include exFAT as a possible partition type for ID 0x07.
  + Always try to read configuration from crypttab in
    handle_unlock.
  + Make sure the table_type is consistent in
    handle_create_partition.
  + Wait for device to become initialized before probing it.
  + Use different mode/dmode for shared file systems.
- Changes from version 2.7.4:
  + Add: New function to set label on swap devices.
  + Fix:
  - Uninitalized value in "udisks_linux_loop_update";
  - Loop device automounting in GNOME.
  + Run cryptsetup before returning from non-blocking Format.
  + Use new libblockdev functionality to disable checks during
    init.
  + Do not try to create file watchers for RAIDs without
    redundancy.
  + Try to use libblockdev to get RAID array size.
  + Re-add support the legacy BIOS bootable GPT flag.
- Changes from version 2.7.3:
  + Add:
  - Version info to docstrings of the partition Resize function;
  - New ResolveDevice function;
  - New OpenDevice function;
  - some missing functions to doc/udisks2-sections.txt.in.in.
  + Fix:
  - Wrong GSList pointer declaration in
    "handle_get_block_devices";
  - "supports_owners" flag for UDF;
  - ExFAT partition type;
  - Bash completion for udisksctl;
  - Force unmounting;
  - Building documentation with new gtk-doc.
  + Process partition resize update before return.
  + Wait for cleartext device object to disappear on Lock().
  + Ignore Asus Zendisk virtual CDROM and ZFS member partitions.
  + Set corrent part type/id and GUID for UDF formatted partitions.
  + Use LUKS specific partition ID and GUID.
  + Make iSCSI Login and Logout wait for DBus objects update.
  + Disable cleaning using blivet for now.
  + Start even if a libblockdev plugin fails to load.
- Changes from version 2.7.2:
  + Add:
  - Filesystem Resize, Check and Repair;
  - A new "Partitions" property to "PartitionTable" interface;
  - A function to:
    . "take ownership" of a filesystem;
    . List all block devices.
  - A function to wait for an object to disappear.
  + Fix:
  - Detection of drives created using isohybrid images
    (fdo#1437791);
  - Setting "SetupByUID" property when adding a new loop device;
  - How we create UDF file systems.
  + Wait for:
  - The bcache object to disappear after BcacheDestroy;
  - Zram objects to disappear on DestroyDevices().
  + Resize method for Partition interface.
  + Trigger change uevent on disk after adding partitions to it.
  + Use the assert with multiple tries for Block.Configuration.
  + Do not wait for partitions to appear after LoopSetup.
  + Try harder to ignore WD SmartWare virtual CDs.
- Changes from version 2.7.1:
  + Don't always fail on missing LibStorageMgmt support.
  + Fix:
  - Broken partition authorization code;
  - How UDisksClient filters property changes;
  - The position to wait for a partition to appear at.
  + Don't use serial as unique ID for drive objects.
  + udiskslinuxblockbcache.c: Fix uninitialized variable.
  + udisksiscsiutil.c: Correct strncpy lengths.
  + udiskslinuxiscsisessionobject.c: Correct precondition check.
  + lsm_linux_drive.c: Remove std_lsm_vol_data_free error case.
  + udiskslinuxvolumegroupobject.c: Remove variable shadow lvs_p.
  + udiskssimplejob.c: Allow NULL for message.
  + Re-create sysfs watchers for changed mdraid devices.
  + UDisksClient: Do not try remove changed_blacklist hash table in
    finalize.
  + Query methods for available utility binaries.
  + Clear GError after calling "bd_part_get_part_by_pos".
  + Use "model_serial" as unique ID for drive objects.
  + Add "--yes" arg when resizing filesystem with "lvresize".
  + Do not trigger extra uevents for newly created partitions.
  + Free the partition spec libblockdev gives us.
  + Allow the user to specify the partition type.
- Changes from version 2.7.0:
  + udisksdaemonutil.c: Fix GVariant resource leak.
  + Use libblockdev swap plugin for swapspace.
  + Use libblockdev FS plugin for mounting and unmounting devices.
  + Use libblockdev:
  - For:
    . Partitioning code;
    . Wiping newly created partitions;
    . LUKS operations.
  - To get LUKS UUID for LUKS open;
  - As a library not just the plugins;
  - MDRAID code and wipefs calls in MDRAID code.
  + Use libblockdev-lvm for:
  - LV and VG operations;
  - VolumeGroupCreate() too;
  - When updating VG on Poll() call.
  + Fix:
  - bd_reinit and g_clear_error calls in btrfs, zram and bcache;
  - Docstring of 'CreateSnapshot' method in '.Filesystem.BTRFS';
  - Requires and BuildRequires for libblockdev;
  - API for BcacheCreate function.
  + Add:
  - Libblockdev MDRAID and FS plugins to BuildRequires;
  - 'options' parameter do zRAM 'Refresh' function;
  - A function for running threaded jobs synchronously;
  - A new configure option --enable-available-modules.
  + Remove unused variables in handle_mdraid_create.
  + Create Job objects for partitioning related actions.
  + Change:
  - btrfs module API to be consistent with udisks core;
  - bcache properties do CamelCase;
  - ZRAM 'CreateDevices' function to return newly created;
  - zRAM properties to CamelCase.
  + Bcache, btrfs and zRAM modules: Handle invocations in threads.
  + Do not try to set GError over the top of a previous GError.
  + zRAM: Extract used CompAlgorithm as a single value.
    ZRAMs.
  + Move new partition start if overlaps with extended partition
    metadata.
  + Do not start threaded jobs automatically
  + Require and initialize the libblockdev-lvm plugin
  + Check that blockdev/lvm.h is available if LVM2 support
    requested.
  + Also create thin pools using libblockdev-lvm.
  + Get VGs with bd_lvm_vgs() run in a thread.
  + Update information about PVs, LVs and VGs using
    libblockdev-lvm.
  + Get rid of the udisks-lvm helper program.
  + Use:
  - Info for metadata LV when updating LV which has one;
  - Systemd-defined macros in the spec file template;
  - bd_lvm_vgreduce() instead of running 'vgreduce'.
  + REMOVE-ME: use the CLI-based libblockdev-lvm plugin.
  + Make sure we have the AX_CHECK_ENABLE_DEBUG macro.
  + Also check if libblockdev supports bcache.
  + Require 'udev' not 'systemd-udev'.
- Adopt the use of %make_build and %make_install while dropping
  deprecated use of raw commands, following the best practices.
- Pass disable-static to configure as static libs are enabled by
  default. And enable-bcache, enable-btrfs, enable-lsm,
  enable-lvm2, enable-lvmcache and enable-zram to enable new
  available features.
- Add blkid, blockdev, libsystemd and mount pkgconfig modules, and
  libbd_btrfs-devel, libbd_crypto-devel, libbd_fs-devel,
  libbd_kbd-devel, libbd_loop-devel, libbd_lvm-devel,
  libbd_mdraid-devel, libbd_part-devel, libbd_swap-devel,
  libconfig-devel, libstoragemgmt-devel, lvm2-devel BuildRequires
  as new dependencies.
- Add libblockdev, libbd_crypto, libbd_fs, libbd_loop,
  libbd_mdraid, libbd_part and libbd_swap Requires as new run time
  requirements.
- Add e2fsprogs, xfsprogs, and dosfstools Requires, being the first
  needed by mkfs.ext3, mkfs.ext3 and e2label. The second, by
  mkfs.xfs and xfs_admin. And the third, by mkfs.vfat.
- Add gio-unix-2.0 and gmodule-2.0 pkgconfig BuildRequires: note
  that they was already being pulled with pkgconfig(glib-2.0) and
  used, once they live in the same devel package.
- Drop pkgconfig(udev) BuildRequires: no longer needed.
- Replace libgudev-1_0-devel and pkgconfig(systemd) BuildRequires
  by gudev-1.0 and libsystemd, respectively.
- Add LGPL-2.0+ to the preamble License tag once the preamble
  License tag is used for the source RPM and binary RPM packages.
- Correct some subpackages LGPL-2.1+ License tags to LGPL-2.0+ as
  pointed by the COPYING and source files.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
</package>
<package pkgid="92efc1483d4b5f158994d686f802ab04efb3bfe926dfa9141b3cf74a12f88b60" name="libudisks2-0-devel" arch="x86_64">
  <version epoch="0" ver="2.9.2" rel="150400.3.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 2.7.6:
  + Add: UdisksUtabEntry and read-write lock.
  + Fix escaping mountpoint for the cleanup service.
  + Check for all LUKS devices when looking for
    CryptoBackingDevice.
  + First implementation of udisksutabmonitor.
  + Invoke job_complete in the proper context in order to avoid
    deadlocks.
  + Generate autocleanup functions for interfaces.
  + Update documentation.
- Changes from version 2.7.5:
  + Add:
  - 'no-discard' option to formatting methods.
  - An assertion method for checking an objects interfaces.
  + Fix:
  - Possible NULL pointer dereference in:
    udiskslinuxdrive.c, udiskslinuxmdraidobject.c and
    udisksclient.c
  - Resource leak.
  - size_str memory leaks in UDisksObjectInfo.
  - Copy-paste error in apply_configuration_thread_func from
    udiskslinuxdriveata.c.
  - "Deadcode" and ignore "check return" warnings in udisksctl.c.
  + Resolve mountpoint to the real path.
  + Include exFAT as a possible partition type for ID 0x07.
  + Always try to read configuration from crypttab in
    handle_unlock.
  + Make sure the table_type is consistent in
    handle_create_partition.
  + Wait for device to become initialized before probing it.
  + Use different mode/dmode for shared file systems.
- Changes from version 2.7.4:
  + Add: New function to set label on swap devices.
  + Fix:
  - Uninitalized value in "udisks_linux_loop_update";
  - Loop device automounting in GNOME.
  + Run cryptsetup before returning from non-blocking Format.
  + Use new libblockdev functionality to disable checks during
    init.
  + Do not try to create file watchers for RAIDs without
    redundancy.
  + Try to use libblockdev to get RAID array size.
  + Re-add support the legacy BIOS bootable GPT flag.
- Changes from version 2.7.3:
  + Add:
  - Version info to docstrings of the partition Resize function;
  - New ResolveDevice function;
  - New OpenDevice function;
  - some missing functions to doc/udisks2-sections.txt.in.in.
  + Fix:
  - Wrong GSList pointer declaration in
    "handle_get_block_devices";
  - "supports_owners" flag for UDF;
  - ExFAT partition type;
  - Bash completion for udisksctl;
  - Force unmounting;
  - Building documentation with new gtk-doc.
  + Process partition resize update before return.
  + Wait for cleartext device object to disappear on Lock().
  + Ignore Asus Zendisk virtual CDROM and ZFS member partitions.
  + Set corrent part type/id and GUID for UDF formatted partitions.
  + Use LUKS specific partition ID and GUID.
  + Make iSCSI Login and Logout wait for DBus objects update.
  + Disable cleaning using blivet for now.
  + Start even if a libblockdev plugin fails to load.
- Changes from version 2.7.2:
  + Add:
  - Filesystem Resize, Check and Repair;
  - A new "Partitions" property to "PartitionTable" interface;
  - A function to:
    . "take ownership" of a filesystem;
    . List all block devices.
  - A function to wait for an object to disappear.
  + Fix:
  - Detection of drives created using isohybrid images
    (fdo#1437791);
  - Setting "SetupByUID" property when adding a new loop device;
  - How we create UDF file systems.
  + Wait for:
  - The bcache object to disappear after BcacheDestroy;
  - Zram objects to disappear on DestroyDevices().
  + Resize method for Partition interface.
  + Trigger change uevent on disk after adding partitions to it.
  + Use the assert with multiple tries for Block.Configuration.
  + Do not wait for partitions to appear after LoopSetup.
  + Try harder to ignore WD SmartWare virtual CDs.
- Changes from version 2.7.1:
  + Don't always fail on missing LibStorageMgmt support.
  + Fix:
  - Broken partition authorization code;
  - How UDisksClient filters property changes;
  - The position to wait for a partition to appear at.
  + Don't use serial as unique ID for drive objects.
  + udiskslinuxblockbcache.c: Fix uninitialized variable.
  + udisksiscsiutil.c: Correct strncpy lengths.
  + udiskslinuxiscsisessionobject.c: Correct precondition check.
  + lsm_linux_drive.c: Remove std_lsm_vol_data_free error case.
  + udiskslinuxvolumegroupobject.c: Remove variable shadow lvs_p.
  + udiskssimplejob.c: Allow NULL for message.
  + Re-create sysfs watchers for changed mdraid devices.
  + UDisksClient: Do not try remove changed_blacklist hash table in
    finalize.
  + Query methods for available utility binaries.
  + Clear GError after calling "bd_part_get_part_by_pos".
  + Use "model_serial" as unique ID for drive objects.
  + Add "--yes" arg when resizing filesystem with "lvresize".
  + Do not trigger extra uevents for newly created partitions.
  + Free the partition spec libblockdev gives us.
  + Allow the user to specify the partition type.
- Changes from version 2.7.0:
  + udisksdaemonutil.c: Fix GVariant resource leak.
  + Use libblockdev swap plugin for swapspace.
  + Use libblockdev FS plugin for mounting and unmounting devices.
  + Use libblockdev:
  - For:
    . Partitioning code;
    . Wiping newly created partitions;
    . LUKS operations.
  - To get LUKS UUID for LUKS open;
  - As a library not just the plugins;
  - MDRAID code and wipefs calls in MDRAID code.
  + Use libblockdev-lvm for:
  - LV and VG operations;
  - VolumeGroupCreate() too;
  - When updating VG on Poll() call.
  + Fix:
  - bd_reinit and g_clear_error calls in btrfs, zram and bcache;
  - Docstring of 'CreateSnapshot' method in '.Filesystem.BTRFS';
  - Requires and BuildRequires for libblockdev;
  - API for BcacheCreate function.
  + Add:
  - Libblockdev MDRAID and FS plugins to BuildRequires;
  - 'options' parameter do zRAM 'Refresh' function;
  - A function for running threaded jobs synchronously;
  - A new configure option --enable-available-modules.
  + Remove unused variables in handle_mdraid_create.
  + Create Job objects for partitioning related actions.
  + Change:
  - btrfs module API to be consistent with udisks core;
  - bcache properties do CamelCase;
  - ZRAM 'CreateDevices' function to return newly created;
  - zRAM properties to CamelCase.
  + Bcache, btrfs and zRAM modules: Handle invocations in threads.
  + Do not try to set GError over the top of a previous GError.
  + zRAM: Extract used CompAlgorithm as a single value.
    ZRAMs.
  + Move new partition start if overlaps with extended partition
    metadata.
  + Do not start threaded jobs automatically
  + Require and initialize the libblockdev-lvm plugin
  + Check that blockdev/lvm.h is available if LVM2 support
    requested.
  + Also create thin pools using libblockdev-lvm.
  + Get VGs with bd_lvm_vgs() run in a thread.
  + Update information about PVs, LVs and VGs using
    libblockdev-lvm.
  + Get rid of the udisks-lvm helper program.
  + Use:
  - Info for metadata LV when updating LV which has one;
  - Systemd-defined macros in the spec file template;
  - bd_lvm_vgreduce() instead of running 'vgreduce'.
  + REMOVE-ME: use the CLI-based libblockdev-lvm plugin.
  + Make sure we have the AX_CHECK_ENABLE_DEBUG macro.
  + Also check if libblockdev supports bcache.
  + Require 'udev' not 'systemd-udev'.
- Adopt the use of %make_build and %make_install while dropping
  deprecated use of raw commands, following the best practices.
- Pass disable-static to configure as static libs are enabled by
  default. And enable-bcache, enable-btrfs, enable-lsm,
  enable-lvm2, enable-lvmcache and enable-zram to enable new
  available features.
- Add blkid, blockdev, libsystemd and mount pkgconfig modules, and
  libbd_btrfs-devel, libbd_crypto-devel, libbd_fs-devel,
  libbd_kbd-devel, libbd_loop-devel, libbd_lvm-devel,
  libbd_mdraid-devel, libbd_part-devel, libbd_swap-devel,
  libconfig-devel, libstoragemgmt-devel, lvm2-devel BuildRequires
  as new dependencies.
- Add libblockdev, libbd_crypto, libbd_fs, libbd_loop,
  libbd_mdraid, libbd_part and libbd_swap Requires as new run time
  requirements.
- Add e2fsprogs, xfsprogs, and dosfstools Requires, being the first
  needed by mkfs.ext3, mkfs.ext3 and e2label. The second, by
  mkfs.xfs and xfs_admin. And the third, by mkfs.vfat.
- Add gio-unix-2.0 and gmodule-2.0 pkgconfig BuildRequires: note
  that they was already being pulled with pkgconfig(glib-2.0) and
  used, once they live in the same devel package.
- Drop pkgconfig(udev) BuildRequires: no longer needed.
- Replace libgudev-1_0-devel and pkgconfig(systemd) BuildRequires
  by gudev-1.0 and libsystemd, respectively.
- Add LGPL-2.0+ to the preamble License tag once the preamble
  License tag is used for the source RPM and binary RPM packages.
- Correct some subpackages LGPL-2.1+ License tags to LGPL-2.0+ as
  pointed by the COPYING and source files.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
</package>
<package pkgid="f16c899480142b5d6cc56d1fafb06110c8bebf033927ebfb21e82e02bd2e1842" name="libudisks2-0_bcache" arch="aarch64">
  <version epoch="0" ver="2.9.2" rel="150400.3.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 2.7.6:
  + Add: UdisksUtabEntry and read-write lock.
  + Fix escaping mountpoint for the cleanup service.
  + Check for all LUKS devices when looking for
    CryptoBackingDevice.
  + First implementation of udisksutabmonitor.
  + Invoke job_complete in the proper context in order to avoid
    deadlocks.
  + Generate autocleanup functions for interfaces.
  + Update documentation.
- Changes from version 2.7.5:
  + Add:
  - 'no-discard' option to formatting methods.
  - An assertion method for checking an objects interfaces.
  + Fix:
  - Possible NULL pointer dereference in:
    udiskslinuxdrive.c, udiskslinuxmdraidobject.c and
    udisksclient.c
  - Resource leak.
  - size_str memory leaks in UDisksObjectInfo.
  - Copy-paste error in apply_configuration_thread_func from
    udiskslinuxdriveata.c.
  - "Deadcode" and ignore "check return" warnings in udisksctl.c.
  + Resolve mountpoint to the real path.
  + Include exFAT as a possible partition type for ID 0x07.
  + Always try to read configuration from crypttab in
    handle_unlock.
  + Make sure the table_type is consistent in
    handle_create_partition.
  + Wait for device to become initialized before probing it.
  + Use different mode/dmode for shared file systems.
- Changes from version 2.7.4:
  + Add: New function to set label on swap devices.
  + Fix:
  - Uninitalized value in "udisks_linux_loop_update";
  - Loop device automounting in GNOME.
  + Run cryptsetup before returning from non-blocking Format.
  + Use new libblockdev functionality to disable checks during
    init.
  + Do not try to create file watchers for RAIDs without
    redundancy.
  + Try to use libblockdev to get RAID array size.
  + Re-add support the legacy BIOS bootable GPT flag.
- Changes from version 2.7.3:
  + Add:
  - Version info to docstrings of the partition Resize function;
  - New ResolveDevice function;
  - New OpenDevice function;
  - some missing functions to doc/udisks2-sections.txt.in.in.
  + Fix:
  - Wrong GSList pointer declaration in
    "handle_get_block_devices";
  - "supports_owners" flag for UDF;
  - ExFAT partition type;
  - Bash completion for udisksctl;
  - Force unmounting;
  - Building documentation with new gtk-doc.
  + Process partition resize update before return.
  + Wait for cleartext device object to disappear on Lock().
  + Ignore Asus Zendisk virtual CDROM and ZFS member partitions.
  + Set corrent part type/id and GUID for UDF formatted partitions.
  + Use LUKS specific partition ID and GUID.
  + Make iSCSI Login and Logout wait for DBus objects update.
  + Disable cleaning using blivet for now.
  + Start even if a libblockdev plugin fails to load.
- Changes from version 2.7.2:
  + Add:
  - Filesystem Resize, Check and Repair;
  - A new "Partitions" property to "PartitionTable" interface;
  - A function to:
    . "take ownership" of a filesystem;
    . List all block devices.
  - A function to wait for an object to disappear.
  + Fix:
  - Detection of drives created using isohybrid images
    (fdo#1437791);
  - Setting "SetupByUID" property when adding a new loop device;
  - How we create UDF file systems.
  + Wait for:
  - The bcache object to disappear after BcacheDestroy;
  - Zram objects to disappear on DestroyDevices().
  + Resize method for Partition interface.
  + Trigger change uevent on disk after adding partitions to it.
  + Use the assert with multiple tries for Block.Configuration.
  + Do not wait for partitions to appear after LoopSetup.
  + Try harder to ignore WD SmartWare virtual CDs.
- Changes from version 2.7.1:
  + Don't always fail on missing LibStorageMgmt support.
  + Fix:
  - Broken partition authorization code;
  - How UDisksClient filters property changes;
  - The position to wait for a partition to appear at.
  + Don't use serial as unique ID for drive objects.
  + udiskslinuxblockbcache.c: Fix uninitialized variable.
  + udisksiscsiutil.c: Correct strncpy lengths.
  + udiskslinuxiscsisessionobject.c: Correct precondition check.
  + lsm_linux_drive.c: Remove std_lsm_vol_data_free error case.
  + udiskslinuxvolumegroupobject.c: Remove variable shadow lvs_p.
  + udiskssimplejob.c: Allow NULL for message.
  + Re-create sysfs watchers for changed mdraid devices.
  + UDisksClient: Do not try remove changed_blacklist hash table in
    finalize.
  + Query methods for available utility binaries.
  + Clear GError after calling "bd_part_get_part_by_pos".
  + Use "model_serial" as unique ID for drive objects.
  + Add "--yes" arg when resizing filesystem with "lvresize".
  + Do not trigger extra uevents for newly created partitions.
  + Free the partition spec libblockdev gives us.
  + Allow the user to specify the partition type.
- Changes from version 2.7.0:
  + udisksdaemonutil.c: Fix GVariant resource leak.
  + Use libblockdev swap plugin for swapspace.
  + Use libblockdev FS plugin for mounting and unmounting devices.
  + Use libblockdev:
  - For:
    . Partitioning code;
    . Wiping newly created partitions;
    . LUKS operations.
  - To get LUKS UUID for LUKS open;
  - As a library not just the plugins;
  - MDRAID code and wipefs calls in MDRAID code.
  + Use libblockdev-lvm for:
  - LV and VG operations;
  - VolumeGroupCreate() too;
  - When updating VG on Poll() call.
  + Fix:
  - bd_reinit and g_clear_error calls in btrfs, zram and bcache;
  - Docstring of 'CreateSnapshot' method in '.Filesystem.BTRFS';
  - Requires and BuildRequires for libblockdev;
  - API for BcacheCreate function.
  + Add:
  - Libblockdev MDRAID and FS plugins to BuildRequires;
  - 'options' parameter do zRAM 'Refresh' function;
  - A function for running threaded jobs synchronously;
  - A new configure option --enable-available-modules.
  + Remove unused variables in handle_mdraid_create.
  + Create Job objects for partitioning related actions.
  + Change:
  - btrfs module API to be consistent with udisks core;
  - bcache properties do CamelCase;
  - ZRAM 'CreateDevices' function to return newly created;
  - zRAM properties to CamelCase.
  + Bcache, btrfs and zRAM modules: Handle invocations in threads.
  + Do not try to set GError over the top of a previous GError.
  + zRAM: Extract used CompAlgorithm as a single value.
    ZRAMs.
  + Move new partition start if overlaps with extended partition
    metadata.
  + Do not start threaded jobs automatically
  + Require and initialize the libblockdev-lvm plugin
  + Check that blockdev/lvm.h is available if LVM2 support
    requested.
  + Also create thin pools using libblockdev-lvm.
  + Get VGs with bd_lvm_vgs() run in a thread.
  + Update information about PVs, LVs and VGs using
    libblockdev-lvm.
  + Get rid of the udisks-lvm helper program.
  + Use:
  - Info for metadata LV when updating LV which has one;
  - Systemd-defined macros in the spec file template;
  - bd_lvm_vgreduce() instead of running 'vgreduce'.
  + REMOVE-ME: use the CLI-based libblockdev-lvm plugin.
  + Make sure we have the AX_CHECK_ENABLE_DEBUG macro.
  + Also check if libblockdev supports bcache.
  + Require 'udev' not 'systemd-udev'.
- Adopt the use of %make_build and %make_install while dropping
  deprecated use of raw commands, following the best practices.
- Pass disable-static to configure as static libs are enabled by
  default. And enable-bcache, enable-btrfs, enable-lsm,
  enable-lvm2, enable-lvmcache and enable-zram to enable new
  available features.
- Add blkid, blockdev, libsystemd and mount pkgconfig modules, and
  libbd_btrfs-devel, libbd_crypto-devel, libbd_fs-devel,
  libbd_kbd-devel, libbd_loop-devel, libbd_lvm-devel,
  libbd_mdraid-devel, libbd_part-devel, libbd_swap-devel,
  libconfig-devel, libstoragemgmt-devel, lvm2-devel BuildRequires
  as new dependencies.
- Add libblockdev, libbd_crypto, libbd_fs, libbd_loop,
  libbd_mdraid, libbd_part and libbd_swap Requires as new run time
  requirements.
- Add e2fsprogs, xfsprogs, and dosfstools Requires, being the first
  needed by mkfs.ext3, mkfs.ext3 and e2label. The second, by
  mkfs.xfs and xfs_admin. And the third, by mkfs.vfat.
- Add gio-unix-2.0 and gmodule-2.0 pkgconfig BuildRequires: note
  that they was already being pulled with pkgconfig(glib-2.0) and
  used, once they live in the same devel package.
- Drop pkgconfig(udev) BuildRequires: no longer needed.
- Replace libgudev-1_0-devel and pkgconfig(systemd) BuildRequires
  by gudev-1.0 and libsystemd, respectively.
- Add LGPL-2.0+ to the preamble License tag once the preamble
  License tag is used for the source RPM and binary RPM packages.
- Correct some subpackages LGPL-2.1+ License tags to LGPL-2.0+ as
  pointed by the COPYING and source files.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
</package>
<package pkgid="57d32932af7b6a22b18ccbd8a194fa25e643f75f026bc8706f4a6b7f17e85449" name="libudisks2-0_bcache" arch="ppc64le">
  <version epoch="0" ver="2.9.2" rel="150400.3.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 2.7.6:
  + Add: UdisksUtabEntry and read-write lock.
  + Fix escaping mountpoint for the cleanup service.
  + Check for all LUKS devices when looking for
    CryptoBackingDevice.
  + First implementation of udisksutabmonitor.
  + Invoke job_complete in the proper context in order to avoid
    deadlocks.
  + Generate autocleanup functions for interfaces.
  + Update documentation.
- Changes from version 2.7.5:
  + Add:
  - 'no-discard' option to formatting methods.
  - An assertion method for checking an objects interfaces.
  + Fix:
  - Possible NULL pointer dereference in:
    udiskslinuxdrive.c, udiskslinuxmdraidobject.c and
    udisksclient.c
  - Resource leak.
  - size_str memory leaks in UDisksObjectInfo.
  - Copy-paste error in apply_configuration_thread_func from
    udiskslinuxdriveata.c.
  - "Deadcode" and ignore "check return" warnings in udisksctl.c.
  + Resolve mountpoint to the real path.
  + Include exFAT as a possible partition type for ID 0x07.
  + Always try to read configuration from crypttab in
    handle_unlock.
  + Make sure the table_type is consistent in
    handle_create_partition.
  + Wait for device to become initialized before probing it.
  + Use different mode/dmode for shared file systems.
- Changes from version 2.7.4:
  + Add: New function to set label on swap devices.
  + Fix:
  - Uninitalized value in "udisks_linux_loop_update";
  - Loop device automounting in GNOME.
  + Run cryptsetup before returning from non-blocking Format.
  + Use new libblockdev functionality to disable checks during
    init.
  + Do not try to create file watchers for RAIDs without
    redundancy.
  + Try to use libblockdev to get RAID array size.
  + Re-add support the legacy BIOS bootable GPT flag.
- Changes from version 2.7.3:
  + Add:
  - Version info to docstrings of the partition Resize function;
  - New ResolveDevice function;
  - New OpenDevice function;
  - some missing functions to doc/udisks2-sections.txt.in.in.
  + Fix:
  - Wrong GSList pointer declaration in
    "handle_get_block_devices";
  - "supports_owners" flag for UDF;
  - ExFAT partition type;
  - Bash completion for udisksctl;
  - Force unmounting;
  - Building documentation with new gtk-doc.
  + Process partition resize update before return.
  + Wait for cleartext device object to disappear on Lock().
  + Ignore Asus Zendisk virtual CDROM and ZFS member partitions.
  + Set corrent part type/id and GUID for UDF formatted partitions.
  + Use LUKS specific partition ID and GUID.
  + Make iSCSI Login and Logout wait for DBus objects update.
  + Disable cleaning using blivet for now.
  + Start even if a libblockdev plugin fails to load.
- Changes from version 2.7.2:
  + Add:
  - Filesystem Resize, Check and Repair;
  - A new "Partitions" property to "PartitionTable" interface;
  - A function to:
    . "take ownership" of a filesystem;
    . List all block devices.
  - A function to wait for an object to disappear.
  + Fix:
  - Detection of drives created using isohybrid images
    (fdo#1437791);
  - Setting "SetupByUID" property when adding a new loop device;
  - How we create UDF file systems.
  + Wait for:
  - The bcache object to disappear after BcacheDestroy;
  - Zram objects to disappear on DestroyDevices().
  + Resize method for Partition interface.
  + Trigger change uevent on disk after adding partitions to it.
  + Use the assert with multiple tries for Block.Configuration.
  + Do not wait for partitions to appear after LoopSetup.
  + Try harder to ignore WD SmartWare virtual CDs.
- Changes from version 2.7.1:
  + Don't always fail on missing LibStorageMgmt support.
  + Fix:
  - Broken partition authorization code;
  - How UDisksClient filters property changes;
  - The position to wait for a partition to appear at.
  + Don't use serial as unique ID for drive objects.
  + udiskslinuxblockbcache.c: Fix uninitialized variable.
  + udisksiscsiutil.c: Correct strncpy lengths.
  + udiskslinuxiscsisessionobject.c: Correct precondition check.
  + lsm_linux_drive.c: Remove std_lsm_vol_data_free error case.
  + udiskslinuxvolumegroupobject.c: Remove variable shadow lvs_p.
  + udiskssimplejob.c: Allow NULL for message.
  + Re-create sysfs watchers for changed mdraid devices.
  + UDisksClient: Do not try remove changed_blacklist hash table in
    finalize.
  + Query methods for available utility binaries.
  + Clear GError after calling "bd_part_get_part_by_pos".
  + Use "model_serial" as unique ID for drive objects.
  + Add "--yes" arg when resizing filesystem with "lvresize".
  + Do not trigger extra uevents for newly created partitions.
  + Free the partition spec libblockdev gives us.
  + Allow the user to specify the partition type.
- Changes from version 2.7.0:
  + udisksdaemonutil.c: Fix GVariant resource leak.
  + Use libblockdev swap plugin for swapspace.
  + Use libblockdev FS plugin for mounting and unmounting devices.
  + Use libblockdev:
  - For:
    . Partitioning code;
    . Wiping newly created partitions;
    . LUKS operations.
  - To get LUKS UUID for LUKS open;
  - As a library not just the plugins;
  - MDRAID code and wipefs calls in MDRAID code.
  + Use libblockdev-lvm for:
  - LV and VG operations;
  - VolumeGroupCreate() too;
  - When updating VG on Poll() call.
  + Fix:
  - bd_reinit and g_clear_error calls in btrfs, zram and bcache;
  - Docstring of 'CreateSnapshot' method in '.Filesystem.BTRFS';
  - Requires and BuildRequires for libblockdev;
  - API for BcacheCreate function.
  + Add:
  - Libblockdev MDRAID and FS plugins to BuildRequires;
  - 'options' parameter do zRAM 'Refresh' function;
  - A function for running threaded jobs synchronously;
  - A new configure option --enable-available-modules.
  + Remove unused variables in handle_mdraid_create.
  + Create Job objects for partitioning related actions.
  + Change:
  - btrfs module API to be consistent with udisks core;
  - bcache properties do CamelCase;
  - ZRAM 'CreateDevices' function to return newly created;
  - zRAM properties to CamelCase.
  + Bcache, btrfs and zRAM modules: Handle invocations in threads.
  + Do not try to set GError over the top of a previous GError.
  + zRAM: Extract used CompAlgorithm as a single value.
    ZRAMs.
  + Move new partition start if overlaps with extended partition
    metadata.
  + Do not start threaded jobs automatically
  + Require and initialize the libblockdev-lvm plugin
  + Check that blockdev/lvm.h is available if LVM2 support
    requested.
  + Also create thin pools using libblockdev-lvm.
  + Get VGs with bd_lvm_vgs() run in a thread.
  + Update information about PVs, LVs and VGs using
    libblockdev-lvm.
  + Get rid of the udisks-lvm helper program.
  + Use:
  - Info for metadata LV when updating LV which has one;
  - Systemd-defined macros in the spec file template;
  - bd_lvm_vgreduce() instead of running 'vgreduce'.
  + REMOVE-ME: use the CLI-based libblockdev-lvm plugin.
  + Make sure we have the AX_CHECK_ENABLE_DEBUG macro.
  + Also check if libblockdev supports bcache.
  + Require 'udev' not 'systemd-udev'.
- Adopt the use of %make_build and %make_install while dropping
  deprecated use of raw commands, following the best practices.
- Pass disable-static to configure as static libs are enabled by
  default. And enable-bcache, enable-btrfs, enable-lsm,
  enable-lvm2, enable-lvmcache and enable-zram to enable new
  available features.
- Add blkid, blockdev, libsystemd and mount pkgconfig modules, and
  libbd_btrfs-devel, libbd_crypto-devel, libbd_fs-devel,
  libbd_kbd-devel, libbd_loop-devel, libbd_lvm-devel,
  libbd_mdraid-devel, libbd_part-devel, libbd_swap-devel,
  libconfig-devel, libstoragemgmt-devel, lvm2-devel BuildRequires
  as new dependencies.
- Add libblockdev, libbd_crypto, libbd_fs, libbd_loop,
  libbd_mdraid, libbd_part and libbd_swap Requires as new run time
  requirements.
- Add e2fsprogs, xfsprogs, and dosfstools Requires, being the first
  needed by mkfs.ext3, mkfs.ext3 and e2label. The second, by
  mkfs.xfs and xfs_admin. And the third, by mkfs.vfat.
- Add gio-unix-2.0 and gmodule-2.0 pkgconfig BuildRequires: note
  that they was already being pulled with pkgconfig(glib-2.0) and
  used, once they live in the same devel package.
- Drop pkgconfig(udev) BuildRequires: no longer needed.
- Replace libgudev-1_0-devel and pkgconfig(systemd) BuildRequires
  by gudev-1.0 and libsystemd, respectively.
- Add LGPL-2.0+ to the preamble License tag once the preamble
  License tag is used for the source RPM and binary RPM packages.
- Correct some subpackages LGPL-2.1+ License tags to LGPL-2.0+ as
  pointed by the COPYING and source files.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
</package>
<package pkgid="91434e92e645e711428f0a43e04fd7fc643a939db86d556010e11165106ed42f" name="libudisks2-0_bcache" arch="s390x">
  <version epoch="0" ver="2.9.2" rel="150400.3.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 2.7.6:
  + Add: UdisksUtabEntry and read-write lock.
  + Fix escaping mountpoint for the cleanup service.
  + Check for all LUKS devices when looking for
    CryptoBackingDevice.
  + First implementation of udisksutabmonitor.
  + Invoke job_complete in the proper context in order to avoid
    deadlocks.
  + Generate autocleanup functions for interfaces.
  + Update documentation.
- Changes from version 2.7.5:
  + Add:
  - 'no-discard' option to formatting methods.
  - An assertion method for checking an objects interfaces.
  + Fix:
  - Possible NULL pointer dereference in:
    udiskslinuxdrive.c, udiskslinuxmdraidobject.c and
    udisksclient.c
  - Resource leak.
  - size_str memory leaks in UDisksObjectInfo.
  - Copy-paste error in apply_configuration_thread_func from
    udiskslinuxdriveata.c.
  - "Deadcode" and ignore "check return" warnings in udisksctl.c.
  + Resolve mountpoint to the real path.
  + Include exFAT as a possible partition type for ID 0x07.
  + Always try to read configuration from crypttab in
    handle_unlock.
  + Make sure the table_type is consistent in
    handle_create_partition.
  + Wait for device to become initialized before probing it.
  + Use different mode/dmode for shared file systems.
- Changes from version 2.7.4:
  + Add: New function to set label on swap devices.
  + Fix:
  - Uninitalized value in "udisks_linux_loop_update";
  - Loop device automounting in GNOME.
  + Run cryptsetup before returning from non-blocking Format.
  + Use new libblockdev functionality to disable checks during
    init.
  + Do not try to create file watchers for RAIDs without
    redundancy.
  + Try to use libblockdev to get RAID array size.
  + Re-add support the legacy BIOS bootable GPT flag.
- Changes from version 2.7.3:
  + Add:
  - Version info to docstrings of the partition Resize function;
  - New ResolveDevice function;
  - New OpenDevice function;
  - some missing functions to doc/udisks2-sections.txt.in.in.
  + Fix:
  - Wrong GSList pointer declaration in
    "handle_get_block_devices";
  - "supports_owners" flag for UDF;
  - ExFAT partition type;
  - Bash completion for udisksctl;
  - Force unmounting;
  - Building documentation with new gtk-doc.
  + Process partition resize update before return.
  + Wait for cleartext device object to disappear on Lock().
  + Ignore Asus Zendisk virtual CDROM and ZFS member partitions.
  + Set corrent part type/id and GUID for UDF formatted partitions.
  + Use LUKS specific partition ID and GUID.
  + Make iSCSI Login and Logout wait for DBus objects update.
  + Disable cleaning using blivet for now.
  + Start even if a libblockdev plugin fails to load.
- Changes from version 2.7.2:
  + Add:
  - Filesystem Resize, Check and Repair;
  - A new "Partitions" property to "PartitionTable" interface;
  - A function to:
    . "take ownership" of a filesystem;
    . List all block devices.
  - A function to wait for an object to disappear.
  + Fix:
  - Detection of drives created using isohybrid images
    (fdo#1437791);
  - Setting "SetupByUID" property when adding a new loop device;
  - How we create UDF file systems.
  + Wait for:
  - The bcache object to disappear after BcacheDestroy;
  - Zram objects to disappear on DestroyDevices().
  + Resize method for Partition interface.
  + Trigger change uevent on disk after adding partitions to it.
  + Use the assert with multiple tries for Block.Configuration.
  + Do not wait for partitions to appear after LoopSetup.
  + Try harder to ignore WD SmartWare virtual CDs.
- Changes from version 2.7.1:
  + Don't always fail on missing LibStorageMgmt support.
  + Fix:
  - Broken partition authorization code;
  - How UDisksClient filters property changes;
  - The position to wait for a partition to appear at.
  + Don't use serial as unique ID for drive objects.
  + udiskslinuxblockbcache.c: Fix uninitialized variable.
  + udisksiscsiutil.c: Correct strncpy lengths.
  + udiskslinuxiscsisessionobject.c: Correct precondition check.
  + lsm_linux_drive.c: Remove std_lsm_vol_data_free error case.
  + udiskslinuxvolumegroupobject.c: Remove variable shadow lvs_p.
  + udiskssimplejob.c: Allow NULL for message.
  + Re-create sysfs watchers for changed mdraid devices.
  + UDisksClient: Do not try remove changed_blacklist hash table in
    finalize.
  + Query methods for available utility binaries.
  + Clear GError after calling "bd_part_get_part_by_pos".
  + Use "model_serial" as unique ID for drive objects.
  + Add "--yes" arg when resizing filesystem with "lvresize".
  + Do not trigger extra uevents for newly created partitions.
  + Free the partition spec libblockdev gives us.
  + Allow the user to specify the partition type.
- Changes from version 2.7.0:
  + udisksdaemonutil.c: Fix GVariant resource leak.
  + Use libblockdev swap plugin for swapspace.
  + Use libblockdev FS plugin for mounting and unmounting devices.
  + Use libblockdev:
  - For:
    . Partitioning code;
    . Wiping newly created partitions;
    . LUKS operations.
  - To get LUKS UUID for LUKS open;
  - As a library not just the plugins;
  - MDRAID code and wipefs calls in MDRAID code.
  + Use libblockdev-lvm for:
  - LV and VG operations;
  - VolumeGroupCreate() too;
  - When updating VG on Poll() call.
  + Fix:
  - bd_reinit and g_clear_error calls in btrfs, zram and bcache;
  - Docstring of 'CreateSnapshot' method in '.Filesystem.BTRFS';
  - Requires and BuildRequires for libblockdev;
  - API for BcacheCreate function.
  + Add:
  - Libblockdev MDRAID and FS plugins to BuildRequires;
  - 'options' parameter do zRAM 'Refresh' function;
  - A function for running threaded jobs synchronously;
  - A new configure option --enable-available-modules.
  + Remove unused variables in handle_mdraid_create.
  + Create Job objects for partitioning related actions.
  + Change:
  - btrfs module API to be consistent with udisks core;
  - bcache properties do CamelCase;
  - ZRAM 'CreateDevices' function to return newly created;
  - zRAM properties to CamelCase.
  + Bcache, btrfs and zRAM modules: Handle invocations in threads.
  + Do not try to set GError over the top of a previous GError.
  + zRAM: Extract used CompAlgorithm as a single value.
    ZRAMs.
  + Move new partition start if overlaps with extended partition
    metadata.
  + Do not start threaded jobs automatically
  + Require and initialize the libblockdev-lvm plugin
  + Check that blockdev/lvm.h is available if LVM2 support
    requested.
  + Also create thin pools using libblockdev-lvm.
  + Get VGs with bd_lvm_vgs() run in a thread.
  + Update information about PVs, LVs and VGs using
    libblockdev-lvm.
  + Get rid of the udisks-lvm helper program.
  + Use:
  - Info for metadata LV when updating LV which has one;
  - Systemd-defined macros in the spec file template;
  - bd_lvm_vgreduce() instead of running 'vgreduce'.
  + REMOVE-ME: use the CLI-based libblockdev-lvm plugin.
  + Make sure we have the AX_CHECK_ENABLE_DEBUG macro.
  + Also check if libblockdev supports bcache.
  + Require 'udev' not 'systemd-udev'.
- Adopt the use of %make_build and %make_install while dropping
  deprecated use of raw commands, following the best practices.
- Pass disable-static to configure as static libs are enabled by
  default. And enable-bcache, enable-btrfs, enable-lsm,
  enable-lvm2, enable-lvmcache and enable-zram to enable new
  available features.
- Add blkid, blockdev, libsystemd and mount pkgconfig modules, and
  libbd_btrfs-devel, libbd_crypto-devel, libbd_fs-devel,
  libbd_kbd-devel, libbd_loop-devel, libbd_lvm-devel,
  libbd_mdraid-devel, libbd_part-devel, libbd_swap-devel,
  libconfig-devel, libstoragemgmt-devel, lvm2-devel BuildRequires
  as new dependencies.
- Add libblockdev, libbd_crypto, libbd_fs, libbd_loop,
  libbd_mdraid, libbd_part and libbd_swap Requires as new run time
  requirements.
- Add e2fsprogs, xfsprogs, and dosfstools Requires, being the first
  needed by mkfs.ext3, mkfs.ext3 and e2label. The second, by
  mkfs.xfs and xfs_admin. And the third, by mkfs.vfat.
- Add gio-unix-2.0 and gmodule-2.0 pkgconfig BuildRequires: note
  that they was already being pulled with pkgconfig(glib-2.0) and
  used, once they live in the same devel package.
- Drop pkgconfig(udev) BuildRequires: no longer needed.
- Replace libgudev-1_0-devel and pkgconfig(systemd) BuildRequires
  by gudev-1.0 and libsystemd, respectively.
- Add LGPL-2.0+ to the preamble License tag once the preamble
  License tag is used for the source RPM and binary RPM packages.
- Correct some subpackages LGPL-2.1+ License tags to LGPL-2.0+ as
  pointed by the COPYING and source files.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
</package>
<package pkgid="e0c852783cace7d9d2cf7e2a349a8fc12cc0a12b270d9decac7051ea7f6ae741" name="libudisks2-0_bcache" arch="x86_64">
  <version epoch="0" ver="2.9.2" rel="150400.3.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 2.7.6:
  + Add: UdisksUtabEntry and read-write lock.
  + Fix escaping mountpoint for the cleanup service.
  + Check for all LUKS devices when looking for
    CryptoBackingDevice.
  + First implementation of udisksutabmonitor.
  + Invoke job_complete in the proper context in order to avoid
    deadlocks.
  + Generate autocleanup functions for interfaces.
  + Update documentation.
- Changes from version 2.7.5:
  + Add:
  - 'no-discard' option to formatting methods.
  - An assertion method for checking an objects interfaces.
  + Fix:
  - Possible NULL pointer dereference in:
    udiskslinuxdrive.c, udiskslinuxmdraidobject.c and
    udisksclient.c
  - Resource leak.
  - size_str memory leaks in UDisksObjectInfo.
  - Copy-paste error in apply_configuration_thread_func from
    udiskslinuxdriveata.c.
  - "Deadcode" and ignore "check return" warnings in udisksctl.c.
  + Resolve mountpoint to the real path.
  + Include exFAT as a possible partition type for ID 0x07.
  + Always try to read configuration from crypttab in
    handle_unlock.
  + Make sure the table_type is consistent in
    handle_create_partition.
  + Wait for device to become initialized before probing it.
  + Use different mode/dmode for shared file systems.
- Changes from version 2.7.4:
  + Add: New function to set label on swap devices.
  + Fix:
  - Uninitalized value in "udisks_linux_loop_update";
  - Loop device automounting in GNOME.
  + Run cryptsetup before returning from non-blocking Format.
  + Use new libblockdev functionality to disable checks during
    init.
  + Do not try to create file watchers for RAIDs without
    redundancy.
  + Try to use libblockdev to get RAID array size.
  + Re-add support the legacy BIOS bootable GPT flag.
- Changes from version 2.7.3:
  + Add:
  - Version info to docstrings of the partition Resize function;
  - New ResolveDevice function;
  - New OpenDevice function;
  - some missing functions to doc/udisks2-sections.txt.in.in.
  + Fix:
  - Wrong GSList pointer declaration in
    "handle_get_block_devices";
  - "supports_owners" flag for UDF;
  - ExFAT partition type;
  - Bash completion for udisksctl;
  - Force unmounting;
  - Building documentation with new gtk-doc.
  + Process partition resize update before return.
  + Wait for cleartext device object to disappear on Lock().
  + Ignore Asus Zendisk virtual CDROM and ZFS member partitions.
  + Set corrent part type/id and GUID for UDF formatted partitions.
  + Use LUKS specific partition ID and GUID.
  + Make iSCSI Login and Logout wait for DBus objects update.
  + Disable cleaning using blivet for now.
  + Start even if a libblockdev plugin fails to load.
- Changes from version 2.7.2:
  + Add:
  - Filesystem Resize, Check and Repair;
  - A new "Partitions" property to "PartitionTable" interface;
  - A function to:
    . "take ownership" of a filesystem;
    . List all block devices.
  - A function to wait for an object to disappear.
  + Fix:
  - Detection of drives created using isohybrid images
    (fdo#1437791);
  - Setting "SetupByUID" property when adding a new loop device;
  - How we create UDF file systems.
  + Wait for:
  - The bcache object to disappear after BcacheDestroy;
  - Zram objects to disappear on DestroyDevices().
  + Resize method for Partition interface.
  + Trigger change uevent on disk after adding partitions to it.
  + Use the assert with multiple tries for Block.Configuration.
  + Do not wait for partitions to appear after LoopSetup.
  + Try harder to ignore WD SmartWare virtual CDs.
- Changes from version 2.7.1:
  + Don't always fail on missing LibStorageMgmt support.
  + Fix:
  - Broken partition authorization code;
  - How UDisksClient filters property changes;
  - The position to wait for a partition to appear at.
  + Don't use serial as unique ID for drive objects.
  + udiskslinuxblockbcache.c: Fix uninitialized variable.
  + udisksiscsiutil.c: Correct strncpy lengths.
  + udiskslinuxiscsisessionobject.c: Correct precondition check.
  + lsm_linux_drive.c: Remove std_lsm_vol_data_free error case.
  + udiskslinuxvolumegroupobject.c: Remove variable shadow lvs_p.
  + udiskssimplejob.c: Allow NULL for message.
  + Re-create sysfs watchers for changed mdraid devices.
  + UDisksClient: Do not try remove changed_blacklist hash table in
    finalize.
  + Query methods for available utility binaries.
  + Clear GError after calling "bd_part_get_part_by_pos".
  + Use "model_serial" as unique ID for drive objects.
  + Add "--yes" arg when resizing filesystem with "lvresize".
  + Do not trigger extra uevents for newly created partitions.
  + Free the partition spec libblockdev gives us.
  + Allow the user to specify the partition type.
- Changes from version 2.7.0:
  + udisksdaemonutil.c: Fix GVariant resource leak.
  + Use libblockdev swap plugin for swapspace.
  + Use libblockdev FS plugin for mounting and unmounting devices.
  + Use libblockdev:
  - For:
    . Partitioning code;
    . Wiping newly created partitions;
    . LUKS operations.
  - To get LUKS UUID for LUKS open;
  - As a library not just the plugins;
  - MDRAID code and wipefs calls in MDRAID code.
  + Use libblockdev-lvm for:
  - LV and VG operations;
  - VolumeGroupCreate() too;
  - When updating VG on Poll() call.
  + Fix:
  - bd_reinit and g_clear_error calls in btrfs, zram and bcache;
  - Docstring of 'CreateSnapshot' method in '.Filesystem.BTRFS';
  - Requires and BuildRequires for libblockdev;
  - API for BcacheCreate function.
  + Add:
  - Libblockdev MDRAID and FS plugins to BuildRequires;
  - 'options' parameter do zRAM 'Refresh' function;
  - A function for running threaded jobs synchronously;
  - A new configure option --enable-available-modules.
  + Remove unused variables in handle_mdraid_create.
  + Create Job objects for partitioning related actions.
  + Change:
  - btrfs module API to be consistent with udisks core;
  - bcache properties do CamelCase;
  - ZRAM 'CreateDevices' function to return newly created;
  - zRAM properties to CamelCase.
  + Bcache, btrfs and zRAM modules: Handle invocations in threads.
  + Do not try to set GError over the top of a previous GError.
  + zRAM: Extract used CompAlgorithm as a single value.
    ZRAMs.
  + Move new partition start if overlaps with extended partition
    metadata.
  + Do not start threaded jobs automatically
  + Require and initialize the libblockdev-lvm plugin
  + Check that blockdev/lvm.h is available if LVM2 support
    requested.
  + Also create thin pools using libblockdev-lvm.
  + Get VGs with bd_lvm_vgs() run in a thread.
  + Update information about PVs, LVs and VGs using
    libblockdev-lvm.
  + Get rid of the udisks-lvm helper program.
  + Use:
  - Info for metadata LV when updating LV which has one;
  - Systemd-defined macros in the spec file template;
  - bd_lvm_vgreduce() instead of running 'vgreduce'.
  + REMOVE-ME: use the CLI-based libblockdev-lvm plugin.
  + Make sure we have the AX_CHECK_ENABLE_DEBUG macro.
  + Also check if libblockdev supports bcache.
  + Require 'udev' not 'systemd-udev'.
- Adopt the use of %make_build and %make_install while dropping
  deprecated use of raw commands, following the best practices.
- Pass disable-static to configure as static libs are enabled by
  default. And enable-bcache, enable-btrfs, enable-lsm,
  enable-lvm2, enable-lvmcache and enable-zram to enable new
  available features.
- Add blkid, blockdev, libsystemd and mount pkgconfig modules, and
  libbd_btrfs-devel, libbd_crypto-devel, libbd_fs-devel,
  libbd_kbd-devel, libbd_loop-devel, libbd_lvm-devel,
  libbd_mdraid-devel, libbd_part-devel, libbd_swap-devel,
  libconfig-devel, libstoragemgmt-devel, lvm2-devel BuildRequires
  as new dependencies.
- Add libblockdev, libbd_crypto, libbd_fs, libbd_loop,
  libbd_mdraid, libbd_part and libbd_swap Requires as new run time
  requirements.
- Add e2fsprogs, xfsprogs, and dosfstools Requires, being the first
  needed by mkfs.ext3, mkfs.ext3 and e2label. The second, by
  mkfs.xfs and xfs_admin. And the third, by mkfs.vfat.
- Add gio-unix-2.0 and gmodule-2.0 pkgconfig BuildRequires: note
  that they was already being pulled with pkgconfig(glib-2.0) and
  used, once they live in the same devel package.
- Drop pkgconfig(udev) BuildRequires: no longer needed.
- Replace libgudev-1_0-devel and pkgconfig(systemd) BuildRequires
  by gudev-1.0 and libsystemd, respectively.
- Add LGPL-2.0+ to the preamble License tag once the preamble
  License tag is used for the source RPM and binary RPM packages.
- Correct some subpackages LGPL-2.1+ License tags to LGPL-2.0+ as
  pointed by the COPYING and source files.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
</package>
<package pkgid="3a36057b04a37b48371a48eccaf60bb5578946ec709d58d5379b22c9d8538af5" name="libudisks2-0_btrfs" arch="aarch64">
  <version epoch="0" ver="2.9.2" rel="150400.3.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 2.7.6:
  + Add: UdisksUtabEntry and read-write lock.
  + Fix escaping mountpoint for the cleanup service.
  + Check for all LUKS devices when looking for
    CryptoBackingDevice.
  + First implementation of udisksutabmonitor.
  + Invoke job_complete in the proper context in order to avoid
    deadlocks.
  + Generate autocleanup functions for interfaces.
  + Update documentation.
- Changes from version 2.7.5:
  + Add:
  - 'no-discard' option to formatting methods.
  - An assertion method for checking an objects interfaces.
  + Fix:
  - Possible NULL pointer dereference in:
    udiskslinuxdrive.c, udiskslinuxmdraidobject.c and
    udisksclient.c
  - Resource leak.
  - size_str memory leaks in UDisksObjectInfo.
  - Copy-paste error in apply_configuration_thread_func from
    udiskslinuxdriveata.c.
  - "Deadcode" and ignore "check return" warnings in udisksctl.c.
  + Resolve mountpoint to the real path.
  + Include exFAT as a possible partition type for ID 0x07.
  + Always try to read configuration from crypttab in
    handle_unlock.
  + Make sure the table_type is consistent in
    handle_create_partition.
  + Wait for device to become initialized before probing it.
  + Use different mode/dmode for shared file systems.
- Changes from version 2.7.4:
  + Add: New function to set label on swap devices.
  + Fix:
  - Uninitalized value in "udisks_linux_loop_update";
  - Loop device automounting in GNOME.
  + Run cryptsetup before returning from non-blocking Format.
  + Use new libblockdev functionality to disable checks during
    init.
  + Do not try to create file watchers for RAIDs without
    redundancy.
  + Try to use libblockdev to get RAID array size.
  + Re-add support the legacy BIOS bootable GPT flag.
- Changes from version 2.7.3:
  + Add:
  - Version info to docstrings of the partition Resize function;
  - New ResolveDevice function;
  - New OpenDevice function;
  - some missing functions to doc/udisks2-sections.txt.in.in.
  + Fix:
  - Wrong GSList pointer declaration in
    "handle_get_block_devices";
  - "supports_owners" flag for UDF;
  - ExFAT partition type;
  - Bash completion for udisksctl;
  - Force unmounting;
  - Building documentation with new gtk-doc.
  + Process partition resize update before return.
  + Wait for cleartext device object to disappear on Lock().
  + Ignore Asus Zendisk virtual CDROM and ZFS member partitions.
  + Set corrent part type/id and GUID for UDF formatted partitions.
  + Use LUKS specific partition ID and GUID.
  + Make iSCSI Login and Logout wait for DBus objects update.
  + Disable cleaning using blivet for now.
  + Start even if a libblockdev plugin fails to load.
- Changes from version 2.7.2:
  + Add:
  - Filesystem Resize, Check and Repair;
  - A new "Partitions" property to "PartitionTable" interface;
  - A function to:
    . "take ownership" of a filesystem;
    . List all block devices.
  - A function to wait for an object to disappear.
  + Fix:
  - Detection of drives created using isohybrid images
    (fdo#1437791);
  - Setting "SetupByUID" property when adding a new loop device;
  - How we create UDF file systems.
  + Wait for:
  - The bcache object to disappear after BcacheDestroy;
  - Zram objects to disappear on DestroyDevices().
  + Resize method for Partition interface.
  + Trigger change uevent on disk after adding partitions to it.
  + Use the assert with multiple tries for Block.Configuration.
  + Do not wait for partitions to appear after LoopSetup.
  + Try harder to ignore WD SmartWare virtual CDs.
- Changes from version 2.7.1:
  + Don't always fail on missing LibStorageMgmt support.
  + Fix:
  - Broken partition authorization code;
  - How UDisksClient filters property changes;
  - The position to wait for a partition to appear at.
  + Don't use serial as unique ID for drive objects.
  + udiskslinuxblockbcache.c: Fix uninitialized variable.
  + udisksiscsiutil.c: Correct strncpy lengths.
  + udiskslinuxiscsisessionobject.c: Correct precondition check.
  + lsm_linux_drive.c: Remove std_lsm_vol_data_free error case.
  + udiskslinuxvolumegroupobject.c: Remove variable shadow lvs_p.
  + udiskssimplejob.c: Allow NULL for message.
  + Re-create sysfs watchers for changed mdraid devices.
  + UDisksClient: Do not try remove changed_blacklist hash table in
    finalize.
  + Query methods for available utility binaries.
  + Clear GError after calling "bd_part_get_part_by_pos".
  + Use "model_serial" as unique ID for drive objects.
  + Add "--yes" arg when resizing filesystem with "lvresize".
  + Do not trigger extra uevents for newly created partitions.
  + Free the partition spec libblockdev gives us.
  + Allow the user to specify the partition type.
- Changes from version 2.7.0:
  + udisksdaemonutil.c: Fix GVariant resource leak.
  + Use libblockdev swap plugin for swapspace.
  + Use libblockdev FS plugin for mounting and unmounting devices.
  + Use libblockdev:
  - For:
    . Partitioning code;
    . Wiping newly created partitions;
    . LUKS operations.
  - To get LUKS UUID for LUKS open;
  - As a library not just the plugins;
  - MDRAID code and wipefs calls in MDRAID code.
  + Use libblockdev-lvm for:
  - LV and VG operations;
  - VolumeGroupCreate() too;
  - When updating VG on Poll() call.
  + Fix:
  - bd_reinit and g_clear_error calls in btrfs, zram and bcache;
  - Docstring of 'CreateSnapshot' method in '.Filesystem.BTRFS';
  - Requires and BuildRequires for libblockdev;
  - API for BcacheCreate function.
  + Add:
  - Libblockdev MDRAID and FS plugins to BuildRequires;
  - 'options' parameter do zRAM 'Refresh' function;
  - A function for running threaded jobs synchronously;
  - A new configure option --enable-available-modules.
  + Remove unused variables in handle_mdraid_create.
  + Create Job objects for partitioning related actions.
  + Change:
  - btrfs module API to be consistent with udisks core;
  - bcache properties do CamelCase;
  - ZRAM 'CreateDevices' function to return newly created;
  - zRAM properties to CamelCase.
  + Bcache, btrfs and zRAM modules: Handle invocations in threads.
  + Do not try to set GError over the top of a previous GError.
  + zRAM: Extract used CompAlgorithm as a single value.
    ZRAMs.
  + Move new partition start if overlaps with extended partition
    metadata.
  + Do not start threaded jobs automatically
  + Require and initialize the libblockdev-lvm plugin
  + Check that blockdev/lvm.h is available if LVM2 support
    requested.
  + Also create thin pools using libblockdev-lvm.
  + Get VGs with bd_lvm_vgs() run in a thread.
  + Update information about PVs, LVs and VGs using
    libblockdev-lvm.
  + Get rid of the udisks-lvm helper program.
  + Use:
  - Info for metadata LV when updating LV which has one;
  - Systemd-defined macros in the spec file template;
  - bd_lvm_vgreduce() instead of running 'vgreduce'.
  + REMOVE-ME: use the CLI-based libblockdev-lvm plugin.
  + Make sure we have the AX_CHECK_ENABLE_DEBUG macro.
  + Also check if libblockdev supports bcache.
  + Require 'udev' not 'systemd-udev'.
- Adopt the use of %make_build and %make_install while dropping
  deprecated use of raw commands, following the best practices.
- Pass disable-static to configure as static libs are enabled by
  default. And enable-bcache, enable-btrfs, enable-lsm,
  enable-lvm2, enable-lvmcache and enable-zram to enable new
  available features.
- Add blkid, blockdev, libsystemd and mount pkgconfig modules, and
  libbd_btrfs-devel, libbd_crypto-devel, libbd_fs-devel,
  libbd_kbd-devel, libbd_loop-devel, libbd_lvm-devel,
  libbd_mdraid-devel, libbd_part-devel, libbd_swap-devel,
  libconfig-devel, libstoragemgmt-devel, lvm2-devel BuildRequires
  as new dependencies.
- Add libblockdev, libbd_crypto, libbd_fs, libbd_loop,
  libbd_mdraid, libbd_part and libbd_swap Requires as new run time
  requirements.
- Add e2fsprogs, xfsprogs, and dosfstools Requires, being the first
  needed by mkfs.ext3, mkfs.ext3 and e2label. The second, by
  mkfs.xfs and xfs_admin. And the third, by mkfs.vfat.
- Add gio-unix-2.0 and gmodule-2.0 pkgconfig BuildRequires: note
  that they was already being pulled with pkgconfig(glib-2.0) and
  used, once they live in the same devel package.
- Drop pkgconfig(udev) BuildRequires: no longer needed.
- Replace libgudev-1_0-devel and pkgconfig(systemd) BuildRequires
  by gudev-1.0 and libsystemd, respectively.
- Add LGPL-2.0+ to the preamble License tag once the preamble
  License tag is used for the source RPM and binary RPM packages.
- Correct some subpackages LGPL-2.1+ License tags to LGPL-2.0+ as
  pointed by the COPYING and source files.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
</package>
<package pkgid="f1e2e9fcc6e76c2f83d357c5ed1996850d27c4d9c360e89bf963b2aaba6d2d4c" name="libudisks2-0_btrfs" arch="ppc64le">
  <version epoch="0" ver="2.9.2" rel="150400.3.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 2.7.6:
  + Add: UdisksUtabEntry and read-write lock.
  + Fix escaping mountpoint for the cleanup service.
  + Check for all LUKS devices when looking for
    CryptoBackingDevice.
  + First implementation of udisksutabmonitor.
  + Invoke job_complete in the proper context in order to avoid
    deadlocks.
  + Generate autocleanup functions for interfaces.
  + Update documentation.
- Changes from version 2.7.5:
  + Add:
  - 'no-discard' option to formatting methods.
  - An assertion method for checking an objects interfaces.
  + Fix:
  - Possible NULL pointer dereference in:
    udiskslinuxdrive.c, udiskslinuxmdraidobject.c and
    udisksclient.c
  - Resource leak.
  - size_str memory leaks in UDisksObjectInfo.
  - Copy-paste error in apply_configuration_thread_func from
    udiskslinuxdriveata.c.
  - "Deadcode" and ignore "check return" warnings in udisksctl.c.
  + Resolve mountpoint to the real path.
  + Include exFAT as a possible partition type for ID 0x07.
  + Always try to read configuration from crypttab in
    handle_unlock.
  + Make sure the table_type is consistent in
    handle_create_partition.
  + Wait for device to become initialized before probing it.
  + Use different mode/dmode for shared file systems.
- Changes from version 2.7.4:
  + Add: New function to set label on swap devices.
  + Fix:
  - Uninitalized value in "udisks_linux_loop_update";
  - Loop device automounting in GNOME.
  + Run cryptsetup before returning from non-blocking Format.
  + Use new libblockdev functionality to disable checks during
    init.
  + Do not try to create file watchers for RAIDs without
    redundancy.
  + Try to use libblockdev to get RAID array size.
  + Re-add support the legacy BIOS bootable GPT flag.
- Changes from version 2.7.3:
  + Add:
  - Version info to docstrings of the partition Resize function;
  - New ResolveDevice function;
  - New OpenDevice function;
  - some missing functions to doc/udisks2-sections.txt.in.in.
  + Fix:
  - Wrong GSList pointer declaration in
    "handle_get_block_devices";
  - "supports_owners" flag for UDF;
  - ExFAT partition type;
  - Bash completion for udisksctl;
  - Force unmounting;
  - Building documentation with new gtk-doc.
  + Process partition resize update before return.
  + Wait for cleartext device object to disappear on Lock().
  + Ignore Asus Zendisk virtual CDROM and ZFS member partitions.
  + Set corrent part type/id and GUID for UDF formatted partitions.
  + Use LUKS specific partition ID and GUID.
  + Make iSCSI Login and Logout wait for DBus objects update.
  + Disable cleaning using blivet for now.
  + Start even if a libblockdev plugin fails to load.
- Changes from version 2.7.2:
  + Add:
  - Filesystem Resize, Check and Repair;
  - A new "Partitions" property to "PartitionTable" interface;
  - A function to:
    . "take ownership" of a filesystem;
    . List all block devices.
  - A function to wait for an object to disappear.
  + Fix:
  - Detection of drives created using isohybrid images
    (fdo#1437791);
  - Setting "SetupByUID" property when adding a new loop device;
  - How we create UDF file systems.
  + Wait for:
  - The bcache object to disappear after BcacheDestroy;
  - Zram objects to disappear on DestroyDevices().
  + Resize method for Partition interface.
  + Trigger change uevent on disk after adding partitions to it.
  + Use the assert with multiple tries for Block.Configuration.
  + Do not wait for partitions to appear after LoopSetup.
  + Try harder to ignore WD SmartWare virtual CDs.
- Changes from version 2.7.1:
  + Don't always fail on missing LibStorageMgmt support.
  + Fix:
  - Broken partition authorization code;
  - How UDisksClient filters property changes;
  - The position to wait for a partition to appear at.
  + Don't use serial as unique ID for drive objects.
  + udiskslinuxblockbcache.c: Fix uninitialized variable.
  + udisksiscsiutil.c: Correct strncpy lengths.
  + udiskslinuxiscsisessionobject.c: Correct precondition check.
  + lsm_linux_drive.c: Remove std_lsm_vol_data_free error case.
  + udiskslinuxvolumegroupobject.c: Remove variable shadow lvs_p.
  + udiskssimplejob.c: Allow NULL for message.
  + Re-create sysfs watchers for changed mdraid devices.
  + UDisksClient: Do not try remove changed_blacklist hash table in
    finalize.
  + Query methods for available utility binaries.
  + Clear GError after calling "bd_part_get_part_by_pos".
  + Use "model_serial" as unique ID for drive objects.
  + Add "--yes" arg when resizing filesystem with "lvresize".
  + Do not trigger extra uevents for newly created partitions.
  + Free the partition spec libblockdev gives us.
  + Allow the user to specify the partition type.
- Changes from version 2.7.0:
  + udisksdaemonutil.c: Fix GVariant resource leak.
  + Use libblockdev swap plugin for swapspace.
  + Use libblockdev FS plugin for mounting and unmounting devices.
  + Use libblockdev:
  - For:
    . Partitioning code;
    . Wiping newly created partitions;
    . LUKS operations.
  - To get LUKS UUID for LUKS open;
  - As a library not just the plugins;
  - MDRAID code and wipefs calls in MDRAID code.
  + Use libblockdev-lvm for:
  - LV and VG operations;
  - VolumeGroupCreate() too;
  - When updating VG on Poll() call.
  + Fix:
  - bd_reinit and g_clear_error calls in btrfs, zram and bcache;
  - Docstring of 'CreateSnapshot' method in '.Filesystem.BTRFS';
  - Requires and BuildRequires for libblockdev;
  - API for BcacheCreate function.
  + Add:
  - Libblockdev MDRAID and FS plugins to BuildRequires;
  - 'options' parameter do zRAM 'Refresh' function;
  - A function for running threaded jobs synchronously;
  - A new configure option --enable-available-modules.
  + Remove unused variables in handle_mdraid_create.
  + Create Job objects for partitioning related actions.
  + Change:
  - btrfs module API to be consistent with udisks core;
  - bcache properties do CamelCase;
  - ZRAM 'CreateDevices' function to return newly created;
  - zRAM properties to CamelCase.
  + Bcache, btrfs and zRAM modules: Handle invocations in threads.
  + Do not try to set GError over the top of a previous GError.
  + zRAM: Extract used CompAlgorithm as a single value.
    ZRAMs.
  + Move new partition start if overlaps with extended partition
    metadata.
  + Do not start threaded jobs automatically
  + Require and initialize the libblockdev-lvm plugin
  + Check that blockdev/lvm.h is available if LVM2 support
    requested.
  + Also create thin pools using libblockdev-lvm.
  + Get VGs with bd_lvm_vgs() run in a thread.
  + Update information about PVs, LVs and VGs using
    libblockdev-lvm.
  + Get rid of the udisks-lvm helper program.
  + Use:
  - Info for metadata LV when updating LV which has one;
  - Systemd-defined macros in the spec file template;
  - bd_lvm_vgreduce() instead of running 'vgreduce'.
  + REMOVE-ME: use the CLI-based libblockdev-lvm plugin.
  + Make sure we have the AX_CHECK_ENABLE_DEBUG macro.
  + Also check if libblockdev supports bcache.
  + Require 'udev' not 'systemd-udev'.
- Adopt the use of %make_build and %make_install while dropping
  deprecated use of raw commands, following the best practices.
- Pass disable-static to configure as static libs are enabled by
  default. And enable-bcache, enable-btrfs, enable-lsm,
  enable-lvm2, enable-lvmcache and enable-zram to enable new
  available features.
- Add blkid, blockdev, libsystemd and mount pkgconfig modules, and
  libbd_btrfs-devel, libbd_crypto-devel, libbd_fs-devel,
  libbd_kbd-devel, libbd_loop-devel, libbd_lvm-devel,
  libbd_mdraid-devel, libbd_part-devel, libbd_swap-devel,
  libconfig-devel, libstoragemgmt-devel, lvm2-devel BuildRequires
  as new dependencies.
- Add libblockdev, libbd_crypto, libbd_fs, libbd_loop,
  libbd_mdraid, libbd_part and libbd_swap Requires as new run time
  requirements.
- Add e2fsprogs, xfsprogs, and dosfstools Requires, being the first
  needed by mkfs.ext3, mkfs.ext3 and e2label. The second, by
  mkfs.xfs and xfs_admin. And the third, by mkfs.vfat.
- Add gio-unix-2.0 and gmodule-2.0 pkgconfig BuildRequires: note
  that they was already being pulled with pkgconfig(glib-2.0) and
  used, once they live in the same devel package.
- Drop pkgconfig(udev) BuildRequires: no longer needed.
- Replace libgudev-1_0-devel and pkgconfig(systemd) BuildRequires
  by gudev-1.0 and libsystemd, respectively.
- Add LGPL-2.0+ to the preamble License tag once the preamble
  License tag is used for the source RPM and binary RPM packages.
- Correct some subpackages LGPL-2.1+ License tags to LGPL-2.0+ as
  pointed by the COPYING and source files.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
</package>
<package pkgid="362f555105e0f49f8642c55155f04b4665bd3bc6c81966df4436cfbb5ff9aff7" name="libudisks2-0_btrfs" arch="s390x">
  <version epoch="0" ver="2.9.2" rel="150400.3.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 2.7.6:
  + Add: UdisksUtabEntry and read-write lock.
  + Fix escaping mountpoint for the cleanup service.
  + Check for all LUKS devices when looking for
    CryptoBackingDevice.
  + First implementation of udisksutabmonitor.
  + Invoke job_complete in the proper context in order to avoid
    deadlocks.
  + Generate autocleanup functions for interfaces.
  + Update documentation.
- Changes from version 2.7.5:
  + Add:
  - 'no-discard' option to formatting methods.
  - An assertion method for checking an objects interfaces.
  + Fix:
  - Possible NULL pointer dereference in:
    udiskslinuxdrive.c, udiskslinuxmdraidobject.c and
    udisksclient.c
  - Resource leak.
  - size_str memory leaks in UDisksObjectInfo.
  - Copy-paste error in apply_configuration_thread_func from
    udiskslinuxdriveata.c.
  - "Deadcode" and ignore "check return" warnings in udisksctl.c.
  + Resolve mountpoint to the real path.
  + Include exFAT as a possible partition type for ID 0x07.
  + Always try to read configuration from crypttab in
    handle_unlock.
  + Make sure the table_type is consistent in
    handle_create_partition.
  + Wait for device to become initialized before probing it.
  + Use different mode/dmode for shared file systems.
- Changes from version 2.7.4:
  + Add: New function to set label on swap devices.
  + Fix:
  - Uninitalized value in "udisks_linux_loop_update";
  - Loop device automounting in GNOME.
  + Run cryptsetup before returning from non-blocking Format.
  + Use new libblockdev functionality to disable checks during
    init.
  + Do not try to create file watchers for RAIDs without
    redundancy.
  + Try to use libblockdev to get RAID array size.
  + Re-add support the legacy BIOS bootable GPT flag.
- Changes from version 2.7.3:
  + Add:
  - Version info to docstrings of the partition Resize function;
  - New ResolveDevice function;
  - New OpenDevice function;
  - some missing functions to doc/udisks2-sections.txt.in.in.
  + Fix:
  - Wrong GSList pointer declaration in
    "handle_get_block_devices";
  - "supports_owners" flag for UDF;
  - ExFAT partition type;
  - Bash completion for udisksctl;
  - Force unmounting;
  - Building documentation with new gtk-doc.
  + Process partition resize update before return.
  + Wait for cleartext device object to disappear on Lock().
  + Ignore Asus Zendisk virtual CDROM and ZFS member partitions.
  + Set corrent part type/id and GUID for UDF formatted partitions.
  + Use LUKS specific partition ID and GUID.
  + Make iSCSI Login and Logout wait for DBus objects update.
  + Disable cleaning using blivet for now.
  + Start even if a libblockdev plugin fails to load.
- Changes from version 2.7.2:
  + Add:
  - Filesystem Resize, Check and Repair;
  - A new "Partitions" property to "PartitionTable" interface;
  - A function to:
    . "take ownership" of a filesystem;
    . List all block devices.
  - A function to wait for an object to disappear.
  + Fix:
  - Detection of drives created using isohybrid images
    (fdo#1437791);
  - Setting "SetupByUID" property when adding a new loop device;
  - How we create UDF file systems.
  + Wait for:
  - The bcache object to disappear after BcacheDestroy;
  - Zram objects to disappear on DestroyDevices().
  + Resize method for Partition interface.
  + Trigger change uevent on disk after adding partitions to it.
  + Use the assert with multiple tries for Block.Configuration.
  + Do not wait for partitions to appear after LoopSetup.
  + Try harder to ignore WD SmartWare virtual CDs.
- Changes from version 2.7.1:
  + Don't always fail on missing LibStorageMgmt support.
  + Fix:
  - Broken partition authorization code;
  - How UDisksClient filters property changes;
  - The position to wait for a partition to appear at.
  + Don't use serial as unique ID for drive objects.
  + udiskslinuxblockbcache.c: Fix uninitialized variable.
  + udisksiscsiutil.c: Correct strncpy lengths.
  + udiskslinuxiscsisessionobject.c: Correct precondition check.
  + lsm_linux_drive.c: Remove std_lsm_vol_data_free error case.
  + udiskslinuxvolumegroupobject.c: Remove variable shadow lvs_p.
  + udiskssimplejob.c: Allow NULL for message.
  + Re-create sysfs watchers for changed mdraid devices.
  + UDisksClient: Do not try remove changed_blacklist hash table in
    finalize.
  + Query methods for available utility binaries.
  + Clear GError after calling "bd_part_get_part_by_pos".
  + Use "model_serial" as unique ID for drive objects.
  + Add "--yes" arg when resizing filesystem with "lvresize".
  + Do not trigger extra uevents for newly created partitions.
  + Free the partition spec libblockdev gives us.
  + Allow the user to specify the partition type.
- Changes from version 2.7.0:
  + udisksdaemonutil.c: Fix GVariant resource leak.
  + Use libblockdev swap plugin for swapspace.
  + Use libblockdev FS plugin for mounting and unmounting devices.
  + Use libblockdev:
  - For:
    . Partitioning code;
    . Wiping newly created partitions;
    . LUKS operations.
  - To get LUKS UUID for LUKS open;
  - As a library not just the plugins;
  - MDRAID code and wipefs calls in MDRAID code.
  + Use libblockdev-lvm for:
  - LV and VG operations;
  - VolumeGroupCreate() too;
  - When updating VG on Poll() call.
  + Fix:
  - bd_reinit and g_clear_error calls in btrfs, zram and bcache;
  - Docstring of 'CreateSnapshot' method in '.Filesystem.BTRFS';
  - Requires and BuildRequires for libblockdev;
  - API for BcacheCreate function.
  + Add:
  - Libblockdev MDRAID and FS plugins to BuildRequires;
  - 'options' parameter do zRAM 'Refresh' function;
  - A function for running threaded jobs synchronously;
  - A new configure option --enable-available-modules.
  + Remove unused variables in handle_mdraid_create.
  + Create Job objects for partitioning related actions.
  + Change:
  - btrfs module API to be consistent with udisks core;
  - bcache properties do CamelCase;
  - ZRAM 'CreateDevices' function to return newly created;
  - zRAM properties to CamelCase.
  + Bcache, btrfs and zRAM modules: Handle invocations in threads.
  + Do not try to set GError over the top of a previous GError.
  + zRAM: Extract used CompAlgorithm as a single value.
    ZRAMs.
  + Move new partition start if overlaps with extended partition
    metadata.
  + Do not start threaded jobs automatically
  + Require and initialize the libblockdev-lvm plugin
  + Check that blockdev/lvm.h is available if LVM2 support
    requested.
  + Also create thin pools using libblockdev-lvm.
  + Get VGs with bd_lvm_vgs() run in a thread.
  + Update information about PVs, LVs and VGs using
    libblockdev-lvm.
  + Get rid of the udisks-lvm helper program.
  + Use:
  - Info for metadata LV when updating LV which has one;
  - Systemd-defined macros in the spec file template;
  - bd_lvm_vgreduce() instead of running 'vgreduce'.
  + REMOVE-ME: use the CLI-based libblockdev-lvm plugin.
  + Make sure we have the AX_CHECK_ENABLE_DEBUG macro.
  + Also check if libblockdev supports bcache.
  + Require 'udev' not 'systemd-udev'.
- Adopt the use of %make_build and %make_install while dropping
  deprecated use of raw commands, following the best practices.
- Pass disable-static to configure as static libs are enabled by
  default. And enable-bcache, enable-btrfs, enable-lsm,
  enable-lvm2, enable-lvmcache and enable-zram to enable new
  available features.
- Add blkid, blockdev, libsystemd and mount pkgconfig modules, and
  libbd_btrfs-devel, libbd_crypto-devel, libbd_fs-devel,
  libbd_kbd-devel, libbd_loop-devel, libbd_lvm-devel,
  libbd_mdraid-devel, libbd_part-devel, libbd_swap-devel,
  libconfig-devel, libstoragemgmt-devel, lvm2-devel BuildRequires
  as new dependencies.
- Add libblockdev, libbd_crypto, libbd_fs, libbd_loop,
  libbd_mdraid, libbd_part and libbd_swap Requires as new run time
  requirements.
- Add e2fsprogs, xfsprogs, and dosfstools Requires, being the first
  needed by mkfs.ext3, mkfs.ext3 and e2label. The second, by
  mkfs.xfs and xfs_admin. And the third, by mkfs.vfat.
- Add gio-unix-2.0 and gmodule-2.0 pkgconfig BuildRequires: note
  that they was already being pulled with pkgconfig(glib-2.0) and
  used, once they live in the same devel package.
- Drop pkgconfig(udev) BuildRequires: no longer needed.
- Replace libgudev-1_0-devel and pkgconfig(systemd) BuildRequires
  by gudev-1.0 and libsystemd, respectively.
- Add LGPL-2.0+ to the preamble License tag once the preamble
  License tag is used for the source RPM and binary RPM packages.
- Correct some subpackages LGPL-2.1+ License tags to LGPL-2.0+ as
  pointed by the COPYING and source files.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
</package>
<package pkgid="402b74f7f3824a684057a923e715a023e4a3dbc09f2caaead5c445cf5a0a2711" name="libudisks2-0_btrfs" arch="x86_64">
  <version epoch="0" ver="2.9.2" rel="150400.3.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 2.7.6:
  + Add: UdisksUtabEntry and read-write lock.
  + Fix escaping mountpoint for the cleanup service.
  + Check for all LUKS devices when looking for
    CryptoBackingDevice.
  + First implementation of udisksutabmonitor.
  + Invoke job_complete in the proper context in order to avoid
    deadlocks.
  + Generate autocleanup functions for interfaces.
  + Update documentation.
- Changes from version 2.7.5:
  + Add:
  - 'no-discard' option to formatting methods.
  - An assertion method for checking an objects interfaces.
  + Fix:
  - Possible NULL pointer dereference in:
    udiskslinuxdrive.c, udiskslinuxmdraidobject.c and
    udisksclient.c
  - Resource leak.
  - size_str memory leaks in UDisksObjectInfo.
  - Copy-paste error in apply_configuration_thread_func from
    udiskslinuxdriveata.c.
  - "Deadcode" and ignore "check return" warnings in udisksctl.c.
  + Resolve mountpoint to the real path.
  + Include exFAT as a possible partition type for ID 0x07.
  + Always try to read configuration from crypttab in
    handle_unlock.
  + Make sure the table_type is consistent in
    handle_create_partition.
  + Wait for device to become initialized before probing it.
  + Use different mode/dmode for shared file systems.
- Changes from version 2.7.4:
  + Add: New function to set label on swap devices.
  + Fix:
  - Uninitalized value in "udisks_linux_loop_update";
  - Loop device automounting in GNOME.
  + Run cryptsetup before returning from non-blocking Format.
  + Use new libblockdev functionality to disable checks during
    init.
  + Do not try to create file watchers for RAIDs without
    redundancy.
  + Try to use libblockdev to get RAID array size.
  + Re-add support the legacy BIOS bootable GPT flag.
- Changes from version 2.7.3:
  + Add:
  - Version info to docstrings of the partition Resize function;
  - New ResolveDevice function;
  - New OpenDevice function;
  - some missing functions to doc/udisks2-sections.txt.in.in.
  + Fix:
  - Wrong GSList pointer declaration in
    "handle_get_block_devices";
  - "supports_owners" flag for UDF;
  - ExFAT partition type;
  - Bash completion for udisksctl;
  - Force unmounting;
  - Building documentation with new gtk-doc.
  + Process partition resize update before return.
  + Wait for cleartext device object to disappear on Lock().
  + Ignore Asus Zendisk virtual CDROM and ZFS member partitions.
  + Set corrent part type/id and GUID for UDF formatted partitions.
  + Use LUKS specific partition ID and GUID.
  + Make iSCSI Login and Logout wait for DBus objects update.
  + Disable cleaning using blivet for now.
  + Start even if a libblockdev plugin fails to load.
- Changes from version 2.7.2:
  + Add:
  - Filesystem Resize, Check and Repair;
  - A new "Partitions" property to "PartitionTable" interface;
  - A function to:
    . "take ownership" of a filesystem;
    . List all block devices.
  - A function to wait for an object to disappear.
  + Fix:
  - Detection of drives created using isohybrid images
    (fdo#1437791);
  - Setting "SetupByUID" property when adding a new loop device;
  - How we create UDF file systems.
  + Wait for:
  - The bcache object to disappear after BcacheDestroy;
  - Zram objects to disappear on DestroyDevices().
  + Resize method for Partition interface.
  + Trigger change uevent on disk after adding partitions to it.
  + Use the assert with multiple tries for Block.Configuration.
  + Do not wait for partitions to appear after LoopSetup.
  + Try harder to ignore WD SmartWare virtual CDs.
- Changes from version 2.7.1:
  + Don't always fail on missing LibStorageMgmt support.
  + Fix:
  - Broken partition authorization code;
  - How UDisksClient filters property changes;
  - The position to wait for a partition to appear at.
  + Don't use serial as unique ID for drive objects.
  + udiskslinuxblockbcache.c: Fix uninitialized variable.
  + udisksiscsiutil.c: Correct strncpy lengths.
  + udiskslinuxiscsisessionobject.c: Correct precondition check.
  + lsm_linux_drive.c: Remove std_lsm_vol_data_free error case.
  + udiskslinuxvolumegroupobject.c: Remove variable shadow lvs_p.
  + udiskssimplejob.c: Allow NULL for message.
  + Re-create sysfs watchers for changed mdraid devices.
  + UDisksClient: Do not try remove changed_blacklist hash table in
    finalize.
  + Query methods for available utility binaries.
  + Clear GError after calling "bd_part_get_part_by_pos".
  + Use "model_serial" as unique ID for drive objects.
  + Add "--yes" arg when resizing filesystem with "lvresize".
  + Do not trigger extra uevents for newly created partitions.
  + Free the partition spec libblockdev gives us.
  + Allow the user to specify the partition type.
- Changes from version 2.7.0:
  + udisksdaemonutil.c: Fix GVariant resource leak.
  + Use libblockdev swap plugin for swapspace.
  + Use libblockdev FS plugin for mounting and unmounting devices.
  + Use libblockdev:
  - For:
    . Partitioning code;
    . Wiping newly created partitions;
    . LUKS operations.
  - To get LUKS UUID for LUKS open;
  - As a library not just the plugins;
  - MDRAID code and wipefs calls in MDRAID code.
  + Use libblockdev-lvm for:
  - LV and VG operations;
  - VolumeGroupCreate() too;
  - When updating VG on Poll() call.
  + Fix:
  - bd_reinit and g_clear_error calls in btrfs, zram and bcache;
  - Docstring of 'CreateSnapshot' method in '.Filesystem.BTRFS';
  - Requires and BuildRequires for libblockdev;
  - API for BcacheCreate function.
  + Add:
  - Libblockdev MDRAID and FS plugins to BuildRequires;
  - 'options' parameter do zRAM 'Refresh' function;
  - A function for running threaded jobs synchronously;
  - A new configure option --enable-available-modules.
  + Remove unused variables in handle_mdraid_create.
  + Create Job objects for partitioning related actions.
  + Change:
  - btrfs module API to be consistent with udisks core;
  - bcache properties do CamelCase;
  - ZRAM 'CreateDevices' function to return newly created;
  - zRAM properties to CamelCase.
  + Bcache, btrfs and zRAM modules: Handle invocations in threads.
  + Do not try to set GError over the top of a previous GError.
  + zRAM: Extract used CompAlgorithm as a single value.
    ZRAMs.
  + Move new partition start if overlaps with extended partition
    metadata.
  + Do not start threaded jobs automatically
  + Require and initialize the libblockdev-lvm plugin
  + Check that blockdev/lvm.h is available if LVM2 support
    requested.
  + Also create thin pools using libblockdev-lvm.
  + Get VGs with bd_lvm_vgs() run in a thread.
  + Update information about PVs, LVs and VGs using
    libblockdev-lvm.
  + Get rid of the udisks-lvm helper program.
  + Use:
  - Info for metadata LV when updating LV which has one;
  - Systemd-defined macros in the spec file template;
  - bd_lvm_vgreduce() instead of running 'vgreduce'.
  + REMOVE-ME: use the CLI-based libblockdev-lvm plugin.
  + Make sure we have the AX_CHECK_ENABLE_DEBUG macro.
  + Also check if libblockdev supports bcache.
  + Require 'udev' not 'systemd-udev'.
- Adopt the use of %make_build and %make_install while dropping
  deprecated use of raw commands, following the best practices.
- Pass disable-static to configure as static libs are enabled by
  default. And enable-bcache, enable-btrfs, enable-lsm,
  enable-lvm2, enable-lvmcache and enable-zram to enable new
  available features.
- Add blkid, blockdev, libsystemd and mount pkgconfig modules, and
  libbd_btrfs-devel, libbd_crypto-devel, libbd_fs-devel,
  libbd_kbd-devel, libbd_loop-devel, libbd_lvm-devel,
  libbd_mdraid-devel, libbd_part-devel, libbd_swap-devel,
  libconfig-devel, libstoragemgmt-devel, lvm2-devel BuildRequires
  as new dependencies.
- Add libblockdev, libbd_crypto, libbd_fs, libbd_loop,
  libbd_mdraid, libbd_part and libbd_swap Requires as new run time
  requirements.
- Add e2fsprogs, xfsprogs, and dosfstools Requires, being the first
  needed by mkfs.ext3, mkfs.ext3 and e2label. The second, by
  mkfs.xfs and xfs_admin. And the third, by mkfs.vfat.
- Add gio-unix-2.0 and gmodule-2.0 pkgconfig BuildRequires: note
  that they was already being pulled with pkgconfig(glib-2.0) and
  used, once they live in the same devel package.
- Drop pkgconfig(udev) BuildRequires: no longer needed.
- Replace libgudev-1_0-devel and pkgconfig(systemd) BuildRequires
  by gudev-1.0 and libsystemd, respectively.
- Add LGPL-2.0+ to the preamble License tag once the preamble
  License tag is used for the source RPM and binary RPM packages.
- Correct some subpackages LGPL-2.1+ License tags to LGPL-2.0+ as
  pointed by the COPYING and source files.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
</package>
<package pkgid="d7c0e4cba4452276582b43a907ca466d932873602738d3dfcaf63ffcbc588077" name="libudisks2-0_lsm" arch="aarch64">
  <version epoch="0" ver="2.9.2" rel="150400.3.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 2.7.6:
  + Add: UdisksUtabEntry and read-write lock.
  + Fix escaping mountpoint for the cleanup service.
  + Check for all LUKS devices when looking for
    CryptoBackingDevice.
  + First implementation of udisksutabmonitor.
  + Invoke job_complete in the proper context in order to avoid
    deadlocks.
  + Generate autocleanup functions for interfaces.
  + Update documentation.
- Changes from version 2.7.5:
  + Add:
  - 'no-discard' option to formatting methods.
  - An assertion method for checking an objects interfaces.
  + Fix:
  - Possible NULL pointer dereference in:
    udiskslinuxdrive.c, udiskslinuxmdraidobject.c and
    udisksclient.c
  - Resource leak.
  - size_str memory leaks in UDisksObjectInfo.
  - Copy-paste error in apply_configuration_thread_func from
    udiskslinuxdriveata.c.
  - "Deadcode" and ignore "check return" warnings in udisksctl.c.
  + Resolve mountpoint to the real path.
  + Include exFAT as a possible partition type for ID 0x07.
  + Always try to read configuration from crypttab in
    handle_unlock.
  + Make sure the table_type is consistent in
    handle_create_partition.
  + Wait for device to become initialized before probing it.
  + Use different mode/dmode for shared file systems.
- Changes from version 2.7.4:
  + Add: New function to set label on swap devices.
  + Fix:
  - Uninitalized value in "udisks_linux_loop_update";
  - Loop device automounting in GNOME.
  + Run cryptsetup before returning from non-blocking Format.
  + Use new libblockdev functionality to disable checks during
    init.
  + Do not try to create file watchers for RAIDs without
    redundancy.
  + Try to use libblockdev to get RAID array size.
  + Re-add support the legacy BIOS bootable GPT flag.
- Changes from version 2.7.3:
  + Add:
  - Version info to docstrings of the partition Resize function;
  - New ResolveDevice function;
  - New OpenDevice function;
  - some missing functions to doc/udisks2-sections.txt.in.in.
  + Fix:
  - Wrong GSList pointer declaration in
    "handle_get_block_devices";
  - "supports_owners" flag for UDF;
  - ExFAT partition type;
  - Bash completion for udisksctl;
  - Force unmounting;
  - Building documentation with new gtk-doc.
  + Process partition resize update before return.
  + Wait for cleartext device object to disappear on Lock().
  + Ignore Asus Zendisk virtual CDROM and ZFS member partitions.
  + Set corrent part type/id and GUID for UDF formatted partitions.
  + Use LUKS specific partition ID and GUID.
  + Make iSCSI Login and Logout wait for DBus objects update.
  + Disable cleaning using blivet for now.
  + Start even if a libblockdev plugin fails to load.
- Changes from version 2.7.2:
  + Add:
  - Filesystem Resize, Check and Repair;
  - A new "Partitions" property to "PartitionTable" interface;
  - A function to:
    . "take ownership" of a filesystem;
    . List all block devices.
  - A function to wait for an object to disappear.
  + Fix:
  - Detection of drives created using isohybrid images
    (fdo#1437791);
  - Setting "SetupByUID" property when adding a new loop device;
  - How we create UDF file systems.
  + Wait for:
  - The bcache object to disappear after BcacheDestroy;
  - Zram objects to disappear on DestroyDevices().
  + Resize method for Partition interface.
  + Trigger change uevent on disk after adding partitions to it.
  + Use the assert with multiple tries for Block.Configuration.
  + Do not wait for partitions to appear after LoopSetup.
  + Try harder to ignore WD SmartWare virtual CDs.
- Changes from version 2.7.1:
  + Don't always fail on missing LibStorageMgmt support.
  + Fix:
  - Broken partition authorization code;
  - How UDisksClient filters property changes;
  - The position to wait for a partition to appear at.
  + Don't use serial as unique ID for drive objects.
  + udiskslinuxblockbcache.c: Fix uninitialized variable.
  + udisksiscsiutil.c: Correct strncpy lengths.
  + udiskslinuxiscsisessionobject.c: Correct precondition check.
  + lsm_linux_drive.c: Remove std_lsm_vol_data_free error case.
  + udiskslinuxvolumegroupobject.c: Remove variable shadow lvs_p.
  + udiskssimplejob.c: Allow NULL for message.
  + Re-create sysfs watchers for changed mdraid devices.
  + UDisksClient: Do not try remove changed_blacklist hash table in
    finalize.
  + Query methods for available utility binaries.
  + Clear GError after calling "bd_part_get_part_by_pos".
  + Use "model_serial" as unique ID for drive objects.
  + Add "--yes" arg when resizing filesystem with "lvresize".
  + Do not trigger extra uevents for newly created partitions.
  + Free the partition spec libblockdev gives us.
  + Allow the user to specify the partition type.
- Changes from version 2.7.0:
  + udisksdaemonutil.c: Fix GVariant resource leak.
  + Use libblockdev swap plugin for swapspace.
  + Use libblockdev FS plugin for mounting and unmounting devices.
  + Use libblockdev:
  - For:
    . Partitioning code;
    . Wiping newly created partitions;
    . LUKS operations.
  - To get LUKS UUID for LUKS open;
  - As a library not just the plugins;
  - MDRAID code and wipefs calls in MDRAID code.
  + Use libblockdev-lvm for:
  - LV and VG operations;
  - VolumeGroupCreate() too;
  - When updating VG on Poll() call.
  + Fix:
  - bd_reinit and g_clear_error calls in btrfs, zram and bcache;
  - Docstring of 'CreateSnapshot' method in '.Filesystem.BTRFS';
  - Requires and BuildRequires for libblockdev;
  - API for BcacheCreate function.
  + Add:
  - Libblockdev MDRAID and FS plugins to BuildRequires;
  - 'options' parameter do zRAM 'Refresh' function;
  - A function for running threaded jobs synchronously;
  - A new configure option --enable-available-modules.
  + Remove unused variables in handle_mdraid_create.
  + Create Job objects for partitioning related actions.
  + Change:
  - btrfs module API to be consistent with udisks core;
  - bcache properties do CamelCase;
  - ZRAM 'CreateDevices' function to return newly created;
  - zRAM properties to CamelCase.
  + Bcache, btrfs and zRAM modules: Handle invocations in threads.
  + Do not try to set GError over the top of a previous GError.
  + zRAM: Extract used CompAlgorithm as a single value.
    ZRAMs.
  + Move new partition start if overlaps with extended partition
    metadata.
  + Do not start threaded jobs automatically
  + Require and initialize the libblockdev-lvm plugin
  + Check that blockdev/lvm.h is available if LVM2 support
    requested.
  + Also create thin pools using libblockdev-lvm.
  + Get VGs with bd_lvm_vgs() run in a thread.
  + Update information about PVs, LVs and VGs using
    libblockdev-lvm.
  + Get rid of the udisks-lvm helper program.
  + Use:
  - Info for metadata LV when updating LV which has one;
  - Systemd-defined macros in the spec file template;
  - bd_lvm_vgreduce() instead of running 'vgreduce'.
  + REMOVE-ME: use the CLI-based libblockdev-lvm plugin.
  + Make sure we have the AX_CHECK_ENABLE_DEBUG macro.
  + Also check if libblockdev supports bcache.
  + Require 'udev' not 'systemd-udev'.
- Adopt the use of %make_build and %make_install while dropping
  deprecated use of raw commands, following the best practices.
- Pass disable-static to configure as static libs are enabled by
  default. And enable-bcache, enable-btrfs, enable-lsm,
  enable-lvm2, enable-lvmcache and enable-zram to enable new
  available features.
- Add blkid, blockdev, libsystemd and mount pkgconfig modules, and
  libbd_btrfs-devel, libbd_crypto-devel, libbd_fs-devel,
  libbd_kbd-devel, libbd_loop-devel, libbd_lvm-devel,
  libbd_mdraid-devel, libbd_part-devel, libbd_swap-devel,
  libconfig-devel, libstoragemgmt-devel, lvm2-devel BuildRequires
  as new dependencies.
- Add libblockdev, libbd_crypto, libbd_fs, libbd_loop,
  libbd_mdraid, libbd_part and libbd_swap Requires as new run time
  requirements.
- Add e2fsprogs, xfsprogs, and dosfstools Requires, being the first
  needed by mkfs.ext3, mkfs.ext3 and e2label. The second, by
  mkfs.xfs and xfs_admin. And the third, by mkfs.vfat.
- Add gio-unix-2.0 and gmodule-2.0 pkgconfig BuildRequires: note
  that they was already being pulled with pkgconfig(glib-2.0) and
  used, once they live in the same devel package.
- Drop pkgconfig(udev) BuildRequires: no longer needed.
- Replace libgudev-1_0-devel and pkgconfig(systemd) BuildRequires
  by gudev-1.0 and libsystemd, respectively.
- Add LGPL-2.0+ to the preamble License tag once the preamble
  License tag is used for the source RPM and binary RPM packages.
- Correct some subpackages LGPL-2.1+ License tags to LGPL-2.0+ as
  pointed by the COPYING and source files.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
</package>
<package pkgid="f0e86671ab40ba4719ee812d6e76a7bb2eb98e01901c0a20c77449bf43a21515" name="libudisks2-0_lsm" arch="ppc64le">
  <version epoch="0" ver="2.9.2" rel="150400.3.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 2.7.6:
  + Add: UdisksUtabEntry and read-write lock.
  + Fix escaping mountpoint for the cleanup service.
  + Check for all LUKS devices when looking for
    CryptoBackingDevice.
  + First implementation of udisksutabmonitor.
  + Invoke job_complete in the proper context in order to avoid
    deadlocks.
  + Generate autocleanup functions for interfaces.
  + Update documentation.
- Changes from version 2.7.5:
  + Add:
  - 'no-discard' option to formatting methods.
  - An assertion method for checking an objects interfaces.
  + Fix:
  - Possible NULL pointer dereference in:
    udiskslinuxdrive.c, udiskslinuxmdraidobject.c and
    udisksclient.c
  - Resource leak.
  - size_str memory leaks in UDisksObjectInfo.
  - Copy-paste error in apply_configuration_thread_func from
    udiskslinuxdriveata.c.
  - "Deadcode" and ignore "check return" warnings in udisksctl.c.
  + Resolve mountpoint to the real path.
  + Include exFAT as a possible partition type for ID 0x07.
  + Always try to read configuration from crypttab in
    handle_unlock.
  + Make sure the table_type is consistent in
    handle_create_partition.
  + Wait for device to become initialized before probing it.
  + Use different mode/dmode for shared file systems.
- Changes from version 2.7.4:
  + Add: New function to set label on swap devices.
  + Fix:
  - Uninitalized value in "udisks_linux_loop_update";
  - Loop device automounting in GNOME.
  + Run cryptsetup before returning from non-blocking Format.
  + Use new libblockdev functionality to disable checks during
    init.
  + Do not try to create file watchers for RAIDs without
    redundancy.
  + Try to use libblockdev to get RAID array size.
  + Re-add support the legacy BIOS bootable GPT flag.
- Changes from version 2.7.3:
  + Add:
  - Version info to docstrings of the partition Resize function;
  - New ResolveDevice function;
  - New OpenDevice function;
  - some missing functions to doc/udisks2-sections.txt.in.in.
  + Fix:
  - Wrong GSList pointer declaration in
    "handle_get_block_devices";
  - "supports_owners" flag for UDF;
  - ExFAT partition type;
  - Bash completion for udisksctl;
  - Force unmounting;
  - Building documentation with new gtk-doc.
  + Process partition resize update before return.
  + Wait for cleartext device object to disappear on Lock().
  + Ignore Asus Zendisk virtual CDROM and ZFS member partitions.
  + Set corrent part type/id and GUID for UDF formatted partitions.
  + Use LUKS specific partition ID and GUID.
  + Make iSCSI Login and Logout wait for DBus objects update.
  + Disable cleaning using blivet for now.
  + Start even if a libblockdev plugin fails to load.
- Changes from version 2.7.2:
  + Add:
  - Filesystem Resize, Check and Repair;
  - A new "Partitions" property to "PartitionTable" interface;
  - A function to:
    . "take ownership" of a filesystem;
    . List all block devices.
  - A function to wait for an object to disappear.
  + Fix:
  - Detection of drives created using isohybrid images
    (fdo#1437791);
  - Setting "SetupByUID" property when adding a new loop device;
  - How we create UDF file systems.
  + Wait for:
  - The bcache object to disappear after BcacheDestroy;
  - Zram objects to disappear on DestroyDevices().
  + Resize method for Partition interface.
  + Trigger change uevent on disk after adding partitions to it.
  + Use the assert with multiple tries for Block.Configuration.
  + Do not wait for partitions to appear after LoopSetup.
  + Try harder to ignore WD SmartWare virtual CDs.
- Changes from version 2.7.1:
  + Don't always fail on missing LibStorageMgmt support.
  + Fix:
  - Broken partition authorization code;
  - How UDisksClient filters property changes;
  - The position to wait for a partition to appear at.
  + Don't use serial as unique ID for drive objects.
  + udiskslinuxblockbcache.c: Fix uninitialized variable.
  + udisksiscsiutil.c: Correct strncpy lengths.
  + udiskslinuxiscsisessionobject.c: Correct precondition check.
  + lsm_linux_drive.c: Remove std_lsm_vol_data_free error case.
  + udiskslinuxvolumegroupobject.c: Remove variable shadow lvs_p.
  + udiskssimplejob.c: Allow NULL for message.
  + Re-create sysfs watchers for changed mdraid devices.
  + UDisksClient: Do not try remove changed_blacklist hash table in
    finalize.
  + Query methods for available utility binaries.
  + Clear GError after calling "bd_part_get_part_by_pos".
  + Use "model_serial" as unique ID for drive objects.
  + Add "--yes" arg when resizing filesystem with "lvresize".
  + Do not trigger extra uevents for newly created partitions.
  + Free the partition spec libblockdev gives us.
  + Allow the user to specify the partition type.
- Changes from version 2.7.0:
  + udisksdaemonutil.c: Fix GVariant resource leak.
  + Use libblockdev swap plugin for swapspace.
  + Use libblockdev FS plugin for mounting and unmounting devices.
  + Use libblockdev:
  - For:
    . Partitioning code;
    . Wiping newly created partitions;
    . LUKS operations.
  - To get LUKS UUID for LUKS open;
  - As a library not just the plugins;
  - MDRAID code and wipefs calls in MDRAID code.
  + Use libblockdev-lvm for:
  - LV and VG operations;
  - VolumeGroupCreate() too;
  - When updating VG on Poll() call.
  + Fix:
  - bd_reinit and g_clear_error calls in btrfs, zram and bcache;
  - Docstring of 'CreateSnapshot' method in '.Filesystem.BTRFS';
  - Requires and BuildRequires for libblockdev;
  - API for BcacheCreate function.
  + Add:
  - Libblockdev MDRAID and FS plugins to BuildRequires;
  - 'options' parameter do zRAM 'Refresh' function;
  - A function for running threaded jobs synchronously;
  - A new configure option --enable-available-modules.
  + Remove unused variables in handle_mdraid_create.
  + Create Job objects for partitioning related actions.
  + Change:
  - btrfs module API to be consistent with udisks core;
  - bcache properties do CamelCase;
  - ZRAM 'CreateDevices' function to return newly created;
  - zRAM properties to CamelCase.
  + Bcache, btrfs and zRAM modules: Handle invocations in threads.
  + Do not try to set GError over the top of a previous GError.
  + zRAM: Extract used CompAlgorithm as a single value.
    ZRAMs.
  + Move new partition start if overlaps with extended partition
    metadata.
  + Do not start threaded jobs automatically
  + Require and initialize the libblockdev-lvm plugin
  + Check that blockdev/lvm.h is available if LVM2 support
    requested.
  + Also create thin pools using libblockdev-lvm.
  + Get VGs with bd_lvm_vgs() run in a thread.
  + Update information about PVs, LVs and VGs using
    libblockdev-lvm.
  + Get rid of the udisks-lvm helper program.
  + Use:
  - Info for metadata LV when updating LV which has one;
  - Systemd-defined macros in the spec file template;
  - bd_lvm_vgreduce() instead of running 'vgreduce'.
  + REMOVE-ME: use the CLI-based libblockdev-lvm plugin.
  + Make sure we have the AX_CHECK_ENABLE_DEBUG macro.
  + Also check if libblockdev supports bcache.
  + Require 'udev' not 'systemd-udev'.
- Adopt the use of %make_build and %make_install while dropping
  deprecated use of raw commands, following the best practices.
- Pass disable-static to configure as static libs are enabled by
  default. And enable-bcache, enable-btrfs, enable-lsm,
  enable-lvm2, enable-lvmcache and enable-zram to enable new
  available features.
- Add blkid, blockdev, libsystemd and mount pkgconfig modules, and
  libbd_btrfs-devel, libbd_crypto-devel, libbd_fs-devel,
  libbd_kbd-devel, libbd_loop-devel, libbd_lvm-devel,
  libbd_mdraid-devel, libbd_part-devel, libbd_swap-devel,
  libconfig-devel, libstoragemgmt-devel, lvm2-devel BuildRequires
  as new dependencies.
- Add libblockdev, libbd_crypto, libbd_fs, libbd_loop,
  libbd_mdraid, libbd_part and libbd_swap Requires as new run time
  requirements.
- Add e2fsprogs, xfsprogs, and dosfstools Requires, being the first
  needed by mkfs.ext3, mkfs.ext3 and e2label. The second, by
  mkfs.xfs and xfs_admin. And the third, by mkfs.vfat.
- Add gio-unix-2.0 and gmodule-2.0 pkgconfig BuildRequires: note
  that they was already being pulled with pkgconfig(glib-2.0) and
  used, once they live in the same devel package.
- Drop pkgconfig(udev) BuildRequires: no longer needed.
- Replace libgudev-1_0-devel and pkgconfig(systemd) BuildRequires
  by gudev-1.0 and libsystemd, respectively.
- Add LGPL-2.0+ to the preamble License tag once the preamble
  License tag is used for the source RPM and binary RPM packages.
- Correct some subpackages LGPL-2.1+ License tags to LGPL-2.0+ as
  pointed by the COPYING and source files.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
</package>
<package pkgid="1e75cbd1a9caf1f78152e0882ebfb3bdaa8d967e7064b957d5e910f20da37272" name="libudisks2-0_lsm" arch="s390x">
  <version epoch="0" ver="2.9.2" rel="150400.3.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 2.7.6:
  + Add: UdisksUtabEntry and read-write lock.
  + Fix escaping mountpoint for the cleanup service.
  + Check for all LUKS devices when looking for
    CryptoBackingDevice.
  + First implementation of udisksutabmonitor.
  + Invoke job_complete in the proper context in order to avoid
    deadlocks.
  + Generate autocleanup functions for interfaces.
  + Update documentation.
- Changes from version 2.7.5:
  + Add:
  - 'no-discard' option to formatting methods.
  - An assertion method for checking an objects interfaces.
  + Fix:
  - Possible NULL pointer dereference in:
    udiskslinuxdrive.c, udiskslinuxmdraidobject.c and
    udisksclient.c
  - Resource leak.
  - size_str memory leaks in UDisksObjectInfo.
  - Copy-paste error in apply_configuration_thread_func from
    udiskslinuxdriveata.c.
  - "Deadcode" and ignore "check return" warnings in udisksctl.c.
  + Resolve mountpoint to the real path.
  + Include exFAT as a possible partition type for ID 0x07.
  + Always try to read configuration from crypttab in
    handle_unlock.
  + Make sure the table_type is consistent in
    handle_create_partition.
  + Wait for device to become initialized before probing it.
  + Use different mode/dmode for shared file systems.
- Changes from version 2.7.4:
  + Add: New function to set label on swap devices.
  + Fix:
  - Uninitalized value in "udisks_linux_loop_update";
  - Loop device automounting in GNOME.
  + Run cryptsetup before returning from non-blocking Format.
  + Use new libblockdev functionality to disable checks during
    init.
  + Do not try to create file watchers for RAIDs without
    redundancy.
  + Try to use libblockdev to get RAID array size.
  + Re-add support the legacy BIOS bootable GPT flag.
- Changes from version 2.7.3:
  + Add:
  - Version info to docstrings of the partition Resize function;
  - New ResolveDevice function;
  - New OpenDevice function;
  - some missing functions to doc/udisks2-sections.txt.in.in.
  + Fix:
  - Wrong GSList pointer declaration in
    "handle_get_block_devices";
  - "supports_owners" flag for UDF;
  - ExFAT partition type;
  - Bash completion for udisksctl;
  - Force unmounting;
  - Building documentation with new gtk-doc.
  + Process partition resize update before return.
  + Wait for cleartext device object to disappear on Lock().
  + Ignore Asus Zendisk virtual CDROM and ZFS member partitions.
  + Set corrent part type/id and GUID for UDF formatted partitions.
  + Use LUKS specific partition ID and GUID.
  + Make iSCSI Login and Logout wait for DBus objects update.
  + Disable cleaning using blivet for now.
  + Start even if a libblockdev plugin fails to load.
- Changes from version 2.7.2:
  + Add:
  - Filesystem Resize, Check and Repair;
  - A new "Partitions" property to "PartitionTable" interface;
  - A function to:
    . "take ownership" of a filesystem;
    . List all block devices.
  - A function to wait for an object to disappear.
  + Fix:
  - Detection of drives created using isohybrid images
    (fdo#1437791);
  - Setting "SetupByUID" property when adding a new loop device;
  - How we create UDF file systems.
  + Wait for:
  - The bcache object to disappear after BcacheDestroy;
  - Zram objects to disappear on DestroyDevices().
  + Resize method for Partition interface.
  + Trigger change uevent on disk after adding partitions to it.
  + Use the assert with multiple tries for Block.Configuration.
  + Do not wait for partitions to appear after LoopSetup.
  + Try harder to ignore WD SmartWare virtual CDs.
- Changes from version 2.7.1:
  + Don't always fail on missing LibStorageMgmt support.
  + Fix:
  - Broken partition authorization code;
  - How UDisksClient filters property changes;
  - The position to wait for a partition to appear at.
  + Don't use serial as unique ID for drive objects.
  + udiskslinuxblockbcache.c: Fix uninitialized variable.
  + udisksiscsiutil.c: Correct strncpy lengths.
  + udiskslinuxiscsisessionobject.c: Correct precondition check.
  + lsm_linux_drive.c: Remove std_lsm_vol_data_free error case.
  + udiskslinuxvolumegroupobject.c: Remove variable shadow lvs_p.
  + udiskssimplejob.c: Allow NULL for message.
  + Re-create sysfs watchers for changed mdraid devices.
  + UDisksClient: Do not try remove changed_blacklist hash table in
    finalize.
  + Query methods for available utility binaries.
  + Clear GError after calling "bd_part_get_part_by_pos".
  + Use "model_serial" as unique ID for drive objects.
  + Add "--yes" arg when resizing filesystem with "lvresize".
  + Do not trigger extra uevents for newly created partitions.
  + Free the partition spec libblockdev gives us.
  + Allow the user to specify the partition type.
- Changes from version 2.7.0:
  + udisksdaemonutil.c: Fix GVariant resource leak.
  + Use libblockdev swap plugin for swapspace.
  + Use libblockdev FS plugin for mounting and unmounting devices.
  + Use libblockdev:
  - For:
    . Partitioning code;
    . Wiping newly created partitions;
    . LUKS operations.
  - To get LUKS UUID for LUKS open;
  - As a library not just the plugins;
  - MDRAID code and wipefs calls in MDRAID code.
  + Use libblockdev-lvm for:
  - LV and VG operations;
  - VolumeGroupCreate() too;
  - When updating VG on Poll() call.
  + Fix:
  - bd_reinit and g_clear_error calls in btrfs, zram and bcache;
  - Docstring of 'CreateSnapshot' method in '.Filesystem.BTRFS';
  - Requires and BuildRequires for libblockdev;
  - API for BcacheCreate function.
  + Add:
  - Libblockdev MDRAID and FS plugins to BuildRequires;
  - 'options' parameter do zRAM 'Refresh' function;
  - A function for running threaded jobs synchronously;
  - A new configure option --enable-available-modules.
  + Remove unused variables in handle_mdraid_create.
  + Create Job objects for partitioning related actions.
  + Change:
  - btrfs module API to be consistent with udisks core;
  - bcache properties do CamelCase;
  - ZRAM 'CreateDevices' function to return newly created;
  - zRAM properties to CamelCase.
  + Bcache, btrfs and zRAM modules: Handle invocations in threads.
  + Do not try to set GError over the top of a previous GError.
  + zRAM: Extract used CompAlgorithm as a single value.
    ZRAMs.
  + Move new partition start if overlaps with extended partition
    metadata.
  + Do not start threaded jobs automatically
  + Require and initialize the libblockdev-lvm plugin
  + Check that blockdev/lvm.h is available if LVM2 support
    requested.
  + Also create thin pools using libblockdev-lvm.
  + Get VGs with bd_lvm_vgs() run in a thread.
  + Update information about PVs, LVs and VGs using
    libblockdev-lvm.
  + Get rid of the udisks-lvm helper program.
  + Use:
  - Info for metadata LV when updating LV which has one;
  - Systemd-defined macros in the spec file template;
  - bd_lvm_vgreduce() instead of running 'vgreduce'.
  + REMOVE-ME: use the CLI-based libblockdev-lvm plugin.
  + Make sure we have the AX_CHECK_ENABLE_DEBUG macro.
  + Also check if libblockdev supports bcache.
  + Require 'udev' not 'systemd-udev'.
- Adopt the use of %make_build and %make_install while dropping
  deprecated use of raw commands, following the best practices.
- Pass disable-static to configure as static libs are enabled by
  default. And enable-bcache, enable-btrfs, enable-lsm,
  enable-lvm2, enable-lvmcache and enable-zram to enable new
  available features.
- Add blkid, blockdev, libsystemd and mount pkgconfig modules, and
  libbd_btrfs-devel, libbd_crypto-devel, libbd_fs-devel,
  libbd_kbd-devel, libbd_loop-devel, libbd_lvm-devel,
  libbd_mdraid-devel, libbd_part-devel, libbd_swap-devel,
  libconfig-devel, libstoragemgmt-devel, lvm2-devel BuildRequires
  as new dependencies.
- Add libblockdev, libbd_crypto, libbd_fs, libbd_loop,
  libbd_mdraid, libbd_part and libbd_swap Requires as new run time
  requirements.
- Add e2fsprogs, xfsprogs, and dosfstools Requires, being the first
  needed by mkfs.ext3, mkfs.ext3 and e2label. The second, by
  mkfs.xfs and xfs_admin. And the third, by mkfs.vfat.
- Add gio-unix-2.0 and gmodule-2.0 pkgconfig BuildRequires: note
  that they was already being pulled with pkgconfig(glib-2.0) and
  used, once they live in the same devel package.
- Drop pkgconfig(udev) BuildRequires: no longer needed.
- Replace libgudev-1_0-devel and pkgconfig(systemd) BuildRequires
  by gudev-1.0 and libsystemd, respectively.
- Add LGPL-2.0+ to the preamble License tag once the preamble
  License tag is used for the source RPM and binary RPM packages.
- Correct some subpackages LGPL-2.1+ License tags to LGPL-2.0+ as
  pointed by the COPYING and source files.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
</package>
<package pkgid="f0954572548257a08fa79eb1d971835e2cafdddfa46ab72509b109968cfa9ba1" name="libudisks2-0_lsm" arch="x86_64">
  <version epoch="0" ver="2.9.2" rel="150400.3.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 2.7.6:
  + Add: UdisksUtabEntry and read-write lock.
  + Fix escaping mountpoint for the cleanup service.
  + Check for all LUKS devices when looking for
    CryptoBackingDevice.
  + First implementation of udisksutabmonitor.
  + Invoke job_complete in the proper context in order to avoid
    deadlocks.
  + Generate autocleanup functions for interfaces.
  + Update documentation.
- Changes from version 2.7.5:
  + Add:
  - 'no-discard' option to formatting methods.
  - An assertion method for checking an objects interfaces.
  + Fix:
  - Possible NULL pointer dereference in:
    udiskslinuxdrive.c, udiskslinuxmdraidobject.c and
    udisksclient.c
  - Resource leak.
  - size_str memory leaks in UDisksObjectInfo.
  - Copy-paste error in apply_configuration_thread_func from
    udiskslinuxdriveata.c.
  - "Deadcode" and ignore "check return" warnings in udisksctl.c.
  + Resolve mountpoint to the real path.
  + Include exFAT as a possible partition type for ID 0x07.
  + Always try to read configuration from crypttab in
    handle_unlock.
  + Make sure the table_type is consistent in
    handle_create_partition.
  + Wait for device to become initialized before probing it.
  + Use different mode/dmode for shared file systems.
- Changes from version 2.7.4:
  + Add: New function to set label on swap devices.
  + Fix:
  - Uninitalized value in "udisks_linux_loop_update";
  - Loop device automounting in GNOME.
  + Run cryptsetup before returning from non-blocking Format.
  + Use new libblockdev functionality to disable checks during
    init.
  + Do not try to create file watchers for RAIDs without
    redundancy.
  + Try to use libblockdev to get RAID array size.
  + Re-add support the legacy BIOS bootable GPT flag.
- Changes from version 2.7.3:
  + Add:
  - Version info to docstrings of the partition Resize function;
  - New ResolveDevice function;
  - New OpenDevice function;
  - some missing functions to doc/udisks2-sections.txt.in.in.
  + Fix:
  - Wrong GSList pointer declaration in
    "handle_get_block_devices";
  - "supports_owners" flag for UDF;
  - ExFAT partition type;
  - Bash completion for udisksctl;
  - Force unmounting;
  - Building documentation with new gtk-doc.
  + Process partition resize update before return.
  + Wait for cleartext device object to disappear on Lock().
  + Ignore Asus Zendisk virtual CDROM and ZFS member partitions.
  + Set corrent part type/id and GUID for UDF formatted partitions.
  + Use LUKS specific partition ID and GUID.
  + Make iSCSI Login and Logout wait for DBus objects update.
  + Disable cleaning using blivet for now.
  + Start even if a libblockdev plugin fails to load.
- Changes from version 2.7.2:
  + Add:
  - Filesystem Resize, Check and Repair;
  - A new "Partitions" property to "PartitionTable" interface;
  - A function to:
    . "take ownership" of a filesystem;
    . List all block devices.
  - A function to wait for an object to disappear.
  + Fix:
  - Detection of drives created using isohybrid images
    (fdo#1437791);
  - Setting "SetupByUID" property when adding a new loop device;
  - How we create UDF file systems.
  + Wait for:
  - The bcache object to disappear after BcacheDestroy;
  - Zram objects to disappear on DestroyDevices().
  + Resize method for Partition interface.
  + Trigger change uevent on disk after adding partitions to it.
  + Use the assert with multiple tries for Block.Configuration.
  + Do not wait for partitions to appear after LoopSetup.
  + Try harder to ignore WD SmartWare virtual CDs.
- Changes from version 2.7.1:
  + Don't always fail on missing LibStorageMgmt support.
  + Fix:
  - Broken partition authorization code;
  - How UDisksClient filters property changes;
  - The position to wait for a partition to appear at.
  + Don't use serial as unique ID for drive objects.
  + udiskslinuxblockbcache.c: Fix uninitialized variable.
  + udisksiscsiutil.c: Correct strncpy lengths.
  + udiskslinuxiscsisessionobject.c: Correct precondition check.
  + lsm_linux_drive.c: Remove std_lsm_vol_data_free error case.
  + udiskslinuxvolumegroupobject.c: Remove variable shadow lvs_p.
  + udiskssimplejob.c: Allow NULL for message.
  + Re-create sysfs watchers for changed mdraid devices.
  + UDisksClient: Do not try remove changed_blacklist hash table in
    finalize.
  + Query methods for available utility binaries.
  + Clear GError after calling "bd_part_get_part_by_pos".
  + Use "model_serial" as unique ID for drive objects.
  + Add "--yes" arg when resizing filesystem with "lvresize".
  + Do not trigger extra uevents for newly created partitions.
  + Free the partition spec libblockdev gives us.
  + Allow the user to specify the partition type.
- Changes from version 2.7.0:
  + udisksdaemonutil.c: Fix GVariant resource leak.
  + Use libblockdev swap plugin for swapspace.
  + Use libblockdev FS plugin for mounting and unmounting devices.
  + Use libblockdev:
  - For:
    . Partitioning code;
    . Wiping newly created partitions;
    . LUKS operations.
  - To get LUKS UUID for LUKS open;
  - As a library not just the plugins;
  - MDRAID code and wipefs calls in MDRAID code.
  + Use libblockdev-lvm for:
  - LV and VG operations;
  - VolumeGroupCreate() too;
  - When updating VG on Poll() call.
  + Fix:
  - bd_reinit and g_clear_error calls in btrfs, zram and bcache;
  - Docstring of 'CreateSnapshot' method in '.Filesystem.BTRFS';
  - Requires and BuildRequires for libblockdev;
  - API for BcacheCreate function.
  + Add:
  - Libblockdev MDRAID and FS plugins to BuildRequires;
  - 'options' parameter do zRAM 'Refresh' function;
  - A function for running threaded jobs synchronously;
  - A new configure option --enable-available-modules.
  + Remove unused variables in handle_mdraid_create.
  + Create Job objects for partitioning related actions.
  + Change:
  - btrfs module API to be consistent with udisks core;
  - bcache properties do CamelCase;
  - ZRAM 'CreateDevices' function to return newly created;
  - zRAM properties to CamelCase.
  + Bcache, btrfs and zRAM modules: Handle invocations in threads.
  + Do not try to set GError over the top of a previous GError.
  + zRAM: Extract used CompAlgorithm as a single value.
    ZRAMs.
  + Move new partition start if overlaps with extended partition
    metadata.
  + Do not start threaded jobs automatically
  + Require and initialize the libblockdev-lvm plugin
  + Check that blockdev/lvm.h is available if LVM2 support
    requested.
  + Also create thin pools using libblockdev-lvm.
  + Get VGs with bd_lvm_vgs() run in a thread.
  + Update information about PVs, LVs and VGs using
    libblockdev-lvm.
  + Get rid of the udisks-lvm helper program.
  + Use:
  - Info for metadata LV when updating LV which has one;
  - Systemd-defined macros in the spec file template;
  - bd_lvm_vgreduce() instead of running 'vgreduce'.
  + REMOVE-ME: use the CLI-based libblockdev-lvm plugin.
  + Make sure we have the AX_CHECK_ENABLE_DEBUG macro.
  + Also check if libblockdev supports bcache.
  + Require 'udev' not 'systemd-udev'.
- Adopt the use of %make_build and %make_install while dropping
  deprecated use of raw commands, following the best practices.
- Pass disable-static to configure as static libs are enabled by
  default. And enable-bcache, enable-btrfs, enable-lsm,
  enable-lvm2, enable-lvmcache and enable-zram to enable new
  available features.
- Add blkid, blockdev, libsystemd and mount pkgconfig modules, and
  libbd_btrfs-devel, libbd_crypto-devel, libbd_fs-devel,
  libbd_kbd-devel, libbd_loop-devel, libbd_lvm-devel,
  libbd_mdraid-devel, libbd_part-devel, libbd_swap-devel,
  libconfig-devel, libstoragemgmt-devel, lvm2-devel BuildRequires
  as new dependencies.
- Add libblockdev, libbd_crypto, libbd_fs, libbd_loop,
  libbd_mdraid, libbd_part and libbd_swap Requires as new run time
  requirements.
- Add e2fsprogs, xfsprogs, and dosfstools Requires, being the first
  needed by mkfs.ext3, mkfs.ext3 and e2label. The second, by
  mkfs.xfs and xfs_admin. And the third, by mkfs.vfat.
- Add gio-unix-2.0 and gmodule-2.0 pkgconfig BuildRequires: note
  that they was already being pulled with pkgconfig(glib-2.0) and
  used, once they live in the same devel package.
- Drop pkgconfig(udev) BuildRequires: no longer needed.
- Replace libgudev-1_0-devel and pkgconfig(systemd) BuildRequires
  by gudev-1.0 and libsystemd, respectively.
- Add LGPL-2.0+ to the preamble License tag once the preamble
  License tag is used for the source RPM and binary RPM packages.
- Correct some subpackages LGPL-2.1+ License tags to LGPL-2.0+ as
  pointed by the COPYING and source files.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
</package>
<package pkgid="62aaeef6e00f60cb871be67b857f4b0ed5ce3ce16adc86286b55764229b8aed1" name="libudisks2-0_lvm2" arch="aarch64">
  <version epoch="0" ver="2.9.2" rel="150400.3.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 2.7.6:
  + Add: UdisksUtabEntry and read-write lock.
  + Fix escaping mountpoint for the cleanup service.
  + Check for all LUKS devices when looking for
    CryptoBackingDevice.
  + First implementation of udisksutabmonitor.
  + Invoke job_complete in the proper context in order to avoid
    deadlocks.
  + Generate autocleanup functions for interfaces.
  + Update documentation.
- Changes from version 2.7.5:
  + Add:
  - 'no-discard' option to formatting methods.
  - An assertion method for checking an objects interfaces.
  + Fix:
  - Possible NULL pointer dereference in:
    udiskslinuxdrive.c, udiskslinuxmdraidobject.c and
    udisksclient.c
  - Resource leak.
  - size_str memory leaks in UDisksObjectInfo.
  - Copy-paste error in apply_configuration_thread_func from
    udiskslinuxdriveata.c.
  - "Deadcode" and ignore "check return" warnings in udisksctl.c.
  + Resolve mountpoint to the real path.
  + Include exFAT as a possible partition type for ID 0x07.
  + Always try to read configuration from crypttab in
    handle_unlock.
  + Make sure the table_type is consistent in
    handle_create_partition.
  + Wait for device to become initialized before probing it.
  + Use different mode/dmode for shared file systems.
- Changes from version 2.7.4:
  + Add: New function to set label on swap devices.
  + Fix:
  - Uninitalized value in "udisks_linux_loop_update";
  - Loop device automounting in GNOME.
  + Run cryptsetup before returning from non-blocking Format.
  + Use new libblockdev functionality to disable checks during
    init.
  + Do not try to create file watchers for RAIDs without
    redundancy.
  + Try to use libblockdev to get RAID array size.
  + Re-add support the legacy BIOS bootable GPT flag.
- Changes from version 2.7.3:
  + Add:
  - Version info to docstrings of the partition Resize function;
  - New ResolveDevice function;
  - New OpenDevice function;
  - some missing functions to doc/udisks2-sections.txt.in.in.
  + Fix:
  - Wrong GSList pointer declaration in
    "handle_get_block_devices";
  - "supports_owners" flag for UDF;
  - ExFAT partition type;
  - Bash completion for udisksctl;
  - Force unmounting;
  - Building documentation with new gtk-doc.
  + Process partition resize update before return.
  + Wait for cleartext device object to disappear on Lock().
  + Ignore Asus Zendisk virtual CDROM and ZFS member partitions.
  + Set corrent part type/id and GUID for UDF formatted partitions.
  + Use LUKS specific partition ID and GUID.
  + Make iSCSI Login and Logout wait for DBus objects update.
  + Disable cleaning using blivet for now.
  + Start even if a libblockdev plugin fails to load.
- Changes from version 2.7.2:
  + Add:
  - Filesystem Resize, Check and Repair;
  - A new "Partitions" property to "PartitionTable" interface;
  - A function to:
    . "take ownership" of a filesystem;
    . List all block devices.
  - A function to wait for an object to disappear.
  + Fix:
  - Detection of drives created using isohybrid images
    (fdo#1437791);
  - Setting "SetupByUID" property when adding a new loop device;
  - How we create UDF file systems.
  + Wait for:
  - The bcache object to disappear after BcacheDestroy;
  - Zram objects to disappear on DestroyDevices().
  + Resize method for Partition interface.
  + Trigger change uevent on disk after adding partitions to it.
  + Use the assert with multiple tries for Block.Configuration.
  + Do not wait for partitions to appear after LoopSetup.
  + Try harder to ignore WD SmartWare virtual CDs.
- Changes from version 2.7.1:
  + Don't always fail on missing LibStorageMgmt support.
  + Fix:
  - Broken partition authorization code;
  - How UDisksClient filters property changes;
  - The position to wait for a partition to appear at.
  + Don't use serial as unique ID for drive objects.
  + udiskslinuxblockbcache.c: Fix uninitialized variable.
  + udisksiscsiutil.c: Correct strncpy lengths.
  + udiskslinuxiscsisessionobject.c: Correct precondition check.
  + lsm_linux_drive.c: Remove std_lsm_vol_data_free error case.
  + udiskslinuxvolumegroupobject.c: Remove variable shadow lvs_p.
  + udiskssimplejob.c: Allow NULL for message.
  + Re-create sysfs watchers for changed mdraid devices.
  + UDisksClient: Do not try remove changed_blacklist hash table in
    finalize.
  + Query methods for available utility binaries.
  + Clear GError after calling "bd_part_get_part_by_pos".
  + Use "model_serial" as unique ID for drive objects.
  + Add "--yes" arg when resizing filesystem with "lvresize".
  + Do not trigger extra uevents for newly created partitions.
  + Free the partition spec libblockdev gives us.
  + Allow the user to specify the partition type.
- Changes from version 2.7.0:
  + udisksdaemonutil.c: Fix GVariant resource leak.
  + Use libblockdev swap plugin for swapspace.
  + Use libblockdev FS plugin for mounting and unmounting devices.
  + Use libblockdev:
  - For:
    . Partitioning code;
    . Wiping newly created partitions;
    . LUKS operations.
  - To get LUKS UUID for LUKS open;
  - As a library not just the plugins;
  - MDRAID code and wipefs calls in MDRAID code.
  + Use libblockdev-lvm for:
  - LV and VG operations;
  - VolumeGroupCreate() too;
  - When updating VG on Poll() call.
  + Fix:
  - bd_reinit and g_clear_error calls in btrfs, zram and bcache;
  - Docstring of 'CreateSnapshot' method in '.Filesystem.BTRFS';
  - Requires and BuildRequires for libblockdev;
  - API for BcacheCreate function.
  + Add:
  - Libblockdev MDRAID and FS plugins to BuildRequires;
  - 'options' parameter do zRAM 'Refresh' function;
  - A function for running threaded jobs synchronously;
  - A new configure option --enable-available-modules.
  + Remove unused variables in handle_mdraid_create.
  + Create Job objects for partitioning related actions.
  + Change:
  - btrfs module API to be consistent with udisks core;
  - bcache properties do CamelCase;
  - ZRAM 'CreateDevices' function to return newly created;
  - zRAM properties to CamelCase.
  + Bcache, btrfs and zRAM modules: Handle invocations in threads.
  + Do not try to set GError over the top of a previous GError.
  + zRAM: Extract used CompAlgorithm as a single value.
    ZRAMs.
  + Move new partition start if overlaps with extended partition
    metadata.
  + Do not start threaded jobs automatically
  + Require and initialize the libblockdev-lvm plugin
  + Check that blockdev/lvm.h is available if LVM2 support
    requested.
  + Also create thin pools using libblockdev-lvm.
  + Get VGs with bd_lvm_vgs() run in a thread.
  + Update information about PVs, LVs and VGs using
    libblockdev-lvm.
  + Get rid of the udisks-lvm helper program.
  + Use:
  - Info for metadata LV when updating LV which has one;
  - Systemd-defined macros in the spec file template;
  - bd_lvm_vgreduce() instead of running 'vgreduce'.
  + REMOVE-ME: use the CLI-based libblockdev-lvm plugin.
  + Make sure we have the AX_CHECK_ENABLE_DEBUG macro.
  + Also check if libblockdev supports bcache.
  + Require 'udev' not 'systemd-udev'.
- Adopt the use of %make_build and %make_install while dropping
  deprecated use of raw commands, following the best practices.
- Pass disable-static to configure as static libs are enabled by
  default. And enable-bcache, enable-btrfs, enable-lsm,
  enable-lvm2, enable-lvmcache and enable-zram to enable new
  available features.
- Add blkid, blockdev, libsystemd and mount pkgconfig modules, and
  libbd_btrfs-devel, libbd_crypto-devel, libbd_fs-devel,
  libbd_kbd-devel, libbd_loop-devel, libbd_lvm-devel,
  libbd_mdraid-devel, libbd_part-devel, libbd_swap-devel,
  libconfig-devel, libstoragemgmt-devel, lvm2-devel BuildRequires
  as new dependencies.
- Add libblockdev, libbd_crypto, libbd_fs, libbd_loop,
  libbd_mdraid, libbd_part and libbd_swap Requires as new run time
  requirements.
- Add e2fsprogs, xfsprogs, and dosfstools Requires, being the first
  needed by mkfs.ext3, mkfs.ext3 and e2label. The second, by
  mkfs.xfs and xfs_admin. And the third, by mkfs.vfat.
- Add gio-unix-2.0 and gmodule-2.0 pkgconfig BuildRequires: note
  that they was already being pulled with pkgconfig(glib-2.0) and
  used, once they live in the same devel package.
- Drop pkgconfig(udev) BuildRequires: no longer needed.
- Replace libgudev-1_0-devel and pkgconfig(systemd) BuildRequires
  by gudev-1.0 and libsystemd, respectively.
- Add LGPL-2.0+ to the preamble License tag once the preamble
  License tag is used for the source RPM and binary RPM packages.
- Correct some subpackages LGPL-2.1+ License tags to LGPL-2.0+ as
  pointed by the COPYING and source files.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
</package>
<package pkgid="a4ce4900c606a7f2ac10ffb9f7c8f4d0bac98ac5f4f9e3f935e6dc4171497beb" name="libudisks2-0_lvm2" arch="ppc64le">
  <version epoch="0" ver="2.9.2" rel="150400.3.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 2.7.6:
  + Add: UdisksUtabEntry and read-write lock.
  + Fix escaping mountpoint for the cleanup service.
  + Check for all LUKS devices when looking for
    CryptoBackingDevice.
  + First implementation of udisksutabmonitor.
  + Invoke job_complete in the proper context in order to avoid
    deadlocks.
  + Generate autocleanup functions for interfaces.
  + Update documentation.
- Changes from version 2.7.5:
  + Add:
  - 'no-discard' option to formatting methods.
  - An assertion method for checking an objects interfaces.
  + Fix:
  - Possible NULL pointer dereference in:
    udiskslinuxdrive.c, udiskslinuxmdraidobject.c and
    udisksclient.c
  - Resource leak.
  - size_str memory leaks in UDisksObjectInfo.
  - Copy-paste error in apply_configuration_thread_func from
    udiskslinuxdriveata.c.
  - "Deadcode" and ignore "check return" warnings in udisksctl.c.
  + Resolve mountpoint to the real path.
  + Include exFAT as a possible partition type for ID 0x07.
  + Always try to read configuration from crypttab in
    handle_unlock.
  + Make sure the table_type is consistent in
    handle_create_partition.
  + Wait for device to become initialized before probing it.
  + Use different mode/dmode for shared file systems.
- Changes from version 2.7.4:
  + Add: New function to set label on swap devices.
  + Fix:
  - Uninitalized value in "udisks_linux_loop_update";
  - Loop device automounting in GNOME.
  + Run cryptsetup before returning from non-blocking Format.
  + Use new libblockdev functionality to disable checks during
    init.
  + Do not try to create file watchers for RAIDs without
    redundancy.
  + Try to use libblockdev to get RAID array size.
  + Re-add support the legacy BIOS bootable GPT flag.
- Changes from version 2.7.3:
  + Add:
  - Version info to docstrings of the partition Resize function;
  - New ResolveDevice function;
  - New OpenDevice function;
  - some missing functions to doc/udisks2-sections.txt.in.in.
  + Fix:
  - Wrong GSList pointer declaration in
    "handle_get_block_devices";
  - "supports_owners" flag for UDF;
  - ExFAT partition type;
  - Bash completion for udisksctl;
  - Force unmounting;
  - Building documentation with new gtk-doc.
  + Process partition resize update before return.
  + Wait for cleartext device object to disappear on Lock().
  + Ignore Asus Zendisk virtual CDROM and ZFS member partitions.
  + Set corrent part type/id and GUID for UDF formatted partitions.
  + Use LUKS specific partition ID and GUID.
  + Make iSCSI Login and Logout wait for DBus objects update.
  + Disable cleaning using blivet for now.
  + Start even if a libblockdev plugin fails to load.
- Changes from version 2.7.2:
  + Add:
  - Filesystem Resize, Check and Repair;
  - A new "Partitions" property to "PartitionTable" interface;
  - A function to:
    . "take ownership" of a filesystem;
    . List all block devices.
  - A function to wait for an object to disappear.
  + Fix:
  - Detection of drives created using isohybrid images
    (fdo#1437791);
  - Setting "SetupByUID" property when adding a new loop device;
  - How we create UDF file systems.
  + Wait for:
  - The bcache object to disappear after BcacheDestroy;
  - Zram objects to disappear on DestroyDevices().
  + Resize method for Partition interface.
  + Trigger change uevent on disk after adding partitions to it.
  + Use the assert with multiple tries for Block.Configuration.
  + Do not wait for partitions to appear after LoopSetup.
  + Try harder to ignore WD SmartWare virtual CDs.
- Changes from version 2.7.1:
  + Don't always fail on missing LibStorageMgmt support.
  + Fix:
  - Broken partition authorization code;
  - How UDisksClient filters property changes;
  - The position to wait for a partition to appear at.
  + Don't use serial as unique ID for drive objects.
  + udiskslinuxblockbcache.c: Fix uninitialized variable.
  + udisksiscsiutil.c: Correct strncpy lengths.
  + udiskslinuxiscsisessionobject.c: Correct precondition check.
  + lsm_linux_drive.c: Remove std_lsm_vol_data_free error case.
  + udiskslinuxvolumegroupobject.c: Remove variable shadow lvs_p.
  + udiskssimplejob.c: Allow NULL for message.
  + Re-create sysfs watchers for changed mdraid devices.
  + UDisksClient: Do not try remove changed_blacklist hash table in
    finalize.
  + Query methods for available utility binaries.
  + Clear GError after calling "bd_part_get_part_by_pos".
  + Use "model_serial" as unique ID for drive objects.
  + Add "--yes" arg when resizing filesystem with "lvresize".
  + Do not trigger extra uevents for newly created partitions.
  + Free the partition spec libblockdev gives us.
  + Allow the user to specify the partition type.
- Changes from version 2.7.0:
  + udisksdaemonutil.c: Fix GVariant resource leak.
  + Use libblockdev swap plugin for swapspace.
  + Use libblockdev FS plugin for mounting and unmounting devices.
  + Use libblockdev:
  - For:
    . Partitioning code;
    . Wiping newly created partitions;
    . LUKS operations.
  - To get LUKS UUID for LUKS open;
  - As a library not just the plugins;
  - MDRAID code and wipefs calls in MDRAID code.
  + Use libblockdev-lvm for:
  - LV and VG operations;
  - VolumeGroupCreate() too;
  - When updating VG on Poll() call.
  + Fix:
  - bd_reinit and g_clear_error calls in btrfs, zram and bcache;
  - Docstring of 'CreateSnapshot' method in '.Filesystem.BTRFS';
  - Requires and BuildRequires for libblockdev;
  - API for BcacheCreate function.
  + Add:
  - Libblockdev MDRAID and FS plugins to BuildRequires;
  - 'options' parameter do zRAM 'Refresh' function;
  - A function for running threaded jobs synchronously;
  - A new configure option --enable-available-modules.
  + Remove unused variables in handle_mdraid_create.
  + Create Job objects for partitioning related actions.
  + Change:
  - btrfs module API to be consistent with udisks core;
  - bcache properties do CamelCase;
  - ZRAM 'CreateDevices' function to return newly created;
  - zRAM properties to CamelCase.
  + Bcache, btrfs and zRAM modules: Handle invocations in threads.
  + Do not try to set GError over the top of a previous GError.
  + zRAM: Extract used CompAlgorithm as a single value.
    ZRAMs.
  + Move new partition start if overlaps with extended partition
    metadata.
  + Do not start threaded jobs automatically
  + Require and initialize the libblockdev-lvm plugin
  + Check that blockdev/lvm.h is available if LVM2 support
    requested.
  + Also create thin pools using libblockdev-lvm.
  + Get VGs with bd_lvm_vgs() run in a thread.
  + Update information about PVs, LVs and VGs using
    libblockdev-lvm.
  + Get rid of the udisks-lvm helper program.
  + Use:
  - Info for metadata LV when updating LV which has one;
  - Systemd-defined macros in the spec file template;
  - bd_lvm_vgreduce() instead of running 'vgreduce'.
  + REMOVE-ME: use the CLI-based libblockdev-lvm plugin.
  + Make sure we have the AX_CHECK_ENABLE_DEBUG macro.
  + Also check if libblockdev supports bcache.
  + Require 'udev' not 'systemd-udev'.
- Adopt the use of %make_build and %make_install while dropping
  deprecated use of raw commands, following the best practices.
- Pass disable-static to configure as static libs are enabled by
  default. And enable-bcache, enable-btrfs, enable-lsm,
  enable-lvm2, enable-lvmcache and enable-zram to enable new
  available features.
- Add blkid, blockdev, libsystemd and mount pkgconfig modules, and
  libbd_btrfs-devel, libbd_crypto-devel, libbd_fs-devel,
  libbd_kbd-devel, libbd_loop-devel, libbd_lvm-devel,
  libbd_mdraid-devel, libbd_part-devel, libbd_swap-devel,
  libconfig-devel, libstoragemgmt-devel, lvm2-devel BuildRequires
  as new dependencies.
- Add libblockdev, libbd_crypto, libbd_fs, libbd_loop,
  libbd_mdraid, libbd_part and libbd_swap Requires as new run time
  requirements.
- Add e2fsprogs, xfsprogs, and dosfstools Requires, being the first
  needed by mkfs.ext3, mkfs.ext3 and e2label. The second, by
  mkfs.xfs and xfs_admin. And the third, by mkfs.vfat.
- Add gio-unix-2.0 and gmodule-2.0 pkgconfig BuildRequires: note
  that they was already being pulled with pkgconfig(glib-2.0) and
  used, once they live in the same devel package.
- Drop pkgconfig(udev) BuildRequires: no longer needed.
- Replace libgudev-1_0-devel and pkgconfig(systemd) BuildRequires
  by gudev-1.0 and libsystemd, respectively.
- Add LGPL-2.0+ to the preamble License tag once the preamble
  License tag is used for the source RPM and binary RPM packages.
- Correct some subpackages LGPL-2.1+ License tags to LGPL-2.0+ as
  pointed by the COPYING and source files.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
</package>
<package pkgid="111f1676e5761b26d5c366981468609d2c6d98dc0f501366d27b399f5db7268b" name="libudisks2-0_lvm2" arch="s390x">
  <version epoch="0" ver="2.9.2" rel="150400.3.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 2.7.6:
  + Add: UdisksUtabEntry and read-write lock.
  + Fix escaping mountpoint for the cleanup service.
  + Check for all LUKS devices when looking for
    CryptoBackingDevice.
  + First implementation of udisksutabmonitor.
  + Invoke job_complete in the proper context in order to avoid
    deadlocks.
  + Generate autocleanup functions for interfaces.
  + Update documentation.
- Changes from version 2.7.5:
  + Add:
  - 'no-discard' option to formatting methods.
  - An assertion method for checking an objects interfaces.
  + Fix:
  - Possible NULL pointer dereference in:
    udiskslinuxdrive.c, udiskslinuxmdraidobject.c and
    udisksclient.c
  - Resource leak.
  - size_str memory leaks in UDisksObjectInfo.
  - Copy-paste error in apply_configuration_thread_func from
    udiskslinuxdriveata.c.
  - "Deadcode" and ignore "check return" warnings in udisksctl.c.
  + Resolve mountpoint to the real path.
  + Include exFAT as a possible partition type for ID 0x07.
  + Always try to read configuration from crypttab in
    handle_unlock.
  + Make sure the table_type is consistent in
    handle_create_partition.
  + Wait for device to become initialized before probing it.
  + Use different mode/dmode for shared file systems.
- Changes from version 2.7.4:
  + Add: New function to set label on swap devices.
  + Fix:
  - Uninitalized value in "udisks_linux_loop_update";
  - Loop device automounting in GNOME.
  + Run cryptsetup before returning from non-blocking Format.
  + Use new libblockdev functionality to disable checks during
    init.
  + Do not try to create file watchers for RAIDs without
    redundancy.
  + Try to use libblockdev to get RAID array size.
  + Re-add support the legacy BIOS bootable GPT flag.
- Changes from version 2.7.3:
  + Add:
  - Version info to docstrings of the partition Resize function;
  - New ResolveDevice function;
  - New OpenDevice function;
  - some missing functions to doc/udisks2-sections.txt.in.in.
  + Fix:
  - Wrong GSList pointer declaration in
    "handle_get_block_devices";
  - "supports_owners" flag for UDF;
  - ExFAT partition type;
  - Bash completion for udisksctl;
  - Force unmounting;
  - Building documentation with new gtk-doc.
  + Process partition resize update before return.
  + Wait for cleartext device object to disappear on Lock().
  + Ignore Asus Zendisk virtual CDROM and ZFS member partitions.
  + Set corrent part type/id and GUID for UDF formatted partitions.
  + Use LUKS specific partition ID and GUID.
  + Make iSCSI Login and Logout wait for DBus objects update.
  + Disable cleaning using blivet for now.
  + Start even if a libblockdev plugin fails to load.
- Changes from version 2.7.2:
  + Add:
  - Filesystem Resize, Check and Repair;
  - A new "Partitions" property to "PartitionTable" interface;
  - A function to:
    . "take ownership" of a filesystem;
    . List all block devices.
  - A function to wait for an object to disappear.
  + Fix:
  - Detection of drives created using isohybrid images
    (fdo#1437791);
  - Setting "SetupByUID" property when adding a new loop device;
  - How we create UDF file systems.
  + Wait for:
  - The bcache object to disappear after BcacheDestroy;
  - Zram objects to disappear on DestroyDevices().
  + Resize method for Partition interface.
  + Trigger change uevent on disk after adding partitions to it.
  + Use the assert with multiple tries for Block.Configuration.
  + Do not wait for partitions to appear after LoopSetup.
  + Try harder to ignore WD SmartWare virtual CDs.
- Changes from version 2.7.1:
  + Don't always fail on missing LibStorageMgmt support.
  + Fix:
  - Broken partition authorization code;
  - How UDisksClient filters property changes;
  - The position to wait for a partition to appear at.
  + Don't use serial as unique ID for drive objects.
  + udiskslinuxblockbcache.c: Fix uninitialized variable.
  + udisksiscsiutil.c: Correct strncpy lengths.
  + udiskslinuxiscsisessionobject.c: Correct precondition check.
  + lsm_linux_drive.c: Remove std_lsm_vol_data_free error case.
  + udiskslinuxvolumegroupobject.c: Remove variable shadow lvs_p.
  + udiskssimplejob.c: Allow NULL for message.
  + Re-create sysfs watchers for changed mdraid devices.
  + UDisksClient: Do not try remove changed_blacklist hash table in
    finalize.
  + Query methods for available utility binaries.
  + Clear GError after calling "bd_part_get_part_by_pos".
  + Use "model_serial" as unique ID for drive objects.
  + Add "--yes" arg when resizing filesystem with "lvresize".
  + Do not trigger extra uevents for newly created partitions.
  + Free the partition spec libblockdev gives us.
  + Allow the user to specify the partition type.
- Changes from version 2.7.0:
  + udisksdaemonutil.c: Fix GVariant resource leak.
  + Use libblockdev swap plugin for swapspace.
  + Use libblockdev FS plugin for mounting and unmounting devices.
  + Use libblockdev:
  - For:
    . Partitioning code;
    . Wiping newly created partitions;
    . LUKS operations.
  - To get LUKS UUID for LUKS open;
  - As a library not just the plugins;
  - MDRAID code and wipefs calls in MDRAID code.
  + Use libblockdev-lvm for:
  - LV and VG operations;
  - VolumeGroupCreate() too;
  - When updating VG on Poll() call.
  + Fix:
  - bd_reinit and g_clear_error calls in btrfs, zram and bcache;
  - Docstring of 'CreateSnapshot' method in '.Filesystem.BTRFS';
  - Requires and BuildRequires for libblockdev;
  - API for BcacheCreate function.
  + Add:
  - Libblockdev MDRAID and FS plugins to BuildRequires;
  - 'options' parameter do zRAM 'Refresh' function;
  - A function for running threaded jobs synchronously;
  - A new configure option --enable-available-modules.
  + Remove unused variables in handle_mdraid_create.
  + Create Job objects for partitioning related actions.
  + Change:
  - btrfs module API to be consistent with udisks core;
  - bcache properties do CamelCase;
  - ZRAM 'CreateDevices' function to return newly created;
  - zRAM properties to CamelCase.
  + Bcache, btrfs and zRAM modules: Handle invocations in threads.
  + Do not try to set GError over the top of a previous GError.
  + zRAM: Extract used CompAlgorithm as a single value.
    ZRAMs.
  + Move new partition start if overlaps with extended partition
    metadata.
  + Do not start threaded jobs automatically
  + Require and initialize the libblockdev-lvm plugin
  + Check that blockdev/lvm.h is available if LVM2 support
    requested.
  + Also create thin pools using libblockdev-lvm.
  + Get VGs with bd_lvm_vgs() run in a thread.
  + Update information about PVs, LVs and VGs using
    libblockdev-lvm.
  + Get rid of the udisks-lvm helper program.
  + Use:
  - Info for metadata LV when updating LV which has one;
  - Systemd-defined macros in the spec file template;
  - bd_lvm_vgreduce() instead of running 'vgreduce'.
  + REMOVE-ME: use the CLI-based libblockdev-lvm plugin.
  + Make sure we have the AX_CHECK_ENABLE_DEBUG macro.
  + Also check if libblockdev supports bcache.
  + Require 'udev' not 'systemd-udev'.
- Adopt the use of %make_build and %make_install while dropping
  deprecated use of raw commands, following the best practices.
- Pass disable-static to configure as static libs are enabled by
  default. And enable-bcache, enable-btrfs, enable-lsm,
  enable-lvm2, enable-lvmcache and enable-zram to enable new
  available features.
- Add blkid, blockdev, libsystemd and mount pkgconfig modules, and
  libbd_btrfs-devel, libbd_crypto-devel, libbd_fs-devel,
  libbd_kbd-devel, libbd_loop-devel, libbd_lvm-devel,
  libbd_mdraid-devel, libbd_part-devel, libbd_swap-devel,
  libconfig-devel, libstoragemgmt-devel, lvm2-devel BuildRequires
  as new dependencies.
- Add libblockdev, libbd_crypto, libbd_fs, libbd_loop,
  libbd_mdraid, libbd_part and libbd_swap Requires as new run time
  requirements.
- Add e2fsprogs, xfsprogs, and dosfstools Requires, being the first
  needed by mkfs.ext3, mkfs.ext3 and e2label. The second, by
  mkfs.xfs and xfs_admin. And the third, by mkfs.vfat.
- Add gio-unix-2.0 and gmodule-2.0 pkgconfig BuildRequires: note
  that they was already being pulled with pkgconfig(glib-2.0) and
  used, once they live in the same devel package.
- Drop pkgconfig(udev) BuildRequires: no longer needed.
- Replace libgudev-1_0-devel and pkgconfig(systemd) BuildRequires
  by gudev-1.0 and libsystemd, respectively.
- Add LGPL-2.0+ to the preamble License tag once the preamble
  License tag is used for the source RPM and binary RPM packages.
- Correct some subpackages LGPL-2.1+ License tags to LGPL-2.0+ as
  pointed by the COPYING and source files.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
</package>
<package pkgid="f9545fbaac0cb5e5bc5c49e4ff2257feee4ea0a91c73bb53044cd861e82436c8" name="libudisks2-0_lvm2" arch="x86_64">
  <version epoch="0" ver="2.9.2" rel="150400.3.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 2.7.6:
  + Add: UdisksUtabEntry and read-write lock.
  + Fix escaping mountpoint for the cleanup service.
  + Check for all LUKS devices when looking for
    CryptoBackingDevice.
  + First implementation of udisksutabmonitor.
  + Invoke job_complete in the proper context in order to avoid
    deadlocks.
  + Generate autocleanup functions for interfaces.
  + Update documentation.
- Changes from version 2.7.5:
  + Add:
  - 'no-discard' option to formatting methods.
  - An assertion method for checking an objects interfaces.
  + Fix:
  - Possible NULL pointer dereference in:
    udiskslinuxdrive.c, udiskslinuxmdraidobject.c and
    udisksclient.c
  - Resource leak.
  - size_str memory leaks in UDisksObjectInfo.
  - Copy-paste error in apply_configuration_thread_func from
    udiskslinuxdriveata.c.
  - "Deadcode" and ignore "check return" warnings in udisksctl.c.
  + Resolve mountpoint to the real path.
  + Include exFAT as a possible partition type for ID 0x07.
  + Always try to read configuration from crypttab in
    handle_unlock.
  + Make sure the table_type is consistent in
    handle_create_partition.
  + Wait for device to become initialized before probing it.
  + Use different mode/dmode for shared file systems.
- Changes from version 2.7.4:
  + Add: New function to set label on swap devices.
  + Fix:
  - Uninitalized value in "udisks_linux_loop_update";
  - Loop device automounting in GNOME.
  + Run cryptsetup before returning from non-blocking Format.
  + Use new libblockdev functionality to disable checks during
    init.
  + Do not try to create file watchers for RAIDs without
    redundancy.
  + Try to use libblockdev to get RAID array size.
  + Re-add support the legacy BIOS bootable GPT flag.
- Changes from version 2.7.3:
  + Add:
  - Version info to docstrings of the partition Resize function;
  - New ResolveDevice function;
  - New OpenDevice function;
  - some missing functions to doc/udisks2-sections.txt.in.in.
  + Fix:
  - Wrong GSList pointer declaration in
    "handle_get_block_devices";
  - "supports_owners" flag for UDF;
  - ExFAT partition type;
  - Bash completion for udisksctl;
  - Force unmounting;
  - Building documentation with new gtk-doc.
  + Process partition resize update before return.
  + Wait for cleartext device object to disappear on Lock().
  + Ignore Asus Zendisk virtual CDROM and ZFS member partitions.
  + Set corrent part type/id and GUID for UDF formatted partitions.
  + Use LUKS specific partition ID and GUID.
  + Make iSCSI Login and Logout wait for DBus objects update.
  + Disable cleaning using blivet for now.
  + Start even if a libblockdev plugin fails to load.
- Changes from version 2.7.2:
  + Add:
  - Filesystem Resize, Check and Repair;
  - A new "Partitions" property to "PartitionTable" interface;
  - A function to:
    . "take ownership" of a filesystem;
    . List all block devices.
  - A function to wait for an object to disappear.
  + Fix:
  - Detection of drives created using isohybrid images
    (fdo#1437791);
  - Setting "SetupByUID" property when adding a new loop device;
  - How we create UDF file systems.
  + Wait for:
  - The bcache object to disappear after BcacheDestroy;
  - Zram objects to disappear on DestroyDevices().
  + Resize method for Partition interface.
  + Trigger change uevent on disk after adding partitions to it.
  + Use the assert with multiple tries for Block.Configuration.
  + Do not wait for partitions to appear after LoopSetup.
  + Try harder to ignore WD SmartWare virtual CDs.
- Changes from version 2.7.1:
  + Don't always fail on missing LibStorageMgmt support.
  + Fix:
  - Broken partition authorization code;
  - How UDisksClient filters property changes;
  - The position to wait for a partition to appear at.
  + Don't use serial as unique ID for drive objects.
  + udiskslinuxblockbcache.c: Fix uninitialized variable.
  + udisksiscsiutil.c: Correct strncpy lengths.
  + udiskslinuxiscsisessionobject.c: Correct precondition check.
  + lsm_linux_drive.c: Remove std_lsm_vol_data_free error case.
  + udiskslinuxvolumegroupobject.c: Remove variable shadow lvs_p.
  + udiskssimplejob.c: Allow NULL for message.
  + Re-create sysfs watchers for changed mdraid devices.
  + UDisksClient: Do not try remove changed_blacklist hash table in
    finalize.
  + Query methods for available utility binaries.
  + Clear GError after calling "bd_part_get_part_by_pos".
  + Use "model_serial" as unique ID for drive objects.
  + Add "--yes" arg when resizing filesystem with "lvresize".
  + Do not trigger extra uevents for newly created partitions.
  + Free the partition spec libblockdev gives us.
  + Allow the user to specify the partition type.
- Changes from version 2.7.0:
  + udisksdaemonutil.c: Fix GVariant resource leak.
  + Use libblockdev swap plugin for swapspace.
  + Use libblockdev FS plugin for mounting and unmounting devices.
  + Use libblockdev:
  - For:
    . Partitioning code;
    . Wiping newly created partitions;
    . LUKS operations.
  - To get LUKS UUID for LUKS open;
  - As a library not just the plugins;
  - MDRAID code and wipefs calls in MDRAID code.
  + Use libblockdev-lvm for:
  - LV and VG operations;
  - VolumeGroupCreate() too;
  - When updating VG on Poll() call.
  + Fix:
  - bd_reinit and g_clear_error calls in btrfs, zram and bcache;
  - Docstring of 'CreateSnapshot' method in '.Filesystem.BTRFS';
  - Requires and BuildRequires for libblockdev;
  - API for BcacheCreate function.
  + Add:
  - Libblockdev MDRAID and FS plugins to BuildRequires;
  - 'options' parameter do zRAM 'Refresh' function;
  - A function for running threaded jobs synchronously;
  - A new configure option --enable-available-modules.
  + Remove unused variables in handle_mdraid_create.
  + Create Job objects for partitioning related actions.
  + Change:
  - btrfs module API to be consistent with udisks core;
  - bcache properties do CamelCase;
  - ZRAM 'CreateDevices' function to return newly created;
  - zRAM properties to CamelCase.
  + Bcache, btrfs and zRAM modules: Handle invocations in threads.
  + Do not try to set GError over the top of a previous GError.
  + zRAM: Extract used CompAlgorithm as a single value.
    ZRAMs.
  + Move new partition start if overlaps with extended partition
    metadata.
  + Do not start threaded jobs automatically
  + Require and initialize the libblockdev-lvm plugin
  + Check that blockdev/lvm.h is available if LVM2 support
    requested.
  + Also create thin pools using libblockdev-lvm.
  + Get VGs with bd_lvm_vgs() run in a thread.
  + Update information about PVs, LVs and VGs using
    libblockdev-lvm.
  + Get rid of the udisks-lvm helper program.
  + Use:
  - Info for metadata LV when updating LV which has one;
  - Systemd-defined macros in the spec file template;
  - bd_lvm_vgreduce() instead of running 'vgreduce'.
  + REMOVE-ME: use the CLI-based libblockdev-lvm plugin.
  + Make sure we have the AX_CHECK_ENABLE_DEBUG macro.
  + Also check if libblockdev supports bcache.
  + Require 'udev' not 'systemd-udev'.
- Adopt the use of %make_build and %make_install while dropping
  deprecated use of raw commands, following the best practices.
- Pass disable-static to configure as static libs are enabled by
  default. And enable-bcache, enable-btrfs, enable-lsm,
  enable-lvm2, enable-lvmcache and enable-zram to enable new
  available features.
- Add blkid, blockdev, libsystemd and mount pkgconfig modules, and
  libbd_btrfs-devel, libbd_crypto-devel, libbd_fs-devel,
  libbd_kbd-devel, libbd_loop-devel, libbd_lvm-devel,
  libbd_mdraid-devel, libbd_part-devel, libbd_swap-devel,
  libconfig-devel, libstoragemgmt-devel, lvm2-devel BuildRequires
  as new dependencies.
- Add libblockdev, libbd_crypto, libbd_fs, libbd_loop,
  libbd_mdraid, libbd_part and libbd_swap Requires as new run time
  requirements.
- Add e2fsprogs, xfsprogs, and dosfstools Requires, being the first
  needed by mkfs.ext3, mkfs.ext3 and e2label. The second, by
  mkfs.xfs and xfs_admin. And the third, by mkfs.vfat.
- Add gio-unix-2.0 and gmodule-2.0 pkgconfig BuildRequires: note
  that they was already being pulled with pkgconfig(glib-2.0) and
  used, once they live in the same devel package.
- Drop pkgconfig(udev) BuildRequires: no longer needed.
- Replace libgudev-1_0-devel and pkgconfig(systemd) BuildRequires
  by gudev-1.0 and libsystemd, respectively.
- Add LGPL-2.0+ to the preamble License tag once the preamble
  License tag is used for the source RPM and binary RPM packages.
- Correct some subpackages LGPL-2.1+ License tags to LGPL-2.0+ as
  pointed by the COPYING and source files.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
</package>
<package pkgid="df29c9a5f3806a839402cb05522afefd8f7b336d0dc37253d2d7912f4fa09334" name="libudisks2-0_vdo" arch="aarch64">
  <version epoch="0" ver="2.9.2" rel="150400.3.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 2.7.6:
  + Add: UdisksUtabEntry and read-write lock.
  + Fix escaping mountpoint for the cleanup service.
  + Check for all LUKS devices when looking for
    CryptoBackingDevice.
  + First implementation of udisksutabmonitor.
  + Invoke job_complete in the proper context in order to avoid
    deadlocks.
  + Generate autocleanup functions for interfaces.
  + Update documentation.
- Changes from version 2.7.5:
  + Add:
  - 'no-discard' option to formatting methods.
  - An assertion method for checking an objects interfaces.
  + Fix:
  - Possible NULL pointer dereference in:
    udiskslinuxdrive.c, udiskslinuxmdraidobject.c and
    udisksclient.c
  - Resource leak.
  - size_str memory leaks in UDisksObjectInfo.
  - Copy-paste error in apply_configuration_thread_func from
    udiskslinuxdriveata.c.
  - "Deadcode" and ignore "check return" warnings in udisksctl.c.
  + Resolve mountpoint to the real path.
  + Include exFAT as a possible partition type for ID 0x07.
  + Always try to read configuration from crypttab in
    handle_unlock.
  + Make sure the table_type is consistent in
    handle_create_partition.
  + Wait for device to become initialized before probing it.
  + Use different mode/dmode for shared file systems.
- Changes from version 2.7.4:
  + Add: New function to set label on swap devices.
  + Fix:
  - Uninitalized value in "udisks_linux_loop_update";
  - Loop device automounting in GNOME.
  + Run cryptsetup before returning from non-blocking Format.
  + Use new libblockdev functionality to disable checks during
    init.
  + Do not try to create file watchers for RAIDs without
    redundancy.
  + Try to use libblockdev to get RAID array size.
  + Re-add support the legacy BIOS bootable GPT flag.
- Changes from version 2.7.3:
  + Add:
  - Version info to docstrings of the partition Resize function;
  - New ResolveDevice function;
  - New OpenDevice function;
  - some missing functions to doc/udisks2-sections.txt.in.in.
  + Fix:
  - Wrong GSList pointer declaration in
    "handle_get_block_devices";
  - "supports_owners" flag for UDF;
  - ExFAT partition type;
  - Bash completion for udisksctl;
  - Force unmounting;
  - Building documentation with new gtk-doc.
  + Process partition resize update before return.
  + Wait for cleartext device object to disappear on Lock().
  + Ignore Asus Zendisk virtual CDROM and ZFS member partitions.
  + Set corrent part type/id and GUID for UDF formatted partitions.
  + Use LUKS specific partition ID and GUID.
  + Make iSCSI Login and Logout wait for DBus objects update.
  + Disable cleaning using blivet for now.
  + Start even if a libblockdev plugin fails to load.
- Changes from version 2.7.2:
  + Add:
  - Filesystem Resize, Check and Repair;
  - A new "Partitions" property to "PartitionTable" interface;
  - A function to:
    . "take ownership" of a filesystem;
    . List all block devices.
  - A function to wait for an object to disappear.
  + Fix:
  - Detection of drives created using isohybrid images
    (fdo#1437791);
  - Setting "SetupByUID" property when adding a new loop device;
  - How we create UDF file systems.
  + Wait for:
  - The bcache object to disappear after BcacheDestroy;
  - Zram objects to disappear on DestroyDevices().
  + Resize method for Partition interface.
  + Trigger change uevent on disk after adding partitions to it.
  + Use the assert with multiple tries for Block.Configuration.
  + Do not wait for partitions to appear after LoopSetup.
  + Try harder to ignore WD SmartWare virtual CDs.
- Changes from version 2.7.1:
  + Don't always fail on missing LibStorageMgmt support.
  + Fix:
  - Broken partition authorization code;
  - How UDisksClient filters property changes;
  - The position to wait for a partition to appear at.
  + Don't use serial as unique ID for drive objects.
  + udiskslinuxblockbcache.c: Fix uninitialized variable.
  + udisksiscsiutil.c: Correct strncpy lengths.
  + udiskslinuxiscsisessionobject.c: Correct precondition check.
  + lsm_linux_drive.c: Remove std_lsm_vol_data_free error case.
  + udiskslinuxvolumegroupobject.c: Remove variable shadow lvs_p.
  + udiskssimplejob.c: Allow NULL for message.
  + Re-create sysfs watchers for changed mdraid devices.
  + UDisksClient: Do not try remove changed_blacklist hash table in
    finalize.
  + Query methods for available utility binaries.
  + Clear GError after calling "bd_part_get_part_by_pos".
  + Use "model_serial" as unique ID for drive objects.
  + Add "--yes" arg when resizing filesystem with "lvresize".
  + Do not trigger extra uevents for newly created partitions.
  + Free the partition spec libblockdev gives us.
  + Allow the user to specify the partition type.
- Changes from version 2.7.0:
  + udisksdaemonutil.c: Fix GVariant resource leak.
  + Use libblockdev swap plugin for swapspace.
  + Use libblockdev FS plugin for mounting and unmounting devices.
  + Use libblockdev:
  - For:
    . Partitioning code;
    . Wiping newly created partitions;
    . LUKS operations.
  - To get LUKS UUID for LUKS open;
  - As a library not just the plugins;
  - MDRAID code and wipefs calls in MDRAID code.
  + Use libblockdev-lvm for:
  - LV and VG operations;
  - VolumeGroupCreate() too;
  - When updating VG on Poll() call.
  + Fix:
  - bd_reinit and g_clear_error calls in btrfs, zram and bcache;
  - Docstring of 'CreateSnapshot' method in '.Filesystem.BTRFS';
  - Requires and BuildRequires for libblockdev;
  - API for BcacheCreate function.
  + Add:
  - Libblockdev MDRAID and FS plugins to BuildRequires;
  - 'options' parameter do zRAM 'Refresh' function;
  - A function for running threaded jobs synchronously;
  - A new configure option --enable-available-modules.
  + Remove unused variables in handle_mdraid_create.
  + Create Job objects for partitioning related actions.
  + Change:
  - btrfs module API to be consistent with udisks core;
  - bcache properties do CamelCase;
  - ZRAM 'CreateDevices' function to return newly created;
  - zRAM properties to CamelCase.
  + Bcache, btrfs and zRAM modules: Handle invocations in threads.
  + Do not try to set GError over the top of a previous GError.
  + zRAM: Extract used CompAlgorithm as a single value.
    ZRAMs.
  + Move new partition start if overlaps with extended partition
    metadata.
  + Do not start threaded jobs automatically
  + Require and initialize the libblockdev-lvm plugin
  + Check that blockdev/lvm.h is available if LVM2 support
    requested.
  + Also create thin pools using libblockdev-lvm.
  + Get VGs with bd_lvm_vgs() run in a thread.
  + Update information about PVs, LVs and VGs using
    libblockdev-lvm.
  + Get rid of the udisks-lvm helper program.
  + Use:
  - Info for metadata LV when updating LV which has one;
  - Systemd-defined macros in the spec file template;
  - bd_lvm_vgreduce() instead of running 'vgreduce'.
  + REMOVE-ME: use the CLI-based libblockdev-lvm plugin.
  + Make sure we have the AX_CHECK_ENABLE_DEBUG macro.
  + Also check if libblockdev supports bcache.
  + Require 'udev' not 'systemd-udev'.
- Adopt the use of %make_build and %make_install while dropping
  deprecated use of raw commands, following the best practices.
- Pass disable-static to configure as static libs are enabled by
  default. And enable-bcache, enable-btrfs, enable-lsm,
  enable-lvm2, enable-lvmcache and enable-zram to enable new
  available features.
- Add blkid, blockdev, libsystemd and mount pkgconfig modules, and
  libbd_btrfs-devel, libbd_crypto-devel, libbd_fs-devel,
  libbd_kbd-devel, libbd_loop-devel, libbd_lvm-devel,
  libbd_mdraid-devel, libbd_part-devel, libbd_swap-devel,
  libconfig-devel, libstoragemgmt-devel, lvm2-devel BuildRequires
  as new dependencies.
- Add libblockdev, libbd_crypto, libbd_fs, libbd_loop,
  libbd_mdraid, libbd_part and libbd_swap Requires as new run time
  requirements.
- Add e2fsprogs, xfsprogs, and dosfstools Requires, being the first
  needed by mkfs.ext3, mkfs.ext3 and e2label. The second, by
  mkfs.xfs and xfs_admin. And the third, by mkfs.vfat.
- Add gio-unix-2.0 and gmodule-2.0 pkgconfig BuildRequires: note
  that they was already being pulled with pkgconfig(glib-2.0) and
  used, once they live in the same devel package.
- Drop pkgconfig(udev) BuildRequires: no longer needed.
- Replace libgudev-1_0-devel and pkgconfig(systemd) BuildRequires
  by gudev-1.0 and libsystemd, respectively.
- Add LGPL-2.0+ to the preamble License tag once the preamble
  License tag is used for the source RPM and binary RPM packages.
- Correct some subpackages LGPL-2.1+ License tags to LGPL-2.0+ as
  pointed by the COPYING and source files.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
</package>
<package pkgid="3efe37a8d646dd319a69b0075ce4af1d4043d2ee4f1c7650a81ce47b90b80c68" name="libudisks2-0_vdo" arch="ppc64le">
  <version epoch="0" ver="2.9.2" rel="150400.3.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 2.7.6:
  + Add: UdisksUtabEntry and read-write lock.
  + Fix escaping mountpoint for the cleanup service.
  + Check for all LUKS devices when looking for
    CryptoBackingDevice.
  + First implementation of udisksutabmonitor.
  + Invoke job_complete in the proper context in order to avoid
    deadlocks.
  + Generate autocleanup functions for interfaces.
  + Update documentation.
- Changes from version 2.7.5:
  + Add:
  - 'no-discard' option to formatting methods.
  - An assertion method for checking an objects interfaces.
  + Fix:
  - Possible NULL pointer dereference in:
    udiskslinuxdrive.c, udiskslinuxmdraidobject.c and
    udisksclient.c
  - Resource leak.
  - size_str memory leaks in UDisksObjectInfo.
  - Copy-paste error in apply_configuration_thread_func from
    udiskslinuxdriveata.c.
  - "Deadcode" and ignore "check return" warnings in udisksctl.c.
  + Resolve mountpoint to the real path.
  + Include exFAT as a possible partition type for ID 0x07.
  + Always try to read configuration from crypttab in
    handle_unlock.
  + Make sure the table_type is consistent in
    handle_create_partition.
  + Wait for device to become initialized before probing it.
  + Use different mode/dmode for shared file systems.
- Changes from version 2.7.4:
  + Add: New function to set label on swap devices.
  + Fix:
  - Uninitalized value in "udisks_linux_loop_update";
  - Loop device automounting in GNOME.
  + Run cryptsetup before returning from non-blocking Format.
  + Use new libblockdev functionality to disable checks during
    init.
  + Do not try to create file watchers for RAIDs without
    redundancy.
  + Try to use libblockdev to get RAID array size.
  + Re-add support the legacy BIOS bootable GPT flag.
- Changes from version 2.7.3:
  + Add:
  - Version info to docstrings of the partition Resize function;
  - New ResolveDevice function;
  - New OpenDevice function;
  - some missing functions to doc/udisks2-sections.txt.in.in.
  + Fix:
  - Wrong GSList pointer declaration in
    "handle_get_block_devices";
  - "supports_owners" flag for UDF;
  - ExFAT partition type;
  - Bash completion for udisksctl;
  - Force unmounting;
  - Building documentation with new gtk-doc.
  + Process partition resize update before return.
  + Wait for cleartext device object to disappear on Lock().
  + Ignore Asus Zendisk virtual CDROM and ZFS member partitions.
  + Set corrent part type/id and GUID for UDF formatted partitions.
  + Use LUKS specific partition ID and GUID.
  + Make iSCSI Login and Logout wait for DBus objects update.
  + Disable cleaning using blivet for now.
  + Start even if a libblockdev plugin fails to load.
- Changes from version 2.7.2:
  + Add:
  - Filesystem Resize, Check and Repair;
  - A new "Partitions" property to "PartitionTable" interface;
  - A function to:
    . "take ownership" of a filesystem;
    . List all block devices.
  - A function to wait for an object to disappear.
  + Fix:
  - Detection of drives created using isohybrid images
    (fdo#1437791);
  - Setting "SetupByUID" property when adding a new loop device;
  - How we create UDF file systems.
  + Wait for:
  - The bcache object to disappear after BcacheDestroy;
  - Zram objects to disappear on DestroyDevices().
  + Resize method for Partition interface.
  + Trigger change uevent on disk after adding partitions to it.
  + Use the assert with multiple tries for Block.Configuration.
  + Do not wait for partitions to appear after LoopSetup.
  + Try harder to ignore WD SmartWare virtual CDs.
- Changes from version 2.7.1:
  + Don't always fail on missing LibStorageMgmt support.
  + Fix:
  - Broken partition authorization code;
  - How UDisksClient filters property changes;
  - The position to wait for a partition to appear at.
  + Don't use serial as unique ID for drive objects.
  + udiskslinuxblockbcache.c: Fix uninitialized variable.
  + udisksiscsiutil.c: Correct strncpy lengths.
  + udiskslinuxiscsisessionobject.c: Correct precondition check.
  + lsm_linux_drive.c: Remove std_lsm_vol_data_free error case.
  + udiskslinuxvolumegroupobject.c: Remove variable shadow lvs_p.
  + udiskssimplejob.c: Allow NULL for message.
  + Re-create sysfs watchers for changed mdraid devices.
  + UDisksClient: Do not try remove changed_blacklist hash table in
    finalize.
  + Query methods for available utility binaries.
  + Clear GError after calling "bd_part_get_part_by_pos".
  + Use "model_serial" as unique ID for drive objects.
  + Add "--yes" arg when resizing filesystem with "lvresize".
  + Do not trigger extra uevents for newly created partitions.
  + Free the partition spec libblockdev gives us.
  + Allow the user to specify the partition type.
- Changes from version 2.7.0:
  + udisksdaemonutil.c: Fix GVariant resource leak.
  + Use libblockdev swap plugin for swapspace.
  + Use libblockdev FS plugin for mounting and unmounting devices.
  + Use libblockdev:
  - For:
    . Partitioning code;
    . Wiping newly created partitions;
    . LUKS operations.
  - To get LUKS UUID for LUKS open;
  - As a library not just the plugins;
  - MDRAID code and wipefs calls in MDRAID code.
  + Use libblockdev-lvm for:
  - LV and VG operations;
  - VolumeGroupCreate() too;
  - When updating VG on Poll() call.
  + Fix:
  - bd_reinit and g_clear_error calls in btrfs, zram and bcache;
  - Docstring of 'CreateSnapshot' method in '.Filesystem.BTRFS';
  - Requires and BuildRequires for libblockdev;
  - API for BcacheCreate function.
  + Add:
  - Libblockdev MDRAID and FS plugins to BuildRequires;
  - 'options' parameter do zRAM 'Refresh' function;
  - A function for running threaded jobs synchronously;
  - A new configure option --enable-available-modules.
  + Remove unused variables in handle_mdraid_create.
  + Create Job objects for partitioning related actions.
  + Change:
  - btrfs module API to be consistent with udisks core;
  - bcache properties do CamelCase;
  - ZRAM 'CreateDevices' function to return newly created;
  - zRAM properties to CamelCase.
  + Bcache, btrfs and zRAM modules: Handle invocations in threads.
  + Do not try to set GError over the top of a previous GError.
  + zRAM: Extract used CompAlgorithm as a single value.
    ZRAMs.
  + Move new partition start if overlaps with extended partition
    metadata.
  + Do not start threaded jobs automatically
  + Require and initialize the libblockdev-lvm plugin
  + Check that blockdev/lvm.h is available if LVM2 support
    requested.
  + Also create thin pools using libblockdev-lvm.
  + Get VGs with bd_lvm_vgs() run in a thread.
  + Update information about PVs, LVs and VGs using
    libblockdev-lvm.
  + Get rid of the udisks-lvm helper program.
  + Use:
  - Info for metadata LV when updating LV which has one;
  - Systemd-defined macros in the spec file template;
  - bd_lvm_vgreduce() instead of running 'vgreduce'.
  + REMOVE-ME: use the CLI-based libblockdev-lvm plugin.
  + Make sure we have the AX_CHECK_ENABLE_DEBUG macro.
  + Also check if libblockdev supports bcache.
  + Require 'udev' not 'systemd-udev'.
- Adopt the use of %make_build and %make_install while dropping
  deprecated use of raw commands, following the best practices.
- Pass disable-static to configure as static libs are enabled by
  default. And enable-bcache, enable-btrfs, enable-lsm,
  enable-lvm2, enable-lvmcache and enable-zram to enable new
  available features.
- Add blkid, blockdev, libsystemd and mount pkgconfig modules, and
  libbd_btrfs-devel, libbd_crypto-devel, libbd_fs-devel,
  libbd_kbd-devel, libbd_loop-devel, libbd_lvm-devel,
  libbd_mdraid-devel, libbd_part-devel, libbd_swap-devel,
  libconfig-devel, libstoragemgmt-devel, lvm2-devel BuildRequires
  as new dependencies.
- Add libblockdev, libbd_crypto, libbd_fs, libbd_loop,
  libbd_mdraid, libbd_part and libbd_swap Requires as new run time
  requirements.
- Add e2fsprogs, xfsprogs, and dosfstools Requires, being the first
  needed by mkfs.ext3, mkfs.ext3 and e2label. The second, by
  mkfs.xfs and xfs_admin. And the third, by mkfs.vfat.
- Add gio-unix-2.0 and gmodule-2.0 pkgconfig BuildRequires: note
  that they was already being pulled with pkgconfig(glib-2.0) and
  used, once they live in the same devel package.
- Drop pkgconfig(udev) BuildRequires: no longer needed.
- Replace libgudev-1_0-devel and pkgconfig(systemd) BuildRequires
  by gudev-1.0 and libsystemd, respectively.
- Add LGPL-2.0+ to the preamble License tag once the preamble
  License tag is used for the source RPM and binary RPM packages.
- Correct some subpackages LGPL-2.1+ License tags to LGPL-2.0+ as
  pointed by the COPYING and source files.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
</package>
<package pkgid="b5707e80a7a77326cb2b672745f61d3ab59caf78f530a5b8e4b27fc73410c7b0" name="libudisks2-0_vdo" arch="s390x">
  <version epoch="0" ver="2.9.2" rel="150400.3.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 2.7.6:
  + Add: UdisksUtabEntry and read-write lock.
  + Fix escaping mountpoint for the cleanup service.
  + Check for all LUKS devices when looking for
    CryptoBackingDevice.
  + First implementation of udisksutabmonitor.
  + Invoke job_complete in the proper context in order to avoid
    deadlocks.
  + Generate autocleanup functions for interfaces.
  + Update documentation.
- Changes from version 2.7.5:
  + Add:
  - 'no-discard' option to formatting methods.
  - An assertion method for checking an objects interfaces.
  + Fix:
  - Possible NULL pointer dereference in:
    udiskslinuxdrive.c, udiskslinuxmdraidobject.c and
    udisksclient.c
  - Resource leak.
  - size_str memory leaks in UDisksObjectInfo.
  - Copy-paste error in apply_configuration_thread_func from
    udiskslinuxdriveata.c.
  - "Deadcode" and ignore "check return" warnings in udisksctl.c.
  + Resolve mountpoint to the real path.
  + Include exFAT as a possible partition type for ID 0x07.
  + Always try to read configuration from crypttab in
    handle_unlock.
  + Make sure the table_type is consistent in
    handle_create_partition.
  + Wait for device to become initialized before probing it.
  + Use different mode/dmode for shared file systems.
- Changes from version 2.7.4:
  + Add: New function to set label on swap devices.
  + Fix:
  - Uninitalized value in "udisks_linux_loop_update";
  - Loop device automounting in GNOME.
  + Run cryptsetup before returning from non-blocking Format.
  + Use new libblockdev functionality to disable checks during
    init.
  + Do not try to create file watchers for RAIDs without
    redundancy.
  + Try to use libblockdev to get RAID array size.
  + Re-add support the legacy BIOS bootable GPT flag.
- Changes from version 2.7.3:
  + Add:
  - Version info to docstrings of the partition Resize function;
  - New ResolveDevice function;
  - New OpenDevice function;
  - some missing functions to doc/udisks2-sections.txt.in.in.
  + Fix:
  - Wrong GSList pointer declaration in
    "handle_get_block_devices";
  - "supports_owners" flag for UDF;
  - ExFAT partition type;
  - Bash completion for udisksctl;
  - Force unmounting;
  - Building documentation with new gtk-doc.
  + Process partition resize update before return.
  + Wait for cleartext device object to disappear on Lock().
  + Ignore Asus Zendisk virtual CDROM and ZFS member partitions.
  + Set corrent part type/id and GUID for UDF formatted partitions.
  + Use LUKS specific partition ID and GUID.
  + Make iSCSI Login and Logout wait for DBus objects update.
  + Disable cleaning using blivet for now.
  + Start even if a libblockdev plugin fails to load.
- Changes from version 2.7.2:
  + Add:
  - Filesystem Resize, Check and Repair;
  - A new "Partitions" property to "PartitionTable" interface;
  - A function to:
    . "take ownership" of a filesystem;
    . List all block devices.
  - A function to wait for an object to disappear.
  + Fix:
  - Detection of drives created using isohybrid images
    (fdo#1437791);
  - Setting "SetupByUID" property when adding a new loop device;
  - How we create UDF file systems.
  + Wait for:
  - The bcache object to disappear after BcacheDestroy;
  - Zram objects to disappear on DestroyDevices().
  + Resize method for Partition interface.
  + Trigger change uevent on disk after adding partitions to it.
  + Use the assert with multiple tries for Block.Configuration.
  + Do not wait for partitions to appear after LoopSetup.
  + Try harder to ignore WD SmartWare virtual CDs.
- Changes from version 2.7.1:
  + Don't always fail on missing LibStorageMgmt support.
  + Fix:
  - Broken partition authorization code;
  - How UDisksClient filters property changes;
  - The position to wait for a partition to appear at.
  + Don't use serial as unique ID for drive objects.
  + udiskslinuxblockbcache.c: Fix uninitialized variable.
  + udisksiscsiutil.c: Correct strncpy lengths.
  + udiskslinuxiscsisessionobject.c: Correct precondition check.
  + lsm_linux_drive.c: Remove std_lsm_vol_data_free error case.
  + udiskslinuxvolumegroupobject.c: Remove variable shadow lvs_p.
  + udiskssimplejob.c: Allow NULL for message.
  + Re-create sysfs watchers for changed mdraid devices.
  + UDisksClient: Do not try remove changed_blacklist hash table in
    finalize.
  + Query methods for available utility binaries.
  + Clear GError after calling "bd_part_get_part_by_pos".
  + Use "model_serial" as unique ID for drive objects.
  + Add "--yes" arg when resizing filesystem with "lvresize".
  + Do not trigger extra uevents for newly created partitions.
  + Free the partition spec libblockdev gives us.
  + Allow the user to specify the partition type.
- Changes from version 2.7.0:
  + udisksdaemonutil.c: Fix GVariant resource leak.
  + Use libblockdev swap plugin for swapspace.
  + Use libblockdev FS plugin for mounting and unmounting devices.
  + Use libblockdev:
  - For:
    . Partitioning code;
    . Wiping newly created partitions;
    . LUKS operations.
  - To get LUKS UUID for LUKS open;
  - As a library not just the plugins;
  - MDRAID code and wipefs calls in MDRAID code.
  + Use libblockdev-lvm for:
  - LV and VG operations;
  - VolumeGroupCreate() too;
  - When updating VG on Poll() call.
  + Fix:
  - bd_reinit and g_clear_error calls in btrfs, zram and bcache;
  - Docstring of 'CreateSnapshot' method in '.Filesystem.BTRFS';
  - Requires and BuildRequires for libblockdev;
  - API for BcacheCreate function.
  + Add:
  - Libblockdev MDRAID and FS plugins to BuildRequires;
  - 'options' parameter do zRAM 'Refresh' function;
  - A function for running threaded jobs synchronously;
  - A new configure option --enable-available-modules.
  + Remove unused variables in handle_mdraid_create.
  + Create Job objects for partitioning related actions.
  + Change:
  - btrfs module API to be consistent with udisks core;
  - bcache properties do CamelCase;
  - ZRAM 'CreateDevices' function to return newly created;
  - zRAM properties to CamelCase.
  + Bcache, btrfs and zRAM modules: Handle invocations in threads.
  + Do not try to set GError over the top of a previous GError.
  + zRAM: Extract used CompAlgorithm as a single value.
    ZRAMs.
  + Move new partition start if overlaps with extended partition
    metadata.
  + Do not start threaded jobs automatically
  + Require and initialize the libblockdev-lvm plugin
  + Check that blockdev/lvm.h is available if LVM2 support
    requested.
  + Also create thin pools using libblockdev-lvm.
  + Get VGs with bd_lvm_vgs() run in a thread.
  + Update information about PVs, LVs and VGs using
    libblockdev-lvm.
  + Get rid of the udisks-lvm helper program.
  + Use:
  - Info for metadata LV when updating LV which has one;
  - Systemd-defined macros in the spec file template;
  - bd_lvm_vgreduce() instead of running 'vgreduce'.
  + REMOVE-ME: use the CLI-based libblockdev-lvm plugin.
  + Make sure we have the AX_CHECK_ENABLE_DEBUG macro.
  + Also check if libblockdev supports bcache.
  + Require 'udev' not 'systemd-udev'.
- Adopt the use of %make_build and %make_install while dropping
  deprecated use of raw commands, following the best practices.
- Pass disable-static to configure as static libs are enabled by
  default. And enable-bcache, enable-btrfs, enable-lsm,
  enable-lvm2, enable-lvmcache and enable-zram to enable new
  available features.
- Add blkid, blockdev, libsystemd and mount pkgconfig modules, and
  libbd_btrfs-devel, libbd_crypto-devel, libbd_fs-devel,
  libbd_kbd-devel, libbd_loop-devel, libbd_lvm-devel,
  libbd_mdraid-devel, libbd_part-devel, libbd_swap-devel,
  libconfig-devel, libstoragemgmt-devel, lvm2-devel BuildRequires
  as new dependencies.
- Add libblockdev, libbd_crypto, libbd_fs, libbd_loop,
  libbd_mdraid, libbd_part and libbd_swap Requires as new run time
  requirements.
- Add e2fsprogs, xfsprogs, and dosfstools Requires, being the first
  needed by mkfs.ext3, mkfs.ext3 and e2label. The second, by
  mkfs.xfs and xfs_admin. And the third, by mkfs.vfat.
- Add gio-unix-2.0 and gmodule-2.0 pkgconfig BuildRequires: note
  that they was already being pulled with pkgconfig(glib-2.0) and
  used, once they live in the same devel package.
- Drop pkgconfig(udev) BuildRequires: no longer needed.
- Replace libgudev-1_0-devel and pkgconfig(systemd) BuildRequires
  by gudev-1.0 and libsystemd, respectively.
- Add LGPL-2.0+ to the preamble License tag once the preamble
  License tag is used for the source RPM and binary RPM packages.
- Correct some subpackages LGPL-2.1+ License tags to LGPL-2.0+ as
  pointed by the COPYING and source files.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
</package>
<package pkgid="9e67189b5f3486a18d8c65050a4c39046610cd751c3c980429b34cbf12472867" name="libudisks2-0_vdo" arch="x86_64">
  <version epoch="0" ver="2.9.2" rel="150400.3.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 2.7.6:
  + Add: UdisksUtabEntry and read-write lock.
  + Fix escaping mountpoint for the cleanup service.
  + Check for all LUKS devices when looking for
    CryptoBackingDevice.
  + First implementation of udisksutabmonitor.
  + Invoke job_complete in the proper context in order to avoid
    deadlocks.
  + Generate autocleanup functions for interfaces.
  + Update documentation.
- Changes from version 2.7.5:
  + Add:
  - 'no-discard' option to formatting methods.
  - An assertion method for checking an objects interfaces.
  + Fix:
  - Possible NULL pointer dereference in:
    udiskslinuxdrive.c, udiskslinuxmdraidobject.c and
    udisksclient.c
  - Resource leak.
  - size_str memory leaks in UDisksObjectInfo.
  - Copy-paste error in apply_configuration_thread_func from
    udiskslinuxdriveata.c.
  - "Deadcode" and ignore "check return" warnings in udisksctl.c.
  + Resolve mountpoint to the real path.
  + Include exFAT as a possible partition type for ID 0x07.
  + Always try to read configuration from crypttab in
    handle_unlock.
  + Make sure the table_type is consistent in
    handle_create_partition.
  + Wait for device to become initialized before probing it.
  + Use different mode/dmode for shared file systems.
- Changes from version 2.7.4:
  + Add: New function to set label on swap devices.
  + Fix:
  - Uninitalized value in "udisks_linux_loop_update";
  - Loop device automounting in GNOME.
  + Run cryptsetup before returning from non-blocking Format.
  + Use new libblockdev functionality to disable checks during
    init.
  + Do not try to create file watchers for RAIDs without
    redundancy.
  + Try to use libblockdev to get RAID array size.
  + Re-add support the legacy BIOS bootable GPT flag.
- Changes from version 2.7.3:
  + Add:
  - Version info to docstrings of the partition Resize function;
  - New ResolveDevice function;
  - New OpenDevice function;
  - some missing functions to doc/udisks2-sections.txt.in.in.
  + Fix:
  - Wrong GSList pointer declaration in
    "handle_get_block_devices";
  - "supports_owners" flag for UDF;
  - ExFAT partition type;
  - Bash completion for udisksctl;
  - Force unmounting;
  - Building documentation with new gtk-doc.
  + Process partition resize update before return.
  + Wait for cleartext device object to disappear on Lock().
  + Ignore Asus Zendisk virtual CDROM and ZFS member partitions.
  + Set corrent part type/id and GUID for UDF formatted partitions.
  + Use LUKS specific partition ID and GUID.
  + Make iSCSI Login and Logout wait for DBus objects update.
  + Disable cleaning using blivet for now.
  + Start even if a libblockdev plugin fails to load.
- Changes from version 2.7.2:
  + Add:
  - Filesystem Resize, Check and Repair;
  - A new "Partitions" property to "PartitionTable" interface;
  - A function to:
    . "take ownership" of a filesystem;
    . List all block devices.
  - A function to wait for an object to disappear.
  + Fix:
  - Detection of drives created using isohybrid images
    (fdo#1437791);
  - Setting "SetupByUID" property when adding a new loop device;
  - How we create UDF file systems.
  + Wait for:
  - The bcache object to disappear after BcacheDestroy;
  - Zram objects to disappear on DestroyDevices().
  + Resize method for Partition interface.
  + Trigger change uevent on disk after adding partitions to it.
  + Use the assert with multiple tries for Block.Configuration.
  + Do not wait for partitions to appear after LoopSetup.
  + Try harder to ignore WD SmartWare virtual CDs.
- Changes from version 2.7.1:
  + Don't always fail on missing LibStorageMgmt support.
  + Fix:
  - Broken partition authorization code;
  - How UDisksClient filters property changes;
  - The position to wait for a partition to appear at.
  + Don't use serial as unique ID for drive objects.
  + udiskslinuxblockbcache.c: Fix uninitialized variable.
  + udisksiscsiutil.c: Correct strncpy lengths.
  + udiskslinuxiscsisessionobject.c: Correct precondition check.
  + lsm_linux_drive.c: Remove std_lsm_vol_data_free error case.
  + udiskslinuxvolumegroupobject.c: Remove variable shadow lvs_p.
  + udiskssimplejob.c: Allow NULL for message.
  + Re-create sysfs watchers for changed mdraid devices.
  + UDisksClient: Do not try remove changed_blacklist hash table in
    finalize.
  + Query methods for available utility binaries.
  + Clear GError after calling "bd_part_get_part_by_pos".
  + Use "model_serial" as unique ID for drive objects.
  + Add "--yes" arg when resizing filesystem with "lvresize".
  + Do not trigger extra uevents for newly created partitions.
  + Free the partition spec libblockdev gives us.
  + Allow the user to specify the partition type.
- Changes from version 2.7.0:
  + udisksdaemonutil.c: Fix GVariant resource leak.
  + Use libblockdev swap plugin for swapspace.
  + Use libblockdev FS plugin for mounting and unmounting devices.
  + Use libblockdev:
  - For:
    . Partitioning code;
    . Wiping newly created partitions;
    . LUKS operations.
  - To get LUKS UUID for LUKS open;
  - As a library not just the plugins;
  - MDRAID code and wipefs calls in MDRAID code.
  + Use libblockdev-lvm for:
  - LV and VG operations;
  - VolumeGroupCreate() too;
  - When updating VG on Poll() call.
  + Fix:
  - bd_reinit and g_clear_error calls in btrfs, zram and bcache;
  - Docstring of 'CreateSnapshot' method in '.Filesystem.BTRFS';
  - Requires and BuildRequires for libblockdev;
  - API for BcacheCreate function.
  + Add:
  - Libblockdev MDRAID and FS plugins to BuildRequires;
  - 'options' parameter do zRAM 'Refresh' function;
  - A function for running threaded jobs synchronously;
  - A new configure option --enable-available-modules.
  + Remove unused variables in handle_mdraid_create.
  + Create Job objects for partitioning related actions.
  + Change:
  - btrfs module API to be consistent with udisks core;
  - bcache properties do CamelCase;
  - ZRAM 'CreateDevices' function to return newly created;
  - zRAM properties to CamelCase.
  + Bcache, btrfs and zRAM modules: Handle invocations in threads.
  + Do not try to set GError over the top of a previous GError.
  + zRAM: Extract used CompAlgorithm as a single value.
    ZRAMs.
  + Move new partition start if overlaps with extended partition
    metadata.
  + Do not start threaded jobs automatically
  + Require and initialize the libblockdev-lvm plugin
  + Check that blockdev/lvm.h is available if LVM2 support
    requested.
  + Also create thin pools using libblockdev-lvm.
  + Get VGs with bd_lvm_vgs() run in a thread.
  + Update information about PVs, LVs and VGs using
    libblockdev-lvm.
  + Get rid of the udisks-lvm helper program.
  + Use:
  - Info for metadata LV when updating LV which has one;
  - Systemd-defined macros in the spec file template;
  - bd_lvm_vgreduce() instead of running 'vgreduce'.
  + REMOVE-ME: use the CLI-based libblockdev-lvm plugin.
  + Make sure we have the AX_CHECK_ENABLE_DEBUG macro.
  + Also check if libblockdev supports bcache.
  + Require 'udev' not 'systemd-udev'.
- Adopt the use of %make_build and %make_install while dropping
  deprecated use of raw commands, following the best practices.
- Pass disable-static to configure as static libs are enabled by
  default. And enable-bcache, enable-btrfs, enable-lsm,
  enable-lvm2, enable-lvmcache and enable-zram to enable new
  available features.
- Add blkid, blockdev, libsystemd and mount pkgconfig modules, and
  libbd_btrfs-devel, libbd_crypto-devel, libbd_fs-devel,
  libbd_kbd-devel, libbd_loop-devel, libbd_lvm-devel,
  libbd_mdraid-devel, libbd_part-devel, libbd_swap-devel,
  libconfig-devel, libstoragemgmt-devel, lvm2-devel BuildRequires
  as new dependencies.
- Add libblockdev, libbd_crypto, libbd_fs, libbd_loop,
  libbd_mdraid, libbd_part and libbd_swap Requires as new run time
  requirements.
- Add e2fsprogs, xfsprogs, and dosfstools Requires, being the first
  needed by mkfs.ext3, mkfs.ext3 and e2label. The second, by
  mkfs.xfs and xfs_admin. And the third, by mkfs.vfat.
- Add gio-unix-2.0 and gmodule-2.0 pkgconfig BuildRequires: note
  that they was already being pulled with pkgconfig(glib-2.0) and
  used, once they live in the same devel package.
- Drop pkgconfig(udev) BuildRequires: no longer needed.
- Replace libgudev-1_0-devel and pkgconfig(systemd) BuildRequires
  by gudev-1.0 and libsystemd, respectively.
- Add LGPL-2.0+ to the preamble License tag once the preamble
  License tag is used for the source RPM and binary RPM packages.
- Correct some subpackages LGPL-2.1+ License tags to LGPL-2.0+ as
  pointed by the COPYING and source files.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
</package>
<package pkgid="3a9c846854af32e6cd09c26140515ce6068a17f689d88eb4a025298c9467dad6" name="libudisks2-0_zram" arch="aarch64">
  <version epoch="0" ver="2.9.2" rel="150400.3.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 2.7.6:
  + Add: UdisksUtabEntry and read-write lock.
  + Fix escaping mountpoint for the cleanup service.
  + Check for all LUKS devices when looking for
    CryptoBackingDevice.
  + First implementation of udisksutabmonitor.
  + Invoke job_complete in the proper context in order to avoid
    deadlocks.
  + Generate autocleanup functions for interfaces.
  + Update documentation.
- Changes from version 2.7.5:
  + Add:
  - 'no-discard' option to formatting methods.
  - An assertion method for checking an objects interfaces.
  + Fix:
  - Possible NULL pointer dereference in:
    udiskslinuxdrive.c, udiskslinuxmdraidobject.c and
    udisksclient.c
  - Resource leak.
  - size_str memory leaks in UDisksObjectInfo.
  - Copy-paste error in apply_configuration_thread_func from
    udiskslinuxdriveata.c.
  - "Deadcode" and ignore "check return" warnings in udisksctl.c.
  + Resolve mountpoint to the real path.
  + Include exFAT as a possible partition type for ID 0x07.
  + Always try to read configuration from crypttab in
    handle_unlock.
  + Make sure the table_type is consistent in
    handle_create_partition.
  + Wait for device to become initialized before probing it.
  + Use different mode/dmode for shared file systems.
- Changes from version 2.7.4:
  + Add: New function to set label on swap devices.
  + Fix:
  - Uninitalized value in "udisks_linux_loop_update";
  - Loop device automounting in GNOME.
  + Run cryptsetup before returning from non-blocking Format.
  + Use new libblockdev functionality to disable checks during
    init.
  + Do not try to create file watchers for RAIDs without
    redundancy.
  + Try to use libblockdev to get RAID array size.
  + Re-add support the legacy BIOS bootable GPT flag.
- Changes from version 2.7.3:
  + Add:
  - Version info to docstrings of the partition Resize function;
  - New ResolveDevice function;
  - New OpenDevice function;
  - some missing functions to doc/udisks2-sections.txt.in.in.
  + Fix:
  - Wrong GSList pointer declaration in
    "handle_get_block_devices";
  - "supports_owners" flag for UDF;
  - ExFAT partition type;
  - Bash completion for udisksctl;
  - Force unmounting;
  - Building documentation with new gtk-doc.
  + Process partition resize update before return.
  + Wait for cleartext device object to disappear on Lock().
  + Ignore Asus Zendisk virtual CDROM and ZFS member partitions.
  + Set corrent part type/id and GUID for UDF formatted partitions.
  + Use LUKS specific partition ID and GUID.
  + Make iSCSI Login and Logout wait for DBus objects update.
  + Disable cleaning using blivet for now.
  + Start even if a libblockdev plugin fails to load.
- Changes from version 2.7.2:
  + Add:
  - Filesystem Resize, Check and Repair;
  - A new "Partitions" property to "PartitionTable" interface;
  - A function to:
    . "take ownership" of a filesystem;
    . List all block devices.
  - A function to wait for an object to disappear.
  + Fix:
  - Detection of drives created using isohybrid images
    (fdo#1437791);
  - Setting "SetupByUID" property when adding a new loop device;
  - How we create UDF file systems.
  + Wait for:
  - The bcache object to disappear after BcacheDestroy;
  - Zram objects to disappear on DestroyDevices().
  + Resize method for Partition interface.
  + Trigger change uevent on disk after adding partitions to it.
  + Use the assert with multiple tries for Block.Configuration.
  + Do not wait for partitions to appear after LoopSetup.
  + Try harder to ignore WD SmartWare virtual CDs.
- Changes from version 2.7.1:
  + Don't always fail on missing LibStorageMgmt support.
  + Fix:
  - Broken partition authorization code;
  - How UDisksClient filters property changes;
  - The position to wait for a partition to appear at.
  + Don't use serial as unique ID for drive objects.
  + udiskslinuxblockbcache.c: Fix uninitialized variable.
  + udisksiscsiutil.c: Correct strncpy lengths.
  + udiskslinuxiscsisessionobject.c: Correct precondition check.
  + lsm_linux_drive.c: Remove std_lsm_vol_data_free error case.
  + udiskslinuxvolumegroupobject.c: Remove variable shadow lvs_p.
  + udiskssimplejob.c: Allow NULL for message.
  + Re-create sysfs watchers for changed mdraid devices.
  + UDisksClient: Do not try remove changed_blacklist hash table in
    finalize.
  + Query methods for available utility binaries.
  + Clear GError after calling "bd_part_get_part_by_pos".
  + Use "model_serial" as unique ID for drive objects.
  + Add "--yes" arg when resizing filesystem with "lvresize".
  + Do not trigger extra uevents for newly created partitions.
  + Free the partition spec libblockdev gives us.
  + Allow the user to specify the partition type.
- Changes from version 2.7.0:
  + udisksdaemonutil.c: Fix GVariant resource leak.
  + Use libblockdev swap plugin for swapspace.
  + Use libblockdev FS plugin for mounting and unmounting devices.
  + Use libblockdev:
  - For:
    . Partitioning code;
    . Wiping newly created partitions;
    . LUKS operations.
  - To get LUKS UUID for LUKS open;
  - As a library not just the plugins;
  - MDRAID code and wipefs calls in MDRAID code.
  + Use libblockdev-lvm for:
  - LV and VG operations;
  - VolumeGroupCreate() too;
  - When updating VG on Poll() call.
  + Fix:
  - bd_reinit and g_clear_error calls in btrfs, zram and bcache;
  - Docstring of 'CreateSnapshot' method in '.Filesystem.BTRFS';
  - Requires and BuildRequires for libblockdev;
  - API for BcacheCreate function.
  + Add:
  - Libblockdev MDRAID and FS plugins to BuildRequires;
  - 'options' parameter do zRAM 'Refresh' function;
  - A function for running threaded jobs synchronously;
  - A new configure option --enable-available-modules.
  + Remove unused variables in handle_mdraid_create.
  + Create Job objects for partitioning related actions.
  + Change:
  - btrfs module API to be consistent with udisks core;
  - bcache properties do CamelCase;
  - ZRAM 'CreateDevices' function to return newly created;
  - zRAM properties to CamelCase.
  + Bcache, btrfs and zRAM modules: Handle invocations in threads.
  + Do not try to set GError over the top of a previous GError.
  + zRAM: Extract used CompAlgorithm as a single value.
    ZRAMs.
  + Move new partition start if overlaps with extended partition
    metadata.
  + Do not start threaded jobs automatically
  + Require and initialize the libblockdev-lvm plugin
  + Check that blockdev/lvm.h is available if LVM2 support
    requested.
  + Also create thin pools using libblockdev-lvm.
  + Get VGs with bd_lvm_vgs() run in a thread.
  + Update information about PVs, LVs and VGs using
    libblockdev-lvm.
  + Get rid of the udisks-lvm helper program.
  + Use:
  - Info for metadata LV when updating LV which has one;
  - Systemd-defined macros in the spec file template;
  - bd_lvm_vgreduce() instead of running 'vgreduce'.
  + REMOVE-ME: use the CLI-based libblockdev-lvm plugin.
  + Make sure we have the AX_CHECK_ENABLE_DEBUG macro.
  + Also check if libblockdev supports bcache.
  + Require 'udev' not 'systemd-udev'.
- Adopt the use of %make_build and %make_install while dropping
  deprecated use of raw commands, following the best practices.
- Pass disable-static to configure as static libs are enabled by
  default. And enable-bcache, enable-btrfs, enable-lsm,
  enable-lvm2, enable-lvmcache and enable-zram to enable new
  available features.
- Add blkid, blockdev, libsystemd and mount pkgconfig modules, and
  libbd_btrfs-devel, libbd_crypto-devel, libbd_fs-devel,
  libbd_kbd-devel, libbd_loop-devel, libbd_lvm-devel,
  libbd_mdraid-devel, libbd_part-devel, libbd_swap-devel,
  libconfig-devel, libstoragemgmt-devel, lvm2-devel BuildRequires
  as new dependencies.
- Add libblockdev, libbd_crypto, libbd_fs, libbd_loop,
  libbd_mdraid, libbd_part and libbd_swap Requires as new run time
  requirements.
- Add e2fsprogs, xfsprogs, and dosfstools Requires, being the first
  needed by mkfs.ext3, mkfs.ext3 and e2label. The second, by
  mkfs.xfs and xfs_admin. And the third, by mkfs.vfat.
- Add gio-unix-2.0 and gmodule-2.0 pkgconfig BuildRequires: note
  that they was already being pulled with pkgconfig(glib-2.0) and
  used, once they live in the same devel package.
- Drop pkgconfig(udev) BuildRequires: no longer needed.
- Replace libgudev-1_0-devel and pkgconfig(systemd) BuildRequires
  by gudev-1.0 and libsystemd, respectively.
- Add LGPL-2.0+ to the preamble License tag once the preamble
  License tag is used for the source RPM and binary RPM packages.
- Correct some subpackages LGPL-2.1+ License tags to LGPL-2.0+ as
  pointed by the COPYING and source files.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
</package>
<package pkgid="0ebb77fc259bc3e79720730c61cf5d51aaa1dd0728cb03bd5108feabb2fb77a1" name="libudisks2-0_zram" arch="ppc64le">
  <version epoch="0" ver="2.9.2" rel="150400.3.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 2.7.6:
  + Add: UdisksUtabEntry and read-write lock.
  + Fix escaping mountpoint for the cleanup service.
  + Check for all LUKS devices when looking for
    CryptoBackingDevice.
  + First implementation of udisksutabmonitor.
  + Invoke job_complete in the proper context in order to avoid
    deadlocks.
  + Generate autocleanup functions for interfaces.
  + Update documentation.
- Changes from version 2.7.5:
  + Add:
  - 'no-discard' option to formatting methods.
  - An assertion method for checking an objects interfaces.
  + Fix:
  - Possible NULL pointer dereference in:
    udiskslinuxdrive.c, udiskslinuxmdraidobject.c and
    udisksclient.c
  - Resource leak.
  - size_str memory leaks in UDisksObjectInfo.
  - Copy-paste error in apply_configuration_thread_func from
    udiskslinuxdriveata.c.
  - "Deadcode" and ignore "check return" warnings in udisksctl.c.
  + Resolve mountpoint to the real path.
  + Include exFAT as a possible partition type for ID 0x07.
  + Always try to read configuration from crypttab in
    handle_unlock.
  + Make sure the table_type is consistent in
    handle_create_partition.
  + Wait for device to become initialized before probing it.
  + Use different mode/dmode for shared file systems.
- Changes from version 2.7.4:
  + Add: New function to set label on swap devices.
  + Fix:
  - Uninitalized value in "udisks_linux_loop_update";
  - Loop device automounting in GNOME.
  + Run cryptsetup before returning from non-blocking Format.
  + Use new libblockdev functionality to disable checks during
    init.
  + Do not try to create file watchers for RAIDs without
    redundancy.
  + Try to use libblockdev to get RAID array size.
  + Re-add support the legacy BIOS bootable GPT flag.
- Changes from version 2.7.3:
  + Add:
  - Version info to docstrings of the partition Resize function;
  - New ResolveDevice function;
  - New OpenDevice function;
  - some missing functions to doc/udisks2-sections.txt.in.in.
  + Fix:
  - Wrong GSList pointer declaration in
    "handle_get_block_devices";
  - "supports_owners" flag for UDF;
  - ExFAT partition type;
  - Bash completion for udisksctl;
  - Force unmounting;
  - Building documentation with new gtk-doc.
  + Process partition resize update before return.
  + Wait for cleartext device object to disappear on Lock().
  + Ignore Asus Zendisk virtual CDROM and ZFS member partitions.
  + Set corrent part type/id and GUID for UDF formatted partitions.
  + Use LUKS specific partition ID and GUID.
  + Make iSCSI Login and Logout wait for DBus objects update.
  + Disable cleaning using blivet for now.
  + Start even if a libblockdev plugin fails to load.
- Changes from version 2.7.2:
  + Add:
  - Filesystem Resize, Check and Repair;
  - A new "Partitions" property to "PartitionTable" interface;
  - A function to:
    . "take ownership" of a filesystem;
    . List all block devices.
  - A function to wait for an object to disappear.
  + Fix:
  - Detection of drives created using isohybrid images
    (fdo#1437791);
  - Setting "SetupByUID" property when adding a new loop device;
  - How we create UDF file systems.
  + Wait for:
  - The bcache object to disappear after BcacheDestroy;
  - Zram objects to disappear on DestroyDevices().
  + Resize method for Partition interface.
  + Trigger change uevent on disk after adding partitions to it.
  + Use the assert with multiple tries for Block.Configuration.
  + Do not wait for partitions to appear after LoopSetup.
  + Try harder to ignore WD SmartWare virtual CDs.
- Changes from version 2.7.1:
  + Don't always fail on missing LibStorageMgmt support.
  + Fix:
  - Broken partition authorization code;
  - How UDisksClient filters property changes;
  - The position to wait for a partition to appear at.
  + Don't use serial as unique ID for drive objects.
  + udiskslinuxblockbcache.c: Fix uninitialized variable.
  + udisksiscsiutil.c: Correct strncpy lengths.
  + udiskslinuxiscsisessionobject.c: Correct precondition check.
  + lsm_linux_drive.c: Remove std_lsm_vol_data_free error case.
  + udiskslinuxvolumegroupobject.c: Remove variable shadow lvs_p.
  + udiskssimplejob.c: Allow NULL for message.
  + Re-create sysfs watchers for changed mdraid devices.
  + UDisksClient: Do not try remove changed_blacklist hash table in
    finalize.
  + Query methods for available utility binaries.
  + Clear GError after calling "bd_part_get_part_by_pos".
  + Use "model_serial" as unique ID for drive objects.
  + Add "--yes" arg when resizing filesystem with "lvresize".
  + Do not trigger extra uevents for newly created partitions.
  + Free the partition spec libblockdev gives us.
  + Allow the user to specify the partition type.
- Changes from version 2.7.0:
  + udisksdaemonutil.c: Fix GVariant resource leak.
  + Use libblockdev swap plugin for swapspace.
  + Use libblockdev FS plugin for mounting and unmounting devices.
  + Use libblockdev:
  - For:
    . Partitioning code;
    . Wiping newly created partitions;
    . LUKS operations.
  - To get LUKS UUID for LUKS open;
  - As a library not just the plugins;
  - MDRAID code and wipefs calls in MDRAID code.
  + Use libblockdev-lvm for:
  - LV and VG operations;
  - VolumeGroupCreate() too;
  - When updating VG on Poll() call.
  + Fix:
  - bd_reinit and g_clear_error calls in btrfs, zram and bcache;
  - Docstring of 'CreateSnapshot' method in '.Filesystem.BTRFS';
  - Requires and BuildRequires for libblockdev;
  - API for BcacheCreate function.
  + Add:
  - Libblockdev MDRAID and FS plugins to BuildRequires;
  - 'options' parameter do zRAM 'Refresh' function;
  - A function for running threaded jobs synchronously;
  - A new configure option --enable-available-modules.
  + Remove unused variables in handle_mdraid_create.
  + Create Job objects for partitioning related actions.
  + Change:
  - btrfs module API to be consistent with udisks core;
  - bcache properties do CamelCase;
  - ZRAM 'CreateDevices' function to return newly created;
  - zRAM properties to CamelCase.
  + Bcache, btrfs and zRAM modules: Handle invocations in threads.
  + Do not try to set GError over the top of a previous GError.
  + zRAM: Extract used CompAlgorithm as a single value.
    ZRAMs.
  + Move new partition start if overlaps with extended partition
    metadata.
  + Do not start threaded jobs automatically
  + Require and initialize the libblockdev-lvm plugin
  + Check that blockdev/lvm.h is available if LVM2 support
    requested.
  + Also create thin pools using libblockdev-lvm.
  + Get VGs with bd_lvm_vgs() run in a thread.
  + Update information about PVs, LVs and VGs using
    libblockdev-lvm.
  + Get rid of the udisks-lvm helper program.
  + Use:
  - Info for metadata LV when updating LV which has one;
  - Systemd-defined macros in the spec file template;
  - bd_lvm_vgreduce() instead of running 'vgreduce'.
  + REMOVE-ME: use the CLI-based libblockdev-lvm plugin.
  + Make sure we have the AX_CHECK_ENABLE_DEBUG macro.
  + Also check if libblockdev supports bcache.
  + Require 'udev' not 'systemd-udev'.
- Adopt the use of %make_build and %make_install while dropping
  deprecated use of raw commands, following the best practices.
- Pass disable-static to configure as static libs are enabled by
  default. And enable-bcache, enable-btrfs, enable-lsm,
  enable-lvm2, enable-lvmcache and enable-zram to enable new
  available features.
- Add blkid, blockdev, libsystemd and mount pkgconfig modules, and
  libbd_btrfs-devel, libbd_crypto-devel, libbd_fs-devel,
  libbd_kbd-devel, libbd_loop-devel, libbd_lvm-devel,
  libbd_mdraid-devel, libbd_part-devel, libbd_swap-devel,
  libconfig-devel, libstoragemgmt-devel, lvm2-devel BuildRequires
  as new dependencies.
- Add libblockdev, libbd_crypto, libbd_fs, libbd_loop,
  libbd_mdraid, libbd_part and libbd_swap Requires as new run time
  requirements.
- Add e2fsprogs, xfsprogs, and dosfstools Requires, being the first
  needed by mkfs.ext3, mkfs.ext3 and e2label. The second, by
  mkfs.xfs and xfs_admin. And the third, by mkfs.vfat.
- Add gio-unix-2.0 and gmodule-2.0 pkgconfig BuildRequires: note
  that they was already being pulled with pkgconfig(glib-2.0) and
  used, once they live in the same devel package.
- Drop pkgconfig(udev) BuildRequires: no longer needed.
- Replace libgudev-1_0-devel and pkgconfig(systemd) BuildRequires
  by gudev-1.0 and libsystemd, respectively.
- Add LGPL-2.0+ to the preamble License tag once the preamble
  License tag is used for the source RPM and binary RPM packages.
- Correct some subpackages LGPL-2.1+ License tags to LGPL-2.0+ as
  pointed by the COPYING and source files.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
</package>
<package pkgid="7330f5bddaec643bf7ec2fc79d5eddd16878f8c4889a1ffdae4f1e03f5e7092e" name="libudisks2-0_zram" arch="s390x">
  <version epoch="0" ver="2.9.2" rel="150400.3.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 2.7.6:
  + Add: UdisksUtabEntry and read-write lock.
  + Fix escaping mountpoint for the cleanup service.
  + Check for all LUKS devices when looking for
    CryptoBackingDevice.
  + First implementation of udisksutabmonitor.
  + Invoke job_complete in the proper context in order to avoid
    deadlocks.
  + Generate autocleanup functions for interfaces.
  + Update documentation.
- Changes from version 2.7.5:
  + Add:
  - 'no-discard' option to formatting methods.
  - An assertion method for checking an objects interfaces.
  + Fix:
  - Possible NULL pointer dereference in:
    udiskslinuxdrive.c, udiskslinuxmdraidobject.c and
    udisksclient.c
  - Resource leak.
  - size_str memory leaks in UDisksObjectInfo.
  - Copy-paste error in apply_configuration_thread_func from
    udiskslinuxdriveata.c.
  - "Deadcode" and ignore "check return" warnings in udisksctl.c.
  + Resolve mountpoint to the real path.
  + Include exFAT as a possible partition type for ID 0x07.
  + Always try to read configuration from crypttab in
    handle_unlock.
  + Make sure the table_type is consistent in
    handle_create_partition.
  + Wait for device to become initialized before probing it.
  + Use different mode/dmode for shared file systems.
- Changes from version 2.7.4:
  + Add: New function to set label on swap devices.
  + Fix:
  - Uninitalized value in "udisks_linux_loop_update";
  - Loop device automounting in GNOME.
  + Run cryptsetup before returning from non-blocking Format.
  + Use new libblockdev functionality to disable checks during
    init.
  + Do not try to create file watchers for RAIDs without
    redundancy.
  + Try to use libblockdev to get RAID array size.
  + Re-add support the legacy BIOS bootable GPT flag.
- Changes from version 2.7.3:
  + Add:
  - Version info to docstrings of the partition Resize function;
  - New ResolveDevice function;
  - New OpenDevice function;
  - some missing functions to doc/udisks2-sections.txt.in.in.
  + Fix:
  - Wrong GSList pointer declaration in
    "handle_get_block_devices";
  - "supports_owners" flag for UDF;
  - ExFAT partition type;
  - Bash completion for udisksctl;
  - Force unmounting;
  - Building documentation with new gtk-doc.
  + Process partition resize update before return.
  + Wait for cleartext device object to disappear on Lock().
  + Ignore Asus Zendisk virtual CDROM and ZFS member partitions.
  + Set corrent part type/id and GUID for UDF formatted partitions.
  + Use LUKS specific partition ID and GUID.
  + Make iSCSI Login and Logout wait for DBus objects update.
  + Disable cleaning using blivet for now.
  + Start even if a libblockdev plugin fails to load.
- Changes from version 2.7.2:
  + Add:
  - Filesystem Resize, Check and Repair;
  - A new "Partitions" property to "PartitionTable" interface;
  - A function to:
    . "take ownership" of a filesystem;
    . List all block devices.
  - A function to wait for an object to disappear.
  + Fix:
  - Detection of drives created using isohybrid images
    (fdo#1437791);
  - Setting "SetupByUID" property when adding a new loop device;
  - How we create UDF file systems.
  + Wait for:
  - The bcache object to disappear after BcacheDestroy;
  - Zram objects to disappear on DestroyDevices().
  + Resize method for Partition interface.
  + Trigger change uevent on disk after adding partitions to it.
  + Use the assert with multiple tries for Block.Configuration.
  + Do not wait for partitions to appear after LoopSetup.
  + Try harder to ignore WD SmartWare virtual CDs.
- Changes from version 2.7.1:
  + Don't always fail on missing LibStorageMgmt support.
  + Fix:
  - Broken partition authorization code;
  - How UDisksClient filters property changes;
  - The position to wait for a partition to appear at.
  + Don't use serial as unique ID for drive objects.
  + udiskslinuxblockbcache.c: Fix uninitialized variable.
  + udisksiscsiutil.c: Correct strncpy lengths.
  + udiskslinuxiscsisessionobject.c: Correct precondition check.
  + lsm_linux_drive.c: Remove std_lsm_vol_data_free error case.
  + udiskslinuxvolumegroupobject.c: Remove variable shadow lvs_p.
  + udiskssimplejob.c: Allow NULL for message.
  + Re-create sysfs watchers for changed mdraid devices.
  + UDisksClient: Do not try remove changed_blacklist hash table in
    finalize.
  + Query methods for available utility binaries.
  + Clear GError after calling "bd_part_get_part_by_pos".
  + Use "model_serial" as unique ID for drive objects.
  + Add "--yes" arg when resizing filesystem with "lvresize".
  + Do not trigger extra uevents for newly created partitions.
  + Free the partition spec libblockdev gives us.
  + Allow the user to specify the partition type.
- Changes from version 2.7.0:
  + udisksdaemonutil.c: Fix GVariant resource leak.
  + Use libblockdev swap plugin for swapspace.
  + Use libblockdev FS plugin for mounting and unmounting devices.
  + Use libblockdev:
  - For:
    . Partitioning code;
    . Wiping newly created partitions;
    . LUKS operations.
  - To get LUKS UUID for LUKS open;
  - As a library not just the plugins;
  - MDRAID code and wipefs calls in MDRAID code.
  + Use libblockdev-lvm for:
  - LV and VG operations;
  - VolumeGroupCreate() too;
  - When updating VG on Poll() call.
  + Fix:
  - bd_reinit and g_clear_error calls in btrfs, zram and bcache;
  - Docstring of 'CreateSnapshot' method in '.Filesystem.BTRFS';
  - Requires and BuildRequires for libblockdev;
  - API for BcacheCreate function.
  + Add:
  - Libblockdev MDRAID and FS plugins to BuildRequires;
  - 'options' parameter do zRAM 'Refresh' function;
  - A function for running threaded jobs synchronously;
  - A new configure option --enable-available-modules.
  + Remove unused variables in handle_mdraid_create.
  + Create Job objects for partitioning related actions.
  + Change:
  - btrfs module API to be consistent with udisks core;
  - bcache properties do CamelCase;
  - ZRAM 'CreateDevices' function to return newly created;
  - zRAM properties to CamelCase.
  + Bcache, btrfs and zRAM modules: Handle invocations in threads.
  + Do not try to set GError over the top of a previous GError.
  + zRAM: Extract used CompAlgorithm as a single value.
    ZRAMs.
  + Move new partition start if overlaps with extended partition
    metadata.
  + Do not start threaded jobs automatically
  + Require and initialize the libblockdev-lvm plugin
  + Check that blockdev/lvm.h is available if LVM2 support
    requested.
  + Also create thin pools using libblockdev-lvm.
  + Get VGs with bd_lvm_vgs() run in a thread.
  + Update information about PVs, LVs and VGs using
    libblockdev-lvm.
  + Get rid of the udisks-lvm helper program.
  + Use:
  - Info for metadata LV when updating LV which has one;
  - Systemd-defined macros in the spec file template;
  - bd_lvm_vgreduce() instead of running 'vgreduce'.
  + REMOVE-ME: use the CLI-based libblockdev-lvm plugin.
  + Make sure we have the AX_CHECK_ENABLE_DEBUG macro.
  + Also check if libblockdev supports bcache.
  + Require 'udev' not 'systemd-udev'.
- Adopt the use of %make_build and %make_install while dropping
  deprecated use of raw commands, following the best practices.
- Pass disable-static to configure as static libs are enabled by
  default. And enable-bcache, enable-btrfs, enable-lsm,
  enable-lvm2, enable-lvmcache and enable-zram to enable new
  available features.
- Add blkid, blockdev, libsystemd and mount pkgconfig modules, and
  libbd_btrfs-devel, libbd_crypto-devel, libbd_fs-devel,
  libbd_kbd-devel, libbd_loop-devel, libbd_lvm-devel,
  libbd_mdraid-devel, libbd_part-devel, libbd_swap-devel,
  libconfig-devel, libstoragemgmt-devel, lvm2-devel BuildRequires
  as new dependencies.
- Add libblockdev, libbd_crypto, libbd_fs, libbd_loop,
  libbd_mdraid, libbd_part and libbd_swap Requires as new run time
  requirements.
- Add e2fsprogs, xfsprogs, and dosfstools Requires, being the first
  needed by mkfs.ext3, mkfs.ext3 and e2label. The second, by
  mkfs.xfs and xfs_admin. And the third, by mkfs.vfat.
- Add gio-unix-2.0 and gmodule-2.0 pkgconfig BuildRequires: note
  that they was already being pulled with pkgconfig(glib-2.0) and
  used, once they live in the same devel package.
- Drop pkgconfig(udev) BuildRequires: no longer needed.
- Replace libgudev-1_0-devel and pkgconfig(systemd) BuildRequires
  by gudev-1.0 and libsystemd, respectively.
- Add LGPL-2.0+ to the preamble License tag once the preamble
  License tag is used for the source RPM and binary RPM packages.
- Correct some subpackages LGPL-2.1+ License tags to LGPL-2.0+ as
  pointed by the COPYING and source files.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
</package>
<package pkgid="c42888c1b8801bfef398e128f34964b5ca5736281218c1acf81f52ac2bb7f6dc" name="libudisks2-0_zram" arch="x86_64">
  <version epoch="0" ver="2.9.2" rel="150400.3.3.1"/>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 2.7.6:
  + Add: UdisksUtabEntry and read-write lock.
  + Fix escaping mountpoint for the cleanup service.
  + Check for all LUKS devices when looking for
    CryptoBackingDevice.
  + First implementation of udisksutabmonitor.
  + Invoke job_complete in the proper context in order to avoid
    deadlocks.
  + Generate autocleanup functions for interfaces.
  + Update documentation.
- Changes from version 2.7.5:
  + Add:
  - 'no-discard' option to formatting methods.
  - An assertion method for checking an objects interfaces.
  + Fix:
  - Possible NULL pointer dereference in:
    udiskslinuxdrive.c, udiskslinuxmdraidobject.c and
    udisksclient.c
  - Resource leak.
  - size_str memory leaks in UDisksObjectInfo.
  - Copy-paste error in apply_configuration_thread_func from
    udiskslinuxdriveata.c.
  - "Deadcode" and ignore "check return" warnings in udisksctl.c.
  + Resolve mountpoint to the real path.
  + Include exFAT as a possible partition type for ID 0x07.
  + Always try to read configuration from crypttab in
    handle_unlock.
  + Make sure the table_type is consistent in
    handle_create_partition.
  + Wait for device to become initialized before probing it.
  + Use different mode/dmode for shared file systems.
- Changes from version 2.7.4:
  + Add: New function to set label on swap devices.
  + Fix:
  - Uninitalized value in "udisks_linux_loop_update";
  - Loop device automounting in GNOME.
  + Run cryptsetup before returning from non-blocking Format.
  + Use new libblockdev functionality to disable checks during
    init.
  + Do not try to create file watchers for RAIDs without
    redundancy.
  + Try to use libblockdev to get RAID array size.
  + Re-add support the legacy BIOS bootable GPT flag.
- Changes from version 2.7.3:
  + Add:
  - Version info to docstrings of the partition Resize function;
  - New ResolveDevice function;
  - New OpenDevice function;
  - some missing functions to doc/udisks2-sections.txt.in.in.
  + Fix:
  - Wrong GSList pointer declaration in
    "handle_get_block_devices";
  - "supports_owners" flag for UDF;
  - ExFAT partition type;
  - Bash completion for udisksctl;
  - Force unmounting;
  - Building documentation with new gtk-doc.
  + Process partition resize update before return.
  + Wait for cleartext device object to disappear on Lock().
  + Ignore Asus Zendisk virtual CDROM and ZFS member partitions.
  + Set corrent part type/id and GUID for UDF formatted partitions.
  + Use LUKS specific partition ID and GUID.
  + Make iSCSI Login and Logout wait for DBus objects update.
  + Disable cleaning using blivet for now.
  + Start even if a libblockdev plugin fails to load.
- Changes from version 2.7.2:
  + Add:
  - Filesystem Resize, Check and Repair;
  - A new "Partitions" property to "PartitionTable" interface;
  - A function to:
    . "take ownership" of a filesystem;
    . List all block devices.
  - A function to wait for an object to disappear.
  + Fix:
  - Detection of drives created using isohybrid images
    (fdo#1437791);
  - Setting "SetupByUID" property when adding a new loop device;
  - How we create UDF file systems.
  + Wait for:
  - The bcache object to disappear after BcacheDestroy;
  - Zram objects to disappear on DestroyDevices().
  + Resize method for Partition interface.
  + Trigger change uevent on disk after adding partitions to it.
  + Use the assert with multiple tries for Block.Configuration.
  + Do not wait for partitions to appear after LoopSetup.
  + Try harder to ignore WD SmartWare virtual CDs.
- Changes from version 2.7.1:
  + Don't always fail on missing LibStorageMgmt support.
  + Fix:
  - Broken partition authorization code;
  - How UDisksClient filters property changes;
  - The position to wait for a partition to appear at.
  + Don't use serial as unique ID for drive objects.
  + udiskslinuxblockbcache.c: Fix uninitialized variable.
  + udisksiscsiutil.c: Correct strncpy lengths.
  + udiskslinuxiscsisessionobject.c: Correct precondition check.
  + lsm_linux_drive.c: Remove std_lsm_vol_data_free error case.
  + udiskslinuxvolumegroupobject.c: Remove variable shadow lvs_p.
  + udiskssimplejob.c: Allow NULL for message.
  + Re-create sysfs watchers for changed mdraid devices.
  + UDisksClient: Do not try remove changed_blacklist hash table in
    finalize.
  + Query methods for available utility binaries.
  + Clear GError after calling "bd_part_get_part_by_pos".
  + Use "model_serial" as unique ID for drive objects.
  + Add "--yes" arg when resizing filesystem with "lvresize".
  + Do not trigger extra uevents for newly created partitions.
  + Free the partition spec libblockdev gives us.
  + Allow the user to specify the partition type.
- Changes from version 2.7.0:
  + udisksdaemonutil.c: Fix GVariant resource leak.
  + Use libblockdev swap plugin for swapspace.
  + Use libblockdev FS plugin for mounting and unmounting devices.
  + Use libblockdev:
  - For:
    . Partitioning code;
    . Wiping newly created partitions;
    . LUKS operations.
  - To get LUKS UUID for LUKS open;
  - As a library not just the plugins;
  - MDRAID code and wipefs calls in MDRAID code.
  + Use libblockdev-lvm for:
  - LV and VG operations;
  - VolumeGroupCreate() too;
  - When updating VG on Poll() call.
  + Fix:
  - bd_reinit and g_clear_error calls in btrfs, zram and bcache;
  - Docstring of 'CreateSnapshot' method in '.Filesystem.BTRFS';
  - Requires and BuildRequires for libblockdev;
  - API for BcacheCreate function.
  + Add:
  - Libblockdev MDRAID and FS plugins to BuildRequires;
  - 'options' parameter do zRAM 'Refresh' function;
  - A function for running threaded jobs synchronously;
  - A new configure option --enable-available-modules.
  + Remove unused variables in handle_mdraid_create.
  + Create Job objects for partitioning related actions.
  + Change:
  - btrfs module API to be consistent with udisks core;
  - bcache properties do CamelCase;
  - ZRAM 'CreateDevices' function to return newly created;
  - zRAM properties to CamelCase.
  + Bcache, btrfs and zRAM modules: Handle invocations in threads.
  + Do not try to set GError over the top of a previous GError.
  + zRAM: Extract used CompAlgorithm as a single value.
    ZRAMs.
  + Move new partition start if overlaps with extended partition
    metadata.
  + Do not start threaded jobs automatically
  + Require and initialize the libblockdev-lvm plugin
  + Check that blockdev/lvm.h is available if LVM2 support
    requested.
  + Also create thin pools using libblockdev-lvm.
  + Get VGs with bd_lvm_vgs() run in a thread.
  + Update information about PVs, LVs and VGs using
    libblockdev-lvm.
  + Get rid of the udisks-lvm helper program.
  + Use:
  - Info for metadata LV when updating LV which has one;
  - Systemd-defined macros in the spec file template;
  - bd_lvm_vgreduce() instead of running 'vgreduce'.
  + REMOVE-ME: use the CLI-based libblockdev-lvm plugin.
  + Make sure we have the AX_CHECK_ENABLE_DEBUG macro.
  + Also check if libblockdev supports bcache.
  + Require 'udev' not 'systemd-udev'.
- Adopt the use of %make_build and %make_install while dropping
  deprecated use of raw commands, following the best practices.
- Pass disable-static to configure as static libs are enabled by
  default. And enable-bcache, enable-btrfs, enable-lsm,
  enable-lvm2, enable-lvmcache and enable-zram to enable new
  available features.
- Add blkid, blockdev, libsystemd and mount pkgconfig modules, and
  libbd_btrfs-devel, libbd_crypto-devel, libbd_fs-devel,
  libbd_kbd-devel, libbd_loop-devel, libbd_lvm-devel,
  libbd_mdraid-devel, libbd_part-devel, libbd_swap-devel,
  libconfig-devel, libstoragemgmt-devel, lvm2-devel BuildRequires
  as new dependencies.
- Add libblockdev, libbd_crypto, libbd_fs, libbd_loop,
  libbd_mdraid, libbd_part and libbd_swap Requires as new run time
  requirements.
- Add e2fsprogs, xfsprogs, and dosfstools Requires, being the first
  needed by mkfs.ext3, mkfs.ext3 and e2label. The second, by
  mkfs.xfs and xfs_admin. And the third, by mkfs.vfat.
- Add gio-unix-2.0 and gmodule-2.0 pkgconfig BuildRequires: note
  that they was already being pulled with pkgconfig(glib-2.0) and
  used, once they live in the same devel package.
- Drop pkgconfig(udev) BuildRequires: no longer needed.
- Replace libgudev-1_0-devel and pkgconfig(systemd) BuildRequires
  by gudev-1.0 and libsystemd, respectively.
- Add LGPL-2.0+ to the preamble License tag once the preamble
  License tag is used for the source RPM and binary RPM packages.
- Correct some subpackages LGPL-2.1+ License tags to LGPL-2.0+ as
  pointed by the COPYING and source files.</changelog>
  <changelog author="jengelh@inai.de" date="1519905600">- Rectify grammar issues in summaries</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1520337600">- Fix BuildRequires/Requires tags related to libblockdev and
  libatasmart dependencies.
- Drop storaged Provides tags since there is no need for them.
- Switch libconfig-devel and libstoragemgmt-devel BuildRequires by
  their pkgconfig modules counterparts.
- Add a Recommends tag for the btrfs module to offer support for
  the openSUSE's file system of choice by default.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1522238400">- Require specific libblockdev plugins in due udisks2's modules,
  following libblockdev's plugins split (bsc#1086447).
- Drop redundant libblockdev-devel BuildRequires: it is not needed
  once its pkgconfig module is already a requirement.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1524657600">- Add missing libblockdev-loop Requires tag: it is needed by
  default.</changelog>
  <changelog author="dimstar@opensuse.org" date="1547208000">- Update to version 2.7.8:
  + Fix string format vulnerability (CVE-2018-17336)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331200">- Add explicit libblockdev-lvm-dbus-devel BuildRequires: Previously
  pulled in implicitly.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548331201">- Update to version 2.8.1:
  + Mostly bugfixes.
- Changes from version 2.8.0:
  + Introduce a new VDO module that is built on top of
    libblockdev-vdo.
  + General bugfixes.
  + Support creating LUKS 2 encrypted devices and other
    LUKS-related enhancements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1548849600">- Add libblockdev-vdo-devel BuildRequires: Build the new vdo
  module. Following this, add new vdo sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1549972800">- Add more info to description of vdo.</changelog>
  <changelog author="jengelh@inai.de" date="1550059200">- Generalize VDO description.
- Fix faulty grammar.</changelog>
  <changelog author="ro@suse.de" date="1553083200">- update to 2.8.2
  + migration from intltool to gettext, udisks no longer depends
    on gnome-common
  + added 'windows_names' as a default mount option for ntfs-3g
  + fixed an issue potentially leading to open filedescriptors
    exhaustion
- drop buildreq for intltool</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1560427200">- Update to version 2.8.3:
  + This release brings many memory leak fixes with similar work
    done in libblockdev-2.22. While libblockdev version requirement
    remains unchanged, it's strongly recommended to use both
    releases together to get full coverage of the fixes.
  + Other notable changes include:
  - Default and supported encryption types are now exposed on the
    org.freedesktop.UDisks2.Manager interface.
  - Minor org.freedesktop.UDisks2.Filesystem improvements related
    to updating properties upon method call return.
  - Various test fixes and improvements.
  - Updated translations.</changelog>
  <changelog author="thomas.blume@suse.com" date="1562673600">- don't call systemd uninstall macro for clean-mount-point@.service
  template (boo#1139996)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1573732800">- Update to version 2.8.4:
  + This udisks-2.8.4 release brings couple of bugfixes, docs and
    test fixes and translation updates. With ongoing focus on
    development towards udisks-2.9.0, this is just a small
    maintenance release.</changelog>
  <changelog author="milsav92@outlook.com" date="1599393600">- Update to version 2.9.1:
  + This is mostly a bugfix release, notable changes include:
  - active modules are now tracked in a daemon state file and
    are automatically reloaded on next startup in case of
    previous unclean daemon shutdown
  - further improvements in object property updates while
    handling method calls
  - zram module fixes:
    + compatibility improvements with existing zram generators
    and toolkits
    + the zram-setup@.service systemd unit has been renamed to
    udisks2-zram-setup@.service
    + related udev rules have been separated into
    90-udisks2-zram.rules
    + the zram.conf.d path is now configurable and defaults to
    /usr/lib/zram.conf.d
- Update to version 2.9.0:
  + This 2.9.0 release brings many changes to the daemon core,
    internal modularity and the libudisks2 library.
    No public API has been removed, there is a couple of
    deprecations however.
  + There's a major change in how and when D-Bus object properties
    are updated. As a general rule when a method call returns
    affected objects should now have their properties updated by
    that moment. This is an ongoing task and while majority of the
    daemon API has been covered, there are pending issues in some
    of the modules.
  + Configurable mount options is a new big feature for this
    release, allowing sysadmins to re-define default mount options
    for each filesystem type. Extensive documentation is available
    at http://storaged.org/doc/udisks2-api/latest/mount_options.html
  + Internal module API has been reworked, modules should now be
    enabled separately via the new EnableModule() call that also
    reports initialization failures.
    The old org.freedesktop.UDisks2.Manager.EnableModules() call
    has been deprecated.
  + Additional feature highlights:
  - building the daemon can now be disabled via configure switch,
    only libudisks2 will be built
  - removed the systemd mount cleanup service, mount state is now
    tracked separately for persistent and non-persistent mount
    points and cleanup of lingering persistent mount points is
    performed on daemon startup (e.g. on system boot)
  - new LVM-VDO integration, deprecated the standalone VDO module
  - added support for (un)locking BitLocker devices
  - libudisks2 now includes generated GDBus code for compiled-in
    modules, separate pkg-config files are provided as well</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1608379200">- Add upstream bugfix patches:
  + udisks2-Fix-memory-leaks.patch
  + udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch</changelog>
  <changelog author="dmueller@suse.com" date="1613131200">- update to 2.9.2:
  * udiskslinuxblock: Survive a missing /etc/crypttab
  * lvm2: Fix leaking BDLVMVDOPooldata
  * tests: Test modules that are actually enabled during build
  * build: Exclude VDO module from distcheck build
  * udisksfstabentry: Add udisks_fstab_entry_has_opt()
  * udiskslinuxblock: Reflect fstab "noauto" mount option in HintAuto
  * udiskslinuxblock: Update hints after fstab change
  * tests: Add tests for Block hints
  * udiskslinuxfilesystemhelpers: Make TakeOwnership() race free
  * tests: Extend filesystem test_take_ownership tests with symlinks
  * mount options: Allow 'nosymfollow' mount option for unprivileged mounts
  * udisksstate: Silence the block device busy messages on cleanup lock
  * udev: Distinguish mmcblk-class device types
  * udev: Propagate mmcblk disk attributes to mmcblk_boot devices
  * udiskslinuxdrive: Tweak the 'removable'/'ejectable' hints for mmcblk-class devices
  * udiskslinuxblock: Tweak the hints for mmcblk-class devices
  * udisksdaemonutil: Refactor udisks_daemon_util_trigger_uevent() out of UDisksLinuxBlockObject
  * udiskslinuxmanager: Trigger uevent after loop device setup
  * tests: Remove scsi_debug serial number checks
  * tests: Skip zram tests if zram module is already loaded
  * treewide: Fix typos
  * AUTHORS: Add tbzatek as the maintainer
  * tests: Do not use nilfs2 as an example of non-resizable FS
  * Memory leak fixes
  * doc: Update config file path
- drop udisks2-Fix-memory-leaks.patch, udisks2-lvm2-Fix-leaking-BDLVMVDOPooldata.patch (upstream)</changelog>
  <changelog author="thomas.blume@suse.com" date="1652097600">- CVE-2021-3802: fix insecure defaults in user-accessible mount helpers
  (bsc#1190606)
  + add 0001-mount-options-Always-use-errors-remount-ro-for-ext-f.patch</changelog>
</package>
<package pkgid="96df13de903db0aea9daddf418bdafaecd2d434e5d59455b948c9535c6c4fd10" name="libupsclient1" arch="aarch64">
  <version epoch="0" ver="2.7.4" rel="150000.6.3.1"/>
  <changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
  <changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>
  <changelog author="alarrosa@suse.com" date="1503057600">- Add use-pkg-config-gdlib.diff to fix a build failure due to the
  configure scripts using gdlib-config (which is deprecated) to
  obtain the CFLAGS/LDFLAGS/LIBS to use when building with gd. With
  the patch, nut now uses pkg-config which returns the right values</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Drop the aspell dependency, it is only used for verification
  of the mans and it is more for devs to do than during the build
  wrt fate#323578</changelog>
  <changelog author="tchvatal@suse.com" date="1506945600">- Fix rpm groups
- Reduce the supported distros by keeping sle12+ only
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241600">- Buildrequire libnsl-devel for suse_version &gt;= 1330: libnsl was
  split out of glibc and needs to be explcitly required if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241601">- BuildRequire tex(upquote.sty): Generally seen, this dependency
  is inaccurate, as our sources do not reference upquote.sty, but
  asciidoc does. Adding the dep there though makes asciidoc too
  expensive, and recommends are not interpreted when building the
  buildroot (boo#1063897).</changelog>
  <changelog author="sbrabec@suse.com" date="1512043200">- No more conflict with apcupsd (boo#1070373).
- Remove smartups references. It is dropped since 2001.</changelog>
  <changelog author="suse+build@de-korte.org" date="1512129600">- Add support for OpenSSL 1.1.0 library, allow TLSv1 and higher
  (not just TLSv1) and report TLS version used in debug mode level
  3 and higher (boo#1069988, openssl-1_1.patch)
- Fix missing pointer dereference in upssched (nut-upssched.patch)
- Support for allowfrom parameter was removed in version 2.4.0
  (nut-preconfig.patch)</changelog>
  <changelog author="suse+build@de-korte.org" date="1516536000">- Fix clash between Group and %define GROUP by renaming the latter
  to NUT_GROUP (and USER to NUT_USER)
- Replace duplicate man files by soft links</changelog>
  <changelog author="sbrabec@suse.com" date="1648728000">- Fix build within SLE15 SP4 and openSUSE Leap 15.4: BuildRequire
  many tex() packages and texlive-metafont-bin. Generally seen,
  this dependency is inaccurate, as our sources do not reference
  them but asciidoc does. Adding the dep there though makes
  asciidoc too expensive, and recommends are not interpreted when
  building the buildroot (bsc#1197789).</changelog>
</package>
<package pkgid="11a7c6e7fc93e44e431b65efdfae25ec0fb5974809c752026b757caa3b028bce" name="libupsclient1" arch="ppc64le">
  <version epoch="0" ver="2.7.4" rel="150000.6.3.1"/>
  <changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
  <changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>
  <changelog author="alarrosa@suse.com" date="1503057600">- Add use-pkg-config-gdlib.diff to fix a build failure due to the
  configure scripts using gdlib-config (which is deprecated) to
  obtain the CFLAGS/LDFLAGS/LIBS to use when building with gd. With
  the patch, nut now uses pkg-config which returns the right values</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Drop the aspell dependency, it is only used for verification
  of the mans and it is more for devs to do than during the build
  wrt fate#323578</changelog>
  <changelog author="tchvatal@suse.com" date="1506945600">- Fix rpm groups
- Reduce the supported distros by keeping sle12+ only
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241600">- Buildrequire libnsl-devel for suse_version &gt;= 1330: libnsl was
  split out of glibc and needs to be explcitly required if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241601">- BuildRequire tex(upquote.sty): Generally seen, this dependency
  is inaccurate, as our sources do not reference upquote.sty, but
  asciidoc does. Adding the dep there though makes asciidoc too
  expensive, and recommends are not interpreted when building the
  buildroot (boo#1063897).</changelog>
  <changelog author="sbrabec@suse.com" date="1512043200">- No more conflict with apcupsd (boo#1070373).
- Remove smartups references. It is dropped since 2001.</changelog>
  <changelog author="suse+build@de-korte.org" date="1512129600">- Add support for OpenSSL 1.1.0 library, allow TLSv1 and higher
  (not just TLSv1) and report TLS version used in debug mode level
  3 and higher (boo#1069988, openssl-1_1.patch)
- Fix missing pointer dereference in upssched (nut-upssched.patch)
- Support for allowfrom parameter was removed in version 2.4.0
  (nut-preconfig.patch)</changelog>
  <changelog author="suse+build@de-korte.org" date="1516536000">- Fix clash between Group and %define GROUP by renaming the latter
  to NUT_GROUP (and USER to NUT_USER)
- Replace duplicate man files by soft links</changelog>
  <changelog author="sbrabec@suse.com" date="1648728000">- Fix build within SLE15 SP4 and openSUSE Leap 15.4: BuildRequire
  many tex() packages and texlive-metafont-bin. Generally seen,
  this dependency is inaccurate, as our sources do not reference
  them but asciidoc does. Adding the dep there though makes
  asciidoc too expensive, and recommends are not interpreted when
  building the buildroot (bsc#1197789).</changelog>
</package>
<package pkgid="299f868aa665073125e92cd13e3c529684e2b4e44f7dc121439adb48fec1760e" name="libupsclient1" arch="s390x">
  <version epoch="0" ver="2.7.4" rel="150000.6.3.1"/>
  <changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
  <changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>
  <changelog author="alarrosa@suse.com" date="1503057600">- Add use-pkg-config-gdlib.diff to fix a build failure due to the
  configure scripts using gdlib-config (which is deprecated) to
  obtain the CFLAGS/LDFLAGS/LIBS to use when building with gd. With
  the patch, nut now uses pkg-config which returns the right values</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Drop the aspell dependency, it is only used for verification
  of the mans and it is more for devs to do than during the build
  wrt fate#323578</changelog>
  <changelog author="tchvatal@suse.com" date="1506945600">- Fix rpm groups
- Reduce the supported distros by keeping sle12+ only
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241600">- Buildrequire libnsl-devel for suse_version &gt;= 1330: libnsl was
  split out of glibc and needs to be explcitly required if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241601">- BuildRequire tex(upquote.sty): Generally seen, this dependency
  is inaccurate, as our sources do not reference upquote.sty, but
  asciidoc does. Adding the dep there though makes asciidoc too
  expensive, and recommends are not interpreted when building the
  buildroot (boo#1063897).</changelog>
  <changelog author="sbrabec@suse.com" date="1512043200">- No more conflict with apcupsd (boo#1070373).
- Remove smartups references. It is dropped since 2001.</changelog>
  <changelog author="suse+build@de-korte.org" date="1512129600">- Add support for OpenSSL 1.1.0 library, allow TLSv1 and higher
  (not just TLSv1) and report TLS version used in debug mode level
  3 and higher (boo#1069988, openssl-1_1.patch)
- Fix missing pointer dereference in upssched (nut-upssched.patch)
- Support for allowfrom parameter was removed in version 2.4.0
  (nut-preconfig.patch)</changelog>
  <changelog author="suse+build@de-korte.org" date="1516536000">- Fix clash between Group and %define GROUP by renaming the latter
  to NUT_GROUP (and USER to NUT_USER)
- Replace duplicate man files by soft links</changelog>
  <changelog author="sbrabec@suse.com" date="1648728000">- Fix build within SLE15 SP4 and openSUSE Leap 15.4: BuildRequire
  many tex() packages and texlive-metafont-bin. Generally seen,
  this dependency is inaccurate, as our sources do not reference
  them but asciidoc does. Adding the dep there though makes
  asciidoc too expensive, and recommends are not interpreted when
  building the buildroot (bsc#1197789).</changelog>
</package>
<package pkgid="491233c7d36952a495b2987b060815cb40a9be7acab91d88bd8acd966b713740" name="libupsclient1" arch="x86_64">
  <version epoch="0" ver="2.7.4" rel="150000.6.3.1"/>
  <changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
  <changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>
  <changelog author="alarrosa@suse.com" date="1503057600">- Add use-pkg-config-gdlib.diff to fix a build failure due to the
  configure scripts using gdlib-config (which is deprecated) to
  obtain the CFLAGS/LDFLAGS/LIBS to use when building with gd. With
  the patch, nut now uses pkg-config which returns the right values</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Drop the aspell dependency, it is only used for verification
  of the mans and it is more for devs to do than during the build
  wrt fate#323578</changelog>
  <changelog author="tchvatal@suse.com" date="1506945600">- Fix rpm groups
- Reduce the supported distros by keeping sle12+ only
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241600">- Buildrequire libnsl-devel for suse_version &gt;= 1330: libnsl was
  split out of glibc and needs to be explcitly required if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241601">- BuildRequire tex(upquote.sty): Generally seen, this dependency
  is inaccurate, as our sources do not reference upquote.sty, but
  asciidoc does. Adding the dep there though makes asciidoc too
  expensive, and recommends are not interpreted when building the
  buildroot (boo#1063897).</changelog>
  <changelog author="sbrabec@suse.com" date="1512043200">- No more conflict with apcupsd (boo#1070373).
- Remove smartups references. It is dropped since 2001.</changelog>
  <changelog author="suse+build@de-korte.org" date="1512129600">- Add support for OpenSSL 1.1.0 library, allow TLSv1 and higher
  (not just TLSv1) and report TLS version used in debug mode level
  3 and higher (boo#1069988, openssl-1_1.patch)
- Fix missing pointer dereference in upssched (nut-upssched.patch)
- Support for allowfrom parameter was removed in version 2.4.0
  (nut-preconfig.patch)</changelog>
  <changelog author="suse+build@de-korte.org" date="1516536000">- Fix clash between Group and %define GROUP by renaming the latter
  to NUT_GROUP (and USER to NUT_USER)
- Replace duplicate man files by soft links</changelog>
  <changelog author="sbrabec@suse.com" date="1648728000">- Fix build within SLE15 SP4 and openSUSE Leap 15.4: BuildRequire
  many tex() packages and texlive-metafont-bin. Generally seen,
  this dependency is inaccurate, as our sources do not reference
  them but asciidoc does. Adding the dep there though makes
  asciidoc too expensive, and recommends are not interpreted when
  building the buildroot (bsc#1197789).</changelog>
</package>
<package pkgid="b389f91ba192858c3542d104515ee47af27a597ce8f7514e12b86e5fd1e776b5" name="libv4l" arch="aarch64">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="c0895341ccbcfd39b531af1088cbbdd94c78aa00b46ffeab88f8bf0addef0f69" name="libv4l" arch="ppc64le">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="4fbb0225227f780bef68fcb49c23b8405f7651d113cc175dfc139347f461bf7e" name="libv4l" arch="s390x">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="62e89885b87693e176fc145a6316118f821fbf65e8c7179b375b98a1922378be" name="libv4l" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="14db5c6a110ae4a1edfb8a7b770b6cbe215b8f6b7f2730afa0c2d630af0d68d8" name="libv4l-32bit" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="3155e75acac054da1effb5d4ede4b38ac686abc18e6020c6d3a83e1c8294bb9b" name="libv4l-devel" arch="aarch64">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="9638fe463dbe7385276ffa727801481770abf731c28b3ebef3802b2765078507" name="libv4l-devel" arch="ppc64le">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="553ac792dec45fcb9560545febba6c72befe36006599468d40f8d2e2657e3d9b" name="libv4l-devel" arch="s390x">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="86464316abf7615d7c21e355d0f8d320053ab6c7596c8ff916a5a5152ea12f89" name="libv4l-devel" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="7998e8f5b22a229fa34514ecf33591fc05ab6e248bedf488b22a30bd98777158" name="libv4l-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="a7d741bf5a6ced216765c7cb45f609d09cc81daf13d71079cb16e38e0f603c90" name="libv4l1-0" arch="aarch64">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="f0d51336fba40a0931ab832667fb505bb8c67acac72f6cf51bb039230d0dacac" name="libv4l1-0" arch="ppc64le">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="8370677f2547cd5c20aeeda8774be15d33bd0878012f2c579fb4fdf13790ffec" name="libv4l1-0" arch="s390x">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="41f691745075b3a3a17dee31afab18f065712cba988252b8d6b3b6f5011000af" name="libv4l1-0" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="31af7bb34cbc923cdbf40f6f1f4edae1b02602d599f59975981f4d612ae880e0" name="libv4l1-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="ee7502d545f8a88169fc1dafcdf65f3dca48c5056368ea868e38ef61ced8bf8e" name="libv4l2-0" arch="aarch64">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="956d7702038316f062b1361ea3639c53b576978d32fc23d881332406ff5a6862" name="libv4l2-0" arch="ppc64le">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="1c7d0d25c1ad07d83f9f0a92545ebce102505c5f98d8f57d7f8398b51d40fe0c" name="libv4l2-0" arch="s390x">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="8f6929862d4033952c604ad0e8a26ce7d863890e95cc7e9bd958b1612684a3a5" name="libv4l2-0" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="a7995f5c88a3e9424386ea9b1270d23d6ac4ec3419dd41894e41cb23c0b4dd78" name="libv4l2-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="e1a44b644e5f78b9613b31d0f996d77c07c83a4499a85186e2c9db86eb3b6578" name="libv4l2rds0" arch="aarch64">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="c5986c4a2017abd93b5485e3065e322f16ebee31477f689b53896f7552c6776b" name="libv4l2rds0" arch="ppc64le">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="f51e32cf2ce835b762af0bf37454f761d70bb706cfd6ccb9d4898f9a78f3c257" name="libv4l2rds0" arch="s390x">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="39e383f896a6179ddc4386582f308d58dd6aeedad725f6d4b46778ac21f05933" name="libv4l2rds0" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="f4956aad7bb21729beb86ece7d03df819438ec9f5c058c49a69e8f79a9a9a6d1" name="libv4l2rds0-32bit" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="354b3ddee81fb0f06d5871142591445817bab91201dbf145e0fa851b256d5c45" name="libv4lconvert0" arch="aarch64">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="84fc3decbb653dd8eff8282151ef4e3ce501aed16f19160d5f9f05142235e0d4" name="libv4lconvert0" arch="ppc64le">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="00a9b0ff51bd5b0c685d81361db45e309a3cc0a3d6b3ec14fab7bb6efe0c0964" name="libv4lconvert0" arch="s390x">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="db90df283daaa7560395ea29f9f887c39fd14e131ad79839007e6c4af60df6c8" name="libv4lconvert0" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="b70ca9e8b06cc91c444f7554f1521c291e477880230bb424463c4346152655bb" name="libv4lconvert0-32bit" arch="x86_64">
  <version epoch="0" ver="1.14.1" rel="150000.3.3.1"/>
  <changelog author="asterios.dramis@gmail.com" date="1422792000">- Update to version 1.6.2:
  * Lots of changes: See ChangeLog for details.
- Added doxygen build requirement.
- Added new subpackages dvb-utils (split from v4l-utils), libdvbv5 and
  libdvbv5-devel.</changelog>
  <changelog author="tchvatal@suse.com" date="1426248000">- Cleanup few conditions for better readability</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1441972800">- Update to version 1.6.3:
  * v4lconvert: Add ASUS A7Sn to upside down table
  * v4lconvert: Add ASUS A6R to upside down table
  * Synchronize with the Kernel
  * vivid-tpg.h.patch: update to match current upstream tree
  * sync-with-kernel: add include/linux/media.h
  * configure.ac: fix qv4l2 if QGLFunctions doesn't exist
  * libv4lconvert: Fix support for Y16 pixel format</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- Add -devel pkg to baselibs to build Wine on 64bit only distros</changelog>
  <changelog author="mpluskal@suse.com" date="1443182400">- Add gpg signature
- Switch to qt5 on recent releases
- Split language packages
- Update to 1.8.0
  * See ChangeLog for full list of changes</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 1.8.1:
  * See changelog file for in-depth decription of the fixes</changelog>
  <changelog author="schwab@suse.de" date="1462968000">- Don't build qv4l2 on arm</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1465646400">- Update to version 1.10.0:
  * Lots of changes: See ChangeLog for details.</changelog>
  <changelog author="tchvatal@suse.com" date="1465732800">- Run over with spec-cleaner</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1470225600">- Update to version 1.10.1:
  * libdvbv5: Fix decsriptors typo
  * libv4lconvert: Exclude memsrc implementation for libjpeg-turbo
  * v4lconvert: Add "PEGATRON CORPORATION" to asus_board_vendor
- Replaced libqt5-qtbase-devel build requirement with
  pkgconfig(Qt5Core), pkgconfig(Qt5Gui), pkgconfig(Qt5OpenGL) and
  pkgconfig(Qt5Widgets).</changelog>
  <changelog author="mpluskal@suse.com" date="1487073600">- Update to version 1.12.2:
  * libdvbv5: Link against libudev
  * buildsystem: Add all files to dist target
  * v4l2-ctl: Fix unneeded dot in "no hsync lock"
  * man: Fix typos in dvbv5-scan dvbv5-zap pages
  * libdvbv5: Improve vdr format output for DVB-T(2)
  * dvb-fe-tool: add an option to set maximum number of stat samples
  * libdvbv5: Fix dvb-format-convert segfault
  * ir-ctl: `strndupa' undefined with --disable-nls
- Some packaging cleanup
- Recommend dtv-scan-tables-v5 by dvb-utils</changelog>
  <changelog author="mpluskal@suse.com" date="1491307200">- Update to version 1.12.3:
  * dvb-sat: fix rangeswitch logic
  * dvb-sat: add verbose options for LNBf settings
  * dvb-sat: add support for Invacom QPH-031 LNBf
  * pt_BR: update translation file to reflect latest changes</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1499428800">- Update to version 1.12.5:
  * dvb-scan: fix the logic for multi-section handling
  From version 1.12.4:
  * libdvbv5: T2 delivery descriptor: fix wrong size of bandwidth
    field
  * desc_t2_delivery: consider valid to have a short T2 descriptor
  * desc_t2_delivery: properly handle cell and subcell tables
  * desc_t2_delivery: improve print dumps of T2 delivery
  * desc_t2_delivery: resize frequency array for subcel freqs
  * libdvbv5: add support for more PMT descriptors
  * libdvbv5: fix T2 delivery descriptor parsing in
    dvb_desc_t2_delivery_init()</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1517918400">- Update to version 1.14.1:
  * Lot of changes, see ChangeLog for details.</changelog>
  <changelog author="pgajdos@suse.com" date="1649160000">- fix build for 15sp4 at least [bsc#1197861]
- added patches
  49cfdcff9
  + v4l-utils-include-sysmacros.h-minor.patch</changelog>
</package>
<package pkgid="2a25aa01e4bf3298bf9d467191fbc5631ff457ef163f9c2915131ca4edfc66ec" name="libvirt" arch="src">
  <version epoch="0" ver="7.1.0" rel="150300.6.29.1"/>
  <changelog author="jfehlig@suse.com" date="1625659200">- virtlockd: Don't report error if lockspace exists
  de1e0ae0-lockd-no-error-if-lockspace.patch
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1627387200">- spec: Don't forcibly remove '--listen' arg from
  /etc/sysconfig/libvirtd. Add '--timeout 120' if '--listen' is
  not specified.
  bsc#1188232</changelog>
  <changelog author="jfehlig@suse.com" date="1627560000">- storage_driver: Unlock object on ACL fail in storagePoolLookupByTargetPath
  CVE-2021-3667
  447f69de-CVE-2021-3667.patch
  bsc#1188843</changelog>
  <changelog author="jfehlig@suse.com" date="1628683200">- supportconfig: When checking for installed hypervisor drivers,
  use the libvirtr-daemon-driver-&lt;hypervisor&gt; package instead of
  libvirt-daemon-&lt;hypervisor&gt;. The latter are not required packages
  for a functioning hypervisor driver.</changelog>
  <changelog author="jfehlig@suse.com" date="1630324800">- qemu: Set label on vhostuser net device when hotplugging
  2e8ebfe3-label-vhostuser-port.patch
  bsc#1186398</changelog>
  <changelog author="jfehlig@suse.com" date="1631620800">- libxl: Improve reporting of die_id in capabilities
  b75a16ae-libxl-improve-die-id.patch
  boo#1190493
- libxl: Fix driver reload
  65fab900-libxl-fix-driver-reload.patch,
  51eb680b-libxl-dont-autostart-on-reload.patch
  bsc#1190420</changelog>
  <changelog author="jfehlig@suse.com" date="1632398400">- spec: Fix hangs during package update
  bsc#1177902, bsc#1190693
- spec: Don't add --timeout arg to /etc/sysconfig/libvirtd when
  running in traditional mode without socket activation
  bsc#1190695</changelog>
  <changelog author="jfehlig@suse.com" date="1634299200">- qemu: Do not report eof when processing monitor IO
  2703b0b5-qemu-dont-report-eof.patch
  bsc#1190917</changelog>
  <changelog author="jfehlig@suse.com" date="1634558400">- supportconfig: Use systemctl command 'is-active' instead of
  'is-enabled' when checking if libvirtd is active</changelog>
  <changelog author="jfehlig@suse.com" date="1634731200">- lxc: controller: Fix container launch on cgroup v1
  1b9ce05c-lxc-fix-cgroupV1.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1635249600">- Add upstream debug patch to the libxl driver to aid in future
  debugging
  27e1779f-libxl-debug.patch
- Include collection of active VM config files in the
  supportconfig plugin</changelog>
  <changelog author="jfehlig@suse.com" date="1638532800">- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults
  23b51d7b-libxl-disable-death-event.patch,
  a4e6fba0-libxl-rename-threadinfo-struct.patch,
  e4f7589a-libxl-shutdown-thread-name.patch,
  b9a5faea-libxl-handle-death-thread.patch,
  5c5df531-libxl-search-domid-in-thread.patch,
  a7a03324-libxl-protect-logger-access.patch
  bsc#1191668, bsc#1192017, bsc#1193981, bsc#1194041</changelog>
  <changelog author="jfehlig@suse.com" date="1639483200">- apparmor: Allow new capabilities required by libvirtd
  4f2811eb-apparmor-new-libvirtd-caps.patch
  bsc#1193719</changelog>
  <changelog author="jfehlig@suse.com" date="1639483201">- libxl: Implement domainGetMessages API
  cbae4eaa-libxl-add-domainGetMessages.patch
  bsc#1193623</changelog>
  <changelog author="jfehlig@suse.com" date="1643025600">- spec: Weaken apparmor-abstractions dependency to Recommends
  bsc#1192119, jsc#SLE-23394</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1646308800">- qemu: Directly query KVM for TSC scaling support
  5df2c492-use-kvm-for-tsc-scaling.patch
  bsc#1193364</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
</package>
<package pkgid="85e5b60135d7d9a1c7cc311918fdc36f1d2371ffb2bca0bb60232eb2d9fe5c5d" name="libvirt-admin" arch="aarch64">
  <version epoch="0" ver="7.1.0" rel="150300.6.29.1"/>
  <changelog author="jfehlig@suse.com" date="1625659200">- virtlockd: Don't report error if lockspace exists
  de1e0ae0-lockd-no-error-if-lockspace.patch
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1627387200">- spec: Don't forcibly remove '--listen' arg from
  /etc/sysconfig/libvirtd. Add '--timeout 120' if '--listen' is
  not specified.
  bsc#1188232</changelog>
  <changelog author="jfehlig@suse.com" date="1627560000">- storage_driver: Unlock object on ACL fail in storagePoolLookupByTargetPath
  CVE-2021-3667
  447f69de-CVE-2021-3667.patch
  bsc#1188843</changelog>
  <changelog author="jfehlig@suse.com" date="1628683200">- supportconfig: When checking for installed hypervisor drivers,
  use the libvirtr-daemon-driver-&lt;hypervisor&gt; package instead of
  libvirt-daemon-&lt;hypervisor&gt;. The latter are not required packages
  for a functioning hypervisor driver.</changelog>
  <changelog author="jfehlig@suse.com" date="1630324800">- qemu: Set label on vhostuser net device when hotplugging
  2e8ebfe3-label-vhostuser-port.patch
  bsc#1186398</changelog>
  <changelog author="jfehlig@suse.com" date="1631620800">- libxl: Improve reporting of die_id in capabilities
  b75a16ae-libxl-improve-die-id.patch
  boo#1190493
- libxl: Fix driver reload
  65fab900-libxl-fix-driver-reload.patch,
  51eb680b-libxl-dont-autostart-on-reload.patch
  bsc#1190420</changelog>
  <changelog author="jfehlig@suse.com" date="1632398400">- spec: Fix hangs during package update
  bsc#1177902, bsc#1190693
- spec: Don't add --timeout arg to /etc/sysconfig/libvirtd when
  running in traditional mode without socket activation
  bsc#1190695</changelog>
  <changelog author="jfehlig@suse.com" date="1634299200">- qemu: Do not report eof when processing monitor IO
  2703b0b5-qemu-dont-report-eof.patch
  bsc#1190917</changelog>
  <changelog author="jfehlig@suse.com" date="1634558400">- supportconfig: Use systemctl command 'is-active' instead of
  'is-enabled' when checking if libvirtd is active</changelog>
  <changelog author="jfehlig@suse.com" date="1634731200">- lxc: controller: Fix container launch on cgroup v1
  1b9ce05c-lxc-fix-cgroupV1.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1635249600">- Add upstream debug patch to the libxl driver to aid in future
  debugging
  27e1779f-libxl-debug.patch
- Include collection of active VM config files in the
  supportconfig plugin</changelog>
  <changelog author="jfehlig@suse.com" date="1638532800">- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults
  23b51d7b-libxl-disable-death-event.patch,
  a4e6fba0-libxl-rename-threadinfo-struct.patch,
  e4f7589a-libxl-shutdown-thread-name.patch,
  b9a5faea-libxl-handle-death-thread.patch,
  5c5df531-libxl-search-domid-in-thread.patch,
  a7a03324-libxl-protect-logger-access.patch
  bsc#1191668, bsc#1192017, bsc#1193981, bsc#1194041</changelog>
  <changelog author="jfehlig@suse.com" date="1639483200">- apparmor: Allow new capabilities required by libvirtd
  4f2811eb-apparmor-new-libvirtd-caps.patch
  bsc#1193719</changelog>
  <changelog author="jfehlig@suse.com" date="1639483201">- libxl: Implement domainGetMessages API
  cbae4eaa-libxl-add-domainGetMessages.patch
  bsc#1193623</changelog>
  <changelog author="jfehlig@suse.com" date="1643025600">- spec: Weaken apparmor-abstractions dependency to Recommends
  bsc#1192119, jsc#SLE-23394</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1646308800">- qemu: Directly query KVM for TSC scaling support
  5df2c492-use-kvm-for-tsc-scaling.patch
  bsc#1193364</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
</package>
<package pkgid="b6ce598637d7535640fb4da78f7c97b7431355a107ef193d0cca69c0676a3253" name="libvirt-admin" arch="ppc64le">
  <version epoch="0" ver="7.1.0" rel="150300.6.29.1"/>
  <changelog author="jfehlig@suse.com" date="1625659200">- virtlockd: Don't report error if lockspace exists
  de1e0ae0-lockd-no-error-if-lockspace.patch
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1627387200">- spec: Don't forcibly remove '--listen' arg from
  /etc/sysconfig/libvirtd. Add '--timeout 120' if '--listen' is
  not specified.
  bsc#1188232</changelog>
  <changelog author="jfehlig@suse.com" date="1627560000">- storage_driver: Unlock object on ACL fail in storagePoolLookupByTargetPath
  CVE-2021-3667
  447f69de-CVE-2021-3667.patch
  bsc#1188843</changelog>
  <changelog author="jfehlig@suse.com" date="1628683200">- supportconfig: When checking for installed hypervisor drivers,
  use the libvirtr-daemon-driver-&lt;hypervisor&gt; package instead of
  libvirt-daemon-&lt;hypervisor&gt;. The latter are not required packages
  for a functioning hypervisor driver.</changelog>
  <changelog author="jfehlig@suse.com" date="1630324800">- qemu: Set label on vhostuser net device when hotplugging
  2e8ebfe3-label-vhostuser-port.patch
  bsc#1186398</changelog>
  <changelog author="jfehlig@suse.com" date="1631620800">- libxl: Improve reporting of die_id in capabilities
  b75a16ae-libxl-improve-die-id.patch
  boo#1190493
- libxl: Fix driver reload
  65fab900-libxl-fix-driver-reload.patch,
  51eb680b-libxl-dont-autostart-on-reload.patch
  bsc#1190420</changelog>
  <changelog author="jfehlig@suse.com" date="1632398400">- spec: Fix hangs during package update
  bsc#1177902, bsc#1190693
- spec: Don't add --timeout arg to /etc/sysconfig/libvirtd when
  running in traditional mode without socket activation
  bsc#1190695</changelog>
  <changelog author="jfehlig@suse.com" date="1634299200">- qemu: Do not report eof when processing monitor IO
  2703b0b5-qemu-dont-report-eof.patch
  bsc#1190917</changelog>
  <changelog author="jfehlig@suse.com" date="1634558400">- supportconfig: Use systemctl command 'is-active' instead of
  'is-enabled' when checking if libvirtd is active</changelog>
  <changelog author="jfehlig@suse.com" date="1634731200">- lxc: controller: Fix container launch on cgroup v1
  1b9ce05c-lxc-fix-cgroupV1.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1635249600">- Add upstream debug patch to the libxl driver to aid in future
  debugging
  27e1779f-libxl-debug.patch
- Include collection of active VM config files in the
  supportconfig plugin</changelog>
  <changelog author="jfehlig@suse.com" date="1638532800">- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults
  23b51d7b-libxl-disable-death-event.patch,
  a4e6fba0-libxl-rename-threadinfo-struct.patch,
  e4f7589a-libxl-shutdown-thread-name.patch,
  b9a5faea-libxl-handle-death-thread.patch,
  5c5df531-libxl-search-domid-in-thread.patch,
  a7a03324-libxl-protect-logger-access.patch
  bsc#1191668, bsc#1192017, bsc#1193981, bsc#1194041</changelog>
  <changelog author="jfehlig@suse.com" date="1639483200">- apparmor: Allow new capabilities required by libvirtd
  4f2811eb-apparmor-new-libvirtd-caps.patch
  bsc#1193719</changelog>
  <changelog author="jfehlig@suse.com" date="1639483201">- libxl: Implement domainGetMessages API
  cbae4eaa-libxl-add-domainGetMessages.patch
  bsc#1193623</changelog>
  <changelog author="jfehlig@suse.com" date="1643025600">- spec: Weaken apparmor-abstractions dependency to Recommends
  bsc#1192119, jsc#SLE-23394</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1646308800">- qemu: Directly query KVM for TSC scaling support
  5df2c492-use-kvm-for-tsc-scaling.patch
  bsc#1193364</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
</package>
<package pkgid="9a3d421262446a48f7c4ceb4bdcf2e9bc4635a9d301e8fad68a76fde65973604" name="libvirt-admin" arch="s390x">
  <version epoch="0" ver="7.1.0" rel="150300.6.29.1"/>
  <changelog author="jfehlig@suse.com" date="1625659200">- virtlockd: Don't report error if lockspace exists
  de1e0ae0-lockd-no-error-if-lockspace.patch
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1627387200">- spec: Don't forcibly remove '--listen' arg from
  /etc/sysconfig/libvirtd. Add '--timeout 120' if '--listen' is
  not specified.
  bsc#1188232</changelog>
  <changelog author="jfehlig@suse.com" date="1627560000">- storage_driver: Unlock object on ACL fail in storagePoolLookupByTargetPath
  CVE-2021-3667
  447f69de-CVE-2021-3667.patch
  bsc#1188843</changelog>
  <changelog author="jfehlig@suse.com" date="1628683200">- supportconfig: When checking for installed hypervisor drivers,
  use the libvirtr-daemon-driver-&lt;hypervisor&gt; package instead of
  libvirt-daemon-&lt;hypervisor&gt;. The latter are not required packages
  for a functioning hypervisor driver.</changelog>
  <changelog author="jfehlig@suse.com" date="1630324800">- qemu: Set label on vhostuser net device when hotplugging
  2e8ebfe3-label-vhostuser-port.patch
  bsc#1186398</changelog>
  <changelog author="jfehlig@suse.com" date="1631620800">- libxl: Improve reporting of die_id in capabilities
  b75a16ae-libxl-improve-die-id.patch
  boo#1190493
- libxl: Fix driver reload
  65fab900-libxl-fix-driver-reload.patch,
  51eb680b-libxl-dont-autostart-on-reload.patch
  bsc#1190420</changelog>
  <changelog author="jfehlig@suse.com" date="1632398400">- spec: Fix hangs during package update
  bsc#1177902, bsc#1190693
- spec: Don't add --timeout arg to /etc/sysconfig/libvirtd when
  running in traditional mode without socket activation
  bsc#1190695</changelog>
  <changelog author="jfehlig@suse.com" date="1634299200">- qemu: Do not report eof when processing monitor IO
  2703b0b5-qemu-dont-report-eof.patch
  bsc#1190917</changelog>
  <changelog author="jfehlig@suse.com" date="1634558400">- supportconfig: Use systemctl command 'is-active' instead of
  'is-enabled' when checking if libvirtd is active</changelog>
  <changelog author="jfehlig@suse.com" date="1634731200">- lxc: controller: Fix container launch on cgroup v1
  1b9ce05c-lxc-fix-cgroupV1.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1635249600">- Add upstream debug patch to the libxl driver to aid in future
  debugging
  27e1779f-libxl-debug.patch
- Include collection of active VM config files in the
  supportconfig plugin</changelog>
  <changelog author="jfehlig@suse.com" date="1638532800">- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults
  23b51d7b-libxl-disable-death-event.patch,
  a4e6fba0-libxl-rename-threadinfo-struct.patch,
  e4f7589a-libxl-shutdown-thread-name.patch,
  b9a5faea-libxl-handle-death-thread.patch,
  5c5df531-libxl-search-domid-in-thread.patch,
  a7a03324-libxl-protect-logger-access.patch
  bsc#1191668, bsc#1192017, bsc#1193981, bsc#1194041</changelog>
  <changelog author="jfehlig@suse.com" date="1639483200">- apparmor: Allow new capabilities required by libvirtd
  4f2811eb-apparmor-new-libvirtd-caps.patch
  bsc#1193719</changelog>
  <changelog author="jfehlig@suse.com" date="1639483201">- libxl: Implement domainGetMessages API
  cbae4eaa-libxl-add-domainGetMessages.patch
  bsc#1193623</changelog>
  <changelog author="jfehlig@suse.com" date="1643025600">- spec: Weaken apparmor-abstractions dependency to Recommends
  bsc#1192119, jsc#SLE-23394</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1646308800">- qemu: Directly query KVM for TSC scaling support
  5df2c492-use-kvm-for-tsc-scaling.patch
  bsc#1193364</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
</package>
<package pkgid="b66afee4133437e26a8e9773bbe81a5f5d44895a2d177cdbf3948d149e6c2aad" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="7.1.0" rel="150300.6.29.1"/>
  <changelog author="jfehlig@suse.com" date="1625659200">- virtlockd: Don't report error if lockspace exists
  de1e0ae0-lockd-no-error-if-lockspace.patch
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1627387200">- spec: Don't forcibly remove '--listen' arg from
  /etc/sysconfig/libvirtd. Add '--timeout 120' if '--listen' is
  not specified.
  bsc#1188232</changelog>
  <changelog author="jfehlig@suse.com" date="1627560000">- storage_driver: Unlock object on ACL fail in storagePoolLookupByTargetPath
  CVE-2021-3667
  447f69de-CVE-2021-3667.patch
  bsc#1188843</changelog>
  <changelog author="jfehlig@suse.com" date="1628683200">- supportconfig: When checking for installed hypervisor drivers,
  use the libvirtr-daemon-driver-&lt;hypervisor&gt; package instead of
  libvirt-daemon-&lt;hypervisor&gt;. The latter are not required packages
  for a functioning hypervisor driver.</changelog>
  <changelog author="jfehlig@suse.com" date="1630324800">- qemu: Set label on vhostuser net device when hotplugging
  2e8ebfe3-label-vhostuser-port.patch
  bsc#1186398</changelog>
  <changelog author="jfehlig@suse.com" date="1631620800">- libxl: Improve reporting of die_id in capabilities
  b75a16ae-libxl-improve-die-id.patch
  boo#1190493
- libxl: Fix driver reload
  65fab900-libxl-fix-driver-reload.patch,
  51eb680b-libxl-dont-autostart-on-reload.patch
  bsc#1190420</changelog>
  <changelog author="jfehlig@suse.com" date="1632398400">- spec: Fix hangs during package update
  bsc#1177902, bsc#1190693
- spec: Don't add --timeout arg to /etc/sysconfig/libvirtd when
  running in traditional mode without socket activation
  bsc#1190695</changelog>
  <changelog author="jfehlig@suse.com" date="1634299200">- qemu: Do not report eof when processing monitor IO
  2703b0b5-qemu-dont-report-eof.patch
  bsc#1190917</changelog>
  <changelog author="jfehlig@suse.com" date="1634558400">- supportconfig: Use systemctl command 'is-active' instead of
  'is-enabled' when checking if libvirtd is active</changelog>
  <changelog author="jfehlig@suse.com" date="1634731200">- lxc: controller: Fix container launch on cgroup v1
  1b9ce05c-lxc-fix-cgroupV1.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1635249600">- Add upstream debug patch to the libxl driver to aid in future
  debugging
  27e1779f-libxl-debug.patch
- Include collection of active VM config files in the
  supportconfig plugin</changelog>
  <changelog author="jfehlig@suse.com" date="1638532800">- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults
  23b51d7b-libxl-disable-death-event.patch,
  a4e6fba0-libxl-rename-threadinfo-struct.patch,
  e4f7589a-libxl-shutdown-thread-name.patch,
  b9a5faea-libxl-handle-death-thread.patch,
  5c5df531-libxl-search-domid-in-thread.patch,
  a7a03324-libxl-protect-logger-access.patch
  bsc#1191668, bsc#1192017, bsc#1193981, bsc#1194041</changelog>
  <changelog author="jfehlig@suse.com" date="1639483200">- apparmor: Allow new capabilities required by libvirtd
  4f2811eb-apparmor-new-libvirtd-caps.patch
  bsc#1193719</changelog>
  <changelog author="jfehlig@suse.com" date="1639483201">- libxl: Implement domainGetMessages API
  cbae4eaa-libxl-add-domainGetMessages.patch
  bsc#1193623</changelog>
  <changelog author="jfehlig@suse.com" date="1643025600">- spec: Weaken apparmor-abstractions dependency to Recommends
  bsc#1192119, jsc#SLE-23394</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1646308800">- qemu: Directly query KVM for TSC scaling support
  5df2c492-use-kvm-for-tsc-scaling.patch
  bsc#1193364</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
</package>
<package pkgid="570276d0dd8deaa3ad3e4bc728cee1dc6a470fb5a8c790ddaf86294562ab273e" name="libvirt-bash-completion" arch="noarch">
  <version epoch="0" ver="7.1.0" rel="150300.6.29.1"/>
  <changelog author="jfehlig@suse.com" date="1625659200">- virtlockd: Don't report error if lockspace exists
  de1e0ae0-lockd-no-error-if-lockspace.patch
  bsc#1184253</changelog>
  <changelog author="jfehlig@suse.com" date="1627387200">- spec: Don't forcibly remove '--listen' arg from
  /etc/sysconfig/libvirtd. Add '--timeout 120' if '--listen' is
  not specified.
  bsc#1188232</changelog>
  <changelog author="jfehlig@suse.com" date="1627560000">- storage_driver: Unlock object on ACL fail in storagePoolLookupByTargetPath
  CVE-2021-3667
  447f69de-CVE-2021-3667.patch
  bsc#1188843</changelog>
  <changelog author="jfehlig@suse.com" date="1628683200">- supportconfig: When checking for installed hypervisor drivers,
  use the libvirtr-daemon-driver-&lt;hypervisor&gt; package instead of
  libvirt-daemon-&lt;hypervisor&gt;. The latter are not required packages
  for a functioning hypervisor driver.</changelog>
  <changelog author="jfehlig@suse.com" date="1630324800">- qemu: Set label on vhostuser net device when hotplugging
  2e8ebfe3-label-vhostuser-port.patch
  bsc#1186398</changelog>
  <changelog author="jfehlig@suse.com" date="1631620800">- libxl: Improve reporting of die_id in capabilities
  b75a16ae-libxl-improve-die-id.patch
  boo#1190493
- libxl: Fix driver reload
  65fab900-libxl-fix-driver-reload.patch,
  51eb680b-libxl-dont-autostart-on-reload.patch
  bsc#1190420</changelog>
  <changelog author="jfehlig@suse.com" date="1632398400">- spec: Fix hangs during package update
  bsc#1177902, bsc#1190693
- spec: Don't add --timeout arg to /etc/sysconfig/libvirtd when
  running in traditional mode without socket activation
  bsc#1190695</changelog>
  <changelog author="jfehlig@suse.com" date="1634299200">- qemu: Do not report eof when processing monitor IO
  2703b0b5-qemu-dont-report-eof.patch
  bsc#1190917</changelog>
  <changelog author="jfehlig@suse.com" date="1634558400">- supportconfig: Use systemctl command 'is-active' instead of
  'is-enabled' when checking if libvirtd is active</changelog>
  <changelog author="jfehlig@suse.com" date="1634731200">- lxc: controller: Fix container launch on cgroup v1
  1b9ce05c-lxc-fix-cgroupV1.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1635249600">- Add upstream debug patch to the libxl driver to aid in future
  debugging
  27e1779f-libxl-debug.patch
- Include collection of active VM config files in the
  supportconfig plugin</changelog>
  <changelog author="jfehlig@suse.com" date="1638532800">- CVE-2021-4147: libxl: Fix libvirtd deadlocks and segfaults
  23b51d7b-libxl-disable-death-event.patch,
  a4e6fba0-libxl-rename-threadinfo-struct.patch,
  e4f7589a-libxl-shutdown-thread-name.patch,
  b9a5faea-libxl-handle-death-thread.patch,
  5c5df531-libxl-search-domid-in-thread.patch,
  a7a03324-libxl-protect-logger-access.patch
  bsc#1191668, bsc#1192017, bsc#1193981, bsc#1194041</changelog>
  <changelog author="jfehlig@suse.com" date="1639483200">- apparmor: Allow new capabilities required by libvirtd
  4f2811eb-apparmor-new-libvirtd-caps.patch
  bsc#1193719</changelog>
  <changelog author="jfehlig@suse.com" date="1639483201">- libxl: Implement domainGetMessages API
  cbae4eaa-libxl-add-domainGetMessages.patch
  bsc#1193623</changelog>
  <changelog author="jfehlig@suse.com" date="1643025600">- spec: Weaken apparmor-abstractions dependency to Recommends
  bsc#1192119, jsc#SLE-23394</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1646308800">- qemu: Directly query KVM for TSC scaling support
  5df2c492-use-kvm-for-tsc-scaling.patch
  bsc#1193364</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
</package>
<package pkgid="fc5b9e6c7916f3628e20beada364f3e8fa7182ced3e2ccbeda61c742ce32ad79" name="libwebkit2gtk3-lang" arch="noarch">
  <version epoch="0" ver="2.36.0" rel="150200.32.1"/>
  <changelog author="dimstar@opensuse.org" date="1606910400">- 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch:
  ICU 68.1 no longer exposes FALSE and TRUE macros by default.</changelog>
  <changelog author="mgorse@suse.com" date="1606996800">- Add old-wayland-scanner.patch for 15.0: support older
  wayland-scanner. ALso renumber patches to group 15.0-specific
  patches together.
- Have the libwebkit2gtk package require libjavascriptcoregtk of
  the same version (boo#1171531).</changelog>
  <changelog author="dimstar@opensuse.org" date="1608033600">- Update to version 2.30.4:
  + Fix text data sent with WebSockets when using libsoup &lt; 2.68.
  + Fix the rendering on Raspberry Pi 3 using the proprietary video
    driver.
  + Fix clipping of descedant layers of a mask layer.
  + Fix the build with ICU 68.1.
- Drop upstream merged patch:
  + 0001-ICU-68.1-no-longer-exposes-FALSE-and-TRUE-macros-by-.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1611057600">- Add webkit-font-scaling.patch: Fix system font scaling not
  applied to 'font-size: XXXpt'; patch taken from upstream and
  rebased to apply cleanly
  (https://bugs.webkit.org/show_bug.cgi?id=218450).
- Pass `-q` to setup to disable printing long list of files
  extracted from source tarball.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1611144000">- Add gir-multilib.patch: Fix multilib conflict in gir files.
- Disable gold linker for ppc64le</changelog>
  <changelog author="mgorse@suse.com" date="1613217600">- Update to version 2.30.5 (boo#1182286):
  + Bring back the WebKitPluginProcess installation that was
    removed by mistake.
  + Fix RunLoop objects leaked in worker threads.
  + Fix aarch64 llint build with JIT disabled.
  + Use Internet Explorer quirk for Google Docs.
  + Security fixes: CVE-2020-13558.
- Drop gir-multilib.patch: fixed upstream.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1613736000">- Update _constraints for armv6/armv7 (bsc#1182719)</changelog>
  <changelog author="mgorse@suse.com" date="1617710400">- Update to version 2.32.0 (boo#1184155):
  + Fix the authentication request port when URL omits the port.
  + Fix iframe scrolling when main frame is scrolled in async
    scrolling mode.
  + Stop using g_memdup.
  + Show a warning message when overriding signal handler for
    threading suspension.
  - Fix the build on RISC-V with GCC 11.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-1788, CVE-2021-1844, CVE-2021-1871,
  CVE-2021-30682.
  + Changes in version 2.30.6 (boo#1184262):
  + Update user agent quirks again for Google Docs and Google Drive.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2020-27918, CVE-2020-29623, CVE-2021-1765,
  CVE-2021-1789, CVE-2021-1799, CVE-2021-1801, CVE-2021-1870,
  CVE-2021-21806.
- Remove webkit-font-scaling.patch: contained in upstream
- Drop original SLE 15 support from the spec. Drop
  webkit-process.patch and old-wayland-scanner.patch; they are not
  needed for SP2.
- Pass ENABLE_GAMEPAD=OFF to cmake, since we don't have manette.
- Add glproto-devel to BuildRequires: now needed for the build on
  SLE 15.</changelog>
  <changelog author="mgorse@suse.com" date="1618228800">- Per discussion with maintenance, let's not remove features that
  customers could possibly be using:
- Add webkit2gtk3-restore-npapi.patch: restore NPAPI plugin
  support. Reverts webkit#215503.</changelog>
  <changelog author="mgorse@suse.com" date="1627300800">- Update to version 2.32.3 (boo#1188697):
  + Properly set the cookies settings after a network process
    crash.
  + Fix accessibility tree after a cross site navigation with PSON
    enabled.
  + Ensure WebKitScriptWorld::window-object-cleared signal is
    always emitted.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-21775, CVE-2021-21779, CVE-2021-30663,
  CVE-2021-30665, CVE-2021-30689, CVE-2021-30720, CVE-2021-30734,
  CVE-2021-30744, CVE-2021-30749, CVE-2021-30795, CVE-2021-30797,
  CVE-2021-30799.
  + Changes in version 2.32.2:
  + Improve calculation of initial WebKitWebView size.
  + Fix kinetic scrolling on touchpad with async scrolling off.
  + Fix a crash on empty drag operation in X11.
  + Fix rendering on HiDPI /4k screen and scaling.
  + Handle null native surface for for surfaceless rendering.
  + Fix JavaScriptCore crash on 32-bit big endian systems.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-30758.
  + Changes in version 2.32.1:
  + Support building against the Musl C library.
  + Support building against ICU version 69 or newer.
  + Improve handling of Media Capture devices.
  + Improve WebAudio playback.
  + Improve video orientation handling.
  + Improve seeking support for MSE playback.
  + Improve flush support in EME decryptors.
  + Fix HTTP status codes for requests done through a custom URI
    handler.
  + Fix the Bubblewrap sandbox in certain 32-bit systems.
  + Fix inconsistencies between the WebKitWebView.is-muted property
    state and values returned by
    webkit_web_view_is_playing_audio().
  + Fix the build with ENABLE_VIDEO=OFF.
  + Fix wrong timestamps for long-lived cookies.
  + Fix UI process crash when failing to load favicons.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Fix webkit2gtk3-restore-npapi.patch to install the plugin
    process.
- Disable WPE renderer: our FDO backend is now too old.</changelog>
  <changelog author="mgorse@suse.com" date="1632225600">- Update to version 2.32.4 (boo#1190701):
  + Do not append .asc extension to downloaded text/plain files.
  + Fix several crashes and rendering issues.
  +  + Security fixes: CVE-2021-30848, CVE-2021-30849, CVE-2021-30858,
    CVE-2021-30809, CVE-2021-30836, CVE-2021-45482.
- Enable LTO; disabling it is no longer necessary.</changelog>
  <changelog author="mgorse@suse.com" date="1634904000">- Add webkit2gtk3-CVE-2021-42762.patch: update seccomp rules with
  latest changes from flatpak (boo#1191937 CVE-2021-42762).</changelog>
  <changelog author="mgorse@suse.com" date="1635422400">- Update to version 2.34.1 (boo#1191937):
  + Update user agent browser versions.
  + Fix a crash with GTK &gt;= 3.24.30.
  + Fix a crash when loading videos on reddit.
  + Fix file type detection when application calls
    g_desktop_app_info_set_as_default_for_extension() passing html.
  + Security fixes: CVE-2021-42762.
  + Changes in version 2.34.0 (boo#1192063):
  + Add support for CSS Scroll Snap.
  + Add support for date and datetime-local input elements.
  + Add support for display capture.
  + Add support for ICC color management.
  * Add support color-schemes CSS property.
  + Add multi-track support to MSE media backend.
  + Add new API to handle web process unresponsiveness.
  + Add API to disable CORS on a web view for particular domains.
  + Add new API to access/modify capture devices states.
  + Add new API to configure the memory pressure handler.
  +  + Security fixes: CVE-2021-30846, CVE-2021-30851, CVE-2021-30818,
    CVE-2021-30823, CVE-2021-30884, CVE-2021-30888, CVE-2021-30889,
    CVE-2021-30897, CVE-2021-45481, CVE-2021-45483.
- Rebase no-forsed-sse.patch and webkit2gtk3-restore-npapi.patch.
- Add fix-warnings.patch: silence return-type warnings.
- Add webkit2gtk3-link-fix.patch: fix the build.
- Add webkitgtk-memfd-build-fix.patch: build fix for glibc 2.26.
- Drop webkit2gtk3-CVE-2021-42762.patch: fixed upstream.
- Add pkgconfig(lcms2) BuildRequires: new dependency.
- Pass -DUSE_SOUP2=ON to cmake.
- Compile with gcc 10. Build fails with gcc 7.</changelog>
  <changelog author="mgorse@suse.com" date="1637323200">- Increase disk space in _constraints; attempt to fix build
  failure.</changelog>
  <changelog author="mgorse@suse.com" date="1640260800">- Update to version 2.34.3 (boo#1194019):
  + Make audio tools (like mixers) display the actual name of the
    application producing sound, instead of a generic one.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2021-30887, CVE-2021-30890.
- Increase disk space in _constraints again. Attempt to fix "no
  space left on device" during clamav check.</changelog>
  <changelog author="mgorse@suse.com" date="1643025600">- Update to version 2.34.4 (boo#1195064):
  + Fix several crashes and rendering issues.
  + This release fixes numerous security issues, including an
    especially severe issue that allowed websites to read the names
    of IndexedDB databases created by other websites.
  + Security fixes: CVE-2021-30934, CVE-2021-30936, CVE-2021-30951,
    CVE-2021-30952, CVE-2021-30953, CVE-2021-30954, CVE-2021-30984,
    CVE-2022-22594, CVE-2022-22637.</changelog>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.</changelog>
  <changelog author="mgorse@suse.com" date="1644580800">- Increase mem_per_process; attempt to fix aarch64 build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.
- Rebase webkitgtk-memfd-build-fix.patch and webkit2gtk3-restore-npapi.patch.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, ?)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629.
- Rebase no-forced-sse.patch and webkit2gtk3-restore-npapi.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.
- Increase disk space in _constraints; attempt to fix the build.</changelog>
</package>
<package pkgid="fae2110efc4fbb3d3015feefdbb9f86e8787ee7136d8584151371d2103be2350" name="libwmf" arch="src">
  <version epoch="0" ver="0.2.12" rel="150000.4.4.1"/>
  <changelog author="coolo@novell.com" date="1292587200">- fix file list</changelog>
  <changelog author="jengelh@medozas.de" date="1321358400">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Apply shlib packaging (-&gt; new libwmf-0_2-7 subpackage),
  create "wmf-utils" subpackage as suggested by namtrac</changelog>
  <changelog author="jengelh@medozas.de" date="1322568000">- Actually use "libwmf-tools" instead of wmf-utils, this goes much
  more in line with the preexisting libwpd-tools and libwps-tools.</changelog>
  <changelog author="jengelh@medozas.de" date="1327924800">- Remove further redundant sections</changelog>
  <changelog author="jengelh@medozas.de" date="1330776000">- Add libjpeg-devel as BuildRequires, needed to resolve build error
- Add selected Xorg packages to BR to have wmf2x be built again</changelog>
  <changelog author="dimstar@opensuse.org" date="1340020800">- Add libwmf-0_2-7 to baselibs.conf.</changelog>
  <changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="nadvornik@suse.com" date="1394020800">- Add libwmf-0.2.8.4-bnc495842.patch to fix realloc return value
  usage (bnc#495842, bnc#831299)</changelog>
  <changelog author="fstrba@suse.com" date="1401278400">- Clean spec file with spec-cleaner
- Do not distribute *.la files</changelog>
  <changelog author="nadvornik@suse.com" date="1408536000">- dropped libwmf-devel -&gt; libwmf-tools dependency (bnc#892356)</changelog>
  <changelog author="fstrba@suse.com" date="1434024000">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-0848.patch
  - Fix CVE-2015-0848: Heap overflow on libwmf0.2-7 (bsc#933109)
  * libwmf-0.2.8.4-badrle.patch
  - Fix CVE-2015-4588: DecodeImage() does not check that the
    run-length "count" fits into the total size of the image,
    which can lead to a heap-based buffer overflow (bsc#933109)</changelog>
  <changelog author="fstrba@suse.com" date="1435665600">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-4695.patch
  - Fix CVE-2015-4695: meta_pen_create heap buffer over read
    (bsc#936058)
  * libwmf-0.2.8.4-CVE-2015-4696.patch
  - Fix CVE-2015-4696: wmf2gd/wmf2eps use after free (bsc#936062)</changelog>
  <changelog author="bwiedemann@suse.com" date="1497960000">- Add reproducible.patch to sort input files to make build reproducible (boo#1041090)</changelog>
  <changelog author="sndirsch@suse.com" date="1517227200">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519905600">- Fix -devel package Requires not to still include xorg-x11-devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520942400">- libwmf-0.2.8.4-config.patch: update so -config --libs
  do not inject bogus dependencies to other packages.
- build with disable-static too.</changelog>
  <changelog author="idonmez@suse.com" date="1525435200">- Add use-pkg-config-for-freetype.patch to use pkgconfig to detect
  Freetype libraries. Add BR autoconf, automake, libtool due to
  above.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- update to 0.2.12:
  * upstream changed to fork from Fedora: https://github.com/caolanm/libwmf
  * fix abi
  * merge in fixes for libgd CVE-2019-6978
  * release with coverity, clang and shellcheck fixes
  * Seeing as wvware.sourceforge.net seems to be dead, but libwmf is still in
    use and has had a bunch of security bugs reported against, and I've a
    history with libwmf, I'll call this libwmf 0.2.9 and merge in my (Red Hat)
    fixes.
- drop libwmf-0.2.8.4-ia64.patch, libwmf-0.2.8.4-config.patch: obsolete
- drop libwmf-0.2.8.4-overflow-CVE-2006-3376.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b9cc022c8d7dd8c557e2dae5681c2d344237b4f9
- drop libwmf-0.2.8.4-CVE-2015-0848.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-badrle.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-CVE-2015-4696.patch: upstream via
  https://github.com/caolanm/libwmf/commit/f47cbdf96838c2daa7b8e489f59e62371d33352a
- drop libwmf-0.2.8.4-CVE-2015-4695.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b5ae5d1f3bbddf051a5c9dd01897bd835817f013
- drop reproducible.patch: differently done upstream
- drop use-pkg-config-for-freetype.patch: obsolete</changelog>
  <changelog author="fstrba@suse.com" date="1621425600">- Define conditionally make_build to fix build on systems that do
  not have that macro</changelog>
</package>
<package pkgid="dd138edcef3d5f2dc799961ac8f0d1cfd83a706d8d51222be0998d92dfdc2444" name="libwmf-0_2-7" arch="aarch64">
  <version epoch="0" ver="0.2.12" rel="150000.4.4.1"/>
  <changelog author="fstrba@suse.com" date="1434024000">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-0848.patch
  - Fix CVE-2015-0848: Heap overflow on libwmf0.2-7 (bsc#933109)
  * libwmf-0.2.8.4-badrle.patch
  - Fix CVE-2015-4588: DecodeImage() does not check that the
    run-length "count" fits into the total size of the image,
    which can lead to a heap-based buffer overflow (bsc#933109)</changelog>
  <changelog author="fstrba@suse.com" date="1435665600">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-4695.patch
  - Fix CVE-2015-4695: meta_pen_create heap buffer over read
    (bsc#936058)
  * libwmf-0.2.8.4-CVE-2015-4696.patch
  - Fix CVE-2015-4696: wmf2gd/wmf2eps use after free (bsc#936062)</changelog>
  <changelog author="bwiedemann@suse.com" date="1497960000">- Add reproducible.patch to sort input files to make build reproducible (boo#1041090)</changelog>
  <changelog author="sndirsch@suse.com" date="1517227200">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519905600">- Fix -devel package Requires not to still include xorg-x11-devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520942400">- libwmf-0.2.8.4-config.patch: update so -config --libs
  do not inject bogus dependencies to other packages.
- build with disable-static too.</changelog>
  <changelog author="idonmez@suse.com" date="1525435200">- Add use-pkg-config-for-freetype.patch to use pkgconfig to detect
  Freetype libraries. Add BR autoconf, automake, libtool due to
  above.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- update to 0.2.12:
  * upstream changed to fork from Fedora: https://github.com/caolanm/libwmf
  * fix abi
  * merge in fixes for libgd CVE-2019-6978
  * release with coverity, clang and shellcheck fixes
  * Seeing as wvware.sourceforge.net seems to be dead, but libwmf is still in
    use and has had a bunch of security bugs reported against, and I've a
    history with libwmf, I'll call this libwmf 0.2.9 and merge in my (Red Hat)
    fixes.
- drop libwmf-0.2.8.4-ia64.patch, libwmf-0.2.8.4-config.patch: obsolete
- drop libwmf-0.2.8.4-overflow-CVE-2006-3376.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b9cc022c8d7dd8c557e2dae5681c2d344237b4f9
- drop libwmf-0.2.8.4-CVE-2015-0848.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-badrle.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-CVE-2015-4696.patch: upstream via
  https://github.com/caolanm/libwmf/commit/f47cbdf96838c2daa7b8e489f59e62371d33352a
- drop libwmf-0.2.8.4-CVE-2015-4695.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b5ae5d1f3bbddf051a5c9dd01897bd835817f013
- drop reproducible.patch: differently done upstream
- drop use-pkg-config-for-freetype.patch: obsolete</changelog>
  <changelog author="fstrba@suse.com" date="1621425600">- Define conditionally make_build to fix build on systems that do
  not have that macro</changelog>
</package>
<package pkgid="d43c4333042999cc36439d2b56a2415f82d773072fe528fc49babc7b8bde00c0" name="libwmf-0_2-7" arch="ppc64le">
  <version epoch="0" ver="0.2.12" rel="150000.4.4.1"/>
  <changelog author="fstrba@suse.com" date="1434024000">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-0848.patch
  - Fix CVE-2015-0848: Heap overflow on libwmf0.2-7 (bsc#933109)
  * libwmf-0.2.8.4-badrle.patch
  - Fix CVE-2015-4588: DecodeImage() does not check that the
    run-length "count" fits into the total size of the image,
    which can lead to a heap-based buffer overflow (bsc#933109)</changelog>
  <changelog author="fstrba@suse.com" date="1435665600">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-4695.patch
  - Fix CVE-2015-4695: meta_pen_create heap buffer over read
    (bsc#936058)
  * libwmf-0.2.8.4-CVE-2015-4696.patch
  - Fix CVE-2015-4696: wmf2gd/wmf2eps use after free (bsc#936062)</changelog>
  <changelog author="bwiedemann@suse.com" date="1497960000">- Add reproducible.patch to sort input files to make build reproducible (boo#1041090)</changelog>
  <changelog author="sndirsch@suse.com" date="1517227200">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519905600">- Fix -devel package Requires not to still include xorg-x11-devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520942400">- libwmf-0.2.8.4-config.patch: update so -config --libs
  do not inject bogus dependencies to other packages.
- build with disable-static too.</changelog>
  <changelog author="idonmez@suse.com" date="1525435200">- Add use-pkg-config-for-freetype.patch to use pkgconfig to detect
  Freetype libraries. Add BR autoconf, automake, libtool due to
  above.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- update to 0.2.12:
  * upstream changed to fork from Fedora: https://github.com/caolanm/libwmf
  * fix abi
  * merge in fixes for libgd CVE-2019-6978
  * release with coverity, clang and shellcheck fixes
  * Seeing as wvware.sourceforge.net seems to be dead, but libwmf is still in
    use and has had a bunch of security bugs reported against, and I've a
    history with libwmf, I'll call this libwmf 0.2.9 and merge in my (Red Hat)
    fixes.
- drop libwmf-0.2.8.4-ia64.patch, libwmf-0.2.8.4-config.patch: obsolete
- drop libwmf-0.2.8.4-overflow-CVE-2006-3376.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b9cc022c8d7dd8c557e2dae5681c2d344237b4f9
- drop libwmf-0.2.8.4-CVE-2015-0848.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-badrle.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-CVE-2015-4696.patch: upstream via
  https://github.com/caolanm/libwmf/commit/f47cbdf96838c2daa7b8e489f59e62371d33352a
- drop libwmf-0.2.8.4-CVE-2015-4695.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b5ae5d1f3bbddf051a5c9dd01897bd835817f013
- drop reproducible.patch: differently done upstream
- drop use-pkg-config-for-freetype.patch: obsolete</changelog>
  <changelog author="fstrba@suse.com" date="1621425600">- Define conditionally make_build to fix build on systems that do
  not have that macro</changelog>
</package>
<package pkgid="8bdd26bd03209c99664c2215400b55b0cb754ebbff001a251a53c1b204e1dbda" name="libwmf-0_2-7" arch="s390x">
  <version epoch="0" ver="0.2.12" rel="150000.4.4.1"/>
  <changelog author="fstrba@suse.com" date="1434024000">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-0848.patch
  - Fix CVE-2015-0848: Heap overflow on libwmf0.2-7 (bsc#933109)
  * libwmf-0.2.8.4-badrle.patch
  - Fix CVE-2015-4588: DecodeImage() does not check that the
    run-length "count" fits into the total size of the image,
    which can lead to a heap-based buffer overflow (bsc#933109)</changelog>
  <changelog author="fstrba@suse.com" date="1435665600">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-4695.patch
  - Fix CVE-2015-4695: meta_pen_create heap buffer over read
    (bsc#936058)
  * libwmf-0.2.8.4-CVE-2015-4696.patch
  - Fix CVE-2015-4696: wmf2gd/wmf2eps use after free (bsc#936062)</changelog>
  <changelog author="bwiedemann@suse.com" date="1497960000">- Add reproducible.patch to sort input files to make build reproducible (boo#1041090)</changelog>
  <changelog author="sndirsch@suse.com" date="1517227200">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519905600">- Fix -devel package Requires not to still include xorg-x11-devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520942400">- libwmf-0.2.8.4-config.patch: update so -config --libs
  do not inject bogus dependencies to other packages.
- build with disable-static too.</changelog>
  <changelog author="idonmez@suse.com" date="1525435200">- Add use-pkg-config-for-freetype.patch to use pkgconfig to detect
  Freetype libraries. Add BR autoconf, automake, libtool due to
  above.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- update to 0.2.12:
  * upstream changed to fork from Fedora: https://github.com/caolanm/libwmf
  * fix abi
  * merge in fixes for libgd CVE-2019-6978
  * release with coverity, clang and shellcheck fixes
  * Seeing as wvware.sourceforge.net seems to be dead, but libwmf is still in
    use and has had a bunch of security bugs reported against, and I've a
    history with libwmf, I'll call this libwmf 0.2.9 and merge in my (Red Hat)
    fixes.
- drop libwmf-0.2.8.4-ia64.patch, libwmf-0.2.8.4-config.patch: obsolete
- drop libwmf-0.2.8.4-overflow-CVE-2006-3376.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b9cc022c8d7dd8c557e2dae5681c2d344237b4f9
- drop libwmf-0.2.8.4-CVE-2015-0848.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-badrle.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-CVE-2015-4696.patch: upstream via
  https://github.com/caolanm/libwmf/commit/f47cbdf96838c2daa7b8e489f59e62371d33352a
- drop libwmf-0.2.8.4-CVE-2015-4695.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b5ae5d1f3bbddf051a5c9dd01897bd835817f013
- drop reproducible.patch: differently done upstream
- drop use-pkg-config-for-freetype.patch: obsolete</changelog>
  <changelog author="fstrba@suse.com" date="1621425600">- Define conditionally make_build to fix build on systems that do
  not have that macro</changelog>
</package>
<package pkgid="6ef39117a393f63f27f32c01720e0e31c017a4139521f9dc6742a2b465e0288b" name="libwmf-0_2-7" arch="x86_64">
  <version epoch="0" ver="0.2.12" rel="150000.4.4.1"/>
  <changelog author="fstrba@suse.com" date="1434024000">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-0848.patch
  - Fix CVE-2015-0848: Heap overflow on libwmf0.2-7 (bsc#933109)
  * libwmf-0.2.8.4-badrle.patch
  - Fix CVE-2015-4588: DecodeImage() does not check that the
    run-length "count" fits into the total size of the image,
    which can lead to a heap-based buffer overflow (bsc#933109)</changelog>
  <changelog author="fstrba@suse.com" date="1435665600">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-4695.patch
  - Fix CVE-2015-4695: meta_pen_create heap buffer over read
    (bsc#936058)
  * libwmf-0.2.8.4-CVE-2015-4696.patch
  - Fix CVE-2015-4696: wmf2gd/wmf2eps use after free (bsc#936062)</changelog>
  <changelog author="bwiedemann@suse.com" date="1497960000">- Add reproducible.patch to sort input files to make build reproducible (boo#1041090)</changelog>
  <changelog author="sndirsch@suse.com" date="1517227200">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519905600">- Fix -devel package Requires not to still include xorg-x11-devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520942400">- libwmf-0.2.8.4-config.patch: update so -config --libs
  do not inject bogus dependencies to other packages.
- build with disable-static too.</changelog>
  <changelog author="idonmez@suse.com" date="1525435200">- Add use-pkg-config-for-freetype.patch to use pkgconfig to detect
  Freetype libraries. Add BR autoconf, automake, libtool due to
  above.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- update to 0.2.12:
  * upstream changed to fork from Fedora: https://github.com/caolanm/libwmf
  * fix abi
  * merge in fixes for libgd CVE-2019-6978
  * release with coverity, clang and shellcheck fixes
  * Seeing as wvware.sourceforge.net seems to be dead, but libwmf is still in
    use and has had a bunch of security bugs reported against, and I've a
    history with libwmf, I'll call this libwmf 0.2.9 and merge in my (Red Hat)
    fixes.
- drop libwmf-0.2.8.4-ia64.patch, libwmf-0.2.8.4-config.patch: obsolete
- drop libwmf-0.2.8.4-overflow-CVE-2006-3376.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b9cc022c8d7dd8c557e2dae5681c2d344237b4f9
- drop libwmf-0.2.8.4-CVE-2015-0848.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-badrle.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-CVE-2015-4696.patch: upstream via
  https://github.com/caolanm/libwmf/commit/f47cbdf96838c2daa7b8e489f59e62371d33352a
- drop libwmf-0.2.8.4-CVE-2015-4695.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b5ae5d1f3bbddf051a5c9dd01897bd835817f013
- drop reproducible.patch: differently done upstream
- drop use-pkg-config-for-freetype.patch: obsolete</changelog>
  <changelog author="fstrba@suse.com" date="1621425600">- Define conditionally make_build to fix build on systems that do
  not have that macro</changelog>
</package>
<package pkgid="cb30146cfcee41a51f8bfa5b86ef61ce676bc216143e82172757b44b57e05cdc" name="libwmf-0_2-7-32bit" arch="x86_64">
  <version epoch="0" ver="0.2.12" rel="150000.4.4.1"/>
  <changelog author="fstrba@suse.com" date="1434024000">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-0848.patch
  - Fix CVE-2015-0848: Heap overflow on libwmf0.2-7 (bsc#933109)
  * libwmf-0.2.8.4-badrle.patch
  - Fix CVE-2015-4588: DecodeImage() does not check that the
    run-length "count" fits into the total size of the image,
    which can lead to a heap-based buffer overflow (bsc#933109)</changelog>
  <changelog author="fstrba@suse.com" date="1435665600">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-4695.patch
  - Fix CVE-2015-4695: meta_pen_create heap buffer over read
    (bsc#936058)
  * libwmf-0.2.8.4-CVE-2015-4696.patch
  - Fix CVE-2015-4696: wmf2gd/wmf2eps use after free (bsc#936062)</changelog>
  <changelog author="bwiedemann@suse.com" date="1497960000">- Add reproducible.patch to sort input files to make build reproducible (boo#1041090)</changelog>
  <changelog author="sndirsch@suse.com" date="1517227200">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519905600">- Fix -devel package Requires not to still include xorg-x11-devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520942400">- libwmf-0.2.8.4-config.patch: update so -config --libs
  do not inject bogus dependencies to other packages.
- build with disable-static too.</changelog>
  <changelog author="idonmez@suse.com" date="1525435200">- Add use-pkg-config-for-freetype.patch to use pkgconfig to detect
  Freetype libraries. Add BR autoconf, automake, libtool due to
  above.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- update to 0.2.12:
  * upstream changed to fork from Fedora: https://github.com/caolanm/libwmf
  * fix abi
  * merge in fixes for libgd CVE-2019-6978
  * release with coverity, clang and shellcheck fixes
  * Seeing as wvware.sourceforge.net seems to be dead, but libwmf is still in
    use and has had a bunch of security bugs reported against, and I've a
    history with libwmf, I'll call this libwmf 0.2.9 and merge in my (Red Hat)
    fixes.
- drop libwmf-0.2.8.4-ia64.patch, libwmf-0.2.8.4-config.patch: obsolete
- drop libwmf-0.2.8.4-overflow-CVE-2006-3376.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b9cc022c8d7dd8c557e2dae5681c2d344237b4f9
- drop libwmf-0.2.8.4-CVE-2015-0848.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-badrle.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-CVE-2015-4696.patch: upstream via
  https://github.com/caolanm/libwmf/commit/f47cbdf96838c2daa7b8e489f59e62371d33352a
- drop libwmf-0.2.8.4-CVE-2015-4695.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b5ae5d1f3bbddf051a5c9dd01897bd835817f013
- drop reproducible.patch: differently done upstream
- drop use-pkg-config-for-freetype.patch: obsolete</changelog>
  <changelog author="fstrba@suse.com" date="1621425600">- Define conditionally make_build to fix build on systems that do
  not have that macro</changelog>
</package>
<package pkgid="eef52f51e35928aaf4478c80bfd4ee75cce45986633853164f20b1cf958dd359" name="libwmf-devel" arch="aarch64">
  <version epoch="0" ver="0.2.12" rel="150000.4.4.1"/>
  <changelog author="fstrba@suse.com" date="1434024000">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-0848.patch
  - Fix CVE-2015-0848: Heap overflow on libwmf0.2-7 (bsc#933109)
  * libwmf-0.2.8.4-badrle.patch
  - Fix CVE-2015-4588: DecodeImage() does not check that the
    run-length "count" fits into the total size of the image,
    which can lead to a heap-based buffer overflow (bsc#933109)</changelog>
  <changelog author="fstrba@suse.com" date="1435665600">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-4695.patch
  - Fix CVE-2015-4695: meta_pen_create heap buffer over read
    (bsc#936058)
  * libwmf-0.2.8.4-CVE-2015-4696.patch
  - Fix CVE-2015-4696: wmf2gd/wmf2eps use after free (bsc#936062)</changelog>
  <changelog author="bwiedemann@suse.com" date="1497960000">- Add reproducible.patch to sort input files to make build reproducible (boo#1041090)</changelog>
  <changelog author="sndirsch@suse.com" date="1517227200">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519905600">- Fix -devel package Requires not to still include xorg-x11-devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520942400">- libwmf-0.2.8.4-config.patch: update so -config --libs
  do not inject bogus dependencies to other packages.
- build with disable-static too.</changelog>
  <changelog author="idonmez@suse.com" date="1525435200">- Add use-pkg-config-for-freetype.patch to use pkgconfig to detect
  Freetype libraries. Add BR autoconf, automake, libtool due to
  above.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- update to 0.2.12:
  * upstream changed to fork from Fedora: https://github.com/caolanm/libwmf
  * fix abi
  * merge in fixes for libgd CVE-2019-6978
  * release with coverity, clang and shellcheck fixes
  * Seeing as wvware.sourceforge.net seems to be dead, but libwmf is still in
    use and has had a bunch of security bugs reported against, and I've a
    history with libwmf, I'll call this libwmf 0.2.9 and merge in my (Red Hat)
    fixes.
- drop libwmf-0.2.8.4-ia64.patch, libwmf-0.2.8.4-config.patch: obsolete
- drop libwmf-0.2.8.4-overflow-CVE-2006-3376.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b9cc022c8d7dd8c557e2dae5681c2d344237b4f9
- drop libwmf-0.2.8.4-CVE-2015-0848.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-badrle.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-CVE-2015-4696.patch: upstream via
  https://github.com/caolanm/libwmf/commit/f47cbdf96838c2daa7b8e489f59e62371d33352a
- drop libwmf-0.2.8.4-CVE-2015-4695.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b5ae5d1f3bbddf051a5c9dd01897bd835817f013
- drop reproducible.patch: differently done upstream
- drop use-pkg-config-for-freetype.patch: obsolete</changelog>
  <changelog author="fstrba@suse.com" date="1621425600">- Define conditionally make_build to fix build on systems that do
  not have that macro</changelog>
</package>
<package pkgid="ce5bd81c328fb6f8c7c2e7c8925e64f20d57ef578a3c927156f9b1dfde7530c0" name="libwmf-devel" arch="ppc64le">
  <version epoch="0" ver="0.2.12" rel="150000.4.4.1"/>
  <changelog author="fstrba@suse.com" date="1434024000">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-0848.patch
  - Fix CVE-2015-0848: Heap overflow on libwmf0.2-7 (bsc#933109)
  * libwmf-0.2.8.4-badrle.patch
  - Fix CVE-2015-4588: DecodeImage() does not check that the
    run-length "count" fits into the total size of the image,
    which can lead to a heap-based buffer overflow (bsc#933109)</changelog>
  <changelog author="fstrba@suse.com" date="1435665600">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-4695.patch
  - Fix CVE-2015-4695: meta_pen_create heap buffer over read
    (bsc#936058)
  * libwmf-0.2.8.4-CVE-2015-4696.patch
  - Fix CVE-2015-4696: wmf2gd/wmf2eps use after free (bsc#936062)</changelog>
  <changelog author="bwiedemann@suse.com" date="1497960000">- Add reproducible.patch to sort input files to make build reproducible (boo#1041090)</changelog>
  <changelog author="sndirsch@suse.com" date="1517227200">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519905600">- Fix -devel package Requires not to still include xorg-x11-devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520942400">- libwmf-0.2.8.4-config.patch: update so -config --libs
  do not inject bogus dependencies to other packages.
- build with disable-static too.</changelog>
  <changelog author="idonmez@suse.com" date="1525435200">- Add use-pkg-config-for-freetype.patch to use pkgconfig to detect
  Freetype libraries. Add BR autoconf, automake, libtool due to
  above.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- update to 0.2.12:
  * upstream changed to fork from Fedora: https://github.com/caolanm/libwmf
  * fix abi
  * merge in fixes for libgd CVE-2019-6978
  * release with coverity, clang and shellcheck fixes
  * Seeing as wvware.sourceforge.net seems to be dead, but libwmf is still in
    use and has had a bunch of security bugs reported against, and I've a
    history with libwmf, I'll call this libwmf 0.2.9 and merge in my (Red Hat)
    fixes.
- drop libwmf-0.2.8.4-ia64.patch, libwmf-0.2.8.4-config.patch: obsolete
- drop libwmf-0.2.8.4-overflow-CVE-2006-3376.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b9cc022c8d7dd8c557e2dae5681c2d344237b4f9
- drop libwmf-0.2.8.4-CVE-2015-0848.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-badrle.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-CVE-2015-4696.patch: upstream via
  https://github.com/caolanm/libwmf/commit/f47cbdf96838c2daa7b8e489f59e62371d33352a
- drop libwmf-0.2.8.4-CVE-2015-4695.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b5ae5d1f3bbddf051a5c9dd01897bd835817f013
- drop reproducible.patch: differently done upstream
- drop use-pkg-config-for-freetype.patch: obsolete</changelog>
  <changelog author="fstrba@suse.com" date="1621425600">- Define conditionally make_build to fix build on systems that do
  not have that macro</changelog>
</package>
<package pkgid="628a47cf936a76aae98e05e1ddb5c0c9012d98d4f6dd02329dffe2dd37e0a451" name="libwmf-devel" arch="s390x">
  <version epoch="0" ver="0.2.12" rel="150000.4.4.1"/>
  <changelog author="fstrba@suse.com" date="1434024000">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-0848.patch
  - Fix CVE-2015-0848: Heap overflow on libwmf0.2-7 (bsc#933109)
  * libwmf-0.2.8.4-badrle.patch
  - Fix CVE-2015-4588: DecodeImage() does not check that the
    run-length "count" fits into the total size of the image,
    which can lead to a heap-based buffer overflow (bsc#933109)</changelog>
  <changelog author="fstrba@suse.com" date="1435665600">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-4695.patch
  - Fix CVE-2015-4695: meta_pen_create heap buffer over read
    (bsc#936058)
  * libwmf-0.2.8.4-CVE-2015-4696.patch
  - Fix CVE-2015-4696: wmf2gd/wmf2eps use after free (bsc#936062)</changelog>
  <changelog author="bwiedemann@suse.com" date="1497960000">- Add reproducible.patch to sort input files to make build reproducible (boo#1041090)</changelog>
  <changelog author="sndirsch@suse.com" date="1517227200">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519905600">- Fix -devel package Requires not to still include xorg-x11-devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520942400">- libwmf-0.2.8.4-config.patch: update so -config --libs
  do not inject bogus dependencies to other packages.
- build with disable-static too.</changelog>
  <changelog author="idonmez@suse.com" date="1525435200">- Add use-pkg-config-for-freetype.patch to use pkgconfig to detect
  Freetype libraries. Add BR autoconf, automake, libtool due to
  above.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- update to 0.2.12:
  * upstream changed to fork from Fedora: https://github.com/caolanm/libwmf
  * fix abi
  * merge in fixes for libgd CVE-2019-6978
  * release with coverity, clang and shellcheck fixes
  * Seeing as wvware.sourceforge.net seems to be dead, but libwmf is still in
    use and has had a bunch of security bugs reported against, and I've a
    history with libwmf, I'll call this libwmf 0.2.9 and merge in my (Red Hat)
    fixes.
- drop libwmf-0.2.8.4-ia64.patch, libwmf-0.2.8.4-config.patch: obsolete
- drop libwmf-0.2.8.4-overflow-CVE-2006-3376.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b9cc022c8d7dd8c557e2dae5681c2d344237b4f9
- drop libwmf-0.2.8.4-CVE-2015-0848.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-badrle.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-CVE-2015-4696.patch: upstream via
  https://github.com/caolanm/libwmf/commit/f47cbdf96838c2daa7b8e489f59e62371d33352a
- drop libwmf-0.2.8.4-CVE-2015-4695.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b5ae5d1f3bbddf051a5c9dd01897bd835817f013
- drop reproducible.patch: differently done upstream
- drop use-pkg-config-for-freetype.patch: obsolete</changelog>
  <changelog author="fstrba@suse.com" date="1621425600">- Define conditionally make_build to fix build on systems that do
  not have that macro</changelog>
</package>
<package pkgid="302cf6eb76110205470200ca011793846a2a806444023a3b3b5b0c610210ea45" name="libwmf-devel" arch="x86_64">
  <version epoch="0" ver="0.2.12" rel="150000.4.4.1"/>
  <changelog author="fstrba@suse.com" date="1434024000">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-0848.patch
  - Fix CVE-2015-0848: Heap overflow on libwmf0.2-7 (bsc#933109)
  * libwmf-0.2.8.4-badrle.patch
  - Fix CVE-2015-4588: DecodeImage() does not check that the
    run-length "count" fits into the total size of the image,
    which can lead to a heap-based buffer overflow (bsc#933109)</changelog>
  <changelog author="fstrba@suse.com" date="1435665600">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-4695.patch
  - Fix CVE-2015-4695: meta_pen_create heap buffer over read
    (bsc#936058)
  * libwmf-0.2.8.4-CVE-2015-4696.patch
  - Fix CVE-2015-4696: wmf2gd/wmf2eps use after free (bsc#936062)</changelog>
  <changelog author="bwiedemann@suse.com" date="1497960000">- Add reproducible.patch to sort input files to make build reproducible (boo#1041090)</changelog>
  <changelog author="sndirsch@suse.com" date="1517227200">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519905600">- Fix -devel package Requires not to still include xorg-x11-devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520942400">- libwmf-0.2.8.4-config.patch: update so -config --libs
  do not inject bogus dependencies to other packages.
- build with disable-static too.</changelog>
  <changelog author="idonmez@suse.com" date="1525435200">- Add use-pkg-config-for-freetype.patch to use pkgconfig to detect
  Freetype libraries. Add BR autoconf, automake, libtool due to
  above.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- update to 0.2.12:
  * upstream changed to fork from Fedora: https://github.com/caolanm/libwmf
  * fix abi
  * merge in fixes for libgd CVE-2019-6978
  * release with coverity, clang and shellcheck fixes
  * Seeing as wvware.sourceforge.net seems to be dead, but libwmf is still in
    use and has had a bunch of security bugs reported against, and I've a
    history with libwmf, I'll call this libwmf 0.2.9 and merge in my (Red Hat)
    fixes.
- drop libwmf-0.2.8.4-ia64.patch, libwmf-0.2.8.4-config.patch: obsolete
- drop libwmf-0.2.8.4-overflow-CVE-2006-3376.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b9cc022c8d7dd8c557e2dae5681c2d344237b4f9
- drop libwmf-0.2.8.4-CVE-2015-0848.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-badrle.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-CVE-2015-4696.patch: upstream via
  https://github.com/caolanm/libwmf/commit/f47cbdf96838c2daa7b8e489f59e62371d33352a
- drop libwmf-0.2.8.4-CVE-2015-4695.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b5ae5d1f3bbddf051a5c9dd01897bd835817f013
- drop reproducible.patch: differently done upstream
- drop use-pkg-config-for-freetype.patch: obsolete</changelog>
  <changelog author="fstrba@suse.com" date="1621425600">- Define conditionally make_build to fix build on systems that do
  not have that macro</changelog>
</package>
<package pkgid="c8a722dde449c624f5ef2f32c541e223e714bbb5f65e37adfea8996d42592a0f" name="libwmf-gnome" arch="aarch64">
  <version epoch="0" ver="0.2.12" rel="150000.4.4.1"/>
  <changelog author="fstrba@suse.com" date="1434024000">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-0848.patch
  - Fix CVE-2015-0848: Heap overflow on libwmf0.2-7 (bsc#933109)
  * libwmf-0.2.8.4-badrle.patch
  - Fix CVE-2015-4588: DecodeImage() does not check that the
    run-length "count" fits into the total size of the image,
    which can lead to a heap-based buffer overflow (bsc#933109)</changelog>
  <changelog author="fstrba@suse.com" date="1435665600">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-4695.patch
  - Fix CVE-2015-4695: meta_pen_create heap buffer over read
    (bsc#936058)
  * libwmf-0.2.8.4-CVE-2015-4696.patch
  - Fix CVE-2015-4696: wmf2gd/wmf2eps use after free (bsc#936062)</changelog>
  <changelog author="bwiedemann@suse.com" date="1497960000">- Add reproducible.patch to sort input files to make build reproducible (boo#1041090)</changelog>
  <changelog author="sndirsch@suse.com" date="1517227200">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519905600">- Fix -devel package Requires not to still include xorg-x11-devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520942400">- libwmf-0.2.8.4-config.patch: update so -config --libs
  do not inject bogus dependencies to other packages.
- build with disable-static too.</changelog>
  <changelog author="idonmez@suse.com" date="1525435200">- Add use-pkg-config-for-freetype.patch to use pkgconfig to detect
  Freetype libraries. Add BR autoconf, automake, libtool due to
  above.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- update to 0.2.12:
  * upstream changed to fork from Fedora: https://github.com/caolanm/libwmf
  * fix abi
  * merge in fixes for libgd CVE-2019-6978
  * release with coverity, clang and shellcheck fixes
  * Seeing as wvware.sourceforge.net seems to be dead, but libwmf is still in
    use and has had a bunch of security bugs reported against, and I've a
    history with libwmf, I'll call this libwmf 0.2.9 and merge in my (Red Hat)
    fixes.
- drop libwmf-0.2.8.4-ia64.patch, libwmf-0.2.8.4-config.patch: obsolete
- drop libwmf-0.2.8.4-overflow-CVE-2006-3376.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b9cc022c8d7dd8c557e2dae5681c2d344237b4f9
- drop libwmf-0.2.8.4-CVE-2015-0848.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-badrle.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-CVE-2015-4696.patch: upstream via
  https://github.com/caolanm/libwmf/commit/f47cbdf96838c2daa7b8e489f59e62371d33352a
- drop libwmf-0.2.8.4-CVE-2015-4695.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b5ae5d1f3bbddf051a5c9dd01897bd835817f013
- drop reproducible.patch: differently done upstream
- drop use-pkg-config-for-freetype.patch: obsolete</changelog>
  <changelog author="fstrba@suse.com" date="1621425600">- Define conditionally make_build to fix build on systems that do
  not have that macro</changelog>
</package>
<package pkgid="8c50de35282e95743775ed49615ce1492f685c69b670a957abfc262f17d67c0f" name="libwmf-gnome" arch="ppc64le">
  <version epoch="0" ver="0.2.12" rel="150000.4.4.1"/>
  <changelog author="fstrba@suse.com" date="1434024000">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-0848.patch
  - Fix CVE-2015-0848: Heap overflow on libwmf0.2-7 (bsc#933109)
  * libwmf-0.2.8.4-badrle.patch
  - Fix CVE-2015-4588: DecodeImage() does not check that the
    run-length "count" fits into the total size of the image,
    which can lead to a heap-based buffer overflow (bsc#933109)</changelog>
  <changelog author="fstrba@suse.com" date="1435665600">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-4695.patch
  - Fix CVE-2015-4695: meta_pen_create heap buffer over read
    (bsc#936058)
  * libwmf-0.2.8.4-CVE-2015-4696.patch
  - Fix CVE-2015-4696: wmf2gd/wmf2eps use after free (bsc#936062)</changelog>
  <changelog author="bwiedemann@suse.com" date="1497960000">- Add reproducible.patch to sort input files to make build reproducible (boo#1041090)</changelog>
  <changelog author="sndirsch@suse.com" date="1517227200">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519905600">- Fix -devel package Requires not to still include xorg-x11-devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520942400">- libwmf-0.2.8.4-config.patch: update so -config --libs
  do not inject bogus dependencies to other packages.
- build with disable-static too.</changelog>
  <changelog author="idonmez@suse.com" date="1525435200">- Add use-pkg-config-for-freetype.patch to use pkgconfig to detect
  Freetype libraries. Add BR autoconf, automake, libtool due to
  above.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- update to 0.2.12:
  * upstream changed to fork from Fedora: https://github.com/caolanm/libwmf
  * fix abi
  * merge in fixes for libgd CVE-2019-6978
  * release with coverity, clang and shellcheck fixes
  * Seeing as wvware.sourceforge.net seems to be dead, but libwmf is still in
    use and has had a bunch of security bugs reported against, and I've a
    history with libwmf, I'll call this libwmf 0.2.9 and merge in my (Red Hat)
    fixes.
- drop libwmf-0.2.8.4-ia64.patch, libwmf-0.2.8.4-config.patch: obsolete
- drop libwmf-0.2.8.4-overflow-CVE-2006-3376.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b9cc022c8d7dd8c557e2dae5681c2d344237b4f9
- drop libwmf-0.2.8.4-CVE-2015-0848.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-badrle.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-CVE-2015-4696.patch: upstream via
  https://github.com/caolanm/libwmf/commit/f47cbdf96838c2daa7b8e489f59e62371d33352a
- drop libwmf-0.2.8.4-CVE-2015-4695.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b5ae5d1f3bbddf051a5c9dd01897bd835817f013
- drop reproducible.patch: differently done upstream
- drop use-pkg-config-for-freetype.patch: obsolete</changelog>
  <changelog author="fstrba@suse.com" date="1621425600">- Define conditionally make_build to fix build on systems that do
  not have that macro</changelog>
</package>
<package pkgid="646f3b87a459fd99d1873eca50b43ba2405126a2ddfcef73cc9fb6a3bafc099c" name="libwmf-gnome" arch="s390x">
  <version epoch="0" ver="0.2.12" rel="150000.4.4.1"/>
  <changelog author="fstrba@suse.com" date="1434024000">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-0848.patch
  - Fix CVE-2015-0848: Heap overflow on libwmf0.2-7 (bsc#933109)
  * libwmf-0.2.8.4-badrle.patch
  - Fix CVE-2015-4588: DecodeImage() does not check that the
    run-length "count" fits into the total size of the image,
    which can lead to a heap-based buffer overflow (bsc#933109)</changelog>
  <changelog author="fstrba@suse.com" date="1435665600">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-4695.patch
  - Fix CVE-2015-4695: meta_pen_create heap buffer over read
    (bsc#936058)
  * libwmf-0.2.8.4-CVE-2015-4696.patch
  - Fix CVE-2015-4696: wmf2gd/wmf2eps use after free (bsc#936062)</changelog>
  <changelog author="bwiedemann@suse.com" date="1497960000">- Add reproducible.patch to sort input files to make build reproducible (boo#1041090)</changelog>
  <changelog author="sndirsch@suse.com" date="1517227200">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519905600">- Fix -devel package Requires not to still include xorg-x11-devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520942400">- libwmf-0.2.8.4-config.patch: update so -config --libs
  do not inject bogus dependencies to other packages.
- build with disable-static too.</changelog>
  <changelog author="idonmez@suse.com" date="1525435200">- Add use-pkg-config-for-freetype.patch to use pkgconfig to detect
  Freetype libraries. Add BR autoconf, automake, libtool due to
  above.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- update to 0.2.12:
  * upstream changed to fork from Fedora: https://github.com/caolanm/libwmf
  * fix abi
  * merge in fixes for libgd CVE-2019-6978
  * release with coverity, clang and shellcheck fixes
  * Seeing as wvware.sourceforge.net seems to be dead, but libwmf is still in
    use and has had a bunch of security bugs reported against, and I've a
    history with libwmf, I'll call this libwmf 0.2.9 and merge in my (Red Hat)
    fixes.
- drop libwmf-0.2.8.4-ia64.patch, libwmf-0.2.8.4-config.patch: obsolete
- drop libwmf-0.2.8.4-overflow-CVE-2006-3376.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b9cc022c8d7dd8c557e2dae5681c2d344237b4f9
- drop libwmf-0.2.8.4-CVE-2015-0848.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-badrle.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-CVE-2015-4696.patch: upstream via
  https://github.com/caolanm/libwmf/commit/f47cbdf96838c2daa7b8e489f59e62371d33352a
- drop libwmf-0.2.8.4-CVE-2015-4695.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b5ae5d1f3bbddf051a5c9dd01897bd835817f013
- drop reproducible.patch: differently done upstream
- drop use-pkg-config-for-freetype.patch: obsolete</changelog>
  <changelog author="fstrba@suse.com" date="1621425600">- Define conditionally make_build to fix build on systems that do
  not have that macro</changelog>
</package>
<package pkgid="08bc5aa47a5d42a90dd0912ab5706f5336a1354033aaf52a5e81cd80a66c55d8" name="libwmf-gnome" arch="x86_64">
  <version epoch="0" ver="0.2.12" rel="150000.4.4.1"/>
  <changelog author="fstrba@suse.com" date="1434024000">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-0848.patch
  - Fix CVE-2015-0848: Heap overflow on libwmf0.2-7 (bsc#933109)
  * libwmf-0.2.8.4-badrle.patch
  - Fix CVE-2015-4588: DecodeImage() does not check that the
    run-length "count" fits into the total size of the image,
    which can lead to a heap-based buffer overflow (bsc#933109)</changelog>
  <changelog author="fstrba@suse.com" date="1435665600">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-4695.patch
  - Fix CVE-2015-4695: meta_pen_create heap buffer over read
    (bsc#936058)
  * libwmf-0.2.8.4-CVE-2015-4696.patch
  - Fix CVE-2015-4696: wmf2gd/wmf2eps use after free (bsc#936062)</changelog>
  <changelog author="bwiedemann@suse.com" date="1497960000">- Add reproducible.patch to sort input files to make build reproducible (boo#1041090)</changelog>
  <changelog author="sndirsch@suse.com" date="1517227200">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519905600">- Fix -devel package Requires not to still include xorg-x11-devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520942400">- libwmf-0.2.8.4-config.patch: update so -config --libs
  do not inject bogus dependencies to other packages.
- build with disable-static too.</changelog>
  <changelog author="idonmez@suse.com" date="1525435200">- Add use-pkg-config-for-freetype.patch to use pkgconfig to detect
  Freetype libraries. Add BR autoconf, automake, libtool due to
  above.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- update to 0.2.12:
  * upstream changed to fork from Fedora: https://github.com/caolanm/libwmf
  * fix abi
  * merge in fixes for libgd CVE-2019-6978
  * release with coverity, clang and shellcheck fixes
  * Seeing as wvware.sourceforge.net seems to be dead, but libwmf is still in
    use and has had a bunch of security bugs reported against, and I've a
    history with libwmf, I'll call this libwmf 0.2.9 and merge in my (Red Hat)
    fixes.
- drop libwmf-0.2.8.4-ia64.patch, libwmf-0.2.8.4-config.patch: obsolete
- drop libwmf-0.2.8.4-overflow-CVE-2006-3376.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b9cc022c8d7dd8c557e2dae5681c2d344237b4f9
- drop libwmf-0.2.8.4-CVE-2015-0848.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-badrle.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-CVE-2015-4696.patch: upstream via
  https://github.com/caolanm/libwmf/commit/f47cbdf96838c2daa7b8e489f59e62371d33352a
- drop libwmf-0.2.8.4-CVE-2015-4695.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b5ae5d1f3bbddf051a5c9dd01897bd835817f013
- drop reproducible.patch: differently done upstream
- drop use-pkg-config-for-freetype.patch: obsolete</changelog>
  <changelog author="fstrba@suse.com" date="1621425600">- Define conditionally make_build to fix build on systems that do
  not have that macro</changelog>
</package>
<package pkgid="a2d390ad6c715159f59c39d692a971ba466320df1e646e533cf47c5ad0c8adb6" name="libwmf-gnome-32bit" arch="x86_64">
  <version epoch="0" ver="0.2.12" rel="150000.4.4.1"/>
  <changelog author="fstrba@suse.com" date="1434024000">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-0848.patch
  - Fix CVE-2015-0848: Heap overflow on libwmf0.2-7 (bsc#933109)
  * libwmf-0.2.8.4-badrle.patch
  - Fix CVE-2015-4588: DecodeImage() does not check that the
    run-length "count" fits into the total size of the image,
    which can lead to a heap-based buffer overflow (bsc#933109)</changelog>
  <changelog author="fstrba@suse.com" date="1435665600">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-4695.patch
  - Fix CVE-2015-4695: meta_pen_create heap buffer over read
    (bsc#936058)
  * libwmf-0.2.8.4-CVE-2015-4696.patch
  - Fix CVE-2015-4696: wmf2gd/wmf2eps use after free (bsc#936062)</changelog>
  <changelog author="bwiedemann@suse.com" date="1497960000">- Add reproducible.patch to sort input files to make build reproducible (boo#1041090)</changelog>
  <changelog author="sndirsch@suse.com" date="1517227200">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519905600">- Fix -devel package Requires not to still include xorg-x11-devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520942400">- libwmf-0.2.8.4-config.patch: update so -config --libs
  do not inject bogus dependencies to other packages.
- build with disable-static too.</changelog>
  <changelog author="idonmez@suse.com" date="1525435200">- Add use-pkg-config-for-freetype.patch to use pkgconfig to detect
  Freetype libraries. Add BR autoconf, automake, libtool due to
  above.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- update to 0.2.12:
  * upstream changed to fork from Fedora: https://github.com/caolanm/libwmf
  * fix abi
  * merge in fixes for libgd CVE-2019-6978
  * release with coverity, clang and shellcheck fixes
  * Seeing as wvware.sourceforge.net seems to be dead, but libwmf is still in
    use and has had a bunch of security bugs reported against, and I've a
    history with libwmf, I'll call this libwmf 0.2.9 and merge in my (Red Hat)
    fixes.
- drop libwmf-0.2.8.4-ia64.patch, libwmf-0.2.8.4-config.patch: obsolete
- drop libwmf-0.2.8.4-overflow-CVE-2006-3376.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b9cc022c8d7dd8c557e2dae5681c2d344237b4f9
- drop libwmf-0.2.8.4-CVE-2015-0848.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-badrle.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-CVE-2015-4696.patch: upstream via
  https://github.com/caolanm/libwmf/commit/f47cbdf96838c2daa7b8e489f59e62371d33352a
- drop libwmf-0.2.8.4-CVE-2015-4695.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b5ae5d1f3bbddf051a5c9dd01897bd835817f013
- drop reproducible.patch: differently done upstream
- drop use-pkg-config-for-freetype.patch: obsolete</changelog>
  <changelog author="fstrba@suse.com" date="1621425600">- Define conditionally make_build to fix build on systems that do
  not have that macro</changelog>
</package>
<package pkgid="d728207bd7102784da87a26dcf824002607587f6bc3fae5a62f537cf28a7b35a" name="libwmf-tools" arch="aarch64">
  <version epoch="0" ver="0.2.12" rel="150000.4.4.1"/>
  <changelog author="fstrba@suse.com" date="1434024000">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-0848.patch
  - Fix CVE-2015-0848: Heap overflow on libwmf0.2-7 (bsc#933109)
  * libwmf-0.2.8.4-badrle.patch
  - Fix CVE-2015-4588: DecodeImage() does not check that the
    run-length "count" fits into the total size of the image,
    which can lead to a heap-based buffer overflow (bsc#933109)</changelog>
  <changelog author="fstrba@suse.com" date="1435665600">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-4695.patch
  - Fix CVE-2015-4695: meta_pen_create heap buffer over read
    (bsc#936058)
  * libwmf-0.2.8.4-CVE-2015-4696.patch
  - Fix CVE-2015-4696: wmf2gd/wmf2eps use after free (bsc#936062)</changelog>
  <changelog author="bwiedemann@suse.com" date="1497960000">- Add reproducible.patch to sort input files to make build reproducible (boo#1041090)</changelog>
  <changelog author="sndirsch@suse.com" date="1517227200">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519905600">- Fix -devel package Requires not to still include xorg-x11-devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520942400">- libwmf-0.2.8.4-config.patch: update so -config --libs
  do not inject bogus dependencies to other packages.
- build with disable-static too.</changelog>
  <changelog author="idonmez@suse.com" date="1525435200">- Add use-pkg-config-for-freetype.patch to use pkgconfig to detect
  Freetype libraries. Add BR autoconf, automake, libtool due to
  above.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- update to 0.2.12:
  * upstream changed to fork from Fedora: https://github.com/caolanm/libwmf
  * fix abi
  * merge in fixes for libgd CVE-2019-6978
  * release with coverity, clang and shellcheck fixes
  * Seeing as wvware.sourceforge.net seems to be dead, but libwmf is still in
    use and has had a bunch of security bugs reported against, and I've a
    history with libwmf, I'll call this libwmf 0.2.9 and merge in my (Red Hat)
    fixes.
- drop libwmf-0.2.8.4-ia64.patch, libwmf-0.2.8.4-config.patch: obsolete
- drop libwmf-0.2.8.4-overflow-CVE-2006-3376.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b9cc022c8d7dd8c557e2dae5681c2d344237b4f9
- drop libwmf-0.2.8.4-CVE-2015-0848.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-badrle.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-CVE-2015-4696.patch: upstream via
  https://github.com/caolanm/libwmf/commit/f47cbdf96838c2daa7b8e489f59e62371d33352a
- drop libwmf-0.2.8.4-CVE-2015-4695.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b5ae5d1f3bbddf051a5c9dd01897bd835817f013
- drop reproducible.patch: differently done upstream
- drop use-pkg-config-for-freetype.patch: obsolete</changelog>
  <changelog author="fstrba@suse.com" date="1621425600">- Define conditionally make_build to fix build on systems that do
  not have that macro</changelog>
</package>
<package pkgid="c40a6a84298ef39061d4851d9850b0f2ee0196badba8e437ce90d10bdd66892e" name="libwmf-tools" arch="ppc64le">
  <version epoch="0" ver="0.2.12" rel="150000.4.4.1"/>
  <changelog author="fstrba@suse.com" date="1434024000">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-0848.patch
  - Fix CVE-2015-0848: Heap overflow on libwmf0.2-7 (bsc#933109)
  * libwmf-0.2.8.4-badrle.patch
  - Fix CVE-2015-4588: DecodeImage() does not check that the
    run-length "count" fits into the total size of the image,
    which can lead to a heap-based buffer overflow (bsc#933109)</changelog>
  <changelog author="fstrba@suse.com" date="1435665600">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-4695.patch
  - Fix CVE-2015-4695: meta_pen_create heap buffer over read
    (bsc#936058)
  * libwmf-0.2.8.4-CVE-2015-4696.patch
  - Fix CVE-2015-4696: wmf2gd/wmf2eps use after free (bsc#936062)</changelog>
  <changelog author="bwiedemann@suse.com" date="1497960000">- Add reproducible.patch to sort input files to make build reproducible (boo#1041090)</changelog>
  <changelog author="sndirsch@suse.com" date="1517227200">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519905600">- Fix -devel package Requires not to still include xorg-x11-devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520942400">- libwmf-0.2.8.4-config.patch: update so -config --libs
  do not inject bogus dependencies to other packages.
- build with disable-static too.</changelog>
  <changelog author="idonmez@suse.com" date="1525435200">- Add use-pkg-config-for-freetype.patch to use pkgconfig to detect
  Freetype libraries. Add BR autoconf, automake, libtool due to
  above.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- update to 0.2.12:
  * upstream changed to fork from Fedora: https://github.com/caolanm/libwmf
  * fix abi
  * merge in fixes for libgd CVE-2019-6978
  * release with coverity, clang and shellcheck fixes
  * Seeing as wvware.sourceforge.net seems to be dead, but libwmf is still in
    use and has had a bunch of security bugs reported against, and I've a
    history with libwmf, I'll call this libwmf 0.2.9 and merge in my (Red Hat)
    fixes.
- drop libwmf-0.2.8.4-ia64.patch, libwmf-0.2.8.4-config.patch: obsolete
- drop libwmf-0.2.8.4-overflow-CVE-2006-3376.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b9cc022c8d7dd8c557e2dae5681c2d344237b4f9
- drop libwmf-0.2.8.4-CVE-2015-0848.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-badrle.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-CVE-2015-4696.patch: upstream via
  https://github.com/caolanm/libwmf/commit/f47cbdf96838c2daa7b8e489f59e62371d33352a
- drop libwmf-0.2.8.4-CVE-2015-4695.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b5ae5d1f3bbddf051a5c9dd01897bd835817f013
- drop reproducible.patch: differently done upstream
- drop use-pkg-config-for-freetype.patch: obsolete</changelog>
  <changelog author="fstrba@suse.com" date="1621425600">- Define conditionally make_build to fix build on systems that do
  not have that macro</changelog>
</package>
<package pkgid="824fe6b40a3001263a324f6bce57fe772086b38b7ecbf3a4fb974fb90a4f04d0" name="libwmf-tools" arch="s390x">
  <version epoch="0" ver="0.2.12" rel="150000.4.4.1"/>
  <changelog author="fstrba@suse.com" date="1434024000">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-0848.patch
  - Fix CVE-2015-0848: Heap overflow on libwmf0.2-7 (bsc#933109)
  * libwmf-0.2.8.4-badrle.patch
  - Fix CVE-2015-4588: DecodeImage() does not check that the
    run-length "count" fits into the total size of the image,
    which can lead to a heap-based buffer overflow (bsc#933109)</changelog>
  <changelog author="fstrba@suse.com" date="1435665600">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-4695.patch
  - Fix CVE-2015-4695: meta_pen_create heap buffer over read
    (bsc#936058)
  * libwmf-0.2.8.4-CVE-2015-4696.patch
  - Fix CVE-2015-4696: wmf2gd/wmf2eps use after free (bsc#936062)</changelog>
  <changelog author="bwiedemann@suse.com" date="1497960000">- Add reproducible.patch to sort input files to make build reproducible (boo#1041090)</changelog>
  <changelog author="sndirsch@suse.com" date="1517227200">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519905600">- Fix -devel package Requires not to still include xorg-x11-devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520942400">- libwmf-0.2.8.4-config.patch: update so -config --libs
  do not inject bogus dependencies to other packages.
- build with disable-static too.</changelog>
  <changelog author="idonmez@suse.com" date="1525435200">- Add use-pkg-config-for-freetype.patch to use pkgconfig to detect
  Freetype libraries. Add BR autoconf, automake, libtool due to
  above.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- update to 0.2.12:
  * upstream changed to fork from Fedora: https://github.com/caolanm/libwmf
  * fix abi
  * merge in fixes for libgd CVE-2019-6978
  * release with coverity, clang and shellcheck fixes
  * Seeing as wvware.sourceforge.net seems to be dead, but libwmf is still in
    use and has had a bunch of security bugs reported against, and I've a
    history with libwmf, I'll call this libwmf 0.2.9 and merge in my (Red Hat)
    fixes.
- drop libwmf-0.2.8.4-ia64.patch, libwmf-0.2.8.4-config.patch: obsolete
- drop libwmf-0.2.8.4-overflow-CVE-2006-3376.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b9cc022c8d7dd8c557e2dae5681c2d344237b4f9
- drop libwmf-0.2.8.4-CVE-2015-0848.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-badrle.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-CVE-2015-4696.patch: upstream via
  https://github.com/caolanm/libwmf/commit/f47cbdf96838c2daa7b8e489f59e62371d33352a
- drop libwmf-0.2.8.4-CVE-2015-4695.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b5ae5d1f3bbddf051a5c9dd01897bd835817f013
- drop reproducible.patch: differently done upstream
- drop use-pkg-config-for-freetype.patch: obsolete</changelog>
  <changelog author="fstrba@suse.com" date="1621425600">- Define conditionally make_build to fix build on systems that do
  not have that macro</changelog>
</package>
<package pkgid="31b0a37dc1f0e6ef6374490a453d8fb685d72d1922f9e7d0c15aa09667d97892" name="libwmf-tools" arch="x86_64">
  <version epoch="0" ver="0.2.12" rel="150000.4.4.1"/>
  <changelog author="fstrba@suse.com" date="1434024000">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-0848.patch
  - Fix CVE-2015-0848: Heap overflow on libwmf0.2-7 (bsc#933109)
  * libwmf-0.2.8.4-badrle.patch
  - Fix CVE-2015-4588: DecodeImage() does not check that the
    run-length "count" fits into the total size of the image,
    which can lead to a heap-based buffer overflow (bsc#933109)</changelog>
  <changelog author="fstrba@suse.com" date="1435665600">- Added patches:
  * libwmf-0.2.8.4-CVE-2015-4695.patch
  - Fix CVE-2015-4695: meta_pen_create heap buffer over read
    (bsc#936058)
  * libwmf-0.2.8.4-CVE-2015-4696.patch
  - Fix CVE-2015-4696: wmf2gd/wmf2eps use after free (bsc#936062)</changelog>
  <changelog author="bwiedemann@suse.com" date="1497960000">- Add reproducible.patch to sort input files to make build reproducible (boo#1041090)</changelog>
  <changelog author="sndirsch@suse.com" date="1517227200">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519905600">- Fix -devel package Requires not to still include xorg-x11-devel</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520942400">- libwmf-0.2.8.4-config.patch: update so -config --libs
  do not inject bogus dependencies to other packages.
- build with disable-static too.</changelog>
  <changelog author="idonmez@suse.com" date="1525435200">- Add use-pkg-config-for-freetype.patch to use pkgconfig to detect
  Freetype libraries. Add BR autoconf, automake, libtool due to
  above.</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1598270400">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- update to 0.2.12:
  * upstream changed to fork from Fedora: https://github.com/caolanm/libwmf
  * fix abi
  * merge in fixes for libgd CVE-2019-6978
  * release with coverity, clang and shellcheck fixes
  * Seeing as wvware.sourceforge.net seems to be dead, but libwmf is still in
    use and has had a bunch of security bugs reported against, and I've a
    history with libwmf, I'll call this libwmf 0.2.9 and merge in my (Red Hat)
    fixes.
- drop libwmf-0.2.8.4-ia64.patch, libwmf-0.2.8.4-config.patch: obsolete
- drop libwmf-0.2.8.4-overflow-CVE-2006-3376.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b9cc022c8d7dd8c557e2dae5681c2d344237b4f9
- drop libwmf-0.2.8.4-CVE-2015-0848.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-badrle.patch: part of
  https://github.com/caolanm/libwmf/commit/879d6bffa6dd21b8c0e9ec3b5aa31b6ae090ef83
- drop libwmf-0.2.8.4-CVE-2015-4696.patch: upstream via
  https://github.com/caolanm/libwmf/commit/f47cbdf96838c2daa7b8e489f59e62371d33352a
- drop libwmf-0.2.8.4-CVE-2015-4695.patch: upstream via
  https://github.com/caolanm/libwmf/commit/b5ae5d1f3bbddf051a5c9dd01897bd835817f013
- drop reproducible.patch: differently done upstream
- drop use-pkg-config-for-freetype.patch: obsolete</changelog>
  <changelog author="fstrba@suse.com" date="1621425600">- Define conditionally make_build to fix build on systems that do
  not have that macro</changelog>
</package>
<package pkgid="6967d709a0a426d8285b86d4c4226091e2fa446d91757bf50158c08a376aec50" name="libwsman-devel" arch="aarch64">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="5fba72ac84c2dd48c695db70bd01d99af739c845455d2e99bf2fe3fd272eb88a" name="libwsman-devel" arch="ppc64le">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="2790647d6489b0e7e9ab92a3e9f237dedf1da50a18298c84bc33652ac45b012d" name="libwsman-devel" arch="s390x">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="9578526c6e1f7ca11a4fbf44e154977e3ef1888a642b5d1510ab60d107d03c9a" name="libwsman-devel" arch="x86_64">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="b7e22377db9fe712d9ae35cf1094b7d1c3d90b7bbb2c02a7546fa298001b36ce" name="libwsman3" arch="aarch64">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="ec8c445cf5b556aee210bbbd76216bb96b15ed7ecd46f13cd9fdff1956d016d8" name="libwsman3" arch="ppc64le">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="f54c134f249e0334aa758c77b700d87c2eaceb7d4134207c9d8c91ada1b7d1d5" name="libwsman3" arch="s390x">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="9c2e8308f67b763b668daf858458968e2236cc6a1114dec5fa478b1529a3093d" name="libwsman3" arch="x86_64">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="89e76ecb986b3bb1c0e2c3ff1b016a3cd3212cb930d6ddd74ddbb816fe4add3d" name="libwsman_clientpp-devel" arch="aarch64">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="0b6278249d524cab630db4e5779fbdd2732a4f08d11dd738b6414fb194dbb3cf" name="libwsman_clientpp-devel" arch="ppc64le">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="ee044b563f2db15556c4bd2bec78ac7a386e8363b1dab44a8f897019744a43a1" name="libwsman_clientpp-devel" arch="s390x">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="90fd82c71605920d24415c77d1fd200202be312e78693bd59937bfe141988a67" name="libwsman_clientpp-devel" arch="x86_64">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="d0298dc7758420d5bb90f341cd39548553cbc7799bb3211b4e1d75e47cf1a38c" name="libwsman_clientpp1" arch="aarch64">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="8aea6036b1818cc3fe32b1d775ac5b8f68d0889bec54bdcd4be5445f16827d86" name="libwsman_clientpp1" arch="ppc64le">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="ddc15bf3baeb8173795fd5449ac6570267711cd2ef547037bbc9438dae67b175" name="libwsman_clientpp1" arch="s390x">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="b365b6dfc55607e06766704c01ce473f276b70f418fa4843042851fe2b61d29a" name="libwsman_clientpp1" arch="x86_64">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="13a99321157db6b9f1b4db8fba87294ef5cd8c2fdff89d1618b67c0da5346ffe" name="lifecycle-data-sle-module-live-patching" arch="noarch">
  <version epoch="0" ver="15" rel="150000.4.72.1"/>
  <changelog author="lpechacek@suse.com" date="1562673600">- Added data for 4_12_14-150_14, 4_12_14-150_17, 4_12_14-150_22,
  4_12_14-195, 4_12_14-197_4, 4_12_14-197_7,
  4_12_14-25_28. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1569326400">- Added data for 4_12_14-150_27, 4_12_14-150_32, 4_12_14-150_35,
  4_12_14-197_10, 4_12_14-197_15. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1574942400">- Added data for 4_12_14-150_38, 4_12_14-150_41, 4_12_14-197_18,
  4_12_14-197_21, 4_12_14-197_26. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1579089600">- Removed duplicate records and added data for 4_12_14-150_47,
  4_12_14-197_29. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1584964800">- Added data for 4_12_14-197_34. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1589198400">- Added data for 4_12_14-197_37, 4_12_14-197_40. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1593432000">- Added data for 4_12_14-150_52, 4_12_14-197_45. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1596715200">- Added data for 4_12_14-150_55, 4_12_14-197_48, 5_3_18-22, 5_3_18-24_9. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1600776000">- Added data for 4_12_14-150_58, 4_12_14-197_51, 4_12_14-197_56,
  5_3_18-24_12, 5_3_18-24_15. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1605182400">- Added data for 4_12_14-197_61, 4_12_14-197_64, 4_12_14-197_67,
  5_3_18-24_24, 5_3_18-24_29, 5_3_18-24_34, 5_3_18-24_37. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1608120000">- Added data for 4_12_14-150_63, 4_12_14-197_72, 4_12_14-197_75,
  5_3_18-24_43. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1613390400">- Added data for 4_12_14-150_66, 4_12_14-197_78, 5_3_18-24_46, 5_3_18-24_49. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1617192000">- Added data for 4_12_14-150_69, 4_12_14-197_83, 4_12_14-197_86,
  5_3_18-24_52. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1621425600">- Added data for 4_12_14-150_72, 4_12_14-197_89, 5_3_18-24_61, 5_3_18-24_64. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1626264000">- Added data for 4_12_14-197_92, 5_3_18-24_53_4, 5_3_18-24_67, 5_3_18-57,
  5_3_18-59_10, 5_3_18-59_5. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1630497600">- Added data for 4_12_14-150_75, 4_12_14-197_99, 5_3_18-24_70, 5_3_18-24_75,
  5_3_18-24_78, 5_3_18-59_13, 5_3_18-59_16, 5_3_18-59_19. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1634731200">- Added data for 5_3_18-24_83, 5_3_18-24_86, 5_3_18-59_24, 5_3_18-59_27. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1639483200">- Added data for 4_12_14-150_78, 4_12_14-197_102, 5_3_18-24_93,
  5_3_18-24_96, 5_3_18-59_30, 5_3_18-59_34, 5_3_18-59_37. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1643803200">- Added data for 5_3_18-150300_59_43, 5_3_18-24_99, 5_3_18-59_40. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1647518400">- Added data for 4_12_14-150_83, 4_12_14-150_86, 4_12_14-197_105,
  4_12_14-197_108, 5_3_18-150300_59_46,
  5_3_18-150300_59_49, 5_3_18-150300_59_54, 5_3_18-24_102,
  5_3_18-24_107. (bsc#1020320)</changelog>
</package>
<package pkgid="c5c1bc85835d8d3011af293acbcbdc7df1b612f263a956fd2e55a4de4e1c497b" name="lifecycle-data-sle-module-live-patching" arch="src">
  <version epoch="0" ver="15" rel="150000.4.72.1"/>
  <changelog author="lpechacek@suse.com" date="1562673600">- Added data for 4_12_14-150_14, 4_12_14-150_17, 4_12_14-150_22,
  4_12_14-195, 4_12_14-197_4, 4_12_14-197_7,
  4_12_14-25_28. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1569326400">- Added data for 4_12_14-150_27, 4_12_14-150_32, 4_12_14-150_35,
  4_12_14-197_10, 4_12_14-197_15. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1574942400">- Added data for 4_12_14-150_38, 4_12_14-150_41, 4_12_14-197_18,
  4_12_14-197_21, 4_12_14-197_26. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1579089600">- Removed duplicate records and added data for 4_12_14-150_47,
  4_12_14-197_29. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1584964800">- Added data for 4_12_14-197_34. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1589198400">- Added data for 4_12_14-197_37, 4_12_14-197_40. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1593432000">- Added data for 4_12_14-150_52, 4_12_14-197_45. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1596715200">- Added data for 4_12_14-150_55, 4_12_14-197_48, 5_3_18-22, 5_3_18-24_9. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1600776000">- Added data for 4_12_14-150_58, 4_12_14-197_51, 4_12_14-197_56,
  5_3_18-24_12, 5_3_18-24_15. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1605182400">- Added data for 4_12_14-197_61, 4_12_14-197_64, 4_12_14-197_67,
  5_3_18-24_24, 5_3_18-24_29, 5_3_18-24_34, 5_3_18-24_37. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1608120000">- Added data for 4_12_14-150_63, 4_12_14-197_72, 4_12_14-197_75,
  5_3_18-24_43. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1613390400">- Added data for 4_12_14-150_66, 4_12_14-197_78, 5_3_18-24_46, 5_3_18-24_49. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1617192000">- Added data for 4_12_14-150_69, 4_12_14-197_83, 4_12_14-197_86,
  5_3_18-24_52. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1621425600">- Added data for 4_12_14-150_72, 4_12_14-197_89, 5_3_18-24_61, 5_3_18-24_64. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1626264000">- Added data for 4_12_14-197_92, 5_3_18-24_53_4, 5_3_18-24_67, 5_3_18-57,
  5_3_18-59_10, 5_3_18-59_5. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1630497600">- Added data for 4_12_14-150_75, 4_12_14-197_99, 5_3_18-24_70, 5_3_18-24_75,
  5_3_18-24_78, 5_3_18-59_13, 5_3_18-59_16, 5_3_18-59_19. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1634731200">- Added data for 5_3_18-24_83, 5_3_18-24_86, 5_3_18-59_24, 5_3_18-59_27. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1639483200">- Added data for 4_12_14-150_78, 4_12_14-197_102, 5_3_18-24_93,
  5_3_18-24_96, 5_3_18-59_30, 5_3_18-59_34, 5_3_18-59_37. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1643803200">- Added data for 5_3_18-150300_59_43, 5_3_18-24_99, 5_3_18-59_40. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1647518400">- Added data for 4_12_14-150_83, 4_12_14-150_86, 4_12_14-197_105,
  4_12_14-197_108, 5_3_18-150300_59_46,
  5_3_18-150300_59_49, 5_3_18-150300_59_54, 5_3_18-24_102,
  5_3_18-24_107. (bsc#1020320)</changelog>
</package>
<package pkgid="2e5a422d7fd50de6bdec9c2d973764550a94ab8ffd0469c8d4de917db66a2589" name="lirc" arch="src">
  <version epoch="0" ver="0.9.4c" rel="150000.4.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Run spec-cleaner
- Replace xorg-x11-devel with pkgconfig(x11)
- Do not run autoreconf, configure.ac is broken and patches
  are not modifying autotools files.</changelog>
  <changelog author="ledest@gmail.com" date="1417262400">- fix bashism in lirc-codecs-regression-test.sh script
- add patches:
  * lirc-0.9.1a-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1424260800">- Update to version 0.9.2a
  * Maintenance release: bugfixes, no new features.
  * Notably fixes #85, multiple --connect regression.
  * Fixes bad bug for locating ~/.lircrc config file.
  * Documentation and lirc.org updates.
  * All in all 19 patches.
- Split each lirc module in his own package
  * core : contains needed binaries to run basically lirc; it obsoletes
    previous lirc package
  * config: contains tools and data to ease the LIRC configuration process.
    it provides and obsoletes the previous "remotes" packages as
    remotes config files are not provided anymore and the config
    package provides a tool to config a remote
  * liblirc_driver0 : provides the driver library
  * liblirc0 : the main library
  * drv-ftdi: provides ftdi support
  * drv-portaudio : provides portaudio support
  * tools-gui : tools for debugging lirc
- Add pkgconfig(libftdi1) require for Factory; ftdi is only availables
  on Factory
- Add pkgconfig(portaudio-2.0) require; build with portaudio support
- Add python3 build require instead of python; python3 is now the
  default
- Add python3-PyYAML build require and requirement for lirc-config;
  needed for generating table.html and lirc.hwdb, and is a direct
  dependency of lirc-setup
- Remove help2man require; dropped by upstream
- Remove lirc-0.9.1a-fix-bashisms.patch; fixed on upstream release
- Remove 0003-0.9.1a-Bugfix-segfault-when-parsing-connect-in-confi.patch
  fixed on upstream release
- Update patches
  * 0001-Fix-segfault-when-starting-lircd-AUR-41581.patch
  * 0002-lircd-Fix-bad-default-for-lircdfile.patch
- Remove old and not needed lirc-64bit obsoletion
- Add liblirc_driver0 and liblirc0 to baselibs.conf</changelog>
  <changelog author="p.drouand@gmail.com" date="1426766400">- lirc-core provides and obsoletes lirc
- Fix lirc-disable-kernel-rc requirement</changelog>
  <changelog author="p.drouand@gmail.com" date="1427112000">- Fix a typo in obsolete tag</changelog>
  <changelog author="dimstar@opensuse.org" date="1438344000">- Ignore absence of systemd-tmpfiles, it won't be present in the
  build env.</changelog>
  <changelog author="jengelh@inai.de" date="1438344001">- Do not hard depend on systemd - all macro uses support soft</changelog>
  <changelog author="p.drouand@gmail.com" date="1441627200">- Update to version 0.9.3
  * New build dependency: xsltproc (sometimes coming with libxml).
  * The irexec semantics have been changed so that the invoked programs
    run disconnected from the main irexec process. See irexec(1) (#92).
  * irrecord has got some love:
  * irrecord handles multiple definitions of same symbol OK (#78)
  * irrecord : Warns about single-key config files (#77)
  * irrecord : Checks for ambient light disturbances (#76)
  * irrecord : New option allows updating of existing template file.
  * irrecord : Template handling bug fixed
  * irrecord : -l --list-namespace option parsing bug fixed (#101).
  * irrecord : Minor fixes to irrecord-ui including -k option parsing fixed.
  * mode2 has been updated
  * mode2 : Handle also LIRCCODE devices (#94),
  * mode2 : Drop root privileges (#91)
  * mode2 : Add new scope-like display
  * mode2 : Handle the--driver-options switch
  * xmode2 has been updated to handle udp driver, the new --driver-options
    switch + some general overhaul.
  * irrecord has been split into a library and a cli interface (#36).
    The library interface is unstable.
  * irtoy: New support for debug LEDs. New documentation file, support
    in lirc-setup and driver table doc added.
  * The udp driver is patched to allow adjustable clockrates, see new
    udp_driver.html driver doc.
  * The mplay driver has been updated with patches which has been
    available "out there".
  * The select() calls in lircd, lircrcd and library routines have
    been replaced with poll() to avoid crashes when file descriptors
    becomes &gt; 1024 (#109).
  * Set supplementary groups using effective-user (RH bz 1253907).
  * Work around kernel bug in /dev/lirc0 output (#119).
  * lircmd: Several option parsing bugs fixed, one of which blocked the
    systemd service (#104, RH bz 1234155).
  * lirc-lsremotes now displays logs after parsing files, making more
    parsing warnings visible.
  * lirc-config-tool is fixed to comply with guidelines (#105).
  * Bug in irexec when using modes fixed (#102).
  * Create log directory if required (#124).
  * lirc-setup: Fixed name clash on recent python versions.
  * The library routines for parsing lircd.conf now warns for duplicate
    keys and values (#107).
  * Enhanced pkg-config support for drivers compiled out-of-tree
    (see driver-api in the manual).
  * Unlinked and hard to find driver docs and manpages have been linked.
  * The documentation is heavily revised. Old obsolete text is removed,
    the manual is reorganized, some info is moved to manpages and a lot
    of minor updates and bugfixes.
  * The compiler has been switched to c++, and filenames are updated
    to *.cpp (#79)
  * The lircd.simsend and lircd.simreceive tools have been removed, superseeded
    by irsimsend and irsimreceive.
  * A new kernel driver irpipe has been added. This allows feeding data from
    userspace to lircd, which can use the /dev/irpipeX device as a clean
    substitute for /dev/lircX. A companion CLI tool irpipe(1) is also added.
  * Options parsing (notably -U) and just listing first remote bugs in
    irsimsend have been fixed.
  * Overall code formatting is improved with more consistent layout and
    updated git hook. See CONTRIBUTE.md'
  * Build: now uses parallel make by default.
  * Hardcoded CFLAGS in Makefiles fixed (#124).
- Update patches
  * 0002-lircd-Fix-bad-default-for-lircdfile.patch
  * 0004-lircd-fix-compiler-error-format-security-error.patch
- Remove imon2_conf.patch; fixed on upstream release
- Add a dependency to libxslt-tools and gcc-c++
- Add libirrecord0 subpackage</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Add missing dependency on libirman (boo#941883)
- Update way tmpfiles.d are created
- Use correct symlinks for services</changelog>
  <changelog author="mpluskal@suse.com" date="1445774400">- Update to 0.9.3a
  * Broken fix for kernel bug reverted (#148, #119). This makes
    lirc incompatible with at least the 4.04 kernels. kernels
    &lt; 4.0 and &gt; 4.1.6 seemingly works.
  * Several irrecord fixes (#146, #139, d8826b, #141).
  * Some fixes for poll() usage, one of which blocked irrecord
    (02c2480, d9339b6).
  * lib: Fix parsing of multiple files (#141).
  * lib: Fix privilege dropping code and a compiler flag (e8be7ae,
    8a08ab1)
  * lirc-lsplugins: Fix --plugindir not being respected (#144).
  * atilibusb: Fix crash for non-existing device (#145).
  * plugins: file.c: Fix off-by-one sscanf error (#138).</changelog>
  <changelog author="p.drouand@gmail.com" date="1449403200">- Ensure lirc build against libusb-1.0; replace libusb-devel with
  pkgconfig(libusb-1.0)</changelog>
  <changelog author="pgajdos@suse.com" date="1458216000">- remove lirc.4 as this is part of man-pages from 4.05 on</changelog>
  <changelog author="p.drouand@gmail.com" date="1465819200">- Update to version 0.9.4
  * The caraca driver has been retired (still available in attic/).
  * The iguanair driver has been moved out of tree and is now
    maintained by Iguanaworks, Inc. See drivers/iguanair/README.
  * The irman driver has been moved out of tree. From 0.5.1 the
    libirman package contains the driver. See drivers/irman/README
  * The yard2 driver has been moved out of tree and is now maintained
    by the yard2 project. See driver/yard2/README.
  * The lirc.4 manpage (/dev/lirc* interface) is upstreamed to the
    linux kernel manpages project (#164). Old page lirc.4l still
    lingers in attic/ but is not installed.
  * Upstream selinux updated to match current lircd requirements.
    See: https://github.com/fedora-selinux/selinux-policy/pull/41
  * New upstream debian packaging with which Debian users can create
    .deb packages. Ubuntu packages are also available in PPAs. See
    README.md in the debian branch (#137).
  * New driver girs for the GIRS protocol, gives LIRC Arduino support.
    See new info in driver documentation.
  * New transmit-only FTDI driver with enhanced accuracy and hardware
    support. See ftdix driver documentation.
  * Support for non-modulated signals added (#132).
  * As shipped, lircd now uses the devinput driver and the new 'auto'
    device, should work for all remotes supported by kernel (#106).
  * Enhanced lirc-setup tool (#123, partly):
  - Add drvctl device enumeration support.
  - Integrated mode2 and irw tests of current configuration.
  - Documentation links.
  - More consistent data based on new database.
  - Multiple bugfixes.
  * Several patches to make mode2 work with all drivers(#123, partly)
  * Configuration database overhaul (#123, partly)
  - Database lives as yaml files in configs/.
  - Data is collected from drivers, remotes and static files.
  - Better ways for drivers to enumerate devices.
  - There is an unstable python database module used by
    all tools.
  * Several drivers including default and devinput has enhanced
    enumeration support, usable with mode2 -l and lirc-setup.
  * devinput.lircd.conf is generated at build time to match host kernel,
    new script lirc-make-devinput shipped to re-generate it (#153)
  * A new script lircd-setup runs as a one-shot service before lircd,
    performing setup commands as root (#121).
  * Several new examples in contrib/, notably lircrc templates for
    many popular LIRC applications and improved udev rules.
  * The default driver does not require root perms if the protocol
    is correct (#133).
  * Add an "auto" device to devinput driver for single-device
    usecase (#134).
  * irrecord has been taught to handle remotes without gap (#98).
  * The --uinput lircd option is deprecated, obsoleted by the
    lircd.uinput.service systemd service. See lircd-uinput(8).
  * CLI options for mode2, xmode2 and irrecord has been streamlined.
    All tools falls back to lircd defaults where it makes sense.
  * The driver API has been expanded with functions to enumerate
    devices. See configs/README and lib/driver.h.
  * New logging API with hooks for enhanced messages and filtering
    (also #129).
  * The out-of-tree build interface is enhanced with hooks for external
    drivers to rebuild documentation and add a config file.
  * lircd: Fix too-short gap  when sending/blasting (#158).
  * lircd: Fix typo causing lost deinit_func() calls (#179).
  * irrecord fixes:
  - Fix broken namespace checks on recent kernels (#187).
  - Buggy handling of not decoded buttons in irrecord (#146).
  - Repeated buttons problems (#149)
  - Endless loop when key is not recognized (#146)
  - Endless loop on idendifying toggle mark (#139)
  * lirs-lsremotes: Don't use non-standard GLOB_BRACE (#174).
  * lib: Fix  misleading logprintf comments (#179)
  * lib: Clean up loglevel handling (#178).
  * Fix --plugindir not being respected (#144).
  * Fix gid and supplementary groups in CLI apps dropping root.
  * Fix a crash in irrecord when invoked without options.
  * Fix bad parsing of --options-file unless given first (#165).
  * plugins/default: Don't require write access if not needed (#133).
  * plugins/atilibusb: Fix crash for non-existing device (#145).
  * plugins/audio_alsa : Fix blocking regression bug (#169).
  * plugins/file: Fix bad test for LIRCCODE cases (#171).
  * plugins/ftdi: Bugfixes: 4157fe1, 92e2d1d, #182.
  * plugins/girs: Bugfixes.
  * plugins/default: Remotes become too sensitive in 0.9.3 (#148)
  * plugins/default: Walk around kernel bug generating multiple
    spaces (#172).
  * doc: lircd.conf: Document suppress_repeat parameter.
  * Clean up docs, remove circular links (#136). Documentation is
    now only in lirc.org/html.
  * build: Add explicit default -L${libdir} linker flag.
  * build: Fix Debian FTBS compilation error.
- Add some missing dependencies
  * doxygen
  * kmod-compat
  * pkgconfig(sm)
- Replace pkgconfig(libusb-1.0) with pkgconfig(libusb); fow some
  reasons, lirc now relies on compat libusb
- Remove obsolete configure switches
- Update 0001-Fix-segfault-when-starting-lircd-AUR-41581.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1467201600">- Update to version 0.9.4a:
  * Fix syntax errors in systemd unit files (rhbz: 1350750).
  * irrecord: Enhance "Don't use devinput" message (#180).
  * plugins/uirt2_raw: Reset device to UIR mode on deinit.
  * plugins/girs.c: Enable reception after sending.
  * lirc.org: Updates and bugfixes
  * lircd, liblirc_client: Fix freeaddrinfo handling (#195).
  * Don't build commandir unless we have usb.h (#191).
  * lirc_options.conf: debug =&gt; loglevel (#199).
  * lib: use proper linking method to avoid parallel build issue
  * tools: make_rel_symlink.py can also use python2
  * plugins/devinput: Make the list-devices support available.
  * configure.ac: Bugfix (BSD setting reported wrong).</changelog>
  <changelog author="p.drouand@gmail.com" date="1477051200">- Update to version 0.9.4c
  * New curl_poll files adds a new MIT license. Lirc now carries GPL,
    BSD and MIT licenses.
  * Several patches to make lirc work again on macos (#226, #227).
  * New tool irtext2udp generates udp plugin data (#197).
  * plugins: girs: Add udp/receive support (#201).
  * mode2: Fix broken --raw option (#223).
  * lirc-make-devinput: Fix that two remotes has the same name (#222).
  * lircd: Warn for duplicate remote definitions (#222).
  * lircd: Retry temporary unavailable write sockets (#221).
  * contrib: Fix usb devices' acl permissions (rhbz #1364744).
  * lirc-setup: Fix crasher bugfix (Fedora abort trace).
  * contrib: disable udev /dev/uinput rule requiring lirc user.
  * plugins: audio_alsa: Fix byte truncating in 16-bit data (#218):
  * plugins: irtoy: improve error handling (#220).
  * Minor documentation fixes.
- Changes from version 0.9.4b
  * lircd-uinput: A multitude of fixes (#213, #211, #177). Adds new options.
  * lirc_client: Fix "Can't redirect irsend output" (#207).
  * lirc_client: Fix un-terminated buffer causing irsend crash (#216).
  * irrecord: Fix under-sized buffer causing crash (#208).
  * systemd: Add hardening options comments to services (#204).
  * lircmd: Options, udev examples and manpage update.
  * lib: Add missing Makefile.am dep, fixes parallel build failure (#210).
  * Remove a single python2 dependency [4e3c97c].
  * build: Don't define docdir - autoconf defines docdir (#215).
  * build: support runstatedir configure option (#212).
  * doc: Manpages and configuration guide fixes.
- Remove fix-remote-keys.pl, README.SUSE and 51-lirc.rules; not relevant
  for a while already
- Remove 0001-Fix-segfault-when-starting-lircd-AUR-41581.patch and
  0002-lircd-Fix-bad-default-for-lircdfile.patch; fixed on upstream
- Add missing dependency to systemd
- Global sweeping
- Add lirc nologgin user; now needed
- Add lircd-Remove-use-of-functions-killed-in-kernel-4.8.0.patch;
  fix build on openSUSE &gt; 42.2</changelog>
  <changelog author="p.drouand@gmail.com" date="1478088000">- Add lirc-lib-curl_poll.h-Ensure-build-on-unconfiguredclients.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1478174400">- Fix %pre script</changelog>
  <changelog author="p.drouand@gmail.com" date="1478606400">- Move workarounds to %prep section
- Add lirc-configure-libudev.patch (boo#1008764)</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- Drop lircd-Remove-use-of-functions-killed-in-kernel-4.8.0.patch:
  the guarding zypper call was wrong (-qf vs --qf) and resulted in
  the patch never being applied. So it is obviously not used.
- Remove dependency on zypper: libzypp just gets a new dependency
  on libgpgme, which happens to result in a cycle: since the sole
  usage of zypper was to 'detect if the patch was needed' is no
  longer given, we have no feature loss.</changelog>
  <changelog author="tiwai@suse.de" date="1637064000">- Fix library dependency in lirc.pc (bsc#1192772):
  lirc-pc-fix.patch</changelog>
</package>
<package pkgid="f928611619766553eb6d02ee46caa1f9dc9ecb6dccf2ac3e1be3334a7f466b4f" name="lirc-drv-portaudio" arch="aarch64">
  <version epoch="0" ver="0.9.4c" rel="150000.4.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Run spec-cleaner
- Replace xorg-x11-devel with pkgconfig(x11)
- Do not run autoreconf, configure.ac is broken and patches
  are not modifying autotools files.</changelog>
  <changelog author="ledest@gmail.com" date="1417262400">- fix bashism in lirc-codecs-regression-test.sh script
- add patches:
  * lirc-0.9.1a-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1424260800">- Update to version 0.9.2a
  * Maintenance release: bugfixes, no new features.
  * Notably fixes #85, multiple --connect regression.
  * Fixes bad bug for locating ~/.lircrc config file.
  * Documentation and lirc.org updates.
  * All in all 19 patches.
- Split each lirc module in his own package
  * core : contains needed binaries to run basically lirc; it obsoletes
    previous lirc package
  * config: contains tools and data to ease the LIRC configuration process.
    it provides and obsoletes the previous "remotes" packages as
    remotes config files are not provided anymore and the config
    package provides a tool to config a remote
  * liblirc_driver0 : provides the driver library
  * liblirc0 : the main library
  * drv-ftdi: provides ftdi support
  * drv-portaudio : provides portaudio support
  * tools-gui : tools for debugging lirc
- Add pkgconfig(libftdi1) require for Factory; ftdi is only availables
  on Factory
- Add pkgconfig(portaudio-2.0) require; build with portaudio support
- Add python3 build require instead of python; python3 is now the
  default
- Add python3-PyYAML build require and requirement for lirc-config;
  needed for generating table.html and lirc.hwdb, and is a direct
  dependency of lirc-setup
- Remove help2man require; dropped by upstream
- Remove lirc-0.9.1a-fix-bashisms.patch; fixed on upstream release
- Remove 0003-0.9.1a-Bugfix-segfault-when-parsing-connect-in-confi.patch
  fixed on upstream release
- Update patches
  * 0001-Fix-segfault-when-starting-lircd-AUR-41581.patch
  * 0002-lircd-Fix-bad-default-for-lircdfile.patch
- Remove old and not needed lirc-64bit obsoletion
- Add liblirc_driver0 and liblirc0 to baselibs.conf</changelog>
  <changelog author="p.drouand@gmail.com" date="1426766400">- lirc-core provides and obsoletes lirc
- Fix lirc-disable-kernel-rc requirement</changelog>
  <changelog author="p.drouand@gmail.com" date="1427112000">- Fix a typo in obsolete tag</changelog>
  <changelog author="dimstar@opensuse.org" date="1438344000">- Ignore absence of systemd-tmpfiles, it won't be present in the
  build env.</changelog>
  <changelog author="jengelh@inai.de" date="1438344001">- Do not hard depend on systemd - all macro uses support soft</changelog>
  <changelog author="p.drouand@gmail.com" date="1441627200">- Update to version 0.9.3
  * New build dependency: xsltproc (sometimes coming with libxml).
  * The irexec semantics have been changed so that the invoked programs
    run disconnected from the main irexec process. See irexec(1) (#92).
  * irrecord has got some love:
  * irrecord handles multiple definitions of same symbol OK (#78)
  * irrecord : Warns about single-key config files (#77)
  * irrecord : Checks for ambient light disturbances (#76)
  * irrecord : New option allows updating of existing template file.
  * irrecord : Template handling bug fixed
  * irrecord : -l --list-namespace option parsing bug fixed (#101).
  * irrecord : Minor fixes to irrecord-ui including -k option parsing fixed.
  * mode2 has been updated
  * mode2 : Handle also LIRCCODE devices (#94),
  * mode2 : Drop root privileges (#91)
  * mode2 : Add new scope-like display
  * mode2 : Handle the--driver-options switch
  * xmode2 has been updated to handle udp driver, the new --driver-options
    switch + some general overhaul.
  * irrecord has been split into a library and a cli interface (#36).
    The library interface is unstable.
  * irtoy: New support for debug LEDs. New documentation file, support
    in lirc-setup and driver table doc added.
  * The udp driver is patched to allow adjustable clockrates, see new
    udp_driver.html driver doc.
  * The mplay driver has been updated with patches which has been
    available "out there".
  * The select() calls in lircd, lircrcd and library routines have
    been replaced with poll() to avoid crashes when file descriptors
    becomes &gt; 1024 (#109).
  * Set supplementary groups using effective-user (RH bz 1253907).
  * Work around kernel bug in /dev/lirc0 output (#119).
  * lircmd: Several option parsing bugs fixed, one of which blocked the
    systemd service (#104, RH bz 1234155).
  * lirc-lsremotes now displays logs after parsing files, making more
    parsing warnings visible.
  * lirc-config-tool is fixed to comply with guidelines (#105).
  * Bug in irexec when using modes fixed (#102).
  * Create log directory if required (#124).
  * lirc-setup: Fixed name clash on recent python versions.
  * The library routines for parsing lircd.conf now warns for duplicate
    keys and values (#107).
  * Enhanced pkg-config support for drivers compiled out-of-tree
    (see driver-api in the manual).
  * Unlinked and hard to find driver docs and manpages have been linked.
  * The documentation is heavily revised. Old obsolete text is removed,
    the manual is reorganized, some info is moved to manpages and a lot
    of minor updates and bugfixes.
  * The compiler has been switched to c++, and filenames are updated
    to *.cpp (#79)
  * The lircd.simsend and lircd.simreceive tools have been removed, superseeded
    by irsimsend and irsimreceive.
  * A new kernel driver irpipe has been added. This allows feeding data from
    userspace to lircd, which can use the /dev/irpipeX device as a clean
    substitute for /dev/lircX. A companion CLI tool irpipe(1) is also added.
  * Options parsing (notably -U) and just listing first remote bugs in
    irsimsend have been fixed.
  * Overall code formatting is improved with more consistent layout and
    updated git hook. See CONTRIBUTE.md'
  * Build: now uses parallel make by default.
  * Hardcoded CFLAGS in Makefiles fixed (#124).
- Update patches
  * 0002-lircd-Fix-bad-default-for-lircdfile.patch
  * 0004-lircd-fix-compiler-error-format-security-error.patch
- Remove imon2_conf.patch; fixed on upstream release
- Add a dependency to libxslt-tools and gcc-c++
- Add libirrecord0 subpackage</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Add missing dependency on libirman (boo#941883)
- Update way tmpfiles.d are created
- Use correct symlinks for services</changelog>
  <changelog author="mpluskal@suse.com" date="1445774400">- Update to 0.9.3a
  * Broken fix for kernel bug reverted (#148, #119). This makes
    lirc incompatible with at least the 4.04 kernels. kernels
    &lt; 4.0 and &gt; 4.1.6 seemingly works.
  * Several irrecord fixes (#146, #139, d8826b, #141).
  * Some fixes for poll() usage, one of which blocked irrecord
    (02c2480, d9339b6).
  * lib: Fix parsing of multiple files (#141).
  * lib: Fix privilege dropping code and a compiler flag (e8be7ae,
    8a08ab1)
  * lirc-lsplugins: Fix --plugindir not being respected (#144).
  * atilibusb: Fix crash for non-existing device (#145).
  * plugins: file.c: Fix off-by-one sscanf error (#138).</changelog>
  <changelog author="p.drouand@gmail.com" date="1449403200">- Ensure lirc build against libusb-1.0; replace libusb-devel with
  pkgconfig(libusb-1.0)</changelog>
  <changelog author="pgajdos@suse.com" date="1458216000">- remove lirc.4 as this is part of man-pages from 4.05 on</changelog>
  <changelog author="p.drouand@gmail.com" date="1465819200">- Update to version 0.9.4
  * The caraca driver has been retired (still available in attic/).
  * The iguanair driver has been moved out of tree and is now
    maintained by Iguanaworks, Inc. See drivers/iguanair/README.
  * The irman driver has been moved out of tree. From 0.5.1 the
    libirman package contains the driver. See drivers/irman/README
  * The yard2 driver has been moved out of tree and is now maintained
    by the yard2 project. See driver/yard2/README.
  * The lirc.4 manpage (/dev/lirc* interface) is upstreamed to the
    linux kernel manpages project (#164). Old page lirc.4l still
    lingers in attic/ but is not installed.
  * Upstream selinux updated to match current lircd requirements.
    See: https://github.com/fedora-selinux/selinux-policy/pull/41
  * New upstream debian packaging with which Debian users can create
    .deb packages. Ubuntu packages are also available in PPAs. See
    README.md in the debian branch (#137).
  * New driver girs for the GIRS protocol, gives LIRC Arduino support.
    See new info in driver documentation.
  * New transmit-only FTDI driver with enhanced accuracy and hardware
    support. See ftdix driver documentation.
  * Support for non-modulated signals added (#132).
  * As shipped, lircd now uses the devinput driver and the new 'auto'
    device, should work for all remotes supported by kernel (#106).
  * Enhanced lirc-setup tool (#123, partly):
  - Add drvctl device enumeration support.
  - Integrated mode2 and irw tests of current configuration.
  - Documentation links.
  - More consistent data based on new database.
  - Multiple bugfixes.
  * Several patches to make mode2 work with all drivers(#123, partly)
  * Configuration database overhaul (#123, partly)
  - Database lives as yaml files in configs/.
  - Data is collected from drivers, remotes and static files.
  - Better ways for drivers to enumerate devices.
  - There is an unstable python database module used by
    all tools.
  * Several drivers including default and devinput has enhanced
    enumeration support, usable with mode2 -l and lirc-setup.
  * devinput.lircd.conf is generated at build time to match host kernel,
    new script lirc-make-devinput shipped to re-generate it (#153)
  * A new script lircd-setup runs as a one-shot service before lircd,
    performing setup commands as root (#121).
  * Several new examples in contrib/, notably lircrc templates for
    many popular LIRC applications and improved udev rules.
  * The default driver does not require root perms if the protocol
    is correct (#133).
  * Add an "auto" device to devinput driver for single-device
    usecase (#134).
  * irrecord has been taught to handle remotes without gap (#98).
  * The --uinput lircd option is deprecated, obsoleted by the
    lircd.uinput.service systemd service. See lircd-uinput(8).
  * CLI options for mode2, xmode2 and irrecord has been streamlined.
    All tools falls back to lircd defaults where it makes sense.
  * The driver API has been expanded with functions to enumerate
    devices. See configs/README and lib/driver.h.
  * New logging API with hooks for enhanced messages and filtering
    (also #129).
  * The out-of-tree build interface is enhanced with hooks for external
    drivers to rebuild documentation and add a config file.
  * lircd: Fix too-short gap  when sending/blasting (#158).
  * lircd: Fix typo causing lost deinit_func() calls (#179).
  * irrecord fixes:
  - Fix broken namespace checks on recent kernels (#187).
  - Buggy handling of not decoded buttons in irrecord (#146).
  - Repeated buttons problems (#149)
  - Endless loop when key is not recognized (#146)
  - Endless loop on idendifying toggle mark (#139)
  * lirs-lsremotes: Don't use non-standard GLOB_BRACE (#174).
  * lib: Fix  misleading logprintf comments (#179)
  * lib: Clean up loglevel handling (#178).
  * Fix --plugindir not being respected (#144).
  * Fix gid and supplementary groups in CLI apps dropping root.
  * Fix a crash in irrecord when invoked without options.
  * Fix bad parsing of --options-file unless given first (#165).
  * plugins/default: Don't require write access if not needed (#133).
  * plugins/atilibusb: Fix crash for non-existing device (#145).
  * plugins/audio_alsa : Fix blocking regression bug (#169).
  * plugins/file: Fix bad test for LIRCCODE cases (#171).
  * plugins/ftdi: Bugfixes: 4157fe1, 92e2d1d, #182.
  * plugins/girs: Bugfixes.
  * plugins/default: Remotes become too sensitive in 0.9.3 (#148)
  * plugins/default: Walk around kernel bug generating multiple
    spaces (#172).
  * doc: lircd.conf: Document suppress_repeat parameter.
  * Clean up docs, remove circular links (#136). Documentation is
    now only in lirc.org/html.
  * build: Add explicit default -L${libdir} linker flag.
  * build: Fix Debian FTBS compilation error.
- Add some missing dependencies
  * doxygen
  * kmod-compat
  * pkgconfig(sm)
- Replace pkgconfig(libusb-1.0) with pkgconfig(libusb); fow some
  reasons, lirc now relies on compat libusb
- Remove obsolete configure switches
- Update 0001-Fix-segfault-when-starting-lircd-AUR-41581.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1467201600">- Update to version 0.9.4a:
  * Fix syntax errors in systemd unit files (rhbz: 1350750).
  * irrecord: Enhance "Don't use devinput" message (#180).
  * plugins/uirt2_raw: Reset device to UIR mode on deinit.
  * plugins/girs.c: Enable reception after sending.
  * lirc.org: Updates and bugfixes
  * lircd, liblirc_client: Fix freeaddrinfo handling (#195).
  * Don't build commandir unless we have usb.h (#191).
  * lirc_options.conf: debug =&gt; loglevel (#199).
  * lib: use proper linking method to avoid parallel build issue
  * tools: make_rel_symlink.py can also use python2
  * plugins/devinput: Make the list-devices support available.
  * configure.ac: Bugfix (BSD setting reported wrong).</changelog>
  <changelog author="p.drouand@gmail.com" date="1477051200">- Update to version 0.9.4c
  * New curl_poll files adds a new MIT license. Lirc now carries GPL,
    BSD and MIT licenses.
  * Several patches to make lirc work again on macos (#226, #227).
  * New tool irtext2udp generates udp plugin data (#197).
  * plugins: girs: Add udp/receive support (#201).
  * mode2: Fix broken --raw option (#223).
  * lirc-make-devinput: Fix that two remotes has the same name (#222).
  * lircd: Warn for duplicate remote definitions (#222).
  * lircd: Retry temporary unavailable write sockets (#221).
  * contrib: Fix usb devices' acl permissions (rhbz #1364744).
  * lirc-setup: Fix crasher bugfix (Fedora abort trace).
  * contrib: disable udev /dev/uinput rule requiring lirc user.
  * plugins: audio_alsa: Fix byte truncating in 16-bit data (#218):
  * plugins: irtoy: improve error handling (#220).
  * Minor documentation fixes.
- Changes from version 0.9.4b
  * lircd-uinput: A multitude of fixes (#213, #211, #177). Adds new options.
  * lirc_client: Fix "Can't redirect irsend output" (#207).
  * lirc_client: Fix un-terminated buffer causing irsend crash (#216).
  * irrecord: Fix under-sized buffer causing crash (#208).
  * systemd: Add hardening options comments to services (#204).
  * lircmd: Options, udev examples and manpage update.
  * lib: Add missing Makefile.am dep, fixes parallel build failure (#210).
  * Remove a single python2 dependency [4e3c97c].
  * build: Don't define docdir - autoconf defines docdir (#215).
  * build: support runstatedir configure option (#212).
  * doc: Manpages and configuration guide fixes.
- Remove fix-remote-keys.pl, README.SUSE and 51-lirc.rules; not relevant
  for a while already
- Remove 0001-Fix-segfault-when-starting-lircd-AUR-41581.patch and
  0002-lircd-Fix-bad-default-for-lircdfile.patch; fixed on upstream
- Add missing dependency to systemd
- Global sweeping
- Add lirc nologgin user; now needed
- Add lircd-Remove-use-of-functions-killed-in-kernel-4.8.0.patch;
  fix build on openSUSE &gt; 42.2</changelog>
  <changelog author="p.drouand@gmail.com" date="1478088000">- Add lirc-lib-curl_poll.h-Ensure-build-on-unconfiguredclients.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1478174400">- Fix %pre script</changelog>
  <changelog author="p.drouand@gmail.com" date="1478606400">- Move workarounds to %prep section
- Add lirc-configure-libudev.patch (boo#1008764)</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- Drop lircd-Remove-use-of-functions-killed-in-kernel-4.8.0.patch:
  the guarding zypper call was wrong (-qf vs --qf) and resulted in
  the patch never being applied. So it is obviously not used.
- Remove dependency on zypper: libzypp just gets a new dependency
  on libgpgme, which happens to result in a cycle: since the sole
  usage of zypper was to 'detect if the patch was needed' is no
  longer given, we have no feature loss.</changelog>
  <changelog author="tiwai@suse.de" date="1637064000">- Fix library dependency in lirc.pc (bsc#1192772):
  lirc-pc-fix.patch</changelog>
</package>
<package pkgid="f5adc1f61c805d3d9fb4378472f9d595e13565ef0d6f21afd0b4762925725b62" name="lirc-drv-portaudio" arch="ppc64le">
  <version epoch="0" ver="0.9.4c" rel="150000.4.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Run spec-cleaner
- Replace xorg-x11-devel with pkgconfig(x11)
- Do not run autoreconf, configure.ac is broken and patches
  are not modifying autotools files.</changelog>
  <changelog author="ledest@gmail.com" date="1417262400">- fix bashism in lirc-codecs-regression-test.sh script
- add patches:
  * lirc-0.9.1a-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1424260800">- Update to version 0.9.2a
  * Maintenance release: bugfixes, no new features.
  * Notably fixes #85, multiple --connect regression.
  * Fixes bad bug for locating ~/.lircrc config file.
  * Documentation and lirc.org updates.
  * All in all 19 patches.
- Split each lirc module in his own package
  * core : contains needed binaries to run basically lirc; it obsoletes
    previous lirc package
  * config: contains tools and data to ease the LIRC configuration process.
    it provides and obsoletes the previous "remotes" packages as
    remotes config files are not provided anymore and the config
    package provides a tool to config a remote
  * liblirc_driver0 : provides the driver library
  * liblirc0 : the main library
  * drv-ftdi: provides ftdi support
  * drv-portaudio : provides portaudio support
  * tools-gui : tools for debugging lirc
- Add pkgconfig(libftdi1) require for Factory; ftdi is only availables
  on Factory
- Add pkgconfig(portaudio-2.0) require; build with portaudio support
- Add python3 build require instead of python; python3 is now the
  default
- Add python3-PyYAML build require and requirement for lirc-config;
  needed for generating table.html and lirc.hwdb, and is a direct
  dependency of lirc-setup
- Remove help2man require; dropped by upstream
- Remove lirc-0.9.1a-fix-bashisms.patch; fixed on upstream release
- Remove 0003-0.9.1a-Bugfix-segfault-when-parsing-connect-in-confi.patch
  fixed on upstream release
- Update patches
  * 0001-Fix-segfault-when-starting-lircd-AUR-41581.patch
  * 0002-lircd-Fix-bad-default-for-lircdfile.patch
- Remove old and not needed lirc-64bit obsoletion
- Add liblirc_driver0 and liblirc0 to baselibs.conf</changelog>
  <changelog author="p.drouand@gmail.com" date="1426766400">- lirc-core provides and obsoletes lirc
- Fix lirc-disable-kernel-rc requirement</changelog>
  <changelog author="p.drouand@gmail.com" date="1427112000">- Fix a typo in obsolete tag</changelog>
  <changelog author="dimstar@opensuse.org" date="1438344000">- Ignore absence of systemd-tmpfiles, it won't be present in the
  build env.</changelog>
  <changelog author="jengelh@inai.de" date="1438344001">- Do not hard depend on systemd - all macro uses support soft</changelog>
  <changelog author="p.drouand@gmail.com" date="1441627200">- Update to version 0.9.3
  * New build dependency: xsltproc (sometimes coming with libxml).
  * The irexec semantics have been changed so that the invoked programs
    run disconnected from the main irexec process. See irexec(1) (#92).
  * irrecord has got some love:
  * irrecord handles multiple definitions of same symbol OK (#78)
  * irrecord : Warns about single-key config files (#77)
  * irrecord : Checks for ambient light disturbances (#76)
  * irrecord : New option allows updating of existing template file.
  * irrecord : Template handling bug fixed
  * irrecord : -l --list-namespace option parsing bug fixed (#101).
  * irrecord : Minor fixes to irrecord-ui including -k option parsing fixed.
  * mode2 has been updated
  * mode2 : Handle also LIRCCODE devices (#94),
  * mode2 : Drop root privileges (#91)
  * mode2 : Add new scope-like display
  * mode2 : Handle the--driver-options switch
  * xmode2 has been updated to handle udp driver, the new --driver-options
    switch + some general overhaul.
  * irrecord has been split into a library and a cli interface (#36).
    The library interface is unstable.
  * irtoy: New support for debug LEDs. New documentation file, support
    in lirc-setup and driver table doc added.
  * The udp driver is patched to allow adjustable clockrates, see new
    udp_driver.html driver doc.
  * The mplay driver has been updated with patches which has been
    available "out there".
  * The select() calls in lircd, lircrcd and library routines have
    been replaced with poll() to avoid crashes when file descriptors
    becomes &gt; 1024 (#109).
  * Set supplementary groups using effective-user (RH bz 1253907).
  * Work around kernel bug in /dev/lirc0 output (#119).
  * lircmd: Several option parsing bugs fixed, one of which blocked the
    systemd service (#104, RH bz 1234155).
  * lirc-lsremotes now displays logs after parsing files, making more
    parsing warnings visible.
  * lirc-config-tool is fixed to comply with guidelines (#105).
  * Bug in irexec when using modes fixed (#102).
  * Create log directory if required (#124).
  * lirc-setup: Fixed name clash on recent python versions.
  * The library routines for parsing lircd.conf now warns for duplicate
    keys and values (#107).
  * Enhanced pkg-config support for drivers compiled out-of-tree
    (see driver-api in the manual).
  * Unlinked and hard to find driver docs and manpages have been linked.
  * The documentation is heavily revised. Old obsolete text is removed,
    the manual is reorganized, some info is moved to manpages and a lot
    of minor updates and bugfixes.
  * The compiler has been switched to c++, and filenames are updated
    to *.cpp (#79)
  * The lircd.simsend and lircd.simreceive tools have been removed, superseeded
    by irsimsend and irsimreceive.
  * A new kernel driver irpipe has been added. This allows feeding data from
    userspace to lircd, which can use the /dev/irpipeX device as a clean
    substitute for /dev/lircX. A companion CLI tool irpipe(1) is also added.
  * Options parsing (notably -U) and just listing first remote bugs in
    irsimsend have been fixed.
  * Overall code formatting is improved with more consistent layout and
    updated git hook. See CONTRIBUTE.md'
  * Build: now uses parallel make by default.
  * Hardcoded CFLAGS in Makefiles fixed (#124).
- Update patches
  * 0002-lircd-Fix-bad-default-for-lircdfile.patch
  * 0004-lircd-fix-compiler-error-format-security-error.patch
- Remove imon2_conf.patch; fixed on upstream release
- Add a dependency to libxslt-tools and gcc-c++
- Add libirrecord0 subpackage</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Add missing dependency on libirman (boo#941883)
- Update way tmpfiles.d are created
- Use correct symlinks for services</changelog>
  <changelog author="mpluskal@suse.com" date="1445774400">- Update to 0.9.3a
  * Broken fix for kernel bug reverted (#148, #119). This makes
    lirc incompatible with at least the 4.04 kernels. kernels
    &lt; 4.0 and &gt; 4.1.6 seemingly works.
  * Several irrecord fixes (#146, #139, d8826b, #141).
  * Some fixes for poll() usage, one of which blocked irrecord
    (02c2480, d9339b6).
  * lib: Fix parsing of multiple files (#141).
  * lib: Fix privilege dropping code and a compiler flag (e8be7ae,
    8a08ab1)
  * lirc-lsplugins: Fix --plugindir not being respected (#144).
  * atilibusb: Fix crash for non-existing device (#145).
  * plugins: file.c: Fix off-by-one sscanf error (#138).</changelog>
  <changelog author="p.drouand@gmail.com" date="1449403200">- Ensure lirc build against libusb-1.0; replace libusb-devel with
  pkgconfig(libusb-1.0)</changelog>
  <changelog author="pgajdos@suse.com" date="1458216000">- remove lirc.4 as this is part of man-pages from 4.05 on</changelog>
  <changelog author="p.drouand@gmail.com" date="1465819200">- Update to version 0.9.4
  * The caraca driver has been retired (still available in attic/).
  * The iguanair driver has been moved out of tree and is now
    maintained by Iguanaworks, Inc. See drivers/iguanair/README.
  * The irman driver has been moved out of tree. From 0.5.1 the
    libirman package contains the driver. See drivers/irman/README
  * The yard2 driver has been moved out of tree and is now maintained
    by the yard2 project. See driver/yard2/README.
  * The lirc.4 manpage (/dev/lirc* interface) is upstreamed to the
    linux kernel manpages project (#164). Old page lirc.4l still
    lingers in attic/ but is not installed.
  * Upstream selinux updated to match current lircd requirements.
    See: https://github.com/fedora-selinux/selinux-policy/pull/41
  * New upstream debian packaging with which Debian users can create
    .deb packages. Ubuntu packages are also available in PPAs. See
    README.md in the debian branch (#137).
  * New driver girs for the GIRS protocol, gives LIRC Arduino support.
    See new info in driver documentation.
  * New transmit-only FTDI driver with enhanced accuracy and hardware
    support. See ftdix driver documentation.
  * Support for non-modulated signals added (#132).
  * As shipped, lircd now uses the devinput driver and the new 'auto'
    device, should work for all remotes supported by kernel (#106).
  * Enhanced lirc-setup tool (#123, partly):
  - Add drvctl device enumeration support.
  - Integrated mode2 and irw tests of current configuration.
  - Documentation links.
  - More consistent data based on new database.
  - Multiple bugfixes.
  * Several patches to make mode2 work with all drivers(#123, partly)
  * Configuration database overhaul (#123, partly)
  - Database lives as yaml files in configs/.
  - Data is collected from drivers, remotes and static files.
  - Better ways for drivers to enumerate devices.
  - There is an unstable python database module used by
    all tools.
  * Several drivers including default and devinput has enhanced
    enumeration support, usable with mode2 -l and lirc-setup.
  * devinput.lircd.conf is generated at build time to match host kernel,
    new script lirc-make-devinput shipped to re-generate it (#153)
  * A new script lircd-setup runs as a one-shot service before lircd,
    performing setup commands as root (#121).
  * Several new examples in contrib/, notably lircrc templates for
    many popular LIRC applications and improved udev rules.
  * The default driver does not require root perms if the protocol
    is correct (#133).
  * Add an "auto" device to devinput driver for single-device
    usecase (#134).
  * irrecord has been taught to handle remotes without gap (#98).
  * The --uinput lircd option is deprecated, obsoleted by the
    lircd.uinput.service systemd service. See lircd-uinput(8).
  * CLI options for mode2, xmode2 and irrecord has been streamlined.
    All tools falls back to lircd defaults where it makes sense.
  * The driver API has been expanded with functions to enumerate
    devices. See configs/README and lib/driver.h.
  * New logging API with hooks for enhanced messages and filtering
    (also #129).
  * The out-of-tree build interface is enhanced with hooks for external
    drivers to rebuild documentation and add a config file.
  * lircd: Fix too-short gap  when sending/blasting (#158).
  * lircd: Fix typo causing lost deinit_func() calls (#179).
  * irrecord fixes:
  - Fix broken namespace checks on recent kernels (#187).
  - Buggy handling of not decoded buttons in irrecord (#146).
  - Repeated buttons problems (#149)
  - Endless loop when key is not recognized (#146)
  - Endless loop on idendifying toggle mark (#139)
  * lirs-lsremotes: Don't use non-standard GLOB_BRACE (#174).
  * lib: Fix  misleading logprintf comments (#179)
  * lib: Clean up loglevel handling (#178).
  * Fix --plugindir not being respected (#144).
  * Fix gid and supplementary groups in CLI apps dropping root.
  * Fix a crash in irrecord when invoked without options.
  * Fix bad parsing of --options-file unless given first (#165).
  * plugins/default: Don't require write access if not needed (#133).
  * plugins/atilibusb: Fix crash for non-existing device (#145).
  * plugins/audio_alsa : Fix blocking regression bug (#169).
  * plugins/file: Fix bad test for LIRCCODE cases (#171).
  * plugins/ftdi: Bugfixes: 4157fe1, 92e2d1d, #182.
  * plugins/girs: Bugfixes.
  * plugins/default: Remotes become too sensitive in 0.9.3 (#148)
  * plugins/default: Walk around kernel bug generating multiple
    spaces (#172).
  * doc: lircd.conf: Document suppress_repeat parameter.
  * Clean up docs, remove circular links (#136). Documentation is
    now only in lirc.org/html.
  * build: Add explicit default -L${libdir} linker flag.
  * build: Fix Debian FTBS compilation error.
- Add some missing dependencies
  * doxygen
  * kmod-compat
  * pkgconfig(sm)
- Replace pkgconfig(libusb-1.0) with pkgconfig(libusb); fow some
  reasons, lirc now relies on compat libusb
- Remove obsolete configure switches
- Update 0001-Fix-segfault-when-starting-lircd-AUR-41581.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1467201600">- Update to version 0.9.4a:
  * Fix syntax errors in systemd unit files (rhbz: 1350750).
  * irrecord: Enhance "Don't use devinput" message (#180).
  * plugins/uirt2_raw: Reset device to UIR mode on deinit.
  * plugins/girs.c: Enable reception after sending.
  * lirc.org: Updates and bugfixes
  * lircd, liblirc_client: Fix freeaddrinfo handling (#195).
  * Don't build commandir unless we have usb.h (#191).
  * lirc_options.conf: debug =&gt; loglevel (#199).
  * lib: use proper linking method to avoid parallel build issue
  * tools: make_rel_symlink.py can also use python2
  * plugins/devinput: Make the list-devices support available.
  * configure.ac: Bugfix (BSD setting reported wrong).</changelog>
  <changelog author="p.drouand@gmail.com" date="1477051200">- Update to version 0.9.4c
  * New curl_poll files adds a new MIT license. Lirc now carries GPL,
    BSD and MIT licenses.
  * Several patches to make lirc work again on macos (#226, #227).
  * New tool irtext2udp generates udp plugin data (#197).
  * plugins: girs: Add udp/receive support (#201).
  * mode2: Fix broken --raw option (#223).
  * lirc-make-devinput: Fix that two remotes has the same name (#222).
  * lircd: Warn for duplicate remote definitions (#222).
  * lircd: Retry temporary unavailable write sockets (#221).
  * contrib: Fix usb devices' acl permissions (rhbz #1364744).
  * lirc-setup: Fix crasher bugfix (Fedora abort trace).
  * contrib: disable udev /dev/uinput rule requiring lirc user.
  * plugins: audio_alsa: Fix byte truncating in 16-bit data (#218):
  * plugins: irtoy: improve error handling (#220).
  * Minor documentation fixes.
- Changes from version 0.9.4b
  * lircd-uinput: A multitude of fixes (#213, #211, #177). Adds new options.
  * lirc_client: Fix "Can't redirect irsend output" (#207).
  * lirc_client: Fix un-terminated buffer causing irsend crash (#216).
  * irrecord: Fix under-sized buffer causing crash (#208).
  * systemd: Add hardening options comments to services (#204).
  * lircmd: Options, udev examples and manpage update.
  * lib: Add missing Makefile.am dep, fixes parallel build failure (#210).
  * Remove a single python2 dependency [4e3c97c].
  * build: Don't define docdir - autoconf defines docdir (#215).
  * build: support runstatedir configure option (#212).
  * doc: Manpages and configuration guide fixes.
- Remove fix-remote-keys.pl, README.SUSE and 51-lirc.rules; not relevant
  for a while already
- Remove 0001-Fix-segfault-when-starting-lircd-AUR-41581.patch and
  0002-lircd-Fix-bad-default-for-lircdfile.patch; fixed on upstream
- Add missing dependency to systemd
- Global sweeping
- Add lirc nologgin user; now needed
- Add lircd-Remove-use-of-functions-killed-in-kernel-4.8.0.patch;
  fix build on openSUSE &gt; 42.2</changelog>
  <changelog author="p.drouand@gmail.com" date="1478088000">- Add lirc-lib-curl_poll.h-Ensure-build-on-unconfiguredclients.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1478174400">- Fix %pre script</changelog>
  <changelog author="p.drouand@gmail.com" date="1478606400">- Move workarounds to %prep section
- Add lirc-configure-libudev.patch (boo#1008764)</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- Drop lircd-Remove-use-of-functions-killed-in-kernel-4.8.0.patch:
  the guarding zypper call was wrong (-qf vs --qf) and resulted in
  the patch never being applied. So it is obviously not used.
- Remove dependency on zypper: libzypp just gets a new dependency
  on libgpgme, which happens to result in a cycle: since the sole
  usage of zypper was to 'detect if the patch was needed' is no
  longer given, we have no feature loss.</changelog>
  <changelog author="tiwai@suse.de" date="1637064000">- Fix library dependency in lirc.pc (bsc#1192772):
  lirc-pc-fix.patch</changelog>
</package>
<package pkgid="a5b5ec19e74466586782a22ab36fefa4197a865df17dfc20ecbe3663b606ca7a" name="lirc-drv-portaudio" arch="s390x">
  <version epoch="0" ver="0.9.4c" rel="150000.4.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Run spec-cleaner
- Replace xorg-x11-devel with pkgconfig(x11)
- Do not run autoreconf, configure.ac is broken and patches
  are not modifying autotools files.</changelog>
  <changelog author="ledest@gmail.com" date="1417262400">- fix bashism in lirc-codecs-regression-test.sh script
- add patches:
  * lirc-0.9.1a-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1424260800">- Update to version 0.9.2a
  * Maintenance release: bugfixes, no new features.
  * Notably fixes #85, multiple --connect regression.
  * Fixes bad bug for locating ~/.lircrc config file.
  * Documentation and lirc.org updates.
  * All in all 19 patches.
- Split each lirc module in his own package
  * core : contains needed binaries to run basically lirc; it obsoletes
    previous lirc package
  * config: contains tools and data to ease the LIRC configuration process.
    it provides and obsoletes the previous "remotes" packages as
    remotes config files are not provided anymore and the config
    package provides a tool to config a remote
  * liblirc_driver0 : provides the driver library
  * liblirc0 : the main library
  * drv-ftdi: provides ftdi support
  * drv-portaudio : provides portaudio support
  * tools-gui : tools for debugging lirc
- Add pkgconfig(libftdi1) require for Factory; ftdi is only availables
  on Factory
- Add pkgconfig(portaudio-2.0) require; build with portaudio support
- Add python3 build require instead of python; python3 is now the
  default
- Add python3-PyYAML build require and requirement for lirc-config;
  needed for generating table.html and lirc.hwdb, and is a direct
  dependency of lirc-setup
- Remove help2man require; dropped by upstream
- Remove lirc-0.9.1a-fix-bashisms.patch; fixed on upstream release
- Remove 0003-0.9.1a-Bugfix-segfault-when-parsing-connect-in-confi.patch
  fixed on upstream release
- Update patches
  * 0001-Fix-segfault-when-starting-lircd-AUR-41581.patch
  * 0002-lircd-Fix-bad-default-for-lircdfile.patch
- Remove old and not needed lirc-64bit obsoletion
- Add liblirc_driver0 and liblirc0 to baselibs.conf</changelog>
  <changelog author="p.drouand@gmail.com" date="1426766400">- lirc-core provides and obsoletes lirc
- Fix lirc-disable-kernel-rc requirement</changelog>
  <changelog author="p.drouand@gmail.com" date="1427112000">- Fix a typo in obsolete tag</changelog>
  <changelog author="dimstar@opensuse.org" date="1438344000">- Ignore absence of systemd-tmpfiles, it won't be present in the
  build env.</changelog>
  <changelog author="jengelh@inai.de" date="1438344001">- Do not hard depend on systemd - all macro uses support soft</changelog>
  <changelog author="p.drouand@gmail.com" date="1441627200">- Update to version 0.9.3
  * New build dependency: xsltproc (sometimes coming with libxml).
  * The irexec semantics have been changed so that the invoked programs
    run disconnected from the main irexec process. See irexec(1) (#92).
  * irrecord has got some love:
  * irrecord handles multiple definitions of same symbol OK (#78)
  * irrecord : Warns about single-key config files (#77)
  * irrecord : Checks for ambient light disturbances (#76)
  * irrecord : New option allows updating of existing template file.
  * irrecord : Template handling bug fixed
  * irrecord : -l --list-namespace option parsing bug fixed (#101).
  * irrecord : Minor fixes to irrecord-ui including -k option parsing fixed.
  * mode2 has been updated
  * mode2 : Handle also LIRCCODE devices (#94),
  * mode2 : Drop root privileges (#91)
  * mode2 : Add new scope-like display
  * mode2 : Handle the--driver-options switch
  * xmode2 has been updated to handle udp driver, the new --driver-options
    switch + some general overhaul.
  * irrecord has been split into a library and a cli interface (#36).
    The library interface is unstable.
  * irtoy: New support for debug LEDs. New documentation file, support
    in lirc-setup and driver table doc added.
  * The udp driver is patched to allow adjustable clockrates, see new
    udp_driver.html driver doc.
  * The mplay driver has been updated with patches which has been
    available "out there".
  * The select() calls in lircd, lircrcd and library routines have
    been replaced with poll() to avoid crashes when file descriptors
    becomes &gt; 1024 (#109).
  * Set supplementary groups using effective-user (RH bz 1253907).
  * Work around kernel bug in /dev/lirc0 output (#119).
  * lircmd: Several option parsing bugs fixed, one of which blocked the
    systemd service (#104, RH bz 1234155).
  * lirc-lsremotes now displays logs after parsing files, making more
    parsing warnings visible.
  * lirc-config-tool is fixed to comply with guidelines (#105).
  * Bug in irexec when using modes fixed (#102).
  * Create log directory if required (#124).
  * lirc-setup: Fixed name clash on recent python versions.
  * The library routines for parsing lircd.conf now warns for duplicate
    keys and values (#107).
  * Enhanced pkg-config support for drivers compiled out-of-tree
    (see driver-api in the manual).
  * Unlinked and hard to find driver docs and manpages have been linked.
  * The documentation is heavily revised. Old obsolete text is removed,
    the manual is reorganized, some info is moved to manpages and a lot
    of minor updates and bugfixes.
  * The compiler has been switched to c++, and filenames are updated
    to *.cpp (#79)
  * The lircd.simsend and lircd.simreceive tools have been removed, superseeded
    by irsimsend and irsimreceive.
  * A new kernel driver irpipe has been added. This allows feeding data from
    userspace to lircd, which can use the /dev/irpipeX device as a clean
    substitute for /dev/lircX. A companion CLI tool irpipe(1) is also added.
  * Options parsing (notably -U) and just listing first remote bugs in
    irsimsend have been fixed.
  * Overall code formatting is improved with more consistent layout and
    updated git hook. See CONTRIBUTE.md'
  * Build: now uses parallel make by default.
  * Hardcoded CFLAGS in Makefiles fixed (#124).
- Update patches
  * 0002-lircd-Fix-bad-default-for-lircdfile.patch
  * 0004-lircd-fix-compiler-error-format-security-error.patch
- Remove imon2_conf.patch; fixed on upstream release
- Add a dependency to libxslt-tools and gcc-c++
- Add libirrecord0 subpackage</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Add missing dependency on libirman (boo#941883)
- Update way tmpfiles.d are created
- Use correct symlinks for services</changelog>
  <changelog author="mpluskal@suse.com" date="1445774400">- Update to 0.9.3a
  * Broken fix for kernel bug reverted (#148, #119). This makes
    lirc incompatible with at least the 4.04 kernels. kernels
    &lt; 4.0 and &gt; 4.1.6 seemingly works.
  * Several irrecord fixes (#146, #139, d8826b, #141).
  * Some fixes for poll() usage, one of which blocked irrecord
    (02c2480, d9339b6).
  * lib: Fix parsing of multiple files (#141).
  * lib: Fix privilege dropping code and a compiler flag (e8be7ae,
    8a08ab1)
  * lirc-lsplugins: Fix --plugindir not being respected (#144).
  * atilibusb: Fix crash for non-existing device (#145).
  * plugins: file.c: Fix off-by-one sscanf error (#138).</changelog>
  <changelog author="p.drouand@gmail.com" date="1449403200">- Ensure lirc build against libusb-1.0; replace libusb-devel with
  pkgconfig(libusb-1.0)</changelog>
  <changelog author="pgajdos@suse.com" date="1458216000">- remove lirc.4 as this is part of man-pages from 4.05 on</changelog>
  <changelog author="p.drouand@gmail.com" date="1465819200">- Update to version 0.9.4
  * The caraca driver has been retired (still available in attic/).
  * The iguanair driver has been moved out of tree and is now
    maintained by Iguanaworks, Inc. See drivers/iguanair/README.
  * The irman driver has been moved out of tree. From 0.5.1 the
    libirman package contains the driver. See drivers/irman/README
  * The yard2 driver has been moved out of tree and is now maintained
    by the yard2 project. See driver/yard2/README.
  * The lirc.4 manpage (/dev/lirc* interface) is upstreamed to the
    linux kernel manpages project (#164). Old page lirc.4l still
    lingers in attic/ but is not installed.
  * Upstream selinux updated to match current lircd requirements.
    See: https://github.com/fedora-selinux/selinux-policy/pull/41
  * New upstream debian packaging with which Debian users can create
    .deb packages. Ubuntu packages are also available in PPAs. See
    README.md in the debian branch (#137).
  * New driver girs for the GIRS protocol, gives LIRC Arduino support.
    See new info in driver documentation.
  * New transmit-only FTDI driver with enhanced accuracy and hardware
    support. See ftdix driver documentation.
  * Support for non-modulated signals added (#132).
  * As shipped, lircd now uses the devinput driver and the new 'auto'
    device, should work for all remotes supported by kernel (#106).
  * Enhanced lirc-setup tool (#123, partly):
  - Add drvctl device enumeration support.
  - Integrated mode2 and irw tests of current configuration.
  - Documentation links.
  - More consistent data based on new database.
  - Multiple bugfixes.
  * Several patches to make mode2 work with all drivers(#123, partly)
  * Configuration database overhaul (#123, partly)
  - Database lives as yaml files in configs/.
  - Data is collected from drivers, remotes and static files.
  - Better ways for drivers to enumerate devices.
  - There is an unstable python database module used by
    all tools.
  * Several drivers including default and devinput has enhanced
    enumeration support, usable with mode2 -l and lirc-setup.
  * devinput.lircd.conf is generated at build time to match host kernel,
    new script lirc-make-devinput shipped to re-generate it (#153)
  * A new script lircd-setup runs as a one-shot service before lircd,
    performing setup commands as root (#121).
  * Several new examples in contrib/, notably lircrc templates for
    many popular LIRC applications and improved udev rules.
  * The default driver does not require root perms if the protocol
    is correct (#133).
  * Add an "auto" device to devinput driver for single-device
    usecase (#134).
  * irrecord has been taught to handle remotes without gap (#98).
  * The --uinput lircd option is deprecated, obsoleted by the
    lircd.uinput.service systemd service. See lircd-uinput(8).
  * CLI options for mode2, xmode2 and irrecord has been streamlined.
    All tools falls back to lircd defaults where it makes sense.
  * The driver API has been expanded with functions to enumerate
    devices. See configs/README and lib/driver.h.
  * New logging API with hooks for enhanced messages and filtering
    (also #129).
  * The out-of-tree build interface is enhanced with hooks for external
    drivers to rebuild documentation and add a config file.
  * lircd: Fix too-short gap  when sending/blasting (#158).
  * lircd: Fix typo causing lost deinit_func() calls (#179).
  * irrecord fixes:
  - Fix broken namespace checks on recent kernels (#187).
  - Buggy handling of not decoded buttons in irrecord (#146).
  - Repeated buttons problems (#149)
  - Endless loop when key is not recognized (#146)
  - Endless loop on idendifying toggle mark (#139)
  * lirs-lsremotes: Don't use non-standard GLOB_BRACE (#174).
  * lib: Fix  misleading logprintf comments (#179)
  * lib: Clean up loglevel handling (#178).
  * Fix --plugindir not being respected (#144).
  * Fix gid and supplementary groups in CLI apps dropping root.
  * Fix a crash in irrecord when invoked without options.
  * Fix bad parsing of --options-file unless given first (#165).
  * plugins/default: Don't require write access if not needed (#133).
  * plugins/atilibusb: Fix crash for non-existing device (#145).
  * plugins/audio_alsa : Fix blocking regression bug (#169).
  * plugins/file: Fix bad test for LIRCCODE cases (#171).
  * plugins/ftdi: Bugfixes: 4157fe1, 92e2d1d, #182.
  * plugins/girs: Bugfixes.
  * plugins/default: Remotes become too sensitive in 0.9.3 (#148)
  * plugins/default: Walk around kernel bug generating multiple
    spaces (#172).
  * doc: lircd.conf: Document suppress_repeat parameter.
  * Clean up docs, remove circular links (#136). Documentation is
    now only in lirc.org/html.
  * build: Add explicit default -L${libdir} linker flag.
  * build: Fix Debian FTBS compilation error.
- Add some missing dependencies
  * doxygen
  * kmod-compat
  * pkgconfig(sm)
- Replace pkgconfig(libusb-1.0) with pkgconfig(libusb); fow some
  reasons, lirc now relies on compat libusb
- Remove obsolete configure switches
- Update 0001-Fix-segfault-when-starting-lircd-AUR-41581.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1467201600">- Update to version 0.9.4a:
  * Fix syntax errors in systemd unit files (rhbz: 1350750).
  * irrecord: Enhance "Don't use devinput" message (#180).
  * plugins/uirt2_raw: Reset device to UIR mode on deinit.
  * plugins/girs.c: Enable reception after sending.
  * lirc.org: Updates and bugfixes
  * lircd, liblirc_client: Fix freeaddrinfo handling (#195).
  * Don't build commandir unless we have usb.h (#191).
  * lirc_options.conf: debug =&gt; loglevel (#199).
  * lib: use proper linking method to avoid parallel build issue
  * tools: make_rel_symlink.py can also use python2
  * plugins/devinput: Make the list-devices support available.
  * configure.ac: Bugfix (BSD setting reported wrong).</changelog>
  <changelog author="p.drouand@gmail.com" date="1477051200">- Update to version 0.9.4c
  * New curl_poll files adds a new MIT license. Lirc now carries GPL,
    BSD and MIT licenses.
  * Several patches to make lirc work again on macos (#226, #227).
  * New tool irtext2udp generates udp plugin data (#197).
  * plugins: girs: Add udp/receive support (#201).
  * mode2: Fix broken --raw option (#223).
  * lirc-make-devinput: Fix that two remotes has the same name (#222).
  * lircd: Warn for duplicate remote definitions (#222).
  * lircd: Retry temporary unavailable write sockets (#221).
  * contrib: Fix usb devices' acl permissions (rhbz #1364744).
  * lirc-setup: Fix crasher bugfix (Fedora abort trace).
  * contrib: disable udev /dev/uinput rule requiring lirc user.
  * plugins: audio_alsa: Fix byte truncating in 16-bit data (#218):
  * plugins: irtoy: improve error handling (#220).
  * Minor documentation fixes.
- Changes from version 0.9.4b
  * lircd-uinput: A multitude of fixes (#213, #211, #177). Adds new options.
  * lirc_client: Fix "Can't redirect irsend output" (#207).
  * lirc_client: Fix un-terminated buffer causing irsend crash (#216).
  * irrecord: Fix under-sized buffer causing crash (#208).
  * systemd: Add hardening options comments to services (#204).
  * lircmd: Options, udev examples and manpage update.
  * lib: Add missing Makefile.am dep, fixes parallel build failure (#210).
  * Remove a single python2 dependency [4e3c97c].
  * build: Don't define docdir - autoconf defines docdir (#215).
  * build: support runstatedir configure option (#212).
  * doc: Manpages and configuration guide fixes.
- Remove fix-remote-keys.pl, README.SUSE and 51-lirc.rules; not relevant
  for a while already
- Remove 0001-Fix-segfault-when-starting-lircd-AUR-41581.patch and
  0002-lircd-Fix-bad-default-for-lircdfile.patch; fixed on upstream
- Add missing dependency to systemd
- Global sweeping
- Add lirc nologgin user; now needed
- Add lircd-Remove-use-of-functions-killed-in-kernel-4.8.0.patch;
  fix build on openSUSE &gt; 42.2</changelog>
  <changelog author="p.drouand@gmail.com" date="1478088000">- Add lirc-lib-curl_poll.h-Ensure-build-on-unconfiguredclients.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1478174400">- Fix %pre script</changelog>
  <changelog author="p.drouand@gmail.com" date="1478606400">- Move workarounds to %prep section
- Add lirc-configure-libudev.patch (boo#1008764)</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- Drop lircd-Remove-use-of-functions-killed-in-kernel-4.8.0.patch:
  the guarding zypper call was wrong (-qf vs --qf) and resulted in
  the patch never being applied. So it is obviously not used.
- Remove dependency on zypper: libzypp just gets a new dependency
  on libgpgme, which happens to result in a cycle: since the sole
  usage of zypper was to 'detect if the patch was needed' is no
  longer given, we have no feature loss.</changelog>
  <changelog author="tiwai@suse.de" date="1637064000">- Fix library dependency in lirc.pc (bsc#1192772):
  lirc-pc-fix.patch</changelog>
</package>
<package pkgid="74bf230b3181d525815e6e33d4f5d840094dda745a640d1c6c53c96d8dbc7dc8" name="lirc-drv-portaudio" arch="x86_64">
  <version epoch="0" ver="0.9.4c" rel="150000.4.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Run spec-cleaner
- Replace xorg-x11-devel with pkgconfig(x11)
- Do not run autoreconf, configure.ac is broken and patches
  are not modifying autotools files.</changelog>
  <changelog author="ledest@gmail.com" date="1417262400">- fix bashism in lirc-codecs-regression-test.sh script
- add patches:
  * lirc-0.9.1a-fix-bashisms.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1424260800">- Update to version 0.9.2a
  * Maintenance release: bugfixes, no new features.
  * Notably fixes #85, multiple --connect regression.
  * Fixes bad bug for locating ~/.lircrc config file.
  * Documentation and lirc.org updates.
  * All in all 19 patches.
- Split each lirc module in his own package
  * core : contains needed binaries to run basically lirc; it obsoletes
    previous lirc package
  * config: contains tools and data to ease the LIRC configuration process.
    it provides and obsoletes the previous "remotes" packages as
    remotes config files are not provided anymore and the config
    package provides a tool to config a remote
  * liblirc_driver0 : provides the driver library
  * liblirc0 : the main library
  * drv-ftdi: provides ftdi support
  * drv-portaudio : provides portaudio support
  * tools-gui : tools for debugging lirc
- Add pkgconfig(libftdi1) require for Factory; ftdi is only availables
  on Factory
- Add pkgconfig(portaudio-2.0) require; build with portaudio support
- Add python3 build require instead of python; python3 is now the
  default
- Add python3-PyYAML build require and requirement for lirc-config;
  needed for generating table.html and lirc.hwdb, and is a direct
  dependency of lirc-setup
- Remove help2man require; dropped by upstream
- Remove lirc-0.9.1a-fix-bashisms.patch; fixed on upstream release
- Remove 0003-0.9.1a-Bugfix-segfault-when-parsing-connect-in-confi.patch
  fixed on upstream release
- Update patches
  * 0001-Fix-segfault-when-starting-lircd-AUR-41581.patch
  * 0002-lircd-Fix-bad-default-for-lircdfile.patch
- Remove old and not needed lirc-64bit obsoletion
- Add liblirc_driver0 and liblirc0 to baselibs.conf</changelog>
  <changelog author="p.drouand@gmail.com" date="1426766400">- lirc-core provides and obsoletes lirc
- Fix lirc-disable-kernel-rc requirement</changelog>
  <changelog author="p.drouand@gmail.com" date="1427112000">- Fix a typo in obsolete tag</changelog>
  <changelog author="dimstar@opensuse.org" date="1438344000">- Ignore absence of systemd-tmpfiles, it won't be present in the
  build env.</changelog>
  <changelog author="jengelh@inai.de" date="1438344001">- Do not hard depend on systemd - all macro uses support soft</changelog>
  <changelog author="p.drouand@gmail.com" date="1441627200">- Update to version 0.9.3
  * New build dependency: xsltproc (sometimes coming with libxml).
  * The irexec semantics have been changed so that the invoked programs
    run disconnected from the main irexec process. See irexec(1) (#92).
  * irrecord has got some love:
  * irrecord handles multiple definitions of same symbol OK (#78)
  * irrecord : Warns about single-key config files (#77)
  * irrecord : Checks for ambient light disturbances (#76)
  * irrecord : New option allows updating of existing template file.
  * irrecord : Template handling bug fixed
  * irrecord : -l --list-namespace option parsing bug fixed (#101).
  * irrecord : Minor fixes to irrecord-ui including -k option parsing fixed.
  * mode2 has been updated
  * mode2 : Handle also LIRCCODE devices (#94),
  * mode2 : Drop root privileges (#91)
  * mode2 : Add new scope-like display
  * mode2 : Handle the--driver-options switch
  * xmode2 has been updated to handle udp driver, the new --driver-options
    switch + some general overhaul.
  * irrecord has been split into a library and a cli interface (#36).
    The library interface is unstable.
  * irtoy: New support for debug LEDs. New documentation file, support
    in lirc-setup and driver table doc added.
  * The udp driver is patched to allow adjustable clockrates, see new
    udp_driver.html driver doc.
  * The mplay driver has been updated with patches which has been
    available "out there".
  * The select() calls in lircd, lircrcd and library routines have
    been replaced with poll() to avoid crashes when file descriptors
    becomes &gt; 1024 (#109).
  * Set supplementary groups using effective-user (RH bz 1253907).
  * Work around kernel bug in /dev/lirc0 output (#119).
  * lircmd: Several option parsing bugs fixed, one of which blocked the
    systemd service (#104, RH bz 1234155).
  * lirc-lsremotes now displays logs after parsing files, making more
    parsing warnings visible.
  * lirc-config-tool is fixed to comply with guidelines (#105).
  * Bug in irexec when using modes fixed (#102).
  * Create log directory if required (#124).
  * lirc-setup: Fixed name clash on recent python versions.
  * The library routines for parsing lircd.conf now warns for duplicate
    keys and values (#107).
  * Enhanced pkg-config support for drivers compiled out-of-tree
    (see driver-api in the manual).
  * Unlinked and hard to find driver docs and manpages have been linked.
  * The documentation is heavily revised. Old obsolete text is removed,
    the manual is reorganized, some info is moved to manpages and a lot
    of minor updates and bugfixes.
  * The compiler has been switched to c++, and filenames are updated
    to *.cpp (#79)
  * The lircd.simsend and lircd.simreceive tools have been removed, superseeded
    by irsimsend and irsimreceive.
  * A new kernel driver irpipe has been added. This allows feeding data from
    userspace to lircd, which can use the /dev/irpipeX device as a clean
    substitute for /dev/lircX. A companion CLI tool irpipe(1) is also added.
  * Options parsing (notably -U) and just listing first remote bugs in
    irsimsend have been fixed.
  * Overall code formatting is improved with more consistent layout and
    updated git hook. See CONTRIBUTE.md'
  * Build: now uses parallel make by default.
  * Hardcoded CFLAGS in Makefiles fixed (#124).
- Update patches
  * 0002-lircd-Fix-bad-default-for-lircdfile.patch
  * 0004-lircd-fix-compiler-error-format-security-error.patch
- Remove imon2_conf.patch; fixed on upstream release
- Add a dependency to libxslt-tools and gcc-c++
- Add libirrecord0 subpackage</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Add missing dependency on libirman (boo#941883)
- Update way tmpfiles.d are created
- Use correct symlinks for services</changelog>
  <changelog author="mpluskal@suse.com" date="1445774400">- Update to 0.9.3a
  * Broken fix for kernel bug reverted (#148, #119). This makes
    lirc incompatible with at least the 4.04 kernels. kernels
    &lt; 4.0 and &gt; 4.1.6 seemingly works.
  * Several irrecord fixes (#146, #139, d8826b, #141).
  * Some fixes for poll() usage, one of which blocked irrecord
    (02c2480, d9339b6).
  * lib: Fix parsing of multiple files (#141).
  * lib: Fix privilege dropping code and a compiler flag (e8be7ae,
    8a08ab1)
  * lirc-lsplugins: Fix --plugindir not being respected (#144).
  * atilibusb: Fix crash for non-existing device (#145).
  * plugins: file.c: Fix off-by-one sscanf error (#138).</changelog>
  <changelog author="p.drouand@gmail.com" date="1449403200">- Ensure lirc build against libusb-1.0; replace libusb-devel with
  pkgconfig(libusb-1.0)</changelog>
  <changelog author="pgajdos@suse.com" date="1458216000">- remove lirc.4 as this is part of man-pages from 4.05 on</changelog>
  <changelog author="p.drouand@gmail.com" date="1465819200">- Update to version 0.9.4
  * The caraca driver has been retired (still available in attic/).
  * The iguanair driver has been moved out of tree and is now
    maintained by Iguanaworks, Inc. See drivers/iguanair/README.
  * The irman driver has been moved out of tree. From 0.5.1 the
    libirman package contains the driver. See drivers/irman/README
  * The yard2 driver has been moved out of tree and is now maintained
    by the yard2 project. See driver/yard2/README.
  * The lirc.4 manpage (/dev/lirc* interface) is upstreamed to the
    linux kernel manpages project (#164). Old page lirc.4l still
    lingers in attic/ but is not installed.
  * Upstream selinux updated to match current lircd requirements.
    See: https://github.com/fedora-selinux/selinux-policy/pull/41
  * New upstream debian packaging with which Debian users can create
    .deb packages. Ubuntu packages are also available in PPAs. See
    README.md in the debian branch (#137).
  * New driver girs for the GIRS protocol, gives LIRC Arduino support.
    See new info in driver documentation.
  * New transmit-only FTDI driver with enhanced accuracy and hardware
    support. See ftdix driver documentation.
  * Support for non-modulated signals added (#132).
  * As shipped, lircd now uses the devinput driver and the new 'auto'
    device, should work for all remotes supported by kernel (#106).
  * Enhanced lirc-setup tool (#123, partly):
  - Add drvctl device enumeration support.
  - Integrated mode2 and irw tests of current configuration.
  - Documentation links.
  - More consistent data based on new database.
  - Multiple bugfixes.
  * Several patches to make mode2 work with all drivers(#123, partly)
  * Configuration database overhaul (#123, partly)
  - Database lives as yaml files in configs/.
  - Data is collected from drivers, remotes and static files.
  - Better ways for drivers to enumerate devices.
  - There is an unstable python database module used by
    all tools.
  * Several drivers including default and devinput has enhanced
    enumeration support, usable with mode2 -l and lirc-setup.
  * devinput.lircd.conf is generated at build time to match host kernel,
    new script lirc-make-devinput shipped to re-generate it (#153)
  * A new script lircd-setup runs as a one-shot service before lircd,
    performing setup commands as root (#121).
  * Several new examples in contrib/, notably lircrc templates for
    many popular LIRC applications and improved udev rules.
  * The default driver does not require root perms if the protocol
    is correct (#133).
  * Add an "auto" device to devinput driver for single-device
    usecase (#134).
  * irrecord has been taught to handle remotes without gap (#98).
  * The --uinput lircd option is deprecated, obsoleted by the
    lircd.uinput.service systemd service. See lircd-uinput(8).
  * CLI options for mode2, xmode2 and irrecord has been streamlined.
    All tools falls back to lircd defaults where it makes sense.
  * The driver API has been expanded with functions to enumerate
    devices. See configs/README and lib/driver.h.
  * New logging API with hooks for enhanced messages and filtering
    (also #129).
  * The out-of-tree build interface is enhanced with hooks for external
    drivers to rebuild documentation and add a config file.
  * lircd: Fix too-short gap  when sending/blasting (#158).
  * lircd: Fix typo causing lost deinit_func() calls (#179).
  * irrecord fixes:
  - Fix broken namespace checks on recent kernels (#187).
  - Buggy handling of not decoded buttons in irrecord (#146).
  - Repeated buttons problems (#149)
  - Endless loop when key is not recognized (#146)
  - Endless loop on idendifying toggle mark (#139)
  * lirs-lsremotes: Don't use non-standard GLOB_BRACE (#174).
  * lib: Fix  misleading logprintf comments (#179)
  * lib: Clean up loglevel handling (#178).
  * Fix --plugindir not being respected (#144).
  * Fix gid and supplementary groups in CLI apps dropping root.
  * Fix a crash in irrecord when invoked without options.
  * Fix bad parsing of --options-file unless given first (#165).
  * plugins/default: Don't require write access if not needed (#133).
  * plugins/atilibusb: Fix crash for non-existing device (#145).
  * plugins/audio_alsa : Fix blocking regression bug (#169).
  * plugins/file: Fix bad test for LIRCCODE cases (#171).
  * plugins/ftdi: Bugfixes: 4157fe1, 92e2d1d, #182.
  * plugins/girs: Bugfixes.
  * plugins/default: Remotes become too sensitive in 0.9.3 (#148)
  * plugins/default: Walk around kernel bug generating multiple
    spaces (#172).
  * doc: lircd.conf: Document suppress_repeat parameter.
  * Clean up docs, remove circular links (#136). Documentation is
    now only in lirc.org/html.
  * build: Add explicit default -L${libdir} linker flag.
  * build: Fix Debian FTBS compilation error.
- Add some missing dependencies
  * doxygen
  * kmod-compat
  * pkgconfig(sm)
- Replace pkgconfig(libusb-1.0) with pkgconfig(libusb); fow some
  reasons, lirc now relies on compat libusb
- Remove obsolete configure switches
- Update 0001-Fix-segfault-when-starting-lircd-AUR-41581.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1467201600">- Update to version 0.9.4a:
  * Fix syntax errors in systemd unit files (rhbz: 1350750).
  * irrecord: Enhance "Don't use devinput" message (#180).
  * plugins/uirt2_raw: Reset device to UIR mode on deinit.
  * plugins/girs.c: Enable reception after sending.
  * lirc.org: Updates and bugfixes
  * lircd, liblirc_client: Fix freeaddrinfo handling (#195).
  * Don't build commandir unless we have usb.h (#191).
  * lirc_options.conf: debug =&gt; loglevel (#199).
  * lib: use proper linking method to avoid parallel build issue
  * tools: make_rel_symlink.py can also use python2
  * plugins/devinput: Make the list-devices support available.
  * configure.ac: Bugfix (BSD setting reported wrong).</changelog>
  <changelog author="p.drouand@gmail.com" date="1477051200">- Update to version 0.9.4c
  * New curl_poll files adds a new MIT license. Lirc now carries GPL,
    BSD and MIT licenses.
  * Several patches to make lirc work again on macos (#226, #227).
  * New tool irtext2udp generates udp plugin data (#197).
  * plugins: girs: Add udp/receive support (#201).
  * mode2: Fix broken --raw option (#223).
  * lirc-make-devinput: Fix that two remotes has the same name (#222).
  * lircd: Warn for duplicate remote definitions (#222).
  * lircd: Retry temporary unavailable write sockets (#221).
  * contrib: Fix usb devices' acl permissions (rhbz #1364744).
  * lirc-setup: Fix crasher bugfix (Fedora abort trace).
  * contrib: disable udev /dev/uinput rule requiring lirc user.
  * plugins: audio_alsa: Fix byte truncating in 16-bit data (#218):
  * plugins: irtoy: improve error handling (#220).
  * Minor documentation fixes.
- Changes from version 0.9.4b
  * lircd-uinput: A multitude of fixes (#213, #211, #177). Adds new options.
  * lirc_client: Fix "Can't redirect irsend output" (#207).
  * lirc_client: Fix un-terminated buffer causing irsend crash (#216).
  * irrecord: Fix under-sized buffer causing crash (#208).
  * systemd: Add hardening options comments to services (#204).
  * lircmd: Options, udev examples and manpage update.
  * lib: Add missing Makefile.am dep, fixes parallel build failure (#210).
  * Remove a single python2 dependency [4e3c97c].
  * build: Don't define docdir - autoconf defines docdir (#215).
  * build: support runstatedir configure option (#212).
  * doc: Manpages and configuration guide fixes.
- Remove fix-remote-keys.pl, README.SUSE and 51-lirc.rules; not relevant
  for a while already
- Remove 0001-Fix-segfault-when-starting-lircd-AUR-41581.patch and
  0002-lircd-Fix-bad-default-for-lircdfile.patch; fixed on upstream
- Add missing dependency to systemd
- Global sweeping
- Add lirc nologgin user; now needed
- Add lircd-Remove-use-of-functions-killed-in-kernel-4.8.0.patch;
  fix build on openSUSE &gt; 42.2</changelog>
  <changelog author="p.drouand@gmail.com" date="1478088000">- Add lirc-lib-curl_poll.h-Ensure-build-on-unconfiguredclients.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1478174400">- Fix %pre script</changelog>
  <changelog author="p.drouand@gmail.com" date="1478606400">- Move workarounds to %prep section
- Add lirc-configure-libudev.patch (boo#1008764)</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- Drop lircd-Remove-use-of-functions-killed-in-kernel-4.8.0.patch:
  the guarding zypper call was wrong (-qf vs --qf) and resulted in
  the patch never being applied. So it is obviously not used.
- Remove dependency on zypper: libzypp just gets a new dependency
  on libgpgme, which happens to result in a cycle: since the sole
  usage of zypper was to 'detect if the patch was needed' is no
  longer given, we have no feature loss.</changelog>
  <changelog author="tiwai@suse.de" date="1637064000">- Fix library dependency in lirc.pc (bsc#1192772):
  lirc-pc-fix.patch</changelog>
</package>
<package pkgid="e5de0ef8af21633812899039933f0357bf1b00c46024b3572e5db690fcdee00f" name="lksctp-tools" arch="aarch64">
  <version epoch="0" ver="1.0.17" rel="150000.3.3.1"/>
  <changelog author="jengelh@medozas.de" date="1260964800">- enable parallel building</changelog>
  <changelog author="coolo@suse.com" date="1322136000">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1329307200">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="meissner@suse.com" date="1340193600">- upgraded to 1.0.11
  T:BUILD fix parallel build warning
  T:BUILD fix make distcheck for lksctp-tools
  T:BUILD fix compiler warnings in the libraray, apps and tests
  T:API   Update the sctp.h header to match the kernel.</changelog>
  <changelog author="meissner@suse.com" date="1358769600">- upgraded to 1.0.12
  T:API Add needed definitions for DTLS/SCTP.
  T:API Fix data corruption in sctp_send
  T:API Implement private SCTP_GET_ASSOC_STATS option to fetch addition
    association data.
  T:TEST Add more options to conformace test tool.
  T:APP Add HEARTBEAT command to sctp_darn
  T:API Obsolete interefaces have been removed
  T:API Suport for SCTP_SACK_IMMEDIATELY options
  T:API Support for non-blocking sctp-connectx</changelog>
  <changelog author="meissner@suse.com" date="1359201600">- upgraded to 1.0.13 (bugfixes)
  T:BUILD Use silent rules
  T:BUILD Fix build warnings all over the place
  T:APP Fix memory leak in sctp_xconnect
  T:TEST Fix deprecated values in test cases
- lskctp-fixes.patch: implicit warning fix</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1375358400">- upgrade to 1.0.15
  * withsctp: fix quoted command line arguments
  * sctp_status: fix printstatus output
  * do not returns an error if AM_SILENT_RULES does not exist
- include changes from 1.0.14
  * build: only use AM_CPPFLAGS instead of a mixture of AM_CFLAGS and AM_CPPFLAGS
  * test_sctp_sendrecvmsg: fix bug in msg_flag passing
  * build: fix out-of-tree build of withsctp.
  * test_1_to_1_threads: fixup pthread hung by giving an array instead of a pointer
  * test_1_to_1_threads: remove unused variable for t_recv and t_send
  * sctp: Add new spinfo state values to enumeration
  * build: Modernize autotools</changelog>
  <changelog author="ledest@gmail.com" date="1420977600">- upgrade to 1.0.16
  * code cleanups
  * various sctp_status fixes
  * avoid using file descriptor 0 to get ENOTSOCK
  * various fixes
  * fix build for prefixed architectures
- remove patches:
  * lksctp-fixes.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133097).</changelog>
  <changelog author="mardnh@gmx.de" date="1648468800">- Update to version 1.0.17 (bsc#1197590)
  * Build: add option to disable tests build
  * sctp_test: fix hostname resolution
  * man: remove sysctl listing from sctp.7
  * Fix recieved-&gt;received typos
  * Fix usage help for sctp_test
  * test_1_to_1_accept_close: also expect EACCES when accept on
    an established socket
  * lksctp-tools: make bind_test can do while disable IPV6
  * libsctp: add pkg-config support
  * autoconf: add m4 folder
- Run spec-cleaner</changelog>
</package>
<package pkgid="1aa176f6e5bb645bad9af745940e82868b527ff88911f4f3de9d3ad0bb53b48c" name="lksctp-tools" arch="ppc64le">
  <version epoch="0" ver="1.0.17" rel="150000.3.3.1"/>
  <changelog author="jengelh@medozas.de" date="1260964800">- enable parallel building</changelog>
  <changelog author="coolo@suse.com" date="1322136000">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1329307200">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="meissner@suse.com" date="1340193600">- upgraded to 1.0.11
  T:BUILD fix parallel build warning
  T:BUILD fix make distcheck for lksctp-tools
  T:BUILD fix compiler warnings in the libraray, apps and tests
  T:API   Update the sctp.h header to match the kernel.</changelog>
  <changelog author="meissner@suse.com" date="1358769600">- upgraded to 1.0.12
  T:API Add needed definitions for DTLS/SCTP.
  T:API Fix data corruption in sctp_send
  T:API Implement private SCTP_GET_ASSOC_STATS option to fetch addition
    association data.
  T:TEST Add more options to conformace test tool.
  T:APP Add HEARTBEAT command to sctp_darn
  T:API Obsolete interefaces have been removed
  T:API Suport for SCTP_SACK_IMMEDIATELY options
  T:API Support for non-blocking sctp-connectx</changelog>
  <changelog author="meissner@suse.com" date="1359201600">- upgraded to 1.0.13 (bugfixes)
  T:BUILD Use silent rules
  T:BUILD Fix build warnings all over the place
  T:APP Fix memory leak in sctp_xconnect
  T:TEST Fix deprecated values in test cases
- lskctp-fixes.patch: implicit warning fix</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1375358400">- upgrade to 1.0.15
  * withsctp: fix quoted command line arguments
  * sctp_status: fix printstatus output
  * do not returns an error if AM_SILENT_RULES does not exist
- include changes from 1.0.14
  * build: only use AM_CPPFLAGS instead of a mixture of AM_CFLAGS and AM_CPPFLAGS
  * test_sctp_sendrecvmsg: fix bug in msg_flag passing
  * build: fix out-of-tree build of withsctp.
  * test_1_to_1_threads: fixup pthread hung by giving an array instead of a pointer
  * test_1_to_1_threads: remove unused variable for t_recv and t_send
  * sctp: Add new spinfo state values to enumeration
  * build: Modernize autotools</changelog>
  <changelog author="ledest@gmail.com" date="1420977600">- upgrade to 1.0.16
  * code cleanups
  * various sctp_status fixes
  * avoid using file descriptor 0 to get ENOTSOCK
  * various fixes
  * fix build for prefixed architectures
- remove patches:
  * lksctp-fixes.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133097).</changelog>
  <changelog author="mardnh@gmx.de" date="1648468800">- Update to version 1.0.17 (bsc#1197590)
  * Build: add option to disable tests build
  * sctp_test: fix hostname resolution
  * man: remove sysctl listing from sctp.7
  * Fix recieved-&gt;received typos
  * Fix usage help for sctp_test
  * test_1_to_1_accept_close: also expect EACCES when accept on
    an established socket
  * lksctp-tools: make bind_test can do while disable IPV6
  * libsctp: add pkg-config support
  * autoconf: add m4 folder
- Run spec-cleaner</changelog>
</package>
<package pkgid="e2e41dec2baef36b73ba9a00f40664d8645bcf1e43f76d5c9c05340a119e8224" name="lksctp-tools" arch="s390x">
  <version epoch="0" ver="1.0.17" rel="150000.3.3.1"/>
  <changelog author="jengelh@medozas.de" date="1260964800">- enable parallel building</changelog>
  <changelog author="coolo@suse.com" date="1322136000">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1329307200">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="meissner@suse.com" date="1340193600">- upgraded to 1.0.11
  T:BUILD fix parallel build warning
  T:BUILD fix make distcheck for lksctp-tools
  T:BUILD fix compiler warnings in the libraray, apps and tests
  T:API   Update the sctp.h header to match the kernel.</changelog>
  <changelog author="meissner@suse.com" date="1358769600">- upgraded to 1.0.12
  T:API Add needed definitions for DTLS/SCTP.
  T:API Fix data corruption in sctp_send
  T:API Implement private SCTP_GET_ASSOC_STATS option to fetch addition
    association data.
  T:TEST Add more options to conformace test tool.
  T:APP Add HEARTBEAT command to sctp_darn
  T:API Obsolete interefaces have been removed
  T:API Suport for SCTP_SACK_IMMEDIATELY options
  T:API Support for non-blocking sctp-connectx</changelog>
  <changelog author="meissner@suse.com" date="1359201600">- upgraded to 1.0.13 (bugfixes)
  T:BUILD Use silent rules
  T:BUILD Fix build warnings all over the place
  T:APP Fix memory leak in sctp_xconnect
  T:TEST Fix deprecated values in test cases
- lskctp-fixes.patch: implicit warning fix</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1375358400">- upgrade to 1.0.15
  * withsctp: fix quoted command line arguments
  * sctp_status: fix printstatus output
  * do not returns an error if AM_SILENT_RULES does not exist
- include changes from 1.0.14
  * build: only use AM_CPPFLAGS instead of a mixture of AM_CFLAGS and AM_CPPFLAGS
  * test_sctp_sendrecvmsg: fix bug in msg_flag passing
  * build: fix out-of-tree build of withsctp.
  * test_1_to_1_threads: fixup pthread hung by giving an array instead of a pointer
  * test_1_to_1_threads: remove unused variable for t_recv and t_send
  * sctp: Add new spinfo state values to enumeration
  * build: Modernize autotools</changelog>
  <changelog author="ledest@gmail.com" date="1420977600">- upgrade to 1.0.16
  * code cleanups
  * various sctp_status fixes
  * avoid using file descriptor 0 to get ENOTSOCK
  * various fixes
  * fix build for prefixed architectures
- remove patches:
  * lksctp-fixes.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133097).</changelog>
  <changelog author="mardnh@gmx.de" date="1648468800">- Update to version 1.0.17 (bsc#1197590)
  * Build: add option to disable tests build
  * sctp_test: fix hostname resolution
  * man: remove sysctl listing from sctp.7
  * Fix recieved-&gt;received typos
  * Fix usage help for sctp_test
  * test_1_to_1_accept_close: also expect EACCES when accept on
    an established socket
  * lksctp-tools: make bind_test can do while disable IPV6
  * libsctp: add pkg-config support
  * autoconf: add m4 folder
- Run spec-cleaner</changelog>
</package>
<package pkgid="b9139a724fbd6716696ae212ee0799f9288166636792ecaaac304b655fd7dd0b" name="lksctp-tools" arch="src">
  <version epoch="0" ver="1.0.17" rel="150000.3.3.1"/>
  <changelog author="okir@suse.de" date="1084363200">- Updated to lksctp-tools to 1.0.1 per request from IBM</changelog>
  <changelog author="okir@suse.de" date="1106308800">- Updated to latest upstream version (1.0.2)</changelog>
  <changelog author="dmueller@suse.de" date="1130932800">- don't build as root</changelog>
  <changelog author="okir@suse.de" date="1134388800">- Updated to latest upstream version (1.0.4)</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="meissner@suse.de" date="1177502400">- fixed some rpmlint problems. Changed permissions
  to 755/644, moved some development libraries.</changelog>
  <changelog author="meissner@suse.de" date="1184673600">- upgraded to 1.0.7
  - lots of fixes
  - adjusted to 2.6.22 kernel</changelog>
  <changelog author="meissner@suse.de" date="1203940800">- upgraded to 1.0.8
  - added various new features
  - adjusted to 2.6.24
  - bugfixes</changelog>
  <changelog author="meissner@suse.de" date="1220270400">- upgraded to 1.0.9
  - adjusted to 2.6.26
  - Implement and export SCTP-AUTH API extensions based on sctpsocket-16 draft
  - lots of bugfixes
- disable shared libraries and .la files</changelog>
  <changelog author="meissner@suse.de" date="1239019200">- upgraded to 1.0.10
  T:TEST Split the kernel frame test framework from lksctp-tools.
    The framework is very sensitive to all kernel changes, not just
    ones related to SCTP.  As such, it has been a gating fractor
    to the releases of the new tools.
  T:APP New tool sctp_status to be used with SCTP conformance tests.
    http://networktest.sourceforge.net/
  T:APP Add -T option to sctp_test
  T:APP Fix the -e option to sctp_darn
  T:LIB Fix building of static libraries.
  T:LIB Fix compile warning in addrs.c
  T:APP Update the application useage of sctp_connectx
  T:TEST Update the sctp_connectx() functional tests.
  T:API Update to the sctp_connectx().  Now takes additional argument.
  T:API Let sctp_recvmsg() honor passed in MSG_ flags
  K:    See kernel change log for details.  We'll track only tools
    changes here from now on.</changelog>
  <changelog author="jengelh@medozas.de" date="1260964800">- enable parallel building</changelog>
  <changelog author="coolo@suse.com" date="1322136000">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1329307200">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="meissner@suse.com" date="1340193600">- upgraded to 1.0.11
  T:BUILD fix parallel build warning
  T:BUILD fix make distcheck for lksctp-tools
  T:BUILD fix compiler warnings in the libraray, apps and tests
  T:API   Update the sctp.h header to match the kernel.</changelog>
  <changelog author="meissner@suse.com" date="1358769600">- upgraded to 1.0.12
  T:API Add needed definitions for DTLS/SCTP.
  T:API Fix data corruption in sctp_send
  T:API Implement private SCTP_GET_ASSOC_STATS option to fetch addition
    association data.
  T:TEST Add more options to conformace test tool.
  T:APP Add HEARTBEAT command to sctp_darn
  T:API Obsolete interefaces have been removed
  T:API Suport for SCTP_SACK_IMMEDIATELY options
  T:API Support for non-blocking sctp-connectx</changelog>
  <changelog author="meissner@suse.com" date="1359201600">- upgraded to 1.0.13 (bugfixes)
  T:BUILD Use silent rules
  T:BUILD Fix build warnings all over the place
  T:APP Fix memory leak in sctp_xconnect
  T:TEST Fix deprecated values in test cases
- lskctp-fixes.patch: implicit warning fix</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1375358400">- upgrade to 1.0.15
  * withsctp: fix quoted command line arguments
  * sctp_status: fix printstatus output
  * do not returns an error if AM_SILENT_RULES does not exist
- include changes from 1.0.14
  * build: only use AM_CPPFLAGS instead of a mixture of AM_CFLAGS and AM_CPPFLAGS
  * test_sctp_sendrecvmsg: fix bug in msg_flag passing
  * build: fix out-of-tree build of withsctp.
  * test_1_to_1_threads: fixup pthread hung by giving an array instead of a pointer
  * test_1_to_1_threads: remove unused variable for t_recv and t_send
  * sctp: Add new spinfo state values to enumeration
  * build: Modernize autotools</changelog>
  <changelog author="ledest@gmail.com" date="1420977600">- upgrade to 1.0.16
  * code cleanups
  * various sctp_status fixes
  * avoid using file descriptor 0 to get ENOTSOCK
  * various fixes
  * fix build for prefixed architectures
- remove patches:
  * lksctp-fixes.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133097).</changelog>
  <changelog author="mardnh@gmx.de" date="1648468800">- Update to version 1.0.17 (bsc#1197590)
  * Build: add option to disable tests build
  * sctp_test: fix hostname resolution
  * man: remove sysctl listing from sctp.7
  * Fix recieved-&gt;received typos
  * Fix usage help for sctp_test
  * test_1_to_1_accept_close: also expect EACCES when accept on
    an established socket
  * lksctp-tools: make bind_test can do while disable IPV6
  * libsctp: add pkg-config support
  * autoconf: add m4 folder
- Run spec-cleaner</changelog>
</package>
<package pkgid="a0f702ebb6d2b80d32402d2244bd71ad391d36b9116dd11df6e343e67a02ed1f" name="lksctp-tools" arch="x86_64">
  <version epoch="0" ver="1.0.17" rel="150000.3.3.1"/>
  <changelog author="jengelh@medozas.de" date="1260964800">- enable parallel building</changelog>
  <changelog author="coolo@suse.com" date="1322136000">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1329307200">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="meissner@suse.com" date="1340193600">- upgraded to 1.0.11
  T:BUILD fix parallel build warning
  T:BUILD fix make distcheck for lksctp-tools
  T:BUILD fix compiler warnings in the libraray, apps and tests
  T:API   Update the sctp.h header to match the kernel.</changelog>
  <changelog author="meissner@suse.com" date="1358769600">- upgraded to 1.0.12
  T:API Add needed definitions for DTLS/SCTP.
  T:API Fix data corruption in sctp_send
  T:API Implement private SCTP_GET_ASSOC_STATS option to fetch addition
    association data.
  T:TEST Add more options to conformace test tool.
  T:APP Add HEARTBEAT command to sctp_darn
  T:API Obsolete interefaces have been removed
  T:API Suport for SCTP_SACK_IMMEDIATELY options
  T:API Support for non-blocking sctp-connectx</changelog>
  <changelog author="meissner@suse.com" date="1359201600">- upgraded to 1.0.13 (bugfixes)
  T:BUILD Use silent rules
  T:BUILD Fix build warnings all over the place
  T:APP Fix memory leak in sctp_xconnect
  T:TEST Fix deprecated values in test cases
- lskctp-fixes.patch: implicit warning fix</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1375358400">- upgrade to 1.0.15
  * withsctp: fix quoted command line arguments
  * sctp_status: fix printstatus output
  * do not returns an error if AM_SILENT_RULES does not exist
- include changes from 1.0.14
  * build: only use AM_CPPFLAGS instead of a mixture of AM_CFLAGS and AM_CPPFLAGS
  * test_sctp_sendrecvmsg: fix bug in msg_flag passing
  * build: fix out-of-tree build of withsctp.
  * test_1_to_1_threads: fixup pthread hung by giving an array instead of a pointer
  * test_1_to_1_threads: remove unused variable for t_recv and t_send
  * sctp: Add new spinfo state values to enumeration
  * build: Modernize autotools</changelog>
  <changelog author="ledest@gmail.com" date="1420977600">- upgrade to 1.0.16
  * code cleanups
  * various sctp_status fixes
  * avoid using file descriptor 0 to get ENOTSOCK
  * various fixes
  * fix build for prefixed architectures
- remove patches:
  * lksctp-fixes.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133097).</changelog>
  <changelog author="mardnh@gmx.de" date="1648468800">- Update to version 1.0.17 (bsc#1197590)
  * Build: add option to disable tests build
  * sctp_test: fix hostname resolution
  * man: remove sysctl listing from sctp.7
  * Fix recieved-&gt;received typos
  * Fix usage help for sctp_test
  * test_1_to_1_accept_close: also expect EACCES when accept on
    an established socket
  * lksctp-tools: make bind_test can do while disable IPV6
  * libsctp: add pkg-config support
  * autoconf: add m4 folder
- Run spec-cleaner</changelog>
</package>
<package pkgid="f18a39dfe90b368e4a49ac3ca7a7f3054c354d48734025130f09477708f75872" name="lksctp-tools-devel" arch="aarch64">
  <version epoch="0" ver="1.0.17" rel="150000.3.3.1"/>
  <changelog author="jengelh@medozas.de" date="1260964800">- enable parallel building</changelog>
  <changelog author="coolo@suse.com" date="1322136000">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1329307200">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="meissner@suse.com" date="1340193600">- upgraded to 1.0.11
  T:BUILD fix parallel build warning
  T:BUILD fix make distcheck for lksctp-tools
  T:BUILD fix compiler warnings in the libraray, apps and tests
  T:API   Update the sctp.h header to match the kernel.</changelog>
  <changelog author="meissner@suse.com" date="1358769600">- upgraded to 1.0.12
  T:API Add needed definitions for DTLS/SCTP.
  T:API Fix data corruption in sctp_send
  T:API Implement private SCTP_GET_ASSOC_STATS option to fetch addition
    association data.
  T:TEST Add more options to conformace test tool.
  T:APP Add HEARTBEAT command to sctp_darn
  T:API Obsolete interefaces have been removed
  T:API Suport for SCTP_SACK_IMMEDIATELY options
  T:API Support for non-blocking sctp-connectx</changelog>
  <changelog author="meissner@suse.com" date="1359201600">- upgraded to 1.0.13 (bugfixes)
  T:BUILD Use silent rules
  T:BUILD Fix build warnings all over the place
  T:APP Fix memory leak in sctp_xconnect
  T:TEST Fix deprecated values in test cases
- lskctp-fixes.patch: implicit warning fix</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1375358400">- upgrade to 1.0.15
  * withsctp: fix quoted command line arguments
  * sctp_status: fix printstatus output
  * do not returns an error if AM_SILENT_RULES does not exist
- include changes from 1.0.14
  * build: only use AM_CPPFLAGS instead of a mixture of AM_CFLAGS and AM_CPPFLAGS
  * test_sctp_sendrecvmsg: fix bug in msg_flag passing
  * build: fix out-of-tree build of withsctp.
  * test_1_to_1_threads: fixup pthread hung by giving an array instead of a pointer
  * test_1_to_1_threads: remove unused variable for t_recv and t_send
  * sctp: Add new spinfo state values to enumeration
  * build: Modernize autotools</changelog>
  <changelog author="ledest@gmail.com" date="1420977600">- upgrade to 1.0.16
  * code cleanups
  * various sctp_status fixes
  * avoid using file descriptor 0 to get ENOTSOCK
  * various fixes
  * fix build for prefixed architectures
- remove patches:
  * lksctp-fixes.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133097).</changelog>
  <changelog author="mardnh@gmx.de" date="1648468800">- Update to version 1.0.17 (bsc#1197590)
  * Build: add option to disable tests build
  * sctp_test: fix hostname resolution
  * man: remove sysctl listing from sctp.7
  * Fix recieved-&gt;received typos
  * Fix usage help for sctp_test
  * test_1_to_1_accept_close: also expect EACCES when accept on
    an established socket
  * lksctp-tools: make bind_test can do while disable IPV6
  * libsctp: add pkg-config support
  * autoconf: add m4 folder
- Run spec-cleaner</changelog>
</package>
<package pkgid="bc6c9dfec77caa4b551065bff5c99e9c1fc51523756b76a582a7da6bfc870322" name="lksctp-tools-devel" arch="ppc64le">
  <version epoch="0" ver="1.0.17" rel="150000.3.3.1"/>
  <changelog author="jengelh@medozas.de" date="1260964800">- enable parallel building</changelog>
  <changelog author="coolo@suse.com" date="1322136000">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1329307200">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="meissner@suse.com" date="1340193600">- upgraded to 1.0.11
  T:BUILD fix parallel build warning
  T:BUILD fix make distcheck for lksctp-tools
  T:BUILD fix compiler warnings in the libraray, apps and tests
  T:API   Update the sctp.h header to match the kernel.</changelog>
  <changelog author="meissner@suse.com" date="1358769600">- upgraded to 1.0.12
  T:API Add needed definitions for DTLS/SCTP.
  T:API Fix data corruption in sctp_send
  T:API Implement private SCTP_GET_ASSOC_STATS option to fetch addition
    association data.
  T:TEST Add more options to conformace test tool.
  T:APP Add HEARTBEAT command to sctp_darn
  T:API Obsolete interefaces have been removed
  T:API Suport for SCTP_SACK_IMMEDIATELY options
  T:API Support for non-blocking sctp-connectx</changelog>
  <changelog author="meissner@suse.com" date="1359201600">- upgraded to 1.0.13 (bugfixes)
  T:BUILD Use silent rules
  T:BUILD Fix build warnings all over the place
  T:APP Fix memory leak in sctp_xconnect
  T:TEST Fix deprecated values in test cases
- lskctp-fixes.patch: implicit warning fix</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1375358400">- upgrade to 1.0.15
  * withsctp: fix quoted command line arguments
  * sctp_status: fix printstatus output
  * do not returns an error if AM_SILENT_RULES does not exist
- include changes from 1.0.14
  * build: only use AM_CPPFLAGS instead of a mixture of AM_CFLAGS and AM_CPPFLAGS
  * test_sctp_sendrecvmsg: fix bug in msg_flag passing
  * build: fix out-of-tree build of withsctp.
  * test_1_to_1_threads: fixup pthread hung by giving an array instead of a pointer
  * test_1_to_1_threads: remove unused variable for t_recv and t_send
  * sctp: Add new spinfo state values to enumeration
  * build: Modernize autotools</changelog>
  <changelog author="ledest@gmail.com" date="1420977600">- upgrade to 1.0.16
  * code cleanups
  * various sctp_status fixes
  * avoid using file descriptor 0 to get ENOTSOCK
  * various fixes
  * fix build for prefixed architectures
- remove patches:
  * lksctp-fixes.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133097).</changelog>
  <changelog author="mardnh@gmx.de" date="1648468800">- Update to version 1.0.17 (bsc#1197590)
  * Build: add option to disable tests build
  * sctp_test: fix hostname resolution
  * man: remove sysctl listing from sctp.7
  * Fix recieved-&gt;received typos
  * Fix usage help for sctp_test
  * test_1_to_1_accept_close: also expect EACCES when accept on
    an established socket
  * lksctp-tools: make bind_test can do while disable IPV6
  * libsctp: add pkg-config support
  * autoconf: add m4 folder
- Run spec-cleaner</changelog>
</package>
<package pkgid="ec1d2e7f105d08a2b3c00a783b4a66dcf8cc67ce4bbe12c94e7b3bc8b03d9024" name="lksctp-tools-devel" arch="s390x">
  <version epoch="0" ver="1.0.17" rel="150000.3.3.1"/>
  <changelog author="jengelh@medozas.de" date="1260964800">- enable parallel building</changelog>
  <changelog author="coolo@suse.com" date="1322136000">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1329307200">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="meissner@suse.com" date="1340193600">- upgraded to 1.0.11
  T:BUILD fix parallel build warning
  T:BUILD fix make distcheck for lksctp-tools
  T:BUILD fix compiler warnings in the libraray, apps and tests
  T:API   Update the sctp.h header to match the kernel.</changelog>
  <changelog author="meissner@suse.com" date="1358769600">- upgraded to 1.0.12
  T:API Add needed definitions for DTLS/SCTP.
  T:API Fix data corruption in sctp_send
  T:API Implement private SCTP_GET_ASSOC_STATS option to fetch addition
    association data.
  T:TEST Add more options to conformace test tool.
  T:APP Add HEARTBEAT command to sctp_darn
  T:API Obsolete interefaces have been removed
  T:API Suport for SCTP_SACK_IMMEDIATELY options
  T:API Support for non-blocking sctp-connectx</changelog>
  <changelog author="meissner@suse.com" date="1359201600">- upgraded to 1.0.13 (bugfixes)
  T:BUILD Use silent rules
  T:BUILD Fix build warnings all over the place
  T:APP Fix memory leak in sctp_xconnect
  T:TEST Fix deprecated values in test cases
- lskctp-fixes.patch: implicit warning fix</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1375358400">- upgrade to 1.0.15
  * withsctp: fix quoted command line arguments
  * sctp_status: fix printstatus output
  * do not returns an error if AM_SILENT_RULES does not exist
- include changes from 1.0.14
  * build: only use AM_CPPFLAGS instead of a mixture of AM_CFLAGS and AM_CPPFLAGS
  * test_sctp_sendrecvmsg: fix bug in msg_flag passing
  * build: fix out-of-tree build of withsctp.
  * test_1_to_1_threads: fixup pthread hung by giving an array instead of a pointer
  * test_1_to_1_threads: remove unused variable for t_recv and t_send
  * sctp: Add new spinfo state values to enumeration
  * build: Modernize autotools</changelog>
  <changelog author="ledest@gmail.com" date="1420977600">- upgrade to 1.0.16
  * code cleanups
  * various sctp_status fixes
  * avoid using file descriptor 0 to get ENOTSOCK
  * various fixes
  * fix build for prefixed architectures
- remove patches:
  * lksctp-fixes.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133097).</changelog>
  <changelog author="mardnh@gmx.de" date="1648468800">- Update to version 1.0.17 (bsc#1197590)
  * Build: add option to disable tests build
  * sctp_test: fix hostname resolution
  * man: remove sysctl listing from sctp.7
  * Fix recieved-&gt;received typos
  * Fix usage help for sctp_test
  * test_1_to_1_accept_close: also expect EACCES when accept on
    an established socket
  * lksctp-tools: make bind_test can do while disable IPV6
  * libsctp: add pkg-config support
  * autoconf: add m4 folder
- Run spec-cleaner</changelog>
</package>
<package pkgid="15f536f3d36f38b0a8ce5365b2115358c2b0d13a3ab4dac07a413b3fcb827af7" name="lksctp-tools-devel" arch="x86_64">
  <version epoch="0" ver="1.0.17" rel="150000.3.3.1"/>
  <changelog author="jengelh@medozas.de" date="1260964800">- enable parallel building</changelog>
  <changelog author="coolo@suse.com" date="1322136000">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1329307200">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="meissner@suse.com" date="1340193600">- upgraded to 1.0.11
  T:BUILD fix parallel build warning
  T:BUILD fix make distcheck for lksctp-tools
  T:BUILD fix compiler warnings in the libraray, apps and tests
  T:API   Update the sctp.h header to match the kernel.</changelog>
  <changelog author="meissner@suse.com" date="1358769600">- upgraded to 1.0.12
  T:API Add needed definitions for DTLS/SCTP.
  T:API Fix data corruption in sctp_send
  T:API Implement private SCTP_GET_ASSOC_STATS option to fetch addition
    association data.
  T:TEST Add more options to conformace test tool.
  T:APP Add HEARTBEAT command to sctp_darn
  T:API Obsolete interefaces have been removed
  T:API Suport for SCTP_SACK_IMMEDIATELY options
  T:API Support for non-blocking sctp-connectx</changelog>
  <changelog author="meissner@suse.com" date="1359201600">- upgraded to 1.0.13 (bugfixes)
  T:BUILD Use silent rules
  T:BUILD Fix build warnings all over the place
  T:APP Fix memory leak in sctp_xconnect
  T:TEST Fix deprecated values in test cases
- lskctp-fixes.patch: implicit warning fix</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1375358400">- upgrade to 1.0.15
  * withsctp: fix quoted command line arguments
  * sctp_status: fix printstatus output
  * do not returns an error if AM_SILENT_RULES does not exist
- include changes from 1.0.14
  * build: only use AM_CPPFLAGS instead of a mixture of AM_CFLAGS and AM_CPPFLAGS
  * test_sctp_sendrecvmsg: fix bug in msg_flag passing
  * build: fix out-of-tree build of withsctp.
  * test_1_to_1_threads: fixup pthread hung by giving an array instead of a pointer
  * test_1_to_1_threads: remove unused variable for t_recv and t_send
  * sctp: Add new spinfo state values to enumeration
  * build: Modernize autotools</changelog>
  <changelog author="ledest@gmail.com" date="1420977600">- upgrade to 1.0.16
  * code cleanups
  * various sctp_status fixes
  * avoid using file descriptor 0 to get ENOTSOCK
  * various fixes
  * fix build for prefixed architectures
- remove patches:
  * lksctp-fixes.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556020800">- Disable LTO (boo#1133097).</changelog>
  <changelog author="mardnh@gmx.de" date="1648468800">- Update to version 1.0.17 (bsc#1197590)
  * Build: add option to disable tests build
  * sctp_test: fix hostname resolution
  * man: remove sysctl listing from sctp.7
  * Fix recieved-&gt;received typos
  * Fix usage help for sctp_test
  * test_1_to_1_accept_close: also expect EACCES when accept on
    an established socket
  * lksctp-tools: make bind_test can do while disable IPV6
  * libsctp: add pkg-config support
  * autoconf: add m4 folder
- Run spec-cleaner</changelog>
</package>
<package pkgid="306f0717e9adb65793237d1fe797c5a1aee03bfcaa165efb3c04644a26e59f52" name="lld7" arch="aarch64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="19a14abc4953e06fcc95e09a26966778cc888243fe585bbcd69e8738d5e38cb3" name="lld7" arch="ppc64le">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="32dbf54d237f46b108614c8534ba639496e564c2cc4c617fa83a647c5d399285" name="lld7" arch="s390x">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="360364c583c5850c5f4ef054353d0292194882f9c1fda366479a3536ab78e231" name="lld7" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="db42640e80f7f9f62108d3ec225d9f812acbd0d1852083904a574a5ed25bbb6a" name="lldb7" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="3bd06eaac4e36d8bc551a7cf775f8fb559bfcb72d8ede5e586ad79d9f48ed5cd" name="lldb7-devel" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="37c56e65aa5555807507c80434edec62c9d0223a68f7bb5e914fee6362200f5d" name="llvm7" arch="aarch64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="f3689332028cb5430c5b636cf2b83c685ac299b4f62c9678d7ff04e5ef96b85a" name="llvm7" arch="ppc64le">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="5cae2d83b1248c553a9cd439a245905198f7495fbd184e7ec8aa0f04a0faf491" name="llvm7" arch="s390x">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="f2d44e11f817496ee186dc0dba849bafdaac0ee2d1893e1ebf59a9a8cc39cacc" name="llvm7" arch="src">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="fe581054b84bf867bf95708c289d0a7a2d6a3d83764e56843234e30577e99222" name="llvm7" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="88d288d75e2353fad5bf898a75358ea90d85d6f633fe0803fd5e5953785282e2" name="llvm7-LTO-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="7723b604e6be13e1db75f538b2ff8f4104600eb70a471d87ece48cbe4fc877c6" name="llvm7-LTO-devel" arch="aarch64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="37b7bb970a76f3764a5505b3f35164fdc04ae33424ea312873b2487ae0291bc8" name="llvm7-LTO-devel" arch="ppc64le">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="2595d1d7dbe3886239c2e14d83de7ad3dcb049333a45ff13c0f7523adcea8eee" name="llvm7-LTO-devel" arch="s390x">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="f0d9f5aef7c6852329c063d2cefa56e57df0c0c586c0d22bd990fe76df040491" name="llvm7-LTO-devel" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="8ec57f7dd43a95c2c627a6f16530e91e1ad57be8b2134939c8be2a1792853365" name="llvm7-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="1fd143b5b5154ff8e676a9ad24fff6a28bbb4e1e976118b20120d0adef860ffc" name="llvm7-devel" arch="aarch64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="d2546bb7088b1001347dcea66abd254959e8ed242837ffeed409c7cfbbbbea3d" name="llvm7-devel" arch="ppc64le">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="197f414f8bfe61d27379bccb903c5d1980db9c3ca85390725f264891cb3bc1f6" name="llvm7-devel" arch="s390x">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="47aa9f1b523682a22dc1a344b8da3790c5161bb2ae36635dda41c2568727dc24" name="llvm7-devel" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="d0a4f946f6d1f8e09d55855ecb6b2504b354c421226198f98c3c271d5b1f8fd5" name="llvm7-emacs-plugins" arch="noarch">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="364a2489127c16b5c06042f158743bf8574c2e24237cbd6793132ee62fa07925" name="llvm7-gold" arch="aarch64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="1133d04bdd487a18b99fa388a1eafce52713095b46f264ae13d7c60777d5029d" name="llvm7-gold" arch="ppc64le">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="235e9a7fb21e22e7ee72c108951f702c6fa4f3d3bdb133bbd38c628571633610" name="llvm7-gold" arch="s390x">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="84d1b233e45b9b34a20f7a5b9b42e32fb129c7bd2950d916831e4129e13bf9f8" name="llvm7-gold" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="54589e7f344e377155d9bbe885c9864f11c80ba202b1c5e0e024ec6429a9cd73" name="llvm7-opt-viewer" arch="noarch">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="c0b4b3754bd1198f34e7b00fae0e214f3716ea8075df2c3b3a398ceed6bd6f5d" name="llvm7-polly" arch="aarch64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="ec7ea2320efc52733562fd6660aab220312be49b9103f2c548012edf25d0094e" name="llvm7-polly" arch="ppc64le">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="1a1fce79975342c6f733542f771fa56f1944af6f64a22a4ef2183b39abbe30d0" name="llvm7-polly" arch="s390x">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="b79addda0179eba922d59ab407f2d73e5b370548f354c1fba40e2d643df9b62e" name="llvm7-polly" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="1ed0e38726e8b6bb3392ab354f67409d7fa2bf1e8acaf7c208bf2deb22d3c877" name="llvm7-polly-devel" arch="aarch64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="5282152a2ba78506d707859e080c798c6d262f01c38bee94c1595af237215054" name="llvm7-polly-devel" arch="ppc64le">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="0725e1a09aac665e72e69d01e844e89e9b42ef6ea2cbf88f0de8055277f898ec" name="llvm7-polly-devel" arch="s390x">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="5b997e439677394ae5a53e6479a7920bc2ebba7b7874669f36d6742952905725" name="llvm7-polly-devel" arch="x86_64">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="2eb10c782ea17bcf9c4184a2a457a6224ea07456baae7866c0f19fc3776ac0f7" name="llvm7-vim-plugins" arch="noarch">
  <version epoch="0" ver="7.0.1" rel="150100.3.22.2"/>
  <changelog author="l.lunak@centrum.cz" date="1530273600">- llvm6-fix-gdb-index-crash.patch
  * From upstream, fix lld --gdb-index crash.</changelog>
  <changelog author="msrb@suse.com" date="1532520000">- Update to llvm 6.0.1
  * This release contains bug-fixes for the LLVM 6.0.0 release. It
    is API and ABI compatible with 6.0.0.
- Remove no longer needed llvm6-fix-InstCombine.patch
- Add lldb-fix-build-with-python-3.7.patch
  * Fix build with python 3.7</changelog>
  <changelog author="msrb@suse.com" date="1535371200">- Updated llvm-remove-clang-only-flags.patch
  - Exclude also "-Werror=unguarded-availability-new" (bsc#1106000)</changelog>
  <changelog author="msrb@suse.com" date="1535457600">- Update to llvm 7.0.0
  * For details, see the release notes:
    https://llvm.org/releases/7.0.0/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html
    https://llvm.org/releases/7.0.0/tools/lld/docs/ReleaseNotes.html
- Remove no longer needed patches:
  * llvm6-fix-gdb-index-crash.patch
  * lldb-fix-build-with-python-3.7.patch
  * lldb-add-pthread-dl-libs.patch
  * polly-cmake-Trust-pkg-config-in-FindJsoncpp.patch
- Add tests-use-python3.patch
  * Prevents tests from failing because of missing python 2.
- Add llvm-better-detect-64bit-atomics-support.patch
  * Fixes build on i586.</changelog>
  <changelog author="msrb@suse.com" date="1539950400">- llvm-unittests-Don-t-install-TestPlugin.so.patch
  * It is only used for testing and is causing failures when
    processing LLVMExports.cmake.</changelog>
  <changelog author="msrb@suse.com" date="1540296000">- opt-viewer-Find-style-css-in-usr-share.patch
  * Make sure opt-viewer installed in /usr/bin can find resources
    from /usr/share/opt-viewer. (boo#1112730)</changelog>
  <changelog author="msrb@suse.com" date="1544529600">- llvm-drop-llvm-optional-clang-specific-optimization.patch
  * Fix ABI incompatibility when libLLVM (built with clang) is
    linked to a program build with gcc. (boo#1119092)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1544788800">- Remove ppc from Exclude field in spec file
- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
- Add patch to fix SUSE GNU triplet on ppc
  * clang-fix-powerpc-triplet.patch
- Add patch from upstream to fix ABI issue on ppc
  * llvm-D51108.patch
- Limit list of enabled targets on ppc
  * PowerPC;AMDGPU;BPF;NVPTX
- Ignore testsuite failures on ppc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1545220800">- Use %license macro
- Use upstream-recommended %{_rpmconfigdir}/macros.d directory
  for the rpm macros.</changelog>
  <changelog author="dmueller@suse.com" date="1546171200">- enable gold unconditionally like with llvm6 and older
- reenable openmp support again for aarch64 (like it was already in llvm6)</changelog>
  <changelog author="msrb@suse.com" date="1547467200">- Update to llvm 7.0.1
  * This release contains bug-fixes for the LLVM 7.0.0 release.
    This release is API and ABI compatible with 7.0.0.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550404800">- Allow use of Gold linker to be conditional
- Disable Gold linker on ppc
  + LLVM currently doesn't build with Gold on ppc</changelog>
  <changelog author="msrb@suse.com" date="1551182400">- llvm-Ensure-that-variant-part-discriminator-is-read-by-Me.patch,
  llvm-test-Fix-Assembler-debug-info.ll.patch
  * Fix crash in rustc (boo#1126907)</changelog>
  <changelog author="aaronpuchert@alice-dsl.net" date="1561982400">- Add a clang-%{_sonum} symlink, which is referenced by
  /usr/lib64/cmake/clang/ClangTargets.cmake (boo#1138457)</changelog>
  <changelog author="mgorse@suse.com" date="1572004800">- Use the documented LLVM_ENABLE_RTTI to enable RTTI instead of
  LLVM_REQUIRES_RTTI, which "is an internal flag that individual
  targets can use to force RTTI". (boo#1139584)
- Drop obsolete llvm-build-tests-with-rtti.patch.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1589889600">- Add llvm-fix-unordered-stores-when-lowering-to-cmpxchg.patch
  to fix build errors on i586 of rustc (bsc#1171512)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1592913600">- Add patch Fix-big-endian-miscompile-of-bitcast-zex.patch
  to fix miscompilations with rustc 1.43 that lead to LTO failures
  (bsc#1173202)</changelog>
  <changelog author="rguenther@suse.com" date="1606996800">- Fix dsymutil crash on ELF file. (bsc#1176964)
  * llvm-fix-a-copy-and-paste-error-that-would-cause-a-crash.patch
- Add fix-ppcle64-build.patch to fix ppc64le build.
- Add compiler-rt-sanitizer-ipc-perm.patch to fix build in the SP3 tree
- Change Provides/Conflicts to be versioned like in factory and required
  for newer llvm packages.
- Add Conflicts: clang-tools to clang7 and llvm7 packages to properly
  handle newer llvm versions.  (bsc#1179155)</changelog>
  <changelog author="alarrosa@suse.com" date="1619179200">- Backport fixes and changes from obs.
- Fri Oct 18 18:40:39 UTC 2019 - Stefan Brüns
- (Build)Require only python3-base instead of full python3 package,
  the additional modules are not required. Helps shortening the
  build dependency chain.
- Remove python3-* requires from lldb7 subpackage, and add it to
  the bindings/pretty-printer subpackage (python3-lldb7).
- Wed Sep  4 15:02:41 UTC 2019 - Aaron Puchert
- Remove unneccesary dependencies:
  * groff, bison and flex don't seem to be used.
  * jsoncpp is no longer used since r338461.
  * Devel packages are only required in other devel packages,
    when their headers are included in the installed headers.
- Remove some duplicate BuildRequires.
- Move libxml to the main package, since Clang also needs it.
- Remove unused (since r268685) CMake flags LLVM_ENABLE_TIMESTAMPS.
- Fri Aug  9 20:18:20 UTC 2019 - Petr Tesa?ík
- llvm-skip-broken-float-test.patch
  * Skip a test that is broken with 387 FPU registers.
  * Avoids check failure on i586 (bsc#1145085).
- Fri Aug  9 14:34:09 UTC 2019 - Petr Tesa?ík
- openmp-link-with-atomic-if-needed.patch
- openmp-link-with-atomic-if-needed.patch
  * Link libomp with atomic if needed (bsc#1145085).
  * Fixes build using gcc-4.8 (e.g. SLE-12).
- Thu Mar 28 15:15:46 UTC 2019 - Bernhard Wiedemann
- Add clang-deterministic-selector-order.patch to make build of
  gnustep-libobjc2 package reproducible (boo#1067478)
- Sun Mar 10 20:24:03 UTC 2019 - Aaron Puchert
- Remove -fno-strict-aliasing, which upstream doesn't use any more
  since r245304 in 2015. (http://reviews.llvm.org/D12036)
  It's probably also not needed for modern versions of GCC.
  It was enabled in r105644 because of some bugs there.
- Package clang builtin headers with libclang. The library is
  basically unusable without the builtin headers. Currently
  consumers of libclang have to require clang as well, although
  only the headers are needed. (boo#1109367)</changelog>
  <changelog author="rguenther@suse.com" date="1648728000">- Backport fixes and changes from Factory.  [bsc#1197775]
- Drop RUNPATH from packaged binaries, instead set LD_LIBRARY_PATH
  for building and testing to simulate behavior of actual package.
- BuildRequires: python-rpm-macros to fix Leap 15.3 build.
- Add compiler-rt-Remove-cyclades-inclusion-in-sanitizer.patch:
  Fix build with linux-glibc-devel 5.13.</changelog>
</package>
<package pkgid="75d52b5a39e151629feef76d54d43e888ccd214585f1a1e456fdb08d0d03c7f3" name="lpsolve" arch="aarch64">
  <version epoch="0" ver="5.5.2.0" rel="150000.3.2.1"/>
  <changelog author="jengelh@medozas.de" date="1265889600">- SPARC requires large PIC model</changelog>
  <changelog author="tchvatal@suse.com" date="1353499200">- Try to version bump on 5.5.2.0 based of Gentoo.</changelog>
  <changelog author="tchvatal@suse.com" date="1353499201">- Drop useless requires line.</changelog>
  <changelog author="tchvatal@suse.com" date="1353499202">- Last commit was really bad idea.</changelog>
  <changelog author="tchvatal@suse.com" date="1354190400">- Drop duplication of the license string.</changelog>
  <changelog author="tchvatal@suse.com" date="1354276800">- Use the spec-beautifier to make it more readable.</changelog>
  <changelog author="tchvatal@suse.com" date="1354536000">- Add obsoletes/provides for old libname so depending pkgs work.
  * drop no longer needed lpsolve-5.5.0.11-cflags.patch we use
    autotools now.
  * drop no longer needed lpsolve-pic.diff for the same reason.</changelog>
  <changelog author="tchvatal@suse.com" date="1366459200">- Add url for download.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651200">- Pass over with spec-cleaner in the specs overview.</changelog>
  <changelog author="tchvatal@suse.com" date="1400587200">- Add xz to exact dependencies as it is needed on SLE11.</changelog>
</package>
<package pkgid="52e321925a3d6fd5a3f65daa7133ee928137cbf93defaac7062b55429e6ab81d" name="lpsolve" arch="ppc64le">
  <version epoch="0" ver="5.5.2.0" rel="150000.3.2.1"/>
  <changelog author="jengelh@medozas.de" date="1265889600">- SPARC requires large PIC model</changelog>
  <changelog author="tchvatal@suse.com" date="1353499200">- Try to version bump on 5.5.2.0 based of Gentoo.</changelog>
  <changelog author="tchvatal@suse.com" date="1353499201">- Drop useless requires line.</changelog>
  <changelog author="tchvatal@suse.com" date="1353499202">- Last commit was really bad idea.</changelog>
  <changelog author="tchvatal@suse.com" date="1354190400">- Drop duplication of the license string.</changelog>
  <changelog author="tchvatal@suse.com" date="1354276800">- Use the spec-beautifier to make it more readable.</changelog>
  <changelog author="tchvatal@suse.com" date="1354536000">- Add obsoletes/provides for old libname so depending pkgs work.
  * drop no longer needed lpsolve-5.5.0.11-cflags.patch we use
    autotools now.
  * drop no longer needed lpsolve-pic.diff for the same reason.</changelog>
  <changelog author="tchvatal@suse.com" date="1366459200">- Add url for download.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651200">- Pass over with spec-cleaner in the specs overview.</changelog>
  <changelog author="tchvatal@suse.com" date="1400587200">- Add xz to exact dependencies as it is needed on SLE11.</changelog>
</package>
<package pkgid="b299b46dd3ba6606734de13780871f8ae7507ea348c414da6045402836ae3e2f" name="lpsolve" arch="s390x">
  <version epoch="0" ver="5.5.2.0" rel="150000.3.2.1"/>
  <changelog author="jengelh@medozas.de" date="1265889600">- SPARC requires large PIC model</changelog>
  <changelog author="tchvatal@suse.com" date="1353499200">- Try to version bump on 5.5.2.0 based of Gentoo.</changelog>
  <changelog author="tchvatal@suse.com" date="1353499201">- Drop useless requires line.</changelog>
  <changelog author="tchvatal@suse.com" date="1353499202">- Last commit was really bad idea.</changelog>
  <changelog author="tchvatal@suse.com" date="1354190400">- Drop duplication of the license string.</changelog>
  <changelog author="tchvatal@suse.com" date="1354276800">- Use the spec-beautifier to make it more readable.</changelog>
  <changelog author="tchvatal@suse.com" date="1354536000">- Add obsoletes/provides for old libname so depending pkgs work.
  * drop no longer needed lpsolve-5.5.0.11-cflags.patch we use
    autotools now.
  * drop no longer needed lpsolve-pic.diff for the same reason.</changelog>
  <changelog author="tchvatal@suse.com" date="1366459200">- Add url for download.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651200">- Pass over with spec-cleaner in the specs overview.</changelog>
  <changelog author="tchvatal@suse.com" date="1400587200">- Add xz to exact dependencies as it is needed on SLE11.</changelog>
</package>
<package pkgid="b0054f5a279258fe78c8126929e322b40f4452c12c2bdd5de2c230dc61d929c8" name="lpsolve" arch="src">
  <version epoch="0" ver="5.5.2.0" rel="150000.3.2.1"/>
  <changelog author="pmladek@suse.cz" date="1218628800">- initial version 5.5.0.13
- based on the spec file by Steve Cundy and Caolan McNamara</changelog>
  <changelog author="jengelh@medozas.de" date="1265889600">- SPARC requires large PIC model</changelog>
  <changelog author="tchvatal@suse.com" date="1353499200">- Try to version bump on 5.5.2.0 based of Gentoo.</changelog>
  <changelog author="tchvatal@suse.com" date="1353499201">- Drop useless requires line.</changelog>
  <changelog author="tchvatal@suse.com" date="1353499202">- Last commit was really bad idea.</changelog>
  <changelog author="tchvatal@suse.com" date="1354190400">- Drop duplication of the license string.</changelog>
  <changelog author="tchvatal@suse.com" date="1354276800">- Use the spec-beautifier to make it more readable.</changelog>
  <changelog author="tchvatal@suse.com" date="1354536000">- Add obsoletes/provides for old libname so depending pkgs work.
  * drop no longer needed lpsolve-5.5.0.11-cflags.patch we use
    autotools now.
  * drop no longer needed lpsolve-pic.diff for the same reason.</changelog>
  <changelog author="tchvatal@suse.com" date="1366459200">- Add url for download.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651200">- Pass over with spec-cleaner in the specs overview.</changelog>
  <changelog author="tchvatal@suse.com" date="1400587200">- Add xz to exact dependencies as it is needed on SLE11.</changelog>
</package>
<package pkgid="e8b6c4342263736244a2611f8cd502c91a4c9b94cf7523166a7a56b92772e7b5" name="lpsolve" arch="x86_64">
  <version epoch="0" ver="5.5.2.0" rel="150000.3.2.1"/>
  <changelog author="jengelh@medozas.de" date="1265889600">- SPARC requires large PIC model</changelog>
  <changelog author="tchvatal@suse.com" date="1353499200">- Try to version bump on 5.5.2.0 based of Gentoo.</changelog>
  <changelog author="tchvatal@suse.com" date="1353499201">- Drop useless requires line.</changelog>
  <changelog author="tchvatal@suse.com" date="1353499202">- Last commit was really bad idea.</changelog>
  <changelog author="tchvatal@suse.com" date="1354190400">- Drop duplication of the license string.</changelog>
  <changelog author="tchvatal@suse.com" date="1354276800">- Use the spec-beautifier to make it more readable.</changelog>
  <changelog author="tchvatal@suse.com" date="1354536000">- Add obsoletes/provides for old libname so depending pkgs work.
  * drop no longer needed lpsolve-5.5.0.11-cflags.patch we use
    autotools now.
  * drop no longer needed lpsolve-pic.diff for the same reason.</changelog>
  <changelog author="tchvatal@suse.com" date="1366459200">- Add url for download.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651200">- Pass over with spec-cleaner in the specs overview.</changelog>
  <changelog author="tchvatal@suse.com" date="1400587200">- Add xz to exact dependencies as it is needed on SLE11.</changelog>
</package>
<package pkgid="3f8c117249018465954f7c61d27bc67798bde106c76ab935c138472bd43d7682" name="lpsolve-devel" arch="aarch64">
  <version epoch="0" ver="5.5.2.0" rel="150000.3.2.1"/>
  <changelog author="jengelh@medozas.de" date="1265889600">- SPARC requires large PIC model</changelog>
  <changelog author="tchvatal@suse.com" date="1353499200">- Try to version bump on 5.5.2.0 based of Gentoo.</changelog>
  <changelog author="tchvatal@suse.com" date="1353499201">- Drop useless requires line.</changelog>
  <changelog author="tchvatal@suse.com" date="1353499202">- Last commit was really bad idea.</changelog>
  <changelog author="tchvatal@suse.com" date="1354190400">- Drop duplication of the license string.</changelog>
  <changelog author="tchvatal@suse.com" date="1354276800">- Use the spec-beautifier to make it more readable.</changelog>
  <changelog author="tchvatal@suse.com" date="1354536000">- Add obsoletes/provides for old libname so depending pkgs work.
  * drop no longer needed lpsolve-5.5.0.11-cflags.patch we use
    autotools now.
  * drop no longer needed lpsolve-pic.diff for the same reason.</changelog>
  <changelog author="tchvatal@suse.com" date="1366459200">- Add url for download.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651200">- Pass over with spec-cleaner in the specs overview.</changelog>
  <changelog author="tchvatal@suse.com" date="1400587200">- Add xz to exact dependencies as it is needed on SLE11.</changelog>
</package>
<package pkgid="87de21629b879781665055b9e4e3fa8066daf0b393162d1a4190d504f54eb772" name="lpsolve-devel" arch="ppc64le">
  <version epoch="0" ver="5.5.2.0" rel="150000.3.2.1"/>
  <changelog author="jengelh@medozas.de" date="1265889600">- SPARC requires large PIC model</changelog>
  <changelog author="tchvatal@suse.com" date="1353499200">- Try to version bump on 5.5.2.0 based of Gentoo.</changelog>
  <changelog author="tchvatal@suse.com" date="1353499201">- Drop useless requires line.</changelog>
  <changelog author="tchvatal@suse.com" date="1353499202">- Last commit was really bad idea.</changelog>
  <changelog author="tchvatal@suse.com" date="1354190400">- Drop duplication of the license string.</changelog>
  <changelog author="tchvatal@suse.com" date="1354276800">- Use the spec-beautifier to make it more readable.</changelog>
  <changelog author="tchvatal@suse.com" date="1354536000">- Add obsoletes/provides for old libname so depending pkgs work.
  * drop no longer needed lpsolve-5.5.0.11-cflags.patch we use
    autotools now.
  * drop no longer needed lpsolve-pic.diff for the same reason.</changelog>
  <changelog author="tchvatal@suse.com" date="1366459200">- Add url for download.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651200">- Pass over with spec-cleaner in the specs overview.</changelog>
  <changelog author="tchvatal@suse.com" date="1400587200">- Add xz to exact dependencies as it is needed on SLE11.</changelog>
</package>
<package pkgid="315eec39ab66a88d1c04c119a69314da1d1a158d46694acdcfdfbbfe3e7dac7b" name="lpsolve-devel" arch="s390x">
  <version epoch="0" ver="5.5.2.0" rel="150000.3.2.1"/>
  <changelog author="jengelh@medozas.de" date="1265889600">- SPARC requires large PIC model</changelog>
  <changelog author="tchvatal@suse.com" date="1353499200">- Try to version bump on 5.5.2.0 based of Gentoo.</changelog>
  <changelog author="tchvatal@suse.com" date="1353499201">- Drop useless requires line.</changelog>
  <changelog author="tchvatal@suse.com" date="1353499202">- Last commit was really bad idea.</changelog>
  <changelog author="tchvatal@suse.com" date="1354190400">- Drop duplication of the license string.</changelog>
  <changelog author="tchvatal@suse.com" date="1354276800">- Use the spec-beautifier to make it more readable.</changelog>
  <changelog author="tchvatal@suse.com" date="1354536000">- Add obsoletes/provides for old libname so depending pkgs work.
  * drop no longer needed lpsolve-5.5.0.11-cflags.patch we use
    autotools now.
  * drop no longer needed lpsolve-pic.diff for the same reason.</changelog>
  <changelog author="tchvatal@suse.com" date="1366459200">- Add url for download.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651200">- Pass over with spec-cleaner in the specs overview.</changelog>
  <changelog author="tchvatal@suse.com" date="1400587200">- Add xz to exact dependencies as it is needed on SLE11.</changelog>
</package>
<package pkgid="fe39c984643e791e719eb75217b4167117ec4bc9da73611a024b13bf1a543268" name="lpsolve-devel" arch="x86_64">
  <version epoch="0" ver="5.5.2.0" rel="150000.3.2.1"/>
  <changelog author="jengelh@medozas.de" date="1265889600">- SPARC requires large PIC model</changelog>
  <changelog author="tchvatal@suse.com" date="1353499200">- Try to version bump on 5.5.2.0 based of Gentoo.</changelog>
  <changelog author="tchvatal@suse.com" date="1353499201">- Drop useless requires line.</changelog>
  <changelog author="tchvatal@suse.com" date="1353499202">- Last commit was really bad idea.</changelog>
  <changelog author="tchvatal@suse.com" date="1354190400">- Drop duplication of the license string.</changelog>
  <changelog author="tchvatal@suse.com" date="1354276800">- Use the spec-beautifier to make it more readable.</changelog>
  <changelog author="tchvatal@suse.com" date="1354536000">- Add obsoletes/provides for old libname so depending pkgs work.
  * drop no longer needed lpsolve-5.5.0.11-cflags.patch we use
    autotools now.
  * drop no longer needed lpsolve-pic.diff for the same reason.</changelog>
  <changelog author="tchvatal@suse.com" date="1366459200">- Add url for download.</changelog>
  <changelog author="tchvatal@suse.com" date="1390651200">- Pass over with spec-cleaner in the specs overview.</changelog>
  <changelog author="tchvatal@suse.com" date="1400587200">- Add xz to exact dependencies as it is needed on SLE11.</changelog>
</package>
<package pkgid="673cc9985b3585666c6c3aead78dbcde891e5d66be4afd5fd2a3419bbbee6c7b" name="mariadb" arch="src">
  <version epoch="0" ver="10.5.15" rel="150300.3.15.1"/>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1591012800">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="pgajdos@suse.com" date="1591185600">- rpm macros: $TEST_USER identified by $TEST_PASS is actually user
  of the database for which client conf should be made for
- rpm macros: database name or names can be specified as a
  %mysql_testserver_start and %mysql_testserver_cconf parameter
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1591704000">- Update _constraints to make it more readable and request
  more memory for aarch64 to avoid occasionnal OOM errors on %check</changelog>
  <changelog author="dimstar@opensuse.org" date="1596456000">- Fix installed .service files to follow the /usr/lib -&gt;
  /usr/libexec move (boo#1174811).</changelog>
  <changelog author="kstreitova@suse.com" date="1597233600">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- run spec-cleaner
- build galera for openSUSE only
- update suse_skipped_tests.list
- tune the testsuite to avoid randomly failing tests</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1598961600">- Mariadb uses hrtimers with absolute CLOCK_REALTIME values, this
  won't work correctly if the clock isn't set and will do funny things
  if it goes backward after starting the server as POSIX says that the new
  clock value shall influence them, start the service after time-sync.target
  to workaround the problem.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1598961601">-  Using basic.target dependencies is not needed with any systemd
  release unless DefaultDependencies is disabled, remove from
  unit files</changelog>
  <changelog author="marec@detebe.org" date="1603108800">- update to 10.5.6
  * release notes and changelog
    https://mariadb.com/kb/en/mariadb-1056-release-notes
    https://mariadb.com/kb/en/mariadb-1056-changelog
  * fixes for the following security vulnerabilities:
    10.5.6: CVE-2020-15180
    &lt; 10.5.6: none
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- drop mariadb-10.5-fix-prevent-optimizing-out-buf-argument-in-ch.patch
- mariadb now builds against pcre2
- added binaries aria_s3_copy and mariadb-conv to tools subpackage
- added type_test.type_test_double to list of skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.5.8
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1058-release-notes
    https://mariadb.com/kb/en/library/mariadb-1058-changelog
  * fixes for the following security vulnerabilities:
    10.5.7: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.5.8: none
- tracker bugs: [bsc#1177472] and [bsc#1178428]
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="mrueckert@suse.de" date="1606910400">- switch to bcond_with to make it easier to enable galera support
  via the prjconfig
- fix non galera case for building</changelog>
  <changelog author="mrueckert@suse.de" date="1611144000">- added fix-lock-rollback-assert-abort.patch
  fix an abort when a transaction is rolled back
- track all patches in a series so we can easily set up a quilt
  tree without requiring all the devel packages</changelog>
  <changelog author="mrueckert@suse.de" date="1611144001">- exclude galera files if we build without this feature.
- switch from 664 to 644 for my.cnf configuration file (probably
  a typo)</changelog>
  <changelog author="kstreitova@suse.com" date="1613390400">- update the list of the skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.5.11 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10511-release-notes
    https://mariadb.com/kb/en/library/mariadb-10511-changelog
    https://mariadb.com/kb/en/library/mariadb-10510-release-notes
    https://mariadb.com/kb/en/library/mariadb-10510-changelog
    https://mariadb.com/kb/en/library/mariadb-1059-release-notes
    https://mariadb.com/kb/en/library/mariadb-1059-changelog
  * fixes for the following security vulnerabilities:
    10.5.11: none
    10.5.10: CVE-2021-2145, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.5.9: CVE-2021-27928, bsc#1183770
- remove upstreamed patch fix-lock-rollback-assert-abort.patch
  (MDEV-23851)
- refresh mariadb-10.1.1-mysqld_multi-features.patch
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.5.12 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10512-release-notes
    https://mariadb.com/kb/en/library/mariadb-10512-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632312000">- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.5.13 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10513-release-notes
    https://mariadb.com/kb/en/library/mariadb-10513-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645099200">- Update to 10.5.15 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10515-release-notes
    https://mariadb.com/kb/en/library/mariadb-10515-changelog
    https://mariadb.com/kb/en/library/mariadb-10514-release-notes
    https://mariadb.com/kb/en/library/mariadb-10514-changelog
  * fixes for the following security vulnerabilities:
    10.5.15: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.5.14: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325
- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
</package>
<package pkgid="09365f8c8a61d539d5235ae70c2f7060d1c1ef288f672044d0219b4912a10fd6" name="mariadb-galera" arch="aarch64">
  <version epoch="0" ver="10.5.15" rel="150300.3.15.1"/>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1591012800">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="pgajdos@suse.com" date="1591185600">- rpm macros: $TEST_USER identified by $TEST_PASS is actually user
  of the database for which client conf should be made for
- rpm macros: database name or names can be specified as a
  %mysql_testserver_start and %mysql_testserver_cconf parameter
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1591704000">- Update _constraints to make it more readable and request
  more memory for aarch64 to avoid occasionnal OOM errors on %check</changelog>
  <changelog author="dimstar@opensuse.org" date="1596456000">- Fix installed .service files to follow the /usr/lib -&gt;
  /usr/libexec move (boo#1174811).</changelog>
  <changelog author="kstreitova@suse.com" date="1597233600">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- run spec-cleaner
- build galera for openSUSE only
- update suse_skipped_tests.list
- tune the testsuite to avoid randomly failing tests</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1598961600">- Mariadb uses hrtimers with absolute CLOCK_REALTIME values, this
  won't work correctly if the clock isn't set and will do funny things
  if it goes backward after starting the server as POSIX says that the new
  clock value shall influence them, start the service after time-sync.target
  to workaround the problem.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1598961601">-  Using basic.target dependencies is not needed with any systemd
  release unless DefaultDependencies is disabled, remove from
  unit files</changelog>
  <changelog author="marec@detebe.org" date="1603108800">- update to 10.5.6
  * release notes and changelog
    https://mariadb.com/kb/en/mariadb-1056-release-notes
    https://mariadb.com/kb/en/mariadb-1056-changelog
  * fixes for the following security vulnerabilities:
    10.5.6: CVE-2020-15180
    &lt; 10.5.6: none
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- drop mariadb-10.5-fix-prevent-optimizing-out-buf-argument-in-ch.patch
- mariadb now builds against pcre2
- added binaries aria_s3_copy and mariadb-conv to tools subpackage
- added type_test.type_test_double to list of skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.5.8
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1058-release-notes
    https://mariadb.com/kb/en/library/mariadb-1058-changelog
  * fixes for the following security vulnerabilities:
    10.5.7: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.5.8: none
- tracker bugs: [bsc#1177472] and [bsc#1178428]
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="mrueckert@suse.de" date="1606910400">- switch to bcond_with to make it easier to enable galera support
  via the prjconfig
- fix non galera case for building</changelog>
  <changelog author="mrueckert@suse.de" date="1611144000">- added fix-lock-rollback-assert-abort.patch
  fix an abort when a transaction is rolled back
- track all patches in a series so we can easily set up a quilt
  tree without requiring all the devel packages</changelog>
  <changelog author="mrueckert@suse.de" date="1611144001">- exclude galera files if we build without this feature.
- switch from 664 to 644 for my.cnf configuration file (probably
  a typo)</changelog>
  <changelog author="kstreitova@suse.com" date="1613390400">- update the list of the skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.5.11 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10511-release-notes
    https://mariadb.com/kb/en/library/mariadb-10511-changelog
    https://mariadb.com/kb/en/library/mariadb-10510-release-notes
    https://mariadb.com/kb/en/library/mariadb-10510-changelog
    https://mariadb.com/kb/en/library/mariadb-1059-release-notes
    https://mariadb.com/kb/en/library/mariadb-1059-changelog
  * fixes for the following security vulnerabilities:
    10.5.11: none
    10.5.10: CVE-2021-2145, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.5.9: CVE-2021-27928, bsc#1183770
- remove upstreamed patch fix-lock-rollback-assert-abort.patch
  (MDEV-23851)
- refresh mariadb-10.1.1-mysqld_multi-features.patch
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.5.12 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10512-release-notes
    https://mariadb.com/kb/en/library/mariadb-10512-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632312000">- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.5.13 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10513-release-notes
    https://mariadb.com/kb/en/library/mariadb-10513-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645099200">- Update to 10.5.15 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10515-release-notes
    https://mariadb.com/kb/en/library/mariadb-10515-changelog
    https://mariadb.com/kb/en/library/mariadb-10514-release-notes
    https://mariadb.com/kb/en/library/mariadb-10514-changelog
  * fixes for the following security vulnerabilities:
    10.5.15: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.5.14: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325
- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
</package>
<package pkgid="7fb7dd60fbf55860e6db454f0417f0aef871f96ecc5b1cbfff39c7d771c43237" name="mariadb-galera" arch="ppc64le">
  <version epoch="0" ver="10.5.15" rel="150300.3.15.1"/>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1591012800">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="pgajdos@suse.com" date="1591185600">- rpm macros: $TEST_USER identified by $TEST_PASS is actually user
  of the database for which client conf should be made for
- rpm macros: database name or names can be specified as a
  %mysql_testserver_start and %mysql_testserver_cconf parameter
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1591704000">- Update _constraints to make it more readable and request
  more memory for aarch64 to avoid occasionnal OOM errors on %check</changelog>
  <changelog author="dimstar@opensuse.org" date="1596456000">- Fix installed .service files to follow the /usr/lib -&gt;
  /usr/libexec move (boo#1174811).</changelog>
  <changelog author="kstreitova@suse.com" date="1597233600">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- run spec-cleaner
- build galera for openSUSE only
- update suse_skipped_tests.list
- tune the testsuite to avoid randomly failing tests</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1598961600">- Mariadb uses hrtimers with absolute CLOCK_REALTIME values, this
  won't work correctly if the clock isn't set and will do funny things
  if it goes backward after starting the server as POSIX says that the new
  clock value shall influence them, start the service after time-sync.target
  to workaround the problem.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1598961601">-  Using basic.target dependencies is not needed with any systemd
  release unless DefaultDependencies is disabled, remove from
  unit files</changelog>
  <changelog author="marec@detebe.org" date="1603108800">- update to 10.5.6
  * release notes and changelog
    https://mariadb.com/kb/en/mariadb-1056-release-notes
    https://mariadb.com/kb/en/mariadb-1056-changelog
  * fixes for the following security vulnerabilities:
    10.5.6: CVE-2020-15180
    &lt; 10.5.6: none
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- drop mariadb-10.5-fix-prevent-optimizing-out-buf-argument-in-ch.patch
- mariadb now builds against pcre2
- added binaries aria_s3_copy and mariadb-conv to tools subpackage
- added type_test.type_test_double to list of skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.5.8
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1058-release-notes
    https://mariadb.com/kb/en/library/mariadb-1058-changelog
  * fixes for the following security vulnerabilities:
    10.5.7: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.5.8: none
- tracker bugs: [bsc#1177472] and [bsc#1178428]
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="mrueckert@suse.de" date="1606910400">- switch to bcond_with to make it easier to enable galera support
  via the prjconfig
- fix non galera case for building</changelog>
  <changelog author="mrueckert@suse.de" date="1611144000">- added fix-lock-rollback-assert-abort.patch
  fix an abort when a transaction is rolled back
- track all patches in a series so we can easily set up a quilt
  tree without requiring all the devel packages</changelog>
  <changelog author="mrueckert@suse.de" date="1611144001">- exclude galera files if we build without this feature.
- switch from 664 to 644 for my.cnf configuration file (probably
  a typo)</changelog>
  <changelog author="kstreitova@suse.com" date="1613390400">- update the list of the skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.5.11 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10511-release-notes
    https://mariadb.com/kb/en/library/mariadb-10511-changelog
    https://mariadb.com/kb/en/library/mariadb-10510-release-notes
    https://mariadb.com/kb/en/library/mariadb-10510-changelog
    https://mariadb.com/kb/en/library/mariadb-1059-release-notes
    https://mariadb.com/kb/en/library/mariadb-1059-changelog
  * fixes for the following security vulnerabilities:
    10.5.11: none
    10.5.10: CVE-2021-2145, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.5.9: CVE-2021-27928, bsc#1183770
- remove upstreamed patch fix-lock-rollback-assert-abort.patch
  (MDEV-23851)
- refresh mariadb-10.1.1-mysqld_multi-features.patch
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.5.12 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10512-release-notes
    https://mariadb.com/kb/en/library/mariadb-10512-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632312000">- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.5.13 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10513-release-notes
    https://mariadb.com/kb/en/library/mariadb-10513-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645099200">- Update to 10.5.15 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10515-release-notes
    https://mariadb.com/kb/en/library/mariadb-10515-changelog
    https://mariadb.com/kb/en/library/mariadb-10514-release-notes
    https://mariadb.com/kb/en/library/mariadb-10514-changelog
  * fixes for the following security vulnerabilities:
    10.5.15: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.5.14: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325
- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
</package>
<package pkgid="dbec107c20f98c78c125fd28ed8f2ba8fcdb2e42ae8fce51dc34b456f95e8b88" name="mariadb-galera" arch="s390x">
  <version epoch="0" ver="10.5.15" rel="150300.3.15.1"/>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1591012800">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="pgajdos@suse.com" date="1591185600">- rpm macros: $TEST_USER identified by $TEST_PASS is actually user
  of the database for which client conf should be made for
- rpm macros: database name or names can be specified as a
  %mysql_testserver_start and %mysql_testserver_cconf parameter
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1591704000">- Update _constraints to make it more readable and request
  more memory for aarch64 to avoid occasionnal OOM errors on %check</changelog>
  <changelog author="dimstar@opensuse.org" date="1596456000">- Fix installed .service files to follow the /usr/lib -&gt;
  /usr/libexec move (boo#1174811).</changelog>
  <changelog author="kstreitova@suse.com" date="1597233600">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- run spec-cleaner
- build galera for openSUSE only
- update suse_skipped_tests.list
- tune the testsuite to avoid randomly failing tests</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1598961600">- Mariadb uses hrtimers with absolute CLOCK_REALTIME values, this
  won't work correctly if the clock isn't set and will do funny things
  if it goes backward after starting the server as POSIX says that the new
  clock value shall influence them, start the service after time-sync.target
  to workaround the problem.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1598961601">-  Using basic.target dependencies is not needed with any systemd
  release unless DefaultDependencies is disabled, remove from
  unit files</changelog>
  <changelog author="marec@detebe.org" date="1603108800">- update to 10.5.6
  * release notes and changelog
    https://mariadb.com/kb/en/mariadb-1056-release-notes
    https://mariadb.com/kb/en/mariadb-1056-changelog
  * fixes for the following security vulnerabilities:
    10.5.6: CVE-2020-15180
    &lt; 10.5.6: none
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- drop mariadb-10.5-fix-prevent-optimizing-out-buf-argument-in-ch.patch
- mariadb now builds against pcre2
- added binaries aria_s3_copy and mariadb-conv to tools subpackage
- added type_test.type_test_double to list of skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.5.8
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1058-release-notes
    https://mariadb.com/kb/en/library/mariadb-1058-changelog
  * fixes for the following security vulnerabilities:
    10.5.7: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.5.8: none
- tracker bugs: [bsc#1177472] and [bsc#1178428]
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="mrueckert@suse.de" date="1606910400">- switch to bcond_with to make it easier to enable galera support
  via the prjconfig
- fix non galera case for building</changelog>
  <changelog author="mrueckert@suse.de" date="1611144000">- added fix-lock-rollback-assert-abort.patch
  fix an abort when a transaction is rolled back
- track all patches in a series so we can easily set up a quilt
  tree without requiring all the devel packages</changelog>
  <changelog author="mrueckert@suse.de" date="1611144001">- exclude galera files if we build without this feature.
- switch from 664 to 644 for my.cnf configuration file (probably
  a typo)</changelog>
  <changelog author="kstreitova@suse.com" date="1613390400">- update the list of the skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.5.11 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10511-release-notes
    https://mariadb.com/kb/en/library/mariadb-10511-changelog
    https://mariadb.com/kb/en/library/mariadb-10510-release-notes
    https://mariadb.com/kb/en/library/mariadb-10510-changelog
    https://mariadb.com/kb/en/library/mariadb-1059-release-notes
    https://mariadb.com/kb/en/library/mariadb-1059-changelog
  * fixes for the following security vulnerabilities:
    10.5.11: none
    10.5.10: CVE-2021-2145, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.5.9: CVE-2021-27928, bsc#1183770
- remove upstreamed patch fix-lock-rollback-assert-abort.patch
  (MDEV-23851)
- refresh mariadb-10.1.1-mysqld_multi-features.patch
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.5.12 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10512-release-notes
    https://mariadb.com/kb/en/library/mariadb-10512-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632312000">- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.5.13 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10513-release-notes
    https://mariadb.com/kb/en/library/mariadb-10513-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645099200">- Update to 10.5.15 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10515-release-notes
    https://mariadb.com/kb/en/library/mariadb-10515-changelog
    https://mariadb.com/kb/en/library/mariadb-10514-release-notes
    https://mariadb.com/kb/en/library/mariadb-10514-changelog
  * fixes for the following security vulnerabilities:
    10.5.15: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.5.14: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325
- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
</package>
<package pkgid="ff5a92f40f6c7f22aab9a910eedac4b481b46e4f1cf23279d532df4952e47bb2" name="mariadb-galera" arch="x86_64">
  <version epoch="0" ver="10.5.15" rel="150300.3.15.1"/>
  <changelog author="kstreitova@suse.com" date="1587988800">- move mariadb-client-test from client subpackage to test subpackage
  so the symlink from mariadb-client-test -&gt; mysql_client_test works
  [bsc#1170204]</changelog>
  <changelog author="kstreitova@suse.com" date="1590148800">- Update to 10.4.13
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10413-release-notes
    https://mariadb.com/kb/en/library/mariadb-10413-changelog
  * fixes for the following security vulnerabilities:
    CVE-2020-2752, CVE-2020-2812, CVE-2020-2814, CVE-2020-2760,
    CVE-2020-13249
- fixes [bsc#1168380] (the same as [bsc#1166781])
  MDEV-21244 mysql_upgrade creating empty global_priv table support
  upgrades from 5.2 privilege tables
- drop specfile "hacks" as things work correctly in upstream now:
  * renaming tmpfiles.conf -&gt; mariadb.conf
  * installing pam_user_map.so to /lib64/security for non 32bit
    architectures
  * sysusers.conf was renamed to mariadb.conf
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1591012800">- Build with oqgraph by default for all codestreams [jsc#SLE-12253]</changelog>
  <changelog author="pgajdos@suse.com" date="1591185600">- rpm macros: $TEST_USER identified by $TEST_PASS is actually user
  of the database for which client conf should be made for
- rpm macros: database name or names can be specified as a
  %mysql_testserver_start and %mysql_testserver_cconf parameter
- modified sources
  % macros.mariadb-test</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1591704000">- Update _constraints to make it more readable and request
  more memory for aarch64 to avoid occasionnal OOM errors on %check</changelog>
  <changelog author="dimstar@opensuse.org" date="1596456000">- Fix installed .service files to follow the /usr/lib -&gt;
  /usr/libexec move (boo#1174811).</changelog>
  <changelog author="kstreitova@suse.com" date="1597233600">- Update to 10.4.14 [bsc#1175596]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10414-release-notes
    https://mariadb.com/kb/en/library/mariadb-10414-changelog
  * fixes for the following security vulnerabilities: none
  * the update fixes [bsc#1174559] and [bsc#1173516] (MariaDB crashes
    at db_sync from Keystone)
- refresh mariadb-10.2.4-fortify-and-O.patch
- fix patch sequence
- run spec-cleaner
- build galera for openSUSE only
- update suse_skipped_tests.list
- tune the testsuite to avoid randomly failing tests</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1598961600">- Mariadb uses hrtimers with absolute CLOCK_REALTIME values, this
  won't work correctly if the clock isn't set and will do funny things
  if it goes backward after starting the server as POSIX says that the new
  clock value shall influence them, start the service after time-sync.target
  to workaround the problem.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1598961601">-  Using basic.target dependencies is not needed with any systemd
  release unless DefaultDependencies is disabled, remove from
  unit files</changelog>
  <changelog author="marec@detebe.org" date="1603108800">- update to 10.5.6
  * release notes and changelog
    https://mariadb.com/kb/en/mariadb-1056-release-notes
    https://mariadb.com/kb/en/mariadb-1056-changelog
  * fixes for the following security vulnerabilities:
    10.5.6: CVE-2020-15180
    &lt; 10.5.6: none
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- drop mariadb-10.5-fix-prevent-optimizing-out-buf-argument-in-ch.patch
- mariadb now builds against pcre2
- added binaries aria_s3_copy and mariadb-conv to tools subpackage
- added type_test.type_test_double to list of skipped tests</changelog>
  <changelog author="kstreitova@suse.com" date="1605182400">- Update to 10.5.8
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1058-release-notes
    https://mariadb.com/kb/en/library/mariadb-1058-changelog
  * fixes for the following security vulnerabilities:
    10.5.7: CVE-2020-14812, CVE-2020-14765, CVE-2020-14776,
    CVE-2020-14789
    10.5.8: none
- tracker bugs: [bsc#1177472] and [bsc#1178428]
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch
- update suse_skipped_tests.list</changelog>
  <changelog author="mrueckert@suse.de" date="1606910400">- switch to bcond_with to make it easier to enable galera support
  via the prjconfig
- fix non galera case for building</changelog>
  <changelog author="mrueckert@suse.de" date="1611144000">- added fix-lock-rollback-assert-abort.patch
  fix an abort when a transaction is rolled back
- track all patches in a series so we can easily set up a quilt
  tree without requiring all the devel packages</changelog>
  <changelog author="mrueckert@suse.de" date="1611144001">- exclude galera files if we build without this feature.
- switch from 664 to 644 for my.cnf configuration file (probably
  a typo)</changelog>
  <changelog author="kstreitova@suse.com" date="1613390400">- update the list of the skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1626868800">- Update to 10.5.11 [bsc#1182739]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10511-release-notes
    https://mariadb.com/kb/en/library/mariadb-10511-changelog
    https://mariadb.com/kb/en/library/mariadb-10510-release-notes
    https://mariadb.com/kb/en/library/mariadb-10510-changelog
    https://mariadb.com/kb/en/library/mariadb-1059-release-notes
    https://mariadb.com/kb/en/library/mariadb-1059-changelog
  * fixes for the following security vulnerabilities:
    10.5.11: none
    10.5.10: CVE-2021-2145, bsc#1185872
    CVE-2021-2166, bsc#1185870
    10.5.9: CVE-2021-27928, bsc#1183770
- remove upstreamed patch fix-lock-rollback-assert-abort.patch
  (MDEV-23851)
- refresh mariadb-10.1.1-mysqld_multi-features.patch
- refresh mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628769600">- Update to 10.5.12 [bsc#1189320]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10512-release-notes
    https://mariadb.com/kb/en/library/mariadb-10512-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-2372
    CVE-2021-2389</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632312000">- Remove ownership of %{_rpmconfigdir}/macros.d. Fixes bsc#1182218</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.5.13 [bsc#1192497]
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10513-release-notes
    https://mariadb.com/kb/en/library/mariadb-10513-changelog
  * fixes for the following security vulnerabilities:
    CVE-2021-35604
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645099200">- Update to 10.5.15 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10515-release-notes
    https://mariadb.com/kb/en/library/mariadb-10515-changelog
    https://mariadb.com/kb/en/library/mariadb-10514-release-notes
    https://mariadb.com/kb/en/library/mariadb-10514-changelog
  * fixes for the following security vulnerabilities:
    10.5.15: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.5.14: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate.su.patch
  * mariadb-10.1.1-mysqld_multi_features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- Update list of skipped tests
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325
- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
</package>
<package pkgid="79afefe146bd548af87d036a8df4fdabb0081e813616702c4792d003264441cd" name="mdadm" arch="aarch64">
  <version epoch="0" ver="4.1" rel="150300.24.12.1"/>
  <changelog author="colyli@suse.com" date="1549972800">- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0009-Detail.c-do-not-skip-first-character-when-calling-xs.patch</changelog>
  <changelog author="colyli@suse.com" date="1553774400">- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0010-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0011-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch</changelog>
  <changelog author="colyli@suse.com" date="1566820800">- 0012-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
  (bsc#1139709)
  mdadm: add --no-devices to avoid component devices detail
  information
- 0013-udev-add-no-devices-option-for-calling-mdadm-detail.patch
  (bsc#1139709)
  udev: add --no-devices option for calling 'mdadm --detail'</changelog>
  <changelog author="nfbrown@suse.com" date="1572436800">- New patch: 0022-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
  New patch: 0023-mdcheck-use-to-pass-variable-to-mdcheck.patch
  New patch: 0024-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
  Improve systemd units for mdcheck (bsc#1153258)</changelog>
  <changelog author="colyli@suse.com" date="1581076800">- Create: add support for RAID0 layouts. (bsc#1162479)
  0024-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0025-Assemble-add-support-for-RAID0-layouts.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  1002-mdadm.8-add-note-information-for-raid0-growing-opera.patch</changelog>
  <changelog author="colyli@suse.com" date="1581076801">- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0026-Enable-probe_roms-to-scan-more-than-6-roms.patch</changelog>
  <changelog author="colyli@suse.com" date="1583236800">- Rename the following patches, they will be listed with new
  re-ordered prefix number in following commit,
    0001-Document-PART-POLICY-lines.patch
    0001-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
    0002-policy-support-devices-with-multiple-paths.patch
    0003-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
    0004-Monitor-add-system-timer-to-run-oneshot-periodically.patch
    0005-imsm-update-metadata-correctly-while-raid10-double-d.patch
    0006-Grow-avoid-overflow-in-compute_backup_blocks.patch
    0007-Grow-report-correct-new-chunk-size.patch
    0008-policy.c-prevent-NULL-pointer-referencing.patch
    0009-Detail.c-do-not-skip-first-character-when-calling-xs.patch
    0010-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
    0011-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
    0012-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
    0013-udev-add-no-devices-option-for-calling-mdadm-detail.patch
    0021-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
    0022-mdcheck-use-to-pass-variable-to-mdcheck.patch
    0023-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
    0024-Create-add-support-for-RAID0-layouts.patch
    0025-Assemble-add-support-for-RAID0-layouts.patch
    0026-Enable-probe_roms-to-scan-more-than-6-roms.patch
    1002-mdadm.8-add-note-information-for-raid0-growing-opera.patch</changelog>
  <changelog author="colyli@suse.com" date="1583236801">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
  <changelog author="colyli@suse.com" date="1630584000">- Remove Spare drives line from details for external metadata
  (bsc#1180661, bsc#1182642)
  0118-Remove-Spare-drives-line-from-details-for-external-m.patch
- Don't associate spares with other arrays during RAID Examine
  (bsc#1180661, bsc#1182642)
  0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch</changelog>
  <changelog author="colyli@suse.com" date="1645012800">- Monitor: print message before quit for no array to monitor
  (bsc#1183229)
  0120-Monitor-print-message-before-quit-for-no-array-to-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1647604800">- skip RAID assembly if DM_UDEV_DISABLE_OTHER_RULES_FLAG (bsc#1196054)
  * Add 0121-udev-md-raid-assembly.rules-skip-if-DM_UDEV_DISABLE_.patch</changelog>
</package>
<package pkgid="05cc8bc8748d03ac373e60b6bd17a93191601b298209ef1709d395d4db1a1294" name="mdadm" arch="ppc64le">
  <version epoch="0" ver="4.1" rel="150300.24.12.1"/>
  <changelog author="colyli@suse.com" date="1549972800">- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0009-Detail.c-do-not-skip-first-character-when-calling-xs.patch</changelog>
  <changelog author="colyli@suse.com" date="1553774400">- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0010-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0011-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch</changelog>
  <changelog author="colyli@suse.com" date="1566820800">- 0012-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
  (bsc#1139709)
  mdadm: add --no-devices to avoid component devices detail
  information
- 0013-udev-add-no-devices-option-for-calling-mdadm-detail.patch
  (bsc#1139709)
  udev: add --no-devices option for calling 'mdadm --detail'</changelog>
  <changelog author="nfbrown@suse.com" date="1572436800">- New patch: 0022-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
  New patch: 0023-mdcheck-use-to-pass-variable-to-mdcheck.patch
  New patch: 0024-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
  Improve systemd units for mdcheck (bsc#1153258)</changelog>
  <changelog author="colyli@suse.com" date="1581076800">- Create: add support for RAID0 layouts. (bsc#1162479)
  0024-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0025-Assemble-add-support-for-RAID0-layouts.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  1002-mdadm.8-add-note-information-for-raid0-growing-opera.patch</changelog>
  <changelog author="colyli@suse.com" date="1581076801">- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0026-Enable-probe_roms-to-scan-more-than-6-roms.patch</changelog>
  <changelog author="colyli@suse.com" date="1583236800">- Rename the following patches, they will be listed with new
  re-ordered prefix number in following commit,
    0001-Document-PART-POLICY-lines.patch
    0001-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
    0002-policy-support-devices-with-multiple-paths.patch
    0003-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
    0004-Monitor-add-system-timer-to-run-oneshot-periodically.patch
    0005-imsm-update-metadata-correctly-while-raid10-double-d.patch
    0006-Grow-avoid-overflow-in-compute_backup_blocks.patch
    0007-Grow-report-correct-new-chunk-size.patch
    0008-policy.c-prevent-NULL-pointer-referencing.patch
    0009-Detail.c-do-not-skip-first-character-when-calling-xs.patch
    0010-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
    0011-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
    0012-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
    0013-udev-add-no-devices-option-for-calling-mdadm-detail.patch
    0021-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
    0022-mdcheck-use-to-pass-variable-to-mdcheck.patch
    0023-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
    0024-Create-add-support-for-RAID0-layouts.patch
    0025-Assemble-add-support-for-RAID0-layouts.patch
    0026-Enable-probe_roms-to-scan-more-than-6-roms.patch
    1002-mdadm.8-add-note-information-for-raid0-growing-opera.patch</changelog>
  <changelog author="colyli@suse.com" date="1583236801">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
  <changelog author="colyli@suse.com" date="1630584000">- Remove Spare drives line from details for external metadata
  (bsc#1180661, bsc#1182642)
  0118-Remove-Spare-drives-line-from-details-for-external-m.patch
- Don't associate spares with other arrays during RAID Examine
  (bsc#1180661, bsc#1182642)
  0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch</changelog>
  <changelog author="colyli@suse.com" date="1645012800">- Monitor: print message before quit for no array to monitor
  (bsc#1183229)
  0120-Monitor-print-message-before-quit-for-no-array-to-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1647604800">- skip RAID assembly if DM_UDEV_DISABLE_OTHER_RULES_FLAG (bsc#1196054)
  * Add 0121-udev-md-raid-assembly.rules-skip-if-DM_UDEV_DISABLE_.patch</changelog>
</package>
<package pkgid="4dbda072b6c7d47b39c96da9d3ac8f5ccbf0f5e62f5879397efa5f2d785e6770" name="mdadm" arch="s390x">
  <version epoch="0" ver="4.1" rel="150300.24.12.1"/>
  <changelog author="colyli@suse.com" date="1549972800">- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0009-Detail.c-do-not-skip-first-character-when-calling-xs.patch</changelog>
  <changelog author="colyli@suse.com" date="1553774400">- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0010-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0011-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch</changelog>
  <changelog author="colyli@suse.com" date="1566820800">- 0012-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
  (bsc#1139709)
  mdadm: add --no-devices to avoid component devices detail
  information
- 0013-udev-add-no-devices-option-for-calling-mdadm-detail.patch
  (bsc#1139709)
  udev: add --no-devices option for calling 'mdadm --detail'</changelog>
  <changelog author="nfbrown@suse.com" date="1572436800">- New patch: 0022-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
  New patch: 0023-mdcheck-use-to-pass-variable-to-mdcheck.patch
  New patch: 0024-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
  Improve systemd units for mdcheck (bsc#1153258)</changelog>
  <changelog author="colyli@suse.com" date="1581076800">- Create: add support for RAID0 layouts. (bsc#1162479)
  0024-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0025-Assemble-add-support-for-RAID0-layouts.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  1002-mdadm.8-add-note-information-for-raid0-growing-opera.patch</changelog>
  <changelog author="colyli@suse.com" date="1581076801">- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0026-Enable-probe_roms-to-scan-more-than-6-roms.patch</changelog>
  <changelog author="colyli@suse.com" date="1583236800">- Rename the following patches, they will be listed with new
  re-ordered prefix number in following commit,
    0001-Document-PART-POLICY-lines.patch
    0001-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
    0002-policy-support-devices-with-multiple-paths.patch
    0003-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
    0004-Monitor-add-system-timer-to-run-oneshot-periodically.patch
    0005-imsm-update-metadata-correctly-while-raid10-double-d.patch
    0006-Grow-avoid-overflow-in-compute_backup_blocks.patch
    0007-Grow-report-correct-new-chunk-size.patch
    0008-policy.c-prevent-NULL-pointer-referencing.patch
    0009-Detail.c-do-not-skip-first-character-when-calling-xs.patch
    0010-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
    0011-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
    0012-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
    0013-udev-add-no-devices-option-for-calling-mdadm-detail.patch
    0021-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
    0022-mdcheck-use-to-pass-variable-to-mdcheck.patch
    0023-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
    0024-Create-add-support-for-RAID0-layouts.patch
    0025-Assemble-add-support-for-RAID0-layouts.patch
    0026-Enable-probe_roms-to-scan-more-than-6-roms.patch
    1002-mdadm.8-add-note-information-for-raid0-growing-opera.patch</changelog>
  <changelog author="colyli@suse.com" date="1583236801">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
  <changelog author="colyli@suse.com" date="1630584000">- Remove Spare drives line from details for external metadata
  (bsc#1180661, bsc#1182642)
  0118-Remove-Spare-drives-line-from-details-for-external-m.patch
- Don't associate spares with other arrays during RAID Examine
  (bsc#1180661, bsc#1182642)
  0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch</changelog>
  <changelog author="colyli@suse.com" date="1645012800">- Monitor: print message before quit for no array to monitor
  (bsc#1183229)
  0120-Monitor-print-message-before-quit-for-no-array-to-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1647604800">- skip RAID assembly if DM_UDEV_DISABLE_OTHER_RULES_FLAG (bsc#1196054)
  * Add 0121-udev-md-raid-assembly.rules-skip-if-DM_UDEV_DISABLE_.patch</changelog>
</package>
<package pkgid="bb53e10813f61b0d9785fab2183d38f668b3f88a5de8717a676c569cc402edfb" name="mdadm" arch="src">
  <version epoch="0" ver="4.1" rel="150300.24.12.1"/>
  <changelog author="colyli@suse.com" date="1549972800">- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0009-Detail.c-do-not-skip-first-character-when-calling-xs.patch</changelog>
  <changelog author="colyli@suse.com" date="1553774400">- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0010-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0011-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch</changelog>
  <changelog author="colyli@suse.com" date="1566820800">- 0012-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
  (bsc#1139709)
  mdadm: add --no-devices to avoid component devices detail
  information
- 0013-udev-add-no-devices-option-for-calling-mdadm-detail.patch
  (bsc#1139709)
  udev: add --no-devices option for calling 'mdadm --detail'</changelog>
  <changelog author="nfbrown@suse.com" date="1572436800">- New patch: 0022-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
  New patch: 0023-mdcheck-use-to-pass-variable-to-mdcheck.patch
  New patch: 0024-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
  Improve systemd units for mdcheck (bsc#1153258)</changelog>
  <changelog author="colyli@suse.com" date="1581076800">- Create: add support for RAID0 layouts. (bsc#1162479)
  0024-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0025-Assemble-add-support-for-RAID0-layouts.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  1002-mdadm.8-add-note-information-for-raid0-growing-opera.patch</changelog>
  <changelog author="colyli@suse.com" date="1581076801">- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0026-Enable-probe_roms-to-scan-more-than-6-roms.patch</changelog>
  <changelog author="colyli@suse.com" date="1583236800">- Rename the following patches, they will be listed with new
  re-ordered prefix number in following commit,
    0001-Document-PART-POLICY-lines.patch
    0001-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
    0002-policy-support-devices-with-multiple-paths.patch
    0003-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
    0004-Monitor-add-system-timer-to-run-oneshot-periodically.patch
    0005-imsm-update-metadata-correctly-while-raid10-double-d.patch
    0006-Grow-avoid-overflow-in-compute_backup_blocks.patch
    0007-Grow-report-correct-new-chunk-size.patch
    0008-policy.c-prevent-NULL-pointer-referencing.patch
    0009-Detail.c-do-not-skip-first-character-when-calling-xs.patch
    0010-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
    0011-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
    0012-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
    0013-udev-add-no-devices-option-for-calling-mdadm-detail.patch
    0021-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
    0022-mdcheck-use-to-pass-variable-to-mdcheck.patch
    0023-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
    0024-Create-add-support-for-RAID0-layouts.patch
    0025-Assemble-add-support-for-RAID0-layouts.patch
    0026-Enable-probe_roms-to-scan-more-than-6-roms.patch
    1002-mdadm.8-add-note-information-for-raid0-growing-opera.patch</changelog>
  <changelog author="colyli@suse.com" date="1583236801">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
  <changelog author="colyli@suse.com" date="1630584000">- Remove Spare drives line from details for external metadata
  (bsc#1180661, bsc#1182642)
  0118-Remove-Spare-drives-line-from-details-for-external-m.patch
- Don't associate spares with other arrays during RAID Examine
  (bsc#1180661, bsc#1182642)
  0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch</changelog>
  <changelog author="colyli@suse.com" date="1645012800">- Monitor: print message before quit for no array to monitor
  (bsc#1183229)
  0120-Monitor-print-message-before-quit-for-no-array-to-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1647604800">- skip RAID assembly if DM_UDEV_DISABLE_OTHER_RULES_FLAG (bsc#1196054)
  * Add 0121-udev-md-raid-assembly.rules-skip-if-DM_UDEV_DISABLE_.patch</changelog>
</package>
<package pkgid="ecc00dca0af0790110319fb8dedb8e2b4f9c3ce853d821534072119ee8076821" name="mdadm" arch="x86_64">
  <version epoch="0" ver="4.1" rel="150300.24.12.1"/>
  <changelog author="colyli@suse.com" date="1549972800">- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0009-Detail.c-do-not-skip-first-character-when-calling-xs.patch</changelog>
  <changelog author="colyli@suse.com" date="1553774400">- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0010-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0011-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch</changelog>
  <changelog author="colyli@suse.com" date="1566820800">- 0012-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
  (bsc#1139709)
  mdadm: add --no-devices to avoid component devices detail
  information
- 0013-udev-add-no-devices-option-for-calling-mdadm-detail.patch
  (bsc#1139709)
  udev: add --no-devices option for calling 'mdadm --detail'</changelog>
  <changelog author="nfbrown@suse.com" date="1572436800">- New patch: 0022-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
  New patch: 0023-mdcheck-use-to-pass-variable-to-mdcheck.patch
  New patch: 0024-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
  Improve systemd units for mdcheck (bsc#1153258)</changelog>
  <changelog author="colyli@suse.com" date="1581076800">- Create: add support for RAID0 layouts. (bsc#1162479)
  0024-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0025-Assemble-add-support-for-RAID0-layouts.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  1002-mdadm.8-add-note-information-for-raid0-growing-opera.patch</changelog>
  <changelog author="colyli@suse.com" date="1581076801">- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0026-Enable-probe_roms-to-scan-more-than-6-roms.patch</changelog>
  <changelog author="colyli@suse.com" date="1583236800">- Rename the following patches, they will be listed with new
  re-ordered prefix number in following commit,
    0001-Document-PART-POLICY-lines.patch
    0001-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
    0002-policy-support-devices-with-multiple-paths.patch
    0003-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
    0004-Monitor-add-system-timer-to-run-oneshot-periodically.patch
    0005-imsm-update-metadata-correctly-while-raid10-double-d.patch
    0006-Grow-avoid-overflow-in-compute_backup_blocks.patch
    0007-Grow-report-correct-new-chunk-size.patch
    0008-policy.c-prevent-NULL-pointer-referencing.patch
    0009-Detail.c-do-not-skip-first-character-when-calling-xs.patch
    0010-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
    0011-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
    0012-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
    0013-udev-add-no-devices-option-for-calling-mdadm-detail.patch
    0021-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
    0022-mdcheck-use-to-pass-variable-to-mdcheck.patch
    0023-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
    0024-Create-add-support-for-RAID0-layouts.patch
    0025-Assemble-add-support-for-RAID0-layouts.patch
    0026-Enable-probe_roms-to-scan-more-than-6-roms.patch
    1002-mdadm.8-add-note-information-for-raid0-growing-opera.patch</changelog>
  <changelog author="colyli@suse.com" date="1583236801">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
  <changelog author="colyli@suse.com" date="1630584000">- Remove Spare drives line from details for external metadata
  (bsc#1180661, bsc#1182642)
  0118-Remove-Spare-drives-line-from-details-for-external-m.patch
- Don't associate spares with other arrays during RAID Examine
  (bsc#1180661, bsc#1182642)
  0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch</changelog>
  <changelog author="colyli@suse.com" date="1645012800">- Monitor: print message before quit for no array to monitor
  (bsc#1183229)
  0120-Monitor-print-message-before-quit-for-no-array-to-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1647604800">- skip RAID assembly if DM_UDEV_DISABLE_OTHER_RULES_FLAG (bsc#1196054)
  * Add 0121-udev-md-raid-assembly.rules-skip-if-DM_UDEV_DISABLE_.patch</changelog>
</package>
<package pkgid="4830c73adb013da4e3d7238b4004a7d59aa132f51b89d221fa27cc6111c887b5" name="meanwhile" arch="src">
  <version epoch="0" ver="1.0.2" rel="150000.3.2.1"/>
  <changelog author="adrian@suse.de" date="1102420800">- initial package of version 0.3</changelog>
  <changelog author="adrian@suse.de" date="1114516800">- update to version 0.4.0</changelog>
  <changelog author="adrian@suse.de" date="1116331200">- update to version 0.4.1</changelog>
  <changelog author="mls@suse.de" date="1127736000">- make devel package require base package</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="dmueller@suse.de" date="1138363200">- update to 0.4.2 for Kopete support (#118081)</changelog>
  <changelog author="sbrabec@suse.cz" date="1178798400">- Updated to version 1.0.2:
  * Encryption support.
  * Documentation package.
  * Large message support.
  * API changes, new library version.
  * Bug fixes.</changelog>
  <changelog author="rfno@fietze-home.de" date="1242302400">- apply patch to fix status update problem
  (http://sourceforge.net/tracker/index.php?func=detail&amp;aid=1626349&amp;group_id=110565&amp;atid=656718)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1306411200">- Remove "la" files and static libraries
- Disable doxygen docs generation, timestamps break build-compare.</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building
- Employ shlib packaging</changelog>
  <changelog author="dimstar@opensuse.org" date="1322481600">- Add meanwhile-glib-2.31.patch: Fix build with glib 2.31.
- Fix packaging: Do not package files in -doc and the library.
  + Move any files out of the lib package that do not belong there.
    This finally allows to have multiple libmeanwhil&lt;n&gt; installable
    without conflicting on file level.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Use url for source
- Update dependencies
- Cleanup spec file with spec-cleaner</changelog>
</package>
<package pkgid="181765089e4a5d3e2f41cae5a0dfafa05475cd19f12d037e9e8b2d423a10db75" name="meanwhile-devel" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="150000.3.2.1"/>
  <changelog author="mls@suse.de" date="1127736000">- make devel package require base package</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="dmueller@suse.de" date="1138363200">- update to 0.4.2 for Kopete support (#118081)</changelog>
  <changelog author="sbrabec@suse.cz" date="1178798400">- Updated to version 1.0.2:
  * Encryption support.
  * Documentation package.
  * Large message support.
  * API changes, new library version.
  * Bug fixes.</changelog>
  <changelog author="rfno@fietze-home.de" date="1242302400">- apply patch to fix status update problem
  (http://sourceforge.net/tracker/index.php?func=detail&amp;aid=1626349&amp;group_id=110565&amp;atid=656718)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1306411200">- Remove "la" files and static libraries
- Disable doxygen docs generation, timestamps break build-compare.</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building
- Employ shlib packaging</changelog>
  <changelog author="dimstar@opensuse.org" date="1322481600">- Add meanwhile-glib-2.31.patch: Fix build with glib 2.31.
- Fix packaging: Do not package files in -doc and the library.
  + Move any files out of the lib package that do not belong there.
    This finally allows to have multiple libmeanwhil&lt;n&gt; installable
    without conflicting on file level.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Use url for source
- Update dependencies
- Cleanup spec file with spec-cleaner</changelog>
</package>
<package pkgid="638fc99ef9b7fbac2c8d450c024462184ba2d8dcc8a26b817226140c700fa647" name="meanwhile-devel" arch="ppc64le">
  <version epoch="0" ver="1.0.2" rel="150000.3.2.1"/>
  <changelog author="mls@suse.de" date="1127736000">- make devel package require base package</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="dmueller@suse.de" date="1138363200">- update to 0.4.2 for Kopete support (#118081)</changelog>
  <changelog author="sbrabec@suse.cz" date="1178798400">- Updated to version 1.0.2:
  * Encryption support.
  * Documentation package.
  * Large message support.
  * API changes, new library version.
  * Bug fixes.</changelog>
  <changelog author="rfno@fietze-home.de" date="1242302400">- apply patch to fix status update problem
  (http://sourceforge.net/tracker/index.php?func=detail&amp;aid=1626349&amp;group_id=110565&amp;atid=656718)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1306411200">- Remove "la" files and static libraries
- Disable doxygen docs generation, timestamps break build-compare.</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building
- Employ shlib packaging</changelog>
  <changelog author="dimstar@opensuse.org" date="1322481600">- Add meanwhile-glib-2.31.patch: Fix build with glib 2.31.
- Fix packaging: Do not package files in -doc and the library.
  + Move any files out of the lib package that do not belong there.
    This finally allows to have multiple libmeanwhil&lt;n&gt; installable
    without conflicting on file level.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Use url for source
- Update dependencies
- Cleanup spec file with spec-cleaner</changelog>
</package>
<package pkgid="c3f3969cc537f7b60512cfd2ef3f21bb839a70e8b4e6bab235dcab58797e436b" name="meanwhile-devel" arch="s390x">
  <version epoch="0" ver="1.0.2" rel="150000.3.2.1"/>
  <changelog author="mls@suse.de" date="1127736000">- make devel package require base package</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="dmueller@suse.de" date="1138363200">- update to 0.4.2 for Kopete support (#118081)</changelog>
  <changelog author="sbrabec@suse.cz" date="1178798400">- Updated to version 1.0.2:
  * Encryption support.
  * Documentation package.
  * Large message support.
  * API changes, new library version.
  * Bug fixes.</changelog>
  <changelog author="rfno@fietze-home.de" date="1242302400">- apply patch to fix status update problem
  (http://sourceforge.net/tracker/index.php?func=detail&amp;aid=1626349&amp;group_id=110565&amp;atid=656718)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1306411200">- Remove "la" files and static libraries
- Disable doxygen docs generation, timestamps break build-compare.</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building
- Employ shlib packaging</changelog>
  <changelog author="dimstar@opensuse.org" date="1322481600">- Add meanwhile-glib-2.31.patch: Fix build with glib 2.31.
- Fix packaging: Do not package files in -doc and the library.
  + Move any files out of the lib package that do not belong there.
    This finally allows to have multiple libmeanwhil&lt;n&gt; installable
    without conflicting on file level.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Use url for source
- Update dependencies
- Cleanup spec file with spec-cleaner</changelog>
</package>
<package pkgid="b55f5f59c1ea80a839e1666943382344158e5945e65fc546e7f8154408ad0645" name="meanwhile-devel" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="150000.3.2.1"/>
  <changelog author="mls@suse.de" date="1127736000">- make devel package require base package</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="dmueller@suse.de" date="1138363200">- update to 0.4.2 for Kopete support (#118081)</changelog>
  <changelog author="sbrabec@suse.cz" date="1178798400">- Updated to version 1.0.2:
  * Encryption support.
  * Documentation package.
  * Large message support.
  * API changes, new library version.
  * Bug fixes.</changelog>
  <changelog author="rfno@fietze-home.de" date="1242302400">- apply patch to fix status update problem
  (http://sourceforge.net/tracker/index.php?func=detail&amp;aid=1626349&amp;group_id=110565&amp;atid=656718)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1306411200">- Remove "la" files and static libraries
- Disable doxygen docs generation, timestamps break build-compare.</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building
- Employ shlib packaging</changelog>
  <changelog author="dimstar@opensuse.org" date="1322481600">- Add meanwhile-glib-2.31.patch: Fix build with glib 2.31.
- Fix packaging: Do not package files in -doc and the library.
  + Move any files out of the lib package that do not belong there.
    This finally allows to have multiple libmeanwhil&lt;n&gt; installable
    without conflicting on file level.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Use url for source
- Update dependencies
- Cleanup spec file with spec-cleaner</changelog>
</package>
<package pkgid="b8a7b9213ceaee89ea0eda46f1aa80312306e3c90b99a188d3887dd7ef1b810b" name="meanwhile-doc" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="150000.3.2.1"/>
  <changelog author="mls@suse.de" date="1127736000">- make devel package require base package</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="dmueller@suse.de" date="1138363200">- update to 0.4.2 for Kopete support (#118081)</changelog>
  <changelog author="sbrabec@suse.cz" date="1178798400">- Updated to version 1.0.2:
  * Encryption support.
  * Documentation package.
  * Large message support.
  * API changes, new library version.
  * Bug fixes.</changelog>
  <changelog author="rfno@fietze-home.de" date="1242302400">- apply patch to fix status update problem
  (http://sourceforge.net/tracker/index.php?func=detail&amp;aid=1626349&amp;group_id=110565&amp;atid=656718)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1306411200">- Remove "la" files and static libraries
- Disable doxygen docs generation, timestamps break build-compare.</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building
- Employ shlib packaging</changelog>
  <changelog author="dimstar@opensuse.org" date="1322481600">- Add meanwhile-glib-2.31.patch: Fix build with glib 2.31.
- Fix packaging: Do not package files in -doc and the library.
  + Move any files out of the lib package that do not belong there.
    This finally allows to have multiple libmeanwhil&lt;n&gt; installable
    without conflicting on file level.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Use url for source
- Update dependencies
- Cleanup spec file with spec-cleaner</changelog>
</package>
<package pkgid="a91c11fca5b0433acce257c820cf0f09a7d419f544a884a0fa91709cb7d5b2a2" name="meanwhile-doc" arch="ppc64le">
  <version epoch="0" ver="1.0.2" rel="150000.3.2.1"/>
  <changelog author="mls@suse.de" date="1127736000">- make devel package require base package</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="dmueller@suse.de" date="1138363200">- update to 0.4.2 for Kopete support (#118081)</changelog>
  <changelog author="sbrabec@suse.cz" date="1178798400">- Updated to version 1.0.2:
  * Encryption support.
  * Documentation package.
  * Large message support.
  * API changes, new library version.
  * Bug fixes.</changelog>
  <changelog author="rfno@fietze-home.de" date="1242302400">- apply patch to fix status update problem
  (http://sourceforge.net/tracker/index.php?func=detail&amp;aid=1626349&amp;group_id=110565&amp;atid=656718)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1306411200">- Remove "la" files and static libraries
- Disable doxygen docs generation, timestamps break build-compare.</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building
- Employ shlib packaging</changelog>
  <changelog author="dimstar@opensuse.org" date="1322481600">- Add meanwhile-glib-2.31.patch: Fix build with glib 2.31.
- Fix packaging: Do not package files in -doc and the library.
  + Move any files out of the lib package that do not belong there.
    This finally allows to have multiple libmeanwhil&lt;n&gt; installable
    without conflicting on file level.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Use url for source
- Update dependencies
- Cleanup spec file with spec-cleaner</changelog>
</package>
<package pkgid="a81612a642a0a137dd78bb590b7961cb9ca834c12a1dc9211868ef76a0c4e54b" name="meanwhile-doc" arch="s390x">
  <version epoch="0" ver="1.0.2" rel="150000.3.2.1"/>
  <changelog author="mls@suse.de" date="1127736000">- make devel package require base package</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="dmueller@suse.de" date="1138363200">- update to 0.4.2 for Kopete support (#118081)</changelog>
  <changelog author="sbrabec@suse.cz" date="1178798400">- Updated to version 1.0.2:
  * Encryption support.
  * Documentation package.
  * Large message support.
  * API changes, new library version.
  * Bug fixes.</changelog>
  <changelog author="rfno@fietze-home.de" date="1242302400">- apply patch to fix status update problem
  (http://sourceforge.net/tracker/index.php?func=detail&amp;aid=1626349&amp;group_id=110565&amp;atid=656718)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1306411200">- Remove "la" files and static libraries
- Disable doxygen docs generation, timestamps break build-compare.</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building
- Employ shlib packaging</changelog>
  <changelog author="dimstar@opensuse.org" date="1322481600">- Add meanwhile-glib-2.31.patch: Fix build with glib 2.31.
- Fix packaging: Do not package files in -doc and the library.
  + Move any files out of the lib package that do not belong there.
    This finally allows to have multiple libmeanwhil&lt;n&gt; installable
    without conflicting on file level.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Use url for source
- Update dependencies
- Cleanup spec file with spec-cleaner</changelog>
</package>
<package pkgid="23b5690ca9a317c3783d34b959ba7c404b24878238a12c6ba477d7135aa4d8f9" name="meanwhile-doc" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="150000.3.2.1"/>
  <changelog author="mls@suse.de" date="1127736000">- make devel package require base package</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="dmueller@suse.de" date="1138363200">- update to 0.4.2 for Kopete support (#118081)</changelog>
  <changelog author="sbrabec@suse.cz" date="1178798400">- Updated to version 1.0.2:
  * Encryption support.
  * Documentation package.
  * Large message support.
  * API changes, new library version.
  * Bug fixes.</changelog>
  <changelog author="rfno@fietze-home.de" date="1242302400">- apply patch to fix status update problem
  (http://sourceforge.net/tracker/index.php?func=detail&amp;aid=1626349&amp;group_id=110565&amp;atid=656718)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1306411200">- Remove "la" files and static libraries
- Disable doxygen docs generation, timestamps break build-compare.</changelog>
  <changelog author="coolo@suse.com" date="1322049600">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1322049601">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building
- Employ shlib packaging</changelog>
  <changelog author="dimstar@opensuse.org" date="1322481600">- Add meanwhile-glib-2.31.patch: Fix build with glib 2.31.
- Fix packaging: Do not package files in -doc and the library.
  + Move any files out of the lib package that do not belong there.
    This finally allows to have multiple libmeanwhil&lt;n&gt; installable
    without conflicting on file level.</changelog>
  <changelog author="mpluskal@suse.com" date="1441972800">- Use url for source
- Update dependencies
- Cleanup spec file with spec-cleaner</changelog>
</package>
<package pkgid="8302b0d08086f39e1d03d6539bb3c3c8e687fd30e332072e8cd8b69882105cf1" name="motif" arch="aarch64">
  <version epoch="0" ver="2.3.4" rel="150000.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="25fa05919ebf740cafaaed81367c2c7b6c552a102582855f595316b741df66fb" name="motif" arch="ppc64le">
  <version epoch="0" ver="2.3.4" rel="150000.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="6129141fd4b6d8dc2e9ee7e3f3d61d1e8cba921715c81905e259a33ea6a06b6f" name="motif" arch="s390x">
  <version epoch="0" ver="2.3.4" rel="150000.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="936d6e7f2a28c3844b42a968d2c4cd337fbdae8dc1cc00f60a11e5a93432bdf1" name="motif" arch="src">
  <version epoch="0" ver="2.3.4" rel="150000.3.5.1"/>
  <changelog author="crrodriguez@suse.de" date="1237377600">- fix build, deleting la files in wrong rpm spec section</changelog>
  <changelog author="mseben@suse.cz" date="1241092800">- removed deprecated datadir.patch - we don't build demos ,
  added version dependency of openmotif-libs for openmotif-devel</changelog>
  <changelog author="jengelh@medozas.de" date="1261137600">- add baselibs.conf as a source</changelog>
  <changelog author="bernhard@bwalle.de" date="1261224000">- Update to openmotif 2.3.2
  o When we set XmNvisibleItemCount resource available in
    XmComboBox, the widget displays the wrong number of items
  o Added missing 'O' character to UTF8_SUPPORTED macro
  o PanedWindow orientation error
  o paned widget does not work under Fedora Core 2 with openmotif
    2.2.3-4.1
  o XmDropSiteRetrieve frees XRectangles before caller can use them
  o Build system changes.
- Refresh mwm.diff.</changelog>
  <changelog author="pgajdos@suse.cz" date="1270728000">- fixed build with libpng14</changelog>
  <changelog author="coolo@suse.com" date="1321444800">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1321444801">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="vdziewiecki@suse.com" date="1337860800">-Update to openmotif 2.3.3 (bnc#752334)
-Fixed a build failure caused by a function in builtin EditresCom.c not
  matching it's prototype.</changelog>
  <changelog author="msrb@novell.com" date="1351512000">- Use MWMRCDIR instead of rcdir in spec file. (bnc#786848)</changelog>
  <changelog author="jengelh@inai.de" date="1357300800">- Follow shared library package guidelines
- Kill Requires: png/jpeg-devel, since there does not seem to be
  a requirement to have them to build motif programs
- Added motif-avoid-empty-include.diff, motif-sequence-points.diff</changelog>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="5817942d74ef3267a46da36f1703d0d136fe67fadeb88003eb291a04565c2c2f" name="motif" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="150000.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="9b978f35834add56b7c27b6a6ed11bfe8c21e13c8f40f8fc49c1c67428140f81" name="motif-devel" arch="aarch64">
  <version epoch="0" ver="2.3.4" rel="150000.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="c89d92d9662cfd49b0a288799b7d333537ae5109bab0ff70c3d6e3ef6b545046" name="motif-devel" arch="ppc64le">
  <version epoch="0" ver="2.3.4" rel="150000.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="41233bf3ef62aacf50e8e1e6ef7da67cca0850fb0c5c9dee8b4204223af05296" name="motif-devel" arch="s390x">
  <version epoch="0" ver="2.3.4" rel="150000.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="6d574248ca8b093bdb169335c414f2acde509e38ab4dbfdefa33f1c8858d68a7" name="motif-devel" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="150000.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="bd0c7e8b6661372c27904c26c82a138051c7b1d44e7cd404e4e0d6dbe04ea690" name="motif-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.3.4" rel="150000.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1357387200">- Motif 2.3.4 strictly requires Xmu &gt;= 1.1.1 (changed prototypes)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1367582400">- Drop openmotif-libpng14.diff: fixed in upstream</changelog>
  <changelog author="coolo@suse.com" date="1373371200">- please legal-team (bnc#827674) by removing all files that
  have strange licenses</changelog>
  <changelog author="coolo@suse.com" date="1373889600">- merge motif and openmotif
- add localonly service to recompress</changelog>
  <changelog author="jmatejek@suse.com" date="1394020800">- openmotif-2.3.1-suse-stipple.patch - forward-port SLE's feature
  that allows disabling of upstream fix1381. This is necessary
  in some legacy scenarios, but undesirable in new apps. To enable
  the stipple feature (disable fix1381), set environment variable
  SUSE_OPENMOTIF_ENABLE_STIPPLE to 1.</changelog>
  <changelog author="sndirsch@suse.com" date="1399377600">- add pkgconfig(printproto) as requires to motif-devel</changelog>
  <changelog author="i@marguerite.su" date="1414497600">- Add motif-2.3.4-implicit-fortify-decl.patch
  * Fix implicit-fortify-decl and implicit-function-decl errors</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Use url for source
- Cleanup spec file with spec-cleaner
- Remove old ppc obsoletes/provides</changelog>
  <changelog author="schwab@suse.de" date="1455624000">- motif-2.3.4-implicit-fortify-decl.patch: fix bad use of reserved
  identifier</changelog>
  <changelog author="mcepl@suse.com" date="1621339200">- Add openmotif-2.3.3-multiscreen.patch and
  openMotif-2.3.3-mwm-screenresize.patch (bsc#1184184) preventing
  the third party application crashing.</changelog>
</package>
<package pkgid="e1f11a1f2ffdde417ccd41ac49f982ffda50dbe33ba1d88c75737e15db330db9" name="mpeg2dec" arch="aarch64">
  <version epoch="0" ver="0.5.1" rel="150000.3.2.1"/>
  <changelog author="rainer@links2linux.de" date="1108900800">- changes for 64 bit</changelog>
  <changelog author="henne@links2linux.de" date="1144152000">- more x86_64 fixes.</changelog>
  <changelog author="detlef@links2linux.de" date="1220097600">- new upstream version &lt;0.5.1&gt;
  * fix broken installation of headers
  * put back /mpeg2dec in the .pc file's include path</changelog>
  <changelog author="detlef@links2linux.de" date="1222689600">- fix shared lib policy</changelog>
  <changelog author="henne@links2linux.de" date="1251115200">- Fix some build errors by removing stuff from %doc
- specfile cleanup</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025600">- Cleanup the spec file to comply suse standards.
- Apply patches for ppc and arm to work on those archs.</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025601">- Format the spec file.</changelog>
  <changelog author="olaf@aepfle.de" date="1412424000">- Split libmpeg2convert0 to cover old pkg from VideoLAN</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609600">- Rebase patches and use modern macros, prepare for submission to
  openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1519041600">- Fix RPM groups, and use pkgconfig() symbols.</changelog>
</package>
<package pkgid="00279d3f6752406cfb80e9ec5fb5261957f0c34ee23e1a8f0177b49af498c404" name="mpeg2dec" arch="ppc64le">
  <version epoch="0" ver="0.5.1" rel="150000.3.2.1"/>
  <changelog author="rainer@links2linux.de" date="1108900800">- changes for 64 bit</changelog>
  <changelog author="henne@links2linux.de" date="1144152000">- more x86_64 fixes.</changelog>
  <changelog author="detlef@links2linux.de" date="1220097600">- new upstream version &lt;0.5.1&gt;
  * fix broken installation of headers
  * put back /mpeg2dec in the .pc file's include path</changelog>
  <changelog author="detlef@links2linux.de" date="1222689600">- fix shared lib policy</changelog>
  <changelog author="henne@links2linux.de" date="1251115200">- Fix some build errors by removing stuff from %doc
- specfile cleanup</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025600">- Cleanup the spec file to comply suse standards.
- Apply patches for ppc and arm to work on those archs.</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025601">- Format the spec file.</changelog>
  <changelog author="olaf@aepfle.de" date="1412424000">- Split libmpeg2convert0 to cover old pkg from VideoLAN</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609600">- Rebase patches and use modern macros, prepare for submission to
  openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1519041600">- Fix RPM groups, and use pkgconfig() symbols.</changelog>
</package>
<package pkgid="bd721a58b68ab971db7db789851dfa56035b5c8e09ce9f3ef44043dfde22ba2b" name="mpeg2dec" arch="s390x">
  <version epoch="0" ver="0.5.1" rel="150000.3.2.1"/>
  <changelog author="rainer@links2linux.de" date="1108900800">- changes for 64 bit</changelog>
  <changelog author="henne@links2linux.de" date="1144152000">- more x86_64 fixes.</changelog>
  <changelog author="detlef@links2linux.de" date="1220097600">- new upstream version &lt;0.5.1&gt;
  * fix broken installation of headers
  * put back /mpeg2dec in the .pc file's include path</changelog>
  <changelog author="detlef@links2linux.de" date="1222689600">- fix shared lib policy</changelog>
  <changelog author="henne@links2linux.de" date="1251115200">- Fix some build errors by removing stuff from %doc
- specfile cleanup</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025600">- Cleanup the spec file to comply suse standards.
- Apply patches for ppc and arm to work on those archs.</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025601">- Format the spec file.</changelog>
  <changelog author="olaf@aepfle.de" date="1412424000">- Split libmpeg2convert0 to cover old pkg from VideoLAN</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609600">- Rebase patches and use modern macros, prepare for submission to
  openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1519041600">- Fix RPM groups, and use pkgconfig() symbols.</changelog>
</package>
<package pkgid="96895f03c7c089f68a3d33cdda917da93127e667ce7c2f8934e0d17fd2d94a12" name="mpeg2dec" arch="x86_64">
  <version epoch="0" ver="0.5.1" rel="150000.3.2.1"/>
  <changelog author="rainer@links2linux.de" date="1108900800">- changes for 64 bit</changelog>
  <changelog author="henne@links2linux.de" date="1144152000">- more x86_64 fixes.</changelog>
  <changelog author="detlef@links2linux.de" date="1220097600">- new upstream version &lt;0.5.1&gt;
  * fix broken installation of headers
  * put back /mpeg2dec in the .pc file's include path</changelog>
  <changelog author="detlef@links2linux.de" date="1222689600">- fix shared lib policy</changelog>
  <changelog author="henne@links2linux.de" date="1251115200">- Fix some build errors by removing stuff from %doc
- specfile cleanup</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025600">- Cleanup the spec file to comply suse standards.
- Apply patches for ppc and arm to work on those archs.</changelog>
  <changelog author="scarabeus@opensuse.org" date="1373025601">- Format the spec file.</changelog>
  <changelog author="olaf@aepfle.de" date="1412424000">- Split libmpeg2convert0 to cover old pkg from VideoLAN</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1518609600">- Rebase patches and use modern macros, prepare for submission to
  openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1519041600">- Fix RPM groups, and use pkgconfig() symbols.</changelog>
</package>
<package pkgid="de3c4fc36632481c68c694f4c7f5cde25ffff7e4f52a2f4db18105bb3e35f903" name="mutter" arch="src">
  <version epoch="0" ver="3.34.6" rel="150200.3.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1575288000">- Update to version 3.34.1+66:
  * stack: Allow promoting transient windows to their parent's layer
  * shaped-texture: Do not invalidate content on set_cogl_texture()
  * cursor-tracker: Add API to keep the wayland pointer focus while hidden
  * device-manager-x11: Ignore events if no source device is set
  * clutter/cally-root: Use g_clear_signal_handler and fix a signal leak
  * wayland: Move "ownership" of the DnD selection source to the data device
  * wayland: Do not cancel data source on offer destruction
  * wayland: Avoid redundant cancel() call
  * wayland: Drop unused wl_signal structs</changelog>
  <changelog author="fcrozat@suse.com" date="1575288001">- Add mutter-disable-cvt-s390x.patch: do not search cvt on s390x,
  it doesn't exist there (bsc#1158128).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575979200">- Add explicit pkgconfig(fribidi) and pkgconfig(glib-2.0)
  BuildRequires: meson checks for it.</changelog>
  <changelog author="dead_mozay@opensuse.org" date="1576238400">- Update to version 3.34.2+0:
  * Update British English translation
  * backends/native: Fix double free of error
  * kms-impl/simple: Fix meta_set_fallback_feedback_idle
  * kms: Process impl idle callbacks before pre dispatch flush</changelog>
  <changelog author="dimstar@opensuse.org" date="1577188800">- Update to version 3.34.2+1:
  * screen-cast: Fix window recording on HiDPI</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1577880000">- Update to version 3.34.2+2:
  * clutter/stage: Fix picking of rectangles with negative
    positions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578225600">- Update to version 3.34.3+0:
  * Bump version to 3.34.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581854400">- Update to version 3.34.4:
  + Handle mode set race conditions more gracefully.
  + Fix fallback to GLES2.
  + Fix interoperation with wl_data_device_manager v1.
  + Fix visual glitches with offscreen effects applied.
  + Favor text over images in clipboard manager.
  + Fixes crashes.
  + Plugged memory leaks.
  + Misc. bug fixes.
  + Updated translations.</changelog>
  <changelog author="sndirsch@suse.com" date="1582545600">- Add mutter-fix-mesa20.patch: fixes build against Mesa 20
  (boo#1164688).</changelog>
  <changelog author="dimstar@opensuse.org" date="1582632000">- Rework mutter-fix-mesa20.patch: base it on mutter upstream commit
  a444a4c.</changelog>
  <changelog author="alarrosa@suse.com" date="1583150400">- Build with pipewire 0.3.0:
  * Add 0001-Update-to-PipeWire-0.3-API.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1584100800">- Add mutter-wayland-fix-keyboard-move-resize-window.patch:
  move some common code out of X11 only code blocks to fix it
  (bsc#1159976, glgo#GNOME/mutter!997).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1585742400">- Update to version 3.34.5:
  + Fix visibility of initially hidden windows.
  + Fix hardware cursor on GPU hotplug.
  + Fix pasting images from wayland.
  + Fixed crashes.
  + Updated translations.
- Switch to using explicit released tag in _service.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Enable SLE patches on Leap (jsc#SLE-11897).</changelog>
  <changelog author="mgorse@suse.com" date="1589371200">- Update to version 3.34.6:
  + Fix various clipboard issues.
  + Fix locate-pointer feature interfering with keybindings.
  + Fix overview key on X11 when using multiple keyboard layouts.
  + Preserve keyboard state on VT switch.
  + Fixed crashes.
  + Plugged memory leaks.
  + Misc. bug fixes and cleanups.</changelog>
  <changelog author="fcrozat@suse.com" date="1597924800">- Add mutter-meson_options-Use-libGLESv2.so.2-for-COGL_DRIVER-gle.patch:
  don't use libGLESv2.so but libGLESv2.so.2 for COGL driver
  (boo#1175559 glgo#GNOME/mutter!1282).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1598011200">- Added mutter-fix-wine-copy-and-paste.patch: sometimes copy and
  paste will fail in wine applications, this upstream patch fixed
  it (boo#1175532, glgo#GNOME/mutter!1369).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628251200">- Added 0001-stage-x11-Check-that-message-is-WM_PROTOCOLS-before-.patch:
  ClientMessage may have different types such as touch
  synchronization, but mutter just assume it as WM_PROTOCOLS, which
  will destroy all actors include stage wrongly, this patch checks
  type before using it. (bsc#1188759)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1647000000">- Added 0001-Revert-x11-Unminimize-windows-with-initial-IconicSta.patch:
  This fixes xterm -iconic support, by reverting a workaround for
  wrongly behaved wine games. (bsc#1193190, glgo#GNOME/mutter#2043)</changelog>
</package>
<package pkgid="bdde660dc95a123b98222286a073366faf3ababe39ab66a50969312c2082b01d" name="mutter" arch="aarch64">
  <version epoch="0" ver="41.5" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1632225600">- Update to version 40.5:
  + Fix monitor screencast scanouts.
  + Fix middle-click emulation support on X11.
  + Fixed crashes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632312000">- Update to version 41.beta:
  + Manage idle monitors via MetaIdleManager.
  + Fix VKMS detection.
  + Fix swipe cancellation.
  + Fix mapping tablet to monitor.
  + Fix area screencasts when window is unredirected.
  + Don't require a newly attached buffer to apply state.
  + Close unused mode setting and rendering devices.
  + Only support super+scroll on wayland.
  + Implement the xdg-activation protocol.
  + Reduce input latency by computing max render time
    heuristically.
  + Apply dithering to dispatch time when needed.
  + x11: Compute monitor scale per output.
  + Shrink and optimize the rounded-background-clip shader.
  + remote-desktop: Handle non-responding selection owners .
  + Improve sysprof support.
  + Allow clients to delegate titlebar gestures to the compositor.
  + Fix upside-down Xshape surface with EGLstream.
  + Fix 'kms-modifiers' experimental setting.
  + Make default focus window on each workspace appear focused.
  + Plugged memory leaks.
  + Fixed crashes crash.
  + Misc. bug fixes and cleanups.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632312001">- Update to version 41.rc:
  + Add clutter_stage_paint_to_content().
  + Add meta_cursor_tracker_get_scale().
  + wayland: Make each wl_output correspond to one monitor.
  + Expose 'inactive-since' timestamp to uresourced.
  + Pass dirty rects to secondary GPU.
  + Support commiting preedit string on focus loss.
  + Improve auto-rotation support.
  + Add meta_window_actor_paint_to_content().
  + Fixed crashes.
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Add xvfb-run BuildRequires: new dependency for the test suite.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312002">- Add pkgconfig(xwayland) and drop xorg-x11-server-wayland
  BuildRequires: use standalone xwayland during build and runtime.
- Add explicit gnome-settings-daemon Requires and pass initfd=auto
  to meson now that we are using the new standalone xwayland.</changelog>
  <changelog author="mgorse@suse.com" date="1632312003">- Update to version 41.0:
  + Avoid race in wl_seat capabilities.
  + Expose option groups/entries to introspection.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1634731200">- Rebase mutter-SLE-bsc984738-grab-display.patch.</changelog>
  <changelog author="packaging@sp1rit.anonaddy.me" date="1634817600">- Added clutter-only_reset_preedit_text_if_set.patch
  + fixes "scrollback" issue of GtkTextView
    (see lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/WYSUDJFTZIEEJS3QBBBUNLD3XBXULABU/)</changelog>
  <changelog author="dimstar@opensuse.org" date="1635854400">- BuildRequire libxcvt when building against xorg-x11-server &gt; 21,
  unless when building for s390x: libxcvt was split out and lives
  in an own package now.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 41.1:
  + Fix monitor screencast scanouts
  + dma-buf: Use alpha-less pixel formats where appropriate
  + wayland: Allow clients to maximize windows regardless of
    constraints
  + Handle hotplug events without relevant changes more effectively
  + Improve error reporting when startup fails
  + dma-buf: Add support for ABGR and XBGR formats
  + Fix X11 middle button emulation setting
  + Include server-side shadows in window screenshots
  + Don't change workspaces of unmanaged windows
  + Reset idletime when unplugging the power cable
  + xwayland: Avoid unnecessary _NET_WM_STATE events
  + Fix videos in Firefox stuttering in overview
  + Don't use atomic mode setting for virtio_gpu driver
  + Improve on-screen keyboard on X11
  + Fix text glitches after size changes
  + Fix reporting output rotation to xwayland
  + wayland: Accept final preference of drop destination
  + Fix erratic scrolling in GTK apps
  + Fix tilt direction of pen/tablet inputs
  + Use b/w unicode for tablet mode OSD
  + Fix negative paint volume offscreen effect
  + Only add paint volumes of mapped actors to stage clip
  + Fix mapping tablet input to correct monitor
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Drop clutter-only_reset_preedit_text_if_set.patch: Fixed upstream</changelog>
  <changelog author="alynx.zhou@suse.com" date="1637323200">- Enable eglstream on Leap/SLE (jsc#SLE-19964).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1637668800">- Enable wayland-eglstream dependency on Leap/SLE (jsc#SLE-19964).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639396800">- Update to version 41.2:
  + Fix blank screen when unplugging docking station.
  + Prefer GBM over EGLStream where possible.
  + Fix unredirected Xwayland windows not getting updated.
  + Improve anti-aliasing of background corners.
  + Copy damage rectangles to secondary GPU
  + Improve Wacom tablet mapping.
  + Fixed crashes.
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Switch to git checkout of released tag via source service.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1639742400">- Add mutter-allow-disable-hardware-cursors.patch: Add a debug
  environment variable MUTTER_DEBUG_DISABLE_HW_CURSORS to disable
  hardware cursors and force using software cursors to avoid some
  driver or hardware bug (glgo#GNOME/mutter#2045,
  glgo#GNOME/mutter!2150).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639742401">- Rebase patches with quilt and renumber them.
- Add mutter-window-actor-Special-case-shaped-Java-windows.patch:
  window-actor: Special-case shaped Java windows.
  OpenJDK wrongly assumes that shaping a window implies no shadows.
  They got lucky until commit b975676c changed the fallback case,
  but now their compliance tests are broken. Make them happy again
  by special-casing shaped Java windows. Patch from fedora:
  https://src.fedoraproject.org/rpms/mutter/raw/rawhide/f/0001-window-actor-Special-case-shaped-Java-windows.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1641816000">- Add mutter-initialize-saved_rect_fullscreen.patch: Some
  applications that starts in fullscreen disappear when switching
  back to normal size mode, because mutter forget to initialize
  saved_rect_fullscreen which is used for unfullscreen, this patch
  fixes it (glgo#GNOME/mutter!2210, bsc#1185444).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1641902400">- Update to version 41.3:
  + Check keyboard serials for activation
  + Fix mixed up refresh rates in multi-monitor setups
  + Allow disabling HW cursors
  + Improve damage handling
  + Consider xrandr flags for advertised modes
  + Ensure constraints after client resize
  + window-group: Disable culling when rendinging clone to
    offscreen buffer
  + Fix workspace switch animation in default plugin
  + Fix unfullscreening of window that were mapped fullscreen
  + Fix DMA-BUF screencasts with unredirected fullscreen windows
  + Fix orientation changes on devices with 90
  + Fixed crashes
  + Plugged leaks
  + Misc. bug fixes and cleanups.
- Drop patches fixed upstream:
  + mutter-allow-disable-hardware-cursors.patch
  + mutter-initialize-saved_rect_fullscreen.patch
- Renumber patches yet again.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644321600">- Add 0002-Drop-CI-test-setup-that-needs-catchsegv.patch: Fix build
  with glibc 2.35 and newer.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644926400">- Update to version 41.4:
  + Fix DND between X11 and wayland clients.
  + Fix resetting idle time on lid open.
  + wayland/gtk: Only perform allowed titlebar gestures.
  + Place popups on the same monitor as the anchor rect.
  + Fix wrong resizes of some clients on focus changes.
  + Misc. bug fixes.
  + Fixed crashes.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647777600">- Update to version 41.5:
  + Fix X11 ? wayland drops ending up in the wrong wayland client.
  + Allow forcing EGLStream backend.
  + Updated translations.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1652443200">- Add mutter-crash-meta_context_terminate.patch: Fix SIGSEGV in
  meta_context_terminate (bsc#1199382 glgo#GNOME/mutter#2267).</changelog>
</package>
<package pkgid="5ca0bc6ccc3f24ed44cac3e87b9527cca46f05a973fc355cac97a5654bd7e65a" name="mutter" arch="ppc64le">
  <version epoch="0" ver="41.5" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1632225600">- Update to version 40.5:
  + Fix monitor screencast scanouts.
  + Fix middle-click emulation support on X11.
  + Fixed crashes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632312000">- Update to version 41.beta:
  + Manage idle monitors via MetaIdleManager.
  + Fix VKMS detection.
  + Fix swipe cancellation.
  + Fix mapping tablet to monitor.
  + Fix area screencasts when window is unredirected.
  + Don't require a newly attached buffer to apply state.
  + Close unused mode setting and rendering devices.
  + Only support super+scroll on wayland.
  + Implement the xdg-activation protocol.
  + Reduce input latency by computing max render time
    heuristically.
  + Apply dithering to dispatch time when needed.
  + x11: Compute monitor scale per output.
  + Shrink and optimize the rounded-background-clip shader.
  + remote-desktop: Handle non-responding selection owners .
  + Improve sysprof support.
  + Allow clients to delegate titlebar gestures to the compositor.
  + Fix upside-down Xshape surface with EGLstream.
  + Fix 'kms-modifiers' experimental setting.
  + Make default focus window on each workspace appear focused.
  + Plugged memory leaks.
  + Fixed crashes crash.
  + Misc. bug fixes and cleanups.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632312001">- Update to version 41.rc:
  + Add clutter_stage_paint_to_content().
  + Add meta_cursor_tracker_get_scale().
  + wayland: Make each wl_output correspond to one monitor.
  + Expose 'inactive-since' timestamp to uresourced.
  + Pass dirty rects to secondary GPU.
  + Support commiting preedit string on focus loss.
  + Improve auto-rotation support.
  + Add meta_window_actor_paint_to_content().
  + Fixed crashes.
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Add xvfb-run BuildRequires: new dependency for the test suite.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312002">- Add pkgconfig(xwayland) and drop xorg-x11-server-wayland
  BuildRequires: use standalone xwayland during build and runtime.
- Add explicit gnome-settings-daemon Requires and pass initfd=auto
  to meson now that we are using the new standalone xwayland.</changelog>
  <changelog author="mgorse@suse.com" date="1632312003">- Update to version 41.0:
  + Avoid race in wl_seat capabilities.
  + Expose option groups/entries to introspection.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1634731200">- Rebase mutter-SLE-bsc984738-grab-display.patch.</changelog>
  <changelog author="packaging@sp1rit.anonaddy.me" date="1634817600">- Added clutter-only_reset_preedit_text_if_set.patch
  + fixes "scrollback" issue of GtkTextView
    (see lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/WYSUDJFTZIEEJS3QBBBUNLD3XBXULABU/)</changelog>
  <changelog author="dimstar@opensuse.org" date="1635854400">- BuildRequire libxcvt when building against xorg-x11-server &gt; 21,
  unless when building for s390x: libxcvt was split out and lives
  in an own package now.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 41.1:
  + Fix monitor screencast scanouts
  + dma-buf: Use alpha-less pixel formats where appropriate
  + wayland: Allow clients to maximize windows regardless of
    constraints
  + Handle hotplug events without relevant changes more effectively
  + Improve error reporting when startup fails
  + dma-buf: Add support for ABGR and XBGR formats
  + Fix X11 middle button emulation setting
  + Include server-side shadows in window screenshots
  + Don't change workspaces of unmanaged windows
  + Reset idletime when unplugging the power cable
  + xwayland: Avoid unnecessary _NET_WM_STATE events
  + Fix videos in Firefox stuttering in overview
  + Don't use atomic mode setting for virtio_gpu driver
  + Improve on-screen keyboard on X11
  + Fix text glitches after size changes
  + Fix reporting output rotation to xwayland
  + wayland: Accept final preference of drop destination
  + Fix erratic scrolling in GTK apps
  + Fix tilt direction of pen/tablet inputs
  + Use b/w unicode for tablet mode OSD
  + Fix negative paint volume offscreen effect
  + Only add paint volumes of mapped actors to stage clip
  + Fix mapping tablet input to correct monitor
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Drop clutter-only_reset_preedit_text_if_set.patch: Fixed upstream</changelog>
  <changelog author="alynx.zhou@suse.com" date="1637323200">- Enable eglstream on Leap/SLE (jsc#SLE-19964).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1637668800">- Enable wayland-eglstream dependency on Leap/SLE (jsc#SLE-19964).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639396800">- Update to version 41.2:
  + Fix blank screen when unplugging docking station.
  + Prefer GBM over EGLStream where possible.
  + Fix unredirected Xwayland windows not getting updated.
  + Improve anti-aliasing of background corners.
  + Copy damage rectangles to secondary GPU
  + Improve Wacom tablet mapping.
  + Fixed crashes.
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Switch to git checkout of released tag via source service.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1639742400">- Add mutter-allow-disable-hardware-cursors.patch: Add a debug
  environment variable MUTTER_DEBUG_DISABLE_HW_CURSORS to disable
  hardware cursors and force using software cursors to avoid some
  driver or hardware bug (glgo#GNOME/mutter#2045,
  glgo#GNOME/mutter!2150).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639742401">- Rebase patches with quilt and renumber them.
- Add mutter-window-actor-Special-case-shaped-Java-windows.patch:
  window-actor: Special-case shaped Java windows.
  OpenJDK wrongly assumes that shaping a window implies no shadows.
  They got lucky until commit b975676c changed the fallback case,
  but now their compliance tests are broken. Make them happy again
  by special-casing shaped Java windows. Patch from fedora:
  https://src.fedoraproject.org/rpms/mutter/raw/rawhide/f/0001-window-actor-Special-case-shaped-Java-windows.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1641816000">- Add mutter-initialize-saved_rect_fullscreen.patch: Some
  applications that starts in fullscreen disappear when switching
  back to normal size mode, because mutter forget to initialize
  saved_rect_fullscreen which is used for unfullscreen, this patch
  fixes it (glgo#GNOME/mutter!2210, bsc#1185444).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1641902400">- Update to version 41.3:
  + Check keyboard serials for activation
  + Fix mixed up refresh rates in multi-monitor setups
  + Allow disabling HW cursors
  + Improve damage handling
  + Consider xrandr flags for advertised modes
  + Ensure constraints after client resize
  + window-group: Disable culling when rendinging clone to
    offscreen buffer
  + Fix workspace switch animation in default plugin
  + Fix unfullscreening of window that were mapped fullscreen
  + Fix DMA-BUF screencasts with unredirected fullscreen windows
  + Fix orientation changes on devices with 90
  + Fixed crashes
  + Plugged leaks
  + Misc. bug fixes and cleanups.
- Drop patches fixed upstream:
  + mutter-allow-disable-hardware-cursors.patch
  + mutter-initialize-saved_rect_fullscreen.patch
- Renumber patches yet again.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644321600">- Add 0002-Drop-CI-test-setup-that-needs-catchsegv.patch: Fix build
  with glibc 2.35 and newer.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644926400">- Update to version 41.4:
  + Fix DND between X11 and wayland clients.
  + Fix resetting idle time on lid open.
  + wayland/gtk: Only perform allowed titlebar gestures.
  + Place popups on the same monitor as the anchor rect.
  + Fix wrong resizes of some clients on focus changes.
  + Misc. bug fixes.
  + Fixed crashes.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647777600">- Update to version 41.5:
  + Fix X11 ? wayland drops ending up in the wrong wayland client.
  + Allow forcing EGLStream backend.
  + Updated translations.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1652443200">- Add mutter-crash-meta_context_terminate.patch: Fix SIGSEGV in
  meta_context_terminate (bsc#1199382 glgo#GNOME/mutter#2267).</changelog>
</package>
<package pkgid="5cf44c9e06ad9cf423c209145eb273749ccf28adad8f1e0c5da4a1d9694b467c" name="mutter" arch="s390x">
  <version epoch="0" ver="41.5" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1632225600">- Update to version 40.5:
  + Fix monitor screencast scanouts.
  + Fix middle-click emulation support on X11.
  + Fixed crashes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632312000">- Update to version 41.beta:
  + Manage idle monitors via MetaIdleManager.
  + Fix VKMS detection.
  + Fix swipe cancellation.
  + Fix mapping tablet to monitor.
  + Fix area screencasts when window is unredirected.
  + Don't require a newly attached buffer to apply state.
  + Close unused mode setting and rendering devices.
  + Only support super+scroll on wayland.
  + Implement the xdg-activation protocol.
  + Reduce input latency by computing max render time
    heuristically.
  + Apply dithering to dispatch time when needed.
  + x11: Compute monitor scale per output.
  + Shrink and optimize the rounded-background-clip shader.
  + remote-desktop: Handle non-responding selection owners .
  + Improve sysprof support.
  + Allow clients to delegate titlebar gestures to the compositor.
  + Fix upside-down Xshape surface with EGLstream.
  + Fix 'kms-modifiers' experimental setting.
  + Make default focus window on each workspace appear focused.
  + Plugged memory leaks.
  + Fixed crashes crash.
  + Misc. bug fixes and cleanups.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632312001">- Update to version 41.rc:
  + Add clutter_stage_paint_to_content().
  + Add meta_cursor_tracker_get_scale().
  + wayland: Make each wl_output correspond to one monitor.
  + Expose 'inactive-since' timestamp to uresourced.
  + Pass dirty rects to secondary GPU.
  + Support commiting preedit string on focus loss.
  + Improve auto-rotation support.
  + Add meta_window_actor_paint_to_content().
  + Fixed crashes.
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Add xvfb-run BuildRequires: new dependency for the test suite.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312002">- Add pkgconfig(xwayland) and drop xorg-x11-server-wayland
  BuildRequires: use standalone xwayland during build and runtime.
- Add explicit gnome-settings-daemon Requires and pass initfd=auto
  to meson now that we are using the new standalone xwayland.</changelog>
  <changelog author="mgorse@suse.com" date="1632312003">- Update to version 41.0:
  + Avoid race in wl_seat capabilities.
  + Expose option groups/entries to introspection.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1634731200">- Rebase mutter-SLE-bsc984738-grab-display.patch.</changelog>
  <changelog author="packaging@sp1rit.anonaddy.me" date="1634817600">- Added clutter-only_reset_preedit_text_if_set.patch
  + fixes "scrollback" issue of GtkTextView
    (see lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/WYSUDJFTZIEEJS3QBBBUNLD3XBXULABU/)</changelog>
  <changelog author="dimstar@opensuse.org" date="1635854400">- BuildRequire libxcvt when building against xorg-x11-server &gt; 21,
  unless when building for s390x: libxcvt was split out and lives
  in an own package now.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 41.1:
  + Fix monitor screencast scanouts
  + dma-buf: Use alpha-less pixel formats where appropriate
  + wayland: Allow clients to maximize windows regardless of
    constraints
  + Handle hotplug events without relevant changes more effectively
  + Improve error reporting when startup fails
  + dma-buf: Add support for ABGR and XBGR formats
  + Fix X11 middle button emulation setting
  + Include server-side shadows in window screenshots
  + Don't change workspaces of unmanaged windows
  + Reset idletime when unplugging the power cable
  + xwayland: Avoid unnecessary _NET_WM_STATE events
  + Fix videos in Firefox stuttering in overview
  + Don't use atomic mode setting for virtio_gpu driver
  + Improve on-screen keyboard on X11
  + Fix text glitches after size changes
  + Fix reporting output rotation to xwayland
  + wayland: Accept final preference of drop destination
  + Fix erratic scrolling in GTK apps
  + Fix tilt direction of pen/tablet inputs
  + Use b/w unicode for tablet mode OSD
  + Fix negative paint volume offscreen effect
  + Only add paint volumes of mapped actors to stage clip
  + Fix mapping tablet input to correct monitor
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Drop clutter-only_reset_preedit_text_if_set.patch: Fixed upstream</changelog>
  <changelog author="alynx.zhou@suse.com" date="1637323200">- Enable eglstream on Leap/SLE (jsc#SLE-19964).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1637668800">- Enable wayland-eglstream dependency on Leap/SLE (jsc#SLE-19964).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639396800">- Update to version 41.2:
  + Fix blank screen when unplugging docking station.
  + Prefer GBM over EGLStream where possible.
  + Fix unredirected Xwayland windows not getting updated.
  + Improve anti-aliasing of background corners.
  + Copy damage rectangles to secondary GPU
  + Improve Wacom tablet mapping.
  + Fixed crashes.
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Switch to git checkout of released tag via source service.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1639742400">- Add mutter-allow-disable-hardware-cursors.patch: Add a debug
  environment variable MUTTER_DEBUG_DISABLE_HW_CURSORS to disable
  hardware cursors and force using software cursors to avoid some
  driver or hardware bug (glgo#GNOME/mutter#2045,
  glgo#GNOME/mutter!2150).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639742401">- Rebase patches with quilt and renumber them.
- Add mutter-window-actor-Special-case-shaped-Java-windows.patch:
  window-actor: Special-case shaped Java windows.
  OpenJDK wrongly assumes that shaping a window implies no shadows.
  They got lucky until commit b975676c changed the fallback case,
  but now their compliance tests are broken. Make them happy again
  by special-casing shaped Java windows. Patch from fedora:
  https://src.fedoraproject.org/rpms/mutter/raw/rawhide/f/0001-window-actor-Special-case-shaped-Java-windows.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1641816000">- Add mutter-initialize-saved_rect_fullscreen.patch: Some
  applications that starts in fullscreen disappear when switching
  back to normal size mode, because mutter forget to initialize
  saved_rect_fullscreen which is used for unfullscreen, this patch
  fixes it (glgo#GNOME/mutter!2210, bsc#1185444).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1641902400">- Update to version 41.3:
  + Check keyboard serials for activation
  + Fix mixed up refresh rates in multi-monitor setups
  + Allow disabling HW cursors
  + Improve damage handling
  + Consider xrandr flags for advertised modes
  + Ensure constraints after client resize
  + window-group: Disable culling when rendinging clone to
    offscreen buffer
  + Fix workspace switch animation in default plugin
  + Fix unfullscreening of window that were mapped fullscreen
  + Fix DMA-BUF screencasts with unredirected fullscreen windows
  + Fix orientation changes on devices with 90
  + Fixed crashes
  + Plugged leaks
  + Misc. bug fixes and cleanups.
- Drop patches fixed upstream:
  + mutter-allow-disable-hardware-cursors.patch
  + mutter-initialize-saved_rect_fullscreen.patch
- Renumber patches yet again.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644321600">- Add 0002-Drop-CI-test-setup-that-needs-catchsegv.patch: Fix build
  with glibc 2.35 and newer.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644926400">- Update to version 41.4:
  + Fix DND between X11 and wayland clients.
  + Fix resetting idle time on lid open.
  + wayland/gtk: Only perform allowed titlebar gestures.
  + Place popups on the same monitor as the anchor rect.
  + Fix wrong resizes of some clients on focus changes.
  + Misc. bug fixes.
  + Fixed crashes.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647777600">- Update to version 41.5:
  + Fix X11 ? wayland drops ending up in the wrong wayland client.
  + Allow forcing EGLStream backend.
  + Updated translations.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1652443200">- Add mutter-crash-meta_context_terminate.patch: Fix SIGSEGV in
  meta_context_terminate (bsc#1199382 glgo#GNOME/mutter#2267).</changelog>
</package>
<package pkgid="1e94b3907b455f8c6f30d96e148113bfd7510747485ba9f42345c25d82118a32" name="mutter" arch="src">
  <version epoch="0" ver="41.5" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1632225600">- Update to version 40.5:
  + Fix monitor screencast scanouts.
  + Fix middle-click emulation support on X11.
  + Fixed crashes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632312000">- Update to version 41.beta:
  + Manage idle monitors via MetaIdleManager.
  + Fix VKMS detection.
  + Fix swipe cancellation.
  + Fix mapping tablet to monitor.
  + Fix area screencasts when window is unredirected.
  + Don't require a newly attached buffer to apply state.
  + Close unused mode setting and rendering devices.
  + Only support super+scroll on wayland.
  + Implement the xdg-activation protocol.
  + Reduce input latency by computing max render time
    heuristically.
  + Apply dithering to dispatch time when needed.
  + x11: Compute monitor scale per output.
  + Shrink and optimize the rounded-background-clip shader.
  + remote-desktop: Handle non-responding selection owners .
  + Improve sysprof support.
  + Allow clients to delegate titlebar gestures to the compositor.
  + Fix upside-down Xshape surface with EGLstream.
  + Fix 'kms-modifiers' experimental setting.
  + Make default focus window on each workspace appear focused.
  + Plugged memory leaks.
  + Fixed crashes crash.
  + Misc. bug fixes and cleanups.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632312001">- Update to version 41.rc:
  + Add clutter_stage_paint_to_content().
  + Add meta_cursor_tracker_get_scale().
  + wayland: Make each wl_output correspond to one monitor.
  + Expose 'inactive-since' timestamp to uresourced.
  + Pass dirty rects to secondary GPU.
  + Support commiting preedit string on focus loss.
  + Improve auto-rotation support.
  + Add meta_window_actor_paint_to_content().
  + Fixed crashes.
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Add xvfb-run BuildRequires: new dependency for the test suite.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312002">- Add pkgconfig(xwayland) and drop xorg-x11-server-wayland
  BuildRequires: use standalone xwayland during build and runtime.
- Add explicit gnome-settings-daemon Requires and pass initfd=auto
  to meson now that we are using the new standalone xwayland.</changelog>
  <changelog author="mgorse@suse.com" date="1632312003">- Update to version 41.0:
  + Avoid race in wl_seat capabilities.
  + Expose option groups/entries to introspection.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1634731200">- Rebase mutter-SLE-bsc984738-grab-display.patch.</changelog>
  <changelog author="packaging@sp1rit.anonaddy.me" date="1634817600">- Added clutter-only_reset_preedit_text_if_set.patch
  + fixes "scrollback" issue of GtkTextView
    (see lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/WYSUDJFTZIEEJS3QBBBUNLD3XBXULABU/)</changelog>
  <changelog author="dimstar@opensuse.org" date="1635854400">- BuildRequire libxcvt when building against xorg-x11-server &gt; 21,
  unless when building for s390x: libxcvt was split out and lives
  in an own package now.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 41.1:
  + Fix monitor screencast scanouts
  + dma-buf: Use alpha-less pixel formats where appropriate
  + wayland: Allow clients to maximize windows regardless of
    constraints
  + Handle hotplug events without relevant changes more effectively
  + Improve error reporting when startup fails
  + dma-buf: Add support for ABGR and XBGR formats
  + Fix X11 middle button emulation setting
  + Include server-side shadows in window screenshots
  + Don't change workspaces of unmanaged windows
  + Reset idletime when unplugging the power cable
  + xwayland: Avoid unnecessary _NET_WM_STATE events
  + Fix videos in Firefox stuttering in overview
  + Don't use atomic mode setting for virtio_gpu driver
  + Improve on-screen keyboard on X11
  + Fix text glitches after size changes
  + Fix reporting output rotation to xwayland
  + wayland: Accept final preference of drop destination
  + Fix erratic scrolling in GTK apps
  + Fix tilt direction of pen/tablet inputs
  + Use b/w unicode for tablet mode OSD
  + Fix negative paint volume offscreen effect
  + Only add paint volumes of mapped actors to stage clip
  + Fix mapping tablet input to correct monitor
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Drop clutter-only_reset_preedit_text_if_set.patch: Fixed upstream</changelog>
  <changelog author="alynx.zhou@suse.com" date="1637323200">- Enable eglstream on Leap/SLE (jsc#SLE-19964).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1637668800">- Enable wayland-eglstream dependency on Leap/SLE (jsc#SLE-19964).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639396800">- Update to version 41.2:
  + Fix blank screen when unplugging docking station.
  + Prefer GBM over EGLStream where possible.
  + Fix unredirected Xwayland windows not getting updated.
  + Improve anti-aliasing of background corners.
  + Copy damage rectangles to secondary GPU
  + Improve Wacom tablet mapping.
  + Fixed crashes.
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Switch to git checkout of released tag via source service.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1639742400">- Add mutter-allow-disable-hardware-cursors.patch: Add a debug
  environment variable MUTTER_DEBUG_DISABLE_HW_CURSORS to disable
  hardware cursors and force using software cursors to avoid some
  driver or hardware bug (glgo#GNOME/mutter#2045,
  glgo#GNOME/mutter!2150).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639742401">- Rebase patches with quilt and renumber them.
- Add mutter-window-actor-Special-case-shaped-Java-windows.patch:
  window-actor: Special-case shaped Java windows.
  OpenJDK wrongly assumes that shaping a window implies no shadows.
  They got lucky until commit b975676c changed the fallback case,
  but now their compliance tests are broken. Make them happy again
  by special-casing shaped Java windows. Patch from fedora:
  https://src.fedoraproject.org/rpms/mutter/raw/rawhide/f/0001-window-actor-Special-case-shaped-Java-windows.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1641816000">- Add mutter-initialize-saved_rect_fullscreen.patch: Some
  applications that starts in fullscreen disappear when switching
  back to normal size mode, because mutter forget to initialize
  saved_rect_fullscreen which is used for unfullscreen, this patch
  fixes it (glgo#GNOME/mutter!2210, bsc#1185444).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1641902400">- Update to version 41.3:
  + Check keyboard serials for activation
  + Fix mixed up refresh rates in multi-monitor setups
  + Allow disabling HW cursors
  + Improve damage handling
  + Consider xrandr flags for advertised modes
  + Ensure constraints after client resize
  + window-group: Disable culling when rendinging clone to
    offscreen buffer
  + Fix workspace switch animation in default plugin
  + Fix unfullscreening of window that were mapped fullscreen
  + Fix DMA-BUF screencasts with unredirected fullscreen windows
  + Fix orientation changes on devices with 90
  + Fixed crashes
  + Plugged leaks
  + Misc. bug fixes and cleanups.
- Drop patches fixed upstream:
  + mutter-allow-disable-hardware-cursors.patch
  + mutter-initialize-saved_rect_fullscreen.patch
- Renumber patches yet again.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644321600">- Add 0002-Drop-CI-test-setup-that-needs-catchsegv.patch: Fix build
  with glibc 2.35 and newer.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644926400">- Update to version 41.4:
  + Fix DND between X11 and wayland clients.
  + Fix resetting idle time on lid open.
  + wayland/gtk: Only perform allowed titlebar gestures.
  + Place popups on the same monitor as the anchor rect.
  + Fix wrong resizes of some clients on focus changes.
  + Misc. bug fixes.
  + Fixed crashes.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647777600">- Update to version 41.5:
  + Fix X11 ? wayland drops ending up in the wrong wayland client.
  + Allow forcing EGLStream backend.
  + Updated translations.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1652443200">- Add mutter-crash-meta_context_terminate.patch: Fix SIGSEGV in
  meta_context_terminate (bsc#1199382 glgo#GNOME/mutter#2267).</changelog>
</package>
<package pkgid="7cfc6ed5ba49f812abf5f1ff6b333f267ab7570002afa3ca340d3f7978b668e3" name="mutter" arch="x86_64">
  <version epoch="0" ver="41.5" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1632225600">- Update to version 40.5:
  + Fix monitor screencast scanouts.
  + Fix middle-click emulation support on X11.
  + Fixed crashes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632312000">- Update to version 41.beta:
  + Manage idle monitors via MetaIdleManager.
  + Fix VKMS detection.
  + Fix swipe cancellation.
  + Fix mapping tablet to monitor.
  + Fix area screencasts when window is unredirected.
  + Don't require a newly attached buffer to apply state.
  + Close unused mode setting and rendering devices.
  + Only support super+scroll on wayland.
  + Implement the xdg-activation protocol.
  + Reduce input latency by computing max render time
    heuristically.
  + Apply dithering to dispatch time when needed.
  + x11: Compute monitor scale per output.
  + Shrink and optimize the rounded-background-clip shader.
  + remote-desktop: Handle non-responding selection owners .
  + Improve sysprof support.
  + Allow clients to delegate titlebar gestures to the compositor.
  + Fix upside-down Xshape surface with EGLstream.
  + Fix 'kms-modifiers' experimental setting.
  + Make default focus window on each workspace appear focused.
  + Plugged memory leaks.
  + Fixed crashes crash.
  + Misc. bug fixes and cleanups.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632312001">- Update to version 41.rc:
  + Add clutter_stage_paint_to_content().
  + Add meta_cursor_tracker_get_scale().
  + wayland: Make each wl_output correspond to one monitor.
  + Expose 'inactive-since' timestamp to uresourced.
  + Pass dirty rects to secondary GPU.
  + Support commiting preedit string on focus loss.
  + Improve auto-rotation support.
  + Add meta_window_actor_paint_to_content().
  + Fixed crashes.
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Add xvfb-run BuildRequires: new dependency for the test suite.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312002">- Add pkgconfig(xwayland) and drop xorg-x11-server-wayland
  BuildRequires: use standalone xwayland during build and runtime.
- Add explicit gnome-settings-daemon Requires and pass initfd=auto
  to meson now that we are using the new standalone xwayland.</changelog>
  <changelog author="mgorse@suse.com" date="1632312003">- Update to version 41.0:
  + Avoid race in wl_seat capabilities.
  + Expose option groups/entries to introspection.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1634731200">- Rebase mutter-SLE-bsc984738-grab-display.patch.</changelog>
  <changelog author="packaging@sp1rit.anonaddy.me" date="1634817600">- Added clutter-only_reset_preedit_text_if_set.patch
  + fixes "scrollback" issue of GtkTextView
    (see lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/WYSUDJFTZIEEJS3QBBBUNLD3XBXULABU/)</changelog>
  <changelog author="dimstar@opensuse.org" date="1635854400">- BuildRequire libxcvt when building against xorg-x11-server &gt; 21,
  unless when building for s390x: libxcvt was split out and lives
  in an own package now.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 41.1:
  + Fix monitor screencast scanouts
  + dma-buf: Use alpha-less pixel formats where appropriate
  + wayland: Allow clients to maximize windows regardless of
    constraints
  + Handle hotplug events without relevant changes more effectively
  + Improve error reporting when startup fails
  + dma-buf: Add support for ABGR and XBGR formats
  + Fix X11 middle button emulation setting
  + Include server-side shadows in window screenshots
  + Don't change workspaces of unmanaged windows
  + Reset idletime when unplugging the power cable
  + xwayland: Avoid unnecessary _NET_WM_STATE events
  + Fix videos in Firefox stuttering in overview
  + Don't use atomic mode setting for virtio_gpu driver
  + Improve on-screen keyboard on X11
  + Fix text glitches after size changes
  + Fix reporting output rotation to xwayland
  + wayland: Accept final preference of drop destination
  + Fix erratic scrolling in GTK apps
  + Fix tilt direction of pen/tablet inputs
  + Use b/w unicode for tablet mode OSD
  + Fix negative paint volume offscreen effect
  + Only add paint volumes of mapped actors to stage clip
  + Fix mapping tablet input to correct monitor
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Drop clutter-only_reset_preedit_text_if_set.patch: Fixed upstream</changelog>
  <changelog author="alynx.zhou@suse.com" date="1637323200">- Enable eglstream on Leap/SLE (jsc#SLE-19964).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1637668800">- Enable wayland-eglstream dependency on Leap/SLE (jsc#SLE-19964).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639396800">- Update to version 41.2:
  + Fix blank screen when unplugging docking station.
  + Prefer GBM over EGLStream where possible.
  + Fix unredirected Xwayland windows not getting updated.
  + Improve anti-aliasing of background corners.
  + Copy damage rectangles to secondary GPU
  + Improve Wacom tablet mapping.
  + Fixed crashes.
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Switch to git checkout of released tag via source service.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1639742400">- Add mutter-allow-disable-hardware-cursors.patch: Add a debug
  environment variable MUTTER_DEBUG_DISABLE_HW_CURSORS to disable
  hardware cursors and force using software cursors to avoid some
  driver or hardware bug (glgo#GNOME/mutter#2045,
  glgo#GNOME/mutter!2150).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639742401">- Rebase patches with quilt and renumber them.
- Add mutter-window-actor-Special-case-shaped-Java-windows.patch:
  window-actor: Special-case shaped Java windows.
  OpenJDK wrongly assumes that shaping a window implies no shadows.
  They got lucky until commit b975676c changed the fallback case,
  but now their compliance tests are broken. Make them happy again
  by special-casing shaped Java windows. Patch from fedora:
  https://src.fedoraproject.org/rpms/mutter/raw/rawhide/f/0001-window-actor-Special-case-shaped-Java-windows.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1641816000">- Add mutter-initialize-saved_rect_fullscreen.patch: Some
  applications that starts in fullscreen disappear when switching
  back to normal size mode, because mutter forget to initialize
  saved_rect_fullscreen which is used for unfullscreen, this patch
  fixes it (glgo#GNOME/mutter!2210, bsc#1185444).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1641902400">- Update to version 41.3:
  + Check keyboard serials for activation
  + Fix mixed up refresh rates in multi-monitor setups
  + Allow disabling HW cursors
  + Improve damage handling
  + Consider xrandr flags for advertised modes
  + Ensure constraints after client resize
  + window-group: Disable culling when rendinging clone to
    offscreen buffer
  + Fix workspace switch animation in default plugin
  + Fix unfullscreening of window that were mapped fullscreen
  + Fix DMA-BUF screencasts with unredirected fullscreen windows
  + Fix orientation changes on devices with 90
  + Fixed crashes
  + Plugged leaks
  + Misc. bug fixes and cleanups.
- Drop patches fixed upstream:
  + mutter-allow-disable-hardware-cursors.patch
  + mutter-initialize-saved_rect_fullscreen.patch
- Renumber patches yet again.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644321600">- Add 0002-Drop-CI-test-setup-that-needs-catchsegv.patch: Fix build
  with glibc 2.35 and newer.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644926400">- Update to version 41.4:
  + Fix DND between X11 and wayland clients.
  + Fix resetting idle time on lid open.
  + wayland/gtk: Only perform allowed titlebar gestures.
  + Place popups on the same monitor as the anchor rect.
  + Fix wrong resizes of some clients on focus changes.
  + Misc. bug fixes.
  + Fixed crashes.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647777600">- Update to version 41.5:
  + Fix X11 ? wayland drops ending up in the wrong wayland client.
  + Allow forcing EGLStream backend.
  + Updated translations.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1652443200">- Add mutter-crash-meta_context_terminate.patch: Fix SIGSEGV in
  meta_context_terminate (bsc#1199382 glgo#GNOME/mutter#2267).</changelog>
</package>
<package pkgid="bcc1144903fa1825fc48441e658ffc4b5bf1a15218d5ce3b24c2c74eb50a70c7" name="mutter-data" arch="aarch64">
  <version epoch="0" ver="3.34.6" rel="150200.3.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1575288000">- Update to version 3.34.1+66:
  * stack: Allow promoting transient windows to their parent's layer
  * shaped-texture: Do not invalidate content on set_cogl_texture()
  * cursor-tracker: Add API to keep the wayland pointer focus while hidden
  * device-manager-x11: Ignore events if no source device is set
  * clutter/cally-root: Use g_clear_signal_handler and fix a signal leak
  * wayland: Move "ownership" of the DnD selection source to the data device
  * wayland: Do not cancel data source on offer destruction
  * wayland: Avoid redundant cancel() call
  * wayland: Drop unused wl_signal structs</changelog>
  <changelog author="fcrozat@suse.com" date="1575288001">- Add mutter-disable-cvt-s390x.patch: do not search cvt on s390x,
  it doesn't exist there (bsc#1158128).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575979200">- Add explicit pkgconfig(fribidi) and pkgconfig(glib-2.0)
  BuildRequires: meson checks for it.</changelog>
  <changelog author="dead_mozay@opensuse.org" date="1576238400">- Update to version 3.34.2+0:
  * Update British English translation
  * backends/native: Fix double free of error
  * kms-impl/simple: Fix meta_set_fallback_feedback_idle
  * kms: Process impl idle callbacks before pre dispatch flush</changelog>
  <changelog author="dimstar@opensuse.org" date="1577188800">- Update to version 3.34.2+1:
  * screen-cast: Fix window recording on HiDPI</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1577880000">- Update to version 3.34.2+2:
  * clutter/stage: Fix picking of rectangles with negative
    positions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578225600">- Update to version 3.34.3+0:
  * Bump version to 3.34.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581854400">- Update to version 3.34.4:
  + Handle mode set race conditions more gracefully.
  + Fix fallback to GLES2.
  + Fix interoperation with wl_data_device_manager v1.
  + Fix visual glitches with offscreen effects applied.
  + Favor text over images in clipboard manager.
  + Fixes crashes.
  + Plugged memory leaks.
  + Misc. bug fixes.
  + Updated translations.</changelog>
  <changelog author="sndirsch@suse.com" date="1582545600">- Add mutter-fix-mesa20.patch: fixes build against Mesa 20
  (boo#1164688).</changelog>
  <changelog author="dimstar@opensuse.org" date="1582632000">- Rework mutter-fix-mesa20.patch: base it on mutter upstream commit
  a444a4c.</changelog>
  <changelog author="alarrosa@suse.com" date="1583150400">- Build with pipewire 0.3.0:
  * Add 0001-Update-to-PipeWire-0.3-API.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1584100800">- Add mutter-wayland-fix-keyboard-move-resize-window.patch:
  move some common code out of X11 only code blocks to fix it
  (bsc#1159976, glgo#GNOME/mutter!997).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1585742400">- Update to version 3.34.5:
  + Fix visibility of initially hidden windows.
  + Fix hardware cursor on GPU hotplug.
  + Fix pasting images from wayland.
  + Fixed crashes.
  + Updated translations.
- Switch to using explicit released tag in _service.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Enable SLE patches on Leap (jsc#SLE-11897).</changelog>
  <changelog author="mgorse@suse.com" date="1589371200">- Update to version 3.34.6:
  + Fix various clipboard issues.
  + Fix locate-pointer feature interfering with keybindings.
  + Fix overview key on X11 when using multiple keyboard layouts.
  + Preserve keyboard state on VT switch.
  + Fixed crashes.
  + Plugged memory leaks.
  + Misc. bug fixes and cleanups.</changelog>
  <changelog author="fcrozat@suse.com" date="1597924800">- Add mutter-meson_options-Use-libGLESv2.so.2-for-COGL_DRIVER-gle.patch:
  don't use libGLESv2.so but libGLESv2.so.2 for COGL driver
  (boo#1175559 glgo#GNOME/mutter!1282).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1598011200">- Added mutter-fix-wine-copy-and-paste.patch: sometimes copy and
  paste will fail in wine applications, this upstream patch fixed
  it (boo#1175532, glgo#GNOME/mutter!1369).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628251200">- Added 0001-stage-x11-Check-that-message-is-WM_PROTOCOLS-before-.patch:
  ClientMessage may have different types such as touch
  synchronization, but mutter just assume it as WM_PROTOCOLS, which
  will destroy all actors include stage wrongly, this patch checks
  type before using it. (bsc#1188759)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1647000000">- Added 0001-Revert-x11-Unminimize-windows-with-initial-IconicSta.patch:
  This fixes xterm -iconic support, by reverting a workaround for
  wrongly behaved wine games. (bsc#1193190, glgo#GNOME/mutter#2043)</changelog>
</package>
<package pkgid="7d18d42fdc3ee94fc94e25b0d9a92c0553ff7cc03242463a1f65bbcdd227ca8b" name="mutter-data" arch="ppc64le">
  <version epoch="0" ver="3.34.6" rel="150200.3.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1575288000">- Update to version 3.34.1+66:
  * stack: Allow promoting transient windows to their parent's layer
  * shaped-texture: Do not invalidate content on set_cogl_texture()
  * cursor-tracker: Add API to keep the wayland pointer focus while hidden
  * device-manager-x11: Ignore events if no source device is set
  * clutter/cally-root: Use g_clear_signal_handler and fix a signal leak
  * wayland: Move "ownership" of the DnD selection source to the data device
  * wayland: Do not cancel data source on offer destruction
  * wayland: Avoid redundant cancel() call
  * wayland: Drop unused wl_signal structs</changelog>
  <changelog author="fcrozat@suse.com" date="1575288001">- Add mutter-disable-cvt-s390x.patch: do not search cvt on s390x,
  it doesn't exist there (bsc#1158128).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575979200">- Add explicit pkgconfig(fribidi) and pkgconfig(glib-2.0)
  BuildRequires: meson checks for it.</changelog>
  <changelog author="dead_mozay@opensuse.org" date="1576238400">- Update to version 3.34.2+0:
  * Update British English translation
  * backends/native: Fix double free of error
  * kms-impl/simple: Fix meta_set_fallback_feedback_idle
  * kms: Process impl idle callbacks before pre dispatch flush</changelog>
  <changelog author="dimstar@opensuse.org" date="1577188800">- Update to version 3.34.2+1:
  * screen-cast: Fix window recording on HiDPI</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1577880000">- Update to version 3.34.2+2:
  * clutter/stage: Fix picking of rectangles with negative
    positions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578225600">- Update to version 3.34.3+0:
  * Bump version to 3.34.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581854400">- Update to version 3.34.4:
  + Handle mode set race conditions more gracefully.
  + Fix fallback to GLES2.
  + Fix interoperation with wl_data_device_manager v1.
  + Fix visual glitches with offscreen effects applied.
  + Favor text over images in clipboard manager.
  + Fixes crashes.
  + Plugged memory leaks.
  + Misc. bug fixes.
  + Updated translations.</changelog>
  <changelog author="sndirsch@suse.com" date="1582545600">- Add mutter-fix-mesa20.patch: fixes build against Mesa 20
  (boo#1164688).</changelog>
  <changelog author="dimstar@opensuse.org" date="1582632000">- Rework mutter-fix-mesa20.patch: base it on mutter upstream commit
  a444a4c.</changelog>
  <changelog author="alarrosa@suse.com" date="1583150400">- Build with pipewire 0.3.0:
  * Add 0001-Update-to-PipeWire-0.3-API.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1584100800">- Add mutter-wayland-fix-keyboard-move-resize-window.patch:
  move some common code out of X11 only code blocks to fix it
  (bsc#1159976, glgo#GNOME/mutter!997).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1585742400">- Update to version 3.34.5:
  + Fix visibility of initially hidden windows.
  + Fix hardware cursor on GPU hotplug.
  + Fix pasting images from wayland.
  + Fixed crashes.
  + Updated translations.
- Switch to using explicit released tag in _service.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Enable SLE patches on Leap (jsc#SLE-11897).</changelog>
  <changelog author="mgorse@suse.com" date="1589371200">- Update to version 3.34.6:
  + Fix various clipboard issues.
  + Fix locate-pointer feature interfering with keybindings.
  + Fix overview key on X11 when using multiple keyboard layouts.
  + Preserve keyboard state on VT switch.
  + Fixed crashes.
  + Plugged memory leaks.
  + Misc. bug fixes and cleanups.</changelog>
  <changelog author="fcrozat@suse.com" date="1597924800">- Add mutter-meson_options-Use-libGLESv2.so.2-for-COGL_DRIVER-gle.patch:
  don't use libGLESv2.so but libGLESv2.so.2 for COGL driver
  (boo#1175559 glgo#GNOME/mutter!1282).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1598011200">- Added mutter-fix-wine-copy-and-paste.patch: sometimes copy and
  paste will fail in wine applications, this upstream patch fixed
  it (boo#1175532, glgo#GNOME/mutter!1369).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628251200">- Added 0001-stage-x11-Check-that-message-is-WM_PROTOCOLS-before-.patch:
  ClientMessage may have different types such as touch
  synchronization, but mutter just assume it as WM_PROTOCOLS, which
  will destroy all actors include stage wrongly, this patch checks
  type before using it. (bsc#1188759)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1647000000">- Added 0001-Revert-x11-Unminimize-windows-with-initial-IconicSta.patch:
  This fixes xterm -iconic support, by reverting a workaround for
  wrongly behaved wine games. (bsc#1193190, glgo#GNOME/mutter#2043)</changelog>
</package>
<package pkgid="dc650e2b470de525ff4a58a3f815e28b942a5bcb5b1e28e27c120bb817c2e6b6" name="mutter-data" arch="s390x">
  <version epoch="0" ver="3.34.6" rel="150200.3.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1575288000">- Update to version 3.34.1+66:
  * stack: Allow promoting transient windows to their parent's layer
  * shaped-texture: Do not invalidate content on set_cogl_texture()
  * cursor-tracker: Add API to keep the wayland pointer focus while hidden
  * device-manager-x11: Ignore events if no source device is set
  * clutter/cally-root: Use g_clear_signal_handler and fix a signal leak
  * wayland: Move "ownership" of the DnD selection source to the data device
  * wayland: Do not cancel data source on offer destruction
  * wayland: Avoid redundant cancel() call
  * wayland: Drop unused wl_signal structs</changelog>
  <changelog author="fcrozat@suse.com" date="1575288001">- Add mutter-disable-cvt-s390x.patch: do not search cvt on s390x,
  it doesn't exist there (bsc#1158128).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575979200">- Add explicit pkgconfig(fribidi) and pkgconfig(glib-2.0)
  BuildRequires: meson checks for it.</changelog>
  <changelog author="dead_mozay@opensuse.org" date="1576238400">- Update to version 3.34.2+0:
  * Update British English translation
  * backends/native: Fix double free of error
  * kms-impl/simple: Fix meta_set_fallback_feedback_idle
  * kms: Process impl idle callbacks before pre dispatch flush</changelog>
  <changelog author="dimstar@opensuse.org" date="1577188800">- Update to version 3.34.2+1:
  * screen-cast: Fix window recording on HiDPI</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1577880000">- Update to version 3.34.2+2:
  * clutter/stage: Fix picking of rectangles with negative
    positions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578225600">- Update to version 3.34.3+0:
  * Bump version to 3.34.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581854400">- Update to version 3.34.4:
  + Handle mode set race conditions more gracefully.
  + Fix fallback to GLES2.
  + Fix interoperation with wl_data_device_manager v1.
  + Fix visual glitches with offscreen effects applied.
  + Favor text over images in clipboard manager.
  + Fixes crashes.
  + Plugged memory leaks.
  + Misc. bug fixes.
  + Updated translations.</changelog>
  <changelog author="sndirsch@suse.com" date="1582545600">- Add mutter-fix-mesa20.patch: fixes build against Mesa 20
  (boo#1164688).</changelog>
  <changelog author="dimstar@opensuse.org" date="1582632000">- Rework mutter-fix-mesa20.patch: base it on mutter upstream commit
  a444a4c.</changelog>
  <changelog author="alarrosa@suse.com" date="1583150400">- Build with pipewire 0.3.0:
  * Add 0001-Update-to-PipeWire-0.3-API.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1584100800">- Add mutter-wayland-fix-keyboard-move-resize-window.patch:
  move some common code out of X11 only code blocks to fix it
  (bsc#1159976, glgo#GNOME/mutter!997).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1585742400">- Update to version 3.34.5:
  + Fix visibility of initially hidden windows.
  + Fix hardware cursor on GPU hotplug.
  + Fix pasting images from wayland.
  + Fixed crashes.
  + Updated translations.
- Switch to using explicit released tag in _service.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Enable SLE patches on Leap (jsc#SLE-11897).</changelog>
  <changelog author="mgorse@suse.com" date="1589371200">- Update to version 3.34.6:
  + Fix various clipboard issues.
  + Fix locate-pointer feature interfering with keybindings.
  + Fix overview key on X11 when using multiple keyboard layouts.
  + Preserve keyboard state on VT switch.
  + Fixed crashes.
  + Plugged memory leaks.
  + Misc. bug fixes and cleanups.</changelog>
  <changelog author="fcrozat@suse.com" date="1597924800">- Add mutter-meson_options-Use-libGLESv2.so.2-for-COGL_DRIVER-gle.patch:
  don't use libGLESv2.so but libGLESv2.so.2 for COGL driver
  (boo#1175559 glgo#GNOME/mutter!1282).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1598011200">- Added mutter-fix-wine-copy-and-paste.patch: sometimes copy and
  paste will fail in wine applications, this upstream patch fixed
  it (boo#1175532, glgo#GNOME/mutter!1369).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628251200">- Added 0001-stage-x11-Check-that-message-is-WM_PROTOCOLS-before-.patch:
  ClientMessage may have different types such as touch
  synchronization, but mutter just assume it as WM_PROTOCOLS, which
  will destroy all actors include stage wrongly, this patch checks
  type before using it. (bsc#1188759)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1647000000">- Added 0001-Revert-x11-Unminimize-windows-with-initial-IconicSta.patch:
  This fixes xterm -iconic support, by reverting a workaround for
  wrongly behaved wine games. (bsc#1193190, glgo#GNOME/mutter#2043)</changelog>
</package>
<package pkgid="a6f1e085af63b63e4d1a271cc817f4868033fdddf1dcae97392c09b09dcd9db7" name="mutter-data" arch="x86_64">
  <version epoch="0" ver="3.34.6" rel="150200.3.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1575288000">- Update to version 3.34.1+66:
  * stack: Allow promoting transient windows to their parent's layer
  * shaped-texture: Do not invalidate content on set_cogl_texture()
  * cursor-tracker: Add API to keep the wayland pointer focus while hidden
  * device-manager-x11: Ignore events if no source device is set
  * clutter/cally-root: Use g_clear_signal_handler and fix a signal leak
  * wayland: Move "ownership" of the DnD selection source to the data device
  * wayland: Do not cancel data source on offer destruction
  * wayland: Avoid redundant cancel() call
  * wayland: Drop unused wl_signal structs</changelog>
  <changelog author="fcrozat@suse.com" date="1575288001">- Add mutter-disable-cvt-s390x.patch: do not search cvt on s390x,
  it doesn't exist there (bsc#1158128).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575979200">- Add explicit pkgconfig(fribidi) and pkgconfig(glib-2.0)
  BuildRequires: meson checks for it.</changelog>
  <changelog author="dead_mozay@opensuse.org" date="1576238400">- Update to version 3.34.2+0:
  * Update British English translation
  * backends/native: Fix double free of error
  * kms-impl/simple: Fix meta_set_fallback_feedback_idle
  * kms: Process impl idle callbacks before pre dispatch flush</changelog>
  <changelog author="dimstar@opensuse.org" date="1577188800">- Update to version 3.34.2+1:
  * screen-cast: Fix window recording on HiDPI</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1577880000">- Update to version 3.34.2+2:
  * clutter/stage: Fix picking of rectangles with negative
    positions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578225600">- Update to version 3.34.3+0:
  * Bump version to 3.34.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1579953600">- No longer recommend -lang: supplements are in use</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581854400">- Update to version 3.34.4:
  + Handle mode set race conditions more gracefully.
  + Fix fallback to GLES2.
  + Fix interoperation with wl_data_device_manager v1.
  + Fix visual glitches with offscreen effects applied.
  + Favor text over images in clipboard manager.
  + Fixes crashes.
  + Plugged memory leaks.
  + Misc. bug fixes.
  + Updated translations.</changelog>
  <changelog author="sndirsch@suse.com" date="1582545600">- Add mutter-fix-mesa20.patch: fixes build against Mesa 20
  (boo#1164688).</changelog>
  <changelog author="dimstar@opensuse.org" date="1582632000">- Rework mutter-fix-mesa20.patch: base it on mutter upstream commit
  a444a4c.</changelog>
  <changelog author="alarrosa@suse.com" date="1583150400">- Build with pipewire 0.3.0:
  * Add 0001-Update-to-PipeWire-0.3-API.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1584100800">- Add mutter-wayland-fix-keyboard-move-resize-window.patch:
  move some common code out of X11 only code blocks to fix it
  (bsc#1159976, glgo#GNOME/mutter!997).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1585742400">- Update to version 3.34.5:
  + Fix visibility of initially hidden windows.
  + Fix hardware cursor on GPU hotplug.
  + Fix pasting images from wayland.
  + Fixed crashes.
  + Updated translations.
- Switch to using explicit released tag in _service.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Enable SLE patches on Leap (jsc#SLE-11897).</changelog>
  <changelog author="mgorse@suse.com" date="1589371200">- Update to version 3.34.6:
  + Fix various clipboard issues.
  + Fix locate-pointer feature interfering with keybindings.
  + Fix overview key on X11 when using multiple keyboard layouts.
  + Preserve keyboard state on VT switch.
  + Fixed crashes.
  + Plugged memory leaks.
  + Misc. bug fixes and cleanups.</changelog>
  <changelog author="fcrozat@suse.com" date="1597924800">- Add mutter-meson_options-Use-libGLESv2.so.2-for-COGL_DRIVER-gle.patch:
  don't use libGLESv2.so but libGLESv2.so.2 for COGL driver
  (boo#1175559 glgo#GNOME/mutter!1282).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1598011200">- Added mutter-fix-wine-copy-and-paste.patch: sometimes copy and
  paste will fail in wine applications, this upstream patch fixed
  it (boo#1175532, glgo#GNOME/mutter!1369).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1628251200">- Added 0001-stage-x11-Check-that-message-is-WM_PROTOCOLS-before-.patch:
  ClientMessage may have different types such as touch
  synchronization, but mutter just assume it as WM_PROTOCOLS, which
  will destroy all actors include stage wrongly, this patch checks
  type before using it. (bsc#1188759)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1647000000">- Added 0001-Revert-x11-Unminimize-windows-with-initial-IconicSta.patch:
  This fixes xterm -iconic support, by reverting a workaround for
  wrongly behaved wine games. (bsc#1193190, glgo#GNOME/mutter#2043)</changelog>
</package>
<package pkgid="2f9b99442fa631bed6ae4bf65ca4068c44a2f326f21cfdd708f34d7e6f1a2878" name="mutter-devel" arch="aarch64">
  <version epoch="0" ver="41.5" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1632225600">- Update to version 40.5:
  + Fix monitor screencast scanouts.
  + Fix middle-click emulation support on X11.
  + Fixed crashes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632312000">- Update to version 41.beta:
  + Manage idle monitors via MetaIdleManager.
  + Fix VKMS detection.
  + Fix swipe cancellation.
  + Fix mapping tablet to monitor.
  + Fix area screencasts when window is unredirected.
  + Don't require a newly attached buffer to apply state.
  + Close unused mode setting and rendering devices.
  + Only support super+scroll on wayland.
  + Implement the xdg-activation protocol.
  + Reduce input latency by computing max render time
    heuristically.
  + Apply dithering to dispatch time when needed.
  + x11: Compute monitor scale per output.
  + Shrink and optimize the rounded-background-clip shader.
  + remote-desktop: Handle non-responding selection owners .
  + Improve sysprof support.
  + Allow clients to delegate titlebar gestures to the compositor.
  + Fix upside-down Xshape surface with EGLstream.
  + Fix 'kms-modifiers' experimental setting.
  + Make default focus window on each workspace appear focused.
  + Plugged memory leaks.
  + Fixed crashes crash.
  + Misc. bug fixes and cleanups.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632312001">- Update to version 41.rc:
  + Add clutter_stage_paint_to_content().
  + Add meta_cursor_tracker_get_scale().
  + wayland: Make each wl_output correspond to one monitor.
  + Expose 'inactive-since' timestamp to uresourced.
  + Pass dirty rects to secondary GPU.
  + Support commiting preedit string on focus loss.
  + Improve auto-rotation support.
  + Add meta_window_actor_paint_to_content().
  + Fixed crashes.
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Add xvfb-run BuildRequires: new dependency for the test suite.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312002">- Add pkgconfig(xwayland) and drop xorg-x11-server-wayland
  BuildRequires: use standalone xwayland during build and runtime.
- Add explicit gnome-settings-daemon Requires and pass initfd=auto
  to meson now that we are using the new standalone xwayland.</changelog>
  <changelog author="mgorse@suse.com" date="1632312003">- Update to version 41.0:
  + Avoid race in wl_seat capabilities.
  + Expose option groups/entries to introspection.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1634731200">- Rebase mutter-SLE-bsc984738-grab-display.patch.</changelog>
  <changelog author="packaging@sp1rit.anonaddy.me" date="1634817600">- Added clutter-only_reset_preedit_text_if_set.patch
  + fixes "scrollback" issue of GtkTextView
    (see lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/WYSUDJFTZIEEJS3QBBBUNLD3XBXULABU/)</changelog>
  <changelog author="dimstar@opensuse.org" date="1635854400">- BuildRequire libxcvt when building against xorg-x11-server &gt; 21,
  unless when building for s390x: libxcvt was split out and lives
  in an own package now.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 41.1:
  + Fix monitor screencast scanouts
  + dma-buf: Use alpha-less pixel formats where appropriate
  + wayland: Allow clients to maximize windows regardless of
    constraints
  + Handle hotplug events without relevant changes more effectively
  + Improve error reporting when startup fails
  + dma-buf: Add support for ABGR and XBGR formats
  + Fix X11 middle button emulation setting
  + Include server-side shadows in window screenshots
  + Don't change workspaces of unmanaged windows
  + Reset idletime when unplugging the power cable
  + xwayland: Avoid unnecessary _NET_WM_STATE events
  + Fix videos in Firefox stuttering in overview
  + Don't use atomic mode setting for virtio_gpu driver
  + Improve on-screen keyboard on X11
  + Fix text glitches after size changes
  + Fix reporting output rotation to xwayland
  + wayland: Accept final preference of drop destination
  + Fix erratic scrolling in GTK apps
  + Fix tilt direction of pen/tablet inputs
  + Use b/w unicode for tablet mode OSD
  + Fix negative paint volume offscreen effect
  + Only add paint volumes of mapped actors to stage clip
  + Fix mapping tablet input to correct monitor
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Drop clutter-only_reset_preedit_text_if_set.patch: Fixed upstream</changelog>
  <changelog author="alynx.zhou@suse.com" date="1637323200">- Enable eglstream on Leap/SLE (jsc#SLE-19964).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1637668800">- Enable wayland-eglstream dependency on Leap/SLE (jsc#SLE-19964).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639396800">- Update to version 41.2:
  + Fix blank screen when unplugging docking station.
  + Prefer GBM over EGLStream where possible.
  + Fix unredirected Xwayland windows not getting updated.
  + Improve anti-aliasing of background corners.
  + Copy damage rectangles to secondary GPU
  + Improve Wacom tablet mapping.
  + Fixed crashes.
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Switch to git checkout of released tag via source service.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1639742400">- Add mutter-allow-disable-hardware-cursors.patch: Add a debug
  environment variable MUTTER_DEBUG_DISABLE_HW_CURSORS to disable
  hardware cursors and force using software cursors to avoid some
  driver or hardware bug (glgo#GNOME/mutter#2045,
  glgo#GNOME/mutter!2150).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639742401">- Rebase patches with quilt and renumber them.
- Add mutter-window-actor-Special-case-shaped-Java-windows.patch:
  window-actor: Special-case shaped Java windows.
  OpenJDK wrongly assumes that shaping a window implies no shadows.
  They got lucky until commit b975676c changed the fallback case,
  but now their compliance tests are broken. Make them happy again
  by special-casing shaped Java windows. Patch from fedora:
  https://src.fedoraproject.org/rpms/mutter/raw/rawhide/f/0001-window-actor-Special-case-shaped-Java-windows.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1641816000">- Add mutter-initialize-saved_rect_fullscreen.patch: Some
  applications that starts in fullscreen disappear when switching
  back to normal size mode, because mutter forget to initialize
  saved_rect_fullscreen which is used for unfullscreen, this patch
  fixes it (glgo#GNOME/mutter!2210, bsc#1185444).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1641902400">- Update to version 41.3:
  + Check keyboard serials for activation
  + Fix mixed up refresh rates in multi-monitor setups
  + Allow disabling HW cursors
  + Improve damage handling
  + Consider xrandr flags for advertised modes
  + Ensure constraints after client resize
  + window-group: Disable culling when rendinging clone to
    offscreen buffer
  + Fix workspace switch animation in default plugin
  + Fix unfullscreening of window that were mapped fullscreen
  + Fix DMA-BUF screencasts with unredirected fullscreen windows
  + Fix orientation changes on devices with 90
  + Fixed crashes
  + Plugged leaks
  + Misc. bug fixes and cleanups.
- Drop patches fixed upstream:
  + mutter-allow-disable-hardware-cursors.patch
  + mutter-initialize-saved_rect_fullscreen.patch
- Renumber patches yet again.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644321600">- Add 0002-Drop-CI-test-setup-that-needs-catchsegv.patch: Fix build
  with glibc 2.35 and newer.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644926400">- Update to version 41.4:
  + Fix DND between X11 and wayland clients.
  + Fix resetting idle time on lid open.
  + wayland/gtk: Only perform allowed titlebar gestures.
  + Place popups on the same monitor as the anchor rect.
  + Fix wrong resizes of some clients on focus changes.
  + Misc. bug fixes.
  + Fixed crashes.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647777600">- Update to version 41.5:
  + Fix X11 ? wayland drops ending up in the wrong wayland client.
  + Allow forcing EGLStream backend.
  + Updated translations.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1652443200">- Add mutter-crash-meta_context_terminate.patch: Fix SIGSEGV in
  meta_context_terminate (bsc#1199382 glgo#GNOME/mutter#2267).</changelog>
</package>
<package pkgid="62bf372d294070ae09c8f2bd6fb4f6bf2811917bfe72aae6e88fd9140283b038" name="mutter-devel" arch="ppc64le">
  <version epoch="0" ver="41.5" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1632225600">- Update to version 40.5:
  + Fix monitor screencast scanouts.
  + Fix middle-click emulation support on X11.
  + Fixed crashes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632312000">- Update to version 41.beta:
  + Manage idle monitors via MetaIdleManager.
  + Fix VKMS detection.
  + Fix swipe cancellation.
  + Fix mapping tablet to monitor.
  + Fix area screencasts when window is unredirected.
  + Don't require a newly attached buffer to apply state.
  + Close unused mode setting and rendering devices.
  + Only support super+scroll on wayland.
  + Implement the xdg-activation protocol.
  + Reduce input latency by computing max render time
    heuristically.
  + Apply dithering to dispatch time when needed.
  + x11: Compute monitor scale per output.
  + Shrink and optimize the rounded-background-clip shader.
  + remote-desktop: Handle non-responding selection owners .
  + Improve sysprof support.
  + Allow clients to delegate titlebar gestures to the compositor.
  + Fix upside-down Xshape surface with EGLstream.
  + Fix 'kms-modifiers' experimental setting.
  + Make default focus window on each workspace appear focused.
  + Plugged memory leaks.
  + Fixed crashes crash.
  + Misc. bug fixes and cleanups.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632312001">- Update to version 41.rc:
  + Add clutter_stage_paint_to_content().
  + Add meta_cursor_tracker_get_scale().
  + wayland: Make each wl_output correspond to one monitor.
  + Expose 'inactive-since' timestamp to uresourced.
  + Pass dirty rects to secondary GPU.
  + Support commiting preedit string on focus loss.
  + Improve auto-rotation support.
  + Add meta_window_actor_paint_to_content().
  + Fixed crashes.
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Add xvfb-run BuildRequires: new dependency for the test suite.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312002">- Add pkgconfig(xwayland) and drop xorg-x11-server-wayland
  BuildRequires: use standalone xwayland during build and runtime.
- Add explicit gnome-settings-daemon Requires and pass initfd=auto
  to meson now that we are using the new standalone xwayland.</changelog>
  <changelog author="mgorse@suse.com" date="1632312003">- Update to version 41.0:
  + Avoid race in wl_seat capabilities.
  + Expose option groups/entries to introspection.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1634731200">- Rebase mutter-SLE-bsc984738-grab-display.patch.</changelog>
  <changelog author="packaging@sp1rit.anonaddy.me" date="1634817600">- Added clutter-only_reset_preedit_text_if_set.patch
  + fixes "scrollback" issue of GtkTextView
    (see lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/WYSUDJFTZIEEJS3QBBBUNLD3XBXULABU/)</changelog>
  <changelog author="dimstar@opensuse.org" date="1635854400">- BuildRequire libxcvt when building against xorg-x11-server &gt; 21,
  unless when building for s390x: libxcvt was split out and lives
  in an own package now.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 41.1:
  + Fix monitor screencast scanouts
  + dma-buf: Use alpha-less pixel formats where appropriate
  + wayland: Allow clients to maximize windows regardless of
    constraints
  + Handle hotplug events without relevant changes more effectively
  + Improve error reporting when startup fails
  + dma-buf: Add support for ABGR and XBGR formats
  + Fix X11 middle button emulation setting
  + Include server-side shadows in window screenshots
  + Don't change workspaces of unmanaged windows
  + Reset idletime when unplugging the power cable
  + xwayland: Avoid unnecessary _NET_WM_STATE events
  + Fix videos in Firefox stuttering in overview
  + Don't use atomic mode setting for virtio_gpu driver
  + Improve on-screen keyboard on X11
  + Fix text glitches after size changes
  + Fix reporting output rotation to xwayland
  + wayland: Accept final preference of drop destination
  + Fix erratic scrolling in GTK apps
  + Fix tilt direction of pen/tablet inputs
  + Use b/w unicode for tablet mode OSD
  + Fix negative paint volume offscreen effect
  + Only add paint volumes of mapped actors to stage clip
  + Fix mapping tablet input to correct monitor
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Drop clutter-only_reset_preedit_text_if_set.patch: Fixed upstream</changelog>
  <changelog author="alynx.zhou@suse.com" date="1637323200">- Enable eglstream on Leap/SLE (jsc#SLE-19964).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1637668800">- Enable wayland-eglstream dependency on Leap/SLE (jsc#SLE-19964).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639396800">- Update to version 41.2:
  + Fix blank screen when unplugging docking station.
  + Prefer GBM over EGLStream where possible.
  + Fix unredirected Xwayland windows not getting updated.
  + Improve anti-aliasing of background corners.
  + Copy damage rectangles to secondary GPU
  + Improve Wacom tablet mapping.
  + Fixed crashes.
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Switch to git checkout of released tag via source service.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1639742400">- Add mutter-allow-disable-hardware-cursors.patch: Add a debug
  environment variable MUTTER_DEBUG_DISABLE_HW_CURSORS to disable
  hardware cursors and force using software cursors to avoid some
  driver or hardware bug (glgo#GNOME/mutter#2045,
  glgo#GNOME/mutter!2150).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639742401">- Rebase patches with quilt and renumber them.
- Add mutter-window-actor-Special-case-shaped-Java-windows.patch:
  window-actor: Special-case shaped Java windows.
  OpenJDK wrongly assumes that shaping a window implies no shadows.
  They got lucky until commit b975676c changed the fallback case,
  but now their compliance tests are broken. Make them happy again
  by special-casing shaped Java windows. Patch from fedora:
  https://src.fedoraproject.org/rpms/mutter/raw/rawhide/f/0001-window-actor-Special-case-shaped-Java-windows.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1641816000">- Add mutter-initialize-saved_rect_fullscreen.patch: Some
  applications that starts in fullscreen disappear when switching
  back to normal size mode, because mutter forget to initialize
  saved_rect_fullscreen which is used for unfullscreen, this patch
  fixes it (glgo#GNOME/mutter!2210, bsc#1185444).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1641902400">- Update to version 41.3:
  + Check keyboard serials for activation
  + Fix mixed up refresh rates in multi-monitor setups
  + Allow disabling HW cursors
  + Improve damage handling
  + Consider xrandr flags for advertised modes
  + Ensure constraints after client resize
  + window-group: Disable culling when rendinging clone to
    offscreen buffer
  + Fix workspace switch animation in default plugin
  + Fix unfullscreening of window that were mapped fullscreen
  + Fix DMA-BUF screencasts with unredirected fullscreen windows
  + Fix orientation changes on devices with 90
  + Fixed crashes
  + Plugged leaks
  + Misc. bug fixes and cleanups.
- Drop patches fixed upstream:
  + mutter-allow-disable-hardware-cursors.patch
  + mutter-initialize-saved_rect_fullscreen.patch
- Renumber patches yet again.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644321600">- Add 0002-Drop-CI-test-setup-that-needs-catchsegv.patch: Fix build
  with glibc 2.35 and newer.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644926400">- Update to version 41.4:
  + Fix DND between X11 and wayland clients.
  + Fix resetting idle time on lid open.
  + wayland/gtk: Only perform allowed titlebar gestures.
  + Place popups on the same monitor as the anchor rect.
  + Fix wrong resizes of some clients on focus changes.
  + Misc. bug fixes.
  + Fixed crashes.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647777600">- Update to version 41.5:
  + Fix X11 ? wayland drops ending up in the wrong wayland client.
  + Allow forcing EGLStream backend.
  + Updated translations.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1652443200">- Add mutter-crash-meta_context_terminate.patch: Fix SIGSEGV in
  meta_context_terminate (bsc#1199382 glgo#GNOME/mutter#2267).</changelog>
</package>
<package pkgid="1befcec9f19db455b970a45f8f4fc28990b57a0735846fba18a19f3255ddc7fa" name="mutter-devel" arch="s390x">
  <version epoch="0" ver="41.5" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1632225600">- Update to version 40.5:
  + Fix monitor screencast scanouts.
  + Fix middle-click emulation support on X11.
  + Fixed crashes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632312000">- Update to version 41.beta:
  + Manage idle monitors via MetaIdleManager.
  + Fix VKMS detection.
  + Fix swipe cancellation.
  + Fix mapping tablet to monitor.
  + Fix area screencasts when window is unredirected.
  + Don't require a newly attached buffer to apply state.
  + Close unused mode setting and rendering devices.
  + Only support super+scroll on wayland.
  + Implement the xdg-activation protocol.
  + Reduce input latency by computing max render time
    heuristically.
  + Apply dithering to dispatch time when needed.
  + x11: Compute monitor scale per output.
  + Shrink and optimize the rounded-background-clip shader.
  + remote-desktop: Handle non-responding selection owners .
  + Improve sysprof support.
  + Allow clients to delegate titlebar gestures to the compositor.
  + Fix upside-down Xshape surface with EGLstream.
  + Fix 'kms-modifiers' experimental setting.
  + Make default focus window on each workspace appear focused.
  + Plugged memory leaks.
  + Fixed crashes crash.
  + Misc. bug fixes and cleanups.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632312001">- Update to version 41.rc:
  + Add clutter_stage_paint_to_content().
  + Add meta_cursor_tracker_get_scale().
  + wayland: Make each wl_output correspond to one monitor.
  + Expose 'inactive-since' timestamp to uresourced.
  + Pass dirty rects to secondary GPU.
  + Support commiting preedit string on focus loss.
  + Improve auto-rotation support.
  + Add meta_window_actor_paint_to_content().
  + Fixed crashes.
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Add xvfb-run BuildRequires: new dependency for the test suite.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312002">- Add pkgconfig(xwayland) and drop xorg-x11-server-wayland
  BuildRequires: use standalone xwayland during build and runtime.
- Add explicit gnome-settings-daemon Requires and pass initfd=auto
  to meson now that we are using the new standalone xwayland.</changelog>
  <changelog author="mgorse@suse.com" date="1632312003">- Update to version 41.0:
  + Avoid race in wl_seat capabilities.
  + Expose option groups/entries to introspection.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1634731200">- Rebase mutter-SLE-bsc984738-grab-display.patch.</changelog>
  <changelog author="packaging@sp1rit.anonaddy.me" date="1634817600">- Added clutter-only_reset_preedit_text_if_set.patch
  + fixes "scrollback" issue of GtkTextView
    (see lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/WYSUDJFTZIEEJS3QBBBUNLD3XBXULABU/)</changelog>
  <changelog author="dimstar@opensuse.org" date="1635854400">- BuildRequire libxcvt when building against xorg-x11-server &gt; 21,
  unless when building for s390x: libxcvt was split out and lives
  in an own package now.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 41.1:
  + Fix monitor screencast scanouts
  + dma-buf: Use alpha-less pixel formats where appropriate
  + wayland: Allow clients to maximize windows regardless of
    constraints
  + Handle hotplug events without relevant changes more effectively
  + Improve error reporting when startup fails
  + dma-buf: Add support for ABGR and XBGR formats
  + Fix X11 middle button emulation setting
  + Include server-side shadows in window screenshots
  + Don't change workspaces of unmanaged windows
  + Reset idletime when unplugging the power cable
  + xwayland: Avoid unnecessary _NET_WM_STATE events
  + Fix videos in Firefox stuttering in overview
  + Don't use atomic mode setting for virtio_gpu driver
  + Improve on-screen keyboard on X11
  + Fix text glitches after size changes
  + Fix reporting output rotation to xwayland
  + wayland: Accept final preference of drop destination
  + Fix erratic scrolling in GTK apps
  + Fix tilt direction of pen/tablet inputs
  + Use b/w unicode for tablet mode OSD
  + Fix negative paint volume offscreen effect
  + Only add paint volumes of mapped actors to stage clip
  + Fix mapping tablet input to correct monitor
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Drop clutter-only_reset_preedit_text_if_set.patch: Fixed upstream</changelog>
  <changelog author="alynx.zhou@suse.com" date="1637323200">- Enable eglstream on Leap/SLE (jsc#SLE-19964).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1637668800">- Enable wayland-eglstream dependency on Leap/SLE (jsc#SLE-19964).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639396800">- Update to version 41.2:
  + Fix blank screen when unplugging docking station.
  + Prefer GBM over EGLStream where possible.
  + Fix unredirected Xwayland windows not getting updated.
  + Improve anti-aliasing of background corners.
  + Copy damage rectangles to secondary GPU
  + Improve Wacom tablet mapping.
  + Fixed crashes.
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Switch to git checkout of released tag via source service.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1639742400">- Add mutter-allow-disable-hardware-cursors.patch: Add a debug
  environment variable MUTTER_DEBUG_DISABLE_HW_CURSORS to disable
  hardware cursors and force using software cursors to avoid some
  driver or hardware bug (glgo#GNOME/mutter#2045,
  glgo#GNOME/mutter!2150).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639742401">- Rebase patches with quilt and renumber them.
- Add mutter-window-actor-Special-case-shaped-Java-windows.patch:
  window-actor: Special-case shaped Java windows.
  OpenJDK wrongly assumes that shaping a window implies no shadows.
  They got lucky until commit b975676c changed the fallback case,
  but now their compliance tests are broken. Make them happy again
  by special-casing shaped Java windows. Patch from fedora:
  https://src.fedoraproject.org/rpms/mutter/raw/rawhide/f/0001-window-actor-Special-case-shaped-Java-windows.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1641816000">- Add mutter-initialize-saved_rect_fullscreen.patch: Some
  applications that starts in fullscreen disappear when switching
  back to normal size mode, because mutter forget to initialize
  saved_rect_fullscreen which is used for unfullscreen, this patch
  fixes it (glgo#GNOME/mutter!2210, bsc#1185444).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1641902400">- Update to version 41.3:
  + Check keyboard serials for activation
  + Fix mixed up refresh rates in multi-monitor setups
  + Allow disabling HW cursors
  + Improve damage handling
  + Consider xrandr flags for advertised modes
  + Ensure constraints after client resize
  + window-group: Disable culling when rendinging clone to
    offscreen buffer
  + Fix workspace switch animation in default plugin
  + Fix unfullscreening of window that were mapped fullscreen
  + Fix DMA-BUF screencasts with unredirected fullscreen windows
  + Fix orientation changes on devices with 90
  + Fixed crashes
  + Plugged leaks
  + Misc. bug fixes and cleanups.
- Drop patches fixed upstream:
  + mutter-allow-disable-hardware-cursors.patch
  + mutter-initialize-saved_rect_fullscreen.patch
- Renumber patches yet again.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644321600">- Add 0002-Drop-CI-test-setup-that-needs-catchsegv.patch: Fix build
  with glibc 2.35 and newer.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644926400">- Update to version 41.4:
  + Fix DND between X11 and wayland clients.
  + Fix resetting idle time on lid open.
  + wayland/gtk: Only perform allowed titlebar gestures.
  + Place popups on the same monitor as the anchor rect.
  + Fix wrong resizes of some clients on focus changes.
  + Misc. bug fixes.
  + Fixed crashes.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647777600">- Update to version 41.5:
  + Fix X11 ? wayland drops ending up in the wrong wayland client.
  + Allow forcing EGLStream backend.
  + Updated translations.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1652443200">- Add mutter-crash-meta_context_terminate.patch: Fix SIGSEGV in
  meta_context_terminate (bsc#1199382 glgo#GNOME/mutter#2267).</changelog>
</package>
<package pkgid="468e0f4d9b947e5f7edd9cbcd739efe15107b62139491b835e865c6b4583d35a" name="mutter-devel" arch="x86_64">
  <version epoch="0" ver="41.5" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1632225600">- Update to version 40.5:
  + Fix monitor screencast scanouts.
  + Fix middle-click emulation support on X11.
  + Fixed crashes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632312000">- Update to version 41.beta:
  + Manage idle monitors via MetaIdleManager.
  + Fix VKMS detection.
  + Fix swipe cancellation.
  + Fix mapping tablet to monitor.
  + Fix area screencasts when window is unredirected.
  + Don't require a newly attached buffer to apply state.
  + Close unused mode setting and rendering devices.
  + Only support super+scroll on wayland.
  + Implement the xdg-activation protocol.
  + Reduce input latency by computing max render time
    heuristically.
  + Apply dithering to dispatch time when needed.
  + x11: Compute monitor scale per output.
  + Shrink and optimize the rounded-background-clip shader.
  + remote-desktop: Handle non-responding selection owners .
  + Improve sysprof support.
  + Allow clients to delegate titlebar gestures to the compositor.
  + Fix upside-down Xshape surface with EGLstream.
  + Fix 'kms-modifiers' experimental setting.
  + Make default focus window on each workspace appear focused.
  + Plugged memory leaks.
  + Fixed crashes crash.
  + Misc. bug fixes and cleanups.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632312001">- Update to version 41.rc:
  + Add clutter_stage_paint_to_content().
  + Add meta_cursor_tracker_get_scale().
  + wayland: Make each wl_output correspond to one monitor.
  + Expose 'inactive-since' timestamp to uresourced.
  + Pass dirty rects to secondary GPU.
  + Support commiting preedit string on focus loss.
  + Improve auto-rotation support.
  + Add meta_window_actor_paint_to_content().
  + Fixed crashes.
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Add xvfb-run BuildRequires: new dependency for the test suite.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312002">- Add pkgconfig(xwayland) and drop xorg-x11-server-wayland
  BuildRequires: use standalone xwayland during build and runtime.
- Add explicit gnome-settings-daemon Requires and pass initfd=auto
  to meson now that we are using the new standalone xwayland.</changelog>
  <changelog author="mgorse@suse.com" date="1632312003">- Update to version 41.0:
  + Avoid race in wl_seat capabilities.
  + Expose option groups/entries to introspection.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1634731200">- Rebase mutter-SLE-bsc984738-grab-display.patch.</changelog>
  <changelog author="packaging@sp1rit.anonaddy.me" date="1634817600">- Added clutter-only_reset_preedit_text_if_set.patch
  + fixes "scrollback" issue of GtkTextView
    (see lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/WYSUDJFTZIEEJS3QBBBUNLD3XBXULABU/)</changelog>
  <changelog author="dimstar@opensuse.org" date="1635854400">- BuildRequire libxcvt when building against xorg-x11-server &gt; 21,
  unless when building for s390x: libxcvt was split out and lives
  in an own package now.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 41.1:
  + Fix monitor screencast scanouts
  + dma-buf: Use alpha-less pixel formats where appropriate
  + wayland: Allow clients to maximize windows regardless of
    constraints
  + Handle hotplug events without relevant changes more effectively
  + Improve error reporting when startup fails
  + dma-buf: Add support for ABGR and XBGR formats
  + Fix X11 middle button emulation setting
  + Include server-side shadows in window screenshots
  + Don't change workspaces of unmanaged windows
  + Reset idletime when unplugging the power cable
  + xwayland: Avoid unnecessary _NET_WM_STATE events
  + Fix videos in Firefox stuttering in overview
  + Don't use atomic mode setting for virtio_gpu driver
  + Improve on-screen keyboard on X11
  + Fix text glitches after size changes
  + Fix reporting output rotation to xwayland
  + wayland: Accept final preference of drop destination
  + Fix erratic scrolling in GTK apps
  + Fix tilt direction of pen/tablet inputs
  + Use b/w unicode for tablet mode OSD
  + Fix negative paint volume offscreen effect
  + Only add paint volumes of mapped actors to stage clip
  + Fix mapping tablet input to correct monitor
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Drop clutter-only_reset_preedit_text_if_set.patch: Fixed upstream</changelog>
  <changelog author="alynx.zhou@suse.com" date="1637323200">- Enable eglstream on Leap/SLE (jsc#SLE-19964).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1637668800">- Enable wayland-eglstream dependency on Leap/SLE (jsc#SLE-19964).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639396800">- Update to version 41.2:
  + Fix blank screen when unplugging docking station.
  + Prefer GBM over EGLStream where possible.
  + Fix unredirected Xwayland windows not getting updated.
  + Improve anti-aliasing of background corners.
  + Copy damage rectangles to secondary GPU
  + Improve Wacom tablet mapping.
  + Fixed crashes.
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Switch to git checkout of released tag via source service.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1639742400">- Add mutter-allow-disable-hardware-cursors.patch: Add a debug
  environment variable MUTTER_DEBUG_DISABLE_HW_CURSORS to disable
  hardware cursors and force using software cursors to avoid some
  driver or hardware bug (glgo#GNOME/mutter#2045,
  glgo#GNOME/mutter!2150).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639742401">- Rebase patches with quilt and renumber them.
- Add mutter-window-actor-Special-case-shaped-Java-windows.patch:
  window-actor: Special-case shaped Java windows.
  OpenJDK wrongly assumes that shaping a window implies no shadows.
  They got lucky until commit b975676c changed the fallback case,
  but now their compliance tests are broken. Make them happy again
  by special-casing shaped Java windows. Patch from fedora:
  https://src.fedoraproject.org/rpms/mutter/raw/rawhide/f/0001-window-actor-Special-case-shaped-Java-windows.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1641816000">- Add mutter-initialize-saved_rect_fullscreen.patch: Some
  applications that starts in fullscreen disappear when switching
  back to normal size mode, because mutter forget to initialize
  saved_rect_fullscreen which is used for unfullscreen, this patch
  fixes it (glgo#GNOME/mutter!2210, bsc#1185444).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1641902400">- Update to version 41.3:
  + Check keyboard serials for activation
  + Fix mixed up refresh rates in multi-monitor setups
  + Allow disabling HW cursors
  + Improve damage handling
  + Consider xrandr flags for advertised modes
  + Ensure constraints after client resize
  + window-group: Disable culling when rendinging clone to
    offscreen buffer
  + Fix workspace switch animation in default plugin
  + Fix unfullscreening of window that were mapped fullscreen
  + Fix DMA-BUF screencasts with unredirected fullscreen windows
  + Fix orientation changes on devices with 90
  + Fixed crashes
  + Plugged leaks
  + Misc. bug fixes and cleanups.
- Drop patches fixed upstream:
  + mutter-allow-disable-hardware-cursors.patch
  + mutter-initialize-saved_rect_fullscreen.patch
- Renumber patches yet again.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644321600">- Add 0002-Drop-CI-test-setup-that-needs-catchsegv.patch: Fix build
  with glibc 2.35 and newer.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644926400">- Update to version 41.4:
  + Fix DND between X11 and wayland clients.
  + Fix resetting idle time on lid open.
  + wayland/gtk: Only perform allowed titlebar gestures.
  + Place popups on the same monitor as the anchor rect.
  + Fix wrong resizes of some clients on focus changes.
  + Misc. bug fixes.
  + Fixed crashes.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647777600">- Update to version 41.5:
  + Fix X11 ? wayland drops ending up in the wrong wayland client.
  + Allow forcing EGLStream backend.
  + Updated translations.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1652443200">- Add mutter-crash-meta_context_terminate.patch: Fix SIGSEGV in
  meta_context_terminate (bsc#1199382 glgo#GNOME/mutter#2267).</changelog>
</package>
<package pkgid="30976014009349fae2389ba727b3275eb828dc8584a529e9f90990db8ff14db5" name="mutter-lang" arch="noarch">
  <version epoch="0" ver="41.5" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1632225600">- Update to version 40.5:
  + Fix monitor screencast scanouts.
  + Fix middle-click emulation support on X11.
  + Fixed crashes.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632312000">- Update to version 41.beta:
  + Manage idle monitors via MetaIdleManager.
  + Fix VKMS detection.
  + Fix swipe cancellation.
  + Fix mapping tablet to monitor.
  + Fix area screencasts when window is unredirected.
  + Don't require a newly attached buffer to apply state.
  + Close unused mode setting and rendering devices.
  + Only support super+scroll on wayland.
  + Implement the xdg-activation protocol.
  + Reduce input latency by computing max render time
    heuristically.
  + Apply dithering to dispatch time when needed.
  + x11: Compute monitor scale per output.
  + Shrink and optimize the rounded-background-clip shader.
  + remote-desktop: Handle non-responding selection owners .
  + Improve sysprof support.
  + Allow clients to delegate titlebar gestures to the compositor.
  + Fix upside-down Xshape surface with EGLstream.
  + Fix 'kms-modifiers' experimental setting.
  + Make default focus window on each workspace appear focused.
  + Plugged memory leaks.
  + Fixed crashes crash.
  + Misc. bug fixes and cleanups.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632312001">- Update to version 41.rc:
  + Add clutter_stage_paint_to_content().
  + Add meta_cursor_tracker_get_scale().
  + wayland: Make each wl_output correspond to one monitor.
  + Expose 'inactive-since' timestamp to uresourced.
  + Pass dirty rects to secondary GPU.
  + Support commiting preedit string on focus loss.
  + Improve auto-rotation support.
  + Add meta_window_actor_paint_to_content().
  + Fixed crashes.
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Add xvfb-run BuildRequires: new dependency for the test suite.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312002">- Add pkgconfig(xwayland) and drop xorg-x11-server-wayland
  BuildRequires: use standalone xwayland during build and runtime.
- Add explicit gnome-settings-daemon Requires and pass initfd=auto
  to meson now that we are using the new standalone xwayland.</changelog>
  <changelog author="mgorse@suse.com" date="1632312003">- Update to version 41.0:
  + Avoid race in wl_seat capabilities.
  + Expose option groups/entries to introspection.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1634731200">- Rebase mutter-SLE-bsc984738-grab-display.patch.</changelog>
  <changelog author="packaging@sp1rit.anonaddy.me" date="1634817600">- Added clutter-only_reset_preedit_text_if_set.patch
  + fixes "scrollback" issue of GtkTextView
    (see lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/WYSUDJFTZIEEJS3QBBBUNLD3XBXULABU/)</changelog>
  <changelog author="dimstar@opensuse.org" date="1635854400">- BuildRequire libxcvt when building against xorg-x11-server &gt; 21,
  unless when building for s390x: libxcvt was split out and lives
  in an own package now.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636113600">- Update to version 41.1:
  + Fix monitor screencast scanouts
  + dma-buf: Use alpha-less pixel formats where appropriate
  + wayland: Allow clients to maximize windows regardless of
    constraints
  + Handle hotplug events without relevant changes more effectively
  + Improve error reporting when startup fails
  + dma-buf: Add support for ABGR and XBGR formats
  + Fix X11 middle button emulation setting
  + Include server-side shadows in window screenshots
  + Don't change workspaces of unmanaged windows
  + Reset idletime when unplugging the power cable
  + xwayland: Avoid unnecessary _NET_WM_STATE events
  + Fix videos in Firefox stuttering in overview
  + Don't use atomic mode setting for virtio_gpu driver
  + Improve on-screen keyboard on X11
  + Fix text glitches after size changes
  + Fix reporting output rotation to xwayland
  + wayland: Accept final preference of drop destination
  + Fix erratic scrolling in GTK apps
  + Fix tilt direction of pen/tablet inputs
  + Use b/w unicode for tablet mode OSD
  + Fix negative paint volume offscreen effect
  + Only add paint volumes of mapped actors to stage clip
  + Fix mapping tablet input to correct monitor
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Drop clutter-only_reset_preedit_text_if_set.patch: Fixed upstream</changelog>
  <changelog author="alynx.zhou@suse.com" date="1637323200">- Enable eglstream on Leap/SLE (jsc#SLE-19964).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1637668800">- Enable wayland-eglstream dependency on Leap/SLE (jsc#SLE-19964).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639396800">- Update to version 41.2:
  + Fix blank screen when unplugging docking station.
  + Prefer GBM over EGLStream where possible.
  + Fix unredirected Xwayland windows not getting updated.
  + Improve anti-aliasing of background corners.
  + Copy damage rectangles to secondary GPU
  + Improve Wacom tablet mapping.
  + Fixed crashes.
  + Misc. bug fixes and cleanups.
  + Updated translations.
- Switch to git checkout of released tag via source service.</changelog>
  <changelog author="alynx.zhou@suse.com" date="1639742400">- Add mutter-allow-disable-hardware-cursors.patch: Add a debug
  environment variable MUTTER_DEBUG_DISABLE_HW_CURSORS to disable
  hardware cursors and force using software cursors to avoid some
  driver or hardware bug (glgo#GNOME/mutter#2045,
  glgo#GNOME/mutter!2150).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639742401">- Rebase patches with quilt and renumber them.
- Add mutter-window-actor-Special-case-shaped-Java-windows.patch:
  window-actor: Special-case shaped Java windows.
  OpenJDK wrongly assumes that shaping a window implies no shadows.
  They got lucky until commit b975676c changed the fallback case,
  but now their compliance tests are broken. Make them happy again
  by special-casing shaped Java windows. Patch from fedora:
  https://src.fedoraproject.org/rpms/mutter/raw/rawhide/f/0001-window-actor-Special-case-shaped-Java-windows.patch</changelog>
  <changelog author="alynx.zhou@suse.com" date="1641816000">- Add mutter-initialize-saved_rect_fullscreen.patch: Some
  applications that starts in fullscreen disappear when switching
  back to normal size mode, because mutter forget to initialize
  saved_rect_fullscreen which is used for unfullscreen, this patch
  fixes it (glgo#GNOME/mutter!2210, bsc#1185444).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1641902400">- Update to version 41.3:
  + Check keyboard serials for activation
  + Fix mixed up refresh rates in multi-monitor setups
  + Allow disabling HW cursors
  + Improve damage handling
  + Consider xrandr flags for advertised modes
  + Ensure constraints after client resize
  + window-group: Disable culling when rendinging clone to
    offscreen buffer
  + Fix workspace switch animation in default plugin
  + Fix unfullscreening of window that were mapped fullscreen
  + Fix DMA-BUF screencasts with unredirected fullscreen windows
  + Fix orientation changes on devices with 90
  + Fixed crashes
  + Plugged leaks
  + Misc. bug fixes and cleanups.
- Drop patches fixed upstream:
  + mutter-allow-disable-hardware-cursors.patch
  + mutter-initialize-saved_rect_fullscreen.patch
- Renumber patches yet again.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644321600">- Add 0002-Drop-CI-test-setup-that-needs-catchsegv.patch: Fix build
  with glibc 2.35 and newer.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644926400">- Update to version 41.4:
  + Fix DND between X11 and wayland clients.
  + Fix resetting idle time on lid open.
  + wayland/gtk: Only perform allowed titlebar gestures.
  + Place popups on the same monitor as the anchor rect.
  + Fix wrong resizes of some clients on focus changes.
  + Misc. bug fixes.
  + Fixed crashes.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647777600">- Update to version 41.5:
  + Fix X11 ? wayland drops ending up in the wrong wayland client.
  + Allow forcing EGLStream backend.
  + Updated translations.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1652443200">- Add mutter-crash-meta_context_terminate.patch: Fix SIGSEGV in
  meta_context_terminate (bsc#1199382 glgo#GNOME/mutter#2267).</changelog>
</package>
<package pkgid="8405207e272bbf4f07a714d3e8a81ff7cb707ebec23403dba802b0d2c1715a9c" name="mysql-connector-cpp" arch="src">
  <version epoch="0" ver="1.1.9" rel="150000.4.5.1"/>
  <changelog author="mhrusecky@suse.cz" date="1242648000">- fixed compilation using gcc44</changelog>
  <changelog author="mhrusecky@suse.cz" date="1242907200">- updated to version 1.0.5
  * Changed the interface of sql::ConnectionMetaData, sql::ResultSetMetaData
    and sql::ParameterMetaData to have a protected destructor. In this way the
    client code doesn't need, and won't be able, to destruct the metadata
    objects returned by the connector. The connector will handle their
    destruction.  This enables statements like :
    connection-&gt;getMetaData-&gt;getSchema(); without the result of leaking memory
    because we lost the pointer returned by getMetaData().  (Lawrin, Andrey)
  * Large overhaul of the code to improve the memory management to not leak in
    exceptional situations. Big improvement compared to Beta1. (Andrey)
  * Fixed the interface of sql::Driver and sql::Connection so they accept the
    options map by alias instead of by value. (Andrey)
  * Changed the return type of sql::SQLException::getSQLState() from
    std::string to const char * to be consistent with std::exception::what().
    (Andrey)
  * Implemented getResultSetType() and setResultSetType() for Statement. Used
    are TYPE_FORWARD_ONLY, which means unbuffered result set and
    TYPE_SCROLL_INSENSITIVE, which means buffered result set. (Andrey)
  * Implemented getResultSetType() for PreparedStatement. The setter is not
    implemented because currently PreparedStatement can't do refetching and
    storing the result means the bind buffers will be correct. (Andrey)
  * Added "defaultStatementResultType" to MySQL_Connection::setClientOption()
    as an option. Also the method now returns `sql::Connection *`. (Andrey)
  * Added Result::getType() and implemented it in the three result set classes.
    (Andrey)
  * Enabled tracing functionality when building with VC8 and up (VS2005 and
    up). (Andrey)
  * Added better support for named pipes, on Windows. Use pipe:// and add the
    path to the pipe. Shared memory connections are currently not supported.
    (Andrey)
  * Fixed a bug in MySQL_Connection::setSessionVariable() which led to
    exception being thrown. (Andrey)</changelog>
  <changelog author="mhrusecky@suse.cz" date="1248782400">- Better description (bnc#522682)</changelog>
  <changelog author="coolo@novell.com" date="1257249600">- updated patches to apply with fuzz=0</changelog>
  <changelog author="mhrusecky@suse.cz" date="1307016000">- updated to version 1.1.0, see
  http://forge.mysql.com/wiki/Connector_C%2B%2B#MySQL_Connector.2FC.2B.2B_1.1.0_GA_.2813.09.2010.29</changelog>
  <changelog author="coolo@suse.com" date="1326369600">- change license to be in spdx.org format</changelog>
  <changelog author="cdenicolo@suse.com" date="1326888000">- license update: SUSE-GPL-2.0-with-FLOSS-exception
  GPL has FLOSS exception.</changelog>
  <changelog author="adam@mizerski.pl" date="1360756800">- update to 1.1.2, see
  https://dev.mysql.com/doc/relnotes/connector-cpp/en/ccpp-news-1-1-1.html
  https://dev.mysql.com/doc/relnotes/connector-cpp/en/ccpp-news-1-1-2.html
- libmysqlcppconn5 changed to libmysqlcppconn6 (number bump)
- spec file cleanup
- removed patch for driver/mysql_art_resultset.cpp from
  mysql-connector-cpp-1.1.0-gcc44.patch
- added mysql-connector-cpp-1.1.0-disable_tests_and_examples.patch</changelog>
  <changelog author="saschpe@suse.de" date="1362744000">- Fix library requirement for devel package due to wrong soversion</changelog>
  <changelog author="mhrusecky@suse.com" date="1364990400">- Merge with package by Tomas Chvatal (to make it work with LO)</changelog>
  <changelog author="mhrusecky@suse.cz" date="1366200000">- Compatibility Obsoletes/Provides</changelog>
  <changelog author="mhrusecky@suse.cz" date="1366372800">- Do not use macro for make install as it doesn't work on SLE</changelog>
  <changelog author="cobexer@gmail.com" date="1406376000">- disable gcov coverage recording
  Gcov is a development tool, it slows down execution and creates
  coverage data that is not useful to users of this library.</changelog>
  <changelog author="tchvatal@suse.com" date="1409313600">- Use cmake macros for building properly.</changelog>
  <changelog author="tchvatal@suse.com" date="1439380800">- Version bump to 1.1.6:
  * See the news files on
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/
- Update soname to libmyslqcppcon7
- Remove needlessly long description
- Drop unneeded/merged patches:
  mysql-connector-cpp-1.1.0-cmake-paths-fix.patch
  mysql-connector-cpp-1.1.0-gcc44.patch
- Refresh patch:
  mysql-connector-cpp-1.1.0-disable_tests_and_examples.patch
- Add patch to build with mariadb:
  mariadb_api.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mpluskal@suse.com" date="1496232000">- Update to version 1.1.8:
  * See the news files on
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/</changelog>
  <changelog author="kstreitova@suse.com" date="1504612800">- Update to version 1.1.9:
  * release notes:
    https://dev.mysql.com/doc/relnotes/connector-cpp/en/news-1-1-9.html
- Remove installing of ANNOUNCEMENT and CHANGES files that are no
  longer present
- Add "Requires: libboost_headers-devel" for libmysqlcppconn-devel
  subpackage ("Requires: boost-devel" for the older distros that
  don't have libboost_headers-devel available yet) [bsc#838038]</changelog>
  <changelog author="kstreitova@suse.com" date="1511524800">- add mysql-connector-cpp-1.1.9-libmysql_dynamic_proxy_typos.patch
  to fix build by fixing copypaste errors in
  libmysql_dynamic_proxy.cpp file [bsc#1067883]
- remove mariadb_api.patch that it's no longer needed because:
  * our current client library already provides mysql_get_option()
  * using MARIADB_BASE_VERSION is no longer working as intended as
    it's not defined in mariadb client library provided by
    mariadb-connector-c
  * hunk for stmt_free_result() was moved to
    mysql-connector-cpp-1.1.9-libmysql_dynamic_proxy_typos.patch</changelog>
  <changelog author="vcizek@suse.com" date="1568289600">- Add missing zlib build dependency, which used to be pulled in
  by libopenssl-devel. The package fails to build since the openssl
  upgrade to 1.1.1 (bsc#1149792)</changelog>
</package>
<package pkgid="a360091b0f6de5ebf1141f513ec9b4a1e240e991a4f5e53907765db7821c9d67" name="nftables" arch="aarch64">
  <version epoch="0" ver="0.9.8" rel="150300.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1464868800">- Update to new upstream release 0.6
  * Rules may be replaced now
  * Flow table support (requires Linux &gt;= 4.3)
  * Support for tracing
  * Ratelimiting now supports units like bytes/second.
  * Matchinv VLAN IDs, DSCP/ECN, ICMP RtAdv &amp; RtSol</changelog>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
</package>
<package pkgid="24f0bc376ec3f9796fe108d6c145077ae033e6e2bd05ce5581ff36882fe8e422" name="nftables" arch="ppc64le">
  <version epoch="0" ver="0.9.8" rel="150300.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1464868800">- Update to new upstream release 0.6
  * Rules may be replaced now
  * Flow table support (requires Linux &gt;= 4.3)
  * Support for tracing
  * Ratelimiting now supports units like bytes/second.
  * Matchinv VLAN IDs, DSCP/ECN, ICMP RtAdv &amp; RtSol</changelog>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
</package>
<package pkgid="8caf73b61ce1f2cb44fce10fdf45f9cedd610d0349fde721a296714ddb71c67d" name="nftables" arch="s390x">
  <version epoch="0" ver="0.9.8" rel="150300.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1464868800">- Update to new upstream release 0.6
  * Rules may be replaced now
  * Flow table support (requires Linux &gt;= 4.3)
  * Support for tracing
  * Ratelimiting now supports units like bytes/second.
  * Matchinv VLAN IDs, DSCP/ECN, ICMP RtAdv &amp; RtSol</changelog>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
</package>
<package pkgid="eee6c7b1ef74d5a6b667cbed02df322c92391e838b7bb53bf1a87b397798171e" name="nftables" arch="src">
  <version epoch="0" ver="0.9.8" rel="150300.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1464868800">- Update to new upstream release 0.6
  * Rules may be replaced now
  * Flow table support (requires Linux &gt;= 4.3)
  * Support for tracing
  * Ratelimiting now supports units like bytes/second.
  * Matchinv VLAN IDs, DSCP/ECN, ICMP RtAdv &amp; RtSol</changelog>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
</package>
<package pkgid="f867376df7bb015e2fa1d0403b64292aacb75078c5d2f182af0daf712a4b8dbb" name="nftables" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150300.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1464868800">- Update to new upstream release 0.6
  * Rules may be replaced now
  * Flow table support (requires Linux &gt;= 4.3)
  * Support for tracing
  * Ratelimiting now supports units like bytes/second.
  * Matchinv VLAN IDs, DSCP/ECN, ICMP RtAdv &amp; RtSol</changelog>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
</package>
<package pkgid="81fae8684760b9bf3c1377786e00d61b11461a82eb8a0238ea4ba2839b43f3e3" name="nftables-devel" arch="aarch64">
  <version epoch="0" ver="0.9.8" rel="150300.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1464868800">- Update to new upstream release 0.6
  * Rules may be replaced now
  * Flow table support (requires Linux &gt;= 4.3)
  * Support for tracing
  * Ratelimiting now supports units like bytes/second.
  * Matchinv VLAN IDs, DSCP/ECN, ICMP RtAdv &amp; RtSol</changelog>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
</package>
<package pkgid="5c9ae773e6f7e356cca46c8c35a43e5ee02f83597fab0710eab5ed41ee257153" name="nftables-devel" arch="ppc64le">
  <version epoch="0" ver="0.9.8" rel="150300.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1464868800">- Update to new upstream release 0.6
  * Rules may be replaced now
  * Flow table support (requires Linux &gt;= 4.3)
  * Support for tracing
  * Ratelimiting now supports units like bytes/second.
  * Matchinv VLAN IDs, DSCP/ECN, ICMP RtAdv &amp; RtSol</changelog>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
</package>
<package pkgid="567cda8259a931e2a1533139f34c95a652136f98620cc002d5a58e1ec770f3cc" name="nftables-devel" arch="s390x">
  <version epoch="0" ver="0.9.8" rel="150300.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1464868800">- Update to new upstream release 0.6
  * Rules may be replaced now
  * Flow table support (requires Linux &gt;= 4.3)
  * Support for tracing
  * Ratelimiting now supports units like bytes/second.
  * Matchinv VLAN IDs, DSCP/ECN, ICMP RtAdv &amp; RtSol</changelog>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
</package>
<package pkgid="9749fbf945dc44857bc3a8c29de4a9a8163f6da39dcd07de33cbeade37b9853c" name="nftables-devel" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150300.3.3.1"/>
  <changelog author="jengelh@inai.de" date="1464868800">- Update to new upstream release 0.6
  * Rules may be replaced now
  * Flow table support (requires Linux &gt;= 4.3)
  * Support for tracing
  * Ratelimiting now supports units like bytes/second.
  * Matchinv VLAN IDs, DSCP/ECN, ICMP RtAdv &amp; RtSol</changelog>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
</package>
<package pkgid="bf3cf641d462ef31cbae6e0f37e89d10b63c686f701c0b127a95d516d1b2346d" name="nodejs10" arch="aarch64">
  <version epoch="0" ver="10.24.1" rel="150000.1.44.1"/>
  <changelog author="adam.majer@suse.de" date="1603972800">- New upstream LTS version 10.23.0:
  * deps: upgrade npm to 6.14.8
  * n-api:
    + create N-API version 7
    + expose napi_build_version variable
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="gmbr3@opensuse.org" date="1608552000">- Add icu68.patch: fix build with ICU 68</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 10.23.1:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)
  * CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference
    (High) This is a vulnerability in OpenSSL which may be exploited
    through Node.js. (bsc#1179491)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1612267200">- New upstream LTS version 10.23.2:
  * deps: upgrade npm to 6.14.11
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613044800">- New upstream LTS version 10.23.3:
  * crypto: fix crash when calling digest after piping
  * deps: reland npm upgrade to 6.14.11
  * test: add test that verifies crypto stream pipeline
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 10.24.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
  * CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
    (bsc#1182333)</changelog>
  <changelog author="adam.majer@suse.de" date="1615204800">- limit_worker_stdio_memsize.patch: reduce memory footprint of
  test-worker-stdio (bsc#1183155)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 10.24.1:
  * CVE-2021-3450: OpenSSL - CA certificate check bypass with
    X509_V_FLAG_X509_STRICT (High). (bsc#1183851)
  * CVE-2021-3449: OpenSSL - NULL pointer deref in
    signature_algorithms processing (High) (bsc#1183852)
  * CVE-2020-7774: npm - Update y18n to fix Prototype-Pollution
    (bsc#1184450)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- CVE-2021-22918.patch: patch libuv to fix out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
- npm-v6.14.13.tar.gz: update to npm 6.14.13 fixing
  * fixes ssri Regular Expression Denial of Service and
    hosted-git-info Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- CVE-2021-22930.patch: http2: fixes use after free on close
  in stream canceling (bsc#1188917, CVE-2021-22930)</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628596800">- cares_172.patch: update c-ares to 1.17.2.
  (bsc#1188881, bsc#1189370, CVE-2021-3672, CVE-2021-22931)</changelog>
  <changelog author="adam.majer@suse.de" date="1628856000">- CVE-2021-22939.patch: Incomplete validation of rejectUnauthorized parameter
  (bsc#1189369, CVE-2021-22939)</changelog>
  <changelog author="adam.majer@suse.de" date="1642075200">- test_ssl_cert_fixups.patch: fixup SSL certificates in unit tests
- fix_ci_tests.patch: updated for z15 zlib compression</changelog>
  <changelog author="adam.majer@suse.de" date="1644926400">- npm-v6.14.16.tar.gz: update to npm 6.14.16 fixing
  * CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
  * CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
  * CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
  * CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- CVE-2022-21824.patch: fix prototype pollution via console.table
  (bsc#1194514, CVE-2022-21824)</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="50862cda5d31e7d9a045227d5d8285c17af792176bb88a2b507ab45b138ec792" name="nodejs10" arch="ppc64le">
  <version epoch="0" ver="10.24.1" rel="150000.1.44.1"/>
  <changelog author="adam.majer@suse.de" date="1603972800">- New upstream LTS version 10.23.0:
  * deps: upgrade npm to 6.14.8
  * n-api:
    + create N-API version 7
    + expose napi_build_version variable
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="gmbr3@opensuse.org" date="1608552000">- Add icu68.patch: fix build with ICU 68</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 10.23.1:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)
  * CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference
    (High) This is a vulnerability in OpenSSL which may be exploited
    through Node.js. (bsc#1179491)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1612267200">- New upstream LTS version 10.23.2:
  * deps: upgrade npm to 6.14.11
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613044800">- New upstream LTS version 10.23.3:
  * crypto: fix crash when calling digest after piping
  * deps: reland npm upgrade to 6.14.11
  * test: add test that verifies crypto stream pipeline
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 10.24.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
  * CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
    (bsc#1182333)</changelog>
  <changelog author="adam.majer@suse.de" date="1615204800">- limit_worker_stdio_memsize.patch: reduce memory footprint of
  test-worker-stdio (bsc#1183155)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 10.24.1:
  * CVE-2021-3450: OpenSSL - CA certificate check bypass with
    X509_V_FLAG_X509_STRICT (High). (bsc#1183851)
  * CVE-2021-3449: OpenSSL - NULL pointer deref in
    signature_algorithms processing (High) (bsc#1183852)
  * CVE-2020-7774: npm - Update y18n to fix Prototype-Pollution
    (bsc#1184450)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- CVE-2021-22918.patch: patch libuv to fix out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
- npm-v6.14.13.tar.gz: update to npm 6.14.13 fixing
  * fixes ssri Regular Expression Denial of Service and
    hosted-git-info Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- CVE-2021-22930.patch: http2: fixes use after free on close
  in stream canceling (bsc#1188917, CVE-2021-22930)</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628596800">- cares_172.patch: update c-ares to 1.17.2.
  (bsc#1188881, bsc#1189370, CVE-2021-3672, CVE-2021-22931)</changelog>
  <changelog author="adam.majer@suse.de" date="1628856000">- CVE-2021-22939.patch: Incomplete validation of rejectUnauthorized parameter
  (bsc#1189369, CVE-2021-22939)</changelog>
  <changelog author="adam.majer@suse.de" date="1642075200">- test_ssl_cert_fixups.patch: fixup SSL certificates in unit tests
- fix_ci_tests.patch: updated for z15 zlib compression</changelog>
  <changelog author="adam.majer@suse.de" date="1644926400">- npm-v6.14.16.tar.gz: update to npm 6.14.16 fixing
  * CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
  * CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
  * CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
  * CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- CVE-2022-21824.patch: fix prototype pollution via console.table
  (bsc#1194514, CVE-2022-21824)</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="6df9a62c2a550bb2ea14885cb62f12a2a58f903e8da9e763fdb3dc5bb1482a27" name="nodejs10" arch="s390x">
  <version epoch="0" ver="10.24.1" rel="150000.1.44.1"/>
  <changelog author="adam.majer@suse.de" date="1603972800">- New upstream LTS version 10.23.0:
  * deps: upgrade npm to 6.14.8
  * n-api:
    + create N-API version 7
    + expose napi_build_version variable
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="gmbr3@opensuse.org" date="1608552000">- Add icu68.patch: fix build with ICU 68</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 10.23.1:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)
  * CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference
    (High) This is a vulnerability in OpenSSL which may be exploited
    through Node.js. (bsc#1179491)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1612267200">- New upstream LTS version 10.23.2:
  * deps: upgrade npm to 6.14.11
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613044800">- New upstream LTS version 10.23.3:
  * crypto: fix crash when calling digest after piping
  * deps: reland npm upgrade to 6.14.11
  * test: add test that verifies crypto stream pipeline
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 10.24.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
  * CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
    (bsc#1182333)</changelog>
  <changelog author="adam.majer@suse.de" date="1615204800">- limit_worker_stdio_memsize.patch: reduce memory footprint of
  test-worker-stdio (bsc#1183155)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 10.24.1:
  * CVE-2021-3450: OpenSSL - CA certificate check bypass with
    X509_V_FLAG_X509_STRICT (High). (bsc#1183851)
  * CVE-2021-3449: OpenSSL - NULL pointer deref in
    signature_algorithms processing (High) (bsc#1183852)
  * CVE-2020-7774: npm - Update y18n to fix Prototype-Pollution
    (bsc#1184450)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- CVE-2021-22918.patch: patch libuv to fix out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
- npm-v6.14.13.tar.gz: update to npm 6.14.13 fixing
  * fixes ssri Regular Expression Denial of Service and
    hosted-git-info Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- CVE-2021-22930.patch: http2: fixes use after free on close
  in stream canceling (bsc#1188917, CVE-2021-22930)</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628596800">- cares_172.patch: update c-ares to 1.17.2.
  (bsc#1188881, bsc#1189370, CVE-2021-3672, CVE-2021-22931)</changelog>
  <changelog author="adam.majer@suse.de" date="1628856000">- CVE-2021-22939.patch: Incomplete validation of rejectUnauthorized parameter
  (bsc#1189369, CVE-2021-22939)</changelog>
  <changelog author="adam.majer@suse.de" date="1642075200">- test_ssl_cert_fixups.patch: fixup SSL certificates in unit tests
- fix_ci_tests.patch: updated for z15 zlib compression</changelog>
  <changelog author="adam.majer@suse.de" date="1644926400">- npm-v6.14.16.tar.gz: update to npm 6.14.16 fixing
  * CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
  * CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
  * CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
  * CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- CVE-2022-21824.patch: fix prototype pollution via console.table
  (bsc#1194514, CVE-2022-21824)</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="a02122924a4d8aba58a8f5b4b0e9241ff2467d891e12e246bb99cf18c267d4c5" name="nodejs10" arch="src">
  <version epoch="0" ver="10.24.1" rel="150000.1.44.1"/>
  <changelog author="adam.majer@suse.de" date="1603972800">- New upstream LTS version 10.23.0:
  * deps: upgrade npm to 6.14.8
  * n-api:
    + create N-API version 7
    + expose napi_build_version variable
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="gmbr3@opensuse.org" date="1608552000">- Add icu68.patch: fix build with ICU 68</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 10.23.1:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)
  * CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference
    (High) This is a vulnerability in OpenSSL which may be exploited
    through Node.js. (bsc#1179491)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1612267200">- New upstream LTS version 10.23.2:
  * deps: upgrade npm to 6.14.11
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613044800">- New upstream LTS version 10.23.3:
  * crypto: fix crash when calling digest after piping
  * deps: reland npm upgrade to 6.14.11
  * test: add test that verifies crypto stream pipeline
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 10.24.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
  * CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
    (bsc#1182333)</changelog>
  <changelog author="adam.majer@suse.de" date="1615204800">- limit_worker_stdio_memsize.patch: reduce memory footprint of
  test-worker-stdio (bsc#1183155)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 10.24.1:
  * CVE-2021-3450: OpenSSL - CA certificate check bypass with
    X509_V_FLAG_X509_STRICT (High). (bsc#1183851)
  * CVE-2021-3449: OpenSSL - NULL pointer deref in
    signature_algorithms processing (High) (bsc#1183852)
  * CVE-2020-7774: npm - Update y18n to fix Prototype-Pollution
    (bsc#1184450)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- CVE-2021-22918.patch: patch libuv to fix out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
- npm-v6.14.13.tar.gz: update to npm 6.14.13 fixing
  * fixes ssri Regular Expression Denial of Service and
    hosted-git-info Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- CVE-2021-22930.patch: http2: fixes use after free on close
  in stream canceling (bsc#1188917, CVE-2021-22930)</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628596800">- cares_172.patch: update c-ares to 1.17.2.
  (bsc#1188881, bsc#1189370, CVE-2021-3672, CVE-2021-22931)</changelog>
  <changelog author="adam.majer@suse.de" date="1628856000">- CVE-2021-22939.patch: Incomplete validation of rejectUnauthorized parameter
  (bsc#1189369, CVE-2021-22939)</changelog>
  <changelog author="adam.majer@suse.de" date="1642075200">- test_ssl_cert_fixups.patch: fixup SSL certificates in unit tests
- fix_ci_tests.patch: updated for z15 zlib compression</changelog>
  <changelog author="adam.majer@suse.de" date="1644926400">- npm-v6.14.16.tar.gz: update to npm 6.14.16 fixing
  * CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
  * CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
  * CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
  * CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- CVE-2022-21824.patch: fix prototype pollution via console.table
  (bsc#1194514, CVE-2022-21824)</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="9b64d1e7ae870dbd7cebfa453cd59ebe7683d31a30cfed384c3bc94c03c7a378" name="nodejs10" arch="x86_64">
  <version epoch="0" ver="10.24.1" rel="150000.1.44.1"/>
  <changelog author="adam.majer@suse.de" date="1603972800">- New upstream LTS version 10.23.0:
  * deps: upgrade npm to 6.14.8
  * n-api:
    + create N-API version 7
    + expose napi_build_version variable
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="gmbr3@opensuse.org" date="1608552000">- Add icu68.patch: fix build with ICU 68</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 10.23.1:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)
  * CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference
    (High) This is a vulnerability in OpenSSL which may be exploited
    through Node.js. (bsc#1179491)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1612267200">- New upstream LTS version 10.23.2:
  * deps: upgrade npm to 6.14.11
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613044800">- New upstream LTS version 10.23.3:
  * crypto: fix crash when calling digest after piping
  * deps: reland npm upgrade to 6.14.11
  * test: add test that verifies crypto stream pipeline
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 10.24.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
  * CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
    (bsc#1182333)</changelog>
  <changelog author="adam.majer@suse.de" date="1615204800">- limit_worker_stdio_memsize.patch: reduce memory footprint of
  test-worker-stdio (bsc#1183155)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 10.24.1:
  * CVE-2021-3450: OpenSSL - CA certificate check bypass with
    X509_V_FLAG_X509_STRICT (High). (bsc#1183851)
  * CVE-2021-3449: OpenSSL - NULL pointer deref in
    signature_algorithms processing (High) (bsc#1183852)
  * CVE-2020-7774: npm - Update y18n to fix Prototype-Pollution
    (bsc#1184450)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- CVE-2021-22918.patch: patch libuv to fix out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
- npm-v6.14.13.tar.gz: update to npm 6.14.13 fixing
  * fixes ssri Regular Expression Denial of Service and
    hosted-git-info Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- CVE-2021-22930.patch: http2: fixes use after free on close
  in stream canceling (bsc#1188917, CVE-2021-22930)</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628596800">- cares_172.patch: update c-ares to 1.17.2.
  (bsc#1188881, bsc#1189370, CVE-2021-3672, CVE-2021-22931)</changelog>
  <changelog author="adam.majer@suse.de" date="1628856000">- CVE-2021-22939.patch: Incomplete validation of rejectUnauthorized parameter
  (bsc#1189369, CVE-2021-22939)</changelog>
  <changelog author="adam.majer@suse.de" date="1642075200">- test_ssl_cert_fixups.patch: fixup SSL certificates in unit tests
- fix_ci_tests.patch: updated for z15 zlib compression</changelog>
  <changelog author="adam.majer@suse.de" date="1644926400">- npm-v6.14.16.tar.gz: update to npm 6.14.16 fixing
  * CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
  * CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
  * CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
  * CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- CVE-2022-21824.patch: fix prototype pollution via console.table
  (bsc#1194514, CVE-2022-21824)</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="31391369dad32e24eb4192bec18bee283528b1c0a4c3049c8abd1a7dd8f3322f" name="nodejs10-devel" arch="aarch64">
  <version epoch="0" ver="10.24.1" rel="150000.1.44.1"/>
  <changelog author="adam.majer@suse.de" date="1603972800">- New upstream LTS version 10.23.0:
  * deps: upgrade npm to 6.14.8
  * n-api:
    + create N-API version 7
    + expose napi_build_version variable
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="gmbr3@opensuse.org" date="1608552000">- Add icu68.patch: fix build with ICU 68</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 10.23.1:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)
  * CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference
    (High) This is a vulnerability in OpenSSL which may be exploited
    through Node.js. (bsc#1179491)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1612267200">- New upstream LTS version 10.23.2:
  * deps: upgrade npm to 6.14.11
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613044800">- New upstream LTS version 10.23.3:
  * crypto: fix crash when calling digest after piping
  * deps: reland npm upgrade to 6.14.11
  * test: add test that verifies crypto stream pipeline
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 10.24.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
  * CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
    (bsc#1182333)</changelog>
  <changelog author="adam.majer@suse.de" date="1615204800">- limit_worker_stdio_memsize.patch: reduce memory footprint of
  test-worker-stdio (bsc#1183155)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 10.24.1:
  * CVE-2021-3450: OpenSSL - CA certificate check bypass with
    X509_V_FLAG_X509_STRICT (High). (bsc#1183851)
  * CVE-2021-3449: OpenSSL - NULL pointer deref in
    signature_algorithms processing (High) (bsc#1183852)
  * CVE-2020-7774: npm - Update y18n to fix Prototype-Pollution
    (bsc#1184450)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- CVE-2021-22918.patch: patch libuv to fix out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
- npm-v6.14.13.tar.gz: update to npm 6.14.13 fixing
  * fixes ssri Regular Expression Denial of Service and
    hosted-git-info Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- CVE-2021-22930.patch: http2: fixes use after free on close
  in stream canceling (bsc#1188917, CVE-2021-22930)</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628596800">- cares_172.patch: update c-ares to 1.17.2.
  (bsc#1188881, bsc#1189370, CVE-2021-3672, CVE-2021-22931)</changelog>
  <changelog author="adam.majer@suse.de" date="1628856000">- CVE-2021-22939.patch: Incomplete validation of rejectUnauthorized parameter
  (bsc#1189369, CVE-2021-22939)</changelog>
  <changelog author="adam.majer@suse.de" date="1642075200">- test_ssl_cert_fixups.patch: fixup SSL certificates in unit tests
- fix_ci_tests.patch: updated for z15 zlib compression</changelog>
  <changelog author="adam.majer@suse.de" date="1644926400">- npm-v6.14.16.tar.gz: update to npm 6.14.16 fixing
  * CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
  * CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
  * CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
  * CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- CVE-2022-21824.patch: fix prototype pollution via console.table
  (bsc#1194514, CVE-2022-21824)</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="dad92297258f1a21957a481db349babae699524b567509eaafb15e5946fc1d6b" name="nodejs10-devel" arch="ppc64le">
  <version epoch="0" ver="10.24.1" rel="150000.1.44.1"/>
  <changelog author="adam.majer@suse.de" date="1603972800">- New upstream LTS version 10.23.0:
  * deps: upgrade npm to 6.14.8
  * n-api:
    + create N-API version 7
    + expose napi_build_version variable
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="gmbr3@opensuse.org" date="1608552000">- Add icu68.patch: fix build with ICU 68</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 10.23.1:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)
  * CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference
    (High) This is a vulnerability in OpenSSL which may be exploited
    through Node.js. (bsc#1179491)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1612267200">- New upstream LTS version 10.23.2:
  * deps: upgrade npm to 6.14.11
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613044800">- New upstream LTS version 10.23.3:
  * crypto: fix crash when calling digest after piping
  * deps: reland npm upgrade to 6.14.11
  * test: add test that verifies crypto stream pipeline
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 10.24.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
  * CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
    (bsc#1182333)</changelog>
  <changelog author="adam.majer@suse.de" date="1615204800">- limit_worker_stdio_memsize.patch: reduce memory footprint of
  test-worker-stdio (bsc#1183155)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 10.24.1:
  * CVE-2021-3450: OpenSSL - CA certificate check bypass with
    X509_V_FLAG_X509_STRICT (High). (bsc#1183851)
  * CVE-2021-3449: OpenSSL - NULL pointer deref in
    signature_algorithms processing (High) (bsc#1183852)
  * CVE-2020-7774: npm - Update y18n to fix Prototype-Pollution
    (bsc#1184450)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- CVE-2021-22918.patch: patch libuv to fix out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
- npm-v6.14.13.tar.gz: update to npm 6.14.13 fixing
  * fixes ssri Regular Expression Denial of Service and
    hosted-git-info Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- CVE-2021-22930.patch: http2: fixes use after free on close
  in stream canceling (bsc#1188917, CVE-2021-22930)</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628596800">- cares_172.patch: update c-ares to 1.17.2.
  (bsc#1188881, bsc#1189370, CVE-2021-3672, CVE-2021-22931)</changelog>
  <changelog author="adam.majer@suse.de" date="1628856000">- CVE-2021-22939.patch: Incomplete validation of rejectUnauthorized parameter
  (bsc#1189369, CVE-2021-22939)</changelog>
  <changelog author="adam.majer@suse.de" date="1642075200">- test_ssl_cert_fixups.patch: fixup SSL certificates in unit tests
- fix_ci_tests.patch: updated for z15 zlib compression</changelog>
  <changelog author="adam.majer@suse.de" date="1644926400">- npm-v6.14.16.tar.gz: update to npm 6.14.16 fixing
  * CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
  * CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
  * CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
  * CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- CVE-2022-21824.patch: fix prototype pollution via console.table
  (bsc#1194514, CVE-2022-21824)</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="190a3d9deb22ef3bc1d7881d4171832bce8f81797e0e110c98a2c332e9f4f9d2" name="nodejs10-devel" arch="s390x">
  <version epoch="0" ver="10.24.1" rel="150000.1.44.1"/>
  <changelog author="adam.majer@suse.de" date="1603972800">- New upstream LTS version 10.23.0:
  * deps: upgrade npm to 6.14.8
  * n-api:
    + create N-API version 7
    + expose napi_build_version variable
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="gmbr3@opensuse.org" date="1608552000">- Add icu68.patch: fix build with ICU 68</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 10.23.1:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)
  * CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference
    (High) This is a vulnerability in OpenSSL which may be exploited
    through Node.js. (bsc#1179491)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1612267200">- New upstream LTS version 10.23.2:
  * deps: upgrade npm to 6.14.11
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613044800">- New upstream LTS version 10.23.3:
  * crypto: fix crash when calling digest after piping
  * deps: reland npm upgrade to 6.14.11
  * test: add test that verifies crypto stream pipeline
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 10.24.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
  * CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
    (bsc#1182333)</changelog>
  <changelog author="adam.majer@suse.de" date="1615204800">- limit_worker_stdio_memsize.patch: reduce memory footprint of
  test-worker-stdio (bsc#1183155)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 10.24.1:
  * CVE-2021-3450: OpenSSL - CA certificate check bypass with
    X509_V_FLAG_X509_STRICT (High). (bsc#1183851)
  * CVE-2021-3449: OpenSSL - NULL pointer deref in
    signature_algorithms processing (High) (bsc#1183852)
  * CVE-2020-7774: npm - Update y18n to fix Prototype-Pollution
    (bsc#1184450)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- CVE-2021-22918.patch: patch libuv to fix out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
- npm-v6.14.13.tar.gz: update to npm 6.14.13 fixing
  * fixes ssri Regular Expression Denial of Service and
    hosted-git-info Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- CVE-2021-22930.patch: http2: fixes use after free on close
  in stream canceling (bsc#1188917, CVE-2021-22930)</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628596800">- cares_172.patch: update c-ares to 1.17.2.
  (bsc#1188881, bsc#1189370, CVE-2021-3672, CVE-2021-22931)</changelog>
  <changelog author="adam.majer@suse.de" date="1628856000">- CVE-2021-22939.patch: Incomplete validation of rejectUnauthorized parameter
  (bsc#1189369, CVE-2021-22939)</changelog>
  <changelog author="adam.majer@suse.de" date="1642075200">- test_ssl_cert_fixups.patch: fixup SSL certificates in unit tests
- fix_ci_tests.patch: updated for z15 zlib compression</changelog>
  <changelog author="adam.majer@suse.de" date="1644926400">- npm-v6.14.16.tar.gz: update to npm 6.14.16 fixing
  * CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
  * CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
  * CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
  * CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- CVE-2022-21824.patch: fix prototype pollution via console.table
  (bsc#1194514, CVE-2022-21824)</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="072df0e4b25ce130c5b493917f89955478c4fcdb5e8106f74ff138ce88aca32a" name="nodejs10-devel" arch="x86_64">
  <version epoch="0" ver="10.24.1" rel="150000.1.44.1"/>
  <changelog author="adam.majer@suse.de" date="1603972800">- New upstream LTS version 10.23.0:
  * deps: upgrade npm to 6.14.8
  * n-api:
    + create N-API version 7
    + expose napi_build_version variable
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="gmbr3@opensuse.org" date="1608552000">- Add icu68.patch: fix build with ICU 68</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 10.23.1:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)
  * CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference
    (High) This is a vulnerability in OpenSSL which may be exploited
    through Node.js. (bsc#1179491)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1612267200">- New upstream LTS version 10.23.2:
  * deps: upgrade npm to 6.14.11
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613044800">- New upstream LTS version 10.23.3:
  * crypto: fix crash when calling digest after piping
  * deps: reland npm upgrade to 6.14.11
  * test: add test that verifies crypto stream pipeline
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 10.24.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
  * CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
    (bsc#1182333)</changelog>
  <changelog author="adam.majer@suse.de" date="1615204800">- limit_worker_stdio_memsize.patch: reduce memory footprint of
  test-worker-stdio (bsc#1183155)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 10.24.1:
  * CVE-2021-3450: OpenSSL - CA certificate check bypass with
    X509_V_FLAG_X509_STRICT (High). (bsc#1183851)
  * CVE-2021-3449: OpenSSL - NULL pointer deref in
    signature_algorithms processing (High) (bsc#1183852)
  * CVE-2020-7774: npm - Update y18n to fix Prototype-Pollution
    (bsc#1184450)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- CVE-2021-22918.patch: patch libuv to fix out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
- npm-v6.14.13.tar.gz: update to npm 6.14.13 fixing
  * fixes ssri Regular Expression Denial of Service and
    hosted-git-info Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- CVE-2021-22930.patch: http2: fixes use after free on close
  in stream canceling (bsc#1188917, CVE-2021-22930)</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628596800">- cares_172.patch: update c-ares to 1.17.2.
  (bsc#1188881, bsc#1189370, CVE-2021-3672, CVE-2021-22931)</changelog>
  <changelog author="adam.majer@suse.de" date="1628856000">- CVE-2021-22939.patch: Incomplete validation of rejectUnauthorized parameter
  (bsc#1189369, CVE-2021-22939)</changelog>
  <changelog author="adam.majer@suse.de" date="1642075200">- test_ssl_cert_fixups.patch: fixup SSL certificates in unit tests
- fix_ci_tests.patch: updated for z15 zlib compression</changelog>
  <changelog author="adam.majer@suse.de" date="1644926400">- npm-v6.14.16.tar.gz: update to npm 6.14.16 fixing
  * CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
  * CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
  * CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
  * CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- CVE-2022-21824.patch: fix prototype pollution via console.table
  (bsc#1194514, CVE-2022-21824)</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="40f89152f151b5dd8d8b897967262231552764b090e954ec786ba0aeb80ece08" name="nodejs10-docs" arch="noarch">
  <version epoch="0" ver="10.24.1" rel="150000.1.44.1"/>
  <changelog author="adam.majer@suse.de" date="1603972800">- New upstream LTS version 10.23.0:
  * deps: upgrade npm to 6.14.8
  * n-api:
    + create N-API version 7
    + expose napi_build_version variable
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="gmbr3@opensuse.org" date="1608552000">- Add icu68.patch: fix build with ICU 68</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 10.23.1:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)
  * CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference
    (High) This is a vulnerability in OpenSSL which may be exploited
    through Node.js. (bsc#1179491)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1612267200">- New upstream LTS version 10.23.2:
  * deps: upgrade npm to 6.14.11
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613044800">- New upstream LTS version 10.23.3:
  * crypto: fix crash when calling digest after piping
  * deps: reland npm upgrade to 6.14.11
  * test: add test that verifies crypto stream pipeline
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 10.24.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
  * CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
    (bsc#1182333)</changelog>
  <changelog author="adam.majer@suse.de" date="1615204800">- limit_worker_stdio_memsize.patch: reduce memory footprint of
  test-worker-stdio (bsc#1183155)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 10.24.1:
  * CVE-2021-3450: OpenSSL - CA certificate check bypass with
    X509_V_FLAG_X509_STRICT (High). (bsc#1183851)
  * CVE-2021-3449: OpenSSL - NULL pointer deref in
    signature_algorithms processing (High) (bsc#1183852)
  * CVE-2020-7774: npm - Update y18n to fix Prototype-Pollution
    (bsc#1184450)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- CVE-2021-22918.patch: patch libuv to fix out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
- npm-v6.14.13.tar.gz: update to npm 6.14.13 fixing
  * fixes ssri Regular Expression Denial of Service and
    hosted-git-info Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- CVE-2021-22930.patch: http2: fixes use after free on close
  in stream canceling (bsc#1188917, CVE-2021-22930)</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628596800">- cares_172.patch: update c-ares to 1.17.2.
  (bsc#1188881, bsc#1189370, CVE-2021-3672, CVE-2021-22931)</changelog>
  <changelog author="adam.majer@suse.de" date="1628856000">- CVE-2021-22939.patch: Incomplete validation of rejectUnauthorized parameter
  (bsc#1189369, CVE-2021-22939)</changelog>
  <changelog author="adam.majer@suse.de" date="1642075200">- test_ssl_cert_fixups.patch: fixup SSL certificates in unit tests
- fix_ci_tests.patch: updated for z15 zlib compression</changelog>
  <changelog author="adam.majer@suse.de" date="1644926400">- npm-v6.14.16.tar.gz: update to npm 6.14.16 fixing
  * CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
  * CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
  * CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
  * CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- CVE-2022-21824.patch: fix prototype pollution via console.table
  (bsc#1194514, CVE-2022-21824)</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="9c2794d07c99d342c9c7aaa0d2ca06afcd0968ec803680bd8af5d1117b29fe4c" name="nodejs12" arch="aarch64">
  <version epoch="0" ver="12.22.12" rel="150200.4.32.1"/>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1606392000">- New upstream LTS version 12.20.0:
  * deps:
    + update llhttp '2.1.2' -&gt; '2.1.3'
    + update uv '1.39.0' -&gt; '1.40.0'
    + update uvwasi '0.0.10' -&gt; '0.0.11'
  * fs: add .ref() and .unref() methods to watcher classes
  * http: added scheduling option to http agent
  * module:
    + exports pattern support
    + named exports for CJS via static analysis
  * n-api: add more property defaults (gh#35214)</changelog>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 12.20.1:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)
  * CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference
    (High) This is a vulnerability in OpenSSL which may be exploited
    through Node.js. (bsc#1179491)
- versioned.patch, nodejs-libpath.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- New upstream LTS version 12.20.2:
  * deps: upgrade npm to 6.14.11
- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 12.21.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
  * CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
    (bsc#1182333)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 12.22.1:
  * CVE-2021-3450: OpenSSL - CA certificate check bypass with
    X509_V_FLAG_X509_STRICT (High). (bsc#1183851)
  * CVE-2021-3449: OpenSSL - NULL pointer deref in
    signature_algorithms processing (High) (bsc#1183852)
  * CVE-2020-7774: npm - Update y18n to fix Prototype-Pollution
    (bsc#1184450)
- Changes in LTS version 12.22.0:
  * node-api: define version 8
  * http: runtime deprecate legacy HTTP parser
  * v8: implement v8.stopCoverage() and v8.takeCoverage()
  * worker: add eventLoopUtilization()
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="adam.majer@suse.de" date="1623326400">- Fix-build-with-icu-69.patch: fix building with ICU 69</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- update to 12.22.2:
  * deps: libuv upgrade - Out of bounds read (Medium)
    (bsc#1187973, CVE-2021-22918)
  * deps: npm update to 6.14.13 fixing
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- specfile cleanup</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- update to 12.22.4:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
  deps: upgrade npm to 6.14.14
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 12.22.5:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
- Fix-build-with-icu-69.patch: dropped, not for factory
- cares_public_headers.patch: don't use private headers</changelog>
  <changelog author="adam.majer@suse.de" date="1637928000">- update to 12.22.7:
  * deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 12.22.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
    bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
    bsc#1190053, CVE-2021-39135)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1641556800">- update to 12.22.8:
  * src: fix crash in AfterGetAddrInfo
  * deps: update c-ares to 1.18.1</changelog>
  <changelog author="adam.majer@suse.de" date="1641902400">- update to 12.22.9:
  Security update fixing the following issues:
  * Improper handling of URI Subject Alternative Names (Medium)
  (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
  (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
  (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
  (CVE-2022-21824, bsc#1194514)</changelog>
  <changelog author="adam.majer@suse.de" date="1645012800">- update to 12.22.10
  * Upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
    + CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * Updated ICU time zone data
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch: refreshed
- z15-test-skip.patch: dropped
- fix_ci_tests.patch: fix tests on z15</changelog>
  <changelog author="adam.majer@suse.de" date="1647604800">- update to 12.22.11
  * deps: upgrade openssl sources to 1.1.1n (bsc#1196877,  CVE-2022-0778)
    Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    More details at https://www.openssl.org/news/secadv/20220315.txt</changelog>
  <changelog author="adam.majer@suse.de" date="1649851200">- update to 12.22.12
  * node-api: avoid SecondPassCallback crash
    + fix shutdown crashes
    + make reference weak parameter an indirect link to references
    + fix crash in finalization
    + stop ref gc during environment teardown
    + force env shutdown deferring behavior
  * src: fix finalization crash</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="846e1ad46b910bb019f2cabb1e5767f49b1fc3de7beb16d584452dae36f994d8" name="nodejs12" arch="ppc64le">
  <version epoch="0" ver="12.22.12" rel="150200.4.32.1"/>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1606392000">- New upstream LTS version 12.20.0:
  * deps:
    + update llhttp '2.1.2' -&gt; '2.1.3'
    + update uv '1.39.0' -&gt; '1.40.0'
    + update uvwasi '0.0.10' -&gt; '0.0.11'
  * fs: add .ref() and .unref() methods to watcher classes
  * http: added scheduling option to http agent
  * module:
    + exports pattern support
    + named exports for CJS via static analysis
  * n-api: add more property defaults (gh#35214)</changelog>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 12.20.1:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)
  * CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference
    (High) This is a vulnerability in OpenSSL which may be exploited
    through Node.js. (bsc#1179491)
- versioned.patch, nodejs-libpath.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- New upstream LTS version 12.20.2:
  * deps: upgrade npm to 6.14.11
- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 12.21.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
  * CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
    (bsc#1182333)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 12.22.1:
  * CVE-2021-3450: OpenSSL - CA certificate check bypass with
    X509_V_FLAG_X509_STRICT (High). (bsc#1183851)
  * CVE-2021-3449: OpenSSL - NULL pointer deref in
    signature_algorithms processing (High) (bsc#1183852)
  * CVE-2020-7774: npm - Update y18n to fix Prototype-Pollution
    (bsc#1184450)
- Changes in LTS version 12.22.0:
  * node-api: define version 8
  * http: runtime deprecate legacy HTTP parser
  * v8: implement v8.stopCoverage() and v8.takeCoverage()
  * worker: add eventLoopUtilization()
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="adam.majer@suse.de" date="1623326400">- Fix-build-with-icu-69.patch: fix building with ICU 69</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- update to 12.22.2:
  * deps: libuv upgrade - Out of bounds read (Medium)
    (bsc#1187973, CVE-2021-22918)
  * deps: npm update to 6.14.13 fixing
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- specfile cleanup</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- update to 12.22.4:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
  deps: upgrade npm to 6.14.14
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 12.22.5:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
- Fix-build-with-icu-69.patch: dropped, not for factory
- cares_public_headers.patch: don't use private headers</changelog>
  <changelog author="adam.majer@suse.de" date="1637928000">- update to 12.22.7:
  * deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 12.22.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
    bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
    bsc#1190053, CVE-2021-39135)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1641556800">- update to 12.22.8:
  * src: fix crash in AfterGetAddrInfo
  * deps: update c-ares to 1.18.1</changelog>
  <changelog author="adam.majer@suse.de" date="1641902400">- update to 12.22.9:
  Security update fixing the following issues:
  * Improper handling of URI Subject Alternative Names (Medium)
  (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
  (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
  (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
  (CVE-2022-21824, bsc#1194514)</changelog>
  <changelog author="adam.majer@suse.de" date="1645012800">- update to 12.22.10
  * Upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
    + CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * Updated ICU time zone data
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch: refreshed
- z15-test-skip.patch: dropped
- fix_ci_tests.patch: fix tests on z15</changelog>
  <changelog author="adam.majer@suse.de" date="1647604800">- update to 12.22.11
  * deps: upgrade openssl sources to 1.1.1n (bsc#1196877,  CVE-2022-0778)
    Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    More details at https://www.openssl.org/news/secadv/20220315.txt</changelog>
  <changelog author="adam.majer@suse.de" date="1649851200">- update to 12.22.12
  * node-api: avoid SecondPassCallback crash
    + fix shutdown crashes
    + make reference weak parameter an indirect link to references
    + fix crash in finalization
    + stop ref gc during environment teardown
    + force env shutdown deferring behavior
  * src: fix finalization crash</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="ea3cc629c8bd95902a38aceeda197e949d93d8f727f5532f8b843cadfe3d35dc" name="nodejs12" arch="s390x">
  <version epoch="0" ver="12.22.12" rel="150200.4.32.1"/>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1606392000">- New upstream LTS version 12.20.0:
  * deps:
    + update llhttp '2.1.2' -&gt; '2.1.3'
    + update uv '1.39.0' -&gt; '1.40.0'
    + update uvwasi '0.0.10' -&gt; '0.0.11'
  * fs: add .ref() and .unref() methods to watcher classes
  * http: added scheduling option to http agent
  * module:
    + exports pattern support
    + named exports for CJS via static analysis
  * n-api: add more property defaults (gh#35214)</changelog>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 12.20.1:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)
  * CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference
    (High) This is a vulnerability in OpenSSL which may be exploited
    through Node.js. (bsc#1179491)
- versioned.patch, nodejs-libpath.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- New upstream LTS version 12.20.2:
  * deps: upgrade npm to 6.14.11
- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 12.21.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
  * CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
    (bsc#1182333)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 12.22.1:
  * CVE-2021-3450: OpenSSL - CA certificate check bypass with
    X509_V_FLAG_X509_STRICT (High). (bsc#1183851)
  * CVE-2021-3449: OpenSSL - NULL pointer deref in
    signature_algorithms processing (High) (bsc#1183852)
  * CVE-2020-7774: npm - Update y18n to fix Prototype-Pollution
    (bsc#1184450)
- Changes in LTS version 12.22.0:
  * node-api: define version 8
  * http: runtime deprecate legacy HTTP parser
  * v8: implement v8.stopCoverage() and v8.takeCoverage()
  * worker: add eventLoopUtilization()
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="adam.majer@suse.de" date="1623326400">- Fix-build-with-icu-69.patch: fix building with ICU 69</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- update to 12.22.2:
  * deps: libuv upgrade - Out of bounds read (Medium)
    (bsc#1187973, CVE-2021-22918)
  * deps: npm update to 6.14.13 fixing
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- specfile cleanup</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- update to 12.22.4:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
  deps: upgrade npm to 6.14.14
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 12.22.5:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
- Fix-build-with-icu-69.patch: dropped, not for factory
- cares_public_headers.patch: don't use private headers</changelog>
  <changelog author="adam.majer@suse.de" date="1637928000">- update to 12.22.7:
  * deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 12.22.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
    bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
    bsc#1190053, CVE-2021-39135)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1641556800">- update to 12.22.8:
  * src: fix crash in AfterGetAddrInfo
  * deps: update c-ares to 1.18.1</changelog>
  <changelog author="adam.majer@suse.de" date="1641902400">- update to 12.22.9:
  Security update fixing the following issues:
  * Improper handling of URI Subject Alternative Names (Medium)
  (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
  (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
  (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
  (CVE-2022-21824, bsc#1194514)</changelog>
  <changelog author="adam.majer@suse.de" date="1645012800">- update to 12.22.10
  * Upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
    + CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * Updated ICU time zone data
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch: refreshed
- z15-test-skip.patch: dropped
- fix_ci_tests.patch: fix tests on z15</changelog>
  <changelog author="adam.majer@suse.de" date="1647604800">- update to 12.22.11
  * deps: upgrade openssl sources to 1.1.1n (bsc#1196877,  CVE-2022-0778)
    Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    More details at https://www.openssl.org/news/secadv/20220315.txt</changelog>
  <changelog author="adam.majer@suse.de" date="1649851200">- update to 12.22.12
  * node-api: avoid SecondPassCallback crash
    + fix shutdown crashes
    + make reference weak parameter an indirect link to references
    + fix crash in finalization
    + stop ref gc during environment teardown
    + force env shutdown deferring behavior
  * src: fix finalization crash</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="00f16540ceaef9a53ae8eade607fe7e60f3c0a53fc3af1d420ab256fc716a2f6" name="nodejs12" arch="src">
  <version epoch="0" ver="12.22.12" rel="150200.4.32.1"/>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1606392000">- New upstream LTS version 12.20.0:
  * deps:
    + update llhttp '2.1.2' -&gt; '2.1.3'
    + update uv '1.39.0' -&gt; '1.40.0'
    + update uvwasi '0.0.10' -&gt; '0.0.11'
  * fs: add .ref() and .unref() methods to watcher classes
  * http: added scheduling option to http agent
  * module:
    + exports pattern support
    + named exports for CJS via static analysis
  * n-api: add more property defaults (gh#35214)</changelog>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 12.20.1:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)
  * CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference
    (High) This is a vulnerability in OpenSSL which may be exploited
    through Node.js. (bsc#1179491)
- versioned.patch, nodejs-libpath.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- New upstream LTS version 12.20.2:
  * deps: upgrade npm to 6.14.11
- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 12.21.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
  * CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
    (bsc#1182333)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 12.22.1:
  * CVE-2021-3450: OpenSSL - CA certificate check bypass with
    X509_V_FLAG_X509_STRICT (High). (bsc#1183851)
  * CVE-2021-3449: OpenSSL - NULL pointer deref in
    signature_algorithms processing (High) (bsc#1183852)
  * CVE-2020-7774: npm - Update y18n to fix Prototype-Pollution
    (bsc#1184450)
- Changes in LTS version 12.22.0:
  * node-api: define version 8
  * http: runtime deprecate legacy HTTP parser
  * v8: implement v8.stopCoverage() and v8.takeCoverage()
  * worker: add eventLoopUtilization()
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="adam.majer@suse.de" date="1623326400">- Fix-build-with-icu-69.patch: fix building with ICU 69</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- update to 12.22.2:
  * deps: libuv upgrade - Out of bounds read (Medium)
    (bsc#1187973, CVE-2021-22918)
  * deps: npm update to 6.14.13 fixing
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- specfile cleanup</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- update to 12.22.4:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
  deps: upgrade npm to 6.14.14
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 12.22.5:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
- Fix-build-with-icu-69.patch: dropped, not for factory
- cares_public_headers.patch: don't use private headers</changelog>
  <changelog author="adam.majer@suse.de" date="1637928000">- update to 12.22.7:
  * deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 12.22.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
    bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
    bsc#1190053, CVE-2021-39135)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1641556800">- update to 12.22.8:
  * src: fix crash in AfterGetAddrInfo
  * deps: update c-ares to 1.18.1</changelog>
  <changelog author="adam.majer@suse.de" date="1641902400">- update to 12.22.9:
  Security update fixing the following issues:
  * Improper handling of URI Subject Alternative Names (Medium)
  (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
  (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
  (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
  (CVE-2022-21824, bsc#1194514)</changelog>
  <changelog author="adam.majer@suse.de" date="1645012800">- update to 12.22.10
  * Upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
    + CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * Updated ICU time zone data
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch: refreshed
- z15-test-skip.patch: dropped
- fix_ci_tests.patch: fix tests on z15</changelog>
  <changelog author="adam.majer@suse.de" date="1647604800">- update to 12.22.11
  * deps: upgrade openssl sources to 1.1.1n (bsc#1196877,  CVE-2022-0778)
    Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    More details at https://www.openssl.org/news/secadv/20220315.txt</changelog>
  <changelog author="adam.majer@suse.de" date="1649851200">- update to 12.22.12
  * node-api: avoid SecondPassCallback crash
    + fix shutdown crashes
    + make reference weak parameter an indirect link to references
    + fix crash in finalization
    + stop ref gc during environment teardown
    + force env shutdown deferring behavior
  * src: fix finalization crash</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="738a936d645f520747052ef9289eedcca08b5153f8a24f78a513ae4a5209fb97" name="nodejs12" arch="x86_64">
  <version epoch="0" ver="12.22.12" rel="150200.4.32.1"/>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1606392000">- New upstream LTS version 12.20.0:
  * deps:
    + update llhttp '2.1.2' -&gt; '2.1.3'
    + update uv '1.39.0' -&gt; '1.40.0'
    + update uvwasi '0.0.10' -&gt; '0.0.11'
  * fs: add .ref() and .unref() methods to watcher classes
  * http: added scheduling option to http agent
  * module:
    + exports pattern support
    + named exports for CJS via static analysis
  * n-api: add more property defaults (gh#35214)</changelog>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 12.20.1:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)
  * CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference
    (High) This is a vulnerability in OpenSSL which may be exploited
    through Node.js. (bsc#1179491)
- versioned.patch, nodejs-libpath.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- New upstream LTS version 12.20.2:
  * deps: upgrade npm to 6.14.11
- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 12.21.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
  * CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
    (bsc#1182333)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 12.22.1:
  * CVE-2021-3450: OpenSSL - CA certificate check bypass with
    X509_V_FLAG_X509_STRICT (High). (bsc#1183851)
  * CVE-2021-3449: OpenSSL - NULL pointer deref in
    signature_algorithms processing (High) (bsc#1183852)
  * CVE-2020-7774: npm - Update y18n to fix Prototype-Pollution
    (bsc#1184450)
- Changes in LTS version 12.22.0:
  * node-api: define version 8
  * http: runtime deprecate legacy HTTP parser
  * v8: implement v8.stopCoverage() and v8.takeCoverage()
  * worker: add eventLoopUtilization()
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="adam.majer@suse.de" date="1623326400">- Fix-build-with-icu-69.patch: fix building with ICU 69</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- update to 12.22.2:
  * deps: libuv upgrade - Out of bounds read (Medium)
    (bsc#1187973, CVE-2021-22918)
  * deps: npm update to 6.14.13 fixing
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- specfile cleanup</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- update to 12.22.4:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
  deps: upgrade npm to 6.14.14
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 12.22.5:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
- Fix-build-with-icu-69.patch: dropped, not for factory
- cares_public_headers.patch: don't use private headers</changelog>
  <changelog author="adam.majer@suse.de" date="1637928000">- update to 12.22.7:
  * deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 12.22.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
    bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
    bsc#1190053, CVE-2021-39135)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1641556800">- update to 12.22.8:
  * src: fix crash in AfterGetAddrInfo
  * deps: update c-ares to 1.18.1</changelog>
  <changelog author="adam.majer@suse.de" date="1641902400">- update to 12.22.9:
  Security update fixing the following issues:
  * Improper handling of URI Subject Alternative Names (Medium)
  (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
  (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
  (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
  (CVE-2022-21824, bsc#1194514)</changelog>
  <changelog author="adam.majer@suse.de" date="1645012800">- update to 12.22.10
  * Upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
    + CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * Updated ICU time zone data
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch: refreshed
- z15-test-skip.patch: dropped
- fix_ci_tests.patch: fix tests on z15</changelog>
  <changelog author="adam.majer@suse.de" date="1647604800">- update to 12.22.11
  * deps: upgrade openssl sources to 1.1.1n (bsc#1196877,  CVE-2022-0778)
    Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    More details at https://www.openssl.org/news/secadv/20220315.txt</changelog>
  <changelog author="adam.majer@suse.de" date="1649851200">- update to 12.22.12
  * node-api: avoid SecondPassCallback crash
    + fix shutdown crashes
    + make reference weak parameter an indirect link to references
    + fix crash in finalization
    + stop ref gc during environment teardown
    + force env shutdown deferring behavior
  * src: fix finalization crash</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="277677cc0732642bc25575ec7b34a55bb5d1294c3fddc39014fc534fb4b969d0" name="nodejs12-devel" arch="aarch64">
  <version epoch="0" ver="12.22.12" rel="150200.4.32.1"/>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1606392000">- New upstream LTS version 12.20.0:
  * deps:
    + update llhttp '2.1.2' -&gt; '2.1.3'
    + update uv '1.39.0' -&gt; '1.40.0'
    + update uvwasi '0.0.10' -&gt; '0.0.11'
  * fs: add .ref() and .unref() methods to watcher classes
  * http: added scheduling option to http agent
  * module:
    + exports pattern support
    + named exports for CJS via static analysis
  * n-api: add more property defaults (gh#35214)</changelog>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 12.20.1:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)
  * CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference
    (High) This is a vulnerability in OpenSSL which may be exploited
    through Node.js. (bsc#1179491)
- versioned.patch, nodejs-libpath.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- New upstream LTS version 12.20.2:
  * deps: upgrade npm to 6.14.11
- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 12.21.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
  * CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
    (bsc#1182333)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 12.22.1:
  * CVE-2021-3450: OpenSSL - CA certificate check bypass with
    X509_V_FLAG_X509_STRICT (High). (bsc#1183851)
  * CVE-2021-3449: OpenSSL - NULL pointer deref in
    signature_algorithms processing (High) (bsc#1183852)
  * CVE-2020-7774: npm - Update y18n to fix Prototype-Pollution
    (bsc#1184450)
- Changes in LTS version 12.22.0:
  * node-api: define version 8
  * http: runtime deprecate legacy HTTP parser
  * v8: implement v8.stopCoverage() and v8.takeCoverage()
  * worker: add eventLoopUtilization()
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="adam.majer@suse.de" date="1623326400">- Fix-build-with-icu-69.patch: fix building with ICU 69</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- update to 12.22.2:
  * deps: libuv upgrade - Out of bounds read (Medium)
    (bsc#1187973, CVE-2021-22918)
  * deps: npm update to 6.14.13 fixing
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- specfile cleanup</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- update to 12.22.4:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
  deps: upgrade npm to 6.14.14
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 12.22.5:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
- Fix-build-with-icu-69.patch: dropped, not for factory
- cares_public_headers.patch: don't use private headers</changelog>
  <changelog author="adam.majer@suse.de" date="1637928000">- update to 12.22.7:
  * deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 12.22.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
    bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
    bsc#1190053, CVE-2021-39135)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1641556800">- update to 12.22.8:
  * src: fix crash in AfterGetAddrInfo
  * deps: update c-ares to 1.18.1</changelog>
  <changelog author="adam.majer@suse.de" date="1641902400">- update to 12.22.9:
  Security update fixing the following issues:
  * Improper handling of URI Subject Alternative Names (Medium)
  (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
  (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
  (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
  (CVE-2022-21824, bsc#1194514)</changelog>
  <changelog author="adam.majer@suse.de" date="1645012800">- update to 12.22.10
  * Upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
    + CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * Updated ICU time zone data
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch: refreshed
- z15-test-skip.patch: dropped
- fix_ci_tests.patch: fix tests on z15</changelog>
  <changelog author="adam.majer@suse.de" date="1647604800">- update to 12.22.11
  * deps: upgrade openssl sources to 1.1.1n (bsc#1196877,  CVE-2022-0778)
    Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    More details at https://www.openssl.org/news/secadv/20220315.txt</changelog>
  <changelog author="adam.majer@suse.de" date="1649851200">- update to 12.22.12
  * node-api: avoid SecondPassCallback crash
    + fix shutdown crashes
    + make reference weak parameter an indirect link to references
    + fix crash in finalization
    + stop ref gc during environment teardown
    + force env shutdown deferring behavior
  * src: fix finalization crash</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="c58043f15150158943fe4a5c911b91b0e5e747b4fd8f10e5ece3abc0fb0d5412" name="nodejs12-devel" arch="ppc64le">
  <version epoch="0" ver="12.22.12" rel="150200.4.32.1"/>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1606392000">- New upstream LTS version 12.20.0:
  * deps:
    + update llhttp '2.1.2' -&gt; '2.1.3'
    + update uv '1.39.0' -&gt; '1.40.0'
    + update uvwasi '0.0.10' -&gt; '0.0.11'
  * fs: add .ref() and .unref() methods to watcher classes
  * http: added scheduling option to http agent
  * module:
    + exports pattern support
    + named exports for CJS via static analysis
  * n-api: add more property defaults (gh#35214)</changelog>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 12.20.1:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)
  * CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference
    (High) This is a vulnerability in OpenSSL which may be exploited
    through Node.js. (bsc#1179491)
- versioned.patch, nodejs-libpath.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- New upstream LTS version 12.20.2:
  * deps: upgrade npm to 6.14.11
- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 12.21.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
  * CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
    (bsc#1182333)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 12.22.1:
  * CVE-2021-3450: OpenSSL - CA certificate check bypass with
    X509_V_FLAG_X509_STRICT (High). (bsc#1183851)
  * CVE-2021-3449: OpenSSL - NULL pointer deref in
    signature_algorithms processing (High) (bsc#1183852)
  * CVE-2020-7774: npm - Update y18n to fix Prototype-Pollution
    (bsc#1184450)
- Changes in LTS version 12.22.0:
  * node-api: define version 8
  * http: runtime deprecate legacy HTTP parser
  * v8: implement v8.stopCoverage() and v8.takeCoverage()
  * worker: add eventLoopUtilization()
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="adam.majer@suse.de" date="1623326400">- Fix-build-with-icu-69.patch: fix building with ICU 69</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- update to 12.22.2:
  * deps: libuv upgrade - Out of bounds read (Medium)
    (bsc#1187973, CVE-2021-22918)
  * deps: npm update to 6.14.13 fixing
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- specfile cleanup</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- update to 12.22.4:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
  deps: upgrade npm to 6.14.14
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 12.22.5:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
- Fix-build-with-icu-69.patch: dropped, not for factory
- cares_public_headers.patch: don't use private headers</changelog>
  <changelog author="adam.majer@suse.de" date="1637928000">- update to 12.22.7:
  * deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 12.22.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
    bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
    bsc#1190053, CVE-2021-39135)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1641556800">- update to 12.22.8:
  * src: fix crash in AfterGetAddrInfo
  * deps: update c-ares to 1.18.1</changelog>
  <changelog author="adam.majer@suse.de" date="1641902400">- update to 12.22.9:
  Security update fixing the following issues:
  * Improper handling of URI Subject Alternative Names (Medium)
  (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
  (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
  (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
  (CVE-2022-21824, bsc#1194514)</changelog>
  <changelog author="adam.majer@suse.de" date="1645012800">- update to 12.22.10
  * Upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
    + CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * Updated ICU time zone data
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch: refreshed
- z15-test-skip.patch: dropped
- fix_ci_tests.patch: fix tests on z15</changelog>
  <changelog author="adam.majer@suse.de" date="1647604800">- update to 12.22.11
  * deps: upgrade openssl sources to 1.1.1n (bsc#1196877,  CVE-2022-0778)
    Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    More details at https://www.openssl.org/news/secadv/20220315.txt</changelog>
  <changelog author="adam.majer@suse.de" date="1649851200">- update to 12.22.12
  * node-api: avoid SecondPassCallback crash
    + fix shutdown crashes
    + make reference weak parameter an indirect link to references
    + fix crash in finalization
    + stop ref gc during environment teardown
    + force env shutdown deferring behavior
  * src: fix finalization crash</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="922b38b7269beb82a409c7d962c940ece861daf4cad06578008b648fe24ca436" name="nodejs12-devel" arch="s390x">
  <version epoch="0" ver="12.22.12" rel="150200.4.32.1"/>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1606392000">- New upstream LTS version 12.20.0:
  * deps:
    + update llhttp '2.1.2' -&gt; '2.1.3'
    + update uv '1.39.0' -&gt; '1.40.0'
    + update uvwasi '0.0.10' -&gt; '0.0.11'
  * fs: add .ref() and .unref() methods to watcher classes
  * http: added scheduling option to http agent
  * module:
    + exports pattern support
    + named exports for CJS via static analysis
  * n-api: add more property defaults (gh#35214)</changelog>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 12.20.1:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)
  * CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference
    (High) This is a vulnerability in OpenSSL which may be exploited
    through Node.js. (bsc#1179491)
- versioned.patch, nodejs-libpath.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- New upstream LTS version 12.20.2:
  * deps: upgrade npm to 6.14.11
- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 12.21.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
  * CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
    (bsc#1182333)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 12.22.1:
  * CVE-2021-3450: OpenSSL - CA certificate check bypass with
    X509_V_FLAG_X509_STRICT (High). (bsc#1183851)
  * CVE-2021-3449: OpenSSL - NULL pointer deref in
    signature_algorithms processing (High) (bsc#1183852)
  * CVE-2020-7774: npm - Update y18n to fix Prototype-Pollution
    (bsc#1184450)
- Changes in LTS version 12.22.0:
  * node-api: define version 8
  * http: runtime deprecate legacy HTTP parser
  * v8: implement v8.stopCoverage() and v8.takeCoverage()
  * worker: add eventLoopUtilization()
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="adam.majer@suse.de" date="1623326400">- Fix-build-with-icu-69.patch: fix building with ICU 69</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- update to 12.22.2:
  * deps: libuv upgrade - Out of bounds read (Medium)
    (bsc#1187973, CVE-2021-22918)
  * deps: npm update to 6.14.13 fixing
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- specfile cleanup</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- update to 12.22.4:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
  deps: upgrade npm to 6.14.14
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 12.22.5:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
- Fix-build-with-icu-69.patch: dropped, not for factory
- cares_public_headers.patch: don't use private headers</changelog>
  <changelog author="adam.majer@suse.de" date="1637928000">- update to 12.22.7:
  * deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 12.22.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
    bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
    bsc#1190053, CVE-2021-39135)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1641556800">- update to 12.22.8:
  * src: fix crash in AfterGetAddrInfo
  * deps: update c-ares to 1.18.1</changelog>
  <changelog author="adam.majer@suse.de" date="1641902400">- update to 12.22.9:
  Security update fixing the following issues:
  * Improper handling of URI Subject Alternative Names (Medium)
  (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
  (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
  (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
  (CVE-2022-21824, bsc#1194514)</changelog>
  <changelog author="adam.majer@suse.de" date="1645012800">- update to 12.22.10
  * Upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
    + CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * Updated ICU time zone data
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch: refreshed
- z15-test-skip.patch: dropped
- fix_ci_tests.patch: fix tests on z15</changelog>
  <changelog author="adam.majer@suse.de" date="1647604800">- update to 12.22.11
  * deps: upgrade openssl sources to 1.1.1n (bsc#1196877,  CVE-2022-0778)
    Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    More details at https://www.openssl.org/news/secadv/20220315.txt</changelog>
  <changelog author="adam.majer@suse.de" date="1649851200">- update to 12.22.12
  * node-api: avoid SecondPassCallback crash
    + fix shutdown crashes
    + make reference weak parameter an indirect link to references
    + fix crash in finalization
    + stop ref gc during environment teardown
    + force env shutdown deferring behavior
  * src: fix finalization crash</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="bad59aef65ec694dc9e4a83ceb6054c47683dca803dda6c95820c36e8d735898" name="nodejs12-devel" arch="x86_64">
  <version epoch="0" ver="12.22.12" rel="150200.4.32.1"/>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1606392000">- New upstream LTS version 12.20.0:
  * deps:
    + update llhttp '2.1.2' -&gt; '2.1.3'
    + update uv '1.39.0' -&gt; '1.40.0'
    + update uvwasi '0.0.10' -&gt; '0.0.11'
  * fs: add .ref() and .unref() methods to watcher classes
  * http: added scheduling option to http agent
  * module:
    + exports pattern support
    + named exports for CJS via static analysis
  * n-api: add more property defaults (gh#35214)</changelog>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 12.20.1:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)
  * CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference
    (High) This is a vulnerability in OpenSSL which may be exploited
    through Node.js. (bsc#1179491)
- versioned.patch, nodejs-libpath.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- New upstream LTS version 12.20.2:
  * deps: upgrade npm to 6.14.11
- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 12.21.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
  * CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
    (bsc#1182333)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 12.22.1:
  * CVE-2021-3450: OpenSSL - CA certificate check bypass with
    X509_V_FLAG_X509_STRICT (High). (bsc#1183851)
  * CVE-2021-3449: OpenSSL - NULL pointer deref in
    signature_algorithms processing (High) (bsc#1183852)
  * CVE-2020-7774: npm - Update y18n to fix Prototype-Pollution
    (bsc#1184450)
- Changes in LTS version 12.22.0:
  * node-api: define version 8
  * http: runtime deprecate legacy HTTP parser
  * v8: implement v8.stopCoverage() and v8.takeCoverage()
  * worker: add eventLoopUtilization()
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="adam.majer@suse.de" date="1623326400">- Fix-build-with-icu-69.patch: fix building with ICU 69</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- update to 12.22.2:
  * deps: libuv upgrade - Out of bounds read (Medium)
    (bsc#1187973, CVE-2021-22918)
  * deps: npm update to 6.14.13 fixing
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- specfile cleanup</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- update to 12.22.4:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
  deps: upgrade npm to 6.14.14
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 12.22.5:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
- Fix-build-with-icu-69.patch: dropped, not for factory
- cares_public_headers.patch: don't use private headers</changelog>
  <changelog author="adam.majer@suse.de" date="1637928000">- update to 12.22.7:
  * deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 12.22.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
    bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
    bsc#1190053, CVE-2021-39135)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1641556800">- update to 12.22.8:
  * src: fix crash in AfterGetAddrInfo
  * deps: update c-ares to 1.18.1</changelog>
  <changelog author="adam.majer@suse.de" date="1641902400">- update to 12.22.9:
  Security update fixing the following issues:
  * Improper handling of URI Subject Alternative Names (Medium)
  (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
  (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
  (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
  (CVE-2022-21824, bsc#1194514)</changelog>
  <changelog author="adam.majer@suse.de" date="1645012800">- update to 12.22.10
  * Upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
    + CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * Updated ICU time zone data
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch: refreshed
- z15-test-skip.patch: dropped
- fix_ci_tests.patch: fix tests on z15</changelog>
  <changelog author="adam.majer@suse.de" date="1647604800">- update to 12.22.11
  * deps: upgrade openssl sources to 1.1.1n (bsc#1196877,  CVE-2022-0778)
    Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    More details at https://www.openssl.org/news/secadv/20220315.txt</changelog>
  <changelog author="adam.majer@suse.de" date="1649851200">- update to 12.22.12
  * node-api: avoid SecondPassCallback crash
    + fix shutdown crashes
    + make reference weak parameter an indirect link to references
    + fix crash in finalization
    + stop ref gc during environment teardown
    + force env shutdown deferring behavior
  * src: fix finalization crash</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="2b6a4a2b9d3b6b9434f08851a0509a32a5fb755a4686553348d27f366f10bf29" name="nodejs12-docs" arch="noarch">
  <version epoch="0" ver="12.22.12" rel="150200.4.32.1"/>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1606392000">- New upstream LTS version 12.20.0:
  * deps:
    + update llhttp '2.1.2' -&gt; '2.1.3'
    + update uv '1.39.0' -&gt; '1.40.0'
    + update uvwasi '0.0.10' -&gt; '0.0.11'
  * fs: add .ref() and .unref() methods to watcher classes
  * http: added scheduling option to http agent
  * module:
    + exports pattern support
    + named exports for CJS via static analysis
  * n-api: add more property defaults (gh#35214)</changelog>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 12.20.1:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)
  * CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference
    (High) This is a vulnerability in OpenSSL which may be exploited
    through Node.js. (bsc#1179491)
- versioned.patch, nodejs-libpath.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- New upstream LTS version 12.20.2:
  * deps: upgrade npm to 6.14.11
- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 12.21.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
  * CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
    (bsc#1182333)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 12.22.1:
  * CVE-2021-3450: OpenSSL - CA certificate check bypass with
    X509_V_FLAG_X509_STRICT (High). (bsc#1183851)
  * CVE-2021-3449: OpenSSL - NULL pointer deref in
    signature_algorithms processing (High) (bsc#1183852)
  * CVE-2020-7774: npm - Update y18n to fix Prototype-Pollution
    (bsc#1184450)
- Changes in LTS version 12.22.0:
  * node-api: define version 8
  * http: runtime deprecate legacy HTTP parser
  * v8: implement v8.stopCoverage() and v8.takeCoverage()
  * worker: add eventLoopUtilization()
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="adam.majer@suse.de" date="1623326400">- Fix-build-with-icu-69.patch: fix building with ICU 69</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- update to 12.22.2:
  * deps: libuv upgrade - Out of bounds read (Medium)
    (bsc#1187973, CVE-2021-22918)
  * deps: npm update to 6.14.13 fixing
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- specfile cleanup</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- update to 12.22.4:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
  deps: upgrade npm to 6.14.14
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 12.22.5:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
- Fix-build-with-icu-69.patch: dropped, not for factory
- cares_public_headers.patch: don't use private headers</changelog>
  <changelog author="adam.majer@suse.de" date="1637928000">- update to 12.22.7:
  * deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 12.22.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
    bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
    bsc#1190053, CVE-2021-39135)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1641556800">- update to 12.22.8:
  * src: fix crash in AfterGetAddrInfo
  * deps: update c-ares to 1.18.1</changelog>
  <changelog author="adam.majer@suse.de" date="1641902400">- update to 12.22.9:
  Security update fixing the following issues:
  * Improper handling of URI Subject Alternative Names (Medium)
  (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
  (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
  (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
  (CVE-2022-21824, bsc#1194514)</changelog>
  <changelog author="adam.majer@suse.de" date="1645012800">- update to 12.22.10
  * Upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
    + CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * Updated ICU time zone data
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch: refreshed
- z15-test-skip.patch: dropped
- fix_ci_tests.patch: fix tests on z15</changelog>
  <changelog author="adam.majer@suse.de" date="1647604800">- update to 12.22.11
  * deps: upgrade openssl sources to 1.1.1n (bsc#1196877,  CVE-2022-0778)
    Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    More details at https://www.openssl.org/news/secadv/20220315.txt</changelog>
  <changelog author="adam.majer@suse.de" date="1649851200">- update to 12.22.12
  * node-api: avoid SecondPassCallback crash
    + fix shutdown crashes
    + make reference weak parameter an indirect link to references
    + fix crash in finalization
    + stop ref gc during environment teardown
    + force env shutdown deferring behavior
  * src: fix finalization crash</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="fc77fded344c97f125774624cc5ee0f052346da5fb022354a7e0759627390792" name="nodejs14" arch="aarch64">
  <version epoch="0" ver="14.19.1" rel="150200.15.31.1"/>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="adam.majer@suse.de" date="1608552000">- New upstream LTS version 14.15.3:
  * deps:
    + upgrade npm to 6.14.9
    + update acorn to v8.0.4
  * http2: check write not scheduled in scope destructor
  * stream: fix regression on duplex end
- versioned.patch, sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 14.15.4:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- New upstream LTS version 14.15.5:
  * deps:
    + upgrade npm to 6.14.11
    + V8: backport dfcf1e86fac0 #37245
    Note: Node.js is not believed to be vulnerable to CVE-2021-21148
  * stream,zlib: do not use _stream_* anymore
- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 14.16.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 14.16.1:
  * CVE-2020-7774: npm upgrade - Update y18n to fix Prototype-Pollution (High)
    This is a vulnerability in the y18n npm module which may be
    exploited by prototype pollution. You can read more about it in
    https://github.com/advisories/GHSA-c4w7-xm78-47vh
    (bsc#1184450)
  * deps: upgrade npm to 6.14.12
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="dmueller@suse.com" date="1622808000">- update to 14.17.0:
  * Experimental support for AbortController and AbortSignal
  * Diagnostics channel (experimental module)
  * UUID support in the crypto module
  * update ICU to 68.1
  * upgrade to libuv 1.41.0
  * deps: npm update to 6.14.13
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- add Fix-build-with-icu-69.patch: fix build with icu 69</changelog>
  <changelog author="adam.majer@suse.de" date="1623931200">- update to 14.17.1:
  * deps: update ICU to 69.1
  * errors: align source-map stacks with spec
- Fix-build-with-icu-69.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1625227200">- update to 14.17.2:
  deps: libuv upgrade - Out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
- old_icu.patch: update with upstream's patch from
  https://github.com/nodejs/node/pull/39068
- specfile cleanup</changelog>
  <changelog author="adam.majer@suse.de" date="1627905600">- update to 14.17.4:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
- old_icu.patch: merged, removed
- versioned.patch: updated
- node_modules.tar.xz: refreshed
- PR39011.patch: use localhost instead of remote for unit test</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 14.17.5:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
- cares_public_headers.patch: don't use private headers</changelog>
  <changelog author="adam.majer@suse.de" date="1636459200">- update to 14.18.1:
  * deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 14.18.0:
  * buffer:
    + introduce Blob
    + add base64url encoding option
  * child_process:
    + allow options.cwd receive a URL
    + add timeout to spawn and fork
    + allow promisified exec to be cancel
    + add 'overlapped' stdio flag
  * dns: add "tries" option to Resolve options
  * fs:
    + allow empty string for temp directory prefix
    + allow no-params fsPromises fileHandle read
    + add support for async iterators to fsPromises.writeFile
  * http2: add support for sensitive headers
  * process: add 'worker' event
  * tls: allow reading data into a static buffer
  * worker: add setEnvironmentData/getEnvironmentData
- changes in 14.17.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
    bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
    bsc#1190053, CVE-2021-39135)
- test-skip-y2038-on-32bit-time_t.patch: fix test failure when
  64-bit time_t is used on 32-bit arches
- refreshed patches: versioned.patch, flaky_test_rerun.patch
- PR39011.patch: upstreamed</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1637841600">- Fix CXXFLAGS in Tumbleweed - boo#1192824</changelog>
  <changelog author="adam.majer@suse.de" date="1639656000">- update to 14.18.2:
  * lib: fix regular expression to detect `/` and `\`
  * worker: avoid potential deadlock on NearHeapLimit
- sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1641902400">- update to 14.18.3:
  Security update fixing the following issues:
  * Improper handling of URI Subject Alternative Names (Medium)
  (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
  (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
  (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
  (CVE-2022-21824, bsc#1194514)</changelog>
  <changelog author="adam.majer@suse.de" date="1641988800">- z15-test-skip.patch: dropped, no longer required
- fix_ci_tests.patch: update tests for z15</changelog>
  <changelog author="adam.majer@suse.de" date="1645012800">- update to 14.19.0:
  * crypto: make FIPS related options always available
  * deps: deps: upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
    + CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * module: support pattern trailers
  * src: make napi_create_reference accept symbol
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch, nodejs-libpath.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">Update to 14.19.1:
  * deps: upgrade openssl sources to 1.1.1n (bsc#1196877,  CVE-2022-0778)
    Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    More details at https://www.openssl.org/news/secadv/20220315.txt
- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="12c1069aba9d40104091ffdd13d01df381b2d4a6a4553072ce4169b1db907fc4" name="nodejs14" arch="ppc64le">
  <version epoch="0" ver="14.19.1" rel="150200.15.31.1"/>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="adam.majer@suse.de" date="1608552000">- New upstream LTS version 14.15.3:
  * deps:
    + upgrade npm to 6.14.9
    + update acorn to v8.0.4
  * http2: check write not scheduled in scope destructor
  * stream: fix regression on duplex end
- versioned.patch, sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 14.15.4:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- New upstream LTS version 14.15.5:
  * deps:
    + upgrade npm to 6.14.11
    + V8: backport dfcf1e86fac0 #37245
    Note: Node.js is not believed to be vulnerable to CVE-2021-21148
  * stream,zlib: do not use _stream_* anymore
- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 14.16.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 14.16.1:
  * CVE-2020-7774: npm upgrade - Update y18n to fix Prototype-Pollution (High)
    This is a vulnerability in the y18n npm module which may be
    exploited by prototype pollution. You can read more about it in
    https://github.com/advisories/GHSA-c4w7-xm78-47vh
    (bsc#1184450)
  * deps: upgrade npm to 6.14.12
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="dmueller@suse.com" date="1622808000">- update to 14.17.0:
  * Experimental support for AbortController and AbortSignal
  * Diagnostics channel (experimental module)
  * UUID support in the crypto module
  * update ICU to 68.1
  * upgrade to libuv 1.41.0
  * deps: npm update to 6.14.13
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- add Fix-build-with-icu-69.patch: fix build with icu 69</changelog>
  <changelog author="adam.majer@suse.de" date="1623931200">- update to 14.17.1:
  * deps: update ICU to 69.1
  * errors: align source-map stacks with spec
- Fix-build-with-icu-69.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1625227200">- update to 14.17.2:
  deps: libuv upgrade - Out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
- old_icu.patch: update with upstream's patch from
  https://github.com/nodejs/node/pull/39068
- specfile cleanup</changelog>
  <changelog author="adam.majer@suse.de" date="1627905600">- update to 14.17.4:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
- old_icu.patch: merged, removed
- versioned.patch: updated
- node_modules.tar.xz: refreshed
- PR39011.patch: use localhost instead of remote for unit test</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 14.17.5:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
- cares_public_headers.patch: don't use private headers</changelog>
  <changelog author="adam.majer@suse.de" date="1636459200">- update to 14.18.1:
  * deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 14.18.0:
  * buffer:
    + introduce Blob
    + add base64url encoding option
  * child_process:
    + allow options.cwd receive a URL
    + add timeout to spawn and fork
    + allow promisified exec to be cancel
    + add 'overlapped' stdio flag
  * dns: add "tries" option to Resolve options
  * fs:
    + allow empty string for temp directory prefix
    + allow no-params fsPromises fileHandle read
    + add support for async iterators to fsPromises.writeFile
  * http2: add support for sensitive headers
  * process: add 'worker' event
  * tls: allow reading data into a static buffer
  * worker: add setEnvironmentData/getEnvironmentData
- changes in 14.17.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
    bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
    bsc#1190053, CVE-2021-39135)
- test-skip-y2038-on-32bit-time_t.patch: fix test failure when
  64-bit time_t is used on 32-bit arches
- refreshed patches: versioned.patch, flaky_test_rerun.patch
- PR39011.patch: upstreamed</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1637841600">- Fix CXXFLAGS in Tumbleweed - boo#1192824</changelog>
  <changelog author="adam.majer@suse.de" date="1639656000">- update to 14.18.2:
  * lib: fix regular expression to detect `/` and `\`
  * worker: avoid potential deadlock on NearHeapLimit
- sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1641902400">- update to 14.18.3:
  Security update fixing the following issues:
  * Improper handling of URI Subject Alternative Names (Medium)
  (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
  (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
  (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
  (CVE-2022-21824, bsc#1194514)</changelog>
  <changelog author="adam.majer@suse.de" date="1641988800">- z15-test-skip.patch: dropped, no longer required
- fix_ci_tests.patch: update tests for z15</changelog>
  <changelog author="adam.majer@suse.de" date="1645012800">- update to 14.19.0:
  * crypto: make FIPS related options always available
  * deps: deps: upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
    + CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * module: support pattern trailers
  * src: make napi_create_reference accept symbol
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch, nodejs-libpath.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">Update to 14.19.1:
  * deps: upgrade openssl sources to 1.1.1n (bsc#1196877,  CVE-2022-0778)
    Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    More details at https://www.openssl.org/news/secadv/20220315.txt
- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="2522b225d4d4290fa5c341b2c0cd65dd81db89c0032e72906a4b48bed4bd78af" name="nodejs14" arch="s390x">
  <version epoch="0" ver="14.19.1" rel="150200.15.31.1"/>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="adam.majer@suse.de" date="1608552000">- New upstream LTS version 14.15.3:
  * deps:
    + upgrade npm to 6.14.9
    + update acorn to v8.0.4
  * http2: check write not scheduled in scope destructor
  * stream: fix regression on duplex end
- versioned.patch, sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 14.15.4:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- New upstream LTS version 14.15.5:
  * deps:
    + upgrade npm to 6.14.11
    + V8: backport dfcf1e86fac0 #37245
    Note: Node.js is not believed to be vulnerable to CVE-2021-21148
  * stream,zlib: do not use _stream_* anymore
- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 14.16.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 14.16.1:
  * CVE-2020-7774: npm upgrade - Update y18n to fix Prototype-Pollution (High)
    This is a vulnerability in the y18n npm module which may be
    exploited by prototype pollution. You can read more about it in
    https://github.com/advisories/GHSA-c4w7-xm78-47vh
    (bsc#1184450)
  * deps: upgrade npm to 6.14.12
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="dmueller@suse.com" date="1622808000">- update to 14.17.0:
  * Experimental support for AbortController and AbortSignal
  * Diagnostics channel (experimental module)
  * UUID support in the crypto module
  * update ICU to 68.1
  * upgrade to libuv 1.41.0
  * deps: npm update to 6.14.13
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- add Fix-build-with-icu-69.patch: fix build with icu 69</changelog>
  <changelog author="adam.majer@suse.de" date="1623931200">- update to 14.17.1:
  * deps: update ICU to 69.1
  * errors: align source-map stacks with spec
- Fix-build-with-icu-69.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1625227200">- update to 14.17.2:
  deps: libuv upgrade - Out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
- old_icu.patch: update with upstream's patch from
  https://github.com/nodejs/node/pull/39068
- specfile cleanup</changelog>
  <changelog author="adam.majer@suse.de" date="1627905600">- update to 14.17.4:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
- old_icu.patch: merged, removed
- versioned.patch: updated
- node_modules.tar.xz: refreshed
- PR39011.patch: use localhost instead of remote for unit test</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 14.17.5:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
- cares_public_headers.patch: don't use private headers</changelog>
  <changelog author="adam.majer@suse.de" date="1636459200">- update to 14.18.1:
  * deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 14.18.0:
  * buffer:
    + introduce Blob
    + add base64url encoding option
  * child_process:
    + allow options.cwd receive a URL
    + add timeout to spawn and fork
    + allow promisified exec to be cancel
    + add 'overlapped' stdio flag
  * dns: add "tries" option to Resolve options
  * fs:
    + allow empty string for temp directory prefix
    + allow no-params fsPromises fileHandle read
    + add support for async iterators to fsPromises.writeFile
  * http2: add support for sensitive headers
  * process: add 'worker' event
  * tls: allow reading data into a static buffer
  * worker: add setEnvironmentData/getEnvironmentData
- changes in 14.17.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
    bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
    bsc#1190053, CVE-2021-39135)
- test-skip-y2038-on-32bit-time_t.patch: fix test failure when
  64-bit time_t is used on 32-bit arches
- refreshed patches: versioned.patch, flaky_test_rerun.patch
- PR39011.patch: upstreamed</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1637841600">- Fix CXXFLAGS in Tumbleweed - boo#1192824</changelog>
  <changelog author="adam.majer@suse.de" date="1639656000">- update to 14.18.2:
  * lib: fix regular expression to detect `/` and `\`
  * worker: avoid potential deadlock on NearHeapLimit
- sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1641902400">- update to 14.18.3:
  Security update fixing the following issues:
  * Improper handling of URI Subject Alternative Names (Medium)
  (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
  (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
  (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
  (CVE-2022-21824, bsc#1194514)</changelog>
  <changelog author="adam.majer@suse.de" date="1641988800">- z15-test-skip.patch: dropped, no longer required
- fix_ci_tests.patch: update tests for z15</changelog>
  <changelog author="adam.majer@suse.de" date="1645012800">- update to 14.19.0:
  * crypto: make FIPS related options always available
  * deps: deps: upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
    + CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * module: support pattern trailers
  * src: make napi_create_reference accept symbol
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch, nodejs-libpath.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">Update to 14.19.1:
  * deps: upgrade openssl sources to 1.1.1n (bsc#1196877,  CVE-2022-0778)
    Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    More details at https://www.openssl.org/news/secadv/20220315.txt
- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="6b486d21f550f693ce7b93295560d7ae828d231be26012915c68ce14222a9504" name="nodejs14" arch="src">
  <version epoch="0" ver="14.19.1" rel="150200.15.31.1"/>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="adam.majer@suse.de" date="1608552000">- New upstream LTS version 14.15.3:
  * deps:
    + upgrade npm to 6.14.9
    + update acorn to v8.0.4
  * http2: check write not scheduled in scope destructor
  * stream: fix regression on duplex end
- versioned.patch, sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 14.15.4:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- New upstream LTS version 14.15.5:
  * deps:
    + upgrade npm to 6.14.11
    + V8: backport dfcf1e86fac0 #37245
    Note: Node.js is not believed to be vulnerable to CVE-2021-21148
  * stream,zlib: do not use _stream_* anymore
- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 14.16.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 14.16.1:
  * CVE-2020-7774: npm upgrade - Update y18n to fix Prototype-Pollution (High)
    This is a vulnerability in the y18n npm module which may be
    exploited by prototype pollution. You can read more about it in
    https://github.com/advisories/GHSA-c4w7-xm78-47vh
    (bsc#1184450)
  * deps: upgrade npm to 6.14.12
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="dmueller@suse.com" date="1622808000">- update to 14.17.0:
  * Experimental support for AbortController and AbortSignal
  * Diagnostics channel (experimental module)
  * UUID support in the crypto module
  * update ICU to 68.1
  * upgrade to libuv 1.41.0
  * deps: npm update to 6.14.13
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- add Fix-build-with-icu-69.patch: fix build with icu 69</changelog>
  <changelog author="adam.majer@suse.de" date="1623931200">- update to 14.17.1:
  * deps: update ICU to 69.1
  * errors: align source-map stacks with spec
- Fix-build-with-icu-69.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1625227200">- update to 14.17.2:
  deps: libuv upgrade - Out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
- old_icu.patch: update with upstream's patch from
  https://github.com/nodejs/node/pull/39068
- specfile cleanup</changelog>
  <changelog author="adam.majer@suse.de" date="1627905600">- update to 14.17.4:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
- old_icu.patch: merged, removed
- versioned.patch: updated
- node_modules.tar.xz: refreshed
- PR39011.patch: use localhost instead of remote for unit test</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 14.17.5:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
- cares_public_headers.patch: don't use private headers</changelog>
  <changelog author="adam.majer@suse.de" date="1636459200">- update to 14.18.1:
  * deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 14.18.0:
  * buffer:
    + introduce Blob
    + add base64url encoding option
  * child_process:
    + allow options.cwd receive a URL
    + add timeout to spawn and fork
    + allow promisified exec to be cancel
    + add 'overlapped' stdio flag
  * dns: add "tries" option to Resolve options
  * fs:
    + allow empty string for temp directory prefix
    + allow no-params fsPromises fileHandle read
    + add support for async iterators to fsPromises.writeFile
  * http2: add support for sensitive headers
  * process: add 'worker' event
  * tls: allow reading data into a static buffer
  * worker: add setEnvironmentData/getEnvironmentData
- changes in 14.17.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
    bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
    bsc#1190053, CVE-2021-39135)
- test-skip-y2038-on-32bit-time_t.patch: fix test failure when
  64-bit time_t is used on 32-bit arches
- refreshed patches: versioned.patch, flaky_test_rerun.patch
- PR39011.patch: upstreamed</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1637841600">- Fix CXXFLAGS in Tumbleweed - boo#1192824</changelog>
  <changelog author="adam.majer@suse.de" date="1639656000">- update to 14.18.2:
  * lib: fix regular expression to detect `/` and `\`
  * worker: avoid potential deadlock on NearHeapLimit
- sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1641902400">- update to 14.18.3:
  Security update fixing the following issues:
  * Improper handling of URI Subject Alternative Names (Medium)
  (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
  (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
  (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
  (CVE-2022-21824, bsc#1194514)</changelog>
  <changelog author="adam.majer@suse.de" date="1641988800">- z15-test-skip.patch: dropped, no longer required
- fix_ci_tests.patch: update tests for z15</changelog>
  <changelog author="adam.majer@suse.de" date="1645012800">- update to 14.19.0:
  * crypto: make FIPS related options always available
  * deps: deps: upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
    + CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * module: support pattern trailers
  * src: make napi_create_reference accept symbol
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch, nodejs-libpath.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">Update to 14.19.1:
  * deps: upgrade openssl sources to 1.1.1n (bsc#1196877,  CVE-2022-0778)
    Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    More details at https://www.openssl.org/news/secadv/20220315.txt
- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="e51a3ebd77c8a009825dfc04a25236bea42735f9b65d44dfc71316cccd090a70" name="nodejs14" arch="x86_64">
  <version epoch="0" ver="14.19.1" rel="150200.15.31.1"/>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="adam.majer@suse.de" date="1608552000">- New upstream LTS version 14.15.3:
  * deps:
    + upgrade npm to 6.14.9
    + update acorn to v8.0.4
  * http2: check write not scheduled in scope destructor
  * stream: fix regression on duplex end
- versioned.patch, sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 14.15.4:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- New upstream LTS version 14.15.5:
  * deps:
    + upgrade npm to 6.14.11
    + V8: backport dfcf1e86fac0 #37245
    Note: Node.js is not believed to be vulnerable to CVE-2021-21148
  * stream,zlib: do not use _stream_* anymore
- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 14.16.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 14.16.1:
  * CVE-2020-7774: npm upgrade - Update y18n to fix Prototype-Pollution (High)
    This is a vulnerability in the y18n npm module which may be
    exploited by prototype pollution. You can read more about it in
    https://github.com/advisories/GHSA-c4w7-xm78-47vh
    (bsc#1184450)
  * deps: upgrade npm to 6.14.12
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="dmueller@suse.com" date="1622808000">- update to 14.17.0:
  * Experimental support for AbortController and AbortSignal
  * Diagnostics channel (experimental module)
  * UUID support in the crypto module
  * update ICU to 68.1
  * upgrade to libuv 1.41.0
  * deps: npm update to 6.14.13
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- add Fix-build-with-icu-69.patch: fix build with icu 69</changelog>
  <changelog author="adam.majer@suse.de" date="1623931200">- update to 14.17.1:
  * deps: update ICU to 69.1
  * errors: align source-map stacks with spec
- Fix-build-with-icu-69.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1625227200">- update to 14.17.2:
  deps: libuv upgrade - Out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
- old_icu.patch: update with upstream's patch from
  https://github.com/nodejs/node/pull/39068
- specfile cleanup</changelog>
  <changelog author="adam.majer@suse.de" date="1627905600">- update to 14.17.4:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
- old_icu.patch: merged, removed
- versioned.patch: updated
- node_modules.tar.xz: refreshed
- PR39011.patch: use localhost instead of remote for unit test</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 14.17.5:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
- cares_public_headers.patch: don't use private headers</changelog>
  <changelog author="adam.majer@suse.de" date="1636459200">- update to 14.18.1:
  * deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 14.18.0:
  * buffer:
    + introduce Blob
    + add base64url encoding option
  * child_process:
    + allow options.cwd receive a URL
    + add timeout to spawn and fork
    + allow promisified exec to be cancel
    + add 'overlapped' stdio flag
  * dns: add "tries" option to Resolve options
  * fs:
    + allow empty string for temp directory prefix
    + allow no-params fsPromises fileHandle read
    + add support for async iterators to fsPromises.writeFile
  * http2: add support for sensitive headers
  * process: add 'worker' event
  * tls: allow reading data into a static buffer
  * worker: add setEnvironmentData/getEnvironmentData
- changes in 14.17.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
    bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
    bsc#1190053, CVE-2021-39135)
- test-skip-y2038-on-32bit-time_t.patch: fix test failure when
  64-bit time_t is used on 32-bit arches
- refreshed patches: versioned.patch, flaky_test_rerun.patch
- PR39011.patch: upstreamed</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1637841600">- Fix CXXFLAGS in Tumbleweed - boo#1192824</changelog>
  <changelog author="adam.majer@suse.de" date="1639656000">- update to 14.18.2:
  * lib: fix regular expression to detect `/` and `\`
  * worker: avoid potential deadlock on NearHeapLimit
- sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1641902400">- update to 14.18.3:
  Security update fixing the following issues:
  * Improper handling of URI Subject Alternative Names (Medium)
  (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
  (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
  (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
  (CVE-2022-21824, bsc#1194514)</changelog>
  <changelog author="adam.majer@suse.de" date="1641988800">- z15-test-skip.patch: dropped, no longer required
- fix_ci_tests.patch: update tests for z15</changelog>
  <changelog author="adam.majer@suse.de" date="1645012800">- update to 14.19.0:
  * crypto: make FIPS related options always available
  * deps: deps: upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
    + CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * module: support pattern trailers
  * src: make napi_create_reference accept symbol
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch, nodejs-libpath.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">Update to 14.19.1:
  * deps: upgrade openssl sources to 1.1.1n (bsc#1196877,  CVE-2022-0778)
    Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    More details at https://www.openssl.org/news/secadv/20220315.txt
- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="8fbdd1e6b93786e8834bf2752d95e595e3b4bb20a08df335f76b3f531eaab646" name="nodejs14-devel" arch="aarch64">
  <version epoch="0" ver="14.19.1" rel="150200.15.31.1"/>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="adam.majer@suse.de" date="1608552000">- New upstream LTS version 14.15.3:
  * deps:
    + upgrade npm to 6.14.9
    + update acorn to v8.0.4
  * http2: check write not scheduled in scope destructor
  * stream: fix regression on duplex end
- versioned.patch, sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 14.15.4:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- New upstream LTS version 14.15.5:
  * deps:
    + upgrade npm to 6.14.11
    + V8: backport dfcf1e86fac0 #37245
    Note: Node.js is not believed to be vulnerable to CVE-2021-21148
  * stream,zlib: do not use _stream_* anymore
- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 14.16.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 14.16.1:
  * CVE-2020-7774: npm upgrade - Update y18n to fix Prototype-Pollution (High)
    This is a vulnerability in the y18n npm module which may be
    exploited by prototype pollution. You can read more about it in
    https://github.com/advisories/GHSA-c4w7-xm78-47vh
    (bsc#1184450)
  * deps: upgrade npm to 6.14.12
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="dmueller@suse.com" date="1622808000">- update to 14.17.0:
  * Experimental support for AbortController and AbortSignal
  * Diagnostics channel (experimental module)
  * UUID support in the crypto module
  * update ICU to 68.1
  * upgrade to libuv 1.41.0
  * deps: npm update to 6.14.13
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- add Fix-build-with-icu-69.patch: fix build with icu 69</changelog>
  <changelog author="adam.majer@suse.de" date="1623931200">- update to 14.17.1:
  * deps: update ICU to 69.1
  * errors: align source-map stacks with spec
- Fix-build-with-icu-69.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1625227200">- update to 14.17.2:
  deps: libuv upgrade - Out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
- old_icu.patch: update with upstream's patch from
  https://github.com/nodejs/node/pull/39068
- specfile cleanup</changelog>
  <changelog author="adam.majer@suse.de" date="1627905600">- update to 14.17.4:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
- old_icu.patch: merged, removed
- versioned.patch: updated
- node_modules.tar.xz: refreshed
- PR39011.patch: use localhost instead of remote for unit test</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 14.17.5:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
- cares_public_headers.patch: don't use private headers</changelog>
  <changelog author="adam.majer@suse.de" date="1636459200">- update to 14.18.1:
  * deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 14.18.0:
  * buffer:
    + introduce Blob
    + add base64url encoding option
  * child_process:
    + allow options.cwd receive a URL
    + add timeout to spawn and fork
    + allow promisified exec to be cancel
    + add 'overlapped' stdio flag
  * dns: add "tries" option to Resolve options
  * fs:
    + allow empty string for temp directory prefix
    + allow no-params fsPromises fileHandle read
    + add support for async iterators to fsPromises.writeFile
  * http2: add support for sensitive headers
  * process: add 'worker' event
  * tls: allow reading data into a static buffer
  * worker: add setEnvironmentData/getEnvironmentData
- changes in 14.17.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
    bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
    bsc#1190053, CVE-2021-39135)
- test-skip-y2038-on-32bit-time_t.patch: fix test failure when
  64-bit time_t is used on 32-bit arches
- refreshed patches: versioned.patch, flaky_test_rerun.patch
- PR39011.patch: upstreamed</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1637841600">- Fix CXXFLAGS in Tumbleweed - boo#1192824</changelog>
  <changelog author="adam.majer@suse.de" date="1639656000">- update to 14.18.2:
  * lib: fix regular expression to detect `/` and `\`
  * worker: avoid potential deadlock on NearHeapLimit
- sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1641902400">- update to 14.18.3:
  Security update fixing the following issues:
  * Improper handling of URI Subject Alternative Names (Medium)
  (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
  (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
  (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
  (CVE-2022-21824, bsc#1194514)</changelog>
  <changelog author="adam.majer@suse.de" date="1641988800">- z15-test-skip.patch: dropped, no longer required
- fix_ci_tests.patch: update tests for z15</changelog>
  <changelog author="adam.majer@suse.de" date="1645012800">- update to 14.19.0:
  * crypto: make FIPS related options always available
  * deps: deps: upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
    + CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * module: support pattern trailers
  * src: make napi_create_reference accept symbol
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch, nodejs-libpath.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">Update to 14.19.1:
  * deps: upgrade openssl sources to 1.1.1n (bsc#1196877,  CVE-2022-0778)
    Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    More details at https://www.openssl.org/news/secadv/20220315.txt
- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="a45c69fad7c86164db64f4ac4b889dcdb055518d046def0c3d43eebcf8d396bc" name="nodejs14-devel" arch="ppc64le">
  <version epoch="0" ver="14.19.1" rel="150200.15.31.1"/>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="adam.majer@suse.de" date="1608552000">- New upstream LTS version 14.15.3:
  * deps:
    + upgrade npm to 6.14.9
    + update acorn to v8.0.4
  * http2: check write not scheduled in scope destructor
  * stream: fix regression on duplex end
- versioned.patch, sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 14.15.4:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- New upstream LTS version 14.15.5:
  * deps:
    + upgrade npm to 6.14.11
    + V8: backport dfcf1e86fac0 #37245
    Note: Node.js is not believed to be vulnerable to CVE-2021-21148
  * stream,zlib: do not use _stream_* anymore
- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 14.16.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 14.16.1:
  * CVE-2020-7774: npm upgrade - Update y18n to fix Prototype-Pollution (High)
    This is a vulnerability in the y18n npm module which may be
    exploited by prototype pollution. You can read more about it in
    https://github.com/advisories/GHSA-c4w7-xm78-47vh
    (bsc#1184450)
  * deps: upgrade npm to 6.14.12
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="dmueller@suse.com" date="1622808000">- update to 14.17.0:
  * Experimental support for AbortController and AbortSignal
  * Diagnostics channel (experimental module)
  * UUID support in the crypto module
  * update ICU to 68.1
  * upgrade to libuv 1.41.0
  * deps: npm update to 6.14.13
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- add Fix-build-with-icu-69.patch: fix build with icu 69</changelog>
  <changelog author="adam.majer@suse.de" date="1623931200">- update to 14.17.1:
  * deps: update ICU to 69.1
  * errors: align source-map stacks with spec
- Fix-build-with-icu-69.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1625227200">- update to 14.17.2:
  deps: libuv upgrade - Out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
- old_icu.patch: update with upstream's patch from
  https://github.com/nodejs/node/pull/39068
- specfile cleanup</changelog>
  <changelog author="adam.majer@suse.de" date="1627905600">- update to 14.17.4:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
- old_icu.patch: merged, removed
- versioned.patch: updated
- node_modules.tar.xz: refreshed
- PR39011.patch: use localhost instead of remote for unit test</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 14.17.5:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
- cares_public_headers.patch: don't use private headers</changelog>
  <changelog author="adam.majer@suse.de" date="1636459200">- update to 14.18.1:
  * deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 14.18.0:
  * buffer:
    + introduce Blob
    + add base64url encoding option
  * child_process:
    + allow options.cwd receive a URL
    + add timeout to spawn and fork
    + allow promisified exec to be cancel
    + add 'overlapped' stdio flag
  * dns: add "tries" option to Resolve options
  * fs:
    + allow empty string for temp directory prefix
    + allow no-params fsPromises fileHandle read
    + add support for async iterators to fsPromises.writeFile
  * http2: add support for sensitive headers
  * process: add 'worker' event
  * tls: allow reading data into a static buffer
  * worker: add setEnvironmentData/getEnvironmentData
- changes in 14.17.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
    bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
    bsc#1190053, CVE-2021-39135)
- test-skip-y2038-on-32bit-time_t.patch: fix test failure when
  64-bit time_t is used on 32-bit arches
- refreshed patches: versioned.patch, flaky_test_rerun.patch
- PR39011.patch: upstreamed</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1637841600">- Fix CXXFLAGS in Tumbleweed - boo#1192824</changelog>
  <changelog author="adam.majer@suse.de" date="1639656000">- update to 14.18.2:
  * lib: fix regular expression to detect `/` and `\`
  * worker: avoid potential deadlock on NearHeapLimit
- sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1641902400">- update to 14.18.3:
  Security update fixing the following issues:
  * Improper handling of URI Subject Alternative Names (Medium)
  (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
  (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
  (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
  (CVE-2022-21824, bsc#1194514)</changelog>
  <changelog author="adam.majer@suse.de" date="1641988800">- z15-test-skip.patch: dropped, no longer required
- fix_ci_tests.patch: update tests for z15</changelog>
  <changelog author="adam.majer@suse.de" date="1645012800">- update to 14.19.0:
  * crypto: make FIPS related options always available
  * deps: deps: upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
    + CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * module: support pattern trailers
  * src: make napi_create_reference accept symbol
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch, nodejs-libpath.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">Update to 14.19.1:
  * deps: upgrade openssl sources to 1.1.1n (bsc#1196877,  CVE-2022-0778)
    Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    More details at https://www.openssl.org/news/secadv/20220315.txt
- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="1156e5ec3f806f08e0e7fe54fba4686f7b8431d954be308210dd053abd0cc60c" name="nodejs14-devel" arch="s390x">
  <version epoch="0" ver="14.19.1" rel="150200.15.31.1"/>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="adam.majer@suse.de" date="1608552000">- New upstream LTS version 14.15.3:
  * deps:
    + upgrade npm to 6.14.9
    + update acorn to v8.0.4
  * http2: check write not scheduled in scope destructor
  * stream: fix regression on duplex end
- versioned.patch, sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 14.15.4:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- New upstream LTS version 14.15.5:
  * deps:
    + upgrade npm to 6.14.11
    + V8: backport dfcf1e86fac0 #37245
    Note: Node.js is not believed to be vulnerable to CVE-2021-21148
  * stream,zlib: do not use _stream_* anymore
- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 14.16.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 14.16.1:
  * CVE-2020-7774: npm upgrade - Update y18n to fix Prototype-Pollution (High)
    This is a vulnerability in the y18n npm module which may be
    exploited by prototype pollution. You can read more about it in
    https://github.com/advisories/GHSA-c4w7-xm78-47vh
    (bsc#1184450)
  * deps: upgrade npm to 6.14.12
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="dmueller@suse.com" date="1622808000">- update to 14.17.0:
  * Experimental support for AbortController and AbortSignal
  * Diagnostics channel (experimental module)
  * UUID support in the crypto module
  * update ICU to 68.1
  * upgrade to libuv 1.41.0
  * deps: npm update to 6.14.13
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- add Fix-build-with-icu-69.patch: fix build with icu 69</changelog>
  <changelog author="adam.majer@suse.de" date="1623931200">- update to 14.17.1:
  * deps: update ICU to 69.1
  * errors: align source-map stacks with spec
- Fix-build-with-icu-69.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1625227200">- update to 14.17.2:
  deps: libuv upgrade - Out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
- old_icu.patch: update with upstream's patch from
  https://github.com/nodejs/node/pull/39068
- specfile cleanup</changelog>
  <changelog author="adam.majer@suse.de" date="1627905600">- update to 14.17.4:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
- old_icu.patch: merged, removed
- versioned.patch: updated
- node_modules.tar.xz: refreshed
- PR39011.patch: use localhost instead of remote for unit test</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 14.17.5:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
- cares_public_headers.patch: don't use private headers</changelog>
  <changelog author="adam.majer@suse.de" date="1636459200">- update to 14.18.1:
  * deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 14.18.0:
  * buffer:
    + introduce Blob
    + add base64url encoding option
  * child_process:
    + allow options.cwd receive a URL
    + add timeout to spawn and fork
    + allow promisified exec to be cancel
    + add 'overlapped' stdio flag
  * dns: add "tries" option to Resolve options
  * fs:
    + allow empty string for temp directory prefix
    + allow no-params fsPromises fileHandle read
    + add support for async iterators to fsPromises.writeFile
  * http2: add support for sensitive headers
  * process: add 'worker' event
  * tls: allow reading data into a static buffer
  * worker: add setEnvironmentData/getEnvironmentData
- changes in 14.17.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
    bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
    bsc#1190053, CVE-2021-39135)
- test-skip-y2038-on-32bit-time_t.patch: fix test failure when
  64-bit time_t is used on 32-bit arches
- refreshed patches: versioned.patch, flaky_test_rerun.patch
- PR39011.patch: upstreamed</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1637841600">- Fix CXXFLAGS in Tumbleweed - boo#1192824</changelog>
  <changelog author="adam.majer@suse.de" date="1639656000">- update to 14.18.2:
  * lib: fix regular expression to detect `/` and `\`
  * worker: avoid potential deadlock on NearHeapLimit
- sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1641902400">- update to 14.18.3:
  Security update fixing the following issues:
  * Improper handling of URI Subject Alternative Names (Medium)
  (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
  (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
  (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
  (CVE-2022-21824, bsc#1194514)</changelog>
  <changelog author="adam.majer@suse.de" date="1641988800">- z15-test-skip.patch: dropped, no longer required
- fix_ci_tests.patch: update tests for z15</changelog>
  <changelog author="adam.majer@suse.de" date="1645012800">- update to 14.19.0:
  * crypto: make FIPS related options always available
  * deps: deps: upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
    + CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * module: support pattern trailers
  * src: make napi_create_reference accept symbol
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch, nodejs-libpath.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">Update to 14.19.1:
  * deps: upgrade openssl sources to 1.1.1n (bsc#1196877,  CVE-2022-0778)
    Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    More details at https://www.openssl.org/news/secadv/20220315.txt
- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="362ebcf3e34049f2273de5765fe4172d7f6976fbcb5d2e5b75e209d1ccfce5af" name="nodejs14-devel" arch="x86_64">
  <version epoch="0" ver="14.19.1" rel="150200.15.31.1"/>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="adam.majer@suse.de" date="1608552000">- New upstream LTS version 14.15.3:
  * deps:
    + upgrade npm to 6.14.9
    + update acorn to v8.0.4
  * http2: check write not scheduled in scope destructor
  * stream: fix regression on duplex end
- versioned.patch, sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 14.15.4:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- New upstream LTS version 14.15.5:
  * deps:
    + upgrade npm to 6.14.11
    + V8: backport dfcf1e86fac0 #37245
    Note: Node.js is not believed to be vulnerable to CVE-2021-21148
  * stream,zlib: do not use _stream_* anymore
- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 14.16.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 14.16.1:
  * CVE-2020-7774: npm upgrade - Update y18n to fix Prototype-Pollution (High)
    This is a vulnerability in the y18n npm module which may be
    exploited by prototype pollution. You can read more about it in
    https://github.com/advisories/GHSA-c4w7-xm78-47vh
    (bsc#1184450)
  * deps: upgrade npm to 6.14.12
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="dmueller@suse.com" date="1622808000">- update to 14.17.0:
  * Experimental support for AbortController and AbortSignal
  * Diagnostics channel (experimental module)
  * UUID support in the crypto module
  * update ICU to 68.1
  * upgrade to libuv 1.41.0
  * deps: npm update to 6.14.13
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- add Fix-build-with-icu-69.patch: fix build with icu 69</changelog>
  <changelog author="adam.majer@suse.de" date="1623931200">- update to 14.17.1:
  * deps: update ICU to 69.1
  * errors: align source-map stacks with spec
- Fix-build-with-icu-69.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1625227200">- update to 14.17.2:
  deps: libuv upgrade - Out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
- old_icu.patch: update with upstream's patch from
  https://github.com/nodejs/node/pull/39068
- specfile cleanup</changelog>
  <changelog author="adam.majer@suse.de" date="1627905600">- update to 14.17.4:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
- old_icu.patch: merged, removed
- versioned.patch: updated
- node_modules.tar.xz: refreshed
- PR39011.patch: use localhost instead of remote for unit test</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 14.17.5:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
- cares_public_headers.patch: don't use private headers</changelog>
  <changelog author="adam.majer@suse.de" date="1636459200">- update to 14.18.1:
  * deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 14.18.0:
  * buffer:
    + introduce Blob
    + add base64url encoding option
  * child_process:
    + allow options.cwd receive a URL
    + add timeout to spawn and fork
    + allow promisified exec to be cancel
    + add 'overlapped' stdio flag
  * dns: add "tries" option to Resolve options
  * fs:
    + allow empty string for temp directory prefix
    + allow no-params fsPromises fileHandle read
    + add support for async iterators to fsPromises.writeFile
  * http2: add support for sensitive headers
  * process: add 'worker' event
  * tls: allow reading data into a static buffer
  * worker: add setEnvironmentData/getEnvironmentData
- changes in 14.17.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
    bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
    bsc#1190053, CVE-2021-39135)
- test-skip-y2038-on-32bit-time_t.patch: fix test failure when
  64-bit time_t is used on 32-bit arches
- refreshed patches: versioned.patch, flaky_test_rerun.patch
- PR39011.patch: upstreamed</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1637841600">- Fix CXXFLAGS in Tumbleweed - boo#1192824</changelog>
  <changelog author="adam.majer@suse.de" date="1639656000">- update to 14.18.2:
  * lib: fix regular expression to detect `/` and `\`
  * worker: avoid potential deadlock on NearHeapLimit
- sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1641902400">- update to 14.18.3:
  Security update fixing the following issues:
  * Improper handling of URI Subject Alternative Names (Medium)
  (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
  (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
  (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
  (CVE-2022-21824, bsc#1194514)</changelog>
  <changelog author="adam.majer@suse.de" date="1641988800">- z15-test-skip.patch: dropped, no longer required
- fix_ci_tests.patch: update tests for z15</changelog>
  <changelog author="adam.majer@suse.de" date="1645012800">- update to 14.19.0:
  * crypto: make FIPS related options always available
  * deps: deps: upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
    + CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * module: support pattern trailers
  * src: make napi_create_reference accept symbol
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch, nodejs-libpath.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">Update to 14.19.1:
  * deps: upgrade openssl sources to 1.1.1n (bsc#1196877,  CVE-2022-0778)
    Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    More details at https://www.openssl.org/news/secadv/20220315.txt
- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="6c4b9b79b9181456fa5cbe386bb529e2a7b783099d203acf2ac6bd14d594741a" name="nodejs14-docs" arch="noarch">
  <version epoch="0" ver="14.19.1" rel="150200.15.31.1"/>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="adam.majer@suse.de" date="1608552000">- New upstream LTS version 14.15.3:
  * deps:
    + upgrade npm to 6.14.9
    + update acorn to v8.0.4
  * http2: check write not scheduled in scope destructor
  * stream: fix regression on duplex end
- versioned.patch, sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 14.15.4:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- New upstream LTS version 14.15.5:
  * deps:
    + upgrade npm to 6.14.11
    + V8: backport dfcf1e86fac0 #37245
    Note: Node.js is not believed to be vulnerable to CVE-2021-21148
  * stream,zlib: do not use _stream_* anymore
- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 14.16.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 14.16.1:
  * CVE-2020-7774: npm upgrade - Update y18n to fix Prototype-Pollution (High)
    This is a vulnerability in the y18n npm module which may be
    exploited by prototype pollution. You can read more about it in
    https://github.com/advisories/GHSA-c4w7-xm78-47vh
    (bsc#1184450)
  * deps: upgrade npm to 6.14.12
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="dmueller@suse.com" date="1622808000">- update to 14.17.0:
  * Experimental support for AbortController and AbortSignal
  * Diagnostics channel (experimental module)
  * UUID support in the crypto module
  * update ICU to 68.1
  * upgrade to libuv 1.41.0
  * deps: npm update to 6.14.13
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- add Fix-build-with-icu-69.patch: fix build with icu 69</changelog>
  <changelog author="adam.majer@suse.de" date="1623931200">- update to 14.17.1:
  * deps: update ICU to 69.1
  * errors: align source-map stacks with spec
- Fix-build-with-icu-69.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1625227200">- update to 14.17.2:
  deps: libuv upgrade - Out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
- old_icu.patch: update with upstream's patch from
  https://github.com/nodejs/node/pull/39068
- specfile cleanup</changelog>
  <changelog author="adam.majer@suse.de" date="1627905600">- update to 14.17.4:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
- old_icu.patch: merged, removed
- versioned.patch: updated
- node_modules.tar.xz: refreshed
- PR39011.patch: use localhost instead of remote for unit test</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 14.17.5:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
- cares_public_headers.patch: don't use private headers</changelog>
  <changelog author="adam.majer@suse.de" date="1636459200">- update to 14.18.1:
  * deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 14.18.0:
  * buffer:
    + introduce Blob
    + add base64url encoding option
  * child_process:
    + allow options.cwd receive a URL
    + add timeout to spawn and fork
    + allow promisified exec to be cancel
    + add 'overlapped' stdio flag
  * dns: add "tries" option to Resolve options
  * fs:
    + allow empty string for temp directory prefix
    + allow no-params fsPromises fileHandle read
    + add support for async iterators to fsPromises.writeFile
  * http2: add support for sensitive headers
  * process: add 'worker' event
  * tls: allow reading data into a static buffer
  * worker: add setEnvironmentData/getEnvironmentData
- changes in 14.17.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
    bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
    bsc#1190053, CVE-2021-39135)
- test-skip-y2038-on-32bit-time_t.patch: fix test failure when
  64-bit time_t is used on 32-bit arches
- refreshed patches: versioned.patch, flaky_test_rerun.patch
- PR39011.patch: upstreamed</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1637841600">- Fix CXXFLAGS in Tumbleweed - boo#1192824</changelog>
  <changelog author="adam.majer@suse.de" date="1639656000">- update to 14.18.2:
  * lib: fix regular expression to detect `/` and `\`
  * worker: avoid potential deadlock on NearHeapLimit
- sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1641902400">- update to 14.18.3:
  Security update fixing the following issues:
  * Improper handling of URI Subject Alternative Names (Medium)
  (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
  (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
  (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
  (CVE-2022-21824, bsc#1194514)</changelog>
  <changelog author="adam.majer@suse.de" date="1641988800">- z15-test-skip.patch: dropped, no longer required
- fix_ci_tests.patch: update tests for z15</changelog>
  <changelog author="adam.majer@suse.de" date="1645012800">- update to 14.19.0:
  * crypto: make FIPS related options always available
  * deps: deps: upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
    + CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * module: support pattern trailers
  * src: make napi_create_reference accept symbol
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch, nodejs-libpath.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">Update to 14.19.1:
  * deps: upgrade openssl sources to 1.1.1n (bsc#1196877,  CVE-2022-0778)
    Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    More details at https://www.openssl.org/news/secadv/20220315.txt
- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="ca42da0a0c5692473f36c0a5dd3afca90b6b16bebe97fa8df3629a79ee17e7ea" name="nodejs8" arch="aarch64">
  <version epoch="0" ver="8.17.0" rel="150200.10.22.1"/>
  <changelog author="adam.majer@suse.de" date="1576756800">- New upstream LTS release 8.17.0:
  * deps: updates npm to 6.13.4 fixing an arbitrary path overwrite
    and access via "bin" field (bsc#1159352, CVE-2019-16777,
    CVE-2019-16776, CVE-2019-16775)
- refreshed: versioned.patch node-gyp-addon-gypi.patch
- upstreamed: CVE-2019-13173.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1578398400">- Really disable LTO when required (nodejs &lt; 12)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1578398401">- Update _constraints for aarch64</changelog>
  <changelog author="adam.majer@suse.de" date="1581076800">- CVE-2019-15604.patch: fixes a remotely triggerable assertion
  on a TLS server via a crafted certificate string
  (CVE-2019-15604, bsc#1163104)
- CVE-2019-15605.patch: fixes an HTTP request smuggling vulnerability
  via malformed Transfer-Encoding header (CVE-2019-15605, bsc#1163102)
- CVE-2019-15606.patch: trim HTTP header values of optional
  white space (CVE-2019-15606, bsc#1163103)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1586260800">- Update _constraints for ppc64 (BE)</changelog>
  <changelog author="adam.majer@suse.de" date="1588593600">- Reduce Requires to Recommends on nodejs8-devel when installing npm8</changelog>
  <changelog author="adam.majer@suse.de" date="1591272000">- CVE-2020-8174.patch: napi: fix various types of memory corruption
  in napi_get_value_string_*() (CVE-2020-8174, bsc#1172443)
- nghttp2_1.41.0.patch: deps: update nghttp2 to 1.41.0
- CVE-2020-11080.patch: http2: fix HTTP/2 Large Settings Frame DoS
  (CVE-2020-11080, bsc#1172442)
- minimist.patch: Fixes a vulnerability in an npm component
  (CVE-2020-7598, bsc#1166916)</changelog>
  <changelog author="adam.majer@suse.de" date="1591704000">- Add Require for nodejs8 when intalling npm8 (bsc#1172728)</changelog>
  <changelog author="dmueller@suse.com" date="1595937600">- avoid rpmbuild warnings on if/else/endif constructs</changelog>
  <changelog author="adam.majer@suse.de" date="1597060800">- Explicitly add -fno-strict-aliasing to CFLAGS to fix compilation
  on Aarch64 with gcc10 (bsc#1172686)</changelog>
  <changelog author="adam.majer@suse.de" date="1600948800">- CVE-2020-15095.patch: fix information leak through log files
  (bsc#1173937, CVE-2020-15095)</changelog>
  <changelog author="adam.majer@suse.de" date="1602244800">- fix_ci_tests.patch: add support to SUSE's ECDH backport errors
  in SLE's openssl</changelog>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1610366400">- CVE-2020-8287.patch: HTTP Request Smuggling allow two copies of a
  header field in a http request. For example, two Transfer-Encoding
  header fields. In this case Node.js identifies the first header
  field and ignores the second. This can lead to HTTP Request
  Smuggling (https://cwe.mitre.org/data/definitions/444.html).
  (bsc#1180554, CVE-2020-8287)</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- CVE-2021-22884.patch: DNS rebinding in --inspect
  (CVE-2021-22884, bsc#1182620)
- CVE-2021-22883.patch: only backport unit test to make sure
  we don't have regression here in the future.</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- npm-v6.14.13.tar.gz: update to npm 6.14.13 fixing
  * fixes ssri Regular Expression Denial of Service and
    hosted-git-info Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
  * fixes  y18n Prototype Pollution (bsc#1184450, CVE-2020-7774)
- CVE-2020-15095.patch, minimist.patch: obsoleted by above</changelog>
  <changelog author="adam.majer@suse.de" date="1625659200">- CVE-2020-8265.patch: Add a unit test for CVE-2020-8265 to make
  sure we don't have it broken in the future.</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- CVE-2021-22930.patch: http2: fixes use after free on close
  in stream canceling (bsc#1188917, CVE-2021-22930)</changelog>
  <changelog author="adam.majer@suse.de" date="1644926400">- npm-v6.14.16.tar.gz: update to npm 6.14.16 fixing
  * CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
  * CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
  * CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
  * CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- test_ssl_cert_fixups.patch: fixup SSL certificates in unit tests
- fix_ci_tests.patch: fix zlib tests for z15
- CVE-2021-22939.patch: add unit test only</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="0c8b53ab33560ef2439aa95ec402004a59ea07ea9f4068f7377b22b5c0cff7b5" name="nodejs8" arch="ppc64le">
  <version epoch="0" ver="8.17.0" rel="150200.10.22.1"/>
  <changelog author="adam.majer@suse.de" date="1576756800">- New upstream LTS release 8.17.0:
  * deps: updates npm to 6.13.4 fixing an arbitrary path overwrite
    and access via "bin" field (bsc#1159352, CVE-2019-16777,
    CVE-2019-16776, CVE-2019-16775)
- refreshed: versioned.patch node-gyp-addon-gypi.patch
- upstreamed: CVE-2019-13173.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1578398400">- Really disable LTO when required (nodejs &lt; 12)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1578398401">- Update _constraints for aarch64</changelog>
  <changelog author="adam.majer@suse.de" date="1581076800">- CVE-2019-15604.patch: fixes a remotely triggerable assertion
  on a TLS server via a crafted certificate string
  (CVE-2019-15604, bsc#1163104)
- CVE-2019-15605.patch: fixes an HTTP request smuggling vulnerability
  via malformed Transfer-Encoding header (CVE-2019-15605, bsc#1163102)
- CVE-2019-15606.patch: trim HTTP header values of optional
  white space (CVE-2019-15606, bsc#1163103)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1586260800">- Update _constraints for ppc64 (BE)</changelog>
  <changelog author="adam.majer@suse.de" date="1588593600">- Reduce Requires to Recommends on nodejs8-devel when installing npm8</changelog>
  <changelog author="adam.majer@suse.de" date="1591272000">- CVE-2020-8174.patch: napi: fix various types of memory corruption
  in napi_get_value_string_*() (CVE-2020-8174, bsc#1172443)
- nghttp2_1.41.0.patch: deps: update nghttp2 to 1.41.0
- CVE-2020-11080.patch: http2: fix HTTP/2 Large Settings Frame DoS
  (CVE-2020-11080, bsc#1172442)
- minimist.patch: Fixes a vulnerability in an npm component
  (CVE-2020-7598, bsc#1166916)</changelog>
  <changelog author="adam.majer@suse.de" date="1591704000">- Add Require for nodejs8 when intalling npm8 (bsc#1172728)</changelog>
  <changelog author="dmueller@suse.com" date="1595937600">- avoid rpmbuild warnings on if/else/endif constructs</changelog>
  <changelog author="adam.majer@suse.de" date="1597060800">- Explicitly add -fno-strict-aliasing to CFLAGS to fix compilation
  on Aarch64 with gcc10 (bsc#1172686)</changelog>
  <changelog author="adam.majer@suse.de" date="1600948800">- CVE-2020-15095.patch: fix information leak through log files
  (bsc#1173937, CVE-2020-15095)</changelog>
  <changelog author="adam.majer@suse.de" date="1602244800">- fix_ci_tests.patch: add support to SUSE's ECDH backport errors
  in SLE's openssl</changelog>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1610366400">- CVE-2020-8287.patch: HTTP Request Smuggling allow two copies of a
  header field in a http request. For example, two Transfer-Encoding
  header fields. In this case Node.js identifies the first header
  field and ignores the second. This can lead to HTTP Request
  Smuggling (https://cwe.mitre.org/data/definitions/444.html).
  (bsc#1180554, CVE-2020-8287)</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- CVE-2021-22884.patch: DNS rebinding in --inspect
  (CVE-2021-22884, bsc#1182620)
- CVE-2021-22883.patch: only backport unit test to make sure
  we don't have regression here in the future.</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- npm-v6.14.13.tar.gz: update to npm 6.14.13 fixing
  * fixes ssri Regular Expression Denial of Service and
    hosted-git-info Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
  * fixes  y18n Prototype Pollution (bsc#1184450, CVE-2020-7774)
- CVE-2020-15095.patch, minimist.patch: obsoleted by above</changelog>
  <changelog author="adam.majer@suse.de" date="1625659200">- CVE-2020-8265.patch: Add a unit test for CVE-2020-8265 to make
  sure we don't have it broken in the future.</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- CVE-2021-22930.patch: http2: fixes use after free on close
  in stream canceling (bsc#1188917, CVE-2021-22930)</changelog>
  <changelog author="adam.majer@suse.de" date="1644926400">- npm-v6.14.16.tar.gz: update to npm 6.14.16 fixing
  * CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
  * CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
  * CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
  * CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- test_ssl_cert_fixups.patch: fixup SSL certificates in unit tests
- fix_ci_tests.patch: fix zlib tests for z15
- CVE-2021-22939.patch: add unit test only</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="f7a915a8602d001510d7e8ceaf628bc5c5557882d17113e1eb36bed836b46651" name="nodejs8" arch="s390x">
  <version epoch="0" ver="8.17.0" rel="150200.10.22.1"/>
  <changelog author="adam.majer@suse.de" date="1576756800">- New upstream LTS release 8.17.0:
  * deps: updates npm to 6.13.4 fixing an arbitrary path overwrite
    and access via "bin" field (bsc#1159352, CVE-2019-16777,
    CVE-2019-16776, CVE-2019-16775)
- refreshed: versioned.patch node-gyp-addon-gypi.patch
- upstreamed: CVE-2019-13173.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1578398400">- Really disable LTO when required (nodejs &lt; 12)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1578398401">- Update _constraints for aarch64</changelog>
  <changelog author="adam.majer@suse.de" date="1581076800">- CVE-2019-15604.patch: fixes a remotely triggerable assertion
  on a TLS server via a crafted certificate string
  (CVE-2019-15604, bsc#1163104)
- CVE-2019-15605.patch: fixes an HTTP request smuggling vulnerability
  via malformed Transfer-Encoding header (CVE-2019-15605, bsc#1163102)
- CVE-2019-15606.patch: trim HTTP header values of optional
  white space (CVE-2019-15606, bsc#1163103)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1586260800">- Update _constraints for ppc64 (BE)</changelog>
  <changelog author="adam.majer@suse.de" date="1588593600">- Reduce Requires to Recommends on nodejs8-devel when installing npm8</changelog>
  <changelog author="adam.majer@suse.de" date="1591272000">- CVE-2020-8174.patch: napi: fix various types of memory corruption
  in napi_get_value_string_*() (CVE-2020-8174, bsc#1172443)
- nghttp2_1.41.0.patch: deps: update nghttp2 to 1.41.0
- CVE-2020-11080.patch: http2: fix HTTP/2 Large Settings Frame DoS
  (CVE-2020-11080, bsc#1172442)
- minimist.patch: Fixes a vulnerability in an npm component
  (CVE-2020-7598, bsc#1166916)</changelog>
  <changelog author="adam.majer@suse.de" date="1591704000">- Add Require for nodejs8 when intalling npm8 (bsc#1172728)</changelog>
  <changelog author="dmueller@suse.com" date="1595937600">- avoid rpmbuild warnings on if/else/endif constructs</changelog>
  <changelog author="adam.majer@suse.de" date="1597060800">- Explicitly add -fno-strict-aliasing to CFLAGS to fix compilation
  on Aarch64 with gcc10 (bsc#1172686)</changelog>
  <changelog author="adam.majer@suse.de" date="1600948800">- CVE-2020-15095.patch: fix information leak through log files
  (bsc#1173937, CVE-2020-15095)</changelog>
  <changelog author="adam.majer@suse.de" date="1602244800">- fix_ci_tests.patch: add support to SUSE's ECDH backport errors
  in SLE's openssl</changelog>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1610366400">- CVE-2020-8287.patch: HTTP Request Smuggling allow two copies of a
  header field in a http request. For example, two Transfer-Encoding
  header fields. In this case Node.js identifies the first header
  field and ignores the second. This can lead to HTTP Request
  Smuggling (https://cwe.mitre.org/data/definitions/444.html).
  (bsc#1180554, CVE-2020-8287)</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- CVE-2021-22884.patch: DNS rebinding in --inspect
  (CVE-2021-22884, bsc#1182620)
- CVE-2021-22883.patch: only backport unit test to make sure
  we don't have regression here in the future.</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- npm-v6.14.13.tar.gz: update to npm 6.14.13 fixing
  * fixes ssri Regular Expression Denial of Service and
    hosted-git-info Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
  * fixes  y18n Prototype Pollution (bsc#1184450, CVE-2020-7774)
- CVE-2020-15095.patch, minimist.patch: obsoleted by above</changelog>
  <changelog author="adam.majer@suse.de" date="1625659200">- CVE-2020-8265.patch: Add a unit test for CVE-2020-8265 to make
  sure we don't have it broken in the future.</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- CVE-2021-22930.patch: http2: fixes use after free on close
  in stream canceling (bsc#1188917, CVE-2021-22930)</changelog>
  <changelog author="adam.majer@suse.de" date="1644926400">- npm-v6.14.16.tar.gz: update to npm 6.14.16 fixing
  * CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
  * CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
  * CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
  * CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- test_ssl_cert_fixups.patch: fixup SSL certificates in unit tests
- fix_ci_tests.patch: fix zlib tests for z15
- CVE-2021-22939.patch: add unit test only</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="63865c1d65a2f1d2a3b45d786af78699df7fac5aac828b3146dd234a7fb8c076" name="nodejs8" arch="src">
  <version epoch="0" ver="8.17.0" rel="150200.10.22.1"/>
  <changelog author="adam.majer@suse.de" date="1576756800">- New upstream LTS release 8.17.0:
  * deps: updates npm to 6.13.4 fixing an arbitrary path overwrite
    and access via "bin" field (bsc#1159352, CVE-2019-16777,
    CVE-2019-16776, CVE-2019-16775)
- refreshed: versioned.patch node-gyp-addon-gypi.patch
- upstreamed: CVE-2019-13173.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1578398400">- Really disable LTO when required (nodejs &lt; 12)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1578398401">- Update _constraints for aarch64</changelog>
  <changelog author="adam.majer@suse.de" date="1581076800">- CVE-2019-15604.patch: fixes a remotely triggerable assertion
  on a TLS server via a crafted certificate string
  (CVE-2019-15604, bsc#1163104)
- CVE-2019-15605.patch: fixes an HTTP request smuggling vulnerability
  via malformed Transfer-Encoding header (CVE-2019-15605, bsc#1163102)
- CVE-2019-15606.patch: trim HTTP header values of optional
  white space (CVE-2019-15606, bsc#1163103)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1586260800">- Update _constraints for ppc64 (BE)</changelog>
  <changelog author="adam.majer@suse.de" date="1588593600">- Reduce Requires to Recommends on nodejs8-devel when installing npm8</changelog>
  <changelog author="adam.majer@suse.de" date="1591272000">- CVE-2020-8174.patch: napi: fix various types of memory corruption
  in napi_get_value_string_*() (CVE-2020-8174, bsc#1172443)
- nghttp2_1.41.0.patch: deps: update nghttp2 to 1.41.0
- CVE-2020-11080.patch: http2: fix HTTP/2 Large Settings Frame DoS
  (CVE-2020-11080, bsc#1172442)
- minimist.patch: Fixes a vulnerability in an npm component
  (CVE-2020-7598, bsc#1166916)</changelog>
  <changelog author="adam.majer@suse.de" date="1591704000">- Add Require for nodejs8 when intalling npm8 (bsc#1172728)</changelog>
  <changelog author="dmueller@suse.com" date="1595937600">- avoid rpmbuild warnings on if/else/endif constructs</changelog>
  <changelog author="adam.majer@suse.de" date="1597060800">- Explicitly add -fno-strict-aliasing to CFLAGS to fix compilation
  on Aarch64 with gcc10 (bsc#1172686)</changelog>
  <changelog author="adam.majer@suse.de" date="1600948800">- CVE-2020-15095.patch: fix information leak through log files
  (bsc#1173937, CVE-2020-15095)</changelog>
  <changelog author="adam.majer@suse.de" date="1602244800">- fix_ci_tests.patch: add support to SUSE's ECDH backport errors
  in SLE's openssl</changelog>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1610366400">- CVE-2020-8287.patch: HTTP Request Smuggling allow two copies of a
  header field in a http request. For example, two Transfer-Encoding
  header fields. In this case Node.js identifies the first header
  field and ignores the second. This can lead to HTTP Request
  Smuggling (https://cwe.mitre.org/data/definitions/444.html).
  (bsc#1180554, CVE-2020-8287)</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- CVE-2021-22884.patch: DNS rebinding in --inspect
  (CVE-2021-22884, bsc#1182620)
- CVE-2021-22883.patch: only backport unit test to make sure
  we don't have regression here in the future.</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- npm-v6.14.13.tar.gz: update to npm 6.14.13 fixing
  * fixes ssri Regular Expression Denial of Service and
    hosted-git-info Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
  * fixes  y18n Prototype Pollution (bsc#1184450, CVE-2020-7774)
- CVE-2020-15095.patch, minimist.patch: obsoleted by above</changelog>
  <changelog author="adam.majer@suse.de" date="1625659200">- CVE-2020-8265.patch: Add a unit test for CVE-2020-8265 to make
  sure we don't have it broken in the future.</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- CVE-2021-22930.patch: http2: fixes use after free on close
  in stream canceling (bsc#1188917, CVE-2021-22930)</changelog>
  <changelog author="adam.majer@suse.de" date="1644926400">- npm-v6.14.16.tar.gz: update to npm 6.14.16 fixing
  * CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
  * CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
  * CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
  * CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- test_ssl_cert_fixups.patch: fixup SSL certificates in unit tests
- fix_ci_tests.patch: fix zlib tests for z15
- CVE-2021-22939.patch: add unit test only</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="f324a8d342dcdbd390ae6d97ea0b2c2307fdbba15580dfcbd32aaa7dfdefce96" name="nodejs8" arch="x86_64">
  <version epoch="0" ver="8.17.0" rel="150200.10.22.1"/>
  <changelog author="adam.majer@suse.de" date="1576756800">- New upstream LTS release 8.17.0:
  * deps: updates npm to 6.13.4 fixing an arbitrary path overwrite
    and access via "bin" field (bsc#1159352, CVE-2019-16777,
    CVE-2019-16776, CVE-2019-16775)
- refreshed: versioned.patch node-gyp-addon-gypi.patch
- upstreamed: CVE-2019-13173.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1578398400">- Really disable LTO when required (nodejs &lt; 12)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1578398401">- Update _constraints for aarch64</changelog>
  <changelog author="adam.majer@suse.de" date="1581076800">- CVE-2019-15604.patch: fixes a remotely triggerable assertion
  on a TLS server via a crafted certificate string
  (CVE-2019-15604, bsc#1163104)
- CVE-2019-15605.patch: fixes an HTTP request smuggling vulnerability
  via malformed Transfer-Encoding header (CVE-2019-15605, bsc#1163102)
- CVE-2019-15606.patch: trim HTTP header values of optional
  white space (CVE-2019-15606, bsc#1163103)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1586260800">- Update _constraints for ppc64 (BE)</changelog>
  <changelog author="adam.majer@suse.de" date="1588593600">- Reduce Requires to Recommends on nodejs8-devel when installing npm8</changelog>
  <changelog author="adam.majer@suse.de" date="1591272000">- CVE-2020-8174.patch: napi: fix various types of memory corruption
  in napi_get_value_string_*() (CVE-2020-8174, bsc#1172443)
- nghttp2_1.41.0.patch: deps: update nghttp2 to 1.41.0
- CVE-2020-11080.patch: http2: fix HTTP/2 Large Settings Frame DoS
  (CVE-2020-11080, bsc#1172442)
- minimist.patch: Fixes a vulnerability in an npm component
  (CVE-2020-7598, bsc#1166916)</changelog>
  <changelog author="adam.majer@suse.de" date="1591704000">- Add Require for nodejs8 when intalling npm8 (bsc#1172728)</changelog>
  <changelog author="dmueller@suse.com" date="1595937600">- avoid rpmbuild warnings on if/else/endif constructs</changelog>
  <changelog author="adam.majer@suse.de" date="1597060800">- Explicitly add -fno-strict-aliasing to CFLAGS to fix compilation
  on Aarch64 with gcc10 (bsc#1172686)</changelog>
  <changelog author="adam.majer@suse.de" date="1600948800">- CVE-2020-15095.patch: fix information leak through log files
  (bsc#1173937, CVE-2020-15095)</changelog>
  <changelog author="adam.majer@suse.de" date="1602244800">- fix_ci_tests.patch: add support to SUSE's ECDH backport errors
  in SLE's openssl</changelog>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1610366400">- CVE-2020-8287.patch: HTTP Request Smuggling allow two copies of a
  header field in a http request. For example, two Transfer-Encoding
  header fields. In this case Node.js identifies the first header
  field and ignores the second. This can lead to HTTP Request
  Smuggling (https://cwe.mitre.org/data/definitions/444.html).
  (bsc#1180554, CVE-2020-8287)</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- CVE-2021-22884.patch: DNS rebinding in --inspect
  (CVE-2021-22884, bsc#1182620)
- CVE-2021-22883.patch: only backport unit test to make sure
  we don't have regression here in the future.</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- npm-v6.14.13.tar.gz: update to npm 6.14.13 fixing
  * fixes ssri Regular Expression Denial of Service and
    hosted-git-info Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
  * fixes  y18n Prototype Pollution (bsc#1184450, CVE-2020-7774)
- CVE-2020-15095.patch, minimist.patch: obsoleted by above</changelog>
  <changelog author="adam.majer@suse.de" date="1625659200">- CVE-2020-8265.patch: Add a unit test for CVE-2020-8265 to make
  sure we don't have it broken in the future.</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- CVE-2021-22930.patch: http2: fixes use after free on close
  in stream canceling (bsc#1188917, CVE-2021-22930)</changelog>
  <changelog author="adam.majer@suse.de" date="1644926400">- npm-v6.14.16.tar.gz: update to npm 6.14.16 fixing
  * CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
  * CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
  * CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
  * CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- test_ssl_cert_fixups.patch: fixup SSL certificates in unit tests
- fix_ci_tests.patch: fix zlib tests for z15
- CVE-2021-22939.patch: add unit test only</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="ad74218c4c76e6bc509b95955a8c76571b1cf5d5e030d142a8ad4cbb331c2f2c" name="nodejs8-devel" arch="aarch64">
  <version epoch="0" ver="8.17.0" rel="150200.10.22.1"/>
  <changelog author="adam.majer@suse.de" date="1576756800">- New upstream LTS release 8.17.0:
  * deps: updates npm to 6.13.4 fixing an arbitrary path overwrite
    and access via "bin" field (bsc#1159352, CVE-2019-16777,
    CVE-2019-16776, CVE-2019-16775)
- refreshed: versioned.patch node-gyp-addon-gypi.patch
- upstreamed: CVE-2019-13173.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1578398400">- Really disable LTO when required (nodejs &lt; 12)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1578398401">- Update _constraints for aarch64</changelog>
  <changelog author="adam.majer@suse.de" date="1581076800">- CVE-2019-15604.patch: fixes a remotely triggerable assertion
  on a TLS server via a crafted certificate string
  (CVE-2019-15604, bsc#1163104)
- CVE-2019-15605.patch: fixes an HTTP request smuggling vulnerability
  via malformed Transfer-Encoding header (CVE-2019-15605, bsc#1163102)
- CVE-2019-15606.patch: trim HTTP header values of optional
  white space (CVE-2019-15606, bsc#1163103)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1586260800">- Update _constraints for ppc64 (BE)</changelog>
  <changelog author="adam.majer@suse.de" date="1588593600">- Reduce Requires to Recommends on nodejs8-devel when installing npm8</changelog>
  <changelog author="adam.majer@suse.de" date="1591272000">- CVE-2020-8174.patch: napi: fix various types of memory corruption
  in napi_get_value_string_*() (CVE-2020-8174, bsc#1172443)
- nghttp2_1.41.0.patch: deps: update nghttp2 to 1.41.0
- CVE-2020-11080.patch: http2: fix HTTP/2 Large Settings Frame DoS
  (CVE-2020-11080, bsc#1172442)
- minimist.patch: Fixes a vulnerability in an npm component
  (CVE-2020-7598, bsc#1166916)</changelog>
  <changelog author="adam.majer@suse.de" date="1591704000">- Add Require for nodejs8 when intalling npm8 (bsc#1172728)</changelog>
  <changelog author="dmueller@suse.com" date="1595937600">- avoid rpmbuild warnings on if/else/endif constructs</changelog>
  <changelog author="adam.majer@suse.de" date="1597060800">- Explicitly add -fno-strict-aliasing to CFLAGS to fix compilation
  on Aarch64 with gcc10 (bsc#1172686)</changelog>
  <changelog author="adam.majer@suse.de" date="1600948800">- CVE-2020-15095.patch: fix information leak through log files
  (bsc#1173937, CVE-2020-15095)</changelog>
  <changelog author="adam.majer@suse.de" date="1602244800">- fix_ci_tests.patch: add support to SUSE's ECDH backport errors
  in SLE's openssl</changelog>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1610366400">- CVE-2020-8287.patch: HTTP Request Smuggling allow two copies of a
  header field in a http request. For example, two Transfer-Encoding
  header fields. In this case Node.js identifies the first header
  field and ignores the second. This can lead to HTTP Request
  Smuggling (https://cwe.mitre.org/data/definitions/444.html).
  (bsc#1180554, CVE-2020-8287)</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- CVE-2021-22884.patch: DNS rebinding in --inspect
  (CVE-2021-22884, bsc#1182620)
- CVE-2021-22883.patch: only backport unit test to make sure
  we don't have regression here in the future.</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- npm-v6.14.13.tar.gz: update to npm 6.14.13 fixing
  * fixes ssri Regular Expression Denial of Service and
    hosted-git-info Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
  * fixes  y18n Prototype Pollution (bsc#1184450, CVE-2020-7774)
- CVE-2020-15095.patch, minimist.patch: obsoleted by above</changelog>
  <changelog author="adam.majer@suse.de" date="1625659200">- CVE-2020-8265.patch: Add a unit test for CVE-2020-8265 to make
  sure we don't have it broken in the future.</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- CVE-2021-22930.patch: http2: fixes use after free on close
  in stream canceling (bsc#1188917, CVE-2021-22930)</changelog>
  <changelog author="adam.majer@suse.de" date="1644926400">- npm-v6.14.16.tar.gz: update to npm 6.14.16 fixing
  * CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
  * CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
  * CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
  * CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- test_ssl_cert_fixups.patch: fixup SSL certificates in unit tests
- fix_ci_tests.patch: fix zlib tests for z15
- CVE-2021-22939.patch: add unit test only</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="5faaf1c14ff84e29a8f41adf72f7f172fbd0b3562e4bc405a55871aa71fdcf0f" name="nodejs8-devel" arch="ppc64le">
  <version epoch="0" ver="8.17.0" rel="150200.10.22.1"/>
  <changelog author="adam.majer@suse.de" date="1576756800">- New upstream LTS release 8.17.0:
  * deps: updates npm to 6.13.4 fixing an arbitrary path overwrite
    and access via "bin" field (bsc#1159352, CVE-2019-16777,
    CVE-2019-16776, CVE-2019-16775)
- refreshed: versioned.patch node-gyp-addon-gypi.patch
- upstreamed: CVE-2019-13173.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1578398400">- Really disable LTO when required (nodejs &lt; 12)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1578398401">- Update _constraints for aarch64</changelog>
  <changelog author="adam.majer@suse.de" date="1581076800">- CVE-2019-15604.patch: fixes a remotely triggerable assertion
  on a TLS server via a crafted certificate string
  (CVE-2019-15604, bsc#1163104)
- CVE-2019-15605.patch: fixes an HTTP request smuggling vulnerability
  via malformed Transfer-Encoding header (CVE-2019-15605, bsc#1163102)
- CVE-2019-15606.patch: trim HTTP header values of optional
  white space (CVE-2019-15606, bsc#1163103)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1586260800">- Update _constraints for ppc64 (BE)</changelog>
  <changelog author="adam.majer@suse.de" date="1588593600">- Reduce Requires to Recommends on nodejs8-devel when installing npm8</changelog>
  <changelog author="adam.majer@suse.de" date="1591272000">- CVE-2020-8174.patch: napi: fix various types of memory corruption
  in napi_get_value_string_*() (CVE-2020-8174, bsc#1172443)
- nghttp2_1.41.0.patch: deps: update nghttp2 to 1.41.0
- CVE-2020-11080.patch: http2: fix HTTP/2 Large Settings Frame DoS
  (CVE-2020-11080, bsc#1172442)
- minimist.patch: Fixes a vulnerability in an npm component
  (CVE-2020-7598, bsc#1166916)</changelog>
  <changelog author="adam.majer@suse.de" date="1591704000">- Add Require for nodejs8 when intalling npm8 (bsc#1172728)</changelog>
  <changelog author="dmueller@suse.com" date="1595937600">- avoid rpmbuild warnings on if/else/endif constructs</changelog>
  <changelog author="adam.majer@suse.de" date="1597060800">- Explicitly add -fno-strict-aliasing to CFLAGS to fix compilation
  on Aarch64 with gcc10 (bsc#1172686)</changelog>
  <changelog author="adam.majer@suse.de" date="1600948800">- CVE-2020-15095.patch: fix information leak through log files
  (bsc#1173937, CVE-2020-15095)</changelog>
  <changelog author="adam.majer@suse.de" date="1602244800">- fix_ci_tests.patch: add support to SUSE's ECDH backport errors
  in SLE's openssl</changelog>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1610366400">- CVE-2020-8287.patch: HTTP Request Smuggling allow two copies of a
  header field in a http request. For example, two Transfer-Encoding
  header fields. In this case Node.js identifies the first header
  field and ignores the second. This can lead to HTTP Request
  Smuggling (https://cwe.mitre.org/data/definitions/444.html).
  (bsc#1180554, CVE-2020-8287)</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- CVE-2021-22884.patch: DNS rebinding in --inspect
  (CVE-2021-22884, bsc#1182620)
- CVE-2021-22883.patch: only backport unit test to make sure
  we don't have regression here in the future.</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- npm-v6.14.13.tar.gz: update to npm 6.14.13 fixing
  * fixes ssri Regular Expression Denial of Service and
    hosted-git-info Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
  * fixes  y18n Prototype Pollution (bsc#1184450, CVE-2020-7774)
- CVE-2020-15095.patch, minimist.patch: obsoleted by above</changelog>
  <changelog author="adam.majer@suse.de" date="1625659200">- CVE-2020-8265.patch: Add a unit test for CVE-2020-8265 to make
  sure we don't have it broken in the future.</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- CVE-2021-22930.patch: http2: fixes use after free on close
  in stream canceling (bsc#1188917, CVE-2021-22930)</changelog>
  <changelog author="adam.majer@suse.de" date="1644926400">- npm-v6.14.16.tar.gz: update to npm 6.14.16 fixing
  * CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
  * CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
  * CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
  * CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- test_ssl_cert_fixups.patch: fixup SSL certificates in unit tests
- fix_ci_tests.patch: fix zlib tests for z15
- CVE-2021-22939.patch: add unit test only</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="14a2e0b43eec0321dd8c77ad7d10771cc7938ef0084c4218ce43e9553eb22b2a" name="nodejs8-devel" arch="s390x">
  <version epoch="0" ver="8.17.0" rel="150200.10.22.1"/>
  <changelog author="adam.majer@suse.de" date="1576756800">- New upstream LTS release 8.17.0:
  * deps: updates npm to 6.13.4 fixing an arbitrary path overwrite
    and access via "bin" field (bsc#1159352, CVE-2019-16777,
    CVE-2019-16776, CVE-2019-16775)
- refreshed: versioned.patch node-gyp-addon-gypi.patch
- upstreamed: CVE-2019-13173.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1578398400">- Really disable LTO when required (nodejs &lt; 12)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1578398401">- Update _constraints for aarch64</changelog>
  <changelog author="adam.majer@suse.de" date="1581076800">- CVE-2019-15604.patch: fixes a remotely triggerable assertion
  on a TLS server via a crafted certificate string
  (CVE-2019-15604, bsc#1163104)
- CVE-2019-15605.patch: fixes an HTTP request smuggling vulnerability
  via malformed Transfer-Encoding header (CVE-2019-15605, bsc#1163102)
- CVE-2019-15606.patch: trim HTTP header values of optional
  white space (CVE-2019-15606, bsc#1163103)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1586260800">- Update _constraints for ppc64 (BE)</changelog>
  <changelog author="adam.majer@suse.de" date="1588593600">- Reduce Requires to Recommends on nodejs8-devel when installing npm8</changelog>
  <changelog author="adam.majer@suse.de" date="1591272000">- CVE-2020-8174.patch: napi: fix various types of memory corruption
  in napi_get_value_string_*() (CVE-2020-8174, bsc#1172443)
- nghttp2_1.41.0.patch: deps: update nghttp2 to 1.41.0
- CVE-2020-11080.patch: http2: fix HTTP/2 Large Settings Frame DoS
  (CVE-2020-11080, bsc#1172442)
- minimist.patch: Fixes a vulnerability in an npm component
  (CVE-2020-7598, bsc#1166916)</changelog>
  <changelog author="adam.majer@suse.de" date="1591704000">- Add Require for nodejs8 when intalling npm8 (bsc#1172728)</changelog>
  <changelog author="dmueller@suse.com" date="1595937600">- avoid rpmbuild warnings on if/else/endif constructs</changelog>
  <changelog author="adam.majer@suse.de" date="1597060800">- Explicitly add -fno-strict-aliasing to CFLAGS to fix compilation
  on Aarch64 with gcc10 (bsc#1172686)</changelog>
  <changelog author="adam.majer@suse.de" date="1600948800">- CVE-2020-15095.patch: fix information leak through log files
  (bsc#1173937, CVE-2020-15095)</changelog>
  <changelog author="adam.majer@suse.de" date="1602244800">- fix_ci_tests.patch: add support to SUSE's ECDH backport errors
  in SLE's openssl</changelog>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1610366400">- CVE-2020-8287.patch: HTTP Request Smuggling allow two copies of a
  header field in a http request. For example, two Transfer-Encoding
  header fields. In this case Node.js identifies the first header
  field and ignores the second. This can lead to HTTP Request
  Smuggling (https://cwe.mitre.org/data/definitions/444.html).
  (bsc#1180554, CVE-2020-8287)</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- CVE-2021-22884.patch: DNS rebinding in --inspect
  (CVE-2021-22884, bsc#1182620)
- CVE-2021-22883.patch: only backport unit test to make sure
  we don't have regression here in the future.</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- npm-v6.14.13.tar.gz: update to npm 6.14.13 fixing
  * fixes ssri Regular Expression Denial of Service and
    hosted-git-info Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
  * fixes  y18n Prototype Pollution (bsc#1184450, CVE-2020-7774)
- CVE-2020-15095.patch, minimist.patch: obsoleted by above</changelog>
  <changelog author="adam.majer@suse.de" date="1625659200">- CVE-2020-8265.patch: Add a unit test for CVE-2020-8265 to make
  sure we don't have it broken in the future.</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- CVE-2021-22930.patch: http2: fixes use after free on close
  in stream canceling (bsc#1188917, CVE-2021-22930)</changelog>
  <changelog author="adam.majer@suse.de" date="1644926400">- npm-v6.14.16.tar.gz: update to npm 6.14.16 fixing
  * CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
  * CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
  * CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
  * CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- test_ssl_cert_fixups.patch: fixup SSL certificates in unit tests
- fix_ci_tests.patch: fix zlib tests for z15
- CVE-2021-22939.patch: add unit test only</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="7d25073c138443fa3d0c5f45d74cbefc742954305a816528aae692e20c03c9fd" name="nodejs8-devel" arch="x86_64">
  <version epoch="0" ver="8.17.0" rel="150200.10.22.1"/>
  <changelog author="adam.majer@suse.de" date="1576756800">- New upstream LTS release 8.17.0:
  * deps: updates npm to 6.13.4 fixing an arbitrary path overwrite
    and access via "bin" field (bsc#1159352, CVE-2019-16777,
    CVE-2019-16776, CVE-2019-16775)
- refreshed: versioned.patch node-gyp-addon-gypi.patch
- upstreamed: CVE-2019-13173.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1578398400">- Really disable LTO when required (nodejs &lt; 12)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1578398401">- Update _constraints for aarch64</changelog>
  <changelog author="adam.majer@suse.de" date="1581076800">- CVE-2019-15604.patch: fixes a remotely triggerable assertion
  on a TLS server via a crafted certificate string
  (CVE-2019-15604, bsc#1163104)
- CVE-2019-15605.patch: fixes an HTTP request smuggling vulnerability
  via malformed Transfer-Encoding header (CVE-2019-15605, bsc#1163102)
- CVE-2019-15606.patch: trim HTTP header values of optional
  white space (CVE-2019-15606, bsc#1163103)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1586260800">- Update _constraints for ppc64 (BE)</changelog>
  <changelog author="adam.majer@suse.de" date="1588593600">- Reduce Requires to Recommends on nodejs8-devel when installing npm8</changelog>
  <changelog author="adam.majer@suse.de" date="1591272000">- CVE-2020-8174.patch: napi: fix various types of memory corruption
  in napi_get_value_string_*() (CVE-2020-8174, bsc#1172443)
- nghttp2_1.41.0.patch: deps: update nghttp2 to 1.41.0
- CVE-2020-11080.patch: http2: fix HTTP/2 Large Settings Frame DoS
  (CVE-2020-11080, bsc#1172442)
- minimist.patch: Fixes a vulnerability in an npm component
  (CVE-2020-7598, bsc#1166916)</changelog>
  <changelog author="adam.majer@suse.de" date="1591704000">- Add Require for nodejs8 when intalling npm8 (bsc#1172728)</changelog>
  <changelog author="dmueller@suse.com" date="1595937600">- avoid rpmbuild warnings on if/else/endif constructs</changelog>
  <changelog author="adam.majer@suse.de" date="1597060800">- Explicitly add -fno-strict-aliasing to CFLAGS to fix compilation
  on Aarch64 with gcc10 (bsc#1172686)</changelog>
  <changelog author="adam.majer@suse.de" date="1600948800">- CVE-2020-15095.patch: fix information leak through log files
  (bsc#1173937, CVE-2020-15095)</changelog>
  <changelog author="adam.majer@suse.de" date="1602244800">- fix_ci_tests.patch: add support to SUSE's ECDH backport errors
  in SLE's openssl</changelog>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1610366400">- CVE-2020-8287.patch: HTTP Request Smuggling allow two copies of a
  header field in a http request. For example, two Transfer-Encoding
  header fields. In this case Node.js identifies the first header
  field and ignores the second. This can lead to HTTP Request
  Smuggling (https://cwe.mitre.org/data/definitions/444.html).
  (bsc#1180554, CVE-2020-8287)</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- CVE-2021-22884.patch: DNS rebinding in --inspect
  (CVE-2021-22884, bsc#1182620)
- CVE-2021-22883.patch: only backport unit test to make sure
  we don't have regression here in the future.</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- npm-v6.14.13.tar.gz: update to npm 6.14.13 fixing
  * fixes ssri Regular Expression Denial of Service and
    hosted-git-info Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
  * fixes  y18n Prototype Pollution (bsc#1184450, CVE-2020-7774)
- CVE-2020-15095.patch, minimist.patch: obsoleted by above</changelog>
  <changelog author="adam.majer@suse.de" date="1625659200">- CVE-2020-8265.patch: Add a unit test for CVE-2020-8265 to make
  sure we don't have it broken in the future.</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- CVE-2021-22930.patch: http2: fixes use after free on close
  in stream canceling (bsc#1188917, CVE-2021-22930)</changelog>
  <changelog author="adam.majer@suse.de" date="1644926400">- npm-v6.14.16.tar.gz: update to npm 6.14.16 fixing
  * CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
  * CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
  * CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
  * CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- test_ssl_cert_fixups.patch: fixup SSL certificates in unit tests
- fix_ci_tests.patch: fix zlib tests for z15
- CVE-2021-22939.patch: add unit test only</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="62a0d6db057b9a1110722d0312904201bf0dfa40878e30346137905c05372289" name="nodejs8-docs" arch="noarch">
  <version epoch="0" ver="8.17.0" rel="150200.10.22.1"/>
  <changelog author="adam.majer@suse.de" date="1576756800">- New upstream LTS release 8.17.0:
  * deps: updates npm to 6.13.4 fixing an arbitrary path overwrite
    and access via "bin" field (bsc#1159352, CVE-2019-16777,
    CVE-2019-16776, CVE-2019-16775)
- refreshed: versioned.patch node-gyp-addon-gypi.patch
- upstreamed: CVE-2019-13173.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1578398400">- Really disable LTO when required (nodejs &lt; 12)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1578398401">- Update _constraints for aarch64</changelog>
  <changelog author="adam.majer@suse.de" date="1581076800">- CVE-2019-15604.patch: fixes a remotely triggerable assertion
  on a TLS server via a crafted certificate string
  (CVE-2019-15604, bsc#1163104)
- CVE-2019-15605.patch: fixes an HTTP request smuggling vulnerability
  via malformed Transfer-Encoding header (CVE-2019-15605, bsc#1163102)
- CVE-2019-15606.patch: trim HTTP header values of optional
  white space (CVE-2019-15606, bsc#1163103)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1586260800">- Update _constraints for ppc64 (BE)</changelog>
  <changelog author="adam.majer@suse.de" date="1588593600">- Reduce Requires to Recommends on nodejs8-devel when installing npm8</changelog>
  <changelog author="adam.majer@suse.de" date="1591272000">- CVE-2020-8174.patch: napi: fix various types of memory corruption
  in napi_get_value_string_*() (CVE-2020-8174, bsc#1172443)
- nghttp2_1.41.0.patch: deps: update nghttp2 to 1.41.0
- CVE-2020-11080.patch: http2: fix HTTP/2 Large Settings Frame DoS
  (CVE-2020-11080, bsc#1172442)
- minimist.patch: Fixes a vulnerability in an npm component
  (CVE-2020-7598, bsc#1166916)</changelog>
  <changelog author="adam.majer@suse.de" date="1591704000">- Add Require for nodejs8 when intalling npm8 (bsc#1172728)</changelog>
  <changelog author="dmueller@suse.com" date="1595937600">- avoid rpmbuild warnings on if/else/endif constructs</changelog>
  <changelog author="adam.majer@suse.de" date="1597060800">- Explicitly add -fno-strict-aliasing to CFLAGS to fix compilation
  on Aarch64 with gcc10 (bsc#1172686)</changelog>
  <changelog author="adam.majer@suse.de" date="1600948800">- CVE-2020-15095.patch: fix information leak through log files
  (bsc#1173937, CVE-2020-15095)</changelog>
  <changelog author="adam.majer@suse.de" date="1602244800">- fix_ci_tests.patch: add support to SUSE's ECDH backport errors
  in SLE's openssl</changelog>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1610366400">- CVE-2020-8287.patch: HTTP Request Smuggling allow two copies of a
  header field in a http request. For example, two Transfer-Encoding
  header fields. In this case Node.js identifies the first header
  field and ignores the second. This can lead to HTTP Request
  Smuggling (https://cwe.mitre.org/data/definitions/444.html).
  (bsc#1180554, CVE-2020-8287)</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- CVE-2021-22884.patch: DNS rebinding in --inspect
  (CVE-2021-22884, bsc#1182620)
- CVE-2021-22883.patch: only backport unit test to make sure
  we don't have regression here in the future.</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- npm-v6.14.13.tar.gz: update to npm 6.14.13 fixing
  * fixes ssri Regular Expression Denial of Service and
    hosted-git-info Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
  * fixes  y18n Prototype Pollution (bsc#1184450, CVE-2020-7774)
- CVE-2020-15095.patch, minimist.patch: obsoleted by above</changelog>
  <changelog author="adam.majer@suse.de" date="1625659200">- CVE-2020-8265.patch: Add a unit test for CVE-2020-8265 to make
  sure we don't have it broken in the future.</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- CVE-2021-22930.patch: http2: fixes use after free on close
  in stream canceling (bsc#1188917, CVE-2021-22930)</changelog>
  <changelog author="adam.majer@suse.de" date="1644926400">- npm-v6.14.16.tar.gz: update to npm 6.14.16 fixing
  * CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
  * CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
  * CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
  * CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- test_ssl_cert_fixups.patch: fixup SSL certificates in unit tests
- fix_ci_tests.patch: fix zlib tests for z15
- CVE-2021-22939.patch: add unit test only</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="adaee90d3e7e2864498415323b88bee9fdbc1ec1ff9f5691f78d9825a578bed8" name="npm10" arch="aarch64">
  <version epoch="0" ver="10.24.1" rel="150000.1.44.1"/>
  <changelog author="adam.majer@suse.de" date="1603972800">- New upstream LTS version 10.23.0:
  * deps: upgrade npm to 6.14.8
  * n-api:
    + create N-API version 7
    + expose napi_build_version variable
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="gmbr3@opensuse.org" date="1608552000">- Add icu68.patch: fix build with ICU 68</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 10.23.1:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)
  * CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference
    (High) This is a vulnerability in OpenSSL which may be exploited
    through Node.js. (bsc#1179491)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1612267200">- New upstream LTS version 10.23.2:
  * deps: upgrade npm to 6.14.11
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613044800">- New upstream LTS version 10.23.3:
  * crypto: fix crash when calling digest after piping
  * deps: reland npm upgrade to 6.14.11
  * test: add test that verifies crypto stream pipeline
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 10.24.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
  * CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
    (bsc#1182333)</changelog>
  <changelog author="adam.majer@suse.de" date="1615204800">- limit_worker_stdio_memsize.patch: reduce memory footprint of
  test-worker-stdio (bsc#1183155)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 10.24.1:
  * CVE-2021-3450: OpenSSL - CA certificate check bypass with
    X509_V_FLAG_X509_STRICT (High). (bsc#1183851)
  * CVE-2021-3449: OpenSSL - NULL pointer deref in
    signature_algorithms processing (High) (bsc#1183852)
  * CVE-2020-7774: npm - Update y18n to fix Prototype-Pollution
    (bsc#1184450)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- CVE-2021-22918.patch: patch libuv to fix out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
- npm-v6.14.13.tar.gz: update to npm 6.14.13 fixing
  * fixes ssri Regular Expression Denial of Service and
    hosted-git-info Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- CVE-2021-22930.patch: http2: fixes use after free on close
  in stream canceling (bsc#1188917, CVE-2021-22930)</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628596800">- cares_172.patch: update c-ares to 1.17.2.
  (bsc#1188881, bsc#1189370, CVE-2021-3672, CVE-2021-22931)</changelog>
  <changelog author="adam.majer@suse.de" date="1628856000">- CVE-2021-22939.patch: Incomplete validation of rejectUnauthorized parameter
  (bsc#1189369, CVE-2021-22939)</changelog>
  <changelog author="adam.majer@suse.de" date="1642075200">- test_ssl_cert_fixups.patch: fixup SSL certificates in unit tests
- fix_ci_tests.patch: updated for z15 zlib compression</changelog>
  <changelog author="adam.majer@suse.de" date="1644926400">- npm-v6.14.16.tar.gz: update to npm 6.14.16 fixing
  * CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
  * CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
  * CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
  * CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- CVE-2022-21824.patch: fix prototype pollution via console.table
  (bsc#1194514, CVE-2022-21824)</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="46abdceda4206aa6c030fc040ca76274dc29c1571cddd8433f338bcd33c068ad" name="npm10" arch="ppc64le">
  <version epoch="0" ver="10.24.1" rel="150000.1.44.1"/>
  <changelog author="adam.majer@suse.de" date="1603972800">- New upstream LTS version 10.23.0:
  * deps: upgrade npm to 6.14.8
  * n-api:
    + create N-API version 7
    + expose napi_build_version variable
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="gmbr3@opensuse.org" date="1608552000">- Add icu68.patch: fix build with ICU 68</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 10.23.1:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)
  * CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference
    (High) This is a vulnerability in OpenSSL which may be exploited
    through Node.js. (bsc#1179491)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1612267200">- New upstream LTS version 10.23.2:
  * deps: upgrade npm to 6.14.11
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613044800">- New upstream LTS version 10.23.3:
  * crypto: fix crash when calling digest after piping
  * deps: reland npm upgrade to 6.14.11
  * test: add test that verifies crypto stream pipeline
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 10.24.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
  * CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
    (bsc#1182333)</changelog>
  <changelog author="adam.majer@suse.de" date="1615204800">- limit_worker_stdio_memsize.patch: reduce memory footprint of
  test-worker-stdio (bsc#1183155)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 10.24.1:
  * CVE-2021-3450: OpenSSL - CA certificate check bypass with
    X509_V_FLAG_X509_STRICT (High). (bsc#1183851)
  * CVE-2021-3449: OpenSSL - NULL pointer deref in
    signature_algorithms processing (High) (bsc#1183852)
  * CVE-2020-7774: npm - Update y18n to fix Prototype-Pollution
    (bsc#1184450)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- CVE-2021-22918.patch: patch libuv to fix out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
- npm-v6.14.13.tar.gz: update to npm 6.14.13 fixing
  * fixes ssri Regular Expression Denial of Service and
    hosted-git-info Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- CVE-2021-22930.patch: http2: fixes use after free on close
  in stream canceling (bsc#1188917, CVE-2021-22930)</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628596800">- cares_172.patch: update c-ares to 1.17.2.
  (bsc#1188881, bsc#1189370, CVE-2021-3672, CVE-2021-22931)</changelog>
  <changelog author="adam.majer@suse.de" date="1628856000">- CVE-2021-22939.patch: Incomplete validation of rejectUnauthorized parameter
  (bsc#1189369, CVE-2021-22939)</changelog>
  <changelog author="adam.majer@suse.de" date="1642075200">- test_ssl_cert_fixups.patch: fixup SSL certificates in unit tests
- fix_ci_tests.patch: updated for z15 zlib compression</changelog>
  <changelog author="adam.majer@suse.de" date="1644926400">- npm-v6.14.16.tar.gz: update to npm 6.14.16 fixing
  * CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
  * CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
  * CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
  * CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- CVE-2022-21824.patch: fix prototype pollution via console.table
  (bsc#1194514, CVE-2022-21824)</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="4ee0f23846108cb1585a03782fa867253debcdafc6202eca63f2b36dc39324ec" name="npm10" arch="s390x">
  <version epoch="0" ver="10.24.1" rel="150000.1.44.1"/>
  <changelog author="adam.majer@suse.de" date="1603972800">- New upstream LTS version 10.23.0:
  * deps: upgrade npm to 6.14.8
  * n-api:
    + create N-API version 7
    + expose napi_build_version variable
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="gmbr3@opensuse.org" date="1608552000">- Add icu68.patch: fix build with ICU 68</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 10.23.1:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)
  * CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference
    (High) This is a vulnerability in OpenSSL which may be exploited
    through Node.js. (bsc#1179491)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1612267200">- New upstream LTS version 10.23.2:
  * deps: upgrade npm to 6.14.11
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613044800">- New upstream LTS version 10.23.3:
  * crypto: fix crash when calling digest after piping
  * deps: reland npm upgrade to 6.14.11
  * test: add test that verifies crypto stream pipeline
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 10.24.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
  * CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
    (bsc#1182333)</changelog>
  <changelog author="adam.majer@suse.de" date="1615204800">- limit_worker_stdio_memsize.patch: reduce memory footprint of
  test-worker-stdio (bsc#1183155)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 10.24.1:
  * CVE-2021-3450: OpenSSL - CA certificate check bypass with
    X509_V_FLAG_X509_STRICT (High). (bsc#1183851)
  * CVE-2021-3449: OpenSSL - NULL pointer deref in
    signature_algorithms processing (High) (bsc#1183852)
  * CVE-2020-7774: npm - Update y18n to fix Prototype-Pollution
    (bsc#1184450)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- CVE-2021-22918.patch: patch libuv to fix out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
- npm-v6.14.13.tar.gz: update to npm 6.14.13 fixing
  * fixes ssri Regular Expression Denial of Service and
    hosted-git-info Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- CVE-2021-22930.patch: http2: fixes use after free on close
  in stream canceling (bsc#1188917, CVE-2021-22930)</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628596800">- cares_172.patch: update c-ares to 1.17.2.
  (bsc#1188881, bsc#1189370, CVE-2021-3672, CVE-2021-22931)</changelog>
  <changelog author="adam.majer@suse.de" date="1628856000">- CVE-2021-22939.patch: Incomplete validation of rejectUnauthorized parameter
  (bsc#1189369, CVE-2021-22939)</changelog>
  <changelog author="adam.majer@suse.de" date="1642075200">- test_ssl_cert_fixups.patch: fixup SSL certificates in unit tests
- fix_ci_tests.patch: updated for z15 zlib compression</changelog>
  <changelog author="adam.majer@suse.de" date="1644926400">- npm-v6.14.16.tar.gz: update to npm 6.14.16 fixing
  * CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
  * CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
  * CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
  * CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- CVE-2022-21824.patch: fix prototype pollution via console.table
  (bsc#1194514, CVE-2022-21824)</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="51af9c2b95a37638f81a1f384d99854d31d6eec42cbb5725ca0520415a090cdf" name="npm10" arch="x86_64">
  <version epoch="0" ver="10.24.1" rel="150000.1.44.1"/>
  <changelog author="adam.majer@suse.de" date="1603972800">- New upstream LTS version 10.23.0:
  * deps: upgrade npm to 6.14.8
  * n-api:
    + create N-API version 7
    + expose napi_build_version variable
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="gmbr3@opensuse.org" date="1608552000">- Add icu68.patch: fix build with ICU 68</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 10.23.1:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)
  * CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference
    (High) This is a vulnerability in OpenSSL which may be exploited
    through Node.js. (bsc#1179491)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1612267200">- New upstream LTS version 10.23.2:
  * deps: upgrade npm to 6.14.11
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613044800">- New upstream LTS version 10.23.3:
  * crypto: fix crash when calling digest after piping
  * deps: reland npm upgrade to 6.14.11
  * test: add test that verifies crypto stream pipeline
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 10.24.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
  * CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
    (bsc#1182333)</changelog>
  <changelog author="adam.majer@suse.de" date="1615204800">- limit_worker_stdio_memsize.patch: reduce memory footprint of
  test-worker-stdio (bsc#1183155)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 10.24.1:
  * CVE-2021-3450: OpenSSL - CA certificate check bypass with
    X509_V_FLAG_X509_STRICT (High). (bsc#1183851)
  * CVE-2021-3449: OpenSSL - NULL pointer deref in
    signature_algorithms processing (High) (bsc#1183852)
  * CVE-2020-7774: npm - Update y18n to fix Prototype-Pollution
    (bsc#1184450)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- CVE-2021-22918.patch: patch libuv to fix out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
- npm-v6.14.13.tar.gz: update to npm 6.14.13 fixing
  * fixes ssri Regular Expression Denial of Service and
    hosted-git-info Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- CVE-2021-22930.patch: http2: fixes use after free on close
  in stream canceling (bsc#1188917, CVE-2021-22930)</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628596800">- cares_172.patch: update c-ares to 1.17.2.
  (bsc#1188881, bsc#1189370, CVE-2021-3672, CVE-2021-22931)</changelog>
  <changelog author="adam.majer@suse.de" date="1628856000">- CVE-2021-22939.patch: Incomplete validation of rejectUnauthorized parameter
  (bsc#1189369, CVE-2021-22939)</changelog>
  <changelog author="adam.majer@suse.de" date="1642075200">- test_ssl_cert_fixups.patch: fixup SSL certificates in unit tests
- fix_ci_tests.patch: updated for z15 zlib compression</changelog>
  <changelog author="adam.majer@suse.de" date="1644926400">- npm-v6.14.16.tar.gz: update to npm 6.14.16 fixing
  * CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
  * CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
  * CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
  * CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- CVE-2022-21824.patch: fix prototype pollution via console.table
  (bsc#1194514, CVE-2022-21824)</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="870db756fe0304dbedd851dcb71795ec9784de98676eee617bc49fb44d24272d" name="npm12" arch="aarch64">
  <version epoch="0" ver="12.22.12" rel="150200.4.32.1"/>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1606392000">- New upstream LTS version 12.20.0:
  * deps:
    + update llhttp '2.1.2' -&gt; '2.1.3'
    + update uv '1.39.0' -&gt; '1.40.0'
    + update uvwasi '0.0.10' -&gt; '0.0.11'
  * fs: add .ref() and .unref() methods to watcher classes
  * http: added scheduling option to http agent
  * module:
    + exports pattern support
    + named exports for CJS via static analysis
  * n-api: add more property defaults (gh#35214)</changelog>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 12.20.1:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)
  * CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference
    (High) This is a vulnerability in OpenSSL which may be exploited
    through Node.js. (bsc#1179491)
- versioned.patch, nodejs-libpath.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- New upstream LTS version 12.20.2:
  * deps: upgrade npm to 6.14.11
- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 12.21.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
  * CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
    (bsc#1182333)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 12.22.1:
  * CVE-2021-3450: OpenSSL - CA certificate check bypass with
    X509_V_FLAG_X509_STRICT (High). (bsc#1183851)
  * CVE-2021-3449: OpenSSL - NULL pointer deref in
    signature_algorithms processing (High) (bsc#1183852)
  * CVE-2020-7774: npm - Update y18n to fix Prototype-Pollution
    (bsc#1184450)
- Changes in LTS version 12.22.0:
  * node-api: define version 8
  * http: runtime deprecate legacy HTTP parser
  * v8: implement v8.stopCoverage() and v8.takeCoverage()
  * worker: add eventLoopUtilization()
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="adam.majer@suse.de" date="1623326400">- Fix-build-with-icu-69.patch: fix building with ICU 69</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- update to 12.22.2:
  * deps: libuv upgrade - Out of bounds read (Medium)
    (bsc#1187973, CVE-2021-22918)
  * deps: npm update to 6.14.13 fixing
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- specfile cleanup</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- update to 12.22.4:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
  deps: upgrade npm to 6.14.14
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 12.22.5:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
- Fix-build-with-icu-69.patch: dropped, not for factory
- cares_public_headers.patch: don't use private headers</changelog>
  <changelog author="adam.majer@suse.de" date="1637928000">- update to 12.22.7:
  * deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 12.22.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
    bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
    bsc#1190053, CVE-2021-39135)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1641556800">- update to 12.22.8:
  * src: fix crash in AfterGetAddrInfo
  * deps: update c-ares to 1.18.1</changelog>
  <changelog author="adam.majer@suse.de" date="1641902400">- update to 12.22.9:
  Security update fixing the following issues:
  * Improper handling of URI Subject Alternative Names (Medium)
  (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
  (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
  (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
  (CVE-2022-21824, bsc#1194514)</changelog>
  <changelog author="adam.majer@suse.de" date="1645012800">- update to 12.22.10
  * Upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
    + CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * Updated ICU time zone data
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch: refreshed
- z15-test-skip.patch: dropped
- fix_ci_tests.patch: fix tests on z15</changelog>
  <changelog author="adam.majer@suse.de" date="1647604800">- update to 12.22.11
  * deps: upgrade openssl sources to 1.1.1n (bsc#1196877,  CVE-2022-0778)
    Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    More details at https://www.openssl.org/news/secadv/20220315.txt</changelog>
  <changelog author="adam.majer@suse.de" date="1649851200">- update to 12.22.12
  * node-api: avoid SecondPassCallback crash
    + fix shutdown crashes
    + make reference weak parameter an indirect link to references
    + fix crash in finalization
    + stop ref gc during environment teardown
    + force env shutdown deferring behavior
  * src: fix finalization crash</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="13d1623caaf4b4f47df0c1d156675450bb17170d361f0ce12c2ce38b3d1c8c07" name="npm12" arch="ppc64le">
  <version epoch="0" ver="12.22.12" rel="150200.4.32.1"/>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1606392000">- New upstream LTS version 12.20.0:
  * deps:
    + update llhttp '2.1.2' -&gt; '2.1.3'
    + update uv '1.39.0' -&gt; '1.40.0'
    + update uvwasi '0.0.10' -&gt; '0.0.11'
  * fs: add .ref() and .unref() methods to watcher classes
  * http: added scheduling option to http agent
  * module:
    + exports pattern support
    + named exports for CJS via static analysis
  * n-api: add more property defaults (gh#35214)</changelog>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 12.20.1:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)
  * CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference
    (High) This is a vulnerability in OpenSSL which may be exploited
    through Node.js. (bsc#1179491)
- versioned.patch, nodejs-libpath.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- New upstream LTS version 12.20.2:
  * deps: upgrade npm to 6.14.11
- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 12.21.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
  * CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
    (bsc#1182333)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 12.22.1:
  * CVE-2021-3450: OpenSSL - CA certificate check bypass with
    X509_V_FLAG_X509_STRICT (High). (bsc#1183851)
  * CVE-2021-3449: OpenSSL - NULL pointer deref in
    signature_algorithms processing (High) (bsc#1183852)
  * CVE-2020-7774: npm - Update y18n to fix Prototype-Pollution
    (bsc#1184450)
- Changes in LTS version 12.22.0:
  * node-api: define version 8
  * http: runtime deprecate legacy HTTP parser
  * v8: implement v8.stopCoverage() and v8.takeCoverage()
  * worker: add eventLoopUtilization()
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="adam.majer@suse.de" date="1623326400">- Fix-build-with-icu-69.patch: fix building with ICU 69</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- update to 12.22.2:
  * deps: libuv upgrade - Out of bounds read (Medium)
    (bsc#1187973, CVE-2021-22918)
  * deps: npm update to 6.14.13 fixing
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- specfile cleanup</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- update to 12.22.4:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
  deps: upgrade npm to 6.14.14
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 12.22.5:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
- Fix-build-with-icu-69.patch: dropped, not for factory
- cares_public_headers.patch: don't use private headers</changelog>
  <changelog author="adam.majer@suse.de" date="1637928000">- update to 12.22.7:
  * deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 12.22.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
    bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
    bsc#1190053, CVE-2021-39135)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1641556800">- update to 12.22.8:
  * src: fix crash in AfterGetAddrInfo
  * deps: update c-ares to 1.18.1</changelog>
  <changelog author="adam.majer@suse.de" date="1641902400">- update to 12.22.9:
  Security update fixing the following issues:
  * Improper handling of URI Subject Alternative Names (Medium)
  (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
  (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
  (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
  (CVE-2022-21824, bsc#1194514)</changelog>
  <changelog author="adam.majer@suse.de" date="1645012800">- update to 12.22.10
  * Upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
    + CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * Updated ICU time zone data
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch: refreshed
- z15-test-skip.patch: dropped
- fix_ci_tests.patch: fix tests on z15</changelog>
  <changelog author="adam.majer@suse.de" date="1647604800">- update to 12.22.11
  * deps: upgrade openssl sources to 1.1.1n (bsc#1196877,  CVE-2022-0778)
    Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    More details at https://www.openssl.org/news/secadv/20220315.txt</changelog>
  <changelog author="adam.majer@suse.de" date="1649851200">- update to 12.22.12
  * node-api: avoid SecondPassCallback crash
    + fix shutdown crashes
    + make reference weak parameter an indirect link to references
    + fix crash in finalization
    + stop ref gc during environment teardown
    + force env shutdown deferring behavior
  * src: fix finalization crash</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="f03d391f30a5d644fbf42764620d0c729ea0d5f9c5d2e83c6b0316550f84e414" name="npm12" arch="s390x">
  <version epoch="0" ver="12.22.12" rel="150200.4.32.1"/>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1606392000">- New upstream LTS version 12.20.0:
  * deps:
    + update llhttp '2.1.2' -&gt; '2.1.3'
    + update uv '1.39.0' -&gt; '1.40.0'
    + update uvwasi '0.0.10' -&gt; '0.0.11'
  * fs: add .ref() and .unref() methods to watcher classes
  * http: added scheduling option to http agent
  * module:
    + exports pattern support
    + named exports for CJS via static analysis
  * n-api: add more property defaults (gh#35214)</changelog>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 12.20.1:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)
  * CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference
    (High) This is a vulnerability in OpenSSL which may be exploited
    through Node.js. (bsc#1179491)
- versioned.patch, nodejs-libpath.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- New upstream LTS version 12.20.2:
  * deps: upgrade npm to 6.14.11
- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 12.21.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
  * CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
    (bsc#1182333)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 12.22.1:
  * CVE-2021-3450: OpenSSL - CA certificate check bypass with
    X509_V_FLAG_X509_STRICT (High). (bsc#1183851)
  * CVE-2021-3449: OpenSSL - NULL pointer deref in
    signature_algorithms processing (High) (bsc#1183852)
  * CVE-2020-7774: npm - Update y18n to fix Prototype-Pollution
    (bsc#1184450)
- Changes in LTS version 12.22.0:
  * node-api: define version 8
  * http: runtime deprecate legacy HTTP parser
  * v8: implement v8.stopCoverage() and v8.takeCoverage()
  * worker: add eventLoopUtilization()
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="adam.majer@suse.de" date="1623326400">- Fix-build-with-icu-69.patch: fix building with ICU 69</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- update to 12.22.2:
  * deps: libuv upgrade - Out of bounds read (Medium)
    (bsc#1187973, CVE-2021-22918)
  * deps: npm update to 6.14.13 fixing
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- specfile cleanup</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- update to 12.22.4:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
  deps: upgrade npm to 6.14.14
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 12.22.5:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
- Fix-build-with-icu-69.patch: dropped, not for factory
- cares_public_headers.patch: don't use private headers</changelog>
  <changelog author="adam.majer@suse.de" date="1637928000">- update to 12.22.7:
  * deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 12.22.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
    bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
    bsc#1190053, CVE-2021-39135)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1641556800">- update to 12.22.8:
  * src: fix crash in AfterGetAddrInfo
  * deps: update c-ares to 1.18.1</changelog>
  <changelog author="adam.majer@suse.de" date="1641902400">- update to 12.22.9:
  Security update fixing the following issues:
  * Improper handling of URI Subject Alternative Names (Medium)
  (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
  (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
  (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
  (CVE-2022-21824, bsc#1194514)</changelog>
  <changelog author="adam.majer@suse.de" date="1645012800">- update to 12.22.10
  * Upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
    + CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * Updated ICU time zone data
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch: refreshed
- z15-test-skip.patch: dropped
- fix_ci_tests.patch: fix tests on z15</changelog>
  <changelog author="adam.majer@suse.de" date="1647604800">- update to 12.22.11
  * deps: upgrade openssl sources to 1.1.1n (bsc#1196877,  CVE-2022-0778)
    Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    More details at https://www.openssl.org/news/secadv/20220315.txt</changelog>
  <changelog author="adam.majer@suse.de" date="1649851200">- update to 12.22.12
  * node-api: avoid SecondPassCallback crash
    + fix shutdown crashes
    + make reference weak parameter an indirect link to references
    + fix crash in finalization
    + stop ref gc during environment teardown
    + force env shutdown deferring behavior
  * src: fix finalization crash</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="a0f38b439fe301cc8146ce9f7fd02c5e8412b576bfa158398d333396c14397e0" name="npm12" arch="x86_64">
  <version epoch="0" ver="12.22.12" rel="150200.4.32.1"/>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1606392000">- New upstream LTS version 12.20.0:
  * deps:
    + update llhttp '2.1.2' -&gt; '2.1.3'
    + update uv '1.39.0' -&gt; '1.40.0'
    + update uvwasi '0.0.10' -&gt; '0.0.11'
  * fs: add .ref() and .unref() methods to watcher classes
  * http: added scheduling option to http agent
  * module:
    + exports pattern support
    + named exports for CJS via static analysis
  * n-api: add more property defaults (gh#35214)</changelog>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 12.20.1:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)
  * CVE-2020-1971: OpenSSL - EDIPARTYNAME NULL pointer de-reference
    (High) This is a vulnerability in OpenSSL which may be exploited
    through Node.js. (bsc#1179491)
- versioned.patch, nodejs-libpath.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- New upstream LTS version 12.20.2:
  * deps: upgrade npm to 6.14.11
- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 12.21.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)
  * CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate
    (bsc#1182333)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 12.22.1:
  * CVE-2021-3450: OpenSSL - CA certificate check bypass with
    X509_V_FLAG_X509_STRICT (High). (bsc#1183851)
  * CVE-2021-3449: OpenSSL - NULL pointer deref in
    signature_algorithms processing (High) (bsc#1183852)
  * CVE-2020-7774: npm - Update y18n to fix Prototype-Pollution
    (bsc#1184450)
- Changes in LTS version 12.22.0:
  * node-api: define version 8
  * http: runtime deprecate legacy HTTP parser
  * v8: implement v8.stopCoverage() and v8.takeCoverage()
  * worker: add eventLoopUtilization()
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="adam.majer@suse.de" date="1623326400">- Fix-build-with-icu-69.patch: fix building with ICU 69</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- update to 12.22.2:
  * deps: libuv upgrade - Out of bounds read (Medium)
    (bsc#1187973, CVE-2021-22918)
  * deps: npm update to 6.14.13 fixing
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- specfile cleanup</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- update to 12.22.4:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
  deps: upgrade npm to 6.14.14
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 12.22.5:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
- Fix-build-with-icu-69.patch: dropped, not for factory
- cares_public_headers.patch: don't use private headers</changelog>
  <changelog author="adam.majer@suse.de" date="1637928000">- update to 12.22.7:
  * deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 12.22.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
    bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
    bsc#1190053, CVE-2021-39135)
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1641556800">- update to 12.22.8:
  * src: fix crash in AfterGetAddrInfo
  * deps: update c-ares to 1.18.1</changelog>
  <changelog author="adam.majer@suse.de" date="1641902400">- update to 12.22.9:
  Security update fixing the following issues:
  * Improper handling of URI Subject Alternative Names (Medium)
  (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
  (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
  (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
  (CVE-2022-21824, bsc#1194514)</changelog>
  <changelog author="adam.majer@suse.de" date="1645012800">- update to 12.22.10
  * Upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
    + CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * Updated ICU time zone data
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch: refreshed
- z15-test-skip.patch: dropped
- fix_ci_tests.patch: fix tests on z15</changelog>
  <changelog author="adam.majer@suse.de" date="1647604800">- update to 12.22.11
  * deps: upgrade openssl sources to 1.1.1n (bsc#1196877,  CVE-2022-0778)
    Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    More details at https://www.openssl.org/news/secadv/20220315.txt</changelog>
  <changelog author="adam.majer@suse.de" date="1649851200">- update to 12.22.12
  * node-api: avoid SecondPassCallback crash
    + fix shutdown crashes
    + make reference weak parameter an indirect link to references
    + fix crash in finalization
    + stop ref gc during environment teardown
    + force env shutdown deferring behavior
  * src: fix finalization crash</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="2222eadd4e64a826a1c0bc804e0b62adfc8136d2b3bb39e27d3e124ec0433a7e" name="npm14" arch="aarch64">
  <version epoch="0" ver="14.19.1" rel="150200.15.31.1"/>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="adam.majer@suse.de" date="1608552000">- New upstream LTS version 14.15.3:
  * deps:
    + upgrade npm to 6.14.9
    + update acorn to v8.0.4
  * http2: check write not scheduled in scope destructor
  * stream: fix regression on duplex end
- versioned.patch, sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 14.15.4:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- New upstream LTS version 14.15.5:
  * deps:
    + upgrade npm to 6.14.11
    + V8: backport dfcf1e86fac0 #37245
    Note: Node.js is not believed to be vulnerable to CVE-2021-21148
  * stream,zlib: do not use _stream_* anymore
- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 14.16.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 14.16.1:
  * CVE-2020-7774: npm upgrade - Update y18n to fix Prototype-Pollution (High)
    This is a vulnerability in the y18n npm module which may be
    exploited by prototype pollution. You can read more about it in
    https://github.com/advisories/GHSA-c4w7-xm78-47vh
    (bsc#1184450)
  * deps: upgrade npm to 6.14.12
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="dmueller@suse.com" date="1622808000">- update to 14.17.0:
  * Experimental support for AbortController and AbortSignal
  * Diagnostics channel (experimental module)
  * UUID support in the crypto module
  * update ICU to 68.1
  * upgrade to libuv 1.41.0
  * deps: npm update to 6.14.13
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- add Fix-build-with-icu-69.patch: fix build with icu 69</changelog>
  <changelog author="adam.majer@suse.de" date="1623931200">- update to 14.17.1:
  * deps: update ICU to 69.1
  * errors: align source-map stacks with spec
- Fix-build-with-icu-69.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1625227200">- update to 14.17.2:
  deps: libuv upgrade - Out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
- old_icu.patch: update with upstream's patch from
  https://github.com/nodejs/node/pull/39068
- specfile cleanup</changelog>
  <changelog author="adam.majer@suse.de" date="1627905600">- update to 14.17.4:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
- old_icu.patch: merged, removed
- versioned.patch: updated
- node_modules.tar.xz: refreshed
- PR39011.patch: use localhost instead of remote for unit test</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 14.17.5:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
- cares_public_headers.patch: don't use private headers</changelog>
  <changelog author="adam.majer@suse.de" date="1636459200">- update to 14.18.1:
  * deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 14.18.0:
  * buffer:
    + introduce Blob
    + add base64url encoding option
  * child_process:
    + allow options.cwd receive a URL
    + add timeout to spawn and fork
    + allow promisified exec to be cancel
    + add 'overlapped' stdio flag
  * dns: add "tries" option to Resolve options
  * fs:
    + allow empty string for temp directory prefix
    + allow no-params fsPromises fileHandle read
    + add support for async iterators to fsPromises.writeFile
  * http2: add support for sensitive headers
  * process: add 'worker' event
  * tls: allow reading data into a static buffer
  * worker: add setEnvironmentData/getEnvironmentData
- changes in 14.17.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
    bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
    bsc#1190053, CVE-2021-39135)
- test-skip-y2038-on-32bit-time_t.patch: fix test failure when
  64-bit time_t is used on 32-bit arches
- refreshed patches: versioned.patch, flaky_test_rerun.patch
- PR39011.patch: upstreamed</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1637841600">- Fix CXXFLAGS in Tumbleweed - boo#1192824</changelog>
  <changelog author="adam.majer@suse.de" date="1639656000">- update to 14.18.2:
  * lib: fix regular expression to detect `/` and `\`
  * worker: avoid potential deadlock on NearHeapLimit
- sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1641902400">- update to 14.18.3:
  Security update fixing the following issues:
  * Improper handling of URI Subject Alternative Names (Medium)
  (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
  (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
  (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
  (CVE-2022-21824, bsc#1194514)</changelog>
  <changelog author="adam.majer@suse.de" date="1641988800">- z15-test-skip.patch: dropped, no longer required
- fix_ci_tests.patch: update tests for z15</changelog>
  <changelog author="adam.majer@suse.de" date="1645012800">- update to 14.19.0:
  * crypto: make FIPS related options always available
  * deps: deps: upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
    + CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * module: support pattern trailers
  * src: make napi_create_reference accept symbol
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch, nodejs-libpath.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">Update to 14.19.1:
  * deps: upgrade openssl sources to 1.1.1n (bsc#1196877,  CVE-2022-0778)
    Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    More details at https://www.openssl.org/news/secadv/20220315.txt
- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="d6309636ac790d36b4df83d0ffe978ebc370d0ac75df30451e8547e6bc629765" name="npm14" arch="ppc64le">
  <version epoch="0" ver="14.19.1" rel="150200.15.31.1"/>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="adam.majer@suse.de" date="1608552000">- New upstream LTS version 14.15.3:
  * deps:
    + upgrade npm to 6.14.9
    + update acorn to v8.0.4
  * http2: check write not scheduled in scope destructor
  * stream: fix regression on duplex end
- versioned.patch, sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 14.15.4:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- New upstream LTS version 14.15.5:
  * deps:
    + upgrade npm to 6.14.11
    + V8: backport dfcf1e86fac0 #37245
    Note: Node.js is not believed to be vulnerable to CVE-2021-21148
  * stream,zlib: do not use _stream_* anymore
- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 14.16.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 14.16.1:
  * CVE-2020-7774: npm upgrade - Update y18n to fix Prototype-Pollution (High)
    This is a vulnerability in the y18n npm module which may be
    exploited by prototype pollution. You can read more about it in
    https://github.com/advisories/GHSA-c4w7-xm78-47vh
    (bsc#1184450)
  * deps: upgrade npm to 6.14.12
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="dmueller@suse.com" date="1622808000">- update to 14.17.0:
  * Experimental support for AbortController and AbortSignal
  * Diagnostics channel (experimental module)
  * UUID support in the crypto module
  * update ICU to 68.1
  * upgrade to libuv 1.41.0
  * deps: npm update to 6.14.13
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- add Fix-build-with-icu-69.patch: fix build with icu 69</changelog>
  <changelog author="adam.majer@suse.de" date="1623931200">- update to 14.17.1:
  * deps: update ICU to 69.1
  * errors: align source-map stacks with spec
- Fix-build-with-icu-69.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1625227200">- update to 14.17.2:
  deps: libuv upgrade - Out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
- old_icu.patch: update with upstream's patch from
  https://github.com/nodejs/node/pull/39068
- specfile cleanup</changelog>
  <changelog author="adam.majer@suse.de" date="1627905600">- update to 14.17.4:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
- old_icu.patch: merged, removed
- versioned.patch: updated
- node_modules.tar.xz: refreshed
- PR39011.patch: use localhost instead of remote for unit test</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 14.17.5:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
- cares_public_headers.patch: don't use private headers</changelog>
  <changelog author="adam.majer@suse.de" date="1636459200">- update to 14.18.1:
  * deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 14.18.0:
  * buffer:
    + introduce Blob
    + add base64url encoding option
  * child_process:
    + allow options.cwd receive a URL
    + add timeout to spawn and fork
    + allow promisified exec to be cancel
    + add 'overlapped' stdio flag
  * dns: add "tries" option to Resolve options
  * fs:
    + allow empty string for temp directory prefix
    + allow no-params fsPromises fileHandle read
    + add support for async iterators to fsPromises.writeFile
  * http2: add support for sensitive headers
  * process: add 'worker' event
  * tls: allow reading data into a static buffer
  * worker: add setEnvironmentData/getEnvironmentData
- changes in 14.17.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
    bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
    bsc#1190053, CVE-2021-39135)
- test-skip-y2038-on-32bit-time_t.patch: fix test failure when
  64-bit time_t is used on 32-bit arches
- refreshed patches: versioned.patch, flaky_test_rerun.patch
- PR39011.patch: upstreamed</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1637841600">- Fix CXXFLAGS in Tumbleweed - boo#1192824</changelog>
  <changelog author="adam.majer@suse.de" date="1639656000">- update to 14.18.2:
  * lib: fix regular expression to detect `/` and `\`
  * worker: avoid potential deadlock on NearHeapLimit
- sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1641902400">- update to 14.18.3:
  Security update fixing the following issues:
  * Improper handling of URI Subject Alternative Names (Medium)
  (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
  (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
  (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
  (CVE-2022-21824, bsc#1194514)</changelog>
  <changelog author="adam.majer@suse.de" date="1641988800">- z15-test-skip.patch: dropped, no longer required
- fix_ci_tests.patch: update tests for z15</changelog>
  <changelog author="adam.majer@suse.de" date="1645012800">- update to 14.19.0:
  * crypto: make FIPS related options always available
  * deps: deps: upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
    + CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * module: support pattern trailers
  * src: make napi_create_reference accept symbol
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch, nodejs-libpath.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">Update to 14.19.1:
  * deps: upgrade openssl sources to 1.1.1n (bsc#1196877,  CVE-2022-0778)
    Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    More details at https://www.openssl.org/news/secadv/20220315.txt
- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="76aa85648a50440aabc9818427fc1cffe3d26da22fa22e17e488a1bc37dad10d" name="npm14" arch="s390x">
  <version epoch="0" ver="14.19.1" rel="150200.15.31.1"/>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="adam.majer@suse.de" date="1608552000">- New upstream LTS version 14.15.3:
  * deps:
    + upgrade npm to 6.14.9
    + update acorn to v8.0.4
  * http2: check write not scheduled in scope destructor
  * stream: fix regression on duplex end
- versioned.patch, sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 14.15.4:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- New upstream LTS version 14.15.5:
  * deps:
    + upgrade npm to 6.14.11
    + V8: backport dfcf1e86fac0 #37245
    Note: Node.js is not believed to be vulnerable to CVE-2021-21148
  * stream,zlib: do not use _stream_* anymore
- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 14.16.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 14.16.1:
  * CVE-2020-7774: npm upgrade - Update y18n to fix Prototype-Pollution (High)
    This is a vulnerability in the y18n npm module which may be
    exploited by prototype pollution. You can read more about it in
    https://github.com/advisories/GHSA-c4w7-xm78-47vh
    (bsc#1184450)
  * deps: upgrade npm to 6.14.12
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="dmueller@suse.com" date="1622808000">- update to 14.17.0:
  * Experimental support for AbortController and AbortSignal
  * Diagnostics channel (experimental module)
  * UUID support in the crypto module
  * update ICU to 68.1
  * upgrade to libuv 1.41.0
  * deps: npm update to 6.14.13
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- add Fix-build-with-icu-69.patch: fix build with icu 69</changelog>
  <changelog author="adam.majer@suse.de" date="1623931200">- update to 14.17.1:
  * deps: update ICU to 69.1
  * errors: align source-map stacks with spec
- Fix-build-with-icu-69.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1625227200">- update to 14.17.2:
  deps: libuv upgrade - Out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
- old_icu.patch: update with upstream's patch from
  https://github.com/nodejs/node/pull/39068
- specfile cleanup</changelog>
  <changelog author="adam.majer@suse.de" date="1627905600">- update to 14.17.4:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
- old_icu.patch: merged, removed
- versioned.patch: updated
- node_modules.tar.xz: refreshed
- PR39011.patch: use localhost instead of remote for unit test</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 14.17.5:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
- cares_public_headers.patch: don't use private headers</changelog>
  <changelog author="adam.majer@suse.de" date="1636459200">- update to 14.18.1:
  * deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 14.18.0:
  * buffer:
    + introduce Blob
    + add base64url encoding option
  * child_process:
    + allow options.cwd receive a URL
    + add timeout to spawn and fork
    + allow promisified exec to be cancel
    + add 'overlapped' stdio flag
  * dns: add "tries" option to Resolve options
  * fs:
    + allow empty string for temp directory prefix
    + allow no-params fsPromises fileHandle read
    + add support for async iterators to fsPromises.writeFile
  * http2: add support for sensitive headers
  * process: add 'worker' event
  * tls: allow reading data into a static buffer
  * worker: add setEnvironmentData/getEnvironmentData
- changes in 14.17.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
    bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
    bsc#1190053, CVE-2021-39135)
- test-skip-y2038-on-32bit-time_t.patch: fix test failure when
  64-bit time_t is used on 32-bit arches
- refreshed patches: versioned.patch, flaky_test_rerun.patch
- PR39011.patch: upstreamed</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1637841600">- Fix CXXFLAGS in Tumbleweed - boo#1192824</changelog>
  <changelog author="adam.majer@suse.de" date="1639656000">- update to 14.18.2:
  * lib: fix regular expression to detect `/` and `\`
  * worker: avoid potential deadlock on NearHeapLimit
- sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1641902400">- update to 14.18.3:
  Security update fixing the following issues:
  * Improper handling of URI Subject Alternative Names (Medium)
  (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
  (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
  (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
  (CVE-2022-21824, bsc#1194514)</changelog>
  <changelog author="adam.majer@suse.de" date="1641988800">- z15-test-skip.patch: dropped, no longer required
- fix_ci_tests.patch: update tests for z15</changelog>
  <changelog author="adam.majer@suse.de" date="1645012800">- update to 14.19.0:
  * crypto: make FIPS related options always available
  * deps: deps: upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
    + CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * module: support pattern trailers
  * src: make napi_create_reference accept symbol
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch, nodejs-libpath.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">Update to 14.19.1:
  * deps: upgrade openssl sources to 1.1.1n (bsc#1196877,  CVE-2022-0778)
    Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    More details at https://www.openssl.org/news/secadv/20220315.txt
- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="bf0e0fb7a8a689a04cb05097005bfd495ee280b2758b85d258b64aaa59677c9f" name="npm14" arch="x86_64">
  <version epoch="0" ver="14.19.1" rel="150200.15.31.1"/>
  <changelog author="adam.majer@suse.de" date="1606737600">- openssl_binary_detection.patch: fixes unit tests on SLE12</changelog>
  <changelog author="adam.majer@suse.de" date="1608552000">- New upstream LTS version 14.15.3:
  * deps:
    + upgrade npm to 6.14.9
    + update acorn to v8.0.4
  * http2: check write not scheduled in scope destructor
  * stream: fix regression on duplex end
- versioned.patch, sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1609761600">- New upstream LTS version 14.15.4:
  * CVE-2020-8265: use-after-free in TLSWrap (High) bug in TLS
    implementation. When writing to a TLS enabled socket,
    node::StreamBase::Write calls node::TLSWrap::DoWrite with
    a freshly allocated WriteWrap object as first argument.
    If the DoWrite method does not return an error, this object is
    passed back to the caller as part of a StreamWriteResult structure.
    This may be exploited to corrupt memory leading to a
    Denial of Service or potentially other exploits (bsc#1180553)
  * CVE-2020-8287: HTTP Request Smuggling allow two copies of a
    header field in a http request. For example, two Transfer-Encoding
    header fields. In this case Node.js identifies the first header
    field and ignores the second. This can lead to HTTP Request
    Smuggling (https://cwe.mitre.org/data/definitions/444.html).
    (bsc#1180554)</changelog>
  <changelog author="adam.majer@suse.de" date="1613563200">- New upstream LTS version 14.15.5:
  * deps:
    + upgrade npm to 6.14.11
    + V8: backport dfcf1e86fac0 #37245
    Note: Node.js is not believed to be vulnerable to CVE-2021-21148
  * stream,zlib: do not use _stream_* anymore
- relax OpenSSL cipher suite policies for unit tests</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- New upstream LTS version 14.16.0:
  * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service
    by resource exhaustion (bsc#1182619)
  * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620)</changelog>
  <changelog author="adam.majer@suse.de" date="1617796800">- New upstream LTS version 14.16.1:
  * CVE-2020-7774: npm upgrade - Update y18n to fix Prototype-Pollution (High)
    This is a vulnerability in the y18n npm module which may be
    exploited by prototype pollution. You can read more about it in
    https://github.com/advisories/GHSA-c4w7-xm78-47vh
    (bsc#1184450)
  * deps: upgrade npm to 6.14.12
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1622462400">- Use libalternatives instead of update-alternatives</changelog>
  <changelog author="dmueller@suse.com" date="1622808000">- update to 14.17.0:
  * Experimental support for AbortController and AbortSignal
  * Diagnostics channel (experimental module)
  * UUID support in the crypto module
  * update ICU to 68.1
  * upgrade to libuv 1.41.0
  * deps: npm update to 6.14.13
    ssri Regular Expression Denial of Service and hosted-git-info
    Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
- add Fix-build-with-icu-69.patch: fix build with icu 69</changelog>
  <changelog author="adam.majer@suse.de" date="1623931200">- update to 14.17.1:
  * deps: update ICU to 69.1
  * errors: align source-map stacks with spec
- Fix-build-with-icu-69.patch: upstreamed</changelog>
  <changelog author="adam.majer@suse.de" date="1625227200">- update to 14.17.2:
  deps: libuv upgrade - Out of bounds read (Medium)
  (bsc#1187973, CVE-2021-22918)
- old_icu.patch: update with upstream's patch from
  https://github.com/nodejs/node/pull/39068
- specfile cleanup</changelog>
  <changelog author="adam.majer@suse.de" date="1627905600">- update to 14.17.4:
  http2: fixes use after free on close http2 on stream canceling
  (bsc#1188917, CVE-2021-22930)
- old_icu.patch: merged, removed
- versioned.patch: updated
- node_modules.tar.xz: refreshed
- PR39011.patch: use localhost instead of remote for unit test</changelog>
  <changelog author="adam.majer@suse.de" date="1628510400">- z15-test-skip.patch: skip problematic test on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 14.17.5:
  * CVE-2021-3672/CVE-2021-22931: Improper handling of untypical
    characters in domain names (bsc#1189370, bsc#1188881)
  * CVE-2021-22940: Use after free on close http2 on stream canceling
    (bsc#1189368)
  * CVE-2021-22939: Incomplete validation of rejectUnauthorized parameter
    (bsc#1189369)
- cares_public_headers.patch: don't use private headers</changelog>
  <changelog author="adam.majer@suse.de" date="1636459200">- update to 14.18.1:
  * deps: update llhttp to 2.1.4
  - HTTP Request Smuggling due to spaced in headers
    (bsc#1191601, CVE-2021-22959)
  - HTTP Request Smuggling when parsing the body
    (bsc#1191602, CVE-2021-22960)
- changes in 14.18.0:
  * buffer:
    + introduce Blob
    + add base64url encoding option
  * child_process:
    + allow options.cwd receive a URL
    + add timeout to spawn and fork
    + allow promisified exec to be cancel
    + add 'overlapped' stdio flag
  * dns: add "tries" option to Resolve options
  * fs:
    + allow empty string for temp directory prefix
    + allow no-params fsPromises fileHandle read
    + add support for async iterators to fsPromises.writeFile
  * http2: add support for sensitive headers
  * process: add 'worker' event
  * tls: allow reading data into a static buffer
  * worker: add setEnvironmentData/getEnvironmentData
- changes in 14.17.6:
  * deps: upgrade npm to 6.14.15 which fixes a number of
    security issues
    (bsc#1190057, CVE-2021-37701, bsc#1190056, CVE-2021-37712,
    bsc#1190055, CVE-2021-37713, bsc#1190054, CVE-2021-39134,
    bsc#1190053, CVE-2021-39135)
- test-skip-y2038-on-32bit-time_t.patch: fix test failure when
  64-bit time_t is used on 32-bit arches
- refreshed patches: versioned.patch, flaky_test_rerun.patch
- PR39011.patch: upstreamed</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1637841600">- Fix CXXFLAGS in Tumbleweed - boo#1192824</changelog>
  <changelog author="adam.majer@suse.de" date="1639656000">- update to 14.18.2:
  * lib: fix regular expression to detect `/` and `\`
  * worker: avoid potential deadlock on NearHeapLimit
- sle12_python3_compat.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1641902400">- update to 14.18.3:
  Security update fixing the following issues:
  * Improper handling of URI Subject Alternative Names (Medium)
  (CVE-2021-44531, bsc#1194511)
  * Certificate Verification Bypass via String Injection (Medium)
  (CVE-2021-44532, bsc#1194512)
  * Incorrect handling of certificate subject and issuer fields (Medium)
  (CVE-2021-44533, bsc#1194513)
  * Prototype pollution via console.table properties (Low)
  (CVE-2022-21824, bsc#1194514)</changelog>
  <changelog author="adam.majer@suse.de" date="1641988800">- z15-test-skip.patch: dropped, no longer required
- fix_ci_tests.patch: update tests for z15</changelog>
  <changelog author="adam.majer@suse.de" date="1645012800">- update to 14.19.0:
  * crypto: make FIPS related options always available
  * deps: deps: upgrade npm to 6.14.16
    + CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
    + CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
    + CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
    + CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
  * module: support pattern trailers
  * src: make napi_create_reference accept symbol
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- versioned.patch, nodejs-libpath.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">Update to 14.19.1:
  * deps: upgrade openssl sources to 1.1.1n (bsc#1196877,  CVE-2022-0778)
    Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    More details at https://www.openssl.org/news/secadv/20220315.txt
- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="87b4d63474ce083cf6d1f4f26473ec2060700d5567b43af17d5fbb450cf13d48" name="npm8" arch="aarch64">
  <version epoch="0" ver="8.17.0" rel="150200.10.22.1"/>
  <changelog author="adam.majer@suse.de" date="1576756800">- New upstream LTS release 8.17.0:
  * deps: updates npm to 6.13.4 fixing an arbitrary path overwrite
    and access via "bin" field (bsc#1159352, CVE-2019-16777,
    CVE-2019-16776, CVE-2019-16775)
- refreshed: versioned.patch node-gyp-addon-gypi.patch
- upstreamed: CVE-2019-13173.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1578398400">- Really disable LTO when required (nodejs &lt; 12)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1578398401">- Update _constraints for aarch64</changelog>
  <changelog author="adam.majer@suse.de" date="1581076800">- CVE-2019-15604.patch: fixes a remotely triggerable assertion
  on a TLS server via a crafted certificate string
  (CVE-2019-15604, bsc#1163104)
- CVE-2019-15605.patch: fixes an HTTP request smuggling vulnerability
  via malformed Transfer-Encoding header (CVE-2019-15605, bsc#1163102)
- CVE-2019-15606.patch: trim HTTP header values of optional
  white space (CVE-2019-15606, bsc#1163103)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1586260800">- Update _constraints for ppc64 (BE)</changelog>
  <changelog author="adam.majer@suse.de" date="1588593600">- Reduce Requires to Recommends on nodejs8-devel when installing npm8</changelog>
  <changelog author="adam.majer@suse.de" date="1591272000">- CVE-2020-8174.patch: napi: fix various types of memory corruption
  in napi_get_value_string_*() (CVE-2020-8174, bsc#1172443)
- nghttp2_1.41.0.patch: deps: update nghttp2 to 1.41.0
- CVE-2020-11080.patch: http2: fix HTTP/2 Large Settings Frame DoS
  (CVE-2020-11080, bsc#1172442)
- minimist.patch: Fixes a vulnerability in an npm component
  (CVE-2020-7598, bsc#1166916)</changelog>
  <changelog author="adam.majer@suse.de" date="1591704000">- Add Require for nodejs8 when intalling npm8 (bsc#1172728)</changelog>
  <changelog author="dmueller@suse.com" date="1595937600">- avoid rpmbuild warnings on if/else/endif constructs</changelog>
  <changelog author="adam.majer@suse.de" date="1597060800">- Explicitly add -fno-strict-aliasing to CFLAGS to fix compilation
  on Aarch64 with gcc10 (bsc#1172686)</changelog>
  <changelog author="adam.majer@suse.de" date="1600948800">- CVE-2020-15095.patch: fix information leak through log files
  (bsc#1173937, CVE-2020-15095)</changelog>
  <changelog author="adam.majer@suse.de" date="1602244800">- fix_ci_tests.patch: add support to SUSE's ECDH backport errors
  in SLE's openssl</changelog>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1610366400">- CVE-2020-8287.patch: HTTP Request Smuggling allow two copies of a
  header field in a http request. For example, two Transfer-Encoding
  header fields. In this case Node.js identifies the first header
  field and ignores the second. This can lead to HTTP Request
  Smuggling (https://cwe.mitre.org/data/definitions/444.html).
  (bsc#1180554, CVE-2020-8287)</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- CVE-2021-22884.patch: DNS rebinding in --inspect
  (CVE-2021-22884, bsc#1182620)
- CVE-2021-22883.patch: only backport unit test to make sure
  we don't have regression here in the future.</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- npm-v6.14.13.tar.gz: update to npm 6.14.13 fixing
  * fixes ssri Regular Expression Denial of Service and
    hosted-git-info Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
  * fixes  y18n Prototype Pollution (bsc#1184450, CVE-2020-7774)
- CVE-2020-15095.patch, minimist.patch: obsoleted by above</changelog>
  <changelog author="adam.majer@suse.de" date="1625659200">- CVE-2020-8265.patch: Add a unit test for CVE-2020-8265 to make
  sure we don't have it broken in the future.</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- CVE-2021-22930.patch: http2: fixes use after free on close
  in stream canceling (bsc#1188917, CVE-2021-22930)</changelog>
  <changelog author="adam.majer@suse.de" date="1644926400">- npm-v6.14.16.tar.gz: update to npm 6.14.16 fixing
  * CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
  * CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
  * CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
  * CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- test_ssl_cert_fixups.patch: fixup SSL certificates in unit tests
- fix_ci_tests.patch: fix zlib tests for z15
- CVE-2021-22939.patch: add unit test only</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="bf836bd33c9d2a9334e4d6d99e75407caa3ffaaa2b295b4253ed04bfc2e24932" name="npm8" arch="ppc64le">
  <version epoch="0" ver="8.17.0" rel="150200.10.22.1"/>
  <changelog author="adam.majer@suse.de" date="1576756800">- New upstream LTS release 8.17.0:
  * deps: updates npm to 6.13.4 fixing an arbitrary path overwrite
    and access via "bin" field (bsc#1159352, CVE-2019-16777,
    CVE-2019-16776, CVE-2019-16775)
- refreshed: versioned.patch node-gyp-addon-gypi.patch
- upstreamed: CVE-2019-13173.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1578398400">- Really disable LTO when required (nodejs &lt; 12)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1578398401">- Update _constraints for aarch64</changelog>
  <changelog author="adam.majer@suse.de" date="1581076800">- CVE-2019-15604.patch: fixes a remotely triggerable assertion
  on a TLS server via a crafted certificate string
  (CVE-2019-15604, bsc#1163104)
- CVE-2019-15605.patch: fixes an HTTP request smuggling vulnerability
  via malformed Transfer-Encoding header (CVE-2019-15605, bsc#1163102)
- CVE-2019-15606.patch: trim HTTP header values of optional
  white space (CVE-2019-15606, bsc#1163103)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1586260800">- Update _constraints for ppc64 (BE)</changelog>
  <changelog author="adam.majer@suse.de" date="1588593600">- Reduce Requires to Recommends on nodejs8-devel when installing npm8</changelog>
  <changelog author="adam.majer@suse.de" date="1591272000">- CVE-2020-8174.patch: napi: fix various types of memory corruption
  in napi_get_value_string_*() (CVE-2020-8174, bsc#1172443)
- nghttp2_1.41.0.patch: deps: update nghttp2 to 1.41.0
- CVE-2020-11080.patch: http2: fix HTTP/2 Large Settings Frame DoS
  (CVE-2020-11080, bsc#1172442)
- minimist.patch: Fixes a vulnerability in an npm component
  (CVE-2020-7598, bsc#1166916)</changelog>
  <changelog author="adam.majer@suse.de" date="1591704000">- Add Require for nodejs8 when intalling npm8 (bsc#1172728)</changelog>
  <changelog author="dmueller@suse.com" date="1595937600">- avoid rpmbuild warnings on if/else/endif constructs</changelog>
  <changelog author="adam.majer@suse.de" date="1597060800">- Explicitly add -fno-strict-aliasing to CFLAGS to fix compilation
  on Aarch64 with gcc10 (bsc#1172686)</changelog>
  <changelog author="adam.majer@suse.de" date="1600948800">- CVE-2020-15095.patch: fix information leak through log files
  (bsc#1173937, CVE-2020-15095)</changelog>
  <changelog author="adam.majer@suse.de" date="1602244800">- fix_ci_tests.patch: add support to SUSE's ECDH backport errors
  in SLE's openssl</changelog>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1610366400">- CVE-2020-8287.patch: HTTP Request Smuggling allow two copies of a
  header field in a http request. For example, two Transfer-Encoding
  header fields. In this case Node.js identifies the first header
  field and ignores the second. This can lead to HTTP Request
  Smuggling (https://cwe.mitre.org/data/definitions/444.html).
  (bsc#1180554, CVE-2020-8287)</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- CVE-2021-22884.patch: DNS rebinding in --inspect
  (CVE-2021-22884, bsc#1182620)
- CVE-2021-22883.patch: only backport unit test to make sure
  we don't have regression here in the future.</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- npm-v6.14.13.tar.gz: update to npm 6.14.13 fixing
  * fixes ssri Regular Expression Denial of Service and
    hosted-git-info Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
  * fixes  y18n Prototype Pollution (bsc#1184450, CVE-2020-7774)
- CVE-2020-15095.patch, minimist.patch: obsoleted by above</changelog>
  <changelog author="adam.majer@suse.de" date="1625659200">- CVE-2020-8265.patch: Add a unit test for CVE-2020-8265 to make
  sure we don't have it broken in the future.</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- CVE-2021-22930.patch: http2: fixes use after free on close
  in stream canceling (bsc#1188917, CVE-2021-22930)</changelog>
  <changelog author="adam.majer@suse.de" date="1644926400">- npm-v6.14.16.tar.gz: update to npm 6.14.16 fixing
  * CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
  * CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
  * CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
  * CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- test_ssl_cert_fixups.patch: fixup SSL certificates in unit tests
- fix_ci_tests.patch: fix zlib tests for z15
- CVE-2021-22939.patch: add unit test only</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="33710d76158fb6de2d6c52c14854ead32f26541cb5f5f37b608231c9ae3e7655" name="npm8" arch="s390x">
  <version epoch="0" ver="8.17.0" rel="150200.10.22.1"/>
  <changelog author="adam.majer@suse.de" date="1576756800">- New upstream LTS release 8.17.0:
  * deps: updates npm to 6.13.4 fixing an arbitrary path overwrite
    and access via "bin" field (bsc#1159352, CVE-2019-16777,
    CVE-2019-16776, CVE-2019-16775)
- refreshed: versioned.patch node-gyp-addon-gypi.patch
- upstreamed: CVE-2019-13173.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1578398400">- Really disable LTO when required (nodejs &lt; 12)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1578398401">- Update _constraints for aarch64</changelog>
  <changelog author="adam.majer@suse.de" date="1581076800">- CVE-2019-15604.patch: fixes a remotely triggerable assertion
  on a TLS server via a crafted certificate string
  (CVE-2019-15604, bsc#1163104)
- CVE-2019-15605.patch: fixes an HTTP request smuggling vulnerability
  via malformed Transfer-Encoding header (CVE-2019-15605, bsc#1163102)
- CVE-2019-15606.patch: trim HTTP header values of optional
  white space (CVE-2019-15606, bsc#1163103)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1586260800">- Update _constraints for ppc64 (BE)</changelog>
  <changelog author="adam.majer@suse.de" date="1588593600">- Reduce Requires to Recommends on nodejs8-devel when installing npm8</changelog>
  <changelog author="adam.majer@suse.de" date="1591272000">- CVE-2020-8174.patch: napi: fix various types of memory corruption
  in napi_get_value_string_*() (CVE-2020-8174, bsc#1172443)
- nghttp2_1.41.0.patch: deps: update nghttp2 to 1.41.0
- CVE-2020-11080.patch: http2: fix HTTP/2 Large Settings Frame DoS
  (CVE-2020-11080, bsc#1172442)
- minimist.patch: Fixes a vulnerability in an npm component
  (CVE-2020-7598, bsc#1166916)</changelog>
  <changelog author="adam.majer@suse.de" date="1591704000">- Add Require for nodejs8 when intalling npm8 (bsc#1172728)</changelog>
  <changelog author="dmueller@suse.com" date="1595937600">- avoid rpmbuild warnings on if/else/endif constructs</changelog>
  <changelog author="adam.majer@suse.de" date="1597060800">- Explicitly add -fno-strict-aliasing to CFLAGS to fix compilation
  on Aarch64 with gcc10 (bsc#1172686)</changelog>
  <changelog author="adam.majer@suse.de" date="1600948800">- CVE-2020-15095.patch: fix information leak through log files
  (bsc#1173937, CVE-2020-15095)</changelog>
  <changelog author="adam.majer@suse.de" date="1602244800">- fix_ci_tests.patch: add support to SUSE's ECDH backport errors
  in SLE's openssl</changelog>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1610366400">- CVE-2020-8287.patch: HTTP Request Smuggling allow two copies of a
  header field in a http request. For example, two Transfer-Encoding
  header fields. In this case Node.js identifies the first header
  field and ignores the second. This can lead to HTTP Request
  Smuggling (https://cwe.mitre.org/data/definitions/444.html).
  (bsc#1180554, CVE-2020-8287)</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- CVE-2021-22884.patch: DNS rebinding in --inspect
  (CVE-2021-22884, bsc#1182620)
- CVE-2021-22883.patch: only backport unit test to make sure
  we don't have regression here in the future.</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- npm-v6.14.13.tar.gz: update to npm 6.14.13 fixing
  * fixes ssri Regular Expression Denial of Service and
    hosted-git-info Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
  * fixes  y18n Prototype Pollution (bsc#1184450, CVE-2020-7774)
- CVE-2020-15095.patch, minimist.patch: obsoleted by above</changelog>
  <changelog author="adam.majer@suse.de" date="1625659200">- CVE-2020-8265.patch: Add a unit test for CVE-2020-8265 to make
  sure we don't have it broken in the future.</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- CVE-2021-22930.patch: http2: fixes use after free on close
  in stream canceling (bsc#1188917, CVE-2021-22930)</changelog>
  <changelog author="adam.majer@suse.de" date="1644926400">- npm-v6.14.16.tar.gz: update to npm 6.14.16 fixing
  * CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
  * CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
  * CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
  * CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- test_ssl_cert_fixups.patch: fixup SSL certificates in unit tests
- fix_ci_tests.patch: fix zlib tests for z15
- CVE-2021-22939.patch: add unit test only</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="1b72f54a681c8aa505ef1eb5d49ec410b9ee1e1f277cb6717549123fb99307b1" name="npm8" arch="x86_64">
  <version epoch="0" ver="8.17.0" rel="150200.10.22.1"/>
  <changelog author="adam.majer@suse.de" date="1576756800">- New upstream LTS release 8.17.0:
  * deps: updates npm to 6.13.4 fixing an arbitrary path overwrite
    and access via "bin" field (bsc#1159352, CVE-2019-16777,
    CVE-2019-16776, CVE-2019-16775)
- refreshed: versioned.patch node-gyp-addon-gypi.patch
- upstreamed: CVE-2019-13173.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1578398400">- Really disable LTO when required (nodejs &lt; 12)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1578398401">- Update _constraints for aarch64</changelog>
  <changelog author="adam.majer@suse.de" date="1581076800">- CVE-2019-15604.patch: fixes a remotely triggerable assertion
  on a TLS server via a crafted certificate string
  (CVE-2019-15604, bsc#1163104)
- CVE-2019-15605.patch: fixes an HTTP request smuggling vulnerability
  via malformed Transfer-Encoding header (CVE-2019-15605, bsc#1163102)
- CVE-2019-15606.patch: trim HTTP header values of optional
  white space (CVE-2019-15606, bsc#1163103)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1586260800">- Update _constraints for ppc64 (BE)</changelog>
  <changelog author="adam.majer@suse.de" date="1588593600">- Reduce Requires to Recommends on nodejs8-devel when installing npm8</changelog>
  <changelog author="adam.majer@suse.de" date="1591272000">- CVE-2020-8174.patch: napi: fix various types of memory corruption
  in napi_get_value_string_*() (CVE-2020-8174, bsc#1172443)
- nghttp2_1.41.0.patch: deps: update nghttp2 to 1.41.0
- CVE-2020-11080.patch: http2: fix HTTP/2 Large Settings Frame DoS
  (CVE-2020-11080, bsc#1172442)
- minimist.patch: Fixes a vulnerability in an npm component
  (CVE-2020-7598, bsc#1166916)</changelog>
  <changelog author="adam.majer@suse.de" date="1591704000">- Add Require for nodejs8 when intalling npm8 (bsc#1172728)</changelog>
  <changelog author="dmueller@suse.com" date="1595937600">- avoid rpmbuild warnings on if/else/endif constructs</changelog>
  <changelog author="adam.majer@suse.de" date="1597060800">- Explicitly add -fno-strict-aliasing to CFLAGS to fix compilation
  on Aarch64 with gcc10 (bsc#1172686)</changelog>
  <changelog author="adam.majer@suse.de" date="1600948800">- CVE-2020-15095.patch: fix information leak through log files
  (bsc#1173937, CVE-2020-15095)</changelog>
  <changelog author="adam.majer@suse.de" date="1602244800">- fix_ci_tests.patch: add support to SUSE's ECDH backport errors
  in SLE's openssl</changelog>
  <changelog author="adam.majer@suse.de" date="1606132800">- Update Requires: so -devel requires npm
- Rely on rpmbuild to define necessary python dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1610366400">- CVE-2020-8287.patch: HTTP Request Smuggling allow two copies of a
  header field in a http request. For example, two Transfer-Encoding
  header fields. In this case Node.js identifies the first header
  field and ignores the second. This can lead to HTTP Request
  Smuggling (https://cwe.mitre.org/data/definitions/444.html).
  (bsc#1180554, CVE-2020-8287)</changelog>
  <changelog author="adam.majer@suse.de" date="1614081600">- CVE-2021-22884.patch: DNS rebinding in --inspect
  (CVE-2021-22884, bsc#1182620)
- CVE-2021-22883.patch: only backport unit test to make sure
  we don't have regression here in the future.</changelog>
  <changelog author="adam.majer@suse.de" date="1625572800">- npm-v6.14.13.tar.gz: update to npm 6.14.13 fixing
  * fixes ssri Regular Expression Denial of Service and
    hosted-git-info Regular Expression Denial of Service
    (bsc#1187976, bsc#1187977, CVE-2021-27290, CVE-2021-23362)
  * fixes  y18n Prototype Pollution (bsc#1184450, CVE-2020-7774)
- CVE-2020-15095.patch, minimist.patch: obsoleted by above</changelog>
  <changelog author="adam.majer@suse.de" date="1625659200">- CVE-2020-8265.patch: Add a unit test for CVE-2020-8265 to make
  sure we don't have it broken in the future.</changelog>
  <changelog author="adam.majer@suse.de" date="1628078400">- CVE-2021-22930.patch: http2: fixes use after free on close
  in stream canceling (bsc#1188917, CVE-2021-22930)</changelog>
  <changelog author="adam.majer@suse.de" date="1644926400">- npm-v6.14.16.tar.gz: update to npm 6.14.16 fixing
  * CVE-2021-23343 - ReDoS via splitDeviceRe, splitTailRe and
    splitPathRe (bsc#1192153)
  * CVE-2021-32803 - node-tar: Insufficient symlink protection
    allowing arbitrary file creation and overwrite (bsc#1191963)
  * CVE-2021-32804 - node-tar: Insufficient absolute path sanitization
    allowing arbitrary file creation and overwrite (bsc#1191962)
  * CVE-2021-3918 - json-schema is vulnerable to Improperly
    Controlled Modification of Object Prototype Attributes (bsc#1192696)
- CVE-2021-3807.patch: node-ansi-regex: Regular expression
  denial of service (ReDoS) matching ANSI escape codes
  (bsc#1192154, CVE-2021-3807)
- test_ssl_cert_fixups.patch: fixup SSL certificates in unit tests
- fix_ci_tests.patch: fix zlib tests for z15
- CVE-2021-22939.patch: add unit test only</changelog>
  <changelog author="adam.majer@suse.de" date="1650456000">- CVE-2021-44906.patch: fix prototype pollution in npm dependency
  (bsc#1198247, CVE-2021-44906)
- CVE-2021-44907.patch: fix insuficient sanitation in npm dependency
  (bsc#1197283, CVE-2021-44907)
- CVE-2022-0235.patch: fix passing of cookie data and sensitive headers
  to different hostnames in node-fetch-npm (bsc#1194819, CVE-2022-0235)</changelog>
</package>
<package pkgid="43373cf77f6bede481da519ad5ec3bb83dcb69431cb2d5d4d366de5670a2611a" name="nscd" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="36ebb98ac1609c12e5b53b899c33d8c3664d9eec2ac543325a8a7f62e4866943" name="nscd" arch="ppc64le">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="79d0a9fc7e5db66e8c28c7436e6fec96eaeefb8394da9c17dc0360d9595a04d2" name="nscd" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="f8ca133bb7fdef3e110014c6cce454a22e11179a200f33b1ef8ef40c7c3913c2" name="nscd" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.26.5"/>
  <changelog author="schwab@suse.de" date="1585137600">- glob-use-after-free.patch: Fix use-after-free in glob when expanding
  ~user (CVE-2020-1752, bsc#1167631, BZ #25414)</changelog>
  <changelog author="schwab@suse.de" date="1589371200">- nptl-setxid-race.patch: nptl: wait for pending setxid request also in
  detached thread (bsc#1162930, BZ #25942)</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- nscd-senfile.patch: Fix concurrent changes on nscd aware files
  (bsc#1171878, BZ #23178)
- nscd-prune.patch: nscd: bump GC cycle during cache pruning (bsc#1171878,
  BZ #26130)
- syslog-locking.patch: Correct locking and cancellation cleanup in syslog
  functions (bsc#1172085, BZ #26100)</changelog>
  <changelog author="schwab@suse.de" date="1599048000">- Update to glibc 2.31
- glibc-2.14-crypt.diff, crypt_blowfish-const.patch,
  crypt_blowfish-1.2-sha.diff, crypt_blowfish-gensalt.patch,
  crypt_blowfish-1.2-hack_around_arm.diff, glibc-nodate.patch,
  powerpc-elision-enable-envvar.patch, s390-elision-enable-envvar.patch,
  crt-nocompress-debug-sections.patch, resolv-context-leak.patch,
  dl-runtime-resolve-opt-avx512f.patch, libpthread-compat-wrappers.patch,
  math-c++-compat.patch, remove-nss-nis-compat.patch,
  eh-frame-zero-terminator.patch, ld-so-hwcap-x86-64.patch,
  assert-pedantic.patch, getaddrinfo-errno.patch, resolv-conf-oom.patch,
  dynarray-allocation.patch, nearbyint-inexact.patch, nss-compat.patch,
  nscd-libnsl.patch, malloc-tcache-leak.patch,
  falkor-memcpy-memmove.patch, aarch64-cpu-features.patch,
  nss-files-large-buffers.patch, sysconf-uio-maxiov.patch,
  glob-tilde-overflow.patch, dl-runtime-resolve-xsave.patch,
  spawni-assert.patch, x86-64-dl-platform.patch, glob64-s390.patch,
  tst-tlsopt-powerpc.patch, powerpc-hwcap-bits.patch,
  malloc-tcache-check-overflow.patch, dl-init-paths-overflow.patch,
  fillin-rpath-empty-tokens.patch, getcwd-absolute.patch,
  memalign-overflow.patch, stack-guard-size-accounting.patch,
  libgcc-rtld-now.patch, res-send-enomem.patch,
  glibc-fix-avx512-mempcpy.patch, i386-memmove-sse2-unaligned.patch,
  realpath-ssize-max-overflow.patch, localtime-2039.patch,
  math-remove-slow-path.patch, aarch64-hwcap-atomics.patch,
  glibc-fix-aarch64-build.diff, absolute-symbols.patch,
  x86-haswell-string-flags.patch,
  pthread-cond-broadcast-waiters-after-spinning.patch,
  mman-map-sync.patch, mman-linux-map-shared-validate.patch,
  nptl-setxid-error.patch, pthread-mutex-trylock-barrier.patch,
  getaddrinfo-parse-ipv4-address.patch, japanese-era-name-may-2019.patch,
  force-elision-race.patch, regex-read-overrun.patch,
  regex-parse-reg-exp.patch,
  0001-S390-Add-configure-check-to-detect-z10-as-mininum-ar.patch,
  0002-S390-Use-hwcap-instead-of-dl_hwcap-in-ifunc-resolver.patch,
  0003-S390-Unify-31-64bit-memcpy.patch,
  0004-S390-Refactor-memcpy-mempcpy-ifunc-handling.patch,
  0005-S390-Remove-s390-specific-implementation-of-bcopy.patch,
  0006-S390-Use-memcpy-for-forward-cases-in-memmove.patch,
  0007-S390-Add-configure-check-to-detect-z13-as-mininum-ar.patch,
  0008-S390-Add-z13-memmove-ifunc-variant.patch,
  0009-S390-Add-z13-strstr-ifunc-variant.patch,
  0010-S390-Add-z13-memmem-ifunc-variant.patch,
  0011-S390-Cleanup-ifunc-resolve.h.patch,
  0012-S390-Mark-vx-and-vxe-as-important-hwcap.patch,
  0013-S390-Add-new-hwcap-values-for-new-cpu-architecture-a.patch,
  0014-S390-Add-configure-check-to-detect-support-for-arch1.patch,
  0015-S390-Add-arch13-memmove-ifunc-variant.patch,
  0016-S390-Add-arch13-strstr-ifunc-variant.patch,
  0017-S390-Add-arch13-memmem-ifunc-variant.patch,
  prefer-map-32bit-exec.patch, s390-strstr-page-boundary.patch,
  ppc-tle-htm-nosc.patch,
  posix-Add-internal-symbols-for-posix_spawn-interface.patch,
  glibc-2.29-posix-Use-posix_spawn-on-popen.patch,
  backtrace-powerpc.patch, pthread-rwlock-pwn.patch,
  manual-memory-protection.patch, ldbl-96-rem-pio2l.patch,
  dl-sort-maps.patch, dlopen-filter-object.patch,
  glob-use-after-free.patch, nptl-setxid-race.patch, nscd-senfile.patch,
  ldd-system-interp.patch, abort-no-flush.patch,
  fnmatch-collating-elements.patch, nss-files-long-lines-2.patch,
  iconv-reset-input-buffer.patch, nscd-prune.patch, syslog-locking.patch:
  Removed.
- long-double-alias.patch, glibc-nsswitch-usr.diff, euc-kr-overrun.patch,
  riscv-syscall-clobber.patch, nscd-gc-cycle.patch: Added.</changelog>
  <changelog author="schwab@suse.de" date="1604923200">- power10-support.patch: Add support for POWER10 (jsc#SLE-13520)
- iconv-option-parsing.patch: Rewrite iconv option parsing
  (CVE-2016-10228, bsc#1027496, BZ #19519)</changelog>
  <changelog author="schwab@suse.de" date="1608120000">- aarch64-getauxval.patch: aarch64: Accept PLT calls to __getauxval within
  libc.so (bsc#1167939)
- iconv-redundant-shift.patch: iconv: Accept redundant shift sequences in
  IBM1364 (CVE-2020-27618, bsc#1178386, BZ #26224)
- iconv-ucs4-loop-bounds.patch: iconv: Fix incorrect UCS4 inner loop
  bounds (CVE-2020-29562, bsc#1179694, BZ #26923)
- printf-long-double-non-normal.patch: x86: Harden printf against
  non-normal long double values (CVE-2020-29573, bsc#1179721, BZ #26649)
- get-nprocs-cpu-online-parsing.patch: Fix parsing of
  /sys/devices/system/cpu/online (bsc#1180038, BZ #25859)</changelog>
  <changelog author="schwab@suse.de" date="1609848000">- sysvipc-sem-stat-any.patch: sysvipc: Fix SEM_STAT_ANY kernel argument
  pass (bsc#1180557, BZ #26637)</changelog>
  <changelog author="schwab@suse.de" date="1611835200">- gconv-assertion-iso-2022-jp.patch: gconv: Fix assertion failure in
  ISO-2022-JP-3 module (CVE-2021-3326, bsc#1181505, BZ #27256)</changelog>
  <changelog author="schwab@suse.de" date="1614772800">- nscd-netgroupcache.patch: nscd: Fix double free in netgroupcache
  (CVE-2021-27645, bsc#1182733, BZ #27462)</changelog>
  <changelog author="rguenther@suse.com" date="1615377600">- Add glibc-2.31-HTM-vzeroupper.diff to avoid VZEROUPPER in the
  AVX2 accelerated string routines which cause HTM transaction
  aborts.  Instead use EVEX or SSE.  (bsc#1181403)</changelog>
  <changelog author="rguenther@suse.com" date="1615377601">- Update glibc-2.31-HTM-vzeroupper.diff with a AVX-SSE transition
  fix.</changelog>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
</package>
<package pkgid="e714dfc7d58618841b3a3dd6787780c7617b41e188b258a62c86218c22031c7e" name="nss-mymachines" arch="aarch64">
  <version epoch="0" ver="246.16" rel="150300.7.45.1"/>
  <changelog author="fbui@suse.com" date="1631275200">- Drop 1007-tmpfiles-follow-SUSE-policies.patch
  Since most of the tmpfiles config files shipped by upstream are
  ignored (see previous commit "Drop most of the tmpfiles that deal
  with generic paths"), this patch is no more relevant.</changelog>
  <changelog author="fbui@suse.com" date="1631707200">- Import commit 263f7076bc77475045193653a785bbdc0457b5c6
  239e0ce5e7 journalctl: never fail at flushing when the flushed flag is set (bsc#1188588)
  0db7e590e1 manager: reexecute on SIGRTMIN+25, user instances only
  ef8afc4545 core: Make sure cgroup_oom_queue is flushed on manager exit
  f794e01080 cgroup: do 'catchup' for unit cgroup inotify watch files
  54369b7660 manager: Fix HW watchdog when systemd starts before driver loaded (bsc#1189446)
  1d0524bd54 pid1: various minor watchdog modernizations</changelog>
  <changelog author="fbui@suse.com" date="1632398400">- Enable support for Portable Services (jsc#SLE-21694)
  Will be released in Leap only.</changelog>
  <changelog author="fbui@suse.com" date="1635336000">- Import commit 5d20af26eee6507bfa9fdb6e5dd4bfc187e3399e
  37e021ee84 mount-util: fix fd_is_mount_point() when both the parent and directory are network fs (bsc#1190984)
  2aee16afd0 mountpoint-util: rebreak some comments
  962e487cb4 virt: Support detection for ARM64 Hyper-V guests (bsc#1186071)
  8545a66afd Use BIOS characteristics to distinguish EC2 bare-metal from VMs
  03311b59c3 machine-id-setup: generate machine-id from DMI product ID on Amazon EC2
  0fc3118a67 id128-util: use common implementation of helper to get/validate product ID
  83bfa06ebc virt: detect Amazon EC2 Nitro instance (bsc#1190440)
  e8b8df3ed9 core: move several source files to src/shared</changelog>
  <changelog author="fbui@suse.com" date="1635422400">- Import commit f2f061f1da064bfd47e2201967a854bb9281ca5b
  98e87fc3fd busctl: use usec granularity for the timestamp printed by the busctl monitor command (jsc#SLE-17798)</changelog>
  <changelog author="mwilck@suse.com" date="1636459200">- Fix IO scheduler udev rules
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="fbui@suse.com" date="1639396800">- Import commit 34eba0c28cb02d15fdbf55ce28bdfa56142ae4d1
  0a8cb60af6 Bump the max number of inodes for /dev to a million (bsc#1192858)
  848c9207cb Bump the max number of inodes for /dev to 128k (bsc#1192858)
  ea44eb34f2 sleep: don't skip resume device with low priority/available space (bsc#1192423)
  9325a68316 test: use kbd-mode-map we ship in one more test case
  8ff379e11d test-keymap-util: always use kbd-model-map we ship</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">* 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)</changelog>
  <changelog author="fbui@suse.com" date="1641297600">- Suppress PAM warning when the credentials for user@.service service are
  established (bsc#1190515)
  systemd-user PAM service needs to define a default implementation of
  pam_setcred() otherwise the fallback (defined by /etc/pam.d/other) is used,
  which consists of pam_warn.so + pam_deny.so, and will throw a warning each
  time a user logs in.
  The new default simply consists in calling pam_deny.so alone.</changelog>
  <changelog author="fbui@suse.com" date="1641470400">- Import commit 3850086c6580291188fe574ad37c8026012894fb
  c0505cbb8d tmpfiles: 'st' may have been used uninitialized
  d3f7c9e806 macro: add new helper RET_NERRNO()
  4a95baa5de rm-rf: optionally fsync() after removing directory tree
  dd8137a589 rm-rf: refactor rm_rf_children(), split out body of directory iteration loop
  3f8765ed2c rm-rf: fstatat() might fail if containing dir has limited access mode, patch that too
  87d39407b7 btrfs-util: add helper that abstracts "might be btrfs subvol?" check
  71ed335c7a rm-rf: add new flag REMOVE_CHMOD
  611376f830 rules: don't ignore Xen virtual interfaces anymore (bsc#1178561)
  All these commits except the last one (611376f830) are preparation for
  CVE-2021-3997.
- Drop 0001-rules-don-t-ignore-Xen-interfaces-anymore.patch
  It's been merged in the git repo (commit 611376f830).</changelog>
  <changelog author="fbui@suse.com" date="1641470401">- Added patches to fix CVE-2021-3997 (bsc#1194178)
  5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  These patches will be moved to the git repo once the bug will become
  public.</changelog>
  <changelog author="fbui@suse.com" date="1641816000">- Add 1009-Drop-or-soften-some-of-the-deprecation-warnings.patch (bsc#1193086)</changelog>
  <changelog author="fbui@suse.com" date="1643198400">- resolved: disable DNSSEC until the following issue is solved:
  https://github.com/systemd/systemd/issues/10579
- resolved: disable fallback DNS servers and fail when no DNS server info could
  be obtained from the links. It's better to let the sysadmin know that
  something is likely misconfigured rather than silently handing over the DNS
  queries to Google or Cloudflare.
- resolved: DNSSEC support (build) requires openssl therefore document this
  build dependency in systemd-network sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1643371200">- Import commit 6a96632f26f20a68578f9d620a593ceab2a0e3b6
  c4aa40982c shared/rm-rf: loop over nested directories instead of instead of recursing (CVE-2021-3997 bsc#1194178)
  ae13ea6511 shared/rm_rf: refactor rm_rf() to shorten code a bit
  3266d7f5c8 shared/rm_rf: refactor rm_rf_children_inner() to shorten code a bit
- Drop 5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  Drop 5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  Drop 5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  They have been merged into 'SUSE/v246' branch.</changelog>
  <changelog author="fbui@suse.com" date="1643889600">- Import commit 773652879446a81689c39aea23a486627992409b
  a76263ced9 meson: allow extra net naming schemes to be defined during configuration
  301bf4f1bf meson: drop the list of valid net naming schemes
  b89924793d netif-naming: inline one iterator variable
  da4a4df29c udev: fix potential memleak
  d60486bf1b udev: allow onboard index up to 65535
  ac2baecc84 udev: use snprintf_ok()
  8aad315c7c udev: fix potential infinite loop
  471ea73eb0 udev: make dev_pci_slot() return earlier when PCI bridge is found
  69b7c9a6bd udev: use uint32_t for hotplug_slot
  cdd0e89c0e udev: split out logic of parsing s390 PCI slots
  84e1a91baa udev: it is not necessary that the path is readable
  03548e8d0e udev: add missing initialization to fix freeing invalid address
  772f964bf6 udev: fix slot based network names on s390
  c5071cf699 tree-wide: fix typo
  06640d06df net_id: fix newly added naming scheme name
  58f9592f1f udev/net_id: don't generate slot based names if multiple devices might claim the same slot (bsc#1192637)
  df9e240c92 udev/net_id: parse _SUN ACPI index as a signed integer
  cfcaddfa74 localectl: don't omit keymaps files that are symlinks (bsc#1191826)
- Add in quarantine 6000-udev-net_id-add-debug-logging-for-construction-of-de.patch
  Add in quarantine 6001-udev-net_id-show-the-correct-identifier-in-the-debug.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1647518400">- update s390 udev rules conversion script to include the case when
  the legacy rule was also 41-* (bsc#1195247)
  * change scripts-udev-convert-rules.sh</changelog>
  <changelog author="fbui@suse.com" date="1647518401">- Import commit 117e7b96f8e8c63a9eec3459147f5352015a6d08
  3a395b156d Don't open /var journals in volatile mode when runtime_journal==NULL
  1cd65c15e4 udev: 60-persistent-storage-tape.rules: handle duplicate device ID (bsc#1195529)
  3ee9953dd4 man: tweak description of auto/noauto (bsc#1191502)
  6cfeacbf86 shared/install: ignore failures for auxiliary files
  37083278ed install: make UnitFileChangeType enum anonymous
  0a02185526 shared/install: reduce scope of iterator variables
  86c55bde7f systemd-coredump: allow setting external core size to infinity (bsc#1195899 jsc#SLE-23867)</changelog>
  <changelog author="fbui@suse.com" date="1647518402">- Fix the default target when it's been incorrectly set to one of the runlevel
  targets (bsc#1196567)
  The script 'upgrade-from-pre-210.sh' used to initialize the default target
  during migration from sysvinit to systemd. However it created symlinks to
  runlevel targets, which are deprecated. If such symlinks are found the script
  now renames them to point to 'true' systemd target units.
- When migrating from sysvinit to systemd (it probably won't happen anymore),
  let's use the default systemd target, which is the graphical.target one. In
  most cases it will do the right thing anyway.</changelog>
  <changelog author="fbui@suse.com" date="1648036800">- spec: cope with %{_modprobedir} being /lib/modprobe.d on SLE</changelog>
  <changelog author="fbui@suse.com" date="1650369600">- Import commit 12b0904b9117aeaef138784e5b118b82cd87d7cb
  b579fe1e09 tmpfiles: constify item_compatible() parameters
  01f4af3573 test: add test checking tmpfiles conf file precedence
  e8f4d24e97 test tmpfiles: add a test for 'w+'
  9c559f3854 tmpfiles.d: only 'w+' can have multiple lines for the same path (bsc#1198090)
  7fab6b6a6e journald: make use of CLAMP() in cache_space_refresh()
  1c8b02567c journald: make sure journal_file_open() doesn't leave a corrupted file around after failing (bsc#1198114)
  0007446abc journal-file: port journal_file_open() to openat_report_new()
  a07ad29813 fs-util: make sure openat_report_new() initializes return param also on shortcut
  6bb087a1fc fs-util: fix typos in comments
  42532a8bfb fs-util: add openat_report_new() wrapper around openat()</changelog>
</package>
<package pkgid="11c0a17c44df95a03a07654a1eaf69f95ee25c2087124485659ce5011f358603" name="nss-mymachines" arch="ppc64le">
  <version epoch="0" ver="246.16" rel="150300.7.45.1"/>
  <changelog author="fbui@suse.com" date="1631275200">- Drop 1007-tmpfiles-follow-SUSE-policies.patch
  Since most of the tmpfiles config files shipped by upstream are
  ignored (see previous commit "Drop most of the tmpfiles that deal
  with generic paths"), this patch is no more relevant.</changelog>
  <changelog author="fbui@suse.com" date="1631707200">- Import commit 263f7076bc77475045193653a785bbdc0457b5c6
  239e0ce5e7 journalctl: never fail at flushing when the flushed flag is set (bsc#1188588)
  0db7e590e1 manager: reexecute on SIGRTMIN+25, user instances only
  ef8afc4545 core: Make sure cgroup_oom_queue is flushed on manager exit
  f794e01080 cgroup: do 'catchup' for unit cgroup inotify watch files
  54369b7660 manager: Fix HW watchdog when systemd starts before driver loaded (bsc#1189446)
  1d0524bd54 pid1: various minor watchdog modernizations</changelog>
  <changelog author="fbui@suse.com" date="1632398400">- Enable support for Portable Services (jsc#SLE-21694)
  Will be released in Leap only.</changelog>
  <changelog author="fbui@suse.com" date="1635336000">- Import commit 5d20af26eee6507bfa9fdb6e5dd4bfc187e3399e
  37e021ee84 mount-util: fix fd_is_mount_point() when both the parent and directory are network fs (bsc#1190984)
  2aee16afd0 mountpoint-util: rebreak some comments
  962e487cb4 virt: Support detection for ARM64 Hyper-V guests (bsc#1186071)
  8545a66afd Use BIOS characteristics to distinguish EC2 bare-metal from VMs
  03311b59c3 machine-id-setup: generate machine-id from DMI product ID on Amazon EC2
  0fc3118a67 id128-util: use common implementation of helper to get/validate product ID
  83bfa06ebc virt: detect Amazon EC2 Nitro instance (bsc#1190440)
  e8b8df3ed9 core: move several source files to src/shared</changelog>
  <changelog author="fbui@suse.com" date="1635422400">- Import commit f2f061f1da064bfd47e2201967a854bb9281ca5b
  98e87fc3fd busctl: use usec granularity for the timestamp printed by the busctl monitor command (jsc#SLE-17798)</changelog>
  <changelog author="mwilck@suse.com" date="1636459200">- Fix IO scheduler udev rules
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="fbui@suse.com" date="1639396800">- Import commit 34eba0c28cb02d15fdbf55ce28bdfa56142ae4d1
  0a8cb60af6 Bump the max number of inodes for /dev to a million (bsc#1192858)
  848c9207cb Bump the max number of inodes for /dev to 128k (bsc#1192858)
  ea44eb34f2 sleep: don't skip resume device with low priority/available space (bsc#1192423)
  9325a68316 test: use kbd-mode-map we ship in one more test case
  8ff379e11d test-keymap-util: always use kbd-model-map we ship</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">* 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)</changelog>
  <changelog author="fbui@suse.com" date="1641297600">- Suppress PAM warning when the credentials for user@.service service are
  established (bsc#1190515)
  systemd-user PAM service needs to define a default implementation of
  pam_setcred() otherwise the fallback (defined by /etc/pam.d/other) is used,
  which consists of pam_warn.so + pam_deny.so, and will throw a warning each
  time a user logs in.
  The new default simply consists in calling pam_deny.so alone.</changelog>
  <changelog author="fbui@suse.com" date="1641470400">- Import commit 3850086c6580291188fe574ad37c8026012894fb
  c0505cbb8d tmpfiles: 'st' may have been used uninitialized
  d3f7c9e806 macro: add new helper RET_NERRNO()
  4a95baa5de rm-rf: optionally fsync() after removing directory tree
  dd8137a589 rm-rf: refactor rm_rf_children(), split out body of directory iteration loop
  3f8765ed2c rm-rf: fstatat() might fail if containing dir has limited access mode, patch that too
  87d39407b7 btrfs-util: add helper that abstracts "might be btrfs subvol?" check
  71ed335c7a rm-rf: add new flag REMOVE_CHMOD
  611376f830 rules: don't ignore Xen virtual interfaces anymore (bsc#1178561)
  All these commits except the last one (611376f830) are preparation for
  CVE-2021-3997.
- Drop 0001-rules-don-t-ignore-Xen-interfaces-anymore.patch
  It's been merged in the git repo (commit 611376f830).</changelog>
  <changelog author="fbui@suse.com" date="1641470401">- Added patches to fix CVE-2021-3997 (bsc#1194178)
  5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  These patches will be moved to the git repo once the bug will become
  public.</changelog>
  <changelog author="fbui@suse.com" date="1641816000">- Add 1009-Drop-or-soften-some-of-the-deprecation-warnings.patch (bsc#1193086)</changelog>
  <changelog author="fbui@suse.com" date="1643198400">- resolved: disable DNSSEC until the following issue is solved:
  https://github.com/systemd/systemd/issues/10579
- resolved: disable fallback DNS servers and fail when no DNS server info could
  be obtained from the links. It's better to let the sysadmin know that
  something is likely misconfigured rather than silently handing over the DNS
  queries to Google or Cloudflare.
- resolved: DNSSEC support (build) requires openssl therefore document this
  build dependency in systemd-network sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1643371200">- Import commit 6a96632f26f20a68578f9d620a593ceab2a0e3b6
  c4aa40982c shared/rm-rf: loop over nested directories instead of instead of recursing (CVE-2021-3997 bsc#1194178)
  ae13ea6511 shared/rm_rf: refactor rm_rf() to shorten code a bit
  3266d7f5c8 shared/rm_rf: refactor rm_rf_children_inner() to shorten code a bit
- Drop 5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  Drop 5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  Drop 5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  They have been merged into 'SUSE/v246' branch.</changelog>
  <changelog author="fbui@suse.com" date="1643889600">- Import commit 773652879446a81689c39aea23a486627992409b
  a76263ced9 meson: allow extra net naming schemes to be defined during configuration
  301bf4f1bf meson: drop the list of valid net naming schemes
  b89924793d netif-naming: inline one iterator variable
  da4a4df29c udev: fix potential memleak
  d60486bf1b udev: allow onboard index up to 65535
  ac2baecc84 udev: use snprintf_ok()
  8aad315c7c udev: fix potential infinite loop
  471ea73eb0 udev: make dev_pci_slot() return earlier when PCI bridge is found
  69b7c9a6bd udev: use uint32_t for hotplug_slot
  cdd0e89c0e udev: split out logic of parsing s390 PCI slots
  84e1a91baa udev: it is not necessary that the path is readable
  03548e8d0e udev: add missing initialization to fix freeing invalid address
  772f964bf6 udev: fix slot based network names on s390
  c5071cf699 tree-wide: fix typo
  06640d06df net_id: fix newly added naming scheme name
  58f9592f1f udev/net_id: don't generate slot based names if multiple devices might claim the same slot (bsc#1192637)
  df9e240c92 udev/net_id: parse _SUN ACPI index as a signed integer
  cfcaddfa74 localectl: don't omit keymaps files that are symlinks (bsc#1191826)
- Add in quarantine 6000-udev-net_id-add-debug-logging-for-construction-of-de.patch
  Add in quarantine 6001-udev-net_id-show-the-correct-identifier-in-the-debug.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1647518400">- update s390 udev rules conversion script to include the case when
  the legacy rule was also 41-* (bsc#1195247)
  * change scripts-udev-convert-rules.sh</changelog>
  <changelog author="fbui@suse.com" date="1647518401">- Import commit 117e7b96f8e8c63a9eec3459147f5352015a6d08
  3a395b156d Don't open /var journals in volatile mode when runtime_journal==NULL
  1cd65c15e4 udev: 60-persistent-storage-tape.rules: handle duplicate device ID (bsc#1195529)
  3ee9953dd4 man: tweak description of auto/noauto (bsc#1191502)
  6cfeacbf86 shared/install: ignore failures for auxiliary files
  37083278ed install: make UnitFileChangeType enum anonymous
  0a02185526 shared/install: reduce scope of iterator variables
  86c55bde7f systemd-coredump: allow setting external core size to infinity (bsc#1195899 jsc#SLE-23867)</changelog>
  <changelog author="fbui@suse.com" date="1647518402">- Fix the default target when it's been incorrectly set to one of the runlevel
  targets (bsc#1196567)
  The script 'upgrade-from-pre-210.sh' used to initialize the default target
  during migration from sysvinit to systemd. However it created symlinks to
  runlevel targets, which are deprecated. If such symlinks are found the script
  now renames them to point to 'true' systemd target units.
- When migrating from sysvinit to systemd (it probably won't happen anymore),
  let's use the default systemd target, which is the graphical.target one. In
  most cases it will do the right thing anyway.</changelog>
  <changelog author="fbui@suse.com" date="1648036800">- spec: cope with %{_modprobedir} being /lib/modprobe.d on SLE</changelog>
  <changelog author="fbui@suse.com" date="1650369600">- Import commit 12b0904b9117aeaef138784e5b118b82cd87d7cb
  b579fe1e09 tmpfiles: constify item_compatible() parameters
  01f4af3573 test: add test checking tmpfiles conf file precedence
  e8f4d24e97 test tmpfiles: add a test for 'w+'
  9c559f3854 tmpfiles.d: only 'w+' can have multiple lines for the same path (bsc#1198090)
  7fab6b6a6e journald: make use of CLAMP() in cache_space_refresh()
  1c8b02567c journald: make sure journal_file_open() doesn't leave a corrupted file around after failing (bsc#1198114)
  0007446abc journal-file: port journal_file_open() to openat_report_new()
  a07ad29813 fs-util: make sure openat_report_new() initializes return param also on shortcut
  6bb087a1fc fs-util: fix typos in comments
  42532a8bfb fs-util: add openat_report_new() wrapper around openat()</changelog>
</package>
<package pkgid="7099131fa26251d30315e9c4d9f1675cd7baf8d8ffa1e9c43fa44cdfc8ff0033" name="nss-mymachines" arch="s390x">
  <version epoch="0" ver="246.16" rel="150300.7.45.1"/>
  <changelog author="fbui@suse.com" date="1631275200">- Drop 1007-tmpfiles-follow-SUSE-policies.patch
  Since most of the tmpfiles config files shipped by upstream are
  ignored (see previous commit "Drop most of the tmpfiles that deal
  with generic paths"), this patch is no more relevant.</changelog>
  <changelog author="fbui@suse.com" date="1631707200">- Import commit 263f7076bc77475045193653a785bbdc0457b5c6
  239e0ce5e7 journalctl: never fail at flushing when the flushed flag is set (bsc#1188588)
  0db7e590e1 manager: reexecute on SIGRTMIN+25, user instances only
  ef8afc4545 core: Make sure cgroup_oom_queue is flushed on manager exit
  f794e01080 cgroup: do 'catchup' for unit cgroup inotify watch files
  54369b7660 manager: Fix HW watchdog when systemd starts before driver loaded (bsc#1189446)
  1d0524bd54 pid1: various minor watchdog modernizations</changelog>
  <changelog author="fbui@suse.com" date="1632398400">- Enable support for Portable Services (jsc#SLE-21694)
  Will be released in Leap only.</changelog>
  <changelog author="fbui@suse.com" date="1635336000">- Import commit 5d20af26eee6507bfa9fdb6e5dd4bfc187e3399e
  37e021ee84 mount-util: fix fd_is_mount_point() when both the parent and directory are network fs (bsc#1190984)
  2aee16afd0 mountpoint-util: rebreak some comments
  962e487cb4 virt: Support detection for ARM64 Hyper-V guests (bsc#1186071)
  8545a66afd Use BIOS characteristics to distinguish EC2 bare-metal from VMs
  03311b59c3 machine-id-setup: generate machine-id from DMI product ID on Amazon EC2
  0fc3118a67 id128-util: use common implementation of helper to get/validate product ID
  83bfa06ebc virt: detect Amazon EC2 Nitro instance (bsc#1190440)
  e8b8df3ed9 core: move several source files to src/shared</changelog>
  <changelog author="fbui@suse.com" date="1635422400">- Import commit f2f061f1da064bfd47e2201967a854bb9281ca5b
  98e87fc3fd busctl: use usec granularity for the timestamp printed by the busctl monitor command (jsc#SLE-17798)</changelog>
  <changelog author="mwilck@suse.com" date="1636459200">- Fix IO scheduler udev rules
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="fbui@suse.com" date="1639396800">- Import commit 34eba0c28cb02d15fdbf55ce28bdfa56142ae4d1
  0a8cb60af6 Bump the max number of inodes for /dev to a million (bsc#1192858)
  848c9207cb Bump the max number of inodes for /dev to 128k (bsc#1192858)
  ea44eb34f2 sleep: don't skip resume device with low priority/available space (bsc#1192423)
  9325a68316 test: use kbd-mode-map we ship in one more test case
  8ff379e11d test-keymap-util: always use kbd-model-map we ship</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">* 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)</changelog>
  <changelog author="fbui@suse.com" date="1641297600">- Suppress PAM warning when the credentials for user@.service service are
  established (bsc#1190515)
  systemd-user PAM service needs to define a default implementation of
  pam_setcred() otherwise the fallback (defined by /etc/pam.d/other) is used,
  which consists of pam_warn.so + pam_deny.so, and will throw a warning each
  time a user logs in.
  The new default simply consists in calling pam_deny.so alone.</changelog>
  <changelog author="fbui@suse.com" date="1641470400">- Import commit 3850086c6580291188fe574ad37c8026012894fb
  c0505cbb8d tmpfiles: 'st' may have been used uninitialized
  d3f7c9e806 macro: add new helper RET_NERRNO()
  4a95baa5de rm-rf: optionally fsync() after removing directory tree
  dd8137a589 rm-rf: refactor rm_rf_children(), split out body of directory iteration loop
  3f8765ed2c rm-rf: fstatat() might fail if containing dir has limited access mode, patch that too
  87d39407b7 btrfs-util: add helper that abstracts "might be btrfs subvol?" check
  71ed335c7a rm-rf: add new flag REMOVE_CHMOD
  611376f830 rules: don't ignore Xen virtual interfaces anymore (bsc#1178561)
  All these commits except the last one (611376f830) are preparation for
  CVE-2021-3997.
- Drop 0001-rules-don-t-ignore-Xen-interfaces-anymore.patch
  It's been merged in the git repo (commit 611376f830).</changelog>
  <changelog author="fbui@suse.com" date="1641470401">- Added patches to fix CVE-2021-3997 (bsc#1194178)
  5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  These patches will be moved to the git repo once the bug will become
  public.</changelog>
  <changelog author="fbui@suse.com" date="1641816000">- Add 1009-Drop-or-soften-some-of-the-deprecation-warnings.patch (bsc#1193086)</changelog>
  <changelog author="fbui@suse.com" date="1643198400">- resolved: disable DNSSEC until the following issue is solved:
  https://github.com/systemd/systemd/issues/10579
- resolved: disable fallback DNS servers and fail when no DNS server info could
  be obtained from the links. It's better to let the sysadmin know that
  something is likely misconfigured rather than silently handing over the DNS
  queries to Google or Cloudflare.
- resolved: DNSSEC support (build) requires openssl therefore document this
  build dependency in systemd-network sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1643371200">- Import commit 6a96632f26f20a68578f9d620a593ceab2a0e3b6
  c4aa40982c shared/rm-rf: loop over nested directories instead of instead of recursing (CVE-2021-3997 bsc#1194178)
  ae13ea6511 shared/rm_rf: refactor rm_rf() to shorten code a bit
  3266d7f5c8 shared/rm_rf: refactor rm_rf_children_inner() to shorten code a bit
- Drop 5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  Drop 5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  Drop 5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  They have been merged into 'SUSE/v246' branch.</changelog>
  <changelog author="fbui@suse.com" date="1643889600">- Import commit 773652879446a81689c39aea23a486627992409b
  a76263ced9 meson: allow extra net naming schemes to be defined during configuration
  301bf4f1bf meson: drop the list of valid net naming schemes
  b89924793d netif-naming: inline one iterator variable
  da4a4df29c udev: fix potential memleak
  d60486bf1b udev: allow onboard index up to 65535
  ac2baecc84 udev: use snprintf_ok()
  8aad315c7c udev: fix potential infinite loop
  471ea73eb0 udev: make dev_pci_slot() return earlier when PCI bridge is found
  69b7c9a6bd udev: use uint32_t for hotplug_slot
  cdd0e89c0e udev: split out logic of parsing s390 PCI slots
  84e1a91baa udev: it is not necessary that the path is readable
  03548e8d0e udev: add missing initialization to fix freeing invalid address
  772f964bf6 udev: fix slot based network names on s390
  c5071cf699 tree-wide: fix typo
  06640d06df net_id: fix newly added naming scheme name
  58f9592f1f udev/net_id: don't generate slot based names if multiple devices might claim the same slot (bsc#1192637)
  df9e240c92 udev/net_id: parse _SUN ACPI index as a signed integer
  cfcaddfa74 localectl: don't omit keymaps files that are symlinks (bsc#1191826)
- Add in quarantine 6000-udev-net_id-add-debug-logging-for-construction-of-de.patch
  Add in quarantine 6001-udev-net_id-show-the-correct-identifier-in-the-debug.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1647518400">- update s390 udev rules conversion script to include the case when
  the legacy rule was also 41-* (bsc#1195247)
  * change scripts-udev-convert-rules.sh</changelog>
  <changelog author="fbui@suse.com" date="1647518401">- Import commit 117e7b96f8e8c63a9eec3459147f5352015a6d08
  3a395b156d Don't open /var journals in volatile mode when runtime_journal==NULL
  1cd65c15e4 udev: 60-persistent-storage-tape.rules: handle duplicate device ID (bsc#1195529)
  3ee9953dd4 man: tweak description of auto/noauto (bsc#1191502)
  6cfeacbf86 shared/install: ignore failures for auxiliary files
  37083278ed install: make UnitFileChangeType enum anonymous
  0a02185526 shared/install: reduce scope of iterator variables
  86c55bde7f systemd-coredump: allow setting external core size to infinity (bsc#1195899 jsc#SLE-23867)</changelog>
  <changelog author="fbui@suse.com" date="1647518402">- Fix the default target when it's been incorrectly set to one of the runlevel
  targets (bsc#1196567)
  The script 'upgrade-from-pre-210.sh' used to initialize the default target
  during migration from sysvinit to systemd. However it created symlinks to
  runlevel targets, which are deprecated. If such symlinks are found the script
  now renames them to point to 'true' systemd target units.
- When migrating from sysvinit to systemd (it probably won't happen anymore),
  let's use the default systemd target, which is the graphical.target one. In
  most cases it will do the right thing anyway.</changelog>
  <changelog author="fbui@suse.com" date="1648036800">- spec: cope with %{_modprobedir} being /lib/modprobe.d on SLE</changelog>
  <changelog author="fbui@suse.com" date="1650369600">- Import commit 12b0904b9117aeaef138784e5b118b82cd87d7cb
  b579fe1e09 tmpfiles: constify item_compatible() parameters
  01f4af3573 test: add test checking tmpfiles conf file precedence
  e8f4d24e97 test tmpfiles: add a test for 'w+'
  9c559f3854 tmpfiles.d: only 'w+' can have multiple lines for the same path (bsc#1198090)
  7fab6b6a6e journald: make use of CLAMP() in cache_space_refresh()
  1c8b02567c journald: make sure journal_file_open() doesn't leave a corrupted file around after failing (bsc#1198114)
  0007446abc journal-file: port journal_file_open() to openat_report_new()
  a07ad29813 fs-util: make sure openat_report_new() initializes return param also on shortcut
  6bb087a1fc fs-util: fix typos in comments
  42532a8bfb fs-util: add openat_report_new() wrapper around openat()</changelog>
</package>
<package pkgid="d7ee1d2f3cc89469eb27377b2cec57745612dfc83fc875ee72d5274835c0cb41" name="nss-mymachines" arch="x86_64">
  <version epoch="0" ver="246.16" rel="150300.7.45.1"/>
  <changelog author="fbui@suse.com" date="1631275200">- Drop 1007-tmpfiles-follow-SUSE-policies.patch
  Since most of the tmpfiles config files shipped by upstream are
  ignored (see previous commit "Drop most of the tmpfiles that deal
  with generic paths"), this patch is no more relevant.</changelog>
  <changelog author="fbui@suse.com" date="1631707200">- Import commit 263f7076bc77475045193653a785bbdc0457b5c6
  239e0ce5e7 journalctl: never fail at flushing when the flushed flag is set (bsc#1188588)
  0db7e590e1 manager: reexecute on SIGRTMIN+25, user instances only
  ef8afc4545 core: Make sure cgroup_oom_queue is flushed on manager exit
  f794e01080 cgroup: do 'catchup' for unit cgroup inotify watch files
  54369b7660 manager: Fix HW watchdog when systemd starts before driver loaded (bsc#1189446)
  1d0524bd54 pid1: various minor watchdog modernizations</changelog>
  <changelog author="fbui@suse.com" date="1632398400">- Enable support for Portable Services (jsc#SLE-21694)
  Will be released in Leap only.</changelog>
  <changelog author="fbui@suse.com" date="1635336000">- Import commit 5d20af26eee6507bfa9fdb6e5dd4bfc187e3399e
  37e021ee84 mount-util: fix fd_is_mount_point() when both the parent and directory are network fs (bsc#1190984)
  2aee16afd0 mountpoint-util: rebreak some comments
  962e487cb4 virt: Support detection for ARM64 Hyper-V guests (bsc#1186071)
  8545a66afd Use BIOS characteristics to distinguish EC2 bare-metal from VMs
  03311b59c3 machine-id-setup: generate machine-id from DMI product ID on Amazon EC2
  0fc3118a67 id128-util: use common implementation of helper to get/validate product ID
  83bfa06ebc virt: detect Amazon EC2 Nitro instance (bsc#1190440)
  e8b8df3ed9 core: move several source files to src/shared</changelog>
  <changelog author="fbui@suse.com" date="1635422400">- Import commit f2f061f1da064bfd47e2201967a854bb9281ca5b
  98e87fc3fd busctl: use usec granularity for the timestamp printed by the busctl monitor command (jsc#SLE-17798)</changelog>
  <changelog author="mwilck@suse.com" date="1636459200">- Fix IO scheduler udev rules
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="fbui@suse.com" date="1639396800">- Import commit 34eba0c28cb02d15fdbf55ce28bdfa56142ae4d1
  0a8cb60af6 Bump the max number of inodes for /dev to a million (bsc#1192858)
  848c9207cb Bump the max number of inodes for /dev to 128k (bsc#1192858)
  ea44eb34f2 sleep: don't skip resume device with low priority/available space (bsc#1192423)
  9325a68316 test: use kbd-mode-map we ship in one more test case
  8ff379e11d test-keymap-util: always use kbd-model-map we ship</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">* 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)</changelog>
  <changelog author="fbui@suse.com" date="1641297600">- Suppress PAM warning when the credentials for user@.service service are
  established (bsc#1190515)
  systemd-user PAM service needs to define a default implementation of
  pam_setcred() otherwise the fallback (defined by /etc/pam.d/other) is used,
  which consists of pam_warn.so + pam_deny.so, and will throw a warning each
  time a user logs in.
  The new default simply consists in calling pam_deny.so alone.</changelog>
  <changelog author="fbui@suse.com" date="1641470400">- Import commit 3850086c6580291188fe574ad37c8026012894fb
  c0505cbb8d tmpfiles: 'st' may have been used uninitialized
  d3f7c9e806 macro: add new helper RET_NERRNO()
  4a95baa5de rm-rf: optionally fsync() after removing directory tree
  dd8137a589 rm-rf: refactor rm_rf_children(), split out body of directory iteration loop
  3f8765ed2c rm-rf: fstatat() might fail if containing dir has limited access mode, patch that too
  87d39407b7 btrfs-util: add helper that abstracts "might be btrfs subvol?" check
  71ed335c7a rm-rf: add new flag REMOVE_CHMOD
  611376f830 rules: don't ignore Xen virtual interfaces anymore (bsc#1178561)
  All these commits except the last one (611376f830) are preparation for
  CVE-2021-3997.
- Drop 0001-rules-don-t-ignore-Xen-interfaces-anymore.patch
  It's been merged in the git repo (commit 611376f830).</changelog>
  <changelog author="fbui@suse.com" date="1641470401">- Added patches to fix CVE-2021-3997 (bsc#1194178)
  5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  These patches will be moved to the git repo once the bug will become
  public.</changelog>
  <changelog author="fbui@suse.com" date="1641816000">- Add 1009-Drop-or-soften-some-of-the-deprecation-warnings.patch (bsc#1193086)</changelog>
  <changelog author="fbui@suse.com" date="1643198400">- resolved: disable DNSSEC until the following issue is solved:
  https://github.com/systemd/systemd/issues/10579
- resolved: disable fallback DNS servers and fail when no DNS server info could
  be obtained from the links. It's better to let the sysadmin know that
  something is likely misconfigured rather than silently handing over the DNS
  queries to Google or Cloudflare.
- resolved: DNSSEC support (build) requires openssl therefore document this
  build dependency in systemd-network sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1643371200">- Import commit 6a96632f26f20a68578f9d620a593ceab2a0e3b6
  c4aa40982c shared/rm-rf: loop over nested directories instead of instead of recursing (CVE-2021-3997 bsc#1194178)
  ae13ea6511 shared/rm_rf: refactor rm_rf() to shorten code a bit
  3266d7f5c8 shared/rm_rf: refactor rm_rf_children_inner() to shorten code a bit
- Drop 5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  Drop 5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  Drop 5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  They have been merged into 'SUSE/v246' branch.</changelog>
  <changelog author="fbui@suse.com" date="1643889600">- Import commit 773652879446a81689c39aea23a486627992409b
  a76263ced9 meson: allow extra net naming schemes to be defined during configuration
  301bf4f1bf meson: drop the list of valid net naming schemes
  b89924793d netif-naming: inline one iterator variable
  da4a4df29c udev: fix potential memleak
  d60486bf1b udev: allow onboard index up to 65535
  ac2baecc84 udev: use snprintf_ok()
  8aad315c7c udev: fix potential infinite loop
  471ea73eb0 udev: make dev_pci_slot() return earlier when PCI bridge is found
  69b7c9a6bd udev: use uint32_t for hotplug_slot
  cdd0e89c0e udev: split out logic of parsing s390 PCI slots
  84e1a91baa udev: it is not necessary that the path is readable
  03548e8d0e udev: add missing initialization to fix freeing invalid address
  772f964bf6 udev: fix slot based network names on s390
  c5071cf699 tree-wide: fix typo
  06640d06df net_id: fix newly added naming scheme name
  58f9592f1f udev/net_id: don't generate slot based names if multiple devices might claim the same slot (bsc#1192637)
  df9e240c92 udev/net_id: parse _SUN ACPI index as a signed integer
  cfcaddfa74 localectl: don't omit keymaps files that are symlinks (bsc#1191826)
- Add in quarantine 6000-udev-net_id-add-debug-logging-for-construction-of-de.patch
  Add in quarantine 6001-udev-net_id-show-the-correct-identifier-in-the-debug.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1647518400">- update s390 udev rules conversion script to include the case when
  the legacy rule was also 41-* (bsc#1195247)
  * change scripts-udev-convert-rules.sh</changelog>
  <changelog author="fbui@suse.com" date="1647518401">- Import commit 117e7b96f8e8c63a9eec3459147f5352015a6d08
  3a395b156d Don't open /var journals in volatile mode when runtime_journal==NULL
  1cd65c15e4 udev: 60-persistent-storage-tape.rules: handle duplicate device ID (bsc#1195529)
  3ee9953dd4 man: tweak description of auto/noauto (bsc#1191502)
  6cfeacbf86 shared/install: ignore failures for auxiliary files
  37083278ed install: make UnitFileChangeType enum anonymous
  0a02185526 shared/install: reduce scope of iterator variables
  86c55bde7f systemd-coredump: allow setting external core size to infinity (bsc#1195899 jsc#SLE-23867)</changelog>
  <changelog author="fbui@suse.com" date="1647518402">- Fix the default target when it's been incorrectly set to one of the runlevel
  targets (bsc#1196567)
  The script 'upgrade-from-pre-210.sh' used to initialize the default target
  during migration from sysvinit to systemd. However it created symlinks to
  runlevel targets, which are deprecated. If such symlinks are found the script
  now renames them to point to 'true' systemd target units.
- When migrating from sysvinit to systemd (it probably won't happen anymore),
  let's use the default systemd target, which is the graphical.target one. In
  most cases it will do the right thing anyway.</changelog>
  <changelog author="fbui@suse.com" date="1648036800">- spec: cope with %{_modprobedir} being /lib/modprobe.d on SLE</changelog>
  <changelog author="fbui@suse.com" date="1650369600">- Import commit 12b0904b9117aeaef138784e5b118b82cd87d7cb
  b579fe1e09 tmpfiles: constify item_compatible() parameters
  01f4af3573 test: add test checking tmpfiles conf file precedence
  e8f4d24e97 test tmpfiles: add a test for 'w+'
  9c559f3854 tmpfiles.d: only 'w+' can have multiple lines for the same path (bsc#1198090)
  7fab6b6a6e journald: make use of CLAMP() in cache_space_refresh()
  1c8b02567c journald: make sure journal_file_open() doesn't leave a corrupted file around after failing (bsc#1198114)
  0007446abc journal-file: port journal_file_open() to openat_report_new()
  a07ad29813 fs-util: make sure openat_report_new() initializes return param also on shortcut
  6bb087a1fc fs-util: fix typos in comments
  42532a8bfb fs-util: add openat_report_new() wrapper around openat()</changelog>
</package>
<package pkgid="6aa91e4a2f6f54a62f428f2b23c7fa1c3db89c67b1f949c34e04b6c365bfc59d" name="nss-mymachines-32bit" arch="x86_64">
  <version epoch="0" ver="246.16" rel="150300.7.45.1"/>
  <changelog author="fbui@suse.com" date="1631275200">- Drop 1007-tmpfiles-follow-SUSE-policies.patch
  Since most of the tmpfiles config files shipped by upstream are
  ignored (see previous commit "Drop most of the tmpfiles that deal
  with generic paths"), this patch is no more relevant.</changelog>
  <changelog author="fbui@suse.com" date="1631707200">- Import commit 263f7076bc77475045193653a785bbdc0457b5c6
  239e0ce5e7 journalctl: never fail at flushing when the flushed flag is set (bsc#1188588)
  0db7e590e1 manager: reexecute on SIGRTMIN+25, user instances only
  ef8afc4545 core: Make sure cgroup_oom_queue is flushed on manager exit
  f794e01080 cgroup: do 'catchup' for unit cgroup inotify watch files
  54369b7660 manager: Fix HW watchdog when systemd starts before driver loaded (bsc#1189446)
  1d0524bd54 pid1: various minor watchdog modernizations</changelog>
  <changelog author="fbui@suse.com" date="1632398400">- Enable support for Portable Services (jsc#SLE-21694)
  Will be released in Leap only.</changelog>
  <changelog author="fbui@suse.com" date="1635336000">- Import commit 5d20af26eee6507bfa9fdb6e5dd4bfc187e3399e
  37e021ee84 mount-util: fix fd_is_mount_point() when both the parent and directory are network fs (bsc#1190984)
  2aee16afd0 mountpoint-util: rebreak some comments
  962e487cb4 virt: Support detection for ARM64 Hyper-V guests (bsc#1186071)
  8545a66afd Use BIOS characteristics to distinguish EC2 bare-metal from VMs
  03311b59c3 machine-id-setup: generate machine-id from DMI product ID on Amazon EC2
  0fc3118a67 id128-util: use common implementation of helper to get/validate product ID
  83bfa06ebc virt: detect Amazon EC2 Nitro instance (bsc#1190440)
  e8b8df3ed9 core: move several source files to src/shared</changelog>
  <changelog author="fbui@suse.com" date="1635422400">- Import commit f2f061f1da064bfd47e2201967a854bb9281ca5b
  98e87fc3fd busctl: use usec granularity for the timestamp printed by the busctl monitor command (jsc#SLE-17798)</changelog>
  <changelog author="mwilck@suse.com" date="1636459200">- Fix IO scheduler udev rules
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="fbui@suse.com" date="1639396800">- Import commit 34eba0c28cb02d15fdbf55ce28bdfa56142ae4d1
  0a8cb60af6 Bump the max number of inodes for /dev to a million (bsc#1192858)
  848c9207cb Bump the max number of inodes for /dev to 128k (bsc#1192858)
  ea44eb34f2 sleep: don't skip resume device with low priority/available space (bsc#1192423)
  9325a68316 test: use kbd-mode-map we ship in one more test case
  8ff379e11d test-keymap-util: always use kbd-model-map we ship</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">* 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)</changelog>
  <changelog author="fbui@suse.com" date="1641297600">- Suppress PAM warning when the credentials for user@.service service are
  established (bsc#1190515)
  systemd-user PAM service needs to define a default implementation of
  pam_setcred() otherwise the fallback (defined by /etc/pam.d/other) is used,
  which consists of pam_warn.so + pam_deny.so, and will throw a warning each
  time a user logs in.
  The new default simply consists in calling pam_deny.so alone.</changelog>
  <changelog author="fbui@suse.com" date="1641470400">- Import commit 3850086c6580291188fe574ad37c8026012894fb
  c0505cbb8d tmpfiles: 'st' may have been used uninitialized
  d3f7c9e806 macro: add new helper RET_NERRNO()
  4a95baa5de rm-rf: optionally fsync() after removing directory tree
  dd8137a589 rm-rf: refactor rm_rf_children(), split out body of directory iteration loop
  3f8765ed2c rm-rf: fstatat() might fail if containing dir has limited access mode, patch that too
  87d39407b7 btrfs-util: add helper that abstracts "might be btrfs subvol?" check
  71ed335c7a rm-rf: add new flag REMOVE_CHMOD
  611376f830 rules: don't ignore Xen virtual interfaces anymore (bsc#1178561)
  All these commits except the last one (611376f830) are preparation for
  CVE-2021-3997.
- Drop 0001-rules-don-t-ignore-Xen-interfaces-anymore.patch
  It's been merged in the git repo (commit 611376f830).</changelog>
  <changelog author="fbui@suse.com" date="1641470401">- Added patches to fix CVE-2021-3997 (bsc#1194178)
  5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  These patches will be moved to the git repo once the bug will become
  public.</changelog>
  <changelog author="fbui@suse.com" date="1641816000">- Add 1009-Drop-or-soften-some-of-the-deprecation-warnings.patch (bsc#1193086)</changelog>
  <changelog author="fbui@suse.com" date="1643198400">- resolved: disable DNSSEC until the following issue is solved:
  https://github.com/systemd/systemd/issues/10579
- resolved: disable fallback DNS servers and fail when no DNS server info could
  be obtained from the links. It's better to let the sysadmin know that
  something is likely misconfigured rather than silently handing over the DNS
  queries to Google or Cloudflare.
- resolved: DNSSEC support (build) requires openssl therefore document this
  build dependency in systemd-network sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1643371200">- Import commit 6a96632f26f20a68578f9d620a593ceab2a0e3b6
  c4aa40982c shared/rm-rf: loop over nested directories instead of instead of recursing (CVE-2021-3997 bsc#1194178)
  ae13ea6511 shared/rm_rf: refactor rm_rf() to shorten code a bit
  3266d7f5c8 shared/rm_rf: refactor rm_rf_children_inner() to shorten code a bit
- Drop 5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  Drop 5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  Drop 5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  They have been merged into 'SUSE/v246' branch.</changelog>
  <changelog author="fbui@suse.com" date="1643889600">- Import commit 773652879446a81689c39aea23a486627992409b
  a76263ced9 meson: allow extra net naming schemes to be defined during configuration
  301bf4f1bf meson: drop the list of valid net naming schemes
  b89924793d netif-naming: inline one iterator variable
  da4a4df29c udev: fix potential memleak
  d60486bf1b udev: allow onboard index up to 65535
  ac2baecc84 udev: use snprintf_ok()
  8aad315c7c udev: fix potential infinite loop
  471ea73eb0 udev: make dev_pci_slot() return earlier when PCI bridge is found
  69b7c9a6bd udev: use uint32_t for hotplug_slot
  cdd0e89c0e udev: split out logic of parsing s390 PCI slots
  84e1a91baa udev: it is not necessary that the path is readable
  03548e8d0e udev: add missing initialization to fix freeing invalid address
  772f964bf6 udev: fix slot based network names on s390
  c5071cf699 tree-wide: fix typo
  06640d06df net_id: fix newly added naming scheme name
  58f9592f1f udev/net_id: don't generate slot based names if multiple devices might claim the same slot (bsc#1192637)
  df9e240c92 udev/net_id: parse _SUN ACPI index as a signed integer
  cfcaddfa74 localectl: don't omit keymaps files that are symlinks (bsc#1191826)
- Add in quarantine 6000-udev-net_id-add-debug-logging-for-construction-of-de.patch
  Add in quarantine 6001-udev-net_id-show-the-correct-identifier-in-the-debug.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1647518400">- update s390 udev rules conversion script to include the case when
  the legacy rule was also 41-* (bsc#1195247)
  * change scripts-udev-convert-rules.sh</changelog>
  <changelog author="fbui@suse.com" date="1647518401">- Import commit 117e7b96f8e8c63a9eec3459147f5352015a6d08
  3a395b156d Don't open /var journals in volatile mode when runtime_journal==NULL
  1cd65c15e4 udev: 60-persistent-storage-tape.rules: handle duplicate device ID (bsc#1195529)
  3ee9953dd4 man: tweak description of auto/noauto (bsc#1191502)
  6cfeacbf86 shared/install: ignore failures for auxiliary files
  37083278ed install: make UnitFileChangeType enum anonymous
  0a02185526 shared/install: reduce scope of iterator variables
  86c55bde7f systemd-coredump: allow setting external core size to infinity (bsc#1195899 jsc#SLE-23867)</changelog>
  <changelog author="fbui@suse.com" date="1647518402">- Fix the default target when it's been incorrectly set to one of the runlevel
  targets (bsc#1196567)
  The script 'upgrade-from-pre-210.sh' used to initialize the default target
  during migration from sysvinit to systemd. However it created symlinks to
  runlevel targets, which are deprecated. If such symlinks are found the script
  now renames them to point to 'true' systemd target units.
- When migrating from sysvinit to systemd (it probably won't happen anymore),
  let's use the default systemd target, which is the graphical.target one. In
  most cases it will do the right thing anyway.</changelog>
  <changelog author="fbui@suse.com" date="1648036800">- spec: cope with %{_modprobedir} being /lib/modprobe.d on SLE</changelog>
  <changelog author="fbui@suse.com" date="1650369600">- Import commit 12b0904b9117aeaef138784e5b118b82cd87d7cb
  b579fe1e09 tmpfiles: constify item_compatible() parameters
  01f4af3573 test: add test checking tmpfiles conf file precedence
  e8f4d24e97 test tmpfiles: add a test for 'w+'
  9c559f3854 tmpfiles.d: only 'w+' can have multiple lines for the same path (bsc#1198090)
  7fab6b6a6e journald: make use of CLAMP() in cache_space_refresh()
  1c8b02567c journald: make sure journal_file_open() doesn't leave a corrupted file around after failing (bsc#1198114)
  0007446abc journal-file: port journal_file_open() to openat_report_new()
  a07ad29813 fs-util: make sure openat_report_new() initializes return param also on shortcut
  6bb087a1fc fs-util: fix typos in comments
  42532a8bfb fs-util: add openat_report_new() wrapper around openat()</changelog>
</package>
<package pkgid="8ea753effbb0057b064faf3171f87dd9782382d1621b92b27a26ac180f2cbee5" name="nss-resolve" arch="aarch64">
  <version epoch="0" ver="246.16" rel="150300.7.45.1"/>
  <changelog author="fbui@suse.com" date="1631275200">- Drop 1007-tmpfiles-follow-SUSE-policies.patch
  Since most of the tmpfiles config files shipped by upstream are
  ignored (see previous commit "Drop most of the tmpfiles that deal
  with generic paths"), this patch is no more relevant.</changelog>
  <changelog author="fbui@suse.com" date="1631707200">- Import commit 263f7076bc77475045193653a785bbdc0457b5c6
  239e0ce5e7 journalctl: never fail at flushing when the flushed flag is set (bsc#1188588)
  0db7e590e1 manager: reexecute on SIGRTMIN+25, user instances only
  ef8afc4545 core: Make sure cgroup_oom_queue is flushed on manager exit
  f794e01080 cgroup: do 'catchup' for unit cgroup inotify watch files
  54369b7660 manager: Fix HW watchdog when systemd starts before driver loaded (bsc#1189446)
  1d0524bd54 pid1: various minor watchdog modernizations</changelog>
  <changelog author="fbui@suse.com" date="1632398400">- Enable support for Portable Services (jsc#SLE-21694)
  Will be released in Leap only.</changelog>
  <changelog author="fbui@suse.com" date="1635336000">- Import commit 5d20af26eee6507bfa9fdb6e5dd4bfc187e3399e
  37e021ee84 mount-util: fix fd_is_mount_point() when both the parent and directory are network fs (bsc#1190984)
  2aee16afd0 mountpoint-util: rebreak some comments
  962e487cb4 virt: Support detection for ARM64 Hyper-V guests (bsc#1186071)
  8545a66afd Use BIOS characteristics to distinguish EC2 bare-metal from VMs
  03311b59c3 machine-id-setup: generate machine-id from DMI product ID on Amazon EC2
  0fc3118a67 id128-util: use common implementation of helper to get/validate product ID
  83bfa06ebc virt: detect Amazon EC2 Nitro instance (bsc#1190440)
  e8b8df3ed9 core: move several source files to src/shared</changelog>
  <changelog author="fbui@suse.com" date="1635422400">- Import commit f2f061f1da064bfd47e2201967a854bb9281ca5b
  98e87fc3fd busctl: use usec granularity for the timestamp printed by the busctl monitor command (jsc#SLE-17798)</changelog>
  <changelog author="mwilck@suse.com" date="1636459200">- Fix IO scheduler udev rules
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="fbui@suse.com" date="1639396800">- Import commit 34eba0c28cb02d15fdbf55ce28bdfa56142ae4d1
  0a8cb60af6 Bump the max number of inodes for /dev to a million (bsc#1192858)
  848c9207cb Bump the max number of inodes for /dev to 128k (bsc#1192858)
  ea44eb34f2 sleep: don't skip resume device with low priority/available space (bsc#1192423)
  9325a68316 test: use kbd-mode-map we ship in one more test case
  8ff379e11d test-keymap-util: always use kbd-model-map we ship</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">* 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)</changelog>
  <changelog author="fbui@suse.com" date="1641297600">- Suppress PAM warning when the credentials for user@.service service are
  established (bsc#1190515)
  systemd-user PAM service needs to define a default implementation of
  pam_setcred() otherwise the fallback (defined by /etc/pam.d/other) is used,
  which consists of pam_warn.so + pam_deny.so, and will throw a warning each
  time a user logs in.
  The new default simply consists in calling pam_deny.so alone.</changelog>
  <changelog author="fbui@suse.com" date="1641470400">- Import commit 3850086c6580291188fe574ad37c8026012894fb
  c0505cbb8d tmpfiles: 'st' may have been used uninitialized
  d3f7c9e806 macro: add new helper RET_NERRNO()
  4a95baa5de rm-rf: optionally fsync() after removing directory tree
  dd8137a589 rm-rf: refactor rm_rf_children(), split out body of directory iteration loop
  3f8765ed2c rm-rf: fstatat() might fail if containing dir has limited access mode, patch that too
  87d39407b7 btrfs-util: add helper that abstracts "might be btrfs subvol?" check
  71ed335c7a rm-rf: add new flag REMOVE_CHMOD
  611376f830 rules: don't ignore Xen virtual interfaces anymore (bsc#1178561)
  All these commits except the last one (611376f830) are preparation for
  CVE-2021-3997.
- Drop 0001-rules-don-t-ignore-Xen-interfaces-anymore.patch
  It's been merged in the git repo (commit 611376f830).</changelog>
  <changelog author="fbui@suse.com" date="1641470401">- Added patches to fix CVE-2021-3997 (bsc#1194178)
  5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  These patches will be moved to the git repo once the bug will become
  public.</changelog>
  <changelog author="fbui@suse.com" date="1641816000">- Add 1009-Drop-or-soften-some-of-the-deprecation-warnings.patch (bsc#1193086)</changelog>
  <changelog author="fbui@suse.com" date="1643198400">- resolved: disable DNSSEC until the following issue is solved:
  https://github.com/systemd/systemd/issues/10579
- resolved: disable fallback DNS servers and fail when no DNS server info could
  be obtained from the links. It's better to let the sysadmin know that
  something is likely misconfigured rather than silently handing over the DNS
  queries to Google or Cloudflare.
- resolved: DNSSEC support (build) requires openssl therefore document this
  build dependency in systemd-network sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1643371200">- Import commit 6a96632f26f20a68578f9d620a593ceab2a0e3b6
  c4aa40982c shared/rm-rf: loop over nested directories instead of instead of recursing (CVE-2021-3997 bsc#1194178)
  ae13ea6511 shared/rm_rf: refactor rm_rf() to shorten code a bit
  3266d7f5c8 shared/rm_rf: refactor rm_rf_children_inner() to shorten code a bit
- Drop 5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  Drop 5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  Drop 5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  They have been merged into 'SUSE/v246' branch.</changelog>
  <changelog author="fbui@suse.com" date="1643889600">- Import commit 773652879446a81689c39aea23a486627992409b
  a76263ced9 meson: allow extra net naming schemes to be defined during configuration
  301bf4f1bf meson: drop the list of valid net naming schemes
  b89924793d netif-naming: inline one iterator variable
  da4a4df29c udev: fix potential memleak
  d60486bf1b udev: allow onboard index up to 65535
  ac2baecc84 udev: use snprintf_ok()
  8aad315c7c udev: fix potential infinite loop
  471ea73eb0 udev: make dev_pci_slot() return earlier when PCI bridge is found
  69b7c9a6bd udev: use uint32_t for hotplug_slot
  cdd0e89c0e udev: split out logic of parsing s390 PCI slots
  84e1a91baa udev: it is not necessary that the path is readable
  03548e8d0e udev: add missing initialization to fix freeing invalid address
  772f964bf6 udev: fix slot based network names on s390
  c5071cf699 tree-wide: fix typo
  06640d06df net_id: fix newly added naming scheme name
  58f9592f1f udev/net_id: don't generate slot based names if multiple devices might claim the same slot (bsc#1192637)
  df9e240c92 udev/net_id: parse _SUN ACPI index as a signed integer
  cfcaddfa74 localectl: don't omit keymaps files that are symlinks (bsc#1191826)
- Add in quarantine 6000-udev-net_id-add-debug-logging-for-construction-of-de.patch
  Add in quarantine 6001-udev-net_id-show-the-correct-identifier-in-the-debug.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1647518400">- update s390 udev rules conversion script to include the case when
  the legacy rule was also 41-* (bsc#1195247)
  * change scripts-udev-convert-rules.sh</changelog>
  <changelog author="fbui@suse.com" date="1647518401">- Import commit 117e7b96f8e8c63a9eec3459147f5352015a6d08
  3a395b156d Don't open /var journals in volatile mode when runtime_journal==NULL
  1cd65c15e4 udev: 60-persistent-storage-tape.rules: handle duplicate device ID (bsc#1195529)
  3ee9953dd4 man: tweak description of auto/noauto (bsc#1191502)
  6cfeacbf86 shared/install: ignore failures for auxiliary files
  37083278ed install: make UnitFileChangeType enum anonymous
  0a02185526 shared/install: reduce scope of iterator variables
  86c55bde7f systemd-coredump: allow setting external core size to infinity (bsc#1195899 jsc#SLE-23867)</changelog>
  <changelog author="fbui@suse.com" date="1647518402">- Fix the default target when it's been incorrectly set to one of the runlevel
  targets (bsc#1196567)
  The script 'upgrade-from-pre-210.sh' used to initialize the default target
  during migration from sysvinit to systemd. However it created symlinks to
  runlevel targets, which are deprecated. If such symlinks are found the script
  now renames them to point to 'true' systemd target units.
- When migrating from sysvinit to systemd (it probably won't happen anymore),
  let's use the default systemd target, which is the graphical.target one. In
  most cases it will do the right thing anyway.</changelog>
  <changelog author="fbui@suse.com" date="1648036800">- spec: cope with %{_modprobedir} being /lib/modprobe.d on SLE</changelog>
  <changelog author="fbui@suse.com" date="1650369600">- Import commit 12b0904b9117aeaef138784e5b118b82cd87d7cb
  b579fe1e09 tmpfiles: constify item_compatible() parameters
  01f4af3573 test: add test checking tmpfiles conf file precedence
  e8f4d24e97 test tmpfiles: add a test for 'w+'
  9c559f3854 tmpfiles.d: only 'w+' can have multiple lines for the same path (bsc#1198090)
  7fab6b6a6e journald: make use of CLAMP() in cache_space_refresh()
  1c8b02567c journald: make sure journal_file_open() doesn't leave a corrupted file around after failing (bsc#1198114)
  0007446abc journal-file: port journal_file_open() to openat_report_new()
  a07ad29813 fs-util: make sure openat_report_new() initializes return param also on shortcut
  6bb087a1fc fs-util: fix typos in comments
  42532a8bfb fs-util: add openat_report_new() wrapper around openat()</changelog>
</package>
<package pkgid="d6d4a7d1b2c04e03190fe1b987da2ffae71c18887d9fac5b45b8b45f38f611b9" name="nss-resolve" arch="ppc64le">
  <version epoch="0" ver="246.16" rel="150300.7.45.1"/>
  <changelog author="fbui@suse.com" date="1631275200">- Drop 1007-tmpfiles-follow-SUSE-policies.patch
  Since most of the tmpfiles config files shipped by upstream are
  ignored (see previous commit "Drop most of the tmpfiles that deal
  with generic paths"), this patch is no more relevant.</changelog>
  <changelog author="fbui@suse.com" date="1631707200">- Import commit 263f7076bc77475045193653a785bbdc0457b5c6
  239e0ce5e7 journalctl: never fail at flushing when the flushed flag is set (bsc#1188588)
  0db7e590e1 manager: reexecute on SIGRTMIN+25, user instances only
  ef8afc4545 core: Make sure cgroup_oom_queue is flushed on manager exit
  f794e01080 cgroup: do 'catchup' for unit cgroup inotify watch files
  54369b7660 manager: Fix HW watchdog when systemd starts before driver loaded (bsc#1189446)
  1d0524bd54 pid1: various minor watchdog modernizations</changelog>
  <changelog author="fbui@suse.com" date="1632398400">- Enable support for Portable Services (jsc#SLE-21694)
  Will be released in Leap only.</changelog>
  <changelog author="fbui@suse.com" date="1635336000">- Import commit 5d20af26eee6507bfa9fdb6e5dd4bfc187e3399e
  37e021ee84 mount-util: fix fd_is_mount_point() when both the parent and directory are network fs (bsc#1190984)
  2aee16afd0 mountpoint-util: rebreak some comments
  962e487cb4 virt: Support detection for ARM64 Hyper-V guests (bsc#1186071)
  8545a66afd Use BIOS characteristics to distinguish EC2 bare-metal from VMs
  03311b59c3 machine-id-setup: generate machine-id from DMI product ID on Amazon EC2
  0fc3118a67 id128-util: use common implementation of helper to get/validate product ID
  83bfa06ebc virt: detect Amazon EC2 Nitro instance (bsc#1190440)
  e8b8df3ed9 core: move several source files to src/shared</changelog>
  <changelog author="fbui@suse.com" date="1635422400">- Import commit f2f061f1da064bfd47e2201967a854bb9281ca5b
  98e87fc3fd busctl: use usec granularity for the timestamp printed by the busctl monitor command (jsc#SLE-17798)</changelog>
  <changelog author="mwilck@suse.com" date="1636459200">- Fix IO scheduler udev rules
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="fbui@suse.com" date="1639396800">- Import commit 34eba0c28cb02d15fdbf55ce28bdfa56142ae4d1
  0a8cb60af6 Bump the max number of inodes for /dev to a million (bsc#1192858)
  848c9207cb Bump the max number of inodes for /dev to 128k (bsc#1192858)
  ea44eb34f2 sleep: don't skip resume device with low priority/available space (bsc#1192423)
  9325a68316 test: use kbd-mode-map we ship in one more test case
  8ff379e11d test-keymap-util: always use kbd-model-map we ship</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">* 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)</changelog>
  <changelog author="fbui@suse.com" date="1641297600">- Suppress PAM warning when the credentials for user@.service service are
  established (bsc#1190515)
  systemd-user PAM service needs to define a default implementation of
  pam_setcred() otherwise the fallback (defined by /etc/pam.d/other) is used,
  which consists of pam_warn.so + pam_deny.so, and will throw a warning each
  time a user logs in.
  The new default simply consists in calling pam_deny.so alone.</changelog>
  <changelog author="fbui@suse.com" date="1641470400">- Import commit 3850086c6580291188fe574ad37c8026012894fb
  c0505cbb8d tmpfiles: 'st' may have been used uninitialized
  d3f7c9e806 macro: add new helper RET_NERRNO()
  4a95baa5de rm-rf: optionally fsync() after removing directory tree
  dd8137a589 rm-rf: refactor rm_rf_children(), split out body of directory iteration loop
  3f8765ed2c rm-rf: fstatat() might fail if containing dir has limited access mode, patch that too
  87d39407b7 btrfs-util: add helper that abstracts "might be btrfs subvol?" check
  71ed335c7a rm-rf: add new flag REMOVE_CHMOD
  611376f830 rules: don't ignore Xen virtual interfaces anymore (bsc#1178561)
  All these commits except the last one (611376f830) are preparation for
  CVE-2021-3997.
- Drop 0001-rules-don-t-ignore-Xen-interfaces-anymore.patch
  It's been merged in the git repo (commit 611376f830).</changelog>
  <changelog author="fbui@suse.com" date="1641470401">- Added patches to fix CVE-2021-3997 (bsc#1194178)
  5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  These patches will be moved to the git repo once the bug will become
  public.</changelog>
  <changelog author="fbui@suse.com" date="1641816000">- Add 1009-Drop-or-soften-some-of-the-deprecation-warnings.patch (bsc#1193086)</changelog>
  <changelog author="fbui@suse.com" date="1643198400">- resolved: disable DNSSEC until the following issue is solved:
  https://github.com/systemd/systemd/issues/10579
- resolved: disable fallback DNS servers and fail when no DNS server info could
  be obtained from the links. It's better to let the sysadmin know that
  something is likely misconfigured rather than silently handing over the DNS
  queries to Google or Cloudflare.
- resolved: DNSSEC support (build) requires openssl therefore document this
  build dependency in systemd-network sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1643371200">- Import commit 6a96632f26f20a68578f9d620a593ceab2a0e3b6
  c4aa40982c shared/rm-rf: loop over nested directories instead of instead of recursing (CVE-2021-3997 bsc#1194178)
  ae13ea6511 shared/rm_rf: refactor rm_rf() to shorten code a bit
  3266d7f5c8 shared/rm_rf: refactor rm_rf_children_inner() to shorten code a bit
- Drop 5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  Drop 5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  Drop 5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  They have been merged into 'SUSE/v246' branch.</changelog>
  <changelog author="fbui@suse.com" date="1643889600">- Import commit 773652879446a81689c39aea23a486627992409b
  a76263ced9 meson: allow extra net naming schemes to be defined during configuration
  301bf4f1bf meson: drop the list of valid net naming schemes
  b89924793d netif-naming: inline one iterator variable
  da4a4df29c udev: fix potential memleak
  d60486bf1b udev: allow onboard index up to 65535
  ac2baecc84 udev: use snprintf_ok()
  8aad315c7c udev: fix potential infinite loop
  471ea73eb0 udev: make dev_pci_slot() return earlier when PCI bridge is found
  69b7c9a6bd udev: use uint32_t for hotplug_slot
  cdd0e89c0e udev: split out logic of parsing s390 PCI slots
  84e1a91baa udev: it is not necessary that the path is readable
  03548e8d0e udev: add missing initialization to fix freeing invalid address
  772f964bf6 udev: fix slot based network names on s390
  c5071cf699 tree-wide: fix typo
  06640d06df net_id: fix newly added naming scheme name
  58f9592f1f udev/net_id: don't generate slot based names if multiple devices might claim the same slot (bsc#1192637)
  df9e240c92 udev/net_id: parse _SUN ACPI index as a signed integer
  cfcaddfa74 localectl: don't omit keymaps files that are symlinks (bsc#1191826)
- Add in quarantine 6000-udev-net_id-add-debug-logging-for-construction-of-de.patch
  Add in quarantine 6001-udev-net_id-show-the-correct-identifier-in-the-debug.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1647518400">- update s390 udev rules conversion script to include the case when
  the legacy rule was also 41-* (bsc#1195247)
  * change scripts-udev-convert-rules.sh</changelog>
  <changelog author="fbui@suse.com" date="1647518401">- Import commit 117e7b96f8e8c63a9eec3459147f5352015a6d08
  3a395b156d Don't open /var journals in volatile mode when runtime_journal==NULL
  1cd65c15e4 udev: 60-persistent-storage-tape.rules: handle duplicate device ID (bsc#1195529)
  3ee9953dd4 man: tweak description of auto/noauto (bsc#1191502)
  6cfeacbf86 shared/install: ignore failures for auxiliary files
  37083278ed install: make UnitFileChangeType enum anonymous
  0a02185526 shared/install: reduce scope of iterator variables
  86c55bde7f systemd-coredump: allow setting external core size to infinity (bsc#1195899 jsc#SLE-23867)</changelog>
  <changelog author="fbui@suse.com" date="1647518402">- Fix the default target when it's been incorrectly set to one of the runlevel
  targets (bsc#1196567)
  The script 'upgrade-from-pre-210.sh' used to initialize the default target
  during migration from sysvinit to systemd. However it created symlinks to
  runlevel targets, which are deprecated. If such symlinks are found the script
  now renames them to point to 'true' systemd target units.
- When migrating from sysvinit to systemd (it probably won't happen anymore),
  let's use the default systemd target, which is the graphical.target one. In
  most cases it will do the right thing anyway.</changelog>
  <changelog author="fbui@suse.com" date="1648036800">- spec: cope with %{_modprobedir} being /lib/modprobe.d on SLE</changelog>
  <changelog author="fbui@suse.com" date="1650369600">- Import commit 12b0904b9117aeaef138784e5b118b82cd87d7cb
  b579fe1e09 tmpfiles: constify item_compatible() parameters
  01f4af3573 test: add test checking tmpfiles conf file precedence
  e8f4d24e97 test tmpfiles: add a test for 'w+'
  9c559f3854 tmpfiles.d: only 'w+' can have multiple lines for the same path (bsc#1198090)
  7fab6b6a6e journald: make use of CLAMP() in cache_space_refresh()
  1c8b02567c journald: make sure journal_file_open() doesn't leave a corrupted file around after failing (bsc#1198114)
  0007446abc journal-file: port journal_file_open() to openat_report_new()
  a07ad29813 fs-util: make sure openat_report_new() initializes return param also on shortcut
  6bb087a1fc fs-util: fix typos in comments
  42532a8bfb fs-util: add openat_report_new() wrapper around openat()</changelog>
</package>
<package pkgid="d92c39ea10fb76388bd74b959dc79469bfef6e3441605ed30ef0edba74c1cbc3" name="nss-resolve" arch="s390x">
  <version epoch="0" ver="246.16" rel="150300.7.45.1"/>
  <changelog author="fbui@suse.com" date="1631275200">- Drop 1007-tmpfiles-follow-SUSE-policies.patch
  Since most of the tmpfiles config files shipped by upstream are
  ignored (see previous commit "Drop most of the tmpfiles that deal
  with generic paths"), this patch is no more relevant.</changelog>
  <changelog author="fbui@suse.com" date="1631707200">- Import commit 263f7076bc77475045193653a785bbdc0457b5c6
  239e0ce5e7 journalctl: never fail at flushing when the flushed flag is set (bsc#1188588)
  0db7e590e1 manager: reexecute on SIGRTMIN+25, user instances only
  ef8afc4545 core: Make sure cgroup_oom_queue is flushed on manager exit
  f794e01080 cgroup: do 'catchup' for unit cgroup inotify watch files
  54369b7660 manager: Fix HW watchdog when systemd starts before driver loaded (bsc#1189446)
  1d0524bd54 pid1: various minor watchdog modernizations</changelog>
  <changelog author="fbui@suse.com" date="1632398400">- Enable support for Portable Services (jsc#SLE-21694)
  Will be released in Leap only.</changelog>
  <changelog author="fbui@suse.com" date="1635336000">- Import commit 5d20af26eee6507bfa9fdb6e5dd4bfc187e3399e
  37e021ee84 mount-util: fix fd_is_mount_point() when both the parent and directory are network fs (bsc#1190984)
  2aee16afd0 mountpoint-util: rebreak some comments
  962e487cb4 virt: Support detection for ARM64 Hyper-V guests (bsc#1186071)
  8545a66afd Use BIOS characteristics to distinguish EC2 bare-metal from VMs
  03311b59c3 machine-id-setup: generate machine-id from DMI product ID on Amazon EC2
  0fc3118a67 id128-util: use common implementation of helper to get/validate product ID
  83bfa06ebc virt: detect Amazon EC2 Nitro instance (bsc#1190440)
  e8b8df3ed9 core: move several source files to src/shared</changelog>
  <changelog author="fbui@suse.com" date="1635422400">- Import commit f2f061f1da064bfd47e2201967a854bb9281ca5b
  98e87fc3fd busctl: use usec granularity for the timestamp printed by the busctl monitor command (jsc#SLE-17798)</changelog>
  <changelog author="mwilck@suse.com" date="1636459200">- Fix IO scheduler udev rules
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="fbui@suse.com" date="1639396800">- Import commit 34eba0c28cb02d15fdbf55ce28bdfa56142ae4d1
  0a8cb60af6 Bump the max number of inodes for /dev to a million (bsc#1192858)
  848c9207cb Bump the max number of inodes for /dev to 128k (bsc#1192858)
  ea44eb34f2 sleep: don't skip resume device with low priority/available space (bsc#1192423)
  9325a68316 test: use kbd-mode-map we ship in one more test case
  8ff379e11d test-keymap-util: always use kbd-model-map we ship</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">* 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)</changelog>
  <changelog author="fbui@suse.com" date="1641297600">- Suppress PAM warning when the credentials for user@.service service are
  established (bsc#1190515)
  systemd-user PAM service needs to define a default implementation of
  pam_setcred() otherwise the fallback (defined by /etc/pam.d/other) is used,
  which consists of pam_warn.so + pam_deny.so, and will throw a warning each
  time a user logs in.
  The new default simply consists in calling pam_deny.so alone.</changelog>
  <changelog author="fbui@suse.com" date="1641470400">- Import commit 3850086c6580291188fe574ad37c8026012894fb
  c0505cbb8d tmpfiles: 'st' may have been used uninitialized
  d3f7c9e806 macro: add new helper RET_NERRNO()
  4a95baa5de rm-rf: optionally fsync() after removing directory tree
  dd8137a589 rm-rf: refactor rm_rf_children(), split out body of directory iteration loop
  3f8765ed2c rm-rf: fstatat() might fail if containing dir has limited access mode, patch that too
  87d39407b7 btrfs-util: add helper that abstracts "might be btrfs subvol?" check
  71ed335c7a rm-rf: add new flag REMOVE_CHMOD
  611376f830 rules: don't ignore Xen virtual interfaces anymore (bsc#1178561)
  All these commits except the last one (611376f830) are preparation for
  CVE-2021-3997.
- Drop 0001-rules-don-t-ignore-Xen-interfaces-anymore.patch
  It's been merged in the git repo (commit 611376f830).</changelog>
  <changelog author="fbui@suse.com" date="1641470401">- Added patches to fix CVE-2021-3997 (bsc#1194178)
  5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  These patches will be moved to the git repo once the bug will become
  public.</changelog>
  <changelog author="fbui@suse.com" date="1641816000">- Add 1009-Drop-or-soften-some-of-the-deprecation-warnings.patch (bsc#1193086)</changelog>
  <changelog author="fbui@suse.com" date="1643198400">- resolved: disable DNSSEC until the following issue is solved:
  https://github.com/systemd/systemd/issues/10579
- resolved: disable fallback DNS servers and fail when no DNS server info could
  be obtained from the links. It's better to let the sysadmin know that
  something is likely misconfigured rather than silently handing over the DNS
  queries to Google or Cloudflare.
- resolved: DNSSEC support (build) requires openssl therefore document this
  build dependency in systemd-network sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1643371200">- Import commit 6a96632f26f20a68578f9d620a593ceab2a0e3b6
  c4aa40982c shared/rm-rf: loop over nested directories instead of instead of recursing (CVE-2021-3997 bsc#1194178)
  ae13ea6511 shared/rm_rf: refactor rm_rf() to shorten code a bit
  3266d7f5c8 shared/rm_rf: refactor rm_rf_children_inner() to shorten code a bit
- Drop 5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  Drop 5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  Drop 5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  They have been merged into 'SUSE/v246' branch.</changelog>
  <changelog author="fbui@suse.com" date="1643889600">- Import commit 773652879446a81689c39aea23a486627992409b
  a76263ced9 meson: allow extra net naming schemes to be defined during configuration
  301bf4f1bf meson: drop the list of valid net naming schemes
  b89924793d netif-naming: inline one iterator variable
  da4a4df29c udev: fix potential memleak
  d60486bf1b udev: allow onboard index up to 65535
  ac2baecc84 udev: use snprintf_ok()
  8aad315c7c udev: fix potential infinite loop
  471ea73eb0 udev: make dev_pci_slot() return earlier when PCI bridge is found
  69b7c9a6bd udev: use uint32_t for hotplug_slot
  cdd0e89c0e udev: split out logic of parsing s390 PCI slots
  84e1a91baa udev: it is not necessary that the path is readable
  03548e8d0e udev: add missing initialization to fix freeing invalid address
  772f964bf6 udev: fix slot based network names on s390
  c5071cf699 tree-wide: fix typo
  06640d06df net_id: fix newly added naming scheme name
  58f9592f1f udev/net_id: don't generate slot based names if multiple devices might claim the same slot (bsc#1192637)
  df9e240c92 udev/net_id: parse _SUN ACPI index as a signed integer
  cfcaddfa74 localectl: don't omit keymaps files that are symlinks (bsc#1191826)
- Add in quarantine 6000-udev-net_id-add-debug-logging-for-construction-of-de.patch
  Add in quarantine 6001-udev-net_id-show-the-correct-identifier-in-the-debug.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1647518400">- update s390 udev rules conversion script to include the case when
  the legacy rule was also 41-* (bsc#1195247)
  * change scripts-udev-convert-rules.sh</changelog>
  <changelog author="fbui@suse.com" date="1647518401">- Import commit 117e7b96f8e8c63a9eec3459147f5352015a6d08
  3a395b156d Don't open /var journals in volatile mode when runtime_journal==NULL
  1cd65c15e4 udev: 60-persistent-storage-tape.rules: handle duplicate device ID (bsc#1195529)
  3ee9953dd4 man: tweak description of auto/noauto (bsc#1191502)
  6cfeacbf86 shared/install: ignore failures for auxiliary files
  37083278ed install: make UnitFileChangeType enum anonymous
  0a02185526 shared/install: reduce scope of iterator variables
  86c55bde7f systemd-coredump: allow setting external core size to infinity (bsc#1195899 jsc#SLE-23867)</changelog>
  <changelog author="fbui@suse.com" date="1647518402">- Fix the default target when it's been incorrectly set to one of the runlevel
  targets (bsc#1196567)
  The script 'upgrade-from-pre-210.sh' used to initialize the default target
  during migration from sysvinit to systemd. However it created symlinks to
  runlevel targets, which are deprecated. If such symlinks are found the script
  now renames them to point to 'true' systemd target units.
- When migrating from sysvinit to systemd (it probably won't happen anymore),
  let's use the default systemd target, which is the graphical.target one. In
  most cases it will do the right thing anyway.</changelog>
  <changelog author="fbui@suse.com" date="1648036800">- spec: cope with %{_modprobedir} being /lib/modprobe.d on SLE</changelog>
  <changelog author="fbui@suse.com" date="1650369600">- Import commit 12b0904b9117aeaef138784e5b118b82cd87d7cb
  b579fe1e09 tmpfiles: constify item_compatible() parameters
  01f4af3573 test: add test checking tmpfiles conf file precedence
  e8f4d24e97 test tmpfiles: add a test for 'w+'
  9c559f3854 tmpfiles.d: only 'w+' can have multiple lines for the same path (bsc#1198090)
  7fab6b6a6e journald: make use of CLAMP() in cache_space_refresh()
  1c8b02567c journald: make sure journal_file_open() doesn't leave a corrupted file around after failing (bsc#1198114)
  0007446abc journal-file: port journal_file_open() to openat_report_new()
  a07ad29813 fs-util: make sure openat_report_new() initializes return param also on shortcut
  6bb087a1fc fs-util: fix typos in comments
  42532a8bfb fs-util: add openat_report_new() wrapper around openat()</changelog>
</package>
<package pkgid="4808c67aa274f40f35a27b5934d657df4ebf3c1e063e0c0516c4f540dd1d8d4a" name="nss-resolve" arch="x86_64">
  <version epoch="0" ver="246.16" rel="150300.7.45.1"/>
  <changelog author="fbui@suse.com" date="1631275200">- Drop 1007-tmpfiles-follow-SUSE-policies.patch
  Since most of the tmpfiles config files shipped by upstream are
  ignored (see previous commit "Drop most of the tmpfiles that deal
  with generic paths"), this patch is no more relevant.</changelog>
  <changelog author="fbui@suse.com" date="1631707200">- Import commit 263f7076bc77475045193653a785bbdc0457b5c6
  239e0ce5e7 journalctl: never fail at flushing when the flushed flag is set (bsc#1188588)
  0db7e590e1 manager: reexecute on SIGRTMIN+25, user instances only
  ef8afc4545 core: Make sure cgroup_oom_queue is flushed on manager exit
  f794e01080 cgroup: do 'catchup' for unit cgroup inotify watch files
  54369b7660 manager: Fix HW watchdog when systemd starts before driver loaded (bsc#1189446)
  1d0524bd54 pid1: various minor watchdog modernizations</changelog>
  <changelog author="fbui@suse.com" date="1632398400">- Enable support for Portable Services (jsc#SLE-21694)
  Will be released in Leap only.</changelog>
  <changelog author="fbui@suse.com" date="1635336000">- Import commit 5d20af26eee6507bfa9fdb6e5dd4bfc187e3399e
  37e021ee84 mount-util: fix fd_is_mount_point() when both the parent and directory are network fs (bsc#1190984)
  2aee16afd0 mountpoint-util: rebreak some comments
  962e487cb4 virt: Support detection for ARM64 Hyper-V guests (bsc#1186071)
  8545a66afd Use BIOS characteristics to distinguish EC2 bare-metal from VMs
  03311b59c3 machine-id-setup: generate machine-id from DMI product ID on Amazon EC2
  0fc3118a67 id128-util: use common implementation of helper to get/validate product ID
  83bfa06ebc virt: detect Amazon EC2 Nitro instance (bsc#1190440)
  e8b8df3ed9 core: move several source files to src/shared</changelog>
  <changelog author="fbui@suse.com" date="1635422400">- Import commit f2f061f1da064bfd47e2201967a854bb9281ca5b
  98e87fc3fd busctl: use usec granularity for the timestamp printed by the busctl monitor command (jsc#SLE-17798)</changelog>
  <changelog author="mwilck@suse.com" date="1636459200">- Fix IO scheduler udev rules
  * 60-io-scheduler.rules: don't use BFQ for real multiqueue devices
    (jsc#SLE-21032, bsc#1192161)
  * 60-io-scheduler.rules: use "none" for multipath components
    (bsc#1192161)</changelog>
  <changelog author="fbui@suse.com" date="1639396800">- Import commit 34eba0c28cb02d15fdbf55ce28bdfa56142ae4d1
  0a8cb60af6 Bump the max number of inodes for /dev to a million (bsc#1192858)
  848c9207cb Bump the max number of inodes for /dev to 128k (bsc#1192858)
  ea44eb34f2 sleep: don't skip resume device with low priority/available space (bsc#1192423)
  9325a68316 test: use kbd-mode-map we ship in one more test case
  8ff379e11d test-keymap-util: always use kbd-model-map we ship</changelog>
  <changelog author="mwilck@suse.com" date="1640001600">* 60-io-scheduler.rules: add rules for virtual devices
    (boo#1193759)
  * 60-io-scheduler.rules: enforce "none" for loop devices
    (boo#1193759)</changelog>
  <changelog author="fbui@suse.com" date="1641297600">- Suppress PAM warning when the credentials for user@.service service are
  established (bsc#1190515)
  systemd-user PAM service needs to define a default implementation of
  pam_setcred() otherwise the fallback (defined by /etc/pam.d/other) is used,
  which consists of pam_warn.so + pam_deny.so, and will throw a warning each
  time a user logs in.
  The new default simply consists in calling pam_deny.so alone.</changelog>
  <changelog author="fbui@suse.com" date="1641470400">- Import commit 3850086c6580291188fe574ad37c8026012894fb
  c0505cbb8d tmpfiles: 'st' may have been used uninitialized
  d3f7c9e806 macro: add new helper RET_NERRNO()
  4a95baa5de rm-rf: optionally fsync() after removing directory tree
  dd8137a589 rm-rf: refactor rm_rf_children(), split out body of directory iteration loop
  3f8765ed2c rm-rf: fstatat() might fail if containing dir has limited access mode, patch that too
  87d39407b7 btrfs-util: add helper that abstracts "might be btrfs subvol?" check
  71ed335c7a rm-rf: add new flag REMOVE_CHMOD
  611376f830 rules: don't ignore Xen virtual interfaces anymore (bsc#1178561)
  All these commits except the last one (611376f830) are preparation for
  CVE-2021-3997.
- Drop 0001-rules-don-t-ignore-Xen-interfaces-anymore.patch
  It's been merged in the git repo (commit 611376f830).</changelog>
  <changelog author="fbui@suse.com" date="1641470401">- Added patches to fix CVE-2021-3997 (bsc#1194178)
  5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  These patches will be moved to the git repo once the bug will become
  public.</changelog>
  <changelog author="fbui@suse.com" date="1641816000">- Add 1009-Drop-or-soften-some-of-the-deprecation-warnings.patch (bsc#1193086)</changelog>
  <changelog author="fbui@suse.com" date="1643198400">- resolved: disable DNSSEC until the following issue is solved:
  https://github.com/systemd/systemd/issues/10579
- resolved: disable fallback DNS servers and fail when no DNS server info could
  be obtained from the links. It's better to let the sysadmin know that
  something is likely misconfigured rather than silently handing over the DNS
  queries to Google or Cloudflare.
- resolved: DNSSEC support (build) requires openssl therefore document this
  build dependency in systemd-network sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1643371200">- Import commit 6a96632f26f20a68578f9d620a593ceab2a0e3b6
  c4aa40982c shared/rm-rf: loop over nested directories instead of instead of recursing (CVE-2021-3997 bsc#1194178)
  ae13ea6511 shared/rm_rf: refactor rm_rf() to shorten code a bit
  3266d7f5c8 shared/rm_rf: refactor rm_rf_children_inner() to shorten code a bit
- Drop 5000-shared-rm_rf-refactor-rm_rf_children_inner-to-shorte.patch
  Drop 5001-shared-rm_rf-refactor-rm_rf-to-shorten-code-a-bit.patch
  Drop 5002-shared-rm-rf-loop-over-nested-directories-instead-of.patch
  They have been merged into 'SUSE/v246' branch.</changelog>
  <changelog author="fbui@suse.com" date="1643889600">- Import commit 773652879446a81689c39aea23a486627992409b
  a76263ced9 meson: allow extra net naming schemes to be defined during configuration
  301bf4f1bf meson: drop the list of valid net naming schemes
  b89924793d netif-naming: inline one iterator variable
  da4a4df29c udev: fix potential memleak
  d60486bf1b udev: allow onboard index up to 65535
  ac2baecc84 udev: use snprintf_ok()
  8aad315c7c udev: fix potential infinite loop
  471ea73eb0 udev: make dev_pci_slot() return earlier when PCI bridge is found
  69b7c9a6bd udev: use uint32_t for hotplug_slot
  cdd0e89c0e udev: split out logic of parsing s390 PCI slots
  84e1a91baa udev: it is not necessary that the path is readable
  03548e8d0e udev: add missing initialization to fix freeing invalid address
  772f964bf6 udev: fix slot based network names on s390
  c5071cf699 tree-wide: fix typo
  06640d06df net_id: fix newly added naming scheme name
  58f9592f1f udev/net_id: don't generate slot based names if multiple devices might claim the same slot (bsc#1192637)
  df9e240c92 udev/net_id: parse _SUN ACPI index as a signed integer
  cfcaddfa74 localectl: don't omit keymaps files that are symlinks (bsc#1191826)
- Add in quarantine 6000-udev-net_id-add-debug-logging-for-construction-of-de.patch
  Add in quarantine 6001-udev-net_id-show-the-correct-identifier-in-the-debug.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1647518400">- update s390 udev rules conversion script to include the case when
  the legacy rule was also 41-* (bsc#1195247)
  * change scripts-udev-convert-rules.sh</changelog>
  <changelog author="fbui@suse.com" date="1647518401">- Import commit 117e7b96f8e8c63a9eec3459147f5352015a6d08
  3a395b156d Don't open /var journals in volatile mode when runtime_journal==NULL
  1cd65c15e4 udev: 60-persistent-storage-tape.rules: handle duplicate device ID (bsc#1195529)
  3ee9953dd4 man: tweak description of auto/noauto (bsc#1191502)
  6cfeacbf86 shared/install: ignore failures for auxiliary files
  37083278ed install: make UnitFileChangeType enum anonymous
  0a02185526 shared/install: reduce scope of iterator variables
  86c55bde7f systemd-coredump: allow setting external core size to infinity (bsc#1195899 jsc#SLE-23867)</changelog>
  <changelog author="fbui@suse.com" date="1647518402">- Fix the default target when it's been incorrectly set to one of the runlevel
  targets (bsc#1196567)
  The script 'upgrade-from-pre-210.sh' used to initialize the default target
  during migration from sysvinit to systemd. However it created symlinks to
  runlevel targets, which are deprecated. If such symlinks are found the script
  now renames them to point to 'true' systemd target units.
- When migrating from sysvinit to systemd (it probably won't happen anymore),
  let's use the default systemd target, which is the graphical.target one. In
  most cases it will do the right thing anyway.</changelog>
  <changelog author="fbui@suse.com" date="1648036800">- spec: cope with %{_modprobedir} being /lib/modprobe.d on SLE</changelog>
  <changelog author="fbui@suse.com" date="1650369600">- Import commit 12b0904b9117aeaef138784e5b118b82cd87d7cb
  b579fe1e09 tmpfiles: constify item_compatible() parameters
  01f4af3573 test: add test checking tmpfiles conf file precedence
  e8f4d24e97 test tmpfiles: add a test for 'w+'
  9c559f3854 tmpfiles.d: only 'w+' can have multiple lines for the same path (bsc#1198090)
  7fab6b6a6e journald: make use of CLAMP() in cache_space_refresh()
  1c8b02567c journald: make sure journal_file_open() doesn't leave a corrupted file around after failing (bsc#1198114)
  0007446abc journal-file: port journal_file_open() to openat_report_new()
  a07ad29813 fs-util: make sure openat_report_new() initializes return param also on shortcut
  6bb087a1fc fs-util: fix typos in comments
  42532a8bfb fs-util: add openat_report_new() wrapper around openat()</changelog>
</package>
<package pkgid="cd95464219233153895c4c32a1392fdeaa5a0d8f40745b8a6d638d956ff97269" name="nut" arch="aarch64">
  <version epoch="0" ver="2.7.4" rel="150000.6.3.1"/>
  <changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
  <changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>
  <changelog author="alarrosa@suse.com" date="1503057600">- Add use-pkg-config-gdlib.diff to fix a build failure due to the
  configure scripts using gdlib-config (which is deprecated) to
  obtain the CFLAGS/LDFLAGS/LIBS to use when building with gd. With
  the patch, nut now uses pkg-config which returns the right values</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Drop the aspell dependency, it is only used for verification
  of the mans and it is more for devs to do than during the build
  wrt fate#323578</changelog>
  <changelog author="tchvatal@suse.com" date="1506945600">- Fix rpm groups
- Reduce the supported distros by keeping sle12+ only
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241600">- Buildrequire libnsl-devel for suse_version &gt;= 1330: libnsl was
  split out of glibc and needs to be explcitly required if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241601">- BuildRequire tex(upquote.sty): Generally seen, this dependency
  is inaccurate, as our sources do not reference upquote.sty, but
  asciidoc does. Adding the dep there though makes asciidoc too
  expensive, and recommends are not interpreted when building the
  buildroot (boo#1063897).</changelog>
  <changelog author="sbrabec@suse.com" date="1512043200">- No more conflict with apcupsd (boo#1070373).
- Remove smartups references. It is dropped since 2001.</changelog>
  <changelog author="suse+build@de-korte.org" date="1512129600">- Add support for OpenSSL 1.1.0 library, allow TLSv1 and higher
  (not just TLSv1) and report TLS version used in debug mode level
  3 and higher (boo#1069988, openssl-1_1.patch)
- Fix missing pointer dereference in upssched (nut-upssched.patch)
- Support for allowfrom parameter was removed in version 2.4.0
  (nut-preconfig.patch)</changelog>
  <changelog author="suse+build@de-korte.org" date="1516536000">- Fix clash between Group and %define GROUP by renaming the latter
  to NUT_GROUP (and USER to NUT_USER)
- Replace duplicate man files by soft links</changelog>
  <changelog author="sbrabec@suse.com" date="1648728000">- Fix build within SLE15 SP4 and openSUSE Leap 15.4: BuildRequire
  many tex() packages and texlive-metafont-bin. Generally seen,
  this dependency is inaccurate, as our sources do not reference
  them but asciidoc does. Adding the dep there though makes
  asciidoc too expensive, and recommends are not interpreted when
  building the buildroot (bsc#1197789).</changelog>
</package>
<package pkgid="b5add18458d0ecd61d541967ecb24e04ca3522a84830a50f1be64ad7b14bf44c" name="nut" arch="ppc64le">
  <version epoch="0" ver="2.7.4" rel="150000.6.3.1"/>
  <changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
  <changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>
  <changelog author="alarrosa@suse.com" date="1503057600">- Add use-pkg-config-gdlib.diff to fix a build failure due to the
  configure scripts using gdlib-config (which is deprecated) to
  obtain the CFLAGS/LDFLAGS/LIBS to use when building with gd. With
  the patch, nut now uses pkg-config which returns the right values</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Drop the aspell dependency, it is only used for verification
  of the mans and it is more for devs to do than during the build
  wrt fate#323578</changelog>
  <changelog author="tchvatal@suse.com" date="1506945600">- Fix rpm groups
- Reduce the supported distros by keeping sle12+ only
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241600">- Buildrequire libnsl-devel for suse_version &gt;= 1330: libnsl was
  split out of glibc and needs to be explcitly required if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241601">- BuildRequire tex(upquote.sty): Generally seen, this dependency
  is inaccurate, as our sources do not reference upquote.sty, but
  asciidoc does. Adding the dep there though makes asciidoc too
  expensive, and recommends are not interpreted when building the
  buildroot (boo#1063897).</changelog>
  <changelog author="sbrabec@suse.com" date="1512043200">- No more conflict with apcupsd (boo#1070373).
- Remove smartups references. It is dropped since 2001.</changelog>
  <changelog author="suse+build@de-korte.org" date="1512129600">- Add support for OpenSSL 1.1.0 library, allow TLSv1 and higher
  (not just TLSv1) and report TLS version used in debug mode level
  3 and higher (boo#1069988, openssl-1_1.patch)
- Fix missing pointer dereference in upssched (nut-upssched.patch)
- Support for allowfrom parameter was removed in version 2.4.0
  (nut-preconfig.patch)</changelog>
  <changelog author="suse+build@de-korte.org" date="1516536000">- Fix clash between Group and %define GROUP by renaming the latter
  to NUT_GROUP (and USER to NUT_USER)
- Replace duplicate man files by soft links</changelog>
  <changelog author="sbrabec@suse.com" date="1648728000">- Fix build within SLE15 SP4 and openSUSE Leap 15.4: BuildRequire
  many tex() packages and texlive-metafont-bin. Generally seen,
  this dependency is inaccurate, as our sources do not reference
  them but asciidoc does. Adding the dep there though makes
  asciidoc too expensive, and recommends are not interpreted when
  building the buildroot (bsc#1197789).</changelog>
</package>
<package pkgid="cdc451c785389afc79cb61a42c14a9e767c4fd48e2611ca9158201a7527792d6" name="nut" arch="s390x">
  <version epoch="0" ver="2.7.4" rel="150000.6.3.1"/>
  <changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
  <changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>
  <changelog author="alarrosa@suse.com" date="1503057600">- Add use-pkg-config-gdlib.diff to fix a build failure due to the
  configure scripts using gdlib-config (which is deprecated) to
  obtain the CFLAGS/LDFLAGS/LIBS to use when building with gd. With
  the patch, nut now uses pkg-config which returns the right values</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Drop the aspell dependency, it is only used for verification
  of the mans and it is more for devs to do than during the build
  wrt fate#323578</changelog>
  <changelog author="tchvatal@suse.com" date="1506945600">- Fix rpm groups
- Reduce the supported distros by keeping sle12+ only
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241600">- Buildrequire libnsl-devel for suse_version &gt;= 1330: libnsl was
  split out of glibc and needs to be explcitly required if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241601">- BuildRequire tex(upquote.sty): Generally seen, this dependency
  is inaccurate, as our sources do not reference upquote.sty, but
  asciidoc does. Adding the dep there though makes asciidoc too
  expensive, and recommends are not interpreted when building the
  buildroot (boo#1063897).</changelog>
  <changelog author="sbrabec@suse.com" date="1512043200">- No more conflict with apcupsd (boo#1070373).
- Remove smartups references. It is dropped since 2001.</changelog>
  <changelog author="suse+build@de-korte.org" date="1512129600">- Add support for OpenSSL 1.1.0 library, allow TLSv1 and higher
  (not just TLSv1) and report TLS version used in debug mode level
  3 and higher (boo#1069988, openssl-1_1.patch)
- Fix missing pointer dereference in upssched (nut-upssched.patch)
- Support for allowfrom parameter was removed in version 2.4.0
  (nut-preconfig.patch)</changelog>
  <changelog author="suse+build@de-korte.org" date="1516536000">- Fix clash between Group and %define GROUP by renaming the latter
  to NUT_GROUP (and USER to NUT_USER)
- Replace duplicate man files by soft links</changelog>
  <changelog author="sbrabec@suse.com" date="1648728000">- Fix build within SLE15 SP4 and openSUSE Leap 15.4: BuildRequire
  many tex() packages and texlive-metafont-bin. Generally seen,
  this dependency is inaccurate, as our sources do not reference
  them but asciidoc does. Adding the dep there though makes
  asciidoc too expensive, and recommends are not interpreted when
  building the buildroot (bsc#1197789).</changelog>
</package>
<package pkgid="e558333139e617b727a097432b4008594a1db16bbaa686aa9803fe7973a5301c" name="nut" arch="src">
  <version epoch="0" ver="2.7.4" rel="150000.6.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1392379200">- Replace pm-utils support by systemd (FATE#316824).</changelog>
  <changelog author="ro@suse.de" date="1395921600">- explicitly require udev to fix buildenvironment issues</changelog>
  <changelog author="sbrabec@suse.cz" date="1396526400">- Replace powersave support by systemd (bnc#871406).</changelog>
  <changelog author="sbrabec@suse.cz" date="1402660800">- Fix Summary.</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
  <changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>
  <changelog author="alarrosa@suse.com" date="1503057600">- Add use-pkg-config-gdlib.diff to fix a build failure due to the
  configure scripts using gdlib-config (which is deprecated) to
  obtain the CFLAGS/LDFLAGS/LIBS to use when building with gd. With
  the patch, nut now uses pkg-config which returns the right values</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Drop the aspell dependency, it is only used for verification
  of the mans and it is more for devs to do than during the build
  wrt fate#323578</changelog>
  <changelog author="tchvatal@suse.com" date="1506945600">- Fix rpm groups
- Reduce the supported distros by keeping sle12+ only
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241600">- Buildrequire libnsl-devel for suse_version &gt;= 1330: libnsl was
  split out of glibc and needs to be explcitly required if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241601">- BuildRequire tex(upquote.sty): Generally seen, this dependency
  is inaccurate, as our sources do not reference upquote.sty, but
  asciidoc does. Adding the dep there though makes asciidoc too
  expensive, and recommends are not interpreted when building the
  buildroot (boo#1063897).</changelog>
  <changelog author="sbrabec@suse.com" date="1512043200">- No more conflict with apcupsd (boo#1070373).
- Remove smartups references. It is dropped since 2001.</changelog>
  <changelog author="suse+build@de-korte.org" date="1512129600">- Add support for OpenSSL 1.1.0 library, allow TLSv1 and higher
  (not just TLSv1) and report TLS version used in debug mode level
  3 and higher (boo#1069988, openssl-1_1.patch)
- Fix missing pointer dereference in upssched (nut-upssched.patch)
- Support for allowfrom parameter was removed in version 2.4.0
  (nut-preconfig.patch)</changelog>
  <changelog author="suse+build@de-korte.org" date="1516536000">- Fix clash between Group and %define GROUP by renaming the latter
  to NUT_GROUP (and USER to NUT_USER)
- Replace duplicate man files by soft links</changelog>
  <changelog author="sbrabec@suse.com" date="1648728000">- Fix build within SLE15 SP4 and openSUSE Leap 15.4: BuildRequire
  many tex() packages and texlive-metafont-bin. Generally seen,
  this dependency is inaccurate, as our sources do not reference
  them but asciidoc does. Adding the dep there though makes
  asciidoc too expensive, and recommends are not interpreted when
  building the buildroot (bsc#1197789).</changelog>
</package>
<package pkgid="43dd6520ffaea9875b0b031444b27dc878d0350cf10f833f0dfee0e66198efa2" name="nut" arch="x86_64">
  <version epoch="0" ver="2.7.4" rel="150000.6.3.1"/>
  <changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
  <changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>
  <changelog author="alarrosa@suse.com" date="1503057600">- Add use-pkg-config-gdlib.diff to fix a build failure due to the
  configure scripts using gdlib-config (which is deprecated) to
  obtain the CFLAGS/LDFLAGS/LIBS to use when building with gd. With
  the patch, nut now uses pkg-config which returns the right values</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Drop the aspell dependency, it is only used for verification
  of the mans and it is more for devs to do than during the build
  wrt fate#323578</changelog>
  <changelog author="tchvatal@suse.com" date="1506945600">- Fix rpm groups
- Reduce the supported distros by keeping sle12+ only
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241600">- Buildrequire libnsl-devel for suse_version &gt;= 1330: libnsl was
  split out of glibc and needs to be explcitly required if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241601">- BuildRequire tex(upquote.sty): Generally seen, this dependency
  is inaccurate, as our sources do not reference upquote.sty, but
  asciidoc does. Adding the dep there though makes asciidoc too
  expensive, and recommends are not interpreted when building the
  buildroot (boo#1063897).</changelog>
  <changelog author="sbrabec@suse.com" date="1512043200">- No more conflict with apcupsd (boo#1070373).
- Remove smartups references. It is dropped since 2001.</changelog>
  <changelog author="suse+build@de-korte.org" date="1512129600">- Add support for OpenSSL 1.1.0 library, allow TLSv1 and higher
  (not just TLSv1) and report TLS version used in debug mode level
  3 and higher (boo#1069988, openssl-1_1.patch)
- Fix missing pointer dereference in upssched (nut-upssched.patch)
- Support for allowfrom parameter was removed in version 2.4.0
  (nut-preconfig.patch)</changelog>
  <changelog author="suse+build@de-korte.org" date="1516536000">- Fix clash between Group and %define GROUP by renaming the latter
  to NUT_GROUP (and USER to NUT_USER)
- Replace duplicate man files by soft links</changelog>
  <changelog author="sbrabec@suse.com" date="1648728000">- Fix build within SLE15 SP4 and openSUSE Leap 15.4: BuildRequire
  many tex() packages and texlive-metafont-bin. Generally seen,
  this dependency is inaccurate, as our sources do not reference
  them but asciidoc does. Adding the dep there though makes
  asciidoc too expensive, and recommends are not interpreted when
  building the buildroot (bsc#1197789).</changelog>
</package>
<package pkgid="6a62e465a8477a81b0ff6967bc8fd19162e13f5f1b45d7cdbaa02a2320f2e01a" name="nut-cgi" arch="aarch64">
  <version epoch="0" ver="2.7.4" rel="150000.6.3.1"/>
  <changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
  <changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>
  <changelog author="alarrosa@suse.com" date="1503057600">- Add use-pkg-config-gdlib.diff to fix a build failure due to the
  configure scripts using gdlib-config (which is deprecated) to
  obtain the CFLAGS/LDFLAGS/LIBS to use when building with gd. With
  the patch, nut now uses pkg-config which returns the right values</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Drop the aspell dependency, it is only used for verification
  of the mans and it is more for devs to do than during the build
  wrt fate#323578</changelog>
  <changelog author="tchvatal@suse.com" date="1506945600">- Fix rpm groups
- Reduce the supported distros by keeping sle12+ only
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241600">- Buildrequire libnsl-devel for suse_version &gt;= 1330: libnsl was
  split out of glibc and needs to be explcitly required if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241601">- BuildRequire tex(upquote.sty): Generally seen, this dependency
  is inaccurate, as our sources do not reference upquote.sty, but
  asciidoc does. Adding the dep there though makes asciidoc too
  expensive, and recommends are not interpreted when building the
  buildroot (boo#1063897).</changelog>
  <changelog author="sbrabec@suse.com" date="1512043200">- No more conflict with apcupsd (boo#1070373).
- Remove smartups references. It is dropped since 2001.</changelog>
  <changelog author="suse+build@de-korte.org" date="1512129600">- Add support for OpenSSL 1.1.0 library, allow TLSv1 and higher
  (not just TLSv1) and report TLS version used in debug mode level
  3 and higher (boo#1069988, openssl-1_1.patch)
- Fix missing pointer dereference in upssched (nut-upssched.patch)
- Support for allowfrom parameter was removed in version 2.4.0
  (nut-preconfig.patch)</changelog>
  <changelog author="suse+build@de-korte.org" date="1516536000">- Fix clash between Group and %define GROUP by renaming the latter
  to NUT_GROUP (and USER to NUT_USER)
- Replace duplicate man files by soft links</changelog>
  <changelog author="sbrabec@suse.com" date="1648728000">- Fix build within SLE15 SP4 and openSUSE Leap 15.4: BuildRequire
  many tex() packages and texlive-metafont-bin. Generally seen,
  this dependency is inaccurate, as our sources do not reference
  them but asciidoc does. Adding the dep there though makes
  asciidoc too expensive, and recommends are not interpreted when
  building the buildroot (bsc#1197789).</changelog>
</package>
<package pkgid="6de0928e08bc4c4c8f1b52da3072c8ad1e0b1c49f913b62f417a51b32ff67e6d" name="nut-cgi" arch="ppc64le">
  <version epoch="0" ver="2.7.4" rel="150000.6.3.1"/>
  <changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
  <changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>
  <changelog author="alarrosa@suse.com" date="1503057600">- Add use-pkg-config-gdlib.diff to fix a build failure due to the
  configure scripts using gdlib-config (which is deprecated) to
  obtain the CFLAGS/LDFLAGS/LIBS to use when building with gd. With
  the patch, nut now uses pkg-config which returns the right values</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Drop the aspell dependency, it is only used for verification
  of the mans and it is more for devs to do than during the build
  wrt fate#323578</changelog>
  <changelog author="tchvatal@suse.com" date="1506945600">- Fix rpm groups
- Reduce the supported distros by keeping sle12+ only
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241600">- Buildrequire libnsl-devel for suse_version &gt;= 1330: libnsl was
  split out of glibc and needs to be explcitly required if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241601">- BuildRequire tex(upquote.sty): Generally seen, this dependency
  is inaccurate, as our sources do not reference upquote.sty, but
  asciidoc does. Adding the dep there though makes asciidoc too
  expensive, and recommends are not interpreted when building the
  buildroot (boo#1063897).</changelog>
  <changelog author="sbrabec@suse.com" date="1512043200">- No more conflict with apcupsd (boo#1070373).
- Remove smartups references. It is dropped since 2001.</changelog>
  <changelog author="suse+build@de-korte.org" date="1512129600">- Add support for OpenSSL 1.1.0 library, allow TLSv1 and higher
  (not just TLSv1) and report TLS version used in debug mode level
  3 and higher (boo#1069988, openssl-1_1.patch)
- Fix missing pointer dereference in upssched (nut-upssched.patch)
- Support for allowfrom parameter was removed in version 2.4.0
  (nut-preconfig.patch)</changelog>
  <changelog author="suse+build@de-korte.org" date="1516536000">- Fix clash between Group and %define GROUP by renaming the latter
  to NUT_GROUP (and USER to NUT_USER)
- Replace duplicate man files by soft links</changelog>
  <changelog author="sbrabec@suse.com" date="1648728000">- Fix build within SLE15 SP4 and openSUSE Leap 15.4: BuildRequire
  many tex() packages and texlive-metafont-bin. Generally seen,
  this dependency is inaccurate, as our sources do not reference
  them but asciidoc does. Adding the dep there though makes
  asciidoc too expensive, and recommends are not interpreted when
  building the buildroot (bsc#1197789).</changelog>
</package>
<package pkgid="65707a7288e2f5df183b71b7c5b88f954b8fbd8ae839dfb4686f521123e22584" name="nut-cgi" arch="s390x">
  <version epoch="0" ver="2.7.4" rel="150000.6.3.1"/>
  <changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
  <changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>
  <changelog author="alarrosa@suse.com" date="1503057600">- Add use-pkg-config-gdlib.diff to fix a build failure due to the
  configure scripts using gdlib-config (which is deprecated) to
  obtain the CFLAGS/LDFLAGS/LIBS to use when building with gd. With
  the patch, nut now uses pkg-config which returns the right values</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Drop the aspell dependency, it is only used for verification
  of the mans and it is more for devs to do than during the build
  wrt fate#323578</changelog>
  <changelog author="tchvatal@suse.com" date="1506945600">- Fix rpm groups
- Reduce the supported distros by keeping sle12+ only
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241600">- Buildrequire libnsl-devel for suse_version &gt;= 1330: libnsl was
  split out of glibc and needs to be explcitly required if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241601">- BuildRequire tex(upquote.sty): Generally seen, this dependency
  is inaccurate, as our sources do not reference upquote.sty, but
  asciidoc does. Adding the dep there though makes asciidoc too
  expensive, and recommends are not interpreted when building the
  buildroot (boo#1063897).</changelog>
  <changelog author="sbrabec@suse.com" date="1512043200">- No more conflict with apcupsd (boo#1070373).
- Remove smartups references. It is dropped since 2001.</changelog>
  <changelog author="suse+build@de-korte.org" date="1512129600">- Add support for OpenSSL 1.1.0 library, allow TLSv1 and higher
  (not just TLSv1) and report TLS version used in debug mode level
  3 and higher (boo#1069988, openssl-1_1.patch)
- Fix missing pointer dereference in upssched (nut-upssched.patch)
- Support for allowfrom parameter was removed in version 2.4.0
  (nut-preconfig.patch)</changelog>
  <changelog author="suse+build@de-korte.org" date="1516536000">- Fix clash between Group and %define GROUP by renaming the latter
  to NUT_GROUP (and USER to NUT_USER)
- Replace duplicate man files by soft links</changelog>
  <changelog author="sbrabec@suse.com" date="1648728000">- Fix build within SLE15 SP4 and openSUSE Leap 15.4: BuildRequire
  many tex() packages and texlive-metafont-bin. Generally seen,
  this dependency is inaccurate, as our sources do not reference
  them but asciidoc does. Adding the dep there though makes
  asciidoc too expensive, and recommends are not interpreted when
  building the buildroot (bsc#1197789).</changelog>
</package>
<package pkgid="055d7a5e32a1f47787b757b7b8686891d401a4cb6b7d500d2a42306f06006d33" name="nut-cgi" arch="x86_64">
  <version epoch="0" ver="2.7.4" rel="150000.6.3.1"/>
  <changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
  <changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>
  <changelog author="alarrosa@suse.com" date="1503057600">- Add use-pkg-config-gdlib.diff to fix a build failure due to the
  configure scripts using gdlib-config (which is deprecated) to
  obtain the CFLAGS/LDFLAGS/LIBS to use when building with gd. With
  the patch, nut now uses pkg-config which returns the right values</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Drop the aspell dependency, it is only used for verification
  of the mans and it is more for devs to do than during the build
  wrt fate#323578</changelog>
  <changelog author="tchvatal@suse.com" date="1506945600">- Fix rpm groups
- Reduce the supported distros by keeping sle12+ only
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241600">- Buildrequire libnsl-devel for suse_version &gt;= 1330: libnsl was
  split out of glibc and needs to be explcitly required if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241601">- BuildRequire tex(upquote.sty): Generally seen, this dependency
  is inaccurate, as our sources do not reference upquote.sty, but
  asciidoc does. Adding the dep there though makes asciidoc too
  expensive, and recommends are not interpreted when building the
  buildroot (boo#1063897).</changelog>
  <changelog author="sbrabec@suse.com" date="1512043200">- No more conflict with apcupsd (boo#1070373).
- Remove smartups references. It is dropped since 2001.</changelog>
  <changelog author="suse+build@de-korte.org" date="1512129600">- Add support for OpenSSL 1.1.0 library, allow TLSv1 and higher
  (not just TLSv1) and report TLS version used in debug mode level
  3 and higher (boo#1069988, openssl-1_1.patch)
- Fix missing pointer dereference in upssched (nut-upssched.patch)
- Support for allowfrom parameter was removed in version 2.4.0
  (nut-preconfig.patch)</changelog>
  <changelog author="suse+build@de-korte.org" date="1516536000">- Fix clash between Group and %define GROUP by renaming the latter
  to NUT_GROUP (and USER to NUT_USER)
- Replace duplicate man files by soft links</changelog>
  <changelog author="sbrabec@suse.com" date="1648728000">- Fix build within SLE15 SP4 and openSUSE Leap 15.4: BuildRequire
  many tex() packages and texlive-metafont-bin. Generally seen,
  this dependency is inaccurate, as our sources do not reference
  them but asciidoc does. Adding the dep there though makes
  asciidoc too expensive, and recommends are not interpreted when
  building the buildroot (bsc#1197789).</changelog>
</package>
<package pkgid="c0c425124d98957fd0a72be25b07fa0d7322ad9b9326e36dfa7d2e9f1fcb0682" name="nut-devel" arch="aarch64">
  <version epoch="0" ver="2.7.4" rel="150000.6.3.1"/>
  <changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
  <changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>
  <changelog author="alarrosa@suse.com" date="1503057600">- Add use-pkg-config-gdlib.diff to fix a build failure due to the
  configure scripts using gdlib-config (which is deprecated) to
  obtain the CFLAGS/LDFLAGS/LIBS to use when building with gd. With
  the patch, nut now uses pkg-config which returns the right values</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Drop the aspell dependency, it is only used for verification
  of the mans and it is more for devs to do than during the build
  wrt fate#323578</changelog>
  <changelog author="tchvatal@suse.com" date="1506945600">- Fix rpm groups
- Reduce the supported distros by keeping sle12+ only
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241600">- Buildrequire libnsl-devel for suse_version &gt;= 1330: libnsl was
  split out of glibc and needs to be explcitly required if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241601">- BuildRequire tex(upquote.sty): Generally seen, this dependency
  is inaccurate, as our sources do not reference upquote.sty, but
  asciidoc does. Adding the dep there though makes asciidoc too
  expensive, and recommends are not interpreted when building the
  buildroot (boo#1063897).</changelog>
  <changelog author="sbrabec@suse.com" date="1512043200">- No more conflict with apcupsd (boo#1070373).
- Remove smartups references. It is dropped since 2001.</changelog>
  <changelog author="suse+build@de-korte.org" date="1512129600">- Add support for OpenSSL 1.1.0 library, allow TLSv1 and higher
  (not just TLSv1) and report TLS version used in debug mode level
  3 and higher (boo#1069988, openssl-1_1.patch)
- Fix missing pointer dereference in upssched (nut-upssched.patch)
- Support for allowfrom parameter was removed in version 2.4.0
  (nut-preconfig.patch)</changelog>
  <changelog author="suse+build@de-korte.org" date="1516536000">- Fix clash between Group and %define GROUP by renaming the latter
  to NUT_GROUP (and USER to NUT_USER)
- Replace duplicate man files by soft links</changelog>
  <changelog author="sbrabec@suse.com" date="1648728000">- Fix build within SLE15 SP4 and openSUSE Leap 15.4: BuildRequire
  many tex() packages and texlive-metafont-bin. Generally seen,
  this dependency is inaccurate, as our sources do not reference
  them but asciidoc does. Adding the dep there though makes
  asciidoc too expensive, and recommends are not interpreted when
  building the buildroot (bsc#1197789).</changelog>
</package>
<package pkgid="6655e925c8a4b2d000b3a57bfcdee8e6a857b3d47543502cf22b5cead4f45c75" name="nut-devel" arch="ppc64le">
  <version epoch="0" ver="2.7.4" rel="150000.6.3.1"/>
  <changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
  <changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>
  <changelog author="alarrosa@suse.com" date="1503057600">- Add use-pkg-config-gdlib.diff to fix a build failure due to the
  configure scripts using gdlib-config (which is deprecated) to
  obtain the CFLAGS/LDFLAGS/LIBS to use when building with gd. With
  the patch, nut now uses pkg-config which returns the right values</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Drop the aspell dependency, it is only used for verification
  of the mans and it is more for devs to do than during the build
  wrt fate#323578</changelog>
  <changelog author="tchvatal@suse.com" date="1506945600">- Fix rpm groups
- Reduce the supported distros by keeping sle12+ only
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241600">- Buildrequire libnsl-devel for suse_version &gt;= 1330: libnsl was
  split out of glibc and needs to be explcitly required if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241601">- BuildRequire tex(upquote.sty): Generally seen, this dependency
  is inaccurate, as our sources do not reference upquote.sty, but
  asciidoc does. Adding the dep there though makes asciidoc too
  expensive, and recommends are not interpreted when building the
  buildroot (boo#1063897).</changelog>
  <changelog author="sbrabec@suse.com" date="1512043200">- No more conflict with apcupsd (boo#1070373).
- Remove smartups references. It is dropped since 2001.</changelog>
  <changelog author="suse+build@de-korte.org" date="1512129600">- Add support for OpenSSL 1.1.0 library, allow TLSv1 and higher
  (not just TLSv1) and report TLS version used in debug mode level
  3 and higher (boo#1069988, openssl-1_1.patch)
- Fix missing pointer dereference in upssched (nut-upssched.patch)
- Support for allowfrom parameter was removed in version 2.4.0
  (nut-preconfig.patch)</changelog>
  <changelog author="suse+build@de-korte.org" date="1516536000">- Fix clash between Group and %define GROUP by renaming the latter
  to NUT_GROUP (and USER to NUT_USER)
- Replace duplicate man files by soft links</changelog>
  <changelog author="sbrabec@suse.com" date="1648728000">- Fix build within SLE15 SP4 and openSUSE Leap 15.4: BuildRequire
  many tex() packages and texlive-metafont-bin. Generally seen,
  this dependency is inaccurate, as our sources do not reference
  them but asciidoc does. Adding the dep there though makes
  asciidoc too expensive, and recommends are not interpreted when
  building the buildroot (bsc#1197789).</changelog>
</package>
<package pkgid="5342c0cae0f179c08509bcb294769a3318212e85761711094873af933ecaa031" name="nut-devel" arch="s390x">
  <version epoch="0" ver="2.7.4" rel="150000.6.3.1"/>
  <changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
  <changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>
  <changelog author="alarrosa@suse.com" date="1503057600">- Add use-pkg-config-gdlib.diff to fix a build failure due to the
  configure scripts using gdlib-config (which is deprecated) to
  obtain the CFLAGS/LDFLAGS/LIBS to use when building with gd. With
  the patch, nut now uses pkg-config which returns the right values</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Drop the aspell dependency, it is only used for verification
  of the mans and it is more for devs to do than during the build
  wrt fate#323578</changelog>
  <changelog author="tchvatal@suse.com" date="1506945600">- Fix rpm groups
- Reduce the supported distros by keeping sle12+ only
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241600">- Buildrequire libnsl-devel for suse_version &gt;= 1330: libnsl was
  split out of glibc and needs to be explcitly required if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241601">- BuildRequire tex(upquote.sty): Generally seen, this dependency
  is inaccurate, as our sources do not reference upquote.sty, but
  asciidoc does. Adding the dep there though makes asciidoc too
  expensive, and recommends are not interpreted when building the
  buildroot (boo#1063897).</changelog>
  <changelog author="sbrabec@suse.com" date="1512043200">- No more conflict with apcupsd (boo#1070373).
- Remove smartups references. It is dropped since 2001.</changelog>
  <changelog author="suse+build@de-korte.org" date="1512129600">- Add support for OpenSSL 1.1.0 library, allow TLSv1 and higher
  (not just TLSv1) and report TLS version used in debug mode level
  3 and higher (boo#1069988, openssl-1_1.patch)
- Fix missing pointer dereference in upssched (nut-upssched.patch)
- Support for allowfrom parameter was removed in version 2.4.0
  (nut-preconfig.patch)</changelog>
  <changelog author="suse+build@de-korte.org" date="1516536000">- Fix clash between Group and %define GROUP by renaming the latter
  to NUT_GROUP (and USER to NUT_USER)
- Replace duplicate man files by soft links</changelog>
  <changelog author="sbrabec@suse.com" date="1648728000">- Fix build within SLE15 SP4 and openSUSE Leap 15.4: BuildRequire
  many tex() packages and texlive-metafont-bin. Generally seen,
  this dependency is inaccurate, as our sources do not reference
  them but asciidoc does. Adding the dep there though makes
  asciidoc too expensive, and recommends are not interpreted when
  building the buildroot (bsc#1197789).</changelog>
</package>
<package pkgid="0605f45c99f369b859e8cd6e548fb732fbe70efd8e28521d5f96b640938e6113" name="nut-devel" arch="x86_64">
  <version epoch="0" ver="2.7.4" rel="150000.6.3.1"/>
  <changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
  <changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>
  <changelog author="alarrosa@suse.com" date="1503057600">- Add use-pkg-config-gdlib.diff to fix a build failure due to the
  configure scripts using gdlib-config (which is deprecated) to
  obtain the CFLAGS/LDFLAGS/LIBS to use when building with gd. With
  the patch, nut now uses pkg-config which returns the right values</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Drop the aspell dependency, it is only used for verification
  of the mans and it is more for devs to do than during the build
  wrt fate#323578</changelog>
  <changelog author="tchvatal@suse.com" date="1506945600">- Fix rpm groups
- Reduce the supported distros by keeping sle12+ only
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241600">- Buildrequire libnsl-devel for suse_version &gt;= 1330: libnsl was
  split out of glibc and needs to be explcitly required if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241601">- BuildRequire tex(upquote.sty): Generally seen, this dependency
  is inaccurate, as our sources do not reference upquote.sty, but
  asciidoc does. Adding the dep there though makes asciidoc too
  expensive, and recommends are not interpreted when building the
  buildroot (boo#1063897).</changelog>
  <changelog author="sbrabec@suse.com" date="1512043200">- No more conflict with apcupsd (boo#1070373).
- Remove smartups references. It is dropped since 2001.</changelog>
  <changelog author="suse+build@de-korte.org" date="1512129600">- Add support for OpenSSL 1.1.0 library, allow TLSv1 and higher
  (not just TLSv1) and report TLS version used in debug mode level
  3 and higher (boo#1069988, openssl-1_1.patch)
- Fix missing pointer dereference in upssched (nut-upssched.patch)
- Support for allowfrom parameter was removed in version 2.4.0
  (nut-preconfig.patch)</changelog>
  <changelog author="suse+build@de-korte.org" date="1516536000">- Fix clash between Group and %define GROUP by renaming the latter
  to NUT_GROUP (and USER to NUT_USER)
- Replace duplicate man files by soft links</changelog>
  <changelog author="sbrabec@suse.com" date="1648728000">- Fix build within SLE15 SP4 and openSUSE Leap 15.4: BuildRequire
  many tex() packages and texlive-metafont-bin. Generally seen,
  this dependency is inaccurate, as our sources do not reference
  them but asciidoc does. Adding the dep there though makes
  asciidoc too expensive, and recommends are not interpreted when
  building the buildroot (bsc#1197789).</changelog>
</package>
<package pkgid="39580e1b7b7fa23e381e6c732c7561ee90fa32737fcb40897bf47a2e50a38f22" name="nut-devel-doc-html" arch="noarch">
  <version epoch="0" ver="2.7.4" rel="150000.6.3.1"/>
  <changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
  <changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>
  <changelog author="alarrosa@suse.com" date="1503057600">- Add use-pkg-config-gdlib.diff to fix a build failure due to the
  configure scripts using gdlib-config (which is deprecated) to
  obtain the CFLAGS/LDFLAGS/LIBS to use when building with gd. With
  the patch, nut now uses pkg-config which returns the right values</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Drop the aspell dependency, it is only used for verification
  of the mans and it is more for devs to do than during the build
  wrt fate#323578</changelog>
  <changelog author="tchvatal@suse.com" date="1506945600">- Fix rpm groups
- Reduce the supported distros by keeping sle12+ only
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241600">- Buildrequire libnsl-devel for suse_version &gt;= 1330: libnsl was
  split out of glibc and needs to be explcitly required if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241601">- BuildRequire tex(upquote.sty): Generally seen, this dependency
  is inaccurate, as our sources do not reference upquote.sty, but
  asciidoc does. Adding the dep there though makes asciidoc too
  expensive, and recommends are not interpreted when building the
  buildroot (boo#1063897).</changelog>
  <changelog author="sbrabec@suse.com" date="1512043200">- No more conflict with apcupsd (boo#1070373).
- Remove smartups references. It is dropped since 2001.</changelog>
  <changelog author="suse+build@de-korte.org" date="1512129600">- Add support for OpenSSL 1.1.0 library, allow TLSv1 and higher
  (not just TLSv1) and report TLS version used in debug mode level
  3 and higher (boo#1069988, openssl-1_1.patch)
- Fix missing pointer dereference in upssched (nut-upssched.patch)
- Support for allowfrom parameter was removed in version 2.4.0
  (nut-preconfig.patch)</changelog>
  <changelog author="suse+build@de-korte.org" date="1516536000">- Fix clash between Group and %define GROUP by renaming the latter
  to NUT_GROUP (and USER to NUT_USER)
- Replace duplicate man files by soft links</changelog>
  <changelog author="sbrabec@suse.com" date="1648728000">- Fix build within SLE15 SP4 and openSUSE Leap 15.4: BuildRequire
  many tex() packages and texlive-metafont-bin. Generally seen,
  this dependency is inaccurate, as our sources do not reference
  them but asciidoc does. Adding the dep there though makes
  asciidoc too expensive, and recommends are not interpreted when
  building the buildroot (bsc#1197789).</changelog>
</package>
<package pkgid="f8a17ff6a7867fcae9d4e72c615ed5fd45fb14e5eccf46aeabe37e06c51f617b" name="nut-devel-doc-pdf" arch="noarch">
  <version epoch="0" ver="2.7.4" rel="150000.6.3.1"/>
  <changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
  <changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>
  <changelog author="alarrosa@suse.com" date="1503057600">- Add use-pkg-config-gdlib.diff to fix a build failure due to the
  configure scripts using gdlib-config (which is deprecated) to
  obtain the CFLAGS/LDFLAGS/LIBS to use when building with gd. With
  the patch, nut now uses pkg-config which returns the right values</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Drop the aspell dependency, it is only used for verification
  of the mans and it is more for devs to do than during the build
  wrt fate#323578</changelog>
  <changelog author="tchvatal@suse.com" date="1506945600">- Fix rpm groups
- Reduce the supported distros by keeping sle12+ only
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241600">- Buildrequire libnsl-devel for suse_version &gt;= 1330: libnsl was
  split out of glibc and needs to be explcitly required if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241601">- BuildRequire tex(upquote.sty): Generally seen, this dependency
  is inaccurate, as our sources do not reference upquote.sty, but
  asciidoc does. Adding the dep there though makes asciidoc too
  expensive, and recommends are not interpreted when building the
  buildroot (boo#1063897).</changelog>
  <changelog author="sbrabec@suse.com" date="1512043200">- No more conflict with apcupsd (boo#1070373).
- Remove smartups references. It is dropped since 2001.</changelog>
  <changelog author="suse+build@de-korte.org" date="1512129600">- Add support for OpenSSL 1.1.0 library, allow TLSv1 and higher
  (not just TLSv1) and report TLS version used in debug mode level
  3 and higher (boo#1069988, openssl-1_1.patch)
- Fix missing pointer dereference in upssched (nut-upssched.patch)
- Support for allowfrom parameter was removed in version 2.4.0
  (nut-preconfig.patch)</changelog>
  <changelog author="suse+build@de-korte.org" date="1516536000">- Fix clash between Group and %define GROUP by renaming the latter
  to NUT_GROUP (and USER to NUT_USER)
- Replace duplicate man files by soft links</changelog>
  <changelog author="sbrabec@suse.com" date="1648728000">- Fix build within SLE15 SP4 and openSUSE Leap 15.4: BuildRequire
  many tex() packages and texlive-metafont-bin. Generally seen,
  this dependency is inaccurate, as our sources do not reference
  them but asciidoc does. Adding the dep there though makes
  asciidoc too expensive, and recommends are not interpreted when
  building the buildroot (bsc#1197789).</changelog>
</package>
<package pkgid="575d1d1d9cf54ec8d85026a0b267a2e3dfa596881b98b508ce4f81548c4e8085" name="nut-doc-asciidoc" arch="noarch">
  <version epoch="0" ver="2.7.4" rel="150000.6.3.1"/>
  <changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
  <changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>
  <changelog author="alarrosa@suse.com" date="1503057600">- Add use-pkg-config-gdlib.diff to fix a build failure due to the
  configure scripts using gdlib-config (which is deprecated) to
  obtain the CFLAGS/LDFLAGS/LIBS to use when building with gd. With
  the patch, nut now uses pkg-config which returns the right values</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Drop the aspell dependency, it is only used for verification
  of the mans and it is more for devs to do than during the build
  wrt fate#323578</changelog>
  <changelog author="tchvatal@suse.com" date="1506945600">- Fix rpm groups
- Reduce the supported distros by keeping sle12+ only
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241600">- Buildrequire libnsl-devel for suse_version &gt;= 1330: libnsl was
  split out of glibc and needs to be explcitly required if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241601">- BuildRequire tex(upquote.sty): Generally seen, this dependency
  is inaccurate, as our sources do not reference upquote.sty, but
  asciidoc does. Adding the dep there though makes asciidoc too
  expensive, and recommends are not interpreted when building the
  buildroot (boo#1063897).</changelog>
  <changelog author="sbrabec@suse.com" date="1512043200">- No more conflict with apcupsd (boo#1070373).
- Remove smartups references. It is dropped since 2001.</changelog>
  <changelog author="suse+build@de-korte.org" date="1512129600">- Add support for OpenSSL 1.1.0 library, allow TLSv1 and higher
  (not just TLSv1) and report TLS version used in debug mode level
  3 and higher (boo#1069988, openssl-1_1.patch)
- Fix missing pointer dereference in upssched (nut-upssched.patch)
- Support for allowfrom parameter was removed in version 2.4.0
  (nut-preconfig.patch)</changelog>
  <changelog author="suse+build@de-korte.org" date="1516536000">- Fix clash between Group and %define GROUP by renaming the latter
  to NUT_GROUP (and USER to NUT_USER)
- Replace duplicate man files by soft links</changelog>
  <changelog author="sbrabec@suse.com" date="1648728000">- Fix build within SLE15 SP4 and openSUSE Leap 15.4: BuildRequire
  many tex() packages and texlive-metafont-bin. Generally seen,
  this dependency is inaccurate, as our sources do not reference
  them but asciidoc does. Adding the dep there though makes
  asciidoc too expensive, and recommends are not interpreted when
  building the buildroot (bsc#1197789).</changelog>
</package>
<package pkgid="8f7b3509afe9e0624f30c61ea4f6c5f99f2722a0c712d81af67ea73330ee7610" name="nut-doc-html" arch="noarch">
  <version epoch="0" ver="2.7.4" rel="150000.6.3.1"/>
  <changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
  <changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>
  <changelog author="alarrosa@suse.com" date="1503057600">- Add use-pkg-config-gdlib.diff to fix a build failure due to the
  configure scripts using gdlib-config (which is deprecated) to
  obtain the CFLAGS/LDFLAGS/LIBS to use when building with gd. With
  the patch, nut now uses pkg-config which returns the right values</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Drop the aspell dependency, it is only used for verification
  of the mans and it is more for devs to do than during the build
  wrt fate#323578</changelog>
  <changelog author="tchvatal@suse.com" date="1506945600">- Fix rpm groups
- Reduce the supported distros by keeping sle12+ only
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241600">- Buildrequire libnsl-devel for suse_version &gt;= 1330: libnsl was
  split out of glibc and needs to be explcitly required if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241601">- BuildRequire tex(upquote.sty): Generally seen, this dependency
  is inaccurate, as our sources do not reference upquote.sty, but
  asciidoc does. Adding the dep there though makes asciidoc too
  expensive, and recommends are not interpreted when building the
  buildroot (boo#1063897).</changelog>
  <changelog author="sbrabec@suse.com" date="1512043200">- No more conflict with apcupsd (boo#1070373).
- Remove smartups references. It is dropped since 2001.</changelog>
  <changelog author="suse+build@de-korte.org" date="1512129600">- Add support for OpenSSL 1.1.0 library, allow TLSv1 and higher
  (not just TLSv1) and report TLS version used in debug mode level
  3 and higher (boo#1069988, openssl-1_1.patch)
- Fix missing pointer dereference in upssched (nut-upssched.patch)
- Support for allowfrom parameter was removed in version 2.4.0
  (nut-preconfig.patch)</changelog>
  <changelog author="suse+build@de-korte.org" date="1516536000">- Fix clash between Group and %define GROUP by renaming the latter
  to NUT_GROUP (and USER to NUT_USER)
- Replace duplicate man files by soft links</changelog>
  <changelog author="sbrabec@suse.com" date="1648728000">- Fix build within SLE15 SP4 and openSUSE Leap 15.4: BuildRequire
  many tex() packages and texlive-metafont-bin. Generally seen,
  this dependency is inaccurate, as our sources do not reference
  them but asciidoc does. Adding the dep there though makes
  asciidoc too expensive, and recommends are not interpreted when
  building the buildroot (bsc#1197789).</changelog>
</package>
<package pkgid="5a7079017015b2ab5533b0a8fe11b02d2eb5e68ab247c9b695f978ca45a319a8" name="nut-doc-images" arch="noarch">
  <version epoch="0" ver="2.7.4" rel="150000.6.3.1"/>
  <changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
  <changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>
  <changelog author="alarrosa@suse.com" date="1503057600">- Add use-pkg-config-gdlib.diff to fix a build failure due to the
  configure scripts using gdlib-config (which is deprecated) to
  obtain the CFLAGS/LDFLAGS/LIBS to use when building with gd. With
  the patch, nut now uses pkg-config which returns the right values</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Drop the aspell dependency, it is only used for verification
  of the mans and it is more for devs to do than during the build
  wrt fate#323578</changelog>
  <changelog author="tchvatal@suse.com" date="1506945600">- Fix rpm groups
- Reduce the supported distros by keeping sle12+ only
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241600">- Buildrequire libnsl-devel for suse_version &gt;= 1330: libnsl was
  split out of glibc and needs to be explcitly required if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241601">- BuildRequire tex(upquote.sty): Generally seen, this dependency
  is inaccurate, as our sources do not reference upquote.sty, but
  asciidoc does. Adding the dep there though makes asciidoc too
  expensive, and recommends are not interpreted when building the
  buildroot (boo#1063897).</changelog>
  <changelog author="sbrabec@suse.com" date="1512043200">- No more conflict with apcupsd (boo#1070373).
- Remove smartups references. It is dropped since 2001.</changelog>
  <changelog author="suse+build@de-korte.org" date="1512129600">- Add support for OpenSSL 1.1.0 library, allow TLSv1 and higher
  (not just TLSv1) and report TLS version used in debug mode level
  3 and higher (boo#1069988, openssl-1_1.patch)
- Fix missing pointer dereference in upssched (nut-upssched.patch)
- Support for allowfrom parameter was removed in version 2.4.0
  (nut-preconfig.patch)</changelog>
  <changelog author="suse+build@de-korte.org" date="1516536000">- Fix clash between Group and %define GROUP by renaming the latter
  to NUT_GROUP (and USER to NUT_USER)
- Replace duplicate man files by soft links</changelog>
  <changelog author="sbrabec@suse.com" date="1648728000">- Fix build within SLE15 SP4 and openSUSE Leap 15.4: BuildRequire
  many tex() packages and texlive-metafont-bin. Generally seen,
  this dependency is inaccurate, as our sources do not reference
  them but asciidoc does. Adding the dep there though makes
  asciidoc too expensive, and recommends are not interpreted when
  building the buildroot (bsc#1197789).</changelog>
</package>
<package pkgid="6aaf6947f25e70a5f21c17f82d805d39db873bdd4239fbeab217d607b7322877" name="nut-doc-pdf" arch="noarch">
  <version epoch="0" ver="2.7.4" rel="150000.6.3.1"/>
  <changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
  <changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>
  <changelog author="alarrosa@suse.com" date="1503057600">- Add use-pkg-config-gdlib.diff to fix a build failure due to the
  configure scripts using gdlib-config (which is deprecated) to
  obtain the CFLAGS/LDFLAGS/LIBS to use when building with gd. With
  the patch, nut now uses pkg-config which returns the right values</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Drop the aspell dependency, it is only used for verification
  of the mans and it is more for devs to do than during the build
  wrt fate#323578</changelog>
  <changelog author="tchvatal@suse.com" date="1506945600">- Fix rpm groups
- Reduce the supported distros by keeping sle12+ only
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241600">- Buildrequire libnsl-devel for suse_version &gt;= 1330: libnsl was
  split out of glibc and needs to be explcitly required if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241601">- BuildRequire tex(upquote.sty): Generally seen, this dependency
  is inaccurate, as our sources do not reference upquote.sty, but
  asciidoc does. Adding the dep there though makes asciidoc too
  expensive, and recommends are not interpreted when building the
  buildroot (boo#1063897).</changelog>
  <changelog author="sbrabec@suse.com" date="1512043200">- No more conflict with apcupsd (boo#1070373).
- Remove smartups references. It is dropped since 2001.</changelog>
  <changelog author="suse+build@de-korte.org" date="1512129600">- Add support for OpenSSL 1.1.0 library, allow TLSv1 and higher
  (not just TLSv1) and report TLS version used in debug mode level
  3 and higher (boo#1069988, openssl-1_1.patch)
- Fix missing pointer dereference in upssched (nut-upssched.patch)
- Support for allowfrom parameter was removed in version 2.4.0
  (nut-preconfig.patch)</changelog>
  <changelog author="suse+build@de-korte.org" date="1516536000">- Fix clash between Group and %define GROUP by renaming the latter
  to NUT_GROUP (and USER to NUT_USER)
- Replace duplicate man files by soft links</changelog>
  <changelog author="sbrabec@suse.com" date="1648728000">- Fix build within SLE15 SP4 and openSUSE Leap 15.4: BuildRequire
  many tex() packages and texlive-metafont-bin. Generally seen,
  this dependency is inaccurate, as our sources do not reference
  them but asciidoc does. Adding the dep there though makes
  asciidoc too expensive, and recommends are not interpreted when
  building the buildroot (bsc#1197789).</changelog>
</package>
<package pkgid="b94996af31ea38a0976768600261888a5523d7677d5de2b3536e3be728211e2f" name="nut-drivers-net" arch="aarch64">
  <version epoch="0" ver="2.7.4" rel="150000.6.3.1"/>
  <changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
  <changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>
  <changelog author="alarrosa@suse.com" date="1503057600">- Add use-pkg-config-gdlib.diff to fix a build failure due to the
  configure scripts using gdlib-config (which is deprecated) to
  obtain the CFLAGS/LDFLAGS/LIBS to use when building with gd. With
  the patch, nut now uses pkg-config which returns the right values</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Drop the aspell dependency, it is only used for verification
  of the mans and it is more for devs to do than during the build
  wrt fate#323578</changelog>
  <changelog author="tchvatal@suse.com" date="1506945600">- Fix rpm groups
- Reduce the supported distros by keeping sle12+ only
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241600">- Buildrequire libnsl-devel for suse_version &gt;= 1330: libnsl was
  split out of glibc and needs to be explcitly required if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241601">- BuildRequire tex(upquote.sty): Generally seen, this dependency
  is inaccurate, as our sources do not reference upquote.sty, but
  asciidoc does. Adding the dep there though makes asciidoc too
  expensive, and recommends are not interpreted when building the
  buildroot (boo#1063897).</changelog>
  <changelog author="sbrabec@suse.com" date="1512043200">- No more conflict with apcupsd (boo#1070373).
- Remove smartups references. It is dropped since 2001.</changelog>
  <changelog author="suse+build@de-korte.org" date="1512129600">- Add support for OpenSSL 1.1.0 library, allow TLSv1 and higher
  (not just TLSv1) and report TLS version used in debug mode level
  3 and higher (boo#1069988, openssl-1_1.patch)
- Fix missing pointer dereference in upssched (nut-upssched.patch)
- Support for allowfrom parameter was removed in version 2.4.0
  (nut-preconfig.patch)</changelog>
  <changelog author="suse+build@de-korte.org" date="1516536000">- Fix clash between Group and %define GROUP by renaming the latter
  to NUT_GROUP (and USER to NUT_USER)
- Replace duplicate man files by soft links</changelog>
  <changelog author="sbrabec@suse.com" date="1648728000">- Fix build within SLE15 SP4 and openSUSE Leap 15.4: BuildRequire
  many tex() packages and texlive-metafont-bin. Generally seen,
  this dependency is inaccurate, as our sources do not reference
  them but asciidoc does. Adding the dep there though makes
  asciidoc too expensive, and recommends are not interpreted when
  building the buildroot (bsc#1197789).</changelog>
</package>
<package pkgid="8cc28398960e4c1795c5377b5849a01462a0670edb34885e60bdaac57a4aabbc" name="nut-drivers-net" arch="ppc64le">
  <version epoch="0" ver="2.7.4" rel="150000.6.3.1"/>
  <changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
  <changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>
  <changelog author="alarrosa@suse.com" date="1503057600">- Add use-pkg-config-gdlib.diff to fix a build failure due to the
  configure scripts using gdlib-config (which is deprecated) to
  obtain the CFLAGS/LDFLAGS/LIBS to use when building with gd. With
  the patch, nut now uses pkg-config which returns the right values</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Drop the aspell dependency, it is only used for verification
  of the mans and it is more for devs to do than during the build
  wrt fate#323578</changelog>
  <changelog author="tchvatal@suse.com" date="1506945600">- Fix rpm groups
- Reduce the supported distros by keeping sle12+ only
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241600">- Buildrequire libnsl-devel for suse_version &gt;= 1330: libnsl was
  split out of glibc and needs to be explcitly required if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241601">- BuildRequire tex(upquote.sty): Generally seen, this dependency
  is inaccurate, as our sources do not reference upquote.sty, but
  asciidoc does. Adding the dep there though makes asciidoc too
  expensive, and recommends are not interpreted when building the
  buildroot (boo#1063897).</changelog>
  <changelog author="sbrabec@suse.com" date="1512043200">- No more conflict with apcupsd (boo#1070373).
- Remove smartups references. It is dropped since 2001.</changelog>
  <changelog author="suse+build@de-korte.org" date="1512129600">- Add support for OpenSSL 1.1.0 library, allow TLSv1 and higher
  (not just TLSv1) and report TLS version used in debug mode level
  3 and higher (boo#1069988, openssl-1_1.patch)
- Fix missing pointer dereference in upssched (nut-upssched.patch)
- Support for allowfrom parameter was removed in version 2.4.0
  (nut-preconfig.patch)</changelog>
  <changelog author="suse+build@de-korte.org" date="1516536000">- Fix clash between Group and %define GROUP by renaming the latter
  to NUT_GROUP (and USER to NUT_USER)
- Replace duplicate man files by soft links</changelog>
  <changelog author="sbrabec@suse.com" date="1648728000">- Fix build within SLE15 SP4 and openSUSE Leap 15.4: BuildRequire
  many tex() packages and texlive-metafont-bin. Generally seen,
  this dependency is inaccurate, as our sources do not reference
  them but asciidoc does. Adding the dep there though makes
  asciidoc too expensive, and recommends are not interpreted when
  building the buildroot (bsc#1197789).</changelog>
</package>
<package pkgid="812328996bc64b4d50f9e4f6ae0089f36abce16b2b1c4ae24dda6b9706016243" name="nut-drivers-net" arch="s390x">
  <version epoch="0" ver="2.7.4" rel="150000.6.3.1"/>
  <changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
  <changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>
  <changelog author="alarrosa@suse.com" date="1503057600">- Add use-pkg-config-gdlib.diff to fix a build failure due to the
  configure scripts using gdlib-config (which is deprecated) to
  obtain the CFLAGS/LDFLAGS/LIBS to use when building with gd. With
  the patch, nut now uses pkg-config which returns the right values</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Drop the aspell dependency, it is only used for verification
  of the mans and it is more for devs to do than during the build
  wrt fate#323578</changelog>
  <changelog author="tchvatal@suse.com" date="1506945600">- Fix rpm groups
- Reduce the supported distros by keeping sle12+ only
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241600">- Buildrequire libnsl-devel for suse_version &gt;= 1330: libnsl was
  split out of glibc and needs to be explcitly required if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241601">- BuildRequire tex(upquote.sty): Generally seen, this dependency
  is inaccurate, as our sources do not reference upquote.sty, but
  asciidoc does. Adding the dep there though makes asciidoc too
  expensive, and recommends are not interpreted when building the
  buildroot (boo#1063897).</changelog>
  <changelog author="sbrabec@suse.com" date="1512043200">- No more conflict with apcupsd (boo#1070373).
- Remove smartups references. It is dropped since 2001.</changelog>
  <changelog author="suse+build@de-korte.org" date="1512129600">- Add support for OpenSSL 1.1.0 library, allow TLSv1 and higher
  (not just TLSv1) and report TLS version used in debug mode level
  3 and higher (boo#1069988, openssl-1_1.patch)
- Fix missing pointer dereference in upssched (nut-upssched.patch)
- Support for allowfrom parameter was removed in version 2.4.0
  (nut-preconfig.patch)</changelog>
  <changelog author="suse+build@de-korte.org" date="1516536000">- Fix clash between Group and %define GROUP by renaming the latter
  to NUT_GROUP (and USER to NUT_USER)
- Replace duplicate man files by soft links</changelog>
  <changelog author="sbrabec@suse.com" date="1648728000">- Fix build within SLE15 SP4 and openSUSE Leap 15.4: BuildRequire
  many tex() packages and texlive-metafont-bin. Generally seen,
  this dependency is inaccurate, as our sources do not reference
  them but asciidoc does. Adding the dep there though makes
  asciidoc too expensive, and recommends are not interpreted when
  building the buildroot (bsc#1197789).</changelog>
</package>
<package pkgid="b6e490b9408998b7fccaced73aa19996accae8b64c2a9c991c65400c0425bde3" name="nut-drivers-net" arch="x86_64">
  <version epoch="0" ver="2.7.4" rel="150000.6.3.1"/>
  <changelog author="mvyskocil@opensuse.org" date="1414670400">- Update to version 2.7.2:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * upsdrvctl is now installed to $prefix/sbin rather than
    $driverexec. This usually means moving from /bin to /sbin, apart
    from few exceptions.
  * Fix service files paths (boo#907387).
  * FreeDesktop Hardware Abstraction Layer (HAL) support was removed.
  * This is a good time to point out that for stricter packaging
    systems, it may be beneficial to add "--enable-option-checking=fatal"
    to the ./configure command line, in order to quickly pick up any
    other removed option flags.
  Other changes:
  * libupsclient had undefined references related to functions of
    libcommon.This issue was reported on Debian (bug #731156) and
    is now fixed
  * support for new devices:
    + CABAC UPS-1700DV2
    + Eaton Powerware 3105
    + Emerson Network Power Liebert PSI 1440
    + MicroDowell B.Box LP 500
    + Numeric Digital 800 plus
    + OptiUPS VS 575C
    + Tripp Lite SU10KRT3/1X
  * nutdrv_atcl_usb: new driver for 'ATCL FOR UPS'
  * al175: re-introduced this driver (actually, it was in 2.7.1)
  * upsdrvctl now provides retry options for upsdrvctl and driver(s)
  * snmp-ups: add support for XPPC-MIB and Tripp Lite SU10KRT3/1X.
    Also fix erroneous status in HP/Compaq SNMP MIB (with the most
    recent HP firmware (1.76) ;
    improved various MIBs (APC, HP/Compaq, ...)
  * nutdrv_qx: add new 'fallback' Q1 subdriver, with minimal
    'Q1' support. General improvements on all subdrivers.
  * mge-shut: partially revert PnP/RTS change, for initializing
    the communication with the UPS. Note that nut-scanner similar
    function was not modified however.
- dropped nut-hal.patch
- use _smp_mflags macro for make
- build with --enable-option-checking=fatal and remove obsoleted --with-hal
  and --with-linux-hiddev configure options</changelog>
  <changelog author="ledest@gmail.com" date="1415534400">- fix bashisms in post script</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431691200">- update to 2.7.3 (bugfixes and new devices support)
  see NEWS and UPGRADING in /usr/share/doc/packages/nut
- refreshed patches:
  * nut-notifyflag.patch: rename of upsmon.conf.sample.in
  * nut-preconfig.patch: rename of upsmon.conf.sample.in
  * nut-systemd-dirs.patch: refresh to 2.7.3
- changed keyring to new key 55CA5976 (Arnaud Quette &lt;arnaud.quette@free.fr&gt;)</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1431950400">- fix https://github.com/networkupstools/nut/issues/200
  * 0001-Restore-systemd-relationship-with-nut-driver-service.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1453204800">- Cleanup a bit with spec-cleaner
- Install init or systemd files not both at once
- Remove patches used only on sle10:
  * nut-powersave.patch
  * nut-udev.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1492603200">- Update to version 2.7.4:
  For more see NEWS and UPGRADING in /usr/share/doc/packages/nut.
  * New class of device supported: ATS - Automatic Transfer Switch
  * NUT command and variable naming scheme changes.
  * support for new devices: AEG PROTECT B / NAS APC ATS AP7724
    (should be supported) Asium P700 Eaton ATS Eaton 5E 1100iUSB
    Eaton E Series DX UPS 1-20 kVA Eaton Powerware 9125-5000g
    Electrys UPS 2500 Fideltronic INIGO Viper 1200 Legrand Keor
    Multiplug LYONN CTB-800V Micropower LCD 1000 NHS Laser Senoidal
    5000VA Sweex model P220 TS Shara Various APCUPSD-controlled APC
    devices
  * snmp-ups improvements.
  * Eaton: improvements and fixes of 3ph SNMP, ePDU (G2 and G3) and
    XML/PDC.
  * Further fixes and improvements of bcmxcp_usb, dummy-ups,
    libnutclient, nutdrv_atcl_usb, nutdrv_qx, nut-ipmipsu, solis,
    tripplitesu, usbhid-ups.
  * nut-scanner: Don't depend on development libraries
    (boo#963505).
  * Improved SSL support through Mozilla NSS, Augeas support.
  * Fixed UPower device matching in recent kernels.
  * nut-server.service: Restore systemd relationship (boo#907387, drop
    0001-Restore-systemd-relationship-with-nut-driver-service.patch).
  * Network protocol information change.
- Drop dummy init scripts. They are not needed any more
  (nut-monitor, nut-server, nut-driver, boo#801542#c2).
- Build and package documentation
  (nut-doc-fixed-date.patch, nut-doc-cables.patch).
- Fix dependencies.
- Fix bash-completion path.</changelog>
  <changelog author="jengelh@inai.de" date="1494331200">- Fix RPM groups and the HTML description
- Do not suppress errors from useradd
- Remove --with-pic that's only for static libs</changelog>
  <changelog author="alarrosa@suse.com" date="1503057600">- Add use-pkg-config-gdlib.diff to fix a build failure due to the
  configure scripts using gdlib-config (which is deprecated) to
  obtain the CFLAGS/LDFLAGS/LIBS to use when building with gd. With
  the patch, nut now uses pkg-config which returns the right values</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Drop the aspell dependency, it is only used for verification
  of the mans and it is more for devs to do than during the build
  wrt fate#323578</changelog>
  <changelog author="tchvatal@suse.com" date="1506945600">- Fix rpm groups
- Reduce the supported distros by keeping sle12+ only
- Convert to pkgconfig style dependencies</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241600">- Buildrequire libnsl-devel for suse_version &gt;= 1330: libnsl was
  split out of glibc and needs to be explcitly required if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508241601">- BuildRequire tex(upquote.sty): Generally seen, this dependency
  is inaccurate, as our sources do not reference upquote.sty, but
  asciidoc does. Adding the dep there though makes asciidoc too
  expensive, and recommends are not interpreted when building the
  buildroot (boo#1063897).</changelog>
  <changelog author="sbrabec@suse.com" date="1512043200">- No more conflict with apcupsd (boo#1070373).
- Remove smartups references. It is dropped since 2001.</changelog>
  <changelog author="suse+build@de-korte.org" date="1512129600">- Add support for OpenSSL 1.1.0 library, allow TLSv1 and higher
  (not just TLSv1) and report TLS version used in debug mode level
  3 and higher (boo#1069988, openssl-1_1.patch)
- Fix missing pointer dereference in upssched (nut-upssched.patch)
- Support for allowfrom parameter was removed in version 2.4.0
  (nut-preconfig.patch)</changelog>
  <changelog author="suse+build@de-korte.org" date="1516536000">- Fix clash between Group and %define GROUP by renaming the latter
  to NUT_GROUP (and USER to NUT_USER)
- Replace duplicate man files by soft links</changelog>
  <changelog author="sbrabec@suse.com" date="1648728000">- Fix build within SLE15 SP4 and openSUSE Leap 15.4: BuildRequire
  many tex() packages and texlive-metafont-bin. Generally seen,
  this dependency is inaccurate, as our sources do not reference
  them but asciidoc does. Adding the dep there though makes
  asciidoc too expensive, and recommends are not interpreted when
  building the buildroot (bsc#1197789).</changelog>
</package>
<package pkgid="6b4fe6cc8bbd496781620e66fb58fe11226ee134c8b555cf1cf4c61eac8840f0" name="oath-toolkit" arch="aarch64">
  <version epoch="0" ver="2.6.2" rel="150000.3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1382529600">- Update to version 2.4.0:
  + liboath: Add new API methods for validating TOTP OTPs
- Changes from version 2.2.0:
  + libpskc: Add functions for setting PSKC data.
  + liboath: Permit different passwords for different tokens for
    the same user.
  + liboath: Make header file usable from C++ (extern "C" guard).
  + build: Improve building from git with most recent automake and
    gengetopt.
  + build: Valgrind is not enabled by default.
- Fix license: libraries are LGPL-2.1+ and everything else is
  GPL-3.0+. Also properly package the COPYING files.
- Prepare build libpskc, hidden under a %{build_pskc} define:
  + Add libxml2-devel and pkgconfig(xmlsec1) BuildRequires.
  + Create libpskc0 and libpskc-devel subpackages.
  + Define %{build_pskc} to 0 since we don't have libxmlsec1 yet.
- Rework summaries and descriptions.</changelog>
  <changelog author="darin@darins.net" date="1405080000">- Ran through spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1422100800">- Update to version 2.4.1:
  + liboath: Fix usersfile bug that caused it to update the wrong line.
    When an usersfile contain multiple lines for the same user but with an
    unparseable token type (e.g., HOTP vs TOTP), the code would update the
    wrong line of the file.  Since the then updated line could be a
    commented out line, this can lead to the same OTP being accepted
    multiple times which is a security vulnerability.  Reported by Bas van
    Schaik &lt;bas@sj-vs.net&gt; and patch provided by Ilkka Virta
    &lt;itvirta@iki.fi&gt;.  CVE-2013-7322</changelog>
  <changelog author="t.gruner@katodev.de" date="1441800000">- Update to Version 2.6.1 (released 2015-07-31)
  - liboath: Fix 'make check' on 32-bit systems.
- Version 2.6.0 (released 2015-05-19)
  - liboath: Support TOTP with HMAC-SHA256 and HMAC-SHA512.
    This adds new APIs oath_totp_generate2, oath_totp_validate4 and
    oath_totp_validate4_callback.
  - oathtool: The --totp parameter now take an optional argument to specify MAC.
    For example use --totp=sha256 to use HMAC-SHA256.  When --totp is used
    the default HMAC-SHA1 is used, as before.
  - pam_oath: Mention in README that you shouldn't use insecure keys.
  - pam_oath: Check return value from strdup.
  - The files 'gdoc' and 'expect.oath' are now included in the tarball.</changelog>
  <changelog author="mardnh@gmx.de" date="1472472000">- Update to Version 2.6.2
  - no changes in upstream code
- Fix RPM groups for -devel packages
- build with libpskc on supported suse-versions
- Add patch:
  - 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch</changelog>
  <changelog author="dmarcoux@posteo.de" date="1516104000">- Add patch (last commit which changed source, not released in 2.6.2):
  - 0002-update_gnulibs_files.patch</changelog>
  <changelog author="ncutler@suse.com" date="1523448000">- use %license instead of %doc to package license-related files</changelog>
  <changelog author="ncutler@suse.com" date="1523448001">- bring License line into closer accordance with actual licenses
  mentioned in the tarball
- split off xml/pskc/ directory/files from liboath0 into a separate
  "oath-toolkit-xml" subpackage to prevent conflicts if two versions of the
  liboath library were ever installed at the same time</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Run spe-cleaner
- Drop useless conditions</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197790] -- FTBFS: oath-toolkit won't compile on SP4
- added patches
  part of https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/9b54ca84f92f4747751449aa645f07737b7bc7ea
  + 0003-update_gnulibs_files-fseeko.c.patch</changelog>
</package>
<package pkgid="352117f3bbd6acbada5a40ad1b7b869837bf521fe2aa1b3c87a0f689228fc6ac" name="oath-toolkit" arch="ppc64le">
  <version epoch="0" ver="2.6.2" rel="150000.3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1382529600">- Update to version 2.4.0:
  + liboath: Add new API methods for validating TOTP OTPs
- Changes from version 2.2.0:
  + libpskc: Add functions for setting PSKC data.
  + liboath: Permit different passwords for different tokens for
    the same user.
  + liboath: Make header file usable from C++ (extern "C" guard).
  + build: Improve building from git with most recent automake and
    gengetopt.
  + build: Valgrind is not enabled by default.
- Fix license: libraries are LGPL-2.1+ and everything else is
  GPL-3.0+. Also properly package the COPYING files.
- Prepare build libpskc, hidden under a %{build_pskc} define:
  + Add libxml2-devel and pkgconfig(xmlsec1) BuildRequires.
  + Create libpskc0 and libpskc-devel subpackages.
  + Define %{build_pskc} to 0 since we don't have libxmlsec1 yet.
- Rework summaries and descriptions.</changelog>
  <changelog author="darin@darins.net" date="1405080000">- Ran through spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1422100800">- Update to version 2.4.1:
  + liboath: Fix usersfile bug that caused it to update the wrong line.
    When an usersfile contain multiple lines for the same user but with an
    unparseable token type (e.g., HOTP vs TOTP), the code would update the
    wrong line of the file.  Since the then updated line could be a
    commented out line, this can lead to the same OTP being accepted
    multiple times which is a security vulnerability.  Reported by Bas van
    Schaik &lt;bas@sj-vs.net&gt; and patch provided by Ilkka Virta
    &lt;itvirta@iki.fi&gt;.  CVE-2013-7322</changelog>
  <changelog author="t.gruner@katodev.de" date="1441800000">- Update to Version 2.6.1 (released 2015-07-31)
  - liboath: Fix 'make check' on 32-bit systems.
- Version 2.6.0 (released 2015-05-19)
  - liboath: Support TOTP with HMAC-SHA256 and HMAC-SHA512.
    This adds new APIs oath_totp_generate2, oath_totp_validate4 and
    oath_totp_validate4_callback.
  - oathtool: The --totp parameter now take an optional argument to specify MAC.
    For example use --totp=sha256 to use HMAC-SHA256.  When --totp is used
    the default HMAC-SHA1 is used, as before.
  - pam_oath: Mention in README that you shouldn't use insecure keys.
  - pam_oath: Check return value from strdup.
  - The files 'gdoc' and 'expect.oath' are now included in the tarball.</changelog>
  <changelog author="mardnh@gmx.de" date="1472472000">- Update to Version 2.6.2
  - no changes in upstream code
- Fix RPM groups for -devel packages
- build with libpskc on supported suse-versions
- Add patch:
  - 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch</changelog>
  <changelog author="dmarcoux@posteo.de" date="1516104000">- Add patch (last commit which changed source, not released in 2.6.2):
  - 0002-update_gnulibs_files.patch</changelog>
  <changelog author="ncutler@suse.com" date="1523448000">- use %license instead of %doc to package license-related files</changelog>
  <changelog author="ncutler@suse.com" date="1523448001">- bring License line into closer accordance with actual licenses
  mentioned in the tarball
- split off xml/pskc/ directory/files from liboath0 into a separate
  "oath-toolkit-xml" subpackage to prevent conflicts if two versions of the
  liboath library were ever installed at the same time</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Run spe-cleaner
- Drop useless conditions</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197790] -- FTBFS: oath-toolkit won't compile on SP4
- added patches
  part of https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/9b54ca84f92f4747751449aa645f07737b7bc7ea
  + 0003-update_gnulibs_files-fseeko.c.patch</changelog>
</package>
<package pkgid="ae0fadfc4d87673f51bbf7ae1a07643910b9c68e028e8be1ea7288aa8b7f579b" name="oath-toolkit" arch="s390x">
  <version epoch="0" ver="2.6.2" rel="150000.3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1382529600">- Update to version 2.4.0:
  + liboath: Add new API methods for validating TOTP OTPs
- Changes from version 2.2.0:
  + libpskc: Add functions for setting PSKC data.
  + liboath: Permit different passwords for different tokens for
    the same user.
  + liboath: Make header file usable from C++ (extern "C" guard).
  + build: Improve building from git with most recent automake and
    gengetopt.
  + build: Valgrind is not enabled by default.
- Fix license: libraries are LGPL-2.1+ and everything else is
  GPL-3.0+. Also properly package the COPYING files.
- Prepare build libpskc, hidden under a %{build_pskc} define:
  + Add libxml2-devel and pkgconfig(xmlsec1) BuildRequires.
  + Create libpskc0 and libpskc-devel subpackages.
  + Define %{build_pskc} to 0 since we don't have libxmlsec1 yet.
- Rework summaries and descriptions.</changelog>
  <changelog author="darin@darins.net" date="1405080000">- Ran through spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1422100800">- Update to version 2.4.1:
  + liboath: Fix usersfile bug that caused it to update the wrong line.
    When an usersfile contain multiple lines for the same user but with an
    unparseable token type (e.g., HOTP vs TOTP), the code would update the
    wrong line of the file.  Since the then updated line could be a
    commented out line, this can lead to the same OTP being accepted
    multiple times which is a security vulnerability.  Reported by Bas van
    Schaik &lt;bas@sj-vs.net&gt; and patch provided by Ilkka Virta
    &lt;itvirta@iki.fi&gt;.  CVE-2013-7322</changelog>
  <changelog author="t.gruner@katodev.de" date="1441800000">- Update to Version 2.6.1 (released 2015-07-31)
  - liboath: Fix 'make check' on 32-bit systems.
- Version 2.6.0 (released 2015-05-19)
  - liboath: Support TOTP with HMAC-SHA256 and HMAC-SHA512.
    This adds new APIs oath_totp_generate2, oath_totp_validate4 and
    oath_totp_validate4_callback.
  - oathtool: The --totp parameter now take an optional argument to specify MAC.
    For example use --totp=sha256 to use HMAC-SHA256.  When --totp is used
    the default HMAC-SHA1 is used, as before.
  - pam_oath: Mention in README that you shouldn't use insecure keys.
  - pam_oath: Check return value from strdup.
  - The files 'gdoc' and 'expect.oath' are now included in the tarball.</changelog>
  <changelog author="mardnh@gmx.de" date="1472472000">- Update to Version 2.6.2
  - no changes in upstream code
- Fix RPM groups for -devel packages
- build with libpskc on supported suse-versions
- Add patch:
  - 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch</changelog>
  <changelog author="dmarcoux@posteo.de" date="1516104000">- Add patch (last commit which changed source, not released in 2.6.2):
  - 0002-update_gnulibs_files.patch</changelog>
  <changelog author="ncutler@suse.com" date="1523448000">- use %license instead of %doc to package license-related files</changelog>
  <changelog author="ncutler@suse.com" date="1523448001">- bring License line into closer accordance with actual licenses
  mentioned in the tarball
- split off xml/pskc/ directory/files from liboath0 into a separate
  "oath-toolkit-xml" subpackage to prevent conflicts if two versions of the
  liboath library were ever installed at the same time</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Run spe-cleaner
- Drop useless conditions</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197790] -- FTBFS: oath-toolkit won't compile on SP4
- added patches
  part of https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/9b54ca84f92f4747751449aa645f07737b7bc7ea
  + 0003-update_gnulibs_files-fseeko.c.patch</changelog>
</package>
<package pkgid="a364fa8b1678817e65905f310797f5c7dc39551a62bb3135201109372d83ac61" name="oath-toolkit" arch="src">
  <version epoch="0" ver="2.6.2" rel="150000.3.3.1"/>
  <changelog author="cristian.rodriguez@opensuse.org" date="1296907200">- Initial version</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1296907201">- Use libgcrypt for crypto</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1297425600">- Update to version 1.4.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1371297600">- Update to version 2.0.2</changelog>
  <changelog author="vuntz@opensuse.org" date="1382529600">- Update to version 2.4.0:
  + liboath: Add new API methods for validating TOTP OTPs
- Changes from version 2.2.0:
  + libpskc: Add functions for setting PSKC data.
  + liboath: Permit different passwords for different tokens for
    the same user.
  + liboath: Make header file usable from C++ (extern "C" guard).
  + build: Improve building from git with most recent automake and
    gengetopt.
  + build: Valgrind is not enabled by default.
- Fix license: libraries are LGPL-2.1+ and everything else is
  GPL-3.0+. Also properly package the COPYING files.
- Prepare build libpskc, hidden under a %{build_pskc} define:
  + Add libxml2-devel and pkgconfig(xmlsec1) BuildRequires.
  + Create libpskc0 and libpskc-devel subpackages.
  + Define %{build_pskc} to 0 since we don't have libxmlsec1 yet.
- Rework summaries and descriptions.</changelog>
  <changelog author="darin@darins.net" date="1405080000">- Ran through spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1422100800">- Update to version 2.4.1:
  + liboath: Fix usersfile bug that caused it to update the wrong line.
    When an usersfile contain multiple lines for the same user but with an
    unparseable token type (e.g., HOTP vs TOTP), the code would update the
    wrong line of the file.  Since the then updated line could be a
    commented out line, this can lead to the same OTP being accepted
    multiple times which is a security vulnerability.  Reported by Bas van
    Schaik &lt;bas@sj-vs.net&gt; and patch provided by Ilkka Virta
    &lt;itvirta@iki.fi&gt;.  CVE-2013-7322</changelog>
  <changelog author="t.gruner@katodev.de" date="1441800000">- Update to Version 2.6.1 (released 2015-07-31)
  - liboath: Fix 'make check' on 32-bit systems.
- Version 2.6.0 (released 2015-05-19)
  - liboath: Support TOTP with HMAC-SHA256 and HMAC-SHA512.
    This adds new APIs oath_totp_generate2, oath_totp_validate4 and
    oath_totp_validate4_callback.
  - oathtool: The --totp parameter now take an optional argument to specify MAC.
    For example use --totp=sha256 to use HMAC-SHA256.  When --totp is used
    the default HMAC-SHA1 is used, as before.
  - pam_oath: Mention in README that you shouldn't use insecure keys.
  - pam_oath: Check return value from strdup.
  - The files 'gdoc' and 'expect.oath' are now included in the tarball.</changelog>
  <changelog author="mardnh@gmx.de" date="1472472000">- Update to Version 2.6.2
  - no changes in upstream code
- Fix RPM groups for -devel packages
- build with libpskc on supported suse-versions
- Add patch:
  - 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch</changelog>
  <changelog author="dmarcoux@posteo.de" date="1516104000">- Add patch (last commit which changed source, not released in 2.6.2):
  - 0002-update_gnulibs_files.patch</changelog>
  <changelog author="ncutler@suse.com" date="1523448000">- use %license instead of %doc to package license-related files</changelog>
  <changelog author="ncutler@suse.com" date="1523448001">- bring License line into closer accordance with actual licenses
  mentioned in the tarball
- split off xml/pskc/ directory/files from liboath0 into a separate
  "oath-toolkit-xml" subpackage to prevent conflicts if two versions of the
  liboath library were ever installed at the same time</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Run spe-cleaner
- Drop useless conditions</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197790] -- FTBFS: oath-toolkit won't compile on SP4
- added patches
  part of https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/9b54ca84f92f4747751449aa645f07737b7bc7ea
  + 0003-update_gnulibs_files-fseeko.c.patch</changelog>
</package>
<package pkgid="068c7e0cd9730d74ef155ef8ff2ea35bdbaaac287eaf985297450ac53635d89a" name="oath-toolkit" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="150000.3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1382529600">- Update to version 2.4.0:
  + liboath: Add new API methods for validating TOTP OTPs
- Changes from version 2.2.0:
  + libpskc: Add functions for setting PSKC data.
  + liboath: Permit different passwords for different tokens for
    the same user.
  + liboath: Make header file usable from C++ (extern "C" guard).
  + build: Improve building from git with most recent automake and
    gengetopt.
  + build: Valgrind is not enabled by default.
- Fix license: libraries are LGPL-2.1+ and everything else is
  GPL-3.0+. Also properly package the COPYING files.
- Prepare build libpskc, hidden under a %{build_pskc} define:
  + Add libxml2-devel and pkgconfig(xmlsec1) BuildRequires.
  + Create libpskc0 and libpskc-devel subpackages.
  + Define %{build_pskc} to 0 since we don't have libxmlsec1 yet.
- Rework summaries and descriptions.</changelog>
  <changelog author="darin@darins.net" date="1405080000">- Ran through spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1422100800">- Update to version 2.4.1:
  + liboath: Fix usersfile bug that caused it to update the wrong line.
    When an usersfile contain multiple lines for the same user but with an
    unparseable token type (e.g., HOTP vs TOTP), the code would update the
    wrong line of the file.  Since the then updated line could be a
    commented out line, this can lead to the same OTP being accepted
    multiple times which is a security vulnerability.  Reported by Bas van
    Schaik &lt;bas@sj-vs.net&gt; and patch provided by Ilkka Virta
    &lt;itvirta@iki.fi&gt;.  CVE-2013-7322</changelog>
  <changelog author="t.gruner@katodev.de" date="1441800000">- Update to Version 2.6.1 (released 2015-07-31)
  - liboath: Fix 'make check' on 32-bit systems.
- Version 2.6.0 (released 2015-05-19)
  - liboath: Support TOTP with HMAC-SHA256 and HMAC-SHA512.
    This adds new APIs oath_totp_generate2, oath_totp_validate4 and
    oath_totp_validate4_callback.
  - oathtool: The --totp parameter now take an optional argument to specify MAC.
    For example use --totp=sha256 to use HMAC-SHA256.  When --totp is used
    the default HMAC-SHA1 is used, as before.
  - pam_oath: Mention in README that you shouldn't use insecure keys.
  - pam_oath: Check return value from strdup.
  - The files 'gdoc' and 'expect.oath' are now included in the tarball.</changelog>
  <changelog author="mardnh@gmx.de" date="1472472000">- Update to Version 2.6.2
  - no changes in upstream code
- Fix RPM groups for -devel packages
- build with libpskc on supported suse-versions
- Add patch:
  - 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch</changelog>
  <changelog author="dmarcoux@posteo.de" date="1516104000">- Add patch (last commit which changed source, not released in 2.6.2):
  - 0002-update_gnulibs_files.patch</changelog>
  <changelog author="ncutler@suse.com" date="1523448000">- use %license instead of %doc to package license-related files</changelog>
  <changelog author="ncutler@suse.com" date="1523448001">- bring License line into closer accordance with actual licenses
  mentioned in the tarball
- split off xml/pskc/ directory/files from liboath0 into a separate
  "oath-toolkit-xml" subpackage to prevent conflicts if two versions of the
  liboath library were ever installed at the same time</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Run spe-cleaner
- Drop useless conditions</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197790] -- FTBFS: oath-toolkit won't compile on SP4
- added patches
  part of https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/9b54ca84f92f4747751449aa645f07737b7bc7ea
  + 0003-update_gnulibs_files-fseeko.c.patch</changelog>
</package>
<package pkgid="fcd0cbeab8c1f55d50f1a7c86b8b82c6b2764958e132113d09accb5ff5b53886" name="oath-toolkit-xml" arch="noarch">
  <version epoch="0" ver="2.6.2" rel="150000.3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1382529600">- Update to version 2.4.0:
  + liboath: Add new API methods for validating TOTP OTPs
- Changes from version 2.2.0:
  + libpskc: Add functions for setting PSKC data.
  + liboath: Permit different passwords for different tokens for
    the same user.
  + liboath: Make header file usable from C++ (extern "C" guard).
  + build: Improve building from git with most recent automake and
    gengetopt.
  + build: Valgrind is not enabled by default.
- Fix license: libraries are LGPL-2.1+ and everything else is
  GPL-3.0+. Also properly package the COPYING files.
- Prepare build libpskc, hidden under a %{build_pskc} define:
  + Add libxml2-devel and pkgconfig(xmlsec1) BuildRequires.
  + Create libpskc0 and libpskc-devel subpackages.
  + Define %{build_pskc} to 0 since we don't have libxmlsec1 yet.
- Rework summaries and descriptions.</changelog>
  <changelog author="darin@darins.net" date="1405080000">- Ran through spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1422100800">- Update to version 2.4.1:
  + liboath: Fix usersfile bug that caused it to update the wrong line.
    When an usersfile contain multiple lines for the same user but with an
    unparseable token type (e.g., HOTP vs TOTP), the code would update the
    wrong line of the file.  Since the then updated line could be a
    commented out line, this can lead to the same OTP being accepted
    multiple times which is a security vulnerability.  Reported by Bas van
    Schaik &lt;bas@sj-vs.net&gt; and patch provided by Ilkka Virta
    &lt;itvirta@iki.fi&gt;.  CVE-2013-7322</changelog>
  <changelog author="t.gruner@katodev.de" date="1441800000">- Update to Version 2.6.1 (released 2015-07-31)
  - liboath: Fix 'make check' on 32-bit systems.
- Version 2.6.0 (released 2015-05-19)
  - liboath: Support TOTP with HMAC-SHA256 and HMAC-SHA512.
    This adds new APIs oath_totp_generate2, oath_totp_validate4 and
    oath_totp_validate4_callback.
  - oathtool: The --totp parameter now take an optional argument to specify MAC.
    For example use --totp=sha256 to use HMAC-SHA256.  When --totp is used
    the default HMAC-SHA1 is used, as before.
  - pam_oath: Mention in README that you shouldn't use insecure keys.
  - pam_oath: Check return value from strdup.
  - The files 'gdoc' and 'expect.oath' are now included in the tarball.</changelog>
  <changelog author="mardnh@gmx.de" date="1472472000">- Update to Version 2.6.2
  - no changes in upstream code
- Fix RPM groups for -devel packages
- build with libpskc on supported suse-versions
- Add patch:
  - 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch</changelog>
  <changelog author="dmarcoux@posteo.de" date="1516104000">- Add patch (last commit which changed source, not released in 2.6.2):
  - 0002-update_gnulibs_files.patch</changelog>
  <changelog author="ncutler@suse.com" date="1523448000">- use %license instead of %doc to package license-related files</changelog>
  <changelog author="ncutler@suse.com" date="1523448001">- bring License line into closer accordance with actual licenses
  mentioned in the tarball
- split off xml/pskc/ directory/files from liboath0 into a separate
  "oath-toolkit-xml" subpackage to prevent conflicts if two versions of the
  liboath library were ever installed at the same time</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Run spe-cleaner
- Drop useless conditions</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197790] -- FTBFS: oath-toolkit won't compile on SP4
- added patches
  part of https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/9b54ca84f92f4747751449aa645f07737b7bc7ea
  + 0003-update_gnulibs_files-fseeko.c.patch</changelog>
</package>
<package pkgid="ed6fcfe965e671e526b14d4757b97d568d041b4697db1dbcb38a4aeaafa4503f" name="ocfs2-kmp-preempt" arch="aarch64">
  <version epoch="0" ver="5.3.18" rel="150300.59.68.1"/>
  <changelog author="tzimmermann@suse.de" date="1651579200">- blacklist.conf: Append 'Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"'
- commit f314ea7</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1651579201">- bnx2x: fix napi API usage sequence (bsc#1198217).
- commit 62d4fc3</changelog>
  <changelog author="oneukum@suse.com" date="1651579202">- adm8211: fix error return code in adm8211_probe() (git-fixes).
- blacklist.conf:
- commit 88c7ed6</changelog>
  <changelog author="oneukum@suse.com" date="1651579203">- mwl8k: Fix a double Free in mwl8k_probe_hw (git-fixes).
- commit 83451f5</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579204">- drm/vmwgfx: Remove unused compile options (bsc#1152472)
- commit fdc716b</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579205">- backlight: qcom-wled: Respect enabled-strings in set_brightness (bsc#1152489)
- commit 9612dd6</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579206">- drm/cma-helper: Set VM_DONTEXPAND for mmap (bsc#1152472)
- commit dd83cfa</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579207">- drm/i915: s/JSP2/ICP2/ PCH (bsc#1152489)
- commit 20ca121</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579208">- drm/amdgpu: fix amdgpu_ras_block_late_init error handler (bsc#1152489)
- commit e9f409a</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579209">- drm/fb-helper: Mark screen buffers in system memory with (bsc#1152472)
- commit 40b57d4</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579210">- USB: hcd-pci: Use PCI_STD_NUM_BARS when checking standard BARs (bsc#1152489)
- commit 30a990e</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579211">- drm/amd/display: Fix memory leak in dcn21_clock_source_create (bsc#1152472)
- commit f640496</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579212">- blacklist.conf: Append 'drm/i915: Fix syncmap memory leak'
- commit 5ad47f2</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579213">- blacklist.conf: Append 'drm/tegra: Add back arm_iommu_detach_device()'
- commit f7fdb0f</changelog>
  <changelog author="osalvador@suse.de" date="1651579214">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit a40b3c9</changelog>
  <changelog author="ohering@suse.de" date="1651665600">- net: mana: Remove unnecessary check of cqe_type in
  mana_process_rx_cqe() (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Use struct_size() helper in
  mana_gd_create_dma_region() (bsc#1195651).
- commit c23f4de</changelog>
  <changelog author="martin.wilck@suse.com" date="1651665601">- Revert lpfc driver update to 14.2.0.1 (bsc#1198989)
- commit eb15c95</changelog>
  <changelog author="oneukum@suse.com" date="1651665602">- usb: dwc3: core: Fix tx/rx threshold settings (git-fixes).
- commit c81dcdc</changelog>
  <changelog author="oneukum@suse.com" date="1651665603">- usb: dwc3: core: Only handle soft-reset in DCTL (git-fixes).
- commit 454e4d6</changelog>
  <changelog author="oneukum@suse.com" date="1651665604">- usb: dwc3: gadget: Return proper request status (git-fixes).
- commit 73a340f</changelog>
</package>
<package pkgid="8a39301f769babff27d69dadf64f95855380d7c5fcfd1beebb7ec131cf45fd2b" name="ocfs2-kmp-preempt" arch="x86_64">
  <version epoch="0" ver="5.3.18" rel="150300.59.68.1"/>
  <changelog author="tzimmermann@suse.de" date="1651579200">- blacklist.conf: Append 'Revert "drm/i915/tgl/dsi: Gate the ddi clocks after pll mapping"'
- commit f314ea7</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1651579201">- bnx2x: fix napi API usage sequence (bsc#1198217).
- commit 62d4fc3</changelog>
  <changelog author="oneukum@suse.com" date="1651579202">- adm8211: fix error return code in adm8211_probe() (git-fixes).
- blacklist.conf:
- commit 88c7ed6</changelog>
  <changelog author="oneukum@suse.com" date="1651579203">- mwl8k: Fix a double Free in mwl8k_probe_hw (git-fixes).
- commit 83451f5</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579204">- drm/vmwgfx: Remove unused compile options (bsc#1152472)
- commit fdc716b</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579205">- backlight: qcom-wled: Respect enabled-strings in set_brightness (bsc#1152489)
- commit 9612dd6</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579206">- drm/cma-helper: Set VM_DONTEXPAND for mmap (bsc#1152472)
- commit dd83cfa</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579207">- drm/i915: s/JSP2/ICP2/ PCH (bsc#1152489)
- commit 20ca121</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579208">- drm/amdgpu: fix amdgpu_ras_block_late_init error handler (bsc#1152489)
- commit e9f409a</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579209">- drm/fb-helper: Mark screen buffers in system memory with (bsc#1152472)
- commit 40b57d4</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579210">- USB: hcd-pci: Use PCI_STD_NUM_BARS when checking standard BARs (bsc#1152489)
- commit 30a990e</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579211">- drm/amd/display: Fix memory leak in dcn21_clock_source_create (bsc#1152472)
- commit f640496</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579212">- blacklist.conf: Append 'drm/i915: Fix syncmap memory leak'
- commit 5ad47f2</changelog>
  <changelog author="tzimmermann@suse.de" date="1651579213">- blacklist.conf: Append 'drm/tegra: Add back arm_iommu_detach_device()'
- commit f7fdb0f</changelog>
  <changelog author="osalvador@suse.de" date="1651579214">- Rename colliding patches before the next cve/linux-5.3 -&gt; SLE15-SP3 merge
- commit a40b3c9</changelog>
  <changelog author="ohering@suse.de" date="1651665600">- net: mana: Remove unnecessary check of cqe_type in
  mana_process_rx_cqe() (bsc#1195651).
- net: mana: Add handling of CQE_RX_TRUNCATED (bsc#1195651).
- net: mana: Reuse XDP dropped page (bsc#1195651).
- net: mana: Add counter for XDP_TX (bsc#1195651).
- net: mana: Add counter for packet dropped by XDP (bsc#1195651).
- net: mana: Use struct_size() helper in
  mana_gd_create_dma_region() (bsc#1195651).
- commit c23f4de</changelog>
  <changelog author="martin.wilck@suse.com" date="1651665601">- Revert lpfc driver update to 14.2.0.1 (bsc#1198989)
- commit eb15c95</changelog>
  <changelog author="oneukum@suse.com" date="1651665602">- usb: dwc3: core: Fix tx/rx threshold settings (git-fixes).
- commit c81dcdc</changelog>
  <changelog author="oneukum@suse.com" date="1651665603">- usb: dwc3: core: Only handle soft-reset in DCTL (git-fixes).
- commit 454e4d6</changelog>
  <changelog author="oneukum@suse.com" date="1651665604">- usb: dwc3: gadget: Return proper request status (git-fixes).
- commit 73a340f</changelog>
</package>
<package pkgid="7ec0ecd57028e4e540965e99d674d8b5117206d4f223f9f8d053e3c3bd4dc9da" name="openldap2" arch="aarch64">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="9e32872c0898d383c4c65109e623ed7407e681d2418cded49ee20d0b0d41b3b6" name="openldap2" arch="ppc64le">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="fac2c4763c266a498ad04d5dfc38ebcfb80b5bb4f47e0eedd75d88ee0fc0a05d" name="openldap2" arch="s390x">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="2662397b39e862874ca2f452c21ac6dffe52ef5b0d793551394bab3484ab42e4" name="openldap2" arch="src">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="8a6f3383eb6ec0abbdfc179cb8904c5954f687a7da7b7917b54a6c82e2f27ee6" name="openldap2" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="9f58a0ce4c8cd6e8d2b1c4ea9a464aa323ebd27469ed45a574e3ebfa2d8c5ca5" name="openldap2-back-meta" arch="aarch64">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="69280b3915a51bec918ef056a61fa17635bcfeae26ba722dc1615642ccb09eee" name="openldap2-back-meta" arch="ppc64le">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="a0d3ca5b984de8458065dbe24a765cc2825e235dc46400f62b581650f5a4ba01" name="openldap2-back-meta" arch="s390x">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="3d165291f6d6b3dd5075e98b397d62906a48afdc2d4c0a15c690f89804580063" name="openldap2-back-meta" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="33a78919f0afabf3b1e60ad331522625c0600dec14ac88cc02e3b0085ffa9f9d" name="openldap2-back-perl" arch="aarch64">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="fdc0d65b23d2997977a2b2734dda4bc6363eeeff0f1dcbf5cd2d0b819d0af195" name="openldap2-back-perl" arch="ppc64le">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="968f5d8bf1fbfad720796814ece100b078591ecd192238dd9c2fc19833a2735e" name="openldap2-back-perl" arch="s390x">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="9e57e49df1461e8f5e38dcd2e47af5f9cd4c3efe418f3a2d172e4a5d4fd9fa73" name="openldap2-back-perl" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="46b3a7b12120a2ff49a329e9ae2e0620dbc9f44b7da2f7dd59c0b55e227ffe2e" name="openldap2-back-sock" arch="aarch64">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="47e0526d158b84a301a97aade4bc228779cc6616238133302e8183ee8a8728bf" name="openldap2-back-sock" arch="ppc64le">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="e9a48d04154425cce336aaeada83cd1f14ebd15879e8726723204138fa6b99d1" name="openldap2-back-sock" arch="s390x">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="7a56b95cd251bc2e0634e11180343c002e05865dce4c710d7228eb25f4b2983b" name="openldap2-back-sock" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="b6aa9075f32fe79c2fd8148aef02237ad60bc1856f8dbcb166c11bfe7884282d" name="openldap2-back-sql" arch="aarch64">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="561b262cafcff1618d67d7a1d5f4caf0cb289cc8abc18e23d7952199463b56d7" name="openldap2-back-sql" arch="ppc64le">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="5cd316d5a4a69b94d5bd55dc06a3b9288fb144e33491be76e758e8e6d971a756" name="openldap2-back-sql" arch="s390x">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="54092ceab6aad3f636882dd7dd94fe0fe238c3f986677d5c8bda9b9cf8741b91" name="openldap2-back-sql" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="ca7c65ff8b4e71a076be19fa366c5885f447d77fc4ab1fe02f9a056c01935f09" name="openldap2-client" arch="aarch64">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="577566d5b956385c46cec299118159ccc48ef72be2e3297ac4b436b7935945a5" name="openldap2-client" arch="ppc64le">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="220689e5673efa2f77ae5820a8006b6e3145b454e65e9087b7bd243b55a8731e" name="openldap2-client" arch="s390x">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="7d30c59290ee0750f41846e6f23a9533c5a37da3ec09c63d8c87c5dd1f5b0c22" name="openldap2-client" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="3bf178a0d043bacdd5ce31a4dfcaed339f5b3413d39fc1bfdbb3a423f5bd9ead" name="openldap2-contrib" arch="aarch64">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="e7e18ac77106085a3b305605c7e61831a075a6bb0b7918e23db20e307539539d" name="openldap2-contrib" arch="ppc64le">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="088db33b697caba75a7efcc27f173794165d4f12858261f326a5b3ea42346625" name="openldap2-contrib" arch="s390x">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="a6963ab110f0da3ee801fdf95ec6ec2f64d8b127293fab4b7e6fc0cf25fbedda" name="openldap2-contrib" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="b844a185efa8e26a4f9e1dc745ceb4f32c7e9a7a316b949bb25ea4d4bc522e07" name="openldap2-devel" arch="aarch64">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="b2498f152cbcc6b65775699695d106c604a96224d37abd34fba8ab70b5d07d96" name="openldap2-devel" arch="ppc64le">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="413b7cfedf6920bb8d69cad594d8384362a7dc4527d3eab012506906f65b795c" name="openldap2-devel" arch="s390x">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="6bfa85dbb53238bfc6b4c83084e2887e18c528d6a182479c8c29476933563a43" name="openldap2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="ab4c2e9b81d867095694a685aaa21a246e976e3a850dd6026867d7db668c07b9" name="openldap2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="ae8c1bb6f0534fd0dd564e82c4528a92d3c4646c6bde7ffc35dd084bafea5827" name="openldap2-devel-static" arch="aarch64">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="fa96f3585b1be2322c3a27fbc6e3f1f3464ea70578c84e6c49171375bb84f258" name="openldap2-devel-static" arch="ppc64le">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="cb12584264432d3c3372ecc032441519c0caf118140c765fb1b2eb62f2968a26" name="openldap2-devel-static" arch="s390x">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="9ba5d88a82dbe104e82e542f95556db4f4d57d650b1c3cf0baef8d50be9d2ee8" name="openldap2-devel-static" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="ed75221a58c5168dac60c763a98ae6ce431ec347012a976c4e798b78d8ae6437" name="openldap2-doc" arch="noarch">
  <version epoch="0" ver="2.4.46" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="8f058a020ae3da4e25ce58fc83ebd5ae822587244fdbe7c810286e168fc755ff" name="openldap2-ppolicy-check-password" arch="aarch64">
  <version epoch="0" ver="1.2" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="ea91ebdab2b31a1f8535a0f634cc24a03cd05e9687a075171cf3880eff71ed6d" name="openldap2-ppolicy-check-password" arch="ppc64le">
  <version epoch="0" ver="1.2" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="b77dd05c8bd12e314675a98ed370069540a30b64279a17bd6a746cb36d212de8" name="openldap2-ppolicy-check-password" arch="s390x">
  <version epoch="0" ver="1.2" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="0e41bb0914eddaf2614114a38f07bb8fa273aa6fbc725e31e6697dd723e29007" name="openldap2-ppolicy-check-password" arch="x86_64">
  <version epoch="0" ver="1.2" rel="150200.14.8.1"/>
  <changelog author="william.brown@suse.com" date="1564660800">- bsc#1143194 (CVE-2019-13565) - ssf memory reuse leads to incorrect
  authorisation of another connection, granting excess connection rights (ssf).
  * patch: 0201-ITS-9052-zero-out-sasl_ssf-in-connection_init.patch
- bsc#1143273 (CVE-2019-13057) - rootDN of a backend may proxyauth
  incorrectly to another backend, violating multi-tenant isolation.
  * patch: 0202-ITS-9038-restrict-rootDN-proxyauthz-to-its-own-DBs.patch
  * patch: 0203-ITS-9038-Update-test028-to-test-this-is-enforced.patch
  * patch: 0204-ITS-9038-Another-test028-typo.patch</changelog>
  <changelog author="william.brown@suse.com" date="1579867200">- bsc#1158921 libldap-data should be requires, not recommends to help
  prevent user confusion around configuration ownership.</changelog>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
</package>
<package pkgid="e0856429218d6d93005e10f44ee22441b2994faf1e6a32ac29daae68022aa3c8" name="openmpi3" arch="aarch64">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="d04e90a2899b5c238d7d78e00c9b389dd4243d1ed1aa523868f235f4a2100678" name="openmpi3" arch="ppc64le">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="cbc1649bf3b5e53263b46bdbf2b25152332aeec512f007857567a1b410dc8ab5" name="openmpi3" arch="s390x">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="dd2b171e490cfb4cc04946d2b11ae9379ab890fe7b884943b7556680ac7a8f37" name="openmpi3" arch="src">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="fab9e3d69e11c05be451c769ad7b8deecde8a1b4e6cceda66a87faded38ab3f2" name="openmpi3" arch="x86_64">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="603e7188137ec9ad4dc03d088729e284f2d360420265b540071d5138ff8170ac" name="openmpi3-config" arch="aarch64">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="2a66272b0ac4a02ad61a392d3977dcbfa305ed7334f6d854435695a5005f36da" name="openmpi3-config" arch="ppc64le">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="92d8432a48e6a14fd4e3c53a8d56e900761e31c01141246956958eb31ac50d4b" name="openmpi3-config" arch="s390x">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="1aa89ce68f2746544be3c878289be937f5b28b0934adf0ba7aa61710dfb2eea6" name="openmpi3-config" arch="x86_64">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="771b77be05fef86c8cd43dc61c8de4baba468b9c863c08371f1514846dbaafef" name="openmpi3-devel" arch="aarch64">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="fb9db5a72957f01e9954bc7b2bd2211d021d5763f7e1d94e8bd4efef0cb3a77e" name="openmpi3-devel" arch="ppc64le">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="f7c65eb4e5fa2ed87420ce15cf7981ccc7c91eb4419a5af1d3c71f1bb04b85fb" name="openmpi3-devel" arch="s390x">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="c5bcecd45022b79f9c5ff30c2256c9dd69238220fc4eadb8628c3874b4503d96" name="openmpi3-devel" arch="x86_64">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="b7c7aa1c592a3ba0a5db611a2655ac47e61f016f0938a9a21034796e960fb1fa" name="openmpi3-docs" arch="aarch64">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="1a3984f0ca8b9966645328f4ae3838b7e6ffdc5b3165c0a664e8371f33195007" name="openmpi3-docs" arch="ppc64le">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="e079fdd11d0ecfab0adc5ce5289f59ee5ef1c239b7df896103a6dd64084ab483" name="openmpi3-docs" arch="s390x">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="78f259d0289b323bd300cf4fd9cf37c9d4dedb75ad1a2f8012cd0717a717927e" name="openmpi3-docs" arch="x86_64">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="d0104d7107f13453ebd451f2d94a78467875beded9dee9668d8c6de60a0169ab" name="openmpi3-gnu-hpc" arch="aarch64">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="bca91cafbc8a35f7db87954cc8c12ea2c1146acb52343d8014858bcf5aecdff8" name="openmpi3-gnu-hpc" arch="ppc64le">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="23db60cab27eb4a5e9e16aab6a57b60889a9e10c0574003699e115f1677f80a7" name="openmpi3-gnu-hpc" arch="s390x">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="6bdedfd1d38100627b82430309bf3736c1c6cb98ee6f5b8b37300bfc7561e9b1" name="openmpi3-gnu-hpc" arch="x86_64">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="26eba990ec584cf733946f009aca0fa09176ad3af12b11171a55f291982e97ba" name="openmpi3-gnu-hpc-devel" arch="noarch">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="e3408239fda44b1a8b44408a1fef871fbc00756b58735e8ea728a75486eedc88" name="openmpi3-gnu-hpc-devel-static" arch="aarch64">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="f42371af4d4e7e5844abb235b71b0d4e3470dbfa7895f0ee088725b28cbe0532" name="openmpi3-gnu-hpc-devel-static" arch="ppc64le">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="72cca64e826b16c624e99224e791ebbbecedf7f650676cc58eccdc7992a0da76" name="openmpi3-gnu-hpc-devel-static" arch="s390x">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="df86483bc61eb02d3943d81d49540606216db91b180467f604a548f41d88b792" name="openmpi3-gnu-hpc-devel-static" arch="x86_64">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="d49c1217e6b3da2d182a6eb7feeecc0101a508f929e7adf9d3730b76eb23fbf7" name="openmpi3-gnu-hpc-docs" arch="noarch">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="752e0c8d5afa229fec4db9008e3bd12aedb3b50b6124cf63e31f5d2d86ac2a15" name="openmpi3-gnu-hpc-macros-devel" arch="noarch">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="dc55068e5db03fde590e4ba0e0f0a5a6b01f917866e3946d255f9d660e9f462f" name="openmpi3-libs" arch="aarch64">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="5419e355be87afd1394f988c3c80c2843d2b0723ba12c57acf17cab7a045bdd7" name="openmpi3-libs" arch="ppc64le">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="8688c4d11ffc2db4b3bf41abee0bc3316db42985f1b5ebf3dcaf5889567311de" name="openmpi3-libs" arch="s390x">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="53075c058fd3191472be16f5e3ba043b068b39bdfbfa2e5f32986cbce9c3387f" name="openmpi3-libs" arch="x86_64">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="65d17bd2c66f65880ef1cf2efb19a8e7221c5cf355617bb3a286cf9d4c39ce4c" name="openmpi3-libs-32bit" arch="x86_64">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="e03aa60352277c18ccb3cd61713d08a6646b77069e9b502787928c2f2da73752" name="openmpi3-macros-devel" arch="aarch64">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="5781bba4280da5af39447eba7fed0d88ec73aa77fba23102331b7f8fef275021" name="openmpi3-macros-devel" arch="ppc64le">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="b51236ac60ba719d6b06d1df393b9dd77b90fc1a131e2fea8b7c2a377810a887" name="openmpi3-macros-devel" arch="s390x">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="3a49a2bae55d00c45e5585f8a2dc4f3c50845052bf75dc1dcbf9eec0efcc2973" name="openmpi3-macros-devel" arch="x86_64">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="9d2a1fcda21e47aeef6c44c502cd82a03779358c5539b8dbea49c2b0644b3e54" name="openmpi3-testsuite" arch="noarch">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="a473eca97cdc0cf53cbf1ee76f4db6ed502a5d701e7be30f28d06449dc079dad" name="openmpi3-testsuite" arch="src">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="55ddf4b959d4f1e01569b8920ae19da854b768cb6ea5dcd3041489ccb5de08b7" name="openmpi_3_1_6-gnu-hpc" arch="aarch64">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="67b8eaede1a0dfff0ec03f367d4cb6dee34f754b71c9067175d95fb32159a38b" name="openmpi_3_1_6-gnu-hpc" arch="ppc64le">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="4adb9a8c9627d17e0bc5020fd563a86fee66cd562019bbab2f8c6e9f01cc1124" name="openmpi_3_1_6-gnu-hpc" arch="s390x">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="139120f5c925a0a5af7ee88cca5c076cd1c61dca7d8f01b132ce33cb0450f921" name="openmpi_3_1_6-gnu-hpc" arch="src">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="10071b4fc0e3a9d228d981b0c1634e76e45b3e017d920574e4337977d9424c1b" name="openmpi_3_1_6-gnu-hpc" arch="x86_64">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="c76f7e6dd528768bf0ef0d679a72bd77092391d2953494e890b763d5cb397ab4" name="openmpi_3_1_6-gnu-hpc-devel" arch="aarch64">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="c7fee8a3e5001fa31ef23fec09d353e663009b640d8d43b671ce501323823300" name="openmpi_3_1_6-gnu-hpc-devel" arch="ppc64le">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="3bc0c9303bab806d918fe1b1931ea753e8db6865812b0b030c9f09e1ab563265" name="openmpi_3_1_6-gnu-hpc-devel" arch="s390x">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="e20239c85eb0fb4027952fbe80f636751e361ce4e1b05d9ee615ff421dab734a" name="openmpi_3_1_6-gnu-hpc-devel" arch="x86_64">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="91a10fc2a5b3e4d2a8e0e183b40c8f303ac50fc79c65c1d9ff8f30021496ca80" name="openmpi_3_1_6-gnu-hpc-devel-static" arch="aarch64">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="7e8ab657efcf0874dc50a5fe5ba9c4102b1ad06f2dd48fb469c7f33f4bbf6142" name="openmpi_3_1_6-gnu-hpc-devel-static" arch="ppc64le">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="b09e058386e5f096b84a8164e8f7194b371b8fa2a25bad63200dbf86a7705db5" name="openmpi_3_1_6-gnu-hpc-devel-static" arch="s390x">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="00a524852130b2a20095c8cc63c421c81bdc3c9ee506c4b0997ffe8578df7381" name="openmpi_3_1_6-gnu-hpc-devel-static" arch="x86_64">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="32bc997db39652bed94d7e9910e3e9e779f690fb5928c05fdbd216d943ac461d" name="openmpi_3_1_6-gnu-hpc-docs" arch="aarch64">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="8dd893ef9f14556d89796058a4dc2bc12dd973e0ffe60d2d8724519d77f6a7ca" name="openmpi_3_1_6-gnu-hpc-docs" arch="ppc64le">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="e56dbbb0378c3c759c1c0fac31362689acc107aac68d2df9719f3218383c0ca4" name="openmpi_3_1_6-gnu-hpc-docs" arch="s390x">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="a80417a21c50082ec0add8f87a3df77b314d8a0a055d714795d3235ef3a5f4da" name="openmpi_3_1_6-gnu-hpc-docs" arch="x86_64">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="253243b2941cf547aaaf7f78c3db8e7f6001a8aa8c897f54400b26f9e4309c69" name="openmpi_3_1_6-gnu-hpc-macros-devel" arch="aarch64">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="4a93f6c10cf02467463ea107b74234770034cfe26a9ed361cb230e30d1f353f5" name="openmpi_3_1_6-gnu-hpc-macros-devel" arch="ppc64le">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="771886e54b81638223d19ca205e432b17c7d1131077c9f481236c7b32fdefc81" name="openmpi_3_1_6-gnu-hpc-macros-devel" arch="s390x">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="bb9b93a4c1ecd867a2d2280ac34f9ab8f17b021aaaa58ae76e8dd99ae98a98da" name="openmpi_3_1_6-gnu-hpc-macros-devel" arch="x86_64">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="c3377227fea5862a5627e252d72273ea7117e6b8c5d3e83ee4de45cd20a946e0" name="openmpi_3_1_6-gnu-hpc-testsuite" arch="noarch">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="bb08e3d7702bccb70db2508de2342708bd1ac7c9b0af5d23011171fafd7eb5c1" name="openmpi_3_1_6-gnu-hpc-testsuite" arch="src">
  <version epoch="0" ver="3.1.6" rel="150200.3.3.1"/>
  <changelog author="eich@suse.com" date="1534680000">- macros.hpc-openmpi3:
  replace %%compiler_family by %%hpc_compiler_family</changelog>
  <changelog author="bwiedemann@suse.com" date="1535976000">- Add reproducible.patch to drop build time and hostname to make
  package build reproducible (boo#1047218, boo#1084909)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536148800">- Fix handling of mpi-selector during updates (bsc#1098653)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1536580800">- Remove bashism in preun scriptlet</changelog>
  <changelog author="eich@suse.com" date="1542542400">- Add macro _hpc_openmpi_modules for modules support (bsc#1116458).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1554120000">- Add add-gen-p5-chip-pci-id-to-ini-file.patch:
  - Adds support for Broadcom 57500 adapters (bsc#1125651)
- Update to openmpi 3.1.3
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1555675200">- Update to openmpi 3.1.4
  - See changelog in NEWS</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1556020800">- Fix bad INCLUDE path in module (bsc#1132949)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1567771200">- Use FAT LTO objects in order to provide proper static library.
- Mark LICENSE with %license</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1569585600">- Add macro file for non-hpc flavour
- Enable build on ppc64</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1570708800">- Add missing Provides when openmpi3 is the default openmpi
- Add conflict with the older hpc-macros-devel providers to avoid issues during updates
- Add openmpi_prefix macro to openmpi-macros-devel</changelog>
  <changelog author="cgoll@suse.com" date="1571745600">- added --with-slurm (its enabled by default), but if this behavior
  is changed the binding should not away</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1572523200">- Link against libnuma (bsc#1155120)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1575547200">- Add _constraints file for ppc64le for disk &gt; 4G</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578916800">- Have openmpi3-config provide pmix-runtime-config</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584619200">- Drop different package string between SLES and Leap (jsc#SLE-11848)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1584705600">- Update to openmpi3 3.1.6
  - See changelog in NEWS
- Remove add-gen-p5-chip-pci-id-to-ini-file.patch that was merged upstream
- Add patch memory-patcher-fix-compiler-warning.patch to fix cast warning
  causing RPM to fail building</changelog>
  <changelog author="eich@suse.com" date="1595505600">- Add build support for gcc8/9/10 to HPC build (bsc#1174439).</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634644800">- Move rpm macros to %_rpmmacrodir (bsc#1191390)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646654400">- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1196838).</changelog>
</package>
<package pkgid="bc9113a19a8a1c87b3912450c62764eee629c4e89b2b7e5ceaeb064ef499d984" name="openvpn" arch="aarch64">
  <version epoch="0" ver="2.5.6" rel="150400.3.3.1"/>
  <changelog author="max@suse.com" date="1564401600">- Clarify in the service file that the reload action doesn't work
  when dropping root privileges (boo#1142830).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1568808000">- Add p11kit build time dependency for pkcs providers autodetection</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578398400">- Update to version 2.4.8:
  * mbedtls: fix segfault by calling mbedtls_cipher_free() in
    cipher_ctx_free()
  * cleanup: Remove RPM openvpn.spec build approach
  * docs: Update INSTALL
  * build: Package missing mock_msg.h
  * Increase listen() backlog queue to 32
  * Force combinationation of --socks-proxy and --proto UDP to use
    IPv4.
  * Wrong FILETYPE in .rc files
  * Do not set pkcs11-helper 'safe fork mode'
  * tests/t_lpback.sh: Switch sed(1) to POSIX-compatible regex.
  * Fix various compiler warnings
  * Fix regression, reinstate LibreSSL support.
  * man: correct the description of --capath and --crl-verify
    regarding CRLs
  * Fix typo in NTLM proxy debug message
  * Ignore --pull-filter for --mode server
  * openssl: Fix compilation without deprecated OpenSSL 1.1 APIs
  * Better error message when script fails due to script-security
    setting
  * Correct the return value of cryptoapi RSA signature callbacks
  * Handle PSS padding in cryptoapicert
  * cmocka: use relative paths
  * Fix documentation of tls-verify script argument</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.
- Use %systemd_ordering instead of systemd_requires: in fact,
  systemd is not a hard requirement for openvpn. But in case a
  system is being installed with systemd, we want systemd to be
  there before  openvpn is being installed.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1583323200">- Fix inconsistency in openvpn.service:
  * It uses the unescape instance name as config file basename,
    so use that in the description as well</changelog>
  <changelog author="fbui@suse.com" date="1598443200">- Explicitly requires sysvinit-tools as some of the tools shipped by
  this package are used in various places regardless of whether
  openvpn is built for systemd or non systemd systems.
  For the context: sysvinit-tools was pulled in by systemd since 2014
  but it's no longer the case so better to be safe than sorry.</changelog>
  <changelog author="fbui@suse.com" date="1598443201">- Modernize openvpn.service
  * /var/run has been obsoleted since a long time.
  * on reload, send HUP signal directly rather than relying on
    killproc to look for the main process.</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- update to 2.4.9 (CVE-2020-11810, bsc#1169925O):
  * Allow unicode search string in --cryptoapicert option (Windows)
  * Skip expired certificates in Windows certificate store (Windows) (trac #966)
  * OpenSSL: Fix --crl-verify not loading multiple CRLs in one file (trac #623)
  * fix condition where a client's session could "float" to a new IP address that is not authorized ("fix illegal client float").
  This can be used to disrupt service to a freshly connected client (no session
  keys negotiated yet). It can not be used to inject or steal VPN traffic.
  CVE-2020-11810).
  * fix combination of async push (deferred auth) and NCP (trac #1259)
  * Fix OpenSSL 1.1.1 not using auto elliptic curve selection (trac #1228)
  * Fix OpenSSL error stack handling of tls_ctx_add_extra_certs
  * mbedTLS: Make sure TLS session survives move (trac #880)
  * Fix OpenSSL private key passphrase notices
  * Fix building with --enable-async-push in FreeBSD (trac #1256)
  * Fix broken fragmentation logic when using NCP (trac #1140)</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 2.4.10:
  - OpenVPN client will now announce the acceptable ciphers to the server
  (IV_CIPHER=...), so NCP cipher negotiation works better
  - Parse static challenge response in auth-pam plugin
  - Accept empty password and/or response in auth-pam plugin
  - Log serial number of revoked certificate
  - Fix tls_ctx_client/server_new leaving error on OpenSSL error stack
  - Fix auth-token not being updated if auth-nocache is set
  (this should fix all remaining client-side bugs for the combination
  "auth-nocache in client-config" + "auth-token in use on the server")
  - Fix stack overflow in OpenSolaris and *BSD NEXTADDR()
  - Fix error detection / abort in --inetd corner case (#350)
  - Fix TUNSETGROUP compatibility with very old Linux systems (#1152)
  - Fix handling of 'route remote_host' for IPv6 transport case
  (#1247 and #1332)
  - Fix --show-gateway for IPv6 on NetBSD/i386 (#734)
  - A number of documentation improvements / clarification fixes.
  - Fix line number reporting on config file errors after &lt;inline&gt; segments
  - Fix fatal error at switching remotes (#629)
  - socks.c: fix alen for DOMAIN type addresses, bump up buffer sizes (#848)
  - Switch "ks-&gt;authenticated" assertion failure to returning false (#1270)
- refresh 0001-preform-deferred-authentication-in-the-background.patch
  openvpn-2.3.x-fixed-multiple-low-severity-issues.patch against 2.4.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1619352000">- update 'rcopenvpn' to work without /etc/rc.status (boo#1185273)</changelog>
  <changelog author="dmueller@suse.com" date="1622462400">- update to 2.4.11 (bsc#1185279):
  * CVE-2020-15078 see https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
  * This bug allows - under very specific circumstances - to trick a server using
    delayed authentication (plugin or management) into returning a PUSH_REPLY
    before the AUTH_FAILED message, which can possibly be used to gather
    information about a VPN setup.
  * In combination with "--auth-gen-token" or an user-specific token auth
    solution it can be possible to get access to a VPN with an
    otherwise-invalid account.
  * Fix potential NULL ptr crash if compiled with DMALLOC
- drop sysv init support, it hasn't build successfully in ages
  and is build-disabled in devel project</changelog>
  <changelog author="max@suse.com" date="1628164800">- Update to 2.5.3:
  * Removal of BF-CBC support in default configuration
  * ** POSSIBLE INCOMPATIBILITY ***
    See section "DATA CHANNEL CIPHER NEGOTIATION" in openvpn(8).
  * Connections setup is now much faster
  * Support ChaCha20-Poly1305 cipher in the OpenVPN data channel
  * Improved TLS 1.3 support when using OpenSSL 1.1.1 or newer
  * Client-specific tls-crypt keys (--tls-crypt-v2)
  * Improved Data channel cipher negotiation
  * HMAC based auth-token support for seamless reconnects to
    standalone servers or a group of servers
  * Asynchronous (deferred) authentication support for auth-pam
    plugin
  * Asynchronous (deferred) support for client-connect scripts and
    plugins
  * Support IPv4 configs with /31 netmasks
  * 802.1q VLAN support on TAP servers
  * Support IPv6-only tunnels
  * New option --block-ipv6 to reject all IPv6 packets (ICMPv6)
  * Support Virtual Routing and Forwarding (VRF)
  * Netlink integration (OpenVPN no longer needs to execute
    ifconfig/route or ip commands)
  * Obsoletes openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch
- bsc#1062157: The fix for bsc#934237 causes problems with the
  crypto self-test of newer openvpn versions.
  Remove openvpn-2.3.x-fixed-multiple-low-severity-issues.patch .</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 2.5.4:
  * fix prompting for password on windows console if stderr redirection
    is in use - this breaks 2.5.x on Win11/ARM, and might also break
    on Win11/adm64 when released.
  * fix setting MAC address on TAP adapters (--lladdr) to use sitnl
    (was overlooked, and still used "ifconfig" calls)
  * various improvements for man page building (rst2man/rst2html etc)
  * minor bugfix with IN6_IS_ADDR_UNSPECIFIED() use (breaks build on
    at least one platform strictly checking this)
  * fix minor memory leak under certain conditions in add_route() and
    add_route_ipv6()
  * documentation improvements
  * copyright updates where needed
  * better error reporting when win32 console access fails</changelog>
  <changelog author="jengelh@inai.de" date="1638619200">- Avoid bashisms and use POSIX sh syntax.
- Use more efficient find commands.
- Trim marketing filler words from description.</changelog>
  <changelog author="max@suse.com" date="1638964800">- Drop 0001-preform-deferred-authentication-in-the-background.patch
  Upstream has meanwhile solved this differently and the two
  implementations interfere (boo#1193017).
- Obsoleted SLE patches up to this point:
  * openvpn-CVE-2020-15078.patch
  * openvpn-CVE-2020-11810.patch
  * openvpn-CVE-2018-7544.patch
  * openvpn-CVE-2018-9336.patch</changelog>
  <changelog author="dmueller@suse.com" date="1639569600">- update to 2.5.5:
  * SWEET32/64bit cipher deprecation change was postponed to 2.7
  * improve "make check" to notice if "openvpn --show-cipher" crashes
  * improve argv unit tests
  * ensure unit tests work with mbedTLS builds without BF-CBC ciphers
  * include "--push-remove" in the output of "openvpn --help"
  * fix error in iptables syntax in example firewall.sh script
  * fix "resolvconf -p" invocation in example "up" script
  * fix "common_name" environment for script calls when
    "--username-as-common-name" is in effect (Trac #1434)
  * move "push-peer-info" documentation from "server options" to "client"
  * correct "foreign_option_{n}" typo in manpage
  * README.down-root: fix plugin module name</changelog>
  <changelog author="max@suse.com" date="1644494400">- Fix license tag in spec file.</changelog>
  <changelog author="max@suse.com" date="1648036800">- update to 2.5.6:
  * bsc#1197341, CVE-2022-0547: possible authentication bypass in
    external authentication plug-in
  * Fix "--mtu-disc maybe|yes" on Linux
  * Fix $common_name variable passed to scripts when
    username-as-common-name is in effect.
  * Fix potential memory leaks in add_route() and add_route_ipv6().
  * Apply connect-retry backoff only to one side of the connection
    in p2p mode.
  * repair "--inactive" handling with a 'bytes' parameter larger
    than 2 Gbytes.
  * new plugin (sample-plugin/defer/multi-auth.c) to help testing
    with multiple parallel plugins that succeed/fail in
    direct/deferred mode.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1123557: --suppress-timestamps isn't needed by default.</changelog>
</package>
<package pkgid="864a20b890999c9a38d99124385666f850b832061c1fb54655f23e0704984565" name="openvpn" arch="ppc64le">
  <version epoch="0" ver="2.5.6" rel="150400.3.3.1"/>
  <changelog author="max@suse.com" date="1564401600">- Clarify in the service file that the reload action doesn't work
  when dropping root privileges (boo#1142830).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1568808000">- Add p11kit build time dependency for pkcs providers autodetection</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578398400">- Update to version 2.4.8:
  * mbedtls: fix segfault by calling mbedtls_cipher_free() in
    cipher_ctx_free()
  * cleanup: Remove RPM openvpn.spec build approach
  * docs: Update INSTALL
  * build: Package missing mock_msg.h
  * Increase listen() backlog queue to 32
  * Force combinationation of --socks-proxy and --proto UDP to use
    IPv4.
  * Wrong FILETYPE in .rc files
  * Do not set pkcs11-helper 'safe fork mode'
  * tests/t_lpback.sh: Switch sed(1) to POSIX-compatible regex.
  * Fix various compiler warnings
  * Fix regression, reinstate LibreSSL support.
  * man: correct the description of --capath and --crl-verify
    regarding CRLs
  * Fix typo in NTLM proxy debug message
  * Ignore --pull-filter for --mode server
  * openssl: Fix compilation without deprecated OpenSSL 1.1 APIs
  * Better error message when script fails due to script-security
    setting
  * Correct the return value of cryptoapi RSA signature callbacks
  * Handle PSS padding in cryptoapicert
  * cmocka: use relative paths
  * Fix documentation of tls-verify script argument</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.
- Use %systemd_ordering instead of systemd_requires: in fact,
  systemd is not a hard requirement for openvpn. But in case a
  system is being installed with systemd, we want systemd to be
  there before  openvpn is being installed.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1583323200">- Fix inconsistency in openvpn.service:
  * It uses the unescape instance name as config file basename,
    so use that in the description as well</changelog>
  <changelog author="fbui@suse.com" date="1598443200">- Explicitly requires sysvinit-tools as some of the tools shipped by
  this package are used in various places regardless of whether
  openvpn is built for systemd or non systemd systems.
  For the context: sysvinit-tools was pulled in by systemd since 2014
  but it's no longer the case so better to be safe than sorry.</changelog>
  <changelog author="fbui@suse.com" date="1598443201">- Modernize openvpn.service
  * /var/run has been obsoleted since a long time.
  * on reload, send HUP signal directly rather than relying on
    killproc to look for the main process.</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- update to 2.4.9 (CVE-2020-11810, bsc#1169925O):
  * Allow unicode search string in --cryptoapicert option (Windows)
  * Skip expired certificates in Windows certificate store (Windows) (trac #966)
  * OpenSSL: Fix --crl-verify not loading multiple CRLs in one file (trac #623)
  * fix condition where a client's session could "float" to a new IP address that is not authorized ("fix illegal client float").
  This can be used to disrupt service to a freshly connected client (no session
  keys negotiated yet). It can not be used to inject or steal VPN traffic.
  CVE-2020-11810).
  * fix combination of async push (deferred auth) and NCP (trac #1259)
  * Fix OpenSSL 1.1.1 not using auto elliptic curve selection (trac #1228)
  * Fix OpenSSL error stack handling of tls_ctx_add_extra_certs
  * mbedTLS: Make sure TLS session survives move (trac #880)
  * Fix OpenSSL private key passphrase notices
  * Fix building with --enable-async-push in FreeBSD (trac #1256)
  * Fix broken fragmentation logic when using NCP (trac #1140)</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 2.4.10:
  - OpenVPN client will now announce the acceptable ciphers to the server
  (IV_CIPHER=...), so NCP cipher negotiation works better
  - Parse static challenge response in auth-pam plugin
  - Accept empty password and/or response in auth-pam plugin
  - Log serial number of revoked certificate
  - Fix tls_ctx_client/server_new leaving error on OpenSSL error stack
  - Fix auth-token not being updated if auth-nocache is set
  (this should fix all remaining client-side bugs for the combination
  "auth-nocache in client-config" + "auth-token in use on the server")
  - Fix stack overflow in OpenSolaris and *BSD NEXTADDR()
  - Fix error detection / abort in --inetd corner case (#350)
  - Fix TUNSETGROUP compatibility with very old Linux systems (#1152)
  - Fix handling of 'route remote_host' for IPv6 transport case
  (#1247 and #1332)
  - Fix --show-gateway for IPv6 on NetBSD/i386 (#734)
  - A number of documentation improvements / clarification fixes.
  - Fix line number reporting on config file errors after &lt;inline&gt; segments
  - Fix fatal error at switching remotes (#629)
  - socks.c: fix alen for DOMAIN type addresses, bump up buffer sizes (#848)
  - Switch "ks-&gt;authenticated" assertion failure to returning false (#1270)
- refresh 0001-preform-deferred-authentication-in-the-background.patch
  openvpn-2.3.x-fixed-multiple-low-severity-issues.patch against 2.4.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1619352000">- update 'rcopenvpn' to work without /etc/rc.status (boo#1185273)</changelog>
  <changelog author="dmueller@suse.com" date="1622462400">- update to 2.4.11 (bsc#1185279):
  * CVE-2020-15078 see https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
  * This bug allows - under very specific circumstances - to trick a server using
    delayed authentication (plugin or management) into returning a PUSH_REPLY
    before the AUTH_FAILED message, which can possibly be used to gather
    information about a VPN setup.
  * In combination with "--auth-gen-token" or an user-specific token auth
    solution it can be possible to get access to a VPN with an
    otherwise-invalid account.
  * Fix potential NULL ptr crash if compiled with DMALLOC
- drop sysv init support, it hasn't build successfully in ages
  and is build-disabled in devel project</changelog>
  <changelog author="max@suse.com" date="1628164800">- Update to 2.5.3:
  * Removal of BF-CBC support in default configuration
  * ** POSSIBLE INCOMPATIBILITY ***
    See section "DATA CHANNEL CIPHER NEGOTIATION" in openvpn(8).
  * Connections setup is now much faster
  * Support ChaCha20-Poly1305 cipher in the OpenVPN data channel
  * Improved TLS 1.3 support when using OpenSSL 1.1.1 or newer
  * Client-specific tls-crypt keys (--tls-crypt-v2)
  * Improved Data channel cipher negotiation
  * HMAC based auth-token support for seamless reconnects to
    standalone servers or a group of servers
  * Asynchronous (deferred) authentication support for auth-pam
    plugin
  * Asynchronous (deferred) support for client-connect scripts and
    plugins
  * Support IPv4 configs with /31 netmasks
  * 802.1q VLAN support on TAP servers
  * Support IPv6-only tunnels
  * New option --block-ipv6 to reject all IPv6 packets (ICMPv6)
  * Support Virtual Routing and Forwarding (VRF)
  * Netlink integration (OpenVPN no longer needs to execute
    ifconfig/route or ip commands)
  * Obsoletes openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch
- bsc#1062157: The fix for bsc#934237 causes problems with the
  crypto self-test of newer openvpn versions.
  Remove openvpn-2.3.x-fixed-multiple-low-severity-issues.patch .</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 2.5.4:
  * fix prompting for password on windows console if stderr redirection
    is in use - this breaks 2.5.x on Win11/ARM, and might also break
    on Win11/adm64 when released.
  * fix setting MAC address on TAP adapters (--lladdr) to use sitnl
    (was overlooked, and still used "ifconfig" calls)
  * various improvements for man page building (rst2man/rst2html etc)
  * minor bugfix with IN6_IS_ADDR_UNSPECIFIED() use (breaks build on
    at least one platform strictly checking this)
  * fix minor memory leak under certain conditions in add_route() and
    add_route_ipv6()
  * documentation improvements
  * copyright updates where needed
  * better error reporting when win32 console access fails</changelog>
  <changelog author="jengelh@inai.de" date="1638619200">- Avoid bashisms and use POSIX sh syntax.
- Use more efficient find commands.
- Trim marketing filler words from description.</changelog>
  <changelog author="max@suse.com" date="1638964800">- Drop 0001-preform-deferred-authentication-in-the-background.patch
  Upstream has meanwhile solved this differently and the two
  implementations interfere (boo#1193017).
- Obsoleted SLE patches up to this point:
  * openvpn-CVE-2020-15078.patch
  * openvpn-CVE-2020-11810.patch
  * openvpn-CVE-2018-7544.patch
  * openvpn-CVE-2018-9336.patch</changelog>
  <changelog author="dmueller@suse.com" date="1639569600">- update to 2.5.5:
  * SWEET32/64bit cipher deprecation change was postponed to 2.7
  * improve "make check" to notice if "openvpn --show-cipher" crashes
  * improve argv unit tests
  * ensure unit tests work with mbedTLS builds without BF-CBC ciphers
  * include "--push-remove" in the output of "openvpn --help"
  * fix error in iptables syntax in example firewall.sh script
  * fix "resolvconf -p" invocation in example "up" script
  * fix "common_name" environment for script calls when
    "--username-as-common-name" is in effect (Trac #1434)
  * move "push-peer-info" documentation from "server options" to "client"
  * correct "foreign_option_{n}" typo in manpage
  * README.down-root: fix plugin module name</changelog>
  <changelog author="max@suse.com" date="1644494400">- Fix license tag in spec file.</changelog>
  <changelog author="max@suse.com" date="1648036800">- update to 2.5.6:
  * bsc#1197341, CVE-2022-0547: possible authentication bypass in
    external authentication plug-in
  * Fix "--mtu-disc maybe|yes" on Linux
  * Fix $common_name variable passed to scripts when
    username-as-common-name is in effect.
  * Fix potential memory leaks in add_route() and add_route_ipv6().
  * Apply connect-retry backoff only to one side of the connection
    in p2p mode.
  * repair "--inactive" handling with a 'bytes' parameter larger
    than 2 Gbytes.
  * new plugin (sample-plugin/defer/multi-auth.c) to help testing
    with multiple parallel plugins that succeed/fail in
    direct/deferred mode.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1123557: --suppress-timestamps isn't needed by default.</changelog>
</package>
<package pkgid="4f3b34a1e2da601b545479fde996ccc4258e13f97b113035c980c92fbe0ceda4" name="openvpn" arch="s390x">
  <version epoch="0" ver="2.5.6" rel="150400.3.3.1"/>
  <changelog author="max@suse.com" date="1564401600">- Clarify in the service file that the reload action doesn't work
  when dropping root privileges (boo#1142830).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1568808000">- Add p11kit build time dependency for pkcs providers autodetection</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578398400">- Update to version 2.4.8:
  * mbedtls: fix segfault by calling mbedtls_cipher_free() in
    cipher_ctx_free()
  * cleanup: Remove RPM openvpn.spec build approach
  * docs: Update INSTALL
  * build: Package missing mock_msg.h
  * Increase listen() backlog queue to 32
  * Force combinationation of --socks-proxy and --proto UDP to use
    IPv4.
  * Wrong FILETYPE in .rc files
  * Do not set pkcs11-helper 'safe fork mode'
  * tests/t_lpback.sh: Switch sed(1) to POSIX-compatible regex.
  * Fix various compiler warnings
  * Fix regression, reinstate LibreSSL support.
  * man: correct the description of --capath and --crl-verify
    regarding CRLs
  * Fix typo in NTLM proxy debug message
  * Ignore --pull-filter for --mode server
  * openssl: Fix compilation without deprecated OpenSSL 1.1 APIs
  * Better error message when script fails due to script-security
    setting
  * Correct the return value of cryptoapi RSA signature callbacks
  * Handle PSS padding in cryptoapicert
  * cmocka: use relative paths
  * Fix documentation of tls-verify script argument</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.
- Use %systemd_ordering instead of systemd_requires: in fact,
  systemd is not a hard requirement for openvpn. But in case a
  system is being installed with systemd, we want systemd to be
  there before  openvpn is being installed.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1583323200">- Fix inconsistency in openvpn.service:
  * It uses the unescape instance name as config file basename,
    so use that in the description as well</changelog>
  <changelog author="fbui@suse.com" date="1598443200">- Explicitly requires sysvinit-tools as some of the tools shipped by
  this package are used in various places regardless of whether
  openvpn is built for systemd or non systemd systems.
  For the context: sysvinit-tools was pulled in by systemd since 2014
  but it's no longer the case so better to be safe than sorry.</changelog>
  <changelog author="fbui@suse.com" date="1598443201">- Modernize openvpn.service
  * /var/run has been obsoleted since a long time.
  * on reload, send HUP signal directly rather than relying on
    killproc to look for the main process.</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- update to 2.4.9 (CVE-2020-11810, bsc#1169925O):
  * Allow unicode search string in --cryptoapicert option (Windows)
  * Skip expired certificates in Windows certificate store (Windows) (trac #966)
  * OpenSSL: Fix --crl-verify not loading multiple CRLs in one file (trac #623)
  * fix condition where a client's session could "float" to a new IP address that is not authorized ("fix illegal client float").
  This can be used to disrupt service to a freshly connected client (no session
  keys negotiated yet). It can not be used to inject or steal VPN traffic.
  CVE-2020-11810).
  * fix combination of async push (deferred auth) and NCP (trac #1259)
  * Fix OpenSSL 1.1.1 not using auto elliptic curve selection (trac #1228)
  * Fix OpenSSL error stack handling of tls_ctx_add_extra_certs
  * mbedTLS: Make sure TLS session survives move (trac #880)
  * Fix OpenSSL private key passphrase notices
  * Fix building with --enable-async-push in FreeBSD (trac #1256)
  * Fix broken fragmentation logic when using NCP (trac #1140)</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 2.4.10:
  - OpenVPN client will now announce the acceptable ciphers to the server
  (IV_CIPHER=...), so NCP cipher negotiation works better
  - Parse static challenge response in auth-pam plugin
  - Accept empty password and/or response in auth-pam plugin
  - Log serial number of revoked certificate
  - Fix tls_ctx_client/server_new leaving error on OpenSSL error stack
  - Fix auth-token not being updated if auth-nocache is set
  (this should fix all remaining client-side bugs for the combination
  "auth-nocache in client-config" + "auth-token in use on the server")
  - Fix stack overflow in OpenSolaris and *BSD NEXTADDR()
  - Fix error detection / abort in --inetd corner case (#350)
  - Fix TUNSETGROUP compatibility with very old Linux systems (#1152)
  - Fix handling of 'route remote_host' for IPv6 transport case
  (#1247 and #1332)
  - Fix --show-gateway for IPv6 on NetBSD/i386 (#734)
  - A number of documentation improvements / clarification fixes.
  - Fix line number reporting on config file errors after &lt;inline&gt; segments
  - Fix fatal error at switching remotes (#629)
  - socks.c: fix alen for DOMAIN type addresses, bump up buffer sizes (#848)
  - Switch "ks-&gt;authenticated" assertion failure to returning false (#1270)
- refresh 0001-preform-deferred-authentication-in-the-background.patch
  openvpn-2.3.x-fixed-multiple-low-severity-issues.patch against 2.4.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1619352000">- update 'rcopenvpn' to work without /etc/rc.status (boo#1185273)</changelog>
  <changelog author="dmueller@suse.com" date="1622462400">- update to 2.4.11 (bsc#1185279):
  * CVE-2020-15078 see https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
  * This bug allows - under very specific circumstances - to trick a server using
    delayed authentication (plugin or management) into returning a PUSH_REPLY
    before the AUTH_FAILED message, which can possibly be used to gather
    information about a VPN setup.
  * In combination with "--auth-gen-token" or an user-specific token auth
    solution it can be possible to get access to a VPN with an
    otherwise-invalid account.
  * Fix potential NULL ptr crash if compiled with DMALLOC
- drop sysv init support, it hasn't build successfully in ages
  and is build-disabled in devel project</changelog>
  <changelog author="max@suse.com" date="1628164800">- Update to 2.5.3:
  * Removal of BF-CBC support in default configuration
  * ** POSSIBLE INCOMPATIBILITY ***
    See section "DATA CHANNEL CIPHER NEGOTIATION" in openvpn(8).
  * Connections setup is now much faster
  * Support ChaCha20-Poly1305 cipher in the OpenVPN data channel
  * Improved TLS 1.3 support when using OpenSSL 1.1.1 or newer
  * Client-specific tls-crypt keys (--tls-crypt-v2)
  * Improved Data channel cipher negotiation
  * HMAC based auth-token support for seamless reconnects to
    standalone servers or a group of servers
  * Asynchronous (deferred) authentication support for auth-pam
    plugin
  * Asynchronous (deferred) support for client-connect scripts and
    plugins
  * Support IPv4 configs with /31 netmasks
  * 802.1q VLAN support on TAP servers
  * Support IPv6-only tunnels
  * New option --block-ipv6 to reject all IPv6 packets (ICMPv6)
  * Support Virtual Routing and Forwarding (VRF)
  * Netlink integration (OpenVPN no longer needs to execute
    ifconfig/route or ip commands)
  * Obsoletes openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch
- bsc#1062157: The fix for bsc#934237 causes problems with the
  crypto self-test of newer openvpn versions.
  Remove openvpn-2.3.x-fixed-multiple-low-severity-issues.patch .</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 2.5.4:
  * fix prompting for password on windows console if stderr redirection
    is in use - this breaks 2.5.x on Win11/ARM, and might also break
    on Win11/adm64 when released.
  * fix setting MAC address on TAP adapters (--lladdr) to use sitnl
    (was overlooked, and still used "ifconfig" calls)
  * various improvements for man page building (rst2man/rst2html etc)
  * minor bugfix with IN6_IS_ADDR_UNSPECIFIED() use (breaks build on
    at least one platform strictly checking this)
  * fix minor memory leak under certain conditions in add_route() and
    add_route_ipv6()
  * documentation improvements
  * copyright updates where needed
  * better error reporting when win32 console access fails</changelog>
  <changelog author="jengelh@inai.de" date="1638619200">- Avoid bashisms and use POSIX sh syntax.
- Use more efficient find commands.
- Trim marketing filler words from description.</changelog>
  <changelog author="max@suse.com" date="1638964800">- Drop 0001-preform-deferred-authentication-in-the-background.patch
  Upstream has meanwhile solved this differently and the two
  implementations interfere (boo#1193017).
- Obsoleted SLE patches up to this point:
  * openvpn-CVE-2020-15078.patch
  * openvpn-CVE-2020-11810.patch
  * openvpn-CVE-2018-7544.patch
  * openvpn-CVE-2018-9336.patch</changelog>
  <changelog author="dmueller@suse.com" date="1639569600">- update to 2.5.5:
  * SWEET32/64bit cipher deprecation change was postponed to 2.7
  * improve "make check" to notice if "openvpn --show-cipher" crashes
  * improve argv unit tests
  * ensure unit tests work with mbedTLS builds without BF-CBC ciphers
  * include "--push-remove" in the output of "openvpn --help"
  * fix error in iptables syntax in example firewall.sh script
  * fix "resolvconf -p" invocation in example "up" script
  * fix "common_name" environment for script calls when
    "--username-as-common-name" is in effect (Trac #1434)
  * move "push-peer-info" documentation from "server options" to "client"
  * correct "foreign_option_{n}" typo in manpage
  * README.down-root: fix plugin module name</changelog>
  <changelog author="max@suse.com" date="1644494400">- Fix license tag in spec file.</changelog>
  <changelog author="max@suse.com" date="1648036800">- update to 2.5.6:
  * bsc#1197341, CVE-2022-0547: possible authentication bypass in
    external authentication plug-in
  * Fix "--mtu-disc maybe|yes" on Linux
  * Fix $common_name variable passed to scripts when
    username-as-common-name is in effect.
  * Fix potential memory leaks in add_route() and add_route_ipv6().
  * Apply connect-retry backoff only to one side of the connection
    in p2p mode.
  * repair "--inactive" handling with a 'bytes' parameter larger
    than 2 Gbytes.
  * new plugin (sample-plugin/defer/multi-auth.c) to help testing
    with multiple parallel plugins that succeed/fail in
    direct/deferred mode.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1123557: --suppress-timestamps isn't needed by default.</changelog>
</package>
<package pkgid="971f34e718cc095c2873561de831ec05d922cb58234e2abbdab2d122838818a6" name="openvpn" arch="src">
  <version epoch="0" ver="2.5.6" rel="150400.3.3.1"/>
  <changelog author="max@suse.com" date="1564401600">- Clarify in the service file that the reload action doesn't work
  when dropping root privileges (boo#1142830).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1568808000">- Add p11kit build time dependency for pkcs providers autodetection</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578398400">- Update to version 2.4.8:
  * mbedtls: fix segfault by calling mbedtls_cipher_free() in
    cipher_ctx_free()
  * cleanup: Remove RPM openvpn.spec build approach
  * docs: Update INSTALL
  * build: Package missing mock_msg.h
  * Increase listen() backlog queue to 32
  * Force combinationation of --socks-proxy and --proto UDP to use
    IPv4.
  * Wrong FILETYPE in .rc files
  * Do not set pkcs11-helper 'safe fork mode'
  * tests/t_lpback.sh: Switch sed(1) to POSIX-compatible regex.
  * Fix various compiler warnings
  * Fix regression, reinstate LibreSSL support.
  * man: correct the description of --capath and --crl-verify
    regarding CRLs
  * Fix typo in NTLM proxy debug message
  * Ignore --pull-filter for --mode server
  * openssl: Fix compilation without deprecated OpenSSL 1.1 APIs
  * Better error message when script fails due to script-security
    setting
  * Correct the return value of cryptoapi RSA signature callbacks
  * Handle PSS padding in cryptoapicert
  * cmocka: use relative paths
  * Fix documentation of tls-verify script argument</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.
- Use %systemd_ordering instead of systemd_requires: in fact,
  systemd is not a hard requirement for openvpn. But in case a
  system is being installed with systemd, we want systemd to be
  there before  openvpn is being installed.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1583323200">- Fix inconsistency in openvpn.service:
  * It uses the unescape instance name as config file basename,
    so use that in the description as well</changelog>
  <changelog author="fbui@suse.com" date="1598443200">- Explicitly requires sysvinit-tools as some of the tools shipped by
  this package are used in various places regardless of whether
  openvpn is built for systemd or non systemd systems.
  For the context: sysvinit-tools was pulled in by systemd since 2014
  but it's no longer the case so better to be safe than sorry.</changelog>
  <changelog author="fbui@suse.com" date="1598443201">- Modernize openvpn.service
  * /var/run has been obsoleted since a long time.
  * on reload, send HUP signal directly rather than relying on
    killproc to look for the main process.</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- update to 2.4.9 (CVE-2020-11810, bsc#1169925O):
  * Allow unicode search string in --cryptoapicert option (Windows)
  * Skip expired certificates in Windows certificate store (Windows) (trac #966)
  * OpenSSL: Fix --crl-verify not loading multiple CRLs in one file (trac #623)
  * fix condition where a client's session could "float" to a new IP address that is not authorized ("fix illegal client float").
  This can be used to disrupt service to a freshly connected client (no session
  keys negotiated yet). It can not be used to inject or steal VPN traffic.
  CVE-2020-11810).
  * fix combination of async push (deferred auth) and NCP (trac #1259)
  * Fix OpenSSL 1.1.1 not using auto elliptic curve selection (trac #1228)
  * Fix OpenSSL error stack handling of tls_ctx_add_extra_certs
  * mbedTLS: Make sure TLS session survives move (trac #880)
  * Fix OpenSSL private key passphrase notices
  * Fix building with --enable-async-push in FreeBSD (trac #1256)
  * Fix broken fragmentation logic when using NCP (trac #1140)</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 2.4.10:
  - OpenVPN client will now announce the acceptable ciphers to the server
  (IV_CIPHER=...), so NCP cipher negotiation works better
  - Parse static challenge response in auth-pam plugin
  - Accept empty password and/or response in auth-pam plugin
  - Log serial number of revoked certificate
  - Fix tls_ctx_client/server_new leaving error on OpenSSL error stack
  - Fix auth-token not being updated if auth-nocache is set
  (this should fix all remaining client-side bugs for the combination
  "auth-nocache in client-config" + "auth-token in use on the server")
  - Fix stack overflow in OpenSolaris and *BSD NEXTADDR()
  - Fix error detection / abort in --inetd corner case (#350)
  - Fix TUNSETGROUP compatibility with very old Linux systems (#1152)
  - Fix handling of 'route remote_host' for IPv6 transport case
  (#1247 and #1332)
  - Fix --show-gateway for IPv6 on NetBSD/i386 (#734)
  - A number of documentation improvements / clarification fixes.
  - Fix line number reporting on config file errors after &lt;inline&gt; segments
  - Fix fatal error at switching remotes (#629)
  - socks.c: fix alen for DOMAIN type addresses, bump up buffer sizes (#848)
  - Switch "ks-&gt;authenticated" assertion failure to returning false (#1270)
- refresh 0001-preform-deferred-authentication-in-the-background.patch
  openvpn-2.3.x-fixed-multiple-low-severity-issues.patch against 2.4.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1619352000">- update 'rcopenvpn' to work without /etc/rc.status (boo#1185273)</changelog>
  <changelog author="dmueller@suse.com" date="1622462400">- update to 2.4.11 (bsc#1185279):
  * CVE-2020-15078 see https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
  * This bug allows - under very specific circumstances - to trick a server using
    delayed authentication (plugin or management) into returning a PUSH_REPLY
    before the AUTH_FAILED message, which can possibly be used to gather
    information about a VPN setup.
  * In combination with "--auth-gen-token" or an user-specific token auth
    solution it can be possible to get access to a VPN with an
    otherwise-invalid account.
  * Fix potential NULL ptr crash if compiled with DMALLOC
- drop sysv init support, it hasn't build successfully in ages
  and is build-disabled in devel project</changelog>
  <changelog author="max@suse.com" date="1628164800">- Update to 2.5.3:
  * Removal of BF-CBC support in default configuration
  * ** POSSIBLE INCOMPATIBILITY ***
    See section "DATA CHANNEL CIPHER NEGOTIATION" in openvpn(8).
  * Connections setup is now much faster
  * Support ChaCha20-Poly1305 cipher in the OpenVPN data channel
  * Improved TLS 1.3 support when using OpenSSL 1.1.1 or newer
  * Client-specific tls-crypt keys (--tls-crypt-v2)
  * Improved Data channel cipher negotiation
  * HMAC based auth-token support for seamless reconnects to
    standalone servers or a group of servers
  * Asynchronous (deferred) authentication support for auth-pam
    plugin
  * Asynchronous (deferred) support for client-connect scripts and
    plugins
  * Support IPv4 configs with /31 netmasks
  * 802.1q VLAN support on TAP servers
  * Support IPv6-only tunnels
  * New option --block-ipv6 to reject all IPv6 packets (ICMPv6)
  * Support Virtual Routing and Forwarding (VRF)
  * Netlink integration (OpenVPN no longer needs to execute
    ifconfig/route or ip commands)
  * Obsoletes openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch
- bsc#1062157: The fix for bsc#934237 causes problems with the
  crypto self-test of newer openvpn versions.
  Remove openvpn-2.3.x-fixed-multiple-low-severity-issues.patch .</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 2.5.4:
  * fix prompting for password on windows console if stderr redirection
    is in use - this breaks 2.5.x on Win11/ARM, and might also break
    on Win11/adm64 when released.
  * fix setting MAC address on TAP adapters (--lladdr) to use sitnl
    (was overlooked, and still used "ifconfig" calls)
  * various improvements for man page building (rst2man/rst2html etc)
  * minor bugfix with IN6_IS_ADDR_UNSPECIFIED() use (breaks build on
    at least one platform strictly checking this)
  * fix minor memory leak under certain conditions in add_route() and
    add_route_ipv6()
  * documentation improvements
  * copyright updates where needed
  * better error reporting when win32 console access fails</changelog>
  <changelog author="jengelh@inai.de" date="1638619200">- Avoid bashisms and use POSIX sh syntax.
- Use more efficient find commands.
- Trim marketing filler words from description.</changelog>
  <changelog author="max@suse.com" date="1638964800">- Drop 0001-preform-deferred-authentication-in-the-background.patch
  Upstream has meanwhile solved this differently and the two
  implementations interfere (boo#1193017).
- Obsoleted SLE patches up to this point:
  * openvpn-CVE-2020-15078.patch
  * openvpn-CVE-2020-11810.patch
  * openvpn-CVE-2018-7544.patch
  * openvpn-CVE-2018-9336.patch</changelog>
  <changelog author="dmueller@suse.com" date="1639569600">- update to 2.5.5:
  * SWEET32/64bit cipher deprecation change was postponed to 2.7
  * improve "make check" to notice if "openvpn --show-cipher" crashes
  * improve argv unit tests
  * ensure unit tests work with mbedTLS builds without BF-CBC ciphers
  * include "--push-remove" in the output of "openvpn --help"
  * fix error in iptables syntax in example firewall.sh script
  * fix "resolvconf -p" invocation in example "up" script
  * fix "common_name" environment for script calls when
    "--username-as-common-name" is in effect (Trac #1434)
  * move "push-peer-info" documentation from "server options" to "client"
  * correct "foreign_option_{n}" typo in manpage
  * README.down-root: fix plugin module name</changelog>
  <changelog author="max@suse.com" date="1644494400">- Fix license tag in spec file.</changelog>
  <changelog author="max@suse.com" date="1648036800">- update to 2.5.6:
  * bsc#1197341, CVE-2022-0547: possible authentication bypass in
    external authentication plug-in
  * Fix "--mtu-disc maybe|yes" on Linux
  * Fix $common_name variable passed to scripts when
    username-as-common-name is in effect.
  * Fix potential memory leaks in add_route() and add_route_ipv6().
  * Apply connect-retry backoff only to one side of the connection
    in p2p mode.
  * repair "--inactive" handling with a 'bytes' parameter larger
    than 2 Gbytes.
  * new plugin (sample-plugin/defer/multi-auth.c) to help testing
    with multiple parallel plugins that succeed/fail in
    direct/deferred mode.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1123557: --suppress-timestamps isn't needed by default.</changelog>
</package>
<package pkgid="29512235b3b30299d5732f48c2690f0282f90add83cd2bc2993834a24d413f4f" name="openvpn" arch="x86_64">
  <version epoch="0" ver="2.5.6" rel="150400.3.3.1"/>
  <changelog author="max@suse.com" date="1564401600">- Clarify in the service file that the reload action doesn't work
  when dropping root privileges (boo#1142830).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1568808000">- Add p11kit build time dependency for pkcs providers autodetection</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578398400">- Update to version 2.4.8:
  * mbedtls: fix segfault by calling mbedtls_cipher_free() in
    cipher_ctx_free()
  * cleanup: Remove RPM openvpn.spec build approach
  * docs: Update INSTALL
  * build: Package missing mock_msg.h
  * Increase listen() backlog queue to 32
  * Force combinationation of --socks-proxy and --proto UDP to use
    IPv4.
  * Wrong FILETYPE in .rc files
  * Do not set pkcs11-helper 'safe fork mode'
  * tests/t_lpback.sh: Switch sed(1) to POSIX-compatible regex.
  * Fix various compiler warnings
  * Fix regression, reinstate LibreSSL support.
  * man: correct the description of --capath and --crl-verify
    regarding CRLs
  * Fix typo in NTLM proxy debug message
  * Ignore --pull-filter for --mode server
  * openssl: Fix compilation without deprecated OpenSSL 1.1 APIs
  * Better error message when script fails due to script-security
    setting
  * Correct the return value of cryptoapi RSA signature callbacks
  * Handle PSS padding in cryptoapicert
  * cmocka: use relative paths
  * Fix documentation of tls-verify script argument</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.
- Use %systemd_ordering instead of systemd_requires: in fact,
  systemd is not a hard requirement for openvpn. But in case a
  system is being installed with systemd, we want systemd to be
  there before  openvpn is being installed.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1583323200">- Fix inconsistency in openvpn.service:
  * It uses the unescape instance name as config file basename,
    so use that in the description as well</changelog>
  <changelog author="fbui@suse.com" date="1598443200">- Explicitly requires sysvinit-tools as some of the tools shipped by
  this package are used in various places regardless of whether
  openvpn is built for systemd or non systemd systems.
  For the context: sysvinit-tools was pulled in by systemd since 2014
  but it's no longer the case so better to be safe than sorry.</changelog>
  <changelog author="fbui@suse.com" date="1598443201">- Modernize openvpn.service
  * /var/run has been obsoleted since a long time.
  * on reload, send HUP signal directly rather than relying on
    killproc to look for the main process.</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- update to 2.4.9 (CVE-2020-11810, bsc#1169925O):
  * Allow unicode search string in --cryptoapicert option (Windows)
  * Skip expired certificates in Windows certificate store (Windows) (trac #966)
  * OpenSSL: Fix --crl-verify not loading multiple CRLs in one file (trac #623)
  * fix condition where a client's session could "float" to a new IP address that is not authorized ("fix illegal client float").
  This can be used to disrupt service to a freshly connected client (no session
  keys negotiated yet). It can not be used to inject or steal VPN traffic.
  CVE-2020-11810).
  * fix combination of async push (deferred auth) and NCP (trac #1259)
  * Fix OpenSSL 1.1.1 not using auto elliptic curve selection (trac #1228)
  * Fix OpenSSL error stack handling of tls_ctx_add_extra_certs
  * mbedTLS: Make sure TLS session survives move (trac #880)
  * Fix OpenSSL private key passphrase notices
  * Fix building with --enable-async-push in FreeBSD (trac #1256)
  * Fix broken fragmentation logic when using NCP (trac #1140)</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 2.4.10:
  - OpenVPN client will now announce the acceptable ciphers to the server
  (IV_CIPHER=...), so NCP cipher negotiation works better
  - Parse static challenge response in auth-pam plugin
  - Accept empty password and/or response in auth-pam plugin
  - Log serial number of revoked certificate
  - Fix tls_ctx_client/server_new leaving error on OpenSSL error stack
  - Fix auth-token not being updated if auth-nocache is set
  (this should fix all remaining client-side bugs for the combination
  "auth-nocache in client-config" + "auth-token in use on the server")
  - Fix stack overflow in OpenSolaris and *BSD NEXTADDR()
  - Fix error detection / abort in --inetd corner case (#350)
  - Fix TUNSETGROUP compatibility with very old Linux systems (#1152)
  - Fix handling of 'route remote_host' for IPv6 transport case
  (#1247 and #1332)
  - Fix --show-gateway for IPv6 on NetBSD/i386 (#734)
  - A number of documentation improvements / clarification fixes.
  - Fix line number reporting on config file errors after &lt;inline&gt; segments
  - Fix fatal error at switching remotes (#629)
  - socks.c: fix alen for DOMAIN type addresses, bump up buffer sizes (#848)
  - Switch "ks-&gt;authenticated" assertion failure to returning false (#1270)
- refresh 0001-preform-deferred-authentication-in-the-background.patch
  openvpn-2.3.x-fixed-multiple-low-severity-issues.patch against 2.4.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1619352000">- update 'rcopenvpn' to work without /etc/rc.status (boo#1185273)</changelog>
  <changelog author="dmueller@suse.com" date="1622462400">- update to 2.4.11 (bsc#1185279):
  * CVE-2020-15078 see https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
  * This bug allows - under very specific circumstances - to trick a server using
    delayed authentication (plugin or management) into returning a PUSH_REPLY
    before the AUTH_FAILED message, which can possibly be used to gather
    information about a VPN setup.
  * In combination with "--auth-gen-token" or an user-specific token auth
    solution it can be possible to get access to a VPN with an
    otherwise-invalid account.
  * Fix potential NULL ptr crash if compiled with DMALLOC
- drop sysv init support, it hasn't build successfully in ages
  and is build-disabled in devel project</changelog>
  <changelog author="max@suse.com" date="1628164800">- Update to 2.5.3:
  * Removal of BF-CBC support in default configuration
  * ** POSSIBLE INCOMPATIBILITY ***
    See section "DATA CHANNEL CIPHER NEGOTIATION" in openvpn(8).
  * Connections setup is now much faster
  * Support ChaCha20-Poly1305 cipher in the OpenVPN data channel
  * Improved TLS 1.3 support when using OpenSSL 1.1.1 or newer
  * Client-specific tls-crypt keys (--tls-crypt-v2)
  * Improved Data channel cipher negotiation
  * HMAC based auth-token support for seamless reconnects to
    standalone servers or a group of servers
  * Asynchronous (deferred) authentication support for auth-pam
    plugin
  * Asynchronous (deferred) support for client-connect scripts and
    plugins
  * Support IPv4 configs with /31 netmasks
  * 802.1q VLAN support on TAP servers
  * Support IPv6-only tunnels
  * New option --block-ipv6 to reject all IPv6 packets (ICMPv6)
  * Support Virtual Routing and Forwarding (VRF)
  * Netlink integration (OpenVPN no longer needs to execute
    ifconfig/route or ip commands)
  * Obsoletes openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch
- bsc#1062157: The fix for bsc#934237 causes problems with the
  crypto self-test of newer openvpn versions.
  Remove openvpn-2.3.x-fixed-multiple-low-severity-issues.patch .</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 2.5.4:
  * fix prompting for password on windows console if stderr redirection
    is in use - this breaks 2.5.x on Win11/ARM, and might also break
    on Win11/adm64 when released.
  * fix setting MAC address on TAP adapters (--lladdr) to use sitnl
    (was overlooked, and still used "ifconfig" calls)
  * various improvements for man page building (rst2man/rst2html etc)
  * minor bugfix with IN6_IS_ADDR_UNSPECIFIED() use (breaks build on
    at least one platform strictly checking this)
  * fix minor memory leak under certain conditions in add_route() and
    add_route_ipv6()
  * documentation improvements
  * copyright updates where needed
  * better error reporting when win32 console access fails</changelog>
  <changelog author="jengelh@inai.de" date="1638619200">- Avoid bashisms and use POSIX sh syntax.
- Use more efficient find commands.
- Trim marketing filler words from description.</changelog>
  <changelog author="max@suse.com" date="1638964800">- Drop 0001-preform-deferred-authentication-in-the-background.patch
  Upstream has meanwhile solved this differently and the two
  implementations interfere (boo#1193017).
- Obsoleted SLE patches up to this point:
  * openvpn-CVE-2020-15078.patch
  * openvpn-CVE-2020-11810.patch
  * openvpn-CVE-2018-7544.patch
  * openvpn-CVE-2018-9336.patch</changelog>
  <changelog author="dmueller@suse.com" date="1639569600">- update to 2.5.5:
  * SWEET32/64bit cipher deprecation change was postponed to 2.7
  * improve "make check" to notice if "openvpn --show-cipher" crashes
  * improve argv unit tests
  * ensure unit tests work with mbedTLS builds without BF-CBC ciphers
  * include "--push-remove" in the output of "openvpn --help"
  * fix error in iptables syntax in example firewall.sh script
  * fix "resolvconf -p" invocation in example "up" script
  * fix "common_name" environment for script calls when
    "--username-as-common-name" is in effect (Trac #1434)
  * move "push-peer-info" documentation from "server options" to "client"
  * correct "foreign_option_{n}" typo in manpage
  * README.down-root: fix plugin module name</changelog>
  <changelog author="max@suse.com" date="1644494400">- Fix license tag in spec file.</changelog>
  <changelog author="max@suse.com" date="1648036800">- update to 2.5.6:
  * bsc#1197341, CVE-2022-0547: possible authentication bypass in
    external authentication plug-in
  * Fix "--mtu-disc maybe|yes" on Linux
  * Fix $common_name variable passed to scripts when
    username-as-common-name is in effect.
  * Fix potential memory leaks in add_route() and add_route_ipv6().
  * Apply connect-retry backoff only to one side of the connection
    in p2p mode.
  * repair "--inactive" handling with a 'bytes' parameter larger
    than 2 Gbytes.
  * new plugin (sample-plugin/defer/multi-auth.c) to help testing
    with multiple parallel plugins that succeed/fail in
    direct/deferred mode.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1123557: --suppress-timestamps isn't needed by default.</changelog>
</package>
<package pkgid="cbb3f8e1d8b1fbd212233a65ca91637cf8c746fb3daafef04c5dec901b00d4dc" name="openvpn-auth-pam-plugin" arch="aarch64">
  <version epoch="0" ver="2.5.6" rel="150400.3.3.1"/>
  <changelog author="max@suse.com" date="1564401600">- Clarify in the service file that the reload action doesn't work
  when dropping root privileges (boo#1142830).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1568808000">- Add p11kit build time dependency for pkcs providers autodetection</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578398400">- Update to version 2.4.8:
  * mbedtls: fix segfault by calling mbedtls_cipher_free() in
    cipher_ctx_free()
  * cleanup: Remove RPM openvpn.spec build approach
  * docs: Update INSTALL
  * build: Package missing mock_msg.h
  * Increase listen() backlog queue to 32
  * Force combinationation of --socks-proxy and --proto UDP to use
    IPv4.
  * Wrong FILETYPE in .rc files
  * Do not set pkcs11-helper 'safe fork mode'
  * tests/t_lpback.sh: Switch sed(1) to POSIX-compatible regex.
  * Fix various compiler warnings
  * Fix regression, reinstate LibreSSL support.
  * man: correct the description of --capath and --crl-verify
    regarding CRLs
  * Fix typo in NTLM proxy debug message
  * Ignore --pull-filter for --mode server
  * openssl: Fix compilation without deprecated OpenSSL 1.1 APIs
  * Better error message when script fails due to script-security
    setting
  * Correct the return value of cryptoapi RSA signature callbacks
  * Handle PSS padding in cryptoapicert
  * cmocka: use relative paths
  * Fix documentation of tls-verify script argument</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.
- Use %systemd_ordering instead of systemd_requires: in fact,
  systemd is not a hard requirement for openvpn. But in case a
  system is being installed with systemd, we want systemd to be
  there before  openvpn is being installed.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1583323200">- Fix inconsistency in openvpn.service:
  * It uses the unescape instance name as config file basename,
    so use that in the description as well</changelog>
  <changelog author="fbui@suse.com" date="1598443200">- Explicitly requires sysvinit-tools as some of the tools shipped by
  this package are used in various places regardless of whether
  openvpn is built for systemd or non systemd systems.
  For the context: sysvinit-tools was pulled in by systemd since 2014
  but it's no longer the case so better to be safe than sorry.</changelog>
  <changelog author="fbui@suse.com" date="1598443201">- Modernize openvpn.service
  * /var/run has been obsoleted since a long time.
  * on reload, send HUP signal directly rather than relying on
    killproc to look for the main process.</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- update to 2.4.9 (CVE-2020-11810, bsc#1169925O):
  * Allow unicode search string in --cryptoapicert option (Windows)
  * Skip expired certificates in Windows certificate store (Windows) (trac #966)
  * OpenSSL: Fix --crl-verify not loading multiple CRLs in one file (trac #623)
  * fix condition where a client's session could "float" to a new IP address that is not authorized ("fix illegal client float").
  This can be used to disrupt service to a freshly connected client (no session
  keys negotiated yet). It can not be used to inject or steal VPN traffic.
  CVE-2020-11810).
  * fix combination of async push (deferred auth) and NCP (trac #1259)
  * Fix OpenSSL 1.1.1 not using auto elliptic curve selection (trac #1228)
  * Fix OpenSSL error stack handling of tls_ctx_add_extra_certs
  * mbedTLS: Make sure TLS session survives move (trac #880)
  * Fix OpenSSL private key passphrase notices
  * Fix building with --enable-async-push in FreeBSD (trac #1256)
  * Fix broken fragmentation logic when using NCP (trac #1140)</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 2.4.10:
  - OpenVPN client will now announce the acceptable ciphers to the server
  (IV_CIPHER=...), so NCP cipher negotiation works better
  - Parse static challenge response in auth-pam plugin
  - Accept empty password and/or response in auth-pam plugin
  - Log serial number of revoked certificate
  - Fix tls_ctx_client/server_new leaving error on OpenSSL error stack
  - Fix auth-token not being updated if auth-nocache is set
  (this should fix all remaining client-side bugs for the combination
  "auth-nocache in client-config" + "auth-token in use on the server")
  - Fix stack overflow in OpenSolaris and *BSD NEXTADDR()
  - Fix error detection / abort in --inetd corner case (#350)
  - Fix TUNSETGROUP compatibility with very old Linux systems (#1152)
  - Fix handling of 'route remote_host' for IPv6 transport case
  (#1247 and #1332)
  - Fix --show-gateway for IPv6 on NetBSD/i386 (#734)
  - A number of documentation improvements / clarification fixes.
  - Fix line number reporting on config file errors after &lt;inline&gt; segments
  - Fix fatal error at switching remotes (#629)
  - socks.c: fix alen for DOMAIN type addresses, bump up buffer sizes (#848)
  - Switch "ks-&gt;authenticated" assertion failure to returning false (#1270)
- refresh 0001-preform-deferred-authentication-in-the-background.patch
  openvpn-2.3.x-fixed-multiple-low-severity-issues.patch against 2.4.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1619352000">- update 'rcopenvpn' to work without /etc/rc.status (boo#1185273)</changelog>
  <changelog author="dmueller@suse.com" date="1622462400">- update to 2.4.11 (bsc#1185279):
  * CVE-2020-15078 see https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
  * This bug allows - under very specific circumstances - to trick a server using
    delayed authentication (plugin or management) into returning a PUSH_REPLY
    before the AUTH_FAILED message, which can possibly be used to gather
    information about a VPN setup.
  * In combination with "--auth-gen-token" or an user-specific token auth
    solution it can be possible to get access to a VPN with an
    otherwise-invalid account.
  * Fix potential NULL ptr crash if compiled with DMALLOC
- drop sysv init support, it hasn't build successfully in ages
  and is build-disabled in devel project</changelog>
  <changelog author="max@suse.com" date="1628164800">- Update to 2.5.3:
  * Removal of BF-CBC support in default configuration
  * ** POSSIBLE INCOMPATIBILITY ***
    See section "DATA CHANNEL CIPHER NEGOTIATION" in openvpn(8).
  * Connections setup is now much faster
  * Support ChaCha20-Poly1305 cipher in the OpenVPN data channel
  * Improved TLS 1.3 support when using OpenSSL 1.1.1 or newer
  * Client-specific tls-crypt keys (--tls-crypt-v2)
  * Improved Data channel cipher negotiation
  * HMAC based auth-token support for seamless reconnects to
    standalone servers or a group of servers
  * Asynchronous (deferred) authentication support for auth-pam
    plugin
  * Asynchronous (deferred) support for client-connect scripts and
    plugins
  * Support IPv4 configs with /31 netmasks
  * 802.1q VLAN support on TAP servers
  * Support IPv6-only tunnels
  * New option --block-ipv6 to reject all IPv6 packets (ICMPv6)
  * Support Virtual Routing and Forwarding (VRF)
  * Netlink integration (OpenVPN no longer needs to execute
    ifconfig/route or ip commands)
  * Obsoletes openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch
- bsc#1062157: The fix for bsc#934237 causes problems with the
  crypto self-test of newer openvpn versions.
  Remove openvpn-2.3.x-fixed-multiple-low-severity-issues.patch .</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 2.5.4:
  * fix prompting for password on windows console if stderr redirection
    is in use - this breaks 2.5.x on Win11/ARM, and might also break
    on Win11/adm64 when released.
  * fix setting MAC address on TAP adapters (--lladdr) to use sitnl
    (was overlooked, and still used "ifconfig" calls)
  * various improvements for man page building (rst2man/rst2html etc)
  * minor bugfix with IN6_IS_ADDR_UNSPECIFIED() use (breaks build on
    at least one platform strictly checking this)
  * fix minor memory leak under certain conditions in add_route() and
    add_route_ipv6()
  * documentation improvements
  * copyright updates where needed
  * better error reporting when win32 console access fails</changelog>
  <changelog author="jengelh@inai.de" date="1638619200">- Avoid bashisms and use POSIX sh syntax.
- Use more efficient find commands.
- Trim marketing filler words from description.</changelog>
  <changelog author="max@suse.com" date="1638964800">- Drop 0001-preform-deferred-authentication-in-the-background.patch
  Upstream has meanwhile solved this differently and the two
  implementations interfere (boo#1193017).
- Obsoleted SLE patches up to this point:
  * openvpn-CVE-2020-15078.patch
  * openvpn-CVE-2020-11810.patch
  * openvpn-CVE-2018-7544.patch
  * openvpn-CVE-2018-9336.patch</changelog>
  <changelog author="dmueller@suse.com" date="1639569600">- update to 2.5.5:
  * SWEET32/64bit cipher deprecation change was postponed to 2.7
  * improve "make check" to notice if "openvpn --show-cipher" crashes
  * improve argv unit tests
  * ensure unit tests work with mbedTLS builds without BF-CBC ciphers
  * include "--push-remove" in the output of "openvpn --help"
  * fix error in iptables syntax in example firewall.sh script
  * fix "resolvconf -p" invocation in example "up" script
  * fix "common_name" environment for script calls when
    "--username-as-common-name" is in effect (Trac #1434)
  * move "push-peer-info" documentation from "server options" to "client"
  * correct "foreign_option_{n}" typo in manpage
  * README.down-root: fix plugin module name</changelog>
  <changelog author="max@suse.com" date="1644494400">- Fix license tag in spec file.</changelog>
  <changelog author="max@suse.com" date="1648036800">- update to 2.5.6:
  * bsc#1197341, CVE-2022-0547: possible authentication bypass in
    external authentication plug-in
  * Fix "--mtu-disc maybe|yes" on Linux
  * Fix $common_name variable passed to scripts when
    username-as-common-name is in effect.
  * Fix potential memory leaks in add_route() and add_route_ipv6().
  * Apply connect-retry backoff only to one side of the connection
    in p2p mode.
  * repair "--inactive" handling with a 'bytes' parameter larger
    than 2 Gbytes.
  * new plugin (sample-plugin/defer/multi-auth.c) to help testing
    with multiple parallel plugins that succeed/fail in
    direct/deferred mode.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1123557: --suppress-timestamps isn't needed by default.</changelog>
</package>
<package pkgid="5809136a831f631ce817f56419ad26116a4c6663383f2f8655181363c0bc2189" name="openvpn-auth-pam-plugin" arch="ppc64le">
  <version epoch="0" ver="2.5.6" rel="150400.3.3.1"/>
  <changelog author="max@suse.com" date="1564401600">- Clarify in the service file that the reload action doesn't work
  when dropping root privileges (boo#1142830).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1568808000">- Add p11kit build time dependency for pkcs providers autodetection</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578398400">- Update to version 2.4.8:
  * mbedtls: fix segfault by calling mbedtls_cipher_free() in
    cipher_ctx_free()
  * cleanup: Remove RPM openvpn.spec build approach
  * docs: Update INSTALL
  * build: Package missing mock_msg.h
  * Increase listen() backlog queue to 32
  * Force combinationation of --socks-proxy and --proto UDP to use
    IPv4.
  * Wrong FILETYPE in .rc files
  * Do not set pkcs11-helper 'safe fork mode'
  * tests/t_lpback.sh: Switch sed(1) to POSIX-compatible regex.
  * Fix various compiler warnings
  * Fix regression, reinstate LibreSSL support.
  * man: correct the description of --capath and --crl-verify
    regarding CRLs
  * Fix typo in NTLM proxy debug message
  * Ignore --pull-filter for --mode server
  * openssl: Fix compilation without deprecated OpenSSL 1.1 APIs
  * Better error message when script fails due to script-security
    setting
  * Correct the return value of cryptoapi RSA signature callbacks
  * Handle PSS padding in cryptoapicert
  * cmocka: use relative paths
  * Fix documentation of tls-verify script argument</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.
- Use %systemd_ordering instead of systemd_requires: in fact,
  systemd is not a hard requirement for openvpn. But in case a
  system is being installed with systemd, we want systemd to be
  there before  openvpn is being installed.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1583323200">- Fix inconsistency in openvpn.service:
  * It uses the unescape instance name as config file basename,
    so use that in the description as well</changelog>
  <changelog author="fbui@suse.com" date="1598443200">- Explicitly requires sysvinit-tools as some of the tools shipped by
  this package are used in various places regardless of whether
  openvpn is built for systemd or non systemd systems.
  For the context: sysvinit-tools was pulled in by systemd since 2014
  but it's no longer the case so better to be safe than sorry.</changelog>
  <changelog author="fbui@suse.com" date="1598443201">- Modernize openvpn.service
  * /var/run has been obsoleted since a long time.
  * on reload, send HUP signal directly rather than relying on
    killproc to look for the main process.</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- update to 2.4.9 (CVE-2020-11810, bsc#1169925O):
  * Allow unicode search string in --cryptoapicert option (Windows)
  * Skip expired certificates in Windows certificate store (Windows) (trac #966)
  * OpenSSL: Fix --crl-verify not loading multiple CRLs in one file (trac #623)
  * fix condition where a client's session could "float" to a new IP address that is not authorized ("fix illegal client float").
  This can be used to disrupt service to a freshly connected client (no session
  keys negotiated yet). It can not be used to inject or steal VPN traffic.
  CVE-2020-11810).
  * fix combination of async push (deferred auth) and NCP (trac #1259)
  * Fix OpenSSL 1.1.1 not using auto elliptic curve selection (trac #1228)
  * Fix OpenSSL error stack handling of tls_ctx_add_extra_certs
  * mbedTLS: Make sure TLS session survives move (trac #880)
  * Fix OpenSSL private key passphrase notices
  * Fix building with --enable-async-push in FreeBSD (trac #1256)
  * Fix broken fragmentation logic when using NCP (trac #1140)</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 2.4.10:
  - OpenVPN client will now announce the acceptable ciphers to the server
  (IV_CIPHER=...), so NCP cipher negotiation works better
  - Parse static challenge response in auth-pam plugin
  - Accept empty password and/or response in auth-pam plugin
  - Log serial number of revoked certificate
  - Fix tls_ctx_client/server_new leaving error on OpenSSL error stack
  - Fix auth-token not being updated if auth-nocache is set
  (this should fix all remaining client-side bugs for the combination
  "auth-nocache in client-config" + "auth-token in use on the server")
  - Fix stack overflow in OpenSolaris and *BSD NEXTADDR()
  - Fix error detection / abort in --inetd corner case (#350)
  - Fix TUNSETGROUP compatibility with very old Linux systems (#1152)
  - Fix handling of 'route remote_host' for IPv6 transport case
  (#1247 and #1332)
  - Fix --show-gateway for IPv6 on NetBSD/i386 (#734)
  - A number of documentation improvements / clarification fixes.
  - Fix line number reporting on config file errors after &lt;inline&gt; segments
  - Fix fatal error at switching remotes (#629)
  - socks.c: fix alen for DOMAIN type addresses, bump up buffer sizes (#848)
  - Switch "ks-&gt;authenticated" assertion failure to returning false (#1270)
- refresh 0001-preform-deferred-authentication-in-the-background.patch
  openvpn-2.3.x-fixed-multiple-low-severity-issues.patch against 2.4.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1619352000">- update 'rcopenvpn' to work without /etc/rc.status (boo#1185273)</changelog>
  <changelog author="dmueller@suse.com" date="1622462400">- update to 2.4.11 (bsc#1185279):
  * CVE-2020-15078 see https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
  * This bug allows - under very specific circumstances - to trick a server using
    delayed authentication (plugin or management) into returning a PUSH_REPLY
    before the AUTH_FAILED message, which can possibly be used to gather
    information about a VPN setup.
  * In combination with "--auth-gen-token" or an user-specific token auth
    solution it can be possible to get access to a VPN with an
    otherwise-invalid account.
  * Fix potential NULL ptr crash if compiled with DMALLOC
- drop sysv init support, it hasn't build successfully in ages
  and is build-disabled in devel project</changelog>
  <changelog author="max@suse.com" date="1628164800">- Update to 2.5.3:
  * Removal of BF-CBC support in default configuration
  * ** POSSIBLE INCOMPATIBILITY ***
    See section "DATA CHANNEL CIPHER NEGOTIATION" in openvpn(8).
  * Connections setup is now much faster
  * Support ChaCha20-Poly1305 cipher in the OpenVPN data channel
  * Improved TLS 1.3 support when using OpenSSL 1.1.1 or newer
  * Client-specific tls-crypt keys (--tls-crypt-v2)
  * Improved Data channel cipher negotiation
  * HMAC based auth-token support for seamless reconnects to
    standalone servers or a group of servers
  * Asynchronous (deferred) authentication support for auth-pam
    plugin
  * Asynchronous (deferred) support for client-connect scripts and
    plugins
  * Support IPv4 configs with /31 netmasks
  * 802.1q VLAN support on TAP servers
  * Support IPv6-only tunnels
  * New option --block-ipv6 to reject all IPv6 packets (ICMPv6)
  * Support Virtual Routing and Forwarding (VRF)
  * Netlink integration (OpenVPN no longer needs to execute
    ifconfig/route or ip commands)
  * Obsoletes openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch
- bsc#1062157: The fix for bsc#934237 causes problems with the
  crypto self-test of newer openvpn versions.
  Remove openvpn-2.3.x-fixed-multiple-low-severity-issues.patch .</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 2.5.4:
  * fix prompting for password on windows console if stderr redirection
    is in use - this breaks 2.5.x on Win11/ARM, and might also break
    on Win11/adm64 when released.
  * fix setting MAC address on TAP adapters (--lladdr) to use sitnl
    (was overlooked, and still used "ifconfig" calls)
  * various improvements for man page building (rst2man/rst2html etc)
  * minor bugfix with IN6_IS_ADDR_UNSPECIFIED() use (breaks build on
    at least one platform strictly checking this)
  * fix minor memory leak under certain conditions in add_route() and
    add_route_ipv6()
  * documentation improvements
  * copyright updates where needed
  * better error reporting when win32 console access fails</changelog>
  <changelog author="jengelh@inai.de" date="1638619200">- Avoid bashisms and use POSIX sh syntax.
- Use more efficient find commands.
- Trim marketing filler words from description.</changelog>
  <changelog author="max@suse.com" date="1638964800">- Drop 0001-preform-deferred-authentication-in-the-background.patch
  Upstream has meanwhile solved this differently and the two
  implementations interfere (boo#1193017).
- Obsoleted SLE patches up to this point:
  * openvpn-CVE-2020-15078.patch
  * openvpn-CVE-2020-11810.patch
  * openvpn-CVE-2018-7544.patch
  * openvpn-CVE-2018-9336.patch</changelog>
  <changelog author="dmueller@suse.com" date="1639569600">- update to 2.5.5:
  * SWEET32/64bit cipher deprecation change was postponed to 2.7
  * improve "make check" to notice if "openvpn --show-cipher" crashes
  * improve argv unit tests
  * ensure unit tests work with mbedTLS builds without BF-CBC ciphers
  * include "--push-remove" in the output of "openvpn --help"
  * fix error in iptables syntax in example firewall.sh script
  * fix "resolvconf -p" invocation in example "up" script
  * fix "common_name" environment for script calls when
    "--username-as-common-name" is in effect (Trac #1434)
  * move "push-peer-info" documentation from "server options" to "client"
  * correct "foreign_option_{n}" typo in manpage
  * README.down-root: fix plugin module name</changelog>
  <changelog author="max@suse.com" date="1644494400">- Fix license tag in spec file.</changelog>
  <changelog author="max@suse.com" date="1648036800">- update to 2.5.6:
  * bsc#1197341, CVE-2022-0547: possible authentication bypass in
    external authentication plug-in
  * Fix "--mtu-disc maybe|yes" on Linux
  * Fix $common_name variable passed to scripts when
    username-as-common-name is in effect.
  * Fix potential memory leaks in add_route() and add_route_ipv6().
  * Apply connect-retry backoff only to one side of the connection
    in p2p mode.
  * repair "--inactive" handling with a 'bytes' parameter larger
    than 2 Gbytes.
  * new plugin (sample-plugin/defer/multi-auth.c) to help testing
    with multiple parallel plugins that succeed/fail in
    direct/deferred mode.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1123557: --suppress-timestamps isn't needed by default.</changelog>
</package>
<package pkgid="95b2502e0674fde51716b1c74ccd3fda2928c541591cc23d7831395af105befc" name="openvpn-auth-pam-plugin" arch="s390x">
  <version epoch="0" ver="2.5.6" rel="150400.3.3.1"/>
  <changelog author="max@suse.com" date="1564401600">- Clarify in the service file that the reload action doesn't work
  when dropping root privileges (boo#1142830).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1568808000">- Add p11kit build time dependency for pkcs providers autodetection</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578398400">- Update to version 2.4.8:
  * mbedtls: fix segfault by calling mbedtls_cipher_free() in
    cipher_ctx_free()
  * cleanup: Remove RPM openvpn.spec build approach
  * docs: Update INSTALL
  * build: Package missing mock_msg.h
  * Increase listen() backlog queue to 32
  * Force combinationation of --socks-proxy and --proto UDP to use
    IPv4.
  * Wrong FILETYPE in .rc files
  * Do not set pkcs11-helper 'safe fork mode'
  * tests/t_lpback.sh: Switch sed(1) to POSIX-compatible regex.
  * Fix various compiler warnings
  * Fix regression, reinstate LibreSSL support.
  * man: correct the description of --capath and --crl-verify
    regarding CRLs
  * Fix typo in NTLM proxy debug message
  * Ignore --pull-filter for --mode server
  * openssl: Fix compilation without deprecated OpenSSL 1.1 APIs
  * Better error message when script fails due to script-security
    setting
  * Correct the return value of cryptoapi RSA signature callbacks
  * Handle PSS padding in cryptoapicert
  * cmocka: use relative paths
  * Fix documentation of tls-verify script argument</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.
- Use %systemd_ordering instead of systemd_requires: in fact,
  systemd is not a hard requirement for openvpn. But in case a
  system is being installed with systemd, we want systemd to be
  there before  openvpn is being installed.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1583323200">- Fix inconsistency in openvpn.service:
  * It uses the unescape instance name as config file basename,
    so use that in the description as well</changelog>
  <changelog author="fbui@suse.com" date="1598443200">- Explicitly requires sysvinit-tools as some of the tools shipped by
  this package are used in various places regardless of whether
  openvpn is built for systemd or non systemd systems.
  For the context: sysvinit-tools was pulled in by systemd since 2014
  but it's no longer the case so better to be safe than sorry.</changelog>
  <changelog author="fbui@suse.com" date="1598443201">- Modernize openvpn.service
  * /var/run has been obsoleted since a long time.
  * on reload, send HUP signal directly rather than relying on
    killproc to look for the main process.</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- update to 2.4.9 (CVE-2020-11810, bsc#1169925O):
  * Allow unicode search string in --cryptoapicert option (Windows)
  * Skip expired certificates in Windows certificate store (Windows) (trac #966)
  * OpenSSL: Fix --crl-verify not loading multiple CRLs in one file (trac #623)
  * fix condition where a client's session could "float" to a new IP address that is not authorized ("fix illegal client float").
  This can be used to disrupt service to a freshly connected client (no session
  keys negotiated yet). It can not be used to inject or steal VPN traffic.
  CVE-2020-11810).
  * fix combination of async push (deferred auth) and NCP (trac #1259)
  * Fix OpenSSL 1.1.1 not using auto elliptic curve selection (trac #1228)
  * Fix OpenSSL error stack handling of tls_ctx_add_extra_certs
  * mbedTLS: Make sure TLS session survives move (trac #880)
  * Fix OpenSSL private key passphrase notices
  * Fix building with --enable-async-push in FreeBSD (trac #1256)
  * Fix broken fragmentation logic when using NCP (trac #1140)</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 2.4.10:
  - OpenVPN client will now announce the acceptable ciphers to the server
  (IV_CIPHER=...), so NCP cipher negotiation works better
  - Parse static challenge response in auth-pam plugin
  - Accept empty password and/or response in auth-pam plugin
  - Log serial number of revoked certificate
  - Fix tls_ctx_client/server_new leaving error on OpenSSL error stack
  - Fix auth-token not being updated if auth-nocache is set
  (this should fix all remaining client-side bugs for the combination
  "auth-nocache in client-config" + "auth-token in use on the server")
  - Fix stack overflow in OpenSolaris and *BSD NEXTADDR()
  - Fix error detection / abort in --inetd corner case (#350)
  - Fix TUNSETGROUP compatibility with very old Linux systems (#1152)
  - Fix handling of 'route remote_host' for IPv6 transport case
  (#1247 and #1332)
  - Fix --show-gateway for IPv6 on NetBSD/i386 (#734)
  - A number of documentation improvements / clarification fixes.
  - Fix line number reporting on config file errors after &lt;inline&gt; segments
  - Fix fatal error at switching remotes (#629)
  - socks.c: fix alen for DOMAIN type addresses, bump up buffer sizes (#848)
  - Switch "ks-&gt;authenticated" assertion failure to returning false (#1270)
- refresh 0001-preform-deferred-authentication-in-the-background.patch
  openvpn-2.3.x-fixed-multiple-low-severity-issues.patch against 2.4.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1619352000">- update 'rcopenvpn' to work without /etc/rc.status (boo#1185273)</changelog>
  <changelog author="dmueller@suse.com" date="1622462400">- update to 2.4.11 (bsc#1185279):
  * CVE-2020-15078 see https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
  * This bug allows - under very specific circumstances - to trick a server using
    delayed authentication (plugin or management) into returning a PUSH_REPLY
    before the AUTH_FAILED message, which can possibly be used to gather
    information about a VPN setup.
  * In combination with "--auth-gen-token" or an user-specific token auth
    solution it can be possible to get access to a VPN with an
    otherwise-invalid account.
  * Fix potential NULL ptr crash if compiled with DMALLOC
- drop sysv init support, it hasn't build successfully in ages
  and is build-disabled in devel project</changelog>
  <changelog author="max@suse.com" date="1628164800">- Update to 2.5.3:
  * Removal of BF-CBC support in default configuration
  * ** POSSIBLE INCOMPATIBILITY ***
    See section "DATA CHANNEL CIPHER NEGOTIATION" in openvpn(8).
  * Connections setup is now much faster
  * Support ChaCha20-Poly1305 cipher in the OpenVPN data channel
  * Improved TLS 1.3 support when using OpenSSL 1.1.1 or newer
  * Client-specific tls-crypt keys (--tls-crypt-v2)
  * Improved Data channel cipher negotiation
  * HMAC based auth-token support for seamless reconnects to
    standalone servers or a group of servers
  * Asynchronous (deferred) authentication support for auth-pam
    plugin
  * Asynchronous (deferred) support for client-connect scripts and
    plugins
  * Support IPv4 configs with /31 netmasks
  * 802.1q VLAN support on TAP servers
  * Support IPv6-only tunnels
  * New option --block-ipv6 to reject all IPv6 packets (ICMPv6)
  * Support Virtual Routing and Forwarding (VRF)
  * Netlink integration (OpenVPN no longer needs to execute
    ifconfig/route or ip commands)
  * Obsoletes openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch
- bsc#1062157: The fix for bsc#934237 causes problems with the
  crypto self-test of newer openvpn versions.
  Remove openvpn-2.3.x-fixed-multiple-low-severity-issues.patch .</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 2.5.4:
  * fix prompting for password on windows console if stderr redirection
    is in use - this breaks 2.5.x on Win11/ARM, and might also break
    on Win11/adm64 when released.
  * fix setting MAC address on TAP adapters (--lladdr) to use sitnl
    (was overlooked, and still used "ifconfig" calls)
  * various improvements for man page building (rst2man/rst2html etc)
  * minor bugfix with IN6_IS_ADDR_UNSPECIFIED() use (breaks build on
    at least one platform strictly checking this)
  * fix minor memory leak under certain conditions in add_route() and
    add_route_ipv6()
  * documentation improvements
  * copyright updates where needed
  * better error reporting when win32 console access fails</changelog>
  <changelog author="jengelh@inai.de" date="1638619200">- Avoid bashisms and use POSIX sh syntax.
- Use more efficient find commands.
- Trim marketing filler words from description.</changelog>
  <changelog author="max@suse.com" date="1638964800">- Drop 0001-preform-deferred-authentication-in-the-background.patch
  Upstream has meanwhile solved this differently and the two
  implementations interfere (boo#1193017).
- Obsoleted SLE patches up to this point:
  * openvpn-CVE-2020-15078.patch
  * openvpn-CVE-2020-11810.patch
  * openvpn-CVE-2018-7544.patch
  * openvpn-CVE-2018-9336.patch</changelog>
  <changelog author="dmueller@suse.com" date="1639569600">- update to 2.5.5:
  * SWEET32/64bit cipher deprecation change was postponed to 2.7
  * improve "make check" to notice if "openvpn --show-cipher" crashes
  * improve argv unit tests
  * ensure unit tests work with mbedTLS builds without BF-CBC ciphers
  * include "--push-remove" in the output of "openvpn --help"
  * fix error in iptables syntax in example firewall.sh script
  * fix "resolvconf -p" invocation in example "up" script
  * fix "common_name" environment for script calls when
    "--username-as-common-name" is in effect (Trac #1434)
  * move "push-peer-info" documentation from "server options" to "client"
  * correct "foreign_option_{n}" typo in manpage
  * README.down-root: fix plugin module name</changelog>
  <changelog author="max@suse.com" date="1644494400">- Fix license tag in spec file.</changelog>
  <changelog author="max@suse.com" date="1648036800">- update to 2.5.6:
  * bsc#1197341, CVE-2022-0547: possible authentication bypass in
    external authentication plug-in
  * Fix "--mtu-disc maybe|yes" on Linux
  * Fix $common_name variable passed to scripts when
    username-as-common-name is in effect.
  * Fix potential memory leaks in add_route() and add_route_ipv6().
  * Apply connect-retry backoff only to one side of the connection
    in p2p mode.
  * repair "--inactive" handling with a 'bytes' parameter larger
    than 2 Gbytes.
  * new plugin (sample-plugin/defer/multi-auth.c) to help testing
    with multiple parallel plugins that succeed/fail in
    direct/deferred mode.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1123557: --suppress-timestamps isn't needed by default.</changelog>
</package>
<package pkgid="cc3ddb0351c65991251d8fe097b29cd26b35870e0413975858344fe0143c8a5c" name="openvpn-auth-pam-plugin" arch="x86_64">
  <version epoch="0" ver="2.5.6" rel="150400.3.3.1"/>
  <changelog author="max@suse.com" date="1564401600">- Clarify in the service file that the reload action doesn't work
  when dropping root privileges (boo#1142830).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1568808000">- Add p11kit build time dependency for pkcs providers autodetection</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578398400">- Update to version 2.4.8:
  * mbedtls: fix segfault by calling mbedtls_cipher_free() in
    cipher_ctx_free()
  * cleanup: Remove RPM openvpn.spec build approach
  * docs: Update INSTALL
  * build: Package missing mock_msg.h
  * Increase listen() backlog queue to 32
  * Force combinationation of --socks-proxy and --proto UDP to use
    IPv4.
  * Wrong FILETYPE in .rc files
  * Do not set pkcs11-helper 'safe fork mode'
  * tests/t_lpback.sh: Switch sed(1) to POSIX-compatible regex.
  * Fix various compiler warnings
  * Fix regression, reinstate LibreSSL support.
  * man: correct the description of --capath and --crl-verify
    regarding CRLs
  * Fix typo in NTLM proxy debug message
  * Ignore --pull-filter for --mode server
  * openssl: Fix compilation without deprecated OpenSSL 1.1 APIs
  * Better error message when script fails due to script-security
    setting
  * Correct the return value of cryptoapi RSA signature callbacks
  * Handle PSS padding in cryptoapicert
  * cmocka: use relative paths
  * Fix documentation of tls-verify script argument</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.
- Use %systemd_ordering instead of systemd_requires: in fact,
  systemd is not a hard requirement for openvpn. But in case a
  system is being installed with systemd, we want systemd to be
  there before  openvpn is being installed.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1583323200">- Fix inconsistency in openvpn.service:
  * It uses the unescape instance name as config file basename,
    so use that in the description as well</changelog>
  <changelog author="fbui@suse.com" date="1598443200">- Explicitly requires sysvinit-tools as some of the tools shipped by
  this package are used in various places regardless of whether
  openvpn is built for systemd or non systemd systems.
  For the context: sysvinit-tools was pulled in by systemd since 2014
  but it's no longer the case so better to be safe than sorry.</changelog>
  <changelog author="fbui@suse.com" date="1598443201">- Modernize openvpn.service
  * /var/run has been obsoleted since a long time.
  * on reload, send HUP signal directly rather than relying on
    killproc to look for the main process.</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- update to 2.4.9 (CVE-2020-11810, bsc#1169925O):
  * Allow unicode search string in --cryptoapicert option (Windows)
  * Skip expired certificates in Windows certificate store (Windows) (trac #966)
  * OpenSSL: Fix --crl-verify not loading multiple CRLs in one file (trac #623)
  * fix condition where a client's session could "float" to a new IP address that is not authorized ("fix illegal client float").
  This can be used to disrupt service to a freshly connected client (no session
  keys negotiated yet). It can not be used to inject or steal VPN traffic.
  CVE-2020-11810).
  * fix combination of async push (deferred auth) and NCP (trac #1259)
  * Fix OpenSSL 1.1.1 not using auto elliptic curve selection (trac #1228)
  * Fix OpenSSL error stack handling of tls_ctx_add_extra_certs
  * mbedTLS: Make sure TLS session survives move (trac #880)
  * Fix OpenSSL private key passphrase notices
  * Fix building with --enable-async-push in FreeBSD (trac #1256)
  * Fix broken fragmentation logic when using NCP (trac #1140)</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 2.4.10:
  - OpenVPN client will now announce the acceptable ciphers to the server
  (IV_CIPHER=...), so NCP cipher negotiation works better
  - Parse static challenge response in auth-pam plugin
  - Accept empty password and/or response in auth-pam plugin
  - Log serial number of revoked certificate
  - Fix tls_ctx_client/server_new leaving error on OpenSSL error stack
  - Fix auth-token not being updated if auth-nocache is set
  (this should fix all remaining client-side bugs for the combination
  "auth-nocache in client-config" + "auth-token in use on the server")
  - Fix stack overflow in OpenSolaris and *BSD NEXTADDR()
  - Fix error detection / abort in --inetd corner case (#350)
  - Fix TUNSETGROUP compatibility with very old Linux systems (#1152)
  - Fix handling of 'route remote_host' for IPv6 transport case
  (#1247 and #1332)
  - Fix --show-gateway for IPv6 on NetBSD/i386 (#734)
  - A number of documentation improvements / clarification fixes.
  - Fix line number reporting on config file errors after &lt;inline&gt; segments
  - Fix fatal error at switching remotes (#629)
  - socks.c: fix alen for DOMAIN type addresses, bump up buffer sizes (#848)
  - Switch "ks-&gt;authenticated" assertion failure to returning false (#1270)
- refresh 0001-preform-deferred-authentication-in-the-background.patch
  openvpn-2.3.x-fixed-multiple-low-severity-issues.patch against 2.4.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1619352000">- update 'rcopenvpn' to work without /etc/rc.status (boo#1185273)</changelog>
  <changelog author="dmueller@suse.com" date="1622462400">- update to 2.4.11 (bsc#1185279):
  * CVE-2020-15078 see https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
  * This bug allows - under very specific circumstances - to trick a server using
    delayed authentication (plugin or management) into returning a PUSH_REPLY
    before the AUTH_FAILED message, which can possibly be used to gather
    information about a VPN setup.
  * In combination with "--auth-gen-token" or an user-specific token auth
    solution it can be possible to get access to a VPN with an
    otherwise-invalid account.
  * Fix potential NULL ptr crash if compiled with DMALLOC
- drop sysv init support, it hasn't build successfully in ages
  and is build-disabled in devel project</changelog>
  <changelog author="max@suse.com" date="1628164800">- Update to 2.5.3:
  * Removal of BF-CBC support in default configuration
  * ** POSSIBLE INCOMPATIBILITY ***
    See section "DATA CHANNEL CIPHER NEGOTIATION" in openvpn(8).
  * Connections setup is now much faster
  * Support ChaCha20-Poly1305 cipher in the OpenVPN data channel
  * Improved TLS 1.3 support when using OpenSSL 1.1.1 or newer
  * Client-specific tls-crypt keys (--tls-crypt-v2)
  * Improved Data channel cipher negotiation
  * HMAC based auth-token support for seamless reconnects to
    standalone servers or a group of servers
  * Asynchronous (deferred) authentication support for auth-pam
    plugin
  * Asynchronous (deferred) support for client-connect scripts and
    plugins
  * Support IPv4 configs with /31 netmasks
  * 802.1q VLAN support on TAP servers
  * Support IPv6-only tunnels
  * New option --block-ipv6 to reject all IPv6 packets (ICMPv6)
  * Support Virtual Routing and Forwarding (VRF)
  * Netlink integration (OpenVPN no longer needs to execute
    ifconfig/route or ip commands)
  * Obsoletes openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch
- bsc#1062157: The fix for bsc#934237 causes problems with the
  crypto self-test of newer openvpn versions.
  Remove openvpn-2.3.x-fixed-multiple-low-severity-issues.patch .</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 2.5.4:
  * fix prompting for password on windows console if stderr redirection
    is in use - this breaks 2.5.x on Win11/ARM, and might also break
    on Win11/adm64 when released.
  * fix setting MAC address on TAP adapters (--lladdr) to use sitnl
    (was overlooked, and still used "ifconfig" calls)
  * various improvements for man page building (rst2man/rst2html etc)
  * minor bugfix with IN6_IS_ADDR_UNSPECIFIED() use (breaks build on
    at least one platform strictly checking this)
  * fix minor memory leak under certain conditions in add_route() and
    add_route_ipv6()
  * documentation improvements
  * copyright updates where needed
  * better error reporting when win32 console access fails</changelog>
  <changelog author="jengelh@inai.de" date="1638619200">- Avoid bashisms and use POSIX sh syntax.
- Use more efficient find commands.
- Trim marketing filler words from description.</changelog>
  <changelog author="max@suse.com" date="1638964800">- Drop 0001-preform-deferred-authentication-in-the-background.patch
  Upstream has meanwhile solved this differently and the two
  implementations interfere (boo#1193017).
- Obsoleted SLE patches up to this point:
  * openvpn-CVE-2020-15078.patch
  * openvpn-CVE-2020-11810.patch
  * openvpn-CVE-2018-7544.patch
  * openvpn-CVE-2018-9336.patch</changelog>
  <changelog author="dmueller@suse.com" date="1639569600">- update to 2.5.5:
  * SWEET32/64bit cipher deprecation change was postponed to 2.7
  * improve "make check" to notice if "openvpn --show-cipher" crashes
  * improve argv unit tests
  * ensure unit tests work with mbedTLS builds without BF-CBC ciphers
  * include "--push-remove" in the output of "openvpn --help"
  * fix error in iptables syntax in example firewall.sh script
  * fix "resolvconf -p" invocation in example "up" script
  * fix "common_name" environment for script calls when
    "--username-as-common-name" is in effect (Trac #1434)
  * move "push-peer-info" documentation from "server options" to "client"
  * correct "foreign_option_{n}" typo in manpage
  * README.down-root: fix plugin module name</changelog>
  <changelog author="max@suse.com" date="1644494400">- Fix license tag in spec file.</changelog>
  <changelog author="max@suse.com" date="1648036800">- update to 2.5.6:
  * bsc#1197341, CVE-2022-0547: possible authentication bypass in
    external authentication plug-in
  * Fix "--mtu-disc maybe|yes" on Linux
  * Fix $common_name variable passed to scripts when
    username-as-common-name is in effect.
  * Fix potential memory leaks in add_route() and add_route_ipv6().
  * Apply connect-retry backoff only to one side of the connection
    in p2p mode.
  * repair "--inactive" handling with a 'bytes' parameter larger
    than 2 Gbytes.
  * new plugin (sample-plugin/defer/multi-auth.c) to help testing
    with multiple parallel plugins that succeed/fail in
    direct/deferred mode.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1123557: --suppress-timestamps isn't needed by default.</changelog>
</package>
<package pkgid="18ca19f55e04e24e4951d88d0c6cd72a5ad3efdadd81a1c2e81de13f62e2e37b" name="openvpn-devel" arch="aarch64">
  <version epoch="0" ver="2.5.6" rel="150400.3.3.1"/>
  <changelog author="max@suse.com" date="1564401600">- Clarify in the service file that the reload action doesn't work
  when dropping root privileges (boo#1142830).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1568808000">- Add p11kit build time dependency for pkcs providers autodetection</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578398400">- Update to version 2.4.8:
  * mbedtls: fix segfault by calling mbedtls_cipher_free() in
    cipher_ctx_free()
  * cleanup: Remove RPM openvpn.spec build approach
  * docs: Update INSTALL
  * build: Package missing mock_msg.h
  * Increase listen() backlog queue to 32
  * Force combinationation of --socks-proxy and --proto UDP to use
    IPv4.
  * Wrong FILETYPE in .rc files
  * Do not set pkcs11-helper 'safe fork mode'
  * tests/t_lpback.sh: Switch sed(1) to POSIX-compatible regex.
  * Fix various compiler warnings
  * Fix regression, reinstate LibreSSL support.
  * man: correct the description of --capath and --crl-verify
    regarding CRLs
  * Fix typo in NTLM proxy debug message
  * Ignore --pull-filter for --mode server
  * openssl: Fix compilation without deprecated OpenSSL 1.1 APIs
  * Better error message when script fails due to script-security
    setting
  * Correct the return value of cryptoapi RSA signature callbacks
  * Handle PSS padding in cryptoapicert
  * cmocka: use relative paths
  * Fix documentation of tls-verify script argument</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.
- Use %systemd_ordering instead of systemd_requires: in fact,
  systemd is not a hard requirement for openvpn. But in case a
  system is being installed with systemd, we want systemd to be
  there before  openvpn is being installed.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1583323200">- Fix inconsistency in openvpn.service:
  * It uses the unescape instance name as config file basename,
    so use that in the description as well</changelog>
  <changelog author="fbui@suse.com" date="1598443200">- Explicitly requires sysvinit-tools as some of the tools shipped by
  this package are used in various places regardless of whether
  openvpn is built for systemd or non systemd systems.
  For the context: sysvinit-tools was pulled in by systemd since 2014
  but it's no longer the case so better to be safe than sorry.</changelog>
  <changelog author="fbui@suse.com" date="1598443201">- Modernize openvpn.service
  * /var/run has been obsoleted since a long time.
  * on reload, send HUP signal directly rather than relying on
    killproc to look for the main process.</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- update to 2.4.9 (CVE-2020-11810, bsc#1169925O):
  * Allow unicode search string in --cryptoapicert option (Windows)
  * Skip expired certificates in Windows certificate store (Windows) (trac #966)
  * OpenSSL: Fix --crl-verify not loading multiple CRLs in one file (trac #623)
  * fix condition where a client's session could "float" to a new IP address that is not authorized ("fix illegal client float").
  This can be used to disrupt service to a freshly connected client (no session
  keys negotiated yet). It can not be used to inject or steal VPN traffic.
  CVE-2020-11810).
  * fix combination of async push (deferred auth) and NCP (trac #1259)
  * Fix OpenSSL 1.1.1 not using auto elliptic curve selection (trac #1228)
  * Fix OpenSSL error stack handling of tls_ctx_add_extra_certs
  * mbedTLS: Make sure TLS session survives move (trac #880)
  * Fix OpenSSL private key passphrase notices
  * Fix building with --enable-async-push in FreeBSD (trac #1256)
  * Fix broken fragmentation logic when using NCP (trac #1140)</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 2.4.10:
  - OpenVPN client will now announce the acceptable ciphers to the server
  (IV_CIPHER=...), so NCP cipher negotiation works better
  - Parse static challenge response in auth-pam plugin
  - Accept empty password and/or response in auth-pam plugin
  - Log serial number of revoked certificate
  - Fix tls_ctx_client/server_new leaving error on OpenSSL error stack
  - Fix auth-token not being updated if auth-nocache is set
  (this should fix all remaining client-side bugs for the combination
  "auth-nocache in client-config" + "auth-token in use on the server")
  - Fix stack overflow in OpenSolaris and *BSD NEXTADDR()
  - Fix error detection / abort in --inetd corner case (#350)
  - Fix TUNSETGROUP compatibility with very old Linux systems (#1152)
  - Fix handling of 'route remote_host' for IPv6 transport case
  (#1247 and #1332)
  - Fix --show-gateway for IPv6 on NetBSD/i386 (#734)
  - A number of documentation improvements / clarification fixes.
  - Fix line number reporting on config file errors after &lt;inline&gt; segments
  - Fix fatal error at switching remotes (#629)
  - socks.c: fix alen for DOMAIN type addresses, bump up buffer sizes (#848)
  - Switch "ks-&gt;authenticated" assertion failure to returning false (#1270)
- refresh 0001-preform-deferred-authentication-in-the-background.patch
  openvpn-2.3.x-fixed-multiple-low-severity-issues.patch against 2.4.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1619352000">- update 'rcopenvpn' to work without /etc/rc.status (boo#1185273)</changelog>
  <changelog author="dmueller@suse.com" date="1622462400">- update to 2.4.11 (bsc#1185279):
  * CVE-2020-15078 see https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
  * This bug allows - under very specific circumstances - to trick a server using
    delayed authentication (plugin or management) into returning a PUSH_REPLY
    before the AUTH_FAILED message, which can possibly be used to gather
    information about a VPN setup.
  * In combination with "--auth-gen-token" or an user-specific token auth
    solution it can be possible to get access to a VPN with an
    otherwise-invalid account.
  * Fix potential NULL ptr crash if compiled with DMALLOC
- drop sysv init support, it hasn't build successfully in ages
  and is build-disabled in devel project</changelog>
  <changelog author="max@suse.com" date="1628164800">- Update to 2.5.3:
  * Removal of BF-CBC support in default configuration
  * ** POSSIBLE INCOMPATIBILITY ***
    See section "DATA CHANNEL CIPHER NEGOTIATION" in openvpn(8).
  * Connections setup is now much faster
  * Support ChaCha20-Poly1305 cipher in the OpenVPN data channel
  * Improved TLS 1.3 support when using OpenSSL 1.1.1 or newer
  * Client-specific tls-crypt keys (--tls-crypt-v2)
  * Improved Data channel cipher negotiation
  * HMAC based auth-token support for seamless reconnects to
    standalone servers or a group of servers
  * Asynchronous (deferred) authentication support for auth-pam
    plugin
  * Asynchronous (deferred) support for client-connect scripts and
    plugins
  * Support IPv4 configs with /31 netmasks
  * 802.1q VLAN support on TAP servers
  * Support IPv6-only tunnels
  * New option --block-ipv6 to reject all IPv6 packets (ICMPv6)
  * Support Virtual Routing and Forwarding (VRF)
  * Netlink integration (OpenVPN no longer needs to execute
    ifconfig/route or ip commands)
  * Obsoletes openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch
- bsc#1062157: The fix for bsc#934237 causes problems with the
  crypto self-test of newer openvpn versions.
  Remove openvpn-2.3.x-fixed-multiple-low-severity-issues.patch .</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 2.5.4:
  * fix prompting for password on windows console if stderr redirection
    is in use - this breaks 2.5.x on Win11/ARM, and might also break
    on Win11/adm64 when released.
  * fix setting MAC address on TAP adapters (--lladdr) to use sitnl
    (was overlooked, and still used "ifconfig" calls)
  * various improvements for man page building (rst2man/rst2html etc)
  * minor bugfix with IN6_IS_ADDR_UNSPECIFIED() use (breaks build on
    at least one platform strictly checking this)
  * fix minor memory leak under certain conditions in add_route() and
    add_route_ipv6()
  * documentation improvements
  * copyright updates where needed
  * better error reporting when win32 console access fails</changelog>
  <changelog author="jengelh@inai.de" date="1638619200">- Avoid bashisms and use POSIX sh syntax.
- Use more efficient find commands.
- Trim marketing filler words from description.</changelog>
  <changelog author="max@suse.com" date="1638964800">- Drop 0001-preform-deferred-authentication-in-the-background.patch
  Upstream has meanwhile solved this differently and the two
  implementations interfere (boo#1193017).
- Obsoleted SLE patches up to this point:
  * openvpn-CVE-2020-15078.patch
  * openvpn-CVE-2020-11810.patch
  * openvpn-CVE-2018-7544.patch
  * openvpn-CVE-2018-9336.patch</changelog>
  <changelog author="dmueller@suse.com" date="1639569600">- update to 2.5.5:
  * SWEET32/64bit cipher deprecation change was postponed to 2.7
  * improve "make check" to notice if "openvpn --show-cipher" crashes
  * improve argv unit tests
  * ensure unit tests work with mbedTLS builds without BF-CBC ciphers
  * include "--push-remove" in the output of "openvpn --help"
  * fix error in iptables syntax in example firewall.sh script
  * fix "resolvconf -p" invocation in example "up" script
  * fix "common_name" environment for script calls when
    "--username-as-common-name" is in effect (Trac #1434)
  * move "push-peer-info" documentation from "server options" to "client"
  * correct "foreign_option_{n}" typo in manpage
  * README.down-root: fix plugin module name</changelog>
  <changelog author="max@suse.com" date="1644494400">- Fix license tag in spec file.</changelog>
  <changelog author="max@suse.com" date="1648036800">- update to 2.5.6:
  * bsc#1197341, CVE-2022-0547: possible authentication bypass in
    external authentication plug-in
  * Fix "--mtu-disc maybe|yes" on Linux
  * Fix $common_name variable passed to scripts when
    username-as-common-name is in effect.
  * Fix potential memory leaks in add_route() and add_route_ipv6().
  * Apply connect-retry backoff only to one side of the connection
    in p2p mode.
  * repair "--inactive" handling with a 'bytes' parameter larger
    than 2 Gbytes.
  * new plugin (sample-plugin/defer/multi-auth.c) to help testing
    with multiple parallel plugins that succeed/fail in
    direct/deferred mode.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1123557: --suppress-timestamps isn't needed by default.</changelog>
</package>
<package pkgid="3660595dafc4a0caa14877aa1336d6d97c28cdbe38b98ba82000810b8a9e4b24" name="openvpn-devel" arch="ppc64le">
  <version epoch="0" ver="2.5.6" rel="150400.3.3.1"/>
  <changelog author="max@suse.com" date="1564401600">- Clarify in the service file that the reload action doesn't work
  when dropping root privileges (boo#1142830).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1568808000">- Add p11kit build time dependency for pkcs providers autodetection</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578398400">- Update to version 2.4.8:
  * mbedtls: fix segfault by calling mbedtls_cipher_free() in
    cipher_ctx_free()
  * cleanup: Remove RPM openvpn.spec build approach
  * docs: Update INSTALL
  * build: Package missing mock_msg.h
  * Increase listen() backlog queue to 32
  * Force combinationation of --socks-proxy and --proto UDP to use
    IPv4.
  * Wrong FILETYPE in .rc files
  * Do not set pkcs11-helper 'safe fork mode'
  * tests/t_lpback.sh: Switch sed(1) to POSIX-compatible regex.
  * Fix various compiler warnings
  * Fix regression, reinstate LibreSSL support.
  * man: correct the description of --capath and --crl-verify
    regarding CRLs
  * Fix typo in NTLM proxy debug message
  * Ignore --pull-filter for --mode server
  * openssl: Fix compilation without deprecated OpenSSL 1.1 APIs
  * Better error message when script fails due to script-security
    setting
  * Correct the return value of cryptoapi RSA signature callbacks
  * Handle PSS padding in cryptoapicert
  * cmocka: use relative paths
  * Fix documentation of tls-verify script argument</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.
- Use %systemd_ordering instead of systemd_requires: in fact,
  systemd is not a hard requirement for openvpn. But in case a
  system is being installed with systemd, we want systemd to be
  there before  openvpn is being installed.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1583323200">- Fix inconsistency in openvpn.service:
  * It uses the unescape instance name as config file basename,
    so use that in the description as well</changelog>
  <changelog author="fbui@suse.com" date="1598443200">- Explicitly requires sysvinit-tools as some of the tools shipped by
  this package are used in various places regardless of whether
  openvpn is built for systemd or non systemd systems.
  For the context: sysvinit-tools was pulled in by systemd since 2014
  but it's no longer the case so better to be safe than sorry.</changelog>
  <changelog author="fbui@suse.com" date="1598443201">- Modernize openvpn.service
  * /var/run has been obsoleted since a long time.
  * on reload, send HUP signal directly rather than relying on
    killproc to look for the main process.</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- update to 2.4.9 (CVE-2020-11810, bsc#1169925O):
  * Allow unicode search string in --cryptoapicert option (Windows)
  * Skip expired certificates in Windows certificate store (Windows) (trac #966)
  * OpenSSL: Fix --crl-verify not loading multiple CRLs in one file (trac #623)
  * fix condition where a client's session could "float" to a new IP address that is not authorized ("fix illegal client float").
  This can be used to disrupt service to a freshly connected client (no session
  keys negotiated yet). It can not be used to inject or steal VPN traffic.
  CVE-2020-11810).
  * fix combination of async push (deferred auth) and NCP (trac #1259)
  * Fix OpenSSL 1.1.1 not using auto elliptic curve selection (trac #1228)
  * Fix OpenSSL error stack handling of tls_ctx_add_extra_certs
  * mbedTLS: Make sure TLS session survives move (trac #880)
  * Fix OpenSSL private key passphrase notices
  * Fix building with --enable-async-push in FreeBSD (trac #1256)
  * Fix broken fragmentation logic when using NCP (trac #1140)</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 2.4.10:
  - OpenVPN client will now announce the acceptable ciphers to the server
  (IV_CIPHER=...), so NCP cipher negotiation works better
  - Parse static challenge response in auth-pam plugin
  - Accept empty password and/or response in auth-pam plugin
  - Log serial number of revoked certificate
  - Fix tls_ctx_client/server_new leaving error on OpenSSL error stack
  - Fix auth-token not being updated if auth-nocache is set
  (this should fix all remaining client-side bugs for the combination
  "auth-nocache in client-config" + "auth-token in use on the server")
  - Fix stack overflow in OpenSolaris and *BSD NEXTADDR()
  - Fix error detection / abort in --inetd corner case (#350)
  - Fix TUNSETGROUP compatibility with very old Linux systems (#1152)
  - Fix handling of 'route remote_host' for IPv6 transport case
  (#1247 and #1332)
  - Fix --show-gateway for IPv6 on NetBSD/i386 (#734)
  - A number of documentation improvements / clarification fixes.
  - Fix line number reporting on config file errors after &lt;inline&gt; segments
  - Fix fatal error at switching remotes (#629)
  - socks.c: fix alen for DOMAIN type addresses, bump up buffer sizes (#848)
  - Switch "ks-&gt;authenticated" assertion failure to returning false (#1270)
- refresh 0001-preform-deferred-authentication-in-the-background.patch
  openvpn-2.3.x-fixed-multiple-low-severity-issues.patch against 2.4.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1619352000">- update 'rcopenvpn' to work without /etc/rc.status (boo#1185273)</changelog>
  <changelog author="dmueller@suse.com" date="1622462400">- update to 2.4.11 (bsc#1185279):
  * CVE-2020-15078 see https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
  * This bug allows - under very specific circumstances - to trick a server using
    delayed authentication (plugin or management) into returning a PUSH_REPLY
    before the AUTH_FAILED message, which can possibly be used to gather
    information about a VPN setup.
  * In combination with "--auth-gen-token" or an user-specific token auth
    solution it can be possible to get access to a VPN with an
    otherwise-invalid account.
  * Fix potential NULL ptr crash if compiled with DMALLOC
- drop sysv init support, it hasn't build successfully in ages
  and is build-disabled in devel project</changelog>
  <changelog author="max@suse.com" date="1628164800">- Update to 2.5.3:
  * Removal of BF-CBC support in default configuration
  * ** POSSIBLE INCOMPATIBILITY ***
    See section "DATA CHANNEL CIPHER NEGOTIATION" in openvpn(8).
  * Connections setup is now much faster
  * Support ChaCha20-Poly1305 cipher in the OpenVPN data channel
  * Improved TLS 1.3 support when using OpenSSL 1.1.1 or newer
  * Client-specific tls-crypt keys (--tls-crypt-v2)
  * Improved Data channel cipher negotiation
  * HMAC based auth-token support for seamless reconnects to
    standalone servers or a group of servers
  * Asynchronous (deferred) authentication support for auth-pam
    plugin
  * Asynchronous (deferred) support for client-connect scripts and
    plugins
  * Support IPv4 configs with /31 netmasks
  * 802.1q VLAN support on TAP servers
  * Support IPv6-only tunnels
  * New option --block-ipv6 to reject all IPv6 packets (ICMPv6)
  * Support Virtual Routing and Forwarding (VRF)
  * Netlink integration (OpenVPN no longer needs to execute
    ifconfig/route or ip commands)
  * Obsoletes openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch
- bsc#1062157: The fix for bsc#934237 causes problems with the
  crypto self-test of newer openvpn versions.
  Remove openvpn-2.3.x-fixed-multiple-low-severity-issues.patch .</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 2.5.4:
  * fix prompting for password on windows console if stderr redirection
    is in use - this breaks 2.5.x on Win11/ARM, and might also break
    on Win11/adm64 when released.
  * fix setting MAC address on TAP adapters (--lladdr) to use sitnl
    (was overlooked, and still used "ifconfig" calls)
  * various improvements for man page building (rst2man/rst2html etc)
  * minor bugfix with IN6_IS_ADDR_UNSPECIFIED() use (breaks build on
    at least one platform strictly checking this)
  * fix minor memory leak under certain conditions in add_route() and
    add_route_ipv6()
  * documentation improvements
  * copyright updates where needed
  * better error reporting when win32 console access fails</changelog>
  <changelog author="jengelh@inai.de" date="1638619200">- Avoid bashisms and use POSIX sh syntax.
- Use more efficient find commands.
- Trim marketing filler words from description.</changelog>
  <changelog author="max@suse.com" date="1638964800">- Drop 0001-preform-deferred-authentication-in-the-background.patch
  Upstream has meanwhile solved this differently and the two
  implementations interfere (boo#1193017).
- Obsoleted SLE patches up to this point:
  * openvpn-CVE-2020-15078.patch
  * openvpn-CVE-2020-11810.patch
  * openvpn-CVE-2018-7544.patch
  * openvpn-CVE-2018-9336.patch</changelog>
  <changelog author="dmueller@suse.com" date="1639569600">- update to 2.5.5:
  * SWEET32/64bit cipher deprecation change was postponed to 2.7
  * improve "make check" to notice if "openvpn --show-cipher" crashes
  * improve argv unit tests
  * ensure unit tests work with mbedTLS builds without BF-CBC ciphers
  * include "--push-remove" in the output of "openvpn --help"
  * fix error in iptables syntax in example firewall.sh script
  * fix "resolvconf -p" invocation in example "up" script
  * fix "common_name" environment for script calls when
    "--username-as-common-name" is in effect (Trac #1434)
  * move "push-peer-info" documentation from "server options" to "client"
  * correct "foreign_option_{n}" typo in manpage
  * README.down-root: fix plugin module name</changelog>
  <changelog author="max@suse.com" date="1644494400">- Fix license tag in spec file.</changelog>
  <changelog author="max@suse.com" date="1648036800">- update to 2.5.6:
  * bsc#1197341, CVE-2022-0547: possible authentication bypass in
    external authentication plug-in
  * Fix "--mtu-disc maybe|yes" on Linux
  * Fix $common_name variable passed to scripts when
    username-as-common-name is in effect.
  * Fix potential memory leaks in add_route() and add_route_ipv6().
  * Apply connect-retry backoff only to one side of the connection
    in p2p mode.
  * repair "--inactive" handling with a 'bytes' parameter larger
    than 2 Gbytes.
  * new plugin (sample-plugin/defer/multi-auth.c) to help testing
    with multiple parallel plugins that succeed/fail in
    direct/deferred mode.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1123557: --suppress-timestamps isn't needed by default.</changelog>
</package>
<package pkgid="ca9f165d60fea6f38fe6d8130cbdd23ba092846f62c1a7f0f4789e240d6c73c3" name="openvpn-devel" arch="s390x">
  <version epoch="0" ver="2.5.6" rel="150400.3.3.1"/>
  <changelog author="max@suse.com" date="1564401600">- Clarify in the service file that the reload action doesn't work
  when dropping root privileges (boo#1142830).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1568808000">- Add p11kit build time dependency for pkcs providers autodetection</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578398400">- Update to version 2.4.8:
  * mbedtls: fix segfault by calling mbedtls_cipher_free() in
    cipher_ctx_free()
  * cleanup: Remove RPM openvpn.spec build approach
  * docs: Update INSTALL
  * build: Package missing mock_msg.h
  * Increase listen() backlog queue to 32
  * Force combinationation of --socks-proxy and --proto UDP to use
    IPv4.
  * Wrong FILETYPE in .rc files
  * Do not set pkcs11-helper 'safe fork mode'
  * tests/t_lpback.sh: Switch sed(1) to POSIX-compatible regex.
  * Fix various compiler warnings
  * Fix regression, reinstate LibreSSL support.
  * man: correct the description of --capath and --crl-verify
    regarding CRLs
  * Fix typo in NTLM proxy debug message
  * Ignore --pull-filter for --mode server
  * openssl: Fix compilation without deprecated OpenSSL 1.1 APIs
  * Better error message when script fails due to script-security
    setting
  * Correct the return value of cryptoapi RSA signature callbacks
  * Handle PSS padding in cryptoapicert
  * cmocka: use relative paths
  * Fix documentation of tls-verify script argument</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.
- Use %systemd_ordering instead of systemd_requires: in fact,
  systemd is not a hard requirement for openvpn. But in case a
  system is being installed with systemd, we want systemd to be
  there before  openvpn is being installed.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1583323200">- Fix inconsistency in openvpn.service:
  * It uses the unescape instance name as config file basename,
    so use that in the description as well</changelog>
  <changelog author="fbui@suse.com" date="1598443200">- Explicitly requires sysvinit-tools as some of the tools shipped by
  this package are used in various places regardless of whether
  openvpn is built for systemd or non systemd systems.
  For the context: sysvinit-tools was pulled in by systemd since 2014
  but it's no longer the case so better to be safe than sorry.</changelog>
  <changelog author="fbui@suse.com" date="1598443201">- Modernize openvpn.service
  * /var/run has been obsoleted since a long time.
  * on reload, send HUP signal directly rather than relying on
    killproc to look for the main process.</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- update to 2.4.9 (CVE-2020-11810, bsc#1169925O):
  * Allow unicode search string in --cryptoapicert option (Windows)
  * Skip expired certificates in Windows certificate store (Windows) (trac #966)
  * OpenSSL: Fix --crl-verify not loading multiple CRLs in one file (trac #623)
  * fix condition where a client's session could "float" to a new IP address that is not authorized ("fix illegal client float").
  This can be used to disrupt service to a freshly connected client (no session
  keys negotiated yet). It can not be used to inject or steal VPN traffic.
  CVE-2020-11810).
  * fix combination of async push (deferred auth) and NCP (trac #1259)
  * Fix OpenSSL 1.1.1 not using auto elliptic curve selection (trac #1228)
  * Fix OpenSSL error stack handling of tls_ctx_add_extra_certs
  * mbedTLS: Make sure TLS session survives move (trac #880)
  * Fix OpenSSL private key passphrase notices
  * Fix building with --enable-async-push in FreeBSD (trac #1256)
  * Fix broken fragmentation logic when using NCP (trac #1140)</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 2.4.10:
  - OpenVPN client will now announce the acceptable ciphers to the server
  (IV_CIPHER=...), so NCP cipher negotiation works better
  - Parse static challenge response in auth-pam plugin
  - Accept empty password and/or response in auth-pam plugin
  - Log serial number of revoked certificate
  - Fix tls_ctx_client/server_new leaving error on OpenSSL error stack
  - Fix auth-token not being updated if auth-nocache is set
  (this should fix all remaining client-side bugs for the combination
  "auth-nocache in client-config" + "auth-token in use on the server")
  - Fix stack overflow in OpenSolaris and *BSD NEXTADDR()
  - Fix error detection / abort in --inetd corner case (#350)
  - Fix TUNSETGROUP compatibility with very old Linux systems (#1152)
  - Fix handling of 'route remote_host' for IPv6 transport case
  (#1247 and #1332)
  - Fix --show-gateway for IPv6 on NetBSD/i386 (#734)
  - A number of documentation improvements / clarification fixes.
  - Fix line number reporting on config file errors after &lt;inline&gt; segments
  - Fix fatal error at switching remotes (#629)
  - socks.c: fix alen for DOMAIN type addresses, bump up buffer sizes (#848)
  - Switch "ks-&gt;authenticated" assertion failure to returning false (#1270)
- refresh 0001-preform-deferred-authentication-in-the-background.patch
  openvpn-2.3.x-fixed-multiple-low-severity-issues.patch against 2.4.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1619352000">- update 'rcopenvpn' to work without /etc/rc.status (boo#1185273)</changelog>
  <changelog author="dmueller@suse.com" date="1622462400">- update to 2.4.11 (bsc#1185279):
  * CVE-2020-15078 see https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
  * This bug allows - under very specific circumstances - to trick a server using
    delayed authentication (plugin or management) into returning a PUSH_REPLY
    before the AUTH_FAILED message, which can possibly be used to gather
    information about a VPN setup.
  * In combination with "--auth-gen-token" or an user-specific token auth
    solution it can be possible to get access to a VPN with an
    otherwise-invalid account.
  * Fix potential NULL ptr crash if compiled with DMALLOC
- drop sysv init support, it hasn't build successfully in ages
  and is build-disabled in devel project</changelog>
  <changelog author="max@suse.com" date="1628164800">- Update to 2.5.3:
  * Removal of BF-CBC support in default configuration
  * ** POSSIBLE INCOMPATIBILITY ***
    See section "DATA CHANNEL CIPHER NEGOTIATION" in openvpn(8).
  * Connections setup is now much faster
  * Support ChaCha20-Poly1305 cipher in the OpenVPN data channel
  * Improved TLS 1.3 support when using OpenSSL 1.1.1 or newer
  * Client-specific tls-crypt keys (--tls-crypt-v2)
  * Improved Data channel cipher negotiation
  * HMAC based auth-token support for seamless reconnects to
    standalone servers or a group of servers
  * Asynchronous (deferred) authentication support for auth-pam
    plugin
  * Asynchronous (deferred) support for client-connect scripts and
    plugins
  * Support IPv4 configs with /31 netmasks
  * 802.1q VLAN support on TAP servers
  * Support IPv6-only tunnels
  * New option --block-ipv6 to reject all IPv6 packets (ICMPv6)
  * Support Virtual Routing and Forwarding (VRF)
  * Netlink integration (OpenVPN no longer needs to execute
    ifconfig/route or ip commands)
  * Obsoletes openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch
- bsc#1062157: The fix for bsc#934237 causes problems with the
  crypto self-test of newer openvpn versions.
  Remove openvpn-2.3.x-fixed-multiple-low-severity-issues.patch .</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 2.5.4:
  * fix prompting for password on windows console if stderr redirection
    is in use - this breaks 2.5.x on Win11/ARM, and might also break
    on Win11/adm64 when released.
  * fix setting MAC address on TAP adapters (--lladdr) to use sitnl
    (was overlooked, and still used "ifconfig" calls)
  * various improvements for man page building (rst2man/rst2html etc)
  * minor bugfix with IN6_IS_ADDR_UNSPECIFIED() use (breaks build on
    at least one platform strictly checking this)
  * fix minor memory leak under certain conditions in add_route() and
    add_route_ipv6()
  * documentation improvements
  * copyright updates where needed
  * better error reporting when win32 console access fails</changelog>
  <changelog author="jengelh@inai.de" date="1638619200">- Avoid bashisms and use POSIX sh syntax.
- Use more efficient find commands.
- Trim marketing filler words from description.</changelog>
  <changelog author="max@suse.com" date="1638964800">- Drop 0001-preform-deferred-authentication-in-the-background.patch
  Upstream has meanwhile solved this differently and the two
  implementations interfere (boo#1193017).
- Obsoleted SLE patches up to this point:
  * openvpn-CVE-2020-15078.patch
  * openvpn-CVE-2020-11810.patch
  * openvpn-CVE-2018-7544.patch
  * openvpn-CVE-2018-9336.patch</changelog>
  <changelog author="dmueller@suse.com" date="1639569600">- update to 2.5.5:
  * SWEET32/64bit cipher deprecation change was postponed to 2.7
  * improve "make check" to notice if "openvpn --show-cipher" crashes
  * improve argv unit tests
  * ensure unit tests work with mbedTLS builds without BF-CBC ciphers
  * include "--push-remove" in the output of "openvpn --help"
  * fix error in iptables syntax in example firewall.sh script
  * fix "resolvconf -p" invocation in example "up" script
  * fix "common_name" environment for script calls when
    "--username-as-common-name" is in effect (Trac #1434)
  * move "push-peer-info" documentation from "server options" to "client"
  * correct "foreign_option_{n}" typo in manpage
  * README.down-root: fix plugin module name</changelog>
  <changelog author="max@suse.com" date="1644494400">- Fix license tag in spec file.</changelog>
  <changelog author="max@suse.com" date="1648036800">- update to 2.5.6:
  * bsc#1197341, CVE-2022-0547: possible authentication bypass in
    external authentication plug-in
  * Fix "--mtu-disc maybe|yes" on Linux
  * Fix $common_name variable passed to scripts when
    username-as-common-name is in effect.
  * Fix potential memory leaks in add_route() and add_route_ipv6().
  * Apply connect-retry backoff only to one side of the connection
    in p2p mode.
  * repair "--inactive" handling with a 'bytes' parameter larger
    than 2 Gbytes.
  * new plugin (sample-plugin/defer/multi-auth.c) to help testing
    with multiple parallel plugins that succeed/fail in
    direct/deferred mode.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1123557: --suppress-timestamps isn't needed by default.</changelog>
</package>
<package pkgid="2bd568994c905ee387825e78e9c02f135903b535027ed0eb273d688527351ee1" name="openvpn-devel" arch="x86_64">
  <version epoch="0" ver="2.5.6" rel="150400.3.3.1"/>
  <changelog author="max@suse.com" date="1564401600">- Clarify in the service file that the reload action doesn't work
  when dropping root privileges (boo#1142830).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1568808000">- Add p11kit build time dependency for pkcs providers autodetection</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578398400">- Update to version 2.4.8:
  * mbedtls: fix segfault by calling mbedtls_cipher_free() in
    cipher_ctx_free()
  * cleanup: Remove RPM openvpn.spec build approach
  * docs: Update INSTALL
  * build: Package missing mock_msg.h
  * Increase listen() backlog queue to 32
  * Force combinationation of --socks-proxy and --proto UDP to use
    IPv4.
  * Wrong FILETYPE in .rc files
  * Do not set pkcs11-helper 'safe fork mode'
  * tests/t_lpback.sh: Switch sed(1) to POSIX-compatible regex.
  * Fix various compiler warnings
  * Fix regression, reinstate LibreSSL support.
  * man: correct the description of --capath and --crl-verify
    regarding CRLs
  * Fix typo in NTLM proxy debug message
  * Ignore --pull-filter for --mode server
  * openssl: Fix compilation without deprecated OpenSSL 1.1 APIs
  * Better error message when script fails due to script-security
    setting
  * Correct the return value of cryptoapi RSA signature callbacks
  * Handle PSS padding in cryptoapicert
  * cmocka: use relative paths
  * Fix documentation of tls-verify script argument</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.
- Use %systemd_ordering instead of systemd_requires: in fact,
  systemd is not a hard requirement for openvpn. But in case a
  system is being installed with systemd, we want systemd to be
  there before  openvpn is being installed.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1583323200">- Fix inconsistency in openvpn.service:
  * It uses the unescape instance name as config file basename,
    so use that in the description as well</changelog>
  <changelog author="fbui@suse.com" date="1598443200">- Explicitly requires sysvinit-tools as some of the tools shipped by
  this package are used in various places regardless of whether
  openvpn is built for systemd or non systemd systems.
  For the context: sysvinit-tools was pulled in by systemd since 2014
  but it's no longer the case so better to be safe than sorry.</changelog>
  <changelog author="fbui@suse.com" date="1598443201">- Modernize openvpn.service
  * /var/run has been obsoleted since a long time.
  * on reload, send HUP signal directly rather than relying on
    killproc to look for the main process.</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- update to 2.4.9 (CVE-2020-11810, bsc#1169925O):
  * Allow unicode search string in --cryptoapicert option (Windows)
  * Skip expired certificates in Windows certificate store (Windows) (trac #966)
  * OpenSSL: Fix --crl-verify not loading multiple CRLs in one file (trac #623)
  * fix condition where a client's session could "float" to a new IP address that is not authorized ("fix illegal client float").
  This can be used to disrupt service to a freshly connected client (no session
  keys negotiated yet). It can not be used to inject or steal VPN traffic.
  CVE-2020-11810).
  * fix combination of async push (deferred auth) and NCP (trac #1259)
  * Fix OpenSSL 1.1.1 not using auto elliptic curve selection (trac #1228)
  * Fix OpenSSL error stack handling of tls_ctx_add_extra_certs
  * mbedTLS: Make sure TLS session survives move (trac #880)
  * Fix OpenSSL private key passphrase notices
  * Fix building with --enable-async-push in FreeBSD (trac #1256)
  * Fix broken fragmentation logic when using NCP (trac #1140)</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 2.4.10:
  - OpenVPN client will now announce the acceptable ciphers to the server
  (IV_CIPHER=...), so NCP cipher negotiation works better
  - Parse static challenge response in auth-pam plugin
  - Accept empty password and/or response in auth-pam plugin
  - Log serial number of revoked certificate
  - Fix tls_ctx_client/server_new leaving error on OpenSSL error stack
  - Fix auth-token not being updated if auth-nocache is set
  (this should fix all remaining client-side bugs for the combination
  "auth-nocache in client-config" + "auth-token in use on the server")
  - Fix stack overflow in OpenSolaris and *BSD NEXTADDR()
  - Fix error detection / abort in --inetd corner case (#350)
  - Fix TUNSETGROUP compatibility with very old Linux systems (#1152)
  - Fix handling of 'route remote_host' for IPv6 transport case
  (#1247 and #1332)
  - Fix --show-gateway for IPv6 on NetBSD/i386 (#734)
  - A number of documentation improvements / clarification fixes.
  - Fix line number reporting on config file errors after &lt;inline&gt; segments
  - Fix fatal error at switching remotes (#629)
  - socks.c: fix alen for DOMAIN type addresses, bump up buffer sizes (#848)
  - Switch "ks-&gt;authenticated" assertion failure to returning false (#1270)
- refresh 0001-preform-deferred-authentication-in-the-background.patch
  openvpn-2.3.x-fixed-multiple-low-severity-issues.patch against 2.4.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1619352000">- update 'rcopenvpn' to work without /etc/rc.status (boo#1185273)</changelog>
  <changelog author="dmueller@suse.com" date="1622462400">- update to 2.4.11 (bsc#1185279):
  * CVE-2020-15078 see https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
  * This bug allows - under very specific circumstances - to trick a server using
    delayed authentication (plugin or management) into returning a PUSH_REPLY
    before the AUTH_FAILED message, which can possibly be used to gather
    information about a VPN setup.
  * In combination with "--auth-gen-token" or an user-specific token auth
    solution it can be possible to get access to a VPN with an
    otherwise-invalid account.
  * Fix potential NULL ptr crash if compiled with DMALLOC
- drop sysv init support, it hasn't build successfully in ages
  and is build-disabled in devel project</changelog>
  <changelog author="max@suse.com" date="1628164800">- Update to 2.5.3:
  * Removal of BF-CBC support in default configuration
  * ** POSSIBLE INCOMPATIBILITY ***
    See section "DATA CHANNEL CIPHER NEGOTIATION" in openvpn(8).
  * Connections setup is now much faster
  * Support ChaCha20-Poly1305 cipher in the OpenVPN data channel
  * Improved TLS 1.3 support when using OpenSSL 1.1.1 or newer
  * Client-specific tls-crypt keys (--tls-crypt-v2)
  * Improved Data channel cipher negotiation
  * HMAC based auth-token support for seamless reconnects to
    standalone servers or a group of servers
  * Asynchronous (deferred) authentication support for auth-pam
    plugin
  * Asynchronous (deferred) support for client-connect scripts and
    plugins
  * Support IPv4 configs with /31 netmasks
  * 802.1q VLAN support on TAP servers
  * Support IPv6-only tunnels
  * New option --block-ipv6 to reject all IPv6 packets (ICMPv6)
  * Support Virtual Routing and Forwarding (VRF)
  * Netlink integration (OpenVPN no longer needs to execute
    ifconfig/route or ip commands)
  * Obsoletes openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch
- bsc#1062157: The fix for bsc#934237 causes problems with the
  crypto self-test of newer openvpn versions.
  Remove openvpn-2.3.x-fixed-multiple-low-severity-issues.patch .</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 2.5.4:
  * fix prompting for password on windows console if stderr redirection
    is in use - this breaks 2.5.x on Win11/ARM, and might also break
    on Win11/adm64 when released.
  * fix setting MAC address on TAP adapters (--lladdr) to use sitnl
    (was overlooked, and still used "ifconfig" calls)
  * various improvements for man page building (rst2man/rst2html etc)
  * minor bugfix with IN6_IS_ADDR_UNSPECIFIED() use (breaks build on
    at least one platform strictly checking this)
  * fix minor memory leak under certain conditions in add_route() and
    add_route_ipv6()
  * documentation improvements
  * copyright updates where needed
  * better error reporting when win32 console access fails</changelog>
  <changelog author="jengelh@inai.de" date="1638619200">- Avoid bashisms and use POSIX sh syntax.
- Use more efficient find commands.
- Trim marketing filler words from description.</changelog>
  <changelog author="max@suse.com" date="1638964800">- Drop 0001-preform-deferred-authentication-in-the-background.patch
  Upstream has meanwhile solved this differently and the two
  implementations interfere (boo#1193017).
- Obsoleted SLE patches up to this point:
  * openvpn-CVE-2020-15078.patch
  * openvpn-CVE-2020-11810.patch
  * openvpn-CVE-2018-7544.patch
  * openvpn-CVE-2018-9336.patch</changelog>
  <changelog author="dmueller@suse.com" date="1639569600">- update to 2.5.5:
  * SWEET32/64bit cipher deprecation change was postponed to 2.7
  * improve "make check" to notice if "openvpn --show-cipher" crashes
  * improve argv unit tests
  * ensure unit tests work with mbedTLS builds without BF-CBC ciphers
  * include "--push-remove" in the output of "openvpn --help"
  * fix error in iptables syntax in example firewall.sh script
  * fix "resolvconf -p" invocation in example "up" script
  * fix "common_name" environment for script calls when
    "--username-as-common-name" is in effect (Trac #1434)
  * move "push-peer-info" documentation from "server options" to "client"
  * correct "foreign_option_{n}" typo in manpage
  * README.down-root: fix plugin module name</changelog>
  <changelog author="max@suse.com" date="1644494400">- Fix license tag in spec file.</changelog>
  <changelog author="max@suse.com" date="1648036800">- update to 2.5.6:
  * bsc#1197341, CVE-2022-0547: possible authentication bypass in
    external authentication plug-in
  * Fix "--mtu-disc maybe|yes" on Linux
  * Fix $common_name variable passed to scripts when
    username-as-common-name is in effect.
  * Fix potential memory leaks in add_route() and add_route_ipv6().
  * Apply connect-retry backoff only to one side of the connection
    in p2p mode.
  * repair "--inactive" handling with a 'bytes' parameter larger
    than 2 Gbytes.
  * new plugin (sample-plugin/defer/multi-auth.c) to help testing
    with multiple parallel plugins that succeed/fail in
    direct/deferred mode.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1123557: --suppress-timestamps isn't needed by default.</changelog>
</package>
<package pkgid="3a56f48c7fda9182fd52e1c4eef995193086120fa3ac1e1c56e7c0531f1d1407" name="openvpn-down-root-plugin" arch="aarch64">
  <version epoch="0" ver="2.5.6" rel="150400.3.3.1"/>
  <changelog author="max@suse.com" date="1564401600">- Clarify in the service file that the reload action doesn't work
  when dropping root privileges (boo#1142830).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1568808000">- Add p11kit build time dependency for pkcs providers autodetection</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578398400">- Update to version 2.4.8:
  * mbedtls: fix segfault by calling mbedtls_cipher_free() in
    cipher_ctx_free()
  * cleanup: Remove RPM openvpn.spec build approach
  * docs: Update INSTALL
  * build: Package missing mock_msg.h
  * Increase listen() backlog queue to 32
  * Force combinationation of --socks-proxy and --proto UDP to use
    IPv4.
  * Wrong FILETYPE in .rc files
  * Do not set pkcs11-helper 'safe fork mode'
  * tests/t_lpback.sh: Switch sed(1) to POSIX-compatible regex.
  * Fix various compiler warnings
  * Fix regression, reinstate LibreSSL support.
  * man: correct the description of --capath and --crl-verify
    regarding CRLs
  * Fix typo in NTLM proxy debug message
  * Ignore --pull-filter for --mode server
  * openssl: Fix compilation without deprecated OpenSSL 1.1 APIs
  * Better error message when script fails due to script-security
    setting
  * Correct the return value of cryptoapi RSA signature callbacks
  * Handle PSS padding in cryptoapicert
  * cmocka: use relative paths
  * Fix documentation of tls-verify script argument</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.
- Use %systemd_ordering instead of systemd_requires: in fact,
  systemd is not a hard requirement for openvpn. But in case a
  system is being installed with systemd, we want systemd to be
  there before  openvpn is being installed.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1583323200">- Fix inconsistency in openvpn.service:
  * It uses the unescape instance name as config file basename,
    so use that in the description as well</changelog>
  <changelog author="fbui@suse.com" date="1598443200">- Explicitly requires sysvinit-tools as some of the tools shipped by
  this package are used in various places regardless of whether
  openvpn is built for systemd or non systemd systems.
  For the context: sysvinit-tools was pulled in by systemd since 2014
  but it's no longer the case so better to be safe than sorry.</changelog>
  <changelog author="fbui@suse.com" date="1598443201">- Modernize openvpn.service
  * /var/run has been obsoleted since a long time.
  * on reload, send HUP signal directly rather than relying on
    killproc to look for the main process.</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- update to 2.4.9 (CVE-2020-11810, bsc#1169925O):
  * Allow unicode search string in --cryptoapicert option (Windows)
  * Skip expired certificates in Windows certificate store (Windows) (trac #966)
  * OpenSSL: Fix --crl-verify not loading multiple CRLs in one file (trac #623)
  * fix condition where a client's session could "float" to a new IP address that is not authorized ("fix illegal client float").
  This can be used to disrupt service to a freshly connected client (no session
  keys negotiated yet). It can not be used to inject or steal VPN traffic.
  CVE-2020-11810).
  * fix combination of async push (deferred auth) and NCP (trac #1259)
  * Fix OpenSSL 1.1.1 not using auto elliptic curve selection (trac #1228)
  * Fix OpenSSL error stack handling of tls_ctx_add_extra_certs
  * mbedTLS: Make sure TLS session survives move (trac #880)
  * Fix OpenSSL private key passphrase notices
  * Fix building with --enable-async-push in FreeBSD (trac #1256)
  * Fix broken fragmentation logic when using NCP (trac #1140)</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 2.4.10:
  - OpenVPN client will now announce the acceptable ciphers to the server
  (IV_CIPHER=...), so NCP cipher negotiation works better
  - Parse static challenge response in auth-pam plugin
  - Accept empty password and/or response in auth-pam plugin
  - Log serial number of revoked certificate
  - Fix tls_ctx_client/server_new leaving error on OpenSSL error stack
  - Fix auth-token not being updated if auth-nocache is set
  (this should fix all remaining client-side bugs for the combination
  "auth-nocache in client-config" + "auth-token in use on the server")
  - Fix stack overflow in OpenSolaris and *BSD NEXTADDR()
  - Fix error detection / abort in --inetd corner case (#350)
  - Fix TUNSETGROUP compatibility with very old Linux systems (#1152)
  - Fix handling of 'route remote_host' for IPv6 transport case
  (#1247 and #1332)
  - Fix --show-gateway for IPv6 on NetBSD/i386 (#734)
  - A number of documentation improvements / clarification fixes.
  - Fix line number reporting on config file errors after &lt;inline&gt; segments
  - Fix fatal error at switching remotes (#629)
  - socks.c: fix alen for DOMAIN type addresses, bump up buffer sizes (#848)
  - Switch "ks-&gt;authenticated" assertion failure to returning false (#1270)
- refresh 0001-preform-deferred-authentication-in-the-background.patch
  openvpn-2.3.x-fixed-multiple-low-severity-issues.patch against 2.4.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1619352000">- update 'rcopenvpn' to work without /etc/rc.status (boo#1185273)</changelog>
  <changelog author="dmueller@suse.com" date="1622462400">- update to 2.4.11 (bsc#1185279):
  * CVE-2020-15078 see https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
  * This bug allows - under very specific circumstances - to trick a server using
    delayed authentication (plugin or management) into returning a PUSH_REPLY
    before the AUTH_FAILED message, which can possibly be used to gather
    information about a VPN setup.
  * In combination with "--auth-gen-token" or an user-specific token auth
    solution it can be possible to get access to a VPN with an
    otherwise-invalid account.
  * Fix potential NULL ptr crash if compiled with DMALLOC
- drop sysv init support, it hasn't build successfully in ages
  and is build-disabled in devel project</changelog>
  <changelog author="max@suse.com" date="1628164800">- Update to 2.5.3:
  * Removal of BF-CBC support in default configuration
  * ** POSSIBLE INCOMPATIBILITY ***
    See section "DATA CHANNEL CIPHER NEGOTIATION" in openvpn(8).
  * Connections setup is now much faster
  * Support ChaCha20-Poly1305 cipher in the OpenVPN data channel
  * Improved TLS 1.3 support when using OpenSSL 1.1.1 or newer
  * Client-specific tls-crypt keys (--tls-crypt-v2)
  * Improved Data channel cipher negotiation
  * HMAC based auth-token support for seamless reconnects to
    standalone servers or a group of servers
  * Asynchronous (deferred) authentication support for auth-pam
    plugin
  * Asynchronous (deferred) support for client-connect scripts and
    plugins
  * Support IPv4 configs with /31 netmasks
  * 802.1q VLAN support on TAP servers
  * Support IPv6-only tunnels
  * New option --block-ipv6 to reject all IPv6 packets (ICMPv6)
  * Support Virtual Routing and Forwarding (VRF)
  * Netlink integration (OpenVPN no longer needs to execute
    ifconfig/route or ip commands)
  * Obsoletes openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch
- bsc#1062157: The fix for bsc#934237 causes problems with the
  crypto self-test of newer openvpn versions.
  Remove openvpn-2.3.x-fixed-multiple-low-severity-issues.patch .</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 2.5.4:
  * fix prompting for password on windows console if stderr redirection
    is in use - this breaks 2.5.x on Win11/ARM, and might also break
    on Win11/adm64 when released.
  * fix setting MAC address on TAP adapters (--lladdr) to use sitnl
    (was overlooked, and still used "ifconfig" calls)
  * various improvements for man page building (rst2man/rst2html etc)
  * minor bugfix with IN6_IS_ADDR_UNSPECIFIED() use (breaks build on
    at least one platform strictly checking this)
  * fix minor memory leak under certain conditions in add_route() and
    add_route_ipv6()
  * documentation improvements
  * copyright updates where needed
  * better error reporting when win32 console access fails</changelog>
  <changelog author="jengelh@inai.de" date="1638619200">- Avoid bashisms and use POSIX sh syntax.
- Use more efficient find commands.
- Trim marketing filler words from description.</changelog>
  <changelog author="max@suse.com" date="1638964800">- Drop 0001-preform-deferred-authentication-in-the-background.patch
  Upstream has meanwhile solved this differently and the two
  implementations interfere (boo#1193017).
- Obsoleted SLE patches up to this point:
  * openvpn-CVE-2020-15078.patch
  * openvpn-CVE-2020-11810.patch
  * openvpn-CVE-2018-7544.patch
  * openvpn-CVE-2018-9336.patch</changelog>
  <changelog author="dmueller@suse.com" date="1639569600">- update to 2.5.5:
  * SWEET32/64bit cipher deprecation change was postponed to 2.7
  * improve "make check" to notice if "openvpn --show-cipher" crashes
  * improve argv unit tests
  * ensure unit tests work with mbedTLS builds without BF-CBC ciphers
  * include "--push-remove" in the output of "openvpn --help"
  * fix error in iptables syntax in example firewall.sh script
  * fix "resolvconf -p" invocation in example "up" script
  * fix "common_name" environment for script calls when
    "--username-as-common-name" is in effect (Trac #1434)
  * move "push-peer-info" documentation from "server options" to "client"
  * correct "foreign_option_{n}" typo in manpage
  * README.down-root: fix plugin module name</changelog>
  <changelog author="max@suse.com" date="1644494400">- Fix license tag in spec file.</changelog>
  <changelog author="max@suse.com" date="1648036800">- update to 2.5.6:
  * bsc#1197341, CVE-2022-0547: possible authentication bypass in
    external authentication plug-in
  * Fix "--mtu-disc maybe|yes" on Linux
  * Fix $common_name variable passed to scripts when
    username-as-common-name is in effect.
  * Fix potential memory leaks in add_route() and add_route_ipv6().
  * Apply connect-retry backoff only to one side of the connection
    in p2p mode.
  * repair "--inactive" handling with a 'bytes' parameter larger
    than 2 Gbytes.
  * new plugin (sample-plugin/defer/multi-auth.c) to help testing
    with multiple parallel plugins that succeed/fail in
    direct/deferred mode.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1123557: --suppress-timestamps isn't needed by default.</changelog>
</package>
<package pkgid="ea6d79d03156584ecabf91ea9272423942b2e04862b725228bec7397140efb87" name="openvpn-down-root-plugin" arch="ppc64le">
  <version epoch="0" ver="2.5.6" rel="150400.3.3.1"/>
  <changelog author="max@suse.com" date="1564401600">- Clarify in the service file that the reload action doesn't work
  when dropping root privileges (boo#1142830).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1568808000">- Add p11kit build time dependency for pkcs providers autodetection</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578398400">- Update to version 2.4.8:
  * mbedtls: fix segfault by calling mbedtls_cipher_free() in
    cipher_ctx_free()
  * cleanup: Remove RPM openvpn.spec build approach
  * docs: Update INSTALL
  * build: Package missing mock_msg.h
  * Increase listen() backlog queue to 32
  * Force combinationation of --socks-proxy and --proto UDP to use
    IPv4.
  * Wrong FILETYPE in .rc files
  * Do not set pkcs11-helper 'safe fork mode'
  * tests/t_lpback.sh: Switch sed(1) to POSIX-compatible regex.
  * Fix various compiler warnings
  * Fix regression, reinstate LibreSSL support.
  * man: correct the description of --capath and --crl-verify
    regarding CRLs
  * Fix typo in NTLM proxy debug message
  * Ignore --pull-filter for --mode server
  * openssl: Fix compilation without deprecated OpenSSL 1.1 APIs
  * Better error message when script fails due to script-security
    setting
  * Correct the return value of cryptoapi RSA signature callbacks
  * Handle PSS padding in cryptoapicert
  * cmocka: use relative paths
  * Fix documentation of tls-verify script argument</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.
- Use %systemd_ordering instead of systemd_requires: in fact,
  systemd is not a hard requirement for openvpn. But in case a
  system is being installed with systemd, we want systemd to be
  there before  openvpn is being installed.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1583323200">- Fix inconsistency in openvpn.service:
  * It uses the unescape instance name as config file basename,
    so use that in the description as well</changelog>
  <changelog author="fbui@suse.com" date="1598443200">- Explicitly requires sysvinit-tools as some of the tools shipped by
  this package are used in various places regardless of whether
  openvpn is built for systemd or non systemd systems.
  For the context: sysvinit-tools was pulled in by systemd since 2014
  but it's no longer the case so better to be safe than sorry.</changelog>
  <changelog author="fbui@suse.com" date="1598443201">- Modernize openvpn.service
  * /var/run has been obsoleted since a long time.
  * on reload, send HUP signal directly rather than relying on
    killproc to look for the main process.</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- update to 2.4.9 (CVE-2020-11810, bsc#1169925O):
  * Allow unicode search string in --cryptoapicert option (Windows)
  * Skip expired certificates in Windows certificate store (Windows) (trac #966)
  * OpenSSL: Fix --crl-verify not loading multiple CRLs in one file (trac #623)
  * fix condition where a client's session could "float" to a new IP address that is not authorized ("fix illegal client float").
  This can be used to disrupt service to a freshly connected client (no session
  keys negotiated yet). It can not be used to inject or steal VPN traffic.
  CVE-2020-11810).
  * fix combination of async push (deferred auth) and NCP (trac #1259)
  * Fix OpenSSL 1.1.1 not using auto elliptic curve selection (trac #1228)
  * Fix OpenSSL error stack handling of tls_ctx_add_extra_certs
  * mbedTLS: Make sure TLS session survives move (trac #880)
  * Fix OpenSSL private key passphrase notices
  * Fix building with --enable-async-push in FreeBSD (trac #1256)
  * Fix broken fragmentation logic when using NCP (trac #1140)</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 2.4.10:
  - OpenVPN client will now announce the acceptable ciphers to the server
  (IV_CIPHER=...), so NCP cipher negotiation works better
  - Parse static challenge response in auth-pam plugin
  - Accept empty password and/or response in auth-pam plugin
  - Log serial number of revoked certificate
  - Fix tls_ctx_client/server_new leaving error on OpenSSL error stack
  - Fix auth-token not being updated if auth-nocache is set
  (this should fix all remaining client-side bugs for the combination
  "auth-nocache in client-config" + "auth-token in use on the server")
  - Fix stack overflow in OpenSolaris and *BSD NEXTADDR()
  - Fix error detection / abort in --inetd corner case (#350)
  - Fix TUNSETGROUP compatibility with very old Linux systems (#1152)
  - Fix handling of 'route remote_host' for IPv6 transport case
  (#1247 and #1332)
  - Fix --show-gateway for IPv6 on NetBSD/i386 (#734)
  - A number of documentation improvements / clarification fixes.
  - Fix line number reporting on config file errors after &lt;inline&gt; segments
  - Fix fatal error at switching remotes (#629)
  - socks.c: fix alen for DOMAIN type addresses, bump up buffer sizes (#848)
  - Switch "ks-&gt;authenticated" assertion failure to returning false (#1270)
- refresh 0001-preform-deferred-authentication-in-the-background.patch
  openvpn-2.3.x-fixed-multiple-low-severity-issues.patch against 2.4.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1619352000">- update 'rcopenvpn' to work without /etc/rc.status (boo#1185273)</changelog>
  <changelog author="dmueller@suse.com" date="1622462400">- update to 2.4.11 (bsc#1185279):
  * CVE-2020-15078 see https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
  * This bug allows - under very specific circumstances - to trick a server using
    delayed authentication (plugin or management) into returning a PUSH_REPLY
    before the AUTH_FAILED message, which can possibly be used to gather
    information about a VPN setup.
  * In combination with "--auth-gen-token" or an user-specific token auth
    solution it can be possible to get access to a VPN with an
    otherwise-invalid account.
  * Fix potential NULL ptr crash if compiled with DMALLOC
- drop sysv init support, it hasn't build successfully in ages
  and is build-disabled in devel project</changelog>
  <changelog author="max@suse.com" date="1628164800">- Update to 2.5.3:
  * Removal of BF-CBC support in default configuration
  * ** POSSIBLE INCOMPATIBILITY ***
    See section "DATA CHANNEL CIPHER NEGOTIATION" in openvpn(8).
  * Connections setup is now much faster
  * Support ChaCha20-Poly1305 cipher in the OpenVPN data channel
  * Improved TLS 1.3 support when using OpenSSL 1.1.1 or newer
  * Client-specific tls-crypt keys (--tls-crypt-v2)
  * Improved Data channel cipher negotiation
  * HMAC based auth-token support for seamless reconnects to
    standalone servers or a group of servers
  * Asynchronous (deferred) authentication support for auth-pam
    plugin
  * Asynchronous (deferred) support for client-connect scripts and
    plugins
  * Support IPv4 configs with /31 netmasks
  * 802.1q VLAN support on TAP servers
  * Support IPv6-only tunnels
  * New option --block-ipv6 to reject all IPv6 packets (ICMPv6)
  * Support Virtual Routing and Forwarding (VRF)
  * Netlink integration (OpenVPN no longer needs to execute
    ifconfig/route or ip commands)
  * Obsoletes openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch
- bsc#1062157: The fix for bsc#934237 causes problems with the
  crypto self-test of newer openvpn versions.
  Remove openvpn-2.3.x-fixed-multiple-low-severity-issues.patch .</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 2.5.4:
  * fix prompting for password on windows console if stderr redirection
    is in use - this breaks 2.5.x on Win11/ARM, and might also break
    on Win11/adm64 when released.
  * fix setting MAC address on TAP adapters (--lladdr) to use sitnl
    (was overlooked, and still used "ifconfig" calls)
  * various improvements for man page building (rst2man/rst2html etc)
  * minor bugfix with IN6_IS_ADDR_UNSPECIFIED() use (breaks build on
    at least one platform strictly checking this)
  * fix minor memory leak under certain conditions in add_route() and
    add_route_ipv6()
  * documentation improvements
  * copyright updates where needed
  * better error reporting when win32 console access fails</changelog>
  <changelog author="jengelh@inai.de" date="1638619200">- Avoid bashisms and use POSIX sh syntax.
- Use more efficient find commands.
- Trim marketing filler words from description.</changelog>
  <changelog author="max@suse.com" date="1638964800">- Drop 0001-preform-deferred-authentication-in-the-background.patch
  Upstream has meanwhile solved this differently and the two
  implementations interfere (boo#1193017).
- Obsoleted SLE patches up to this point:
  * openvpn-CVE-2020-15078.patch
  * openvpn-CVE-2020-11810.patch
  * openvpn-CVE-2018-7544.patch
  * openvpn-CVE-2018-9336.patch</changelog>
  <changelog author="dmueller@suse.com" date="1639569600">- update to 2.5.5:
  * SWEET32/64bit cipher deprecation change was postponed to 2.7
  * improve "make check" to notice if "openvpn --show-cipher" crashes
  * improve argv unit tests
  * ensure unit tests work with mbedTLS builds without BF-CBC ciphers
  * include "--push-remove" in the output of "openvpn --help"
  * fix error in iptables syntax in example firewall.sh script
  * fix "resolvconf -p" invocation in example "up" script
  * fix "common_name" environment for script calls when
    "--username-as-common-name" is in effect (Trac #1434)
  * move "push-peer-info" documentation from "server options" to "client"
  * correct "foreign_option_{n}" typo in manpage
  * README.down-root: fix plugin module name</changelog>
  <changelog author="max@suse.com" date="1644494400">- Fix license tag in spec file.</changelog>
  <changelog author="max@suse.com" date="1648036800">- update to 2.5.6:
  * bsc#1197341, CVE-2022-0547: possible authentication bypass in
    external authentication plug-in
  * Fix "--mtu-disc maybe|yes" on Linux
  * Fix $common_name variable passed to scripts when
    username-as-common-name is in effect.
  * Fix potential memory leaks in add_route() and add_route_ipv6().
  * Apply connect-retry backoff only to one side of the connection
    in p2p mode.
  * repair "--inactive" handling with a 'bytes' parameter larger
    than 2 Gbytes.
  * new plugin (sample-plugin/defer/multi-auth.c) to help testing
    with multiple parallel plugins that succeed/fail in
    direct/deferred mode.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1123557: --suppress-timestamps isn't needed by default.</changelog>
</package>
<package pkgid="ce20a48343ead83c16f4888414520fb399bda0fb76d711b8ac6c791035d95def" name="openvpn-down-root-plugin" arch="s390x">
  <version epoch="0" ver="2.5.6" rel="150400.3.3.1"/>
  <changelog author="max@suse.com" date="1564401600">- Clarify in the service file that the reload action doesn't work
  when dropping root privileges (boo#1142830).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1568808000">- Add p11kit build time dependency for pkcs providers autodetection</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578398400">- Update to version 2.4.8:
  * mbedtls: fix segfault by calling mbedtls_cipher_free() in
    cipher_ctx_free()
  * cleanup: Remove RPM openvpn.spec build approach
  * docs: Update INSTALL
  * build: Package missing mock_msg.h
  * Increase listen() backlog queue to 32
  * Force combinationation of --socks-proxy and --proto UDP to use
    IPv4.
  * Wrong FILETYPE in .rc files
  * Do not set pkcs11-helper 'safe fork mode'
  * tests/t_lpback.sh: Switch sed(1) to POSIX-compatible regex.
  * Fix various compiler warnings
  * Fix regression, reinstate LibreSSL support.
  * man: correct the description of --capath and --crl-verify
    regarding CRLs
  * Fix typo in NTLM proxy debug message
  * Ignore --pull-filter for --mode server
  * openssl: Fix compilation without deprecated OpenSSL 1.1 APIs
  * Better error message when script fails due to script-security
    setting
  * Correct the return value of cryptoapi RSA signature callbacks
  * Handle PSS padding in cryptoapicert
  * cmocka: use relative paths
  * Fix documentation of tls-verify script argument</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.
- Use %systemd_ordering instead of systemd_requires: in fact,
  systemd is not a hard requirement for openvpn. But in case a
  system is being installed with systemd, we want systemd to be
  there before  openvpn is being installed.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1583323200">- Fix inconsistency in openvpn.service:
  * It uses the unescape instance name as config file basename,
    so use that in the description as well</changelog>
  <changelog author="fbui@suse.com" date="1598443200">- Explicitly requires sysvinit-tools as some of the tools shipped by
  this package are used in various places regardless of whether
  openvpn is built for systemd or non systemd systems.
  For the context: sysvinit-tools was pulled in by systemd since 2014
  but it's no longer the case so better to be safe than sorry.</changelog>
  <changelog author="fbui@suse.com" date="1598443201">- Modernize openvpn.service
  * /var/run has been obsoleted since a long time.
  * on reload, send HUP signal directly rather than relying on
    killproc to look for the main process.</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- update to 2.4.9 (CVE-2020-11810, bsc#1169925O):
  * Allow unicode search string in --cryptoapicert option (Windows)
  * Skip expired certificates in Windows certificate store (Windows) (trac #966)
  * OpenSSL: Fix --crl-verify not loading multiple CRLs in one file (trac #623)
  * fix condition where a client's session could "float" to a new IP address that is not authorized ("fix illegal client float").
  This can be used to disrupt service to a freshly connected client (no session
  keys negotiated yet). It can not be used to inject or steal VPN traffic.
  CVE-2020-11810).
  * fix combination of async push (deferred auth) and NCP (trac #1259)
  * Fix OpenSSL 1.1.1 not using auto elliptic curve selection (trac #1228)
  * Fix OpenSSL error stack handling of tls_ctx_add_extra_certs
  * mbedTLS: Make sure TLS session survives move (trac #880)
  * Fix OpenSSL private key passphrase notices
  * Fix building with --enable-async-push in FreeBSD (trac #1256)
  * Fix broken fragmentation logic when using NCP (trac #1140)</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 2.4.10:
  - OpenVPN client will now announce the acceptable ciphers to the server
  (IV_CIPHER=...), so NCP cipher negotiation works better
  - Parse static challenge response in auth-pam plugin
  - Accept empty password and/or response in auth-pam plugin
  - Log serial number of revoked certificate
  - Fix tls_ctx_client/server_new leaving error on OpenSSL error stack
  - Fix auth-token not being updated if auth-nocache is set
  (this should fix all remaining client-side bugs for the combination
  "auth-nocache in client-config" + "auth-token in use on the server")
  - Fix stack overflow in OpenSolaris and *BSD NEXTADDR()
  - Fix error detection / abort in --inetd corner case (#350)
  - Fix TUNSETGROUP compatibility with very old Linux systems (#1152)
  - Fix handling of 'route remote_host' for IPv6 transport case
  (#1247 and #1332)
  - Fix --show-gateway for IPv6 on NetBSD/i386 (#734)
  - A number of documentation improvements / clarification fixes.
  - Fix line number reporting on config file errors after &lt;inline&gt; segments
  - Fix fatal error at switching remotes (#629)
  - socks.c: fix alen for DOMAIN type addresses, bump up buffer sizes (#848)
  - Switch "ks-&gt;authenticated" assertion failure to returning false (#1270)
- refresh 0001-preform-deferred-authentication-in-the-background.patch
  openvpn-2.3.x-fixed-multiple-low-severity-issues.patch against 2.4.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1619352000">- update 'rcopenvpn' to work without /etc/rc.status (boo#1185273)</changelog>
  <changelog author="dmueller@suse.com" date="1622462400">- update to 2.4.11 (bsc#1185279):
  * CVE-2020-15078 see https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
  * This bug allows - under very specific circumstances - to trick a server using
    delayed authentication (plugin or management) into returning a PUSH_REPLY
    before the AUTH_FAILED message, which can possibly be used to gather
    information about a VPN setup.
  * In combination with "--auth-gen-token" or an user-specific token auth
    solution it can be possible to get access to a VPN with an
    otherwise-invalid account.
  * Fix potential NULL ptr crash if compiled with DMALLOC
- drop sysv init support, it hasn't build successfully in ages
  and is build-disabled in devel project</changelog>
  <changelog author="max@suse.com" date="1628164800">- Update to 2.5.3:
  * Removal of BF-CBC support in default configuration
  * ** POSSIBLE INCOMPATIBILITY ***
    See section "DATA CHANNEL CIPHER NEGOTIATION" in openvpn(8).
  * Connections setup is now much faster
  * Support ChaCha20-Poly1305 cipher in the OpenVPN data channel
  * Improved TLS 1.3 support when using OpenSSL 1.1.1 or newer
  * Client-specific tls-crypt keys (--tls-crypt-v2)
  * Improved Data channel cipher negotiation
  * HMAC based auth-token support for seamless reconnects to
    standalone servers or a group of servers
  * Asynchronous (deferred) authentication support for auth-pam
    plugin
  * Asynchronous (deferred) support for client-connect scripts and
    plugins
  * Support IPv4 configs with /31 netmasks
  * 802.1q VLAN support on TAP servers
  * Support IPv6-only tunnels
  * New option --block-ipv6 to reject all IPv6 packets (ICMPv6)
  * Support Virtual Routing and Forwarding (VRF)
  * Netlink integration (OpenVPN no longer needs to execute
    ifconfig/route or ip commands)
  * Obsoletes openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch
- bsc#1062157: The fix for bsc#934237 causes problems with the
  crypto self-test of newer openvpn versions.
  Remove openvpn-2.3.x-fixed-multiple-low-severity-issues.patch .</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 2.5.4:
  * fix prompting for password on windows console if stderr redirection
    is in use - this breaks 2.5.x on Win11/ARM, and might also break
    on Win11/adm64 when released.
  * fix setting MAC address on TAP adapters (--lladdr) to use sitnl
    (was overlooked, and still used "ifconfig" calls)
  * various improvements for man page building (rst2man/rst2html etc)
  * minor bugfix with IN6_IS_ADDR_UNSPECIFIED() use (breaks build on
    at least one platform strictly checking this)
  * fix minor memory leak under certain conditions in add_route() and
    add_route_ipv6()
  * documentation improvements
  * copyright updates where needed
  * better error reporting when win32 console access fails</changelog>
  <changelog author="jengelh@inai.de" date="1638619200">- Avoid bashisms and use POSIX sh syntax.
- Use more efficient find commands.
- Trim marketing filler words from description.</changelog>
  <changelog author="max@suse.com" date="1638964800">- Drop 0001-preform-deferred-authentication-in-the-background.patch
  Upstream has meanwhile solved this differently and the two
  implementations interfere (boo#1193017).
- Obsoleted SLE patches up to this point:
  * openvpn-CVE-2020-15078.patch
  * openvpn-CVE-2020-11810.patch
  * openvpn-CVE-2018-7544.patch
  * openvpn-CVE-2018-9336.patch</changelog>
  <changelog author="dmueller@suse.com" date="1639569600">- update to 2.5.5:
  * SWEET32/64bit cipher deprecation change was postponed to 2.7
  * improve "make check" to notice if "openvpn --show-cipher" crashes
  * improve argv unit tests
  * ensure unit tests work with mbedTLS builds without BF-CBC ciphers
  * include "--push-remove" in the output of "openvpn --help"
  * fix error in iptables syntax in example firewall.sh script
  * fix "resolvconf -p" invocation in example "up" script
  * fix "common_name" environment for script calls when
    "--username-as-common-name" is in effect (Trac #1434)
  * move "push-peer-info" documentation from "server options" to "client"
  * correct "foreign_option_{n}" typo in manpage
  * README.down-root: fix plugin module name</changelog>
  <changelog author="max@suse.com" date="1644494400">- Fix license tag in spec file.</changelog>
  <changelog author="max@suse.com" date="1648036800">- update to 2.5.6:
  * bsc#1197341, CVE-2022-0547: possible authentication bypass in
    external authentication plug-in
  * Fix "--mtu-disc maybe|yes" on Linux
  * Fix $common_name variable passed to scripts when
    username-as-common-name is in effect.
  * Fix potential memory leaks in add_route() and add_route_ipv6().
  * Apply connect-retry backoff only to one side of the connection
    in p2p mode.
  * repair "--inactive" handling with a 'bytes' parameter larger
    than 2 Gbytes.
  * new plugin (sample-plugin/defer/multi-auth.c) to help testing
    with multiple parallel plugins that succeed/fail in
    direct/deferred mode.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1123557: --suppress-timestamps isn't needed by default.</changelog>
</package>
<package pkgid="e67ca7e3fd94ca00ae09c4fb9eeae073f694a68ac08c128696f76d78b3009ec0" name="openvpn-down-root-plugin" arch="x86_64">
  <version epoch="0" ver="2.5.6" rel="150400.3.3.1"/>
  <changelog author="max@suse.com" date="1564401600">- Clarify in the service file that the reload action doesn't work
  when dropping root privileges (boo#1142830).</changelog>
  <changelog author="michal.hrusecky@opensuse.org" date="1568808000">- Add p11kit build time dependency for pkcs providers autodetection</changelog>
  <changelog author="dimstar@opensuse.org" date="1576756800">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  Allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578398400">- Update to version 2.4.8:
  * mbedtls: fix segfault by calling mbedtls_cipher_free() in
    cipher_ctx_free()
  * cleanup: Remove RPM openvpn.spec build approach
  * docs: Update INSTALL
  * build: Package missing mock_msg.h
  * Increase listen() backlog queue to 32
  * Force combinationation of --socks-proxy and --proto UDP to use
    IPv4.
  * Wrong FILETYPE in .rc files
  * Do not set pkcs11-helper 'safe fork mode'
  * tests/t_lpback.sh: Switch sed(1) to POSIX-compatible regex.
  * Fix various compiler warnings
  * Fix regression, reinstate LibreSSL support.
  * man: correct the description of --capath and --crl-verify
    regarding CRLs
  * Fix typo in NTLM proxy debug message
  * Ignore --pull-filter for --mode server
  * openssl: Fix compilation without deprecated OpenSSL 1.1 APIs
  * Better error message when script fails due to script-security
    setting
  * Correct the return value of cryptoapi RSA signature callbacks
  * Handle PSS padding in cryptoapicert
  * cmocka: use relative paths
  * Fix documentation of tls-verify script argument</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.
- Use %systemd_ordering instead of systemd_requires: in fact,
  systemd is not a hard requirement for openvpn. But in case a
  system is being installed with systemd, we want systemd to be
  there before  openvpn is being installed.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1583323200">- Fix inconsistency in openvpn.service:
  * It uses the unescape instance name as config file basename,
    so use that in the description as well</changelog>
  <changelog author="fbui@suse.com" date="1598443200">- Explicitly requires sysvinit-tools as some of the tools shipped by
  this package are used in various places regardless of whether
  openvpn is built for systemd or non systemd systems.
  For the context: sysvinit-tools was pulled in by systemd since 2014
  but it's no longer the case so better to be safe than sorry.</changelog>
  <changelog author="fbui@suse.com" date="1598443201">- Modernize openvpn.service
  * /var/run has been obsoleted since a long time.
  * on reload, send HUP signal directly rather than relying on
    killproc to look for the main process.</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- update to 2.4.9 (CVE-2020-11810, bsc#1169925O):
  * Allow unicode search string in --cryptoapicert option (Windows)
  * Skip expired certificates in Windows certificate store (Windows) (trac #966)
  * OpenSSL: Fix --crl-verify not loading multiple CRLs in one file (trac #623)
  * fix condition where a client's session could "float" to a new IP address that is not authorized ("fix illegal client float").
  This can be used to disrupt service to a freshly connected client (no session
  keys negotiated yet). It can not be used to inject or steal VPN traffic.
  CVE-2020-11810).
  * fix combination of async push (deferred auth) and NCP (trac #1259)
  * Fix OpenSSL 1.1.1 not using auto elliptic curve selection (trac #1228)
  * Fix OpenSSL error stack handling of tls_ctx_add_extra_certs
  * mbedTLS: Make sure TLS session survives move (trac #880)
  * Fix OpenSSL private key passphrase notices
  * Fix building with --enable-async-push in FreeBSD (trac #1256)
  * Fix broken fragmentation logic when using NCP (trac #1140)</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 2.4.10:
  - OpenVPN client will now announce the acceptable ciphers to the server
  (IV_CIPHER=...), so NCP cipher negotiation works better
  - Parse static challenge response in auth-pam plugin
  - Accept empty password and/or response in auth-pam plugin
  - Log serial number of revoked certificate
  - Fix tls_ctx_client/server_new leaving error on OpenSSL error stack
  - Fix auth-token not being updated if auth-nocache is set
  (this should fix all remaining client-side bugs for the combination
  "auth-nocache in client-config" + "auth-token in use on the server")
  - Fix stack overflow in OpenSolaris and *BSD NEXTADDR()
  - Fix error detection / abort in --inetd corner case (#350)
  - Fix TUNSETGROUP compatibility with very old Linux systems (#1152)
  - Fix handling of 'route remote_host' for IPv6 transport case
  (#1247 and #1332)
  - Fix --show-gateway for IPv6 on NetBSD/i386 (#734)
  - A number of documentation improvements / clarification fixes.
  - Fix line number reporting on config file errors after &lt;inline&gt; segments
  - Fix fatal error at switching remotes (#629)
  - socks.c: fix alen for DOMAIN type addresses, bump up buffer sizes (#848)
  - Switch "ks-&gt;authenticated" assertion failure to returning false (#1270)
- refresh 0001-preform-deferred-authentication-in-the-background.patch
  openvpn-2.3.x-fixed-multiple-low-severity-issues.patch against 2.4.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1619352000">- update 'rcopenvpn' to work without /etc/rc.status (boo#1185273)</changelog>
  <changelog author="dmueller@suse.com" date="1622462400">- update to 2.4.11 (bsc#1185279):
  * CVE-2020-15078 see https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
  * This bug allows - under very specific circumstances - to trick a server using
    delayed authentication (plugin or management) into returning a PUSH_REPLY
    before the AUTH_FAILED message, which can possibly be used to gather
    information about a VPN setup.
  * In combination with "--auth-gen-token" or an user-specific token auth
    solution it can be possible to get access to a VPN with an
    otherwise-invalid account.
  * Fix potential NULL ptr crash if compiled with DMALLOC
- drop sysv init support, it hasn't build successfully in ages
  and is build-disabled in devel project</changelog>
  <changelog author="max@suse.com" date="1628164800">- Update to 2.5.3:
  * Removal of BF-CBC support in default configuration
  * ** POSSIBLE INCOMPATIBILITY ***
    See section "DATA CHANNEL CIPHER NEGOTIATION" in openvpn(8).
  * Connections setup is now much faster
  * Support ChaCha20-Poly1305 cipher in the OpenVPN data channel
  * Improved TLS 1.3 support when using OpenSSL 1.1.1 or newer
  * Client-specific tls-crypt keys (--tls-crypt-v2)
  * Improved Data channel cipher negotiation
  * HMAC based auth-token support for seamless reconnects to
    standalone servers or a group of servers
  * Asynchronous (deferred) authentication support for auth-pam
    plugin
  * Asynchronous (deferred) support for client-connect scripts and
    plugins
  * Support IPv4 configs with /31 netmasks
  * 802.1q VLAN support on TAP servers
  * Support IPv6-only tunnels
  * New option --block-ipv6 to reject all IPv6 packets (ICMPv6)
  * Support Virtual Routing and Forwarding (VRF)
  * Netlink integration (OpenVPN no longer needs to execute
    ifconfig/route or ip commands)
  * Obsoletes openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch
- bsc#1062157: The fix for bsc#934237 causes problems with the
  crypto self-test of newer openvpn versions.
  Remove openvpn-2.3.x-fixed-multiple-low-severity-issues.patch .</changelog>
  <changelog author="dmueller@suse.com" date="1634385600">- update to 2.5.4:
  * fix prompting for password on windows console if stderr redirection
    is in use - this breaks 2.5.x on Win11/ARM, and might also break
    on Win11/adm64 when released.
  * fix setting MAC address on TAP adapters (--lladdr) to use sitnl
    (was overlooked, and still used "ifconfig" calls)
  * various improvements for man page building (rst2man/rst2html etc)
  * minor bugfix with IN6_IS_ADDR_UNSPECIFIED() use (breaks build on
    at least one platform strictly checking this)
  * fix minor memory leak under certain conditions in add_route() and
    add_route_ipv6()
  * documentation improvements
  * copyright updates where needed
  * better error reporting when win32 console access fails</changelog>
  <changelog author="jengelh@inai.de" date="1638619200">- Avoid bashisms and use POSIX sh syntax.
- Use more efficient find commands.
- Trim marketing filler words from description.</changelog>
  <changelog author="max@suse.com" date="1638964800">- Drop 0001-preform-deferred-authentication-in-the-background.patch
  Upstream has meanwhile solved this differently and the two
  implementations interfere (boo#1193017).
- Obsoleted SLE patches up to this point:
  * openvpn-CVE-2020-15078.patch
  * openvpn-CVE-2020-11810.patch
  * openvpn-CVE-2018-7544.patch
  * openvpn-CVE-2018-9336.patch</changelog>
  <changelog author="dmueller@suse.com" date="1639569600">- update to 2.5.5:
  * SWEET32/64bit cipher deprecation change was postponed to 2.7
  * improve "make check" to notice if "openvpn --show-cipher" crashes
  * improve argv unit tests
  * ensure unit tests work with mbedTLS builds without BF-CBC ciphers
  * include "--push-remove" in the output of "openvpn --help"
  * fix error in iptables syntax in example firewall.sh script
  * fix "resolvconf -p" invocation in example "up" script
  * fix "common_name" environment for script calls when
    "--username-as-common-name" is in effect (Trac #1434)
  * move "push-peer-info" documentation from "server options" to "client"
  * correct "foreign_option_{n}" typo in manpage
  * README.down-root: fix plugin module name</changelog>
  <changelog author="max@suse.com" date="1644494400">- Fix license tag in spec file.</changelog>
  <changelog author="max@suse.com" date="1648036800">- update to 2.5.6:
  * bsc#1197341, CVE-2022-0547: possible authentication bypass in
    external authentication plug-in
  * Fix "--mtu-disc maybe|yes" on Linux
  * Fix $common_name variable passed to scripts when
    username-as-common-name is in effect.
  * Fix potential memory leaks in add_route() and add_route_ipv6().
  * Apply connect-retry backoff only to one side of the connection
    in p2p mode.
  * repair "--inactive" handling with a 'bytes' parameter larger
    than 2 Gbytes.
  * new plugin (sample-plugin/defer/multi-auth.c) to help testing
    with multiple parallel plugins that succeed/fail in
    direct/deferred mode.</changelog>
  <changelog author="max@suse.com" date="1650974400">- bsc#1123557: --suppress-timestamps isn't needed by default.</changelog>
</package>
<package pkgid="466721487c564fb301cb76badadf0da167b816507c27d4d4e52f64d18f74ffd7" name="openwsman" arch="src">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="244a72addbd37b941127d3050e7edb0d0541acdacdad18c9ef5565d68ce2e880" name="openwsman-java" arch="aarch64">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="706cad7d4c3260ce31d561ee78aa2e07c21fee50614095a80c53f113d34c4b26" name="openwsman-java" arch="ppc64le">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="d0081692eb11c9df87b23bef0aece2f420d090611ff5f3e75b6618ca9f62e2c3" name="openwsman-java" arch="s390x">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="3424860d02d961f4bdbff23bf3d657e91f07b49679e887ae8f2a4f843baf7119" name="openwsman-java" arch="x86_64">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="054d4cc0942987190b9a94cc2172a72db87a67e3fa91793d8717e5188c88e89b" name="openwsman-perl" arch="aarch64">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="463635dd6db53aaab6e864b464c396d7cee5a76a38be467872b83bf0cde995d2" name="openwsman-perl" arch="ppc64le">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="f295d64bdd02d33e11d551224b18654e8e0a9b1a2322f5c5849d7508247d46b2" name="openwsman-perl" arch="s390x">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="e5f2a8ff0d278af2a35fceeb15819678c3cc01e26771ee1e66e58b0375e40ef5" name="openwsman-perl" arch="x86_64">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="c073cc21b63ce11f2908d153db63a61ed5c9733f05d0c6d4ee8c470a27f94cde" name="openwsman-ruby" arch="aarch64">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="ad5f9fc763476f082f041110133f0f7a8a0bd8256a6a525c29125765cc6b5ca6" name="openwsman-ruby" arch="ppc64le">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="ed283692d48afd302d8949b5d892b9220c0ada72770cbf3cc1ac664bfa5169e2" name="openwsman-ruby" arch="s390x">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="c50ad936fac699ab85c314e4a808e150b686f2125e27f7b403617355dfd2701e" name="openwsman-ruby" arch="x86_64">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="6f88b18ea8c192cd0a381055ab7634558871d653906409a2038ff650a756df8c" name="openwsman-ruby-docs" arch="aarch64">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="5fe4fcf59e478cb08160d3b40b299a56d96171d3d788284d5455ba7fdbd34f15" name="openwsman-ruby-docs" arch="ppc64le">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="d5c2eef07898c3d87d7f8e9a14c6679a0a120bed79c89c03672f0450cbb18cdb" name="openwsman-ruby-docs" arch="s390x">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="f667a8d725ec5f986eeff41326971a7c051a37740505afd5a5ff885cf827e7ed" name="openwsman-ruby-docs" arch="x86_64">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="bd27afb847a59d7d4dd3156b638a2f2484ecc8dcb595c1f833b9029e656f12c0" name="openwsman-server" arch="aarch64">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="68803149a2c1dc92fbe3538ba445f128465dc1754f45cd0a7bf9edef85fdac52" name="openwsman-server" arch="ppc64le">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="95b5785d5a5cf8336740173a1d805cc1d0deae1a7c3bd981456e68528b0e6a03" name="openwsman-server" arch="s390x">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="6a4b80894fc549beac32df6d989f446db2b17d10653abfa77fa777b4960e05ee" name="openwsman-server" arch="x86_64">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="4647705292c28802858b2e6f1993af0ca64b2039d8d2e5bed90ea96f9ee3e301" name="openwsman-server-plugin-ruby" arch="aarch64">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="8bbbfcaadbbed5421432353ccdaefb2e307b9ce558e1ae961dd16540a31a6b1a" name="openwsman-server-plugin-ruby" arch="ppc64le">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="01adde1da369252b93c77ed8bc6d6612ee7b30e698838473d579a755b2b281b1" name="openwsman-server-plugin-ruby" arch="s390x">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="f6d2ad2a207c7aa4a7f3168396b9a304d4c48e2697868a330b80fbac9ba0bd7e" name="openwsman-server-plugin-ruby" arch="x86_64">
  <version epoch="0" ver="2.6.7" rel="150000.3.12.2"/>
  <changelog author="kkaempf@suse.com" date="1444219200">- Update to 2.6.2
  - Features
  - Install winrs.rb (Windows Remote Shell) to /usr/bin
  - New package: winrs
  - Bugfixes
  - Make iniparser thread-safe (Emil Bartczak)
  - Fix excessive RPM rebuilds (Olaf Hering)
  - Fix selector extraction from URI query (Markus Kolb)
  - Fix RPM building on older distributions
  - Fix RPM building on Fedora 22</changelog>
  <changelog author="srinidhi.bs@microfocus.com" date="1449057600">- Install winrs with executable permissions</changelog>
  <changelog author="kkaempf@suse.com" date="1449144000">- make winrs executable
  add-shebang-to-winrs.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1466424000">- update to 2.6.3
  - Bugfixes
  - Prevent buffer overflow if digest realm too long
  - Ensure path starts with '/' in client data endpoint
  - Java bindings build fix
  - Fix SSL library, usage is not thread safe (vcrhonek)
  - Improve NetBSD and OSX builds (apjanke)
  - Install winrs with correct name and permissions</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- use strip-nondeterminism to make build more reproducible</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Package for python 3
- Add openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1510056000">- update to 2.6.4
  - Bugfixes
  - setup ECDHE to allow Perfect Forward Secrecy, using the p256
    NIST prime curve (CVE-2016-2183) (mmeissner)</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Replace obsolete pam modules with standard ones</changelog>
  <changelog author="kkaempf@suse.com" date="1511524800">- update to 2.6.5
  - Fix python3 / ruby 2.5 compatibility
  - drop openwsman-2.6.2-python3.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1512388800">- update to 2.6.6
  - openssl 1.1.0 compatibility
  - build python3 or python2 binding, but not both</changelog>
  <changelog author="kkaempf@suse.com" date="1512475200">- Build Python3 on Leap and SLE 15
- Fix RHEL7 build</changelog>
  <changelog author="kkaempf@suse.com" date="1512993600">- fix Source declarations to get a complete src.rpm</changelog>
  <changelog author="kkaempf@suse.com" date="1513166400">- python3-openwsman</changelog>
  <changelog author="kkaempf@suse.com" date="1519041600">- Update to 2.6.7
  - Features
  - Build with CMake 2.6 or later
  - Bugfixes
  - fix return value check for SSL_CTX_set_cipher_list()
  - fix pam config for local install</changelog>
  <changelog author="fcrozat@suse.com" date="1519300800">- Switch license to BSD-3-Clause AND GPL-2.0-only, since redirect
  plugin is under GPL 2.0 only license.</changelog>
  <changelog author="adam.majer@suse.de" date="1552564800">- bsc1122623.patch: (bsc#1122623, CVE-2019-3816, CVE-2019-3833)
  + treat all non-registered by provider paths as invalid
  + fix possible denial of service in path parsing
- debug_fix.patch: fix compilation in debug mode
  Backport patches from upstream,
- 31c355f.patch: Work with OpenSSL 1.1
- a4a66e8.patch: disable directory listings by default (bsc#1092206)</changelog>
  <changelog author="kkaempf@suse.com" date="1568721600">- bsc1105331.patch: add CIM_NAMESPACE if it's _not_ already present
  (bsc#1105331)</changelog>
  <changelog author="kkaempf@suse.com" date="1597752000">- adapt to openssl 1.1.1 (bsc#1174541)
  add update-to-openssl-1.1.1-drop-RANDFILE.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1598011200">- openssl_init_fix.patch: don't crash if OpenSSL SSL context fails
  to initialize. This only happened because the function signature
  used was invalid and was passing random data. (bsc#1175631)</changelog>
  <changelog author="adam.majer@suse.de" date="1649246400">- libcurl_fixups.patch: fix FTBFS with newer libcurl in SP4 (bsc#1197792)</changelog>
</package>
<package pkgid="757df1b3fc1f81fdf0eb638f66a97785a9e31854acf98bac4a04cacd22679911" name="oprofile" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="150100.8.3.1"/>
  <changelog author="tonyj@suse.com" date="1411128000">- Update to version 1.0.0. THIS IS A MAJOR OPROFILE RELEASE WITH SIGNIFICANT
  CHANGES FROM THE PREVIOUS 0.9.9 RELEASE.  See changelog below.
    Drop patch: oprofile-add-support-for-intel-silvermont-processor.patch
    Drop patch: oprofile-compressed-kernel.patch
    Drop patch: oprofile-configure-error-message-for-missing-libpfm-is-not-informative-enough.patch
    Drop patch: oprofile-enable-for-new-ppc64le-architecture.patch
    Drop patch: oprofile-fix-unable-to-open-cpu_type-file-for-reading-for-ibm-power7.patch
    Drop patch: oprofile-make-cpu-type-power8e-equivalent-to-power8.patch
  Changelog:
    Major changes:
  - The legacy opcontrol-based profiler has been removed. operf is now the
    only supported interface
  - GUI component (i.e., oprof_start) has been removed.
  - IBS events removed from AMD processors
  - Following architectures have been removed (Alpha [except for EV67 which
    is supported by operf/ocount], avr32, ia64,  IBM Cell,  P.A Semi PA64T)
  - RTV (real time clock) mode has been removed
    Other incompatibilities:
  - Sample data collected with previous releases of OProfile are incompatible
    with release 1.0.
  - ophelp schema: Major version changed for removal of unit mask 'extra'
    attribute and addition of unit mask 'name'.
    New features:
  - Enhance ocount to support millisecond time intervals
  - Obtain kernel symbols from /proc/kallsyms if no vmlinux file specified
  - New Processor Support (Freescale e6500, Freescale e500mc,
    Intel Silvermont, ARMv7 Krait, APM X-Gene (ARMv8),
    Intel Broadwell, ARMv8 Cortex A57, ARMv8 Cortex A53
  - Added little endian support for IBM POWER8
  - Update events for IBM POWER8
  - Added edge-detect events for IBM POWER7
  - Update events for Intel Haswell
  Bug Fixes:
  - opreport schema: Fix count field maxOccurs (changed to 'unbounded')
  - Fix compile error on ppc/uClibc platform: 'AT_BASE_PLATFORM' undeclared'
  - Duplicate event specs passed to ocount show up twice in output
  - Fix operf/ocount default unit mask selection
  - ocount: print the unit mask, kernel and user modes if specified for the
    event
  - ophelp schema is not included in installed files
  - Remove unused 'extra' attribute from ophelp schema
  - opreport from 'operf --callgraph' profile shows false recursive calls
  - Fix handling of default named unit masks longer than 11 chars
  - Print unit mask name where applicable in ophelp XML output
  - Fix profiling of multi-threaded apps when using "--pid" option
  - Fix operf/opreport kernel throttling detection
  - Fix sample attribution problem when using multiple events
  - exclude/include files option doesn't work for opannotate -a
  - Fix behavior and documentation for '--threshold' option
  - Remove hard-coded timeout for JIT dump conversion
  - Update Alpha EV67 CPU support and remove all other Alpha CPU support
  - operf main process improperly killing conversion process
  - Fix up S390 support to work with operf/ocount
  - Link ocount with librt for clock_gettime only when needed
  - Fix 'Invalid argument' running 'opcontrol --start --callgraph=&lt;n&gt;' in
    Timer mode
  - Allow root to remove old jitdump files from /tmp/.oprofile/jitdump
  - Remove opreport warnings for /no-vmlinux, [vdso], [hypervisor_bucket]
    not found
  - Fix event codes for marked architected events (IBM ppc64)
  - Make operf/ocount detect invalid timer mode from opcontrol
  - Reduce overhead of operf waiting for profiled app to end
  - Fix "Unable to open cpu_type file for reading" for IBM POWER7+
  - Allow all native events for IBM POWER8 in POWER7 compat mode
  - Fix spurious "backtraces skipped due to no file mapping" log entries
  - Fix the units for the reported CPU frequency</changelog>
  <changelog author="mpluskal@suse.com" date="1451044800">- Update to 1.1.0
  * New/updated Processor Support
    + Broadcom Brahmma-B15 CPU
    + Intel Skylake
    + Intel Airmont
    + Intel Xeon D
  * Bug fixes
    + Prevent dropping of samples when the JVM changes memory
    mappings
    + Better handling of IBM Power JVM generated zero-sized
    mappings
    + Correct handling of anon_hugepage mmap entries for Java
    + Improved oparchive documentation and man page
    + Fixed compile error when using compile fortification
    + Support IBM Power 8 event code larger than sizeof int
    + Avoid changing POSIXLY_CORRECT environment variable for
    processes monitored by operf and ocount
    + Ensure correct setting of the extra bits (edge, inv, cmask)
    for Intel processors
    + Fix default unit masks for Intel Haswell and Broadwell
    processors
    + Correctly initialize operf temporary file header information
- Cleanup spec file with spec-cleaner
- Use url for source
- Drop desktop file since binary it is calling is no longer
  present (at least since version 1.0.0)
- Update dependencies</changelog>
  <changelog author="i@marguerite.su" date="1467460800">- add patch: oprofile-1.1.0-gcc6.patch, fixed boo#985359
  * cherry picked upstream commit 39d4d4, so please
    remember to drop it next release
  * GCC 6 is pickier about some of the type conversions
    avoid the intermediate bool type to make it happy</changelog>
  <changelog author="sfalken@opensuse.org" date="1489233600">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Depend on java-devel instead of deprecated provide</changelog>
  <changelog author="tonyj@suse.com" date="1502107200">- Update to version 1.2.0
  - New/updated Processor Support
  * ARM Cortex A17
  * IBM Power 9
  * IBM Power 8NV and NVL variants
  * IBM z13
  * Intel Goldmont
  * Intel Kabylake
  * Intel Xeon Phi (Knights Landing)
  * Achitecture specific events for Applied Micro X-Gene
  - Bug fixes
  * #286 - Compilation error: left shift of negative value
  * #288 - oprofile fails to build with --enable-pch and gcc-6.2
  - Other fixes
  * Fixed compile warning and errors when using GCC 6 or GCC 7
  * Avoid using deprecated readdir_r function
  * Store samples in the archive and search the appropriate places
    for samples
  * Only start the application if the perf events setup was successful
  * Corrections in the code and i386 events so "make check" tests pass
- Drop local patch oprofile-1.1.0-gcc6.patch (upstream)</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- Remove qt-devel from BuildRequires, it is no needed anymore.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Rectify RPM groups. Update summary of -devel subpackage.
  Do not ignore errors from useradd/groupadd.
  Avoid running fdupes across partitions.</changelog>
  <changelog author="tonyj@suse.com" date="1540814400">- Update to version 1.3.0 (FATE#326121)
  - New/updated processor support
  * Intel Goldmont Plus
  - Bug fixes
  * #289 No manpage for opjitconv binary
  * Avoid operf crashing on samples from exiting processes when running
    on linux 4.14 and newer kernels.
  * Fix compile warning and errors when using GCC 8
- Add patch: oprofile-handle-empty-event-name-spec-gracefully-for-ppc.patch</changelog>
  <changelog author="tonyj@suse.com" date="1650888000">- Resolve build issues due to binutils 2.34 api changes (bsc#1197793)
  New patch: oprofile-macro-wrappers-to-handle-the-binutils-2.34-api-changes.patch
  New patch: oprofile-include-op_bfd_wrappers.h-in-the-distribution.patch</changelog>
</package>
<package pkgid="1aabf0ffd421dfad2ffda3293f08361558cb4b662b9c535b522dcf7d37030fa1" name="oprofile" arch="ppc64le">
  <version epoch="0" ver="1.3.0" rel="150100.8.3.1"/>
  <changelog author="tonyj@suse.com" date="1411128000">- Update to version 1.0.0. THIS IS A MAJOR OPROFILE RELEASE WITH SIGNIFICANT
  CHANGES FROM THE PREVIOUS 0.9.9 RELEASE.  See changelog below.
    Drop patch: oprofile-add-support-for-intel-silvermont-processor.patch
    Drop patch: oprofile-compressed-kernel.patch
    Drop patch: oprofile-configure-error-message-for-missing-libpfm-is-not-informative-enough.patch
    Drop patch: oprofile-enable-for-new-ppc64le-architecture.patch
    Drop patch: oprofile-fix-unable-to-open-cpu_type-file-for-reading-for-ibm-power7.patch
    Drop patch: oprofile-make-cpu-type-power8e-equivalent-to-power8.patch
  Changelog:
    Major changes:
  - The legacy opcontrol-based profiler has been removed. operf is now the
    only supported interface
  - GUI component (i.e., oprof_start) has been removed.
  - IBS events removed from AMD processors
  - Following architectures have been removed (Alpha [except for EV67 which
    is supported by operf/ocount], avr32, ia64,  IBM Cell,  P.A Semi PA64T)
  - RTV (real time clock) mode has been removed
    Other incompatibilities:
  - Sample data collected with previous releases of OProfile are incompatible
    with release 1.0.
  - ophelp schema: Major version changed for removal of unit mask 'extra'
    attribute and addition of unit mask 'name'.
    New features:
  - Enhance ocount to support millisecond time intervals
  - Obtain kernel symbols from /proc/kallsyms if no vmlinux file specified
  - New Processor Support (Freescale e6500, Freescale e500mc,
    Intel Silvermont, ARMv7 Krait, APM X-Gene (ARMv8),
    Intel Broadwell, ARMv8 Cortex A57, ARMv8 Cortex A53
  - Added little endian support for IBM POWER8
  - Update events for IBM POWER8
  - Added edge-detect events for IBM POWER7
  - Update events for Intel Haswell
  Bug Fixes:
  - opreport schema: Fix count field maxOccurs (changed to 'unbounded')
  - Fix compile error on ppc/uClibc platform: 'AT_BASE_PLATFORM' undeclared'
  - Duplicate event specs passed to ocount show up twice in output
  - Fix operf/ocount default unit mask selection
  - ocount: print the unit mask, kernel and user modes if specified for the
    event
  - ophelp schema is not included in installed files
  - Remove unused 'extra' attribute from ophelp schema
  - opreport from 'operf --callgraph' profile shows false recursive calls
  - Fix handling of default named unit masks longer than 11 chars
  - Print unit mask name where applicable in ophelp XML output
  - Fix profiling of multi-threaded apps when using "--pid" option
  - Fix operf/opreport kernel throttling detection
  - Fix sample attribution problem when using multiple events
  - exclude/include files option doesn't work for opannotate -a
  - Fix behavior and documentation for '--threshold' option
  - Remove hard-coded timeout for JIT dump conversion
  - Update Alpha EV67 CPU support and remove all other Alpha CPU support
  - operf main process improperly killing conversion process
  - Fix up S390 support to work with operf/ocount
  - Link ocount with librt for clock_gettime only when needed
  - Fix 'Invalid argument' running 'opcontrol --start --callgraph=&lt;n&gt;' in
    Timer mode
  - Allow root to remove old jitdump files from /tmp/.oprofile/jitdump
  - Remove opreport warnings for /no-vmlinux, [vdso], [hypervisor_bucket]
    not found
  - Fix event codes for marked architected events (IBM ppc64)
  - Make operf/ocount detect invalid timer mode from opcontrol
  - Reduce overhead of operf waiting for profiled app to end
  - Fix "Unable to open cpu_type file for reading" for IBM POWER7+
  - Allow all native events for IBM POWER8 in POWER7 compat mode
  - Fix spurious "backtraces skipped due to no file mapping" log entries
  - Fix the units for the reported CPU frequency</changelog>
  <changelog author="mpluskal@suse.com" date="1451044800">- Update to 1.1.0
  * New/updated Processor Support
    + Broadcom Brahmma-B15 CPU
    + Intel Skylake
    + Intel Airmont
    + Intel Xeon D
  * Bug fixes
    + Prevent dropping of samples when the JVM changes memory
    mappings
    + Better handling of IBM Power JVM generated zero-sized
    mappings
    + Correct handling of anon_hugepage mmap entries for Java
    + Improved oparchive documentation and man page
    + Fixed compile error when using compile fortification
    + Support IBM Power 8 event code larger than sizeof int
    + Avoid changing POSIXLY_CORRECT environment variable for
    processes monitored by operf and ocount
    + Ensure correct setting of the extra bits (edge, inv, cmask)
    for Intel processors
    + Fix default unit masks for Intel Haswell and Broadwell
    processors
    + Correctly initialize operf temporary file header information
- Cleanup spec file with spec-cleaner
- Use url for source
- Drop desktop file since binary it is calling is no longer
  present (at least since version 1.0.0)
- Update dependencies</changelog>
  <changelog author="i@marguerite.su" date="1467460800">- add patch: oprofile-1.1.0-gcc6.patch, fixed boo#985359
  * cherry picked upstream commit 39d4d4, so please
    remember to drop it next release
  * GCC 6 is pickier about some of the type conversions
    avoid the intermediate bool type to make it happy</changelog>
  <changelog author="sfalken@opensuse.org" date="1489233600">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Depend on java-devel instead of deprecated provide</changelog>
  <changelog author="tonyj@suse.com" date="1502107200">- Update to version 1.2.0
  - New/updated Processor Support
  * ARM Cortex A17
  * IBM Power 9
  * IBM Power 8NV and NVL variants
  * IBM z13
  * Intel Goldmont
  * Intel Kabylake
  * Intel Xeon Phi (Knights Landing)
  * Achitecture specific events for Applied Micro X-Gene
  - Bug fixes
  * #286 - Compilation error: left shift of negative value
  * #288 - oprofile fails to build with --enable-pch and gcc-6.2
  - Other fixes
  * Fixed compile warning and errors when using GCC 6 or GCC 7
  * Avoid using deprecated readdir_r function
  * Store samples in the archive and search the appropriate places
    for samples
  * Only start the application if the perf events setup was successful
  * Corrections in the code and i386 events so "make check" tests pass
- Drop local patch oprofile-1.1.0-gcc6.patch (upstream)</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- Remove qt-devel from BuildRequires, it is no needed anymore.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Rectify RPM groups. Update summary of -devel subpackage.
  Do not ignore errors from useradd/groupadd.
  Avoid running fdupes across partitions.</changelog>
  <changelog author="tonyj@suse.com" date="1540814400">- Update to version 1.3.0 (FATE#326121)
  - New/updated processor support
  * Intel Goldmont Plus
  - Bug fixes
  * #289 No manpage for opjitconv binary
  * Avoid operf crashing on samples from exiting processes when running
    on linux 4.14 and newer kernels.
  * Fix compile warning and errors when using GCC 8
- Add patch: oprofile-handle-empty-event-name-spec-gracefully-for-ppc.patch</changelog>
  <changelog author="tonyj@suse.com" date="1650888000">- Resolve build issues due to binutils 2.34 api changes (bsc#1197793)
  New patch: oprofile-macro-wrappers-to-handle-the-binutils-2.34-api-changes.patch
  New patch: oprofile-include-op_bfd_wrappers.h-in-the-distribution.patch</changelog>
</package>
<package pkgid="8d248a9fbaef4a2b47361f0a33e6e30992dd10b73e188c2e3b11397000a0d958" name="oprofile" arch="s390x">
  <version epoch="0" ver="1.3.0" rel="150100.8.3.1"/>
  <changelog author="tonyj@suse.com" date="1411128000">- Update to version 1.0.0. THIS IS A MAJOR OPROFILE RELEASE WITH SIGNIFICANT
  CHANGES FROM THE PREVIOUS 0.9.9 RELEASE.  See changelog below.
    Drop patch: oprofile-add-support-for-intel-silvermont-processor.patch
    Drop patch: oprofile-compressed-kernel.patch
    Drop patch: oprofile-configure-error-message-for-missing-libpfm-is-not-informative-enough.patch
    Drop patch: oprofile-enable-for-new-ppc64le-architecture.patch
    Drop patch: oprofile-fix-unable-to-open-cpu_type-file-for-reading-for-ibm-power7.patch
    Drop patch: oprofile-make-cpu-type-power8e-equivalent-to-power8.patch
  Changelog:
    Major changes:
  - The legacy opcontrol-based profiler has been removed. operf is now the
    only supported interface
  - GUI component (i.e., oprof_start) has been removed.
  - IBS events removed from AMD processors
  - Following architectures have been removed (Alpha [except for EV67 which
    is supported by operf/ocount], avr32, ia64,  IBM Cell,  P.A Semi PA64T)
  - RTV (real time clock) mode has been removed
    Other incompatibilities:
  - Sample data collected with previous releases of OProfile are incompatible
    with release 1.0.
  - ophelp schema: Major version changed for removal of unit mask 'extra'
    attribute and addition of unit mask 'name'.
    New features:
  - Enhance ocount to support millisecond time intervals
  - Obtain kernel symbols from /proc/kallsyms if no vmlinux file specified
  - New Processor Support (Freescale e6500, Freescale e500mc,
    Intel Silvermont, ARMv7 Krait, APM X-Gene (ARMv8),
    Intel Broadwell, ARMv8 Cortex A57, ARMv8 Cortex A53
  - Added little endian support for IBM POWER8
  - Update events for IBM POWER8
  - Added edge-detect events for IBM POWER7
  - Update events for Intel Haswell
  Bug Fixes:
  - opreport schema: Fix count field maxOccurs (changed to 'unbounded')
  - Fix compile error on ppc/uClibc platform: 'AT_BASE_PLATFORM' undeclared'
  - Duplicate event specs passed to ocount show up twice in output
  - Fix operf/ocount default unit mask selection
  - ocount: print the unit mask, kernel and user modes if specified for the
    event
  - ophelp schema is not included in installed files
  - Remove unused 'extra' attribute from ophelp schema
  - opreport from 'operf --callgraph' profile shows false recursive calls
  - Fix handling of default named unit masks longer than 11 chars
  - Print unit mask name where applicable in ophelp XML output
  - Fix profiling of multi-threaded apps when using "--pid" option
  - Fix operf/opreport kernel throttling detection
  - Fix sample attribution problem when using multiple events
  - exclude/include files option doesn't work for opannotate -a
  - Fix behavior and documentation for '--threshold' option
  - Remove hard-coded timeout for JIT dump conversion
  - Update Alpha EV67 CPU support and remove all other Alpha CPU support
  - operf main process improperly killing conversion process
  - Fix up S390 support to work with operf/ocount
  - Link ocount with librt for clock_gettime only when needed
  - Fix 'Invalid argument' running 'opcontrol --start --callgraph=&lt;n&gt;' in
    Timer mode
  - Allow root to remove old jitdump files from /tmp/.oprofile/jitdump
  - Remove opreport warnings for /no-vmlinux, [vdso], [hypervisor_bucket]
    not found
  - Fix event codes for marked architected events (IBM ppc64)
  - Make operf/ocount detect invalid timer mode from opcontrol
  - Reduce overhead of operf waiting for profiled app to end
  - Fix "Unable to open cpu_type file for reading" for IBM POWER7+
  - Allow all native events for IBM POWER8 in POWER7 compat mode
  - Fix spurious "backtraces skipped due to no file mapping" log entries
  - Fix the units for the reported CPU frequency</changelog>
  <changelog author="mpluskal@suse.com" date="1451044800">- Update to 1.1.0
  * New/updated Processor Support
    + Broadcom Brahmma-B15 CPU
    + Intel Skylake
    + Intel Airmont
    + Intel Xeon D
  * Bug fixes
    + Prevent dropping of samples when the JVM changes memory
    mappings
    + Better handling of IBM Power JVM generated zero-sized
    mappings
    + Correct handling of anon_hugepage mmap entries for Java
    + Improved oparchive documentation and man page
    + Fixed compile error when using compile fortification
    + Support IBM Power 8 event code larger than sizeof int
    + Avoid changing POSIXLY_CORRECT environment variable for
    processes monitored by operf and ocount
    + Ensure correct setting of the extra bits (edge, inv, cmask)
    for Intel processors
    + Fix default unit masks for Intel Haswell and Broadwell
    processors
    + Correctly initialize operf temporary file header information
- Cleanup spec file with spec-cleaner
- Use url for source
- Drop desktop file since binary it is calling is no longer
  present (at least since version 1.0.0)
- Update dependencies</changelog>
  <changelog author="i@marguerite.su" date="1467460800">- add patch: oprofile-1.1.0-gcc6.patch, fixed boo#985359
  * cherry picked upstream commit 39d4d4, so please
    remember to drop it next release
  * GCC 6 is pickier about some of the type conversions
    avoid the intermediate bool type to make it happy</changelog>
  <changelog author="sfalken@opensuse.org" date="1489233600">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Depend on java-devel instead of deprecated provide</changelog>
  <changelog author="tonyj@suse.com" date="1502107200">- Update to version 1.2.0
  - New/updated Processor Support
  * ARM Cortex A17
  * IBM Power 9
  * IBM Power 8NV and NVL variants
  * IBM z13
  * Intel Goldmont
  * Intel Kabylake
  * Intel Xeon Phi (Knights Landing)
  * Achitecture specific events for Applied Micro X-Gene
  - Bug fixes
  * #286 - Compilation error: left shift of negative value
  * #288 - oprofile fails to build with --enable-pch and gcc-6.2
  - Other fixes
  * Fixed compile warning and errors when using GCC 6 or GCC 7
  * Avoid using deprecated readdir_r function
  * Store samples in the archive and search the appropriate places
    for samples
  * Only start the application if the perf events setup was successful
  * Corrections in the code and i386 events so "make check" tests pass
- Drop local patch oprofile-1.1.0-gcc6.patch (upstream)</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- Remove qt-devel from BuildRequires, it is no needed anymore.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Rectify RPM groups. Update summary of -devel subpackage.
  Do not ignore errors from useradd/groupadd.
  Avoid running fdupes across partitions.</changelog>
  <changelog author="tonyj@suse.com" date="1540814400">- Update to version 1.3.0 (FATE#326121)
  - New/updated processor support
  * Intel Goldmont Plus
  - Bug fixes
  * #289 No manpage for opjitconv binary
  * Avoid operf crashing on samples from exiting processes when running
    on linux 4.14 and newer kernels.
  * Fix compile warning and errors when using GCC 8
- Add patch: oprofile-handle-empty-event-name-spec-gracefully-for-ppc.patch</changelog>
  <changelog author="tonyj@suse.com" date="1650888000">- Resolve build issues due to binutils 2.34 api changes (bsc#1197793)
  New patch: oprofile-macro-wrappers-to-handle-the-binutils-2.34-api-changes.patch
  New patch: oprofile-include-op_bfd_wrappers.h-in-the-distribution.patch</changelog>
</package>
<package pkgid="8340afd9cd2879f43536b42a6cbefc65782924b18f1819c52b028d8353837728" name="oprofile" arch="src">
  <version epoch="0" ver="1.3.0" rel="150100.8.3.1"/>
  <changelog author="tonyj@novell.com" date="1303992000">- Add README-BEFORE-ADDING-PATCHES local file documenting required patch
  header</changelog>
  <changelog author="tonyj@novell.com" date="1303992001">- Add support for building using qt4 (no bnc)</changelog>
  <changelog author="idoenmez@novell.com" date="1304424000">- Add oprofile-0.9.6-gcc46.patch to fix compilation with gcc 4.6</changelog>
  <changelog author="tonyj@suse.com" date="1316865600">- Upgrade to version 0.9.7.
- Drop unneeded patches.
- Remove non-utf8 characters from changelog</changelog>
  <changelog author="coolo@suse.com" date="1322222400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="tonyj@suse.com" date="1355140800">- Update to version 0.9.8.
- Support for pre-2.6 kernels has been removed
- The sample data format has changed (see bug #3309794 below for details)
- A new 'operf' program is now available that allows non-root users to profile
  single processes. 'operf' can also be used for system-wide profiling, but
  root authority is required.  This capability requires a kernel version of
  2.6.31 or greater.
- New Processors Support:
  Tilera (tile64 tilepro tile-gx)
  IBM (System z10 z196)
  Intel Ivy Bridge
  ARMv7 (Cortex-A5 Cortex-A15 Cortex-A7)
- Numerous bugfixes</changelog>
  <changelog author="tonyj@suse.com" date="1357214400">- Add dependancy on libpfm 4.3 for powerpc.
- Add patch 'oprofile-pfm-ppc.patch' (fix configure for 32bit powerpc)</changelog>
  <changelog author="tonyj@suse.com" date="1375876800">- Update to version 0.9.9
  http://oprofile.sourceforge.net/release-notes/oprofile-0.9.9
- New 'ocount' program introduced for collecting raw event counts without
  post processing.
- New processor support for Haswell, zEC12, Power8
- New support for AMD Generic Performance Events and IBM Power ISA 2.07 Architected Events
- Numerous bug fixes.</changelog>
  <changelog author="tonyj@suse.com" date="1394107200">- Support ppc64le/power8e (bnc#867091)
  added patches:
  * oprofile-configure-error-message-for-missing-libpfm-is-not-informative-enough.patch
  * oprofile-enable-for-new-ppc64le-architecture.patch
  * oprofile-fix-unable-to-open-cpu_type-file-for-reading-for-ibm-power7.patch
  * oprofile-make-cpu-type-power8e-equivalent-to-power8.patch
  modified patches:
  * oprofile-pfm-ppc.patch</changelog>
  <changelog author="tonyj@suse.com" date="1408017600">- Add support for Intel Silvermont processor (bnc#891892)
  New patch: oprofile-add-support-for-intel-silvermont-processor.patch</changelog>
  <changelog author="tonyj@suse.com" date="1411128000">- Update to version 1.0.0. THIS IS A MAJOR OPROFILE RELEASE WITH SIGNIFICANT
  CHANGES FROM THE PREVIOUS 0.9.9 RELEASE.  See changelog below.
    Drop patch: oprofile-add-support-for-intel-silvermont-processor.patch
    Drop patch: oprofile-compressed-kernel.patch
    Drop patch: oprofile-configure-error-message-for-missing-libpfm-is-not-informative-enough.patch
    Drop patch: oprofile-enable-for-new-ppc64le-architecture.patch
    Drop patch: oprofile-fix-unable-to-open-cpu_type-file-for-reading-for-ibm-power7.patch
    Drop patch: oprofile-make-cpu-type-power8e-equivalent-to-power8.patch
  Changelog:
    Major changes:
  - The legacy opcontrol-based profiler has been removed. operf is now the
    only supported interface
  - GUI component (i.e., oprof_start) has been removed.
  - IBS events removed from AMD processors
  - Following architectures have been removed (Alpha [except for EV67 which
    is supported by operf/ocount], avr32, ia64,  IBM Cell,  P.A Semi PA64T)
  - RTV (real time clock) mode has been removed
    Other incompatibilities:
  - Sample data collected with previous releases of OProfile are incompatible
    with release 1.0.
  - ophelp schema: Major version changed for removal of unit mask 'extra'
    attribute and addition of unit mask 'name'.
    New features:
  - Enhance ocount to support millisecond time intervals
  - Obtain kernel symbols from /proc/kallsyms if no vmlinux file specified
  - New Processor Support (Freescale e6500, Freescale e500mc,
    Intel Silvermont, ARMv7 Krait, APM X-Gene (ARMv8),
    Intel Broadwell, ARMv8 Cortex A57, ARMv8 Cortex A53
  - Added little endian support for IBM POWER8
  - Update events for IBM POWER8
  - Added edge-detect events for IBM POWER7
  - Update events for Intel Haswell
  Bug Fixes:
  - opreport schema: Fix count field maxOccurs (changed to 'unbounded')
  - Fix compile error on ppc/uClibc platform: 'AT_BASE_PLATFORM' undeclared'
  - Duplicate event specs passed to ocount show up twice in output
  - Fix operf/ocount default unit mask selection
  - ocount: print the unit mask, kernel and user modes if specified for the
    event
  - ophelp schema is not included in installed files
  - Remove unused 'extra' attribute from ophelp schema
  - opreport from 'operf --callgraph' profile shows false recursive calls
  - Fix handling of default named unit masks longer than 11 chars
  - Print unit mask name where applicable in ophelp XML output
  - Fix profiling of multi-threaded apps when using "--pid" option
  - Fix operf/opreport kernel throttling detection
  - Fix sample attribution problem when using multiple events
  - exclude/include files option doesn't work for opannotate -a
  - Fix behavior and documentation for '--threshold' option
  - Remove hard-coded timeout for JIT dump conversion
  - Update Alpha EV67 CPU support and remove all other Alpha CPU support
  - operf main process improperly killing conversion process
  - Fix up S390 support to work with operf/ocount
  - Link ocount with librt for clock_gettime only when needed
  - Fix 'Invalid argument' running 'opcontrol --start --callgraph=&lt;n&gt;' in
    Timer mode
  - Allow root to remove old jitdump files from /tmp/.oprofile/jitdump
  - Remove opreport warnings for /no-vmlinux, [vdso], [hypervisor_bucket]
    not found
  - Fix event codes for marked architected events (IBM ppc64)
  - Make operf/ocount detect invalid timer mode from opcontrol
  - Reduce overhead of operf waiting for profiled app to end
  - Fix "Unable to open cpu_type file for reading" for IBM POWER7+
  - Allow all native events for IBM POWER8 in POWER7 compat mode
  - Fix spurious "backtraces skipped due to no file mapping" log entries
  - Fix the units for the reported CPU frequency</changelog>
  <changelog author="mpluskal@suse.com" date="1451044800">- Update to 1.1.0
  * New/updated Processor Support
    + Broadcom Brahmma-B15 CPU
    + Intel Skylake
    + Intel Airmont
    + Intel Xeon D
  * Bug fixes
    + Prevent dropping of samples when the JVM changes memory
    mappings
    + Better handling of IBM Power JVM generated zero-sized
    mappings
    + Correct handling of anon_hugepage mmap entries for Java
    + Improved oparchive documentation and man page
    + Fixed compile error when using compile fortification
    + Support IBM Power 8 event code larger than sizeof int
    + Avoid changing POSIXLY_CORRECT environment variable for
    processes monitored by operf and ocount
    + Ensure correct setting of the extra bits (edge, inv, cmask)
    for Intel processors
    + Fix default unit masks for Intel Haswell and Broadwell
    processors
    + Correctly initialize operf temporary file header information
- Cleanup spec file with spec-cleaner
- Use url for source
- Drop desktop file since binary it is calling is no longer
  present (at least since version 1.0.0)
- Update dependencies</changelog>
  <changelog author="i@marguerite.su" date="1467460800">- add patch: oprofile-1.1.0-gcc6.patch, fixed boo#985359
  * cherry picked upstream commit 39d4d4, so please
    remember to drop it next release
  * GCC 6 is pickier about some of the type conversions
    avoid the intermediate bool type to make it happy</changelog>
  <changelog author="sfalken@opensuse.org" date="1489233600">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Depend on java-devel instead of deprecated provide</changelog>
  <changelog author="tonyj@suse.com" date="1502107200">- Update to version 1.2.0
  - New/updated Processor Support
  * ARM Cortex A17
  * IBM Power 9
  * IBM Power 8NV and NVL variants
  * IBM z13
  * Intel Goldmont
  * Intel Kabylake
  * Intel Xeon Phi (Knights Landing)
  * Achitecture specific events for Applied Micro X-Gene
  - Bug fixes
  * #286 - Compilation error: left shift of negative value
  * #288 - oprofile fails to build with --enable-pch and gcc-6.2
  - Other fixes
  * Fixed compile warning and errors when using GCC 6 or GCC 7
  * Avoid using deprecated readdir_r function
  * Store samples in the archive and search the appropriate places
    for samples
  * Only start the application if the perf events setup was successful
  * Corrections in the code and i386 events so "make check" tests pass
- Drop local patch oprofile-1.1.0-gcc6.patch (upstream)</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- Remove qt-devel from BuildRequires, it is no needed anymore.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Rectify RPM groups. Update summary of -devel subpackage.
  Do not ignore errors from useradd/groupadd.
  Avoid running fdupes across partitions.</changelog>
  <changelog author="tonyj@suse.com" date="1540814400">- Update to version 1.3.0 (FATE#326121)
  - New/updated processor support
  * Intel Goldmont Plus
  - Bug fixes
  * #289 No manpage for opjitconv binary
  * Avoid operf crashing on samples from exiting processes when running
    on linux 4.14 and newer kernels.
  * Fix compile warning and errors when using GCC 8
- Add patch: oprofile-handle-empty-event-name-spec-gracefully-for-ppc.patch</changelog>
  <changelog author="tonyj@suse.com" date="1650888000">- Resolve build issues due to binutils 2.34 api changes (bsc#1197793)
  New patch: oprofile-macro-wrappers-to-handle-the-binutils-2.34-api-changes.patch
  New patch: oprofile-include-op_bfd_wrappers.h-in-the-distribution.patch</changelog>
</package>
<package pkgid="df6b60b3c1e1a29d7a63777dd0899890c2a5ee7b724b4b492b923397a9592b36" name="oprofile" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="150100.8.3.1"/>
  <changelog author="tonyj@suse.com" date="1411128000">- Update to version 1.0.0. THIS IS A MAJOR OPROFILE RELEASE WITH SIGNIFICANT
  CHANGES FROM THE PREVIOUS 0.9.9 RELEASE.  See changelog below.
    Drop patch: oprofile-add-support-for-intel-silvermont-processor.patch
    Drop patch: oprofile-compressed-kernel.patch
    Drop patch: oprofile-configure-error-message-for-missing-libpfm-is-not-informative-enough.patch
    Drop patch: oprofile-enable-for-new-ppc64le-architecture.patch
    Drop patch: oprofile-fix-unable-to-open-cpu_type-file-for-reading-for-ibm-power7.patch
    Drop patch: oprofile-make-cpu-type-power8e-equivalent-to-power8.patch
  Changelog:
    Major changes:
  - The legacy opcontrol-based profiler has been removed. operf is now the
    only supported interface
  - GUI component (i.e., oprof_start) has been removed.
  - IBS events removed from AMD processors
  - Following architectures have been removed (Alpha [except for EV67 which
    is supported by operf/ocount], avr32, ia64,  IBM Cell,  P.A Semi PA64T)
  - RTV (real time clock) mode has been removed
    Other incompatibilities:
  - Sample data collected with previous releases of OProfile are incompatible
    with release 1.0.
  - ophelp schema: Major version changed for removal of unit mask 'extra'
    attribute and addition of unit mask 'name'.
    New features:
  - Enhance ocount to support millisecond time intervals
  - Obtain kernel symbols from /proc/kallsyms if no vmlinux file specified
  - New Processor Support (Freescale e6500, Freescale e500mc,
    Intel Silvermont, ARMv7 Krait, APM X-Gene (ARMv8),
    Intel Broadwell, ARMv8 Cortex A57, ARMv8 Cortex A53
  - Added little endian support for IBM POWER8
  - Update events for IBM POWER8
  - Added edge-detect events for IBM POWER7
  - Update events for Intel Haswell
  Bug Fixes:
  - opreport schema: Fix count field maxOccurs (changed to 'unbounded')
  - Fix compile error on ppc/uClibc platform: 'AT_BASE_PLATFORM' undeclared'
  - Duplicate event specs passed to ocount show up twice in output
  - Fix operf/ocount default unit mask selection
  - ocount: print the unit mask, kernel and user modes if specified for the
    event
  - ophelp schema is not included in installed files
  - Remove unused 'extra' attribute from ophelp schema
  - opreport from 'operf --callgraph' profile shows false recursive calls
  - Fix handling of default named unit masks longer than 11 chars
  - Print unit mask name where applicable in ophelp XML output
  - Fix profiling of multi-threaded apps when using "--pid" option
  - Fix operf/opreport kernel throttling detection
  - Fix sample attribution problem when using multiple events
  - exclude/include files option doesn't work for opannotate -a
  - Fix behavior and documentation for '--threshold' option
  - Remove hard-coded timeout for JIT dump conversion
  - Update Alpha EV67 CPU support and remove all other Alpha CPU support
  - operf main process improperly killing conversion process
  - Fix up S390 support to work with operf/ocount
  - Link ocount with librt for clock_gettime only when needed
  - Fix 'Invalid argument' running 'opcontrol --start --callgraph=&lt;n&gt;' in
    Timer mode
  - Allow root to remove old jitdump files from /tmp/.oprofile/jitdump
  - Remove opreport warnings for /no-vmlinux, [vdso], [hypervisor_bucket]
    not found
  - Fix event codes for marked architected events (IBM ppc64)
  - Make operf/ocount detect invalid timer mode from opcontrol
  - Reduce overhead of operf waiting for profiled app to end
  - Fix "Unable to open cpu_type file for reading" for IBM POWER7+
  - Allow all native events for IBM POWER8 in POWER7 compat mode
  - Fix spurious "backtraces skipped due to no file mapping" log entries
  - Fix the units for the reported CPU frequency</changelog>
  <changelog author="mpluskal@suse.com" date="1451044800">- Update to 1.1.0
  * New/updated Processor Support
    + Broadcom Brahmma-B15 CPU
    + Intel Skylake
    + Intel Airmont
    + Intel Xeon D
  * Bug fixes
    + Prevent dropping of samples when the JVM changes memory
    mappings
    + Better handling of IBM Power JVM generated zero-sized
    mappings
    + Correct handling of anon_hugepage mmap entries for Java
    + Improved oparchive documentation and man page
    + Fixed compile error when using compile fortification
    + Support IBM Power 8 event code larger than sizeof int
    + Avoid changing POSIXLY_CORRECT environment variable for
    processes monitored by operf and ocount
    + Ensure correct setting of the extra bits (edge, inv, cmask)
    for Intel processors
    + Fix default unit masks for Intel Haswell and Broadwell
    processors
    + Correctly initialize operf temporary file header information
- Cleanup spec file with spec-cleaner
- Use url for source
- Drop desktop file since binary it is calling is no longer
  present (at least since version 1.0.0)
- Update dependencies</changelog>
  <changelog author="i@marguerite.su" date="1467460800">- add patch: oprofile-1.1.0-gcc6.patch, fixed boo#985359
  * cherry picked upstream commit 39d4d4, so please
    remember to drop it next release
  * GCC 6 is pickier about some of the type conversions
    avoid the intermediate bool type to make it happy</changelog>
  <changelog author="sfalken@opensuse.org" date="1489233600">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Depend on java-devel instead of deprecated provide</changelog>
  <changelog author="tonyj@suse.com" date="1502107200">- Update to version 1.2.0
  - New/updated Processor Support
  * ARM Cortex A17
  * IBM Power 9
  * IBM Power 8NV and NVL variants
  * IBM z13
  * Intel Goldmont
  * Intel Kabylake
  * Intel Xeon Phi (Knights Landing)
  * Achitecture specific events for Applied Micro X-Gene
  - Bug fixes
  * #286 - Compilation error: left shift of negative value
  * #288 - oprofile fails to build with --enable-pch and gcc-6.2
  - Other fixes
  * Fixed compile warning and errors when using GCC 6 or GCC 7
  * Avoid using deprecated readdir_r function
  * Store samples in the archive and search the appropriate places
    for samples
  * Only start the application if the perf events setup was successful
  * Corrections in the code and i386 events so "make check" tests pass
- Drop local patch oprofile-1.1.0-gcc6.patch (upstream)</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- Remove qt-devel from BuildRequires, it is no needed anymore.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Rectify RPM groups. Update summary of -devel subpackage.
  Do not ignore errors from useradd/groupadd.
  Avoid running fdupes across partitions.</changelog>
  <changelog author="tonyj@suse.com" date="1540814400">- Update to version 1.3.0 (FATE#326121)
  - New/updated processor support
  * Intel Goldmont Plus
  - Bug fixes
  * #289 No manpage for opjitconv binary
  * Avoid operf crashing on samples from exiting processes when running
    on linux 4.14 and newer kernels.
  * Fix compile warning and errors when using GCC 8
- Add patch: oprofile-handle-empty-event-name-spec-gracefully-for-ppc.patch</changelog>
  <changelog author="tonyj@suse.com" date="1650888000">- Resolve build issues due to binutils 2.34 api changes (bsc#1197793)
  New patch: oprofile-macro-wrappers-to-handle-the-binutils-2.34-api-changes.patch
  New patch: oprofile-include-op_bfd_wrappers.h-in-the-distribution.patch</changelog>
</package>
<package pkgid="abc25bda5060c8f99aef20566ffa9f9e0f498d35258a95102eaa99d590585f0d" name="oprofile-32bit" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="150100.8.3.1"/>
  <changelog author="tonyj@suse.com" date="1411128000">- Update to version 1.0.0. THIS IS A MAJOR OPROFILE RELEASE WITH SIGNIFICANT
  CHANGES FROM THE PREVIOUS 0.9.9 RELEASE.  See changelog below.
    Drop patch: oprofile-add-support-for-intel-silvermont-processor.patch
    Drop patch: oprofile-compressed-kernel.patch
    Drop patch: oprofile-configure-error-message-for-missing-libpfm-is-not-informative-enough.patch
    Drop patch: oprofile-enable-for-new-ppc64le-architecture.patch
    Drop patch: oprofile-fix-unable-to-open-cpu_type-file-for-reading-for-ibm-power7.patch
    Drop patch: oprofile-make-cpu-type-power8e-equivalent-to-power8.patch
  Changelog:
    Major changes:
  - The legacy opcontrol-based profiler has been removed. operf is now the
    only supported interface
  - GUI component (i.e., oprof_start) has been removed.
  - IBS events removed from AMD processors
  - Following architectures have been removed (Alpha [except for EV67 which
    is supported by operf/ocount], avr32, ia64,  IBM Cell,  P.A Semi PA64T)
  - RTV (real time clock) mode has been removed
    Other incompatibilities:
  - Sample data collected with previous releases of OProfile are incompatible
    with release 1.0.
  - ophelp schema: Major version changed for removal of unit mask 'extra'
    attribute and addition of unit mask 'name'.
    New features:
  - Enhance ocount to support millisecond time intervals
  - Obtain kernel symbols from /proc/kallsyms if no vmlinux file specified
  - New Processor Support (Freescale e6500, Freescale e500mc,
    Intel Silvermont, ARMv7 Krait, APM X-Gene (ARMv8),
    Intel Broadwell, ARMv8 Cortex A57, ARMv8 Cortex A53
  - Added little endian support for IBM POWER8
  - Update events for IBM POWER8
  - Added edge-detect events for IBM POWER7
  - Update events for Intel Haswell
  Bug Fixes:
  - opreport schema: Fix count field maxOccurs (changed to 'unbounded')
  - Fix compile error on ppc/uClibc platform: 'AT_BASE_PLATFORM' undeclared'
  - Duplicate event specs passed to ocount show up twice in output
  - Fix operf/ocount default unit mask selection
  - ocount: print the unit mask, kernel and user modes if specified for the
    event
  - ophelp schema is not included in installed files
  - Remove unused 'extra' attribute from ophelp schema
  - opreport from 'operf --callgraph' profile shows false recursive calls
  - Fix handling of default named unit masks longer than 11 chars
  - Print unit mask name where applicable in ophelp XML output
  - Fix profiling of multi-threaded apps when using "--pid" option
  - Fix operf/opreport kernel throttling detection
  - Fix sample attribution problem when using multiple events
  - exclude/include files option doesn't work for opannotate -a
  - Fix behavior and documentation for '--threshold' option
  - Remove hard-coded timeout for JIT dump conversion
  - Update Alpha EV67 CPU support and remove all other Alpha CPU support
  - operf main process improperly killing conversion process
  - Fix up S390 support to work with operf/ocount
  - Link ocount with librt for clock_gettime only when needed
  - Fix 'Invalid argument' running 'opcontrol --start --callgraph=&lt;n&gt;' in
    Timer mode
  - Allow root to remove old jitdump files from /tmp/.oprofile/jitdump
  - Remove opreport warnings for /no-vmlinux, [vdso], [hypervisor_bucket]
    not found
  - Fix event codes for marked architected events (IBM ppc64)
  - Make operf/ocount detect invalid timer mode from opcontrol
  - Reduce overhead of operf waiting for profiled app to end
  - Fix "Unable to open cpu_type file for reading" for IBM POWER7+
  - Allow all native events for IBM POWER8 in POWER7 compat mode
  - Fix spurious "backtraces skipped due to no file mapping" log entries
  - Fix the units for the reported CPU frequency</changelog>
  <changelog author="mpluskal@suse.com" date="1451044800">- Update to 1.1.0
  * New/updated Processor Support
    + Broadcom Brahmma-B15 CPU
    + Intel Skylake
    + Intel Airmont
    + Intel Xeon D
  * Bug fixes
    + Prevent dropping of samples when the JVM changes memory
    mappings
    + Better handling of IBM Power JVM generated zero-sized
    mappings
    + Correct handling of anon_hugepage mmap entries for Java
    + Improved oparchive documentation and man page
    + Fixed compile error when using compile fortification
    + Support IBM Power 8 event code larger than sizeof int
    + Avoid changing POSIXLY_CORRECT environment variable for
    processes monitored by operf and ocount
    + Ensure correct setting of the extra bits (edge, inv, cmask)
    for Intel processors
    + Fix default unit masks for Intel Haswell and Broadwell
    processors
    + Correctly initialize operf temporary file header information
- Cleanup spec file with spec-cleaner
- Use url for source
- Drop desktop file since binary it is calling is no longer
  present (at least since version 1.0.0)
- Update dependencies</changelog>
  <changelog author="i@marguerite.su" date="1467460800">- add patch: oprofile-1.1.0-gcc6.patch, fixed boo#985359
  * cherry picked upstream commit 39d4d4, so please
    remember to drop it next release
  * GCC 6 is pickier about some of the type conversions
    avoid the intermediate bool type to make it happy</changelog>
  <changelog author="sfalken@opensuse.org" date="1489233600">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Depend on java-devel instead of deprecated provide</changelog>
  <changelog author="tonyj@suse.com" date="1502107200">- Update to version 1.2.0
  - New/updated Processor Support
  * ARM Cortex A17
  * IBM Power 9
  * IBM Power 8NV and NVL variants
  * IBM z13
  * Intel Goldmont
  * Intel Kabylake
  * Intel Xeon Phi (Knights Landing)
  * Achitecture specific events for Applied Micro X-Gene
  - Bug fixes
  * #286 - Compilation error: left shift of negative value
  * #288 - oprofile fails to build with --enable-pch and gcc-6.2
  - Other fixes
  * Fixed compile warning and errors when using GCC 6 or GCC 7
  * Avoid using deprecated readdir_r function
  * Store samples in the archive and search the appropriate places
    for samples
  * Only start the application if the perf events setup was successful
  * Corrections in the code and i386 events so "make check" tests pass
- Drop local patch oprofile-1.1.0-gcc6.patch (upstream)</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- Remove qt-devel from BuildRequires, it is no needed anymore.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Rectify RPM groups. Update summary of -devel subpackage.
  Do not ignore errors from useradd/groupadd.
  Avoid running fdupes across partitions.</changelog>
  <changelog author="tonyj@suse.com" date="1540814400">- Update to version 1.3.0 (FATE#326121)
  - New/updated processor support
  * Intel Goldmont Plus
  - Bug fixes
  * #289 No manpage for opjitconv binary
  * Avoid operf crashing on samples from exiting processes when running
    on linux 4.14 and newer kernels.
  * Fix compile warning and errors when using GCC 8
- Add patch: oprofile-handle-empty-event-name-spec-gracefully-for-ppc.patch</changelog>
  <changelog author="tonyj@suse.com" date="1650888000">- Resolve build issues due to binutils 2.34 api changes (bsc#1197793)
  New patch: oprofile-macro-wrappers-to-handle-the-binutils-2.34-api-changes.patch
  New patch: oprofile-include-op_bfd_wrappers.h-in-the-distribution.patch</changelog>
</package>
<package pkgid="03822831d6a539f7a5938375f333d1979634a8d229052252c219a01252c4492e" name="oprofile-devel" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="150100.8.3.1"/>
  <changelog author="tonyj@suse.com" date="1411128000">- Update to version 1.0.0. THIS IS A MAJOR OPROFILE RELEASE WITH SIGNIFICANT
  CHANGES FROM THE PREVIOUS 0.9.9 RELEASE.  See changelog below.
    Drop patch: oprofile-add-support-for-intel-silvermont-processor.patch
    Drop patch: oprofile-compressed-kernel.patch
    Drop patch: oprofile-configure-error-message-for-missing-libpfm-is-not-informative-enough.patch
    Drop patch: oprofile-enable-for-new-ppc64le-architecture.patch
    Drop patch: oprofile-fix-unable-to-open-cpu_type-file-for-reading-for-ibm-power7.patch
    Drop patch: oprofile-make-cpu-type-power8e-equivalent-to-power8.patch
  Changelog:
    Major changes:
  - The legacy opcontrol-based profiler has been removed. operf is now the
    only supported interface
  - GUI component (i.e., oprof_start) has been removed.
  - IBS events removed from AMD processors
  - Following architectures have been removed (Alpha [except for EV67 which
    is supported by operf/ocount], avr32, ia64,  IBM Cell,  P.A Semi PA64T)
  - RTV (real time clock) mode has been removed
    Other incompatibilities:
  - Sample data collected with previous releases of OProfile are incompatible
    with release 1.0.
  - ophelp schema: Major version changed for removal of unit mask 'extra'
    attribute and addition of unit mask 'name'.
    New features:
  - Enhance ocount to support millisecond time intervals
  - Obtain kernel symbols from /proc/kallsyms if no vmlinux file specified
  - New Processor Support (Freescale e6500, Freescale e500mc,
    Intel Silvermont, ARMv7 Krait, APM X-Gene (ARMv8),
    Intel Broadwell, ARMv8 Cortex A57, ARMv8 Cortex A53
  - Added little endian support for IBM POWER8
  - Update events for IBM POWER8
  - Added edge-detect events for IBM POWER7
  - Update events for Intel Haswell
  Bug Fixes:
  - opreport schema: Fix count field maxOccurs (changed to 'unbounded')
  - Fix compile error on ppc/uClibc platform: 'AT_BASE_PLATFORM' undeclared'
  - Duplicate event specs passed to ocount show up twice in output
  - Fix operf/ocount default unit mask selection
  - ocount: print the unit mask, kernel and user modes if specified for the
    event
  - ophelp schema is not included in installed files
  - Remove unused 'extra' attribute from ophelp schema
  - opreport from 'operf --callgraph' profile shows false recursive calls
  - Fix handling of default named unit masks longer than 11 chars
  - Print unit mask name where applicable in ophelp XML output
  - Fix profiling of multi-threaded apps when using "--pid" option
  - Fix operf/opreport kernel throttling detection
  - Fix sample attribution problem when using multiple events
  - exclude/include files option doesn't work for opannotate -a
  - Fix behavior and documentation for '--threshold' option
  - Remove hard-coded timeout for JIT dump conversion
  - Update Alpha EV67 CPU support and remove all other Alpha CPU support
  - operf main process improperly killing conversion process
  - Fix up S390 support to work with operf/ocount
  - Link ocount with librt for clock_gettime only when needed
  - Fix 'Invalid argument' running 'opcontrol --start --callgraph=&lt;n&gt;' in
    Timer mode
  - Allow root to remove old jitdump files from /tmp/.oprofile/jitdump
  - Remove opreport warnings for /no-vmlinux, [vdso], [hypervisor_bucket]
    not found
  - Fix event codes for marked architected events (IBM ppc64)
  - Make operf/ocount detect invalid timer mode from opcontrol
  - Reduce overhead of operf waiting for profiled app to end
  - Fix "Unable to open cpu_type file for reading" for IBM POWER7+
  - Allow all native events for IBM POWER8 in POWER7 compat mode
  - Fix spurious "backtraces skipped due to no file mapping" log entries
  - Fix the units for the reported CPU frequency</changelog>
  <changelog author="mpluskal@suse.com" date="1451044800">- Update to 1.1.0
  * New/updated Processor Support
    + Broadcom Brahmma-B15 CPU
    + Intel Skylake
    + Intel Airmont
    + Intel Xeon D
  * Bug fixes
    + Prevent dropping of samples when the JVM changes memory
    mappings
    + Better handling of IBM Power JVM generated zero-sized
    mappings
    + Correct handling of anon_hugepage mmap entries for Java
    + Improved oparchive documentation and man page
    + Fixed compile error when using compile fortification
    + Support IBM Power 8 event code larger than sizeof int
    + Avoid changing POSIXLY_CORRECT environment variable for
    processes monitored by operf and ocount
    + Ensure correct setting of the extra bits (edge, inv, cmask)
    for Intel processors
    + Fix default unit masks for Intel Haswell and Broadwell
    processors
    + Correctly initialize operf temporary file header information
- Cleanup spec file with spec-cleaner
- Use url for source
- Drop desktop file since binary it is calling is no longer
  present (at least since version 1.0.0)
- Update dependencies</changelog>
  <changelog author="i@marguerite.su" date="1467460800">- add patch: oprofile-1.1.0-gcc6.patch, fixed boo#985359
  * cherry picked upstream commit 39d4d4, so please
    remember to drop it next release
  * GCC 6 is pickier about some of the type conversions
    avoid the intermediate bool type to make it happy</changelog>
  <changelog author="sfalken@opensuse.org" date="1489233600">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Depend on java-devel instead of deprecated provide</changelog>
  <changelog author="tonyj@suse.com" date="1502107200">- Update to version 1.2.0
  - New/updated Processor Support
  * ARM Cortex A17
  * IBM Power 9
  * IBM Power 8NV and NVL variants
  * IBM z13
  * Intel Goldmont
  * Intel Kabylake
  * Intel Xeon Phi (Knights Landing)
  * Achitecture specific events for Applied Micro X-Gene
  - Bug fixes
  * #286 - Compilation error: left shift of negative value
  * #288 - oprofile fails to build with --enable-pch and gcc-6.2
  - Other fixes
  * Fixed compile warning and errors when using GCC 6 or GCC 7
  * Avoid using deprecated readdir_r function
  * Store samples in the archive and search the appropriate places
    for samples
  * Only start the application if the perf events setup was successful
  * Corrections in the code and i386 events so "make check" tests pass
- Drop local patch oprofile-1.1.0-gcc6.patch (upstream)</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- Remove qt-devel from BuildRequires, it is no needed anymore.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Rectify RPM groups. Update summary of -devel subpackage.
  Do not ignore errors from useradd/groupadd.
  Avoid running fdupes across partitions.</changelog>
  <changelog author="tonyj@suse.com" date="1540814400">- Update to version 1.3.0 (FATE#326121)
  - New/updated processor support
  * Intel Goldmont Plus
  - Bug fixes
  * #289 No manpage for opjitconv binary
  * Avoid operf crashing on samples from exiting processes when running
    on linux 4.14 and newer kernels.
  * Fix compile warning and errors when using GCC 8
- Add patch: oprofile-handle-empty-event-name-spec-gracefully-for-ppc.patch</changelog>
  <changelog author="tonyj@suse.com" date="1650888000">- Resolve build issues due to binutils 2.34 api changes (bsc#1197793)
  New patch: oprofile-macro-wrappers-to-handle-the-binutils-2.34-api-changes.patch
  New patch: oprofile-include-op_bfd_wrappers.h-in-the-distribution.patch</changelog>
</package>
<package pkgid="19f79156ed0aae9a0620e726b0dd6e34a36ef39651706d56426a9532c7783264" name="oprofile-devel" arch="ppc64le">
  <version epoch="0" ver="1.3.0" rel="150100.8.3.1"/>
  <changelog author="tonyj@suse.com" date="1411128000">- Update to version 1.0.0. THIS IS A MAJOR OPROFILE RELEASE WITH SIGNIFICANT
  CHANGES FROM THE PREVIOUS 0.9.9 RELEASE.  See changelog below.
    Drop patch: oprofile-add-support-for-intel-silvermont-processor.patch
    Drop patch: oprofile-compressed-kernel.patch
    Drop patch: oprofile-configure-error-message-for-missing-libpfm-is-not-informative-enough.patch
    Drop patch: oprofile-enable-for-new-ppc64le-architecture.patch
    Drop patch: oprofile-fix-unable-to-open-cpu_type-file-for-reading-for-ibm-power7.patch
    Drop patch: oprofile-make-cpu-type-power8e-equivalent-to-power8.patch
  Changelog:
    Major changes:
  - The legacy opcontrol-based profiler has been removed. operf is now the
    only supported interface
  - GUI component (i.e., oprof_start) has been removed.
  - IBS events removed from AMD processors
  - Following architectures have been removed (Alpha [except for EV67 which
    is supported by operf/ocount], avr32, ia64,  IBM Cell,  P.A Semi PA64T)
  - RTV (real time clock) mode has been removed
    Other incompatibilities:
  - Sample data collected with previous releases of OProfile are incompatible
    with release 1.0.
  - ophelp schema: Major version changed for removal of unit mask 'extra'
    attribute and addition of unit mask 'name'.
    New features:
  - Enhance ocount to support millisecond time intervals
  - Obtain kernel symbols from /proc/kallsyms if no vmlinux file specified
  - New Processor Support (Freescale e6500, Freescale e500mc,
    Intel Silvermont, ARMv7 Krait, APM X-Gene (ARMv8),
    Intel Broadwell, ARMv8 Cortex A57, ARMv8 Cortex A53
  - Added little endian support for IBM POWER8
  - Update events for IBM POWER8
  - Added edge-detect events for IBM POWER7
  - Update events for Intel Haswell
  Bug Fixes:
  - opreport schema: Fix count field maxOccurs (changed to 'unbounded')
  - Fix compile error on ppc/uClibc platform: 'AT_BASE_PLATFORM' undeclared'
  - Duplicate event specs passed to ocount show up twice in output
  - Fix operf/ocount default unit mask selection
  - ocount: print the unit mask, kernel and user modes if specified for the
    event
  - ophelp schema is not included in installed files
  - Remove unused 'extra' attribute from ophelp schema
  - opreport from 'operf --callgraph' profile shows false recursive calls
  - Fix handling of default named unit masks longer than 11 chars
  - Print unit mask name where applicable in ophelp XML output
  - Fix profiling of multi-threaded apps when using "--pid" option
  - Fix operf/opreport kernel throttling detection
  - Fix sample attribution problem when using multiple events
  - exclude/include files option doesn't work for opannotate -a
  - Fix behavior and documentation for '--threshold' option
  - Remove hard-coded timeout for JIT dump conversion
  - Update Alpha EV67 CPU support and remove all other Alpha CPU support
  - operf main process improperly killing conversion process
  - Fix up S390 support to work with operf/ocount
  - Link ocount with librt for clock_gettime only when needed
  - Fix 'Invalid argument' running 'opcontrol --start --callgraph=&lt;n&gt;' in
    Timer mode
  - Allow root to remove old jitdump files from /tmp/.oprofile/jitdump
  - Remove opreport warnings for /no-vmlinux, [vdso], [hypervisor_bucket]
    not found
  - Fix event codes for marked architected events (IBM ppc64)
  - Make operf/ocount detect invalid timer mode from opcontrol
  - Reduce overhead of operf waiting for profiled app to end
  - Fix "Unable to open cpu_type file for reading" for IBM POWER7+
  - Allow all native events for IBM POWER8 in POWER7 compat mode
  - Fix spurious "backtraces skipped due to no file mapping" log entries
  - Fix the units for the reported CPU frequency</changelog>
  <changelog author="mpluskal@suse.com" date="1451044800">- Update to 1.1.0
  * New/updated Processor Support
    + Broadcom Brahmma-B15 CPU
    + Intel Skylake
    + Intel Airmont
    + Intel Xeon D
  * Bug fixes
    + Prevent dropping of samples when the JVM changes memory
    mappings
    + Better handling of IBM Power JVM generated zero-sized
    mappings
    + Correct handling of anon_hugepage mmap entries for Java
    + Improved oparchive documentation and man page
    + Fixed compile error when using compile fortification
    + Support IBM Power 8 event code larger than sizeof int
    + Avoid changing POSIXLY_CORRECT environment variable for
    processes monitored by operf and ocount
    + Ensure correct setting of the extra bits (edge, inv, cmask)
    for Intel processors
    + Fix default unit masks for Intel Haswell and Broadwell
    processors
    + Correctly initialize operf temporary file header information
- Cleanup spec file with spec-cleaner
- Use url for source
- Drop desktop file since binary it is calling is no longer
  present (at least since version 1.0.0)
- Update dependencies</changelog>
  <changelog author="i@marguerite.su" date="1467460800">- add patch: oprofile-1.1.0-gcc6.patch, fixed boo#985359
  * cherry picked upstream commit 39d4d4, so please
    remember to drop it next release
  * GCC 6 is pickier about some of the type conversions
    avoid the intermediate bool type to make it happy</changelog>
  <changelog author="sfalken@opensuse.org" date="1489233600">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Depend on java-devel instead of deprecated provide</changelog>
  <changelog author="tonyj@suse.com" date="1502107200">- Update to version 1.2.0
  - New/updated Processor Support
  * ARM Cortex A17
  * IBM Power 9
  * IBM Power 8NV and NVL variants
  * IBM z13
  * Intel Goldmont
  * Intel Kabylake
  * Intel Xeon Phi (Knights Landing)
  * Achitecture specific events for Applied Micro X-Gene
  - Bug fixes
  * #286 - Compilation error: left shift of negative value
  * #288 - oprofile fails to build with --enable-pch and gcc-6.2
  - Other fixes
  * Fixed compile warning and errors when using GCC 6 or GCC 7
  * Avoid using deprecated readdir_r function
  * Store samples in the archive and search the appropriate places
    for samples
  * Only start the application if the perf events setup was successful
  * Corrections in the code and i386 events so "make check" tests pass
- Drop local patch oprofile-1.1.0-gcc6.patch (upstream)</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- Remove qt-devel from BuildRequires, it is no needed anymore.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Rectify RPM groups. Update summary of -devel subpackage.
  Do not ignore errors from useradd/groupadd.
  Avoid running fdupes across partitions.</changelog>
  <changelog author="tonyj@suse.com" date="1540814400">- Update to version 1.3.0 (FATE#326121)
  - New/updated processor support
  * Intel Goldmont Plus
  - Bug fixes
  * #289 No manpage for opjitconv binary
  * Avoid operf crashing on samples from exiting processes when running
    on linux 4.14 and newer kernels.
  * Fix compile warning and errors when using GCC 8
- Add patch: oprofile-handle-empty-event-name-spec-gracefully-for-ppc.patch</changelog>
  <changelog author="tonyj@suse.com" date="1650888000">- Resolve build issues due to binutils 2.34 api changes (bsc#1197793)
  New patch: oprofile-macro-wrappers-to-handle-the-binutils-2.34-api-changes.patch
  New patch: oprofile-include-op_bfd_wrappers.h-in-the-distribution.patch</changelog>
</package>
<package pkgid="afc095b08b06642e116cfc7e639763f550b7f448b42705f3747a8d38532de359" name="oprofile-devel" arch="s390x">
  <version epoch="0" ver="1.3.0" rel="150100.8.3.1"/>
  <changelog author="tonyj@suse.com" date="1411128000">- Update to version 1.0.0. THIS IS A MAJOR OPROFILE RELEASE WITH SIGNIFICANT
  CHANGES FROM THE PREVIOUS 0.9.9 RELEASE.  See changelog below.
    Drop patch: oprofile-add-support-for-intel-silvermont-processor.patch
    Drop patch: oprofile-compressed-kernel.patch
    Drop patch: oprofile-configure-error-message-for-missing-libpfm-is-not-informative-enough.patch
    Drop patch: oprofile-enable-for-new-ppc64le-architecture.patch
    Drop patch: oprofile-fix-unable-to-open-cpu_type-file-for-reading-for-ibm-power7.patch
    Drop patch: oprofile-make-cpu-type-power8e-equivalent-to-power8.patch
  Changelog:
    Major changes:
  - The legacy opcontrol-based profiler has been removed. operf is now the
    only supported interface
  - GUI component (i.e., oprof_start) has been removed.
  - IBS events removed from AMD processors
  - Following architectures have been removed (Alpha [except for EV67 which
    is supported by operf/ocount], avr32, ia64,  IBM Cell,  P.A Semi PA64T)
  - RTV (real time clock) mode has been removed
    Other incompatibilities:
  - Sample data collected with previous releases of OProfile are incompatible
    with release 1.0.
  - ophelp schema: Major version changed for removal of unit mask 'extra'
    attribute and addition of unit mask 'name'.
    New features:
  - Enhance ocount to support millisecond time intervals
  - Obtain kernel symbols from /proc/kallsyms if no vmlinux file specified
  - New Processor Support (Freescale e6500, Freescale e500mc,
    Intel Silvermont, ARMv7 Krait, APM X-Gene (ARMv8),
    Intel Broadwell, ARMv8 Cortex A57, ARMv8 Cortex A53
  - Added little endian support for IBM POWER8
  - Update events for IBM POWER8
  - Added edge-detect events for IBM POWER7
  - Update events for Intel Haswell
  Bug Fixes:
  - opreport schema: Fix count field maxOccurs (changed to 'unbounded')
  - Fix compile error on ppc/uClibc platform: 'AT_BASE_PLATFORM' undeclared'
  - Duplicate event specs passed to ocount show up twice in output
  - Fix operf/ocount default unit mask selection
  - ocount: print the unit mask, kernel and user modes if specified for the
    event
  - ophelp schema is not included in installed files
  - Remove unused 'extra' attribute from ophelp schema
  - opreport from 'operf --callgraph' profile shows false recursive calls
  - Fix handling of default named unit masks longer than 11 chars
  - Print unit mask name where applicable in ophelp XML output
  - Fix profiling of multi-threaded apps when using "--pid" option
  - Fix operf/opreport kernel throttling detection
  - Fix sample attribution problem when using multiple events
  - exclude/include files option doesn't work for opannotate -a
  - Fix behavior and documentation for '--threshold' option
  - Remove hard-coded timeout for JIT dump conversion
  - Update Alpha EV67 CPU support and remove all other Alpha CPU support
  - operf main process improperly killing conversion process
  - Fix up S390 support to work with operf/ocount
  - Link ocount with librt for clock_gettime only when needed
  - Fix 'Invalid argument' running 'opcontrol --start --callgraph=&lt;n&gt;' in
    Timer mode
  - Allow root to remove old jitdump files from /tmp/.oprofile/jitdump
  - Remove opreport warnings for /no-vmlinux, [vdso], [hypervisor_bucket]
    not found
  - Fix event codes for marked architected events (IBM ppc64)
  - Make operf/ocount detect invalid timer mode from opcontrol
  - Reduce overhead of operf waiting for profiled app to end
  - Fix "Unable to open cpu_type file for reading" for IBM POWER7+
  - Allow all native events for IBM POWER8 in POWER7 compat mode
  - Fix spurious "backtraces skipped due to no file mapping" log entries
  - Fix the units for the reported CPU frequency</changelog>
  <changelog author="mpluskal@suse.com" date="1451044800">- Update to 1.1.0
  * New/updated Processor Support
    + Broadcom Brahmma-B15 CPU
    + Intel Skylake
    + Intel Airmont
    + Intel Xeon D
  * Bug fixes
    + Prevent dropping of samples when the JVM changes memory
    mappings
    + Better handling of IBM Power JVM generated zero-sized
    mappings
    + Correct handling of anon_hugepage mmap entries for Java
    + Improved oparchive documentation and man page
    + Fixed compile error when using compile fortification
    + Support IBM Power 8 event code larger than sizeof int
    + Avoid changing POSIXLY_CORRECT environment variable for
    processes monitored by operf and ocount
    + Ensure correct setting of the extra bits (edge, inv, cmask)
    for Intel processors
    + Fix default unit masks for Intel Haswell and Broadwell
    processors
    + Correctly initialize operf temporary file header information
- Cleanup spec file with spec-cleaner
- Use url for source
- Drop desktop file since binary it is calling is no longer
  present (at least since version 1.0.0)
- Update dependencies</changelog>
  <changelog author="i@marguerite.su" date="1467460800">- add patch: oprofile-1.1.0-gcc6.patch, fixed boo#985359
  * cherry picked upstream commit 39d4d4, so please
    remember to drop it next release
  * GCC 6 is pickier about some of the type conversions
    avoid the intermediate bool type to make it happy</changelog>
  <changelog author="sfalken@opensuse.org" date="1489233600">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Depend on java-devel instead of deprecated provide</changelog>
  <changelog author="tonyj@suse.com" date="1502107200">- Update to version 1.2.0
  - New/updated Processor Support
  * ARM Cortex A17
  * IBM Power 9
  * IBM Power 8NV and NVL variants
  * IBM z13
  * Intel Goldmont
  * Intel Kabylake
  * Intel Xeon Phi (Knights Landing)
  * Achitecture specific events for Applied Micro X-Gene
  - Bug fixes
  * #286 - Compilation error: left shift of negative value
  * #288 - oprofile fails to build with --enable-pch and gcc-6.2
  - Other fixes
  * Fixed compile warning and errors when using GCC 6 or GCC 7
  * Avoid using deprecated readdir_r function
  * Store samples in the archive and search the appropriate places
    for samples
  * Only start the application if the perf events setup was successful
  * Corrections in the code and i386 events so "make check" tests pass
- Drop local patch oprofile-1.1.0-gcc6.patch (upstream)</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- Remove qt-devel from BuildRequires, it is no needed anymore.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Rectify RPM groups. Update summary of -devel subpackage.
  Do not ignore errors from useradd/groupadd.
  Avoid running fdupes across partitions.</changelog>
  <changelog author="tonyj@suse.com" date="1540814400">- Update to version 1.3.0 (FATE#326121)
  - New/updated processor support
  * Intel Goldmont Plus
  - Bug fixes
  * #289 No manpage for opjitconv binary
  * Avoid operf crashing on samples from exiting processes when running
    on linux 4.14 and newer kernels.
  * Fix compile warning and errors when using GCC 8
- Add patch: oprofile-handle-empty-event-name-spec-gracefully-for-ppc.patch</changelog>
  <changelog author="tonyj@suse.com" date="1650888000">- Resolve build issues due to binutils 2.34 api changes (bsc#1197793)
  New patch: oprofile-macro-wrappers-to-handle-the-binutils-2.34-api-changes.patch
  New patch: oprofile-include-op_bfd_wrappers.h-in-the-distribution.patch</changelog>
</package>
<package pkgid="2a99aa9d11b249d19f8dd92e2eb671ee73209222d176bda02a0e660269b4dbba" name="oprofile-devel" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="150100.8.3.1"/>
  <changelog author="tonyj@suse.com" date="1411128000">- Update to version 1.0.0. THIS IS A MAJOR OPROFILE RELEASE WITH SIGNIFICANT
  CHANGES FROM THE PREVIOUS 0.9.9 RELEASE.  See changelog below.
    Drop patch: oprofile-add-support-for-intel-silvermont-processor.patch
    Drop patch: oprofile-compressed-kernel.patch
    Drop patch: oprofile-configure-error-message-for-missing-libpfm-is-not-informative-enough.patch
    Drop patch: oprofile-enable-for-new-ppc64le-architecture.patch
    Drop patch: oprofile-fix-unable-to-open-cpu_type-file-for-reading-for-ibm-power7.patch
    Drop patch: oprofile-make-cpu-type-power8e-equivalent-to-power8.patch
  Changelog:
    Major changes:
  - The legacy opcontrol-based profiler has been removed. operf is now the
    only supported interface
  - GUI component (i.e., oprof_start) has been removed.
  - IBS events removed from AMD processors
  - Following architectures have been removed (Alpha [except for EV67 which
    is supported by operf/ocount], avr32, ia64,  IBM Cell,  P.A Semi PA64T)
  - RTV (real time clock) mode has been removed
    Other incompatibilities:
  - Sample data collected with previous releases of OProfile are incompatible
    with release 1.0.
  - ophelp schema: Major version changed for removal of unit mask 'extra'
    attribute and addition of unit mask 'name'.
    New features:
  - Enhance ocount to support millisecond time intervals
  - Obtain kernel symbols from /proc/kallsyms if no vmlinux file specified
  - New Processor Support (Freescale e6500, Freescale e500mc,
    Intel Silvermont, ARMv7 Krait, APM X-Gene (ARMv8),
    Intel Broadwell, ARMv8 Cortex A57, ARMv8 Cortex A53
  - Added little endian support for IBM POWER8
  - Update events for IBM POWER8
  - Added edge-detect events for IBM POWER7
  - Update events for Intel Haswell
  Bug Fixes:
  - opreport schema: Fix count field maxOccurs (changed to 'unbounded')
  - Fix compile error on ppc/uClibc platform: 'AT_BASE_PLATFORM' undeclared'
  - Duplicate event specs passed to ocount show up twice in output
  - Fix operf/ocount default unit mask selection
  - ocount: print the unit mask, kernel and user modes if specified for the
    event
  - ophelp schema is not included in installed files
  - Remove unused 'extra' attribute from ophelp schema
  - opreport from 'operf --callgraph' profile shows false recursive calls
  - Fix handling of default named unit masks longer than 11 chars
  - Print unit mask name where applicable in ophelp XML output
  - Fix profiling of multi-threaded apps when using "--pid" option
  - Fix operf/opreport kernel throttling detection
  - Fix sample attribution problem when using multiple events
  - exclude/include files option doesn't work for opannotate -a
  - Fix behavior and documentation for '--threshold' option
  - Remove hard-coded timeout for JIT dump conversion
  - Update Alpha EV67 CPU support and remove all other Alpha CPU support
  - operf main process improperly killing conversion process
  - Fix up S390 support to work with operf/ocount
  - Link ocount with librt for clock_gettime only when needed
  - Fix 'Invalid argument' running 'opcontrol --start --callgraph=&lt;n&gt;' in
    Timer mode
  - Allow root to remove old jitdump files from /tmp/.oprofile/jitdump
  - Remove opreport warnings for /no-vmlinux, [vdso], [hypervisor_bucket]
    not found
  - Fix event codes for marked architected events (IBM ppc64)
  - Make operf/ocount detect invalid timer mode from opcontrol
  - Reduce overhead of operf waiting for profiled app to end
  - Fix "Unable to open cpu_type file for reading" for IBM POWER7+
  - Allow all native events for IBM POWER8 in POWER7 compat mode
  - Fix spurious "backtraces skipped due to no file mapping" log entries
  - Fix the units for the reported CPU frequency</changelog>
  <changelog author="mpluskal@suse.com" date="1451044800">- Update to 1.1.0
  * New/updated Processor Support
    + Broadcom Brahmma-B15 CPU
    + Intel Skylake
    + Intel Airmont
    + Intel Xeon D
  * Bug fixes
    + Prevent dropping of samples when the JVM changes memory
    mappings
    + Better handling of IBM Power JVM generated zero-sized
    mappings
    + Correct handling of anon_hugepage mmap entries for Java
    + Improved oparchive documentation and man page
    + Fixed compile error when using compile fortification
    + Support IBM Power 8 event code larger than sizeof int
    + Avoid changing POSIXLY_CORRECT environment variable for
    processes monitored by operf and ocount
    + Ensure correct setting of the extra bits (edge, inv, cmask)
    for Intel processors
    + Fix default unit masks for Intel Haswell and Broadwell
    processors
    + Correctly initialize operf temporary file header information
- Cleanup spec file with spec-cleaner
- Use url for source
- Drop desktop file since binary it is calling is no longer
  present (at least since version 1.0.0)
- Update dependencies</changelog>
  <changelog author="i@marguerite.su" date="1467460800">- add patch: oprofile-1.1.0-gcc6.patch, fixed boo#985359
  * cherry picked upstream commit 39d4d4, so please
    remember to drop it next release
  * GCC 6 is pickier about some of the type conversions
    avoid the intermediate bool type to make it happy</changelog>
  <changelog author="sfalken@opensuse.org" date="1489233600">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="tchvatal@suse.com" date="1495281600">- Depend on java-devel instead of deprecated provide</changelog>
  <changelog author="tonyj@suse.com" date="1502107200">- Update to version 1.2.0
  - New/updated Processor Support
  * ARM Cortex A17
  * IBM Power 9
  * IBM Power 8NV and NVL variants
  * IBM z13
  * Intel Goldmont
  * Intel Kabylake
  * Intel Xeon Phi (Knights Landing)
  * Achitecture specific events for Applied Micro X-Gene
  - Bug fixes
  * #286 - Compilation error: left shift of negative value
  * #288 - oprofile fails to build with --enable-pch and gcc-6.2
  - Other fixes
  * Fixed compile warning and errors when using GCC 6 or GCC 7
  * Avoid using deprecated readdir_r function
  * Store samples in the archive and search the appropriate places
    for samples
  * Only start the application if the perf events setup was successful
  * Corrections in the code and i386 events so "make check" tests pass
- Drop local patch oprofile-1.1.0-gcc6.patch (upstream)</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- Remove qt-devel from BuildRequires, it is no needed anymore.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Rectify RPM groups. Update summary of -devel subpackage.
  Do not ignore errors from useradd/groupadd.
  Avoid running fdupes across partitions.</changelog>
  <changelog author="tonyj@suse.com" date="1540814400">- Update to version 1.3.0 (FATE#326121)
  - New/updated processor support
  * Intel Goldmont Plus
  - Bug fixes
  * #289 No manpage for opjitconv binary
  * Avoid operf crashing on samples from exiting processes when running
    on linux 4.14 and newer kernels.
  * Fix compile warning and errors when using GCC 8
- Add patch: oprofile-handle-empty-event-name-spec-gracefully-for-ppc.patch</changelog>
  <changelog author="tonyj@suse.com" date="1650888000">- Resolve build issues due to binutils 2.34 api changes (bsc#1197793)
  New patch: oprofile-macro-wrappers-to-handle-the-binutils-2.34-api-changes.patch
  New patch: oprofile-include-op_bfd_wrappers.h-in-the-distribution.patch</changelog>
</package>
<package pkgid="e0fc0c31a6cef8c97cf082f156d748a033f1c979d7897d49e6506b596d96fa00" name="pam" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="150000.6.58.3"/>
  <changelog author="josef.moellers@suse.com" date="1582286400">- Add libdb as build-time dependency to enable pam_userdb module.
  Enable pam_userdb.so
  [jsc#sle-7258, bsc#1164562, pam.spec]</changelog>
  <changelog author="meissner@suse.com" date="1584100800">- disable libdb usage and pam_userdb again, as this causes some license
  conflicts. (bsc#1166510)</changelog>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
</package>
<package pkgid="bde166058a5a6361129d465d774d9286a08b9933eb538b66e3d23a03455bb4ee" name="pam" arch="ppc64le">
  <version epoch="0" ver="1.3.0" rel="150000.6.58.3"/>
  <changelog author="josef.moellers@suse.com" date="1582286400">- Add libdb as build-time dependency to enable pam_userdb module.
  Enable pam_userdb.so
  [jsc#sle-7258, bsc#1164562, pam.spec]</changelog>
  <changelog author="meissner@suse.com" date="1584100800">- disable libdb usage and pam_userdb again, as this causes some license
  conflicts. (bsc#1166510)</changelog>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
</package>
<package pkgid="ff941c80a4f5030cada5322a1ae735b75006111743b79a59b01dcab86f84aed3" name="pam" arch="s390x">
  <version epoch="0" ver="1.3.0" rel="150000.6.58.3"/>
  <changelog author="josef.moellers@suse.com" date="1582286400">- Add libdb as build-time dependency to enable pam_userdb module.
  Enable pam_userdb.so
  [jsc#sle-7258, bsc#1164562, pam.spec]</changelog>
  <changelog author="meissner@suse.com" date="1584100800">- disable libdb usage and pam_userdb again, as this causes some license
  conflicts. (bsc#1166510)</changelog>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
</package>
<package pkgid="44f5d50cc9065ec255ddc0364dfc92d6ba1ee15ecadaecf485ceda7d15b5cb13" name="pam" arch="src">
  <version epoch="0" ver="1.3.0" rel="150000.6.58.3"/>
  <changelog author="josef.moellers@suse.com" date="1582286400">- Add libdb as build-time dependency to enable pam_userdb module.
  Enable pam_userdb.so
  [jsc#sle-7258, bsc#1164562, pam.spec]</changelog>
  <changelog author="meissner@suse.com" date="1584100800">- disable libdb usage and pam_userdb again, as this causes some license
  conflicts. (bsc#1166510)</changelog>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
</package>
<package pkgid="bccbfa40d3ed22fd3c3a09c5a1d713ebe96b61d3f3e50be1a007edc89170f475" name="pam" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="150000.6.58.3"/>
  <changelog author="josef.moellers@suse.com" date="1582286400">- Add libdb as build-time dependency to enable pam_userdb module.
  Enable pam_userdb.so
  [jsc#sle-7258, bsc#1164562, pam.spec]</changelog>
  <changelog author="meissner@suse.com" date="1584100800">- disable libdb usage and pam_userdb again, as this causes some license
  conflicts. (bsc#1166510)</changelog>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
</package>
<package pkgid="648589d0f095d97227ab161fef5c02d63f44c08b0e7eb2a118d3eecf3aa926ea" name="pam-32bit" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="150000.6.58.3"/>
  <changelog author="josef.moellers@suse.com" date="1582286400">- Add libdb as build-time dependency to enable pam_userdb module.
  Enable pam_userdb.so
  [jsc#sle-7258, bsc#1164562, pam.spec]</changelog>
  <changelog author="meissner@suse.com" date="1584100800">- disable libdb usage and pam_userdb again, as this causes some license
  conflicts. (bsc#1166510)</changelog>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
</package>
<package pkgid="9aadb4c78aea5446ba10a353b94f50c88b8feb12a596d99d396284fe036f8878" name="pam-devel" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="150000.6.58.3"/>
  <changelog author="josef.moellers@suse.com" date="1582286400">- Add libdb as build-time dependency to enable pam_userdb module.
  Enable pam_userdb.so
  [jsc#sle-7258, bsc#1164562, pam.spec]</changelog>
  <changelog author="meissner@suse.com" date="1584100800">- disable libdb usage and pam_userdb again, as this causes some license
  conflicts. (bsc#1166510)</changelog>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
</package>
<package pkgid="c684c7264c0bec5faded38c2d12bf6236408a2fa097fc90bc12aad963b469c26" name="pam-devel" arch="ppc64le">
  <version epoch="0" ver="1.3.0" rel="150000.6.58.3"/>
  <changelog author="josef.moellers@suse.com" date="1582286400">- Add libdb as build-time dependency to enable pam_userdb module.
  Enable pam_userdb.so
  [jsc#sle-7258, bsc#1164562, pam.spec]</changelog>
  <changelog author="meissner@suse.com" date="1584100800">- disable libdb usage and pam_userdb again, as this causes some license
  conflicts. (bsc#1166510)</changelog>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
</package>
<package pkgid="6f07aeec990cc2d90e81203c5f3b0d0329c553b11e44457a9f6120ea13811e97" name="pam-devel" arch="s390x">
  <version epoch="0" ver="1.3.0" rel="150000.6.58.3"/>
  <changelog author="josef.moellers@suse.com" date="1582286400">- Add libdb as build-time dependency to enable pam_userdb module.
  Enable pam_userdb.so
  [jsc#sle-7258, bsc#1164562, pam.spec]</changelog>
  <changelog author="meissner@suse.com" date="1584100800">- disable libdb usage and pam_userdb again, as this causes some license
  conflicts. (bsc#1166510)</changelog>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
</package>
<package pkgid="aad9661b2ddffc9ff4ccabdfbc8335fd7b1c0d586348f8286300011835daa560" name="pam-devel" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="150000.6.58.3"/>
  <changelog author="josef.moellers@suse.com" date="1582286400">- Add libdb as build-time dependency to enable pam_userdb module.
  Enable pam_userdb.so
  [jsc#sle-7258, bsc#1164562, pam.spec]</changelog>
  <changelog author="meissner@suse.com" date="1584100800">- disable libdb usage and pam_userdb again, as this causes some license
  conflicts. (bsc#1166510)</changelog>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
</package>
<package pkgid="e9bd0ef0d9d2049ae0d62a23e595f7140cdaebc3b619f40dffdd5e2086db3b40" name="pam-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="150000.6.58.3"/>
  <changelog author="josef.moellers@suse.com" date="1582286400">- Add libdb as build-time dependency to enable pam_userdb module.
  Enable pam_userdb.so
  [jsc#sle-7258, bsc#1164562, pam.spec]</changelog>
  <changelog author="meissner@suse.com" date="1584100800">- disable libdb usage and pam_userdb again, as this causes some license
  conflicts. (bsc#1166510)</changelog>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
</package>
<package pkgid="ee47e9f8c87f01a6c2e2476db0fdc93b19e585c36561d7f6a102bd43c28e524b" name="pam-doc" arch="noarch">
  <version epoch="0" ver="1.3.0" rel="150000.6.58.3"/>
  <changelog author="josef.moellers@suse.com" date="1582286400">- Add libdb as build-time dependency to enable pam_userdb module.
  Enable pam_userdb.so
  [jsc#sle-7258, bsc#1164562, pam.spec]</changelog>
  <changelog author="meissner@suse.com" date="1584100800">- disable libdb usage and pam_userdb again, as this causes some license
  conflicts. (bsc#1166510)</changelog>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
</package>
<package pkgid="0bad84c95a225f714f3afeb311d68acd1b688ce08bc4e43f547659ea271d208c" name="pam-extra" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="150000.6.58.3"/>
  <changelog author="josef.moellers@suse.com" date="1582286400">- Add libdb as build-time dependency to enable pam_userdb module.
  Enable pam_userdb.so
  [jsc#sle-7258, bsc#1164562, pam.spec]</changelog>
  <changelog author="meissner@suse.com" date="1584100800">- disable libdb usage and pam_userdb again, as this causes some license
  conflicts. (bsc#1166510)</changelog>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
</package>
<package pkgid="c1f65b55fb9a73916275991357d1d06b35f4eea8db53c7e7cedf028ef5724b22" name="pam-extra" arch="ppc64le">
  <version epoch="0" ver="1.3.0" rel="150000.6.58.3"/>
  <changelog author="josef.moellers@suse.com" date="1582286400">- Add libdb as build-time dependency to enable pam_userdb module.
  Enable pam_userdb.so
  [jsc#sle-7258, bsc#1164562, pam.spec]</changelog>
  <changelog author="meissner@suse.com" date="1584100800">- disable libdb usage and pam_userdb again, as this causes some license
  conflicts. (bsc#1166510)</changelog>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
</package>
<package pkgid="20f2e14dd38e84bd76d2479e1233c7468ad157d71b859b7839f982b6dc5aa920" name="pam-extra" arch="s390x">
  <version epoch="0" ver="1.3.0" rel="150000.6.58.3"/>
  <changelog author="josef.moellers@suse.com" date="1582286400">- Add libdb as build-time dependency to enable pam_userdb module.
  Enable pam_userdb.so
  [jsc#sle-7258, bsc#1164562, pam.spec]</changelog>
  <changelog author="meissner@suse.com" date="1584100800">- disable libdb usage and pam_userdb again, as this causes some license
  conflicts. (bsc#1166510)</changelog>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
</package>
<package pkgid="1a19c49796ac2274a948b061da00a94793a633513030ea3a880d3df05aa24c02" name="pam-extra" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="150000.6.58.3"/>
  <changelog author="josef.moellers@suse.com" date="1582286400">- Add libdb as build-time dependency to enable pam_userdb module.
  Enable pam_userdb.so
  [jsc#sle-7258, bsc#1164562, pam.spec]</changelog>
  <changelog author="meissner@suse.com" date="1584100800">- disable libdb usage and pam_userdb again, as this causes some license
  conflicts. (bsc#1166510)</changelog>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
</package>
<package pkgid="f47a7307ff9ecba791f7434e02a8a8140977dba85173d1fe6eec021ef41319bc" name="pam-extra-32bit" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="150000.6.58.3"/>
  <changelog author="josef.moellers@suse.com" date="1582286400">- Add libdb as build-time dependency to enable pam_userdb module.
  Enable pam_userdb.so
  [jsc#sle-7258, bsc#1164562, pam.spec]</changelog>
  <changelog author="meissner@suse.com" date="1584100800">- disable libdb usage and pam_userdb again, as this causes some license
  conflicts. (bsc#1166510)</changelog>
  <changelog author="josef.moellers@suse.com" date="1584705600">- Moved pam_userdb to a separate package pam-extra.
  [bsc#1166510, pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
</package>
<package pkgid="064d20835758499931738191d18532ecc988f70566c7fefb700931250ddb665d" name="pam-modules" arch="aarch64">
  <version epoch="0" ver="12.1" rel="150000.5.3.2"/>
  <changelog author="cfarrell@suse.com" date="1362657600">- license update: BSD-3-Clause and GPL-2.0
  See e.g. /src/copy_xattr.c</changelog>
  <changelog author="schwab@suse.de" date="1372939200">- crypt_gensalt moved to separate library libowcrypt (fate#314945)</changelog>
  <changelog author="kukuk@suse.de" date="1406548800">- Adjust description, this are no longer the default PAM modules.</changelog>
  <changelog author="kukuk@suse.de" date="1408363200">- Remove duplicate lines from default/passwd [bnc#892316]</changelog>
  <changelog author="pcerny@suse.com" date="1458043200">- unix2_chkpwd helper
  * read delay on failure from login.defs (FAIL_DELAY)
  * decrease default "password-cracker deterrent" delay to 100ms</changelog>
  <changelog author="kukuk@suse.de" date="1460376000">- Link against external (non-glibc) libnsl.</changelog>
  <changelog author="kukuk@suse.de" date="1460635200">- remove unix2_chkpwd (moved to pam), to be able to drop this
  obsolete package in the near future.</changelog>
  <changelog author="kukuk@suse.de" date="1503662400">- use external libnsl only on Tumbleweed and SLE15 or newer</changelog>
  <changelog author="dimstar@opensuse.org" date="1516622400">- Fix build with RPM 4.14: use appropriate parameters to the setup
  macro.</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include &lt;selinux/flask.h&gt; it does not exist any more in
  newer libselinux versions and is not required in older ones.
  [bsc#1197795, pam-bsc1197795-do-not-include-obsolete-header-files.patch]</changelog>
</package>
<package pkgid="5e749ac9abc2bb409c9a6f66951cb8b5c5d7e4ebf63e5b78b8b83eadbf3da10f" name="pam-modules" arch="ppc64le">
  <version epoch="0" ver="12.1" rel="150000.5.3.2"/>
  <changelog author="cfarrell@suse.com" date="1362657600">- license update: BSD-3-Clause and GPL-2.0
  See e.g. /src/copy_xattr.c</changelog>
  <changelog author="schwab@suse.de" date="1372939200">- crypt_gensalt moved to separate library libowcrypt (fate#314945)</changelog>
  <changelog author="kukuk@suse.de" date="1406548800">- Adjust description, this are no longer the default PAM modules.</changelog>
  <changelog author="kukuk@suse.de" date="1408363200">- Remove duplicate lines from default/passwd [bnc#892316]</changelog>
  <changelog author="pcerny@suse.com" date="1458043200">- unix2_chkpwd helper
  * read delay on failure from login.defs (FAIL_DELAY)
  * decrease default "password-cracker deterrent" delay to 100ms</changelog>
  <changelog author="kukuk@suse.de" date="1460376000">- Link against external (non-glibc) libnsl.</changelog>
  <changelog author="kukuk@suse.de" date="1460635200">- remove unix2_chkpwd (moved to pam), to be able to drop this
  obsolete package in the near future.</changelog>
  <changelog author="kukuk@suse.de" date="1503662400">- use external libnsl only on Tumbleweed and SLE15 or newer</changelog>
  <changelog author="dimstar@opensuse.org" date="1516622400">- Fix build with RPM 4.14: use appropriate parameters to the setup
  macro.</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include &lt;selinux/flask.h&gt; it does not exist any more in
  newer libselinux versions and is not required in older ones.
  [bsc#1197795, pam-bsc1197795-do-not-include-obsolete-header-files.patch]</changelog>
</package>
<package pkgid="0e646240b6980ac3333527047b3cf5bc0931a0ce12c4c5c395938a39f0bf8b96" name="pam-modules" arch="s390x">
  <version epoch="0" ver="12.1" rel="150000.5.3.2"/>
  <changelog author="cfarrell@suse.com" date="1362657600">- license update: BSD-3-Clause and GPL-2.0
  See e.g. /src/copy_xattr.c</changelog>
  <changelog author="schwab@suse.de" date="1372939200">- crypt_gensalt moved to separate library libowcrypt (fate#314945)</changelog>
  <changelog author="kukuk@suse.de" date="1406548800">- Adjust description, this are no longer the default PAM modules.</changelog>
  <changelog author="kukuk@suse.de" date="1408363200">- Remove duplicate lines from default/passwd [bnc#892316]</changelog>
  <changelog author="pcerny@suse.com" date="1458043200">- unix2_chkpwd helper
  * read delay on failure from login.defs (FAIL_DELAY)
  * decrease default "password-cracker deterrent" delay to 100ms</changelog>
  <changelog author="kukuk@suse.de" date="1460376000">- Link against external (non-glibc) libnsl.</changelog>
  <changelog author="kukuk@suse.de" date="1460635200">- remove unix2_chkpwd (moved to pam), to be able to drop this
  obsolete package in the near future.</changelog>
  <changelog author="kukuk@suse.de" date="1503662400">- use external libnsl only on Tumbleweed and SLE15 or newer</changelog>
  <changelog author="dimstar@opensuse.org" date="1516622400">- Fix build with RPM 4.14: use appropriate parameters to the setup
  macro.</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include &lt;selinux/flask.h&gt; it does not exist any more in
  newer libselinux versions and is not required in older ones.
  [bsc#1197795, pam-bsc1197795-do-not-include-obsolete-header-files.patch]</changelog>
</package>
<package pkgid="9570139dd14e46e060efa3b17cc31db4cc8af73dc914ac2b85eee85a92e900de" name="pam-modules" arch="src">
  <version epoch="0" ver="12.1" rel="150000.5.3.2"/>
  <changelog author="uli@suse.com" date="1317816000">- cross-build fix: use %__cc, %configure macros</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1323259200">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="lnussel@suse.de" date="1323777600">- use thread local store for logindefs list (bnc#735220)</changelog>
  <changelog author="kukuk@suse.com" date="1333454400">- Update to pam_unix2 2.9.1 (merge of patches)</changelog>
  <changelog author="vcizek@suse.com" date="1342008000">- fixed misspelled binary name in unix2_chkpwd.8 (bnc#770896)</changelog>
  <changelog author="aj@suse.de" date="1342958400">- Do not use private glibc macros - those are not available with
  glibc 2.16 anymore.</changelog>
  <changelog author="idonmez@suse.com" date="1346673600">- Add pam_unix2-selinux.patch: selinux_check_access is now a public
  function provided by selinux. Use pu_selinux_check_access to fix
  conflict.</changelog>
  <changelog author="kukuk@suse.de" date="1352894400">- Add /etc/default/passwd for pam_unix2.so, was removed with
  pwdutils drop.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1362052800">- pam-modules-automake.patch: Fix build with new automake
  there is nop AM_CONFIG_HEADER anymore.
  * Modernize use of autoconf, use current macros.</changelog>
  <changelog author="cfarrell@suse.com" date="1362657600">- license update: BSD-3-Clause and GPL-2.0
  See e.g. /src/copy_xattr.c</changelog>
  <changelog author="schwab@suse.de" date="1372939200">- crypt_gensalt moved to separate library libowcrypt (fate#314945)</changelog>
  <changelog author="kukuk@suse.de" date="1406548800">- Adjust description, this are no longer the default PAM modules.</changelog>
  <changelog author="kukuk@suse.de" date="1408363200">- Remove duplicate lines from default/passwd [bnc#892316]</changelog>
  <changelog author="pcerny@suse.com" date="1458043200">- unix2_chkpwd helper
  * read delay on failure from login.defs (FAIL_DELAY)
  * decrease default "password-cracker deterrent" delay to 100ms</changelog>
  <changelog author="kukuk@suse.de" date="1460376000">- Link against external (non-glibc) libnsl.</changelog>
  <changelog author="kukuk@suse.de" date="1460635200">- remove unix2_chkpwd (moved to pam), to be able to drop this
  obsolete package in the near future.</changelog>
  <changelog author="kukuk@suse.de" date="1503662400">- use external libnsl only on Tumbleweed and SLE15 or newer</changelog>
  <changelog author="dimstar@opensuse.org" date="1516622400">- Fix build with RPM 4.14: use appropriate parameters to the setup
  macro.</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include &lt;selinux/flask.h&gt; it does not exist any more in
  newer libselinux versions and is not required in older ones.
  [bsc#1197795, pam-bsc1197795-do-not-include-obsolete-header-files.patch]</changelog>
</package>
<package pkgid="bacc27936d0b1639e823009fc91e6ffda70f74cdf53c490b41592199c5c9baf2" name="pam-modules" arch="x86_64">
  <version epoch="0" ver="12.1" rel="150000.5.3.2"/>
  <changelog author="cfarrell@suse.com" date="1362657600">- license update: BSD-3-Clause and GPL-2.0
  See e.g. /src/copy_xattr.c</changelog>
  <changelog author="schwab@suse.de" date="1372939200">- crypt_gensalt moved to separate library libowcrypt (fate#314945)</changelog>
  <changelog author="kukuk@suse.de" date="1406548800">- Adjust description, this are no longer the default PAM modules.</changelog>
  <changelog author="kukuk@suse.de" date="1408363200">- Remove duplicate lines from default/passwd [bnc#892316]</changelog>
  <changelog author="pcerny@suse.com" date="1458043200">- unix2_chkpwd helper
  * read delay on failure from login.defs (FAIL_DELAY)
  * decrease default "password-cracker deterrent" delay to 100ms</changelog>
  <changelog author="kukuk@suse.de" date="1460376000">- Link against external (non-glibc) libnsl.</changelog>
  <changelog author="kukuk@suse.de" date="1460635200">- remove unix2_chkpwd (moved to pam), to be able to drop this
  obsolete package in the near future.</changelog>
  <changelog author="kukuk@suse.de" date="1503662400">- use external libnsl only on Tumbleweed and SLE15 or newer</changelog>
  <changelog author="dimstar@opensuse.org" date="1516622400">- Fix build with RPM 4.14: use appropriate parameters to the setup
  macro.</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include &lt;selinux/flask.h&gt; it does not exist any more in
  newer libselinux versions and is not required in older ones.
  [bsc#1197795, pam-bsc1197795-do-not-include-obsolete-header-files.patch]</changelog>
</package>
<package pkgid="4e9dc8ebd0dd47da11893293687fb912bd79bb968dd466c7a773c9f2d073c361" name="pam-modules-32bit" arch="x86_64">
  <version epoch="0" ver="12.1" rel="150000.5.3.2"/>
  <changelog author="cfarrell@suse.com" date="1362657600">- license update: BSD-3-Clause and GPL-2.0
  See e.g. /src/copy_xattr.c</changelog>
  <changelog author="schwab@suse.de" date="1372939200">- crypt_gensalt moved to separate library libowcrypt (fate#314945)</changelog>
  <changelog author="kukuk@suse.de" date="1406548800">- Adjust description, this are no longer the default PAM modules.</changelog>
  <changelog author="kukuk@suse.de" date="1408363200">- Remove duplicate lines from default/passwd [bnc#892316]</changelog>
  <changelog author="pcerny@suse.com" date="1458043200">- unix2_chkpwd helper
  * read delay on failure from login.defs (FAIL_DELAY)
  * decrease default "password-cracker deterrent" delay to 100ms</changelog>
  <changelog author="kukuk@suse.de" date="1460376000">- Link against external (non-glibc) libnsl.</changelog>
  <changelog author="kukuk@suse.de" date="1460635200">- remove unix2_chkpwd (moved to pam), to be able to drop this
  obsolete package in the near future.</changelog>
  <changelog author="kukuk@suse.de" date="1503662400">- use external libnsl only on Tumbleweed and SLE15 or newer</changelog>
  <changelog author="dimstar@opensuse.org" date="1516622400">- Fix build with RPM 4.14: use appropriate parameters to the setup
  macro.</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include &lt;selinux/flask.h&gt; it does not exist any more in
  newer libselinux versions and is not required in older ones.
  [bsc#1197795, pam-bsc1197795-do-not-include-obsolete-header-files.patch]</changelog>
</package>
<package pkgid="98e4395d69d82a24b48ac8c7da996297ba530ca16d92f5a1cb5a1c862c76e627" name="pam_oath" arch="aarch64">
  <version epoch="0" ver="2.6.2" rel="150000.3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1382529600">- Update to version 2.4.0:
  + liboath: Add new API methods for validating TOTP OTPs
- Changes from version 2.2.0:
  + libpskc: Add functions for setting PSKC data.
  + liboath: Permit different passwords for different tokens for
    the same user.
  + liboath: Make header file usable from C++ (extern "C" guard).
  + build: Improve building from git with most recent automake and
    gengetopt.
  + build: Valgrind is not enabled by default.
- Fix license: libraries are LGPL-2.1+ and everything else is
  GPL-3.0+. Also properly package the COPYING files.
- Prepare build libpskc, hidden under a %{build_pskc} define:
  + Add libxml2-devel and pkgconfig(xmlsec1) BuildRequires.
  + Create libpskc0 and libpskc-devel subpackages.
  + Define %{build_pskc} to 0 since we don't have libxmlsec1 yet.
- Rework summaries and descriptions.</changelog>
  <changelog author="darin@darins.net" date="1405080000">- Ran through spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1422100800">- Update to version 2.4.1:
  + liboath: Fix usersfile bug that caused it to update the wrong line.
    When an usersfile contain multiple lines for the same user but with an
    unparseable token type (e.g., HOTP vs TOTP), the code would update the
    wrong line of the file.  Since the then updated line could be a
    commented out line, this can lead to the same OTP being accepted
    multiple times which is a security vulnerability.  Reported by Bas van
    Schaik &lt;bas@sj-vs.net&gt; and patch provided by Ilkka Virta
    &lt;itvirta@iki.fi&gt;.  CVE-2013-7322</changelog>
  <changelog author="t.gruner@katodev.de" date="1441800000">- Update to Version 2.6.1 (released 2015-07-31)
  - liboath: Fix 'make check' on 32-bit systems.
- Version 2.6.0 (released 2015-05-19)
  - liboath: Support TOTP with HMAC-SHA256 and HMAC-SHA512.
    This adds new APIs oath_totp_generate2, oath_totp_validate4 and
    oath_totp_validate4_callback.
  - oathtool: The --totp parameter now take an optional argument to specify MAC.
    For example use --totp=sha256 to use HMAC-SHA256.  When --totp is used
    the default HMAC-SHA1 is used, as before.
  - pam_oath: Mention in README that you shouldn't use insecure keys.
  - pam_oath: Check return value from strdup.
  - The files 'gdoc' and 'expect.oath' are now included in the tarball.</changelog>
  <changelog author="mardnh@gmx.de" date="1472472000">- Update to Version 2.6.2
  - no changes in upstream code
- Fix RPM groups for -devel packages
- build with libpskc on supported suse-versions
- Add patch:
  - 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch</changelog>
  <changelog author="dmarcoux@posteo.de" date="1516104000">- Add patch (last commit which changed source, not released in 2.6.2):
  - 0002-update_gnulibs_files.patch</changelog>
  <changelog author="ncutler@suse.com" date="1523448000">- use %license instead of %doc to package license-related files</changelog>
  <changelog author="ncutler@suse.com" date="1523448001">- bring License line into closer accordance with actual licenses
  mentioned in the tarball
- split off xml/pskc/ directory/files from liboath0 into a separate
  "oath-toolkit-xml" subpackage to prevent conflicts if two versions of the
  liboath library were ever installed at the same time</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Run spe-cleaner
- Drop useless conditions</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197790] -- FTBFS: oath-toolkit won't compile on SP4
- added patches
  part of https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/9b54ca84f92f4747751449aa645f07737b7bc7ea
  + 0003-update_gnulibs_files-fseeko.c.patch</changelog>
</package>
<package pkgid="6ffa56d92a35ad653e0818c9f5b93bd9d5629fe62c648eca851d74aff526bcea" name="pam_oath" arch="ppc64le">
  <version epoch="0" ver="2.6.2" rel="150000.3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1382529600">- Update to version 2.4.0:
  + liboath: Add new API methods for validating TOTP OTPs
- Changes from version 2.2.0:
  + libpskc: Add functions for setting PSKC data.
  + liboath: Permit different passwords for different tokens for
    the same user.
  + liboath: Make header file usable from C++ (extern "C" guard).
  + build: Improve building from git with most recent automake and
    gengetopt.
  + build: Valgrind is not enabled by default.
- Fix license: libraries are LGPL-2.1+ and everything else is
  GPL-3.0+. Also properly package the COPYING files.
- Prepare build libpskc, hidden under a %{build_pskc} define:
  + Add libxml2-devel and pkgconfig(xmlsec1) BuildRequires.
  + Create libpskc0 and libpskc-devel subpackages.
  + Define %{build_pskc} to 0 since we don't have libxmlsec1 yet.
- Rework summaries and descriptions.</changelog>
  <changelog author="darin@darins.net" date="1405080000">- Ran through spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1422100800">- Update to version 2.4.1:
  + liboath: Fix usersfile bug that caused it to update the wrong line.
    When an usersfile contain multiple lines for the same user but with an
    unparseable token type (e.g., HOTP vs TOTP), the code would update the
    wrong line of the file.  Since the then updated line could be a
    commented out line, this can lead to the same OTP being accepted
    multiple times which is a security vulnerability.  Reported by Bas van
    Schaik &lt;bas@sj-vs.net&gt; and patch provided by Ilkka Virta
    &lt;itvirta@iki.fi&gt;.  CVE-2013-7322</changelog>
  <changelog author="t.gruner@katodev.de" date="1441800000">- Update to Version 2.6.1 (released 2015-07-31)
  - liboath: Fix 'make check' on 32-bit systems.
- Version 2.6.0 (released 2015-05-19)
  - liboath: Support TOTP with HMAC-SHA256 and HMAC-SHA512.
    This adds new APIs oath_totp_generate2, oath_totp_validate4 and
    oath_totp_validate4_callback.
  - oathtool: The --totp parameter now take an optional argument to specify MAC.
    For example use --totp=sha256 to use HMAC-SHA256.  When --totp is used
    the default HMAC-SHA1 is used, as before.
  - pam_oath: Mention in README that you shouldn't use insecure keys.
  - pam_oath: Check return value from strdup.
  - The files 'gdoc' and 'expect.oath' are now included in the tarball.</changelog>
  <changelog author="mardnh@gmx.de" date="1472472000">- Update to Version 2.6.2
  - no changes in upstream code
- Fix RPM groups for -devel packages
- build with libpskc on supported suse-versions
- Add patch:
  - 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch</changelog>
  <changelog author="dmarcoux@posteo.de" date="1516104000">- Add patch (last commit which changed source, not released in 2.6.2):
  - 0002-update_gnulibs_files.patch</changelog>
  <changelog author="ncutler@suse.com" date="1523448000">- use %license instead of %doc to package license-related files</changelog>
  <changelog author="ncutler@suse.com" date="1523448001">- bring License line into closer accordance with actual licenses
  mentioned in the tarball
- split off xml/pskc/ directory/files from liboath0 into a separate
  "oath-toolkit-xml" subpackage to prevent conflicts if two versions of the
  liboath library were ever installed at the same time</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Run spe-cleaner
- Drop useless conditions</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197790] -- FTBFS: oath-toolkit won't compile on SP4
- added patches
  part of https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/9b54ca84f92f4747751449aa645f07737b7bc7ea
  + 0003-update_gnulibs_files-fseeko.c.patch</changelog>
</package>
<package pkgid="0e0e4f04ef745c3493c6d3799dcac4564a2bf61d12de880d3256c917fbcaafa1" name="pam_oath" arch="s390x">
  <version epoch="0" ver="2.6.2" rel="150000.3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1382529600">- Update to version 2.4.0:
  + liboath: Add new API methods for validating TOTP OTPs
- Changes from version 2.2.0:
  + libpskc: Add functions for setting PSKC data.
  + liboath: Permit different passwords for different tokens for
    the same user.
  + liboath: Make header file usable from C++ (extern "C" guard).
  + build: Improve building from git with most recent automake and
    gengetopt.
  + build: Valgrind is not enabled by default.
- Fix license: libraries are LGPL-2.1+ and everything else is
  GPL-3.0+. Also properly package the COPYING files.
- Prepare build libpskc, hidden under a %{build_pskc} define:
  + Add libxml2-devel and pkgconfig(xmlsec1) BuildRequires.
  + Create libpskc0 and libpskc-devel subpackages.
  + Define %{build_pskc} to 0 since we don't have libxmlsec1 yet.
- Rework summaries and descriptions.</changelog>
  <changelog author="darin@darins.net" date="1405080000">- Ran through spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1422100800">- Update to version 2.4.1:
  + liboath: Fix usersfile bug that caused it to update the wrong line.
    When an usersfile contain multiple lines for the same user but with an
    unparseable token type (e.g., HOTP vs TOTP), the code would update the
    wrong line of the file.  Since the then updated line could be a
    commented out line, this can lead to the same OTP being accepted
    multiple times which is a security vulnerability.  Reported by Bas van
    Schaik &lt;bas@sj-vs.net&gt; and patch provided by Ilkka Virta
    &lt;itvirta@iki.fi&gt;.  CVE-2013-7322</changelog>
  <changelog author="t.gruner@katodev.de" date="1441800000">- Update to Version 2.6.1 (released 2015-07-31)
  - liboath: Fix 'make check' on 32-bit systems.
- Version 2.6.0 (released 2015-05-19)
  - liboath: Support TOTP with HMAC-SHA256 and HMAC-SHA512.
    This adds new APIs oath_totp_generate2, oath_totp_validate4 and
    oath_totp_validate4_callback.
  - oathtool: The --totp parameter now take an optional argument to specify MAC.
    For example use --totp=sha256 to use HMAC-SHA256.  When --totp is used
    the default HMAC-SHA1 is used, as before.
  - pam_oath: Mention in README that you shouldn't use insecure keys.
  - pam_oath: Check return value from strdup.
  - The files 'gdoc' and 'expect.oath' are now included in the tarball.</changelog>
  <changelog author="mardnh@gmx.de" date="1472472000">- Update to Version 2.6.2
  - no changes in upstream code
- Fix RPM groups for -devel packages
- build with libpskc on supported suse-versions
- Add patch:
  - 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch</changelog>
  <changelog author="dmarcoux@posteo.de" date="1516104000">- Add patch (last commit which changed source, not released in 2.6.2):
  - 0002-update_gnulibs_files.patch</changelog>
  <changelog author="ncutler@suse.com" date="1523448000">- use %license instead of %doc to package license-related files</changelog>
  <changelog author="ncutler@suse.com" date="1523448001">- bring License line into closer accordance with actual licenses
  mentioned in the tarball
- split off xml/pskc/ directory/files from liboath0 into a separate
  "oath-toolkit-xml" subpackage to prevent conflicts if two versions of the
  liboath library were ever installed at the same time</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Run spe-cleaner
- Drop useless conditions</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197790] -- FTBFS: oath-toolkit won't compile on SP4
- added patches
  part of https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/9b54ca84f92f4747751449aa645f07737b7bc7ea
  + 0003-update_gnulibs_files-fseeko.c.patch</changelog>
</package>
<package pkgid="c603964287f84bd934b61f89d22c1a25c79b48ef4748d2dac3e9c3dabfa96def" name="pam_oath" arch="x86_64">
  <version epoch="0" ver="2.6.2" rel="150000.3.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1382529600">- Update to version 2.4.0:
  + liboath: Add new API methods for validating TOTP OTPs
- Changes from version 2.2.0:
  + libpskc: Add functions for setting PSKC data.
  + liboath: Permit different passwords for different tokens for
    the same user.
  + liboath: Make header file usable from C++ (extern "C" guard).
  + build: Improve building from git with most recent automake and
    gengetopt.
  + build: Valgrind is not enabled by default.
- Fix license: libraries are LGPL-2.1+ and everything else is
  GPL-3.0+. Also properly package the COPYING files.
- Prepare build libpskc, hidden under a %{build_pskc} define:
  + Add libxml2-devel and pkgconfig(xmlsec1) BuildRequires.
  + Create libpskc0 and libpskc-devel subpackages.
  + Define %{build_pskc} to 0 since we don't have libxmlsec1 yet.
- Rework summaries and descriptions.</changelog>
  <changelog author="darin@darins.net" date="1405080000">- Ran through spec-cleaner</changelog>
  <changelog author="mardnh@gmx.de" date="1422100800">- Update to version 2.4.1:
  + liboath: Fix usersfile bug that caused it to update the wrong line.
    When an usersfile contain multiple lines for the same user but with an
    unparseable token type (e.g., HOTP vs TOTP), the code would update the
    wrong line of the file.  Since the then updated line could be a
    commented out line, this can lead to the same OTP being accepted
    multiple times which is a security vulnerability.  Reported by Bas van
    Schaik &lt;bas@sj-vs.net&gt; and patch provided by Ilkka Virta
    &lt;itvirta@iki.fi&gt;.  CVE-2013-7322</changelog>
  <changelog author="t.gruner@katodev.de" date="1441800000">- Update to Version 2.6.1 (released 2015-07-31)
  - liboath: Fix 'make check' on 32-bit systems.
- Version 2.6.0 (released 2015-05-19)
  - liboath: Support TOTP with HMAC-SHA256 and HMAC-SHA512.
    This adds new APIs oath_totp_generate2, oath_totp_validate4 and
    oath_totp_validate4_callback.
  - oathtool: The --totp parameter now take an optional argument to specify MAC.
    For example use --totp=sha256 to use HMAC-SHA256.  When --totp is used
    the default HMAC-SHA1 is used, as before.
  - pam_oath: Mention in README that you shouldn't use insecure keys.
  - pam_oath: Check return value from strdup.
  - The files 'gdoc' and 'expect.oath' are now included in the tarball.</changelog>
  <changelog author="mardnh@gmx.de" date="1472472000">- Update to Version 2.6.2
  - no changes in upstream code
- Fix RPM groups for -devel packages
- build with libpskc on supported suse-versions
- Add patch:
  - 0001-Fix-no-return-in-nonvoid-function-errors-reported-by.patch</changelog>
  <changelog author="dmarcoux@posteo.de" date="1516104000">- Add patch (last commit which changed source, not released in 2.6.2):
  - 0002-update_gnulibs_files.patch</changelog>
  <changelog author="ncutler@suse.com" date="1523448000">- use %license instead of %doc to package license-related files</changelog>
  <changelog author="ncutler@suse.com" date="1523448001">- bring License line into closer accordance with actual licenses
  mentioned in the tarball
- split off xml/pskc/ directory/files from liboath0 into a separate
  "oath-toolkit-xml" subpackage to prevent conflicts if two versions of the
  liboath library were ever installed at the same time</changelog>
  <changelog author="mpluskal@suse.com" date="1523620800">- Run spe-cleaner
- Drop useless conditions</changelog>
  <changelog author="pgajdos@suse.com" date="1649851200">- fix [bsc#1197790] -- FTBFS: oath-toolkit won't compile on SP4
- added patches
  part of https://gitlab.com/oath-toolkit/oath-toolkit/-/commit/9b54ca84f92f4747751449aa645f07737b7bc7ea
  + 0003-update_gnulibs_files-fseeko.c.patch</changelog>
</package>
<package pkgid="d2a4d72a7a4df5d67f3b75ffc6889c584f03cbb189e9457d671114fa2a61f251" name="pangomm1_4" arch="src">
  <version epoch="0" ver="2.42.0" rel="150200.3.2.1"/>
  <changelog author="dimstar@opensuse.org" date="1304078400">- Update to version 2.28.2:
  + bgo#645669: Install the m4 files even without
  - -enable-maintainer-mode, as with other modules.
- Use source services: download_url and set_version.</changelog>
  <changelog author="vuntz@opensuse.org" date="1310040000">- Stop using source service to download the tarball, as Factory
  will move away from this.</changelog>
  <changelog author="vuntz@opensuse.org" date="1317124800">- Update to version 2.28.3:
  + Build
  - Ship convert_pangomm.m4 in tarballs (bgo#657817).
  - Don't use obsolete macros.</changelog>
  <changelog author="vuntz@opensuse.org" date="1321358400">- Update to version 2.28.4:
  + Add #includes needed with the latest glibmm.</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="dimstar@opensuse.org" date="1367236800">- Update to version 2.34.0:
  + Remove the use of g_type_init() because it has been deprecated.</changelog>
  <changelog author="dimstar@opensuse.org" date="1423051200">- Update to version 2.35.1:
  + Context: Add get_serial().
  + FontMap: Add get_serial().
  + Layout: Add get_character_count() and get_serial().
  + Documentatoin: Update appearance to match recent glibmm and
    gtkmm.
  + Win32 MSVC 2008/2010 Build: Many updates and corrections.</changelog>
  <changelog author="dimstar@opensuse.org" date="1427198400">- Update to version 2.36.0:
  + No changes compared to 2.35.1.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437220800">- Update to version 2.37.1:
  + Use (and require) C++11.
  + Attribute: fix operator!= (bgo#751531).</changelog>
  <changelog author="zaitor@opensuse.org" date="1441368000">- Update to version 2.37.2:
  + Rebuilt with latest glibmm, whose gmmproc generates C++ move
    operations.
  + C++11: Mark all _CLASS_OPAQUE_REFCOUNTED classes as final.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443614400">- Update to version 2.38.1:
  + Regenerate with the latest glibmm.
- Changes from version 2.38.0:
  + MSVC build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448884800">- Update to version 2.39.1:
  + Renderer: Added get/set_alpha().
  + Attribute: Added create_attr_background_alpha() and
    create_attr_foreground_alpha().
  + Reduce the cairomm dependency back to 1.2.2 (bgo#755460).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459252800">- Update to version 2.40.0:
  + No major changes compared to 2.39.1.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 2.40.1:
  + C++11: Make all operator bool()s explicit.
  + Build: Fix silent builds (bgo#768797).</changelog>
  <changelog author="dimstar@opensuse.org" date="1480680000">- Rename to pangomm1_4 (1.4 referecing the ABI/API version). Legacy
  package to stay around, while pangomm gets a new ABI/API.</changelog>
  <changelog author="jengelh@inai.de" date="1480939200">- Rectify RPM groups and replace old macros.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543838400">- Update to version 2.42.0:
  + Attribute: Add several create_attr_*() methods.
  + FontDescription: Add set/get_variations().
- Changes from version 2.40.2:
  + Build: Replace the Visual Studio project files with MSVC NMake
    project files.</changelog>
</package>
<package pkgid="59bc6e1985bc2fd594b88632d20db07deab75fe2722ba0fd8090ea43f9f0ca49" name="pangomm1_4-doc" arch="aarch64">
  <version epoch="0" ver="2.42.0" rel="150200.3.2.1"/>
  <changelog author="dimstar@opensuse.org" date="1423051200">- Update to version 2.35.1:
  + Context: Add get_serial().
  + FontMap: Add get_serial().
  + Layout: Add get_character_count() and get_serial().
  + Documentatoin: Update appearance to match recent glibmm and
    gtkmm.
  + Win32 MSVC 2008/2010 Build: Many updates and corrections.</changelog>
  <changelog author="dimstar@opensuse.org" date="1427198400">- Update to version 2.36.0:
  + No changes compared to 2.35.1.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437220800">- Update to version 2.37.1:
  + Use (and require) C++11.
  + Attribute: fix operator!= (bgo#751531).</changelog>
  <changelog author="zaitor@opensuse.org" date="1441368000">- Update to version 2.37.2:
  + Rebuilt with latest glibmm, whose gmmproc generates C++ move
    operations.
  + C++11: Mark all _CLASS_OPAQUE_REFCOUNTED classes as final.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443614400">- Update to version 2.38.1:
  + Regenerate with the latest glibmm.
- Changes from version 2.38.0:
  + MSVC build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448884800">- Update to version 2.39.1:
  + Renderer: Added get/set_alpha().
  + Attribute: Added create_attr_background_alpha() and
    create_attr_foreground_alpha().
  + Reduce the cairomm dependency back to 1.2.2 (bgo#755460).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459252800">- Update to version 2.40.0:
  + No major changes compared to 2.39.1.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 2.40.1:
  + C++11: Make all operator bool()s explicit.
  + Build: Fix silent builds (bgo#768797).</changelog>
  <changelog author="dimstar@opensuse.org" date="1480680000">- Rename to pangomm1_4 (1.4 referecing the ABI/API version). Legacy
  package to stay around, while pangomm gets a new ABI/API.</changelog>
  <changelog author="jengelh@inai.de" date="1480939200">- Rectify RPM groups and replace old macros.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543838400">- Update to version 2.42.0:
  + Attribute: Add several create_attr_*() methods.
  + FontDescription: Add set/get_variations().
- Changes from version 2.40.2:
  + Build: Replace the Visual Studio project files with MSVC NMake
    project files.</changelog>
</package>
<package pkgid="571f382ffe876064f3947dd1d5242eed6151d68512701b0d5e21ea3b3e31bd4f" name="pangomm1_4-doc" arch="ppc64le">
  <version epoch="0" ver="2.42.0" rel="150200.3.2.1"/>
  <changelog author="dimstar@opensuse.org" date="1423051200">- Update to version 2.35.1:
  + Context: Add get_serial().
  + FontMap: Add get_serial().
  + Layout: Add get_character_count() and get_serial().
  + Documentatoin: Update appearance to match recent glibmm and
    gtkmm.
  + Win32 MSVC 2008/2010 Build: Many updates and corrections.</changelog>
  <changelog author="dimstar@opensuse.org" date="1427198400">- Update to version 2.36.0:
  + No changes compared to 2.35.1.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437220800">- Update to version 2.37.1:
  + Use (and require) C++11.
  + Attribute: fix operator!= (bgo#751531).</changelog>
  <changelog author="zaitor@opensuse.org" date="1441368000">- Update to version 2.37.2:
  + Rebuilt with latest glibmm, whose gmmproc generates C++ move
    operations.
  + C++11: Mark all _CLASS_OPAQUE_REFCOUNTED classes as final.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443614400">- Update to version 2.38.1:
  + Regenerate with the latest glibmm.
- Changes from version 2.38.0:
  + MSVC build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448884800">- Update to version 2.39.1:
  + Renderer: Added get/set_alpha().
  + Attribute: Added create_attr_background_alpha() and
    create_attr_foreground_alpha().
  + Reduce the cairomm dependency back to 1.2.2 (bgo#755460).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459252800">- Update to version 2.40.0:
  + No major changes compared to 2.39.1.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 2.40.1:
  + C++11: Make all operator bool()s explicit.
  + Build: Fix silent builds (bgo#768797).</changelog>
  <changelog author="dimstar@opensuse.org" date="1480680000">- Rename to pangomm1_4 (1.4 referecing the ABI/API version). Legacy
  package to stay around, while pangomm gets a new ABI/API.</changelog>
  <changelog author="jengelh@inai.de" date="1480939200">- Rectify RPM groups and replace old macros.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543838400">- Update to version 2.42.0:
  + Attribute: Add several create_attr_*() methods.
  + FontDescription: Add set/get_variations().
- Changes from version 2.40.2:
  + Build: Replace the Visual Studio project files with MSVC NMake
    project files.</changelog>
</package>
<package pkgid="1183502344dc7befe0711bdd47662789ac47fc0317dfe25681b4ec445fd842b7" name="pangomm1_4-doc" arch="s390x">
  <version epoch="0" ver="2.42.0" rel="150200.3.2.1"/>
  <changelog author="dimstar@opensuse.org" date="1423051200">- Update to version 2.35.1:
  + Context: Add get_serial().
  + FontMap: Add get_serial().
  + Layout: Add get_character_count() and get_serial().
  + Documentatoin: Update appearance to match recent glibmm and
    gtkmm.
  + Win32 MSVC 2008/2010 Build: Many updates and corrections.</changelog>
  <changelog author="dimstar@opensuse.org" date="1427198400">- Update to version 2.36.0:
  + No changes compared to 2.35.1.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437220800">- Update to version 2.37.1:
  + Use (and require) C++11.
  + Attribute: fix operator!= (bgo#751531).</changelog>
  <changelog author="zaitor@opensuse.org" date="1441368000">- Update to version 2.37.2:
  + Rebuilt with latest glibmm, whose gmmproc generates C++ move
    operations.
  + C++11: Mark all _CLASS_OPAQUE_REFCOUNTED classes as final.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443614400">- Update to version 2.38.1:
  + Regenerate with the latest glibmm.
- Changes from version 2.38.0:
  + MSVC build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448884800">- Update to version 2.39.1:
  + Renderer: Added get/set_alpha().
  + Attribute: Added create_attr_background_alpha() and
    create_attr_foreground_alpha().
  + Reduce the cairomm dependency back to 1.2.2 (bgo#755460).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459252800">- Update to version 2.40.0:
  + No major changes compared to 2.39.1.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 2.40.1:
  + C++11: Make all operator bool()s explicit.
  + Build: Fix silent builds (bgo#768797).</changelog>
  <changelog author="dimstar@opensuse.org" date="1480680000">- Rename to pangomm1_4 (1.4 referecing the ABI/API version). Legacy
  package to stay around, while pangomm gets a new ABI/API.</changelog>
  <changelog author="jengelh@inai.de" date="1480939200">- Rectify RPM groups and replace old macros.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543838400">- Update to version 2.42.0:
  + Attribute: Add several create_attr_*() methods.
  + FontDescription: Add set/get_variations().
- Changes from version 2.40.2:
  + Build: Replace the Visual Studio project files with MSVC NMake
    project files.</changelog>
</package>
<package pkgid="c89f3166d9686e3449a9e3dd200360dff77bebd2d150323683cb9ddeab4779a3" name="pangomm1_4-doc" arch="x86_64">
  <version epoch="0" ver="2.42.0" rel="150200.3.2.1"/>
  <changelog author="dimstar@opensuse.org" date="1423051200">- Update to version 2.35.1:
  + Context: Add get_serial().
  + FontMap: Add get_serial().
  + Layout: Add get_character_count() and get_serial().
  + Documentatoin: Update appearance to match recent glibmm and
    gtkmm.
  + Win32 MSVC 2008/2010 Build: Many updates and corrections.</changelog>
  <changelog author="dimstar@opensuse.org" date="1427198400">- Update to version 2.36.0:
  + No changes compared to 2.35.1.</changelog>
  <changelog author="zaitor@opensuse.org" date="1437220800">- Update to version 2.37.1:
  + Use (and require) C++11.
  + Attribute: fix operator!= (bgo#751531).</changelog>
  <changelog author="zaitor@opensuse.org" date="1441368000">- Update to version 2.37.2:
  + Rebuilt with latest glibmm, whose gmmproc generates C++ move
    operations.
  + C++11: Mark all _CLASS_OPAQUE_REFCOUNTED classes as final.</changelog>
  <changelog author="zaitor@opensuse.org" date="1443614400">- Update to version 2.38.1:
  + Regenerate with the latest glibmm.
- Changes from version 2.38.0:
  + MSVC build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1448884800">- Update to version 2.39.1:
  + Renderer: Added get/set_alpha().
  + Attribute: Added create_attr_background_alpha() and
    create_attr_foreground_alpha().
  + Reduce the cairomm dependency back to 1.2.2 (bgo#755460).</changelog>
  <changelog author="zaitor@opensuse.org" date="1459252800">- Update to version 2.40.0:
  + No major changes compared to 2.39.1.</changelog>
  <changelog author="mgorse@suse.com" date="1460721600">- Update to GNOME 3.20  Fate#318572</changelog>
  <changelog author="zaitor@opensuse.org" date="1471608000">- Update to version 2.40.1:
  + C++11: Make all operator bool()s explicit.
  + Build: Fix silent builds (bgo#768797).</changelog>
  <changelog author="dimstar@opensuse.org" date="1480680000">- Rename to pangomm1_4 (1.4 referecing the ABI/API version). Legacy
  package to stay around, while pangomm gets a new ABI/API.</changelog>
  <changelog author="jengelh@inai.de" date="1480939200">- Rectify RPM groups and replace old macros.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543838400">- Update to version 2.42.0:
  + Attribute: Add several create_attr_*() methods.
  + FontDescription: Add set/get_variations().
- Changes from version 2.40.2:
  + Build: Replace the Visual Studio project files with MSVC NMake
    project files.</changelog>
</package>
<package pkgid="fb073bbb254b32bb4e4a06306932eef458a5ca3b0c54efacdf9e0df7a26e8c4b" name="patch" arch="aarch64">
  <version epoch="0" ver="2.7.6" rel="150000.5.3.1"/>
  <changelog author="jdelvare@suse.de" date="1415620800">- reject-print-function-01-drop-useless-test.patch: Drop useless
  test in another_hunk().
- reject-print-function-02-handle-unified-format.patch: Preserve C
  function name in unified rejects (bnc#904519).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422014400">- patch 2.7.3
  Contains a security fix for a directory traversal flaw when
  handling git-style patches. This could allow an attacker to
  overwrite arbitrary files by applying a specially crafted patch.
  [boo#913678] [CVE-2015-1196]
  + With git-style patches, symlinks that point outside the working
    directory will no longer be created (CVE-2015-1196).
  + When a file isn't being deleted because the file contents don't
    match the patch, the resulting message is now "Not deleting
    file ... as content differs from patch" instead of "File ...
    is not empty after patch; not deleting".
  + Function names in hunks (from diff -p) are now preserved in
    reject files
    This change was previously added as a patch. [boo#904519]
- Version 2.7.2 differed from the above only slightly.
- packaging changes:
  + Verify source signatures
  + Removed patches now upstream:
  * error-report-crash.patch
  * reject-print-function-01-drop-useless-test.patch
  * reject-print-function-02-handle-unified-format.patch
  + run spec-cleaner</changelog>
  <changelog author="jdelvare@suse.de" date="1424088000">- patch 2.7.4
  Fixes a functional regression introduced by the previous security
  fix. The security fix would forbid legitimate use cases of
  relative symbolic links.
  [boo#918058]
  + Allow arbitrary symlink targets again.
  + Do not change permissions if there isn't an explicit mode
    change.
  + Fix indentation heuristic for context diffs.
- Please also note that the previous update fixed security bugs
  boo#915328 and boo#915329 even though it did not say so.</changelog>
  <changelog author="jdelvare@suse.de" date="1425729600">- patch 2.7.5
  Fixes a functional regression introduced by the previous update.
  + Patching through symbolic links works again, as long as the
    target is within the working tree.</changelog>
  <changelog author="astieger@suse.com" date="1518004800">- patch 2.7.6:
  * Files specified on the command line are no longer verified to
    be inside the current working directory, so commands like
    "patch -i foo.diff ../foo" will work again
  * Fixes CVE-2016-10713 (Out-of-bounds access within
    pch_write_line() in pch.c could possibly lead to DoS via a
    crafted input file; bsc#1080918)
  * Various fixes</changelog>
  <changelog author="jdelvare@suse.de" date="1521633600">- Add AUTHORS and COPYING to %doc.
- fix-segfault-mangled-rename.patch: Fix segfault with mangled
  rename patch (bsc#1080951, CVE-2018-6951, savannah#53132).</changelog>
  <changelog author="jdelvare@suse.de" date="1521720000">- Move COPYING from %doc to %license.</changelog>
  <changelog author="jdelvare@suse.de" date="1524052800">Fix CVE-2018-1000156 (bsc#1088420, savannah#53566).
- ed-style-01-missing-input-files.patch: Allow input files to be
  missing for ed-style patches.
- ed-style-02-fix-arbitrary-command-execution.patch,
  ed-style-03-update-test-Makefile.patch: Fix arbitrary command
  execution in ed-style patches.
- ed-style-04-invoke-ed-directly.patch: Invoke ed directly instead
  of using the shell.
- ed-style-05-minor-cleanups.patch: Minor cleanups in do_ed_script.
- ed-style-06-fix-test-failure.patch: Fix 'ed-style' test failure.</changelog>
  <changelog author="jdelvare@suse.de" date="1524052801">- Add ed as BuildRequires so ed-style patches can be checked by
  the test suite.</changelog>
  <changelog author="jdelvare@suse.de" date="1525867200">- ed-style-07-dont-leak-tmp-file.patch,
  ed-style-08-dont-leak-tmp-file-multi.patch: Fix temporary file
  leak when applying ed-style patches (bsc#1092500,
  savannah#53820).</changelog>
  <changelog author="jdelvare@suse.de" date="1652184000">- fix-swapping-fake-lines-in-pch_swap.patch: Fix swapping fake
  lines in pch_swap. This bug was causing a double free leading to
  a crash (boo#1080985 CVE-2018-6952).
- abort-when-cleaning-up-fails.patch: Abort when cleaning up fails.
  This bug could cause an infinite loop when a patch wouldn't
  apply, leading to a segmentation fault (boo#1111572).
- dont-follow-symlinks-unless-asked.patch: Don't follow symlinks
  unless --follow-symlinks is given. This increases the security
  against malicious patches (boo#1142041 CVE-2019-13636).
- pass-the-correct-stat-to-backup-files.patch: Pass the correct
  stat to backup files. This bug would occasionally cause backup
  files to be missing when all hunks failed to apply (boo#1198106).</changelog>
</package>
<package pkgid="9e75976bd00e154798fc1c4917f18b1c97e66c58f3f07abf39d0f5227cc28c5d" name="patch" arch="ppc64le">
  <version epoch="0" ver="2.7.6" rel="150000.5.3.1"/>
  <changelog author="jdelvare@suse.de" date="1415620800">- reject-print-function-01-drop-useless-test.patch: Drop useless
  test in another_hunk().
- reject-print-function-02-handle-unified-format.patch: Preserve C
  function name in unified rejects (bnc#904519).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422014400">- patch 2.7.3
  Contains a security fix for a directory traversal flaw when
  handling git-style patches. This could allow an attacker to
  overwrite arbitrary files by applying a specially crafted patch.
  [boo#913678] [CVE-2015-1196]
  + With git-style patches, symlinks that point outside the working
    directory will no longer be created (CVE-2015-1196).
  + When a file isn't being deleted because the file contents don't
    match the patch, the resulting message is now "Not deleting
    file ... as content differs from patch" instead of "File ...
    is not empty after patch; not deleting".
  + Function names in hunks (from diff -p) are now preserved in
    reject files
    This change was previously added as a patch. [boo#904519]
- Version 2.7.2 differed from the above only slightly.
- packaging changes:
  + Verify source signatures
  + Removed patches now upstream:
  * error-report-crash.patch
  * reject-print-function-01-drop-useless-test.patch
  * reject-print-function-02-handle-unified-format.patch
  + run spec-cleaner</changelog>
  <changelog author="jdelvare@suse.de" date="1424088000">- patch 2.7.4
  Fixes a functional regression introduced by the previous security
  fix. The security fix would forbid legitimate use cases of
  relative symbolic links.
  [boo#918058]
  + Allow arbitrary symlink targets again.
  + Do not change permissions if there isn't an explicit mode
    change.
  + Fix indentation heuristic for context diffs.
- Please also note that the previous update fixed security bugs
  boo#915328 and boo#915329 even though it did not say so.</changelog>
  <changelog author="jdelvare@suse.de" date="1425729600">- patch 2.7.5
  Fixes a functional regression introduced by the previous update.
  + Patching through symbolic links works again, as long as the
    target is within the working tree.</changelog>
  <changelog author="astieger@suse.com" date="1518004800">- patch 2.7.6:
  * Files specified on the command line are no longer verified to
    be inside the current working directory, so commands like
    "patch -i foo.diff ../foo" will work again
  * Fixes CVE-2016-10713 (Out-of-bounds access within
    pch_write_line() in pch.c could possibly lead to DoS via a
    crafted input file; bsc#1080918)
  * Various fixes</changelog>
  <changelog author="jdelvare@suse.de" date="1521633600">- Add AUTHORS and COPYING to %doc.
- fix-segfault-mangled-rename.patch: Fix segfault with mangled
  rename patch (bsc#1080951, CVE-2018-6951, savannah#53132).</changelog>
  <changelog author="jdelvare@suse.de" date="1521720000">- Move COPYING from %doc to %license.</changelog>
  <changelog author="jdelvare@suse.de" date="1524052800">Fix CVE-2018-1000156 (bsc#1088420, savannah#53566).
- ed-style-01-missing-input-files.patch: Allow input files to be
  missing for ed-style patches.
- ed-style-02-fix-arbitrary-command-execution.patch,
  ed-style-03-update-test-Makefile.patch: Fix arbitrary command
  execution in ed-style patches.
- ed-style-04-invoke-ed-directly.patch: Invoke ed directly instead
  of using the shell.
- ed-style-05-minor-cleanups.patch: Minor cleanups in do_ed_script.
- ed-style-06-fix-test-failure.patch: Fix 'ed-style' test failure.</changelog>
  <changelog author="jdelvare@suse.de" date="1524052801">- Add ed as BuildRequires so ed-style patches can be checked by
  the test suite.</changelog>
  <changelog author="jdelvare@suse.de" date="1525867200">- ed-style-07-dont-leak-tmp-file.patch,
  ed-style-08-dont-leak-tmp-file-multi.patch: Fix temporary file
  leak when applying ed-style patches (bsc#1092500,
  savannah#53820).</changelog>
  <changelog author="jdelvare@suse.de" date="1652184000">- fix-swapping-fake-lines-in-pch_swap.patch: Fix swapping fake
  lines in pch_swap. This bug was causing a double free leading to
  a crash (boo#1080985 CVE-2018-6952).
- abort-when-cleaning-up-fails.patch: Abort when cleaning up fails.
  This bug could cause an infinite loop when a patch wouldn't
  apply, leading to a segmentation fault (boo#1111572).
- dont-follow-symlinks-unless-asked.patch: Don't follow symlinks
  unless --follow-symlinks is given. This increases the security
  against malicious patches (boo#1142041 CVE-2019-13636).
- pass-the-correct-stat-to-backup-files.patch: Pass the correct
  stat to backup files. This bug would occasionally cause backup
  files to be missing when all hunks failed to apply (boo#1198106).</changelog>
</package>
<package pkgid="1fc21b15e79c0070ed199081b90d9f23b4666ff1926b94033c9cec2e5aa8a097" name="patch" arch="s390x">
  <version epoch="0" ver="2.7.6" rel="150000.5.3.1"/>
  <changelog author="jdelvare@suse.de" date="1415620800">- reject-print-function-01-drop-useless-test.patch: Drop useless
  test in another_hunk().
- reject-print-function-02-handle-unified-format.patch: Preserve C
  function name in unified rejects (bnc#904519).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422014400">- patch 2.7.3
  Contains a security fix for a directory traversal flaw when
  handling git-style patches. This could allow an attacker to
  overwrite arbitrary files by applying a specially crafted patch.
  [boo#913678] [CVE-2015-1196]
  + With git-style patches, symlinks that point outside the working
    directory will no longer be created (CVE-2015-1196).
  + When a file isn't being deleted because the file contents don't
    match the patch, the resulting message is now "Not deleting
    file ... as content differs from patch" instead of "File ...
    is not empty after patch; not deleting".
  + Function names in hunks (from diff -p) are now preserved in
    reject files
    This change was previously added as a patch. [boo#904519]
- Version 2.7.2 differed from the above only slightly.
- packaging changes:
  + Verify source signatures
  + Removed patches now upstream:
  * error-report-crash.patch
  * reject-print-function-01-drop-useless-test.patch
  * reject-print-function-02-handle-unified-format.patch
  + run spec-cleaner</changelog>
  <changelog author="jdelvare@suse.de" date="1424088000">- patch 2.7.4
  Fixes a functional regression introduced by the previous security
  fix. The security fix would forbid legitimate use cases of
  relative symbolic links.
  [boo#918058]
  + Allow arbitrary symlink targets again.
  + Do not change permissions if there isn't an explicit mode
    change.
  + Fix indentation heuristic for context diffs.
- Please also note that the previous update fixed security bugs
  boo#915328 and boo#915329 even though it did not say so.</changelog>
  <changelog author="jdelvare@suse.de" date="1425729600">- patch 2.7.5
  Fixes a functional regression introduced by the previous update.
  + Patching through symbolic links works again, as long as the
    target is within the working tree.</changelog>
  <changelog author="astieger@suse.com" date="1518004800">- patch 2.7.6:
  * Files specified on the command line are no longer verified to
    be inside the current working directory, so commands like
    "patch -i foo.diff ../foo" will work again
  * Fixes CVE-2016-10713 (Out-of-bounds access within
    pch_write_line() in pch.c could possibly lead to DoS via a
    crafted input file; bsc#1080918)
  * Various fixes</changelog>
  <changelog author="jdelvare@suse.de" date="1521633600">- Add AUTHORS and COPYING to %doc.
- fix-segfault-mangled-rename.patch: Fix segfault with mangled
  rename patch (bsc#1080951, CVE-2018-6951, savannah#53132).</changelog>
  <changelog author="jdelvare@suse.de" date="1521720000">- Move COPYING from %doc to %license.</changelog>
  <changelog author="jdelvare@suse.de" date="1524052800">Fix CVE-2018-1000156 (bsc#1088420, savannah#53566).
- ed-style-01-missing-input-files.patch: Allow input files to be
  missing for ed-style patches.
- ed-style-02-fix-arbitrary-command-execution.patch,
  ed-style-03-update-test-Makefile.patch: Fix arbitrary command
  execution in ed-style patches.
- ed-style-04-invoke-ed-directly.patch: Invoke ed directly instead
  of using the shell.
- ed-style-05-minor-cleanups.patch: Minor cleanups in do_ed_script.
- ed-style-06-fix-test-failure.patch: Fix 'ed-style' test failure.</changelog>
  <changelog author="jdelvare@suse.de" date="1524052801">- Add ed as BuildRequires so ed-style patches can be checked by
  the test suite.</changelog>
  <changelog author="jdelvare@suse.de" date="1525867200">- ed-style-07-dont-leak-tmp-file.patch,
  ed-style-08-dont-leak-tmp-file-multi.patch: Fix temporary file
  leak when applying ed-style patches (bsc#1092500,
  savannah#53820).</changelog>
  <changelog author="jdelvare@suse.de" date="1652184000">- fix-swapping-fake-lines-in-pch_swap.patch: Fix swapping fake
  lines in pch_swap. This bug was causing a double free leading to
  a crash (boo#1080985 CVE-2018-6952).
- abort-when-cleaning-up-fails.patch: Abort when cleaning up fails.
  This bug could cause an infinite loop when a patch wouldn't
  apply, leading to a segmentation fault (boo#1111572).
- dont-follow-symlinks-unless-asked.patch: Don't follow symlinks
  unless --follow-symlinks is given. This increases the security
  against malicious patches (boo#1142041 CVE-2019-13636).
- pass-the-correct-stat-to-backup-files.patch: Pass the correct
  stat to backup files. This bug would occasionally cause backup
  files to be missing when all hunks failed to apply (boo#1198106).</changelog>
</package>
<package pkgid="f869530c57997f382b64a6e30e16260749a2657f61370136c5d16e8ca468a69b" name="patch" arch="src">
  <version epoch="0" ver="2.7.6" rel="150000.5.3.1"/>
  <changelog author="jengelh@medozas.de" date="1278072000">- Use %_smp_mflags</changelog>
  <changelog author="jdelvare@suse.de" date="1301918400">- Version 2.6.1.116:
  + Patch now ignores destination file names that are absolute or
    that contain a component of ".." (CVE-2010-4651, bnc#662957).
- Drop unified-reject-files-compat.diff. Compatibility has been
  provided for the past 18 months, hopefully nobody is relying on
  it any longer.</changelog>
  <changelog author="uli@suse.com" date="1317816000">- cross-build fix: use %configure macro</changelog>
  <changelog author="jdelvare@suse.de" date="1333540800">- Version 2.6.1.136</changelog>
  <changelog author="jdelvare@suse.de" date="1333713600">- patch-revert-e0f70752.patch: Revert broken upstream commit
  (bnc#755136).</changelog>
  <changelog author="aj@suse.de" date="1342526400">- patch-stdio.in.patch:
  Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="jdelvare@suse.de" date="1354795200">- Version 2.7.1
  + Patch no longer gets a failed assertion for certain mangled
    patches.
  + Ignore destination file names that are absolute or that contain
    a component of "..", except when working in the root directory.
    This addresses CVE-2010-4651.
  + Support for most features of the "diff --git" format, including
    renames and copies, permission changes, and symlink diffs.
    Binary diffs are not supported yet; patch will complain and
    skip them.
  + Support for double-quoted filenames: when a filename starts
    with a double quote, it is interpreted as a C string literal.
    The escape sequences \\, \", \a, \b, \f, \n, \r, \t, \v, and
    \ooo (a three-digit octal number between 0 and 255) are
    recognized.
  + Refuse to apply a normal patch to a symlink. (Previous versions
    of patch were replacing the symlink with a regular file.)
  + New --follow-symlinks option to allow to treat symlinks as
    files: this was patch's behavior before version 2.7.
  + When trying to modify a read-only file, warn about the
    potential problem by default. The --read-only command line
    option allows to change this behavior.
  + Files to be deleted are deleted once the entire input has been
    processed, not immediately. This fixes a bug with numbered
    backup files.
  + When a timestamp specifies a time zone, honor that instead of
    assuming the local time zone (--set-date) or Universal
    Coordinated Time (--set-utc).
  + Support for nanosecond precision timestamps.
  + Many bug fixes.
  + Clarify the message printed when a patch is expected to empty
    out and delete a file, but the file does not become empty.
  + Various improvements to messages when applying a patch to a
    file of different type (regular file vs. symlink), when there
    are line ending differences (LF vs. CRLF), and when in
  - -dry-run mode.
  + Ignore when extended attributes cannot be preserved because
    they are unsupported or because permission to set them is
    denied.
- patch-revert-e0f70752.patch: Dropped, original bug fixed
  upstream.
- patch-stdio.in.patch: Dropped, merged upstream.</changelog>
  <changelog author="jdelvare@suse.de" date="1354795201">- Back to bz2 archive format as old products lack xz.</changelog>
  <changelog author="schwab@suse.de" date="1400587200">- error-report-crash.patch: fix crash after reporting error during option
  parsing</changelog>
  <changelog author="jdelvare@suse.de" date="1415620800">- reject-print-function-01-drop-useless-test.patch: Drop useless
  test in another_hunk().
- reject-print-function-02-handle-unified-format.patch: Preserve C
  function name in unified rejects (bnc#904519).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422014400">- patch 2.7.3
  Contains a security fix for a directory traversal flaw when
  handling git-style patches. This could allow an attacker to
  overwrite arbitrary files by applying a specially crafted patch.
  [boo#913678] [CVE-2015-1196]
  + With git-style patches, symlinks that point outside the working
    directory will no longer be created (CVE-2015-1196).
  + When a file isn't being deleted because the file contents don't
    match the patch, the resulting message is now "Not deleting
    file ... as content differs from patch" instead of "File ...
    is not empty after patch; not deleting".
  + Function names in hunks (from diff -p) are now preserved in
    reject files
    This change was previously added as a patch. [boo#904519]
- Version 2.7.2 differed from the above only slightly.
- packaging changes:
  + Verify source signatures
  + Removed patches now upstream:
  * error-report-crash.patch
  * reject-print-function-01-drop-useless-test.patch
  * reject-print-function-02-handle-unified-format.patch
  + run spec-cleaner</changelog>
  <changelog author="jdelvare@suse.de" date="1424088000">- patch 2.7.4
  Fixes a functional regression introduced by the previous security
  fix. The security fix would forbid legitimate use cases of
  relative symbolic links.
  [boo#918058]
  + Allow arbitrary symlink targets again.
  + Do not change permissions if there isn't an explicit mode
    change.
  + Fix indentation heuristic for context diffs.
- Please also note that the previous update fixed security bugs
  boo#915328 and boo#915329 even though it did not say so.</changelog>
  <changelog author="jdelvare@suse.de" date="1425729600">- patch 2.7.5
  Fixes a functional regression introduced by the previous update.
  + Patching through symbolic links works again, as long as the
    target is within the working tree.</changelog>
  <changelog author="astieger@suse.com" date="1518004800">- patch 2.7.6:
  * Files specified on the command line are no longer verified to
    be inside the current working directory, so commands like
    "patch -i foo.diff ../foo" will work again
  * Fixes CVE-2016-10713 (Out-of-bounds access within
    pch_write_line() in pch.c could possibly lead to DoS via a
    crafted input file; bsc#1080918)
  * Various fixes</changelog>
  <changelog author="jdelvare@suse.de" date="1521633600">- Add AUTHORS and COPYING to %doc.
- fix-segfault-mangled-rename.patch: Fix segfault with mangled
  rename patch (bsc#1080951, CVE-2018-6951, savannah#53132).</changelog>
  <changelog author="jdelvare@suse.de" date="1521720000">- Move COPYING from %doc to %license.</changelog>
  <changelog author="jdelvare@suse.de" date="1524052800">Fix CVE-2018-1000156 (bsc#1088420, savannah#53566).
- ed-style-01-missing-input-files.patch: Allow input files to be
  missing for ed-style patches.
- ed-style-02-fix-arbitrary-command-execution.patch,
  ed-style-03-update-test-Makefile.patch: Fix arbitrary command
  execution in ed-style patches.
- ed-style-04-invoke-ed-directly.patch: Invoke ed directly instead
  of using the shell.
- ed-style-05-minor-cleanups.patch: Minor cleanups in do_ed_script.
- ed-style-06-fix-test-failure.patch: Fix 'ed-style' test failure.</changelog>
  <changelog author="jdelvare@suse.de" date="1524052801">- Add ed as BuildRequires so ed-style patches can be checked by
  the test suite.</changelog>
  <changelog author="jdelvare@suse.de" date="1525867200">- ed-style-07-dont-leak-tmp-file.patch,
  ed-style-08-dont-leak-tmp-file-multi.patch: Fix temporary file
  leak when applying ed-style patches (bsc#1092500,
  savannah#53820).</changelog>
  <changelog author="jdelvare@suse.de" date="1652184000">- fix-swapping-fake-lines-in-pch_swap.patch: Fix swapping fake
  lines in pch_swap. This bug was causing a double free leading to
  a crash (boo#1080985 CVE-2018-6952).
- abort-when-cleaning-up-fails.patch: Abort when cleaning up fails.
  This bug could cause an infinite loop when a patch wouldn't
  apply, leading to a segmentation fault (boo#1111572).
- dont-follow-symlinks-unless-asked.patch: Don't follow symlinks
  unless --follow-symlinks is given. This increases the security
  against malicious patches (boo#1142041 CVE-2019-13636).
- pass-the-correct-stat-to-backup-files.patch: Pass the correct
  stat to backup files. This bug would occasionally cause backup
  files to be missing when all hunks failed to apply (boo#1198106).</changelog>
</package>
<package pkgid="faa26fe3f3bcca49f13f05ba7e8df299edcffc16a8e62c7678064740368b0572" name="patch" arch="x86_64">
  <version epoch="0" ver="2.7.6" rel="150000.5.3.1"/>
  <changelog author="jdelvare@suse.de" date="1415620800">- reject-print-function-01-drop-useless-test.patch: Drop useless
  test in another_hunk().
- reject-print-function-02-handle-unified-format.patch: Preserve C
  function name in unified rejects (bnc#904519).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422014400">- patch 2.7.3
  Contains a security fix for a directory traversal flaw when
  handling git-style patches. This could allow an attacker to
  overwrite arbitrary files by applying a specially crafted patch.
  [boo#913678] [CVE-2015-1196]
  + With git-style patches, symlinks that point outside the working
    directory will no longer be created (CVE-2015-1196).
  + When a file isn't being deleted because the file contents don't
    match the patch, the resulting message is now "Not deleting
    file ... as content differs from patch" instead of "File ...
    is not empty after patch; not deleting".
  + Function names in hunks (from diff -p) are now preserved in
    reject files
    This change was previously added as a patch. [boo#904519]
- Version 2.7.2 differed from the above only slightly.
- packaging changes:
  + Verify source signatures
  + Removed patches now upstream:
  * error-report-crash.patch
  * reject-print-function-01-drop-useless-test.patch
  * reject-print-function-02-handle-unified-format.patch
  + run spec-cleaner</changelog>
  <changelog author="jdelvare@suse.de" date="1424088000">- patch 2.7.4
  Fixes a functional regression introduced by the previous security
  fix. The security fix would forbid legitimate use cases of
  relative symbolic links.
  [boo#918058]
  + Allow arbitrary symlink targets again.
  + Do not change permissions if there isn't an explicit mode
    change.
  + Fix indentation heuristic for context diffs.
- Please also note that the previous update fixed security bugs
  boo#915328 and boo#915329 even though it did not say so.</changelog>
  <changelog author="jdelvare@suse.de" date="1425729600">- patch 2.7.5
  Fixes a functional regression introduced by the previous update.
  + Patching through symbolic links works again, as long as the
    target is within the working tree.</changelog>
  <changelog author="astieger@suse.com" date="1518004800">- patch 2.7.6:
  * Files specified on the command line are no longer verified to
    be inside the current working directory, so commands like
    "patch -i foo.diff ../foo" will work again
  * Fixes CVE-2016-10713 (Out-of-bounds access within
    pch_write_line() in pch.c could possibly lead to DoS via a
    crafted input file; bsc#1080918)
  * Various fixes</changelog>
  <changelog author="jdelvare@suse.de" date="1521633600">- Add AUTHORS and COPYING to %doc.
- fix-segfault-mangled-rename.patch: Fix segfault with mangled
  rename patch (bsc#1080951, CVE-2018-6951, savannah#53132).</changelog>
  <changelog author="jdelvare@suse.de" date="1521720000">- Move COPYING from %doc to %license.</changelog>
  <changelog author="jdelvare@suse.de" date="1524052800">Fix CVE-2018-1000156 (bsc#1088420, savannah#53566).
- ed-style-01-missing-input-files.patch: Allow input files to be
  missing for ed-style patches.
- ed-style-02-fix-arbitrary-command-execution.patch,
  ed-style-03-update-test-Makefile.patch: Fix arbitrary command
  execution in ed-style patches.
- ed-style-04-invoke-ed-directly.patch: Invoke ed directly instead
  of using the shell.
- ed-style-05-minor-cleanups.patch: Minor cleanups in do_ed_script.
- ed-style-06-fix-test-failure.patch: Fix 'ed-style' test failure.</changelog>
  <changelog author="jdelvare@suse.de" date="1524052801">- Add ed as BuildRequires so ed-style patches can be checked by
  the test suite.</changelog>
  <changelog author="jdelvare@suse.de" date="1525867200">- ed-style-07-dont-leak-tmp-file.patch,
  ed-style-08-dont-leak-tmp-file-multi.patch: Fix temporary file
  leak when applying ed-style patches (bsc#1092500,
  savannah#53820).</changelog>
  <changelog author="jdelvare@suse.de" date="1652184000">- fix-swapping-fake-lines-in-pch_swap.patch: Fix swapping fake
  lines in pch_swap. This bug was causing a double free leading to
  a crash (boo#1080985 CVE-2018-6952).
- abort-when-cleaning-up-fails.patch: Abort when cleaning up fails.
  This bug could cause an infinite loop when a patch wouldn't
  apply, leading to a segmentation fault (boo#1111572).
- dont-follow-symlinks-unless-asked.patch: Don't follow symlinks
  unless --follow-symlinks is given. This increases the security
  against malicious patches (boo#1142041 CVE-2019-13636).
- pass-the-correct-stat-to-backup-files.patch: Pass the correct
  stat to backup files. This bug would occasionally cause backup
  files to be missing when all hunks failed to apply (boo#1198106).</changelog>
</package>
<package pkgid="a7df1adc9c177dd8502b4ac38404ed2e8f5f1a57c32406f21fd12039a4ca211c" name="pcp" arch="src">
  <version epoch="0" ver="3.11.9" rel="150000.5.14.1"/>
  <changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
  <changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
  <changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
  <changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
  <changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
  <changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
  <changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
  <changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
  <changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
  <changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
  <changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>
  <changelog author="ddiss@suse.com" date="1504094401">- Enable QT5 builds for Factory (suse_version &gt; 1320); (bsc#1056477).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="ddiss@suse.com" date="1547553600">- Package missing PMDA binaries; (bsc#1121920).
  + refresh 0002-Install-libraries-without-exec-permission.patch
- Don't package pmns .NeedRebuild flag; (bsc#1092160).
  + add 0010-pmns-don-t-package-.NeedRebuild-for-SUSE-distros.patch</changelog>
  <changelog author="ddiss@suse.com" date="1548849600">- Replace openSUSE/sles-release build dependency; (bsc#1123311).</changelog>
  <changelog author="ddiss@suse.com" date="1548936000">- Drop distribution-release build dependency completely; (bsc#1123311).
  + modify 0010-pmns-don-t-package-.NeedRebuild-for-SUSE-distros.patch</changelog>
  <changelog author="ddiss@suse.com" date="1566993600">- Fix python library dependencies broken via shared library packaging policy
  split; (bsc#1129991).</changelog>
  <changelog author="ddiss@suse.com" date="1579867200">- Fix for security advisory CVE-2019-3696; (bsc#1153921)
  + build-remove-transitional-mechanism-for-old-releases.patch
- Fix for security advisory CVE-2019-3695; (bsc#1152763)
  + build-drop-old-config-file-transition-code-from-rpm-.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615636800">- include fixes to avoid building without sles-release package
  which does not exist on non-sle architectures (bsc#1181571)</changelog>
  <changelog author="pgajdos@suse.com" date="1650888000">- no source changes [bsc#1171883] (CVE-2020-8025)</changelog>
</package>
<package pkgid="4f536c5b63e5beda82d817e7b4920f2147b88e71386fbc0fd8239fb3e1e75fb1" name="pcp-pmda-kvm" arch="aarch64">
  <version epoch="0" ver="3.11.9" rel="150000.5.14.1"/>
  <changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
  <changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
  <changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
  <changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
  <changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
  <changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
  <changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
  <changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
  <changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
  <changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
  <changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>
  <changelog author="ddiss@suse.com" date="1504094401">- Enable QT5 builds for Factory (suse_version &gt; 1320); (bsc#1056477).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="ddiss@suse.com" date="1547553600">- Package missing PMDA binaries; (bsc#1121920).
  + refresh 0002-Install-libraries-without-exec-permission.patch
- Don't package pmns .NeedRebuild flag; (bsc#1092160).
  + add 0010-pmns-don-t-package-.NeedRebuild-for-SUSE-distros.patch</changelog>
  <changelog author="ddiss@suse.com" date="1548849600">- Replace openSUSE/sles-release build dependency; (bsc#1123311).</changelog>
  <changelog author="ddiss@suse.com" date="1548936000">- Drop distribution-release build dependency completely; (bsc#1123311).
  + modify 0010-pmns-don-t-package-.NeedRebuild-for-SUSE-distros.patch</changelog>
  <changelog author="ddiss@suse.com" date="1566993600">- Fix python library dependencies broken via shared library packaging policy
  split; (bsc#1129991).</changelog>
  <changelog author="ddiss@suse.com" date="1579867200">- Fix for security advisory CVE-2019-3696; (bsc#1153921)
  + build-remove-transitional-mechanism-for-old-releases.patch
- Fix for security advisory CVE-2019-3695; (bsc#1152763)
  + build-drop-old-config-file-transition-code-from-rpm-.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615636800">- include fixes to avoid building without sles-release package
  which does not exist on non-sle architectures (bsc#1181571)</changelog>
  <changelog author="pgajdos@suse.com" date="1650888000">- no source changes [bsc#1171883] (CVE-2020-8025)</changelog>
</package>
<package pkgid="2cb07ac777f408fef139f28b6a56390307d18264db5b0152b90ce758031412b8" name="pcp-pmda-kvm" arch="ppc64le">
  <version epoch="0" ver="3.11.9" rel="150000.5.14.1"/>
  <changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
  <changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
  <changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
  <changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
  <changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
  <changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
  <changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
  <changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
  <changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
  <changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
  <changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>
  <changelog author="ddiss@suse.com" date="1504094401">- Enable QT5 builds for Factory (suse_version &gt; 1320); (bsc#1056477).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="ddiss@suse.com" date="1547553600">- Package missing PMDA binaries; (bsc#1121920).
  + refresh 0002-Install-libraries-without-exec-permission.patch
- Don't package pmns .NeedRebuild flag; (bsc#1092160).
  + add 0010-pmns-don-t-package-.NeedRebuild-for-SUSE-distros.patch</changelog>
  <changelog author="ddiss@suse.com" date="1548849600">- Replace openSUSE/sles-release build dependency; (bsc#1123311).</changelog>
  <changelog author="ddiss@suse.com" date="1548936000">- Drop distribution-release build dependency completely; (bsc#1123311).
  + modify 0010-pmns-don-t-package-.NeedRebuild-for-SUSE-distros.patch</changelog>
  <changelog author="ddiss@suse.com" date="1566993600">- Fix python library dependencies broken via shared library packaging policy
  split; (bsc#1129991).</changelog>
  <changelog author="ddiss@suse.com" date="1579867200">- Fix for security advisory CVE-2019-3696; (bsc#1153921)
  + build-remove-transitional-mechanism-for-old-releases.patch
- Fix for security advisory CVE-2019-3695; (bsc#1152763)
  + build-drop-old-config-file-transition-code-from-rpm-.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615636800">- include fixes to avoid building without sles-release package
  which does not exist on non-sle architectures (bsc#1181571)</changelog>
  <changelog author="pgajdos@suse.com" date="1650888000">- no source changes [bsc#1171883] (CVE-2020-8025)</changelog>
</package>
<package pkgid="3df4716f941635876b05bfc76ea58f767362cff4547a58082a634763e5feeb49" name="pcp-pmda-kvm" arch="s390x">
  <version epoch="0" ver="3.11.9" rel="150000.5.14.1"/>
  <changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
  <changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
  <changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
  <changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
  <changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
  <changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
  <changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
  <changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
  <changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
  <changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
  <changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>
  <changelog author="ddiss@suse.com" date="1504094401">- Enable QT5 builds for Factory (suse_version &gt; 1320); (bsc#1056477).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="ddiss@suse.com" date="1547553600">- Package missing PMDA binaries; (bsc#1121920).
  + refresh 0002-Install-libraries-without-exec-permission.patch
- Don't package pmns .NeedRebuild flag; (bsc#1092160).
  + add 0010-pmns-don-t-package-.NeedRebuild-for-SUSE-distros.patch</changelog>
  <changelog author="ddiss@suse.com" date="1548849600">- Replace openSUSE/sles-release build dependency; (bsc#1123311).</changelog>
  <changelog author="ddiss@suse.com" date="1548936000">- Drop distribution-release build dependency completely; (bsc#1123311).
  + modify 0010-pmns-don-t-package-.NeedRebuild-for-SUSE-distros.patch</changelog>
  <changelog author="ddiss@suse.com" date="1566993600">- Fix python library dependencies broken via shared library packaging policy
  split; (bsc#1129991).</changelog>
  <changelog author="ddiss@suse.com" date="1579867200">- Fix for security advisory CVE-2019-3696; (bsc#1153921)
  + build-remove-transitional-mechanism-for-old-releases.patch
- Fix for security advisory CVE-2019-3695; (bsc#1152763)
  + build-drop-old-config-file-transition-code-from-rpm-.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615636800">- include fixes to avoid building without sles-release package
  which does not exist on non-sle architectures (bsc#1181571)</changelog>
  <changelog author="pgajdos@suse.com" date="1650888000">- no source changes [bsc#1171883] (CVE-2020-8025)</changelog>
</package>
<package pkgid="a68c382a0ce12aaff2b7f4453bf2f9508d94e1591bba68ae1abfeee7347cb8aa" name="pcp-pmda-kvm" arch="x86_64">
  <version epoch="0" ver="3.11.9" rel="150000.5.14.1"/>
  <changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
  <changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
  <changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
  <changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
  <changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
  <changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
  <changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
  <changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
  <changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
  <changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
  <changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>
  <changelog author="ddiss@suse.com" date="1504094401">- Enable QT5 builds for Factory (suse_version &gt; 1320); (bsc#1056477).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="ddiss@suse.com" date="1547553600">- Package missing PMDA binaries; (bsc#1121920).
  + refresh 0002-Install-libraries-without-exec-permission.patch
- Don't package pmns .NeedRebuild flag; (bsc#1092160).
  + add 0010-pmns-don-t-package-.NeedRebuild-for-SUSE-distros.patch</changelog>
  <changelog author="ddiss@suse.com" date="1548849600">- Replace openSUSE/sles-release build dependency; (bsc#1123311).</changelog>
  <changelog author="ddiss@suse.com" date="1548936000">- Drop distribution-release build dependency completely; (bsc#1123311).
  + modify 0010-pmns-don-t-package-.NeedRebuild-for-SUSE-distros.patch</changelog>
  <changelog author="ddiss@suse.com" date="1566993600">- Fix python library dependencies broken via shared library packaging policy
  split; (bsc#1129991).</changelog>
  <changelog author="ddiss@suse.com" date="1579867200">- Fix for security advisory CVE-2019-3696; (bsc#1153921)
  + build-remove-transitional-mechanism-for-old-releases.patch
- Fix for security advisory CVE-2019-3695; (bsc#1152763)
  + build-drop-old-config-file-transition-code-from-rpm-.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615636800">- include fixes to avoid building without sles-release package
  which does not exist on non-sle architectures (bsc#1181571)</changelog>
  <changelog author="pgajdos@suse.com" date="1650888000">- no source changes [bsc#1171883] (CVE-2020-8025)</changelog>
</package>
<package pkgid="af61bb1ee3b092135a7eb2858c855988a126ed3cfa99236ee3850763ef14bbab" name="pcp-pmda-postgresql" arch="aarch64">
  <version epoch="0" ver="3.11.9" rel="150000.5.14.1"/>
  <changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
  <changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
  <changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
  <changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
  <changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
  <changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
  <changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
  <changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
  <changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
  <changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
  <changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>
  <changelog author="ddiss@suse.com" date="1504094401">- Enable QT5 builds for Factory (suse_version &gt; 1320); (bsc#1056477).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="ddiss@suse.com" date="1547553600">- Package missing PMDA binaries; (bsc#1121920).
  + refresh 0002-Install-libraries-without-exec-permission.patch
- Don't package pmns .NeedRebuild flag; (bsc#1092160).
  + add 0010-pmns-don-t-package-.NeedRebuild-for-SUSE-distros.patch</changelog>
  <changelog author="ddiss@suse.com" date="1548849600">- Replace openSUSE/sles-release build dependency; (bsc#1123311).</changelog>
  <changelog author="ddiss@suse.com" date="1548936000">- Drop distribution-release build dependency completely; (bsc#1123311).
  + modify 0010-pmns-don-t-package-.NeedRebuild-for-SUSE-distros.patch</changelog>
  <changelog author="ddiss@suse.com" date="1566993600">- Fix python library dependencies broken via shared library packaging policy
  split; (bsc#1129991).</changelog>
  <changelog author="ddiss@suse.com" date="1579867200">- Fix for security advisory CVE-2019-3696; (bsc#1153921)
  + build-remove-transitional-mechanism-for-old-releases.patch
- Fix for security advisory CVE-2019-3695; (bsc#1152763)
  + build-drop-old-config-file-transition-code-from-rpm-.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615636800">- include fixes to avoid building without sles-release package
  which does not exist on non-sle architectures (bsc#1181571)</changelog>
  <changelog author="pgajdos@suse.com" date="1650888000">- no source changes [bsc#1171883] (CVE-2020-8025)</changelog>
</package>
<package pkgid="47d0fb1331823305fcd2871b1f777ee9feb4a97a1f44cc76b8170702b2acbf68" name="pcp-pmda-postgresql" arch="ppc64le">
  <version epoch="0" ver="3.11.9" rel="150000.5.14.1"/>
  <changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
  <changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
  <changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
  <changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
  <changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
  <changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
  <changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
  <changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
  <changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
  <changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
  <changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>
  <changelog author="ddiss@suse.com" date="1504094401">- Enable QT5 builds for Factory (suse_version &gt; 1320); (bsc#1056477).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="ddiss@suse.com" date="1547553600">- Package missing PMDA binaries; (bsc#1121920).
  + refresh 0002-Install-libraries-without-exec-permission.patch
- Don't package pmns .NeedRebuild flag; (bsc#1092160).
  + add 0010-pmns-don-t-package-.NeedRebuild-for-SUSE-distros.patch</changelog>
  <changelog author="ddiss@suse.com" date="1548849600">- Replace openSUSE/sles-release build dependency; (bsc#1123311).</changelog>
  <changelog author="ddiss@suse.com" date="1548936000">- Drop distribution-release build dependency completely; (bsc#1123311).
  + modify 0010-pmns-don-t-package-.NeedRebuild-for-SUSE-distros.patch</changelog>
  <changelog author="ddiss@suse.com" date="1566993600">- Fix python library dependencies broken via shared library packaging policy
  split; (bsc#1129991).</changelog>
  <changelog author="ddiss@suse.com" date="1579867200">- Fix for security advisory CVE-2019-3696; (bsc#1153921)
  + build-remove-transitional-mechanism-for-old-releases.patch
- Fix for security advisory CVE-2019-3695; (bsc#1152763)
  + build-drop-old-config-file-transition-code-from-rpm-.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615636800">- include fixes to avoid building without sles-release package
  which does not exist on non-sle architectures (bsc#1181571)</changelog>
  <changelog author="pgajdos@suse.com" date="1650888000">- no source changes [bsc#1171883] (CVE-2020-8025)</changelog>
</package>
<package pkgid="70295ee4267255d70f0586e14382f87abddcf16c7bdeb99cad1558dad74baea6" name="pcp-pmda-postgresql" arch="s390x">
  <version epoch="0" ver="3.11.9" rel="150000.5.14.1"/>
  <changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
  <changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
  <changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
  <changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
  <changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
  <changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
  <changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
  <changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
  <changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
  <changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
  <changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>
  <changelog author="ddiss@suse.com" date="1504094401">- Enable QT5 builds for Factory (suse_version &gt; 1320); (bsc#1056477).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="ddiss@suse.com" date="1547553600">- Package missing PMDA binaries; (bsc#1121920).
  + refresh 0002-Install-libraries-without-exec-permission.patch
- Don't package pmns .NeedRebuild flag; (bsc#1092160).
  + add 0010-pmns-don-t-package-.NeedRebuild-for-SUSE-distros.patch</changelog>
  <changelog author="ddiss@suse.com" date="1548849600">- Replace openSUSE/sles-release build dependency; (bsc#1123311).</changelog>
  <changelog author="ddiss@suse.com" date="1548936000">- Drop distribution-release build dependency completely; (bsc#1123311).
  + modify 0010-pmns-don-t-package-.NeedRebuild-for-SUSE-distros.patch</changelog>
  <changelog author="ddiss@suse.com" date="1566993600">- Fix python library dependencies broken via shared library packaging policy
  split; (bsc#1129991).</changelog>
  <changelog author="ddiss@suse.com" date="1579867200">- Fix for security advisory CVE-2019-3696; (bsc#1153921)
  + build-remove-transitional-mechanism-for-old-releases.patch
- Fix for security advisory CVE-2019-3695; (bsc#1152763)
  + build-drop-old-config-file-transition-code-from-rpm-.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615636800">- include fixes to avoid building without sles-release package
  which does not exist on non-sle architectures (bsc#1181571)</changelog>
  <changelog author="pgajdos@suse.com" date="1650888000">- no source changes [bsc#1171883] (CVE-2020-8025)</changelog>
</package>
<package pkgid="7508e8eeb8dc729fa302abd9663c37ee1676c4a709addd552d4666f1f24489d5" name="pcp-pmda-postgresql" arch="x86_64">
  <version epoch="0" ver="3.11.9" rel="150000.5.14.1"/>
  <changelog author="ddiss@suse.com" date="1425384000">- Update to 3.10.3
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.3
- New sub-package
  + pcp-import-ganglia2pcp</changelog>
  <changelog author="ddiss@suse.com" date="1426680000">- Ensure the perl modules correctly link against the PCP libraries;
  (bnc#841204).
  + remove 0004-Remove-CPAN-rpaths.patch</changelog>
  <changelog author="ddiss@suse.com" date="1429185600">- Update to 3.10.4
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.4
  for details.</changelog>
  <changelog author="ddiss@suse.com" date="1488283200">- Add _service file for pulling directly from the upstream Git repository.</changelog>
  <changelog author="ddiss@suse.com" date="1490184000">- Update to 3.10.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.10.9
  for details.
- Drop obsolete 0001-Fix-XEN-build.patch
  + PCP_PS_ALL_FLAGS now used explicitly
- Add 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
- Split out a number of agents from the base package into separate rpms
- Disable sheet2pcp
  + As per upstream: "until BZ 830923 and BZ 754678 are resolved".</changelog>
  <changelog author="ddiss@suse.com" date="1490616000">- Update to 3.11.8
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.8
  for details.
- Remove 0010-build-do-not-include-.gitignore-in-installed-file-se.patch
  + Upstream
- Drop pcp-webjs.src.tar.gz
  + https://github.com/performancecopilot/pcp-webjs/issues/3
  + Vector will be pulled in from the upstream source in future
- Enable pmda-systemd package
  + libsystemd pkg-config detection fixed upstream
- New packages
  + pcp-devel: Upstream split of non-essential devel packages from
    libpcp-devel
  + pcp-pmda-bind2
  + pcp-pmda-docker
  + pcp-pmda-lio
  + pcp-pmda-nutcracker
  + pcp-pmda-oracle
  + pcp-pmda-redis
  + pcp-pmda-libvirt
  + pcp-export-pcp2influxdb</changelog>
  <changelog author="ddiss@suse.com" date="1490961600">- Disable remote _service execution
  + Run locally and add generated tarball and spec file</changelog>
  <changelog author="ddiss@suse.com" date="1497787200">- Update to 3.11.9
  See http://git.pcp.io/cgi-bin/gitweb.cgi?p=pcp/pcp.git;a=blob_plain;f=CHANGELOG;hb=3.11.9
  for details.</changelog>
  <changelog author="ddiss@suse.com" date="1497873600">- Follow the shared library packaging policy and split libpcp_gui.so.2,
  libpcp_mmv.so.1, libpcp_trace.so.2, libpcp_import.so.1 and libpcp_web.so.1
  out from libpcp3 into separate packages.
- Drop a number of unneeded explicit library package Requires.
- Fix a number of file manifest conflicts.
- Drop lio pmda on SUSE systems without proper rtslib-fb dependency.</changelog>
  <changelog author="ddiss@suse.com" date="1503576000">- Add weak pcp dependency to pmdas that were split out from the base package
  in the 3.10-&gt;3.11 update; (bsc#1055503).</changelog>
  <changelog author="ddiss@suse.com" date="1504094400">- Ensure sysconfig files are populated from templates during installation;
  (bsc#1056397).</changelog>
  <changelog author="ddiss@suse.com" date="1504094401">- Enable QT5 builds for Factory (suse_version &gt; 1320); (bsc#1056477).</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="ddiss@suse.com" date="1547553600">- Package missing PMDA binaries; (bsc#1121920).
  + refresh 0002-Install-libraries-without-exec-permission.patch
- Don't package pmns .NeedRebuild flag; (bsc#1092160).
  + add 0010-pmns-don-t-package-.NeedRebuild-for-SUSE-distros.patch</changelog>
  <changelog author="ddiss@suse.com" date="1548849600">- Replace openSUSE/sles-release build dependency; (bsc#1123311).</changelog>
  <changelog author="ddiss@suse.com" date="1548936000">- Drop distribution-release build dependency completely; (bsc#1123311).
  + modify 0010-pmns-don-t-package-.NeedRebuild-for-SUSE-distros.patch</changelog>
  <changelog author="ddiss@suse.com" date="1566993600">- Fix python library dependencies broken via shared library packaging policy
  split; (bsc#1129991).</changelog>
  <changelog author="ddiss@suse.com" date="1579867200">- Fix for security advisory CVE-2019-3696; (bsc#1153921)
  + build-remove-transitional-mechanism-for-old-releases.patch
- Fix for security advisory CVE-2019-3695; (bsc#1152763)
  + build-drop-old-config-file-transition-code-from-rpm-.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615636800">- include fixes to avoid building without sles-release package
  which does not exist on non-sle architectures (bsc#1181571)</changelog>
  <changelog author="pgajdos@suse.com" date="1650888000">- no source changes [bsc#1171883] (CVE-2020-8025)</changelog>
</package>
<package pkgid="f0fa4dee0c6d7b1be3ba2e5ce11b88fe9ee23352e6fc47a0ee0b82f85b9ed332" name="pcre2" arch="src">
  <version epoch="0" ver="10.31" rel="150000.3.7.1"/>
  <changelog author="tchvatal@suse.com" date="1395576000">- Add patch pcre-8.21-multilib.patch to fix RPATH issues.
  * The patch is taken from RedHat.</changelog>
  <changelog author="tchvatal@suse.com" date="1395576001">- Add automake and autoconf as explicit deps as we run autoreconf</changelog>
  <changelog author="coolo@suse.com" date="1399118400">- update to 0.35:
  There have been performance improvements for classes containing non-ASCII
  characters and the "auto-possessification" feature has been extended. Other
  minor improvements have been implemented and bugs fixed. There is a new callout
  feature to enable applications to do detailed stack checks at compile time, to
  avoid running out of stack for deeply nested parentheses. The JIT compiler has
  been extended with experimental support for ARM-64, MIPS-64, and PPC-LE.
- add pcre-commit1472.patch from SVN to work with gcc49, see
  http://bugs.exim.org/show_bug.cgi?id=1463</changelog>
  <changelog author="dvaleev@suse.com" date="1402920000">- Enable JIT on ppc64le as well</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1409227200">- Harden build with full RELRO as this libraries end linked
  to at least one setuid root executable.</changelog>
  <changelog author="jengelh@inai.de" date="1409659200">- Improve on RPM group classification
- Remove defunct %gpg_verify (replaced by source validators),
  defunct freecode link</changelog>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1434628800">- PCRE2, a re-working of the original PCRE library to provide an
  entirely new API, version 10.10. Not source compatible.
- copy of the pcre package, with the following adjustments:
  * required name changes
  * adjust pcre-8.21-multilib.patch to pcre2-10.10-multilib.patch
  * drop upstreamed pcre-8.32-visibility.patch
  * --enable-{utf8,unicode-properties} became --enable-unicode
  * drop cpp subpackage
  * make test -&gt; check
  * enable 32 bit character support</changelog>
  <changelog author="astieger@suse.com" date="1436875200">- PCRE2 10.20:
  * Callouts with string arguments and the
    pcre2_callout_enumerate() function have been implemented.
  * The PCRE2_NEVER_BACKSLASH_C option, which locks out the use of
    \C, is added.
  * The PCRE2_ALT_CIRCUMFLEX option lets ^ match after a newline at
    the end of a subject in multiline mode.
  * The way named subpatterns are handled has been refactored. The
    previous approach had several bugs.
  * The handling of \c in EBCDIC environments has been changed to
    conform to the perlebcdic document. (Incompatible change)
  * Bugs have been mended, many of them discovered by fuzzers.</changelog>
  <changelog author="jengelh@inai.de" date="1453032000">- Update to new upstream release 10.21
  * Improve JIT matching speed of patterns starting with + or *.
  * Use memchr() to find the first character in an unanchored match
  in 8-bit mode in the interpreter. This gives a significant speed
  improvement.
  * 10.20 broke the handling of [[:&gt;:]] and [[:&lt;:]] in that
  processing them could involve a buffer overflow if the
  following character was an opening parenthesis.
  * 10.20 also introduced a bug in processing this pattern:
  /((?x)(*:0))#(?'/, which was fixed.
  * A callout with a string argument containing an opening square
  bracket, for example /(?C$[$)(?&lt;]/, was incorrectly processed and
  could provoke a buffer overflow.
  * A possessively repeated conditional group that could match an empty
  string, for example, /(?(R))*+/, was incorrectly compiled.
  * The Unicode tables have been updated to Unicode 8.0.0.
  * An empty comment (?#) in a pattern was incorrectly processed and
  could provoke a buffer overflow.
  * Fix infinite recursion in the JIT compiler when certain patterns
  /such as (?:|a|){100}x/ are analysed.
  * Some patterns with character classes involving [: and \\ were
  incorrectly compiled and could cause reading from uninitialized
  memory or an incorrect error diagnosis. Examples are:
  /[[:\\](?&lt;[::]/ and /[[:\\](?'abc')[a:].
  * A missing closing parenthesis for a callout with a string argument
  was not being diagnosed, possibly leading to a buffer overflow.
  * If (?R was followed by - or + incorrect behaviour happened instead
  of a diagnostic.
  * Fixed an issue when \p{Any} inside an xclass did not read the current
  character.
  * About 80 more fixes, which you can read about in the ChangeLog
  shipped with the libpcre2-8-0 package.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- pcre2 10.22:
  * The POSIX wrapper function regcomp() did not used to
    support back references and subroutine calls if called with the
    REG_NOSUB option. It now does.
  * A new function, pcre2_code_copy(), is added, to make a copy of a
    compiled pattern.
  * Support for string callouts is added to pcre2grep.
  * Added the PCRE2_NO_JIT option to pcre2_match().
  * The pcre2_get_error_message() function now returns with a
    negative error code if the error number it is given is unknown.
  * Several updates have been made to pcre2test and test scripts
  * Fix CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487246400">- pcre2 10.23:
  * major re-factoring of the pcre2_compile.c file
  * Back references are now permitted in lookbehind assertions when
    there are no duplicated group numbers (that is, (?| has not
    been used), and, if the reference is by name, there is only one
    group of that name. The referenced group must, of course be of
    fixed length.
  * \g{+&lt;number&gt;} (e.g. \g{+2} ) is now supported. It is a "forward
    back reference" and can be useful in repetitions
    (compare \g{-&lt;number&gt;} ). Perl does not recognize this syntax.
  * pcre2grep now automatically expands its buffer up to a maximum
    set by --max-buffer-size.
  * The -t option (grand total) has been added to pcre2grep.
  * A new function called pcre2_code_copy_with_tables() exists to
    copy a compiled pattern along with a private copy of the
    character tables that is uses.</changelog>
  <changelog author="astieger@suse.com" date="1493726400">- pcre2grep can now read .gz and .bz2 files directly
- pcre2test is now built to support line editing</changelog>
  <changelog author="astieger@suse.com" date="1501934400">- fix SLE 11 build</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update to new upstream release 10.30
  * The main interpreter, pcre2_match(), has been refactored into
    a new version that does not use recursive function calls for
    remembering backtracking positions. The new implementation
    allows backtracking into recursive group calls in patterns,
    making it more compatible with Perl. For patterns that have a
    lot of backtracking, the heap is now used, and there is
    explicit limit on the amount, settable by
    pcre2_set_heap_limit(). The "recursion limit" is retained,
    but is renamed as "depth limit".
  * The new option PCRE2_ENDANCHORED insists that a pattern match
    must end at the end of the subject.
  * The new option PCRE2_EXTENDED_MORE implements Perl's /xx
    feature, and pcre2test is upgraded to support it. Setting
    within the pattern by (?xx) is Also supported.
  * (?n) can be used to set PCRE2_NO_AUTO_CAPTURE, because Perl
    now has this.
  * Additional pattern compile options in the compile context are
    now available: PCRE2_EXTRA_ALLOW_SURROGATE_ESCAPES and
    PCRE2_EXTRA_BAD_ESCAPE_IS LITERAL.
  * The newline type PCRE2_NEWLINE_NUL is now available.
  * The match limit value now also applies to pcre2_dfa_match()
    as there are patterns that can use up a lot of resources
    without necessarily recursing very deeply.
  * Various minor security fixes found by fuzzers:
    + bsc#1037165: crash for forward reference in lookbehind with
    PCRE2_ANCHORED
    + CVE-2017-8786: heap-based buffer overflow write in pcre2test
    (bsc#1036942)
    + CVE-2017-7186: DoS by triggering an invalid Unicode property
    lookup (bsc#1030066)
- Switch source URLs to use HTTP.</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- Update to new upstream release 10.31
  * New pcre2_config() options: PCRE2_CONFIG_NEVER_BACKSLASH_C and
    PCRE2_CONFIG_COMPILED_WIDTHS.
  * New pcre2_pattern_info() option PCRE2_INFO_EXTRAOPTIONS to
    retrieve the extra compile time options.
  * Public names for all pcre2_compile() error numbers.
  * Added PCRE2_CALLOUT_STARTMATCH and PCRE2_CALLOUT_BACKTRACK
    bits to a new field callout_flags in callout blocks.
- use https for main site
- cleanup with spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1627128000">- Added 0001-Fixed-atomic-group-backtracking-bug.patch
  * bsc#1187937
  * PHP 7.6.4 on s390x returns different results for preg_match
    function as compared to older PHP versions and x86
  * Sourced from upstream subversion commit:
    $ svn log -r965 svn://vcs.pcre.org/pcre2/code/trunk</changelog>
  <changelog author="jsikes@suse.com" date="1651924800">- Added pcre2-10.31-bsc1199232-unicode-property-matching.patch
  * bsc#1199232 / CVE-2022-1586
  * Fixes unicode property matching issue</changelog>
</package>
<package pkgid="8e65280d37ed89d0dfd114832bd60ef0689848e8f0c7342823cef351a41910c0" name="pcre2-devel" arch="x86_64">
  <version epoch="0" ver="10.31" rel="150000.3.7.1"/>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1434628800">- PCRE2, a re-working of the original PCRE library to provide an
  entirely new API, version 10.10. Not source compatible.
- copy of the pcre package, with the following adjustments:
  * required name changes
  * adjust pcre-8.21-multilib.patch to pcre2-10.10-multilib.patch
  * drop upstreamed pcre-8.32-visibility.patch
  * --enable-{utf8,unicode-properties} became --enable-unicode
  * drop cpp subpackage
  * make test -&gt; check
  * enable 32 bit character support</changelog>
  <changelog author="astieger@suse.com" date="1436875200">- PCRE2 10.20:
  * Callouts with string arguments and the
    pcre2_callout_enumerate() function have been implemented.
  * The PCRE2_NEVER_BACKSLASH_C option, which locks out the use of
    \C, is added.
  * The PCRE2_ALT_CIRCUMFLEX option lets ^ match after a newline at
    the end of a subject in multiline mode.
  * The way named subpatterns are handled has been refactored. The
    previous approach had several bugs.
  * The handling of \c in EBCDIC environments has been changed to
    conform to the perlebcdic document. (Incompatible change)
  * Bugs have been mended, many of them discovered by fuzzers.</changelog>
  <changelog author="jengelh@inai.de" date="1453032000">- Update to new upstream release 10.21
  * Improve JIT matching speed of patterns starting with + or *.
  * Use memchr() to find the first character in an unanchored match
  in 8-bit mode in the interpreter. This gives a significant speed
  improvement.
  * 10.20 broke the handling of [[:&gt;:]] and [[:&lt;:]] in that
  processing them could involve a buffer overflow if the
  following character was an opening parenthesis.
  * 10.20 also introduced a bug in processing this pattern:
  /((?x)(*:0))#(?'/, which was fixed.
  * A callout with a string argument containing an opening square
  bracket, for example /(?C$[$)(?&lt;]/, was incorrectly processed and
  could provoke a buffer overflow.
  * A possessively repeated conditional group that could match an empty
  string, for example, /(?(R))*+/, was incorrectly compiled.
  * The Unicode tables have been updated to Unicode 8.0.0.
  * An empty comment (?#) in a pattern was incorrectly processed and
  could provoke a buffer overflow.
  * Fix infinite recursion in the JIT compiler when certain patterns
  /such as (?:|a|){100}x/ are analysed.
  * Some patterns with character classes involving [: and \\ were
  incorrectly compiled and could cause reading from uninitialized
  memory or an incorrect error diagnosis. Examples are:
  /[[:\\](?&lt;[::]/ and /[[:\\](?'abc')[a:].
  * A missing closing parenthesis for a callout with a string argument
  was not being diagnosed, possibly leading to a buffer overflow.
  * If (?R was followed by - or + incorrect behaviour happened instead
  of a diagnostic.
  * Fixed an issue when \p{Any} inside an xclass did not read the current
  character.
  * About 80 more fixes, which you can read about in the ChangeLog
  shipped with the libpcre2-8-0 package.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- pcre2 10.22:
  * The POSIX wrapper function regcomp() did not used to
    support back references and subroutine calls if called with the
    REG_NOSUB option. It now does.
  * A new function, pcre2_code_copy(), is added, to make a copy of a
    compiled pattern.
  * Support for string callouts is added to pcre2grep.
  * Added the PCRE2_NO_JIT option to pcre2_match().
  * The pcre2_get_error_message() function now returns with a
    negative error code if the error number it is given is unknown.
  * Several updates have been made to pcre2test and test scripts
  * Fix CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487246400">- pcre2 10.23:
  * major re-factoring of the pcre2_compile.c file
  * Back references are now permitted in lookbehind assertions when
    there are no duplicated group numbers (that is, (?| has not
    been used), and, if the reference is by name, there is only one
    group of that name. The referenced group must, of course be of
    fixed length.
  * \g{+&lt;number&gt;} (e.g. \g{+2} ) is now supported. It is a "forward
    back reference" and can be useful in repetitions
    (compare \g{-&lt;number&gt;} ). Perl does not recognize this syntax.
  * pcre2grep now automatically expands its buffer up to a maximum
    set by --max-buffer-size.
  * The -t option (grand total) has been added to pcre2grep.
  * A new function called pcre2_code_copy_with_tables() exists to
    copy a compiled pattern along with a private copy of the
    character tables that is uses.</changelog>
  <changelog author="astieger@suse.com" date="1493726400">- pcre2grep can now read .gz and .bz2 files directly
- pcre2test is now built to support line editing</changelog>
  <changelog author="astieger@suse.com" date="1501934400">- fix SLE 11 build</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update to new upstream release 10.30
  * The main interpreter, pcre2_match(), has been refactored into
    a new version that does not use recursive function calls for
    remembering backtracking positions. The new implementation
    allows backtracking into recursive group calls in patterns,
    making it more compatible with Perl. For patterns that have a
    lot of backtracking, the heap is now used, and there is
    explicit limit on the amount, settable by
    pcre2_set_heap_limit(). The "recursion limit" is retained,
    but is renamed as "depth limit".
  * The new option PCRE2_ENDANCHORED insists that a pattern match
    must end at the end of the subject.
  * The new option PCRE2_EXTENDED_MORE implements Perl's /xx
    feature, and pcre2test is upgraded to support it. Setting
    within the pattern by (?xx) is Also supported.
  * (?n) can be used to set PCRE2_NO_AUTO_CAPTURE, because Perl
    now has this.
  * Additional pattern compile options in the compile context are
    now available: PCRE2_EXTRA_ALLOW_SURROGATE_ESCAPES and
    PCRE2_EXTRA_BAD_ESCAPE_IS LITERAL.
  * The newline type PCRE2_NEWLINE_NUL is now available.
  * The match limit value now also applies to pcre2_dfa_match()
    as there are patterns that can use up a lot of resources
    without necessarily recursing very deeply.
  * Various minor security fixes found by fuzzers:
    + bsc#1037165: crash for forward reference in lookbehind with
    PCRE2_ANCHORED
    + CVE-2017-8786: heap-based buffer overflow write in pcre2test
    (bsc#1036942)
    + CVE-2017-7186: DoS by triggering an invalid Unicode property
    lookup (bsc#1030066)
- Switch source URLs to use HTTP.</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- Update to new upstream release 10.31
  * New pcre2_config() options: PCRE2_CONFIG_NEVER_BACKSLASH_C and
    PCRE2_CONFIG_COMPILED_WIDTHS.
  * New pcre2_pattern_info() option PCRE2_INFO_EXTRAOPTIONS to
    retrieve the extra compile time options.
  * Public names for all pcre2_compile() error numbers.
  * Added PCRE2_CALLOUT_STARTMATCH and PCRE2_CALLOUT_BACKTRACK
    bits to a new field callout_flags in callout blocks.
- use https for main site
- cleanup with spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1627128000">- Added 0001-Fixed-atomic-group-backtracking-bug.patch
  * bsc#1187937
  * PHP 7.6.4 on s390x returns different results for preg_match
    function as compared to older PHP versions and x86
  * Sourced from upstream subversion commit:
    $ svn log -r965 svn://vcs.pcre.org/pcre2/code/trunk</changelog>
  <changelog author="jsikes@suse.com" date="1651924800">- Added pcre2-10.31-bsc1199232-unicode-property-matching.patch
  * bsc#1199232 / CVE-2022-1586
  * Fixes unicode property matching issue</changelog>
</package>
<package pkgid="894425d99f8764b2c395d042a029ffaeaf68df75b85733fa385dbb3d9b7223fa" name="pcre2-devel-static" arch="x86_64">
  <version epoch="0" ver="10.31" rel="150000.3.7.1"/>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1434628800">- PCRE2, a re-working of the original PCRE library to provide an
  entirely new API, version 10.10. Not source compatible.
- copy of the pcre package, with the following adjustments:
  * required name changes
  * adjust pcre-8.21-multilib.patch to pcre2-10.10-multilib.patch
  * drop upstreamed pcre-8.32-visibility.patch
  * --enable-{utf8,unicode-properties} became --enable-unicode
  * drop cpp subpackage
  * make test -&gt; check
  * enable 32 bit character support</changelog>
  <changelog author="astieger@suse.com" date="1436875200">- PCRE2 10.20:
  * Callouts with string arguments and the
    pcre2_callout_enumerate() function have been implemented.
  * The PCRE2_NEVER_BACKSLASH_C option, which locks out the use of
    \C, is added.
  * The PCRE2_ALT_CIRCUMFLEX option lets ^ match after a newline at
    the end of a subject in multiline mode.
  * The way named subpatterns are handled has been refactored. The
    previous approach had several bugs.
  * The handling of \c in EBCDIC environments has been changed to
    conform to the perlebcdic document. (Incompatible change)
  * Bugs have been mended, many of them discovered by fuzzers.</changelog>
  <changelog author="jengelh@inai.de" date="1453032000">- Update to new upstream release 10.21
  * Improve JIT matching speed of patterns starting with + or *.
  * Use memchr() to find the first character in an unanchored match
  in 8-bit mode in the interpreter. This gives a significant speed
  improvement.
  * 10.20 broke the handling of [[:&gt;:]] and [[:&lt;:]] in that
  processing them could involve a buffer overflow if the
  following character was an opening parenthesis.
  * 10.20 also introduced a bug in processing this pattern:
  /((?x)(*:0))#(?'/, which was fixed.
  * A callout with a string argument containing an opening square
  bracket, for example /(?C$[$)(?&lt;]/, was incorrectly processed and
  could provoke a buffer overflow.
  * A possessively repeated conditional group that could match an empty
  string, for example, /(?(R))*+/, was incorrectly compiled.
  * The Unicode tables have been updated to Unicode 8.0.0.
  * An empty comment (?#) in a pattern was incorrectly processed and
  could provoke a buffer overflow.
  * Fix infinite recursion in the JIT compiler when certain patterns
  /such as (?:|a|){100}x/ are analysed.
  * Some patterns with character classes involving [: and \\ were
  incorrectly compiled and could cause reading from uninitialized
  memory or an incorrect error diagnosis. Examples are:
  /[[:\\](?&lt;[::]/ and /[[:\\](?'abc')[a:].
  * A missing closing parenthesis for a callout with a string argument
  was not being diagnosed, possibly leading to a buffer overflow.
  * If (?R was followed by - or + incorrect behaviour happened instead
  of a diagnostic.
  * Fixed an issue when \p{Any} inside an xclass did not read the current
  character.
  * About 80 more fixes, which you can read about in the ChangeLog
  shipped with the libpcre2-8-0 package.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- pcre2 10.22:
  * The POSIX wrapper function regcomp() did not used to
    support back references and subroutine calls if called with the
    REG_NOSUB option. It now does.
  * A new function, pcre2_code_copy(), is added, to make a copy of a
    compiled pattern.
  * Support for string callouts is added to pcre2grep.
  * Added the PCRE2_NO_JIT option to pcre2_match().
  * The pcre2_get_error_message() function now returns with a
    negative error code if the error number it is given is unknown.
  * Several updates have been made to pcre2test and test scripts
  * Fix CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487246400">- pcre2 10.23:
  * major re-factoring of the pcre2_compile.c file
  * Back references are now permitted in lookbehind assertions when
    there are no duplicated group numbers (that is, (?| has not
    been used), and, if the reference is by name, there is only one
    group of that name. The referenced group must, of course be of
    fixed length.
  * \g{+&lt;number&gt;} (e.g. \g{+2} ) is now supported. It is a "forward
    back reference" and can be useful in repetitions
    (compare \g{-&lt;number&gt;} ). Perl does not recognize this syntax.
  * pcre2grep now automatically expands its buffer up to a maximum
    set by --max-buffer-size.
  * The -t option (grand total) has been added to pcre2grep.
  * A new function called pcre2_code_copy_with_tables() exists to
    copy a compiled pattern along with a private copy of the
    character tables that is uses.</changelog>
  <changelog author="astieger@suse.com" date="1493726400">- pcre2grep can now read .gz and .bz2 files directly
- pcre2test is now built to support line editing</changelog>
  <changelog author="astieger@suse.com" date="1501934400">- fix SLE 11 build</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update to new upstream release 10.30
  * The main interpreter, pcre2_match(), has been refactored into
    a new version that does not use recursive function calls for
    remembering backtracking positions. The new implementation
    allows backtracking into recursive group calls in patterns,
    making it more compatible with Perl. For patterns that have a
    lot of backtracking, the heap is now used, and there is
    explicit limit on the amount, settable by
    pcre2_set_heap_limit(). The "recursion limit" is retained,
    but is renamed as "depth limit".
  * The new option PCRE2_ENDANCHORED insists that a pattern match
    must end at the end of the subject.
  * The new option PCRE2_EXTENDED_MORE implements Perl's /xx
    feature, and pcre2test is upgraded to support it. Setting
    within the pattern by (?xx) is Also supported.
  * (?n) can be used to set PCRE2_NO_AUTO_CAPTURE, because Perl
    now has this.
  * Additional pattern compile options in the compile context are
    now available: PCRE2_EXTRA_ALLOW_SURROGATE_ESCAPES and
    PCRE2_EXTRA_BAD_ESCAPE_IS LITERAL.
  * The newline type PCRE2_NEWLINE_NUL is now available.
  * The match limit value now also applies to pcre2_dfa_match()
    as there are patterns that can use up a lot of resources
    without necessarily recursing very deeply.
  * Various minor security fixes found by fuzzers:
    + bsc#1037165: crash for forward reference in lookbehind with
    PCRE2_ANCHORED
    + CVE-2017-8786: heap-based buffer overflow write in pcre2test
    (bsc#1036942)
    + CVE-2017-7186: DoS by triggering an invalid Unicode property
    lookup (bsc#1030066)
- Switch source URLs to use HTTP.</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- Update to new upstream release 10.31
  * New pcre2_config() options: PCRE2_CONFIG_NEVER_BACKSLASH_C and
    PCRE2_CONFIG_COMPILED_WIDTHS.
  * New pcre2_pattern_info() option PCRE2_INFO_EXTRAOPTIONS to
    retrieve the extra compile time options.
  * Public names for all pcre2_compile() error numbers.
  * Added PCRE2_CALLOUT_STARTMATCH and PCRE2_CALLOUT_BACKTRACK
    bits to a new field callout_flags in callout blocks.
- use https for main site
- cleanup with spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1627128000">- Added 0001-Fixed-atomic-group-backtracking-bug.patch
  * bsc#1187937
  * PHP 7.6.4 on s390x returns different results for preg_match
    function as compared to older PHP versions and x86
  * Sourced from upstream subversion commit:
    $ svn log -r965 svn://vcs.pcre.org/pcre2/code/trunk</changelog>
  <changelog author="jsikes@suse.com" date="1651924800">- Added pcre2-10.31-bsc1199232-unicode-property-matching.patch
  * bsc#1199232 / CVE-2022-1586
  * Fixes unicode property matching issue</changelog>
</package>
<package pkgid="12f7fb62202066aa47da16e864b0b60aafbc92a8c46d45346a0d9471341569dc" name="pcre2-doc" arch="noarch">
  <version epoch="0" ver="10.31" rel="150000.3.7.1"/>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1434628800">- PCRE2, a re-working of the original PCRE library to provide an
  entirely new API, version 10.10. Not source compatible.
- copy of the pcre package, with the following adjustments:
  * required name changes
  * adjust pcre-8.21-multilib.patch to pcre2-10.10-multilib.patch
  * drop upstreamed pcre-8.32-visibility.patch
  * --enable-{utf8,unicode-properties} became --enable-unicode
  * drop cpp subpackage
  * make test -&gt; check
  * enable 32 bit character support</changelog>
  <changelog author="astieger@suse.com" date="1436875200">- PCRE2 10.20:
  * Callouts with string arguments and the
    pcre2_callout_enumerate() function have been implemented.
  * The PCRE2_NEVER_BACKSLASH_C option, which locks out the use of
    \C, is added.
  * The PCRE2_ALT_CIRCUMFLEX option lets ^ match after a newline at
    the end of a subject in multiline mode.
  * The way named subpatterns are handled has been refactored. The
    previous approach had several bugs.
  * The handling of \c in EBCDIC environments has been changed to
    conform to the perlebcdic document. (Incompatible change)
  * Bugs have been mended, many of them discovered by fuzzers.</changelog>
  <changelog author="jengelh@inai.de" date="1453032000">- Update to new upstream release 10.21
  * Improve JIT matching speed of patterns starting with + or *.
  * Use memchr() to find the first character in an unanchored match
  in 8-bit mode in the interpreter. This gives a significant speed
  improvement.
  * 10.20 broke the handling of [[:&gt;:]] and [[:&lt;:]] in that
  processing them could involve a buffer overflow if the
  following character was an opening parenthesis.
  * 10.20 also introduced a bug in processing this pattern:
  /((?x)(*:0))#(?'/, which was fixed.
  * A callout with a string argument containing an opening square
  bracket, for example /(?C$[$)(?&lt;]/, was incorrectly processed and
  could provoke a buffer overflow.
  * A possessively repeated conditional group that could match an empty
  string, for example, /(?(R))*+/, was incorrectly compiled.
  * The Unicode tables have been updated to Unicode 8.0.0.
  * An empty comment (?#) in a pattern was incorrectly processed and
  could provoke a buffer overflow.
  * Fix infinite recursion in the JIT compiler when certain patterns
  /such as (?:|a|){100}x/ are analysed.
  * Some patterns with character classes involving [: and \\ were
  incorrectly compiled and could cause reading from uninitialized
  memory or an incorrect error diagnosis. Examples are:
  /[[:\\](?&lt;[::]/ and /[[:\\](?'abc')[a:].
  * A missing closing parenthesis for a callout with a string argument
  was not being diagnosed, possibly leading to a buffer overflow.
  * If (?R was followed by - or + incorrect behaviour happened instead
  of a diagnostic.
  * Fixed an issue when \p{Any} inside an xclass did not read the current
  character.
  * About 80 more fixes, which you can read about in the ChangeLog
  shipped with the libpcre2-8-0 package.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- pcre2 10.22:
  * The POSIX wrapper function regcomp() did not used to
    support back references and subroutine calls if called with the
    REG_NOSUB option. It now does.
  * A new function, pcre2_code_copy(), is added, to make a copy of a
    compiled pattern.
  * Support for string callouts is added to pcre2grep.
  * Added the PCRE2_NO_JIT option to pcre2_match().
  * The pcre2_get_error_message() function now returns with a
    negative error code if the error number it is given is unknown.
  * Several updates have been made to pcre2test and test scripts
  * Fix CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487246400">- pcre2 10.23:
  * major re-factoring of the pcre2_compile.c file
  * Back references are now permitted in lookbehind assertions when
    there are no duplicated group numbers (that is, (?| has not
    been used), and, if the reference is by name, there is only one
    group of that name. The referenced group must, of course be of
    fixed length.
  * \g{+&lt;number&gt;} (e.g. \g{+2} ) is now supported. It is a "forward
    back reference" and can be useful in repetitions
    (compare \g{-&lt;number&gt;} ). Perl does not recognize this syntax.
  * pcre2grep now automatically expands its buffer up to a maximum
    set by --max-buffer-size.
  * The -t option (grand total) has been added to pcre2grep.
  * A new function called pcre2_code_copy_with_tables() exists to
    copy a compiled pattern along with a private copy of the
    character tables that is uses.</changelog>
  <changelog author="astieger@suse.com" date="1493726400">- pcre2grep can now read .gz and .bz2 files directly
- pcre2test is now built to support line editing</changelog>
  <changelog author="astieger@suse.com" date="1501934400">- fix SLE 11 build</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update to new upstream release 10.30
  * The main interpreter, pcre2_match(), has been refactored into
    a new version that does not use recursive function calls for
    remembering backtracking positions. The new implementation
    allows backtracking into recursive group calls in patterns,
    making it more compatible with Perl. For patterns that have a
    lot of backtracking, the heap is now used, and there is
    explicit limit on the amount, settable by
    pcre2_set_heap_limit(). The "recursion limit" is retained,
    but is renamed as "depth limit".
  * The new option PCRE2_ENDANCHORED insists that a pattern match
    must end at the end of the subject.
  * The new option PCRE2_EXTENDED_MORE implements Perl's /xx
    feature, and pcre2test is upgraded to support it. Setting
    within the pattern by (?xx) is Also supported.
  * (?n) can be used to set PCRE2_NO_AUTO_CAPTURE, because Perl
    now has this.
  * Additional pattern compile options in the compile context are
    now available: PCRE2_EXTRA_ALLOW_SURROGATE_ESCAPES and
    PCRE2_EXTRA_BAD_ESCAPE_IS LITERAL.
  * The newline type PCRE2_NEWLINE_NUL is now available.
  * The match limit value now also applies to pcre2_dfa_match()
    as there are patterns that can use up a lot of resources
    without necessarily recursing very deeply.
  * Various minor security fixes found by fuzzers:
    + bsc#1037165: crash for forward reference in lookbehind with
    PCRE2_ANCHORED
    + CVE-2017-8786: heap-based buffer overflow write in pcre2test
    (bsc#1036942)
    + CVE-2017-7186: DoS by triggering an invalid Unicode property
    lookup (bsc#1030066)
- Switch source URLs to use HTTP.</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- Update to new upstream release 10.31
  * New pcre2_config() options: PCRE2_CONFIG_NEVER_BACKSLASH_C and
    PCRE2_CONFIG_COMPILED_WIDTHS.
  * New pcre2_pattern_info() option PCRE2_INFO_EXTRAOPTIONS to
    retrieve the extra compile time options.
  * Public names for all pcre2_compile() error numbers.
  * Added PCRE2_CALLOUT_STARTMATCH and PCRE2_CALLOUT_BACKTRACK
    bits to a new field callout_flags in callout blocks.
- use https for main site
- cleanup with spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1627128000">- Added 0001-Fixed-atomic-group-backtracking-bug.patch
  * bsc#1187937
  * PHP 7.6.4 on s390x returns different results for preg_match
    function as compared to older PHP versions and x86
  * Sourced from upstream subversion commit:
    $ svn log -r965 svn://vcs.pcre.org/pcre2/code/trunk</changelog>
  <changelog author="jsikes@suse.com" date="1651924800">- Added pcre2-10.31-bsc1199232-unicode-property-matching.patch
  * bsc#1199232 / CVE-2022-1586
  * Fixes unicode property matching issue</changelog>
</package>
<package pkgid="33440d8604486fb8273946cb87d889f002ea29088d76731c092d9c7889849c50" name="pcre2-tools" arch="x86_64">
  <version epoch="0" ver="10.31" rel="150000.3.7.1"/>
  <changelog author="p.drouand@gmail.com" date="1425902400">- Update to version 3.16
  * This is primarily a bug-fix release.
  * The Unicode data tables have been updated to Unicode 7.0.0.
- Remove pcre-commit1472.patch; fixed on upstream release
- Remove obsolete "Obsoletes" tag</changelog>
  <changelog author="astieger@suse.com" date="1430395200">- pcre 8.37:
  * CVE-2015-2325: Patterns with certain groups specifying a zero
    minimum quantifier caused incorrect code to be compiled,
    leading to an incorrect memory read. [boo#924960]
  * CVE-2015-2326: Specific patterns containing a forward reference
    with subroutine calls caused incorrect code to be compiled
    [boo#924961]
  * CVE-2014-8964: If an assertion condition was quantified with a
    minimum of zero, SIGSEGV or other misbehaviour could occur.
    [boo#906574]
  * further bug fixes as listed in ChangeLog</changelog>
  <changelog author="astieger@suse.com" date="1434628800">- PCRE2, a re-working of the original PCRE library to provide an
  entirely new API, version 10.10. Not source compatible.
- copy of the pcre package, with the following adjustments:
  * required name changes
  * adjust pcre-8.21-multilib.patch to pcre2-10.10-multilib.patch
  * drop upstreamed pcre-8.32-visibility.patch
  * --enable-{utf8,unicode-properties} became --enable-unicode
  * drop cpp subpackage
  * make test -&gt; check
  * enable 32 bit character support</changelog>
  <changelog author="astieger@suse.com" date="1436875200">- PCRE2 10.20:
  * Callouts with string arguments and the
    pcre2_callout_enumerate() function have been implemented.
  * The PCRE2_NEVER_BACKSLASH_C option, which locks out the use of
    \C, is added.
  * The PCRE2_ALT_CIRCUMFLEX option lets ^ match after a newline at
    the end of a subject in multiline mode.
  * The way named subpatterns are handled has been refactored. The
    previous approach had several bugs.
  * The handling of \c in EBCDIC environments has been changed to
    conform to the perlebcdic document. (Incompatible change)
  * Bugs have been mended, many of them discovered by fuzzers.</changelog>
  <changelog author="jengelh@inai.de" date="1453032000">- Update to new upstream release 10.21
  * Improve JIT matching speed of patterns starting with + or *.
  * Use memchr() to find the first character in an unanchored match
  in 8-bit mode in the interpreter. This gives a significant speed
  improvement.
  * 10.20 broke the handling of [[:&gt;:]] and [[:&lt;:]] in that
  processing them could involve a buffer overflow if the
  following character was an opening parenthesis.
  * 10.20 also introduced a bug in processing this pattern:
  /((?x)(*:0))#(?'/, which was fixed.
  * A callout with a string argument containing an opening square
  bracket, for example /(?C$[$)(?&lt;]/, was incorrectly processed and
  could provoke a buffer overflow.
  * A possessively repeated conditional group that could match an empty
  string, for example, /(?(R))*+/, was incorrectly compiled.
  * The Unicode tables have been updated to Unicode 8.0.0.
  * An empty comment (?#) in a pattern was incorrectly processed and
  could provoke a buffer overflow.
  * Fix infinite recursion in the JIT compiler when certain patterns
  /such as (?:|a|){100}x/ are analysed.
  * Some patterns with character classes involving [: and \\ were
  incorrectly compiled and could cause reading from uninitialized
  memory or an incorrect error diagnosis. Examples are:
  /[[:\\](?&lt;[::]/ and /[[:\\](?'abc')[a:].
  * A missing closing parenthesis for a callout with a string argument
  was not being diagnosed, possibly leading to a buffer overflow.
  * If (?R was followed by - or + incorrect behaviour happened instead
  of a diagnostic.
  * Fixed an issue when \p{Any} inside an xclass did not read the current
  character.
  * About 80 more fixes, which you can read about in the ChangeLog
  shipped with the libpcre2-8-0 package.</changelog>
  <changelog author="astieger@suse.com" date="1470052800">- pcre2 10.22:
  * The POSIX wrapper function regcomp() did not used to
    support back references and subroutine calls if called with the
    REG_NOSUB option. It now does.
  * A new function, pcre2_code_copy(), is added, to make a copy of a
    compiled pattern.
  * Support for string callouts is added to pcre2grep.
  * Added the PCRE2_NO_JIT option to pcre2_match().
  * The pcre2_get_error_message() function now returns with a
    negative error code if the error number it is given is unknown.
  * Several updates have been made to pcre2test and test scripts
  * Fix CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply
    nested parentheses (boo#971741)</changelog>
  <changelog author="dimstar@opensuse.org" date="1486468800">- Explicitly package %{_docdir}/%{name} to fix build with RPM 4.13.</changelog>
  <changelog author="astieger@suse.com" date="1487246400">- pcre2 10.23:
  * major re-factoring of the pcre2_compile.c file
  * Back references are now permitted in lookbehind assertions when
    there are no duplicated group numbers (that is, (?| has not
    been used), and, if the reference is by name, there is only one
    group of that name. The referenced group must, of course be of
    fixed length.
  * \g{+&lt;number&gt;} (e.g. \g{+2} ) is now supported. It is a "forward
    back reference" and can be useful in repetitions
    (compare \g{-&lt;number&gt;} ). Perl does not recognize this syntax.
  * pcre2grep now automatically expands its buffer up to a maximum
    set by --max-buffer-size.
  * The -t option (grand total) has been added to pcre2grep.
  * A new function called pcre2_code_copy_with_tables() exists to
    copy a compiled pattern along with a private copy of the
    character tables that is uses.</changelog>
  <changelog author="astieger@suse.com" date="1493726400">- pcre2grep can now read .gz and .bz2 files directly
- pcre2test is now built to support line editing</changelog>
  <changelog author="astieger@suse.com" date="1501934400">- fix SLE 11 build</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Update to new upstream release 10.30
  * The main interpreter, pcre2_match(), has been refactored into
    a new version that does not use recursive function calls for
    remembering backtracking positions. The new implementation
    allows backtracking into recursive group calls in patterns,
    making it more compatible with Perl. For patterns that have a
    lot of backtracking, the heap is now used, and there is
    explicit limit on the amount, settable by
    pcre2_set_heap_limit(). The "recursion limit" is retained,
    but is renamed as "depth limit".
  * The new option PCRE2_ENDANCHORED insists that a pattern match
    must end at the end of the subject.
  * The new option PCRE2_EXTENDED_MORE implements Perl's /xx
    feature, and pcre2test is upgraded to support it. Setting
    within the pattern by (?xx) is Also supported.
  * (?n) can be used to set PCRE2_NO_AUTO_CAPTURE, because Perl
    now has this.
  * Additional pattern compile options in the compile context are
    now available: PCRE2_EXTRA_ALLOW_SURROGATE_ESCAPES and
    PCRE2_EXTRA_BAD_ESCAPE_IS LITERAL.
  * The newline type PCRE2_NEWLINE_NUL is now available.
  * The match limit value now also applies to pcre2_dfa_match()
    as there are patterns that can use up a lot of resources
    without necessarily recursing very deeply.
  * Various minor security fixes found by fuzzers:
    + bsc#1037165: crash for forward reference in lookbehind with
    PCRE2_ANCHORED
    + CVE-2017-8786: heap-based buffer overflow write in pcre2test
    (bsc#1036942)
    + CVE-2017-7186: DoS by triggering an invalid Unicode property
    lookup (bsc#1030066)
- Switch source URLs to use HTTP.</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- Update to new upstream release 10.31
  * New pcre2_config() options: PCRE2_CONFIG_NEVER_BACKSLASH_C and
    PCRE2_CONFIG_COMPILED_WIDTHS.
  * New pcre2_pattern_info() option PCRE2_INFO_EXTRAOPTIONS to
    retrieve the extra compile time options.
  * Public names for all pcre2_compile() error numbers.
  * Added PCRE2_CALLOUT_STARTMATCH and PCRE2_CALLOUT_BACKTRACK
    bits to a new field callout_flags in callout blocks.
- use https for main site
- cleanup with spec-cleaner</changelog>
  <changelog author="jsikes@suse.com" date="1627128000">- Added 0001-Fixed-atomic-group-backtracking-bug.patch
  * bsc#1187937
  * PHP 7.6.4 on s390x returns different results for preg_match
    function as compared to older PHP versions and x86
  * Sourced from upstream subversion commit:
    $ svn log -r965 svn://vcs.pcre.org/pcre2/code/trunk</changelog>
  <changelog author="jsikes@suse.com" date="1651924800">- Added pcre2-10.31-bsc1199232-unicode-property-matching.patch
  * bsc#1199232 / CVE-2022-1586
  * Fixes unicode property matching issue</changelog>
</package>
<package pkgid="9bb7961a9826d2f7d00effc5b734fb3aba8b5928bce1f92ec44193e43f9168b9" name="perl-32bit" arch="x86_64">
  <version epoch="0" ver="5.26.1" rel="150300.17.3.1"/>
  <changelog author="idonmez@suse.com" date="1455278400">- Update to perl-5.22.1
  * Several bugs, including a segmentation fault, have been fixed
    with the bounds checking constructs (introduced in Perl 5.22)
  * Module::CoreList has been upgraded from version 5.20150520 to
    5.20151213.
  * PerlIO::scalar has been upgraded from version 0.22 to 0.23.
  * POSIX has been upgraded from version 1.53 to 1.53_01.
  * Storable has been upgraded from version 2.53 to 2.53_01.
  * warnings has been upgraded from version 1.32 to 1.34.
  * See perldelta.pod for all the changes.
- Update perl-5.22.0.dif stop patching CPAN.pm, it was MacOS only
  and was breaking tests (due to SHA-1 mismatch).</changelog>
  <changelog author="mls@suse.de" date="1462881600">- Update to perl-5.24.0
  * postfix dereferencing is no longer experimental
  * unicode 8.0 is now supported
  * perl will now croak when closing an in-place output file fails
  * new "\b{lb}" boundary in regular expressions
  * qr/(?[ ])/" now works in UTF-8 locales
  * integer shift ("&lt;&lt;" and "&gt;&gt;") now more explicitly defined
  * printf and sprintf now allow reordered precision arguments
  * more fields provided to "sigaction" callback with "SA_SIGINFO"
  * hashbang redirection to Perl 6
  * set proper umask before calling mkstemp(3)
  * fix loss of taint in canonpath
  * remove duplicate environment variables from "environ"
- rename patch perl-5.22.0.dif to perl-5.24.0.dif</changelog>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
</package>
<package pkgid="52b3d963f0a4465e4584db5f314bcb9f465f6e7e2c2acf72e85b487d8ccbba67" name="perl" arch="aarch64">
  <version epoch="0" ver="5.26.1" rel="150300.17.3.1"/>
  <changelog author="idonmez@suse.com" date="1455278400">- Update to perl-5.22.1
  * Several bugs, including a segmentation fault, have been fixed
    with the bounds checking constructs (introduced in Perl 5.22)
  * Module::CoreList has been upgraded from version 5.20150520 to
    5.20151213.
  * PerlIO::scalar has been upgraded from version 0.22 to 0.23.
  * POSIX has been upgraded from version 1.53 to 1.53_01.
  * Storable has been upgraded from version 2.53 to 2.53_01.
  * warnings has been upgraded from version 1.32 to 1.34.
  * See perldelta.pod for all the changes.
- Update perl-5.22.0.dif stop patching CPAN.pm, it was MacOS only
  and was breaking tests (due to SHA-1 mismatch).</changelog>
  <changelog author="mls@suse.de" date="1462881600">- Update to perl-5.24.0
  * postfix dereferencing is no longer experimental
  * unicode 8.0 is now supported
  * perl will now croak when closing an in-place output file fails
  * new "\b{lb}" boundary in regular expressions
  * qr/(?[ ])/" now works in UTF-8 locales
  * integer shift ("&lt;&lt;" and "&gt;&gt;") now more explicitly defined
  * printf and sprintf now allow reordered precision arguments
  * more fields provided to "sigaction" callback with "SA_SIGINFO"
  * hashbang redirection to Perl 6
  * set proper umask before calling mkstemp(3)
  * fix loss of taint in canonpath
  * remove duplicate environment variables from "environ"
- rename patch perl-5.22.0.dif to perl-5.24.0.dif</changelog>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
</package>
<package pkgid="6b9d93d462664a8f2d2a3d17a65d44db37cc85bdbf0646be5f4bf27b079107f2" name="perl" arch="ppc64le">
  <version epoch="0" ver="5.26.1" rel="150300.17.3.1"/>
  <changelog author="idonmez@suse.com" date="1455278400">- Update to perl-5.22.1
  * Several bugs, including a segmentation fault, have been fixed
    with the bounds checking constructs (introduced in Perl 5.22)
  * Module::CoreList has been upgraded from version 5.20150520 to
    5.20151213.
  * PerlIO::scalar has been upgraded from version 0.22 to 0.23.
  * POSIX has been upgraded from version 1.53 to 1.53_01.
  * Storable has been upgraded from version 2.53 to 2.53_01.
  * warnings has been upgraded from version 1.32 to 1.34.
  * See perldelta.pod for all the changes.
- Update perl-5.22.0.dif stop patching CPAN.pm, it was MacOS only
  and was breaking tests (due to SHA-1 mismatch).</changelog>
  <changelog author="mls@suse.de" date="1462881600">- Update to perl-5.24.0
  * postfix dereferencing is no longer experimental
  * unicode 8.0 is now supported
  * perl will now croak when closing an in-place output file fails
  * new "\b{lb}" boundary in regular expressions
  * qr/(?[ ])/" now works in UTF-8 locales
  * integer shift ("&lt;&lt;" and "&gt;&gt;") now more explicitly defined
  * printf and sprintf now allow reordered precision arguments
  * more fields provided to "sigaction" callback with "SA_SIGINFO"
  * hashbang redirection to Perl 6
  * set proper umask before calling mkstemp(3)
  * fix loss of taint in canonpath
  * remove duplicate environment variables from "environ"
- rename patch perl-5.22.0.dif to perl-5.24.0.dif</changelog>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
</package>
<package pkgid="cb4c9764ee79bba8c26dc5076e8a4ad1114f1ec9ee6de2526773963765f0d00d" name="perl" arch="s390x">
  <version epoch="0" ver="5.26.1" rel="150300.17.3.1"/>
  <changelog author="idonmez@suse.com" date="1455278400">- Update to perl-5.22.1
  * Several bugs, including a segmentation fault, have been fixed
    with the bounds checking constructs (introduced in Perl 5.22)
  * Module::CoreList has been upgraded from version 5.20150520 to
    5.20151213.
  * PerlIO::scalar has been upgraded from version 0.22 to 0.23.
  * POSIX has been upgraded from version 1.53 to 1.53_01.
  * Storable has been upgraded from version 2.53 to 2.53_01.
  * warnings has been upgraded from version 1.32 to 1.34.
  * See perldelta.pod for all the changes.
- Update perl-5.22.0.dif stop patching CPAN.pm, it was MacOS only
  and was breaking tests (due to SHA-1 mismatch).</changelog>
  <changelog author="mls@suse.de" date="1462881600">- Update to perl-5.24.0
  * postfix dereferencing is no longer experimental
  * unicode 8.0 is now supported
  * perl will now croak when closing an in-place output file fails
  * new "\b{lb}" boundary in regular expressions
  * qr/(?[ ])/" now works in UTF-8 locales
  * integer shift ("&lt;&lt;" and "&gt;&gt;") now more explicitly defined
  * printf and sprintf now allow reordered precision arguments
  * more fields provided to "sigaction" callback with "SA_SIGINFO"
  * hashbang redirection to Perl 6
  * set proper umask before calling mkstemp(3)
  * fix loss of taint in canonpath
  * remove duplicate environment variables from "environ"
- rename patch perl-5.22.0.dif to perl-5.24.0.dif</changelog>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
</package>
<package pkgid="f5670e8c76239eca94183e56d02e42232f2aef42374ba06837846d508957b01a" name="perl" arch="src">
  <version epoch="0" ver="5.26.1" rel="150300.17.3.1"/>
  <changelog author="idonmez@suse.com" date="1455278400">- Update to perl-5.22.1
  * Several bugs, including a segmentation fault, have been fixed
    with the bounds checking constructs (introduced in Perl 5.22)
  * Module::CoreList has been upgraded from version 5.20150520 to
    5.20151213.
  * PerlIO::scalar has been upgraded from version 0.22 to 0.23.
  * POSIX has been upgraded from version 1.53 to 1.53_01.
  * Storable has been upgraded from version 2.53 to 2.53_01.
  * warnings has been upgraded from version 1.32 to 1.34.
  * See perldelta.pod for all the changes.
- Update perl-5.22.0.dif stop patching CPAN.pm, it was MacOS only
  and was breaking tests (due to SHA-1 mismatch).</changelog>
  <changelog author="mls@suse.de" date="1462881600">- Update to perl-5.24.0
  * postfix dereferencing is no longer experimental
  * unicode 8.0 is now supported
  * perl will now croak when closing an in-place output file fails
  * new "\b{lb}" boundary in regular expressions
  * qr/(?[ ])/" now works in UTF-8 locales
  * integer shift ("&lt;&lt;" and "&gt;&gt;") now more explicitly defined
  * printf and sprintf now allow reordered precision arguments
  * more fields provided to "sigaction" callback with "SA_SIGINFO"
  * hashbang redirection to Perl 6
  * set proper umask before calling mkstemp(3)
  * fix loss of taint in canonpath
  * remove duplicate environment variables from "environ"
- rename patch perl-5.22.0.dif to perl-5.24.0.dif</changelog>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
</package>
<package pkgid="ab7d8da9d0f21d80a69aa6d5cdbd290487471b94765017307106cb309d211054" name="perl" arch="x86_64">
  <version epoch="0" ver="5.26.1" rel="150300.17.3.1"/>
  <changelog author="idonmez@suse.com" date="1455278400">- Update to perl-5.22.1
  * Several bugs, including a segmentation fault, have been fixed
    with the bounds checking constructs (introduced in Perl 5.22)
  * Module::CoreList has been upgraded from version 5.20150520 to
    5.20151213.
  * PerlIO::scalar has been upgraded from version 0.22 to 0.23.
  * POSIX has been upgraded from version 1.53 to 1.53_01.
  * Storable has been upgraded from version 2.53 to 2.53_01.
  * warnings has been upgraded from version 1.32 to 1.34.
  * See perldelta.pod for all the changes.
- Update perl-5.22.0.dif stop patching CPAN.pm, it was MacOS only
  and was breaking tests (due to SHA-1 mismatch).</changelog>
  <changelog author="mls@suse.de" date="1462881600">- Update to perl-5.24.0
  * postfix dereferencing is no longer experimental
  * unicode 8.0 is now supported
  * perl will now croak when closing an in-place output file fails
  * new "\b{lb}" boundary in regular expressions
  * qr/(?[ ])/" now works in UTF-8 locales
  * integer shift ("&lt;&lt;" and "&gt;&gt;") now more explicitly defined
  * printf and sprintf now allow reordered precision arguments
  * more fields provided to "sigaction" callback with "SA_SIGINFO"
  * hashbang redirection to Perl 6
  * set proper umask before calling mkstemp(3)
  * fix loss of taint in canonpath
  * remove duplicate environment variables from "environ"
- rename patch perl-5.22.0.dif to perl-5.24.0.dif</changelog>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
</package>
<package pkgid="cb3a5cd342a1fe1fc1847368284041c6490cfae7eb53c5d246ba61c71cc85b31" name="perl-Git" arch="aarch64">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="5e28fc238fa7b029c4b33e3d1b10ff22a2959f94db80f5fcbd37418a9746158a" name="perl-Git" arch="ppc64le">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="f6b9e28dbdd3601526780d2b89ce317aafce0210715939913c74fdc60a5acac7" name="perl-Git" arch="s390x">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="637d2d807891ef96d00da5e089889e6c64a87eb4cdee8a58ccac5c989576b6d6" name="perl-Git" arch="x86_64">
  <version epoch="0" ver="2.35.3" rel="150300.10.12.1"/>
  <changelog author="fvogt@suse.com" date="1615896000">- Require only openssh-clients where possible (TW, SLE &gt;= 15 SP3)
  (boo#1183580)
- Drop rsync requirement, not necessary anymore</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616846400">- git 2.31.1:
  * fsmonitor bug fixes
  * fix git bisect to take an annotated tag as a good/bad endpoint
  * Fix a corner case in "git mv" on case insensitive systems</changelog>
  <changelog author="dmueller@suse.com" date="1617883200">- add suse-use-builtin-add-interactive.patch (jsc#SLE-17838)
- split git-core perl module into git-core, move instaweb
  to git-web, and the single remaining perl builtin to git, so
  that git-core is perl free</changelog>
  <changelog author="fcrozat@suse.com" date="1617969600">- Add sysusers file to create git-daemon user.</changelog>
  <changelog author="mmachova@suse.com" date="1619092800">- Remove deprecated "syslog" option from git-daemon.service (bsc#1185147)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622980800">- git 2.32.0:
  * ".gitattributes", ".gitignore", and ".mailmap" files that are
    symbolic links are ignored
  * "git apply --3way" used to first attempt a straight
    application, and only fell back to the 3-way merge algorithm
    when the straight application failed.  Starting with this
    version, the command will first try the 3-way merge algorithm
    and only when it fails (either resulting with conflict or the
    base versions of blobs are missing), falls back to the usual
    patch application.
  * "git stash show" can now show the untracked part of the stash
  * Improved "git repack" strategy
  * http code can now unlock a certificate with a cached password
    respectively.
  * "git clone --reject-shallow" option fails the clone as soon as
    we notice that we are cloning from a shallow repository.
  * "gitweb" learned "e-mail privacy" feature
  * Multiple improvements to output and configuration options
  * Bug fixes and developer visible fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1629547200">- git 2.33.0:
  * "git send-email" learned the "--sendmail-cmd" command line option
    and the "sendemail.sendmailCmd" configuration variable, which is a
    more sensible approach than the current way of repurposing the
    "smtp-server" that is meant to name the server to instead name the
    command to talk to the server.
  * The userdiff pattern for C# learned the token "record".
  * "git rev-list" learns to omit the "commit &lt;object-name&gt;" header
    lines from the output with the `--no-commit-header` option.
  * "git worktree add --lock" learned to record why the worktree is
    locked with a custom message.
  * internal improvements including performance optimizations
  * a number of bug fixes</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * git-daemon.service</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1634126400">- git 2.33.1:
  * fix "git pull" and "git rebase -r" various corner cases and bugs
  * "git commit --fixup" now works with "--edit" again.
  * Fix "git send-email" unwanted threading
  * Fix output from "git fast-export" anonymization feature
    showing an annotated tag incorrectly.
  * Fixes for various command output
  * fix "git difftool --dir-diff" mishandling symbolic links
  * Redact sensitive data in the HTTP trace for HTTP/2 requests
  * further bug fixes for various git operations</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634731200">- Add CONFIG parameter to %sysusers_generate_pre
- Remove unneeded SHELL in git-daemon.conf
- Fix sysusers usage in spec file
- Require nogroup group for %pre (bsc#1192023)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637236800">- git 2.34.0:
  * Release notes:
    https://raw.githubusercontent.com/git/git/master/Documentation/RelNotes/2.34.0.txt</changelog>
  <changelog author="dmueller@suse.com" date="1637496000">- fix url</changelog>
  <changelog author="dmueller@suse.com" date="1637928000">- update to 2.34.1 (bsc#1193722):
  * "git grep" looking in a blob that has non-UTF8 payload was
    completely broken when linked with certain versions of PCREv2
    library in the latest release.
  * "git pull" with any strategy when the other side is behind us
    should succeed as it is a no-op, but doesn't.
  * An earlier change in 2.34.0 caused JGit application (that abused
    GIT_EDITOR mechanism when invoking "git config") to get stuck with
    a SIGTTOU signal; it has been reverted.
  * An earlier change that broke .gitignore matching has been reverted.
  * SubmittingPatches document gained a syntactically incorrect mark-up,
    which has been corrected.</changelog>
  <changelog author="dmueller@suse.com" date="1643371200">- update to 2.35.0:
  * "_" is now treated as any other URL-valid characters in an URL when
  matching the per-URL configuration variable names.
  * The color palette used by "git grep" has been updated to match that
  of GNU grep.
  * "git status --porcelain=v2" now show the number of stash entries
  with --show-stash like the normal output does.
  * "git stash" learned the "--staged" option to stash away what has
  been added to the index (and nothing else).
  * "git var GIT_DEFAULT_BRANCH" is a way to see what name is used for
  the newly created branch if "git init" is run.
  * Various operating modes of "git reset" have been made to work
  better with the sparse index.
  * "git submodule deinit" for a submodule whose .git metadata
  directory is embedded in its working tree refused to work, until
  the submodule gets converted to use the "absorbed" form where the
  metadata directory is stored in superproject, and a gitfile at the
  top-level of the working tree of the submodule points at it.  The
  command is taught to convert such submodules to the absorbed form
  as needed.
  * The completion script (in contrib/) learns that the "--date"
  option of commands from the "git log" family takes "human" and
  "auto" as valid values.
  * "Zealous diff3" style of merge conflict presentation has been added.
  * The "git log --format=%(describe)" placeholder has been extended to
  allow passing selected command-line options to the underlying "git
  describe" command.
  * "default" and "reset" have been added to our color palette.
  * The cryptographic signing using ssh keys can specify literal keys
  for keytypes whose name do not begin with the "ssh-" prefix by
  using the "key::" prefix mechanism (e.g. "key::ecdsa-sha2-nistp256").
  * "git fetch" without the "--update-head-ok" option ought to protect
  a checked out branch from getting updated, to prevent the working
  tree that checks it out to go out of sync.  The code was written
  before the use of "git worktree" got widespread, and only checked
  the branch that was checked out in the current worktree, which has
  been updated.
  * "git name-rev" has been tweaked to give output that is shorter and
  easier to understand.
  * "git apply" has been taught to ignore a message without a patch
  with the "--allow-empty" option.  It also learned to honor the
  "--quiet" option given from the command line.
  * The "init" and "set" subcommands in "git sparse-checkout" have been
  unified for a better user experience and performance.
  * Many git commands that deal with working tree files try to remove a
  directory that becomes empty (i.e. "git switch" from a branch that
  has the directory to another branch that does not would attempt
  remove all files in the directory and the directory itself).  This
  drops users into an unfamiliar situation if the command was run in
  a subdirectory that becomes subject to removal due to the command.
  The commands have been taught to keep an empty directory if it is
  the directory they were started in to avoid surprising users.
  * "git am" learns "--empty=(stop|drop|keep)" option to tweak what is
  done to a piece of e-mail without a patch in it.
  * The default merge message prepared by "git merge" records the name
  of the current branch; the name can be overridden with a new option
  to allow users to pretend a merge is made on a different branch.
  * The way "git p4" shows file sizes in its output has been updated to
  use human-readable units.
  * "git -c branch.autosetupmerge=inherit branch new old" makes "new"
  to have the same upstream as the "old" branch, instead of marking
  "old" itself as its upstream.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1643457600">- update to 2.35.1:
  * fix "rebase" and "stash" in a secondary worktree</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- "Downgrade" git-gui and gitk Recommends to Suggests.</changelog>
  <changelog author="chris@computersalat.de" date="1646913600">- fix deps for SLES 12</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649764800">- git 2.35.2 (CVE-2022-24765, bsc#1198234):
  * CVE-2022-24765: git may execute commands defined by other users
    from unexpected worktrees</changelog>
  <changelog author="olaf@aepfle.de" date="1649851200">- Require bash in git-daemon because the service file uses it
- Reword git-daemon.service description to get a useful sentence
  in journalctl -b</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1649937600">- git 2.35.3:
  * usability fix-up for CVE-2022-24765 bsc#1198234:
    '*' can be used as the value for the `safe.directory` variable
    to signal that the user considers that any directory is safe.
  * The code that was meant to parse the new `safe.directory`
    configuration variable was not checking what configuration
    variable was being fed to it</changelog>
</package>
<package pkgid="d6fc27319e9d1967ef20c6408a3ddb773fb1d1c6d1f520e634d84226690b5700" name="perl-XML-LibXML" arch="aarch64">
  <version epoch="0" ver="2.0132" rel="150000.3.3.1"/>
  <changelog author="coolo@suse.com" date="1429099200">- updated to 2.0118
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0118  2015-02-05
  - Add $Config{incpath} to the include paths on Win32.
  - Fixes https://rt.cpan.org/Ticket/Display.html?id=101944
  - Thanks to Marek for the report and propsed fix.
  2.0117  2014-10-26
  - Support libxml2 builds with disabled xmlReader
  - Makefile.PL : don't require a recentish ExtUtils::MakeMaker.
  - https://rt.cpan.org/Ticket/Display.html?id=83322
  - Thanks to Slaven Rezic for the report.
  - Fix broken t/02parse.t with non-English locale with recent perls.
  - https://rt.cpan.org/Public/Bug/Display.html?id=97805
  - Thanks to Slaven Rezic for the report.</changelog>
  <changelog author="coolo@suse.com" date="1429876800">- updated to 2.0119
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0119  2015-04-23
  - Preserve unset options after a _clone() call (e.g: in load_xml()).
  - This caused expand_entities(0) to not be preserved/etc.
  - Thanks to Tilmann Haak from xing.com for the report.</changelog>
  <changelog author="coolo@suse.com" date="1430568000">- updated to 2.0120
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0120  2015-05-01
  - Replace the test for the previous change with a more meaningful one.
  - Change was to preserve unset options after a _clone() call.
  - https://access.redhat.com/security/cve/CVE-2015-3451
  - Thanks to Salvatore Bonaccorso from Debian for the report and
    for a proposed fix (which was further refined by Shlomi Fish).</changelog>
  <changelog author="coolo@suse.com" date="1430827200">- updated to 2.0121
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0121  2015-05-03
  - Mention CVE-2015-3451 and related links in the Changes (= this file)
    entry for 2.0119.
  - Thanks to Tilmann Haak for pointing it out.</changelog>
  <changelog author="coolo@suse.com" date="1441195200">- updated to 2.0122
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0122  2015-09-01
  - Enable the memory test on cygwin as well as Linux.
  - https://rt.cpan.org/Ticket/Display.html?id=104666
  - Thanks to https://me.yahoo.com/howdidwegetherereally#f714d for
    the report.
  - Fix a typo in createElementNS
  - https://rt.cpan.org/Public/Bug/Display.html?id=106807
  - Thanks to Rich for the report.</changelog>
  <changelog author="coolo@suse.com" date="1449662400">- updated to 2.0123
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0123  2015-12-06
  - Get rid of an undef-warning in XML::LibXML::Reader .
  - https://rt.cpan.org/Ticket/Display.html?id=106830
  - Thanks to Rich for the report and testcase.
  - Apply patch from Debian for rewording the documentation.
  - https://rt.cpan.org/Ticket/Display.html?id=110116
  - Some extra rewording has been done by SHLOMIF.
  - Thanks to Gregor Herrman and the Debian Team</changelog>
  <changelog author="coolo@suse.com" date="1457352000">- updated to 2.0124
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0124  2016-02-27
  - Fix XML::LibXML::Text-&gt;attributes() to return an empty list in list
    context.
  - https://rt.cpan.org/Ticket/Display.html?id=112470
  - Thanks to Rob Dixon for the report.</changelog>
  <changelog author="coolo@suse.com" date="1464696000">- updated to 2.0125
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0125  2016-05-30
  - Moved the repository from Mercurial and BitBucket to Git and GitHub:
  - https://github.com/shlomif/perl-XML-LibXML
  - This was done to better encourage contributions to XML::LiBXML and
    to be able to use the better Continuous Integration options that
    are available for GitHub projects.</changelog>
  <changelog author="coolo@suse.com" date="1467028800">- updated to 2.0126
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0126  2016-06-24
  - Workaround RT#114638:
  - 2.9.4 broke XSD Schema support.
  - https://rt.cpan.org/Public/Bug/Display.html?id=114638
  - https://github.com/shlomif/libxml2-2.9.4-reader-schema-regression
  - https://bugzilla.gnome.org/show_bug.cgi?id=766834
  - https://github.com/shlomif/perl-XML-LibXML/pull/1
  - Thanks to Paul for the report and to RURBAN for a pull-req.
  - Add t/release-kwalitee.t for testing CPANTS Kwalitee.</changelog>
  <changelog author="coolo@suse.com" date="1469275200">- updated to 2.0127
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0127  2016-07-22
  - Make sure t/release-kwalitee.t and other tests do not run by default.
  - Only with AUTHOR_TESTING or RELEASE_TESTING specified.
  - Thanks to Lance Wicks for the pull request.
  - https://rt.cpan.org/Ticket/Display.html?id=115586
  - https://rt.cpan.org/Ticket/Display.html?id=115859</changelog>
  <changelog author="coolo@suse.com" date="1469448000">- updated to 2.0128
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0128  2016-07-24
  - Hopefully add the .pod files again as they were missing from 2.0127.
  - https://github.com/shlomif/perl-XML-LibXML/issues/3
  - Thanks to Paul Howarth for the report.
  - This was caused by ExtUtils::Manifest just warning that the files
    referenced in the "MANIFEST" file were not present and still
    continuing to prepare the archive as usual. A "do-what-I-don't-want-to"
    thing.</changelog>
  <changelog author="coolo@suse.com" date="1489579200">- updated to 2.0129
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0129  2017-03-14
  - Add example/create-sample-html-document.pl .
  - https://rt.cpan.org/Ticket/Display.html?id=117923
  - Add support for the set_document_locator() SAX method .
  - Thanks to Alexander Batyrshin for the pull-request.
  - Make parsing of large perl strings much faster.
  - https://github.com/shlomif/perl-XML-LibXML/pull/5
  - Thanks to Cedric Cellier for the pull-request.</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Add patch to fix building with new libxml (from Fedora):
  * XML-LibXML-2.0129-Adjust-tests-to-libxml2-2.9.5.patch</changelog>
  <changelog author="coolo@suse.com" date="1508414400">- updated to 2.0130
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0130  2017-10-18
  - Fix the tests with libxml2-2.9.6 .
  - https://rt.cpan.org/Public/Bug/Display.html?id=122958
  - Thanks to Daniel Macks for the report and ppisar for a patch.
  - setNamespace() Enhancements.
  - Thanks to E. Choroba.
- Dropped patch merged upstream:
  * XML-LibXML-2.0129-Adjust-tests-to-libxml2-2.9.5.patch</changelog>
  <changelog author="coolo@suse.com" date="1508932800">- updated to 2.0131
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0131  2017-10-24
  - Re-include the missing *.pod documents.
  - https://rt.cpan.org/Ticket/Display.html?id=123362
  - Thanks to Stephen for the report.
  - Add t/pod-files-presence.t to test for it in the future.
  - Merge https://github.com/shlomif/perl-XML-LibXML/pull/8
  - Fix bug in Node::replaceChild()
  - Thanks to @Mipu94 .</changelog>
  <changelog author="coolo@suse.com" date="1509278400">- updated to 2.0132
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0132  2017-10-28
  - Revert setNamespace() enhancements that broke some dependent tests:
  - commit df9fdc6659cb2e4e9bc896e58c02dfd79b430fbb
  - add t/48_rt123379_setNamespace.t .
  - Thanks to Alexander Bluhm and Slaven Rezic for the reports and
    the test.</changelog>
  <changelog author="david.anes@suse.com" date="1649678400">- (bsc#1197798) FTBFS: compile against latest version available of
  libxml in SP4 so perl-XML-LibXSLT compiles cleanly.</changelog>
</package>
<package pkgid="98af084cd23a3665d71926f24dd27fa914fb9910edee5c330a0c43a06ebcd63d" name="perl-XML-LibXML" arch="ppc64le">
  <version epoch="0" ver="2.0132" rel="150000.3.3.1"/>
  <changelog author="coolo@suse.com" date="1429099200">- updated to 2.0118
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0118  2015-02-05
  - Add $Config{incpath} to the include paths on Win32.
  - Fixes https://rt.cpan.org/Ticket/Display.html?id=101944
  - Thanks to Marek for the report and propsed fix.
  2.0117  2014-10-26
  - Support libxml2 builds with disabled xmlReader
  - Makefile.PL : don't require a recentish ExtUtils::MakeMaker.
  - https://rt.cpan.org/Ticket/Display.html?id=83322
  - Thanks to Slaven Rezic for the report.
  - Fix broken t/02parse.t with non-English locale with recent perls.
  - https://rt.cpan.org/Public/Bug/Display.html?id=97805
  - Thanks to Slaven Rezic for the report.</changelog>
  <changelog author="coolo@suse.com" date="1429876800">- updated to 2.0119
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0119  2015-04-23
  - Preserve unset options after a _clone() call (e.g: in load_xml()).
  - This caused expand_entities(0) to not be preserved/etc.
  - Thanks to Tilmann Haak from xing.com for the report.</changelog>
  <changelog author="coolo@suse.com" date="1430568000">- updated to 2.0120
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0120  2015-05-01
  - Replace the test for the previous change with a more meaningful one.
  - Change was to preserve unset options after a _clone() call.
  - https://access.redhat.com/security/cve/CVE-2015-3451
  - Thanks to Salvatore Bonaccorso from Debian for the report and
    for a proposed fix (which was further refined by Shlomi Fish).</changelog>
  <changelog author="coolo@suse.com" date="1430827200">- updated to 2.0121
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0121  2015-05-03
  - Mention CVE-2015-3451 and related links in the Changes (= this file)
    entry for 2.0119.
  - Thanks to Tilmann Haak for pointing it out.</changelog>
  <changelog author="coolo@suse.com" date="1441195200">- updated to 2.0122
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0122  2015-09-01
  - Enable the memory test on cygwin as well as Linux.
  - https://rt.cpan.org/Ticket/Display.html?id=104666
  - Thanks to https://me.yahoo.com/howdidwegetherereally#f714d for
    the report.
  - Fix a typo in createElementNS
  - https://rt.cpan.org/Public/Bug/Display.html?id=106807
  - Thanks to Rich for the report.</changelog>
  <changelog author="coolo@suse.com" date="1449662400">- updated to 2.0123
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0123  2015-12-06
  - Get rid of an undef-warning in XML::LibXML::Reader .
  - https://rt.cpan.org/Ticket/Display.html?id=106830
  - Thanks to Rich for the report and testcase.
  - Apply patch from Debian for rewording the documentation.
  - https://rt.cpan.org/Ticket/Display.html?id=110116
  - Some extra rewording has been done by SHLOMIF.
  - Thanks to Gregor Herrman and the Debian Team</changelog>
  <changelog author="coolo@suse.com" date="1457352000">- updated to 2.0124
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0124  2016-02-27
  - Fix XML::LibXML::Text-&gt;attributes() to return an empty list in list
    context.
  - https://rt.cpan.org/Ticket/Display.html?id=112470
  - Thanks to Rob Dixon for the report.</changelog>
  <changelog author="coolo@suse.com" date="1464696000">- updated to 2.0125
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0125  2016-05-30
  - Moved the repository from Mercurial and BitBucket to Git and GitHub:
  - https://github.com/shlomif/perl-XML-LibXML
  - This was done to better encourage contributions to XML::LiBXML and
    to be able to use the better Continuous Integration options that
    are available for GitHub projects.</changelog>
  <changelog author="coolo@suse.com" date="1467028800">- updated to 2.0126
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0126  2016-06-24
  - Workaround RT#114638:
  - 2.9.4 broke XSD Schema support.
  - https://rt.cpan.org/Public/Bug/Display.html?id=114638
  - https://github.com/shlomif/libxml2-2.9.4-reader-schema-regression
  - https://bugzilla.gnome.org/show_bug.cgi?id=766834
  - https://github.com/shlomif/perl-XML-LibXML/pull/1
  - Thanks to Paul for the report and to RURBAN for a pull-req.
  - Add t/release-kwalitee.t for testing CPANTS Kwalitee.</changelog>
  <changelog author="coolo@suse.com" date="1469275200">- updated to 2.0127
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0127  2016-07-22
  - Make sure t/release-kwalitee.t and other tests do not run by default.
  - Only with AUTHOR_TESTING or RELEASE_TESTING specified.
  - Thanks to Lance Wicks for the pull request.
  - https://rt.cpan.org/Ticket/Display.html?id=115586
  - https://rt.cpan.org/Ticket/Display.html?id=115859</changelog>
  <changelog author="coolo@suse.com" date="1469448000">- updated to 2.0128
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0128  2016-07-24
  - Hopefully add the .pod files again as they were missing from 2.0127.
  - https://github.com/shlomif/perl-XML-LibXML/issues/3
  - Thanks to Paul Howarth for the report.
  - This was caused by ExtUtils::Manifest just warning that the files
    referenced in the "MANIFEST" file were not present and still
    continuing to prepare the archive as usual. A "do-what-I-don't-want-to"
    thing.</changelog>
  <changelog author="coolo@suse.com" date="1489579200">- updated to 2.0129
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0129  2017-03-14
  - Add example/create-sample-html-document.pl .
  - https://rt.cpan.org/Ticket/Display.html?id=117923
  - Add support for the set_document_locator() SAX method .
  - Thanks to Alexander Batyrshin for the pull-request.
  - Make parsing of large perl strings much faster.
  - https://github.com/shlomif/perl-XML-LibXML/pull/5
  - Thanks to Cedric Cellier for the pull-request.</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Add patch to fix building with new libxml (from Fedora):
  * XML-LibXML-2.0129-Adjust-tests-to-libxml2-2.9.5.patch</changelog>
  <changelog author="coolo@suse.com" date="1508414400">- updated to 2.0130
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0130  2017-10-18
  - Fix the tests with libxml2-2.9.6 .
  - https://rt.cpan.org/Public/Bug/Display.html?id=122958
  - Thanks to Daniel Macks for the report and ppisar for a patch.
  - setNamespace() Enhancements.
  - Thanks to E. Choroba.
- Dropped patch merged upstream:
  * XML-LibXML-2.0129-Adjust-tests-to-libxml2-2.9.5.patch</changelog>
  <changelog author="coolo@suse.com" date="1508932800">- updated to 2.0131
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0131  2017-10-24
  - Re-include the missing *.pod documents.
  - https://rt.cpan.org/Ticket/Display.html?id=123362
  - Thanks to Stephen for the report.
  - Add t/pod-files-presence.t to test for it in the future.
  - Merge https://github.com/shlomif/perl-XML-LibXML/pull/8
  - Fix bug in Node::replaceChild()
  - Thanks to @Mipu94 .</changelog>
  <changelog author="coolo@suse.com" date="1509278400">- updated to 2.0132
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0132  2017-10-28
  - Revert setNamespace() enhancements that broke some dependent tests:
  - commit df9fdc6659cb2e4e9bc896e58c02dfd79b430fbb
  - add t/48_rt123379_setNamespace.t .
  - Thanks to Alexander Bluhm and Slaven Rezic for the reports and
    the test.</changelog>
  <changelog author="david.anes@suse.com" date="1649678400">- (bsc#1197798) FTBFS: compile against latest version available of
  libxml in SP4 so perl-XML-LibXSLT compiles cleanly.</changelog>
</package>
<package pkgid="c6dec200845c034942c6f81d83dc6153947de79335749cb58fb53630cd20d21a" name="perl-XML-LibXML" arch="s390x">
  <version epoch="0" ver="2.0132" rel="150000.3.3.1"/>
  <changelog author="coolo@suse.com" date="1429099200">- updated to 2.0118
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0118  2015-02-05
  - Add $Config{incpath} to the include paths on Win32.
  - Fixes https://rt.cpan.org/Ticket/Display.html?id=101944
  - Thanks to Marek for the report and propsed fix.
  2.0117  2014-10-26
  - Support libxml2 builds with disabled xmlReader
  - Makefile.PL : don't require a recentish ExtUtils::MakeMaker.
  - https://rt.cpan.org/Ticket/Display.html?id=83322
  - Thanks to Slaven Rezic for the report.
  - Fix broken t/02parse.t with non-English locale with recent perls.
  - https://rt.cpan.org/Public/Bug/Display.html?id=97805
  - Thanks to Slaven Rezic for the report.</changelog>
  <changelog author="coolo@suse.com" date="1429876800">- updated to 2.0119
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0119  2015-04-23
  - Preserve unset options after a _clone() call (e.g: in load_xml()).
  - This caused expand_entities(0) to not be preserved/etc.
  - Thanks to Tilmann Haak from xing.com for the report.</changelog>
  <changelog author="coolo@suse.com" date="1430568000">- updated to 2.0120
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0120  2015-05-01
  - Replace the test for the previous change with a more meaningful one.
  - Change was to preserve unset options after a _clone() call.
  - https://access.redhat.com/security/cve/CVE-2015-3451
  - Thanks to Salvatore Bonaccorso from Debian for the report and
    for a proposed fix (which was further refined by Shlomi Fish).</changelog>
  <changelog author="coolo@suse.com" date="1430827200">- updated to 2.0121
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0121  2015-05-03
  - Mention CVE-2015-3451 and related links in the Changes (= this file)
    entry for 2.0119.
  - Thanks to Tilmann Haak for pointing it out.</changelog>
  <changelog author="coolo@suse.com" date="1441195200">- updated to 2.0122
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0122  2015-09-01
  - Enable the memory test on cygwin as well as Linux.
  - https://rt.cpan.org/Ticket/Display.html?id=104666
  - Thanks to https://me.yahoo.com/howdidwegetherereally#f714d for
    the report.
  - Fix a typo in createElementNS
  - https://rt.cpan.org/Public/Bug/Display.html?id=106807
  - Thanks to Rich for the report.</changelog>
  <changelog author="coolo@suse.com" date="1449662400">- updated to 2.0123
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0123  2015-12-06
  - Get rid of an undef-warning in XML::LibXML::Reader .
  - https://rt.cpan.org/Ticket/Display.html?id=106830
  - Thanks to Rich for the report and testcase.
  - Apply patch from Debian for rewording the documentation.
  - https://rt.cpan.org/Ticket/Display.html?id=110116
  - Some extra rewording has been done by SHLOMIF.
  - Thanks to Gregor Herrman and the Debian Team</changelog>
  <changelog author="coolo@suse.com" date="1457352000">- updated to 2.0124
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0124  2016-02-27
  - Fix XML::LibXML::Text-&gt;attributes() to return an empty list in list
    context.
  - https://rt.cpan.org/Ticket/Display.html?id=112470
  - Thanks to Rob Dixon for the report.</changelog>
  <changelog author="coolo@suse.com" date="1464696000">- updated to 2.0125
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0125  2016-05-30
  - Moved the repository from Mercurial and BitBucket to Git and GitHub:
  - https://github.com/shlomif/perl-XML-LibXML
  - This was done to better encourage contributions to XML::LiBXML and
    to be able to use the better Continuous Integration options that
    are available for GitHub projects.</changelog>
  <changelog author="coolo@suse.com" date="1467028800">- updated to 2.0126
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0126  2016-06-24
  - Workaround RT#114638:
  - 2.9.4 broke XSD Schema support.
  - https://rt.cpan.org/Public/Bug/Display.html?id=114638
  - https://github.com/shlomif/libxml2-2.9.4-reader-schema-regression
  - https://bugzilla.gnome.org/show_bug.cgi?id=766834
  - https://github.com/shlomif/perl-XML-LibXML/pull/1
  - Thanks to Paul for the report and to RURBAN for a pull-req.
  - Add t/release-kwalitee.t for testing CPANTS Kwalitee.</changelog>
  <changelog author="coolo@suse.com" date="1469275200">- updated to 2.0127
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0127  2016-07-22
  - Make sure t/release-kwalitee.t and other tests do not run by default.
  - Only with AUTHOR_TESTING or RELEASE_TESTING specified.
  - Thanks to Lance Wicks for the pull request.
  - https://rt.cpan.org/Ticket/Display.html?id=115586
  - https://rt.cpan.org/Ticket/Display.html?id=115859</changelog>
  <changelog author="coolo@suse.com" date="1469448000">- updated to 2.0128
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0128  2016-07-24
  - Hopefully add the .pod files again as they were missing from 2.0127.
  - https://github.com/shlomif/perl-XML-LibXML/issues/3
  - Thanks to Paul Howarth for the report.
  - This was caused by ExtUtils::Manifest just warning that the files
    referenced in the "MANIFEST" file were not present and still
    continuing to prepare the archive as usual. A "do-what-I-don't-want-to"
    thing.</changelog>
  <changelog author="coolo@suse.com" date="1489579200">- updated to 2.0129
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0129  2017-03-14
  - Add example/create-sample-html-document.pl .
  - https://rt.cpan.org/Ticket/Display.html?id=117923
  - Add support for the set_document_locator() SAX method .
  - Thanks to Alexander Batyrshin for the pull-request.
  - Make parsing of large perl strings much faster.
  - https://github.com/shlomif/perl-XML-LibXML/pull/5
  - Thanks to Cedric Cellier for the pull-request.</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Add patch to fix building with new libxml (from Fedora):
  * XML-LibXML-2.0129-Adjust-tests-to-libxml2-2.9.5.patch</changelog>
  <changelog author="coolo@suse.com" date="1508414400">- updated to 2.0130
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0130  2017-10-18
  - Fix the tests with libxml2-2.9.6 .
  - https://rt.cpan.org/Public/Bug/Display.html?id=122958
  - Thanks to Daniel Macks for the report and ppisar for a patch.
  - setNamespace() Enhancements.
  - Thanks to E. Choroba.
- Dropped patch merged upstream:
  * XML-LibXML-2.0129-Adjust-tests-to-libxml2-2.9.5.patch</changelog>
  <changelog author="coolo@suse.com" date="1508932800">- updated to 2.0131
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0131  2017-10-24
  - Re-include the missing *.pod documents.
  - https://rt.cpan.org/Ticket/Display.html?id=123362
  - Thanks to Stephen for the report.
  - Add t/pod-files-presence.t to test for it in the future.
  - Merge https://github.com/shlomif/perl-XML-LibXML/pull/8
  - Fix bug in Node::replaceChild()
  - Thanks to @Mipu94 .</changelog>
  <changelog author="coolo@suse.com" date="1509278400">- updated to 2.0132
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0132  2017-10-28
  - Revert setNamespace() enhancements that broke some dependent tests:
  - commit df9fdc6659cb2e4e9bc896e58c02dfd79b430fbb
  - add t/48_rt123379_setNamespace.t .
  - Thanks to Alexander Bluhm and Slaven Rezic for the reports and
    the test.</changelog>
  <changelog author="david.anes@suse.com" date="1649678400">- (bsc#1197798) FTBFS: compile against latest version available of
  libxml in SP4 so perl-XML-LibXSLT compiles cleanly.</changelog>
</package>
<package pkgid="4b1e2e507468f6206fb44e25890f4629cbf7ea4af4f7cd230c2c0fe0836a6a6e" name="perl-XML-LibXML" arch="src">
  <version epoch="0" ver="2.0132" rel="150000.3.3.1"/>
  <changelog author="coolo@suse.com" date="1393243200">- updated to 2.0110
  - Add "use strict;" and "use warnings;" to all modules (CPANTS).
  - MIN_PERL_VERSION (CPANTS).
  - Add a LICENSE section to the POD (CPANTS).
  - Fix for requiring XML::LibXML more than once in perl-5.19.6 and up.
  - https://rt.cpan.org/Ticket/Display.html?id=92606
  - Thanks to Father Chrysostomos for the investigation, the test
    case, and the fix.
  - Replace local $^W with &lt;&lt; no warnings 'portable'; &gt;&gt; in t/15nodelist.t
  - Should fix https://rt.cpan.org/Public/Bug/Display.html?id=88017
  - Thanks to "pagenyon" for the report.
  - Fix hash key typo in SAX/Builder.pm - "LocalName" was mis-capitalised.
  - https://rt.cpan.org/Public/Bug/Display.html?id=91433
  - Thanks to Thomas Berger for the report and for a reproducing
    testcase.
  - Convert from "use base" to the more modern "use parent".</changelog>
  <changelog author="coolo@suse.com" date="1395057600">- updated to 2.0113
  - Fix test failures with older libxml2 versions.
  - https://rt.cpan.org/Ticket/Display.html?id=93852
  - Thanks to Nick Wellnhofer for the patch.
  - Thanks to the CPAN Testers for reporting this issue.
  2.0112          Thu 13 Mar 20:16:52 IST 2014
  - Fix segfaults when accessing attributes of DTD nodes
  - https://rt.cpan.org/Ticket/Display.html?id=71076
  - Thanks to Ralph Merridew for the report.
  - Make $schema-&gt;validate work with elements. This uses
    xmlSchemaValidateOneElement under the hood.
  - https://rt.cpan.org/Ticket/Display.html?id=93496
  - Thanks to Jeremy Marshall for the report.
  - Fix https://rt.cpan.org/Ticket/Display.html?id=93429 .
  - Thanks to Nick Wellnhofer for the report and test.
  - Apply patch to build with MSVC on Windows.
  - https://rt.cpan.org/Ticket/Display.html?id=90064
  - Thanks to Nick Wellnhofer for the investigation and the patch.
  2.0111          Wed  5 Mar 17:15:57 IST 2014
  - Skip t/40reader_mem_error.t with libxml2 &lt; 2.7.4
    The failure is probably due to a known double-free bug.
  - https://rt.cpan.org/Ticket/Display.html?id=84564
  - https://bugzilla.gnome.org/show_bug.cgi?id=447899
  - Thanks to Nick Wellnhofer for the pull request.
  - Die if a file handle with an encoding layer returns more bytes
    than requested in parse_fh.
  - https://rt.cpan.org/Ticket/Display.html?id=78448
  - Make insertData, deleteData, replaceData work correctly with UTF-8
    strings.
  - Fix substringData
  - https://rt.cpan.org/Ticket/Display.html?id=88730
  - Fix "Threads still failing?" Bug report.
  - https://rt.cpan.org/Ticket/Display.html?id=91800
  - Thanks to Daniel for the bug report and a test case, and to
    YOREEK for the patch.</changelog>
  <changelog author="coolo@suse.com" date="1406289600">- updated to 2.0116
  - t/cpan-changes.t : minimum version of Test::CPAN::Changes.
  - This is to avoid test failures such as:
  - http://www.cpantesters.org/cpan/report/69ee1a2a-6c09-1014-be8f-3786912f2992
  2.0115  2014-04-03
  - Fix double free when calling $node-&gt;addSibling with text nodes.
  - https://rt.cpan.org/Ticket/Display.html?id=94149
  - Thanks to Jeff Trout for the report.
  2.0114  2014-04-03
  - Fix memory leaks and segfaults related to removal and insertion of
    DTD nodes.
  - https://rt.cpan.org/Ticket/Display.html?id=80521
  - Fix memory leak in $node-&gt;removeChildNodes</changelog>
  <changelog author="coolo@suse.com" date="1429099200">- updated to 2.0118
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0118  2015-02-05
  - Add $Config{incpath} to the include paths on Win32.
  - Fixes https://rt.cpan.org/Ticket/Display.html?id=101944
  - Thanks to Marek for the report and propsed fix.
  2.0117  2014-10-26
  - Support libxml2 builds with disabled xmlReader
  - Makefile.PL : don't require a recentish ExtUtils::MakeMaker.
  - https://rt.cpan.org/Ticket/Display.html?id=83322
  - Thanks to Slaven Rezic for the report.
  - Fix broken t/02parse.t with non-English locale with recent perls.
  - https://rt.cpan.org/Public/Bug/Display.html?id=97805
  - Thanks to Slaven Rezic for the report.</changelog>
  <changelog author="coolo@suse.com" date="1429876800">- updated to 2.0119
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0119  2015-04-23
  - Preserve unset options after a _clone() call (e.g: in load_xml()).
  - This caused expand_entities(0) to not be preserved/etc.
  - Thanks to Tilmann Haak from xing.com for the report.</changelog>
  <changelog author="coolo@suse.com" date="1430568000">- updated to 2.0120
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0120  2015-05-01
  - Replace the test for the previous change with a more meaningful one.
  - Change was to preserve unset options after a _clone() call.
  - https://access.redhat.com/security/cve/CVE-2015-3451
  - Thanks to Salvatore Bonaccorso from Debian for the report and
    for a proposed fix (which was further refined by Shlomi Fish).</changelog>
  <changelog author="coolo@suse.com" date="1430827200">- updated to 2.0121
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0121  2015-05-03
  - Mention CVE-2015-3451 and related links in the Changes (= this file)
    entry for 2.0119.
  - Thanks to Tilmann Haak for pointing it out.</changelog>
  <changelog author="coolo@suse.com" date="1441195200">- updated to 2.0122
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0122  2015-09-01
  - Enable the memory test on cygwin as well as Linux.
  - https://rt.cpan.org/Ticket/Display.html?id=104666
  - Thanks to https://me.yahoo.com/howdidwegetherereally#f714d for
    the report.
  - Fix a typo in createElementNS
  - https://rt.cpan.org/Public/Bug/Display.html?id=106807
  - Thanks to Rich for the report.</changelog>
  <changelog author="coolo@suse.com" date="1449662400">- updated to 2.0123
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0123  2015-12-06
  - Get rid of an undef-warning in XML::LibXML::Reader .
  - https://rt.cpan.org/Ticket/Display.html?id=106830
  - Thanks to Rich for the report and testcase.
  - Apply patch from Debian for rewording the documentation.
  - https://rt.cpan.org/Ticket/Display.html?id=110116
  - Some extra rewording has been done by SHLOMIF.
  - Thanks to Gregor Herrman and the Debian Team</changelog>
  <changelog author="coolo@suse.com" date="1457352000">- updated to 2.0124
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0124  2016-02-27
  - Fix XML::LibXML::Text-&gt;attributes() to return an empty list in list
    context.
  - https://rt.cpan.org/Ticket/Display.html?id=112470
  - Thanks to Rob Dixon for the report.</changelog>
  <changelog author="coolo@suse.com" date="1464696000">- updated to 2.0125
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0125  2016-05-30
  - Moved the repository from Mercurial and BitBucket to Git and GitHub:
  - https://github.com/shlomif/perl-XML-LibXML
  - This was done to better encourage contributions to XML::LiBXML and
    to be able to use the better Continuous Integration options that
    are available for GitHub projects.</changelog>
  <changelog author="coolo@suse.com" date="1467028800">- updated to 2.0126
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0126  2016-06-24
  - Workaround RT#114638:
  - 2.9.4 broke XSD Schema support.
  - https://rt.cpan.org/Public/Bug/Display.html?id=114638
  - https://github.com/shlomif/libxml2-2.9.4-reader-schema-regression
  - https://bugzilla.gnome.org/show_bug.cgi?id=766834
  - https://github.com/shlomif/perl-XML-LibXML/pull/1
  - Thanks to Paul for the report and to RURBAN for a pull-req.
  - Add t/release-kwalitee.t for testing CPANTS Kwalitee.</changelog>
  <changelog author="coolo@suse.com" date="1469275200">- updated to 2.0127
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0127  2016-07-22
  - Make sure t/release-kwalitee.t and other tests do not run by default.
  - Only with AUTHOR_TESTING or RELEASE_TESTING specified.
  - Thanks to Lance Wicks for the pull request.
  - https://rt.cpan.org/Ticket/Display.html?id=115586
  - https://rt.cpan.org/Ticket/Display.html?id=115859</changelog>
  <changelog author="coolo@suse.com" date="1469448000">- updated to 2.0128
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0128  2016-07-24
  - Hopefully add the .pod files again as they were missing from 2.0127.
  - https://github.com/shlomif/perl-XML-LibXML/issues/3
  - Thanks to Paul Howarth for the report.
  - This was caused by ExtUtils::Manifest just warning that the files
    referenced in the "MANIFEST" file were not present and still
    continuing to prepare the archive as usual. A "do-what-I-don't-want-to"
    thing.</changelog>
  <changelog author="coolo@suse.com" date="1489579200">- updated to 2.0129
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0129  2017-03-14
  - Add example/create-sample-html-document.pl .
  - https://rt.cpan.org/Ticket/Display.html?id=117923
  - Add support for the set_document_locator() SAX method .
  - Thanks to Alexander Batyrshin for the pull-request.
  - Make parsing of large perl strings much faster.
  - https://github.com/shlomif/perl-XML-LibXML/pull/5
  - Thanks to Cedric Cellier for the pull-request.</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Add patch to fix building with new libxml (from Fedora):
  * XML-LibXML-2.0129-Adjust-tests-to-libxml2-2.9.5.patch</changelog>
  <changelog author="coolo@suse.com" date="1508414400">- updated to 2.0130
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0130  2017-10-18
  - Fix the tests with libxml2-2.9.6 .
  - https://rt.cpan.org/Public/Bug/Display.html?id=122958
  - Thanks to Daniel Macks for the report and ppisar for a patch.
  - setNamespace() Enhancements.
  - Thanks to E. Choroba.
- Dropped patch merged upstream:
  * XML-LibXML-2.0129-Adjust-tests-to-libxml2-2.9.5.patch</changelog>
  <changelog author="coolo@suse.com" date="1508932800">- updated to 2.0131
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0131  2017-10-24
  - Re-include the missing *.pod documents.
  - https://rt.cpan.org/Ticket/Display.html?id=123362
  - Thanks to Stephen for the report.
  - Add t/pod-files-presence.t to test for it in the future.
  - Merge https://github.com/shlomif/perl-XML-LibXML/pull/8
  - Fix bug in Node::replaceChild()
  - Thanks to @Mipu94 .</changelog>
  <changelog author="coolo@suse.com" date="1509278400">- updated to 2.0132
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0132  2017-10-28
  - Revert setNamespace() enhancements that broke some dependent tests:
  - commit df9fdc6659cb2e4e9bc896e58c02dfd79b430fbb
  - add t/48_rt123379_setNamespace.t .
  - Thanks to Alexander Bluhm and Slaven Rezic for the reports and
    the test.</changelog>
  <changelog author="david.anes@suse.com" date="1649678400">- (bsc#1197798) FTBFS: compile against latest version available of
  libxml in SP4 so perl-XML-LibXSLT compiles cleanly.</changelog>
</package>
<package pkgid="b8648301554d7315278659f335889e3e032cccc94365e979db928ea8106a6ca2" name="perl-XML-LibXML" arch="x86_64">
  <version epoch="0" ver="2.0132" rel="150000.3.3.1"/>
  <changelog author="coolo@suse.com" date="1429099200">- updated to 2.0118
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0118  2015-02-05
  - Add $Config{incpath} to the include paths on Win32.
  - Fixes https://rt.cpan.org/Ticket/Display.html?id=101944
  - Thanks to Marek for the report and propsed fix.
  2.0117  2014-10-26
  - Support libxml2 builds with disabled xmlReader
  - Makefile.PL : don't require a recentish ExtUtils::MakeMaker.
  - https://rt.cpan.org/Ticket/Display.html?id=83322
  - Thanks to Slaven Rezic for the report.
  - Fix broken t/02parse.t with non-English locale with recent perls.
  - https://rt.cpan.org/Public/Bug/Display.html?id=97805
  - Thanks to Slaven Rezic for the report.</changelog>
  <changelog author="coolo@suse.com" date="1429876800">- updated to 2.0119
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0119  2015-04-23
  - Preserve unset options after a _clone() call (e.g: in load_xml()).
  - This caused expand_entities(0) to not be preserved/etc.
  - Thanks to Tilmann Haak from xing.com for the report.</changelog>
  <changelog author="coolo@suse.com" date="1430568000">- updated to 2.0120
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0120  2015-05-01
  - Replace the test for the previous change with a more meaningful one.
  - Change was to preserve unset options after a _clone() call.
  - https://access.redhat.com/security/cve/CVE-2015-3451
  - Thanks to Salvatore Bonaccorso from Debian for the report and
    for a proposed fix (which was further refined by Shlomi Fish).</changelog>
  <changelog author="coolo@suse.com" date="1430827200">- updated to 2.0121
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0121  2015-05-03
  - Mention CVE-2015-3451 and related links in the Changes (= this file)
    entry for 2.0119.
  - Thanks to Tilmann Haak for pointing it out.</changelog>
  <changelog author="coolo@suse.com" date="1441195200">- updated to 2.0122
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0122  2015-09-01
  - Enable the memory test on cygwin as well as Linux.
  - https://rt.cpan.org/Ticket/Display.html?id=104666
  - Thanks to https://me.yahoo.com/howdidwegetherereally#f714d for
    the report.
  - Fix a typo in createElementNS
  - https://rt.cpan.org/Public/Bug/Display.html?id=106807
  - Thanks to Rich for the report.</changelog>
  <changelog author="coolo@suse.com" date="1449662400">- updated to 2.0123
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0123  2015-12-06
  - Get rid of an undef-warning in XML::LibXML::Reader .
  - https://rt.cpan.org/Ticket/Display.html?id=106830
  - Thanks to Rich for the report and testcase.
  - Apply patch from Debian for rewording the documentation.
  - https://rt.cpan.org/Ticket/Display.html?id=110116
  - Some extra rewording has been done by SHLOMIF.
  - Thanks to Gregor Herrman and the Debian Team</changelog>
  <changelog author="coolo@suse.com" date="1457352000">- updated to 2.0124
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0124  2016-02-27
  - Fix XML::LibXML::Text-&gt;attributes() to return an empty list in list
    context.
  - https://rt.cpan.org/Ticket/Display.html?id=112470
  - Thanks to Rob Dixon for the report.</changelog>
  <changelog author="coolo@suse.com" date="1464696000">- updated to 2.0125
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0125  2016-05-30
  - Moved the repository from Mercurial and BitBucket to Git and GitHub:
  - https://github.com/shlomif/perl-XML-LibXML
  - This was done to better encourage contributions to XML::LiBXML and
    to be able to use the better Continuous Integration options that
    are available for GitHub projects.</changelog>
  <changelog author="coolo@suse.com" date="1467028800">- updated to 2.0126
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0126  2016-06-24
  - Workaround RT#114638:
  - 2.9.4 broke XSD Schema support.
  - https://rt.cpan.org/Public/Bug/Display.html?id=114638
  - https://github.com/shlomif/libxml2-2.9.4-reader-schema-regression
  - https://bugzilla.gnome.org/show_bug.cgi?id=766834
  - https://github.com/shlomif/perl-XML-LibXML/pull/1
  - Thanks to Paul for the report and to RURBAN for a pull-req.
  - Add t/release-kwalitee.t for testing CPANTS Kwalitee.</changelog>
  <changelog author="coolo@suse.com" date="1469275200">- updated to 2.0127
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0127  2016-07-22
  - Make sure t/release-kwalitee.t and other tests do not run by default.
  - Only with AUTHOR_TESTING or RELEASE_TESTING specified.
  - Thanks to Lance Wicks for the pull request.
  - https://rt.cpan.org/Ticket/Display.html?id=115586
  - https://rt.cpan.org/Ticket/Display.html?id=115859</changelog>
  <changelog author="coolo@suse.com" date="1469448000">- updated to 2.0128
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0128  2016-07-24
  - Hopefully add the .pod files again as they were missing from 2.0127.
  - https://github.com/shlomif/perl-XML-LibXML/issues/3
  - Thanks to Paul Howarth for the report.
  - This was caused by ExtUtils::Manifest just warning that the files
    referenced in the "MANIFEST" file were not present and still
    continuing to prepare the archive as usual. A "do-what-I-don't-want-to"
    thing.</changelog>
  <changelog author="coolo@suse.com" date="1489579200">- updated to 2.0129
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0129  2017-03-14
  - Add example/create-sample-html-document.pl .
  - https://rt.cpan.org/Ticket/Display.html?id=117923
  - Add support for the set_document_locator() SAX method .
  - Thanks to Alexander Batyrshin for the pull-request.
  - Make parsing of large perl strings much faster.
  - https://github.com/shlomif/perl-XML-LibXML/pull/5
  - Thanks to Cedric Cellier for the pull-request.</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Add patch to fix building with new libxml (from Fedora):
  * XML-LibXML-2.0129-Adjust-tests-to-libxml2-2.9.5.patch</changelog>
  <changelog author="coolo@suse.com" date="1508414400">- updated to 2.0130
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0130  2017-10-18
  - Fix the tests with libxml2-2.9.6 .
  - https://rt.cpan.org/Public/Bug/Display.html?id=122958
  - Thanks to Daniel Macks for the report and ppisar for a patch.
  - setNamespace() Enhancements.
  - Thanks to E. Choroba.
- Dropped patch merged upstream:
  * XML-LibXML-2.0129-Adjust-tests-to-libxml2-2.9.5.patch</changelog>
  <changelog author="coolo@suse.com" date="1508932800">- updated to 2.0131
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0131  2017-10-24
  - Re-include the missing *.pod documents.
  - https://rt.cpan.org/Ticket/Display.html?id=123362
  - Thanks to Stephen for the report.
  - Add t/pod-files-presence.t to test for it in the future.
  - Merge https://github.com/shlomif/perl-XML-LibXML/pull/8
  - Fix bug in Node::replaceChild()
  - Thanks to @Mipu94 .</changelog>
  <changelog author="coolo@suse.com" date="1509278400">- updated to 2.0132
  see /usr/share/doc/packages/perl-XML-LibXML/Changes
  2.0132  2017-10-28
  - Revert setNamespace() enhancements that broke some dependent tests:
  - commit df9fdc6659cb2e4e9bc896e58c02dfd79b430fbb
  - add t/48_rt123379_setNamespace.t .
  - Thanks to Alexander Bluhm and Slaven Rezic for the reports and
    the test.</changelog>
  <changelog author="david.anes@suse.com" date="1649678400">- (bsc#1197798) FTBFS: compile against latest version available of
  libxml in SP4 so perl-XML-LibXSLT compiles cleanly.</changelog>
</package>
<package pkgid="f35df220c73a4e2d2ad9cd9c85fa8c6307f52e51e4b12700aa79a88463b0c2fd" name="perl-base-32bit" arch="x86_64">
  <version epoch="0" ver="5.26.1" rel="150300.17.3.1"/>
  <changelog author="idonmez@suse.com" date="1455278400">- Update to perl-5.22.1
  * Several bugs, including a segmentation fault, have been fixed
    with the bounds checking constructs (introduced in Perl 5.22)
  * Module::CoreList has been upgraded from version 5.20150520 to
    5.20151213.
  * PerlIO::scalar has been upgraded from version 0.22 to 0.23.
  * POSIX has been upgraded from version 1.53 to 1.53_01.
  * Storable has been upgraded from version 2.53 to 2.53_01.
  * warnings has been upgraded from version 1.32 to 1.34.
  * See perldelta.pod for all the changes.
- Update perl-5.22.0.dif stop patching CPAN.pm, it was MacOS only
  and was breaking tests (due to SHA-1 mismatch).</changelog>
  <changelog author="mls@suse.de" date="1462881600">- Update to perl-5.24.0
  * postfix dereferencing is no longer experimental
  * unicode 8.0 is now supported
  * perl will now croak when closing an in-place output file fails
  * new "\b{lb}" boundary in regular expressions
  * qr/(?[ ])/" now works in UTF-8 locales
  * integer shift ("&lt;&lt;" and "&gt;&gt;") now more explicitly defined
  * printf and sprintf now allow reordered precision arguments
  * more fields provided to "sigaction" callback with "SA_SIGINFO"
  * hashbang redirection to Perl 6
  * set proper umask before calling mkstemp(3)
  * fix loss of taint in canonpath
  * remove duplicate environment variables from "environ"
- rename patch perl-5.22.0.dif to perl-5.24.0.dif</changelog>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
</package>
<package pkgid="79c2605ea85c252bf48bdcc4e880e78daaf60675414a180f884e26482f350b28" name="perl-base" arch="aarch64">
  <version epoch="0" ver="5.26.1" rel="150300.17.3.1"/>
  <changelog author="idonmez@suse.com" date="1455278400">- Update to perl-5.22.1
  * Several bugs, including a segmentation fault, have been fixed
    with the bounds checking constructs (introduced in Perl 5.22)
  * Module::CoreList has been upgraded from version 5.20150520 to
    5.20151213.
  * PerlIO::scalar has been upgraded from version 0.22 to 0.23.
  * POSIX has been upgraded from version 1.53 to 1.53_01.
  * Storable has been upgraded from version 2.53 to 2.53_01.
  * warnings has been upgraded from version 1.32 to 1.34.
  * See perldelta.pod for all the changes.
- Update perl-5.22.0.dif stop patching CPAN.pm, it was MacOS only
  and was breaking tests (due to SHA-1 mismatch).</changelog>
  <changelog author="mls@suse.de" date="1462881600">- Update to perl-5.24.0
  * postfix dereferencing is no longer experimental
  * unicode 8.0 is now supported
  * perl will now croak when closing an in-place output file fails
  * new "\b{lb}" boundary in regular expressions
  * qr/(?[ ])/" now works in UTF-8 locales
  * integer shift ("&lt;&lt;" and "&gt;&gt;") now more explicitly defined
  * printf and sprintf now allow reordered precision arguments
  * more fields provided to "sigaction" callback with "SA_SIGINFO"
  * hashbang redirection to Perl 6
  * set proper umask before calling mkstemp(3)
  * fix loss of taint in canonpath
  * remove duplicate environment variables from "environ"
- rename patch perl-5.22.0.dif to perl-5.24.0.dif</changelog>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
</package>
<package pkgid="ff114f589a3ed7b4f0097ac7aba1debdaf857f1cb7f885607a22e3e91b55923f" name="perl-base" arch="ppc64le">
  <version epoch="0" ver="5.26.1" rel="150300.17.3.1"/>
  <changelog author="idonmez@suse.com" date="1455278400">- Update to perl-5.22.1
  * Several bugs, including a segmentation fault, have been fixed
    with the bounds checking constructs (introduced in Perl 5.22)
  * Module::CoreList has been upgraded from version 5.20150520 to
    5.20151213.
  * PerlIO::scalar has been upgraded from version 0.22 to 0.23.
  * POSIX has been upgraded from version 1.53 to 1.53_01.
  * Storable has been upgraded from version 2.53 to 2.53_01.
  * warnings has been upgraded from version 1.32 to 1.34.
  * See perldelta.pod for all the changes.
- Update perl-5.22.0.dif stop patching CPAN.pm, it was MacOS only
  and was breaking tests (due to SHA-1 mismatch).</changelog>
  <changelog author="mls@suse.de" date="1462881600">- Update to perl-5.24.0
  * postfix dereferencing is no longer experimental
  * unicode 8.0 is now supported
  * perl will now croak when closing an in-place output file fails
  * new "\b{lb}" boundary in regular expressions
  * qr/(?[ ])/" now works in UTF-8 locales
  * integer shift ("&lt;&lt;" and "&gt;&gt;") now more explicitly defined
  * printf and sprintf now allow reordered precision arguments
  * more fields provided to "sigaction" callback with "SA_SIGINFO"
  * hashbang redirection to Perl 6
  * set proper umask before calling mkstemp(3)
  * fix loss of taint in canonpath
  * remove duplicate environment variables from "environ"
- rename patch perl-5.22.0.dif to perl-5.24.0.dif</changelog>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
</package>
<package pkgid="970041487862227bcb1bae96834b6a8adb2ae83b36ab177f7197f5ea60553ea7" name="perl-base" arch="s390x">
  <version epoch="0" ver="5.26.1" rel="150300.17.3.1"/>
  <changelog author="idonmez@suse.com" date="1455278400">- Update to perl-5.22.1
  * Several bugs, including a segmentation fault, have been fixed
    with the bounds checking constructs (introduced in Perl 5.22)
  * Module::CoreList has been upgraded from version 5.20150520 to
    5.20151213.
  * PerlIO::scalar has been upgraded from version 0.22 to 0.23.
  * POSIX has been upgraded from version 1.53 to 1.53_01.
  * Storable has been upgraded from version 2.53 to 2.53_01.
  * warnings has been upgraded from version 1.32 to 1.34.
  * See perldelta.pod for all the changes.
- Update perl-5.22.0.dif stop patching CPAN.pm, it was MacOS only
  and was breaking tests (due to SHA-1 mismatch).</changelog>
  <changelog author="mls@suse.de" date="1462881600">- Update to perl-5.24.0
  * postfix dereferencing is no longer experimental
  * unicode 8.0 is now supported
  * perl will now croak when closing an in-place output file fails
  * new "\b{lb}" boundary in regular expressions
  * qr/(?[ ])/" now works in UTF-8 locales
  * integer shift ("&lt;&lt;" and "&gt;&gt;") now more explicitly defined
  * printf and sprintf now allow reordered precision arguments
  * more fields provided to "sigaction" callback with "SA_SIGINFO"
  * hashbang redirection to Perl 6
  * set proper umask before calling mkstemp(3)
  * fix loss of taint in canonpath
  * remove duplicate environment variables from "environ"
- rename patch perl-5.22.0.dif to perl-5.24.0.dif</changelog>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
</package>
<package pkgid="8d6dba7d27b0d55b9162d8840804ab094f5c8132960dd8853ebd8f7bb3c63d07" name="perl-base" arch="x86_64">
  <version epoch="0" ver="5.26.1" rel="150300.17.3.1"/>
  <changelog author="idonmez@suse.com" date="1455278400">- Update to perl-5.22.1
  * Several bugs, including a segmentation fault, have been fixed
    with the bounds checking constructs (introduced in Perl 5.22)
  * Module::CoreList has been upgraded from version 5.20150520 to
    5.20151213.
  * PerlIO::scalar has been upgraded from version 0.22 to 0.23.
  * POSIX has been upgraded from version 1.53 to 1.53_01.
  * Storable has been upgraded from version 2.53 to 2.53_01.
  * warnings has been upgraded from version 1.32 to 1.34.
  * See perldelta.pod for all the changes.
- Update perl-5.22.0.dif stop patching CPAN.pm, it was MacOS only
  and was breaking tests (due to SHA-1 mismatch).</changelog>
  <changelog author="mls@suse.de" date="1462881600">- Update to perl-5.24.0
  * postfix dereferencing is no longer experimental
  * unicode 8.0 is now supported
  * perl will now croak when closing an in-place output file fails
  * new "\b{lb}" boundary in regular expressions
  * qr/(?[ ])/" now works in UTF-8 locales
  * integer shift ("&lt;&lt;" and "&gt;&gt;") now more explicitly defined
  * printf and sprintf now allow reordered precision arguments
  * more fields provided to "sigaction" callback with "SA_SIGINFO"
  * hashbang redirection to Perl 6
  * set proper umask before calling mkstemp(3)
  * fix loss of taint in canonpath
  * remove duplicate environment variables from "environ"
- rename patch perl-5.22.0.dif to perl-5.24.0.dif</changelog>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
</package>
<package pkgid="5f7e80e3554f5c9ebab8d96e60cba9be2acae87f42ca8cf258765cfaf2e9c186" name="perl-core-DB_File-32bit" arch="x86_64">
  <version epoch="0" ver="5.26.1" rel="150300.17.3.1"/>
  <changelog author="idonmez@suse.com" date="1455278400">- Update to perl-5.22.1
  * Several bugs, including a segmentation fault, have been fixed
    with the bounds checking constructs (introduced in Perl 5.22)
  * Module::CoreList has been upgraded from version 5.20150520 to
    5.20151213.
  * PerlIO::scalar has been upgraded from version 0.22 to 0.23.
  * POSIX has been upgraded from version 1.53 to 1.53_01.
  * Storable has been upgraded from version 2.53 to 2.53_01.
  * warnings has been upgraded from version 1.32 to 1.34.
  * See perldelta.pod for all the changes.
- Update perl-5.22.0.dif stop patching CPAN.pm, it was MacOS only
  and was breaking tests (due to SHA-1 mismatch).</changelog>
  <changelog author="mls@suse.de" date="1462881600">- Update to perl-5.24.0
  * postfix dereferencing is no longer experimental
  * unicode 8.0 is now supported
  * perl will now croak when closing an in-place output file fails
  * new "\b{lb}" boundary in regular expressions
  * qr/(?[ ])/" now works in UTF-8 locales
  * integer shift ("&lt;&lt;" and "&gt;&gt;") now more explicitly defined
  * printf and sprintf now allow reordered precision arguments
  * more fields provided to "sigaction" callback with "SA_SIGINFO"
  * hashbang redirection to Perl 6
  * set proper umask before calling mkstemp(3)
  * fix loss of taint in canonpath
  * remove duplicate environment variables from "environ"
- rename patch perl-5.22.0.dif to perl-5.24.0.dif</changelog>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
</package>
<package pkgid="2cf688172fe489993daaac631a9d36482fd74ec3c4537c55986c0530bd3fadc9" name="perl-core-DB_File" arch="aarch64">
  <version epoch="0" ver="5.26.1" rel="150300.17.3.1"/>
  <changelog author="idonmez@suse.com" date="1455278400">- Update to perl-5.22.1
  * Several bugs, including a segmentation fault, have been fixed
    with the bounds checking constructs (introduced in Perl 5.22)
  * Module::CoreList has been upgraded from version 5.20150520 to
    5.20151213.
  * PerlIO::scalar has been upgraded from version 0.22 to 0.23.
  * POSIX has been upgraded from version 1.53 to 1.53_01.
  * Storable has been upgraded from version 2.53 to 2.53_01.
  * warnings has been upgraded from version 1.32 to 1.34.
  * See perldelta.pod for all the changes.
- Update perl-5.22.0.dif stop patching CPAN.pm, it was MacOS only
  and was breaking tests (due to SHA-1 mismatch).</changelog>
  <changelog author="mls@suse.de" date="1462881600">- Update to perl-5.24.0
  * postfix dereferencing is no longer experimental
  * unicode 8.0 is now supported
  * perl will now croak when closing an in-place output file fails
  * new "\b{lb}" boundary in regular expressions
  * qr/(?[ ])/" now works in UTF-8 locales
  * integer shift ("&lt;&lt;" and "&gt;&gt;") now more explicitly defined
  * printf and sprintf now allow reordered precision arguments
  * more fields provided to "sigaction" callback with "SA_SIGINFO"
  * hashbang redirection to Perl 6
  * set proper umask before calling mkstemp(3)
  * fix loss of taint in canonpath
  * remove duplicate environment variables from "environ"
- rename patch perl-5.22.0.dif to perl-5.24.0.dif</changelog>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
</package>
<package pkgid="131ad1d88842802adfc4701ec6970e56c588f3bd7ac6d8db49139713a99261bd" name="perl-core-DB_File" arch="ppc64le">
  <version epoch="0" ver="5.26.1" rel="150300.17.3.1"/>
  <changelog author="idonmez@suse.com" date="1455278400">- Update to perl-5.22.1
  * Several bugs, including a segmentation fault, have been fixed
    with the bounds checking constructs (introduced in Perl 5.22)
  * Module::CoreList has been upgraded from version 5.20150520 to
    5.20151213.
  * PerlIO::scalar has been upgraded from version 0.22 to 0.23.
  * POSIX has been upgraded from version 1.53 to 1.53_01.
  * Storable has been upgraded from version 2.53 to 2.53_01.
  * warnings has been upgraded from version 1.32 to 1.34.
  * See perldelta.pod for all the changes.
- Update perl-5.22.0.dif stop patching CPAN.pm, it was MacOS only
  and was breaking tests (due to SHA-1 mismatch).</changelog>
  <changelog author="mls@suse.de" date="1462881600">- Update to perl-5.24.0
  * postfix dereferencing is no longer experimental
  * unicode 8.0 is now supported
  * perl will now croak when closing an in-place output file fails
  * new "\b{lb}" boundary in regular expressions
  * qr/(?[ ])/" now works in UTF-8 locales
  * integer shift ("&lt;&lt;" and "&gt;&gt;") now more explicitly defined
  * printf and sprintf now allow reordered precision arguments
  * more fields provided to "sigaction" callback with "SA_SIGINFO"
  * hashbang redirection to Perl 6
  * set proper umask before calling mkstemp(3)
  * fix loss of taint in canonpath
  * remove duplicate environment variables from "environ"
- rename patch perl-5.22.0.dif to perl-5.24.0.dif</changelog>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
</package>
<package pkgid="4afdcc56dd3ca782bca7af78d8a0798d90d503b644eafd693db24e514993ff8e" name="perl-core-DB_File" arch="s390x">
  <version epoch="0" ver="5.26.1" rel="150300.17.3.1"/>
  <changelog author="idonmez@suse.com" date="1455278400">- Update to perl-5.22.1
  * Several bugs, including a segmentation fault, have been fixed
    with the bounds checking constructs (introduced in Perl 5.22)
  * Module::CoreList has been upgraded from version 5.20150520 to
    5.20151213.
  * PerlIO::scalar has been upgraded from version 0.22 to 0.23.
  * POSIX has been upgraded from version 1.53 to 1.53_01.
  * Storable has been upgraded from version 2.53 to 2.53_01.
  * warnings has been upgraded from version 1.32 to 1.34.
  * See perldelta.pod for all the changes.
- Update perl-5.22.0.dif stop patching CPAN.pm, it was MacOS only
  and was breaking tests (due to SHA-1 mismatch).</changelog>
  <changelog author="mls@suse.de" date="1462881600">- Update to perl-5.24.0
  * postfix dereferencing is no longer experimental
  * unicode 8.0 is now supported
  * perl will now croak when closing an in-place output file fails
  * new "\b{lb}" boundary in regular expressions
  * qr/(?[ ])/" now works in UTF-8 locales
  * integer shift ("&lt;&lt;" and "&gt;&gt;") now more explicitly defined
  * printf and sprintf now allow reordered precision arguments
  * more fields provided to "sigaction" callback with "SA_SIGINFO"
  * hashbang redirection to Perl 6
  * set proper umask before calling mkstemp(3)
  * fix loss of taint in canonpath
  * remove duplicate environment variables from "environ"
- rename patch perl-5.22.0.dif to perl-5.24.0.dif</changelog>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
</package>
<package pkgid="cd8faac93711cad57c409b075a5d907c28a16539e9db6bb8f9799607f87c2e48" name="perl-core-DB_File" arch="x86_64">
  <version epoch="0" ver="5.26.1" rel="150300.17.3.1"/>
  <changelog author="idonmez@suse.com" date="1455278400">- Update to perl-5.22.1
  * Several bugs, including a segmentation fault, have been fixed
    with the bounds checking constructs (introduced in Perl 5.22)
  * Module::CoreList has been upgraded from version 5.20150520 to
    5.20151213.
  * PerlIO::scalar has been upgraded from version 0.22 to 0.23.
  * POSIX has been upgraded from version 1.53 to 1.53_01.
  * Storable has been upgraded from version 2.53 to 2.53_01.
  * warnings has been upgraded from version 1.32 to 1.34.
  * See perldelta.pod for all the changes.
- Update perl-5.22.0.dif stop patching CPAN.pm, it was MacOS only
  and was breaking tests (due to SHA-1 mismatch).</changelog>
  <changelog author="mls@suse.de" date="1462881600">- Update to perl-5.24.0
  * postfix dereferencing is no longer experimental
  * unicode 8.0 is now supported
  * perl will now croak when closing an in-place output file fails
  * new "\b{lb}" boundary in regular expressions
  * qr/(?[ ])/" now works in UTF-8 locales
  * integer shift ("&lt;&lt;" and "&gt;&gt;") now more explicitly defined
  * printf and sprintf now allow reordered precision arguments
  * more fields provided to "sigaction" callback with "SA_SIGINFO"
  * hashbang redirection to Perl 6
  * set proper umask before calling mkstemp(3)
  * fix loss of taint in canonpath
  * remove duplicate environment variables from "environ"
- rename patch perl-5.22.0.dif to perl-5.24.0.dif</changelog>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
</package>
<package pkgid="b9b108e0e47eec4749575e190e0761eb8274964ebc9343b9775f36a2c6b798f1" name="perl-doc" arch="noarch">
  <version epoch="0" ver="5.26.1" rel="150300.17.3.1"/>
  <changelog author="idonmez@suse.com" date="1455278400">- Update to perl-5.22.1
  * Several bugs, including a segmentation fault, have been fixed
    with the bounds checking constructs (introduced in Perl 5.22)
  * Module::CoreList has been upgraded from version 5.20150520 to
    5.20151213.
  * PerlIO::scalar has been upgraded from version 0.22 to 0.23.
  * POSIX has been upgraded from version 1.53 to 1.53_01.
  * Storable has been upgraded from version 2.53 to 2.53_01.
  * warnings has been upgraded from version 1.32 to 1.34.
  * See perldelta.pod for all the changes.
- Update perl-5.22.0.dif stop patching CPAN.pm, it was MacOS only
  and was breaking tests (due to SHA-1 mismatch).</changelog>
  <changelog author="mls@suse.de" date="1462881600">- Update to perl-5.24.0
  * postfix dereferencing is no longer experimental
  * unicode 8.0 is now supported
  * perl will now croak when closing an in-place output file fails
  * new "\b{lb}" boundary in regular expressions
  * qr/(?[ ])/" now works in UTF-8 locales
  * integer shift ("&lt;&lt;" and "&gt;&gt;") now more explicitly defined
  * printf and sprintf now allow reordered precision arguments
  * more fields provided to "sigaction" callback with "SA_SIGINFO"
  * hashbang redirection to Perl 6
  * set proper umask before calling mkstemp(3)
  * fix loss of taint in canonpath
  * remove duplicate environment variables from "environ"
- rename patch perl-5.22.0.dif to perl-5.24.0.dif</changelog>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
</package>
<package pkgid="be7a81f98df072ef086857776239e8cb6681f75f2e42e2db9858f5edba636960" name="perl-slurm" arch="aarch64">
  <version epoch="0" ver="20.11.9" rel="150300.4.6.1"/>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
  <changelog author="eich@suse.com" date="1651838400">- Add 'CommunicationParameters=block_null_hash' to slurm.conf, please
  add this parameter to existing configurations as part of CVE-2022-29500:
  This new option provides additional protection against a potential exploit.
- Update to 20.11.9:
  * burst_buffer - add missing common directory to the Makefile SUBDIRS.
  * sacct - fix truncation when printing jobidraw field.
  * GRES - Fix loading state of jobs using --gpus to request gpus.
  * Fix minor logic error in health check node state output
  * Fix GCC 11.1 compiler warnings.
  * Delay steps when memory already used instead of rejecting step request.
  * Fix memory leak in the slurmdbd when requesting wckeys from all clusters.
  * Fix determining if a reservation is used or not.
  * openapi/v0.0.35 - Honor kill_on_invalid_dependency as job parameter.
  * openapi/v0.0.36 - Honor kill_on_invalid_dependency as job parameter.
  * Fix various issues dealing with updates on magnetic reservations that could
    lead to abort slurmctld.
  * openapi/v0.0.36 - Avoid setting default values of min_cpus, job name, cwd,
    mail_type, and contiguous on job update.
  * openapi/v0.0.36 - Clear user hold on job update if hold=false.
  * Fix slurmctld segfault due to a bit_test() call with a MAINT+ANY_NODES
    reservation NULL node_bitmap.
  * Fix slurmctld segfault due to a bit_copy() call with a REPLACE+ANY_NODES
    reservation NULL node_bitmap.
  * Fix error in GPU frequency validation logic.
  * Fix error in pmix logic dealing with the incorrect size of buffer.
  * PMIx v1.1.4 and below are no longer supported.
  * Fix shutdown of slurmdbd plugin to correctly notice when the agent thread
    finishes.
  * Fix slurmctld segfault due to job array  --batch features double free.
  * CVE-2022-29500 - Prevent credential abuse (bsc#1199278).
  * CVE-2022-29501 - Prevent abuse of REQUEST_FORWARD_DATA (bsc#1199279).
- Update to 20.11.8:
  * slurmctld - fix erroneous "StepId=CORRUPT" messages in error logs.
  * Correct the error given when auth plugin fails to pack a credential.
  * Fix unused-variable compiler warning on FreeBSD in fd_resolve_path().
  * acct_gather_filesystem/lustre - only emit collection error once per step.
  * srun - leave SLURM_DIST_UNKNOWN as default for  --interactive.
  * Add GRES environment variables (e.g., CUDA_VISIBLE_DEVICES) into the
    interactive step, the same as is done for the batch step.
  * Fix various potential deadlocks when altering objects in the database
    dealing with every cluster in the database.
  * slurmrestd - handle slurmdbd connection failures without segfaulting.
  * slurmrestd - fix segfault for searches in slurmdb/v0.0.36/jobs.
  * slurmrestd - remove (non-functioning) users query parameter for
    slurmdb/v0.0.36/jobs from openapi.json
  * slurmrestd - fix segfault in slurmrestd db/jobs with numeric queries
  * slurmrestd - add argv handling for job/submit endpoint.
  * srun - fix broken node step allocation in a heterogeneous allocation.
  * Fail step creation if -n is not multiple of  --ntasks-per-gpu.
  * job_container/tmpfs - Fix slowdown on teardown.
  * Fix problem with SlurmctldProlog where requeued jobs would never launch.
  * job_container/tmpfs - Fix issue when restarting slurmd where the namespace
    mount points could disappear.
  * sacct - avoid truncating JobId at 34 characters.
  * scancel - fix segfault when --wckey filtering option is used.
  * select/cons_tres - Fix memory leak.
  * Prevent file descriptor leak in job_container/tmpfs on slurmd restart.
  * slurmrestd/dbv0.0.36 - Fix values dumped in job state/current and
    job step state.
  * slurmrestd/dbv0.0.36 - Correct description for previous state property.
  * perlapi/libslurmdb - expose tres_req_str to job hash.
  * scrontab - close and reopen temporary crontab file to deal with editors
    that do not change the original file, but instead write out then rename
    a new file.
  * sstat - fix linking so that it will work when --without-shared-libslurm
    was used to build Slurm.
  * Clear allocated cpus for running steps in a job before handling requested
    nodes on new step.
  * Don't reject a step if not enough nodes are available. Instead, defer the
    step until enough nodes are available to satisfy the request.
  * Don't reject a step if it requests at least one specific node that is
    already allocated to another step. Instead, defer the step until the
    requested node(s) become available.
  * slurmrestd - add description for slurmdb/job endpoint.
  * Better handling of --mem=0.
  * Ignore DefCpuPerGpu when --cpus-per-task given.
  * sacct - fix segfault when printing StepId (or when using --long).</changelog>
</package>
<package pkgid="558ab92e063bc1d06a784fcfebf43224593c244d9259d1a3dc9f8fda97f98dfc" name="perl-slurm" arch="ppc64le">
  <version epoch="0" ver="20.11.9" rel="150300.4.6.1"/>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
  <changelog author="eich@suse.com" date="1651838400">- Add 'CommunicationParameters=block_null_hash' to slurm.conf, please
  add this parameter to existing configurations as part of CVE-2022-29500:
  This new option provides additional protection against a potential exploit.
- Update to 20.11.9:
  * burst_buffer - add missing common directory to the Makefile SUBDIRS.
  * sacct - fix truncation when printing jobidraw field.
  * GRES - Fix loading state of jobs using --gpus to request gpus.
  * Fix minor logic error in health check node state output
  * Fix GCC 11.1 compiler warnings.
  * Delay steps when memory already used instead of rejecting step request.
  * Fix memory leak in the slurmdbd when requesting wckeys from all clusters.
  * Fix determining if a reservation is used or not.
  * openapi/v0.0.35 - Honor kill_on_invalid_dependency as job parameter.
  * openapi/v0.0.36 - Honor kill_on_invalid_dependency as job parameter.
  * Fix various issues dealing with updates on magnetic reservations that could
    lead to abort slurmctld.
  * openapi/v0.0.36 - Avoid setting default values of min_cpus, job name, cwd,
    mail_type, and contiguous on job update.
  * openapi/v0.0.36 - Clear user hold on job update if hold=false.
  * Fix slurmctld segfault due to a bit_test() call with a MAINT+ANY_NODES
    reservation NULL node_bitmap.
  * Fix slurmctld segfault due to a bit_copy() call with a REPLACE+ANY_NODES
    reservation NULL node_bitmap.
  * Fix error in GPU frequency validation logic.
  * Fix error in pmix logic dealing with the incorrect size of buffer.
  * PMIx v1.1.4 and below are no longer supported.
  * Fix shutdown of slurmdbd plugin to correctly notice when the agent thread
    finishes.
  * Fix slurmctld segfault due to job array  --batch features double free.
  * CVE-2022-29500 - Prevent credential abuse (bsc#1199278).
  * CVE-2022-29501 - Prevent abuse of REQUEST_FORWARD_DATA (bsc#1199279).
- Update to 20.11.8:
  * slurmctld - fix erroneous "StepId=CORRUPT" messages in error logs.
  * Correct the error given when auth plugin fails to pack a credential.
  * Fix unused-variable compiler warning on FreeBSD in fd_resolve_path().
  * acct_gather_filesystem/lustre - only emit collection error once per step.
  * srun - leave SLURM_DIST_UNKNOWN as default for  --interactive.
  * Add GRES environment variables (e.g., CUDA_VISIBLE_DEVICES) into the
    interactive step, the same as is done for the batch step.
  * Fix various potential deadlocks when altering objects in the database
    dealing with every cluster in the database.
  * slurmrestd - handle slurmdbd connection failures without segfaulting.
  * slurmrestd - fix segfault for searches in slurmdb/v0.0.36/jobs.
  * slurmrestd - remove (non-functioning) users query parameter for
    slurmdb/v0.0.36/jobs from openapi.json
  * slurmrestd - fix segfault in slurmrestd db/jobs with numeric queries
  * slurmrestd - add argv handling for job/submit endpoint.
  * srun - fix broken node step allocation in a heterogeneous allocation.
  * Fail step creation if -n is not multiple of  --ntasks-per-gpu.
  * job_container/tmpfs - Fix slowdown on teardown.
  * Fix problem with SlurmctldProlog where requeued jobs would never launch.
  * job_container/tmpfs - Fix issue when restarting slurmd where the namespace
    mount points could disappear.
  * sacct - avoid truncating JobId at 34 characters.
  * scancel - fix segfault when --wckey filtering option is used.
  * select/cons_tres - Fix memory leak.
  * Prevent file descriptor leak in job_container/tmpfs on slurmd restart.
  * slurmrestd/dbv0.0.36 - Fix values dumped in job state/current and
    job step state.
  * slurmrestd/dbv0.0.36 - Correct description for previous state property.
  * perlapi/libslurmdb - expose tres_req_str to job hash.
  * scrontab - close and reopen temporary crontab file to deal with editors
    that do not change the original file, but instead write out then rename
    a new file.
  * sstat - fix linking so that it will work when --without-shared-libslurm
    was used to build Slurm.
  * Clear allocated cpus for running steps in a job before handling requested
    nodes on new step.
  * Don't reject a step if not enough nodes are available. Instead, defer the
    step until enough nodes are available to satisfy the request.
  * Don't reject a step if it requests at least one specific node that is
    already allocated to another step. Instead, defer the step until the
    requested node(s) become available.
  * slurmrestd - add description for slurmdb/job endpoint.
  * Better handling of --mem=0.
  * Ignore DefCpuPerGpu when --cpus-per-task given.
  * sacct - fix segfault when printing StepId (or when using --long).</changelog>
</package>
<package pkgid="fde6b80c347809ef347cce6b898e439f1c00eb54ecc279a32979e1d014f05787" name="perl-slurm" arch="s390x">
  <version epoch="0" ver="20.11.9" rel="150300.4.6.1"/>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
  <changelog author="eich@suse.com" date="1651838400">- Add 'CommunicationParameters=block_null_hash' to slurm.conf, please
  add this parameter to existing configurations as part of CVE-2022-29500:
  This new option provides additional protection against a potential exploit.
- Update to 20.11.9:
  * burst_buffer - add missing common directory to the Makefile SUBDIRS.
  * sacct - fix truncation when printing jobidraw field.
  * GRES - Fix loading state of jobs using --gpus to request gpus.
  * Fix minor logic error in health check node state output
  * Fix GCC 11.1 compiler warnings.
  * Delay steps when memory already used instead of rejecting step request.
  * Fix memory leak in the slurmdbd when requesting wckeys from all clusters.
  * Fix determining if a reservation is used or not.
  * openapi/v0.0.35 - Honor kill_on_invalid_dependency as job parameter.
  * openapi/v0.0.36 - Honor kill_on_invalid_dependency as job parameter.
  * Fix various issues dealing with updates on magnetic reservations that could
    lead to abort slurmctld.
  * openapi/v0.0.36 - Avoid setting default values of min_cpus, job name, cwd,
    mail_type, and contiguous on job update.
  * openapi/v0.0.36 - Clear user hold on job update if hold=false.
  * Fix slurmctld segfault due to a bit_test() call with a MAINT+ANY_NODES
    reservation NULL node_bitmap.
  * Fix slurmctld segfault due to a bit_copy() call with a REPLACE+ANY_NODES
    reservation NULL node_bitmap.
  * Fix error in GPU frequency validation logic.
  * Fix error in pmix logic dealing with the incorrect size of buffer.
  * PMIx v1.1.4 and below are no longer supported.
  * Fix shutdown of slurmdbd plugin to correctly notice when the agent thread
    finishes.
  * Fix slurmctld segfault due to job array  --batch features double free.
  * CVE-2022-29500 - Prevent credential abuse (bsc#1199278).
  * CVE-2022-29501 - Prevent abuse of REQUEST_FORWARD_DATA (bsc#1199279).
- Update to 20.11.8:
  * slurmctld - fix erroneous "StepId=CORRUPT" messages in error logs.
  * Correct the error given when auth plugin fails to pack a credential.
  * Fix unused-variable compiler warning on FreeBSD in fd_resolve_path().
  * acct_gather_filesystem/lustre - only emit collection error once per step.
  * srun - leave SLURM_DIST_UNKNOWN as default for  --interactive.
  * Add GRES environment variables (e.g., CUDA_VISIBLE_DEVICES) into the
    interactive step, the same as is done for the batch step.
  * Fix various potential deadlocks when altering objects in the database
    dealing with every cluster in the database.
  * slurmrestd - handle slurmdbd connection failures without segfaulting.
  * slurmrestd - fix segfault for searches in slurmdb/v0.0.36/jobs.
  * slurmrestd - remove (non-functioning) users query parameter for
    slurmdb/v0.0.36/jobs from openapi.json
  * slurmrestd - fix segfault in slurmrestd db/jobs with numeric queries
  * slurmrestd - add argv handling for job/submit endpoint.
  * srun - fix broken node step allocation in a heterogeneous allocation.
  * Fail step creation if -n is not multiple of  --ntasks-per-gpu.
  * job_container/tmpfs - Fix slowdown on teardown.
  * Fix problem with SlurmctldProlog where requeued jobs would never launch.
  * job_container/tmpfs - Fix issue when restarting slurmd where the namespace
    mount points could disappear.
  * sacct - avoid truncating JobId at 34 characters.
  * scancel - fix segfault when --wckey filtering option is used.
  * select/cons_tres - Fix memory leak.
  * Prevent file descriptor leak in job_container/tmpfs on slurmd restart.
  * slurmrestd/dbv0.0.36 - Fix values dumped in job state/current and
    job step state.
  * slurmrestd/dbv0.0.36 - Correct description for previous state property.
  * perlapi/libslurmdb - expose tres_req_str to job hash.
  * scrontab - close and reopen temporary crontab file to deal with editors
    that do not change the original file, but instead write out then rename
    a new file.
  * sstat - fix linking so that it will work when --without-shared-libslurm
    was used to build Slurm.
  * Clear allocated cpus for running steps in a job before handling requested
    nodes on new step.
  * Don't reject a step if not enough nodes are available. Instead, defer the
    step until enough nodes are available to satisfy the request.
  * Don't reject a step if it requests at least one specific node that is
    already allocated to another step. Instead, defer the step until the
    requested node(s) become available.
  * slurmrestd - add description for slurmdb/job endpoint.
  * Better handling of --mem=0.
  * Ignore DefCpuPerGpu when --cpus-per-task given.
  * sacct - fix segfault when printing StepId (or when using --long).</changelog>
</package>
<package pkgid="8f3d8effe7134ae16148d00b9dceb1462e7188bbabc0f77c33f10892f4d13bad" name="perl-slurm" arch="x86_64">
  <version epoch="0" ver="20.11.9" rel="150300.4.6.1"/>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
  <changelog author="eich@suse.com" date="1651838400">- Add 'CommunicationParameters=block_null_hash' to slurm.conf, please
  add this parameter to existing configurations as part of CVE-2022-29500:
  This new option provides additional protection against a potential exploit.
- Update to 20.11.9:
  * burst_buffer - add missing common directory to the Makefile SUBDIRS.
  * sacct - fix truncation when printing jobidraw field.
  * GRES - Fix loading state of jobs using --gpus to request gpus.
  * Fix minor logic error in health check node state output
  * Fix GCC 11.1 compiler warnings.
  * Delay steps when memory already used instead of rejecting step request.
  * Fix memory leak in the slurmdbd when requesting wckeys from all clusters.
  * Fix determining if a reservation is used or not.
  * openapi/v0.0.35 - Honor kill_on_invalid_dependency as job parameter.
  * openapi/v0.0.36 - Honor kill_on_invalid_dependency as job parameter.
  * Fix various issues dealing with updates on magnetic reservations that could
    lead to abort slurmctld.
  * openapi/v0.0.36 - Avoid setting default values of min_cpus, job name, cwd,
    mail_type, and contiguous on job update.
  * openapi/v0.0.36 - Clear user hold on job update if hold=false.
  * Fix slurmctld segfault due to a bit_test() call with a MAINT+ANY_NODES
    reservation NULL node_bitmap.
  * Fix slurmctld segfault due to a bit_copy() call with a REPLACE+ANY_NODES
    reservation NULL node_bitmap.
  * Fix error in GPU frequency validation logic.
  * Fix error in pmix logic dealing with the incorrect size of buffer.
  * PMIx v1.1.4 and below are no longer supported.
  * Fix shutdown of slurmdbd plugin to correctly notice when the agent thread
    finishes.
  * Fix slurmctld segfault due to job array  --batch features double free.
  * CVE-2022-29500 - Prevent credential abuse (bsc#1199278).
  * CVE-2022-29501 - Prevent abuse of REQUEST_FORWARD_DATA (bsc#1199279).
- Update to 20.11.8:
  * slurmctld - fix erroneous "StepId=CORRUPT" messages in error logs.
  * Correct the error given when auth plugin fails to pack a credential.
  * Fix unused-variable compiler warning on FreeBSD in fd_resolve_path().
  * acct_gather_filesystem/lustre - only emit collection error once per step.
  * srun - leave SLURM_DIST_UNKNOWN as default for  --interactive.
  * Add GRES environment variables (e.g., CUDA_VISIBLE_DEVICES) into the
    interactive step, the same as is done for the batch step.
  * Fix various potential deadlocks when altering objects in the database
    dealing with every cluster in the database.
  * slurmrestd - handle slurmdbd connection failures without segfaulting.
  * slurmrestd - fix segfault for searches in slurmdb/v0.0.36/jobs.
  * slurmrestd - remove (non-functioning) users query parameter for
    slurmdb/v0.0.36/jobs from openapi.json
  * slurmrestd - fix segfault in slurmrestd db/jobs with numeric queries
  * slurmrestd - add argv handling for job/submit endpoint.
  * srun - fix broken node step allocation in a heterogeneous allocation.
  * Fail step creation if -n is not multiple of  --ntasks-per-gpu.
  * job_container/tmpfs - Fix slowdown on teardown.
  * Fix problem with SlurmctldProlog where requeued jobs would never launch.
  * job_container/tmpfs - Fix issue when restarting slurmd where the namespace
    mount points could disappear.
  * sacct - avoid truncating JobId at 34 characters.
  * scancel - fix segfault when --wckey filtering option is used.
  * select/cons_tres - Fix memory leak.
  * Prevent file descriptor leak in job_container/tmpfs on slurmd restart.
  * slurmrestd/dbv0.0.36 - Fix values dumped in job state/current and
    job step state.
  * slurmrestd/dbv0.0.36 - Correct description for previous state property.
  * perlapi/libslurmdb - expose tres_req_str to job hash.
  * scrontab - close and reopen temporary crontab file to deal with editors
    that do not change the original file, but instead write out then rename
    a new file.
  * sstat - fix linking so that it will work when --without-shared-libslurm
    was used to build Slurm.
  * Clear allocated cpus for running steps in a job before handling requested
    nodes on new step.
  * Don't reject a step if not enough nodes are available. Instead, defer the
    step until enough nodes are available to satisfy the request.
  * Don't reject a step if it requests at least one specific node that is
    already allocated to another step. Instead, defer the step until the
    requested node(s) become available.
  * slurmrestd - add description for slurmdb/job endpoint.
  * Better handling of --mem=0.
  * Ignore DefCpuPerGpu when --cpus-per-task given.
  * sacct - fix segfault when printing StepId (or when using --long).</changelog>
</package>
<package pkgid="f6b672741c83bf2dfe26038601aa35979ad344cdf40b12b7ab4777b8f79a117d" name="perl-slurm_20_11" arch="aarch64">
  <version epoch="0" ver="20.11.9" rel="150200.6.10.1"/>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
  <changelog author="eich@suse.com" date="1651838400">- Add 'CommunicationParameters=block_null_hash' to slurm.conf, please
  add this parameter to existing configurations as part of CVE-2022-29500:
  This new option provides additional protection against a potential exploit.
- Update to 20.11.9:
  * burst_buffer - add missing common directory to the Makefile SUBDIRS.
  * sacct - fix truncation when printing jobidraw field.
  * GRES - Fix loading state of jobs using --gpus to request gpus.
  * Fix minor logic error in health check node state output
  * Fix GCC 11.1 compiler warnings.
  * Delay steps when memory already used instead of rejecting step request.
  * Fix memory leak in the slurmdbd when requesting wckeys from all clusters.
  * Fix determining if a reservation is used or not.
  * openapi/v0.0.35 - Honor kill_on_invalid_dependency as job parameter.
  * openapi/v0.0.36 - Honor kill_on_invalid_dependency as job parameter.
  * Fix various issues dealing with updates on magnetic reservations that could
    lead to abort slurmctld.
  * openapi/v0.0.36 - Avoid setting default values of min_cpus, job name, cwd,
    mail_type, and contiguous on job update.
  * openapi/v0.0.36 - Clear user hold on job update if hold=false.
  * Fix slurmctld segfault due to a bit_test() call with a MAINT+ANY_NODES
    reservation NULL node_bitmap.
  * Fix slurmctld segfault due to a bit_copy() call with a REPLACE+ANY_NODES
    reservation NULL node_bitmap.
  * Fix error in GPU frequency validation logic.
  * Fix error in pmix logic dealing with the incorrect size of buffer.
  * PMIx v1.1.4 and below are no longer supported.
  * Fix shutdown of slurmdbd plugin to correctly notice when the agent thread
    finishes.
  * Fix slurmctld segfault due to job array  --batch features double free.
  * CVE-2022-29500 - Prevent credential abuse (bsc#1199278).
  * CVE-2022-29501 - Prevent abuse of REQUEST_FORWARD_DATA (bsc#1199279).
- Update to 20.11.8:
  * slurmctld - fix erroneous "StepId=CORRUPT" messages in error logs.
  * Correct the error given when auth plugin fails to pack a credential.
  * Fix unused-variable compiler warning on FreeBSD in fd_resolve_path().
  * acct_gather_filesystem/lustre - only emit collection error once per step.
  * srun - leave SLURM_DIST_UNKNOWN as default for  --interactive.
  * Add GRES environment variables (e.g., CUDA_VISIBLE_DEVICES) into the
    interactive step, the same as is done for the batch step.
  * Fix various potential deadlocks when altering objects in the database
    dealing with every cluster in the database.
  * slurmrestd - handle slurmdbd connection failures without segfaulting.
  * slurmrestd - fix segfault for searches in slurmdb/v0.0.36/jobs.
  * slurmrestd - remove (non-functioning) users query parameter for
    slurmdb/v0.0.36/jobs from openapi.json
  * slurmrestd - fix segfault in slurmrestd db/jobs with numeric queries
  * slurmrestd - add argv handling for job/submit endpoint.
  * srun - fix broken node step allocation in a heterogeneous allocation.
  * Fail step creation if -n is not multiple of  --ntasks-per-gpu.
  * job_container/tmpfs - Fix slowdown on teardown.
  * Fix problem with SlurmctldProlog where requeued jobs would never launch.
  * job_container/tmpfs - Fix issue when restarting slurmd where the namespace
    mount points could disappear.
  * sacct - avoid truncating JobId at 34 characters.
  * scancel - fix segfault when --wckey filtering option is used.
  * select/cons_tres - Fix memory leak.
  * Prevent file descriptor leak in job_container/tmpfs on slurmd restart.
  * slurmrestd/dbv0.0.36 - Fix values dumped in job state/current and
    job step state.
  * slurmrestd/dbv0.0.36 - Correct description for previous state property.
  * perlapi/libslurmdb - expose tres_req_str to job hash.
  * scrontab - close and reopen temporary crontab file to deal with editors
    that do not change the original file, but instead write out then rename
    a new file.
  * sstat - fix linking so that it will work when --without-shared-libslurm
    was used to build Slurm.
  * Clear allocated cpus for running steps in a job before handling requested
    nodes on new step.
  * Don't reject a step if not enough nodes are available. Instead, defer the
    step until enough nodes are available to satisfy the request.
  * Don't reject a step if it requests at least one specific node that is
    already allocated to another step. Instead, defer the step until the
    requested node(s) become available.
  * slurmrestd - add description for slurmdb/job endpoint.
  * Better handling of --mem=0.
  * Ignore DefCpuPerGpu when --cpus-per-task given.
  * sacct - fix segfault when printing StepId (or when using --long).</changelog>
</package>
<package pkgid="dd0f785a33c736d54d2fbc59c2f59d585ce0f9a7d90b25b821ff58d1d543ac8f" name="perl-slurm_20_11" arch="ppc64le">
  <version epoch="0" ver="20.11.9" rel="150200.6.10.1"/>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
  <changelog author="eich@suse.com" date="1651838400">- Add 'CommunicationParameters=block_null_hash' to slurm.conf, please
  add this parameter to existing configurations as part of CVE-2022-29500:
  This new option provides additional protection against a potential exploit.
- Update to 20.11.9:
  * burst_buffer - add missing common directory to the Makefile SUBDIRS.
  * sacct - fix truncation when printing jobidraw field.
  * GRES - Fix loading state of jobs using --gpus to request gpus.
  * Fix minor logic error in health check node state output
  * Fix GCC 11.1 compiler warnings.
  * Delay steps when memory already used instead of rejecting step request.
  * Fix memory leak in the slurmdbd when requesting wckeys from all clusters.
  * Fix determining if a reservation is used or not.
  * openapi/v0.0.35 - Honor kill_on_invalid_dependency as job parameter.
  * openapi/v0.0.36 - Honor kill_on_invalid_dependency as job parameter.
  * Fix various issues dealing with updates on magnetic reservations that could
    lead to abort slurmctld.
  * openapi/v0.0.36 - Avoid setting default values of min_cpus, job name, cwd,
    mail_type, and contiguous on job update.
  * openapi/v0.0.36 - Clear user hold on job update if hold=false.
  * Fix slurmctld segfault due to a bit_test() call with a MAINT+ANY_NODES
    reservation NULL node_bitmap.
  * Fix slurmctld segfault due to a bit_copy() call with a REPLACE+ANY_NODES
    reservation NULL node_bitmap.
  * Fix error in GPU frequency validation logic.
  * Fix error in pmix logic dealing with the incorrect size of buffer.
  * PMIx v1.1.4 and below are no longer supported.
  * Fix shutdown of slurmdbd plugin to correctly notice when the agent thread
    finishes.
  * Fix slurmctld segfault due to job array  --batch features double free.
  * CVE-2022-29500 - Prevent credential abuse (bsc#1199278).
  * CVE-2022-29501 - Prevent abuse of REQUEST_FORWARD_DATA (bsc#1199279).
- Update to 20.11.8:
  * slurmctld - fix erroneous "StepId=CORRUPT" messages in error logs.
  * Correct the error given when auth plugin fails to pack a credential.
  * Fix unused-variable compiler warning on FreeBSD in fd_resolve_path().
  * acct_gather_filesystem/lustre - only emit collection error once per step.
  * srun - leave SLURM_DIST_UNKNOWN as default for  --interactive.
  * Add GRES environment variables (e.g., CUDA_VISIBLE_DEVICES) into the
    interactive step, the same as is done for the batch step.
  * Fix various potential deadlocks when altering objects in the database
    dealing with every cluster in the database.
  * slurmrestd - handle slurmdbd connection failures without segfaulting.
  * slurmrestd - fix segfault for searches in slurmdb/v0.0.36/jobs.
  * slurmrestd - remove (non-functioning) users query parameter for
    slurmdb/v0.0.36/jobs from openapi.json
  * slurmrestd - fix segfault in slurmrestd db/jobs with numeric queries
  * slurmrestd - add argv handling for job/submit endpoint.
  * srun - fix broken node step allocation in a heterogeneous allocation.
  * Fail step creation if -n is not multiple of  --ntasks-per-gpu.
  * job_container/tmpfs - Fix slowdown on teardown.
  * Fix problem with SlurmctldProlog where requeued jobs would never launch.
  * job_container/tmpfs - Fix issue when restarting slurmd where the namespace
    mount points could disappear.
  * sacct - avoid truncating JobId at 34 characters.
  * scancel - fix segfault when --wckey filtering option is used.
  * select/cons_tres - Fix memory leak.
  * Prevent file descriptor leak in job_container/tmpfs on slurmd restart.
  * slurmrestd/dbv0.0.36 - Fix values dumped in job state/current and
    job step state.
  * slurmrestd/dbv0.0.36 - Correct description for previous state property.
  * perlapi/libslurmdb - expose tres_req_str to job hash.
  * scrontab - close and reopen temporary crontab file to deal with editors
    that do not change the original file, but instead write out then rename
    a new file.
  * sstat - fix linking so that it will work when --without-shared-libslurm
    was used to build Slurm.
  * Clear allocated cpus for running steps in a job before handling requested
    nodes on new step.
  * Don't reject a step if not enough nodes are available. Instead, defer the
    step until enough nodes are available to satisfy the request.
  * Don't reject a step if it requests at least one specific node that is
    already allocated to another step. Instead, defer the step until the
    requested node(s) become available.
  * slurmrestd - add description for slurmdb/job endpoint.
  * Better handling of --mem=0.
  * Ignore DefCpuPerGpu when --cpus-per-task given.
  * sacct - fix segfault when printing StepId (or when using --long).</changelog>
</package>
<package pkgid="89b1d168f7721d2829f801e7698d776af6a9c5686a501538147257660dcc9c9d" name="perl-slurm_20_11" arch="s390x">
  <version epoch="0" ver="20.11.9" rel="150200.6.10.1"/>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
  <changelog author="eich@suse.com" date="1651838400">- Add 'CommunicationParameters=block_null_hash' to slurm.conf, please
  add this parameter to existing configurations as part of CVE-2022-29500:
  This new option provides additional protection against a potential exploit.
- Update to 20.11.9:
  * burst_buffer - add missing common directory to the Makefile SUBDIRS.
  * sacct - fix truncation when printing jobidraw field.
  * GRES - Fix loading state of jobs using --gpus to request gpus.
  * Fix minor logic error in health check node state output
  * Fix GCC 11.1 compiler warnings.
  * Delay steps when memory already used instead of rejecting step request.
  * Fix memory leak in the slurmdbd when requesting wckeys from all clusters.
  * Fix determining if a reservation is used or not.
  * openapi/v0.0.35 - Honor kill_on_invalid_dependency as job parameter.
  * openapi/v0.0.36 - Honor kill_on_invalid_dependency as job parameter.
  * Fix various issues dealing with updates on magnetic reservations that could
    lead to abort slurmctld.
  * openapi/v0.0.36 - Avoid setting default values of min_cpus, job name, cwd,
    mail_type, and contiguous on job update.
  * openapi/v0.0.36 - Clear user hold on job update if hold=false.
  * Fix slurmctld segfault due to a bit_test() call with a MAINT+ANY_NODES
    reservation NULL node_bitmap.
  * Fix slurmctld segfault due to a bit_copy() call with a REPLACE+ANY_NODES
    reservation NULL node_bitmap.
  * Fix error in GPU frequency validation logic.
  * Fix error in pmix logic dealing with the incorrect size of buffer.
  * PMIx v1.1.4 and below are no longer supported.
  * Fix shutdown of slurmdbd plugin to correctly notice when the agent thread
    finishes.
  * Fix slurmctld segfault due to job array  --batch features double free.
  * CVE-2022-29500 - Prevent credential abuse (bsc#1199278).
  * CVE-2022-29501 - Prevent abuse of REQUEST_FORWARD_DATA (bsc#1199279).
- Update to 20.11.8:
  * slurmctld - fix erroneous "StepId=CORRUPT" messages in error logs.
  * Correct the error given when auth plugin fails to pack a credential.
  * Fix unused-variable compiler warning on FreeBSD in fd_resolve_path().
  * acct_gather_filesystem/lustre - only emit collection error once per step.
  * srun - leave SLURM_DIST_UNKNOWN as default for  --interactive.
  * Add GRES environment variables (e.g., CUDA_VISIBLE_DEVICES) into the
    interactive step, the same as is done for the batch step.
  * Fix various potential deadlocks when altering objects in the database
    dealing with every cluster in the database.
  * slurmrestd - handle slurmdbd connection failures without segfaulting.
  * slurmrestd - fix segfault for searches in slurmdb/v0.0.36/jobs.
  * slurmrestd - remove (non-functioning) users query parameter for
    slurmdb/v0.0.36/jobs from openapi.json
  * slurmrestd - fix segfault in slurmrestd db/jobs with numeric queries
  * slurmrestd - add argv handling for job/submit endpoint.
  * srun - fix broken node step allocation in a heterogeneous allocation.
  * Fail step creation if -n is not multiple of  --ntasks-per-gpu.
  * job_container/tmpfs - Fix slowdown on teardown.
  * Fix problem with SlurmctldProlog where requeued jobs would never launch.
  * job_container/tmpfs - Fix issue when restarting slurmd where the namespace
    mount points could disappear.
  * sacct - avoid truncating JobId at 34 characters.
  * scancel - fix segfault when --wckey filtering option is used.
  * select/cons_tres - Fix memory leak.
  * Prevent file descriptor leak in job_container/tmpfs on slurmd restart.
  * slurmrestd/dbv0.0.36 - Fix values dumped in job state/current and
    job step state.
  * slurmrestd/dbv0.0.36 - Correct description for previous state property.
  * perlapi/libslurmdb - expose tres_req_str to job hash.
  * scrontab - close and reopen temporary crontab file to deal with editors
    that do not change the original file, but instead write out then rename
    a new file.
  * sstat - fix linking so that it will work when --without-shared-libslurm
    was used to build Slurm.
  * Clear allocated cpus for running steps in a job before handling requested
    nodes on new step.
  * Don't reject a step if not enough nodes are available. Instead, defer the
    step until enough nodes are available to satisfy the request.
  * Don't reject a step if it requests at least one specific node that is
    already allocated to another step. Instead, defer the step until the
    requested node(s) become available.
  * slurmrestd - add description for slurmdb/job endpoint.
  * Better handling of --mem=0.
  * Ignore DefCpuPerGpu when --cpus-per-task given.
  * sacct - fix segfault when printing StepId (or when using --long).</changelog>
</package>
<package pkgid="aaa4918ff1a30d042f4e76ac38de6ec8fc6a5bd7f744f190ad1eedbd3ea7499f" name="perl-slurm_20_11" arch="x86_64">
  <version epoch="0" ver="20.11.9" rel="150200.6.10.1"/>
  <changelog author="eich@suse.com" date="1583668800">- Remove legacy_cray: with 20.02 the special treatment for
  cray-specific plugins on SLE version prior to 15SP2 is
  no longer required.</changelog>
  <changelog author="cgoll@suse.com" date="1585310400">- Updated to 20.02.1 with following changes"
  * Improve job state reason for jobs hitting partition_job_depth.
  * Speed up testing of singleton dependencies.
  * Fix negative loop bound in cons_tres.
  * srun - capture the MPI plugin return code from mpi_hook_client_fini() and
  use as final return code for step failure.
  * Fix segfault in cli_filter/lua.
  * Fix --gpu-bind=map_gpu reusability if tasks &gt; elements.
  * Make sure config_flags on a gres are sent to the slurmctld on node
  registration.
  * Prolog/Epilog - Fix missing GPU information.
  * Fix segfault when using config parser for expanded lines.
  * Fix bit overlap test function.
  * Don't accrue time if job begin time is in the future.
  * Remove accrue time when updating a job start/eligible time to the future.
  * Fix regression in 20.02.0 that broke --depend=expand.
  * Reset begin time on job release if it's not in the future.
  * Fix for recovering burst buffers when using high-availability.
  * Fix invalid read due to freeing an incorrectly allocated env array.
  * Update slurmctld -i message to warn about losing data.
  * Fix scontrol cancel_reboot so it clears the DRAIN flag and node reason for a
  pending ASAP reboot.</changelog>
  <changelog author="eich@suse.com" date="1588766400">- Treat libnss_slurm like any other package: add version string to
  upgrade package.</changelog>
  <changelog author="cgoll@suse.com" date="1590148800">- Updated to 20.02.3 which fixes CVE-2020-12693 (bsc#1172004).
- Other changes are:
  * Factor in ntasks-per-core=1 with cons_tres.
  * Fix formatting in error message in cons_tres.
  * Fix calling stat on a NULL variable.
  * Fix minor memory leak when using reservations with flags=first_cores.
  * Fix gpu bind issue when CPUs=Cores and ThreadsPerCore &gt; 1 on a node.
  * Fix --mem-per-gpu for heterogenous --gres requests.
  * Fix slurmctld load order in load_all_part_state().
  * Fix race condition not finding jobacct gather task cgroup entry.
  * Suppress error message when selecting nodes on disjoint topologies.
  * Improve performance of _pack_default_job_details() with large number of job
  * arguments.
  * Fix archive loading previous to 17.11 jobs per-node req_mem.
  * Fix regresion validating that --gpus-per-socket requires --sockets-per-node
  * for steps. Should only validate allocation requests.
  * error() instead of fatal() when parsing an invalid hostlist.
  * nss_slurm - fix potential deadlock in slurmstepd on overloaded systems.
  * cons_tres - fix --gres-flags=enforce-binding and related --cpus-per-gres.
  * cons_tres - Allocate lowest numbered cores when filtering cores with gres.
  * Fix getting system counts for named GRES/TRES.
  * MySQL - Fix for handing typed GRES for association rollups.
  * Fix step allocations when tasks_per_core &gt; 1.
  * Fix allocating more GRES than requested when asking for multiple GRES types.</changelog>
  <changelog author="eich@suse.com" date="1591185600">- Bring QA to the package build: add %%check stage.
- Remove cruft that isn't needed any longer.
- Add 'ghosted' run-file.
- Add rpmlint filter to handle issues with library packages
  for Leap and enterprise upgrade versions.</changelog>
  <changelog author="eich@suse.com" date="1594123200">- Add support for openPMIx also for Leap/SLE 15.0/1 (bsc#1173805).
- Do not run %check on SLE-12-SP2: Some incompatibility in tcl
  makes this fail.
- Remove unneeded build dependency to postgresql-devel.
- Disable build on s390 (requires 64bit).</changelog>
  <changelog author="aguerrero@suse.com" date="1603972800">- Updated to 20.02.5, changes:
  * Fix leak of TRESRunMins when job time is changed with --time-min
  * pam_slurm - explicitly initialize slurm config to support configless mode.
  * scontrol - Fix exit code when creating/updating reservations with wrong
  Flags.
  * When a GRES has a no_consume flag, report 0 for allocated.
  * Fix cgroup cleanup by jobacct_gather/cgroup.
  * When creating reservations/jobs don't allow counts on a feature unless
  using an XOR.
  * Improve number of boards discovery
  * Fix updating a reservation NodeCnt on a zero-count reservation.
  * slurmrestd - provide an explicit error messages when PSK auth fails.
  * cons_tres - fix job requesting single gres per-node getting two or more
  nodes with less CPUs than requested per-task.
  * cons_tres - fix calculation of cores when using gres and cpus-per-task.
  * cons_tres - fix job not getting access to socket without GPU or with less
  than --gpus-per-socket when not enough cpus available on required socket
  and not using --gres-flags=enforce binding.
  * Fix HDF5 type version build error.
  * Fix creation of CoreCnt only reservations when the first node isn't
  available.
  * Fix wrong DBD Agent queue size in sdiag when using accounting_storage/none.
  * Improve job constraints XOR option logic.
  * Fix preemption of hetjobs when needed nodes not in leader component.
  * Fix wrong bit_or() messing potential preemptor jobs node bitmap, causing
  bad node deallocations and even allocation of nodes from other partitions.
  * Fix double-deallocation of preempted non-leader hetjob components.
  * slurmdbd - prevent truncation of the step nodelists over 4095.
  * Fix nodes remaining in drain state state after rebooting with ASAP option.
  - changes from 20.02.4:
  * srun - suppress job step creation warning message when waiting on
  PrologSlurmctld.
  * slurmrestd - fix incorrect return values in data_list_for_each() functions.
  * mpi/pmix - fix issue where HetJobs could fail to launch.
  * slurmrestd - set content-type header in responses.
  * Fix cons_res GRES overallocation for --gres-flags=disable-binding.
  * Fix cons_res incorrectly filtering cores with respect to GRES locality for
  - -gres-flags=disable-binding requests.
  * Fix regression where a dependency on multiple jobs in a single array using
  underscores would only add the first job.
  * slurmrestd - fix corrupted output due to incorrect use of memcpy().
  * slurmrestd - address a number of minor Coverity warnings.
  * Handle retry failure when slurmstepd is communicating with srun correctly.
  * Fix jobacct_gather possibly duplicate stats when _is_a_lwp error shows up.
  * Fix tasks binding to GRES which are closest to the allocated CPUs.
  * Fix AMD GPU ROCM 3.5 support.
  * Fix handling of job arrays in sacct when querying specific steps.
  * slurmrestd - avoid fallback to local socket authentication if JWT
  authentication is ill-formed.
  * slurmrestd - restrict ability of requests to use different authentication
  plugins.
  * slurmrestd - unlink named unix sockets before closing.
  * slurmrestd - fix invalid formatting in openapi.json.
  * Fix batch jobs stuck in CF state on FrontEnd mode.
  * Add a separate explicit error message when rejecting changes to active node
  features.
  * cons_common/job_test - fix slurmctld SIGABRT due to double-free.
  * Fix updating reservations to set the duration correctly if updating the
  start time.
  * Fix update reservation to promiscuous mode.
  * Fix override of job tasks count to max when ntasks-per-node present.
  * Fix min CPUs per node not being at least CPUs per task requested.
  * Fix CPUs allocated to match CPUs requested when requesting GRES and
  threads per core equal to one.
  * Fix NodeName config parsing with Boards and without CPUs.
  * Ensure SLURM_JOB_USER and SLURM_JOB_UID are set in SrunProlog/Epilog.
  * Fix error messages for certain invalid salloc/sbatch/srun options.
  * pmi2 - clean up sockets at step termination.
  * Fix 'scontrol hold' to work with 'JobName'.
  * sbatch - handle --uid/--gid in #SBATCH directives properly.
  * Fix race condition in job termination on slurmd.
  * Print specific error messages if trying to run use certain
  priority/multifactor factors that cannot work without SlurmDBD.
  * Avoid partial GRES allocation when --gpus-per-job is not satisfied.
  * Cray - Avoid referencing a variable outside of it's correct scope when
  dealing with creating steps within a het job.
  * slurmrestd - correctly handle larger addresses from accept().
  * Avoid freeing wrong pointer with SlurmctldParameters=max_dbd_msg_action
  with another option after that.
  * Restore MCS label when suspended job is resumed.
  * Fix insufficient lock levels.
  * slurmrestd - use errno from job submission.
  * Fix "user" filter for sacctmgr show transactions.
  * Fix preemption logic.
  * Fix no_consume GRES for exclusive (whole node) requests.
  * Fix regression in 20.02 that caused an infinite loop in slurmctld when
  requesting --distribution=plane for the job.
  * Fix parsing of the --distribution option.
  * Add CONF READ_LOCK to _handle_fed_send_job_sync.
  * prep/script - always call slurmctld PrEp callback in _run_script().
  * Fix node estimation for jobs that use GPUs or --cpus-per-task.
  * Fix jobcomp, job_submit and cli_filter Lua implementation plugins causing
  slurmctld and/or job submission CLI tools segfaults due to bad return
  handling when the respective Lua script failed to load.
  * Fix propagation of gpu options through hetjob components.
  * Add SLURM_CLUSTERS environment variable to scancel.
  * Fix packing/unpacking of "unlinked" jobs.
  * Connect slurmstepd's stderr to srun for steps launched with --pty.
  * Handle MPS correctly when doing exclusive allocations.
  * slurmrestd - fix compiling against libhttpparser in a non-default path.
  * slurmrestd - avoid compilation issues with libhttpparser &lt; 2.6.
  * Fix compile issues when compiling slurmrestd without --enable-debug.
  * Reset idle time on a reservation that is getting purged.
  * Fix reoccurring reservations that have Purge_comp= to keep correct
  duration if they are purged.
  * scontrol - changed the "PROMISCUOUS" flag to "MAGNETIC"
  * Early return from epilog_set_env in case of no_consume.
  * Fix cons_common/job_test start time discovery logic to prevent skewed
  results between "will run test" executions.
  * Ensure TRESRunMins limits are maintained during "scontrol reconfigure".
  * Improve error message when host lookup fails.
- Refresh patch: pam_slurm-Initialize-arrays-and-pass-sizes.patch</changelog>
  <changelog author="fbui@suse.com" date="1604404800">- Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'
  '-n' is deprecated and will be removed in the future.</changelog>
  <changelog author="aguerrero@suse.com" date="1605700800">- Updated to 20.02.6, addresses two security fixes:
  * PMIx - fix potential buffer overflows from use of unpackmem().
    CVE-2020-27745 (bsc#1178890)
  * X11 forwarding - fix potential leak of the magic cookie when sent as an
    argument to the xauth command. CVE-2020-27746 (bsc#1178891)
- And many other bugfixes, full log and details available at:
  * https://lists.schedmd.com/pipermail/slurm-announce/2020/000045.html</changelog>
  <changelog author="eich@suse.com" date="1606737600">- Update to version 20.11.0
  Slurm 20.11 includes a number of new features including:
  * Overhaul of the job step management and launch code, alongside improved
    GPU task placement support.
  * A new "Interactive Step" mode of operation for salloc.
  * A new "scrontab" command that can be used to submit and manage
    periodically repeating jobs.
  * IPv6 support.
  * Changes to the reservation logic, with new options allowing users
    to delete reservations, allowing admins to skip the next occurance of a
    repeated reservation, and allowing for a job to be submitted and eligible
    to run within multiple reservations.
  * Dynamic Future Nodes - automatically associate a dynamically
    provisioned (or "cloud") node against a NodeName definition with matching
    hardware.
  * An experimental new RPC queuing mode for slurmctld to reduce thread
    contention on heavily loaded clusters.
  * SlurmDBD integration with the Slurm REST API.
  Also check
  https://github.com/SchedMD/slurm/blob/slurm-20-11-0-1/RELEASE_NOTES</changelog>
  <changelog author="aguerrero@suse.com" date="1609156800">- Update to 20.11.02
  * Fix older versions of sacct not working with 20.11.
  * Fix slurmctld crash when using a pre-20.11 srun in a job allocation.
  * Correct logic problem in _validate_user_access.
  * Fix libpmi to initialize Slurm configuration correctly.
- Update to 20.11.01
  * Fix spelling of "overcomited" to "overcomitted" in sreport's cluster
    utilization report.
  * Silence debug message about shutting down backup controllers if none are
    configured.
  * Don't create interactive srun until PrologSlurmctld is done.
  * Fix fd symlink path resolution.
  * Fix slurmctld segfault on subnode reservation restore after node
    configuration change.
  * Fix resource allocation response message environment allocation size.
  * Ensure that details-&gt;env_sup is NULL terminated.
  * select/cray_aries - Correctly remove jobs/steps from blades using NPC.
  * cons_tres - Avoid max_node_gres when entire node is allocated with
  - -ntasks-per-gpu.
  * Allow NULL arg to data_get_type().
  * In sreport have usage for a reservation contain all jobs that ran in the
    reservation instead of just the ones that ran in the time specified. This
    matches the report for the reservation is not truncated for a time period.
  * Fix issue with sending wrong batch step id to a &lt; 20.11 slurmd.
  * Add a job's alloc_node to lua for job modification and completion.
  * Fix regression getting a slurmdbd connection through the perl API.
  * Stop the extern step terminate monitor right after proctrack_g_wait().
  * Fix removing the normalized priority of assocs.
  * slurmrestd/v0.0.36 - Use correct name for partition field:
    "min nodes per job" -"min_nodes_per_job".
  * slurmrestd/v0.0.36 - Add node comment field.
  * Fix regression marking cloud nodes as "unexpectedly rebooted" after
    multiple boots.
  * Fix slurmctld segfault in _slurm_rpc_job_step_create().
  * slurmrestd/v0.0.36 - Filter node states against NODE_STATE_BASE to avoid
    the extended states all being reported as "invalid".
  * Fix race that can prevent the prolog for a requeued job from running.
  * cli_filter - add "type" to readily distinguish between the CLI command in
    use.
  * smail - reduce sleep before seff to 5 seconds.
  * Ensure SPANK prolog and epilog run without an explicit PlugStackConfig.
  * Disable MySQL automatic reconnection.
  * Fix allowing "b" after memory unit suffixes.
  * Fix slurmctld segfault with reservations without licenses.
  * Due to internal restructuring ahead of the 20.11 release, applications
    calling libslurm MUST call slurm_init(NULL) before any API calls.
    Otherwise the API call is likely to fail due to libslurm's internal
    configuration not being available.
  * slurm.spec - allow custom paths for PMIx and UCX install locations.
  * Use rpath if enabled when testing for Mellanox's UCX libraries.
  * slurmrestd/dbv0.0.36 - Change user query for associations to optional.
  * slurmrestd/dbv0.0.36 - Change account query for associations to optional.
  * mpi/pmix - change the error handler error message to be more useful.
  * Add missing connection in acct_storage_p_{clear_stats, reconfig, shutdown}.
  * Perl API - fix issue when running in configless mode.
  * nss_slurm - avoid deadlock when stray sockets are found.
  * Display correct value for ScronParameters in 'scontrol show config'</changelog>
  <changelog author="aguerrero@suse.com" date="1609848000">- Add support for configuration files from external plugins.
  While built-in plugins have their configuration added in slurm.conf,
  external SPANK plugins add their configuration to plugstack.conf
  To allow packaging easily spank plugins, their configuration files
  should be added independently at /etc/spack/plugstack.conf.d and
  plugstack.conf should be left with an oneliner including all the
  files under /etc/spack/plugstack.conf.d</changelog>
  <changelog author="eich@suse.com" date="1610107200">- Fix Provides:/Conflicts: for libnss_slurm (bsc#1180700).</changelog>
  <changelog author="eich@suse.com" date="1610107201">- Fix fallout introduced by:
  "Replace  '%service_del_postun -n' with '%service_del_postun_without_restart'"
  for older Leap/SLE versions.</changelog>
  <changelog author="aguerrero@suse.com" date="1611144000">- Update to 20.11.03
- This release includes a major functional change to how job step launch is
  handled compared to the previous 20.11 releases. This affects srun as
  well as MPI stacks - such as Open MPI - which may use srun internally as
  part of the process launch.
  One of the changes made in the Slurm 20.11 release was to the semantics
  for job steps launched through the 'srun' command. This also
  inadvertently impacts many MPI releases that use srun underneath their
  own mpiexec/mpirun command.
  For 20.11.{0,1,2} releases, the default behavior for srun was changed
  such that each step was allocated exactly what was requested by the
  options given to srun, and did not have access to all resources assigned
  to the job on the node by default. This change was equivalent to Slurm
  setting the --exclusive option by default on all job steps. Job steps
  desiring all resources on the node needed to explicitly request them
  through the new '--whole' option.
  In the 20.11.3 release, we have reverted to the 20.02 and older behavior
  of assigning all resources on a node to the job step by default.
  This reversion is a major behavioral change which we would not generally
  do on a maintenance release, but is being done in the interest of
  restoring compatibility with the large number of existing Open MPI (and
  other MPI flavors) and job scripts that exist in production, and to
  remove what has proven to be a significant hurdle in moving to the new
  release.
  Please note that one change to step launch remains - by default, in
  20.11 steps are no longer permitted to overlap on the resources they
  have been assigned. If that behavior is desired, all steps must
  explicitly opt-in through the newly added '--overlap' option.
  Further details and a full explanation of the issue can be found at:
  https://bugs.schedmd.com/show_bug.cgi?id=10383#c63
- Other changes from 20.11.03
  * Fix segfault when parsing bad "#SBATCH hetjob" directive.
  * Allow countless gpu:&lt;typenode GRES specifications in slurm.conf.
  * PMIx - Don't set UCX_MEM_MMAP_RELOC for older version of UCX (pre 1.5).
  * Don't green-light any GPU validation when core conversion fails.
  * Allow updates to a reservation in the database that starts in the future.
  * Better check/handling of primary key collision in reservation table.
  * Improve reported error and logging in _build_node_list().
  * Fix uninitialized variable in _rpc_file_bcast() which could lead to an
    incorrect error return from sbcast / srun --bcast.
  * mpi/cray_shasta - fix use-after-free on error in _multi_prog_parse().
  * Cray - Handle setting correct prefix for cpuset cgroup with respects to
    expected_usage_in_bytes.  This fixes Cray's OOM killer.
  * mpi/pmix: Fix PMIx_Abort support.
  * Don't reject jobs allocating more cores than tasks with MaxMemPerCPU.
  * Fix false error message complaining about oversubscribe in cons_tres.
  * scrontab - fix parsing of empty lines.
  * Fix regression causing spank_process_option errors to be ignored.
  * Avoid making multiple interactive steps.
  * Fix corner case issues where step creation should fail.
  * Fix job rejection when --gres is less than --gpus.
  * Fix regression causing spank prolog/epilog not to be called unless the
    spank plugin was loaded in slurmd context.
  * Fix regression preventing SLURM_HINT=nomultithread from being used
    to set defaults for salloc-&gt;srun, sbatch-&gt;srun sequence.
  * Reject job credential if non-superuser sets the LAUNCH_NO_ALLOC flag.
  * Make it so srun --no-allocate works again.
  * jobacct_gather/linux - Don't count memory on tasks that have already
    finished.
  * Fix 19.05/20.02 batch steps talking with a 20.11 slurmctld.
  * jobacct_gather/common - Do not process jobacct's with same taskid when
    calling prec_extra.
  * Cleanup all tracked jobacct tasks when extern step child process finishes.
  * slurmrestd/dbv0.0.36 - Correct structure of dbv0.0.36_tres_list.
  * Fix regression causing task/affinity and task/cgroup to be out of sync when
    configured ThreadsPerCore is different than the physical threads per core.
  * Fix situation when --gpus is given but not max nodes (-N1-1) in a job
    allocation.
  * Interactive step - ignore cpu bind and mem bind options, and do not set
    the associated environment variables which lead to unexpected behavior
    from srun commands launched within the interactive step.
  * Handle exit code from pipe when using UCX with PMIx.</changelog>
  <changelog author="cgoll@suse.com" date="1614081600">- Udpate to 20.11.04
  * Fix node selection for advanced reservations with features.
  * mpi/pmix: Handle pipe failure better when using ucx.
  * mpi/pmix: include PMIX_NODEID for each process entry.
  * Fix job getting rejected after being requeued on same node that died.
  * job_submit/lua - add "network" field.
  * Fix situations when a reoccuring reservation could erroneously skip a
  period.
  * Ensure that a reservations [pro|epi]log are ran on reoccuring reservations.
  * Fix threads-per-core memory allocation issue when using CR_CPU_MEMORY.
  * Fix scheduling issue with --gpus.
  * Fix gpu allocations that request --cpus-per-task.
  * mpi/pmix: fixed print messages for all PMIXP_* macros
  * Add mapping for XCPU to --signal option.
  * Fix regression in 20.11 that prevented a full pass of the main scheduler
  from ever executing.
  * Work around a glibc bug in which "0" is incorrectly printed as "nan"
  which will result in corrupted association state on restart.
  * Fix regression in 20.11 which made slurmd incorrectly attempt to find the
  parent slurmd address when not applicable and send incorrect reverse*tree
  info to the slurmstepd.
  * Fix cgroup ns detection when using containers (e.g. LXC or Docker).
  * scrontab - change temporary file handling to work with emacs.
- Removed check-for-lipmix.so.MAJOR.patch
- Added: load-pmix-major-version.patch</changelog>
  <changelog author="cgoll@suse.com" date="1615982400">- Udpate to 20.11.5:
- New features:
  * New job_container/tmpfs plugin developed by NERSC that can be used to
  create per-job filesystem namespaces.  Documentaiion and configuration
  can be found in the respecting man page.
- Bug fixes:
  * Fix main scheduler bug where bf_hetjob_prio truncates SchedulerParameters.
  * Fix sacct not displaying UserCPU, SystemCPU and TotalCPU for large times.
  * scrontab - fix to return the correct index for a bad #SCRON option.
  * scrontab - fix memory leak when invalid option found in #SCRON line.
  * Add errno for when a user requests multiple partitions and they are using
  partition based associations.
  * Fix issue where a job could run in a wrong partition when using
  EnforcePartLimits=any and partition based associations.
  * Remove possible deadlock when adding associations/wckeys in multiple
  threads.
  * When using PrologFlags=alloc make sure the correct Slurm version is set
  in the credential.
  * When sending a job a warning signal make sure we always send SIGCONT
  beforehand.
  * Fix issue where a batch job would continue running if a prolog failed on a
  node that wasn't the batch host and requeuing was disabled.
  * Fix issue where sometimes salloc/srun wouldn't get a message about a prolog
  failure in the job's stdout.
  * Requeue or kill job on a prolog failure when PrologFlags is not set.
  * Fix race condition causing node reboots to get requeued before
  ResumeTimeout expires.
  * Preserve node boot_req_time on reconfigure.
  * Preserve node power_save_req_time on reconfigure.
  * Fix node reboots being queued and issued multiple times and preventing the
  reboot to time out.
  * Fix run_command to exit correctly if track_script kills the calling thread.
  * Only requeue a job when the PrologSlurmctld returns nonzero.
  * When a job is signaled with SIGKILL make sure we flush all
  prologs/setup scripts.
  * Handle burst buffer scripts if the job is canceled while stage_in is
  happening.
  * When shutting down the slurmctld make note to ignore error message when
  we have to kill a prolog/setup script we are tracking.
  * scrontab - add support for the --open-mode option.
  * acct_gather_profile/influxdb - avoid segfault on plugin shutdown if setup
  has not completed successfully.
  * Reduce delay in starting salloc allocations when running with prologs.
  * Alter AllocNodes check to work if the allocating node's domain doesn't
  match the slurmctld's. This restores the pre*20.11 behavior.
  * Fix slurmctld segfault if jobs from a prior version had the now-removed
  INVALID_DEPEND state flag set and were allowed to run in 20.11.
  * Add job_container/tmpfs plugin to give a method to provide a private /tmp
  per job.
  * Set the correct core affinity when using AutoDetect.
  * slurmrestd - mark "environment" as required for job submissions in schema.</changelog>
  <changelog author="eich@suse.com" date="1620043200">- Ship REST API version and auth plugins with slurmrestd.
- Add YAML support for REST API to build (bsc#1185603).</changelog>
  <changelog author="cgoll@suse.com" date="1620993600">- Updated to 20.11.7 which fixes CVE-2021-31215 (bsc#1186024)
- New features in 20.11.7:
  * slurmd - handle configless failures gracefully instead of hanging
  indefinitely.
  * select/cons_tres - fix Dragonfly topology not selecting nodes in the same
  leaf switch when it should as well as requests with *-switches option.
  * Fix issue where certain step requests wouldn't run if the first node in the
  job allocation was full and there were idle resources on other nodes in
  the job allocation.
  * Fix deadlock issue with &lt;Prolog|Epilog&gt;Slurmctld.
  * torque/qstat - fix printf error message in output.
  * When adding associations or wckeys avoid checking multiple times a user or
  cluster name.
  * Fix wrong jobacctgather information on a step on multiple nodes
  due to timeouts sending its the information gathered on its node.
  * Fix missing xstrdup which could result in slurmctld segfault on array jobs.
  * Fix security issue in PrologSlurmctld and EpilogSlurmctld by always
  prepending SPANK_ to all user-set environment variables. CVE-2021-31215.
- New features in 20.11.6:
  * Fix sacct assert with the --qos option.
  * Use pkg-config --atleast-version instead of --modversion for systemd.
  * common/fd - fix getsockopt() call in fd_get_socket_error().
  * Properly handle the return from fd_get_socket_error() in _conn_readable().
  * cons_res - Fix issue where running jobs were not taken into consideration
  when creating a reservation.
  * Avoid a deadlock between job_list for_each and assoc QOS_LOCK.
  * Fix TRESRunMins usage for partition qos on restart/reconfig.
  * Fix printing of number of tasks on a completed job that didn't request
  tasks.
  * Fix updating GrpTRESRunMins when decrementing job time is bigger than it.
  * Make it so we handle multithreaded allocations correctly when doing
  - -exclusive or --core-spec allocations.
  * Fix incorrect round-up division in _pick_step_cores
  * Use appropriate math to adjust cpu counts when --ntasks-per-core=1.
  * cons_tres - Fix consideration of power downed nodes.
  * cons_tres - Fix DefCpuPerGPU, increase cpus-per-task to match with
  gpus-per-task * cpus-per-gpu.
  * Fix under-cpu memory auto-adjustment when MaxMemPerCPU is set.
  * Make it possible to override CR_CORE_DEFAULT_DIST_BLOCK.
  * Perl API - fix retrieving/storing of slurm_step_id_t in job_step_info_t.
  * Recover state of burst buffers when slurmctld is restarted to avoid skipping
  burst buffer stages.
  * Fix race condition in burst buffer plugin which caused a burst buffer
  in stage-in to not get state saved if slurmctld stopped.
  * auth/jwt - print an error if jwt_file= has not been set in slurmdbd.
  * Fix RESV_DEL_HOLD not being a valid state when using squeue --states.
  * Add missing squeue selectable states in valid states error message.
  * Fix scheduling last array task multiple times on error, causing segfault.
  * Fix issue where a step could be allocated more memory than the job when
  dealing with --mem-per-cpu and --threads-per-core.
  * Fix removing qos from assoc with -= can lead to assoc with no qos
  * auth/jwt - fix segfault on invalid credential in slurmdbd due to
  missing validate_slurm_user() function in context.
  * Fix single Port= not being applied to range of nodes in slurm.conf
  * Fix Jobs not requesting a tres are not starting because of that tres limit.
  * acct_gather_energy/rapl - fix AveWatts calculation.
  * job_container/tmpfs - Fix issues with cleanup and slurmd restarting on
  running jobs.</changelog>
  <changelog author="eich@suse.com" date="1651838400">- Add 'CommunicationParameters=block_null_hash' to slurm.conf, please
  add this parameter to existing configurations as part of CVE-2022-29500:
  This new option provides additional protection against a potential exploit.
- Update to 20.11.9:
  * burst_buffer - add missing common directory to the Makefile SUBDIRS.
  * sacct - fix truncation when printing jobidraw field.
  * GRES - Fix loading state of jobs using --gpus to request gpus.
  * Fix minor logic error in health check node state output
  * Fix GCC 11.1 compiler warnings.
  * Delay steps when memory already used instead of rejecting step request.
  * Fix memory leak in the slurmdbd when requesting wckeys from all clusters.
  * Fix determining if a reservation is used or not.
  * openapi/v0.0.35 - Honor kill_on_invalid_dependency as job parameter.
  * openapi/v0.0.36 - Honor kill_on_invalid_dependency as job parameter.
  * Fix various issues dealing with updates on magnetic reservations that could
    lead to abort slurmctld.
  * openapi/v0.0.36 - Avoid setting default values of min_cpus, job name, cwd,
    mail_type, and contiguous on job update.
  * openapi/v0.0.36 - Clear user hold on job update if hold=false.
  * Fix slurmctld segfault due to a bit_test() call with a MAINT+ANY_NODES
    reservation NULL node_bitmap.
  * Fix slurmctld segfault due to a bit_copy() call with a REPLACE+ANY_NODES
    reservation NULL node_bitmap.
  * Fix error in GPU frequency validation logic.
  * Fix error in pmix logic dealing with the incorrect size of buffer.
  * PMIx v1.1.4 and below are no longer supported.
  * Fix shutdown of slurmdbd plugin to correctly notice when the agent thread
    finishes.
  * Fix slurmctld segfault due to job array  --batch features double free.
  * CVE-2022-29500 - Prevent credential abuse (bsc#1199278).
  * CVE-2022-29501 - Prevent abuse of REQUEST_FORWARD_DATA (bsc#1199279).
- Update to 20.11.8:
  * slurmctld - fix erroneous "StepId=CORRUPT" messages in error logs.
  * Correct the error given when auth plugin fails to pack a credential.
  * Fix unused-variable compiler warning on FreeBSD in fd_resolve_path().
  * acct_gather_filesystem/lustre - only emit collection error once per step.
  * srun - leave SLURM_DIST_UNKNOWN as default for  --interactive.
  * Add GRES environment variables (e.g., CUDA_VISIBLE_DEVICES) into the
    interactive step, the same as is done for the batch step.
  * Fix various potential deadlocks when altering objects in the database
    dealing with every cluster in the database.
  * slurmrestd - handle slurmdbd connection failures without segfaulting.
  * slurmrestd - fix segfault for searches in slurmdb/v0.0.36/jobs.
  * slurmrestd - remove (non-functioning) users query parameter for
    slurmdb/v0.0.36/jobs from openapi.json
  * slurmrestd - fix segfault in slurmrestd db/jobs with numeric queries
  * slurmrestd - add argv handling for job/submit endpoint.
  * srun - fix broken node step allocation in a heterogeneous allocation.
  * Fail step creation if -n is not multiple of  --ntasks-per-gpu.
  * job_container/tmpfs - Fix slowdown on teardown.
  * Fix problem with SlurmctldProlog where requeued jobs would never launch.
  * job_container/tmpfs - Fix issue when restarting slurmd where the namespace
    mount points could disappear.
  * sacct - avoid truncating JobId at 34 characters.
  * scancel - fix segfault when --wckey filtering option is used.
  * select/cons_tres - Fix memory leak.
  * Prevent file descriptor leak in job_container/tmpfs on slurmd restart.
  * slurmrestd/dbv0.0.36 - Fix values dumped in job state/current and
    job step state.
  * slurmrestd/dbv0.0.36 - Correct description for previous state property.
  * perlapi/libslurmdb - expose tres_req_str to job hash.
  * scrontab - close and reopen temporary crontab file to deal with editors
    that do not change the original file, but instead write out then rename
    a new file.
  * sstat - fix linking so that it will work when --without-shared-libslurm
    was used to build Slurm.
  * Clear allocated cpus for running steps in a job before handling requested
    nodes on new step.
  * Don't reject a step if not enough nodes are available. Instead, defer the
    step until enough nodes are available to satisfy the request.
  * Don't reject a step if it requests at least one specific node that is
    already allocated to another step. Instead, defer the step until the
    requested node(s) become available.
  * slurmrestd - add description for slurmdb/job endpoint.
  * Better handling of --mem=0.
  * Ignore DefCpuPerGpu when --cpus-per-task given.
  * sacct - fix segfault when printing StepId (or when using --long).</changelog>
</package>
<package pkgid="dfd26e85218bf3b8dc4795bff2eba4eca25c8ff921fc87936147fd25b1728eaa" name="pgadmin4" arch="aarch64">
  <version epoch="0" ver="4.30" rel="150300.3.3.1"/>
  <changelog author="alarrosa@suse.com" date="1589371200">- Update to 4.21
  - New features
  * Added search object functionality.
  * Added LDAP authentication support.
  * Added support for parameter toast_tuple_target and parallel_workers
    of the table.
  * Added support of Packages, Sequences and Synonyms to the
    Schema Diff.
  * Added an option to prevent a browser tab being opened at startup.
  - Bug fixes
  * Ensure that the start and end date should be deleted when clear
    the selection for pgAgent Job.
  * Fixed calendar opening issue on the exception tab inside the
    schedules tab of pgAgent.
  * Fixed an issue where the autovacuum_enabled parameter is added
    automatically in the RE-SQL when the table has been created
    using the WITH clause.
  * Fixed generated SQL when any token in FTS Configuration or any
    option in FTS Dictionary is changed.
  * Fixed tab key navigation issue for parameters in table dialog.
  * Ensure that switch cell is in sync with switch control for
    accessibility.
  * Fixed compilation warnings while building pgAdmin.
- Update to 4.20
  - New features
  * Added support of Collation, FTS Configuration, FTS Dictionary,
    FTS Parser and FTS Template to the Schema Diff.
  * Added support of Domain, Domain Constraints and Types to the
    Schema Diff.
  - Housekeeping
  * Enhance the color of switch control for both light and dark theme.
  * Added and fixed gettext usage for better translation coverage.
  - Bug fixes
  * Fix an issue where the user can not change the value of DateTime
    picker control using keyboard.
  * Fixed some accessibility issues in the dialogs.
  * Fixed chrome driver download utility issue for Ubuntu.
  * Change some colors and opacity to comply with WCAG color
    contrast standards.
  * Fix an accessibility issue to maximize the panel for all
    alertify dialog.
  * Improve logic to get the DDL statements as a part of the
    comparison.
  * Fixed tab key navigation issue for Grant Wizard.
  * Fixed Unicode character issue causing error on Python2 environment.
  * Fixed focus color issue for Alertify dialog buttons.</changelog>
  <changelog author="alarrosa@suse.com" date="1589457600">- Decrease requirements to build in SLE/Leap:
  * Werkzeug from 0.15.0 to 0.14.1
  * passlib from 1.7.2 to 1.7.1
  * psycopg from 2.8 to 2.7.4
  * python-dateutil from 2.8.0 to 2.7.3
  * simplejson from 3.16.0 to 3.13.2
  * pytz from 2018.9 to 2018.3
  pgadmin has this tendency to just follow the latest versions
  instead of properly specify required versions.</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1592222400">- Update to 4.22
  - New features
  * Added connected pgAdmin user and connection name in the log file.
  * Show the startup log as well as the server log in the runtime's log
    viewer.
  - Bugfixes
  * Gracefully informed the user that the database is already connected when
  they click on "Connect Database...".
  * Fixed an issue where clicking on the cross button of the alert box on
  the login page is not working.
  * Fixed the SQL help issue for EDB Postgres Advanced Server.
  * Ensure that maintenance job should be worked properly for indexes under
  a materialized view.
  * Ensure that file browse "home" button should point to $HOME rather than /.
  * Ensure that 'With OID' option should be disabled while taking backup of
  database server version 12 and above.
  * Fixed invalid literal issue when removing the connection limit for the
  existing role.
  * Fixed internal server error when clicking on Triggers -&gt; 'Enable All'
  for partitions.
  * Fixed generated SQL issue for auto vacuum options.
  * Ensure that the dependencies tab shows correct information for Synonyms.
  * Fixed an issue where the newly added table is not alphabetically added
  to the tree.
  * Fixed list sorting issue in the schema diff tool.
  * Fixed an issue while comparing the two identical schemas using the
  schema diff tool.
  * Fixed an issue when renaming the column not added in the proper order.
  * Correct ipv4 "all interfaces" address in the container docs, per Frank
  Limpert.
  * Fixed an issue where select2 hover is inconsistent for the SSL field in
  create server dialog.
  * Fixed post-login redirect location when running in server mode under a
  non-default root.
  * Fixed an issue where the background job creation fails if there is only
  a version-specific python binary available in PATH.
  * Fixed data truncation issue when updating the data of type character
    with length.
  * Fixed an issue where if LDAP_SEARCH_BASE_DN is not set then, the value
    for LDAP_BASE_DN will be considered.
  * Fixed an issue where clicking on Select All button, not selecting all
    the options in pgAgent job scheduler.
  * Clarify and correct the docs on enabling the pl/debugger plugin on the
    server.
  * Fixed Unicode decode error 'utf-8' codec can't decode byte.
- Packaging:
  * refresh fix-python-lib.patch
  * add keyring e8697e2eef76c02d3a6332778881b2a8210976f2 enabling
    GPG source tarballs verification</changelog>
  <changelog author="mrueckert@suse.de" date="1594728000">- Update to 4.23
  - New features
  - Issue #5468 - Added option to ignore the whitespaces while
    comparing objects in schema diff.
  - Issue #5500 - Added server group name while selecting servers
    in schema diff.
  - Issue #5516 - Added support of Row Security Policies.
  - Issue #5576 - Improve error messaging if the storage and log
    directories cannot be created.
  - Housekeeping
  - Issue #5325 - Improve code coverage and API test cases for
    Collations.
  - Issue #5574 - Cleanup Windows build scripts and ensure
    Windows x64 builds will work.
  - Issue #5581 - Documentation of Row Level Security Policies.
  - Bug fixes
  - Issue #3591 - Ensure that the query tool should display the
    proper error message while terminating the active session.
  - Issue #3669 - Ensure that proper error should be displayed
    for the deleted node.
  - Issue #3787 - Disabled the Stop process button after clicking
    it and added a message ?Terminating the process?? to notify
    the user.
  - Issue #4226 - Fixed an issue where select all checkbox only
    selects the first 50 tables.
  - Issue #5416 - Ensure that the query tool panel gets closed
    when clicking on the ?Don?t Save? button.
  - Issue #5465 - Fixed an issue where the Edge browser version
    is showing wrong and warning message gets displayed.
  - Issue #5492 - Fixed an issue where the search object is
    unable to locate inherited tables and constraint filters are
    not working.
  - Issue #5507 - Fixed connection and version number detection
    issue when the database server is upgraded.
  - Issue #5521 - Fixed an issue when dumping servers from a
    desktop pgAdmin app by providing an option ??sqlite-path?.
  - Issue #5539 - Fixed typo in exception keyword.
  - Issue #5584 - Fixed an issue where two identical tables
    showing different by schema diff tool.
  - Issue #5592 - Ensure that pgadmin should be able to connect
    to the server which has password more than 1000 characters.</changelog>
  <changelog author="mrueckert@suse.de" date="1596542400">- Update to 4.24
  - New features
  - Issue #5235 - Support configuration files that are external
    to the application installation.
  - Issue #5484 - Added support for LDAP authentication with
    different DN by setting the dedicated user for the LDAP
    connection.
  - Issue #5583 - Added support for schema level restriction.
  - Issue #5601 - Added RLS Policy support in Schema Diff.
  - Issue #5622 - Added support for permissive/restricted policy
    type while creating RLS Policy.
  - Issue #5650 - Added support for LDAP anonymous binding.
  - Issue #5653 - Added High Contrast theme support.
  - Housekeeping
  - Issue #5323 - Improve code coverage and API test cases for
    Foreign Data Wrapper.
  - Issue #5326 - Improve code coverage and API test cases for
    Domain and Domain Constraints.
  - Issue #5329 - Improve code coverage and API test cases for
    FTS Configuration, FTS Parser, FTS Dictionaries, and FTS
    Template.
  - Bug fixes
  - Issue #3814 - Fixed issue of error message not getting
    displayed when filename is empty for backup, restore, and
    import/export.
  - Issue #3851 - Add proper indentation to the code while
    generating functions, procedures, and trigger functions.
  - Issue #4235 - Fixed tab indent issue on a selection of lines
    is deleting the content when ?use spaces == true? in the
    preferences.
  - Issue #5137 - Fixed save button enable issue when focusing in
    and out of numeric input field.
  - Issue #5287 - Fixed dark theme-related CSS and modify the
    color codes.
  - Issue #5414 - Use QStandardPaths::AppLocalDataLocation in the
    runtime to determine where to store runtime logs.
  - Issue #5463 - Fixed an issue where CSV download quotes
    numeric columns.
  - Issue #5470 - Fixed backgrid row hover issue where on hover
    background color is set for edit and delete cell only.
  - Issue #5530 - Ensure that the referenced table should be
    displayed on foreign key constraints.
  - Issue #5554 - Replace the runtime themes with ones that don?t
    have sizing issues.
  - Issue #5569 - Fixed reverse engineered SQL for partitions
    when storage parameters are specified.
  - Issue #5577 - Include LICENSE and DEPENDENCIES [inventory]
    files in official packages.
  - Issue #5621 - Remove extra brackets from reverse engineering
    SQL of RLS Policy.
  - Issue #5629 - Fixed an issue where the user is able to edit
    properties when some of the collection nodes are selected.
  - Issue #5630 - Fixed an issue where installation of pgadmin4
    not working on 32-bit Windows.
  - Issue #5631 - Fixed ?cant execute empty query? issue when
    remove the value of ?USING? or ?WITH CHECK? option of RLS
    Policy.
  - Issue #5633 - Ensure that create RLS Policy menu should not
    be visible for catalog objects.
  - Issue #5647 - Fixed an issue where difference DDL is showing
    the wrong SQL when changing the policy owner.
  - Issue #5662 - Fixed accessibility issue where few dialogs are
    not rendering properly when we zoomed in browser window 200%
    and screen resolution is low.
  - Issue #5666 - Added missing dependencies/dependent and
    corrected some wrongly identified.
  - Issue #5673 - Fixed an issue where fetching the schema throws
    an error if the database is not connected in Schema Diff.
  - Issue #5675 - Fixed CSRF errors when pgAdmin opened in an
    iframe on safari browser.
  - Issue #5677 - Fixed text color issue in explain analyze for
    the Dark theme.
  - Issue #5686 - Fixed issue where the user was not able to
    update policy if the policy is created with space.
- update requires to match requirements.txt</changelog>
  <changelog author="info@paolostivanin.com" date="1599480000">- Update to 4.25:
  - Modified schema diff tool to compare two databases instead of
    two schemas
  - Resolve schema diff dependencies by selecting the appropriate
    node automatically and maintain the order in the
    generated script.
  - Replace charting library Flotr2 with ChartJS using React.
  - Upgrade font-awesome from v4 to v5.
  - Fixed an issue where debugger doesn't work if the search path
    is set other than 'public'.
  - Fixed ssh tunnel hang issue when the user tries to disconnect
    the server.
  - Fixed an issue where conversion of bytea to the binary string
    results in an error.
  - Fixed an issue where the entire logs are in red text when the
    user runs backup and restore.
  - Ensure that the user will be able to modify the start value
    of the Identity column.
  - Fixed an issue where 'ALTER VIEW' statement is missing when
    the user sets the default value of a column for View.</changelog>
  <changelog author="asn@cryptomilk.org" date="1599739200">- Only activate the pgadmin4 apache config if the PGADMIN4 flag is set.
  For mod_wsgi you should use `a2enmod wsgi`
- Create /etc/pgadmin/config_system.py with server mode for web
  Run /usr/lib/python3.6/site-packages/pgadmin4-web/setup.py to create
  the admin user
- Remove config_local.py with outdated options</changelog>
  <changelog author="asn@cryptomilk.org" date="1599825600">- Create a pgadmin user and group
- Add uwsgi configuration (fast, user privileges and apparmor support)</changelog>
  <changelog author="mrueckert@suse.de" date="1600603200">- Update to 4.26:
  - Added SQL Formatter support in Query Tool.
  - Added a new button to the query tool toolbar to open a new
    query tool window.
  - Added shared server support for admin users.
  - Warn the user when connecting to a server that is older than
    pgAdmin supports.
  - Ensure that schema names starting with 'pg' should be visible
    in browser tree when standard_conforming_strings is set to off.
  - Fixed an issue where --load-server does not allow loading
    connections that use pg_services.
  - Fixed string indices must be integers issue for PostgreSQL &lt;
    9.3.
  - Fixed an issue where the application ignores the fixed port
    configuration value.
  - Remove illegal argument from trigger function in trigger DDL
    statement.
  - Ensure that 'setup-web.sh' should work in Debian 10.
  - Fixed excessive CPU usage by stopping the indefinite growth of
    the graph dataset.</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Specify path for pg_dump and pg_restore
- Disable update check (if you're on leap or other you wont be able
  to upgrade to a newer version anyway)</changelog>
  <changelog author="ecsos@opensuse.org" date="1602936000">- Update to 4.27:
  - Added Macro support.
  - Added support to view trigger function under the respective
    trigger node.
  - Allow user to change the database connection from an open query
    tool tab.
  - Added support to ignore the owner while comparing objects in
    the Schema Diff tool.
  - Merged the latest code of 'pgcli' used for the autocomplete
    feature.
  - Fixed invalid literal issue when fetching dependencies for
    Materialized View.
  - Fixed an issue where schema diff is showing identical table as
    different due to default vacuum settings.
  - Ensure that the user should be able to change the start value
    of the existing sequence.
  - Fixed an issue where the query tool is not fetching more than
    1000 rows for the table does not have any primary key.
  - Fixed an issue where 'Rows X' column values were not visible
    properly for Explain Analyze in Dark theme.
  - Fixed an issue where file extension is stripped on renaming a
    file.</changelog>
  <changelog author="mrueckert@suse.de" date="1605700800">- Update to 4.28:
  - Added support to download utility files at the client-side.
  - Added support to rename query tool and debugger tabs title.
  - Added support for dynamic tab size.
  - Added tab title placeholder for Query Tool, View/Edit Data, and
    Debugger.
  - Added support to compare schemas and databases in schema diff.
  - Ensure that non-superuser should be able to debug the function.
  - Ensure that query history should be listed by date/time in
    descending order.
  - Ensure that Grant Wizard should include foreign tables.
  - Ensure that search object functionality works with case
    insensitive string.</changelog>
  <changelog author="ecsos@opensuse.org" date="1607688000">- Update to 4.29:
  - Ensure that folder rename should work properly in Storage
    Manager
  - Fixed an issue where the debugger's custom tab title not
    applied when opened in the new browser tab
  - Fixed an issue where dynamic tab title has not applied the
    first time for debugger panel
  - Fixed an issue where schema diff doesn't show the result of
    compare if source schema has tables with RLS
  - Fixed an issue where the process watcher dialog throws an error
    for the database server which is already removed
  - Ensure that code coverage should cover class and function
    declarations
  - Ensure that dirty indicator (*) should not be visible when
    renaming the tabs
  - Fixed an issue where shared servers import is failing
  - Improve code coverage and API test cases for Foreign Tables,
    Debugger, Views and Materialized Views
- Fix some requirement versions.</changelog>
  <changelog author="asn@cryptomilk.org" date="1607688001">- Add BuildRequires for python modules</changelog>
  <changelog author="alarrosa@suse.com" date="1611748800">- Add BuildRequires for python-cryptography and replace dependency for
  python-Flask-Babel with python-Flask-BabelEx</changelog>
  <changelog author="alarrosa@suse.com" date="1611748801">- Fix the desktop application by removing the overriding of
  SERVER_MODE in config_system.py and config_distro.py which were
  forcing SERVER_MODE to always have a specific value instead
  of letting the runtime choose so there's no need to force it.
- Rename pgadmin4.conf to pgadmin4.conf.in,
  pgadmin4.uwsgi to pgadmin4.uwsgi.in and
  README.SUSE.uwsgi to README.SUSE.uwsgi.in and make them also
  replace PYTHONSITELIB  with the python version used at build time
- Replace all variables from config files in %prep instead of
  %install
- Include README.SUSE.uwsgi in the web-uwsgi subpackage</changelog>
  <changelog author="mrueckert@suse.de" date="1612008000">- Update to 4.30
  - Features:
  - ERD Tool (Beta): The Entity-Relationship Diagram (ERD) tool
    is a database design tool that provides a graphical
    representation of database tables, columns, and
    inter-relationships. You can use the ERD tool to design a new
    schema and generate the SQL required to create it, or to
    reverse engineer and diagram an existing database schema.
  - Kerberos support is added in pgAdmin 4 using SPNEGO for
    logging into pgAdmin, similar to the existing LDAP and
    "internal" options. Note that support for logging into
    database servers using Kerberos is not included in this
    release, but will be added in a future version.
  - Add a container option (PGADMIN_DISABLE_POSTFIX) to disable
    the Postfix server: Postfix (like other MTAs) must start as
    user 'root', and the pgAdmin container achieves this using
    'sudo'. Whilst that works well in most environments, it can
    cause problems in some. This option allows you to completely
    disable Postfix to avoid these issues, though you will need
    to configure an external mail server to be used to send
    password reset emails.
  - Bugs/Housekeeping:
  - Improve the explain plan details by showing a popup instead
    of a tooltip when clicking on plan nodes.
  - Ensure that verbose logs are visible for Utility (Backup,
    Maintenance etc.) jobs.
  - Added support for expressions in exclusion constraints.
  - Ensure that the 'template1' database is not visible after
    pg_upgrade.
  - Added appropriate help message and a placeholder for letting
    users know about the account password expiry for Login/Group
    Role.
  - Updated Flask-BabelEx to the latest version.
  - Fixed extra parentheses issue around joins for Views.
  - Ensure that the current value of sequences is ignored while
    comparing using Schema Diff.
  - Fixed an issue when the user tries to delete multiple records
    in the data grid.
  - Fixed TypeError exception in schema diff when selecting two
    identical objects.
  - Include PostgreSQL 13 utilities in the container
    distribution.
  https://www.pgadmin.org/docs/pgadmin4/4.30/release_notes_4_30.html</changelog>
  <changelog author="mrueckert@suse.de" date="1612180800">- the system wide service does not need to run as root. switch to
  user/group pgadmin</changelog>
  <changelog author="alarrosa@suse.com" date="1612267200">- Fix typos (chmod being used instead of chown in %postun web and
  pgadmin4 used in the service file for User/Group keys instead of
  pgadmin)</changelog>
  <changelog author="alarrosa@suse.com" date="1649419200">- Add patch from upstream to fix an issue throwing an error in
  when uploading a CSV Desktop mode:
  * 0001-Fixed-an-issue-when-uploading-a-CSV.patch
- Add patch from upstream to fix an unrestricted file upload in
  pgAdmin (boo#1197143, CVE-2022-0959):
  * 0002-Ensure-that-upload-paths-are-children-of-the-storage-directory.patch</changelog>
</package>
<package pkgid="2d0bacd4d47f3d0d99c7f670cdd52e1de070551d02cecb086cb6b58520a8b61d" name="pgadmin4" arch="ppc64le">
  <version epoch="0" ver="4.30" rel="150300.3.3.1"/>
  <changelog author="alarrosa@suse.com" date="1589371200">- Update to 4.21
  - New features
  * Added search object functionality.
  * Added LDAP authentication support.
  * Added support for parameter toast_tuple_target and parallel_workers
    of the table.
  * Added support of Packages, Sequences and Synonyms to the
    Schema Diff.
  * Added an option to prevent a browser tab being opened at startup.
  - Bug fixes
  * Ensure that the start and end date should be deleted when clear
    the selection for pgAgent Job.
  * Fixed calendar opening issue on the exception tab inside the
    schedules tab of pgAgent.
  * Fixed an issue where the autovacuum_enabled parameter is added
    automatically in the RE-SQL when the table has been created
    using the WITH clause.
  * Fixed generated SQL when any token in FTS Configuration or any
    option in FTS Dictionary is changed.
  * Fixed tab key navigation issue for parameters in table dialog.
  * Ensure that switch cell is in sync with switch control for
    accessibility.
  * Fixed compilation warnings while building pgAdmin.
- Update to 4.20
  - New features
  * Added support of Collation, FTS Configuration, FTS Dictionary,
    FTS Parser and FTS Template to the Schema Diff.
  * Added support of Domain, Domain Constraints and Types to the
    Schema Diff.
  - Housekeeping
  * Enhance the color of switch control for both light and dark theme.
  * Added and fixed gettext usage for better translation coverage.
  - Bug fixes
  * Fix an issue where the user can not change the value of DateTime
    picker control using keyboard.
  * Fixed some accessibility issues in the dialogs.
  * Fixed chrome driver download utility issue for Ubuntu.
  * Change some colors and opacity to comply with WCAG color
    contrast standards.
  * Fix an accessibility issue to maximize the panel for all
    alertify dialog.
  * Improve logic to get the DDL statements as a part of the
    comparison.
  * Fixed tab key navigation issue for Grant Wizard.
  * Fixed Unicode character issue causing error on Python2 environment.
  * Fixed focus color issue for Alertify dialog buttons.</changelog>
  <changelog author="alarrosa@suse.com" date="1589457600">- Decrease requirements to build in SLE/Leap:
  * Werkzeug from 0.15.0 to 0.14.1
  * passlib from 1.7.2 to 1.7.1
  * psycopg from 2.8 to 2.7.4
  * python-dateutil from 2.8.0 to 2.7.3
  * simplejson from 3.16.0 to 3.13.2
  * pytz from 2018.9 to 2018.3
  pgadmin has this tendency to just follow the latest versions
  instead of properly specify required versions.</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1592222400">- Update to 4.22
  - New features
  * Added connected pgAdmin user and connection name in the log file.
  * Show the startup log as well as the server log in the runtime's log
    viewer.
  - Bugfixes
  * Gracefully informed the user that the database is already connected when
  they click on "Connect Database...".
  * Fixed an issue where clicking on the cross button of the alert box on
  the login page is not working.
  * Fixed the SQL help issue for EDB Postgres Advanced Server.
  * Ensure that maintenance job should be worked properly for indexes under
  a materialized view.
  * Ensure that file browse "home" button should point to $HOME rather than /.
  * Ensure that 'With OID' option should be disabled while taking backup of
  database server version 12 and above.
  * Fixed invalid literal issue when removing the connection limit for the
  existing role.
  * Fixed internal server error when clicking on Triggers -&gt; 'Enable All'
  for partitions.
  * Fixed generated SQL issue for auto vacuum options.
  * Ensure that the dependencies tab shows correct information for Synonyms.
  * Fixed an issue where the newly added table is not alphabetically added
  to the tree.
  * Fixed list sorting issue in the schema diff tool.
  * Fixed an issue while comparing the two identical schemas using the
  schema diff tool.
  * Fixed an issue when renaming the column not added in the proper order.
  * Correct ipv4 "all interfaces" address in the container docs, per Frank
  Limpert.
  * Fixed an issue where select2 hover is inconsistent for the SSL field in
  create server dialog.
  * Fixed post-login redirect location when running in server mode under a
  non-default root.
  * Fixed an issue where the background job creation fails if there is only
  a version-specific python binary available in PATH.
  * Fixed data truncation issue when updating the data of type character
    with length.
  * Fixed an issue where if LDAP_SEARCH_BASE_DN is not set then, the value
    for LDAP_BASE_DN will be considered.
  * Fixed an issue where clicking on Select All button, not selecting all
    the options in pgAgent job scheduler.
  * Clarify and correct the docs on enabling the pl/debugger plugin on the
    server.
  * Fixed Unicode decode error 'utf-8' codec can't decode byte.
- Packaging:
  * refresh fix-python-lib.patch
  * add keyring e8697e2eef76c02d3a6332778881b2a8210976f2 enabling
    GPG source tarballs verification</changelog>
  <changelog author="mrueckert@suse.de" date="1594728000">- Update to 4.23
  - New features
  - Issue #5468 - Added option to ignore the whitespaces while
    comparing objects in schema diff.
  - Issue #5500 - Added server group name while selecting servers
    in schema diff.
  - Issue #5516 - Added support of Row Security Policies.
  - Issue #5576 - Improve error messaging if the storage and log
    directories cannot be created.
  - Housekeeping
  - Issue #5325 - Improve code coverage and API test cases for
    Collations.
  - Issue #5574 - Cleanup Windows build scripts and ensure
    Windows x64 builds will work.
  - Issue #5581 - Documentation of Row Level Security Policies.
  - Bug fixes
  - Issue #3591 - Ensure that the query tool should display the
    proper error message while terminating the active session.
  - Issue #3669 - Ensure that proper error should be displayed
    for the deleted node.
  - Issue #3787 - Disabled the Stop process button after clicking
    it and added a message ?Terminating the process?? to notify
    the user.
  - Issue #4226 - Fixed an issue where select all checkbox only
    selects the first 50 tables.
  - Issue #5416 - Ensure that the query tool panel gets closed
    when clicking on the ?Don?t Save? button.
  - Issue #5465 - Fixed an issue where the Edge browser version
    is showing wrong and warning message gets displayed.
  - Issue #5492 - Fixed an issue where the search object is
    unable to locate inherited tables and constraint filters are
    not working.
  - Issue #5507 - Fixed connection and version number detection
    issue when the database server is upgraded.
  - Issue #5521 - Fixed an issue when dumping servers from a
    desktop pgAdmin app by providing an option ??sqlite-path?.
  - Issue #5539 - Fixed typo in exception keyword.
  - Issue #5584 - Fixed an issue where two identical tables
    showing different by schema diff tool.
  - Issue #5592 - Ensure that pgadmin should be able to connect
    to the server which has password more than 1000 characters.</changelog>
  <changelog author="mrueckert@suse.de" date="1596542400">- Update to 4.24
  - New features
  - Issue #5235 - Support configuration files that are external
    to the application installation.
  - Issue #5484 - Added support for LDAP authentication with
    different DN by setting the dedicated user for the LDAP
    connection.
  - Issue #5583 - Added support for schema level restriction.
  - Issue #5601 - Added RLS Policy support in Schema Diff.
  - Issue #5622 - Added support for permissive/restricted policy
    type while creating RLS Policy.
  - Issue #5650 - Added support for LDAP anonymous binding.
  - Issue #5653 - Added High Contrast theme support.
  - Housekeeping
  - Issue #5323 - Improve code coverage and API test cases for
    Foreign Data Wrapper.
  - Issue #5326 - Improve code coverage and API test cases for
    Domain and Domain Constraints.
  - Issue #5329 - Improve code coverage and API test cases for
    FTS Configuration, FTS Parser, FTS Dictionaries, and FTS
    Template.
  - Bug fixes
  - Issue #3814 - Fixed issue of error message not getting
    displayed when filename is empty for backup, restore, and
    import/export.
  - Issue #3851 - Add proper indentation to the code while
    generating functions, procedures, and trigger functions.
  - Issue #4235 - Fixed tab indent issue on a selection of lines
    is deleting the content when ?use spaces == true? in the
    preferences.
  - Issue #5137 - Fixed save button enable issue when focusing in
    and out of numeric input field.
  - Issue #5287 - Fixed dark theme-related CSS and modify the
    color codes.
  - Issue #5414 - Use QStandardPaths::AppLocalDataLocation in the
    runtime to determine where to store runtime logs.
  - Issue #5463 - Fixed an issue where CSV download quotes
    numeric columns.
  - Issue #5470 - Fixed backgrid row hover issue where on hover
    background color is set for edit and delete cell only.
  - Issue #5530 - Ensure that the referenced table should be
    displayed on foreign key constraints.
  - Issue #5554 - Replace the runtime themes with ones that don?t
    have sizing issues.
  - Issue #5569 - Fixed reverse engineered SQL for partitions
    when storage parameters are specified.
  - Issue #5577 - Include LICENSE and DEPENDENCIES [inventory]
    files in official packages.
  - Issue #5621 - Remove extra brackets from reverse engineering
    SQL of RLS Policy.
  - Issue #5629 - Fixed an issue where the user is able to edit
    properties when some of the collection nodes are selected.
  - Issue #5630 - Fixed an issue where installation of pgadmin4
    not working on 32-bit Windows.
  - Issue #5631 - Fixed ?cant execute empty query? issue when
    remove the value of ?USING? or ?WITH CHECK? option of RLS
    Policy.
  - Issue #5633 - Ensure that create RLS Policy menu should not
    be visible for catalog objects.
  - Issue #5647 - Fixed an issue where difference DDL is showing
    the wrong SQL when changing the policy owner.
  - Issue #5662 - Fixed accessibility issue where few dialogs are
    not rendering properly when we zoomed in browser window 200%
    and screen resolution is low.
  - Issue #5666 - Added missing dependencies/dependent and
    corrected some wrongly identified.
  - Issue #5673 - Fixed an issue where fetching the schema throws
    an error if the database is not connected in Schema Diff.
  - Issue #5675 - Fixed CSRF errors when pgAdmin opened in an
    iframe on safari browser.
  - Issue #5677 - Fixed text color issue in explain analyze for
    the Dark theme.
  - Issue #5686 - Fixed issue where the user was not able to
    update policy if the policy is created with space.
- update requires to match requirements.txt</changelog>
  <changelog author="info@paolostivanin.com" date="1599480000">- Update to 4.25:
  - Modified schema diff tool to compare two databases instead of
    two schemas
  - Resolve schema diff dependencies by selecting the appropriate
    node automatically and maintain the order in the
    generated script.
  - Replace charting library Flotr2 with ChartJS using React.
  - Upgrade font-awesome from v4 to v5.
  - Fixed an issue where debugger doesn't work if the search path
    is set other than 'public'.
  - Fixed ssh tunnel hang issue when the user tries to disconnect
    the server.
  - Fixed an issue where conversion of bytea to the binary string
    results in an error.
  - Fixed an issue where the entire logs are in red text when the
    user runs backup and restore.
  - Ensure that the user will be able to modify the start value
    of the Identity column.
  - Fixed an issue where 'ALTER VIEW' statement is missing when
    the user sets the default value of a column for View.</changelog>
  <changelog author="asn@cryptomilk.org" date="1599739200">- Only activate the pgadmin4 apache config if the PGADMIN4 flag is set.
  For mod_wsgi you should use `a2enmod wsgi`
- Create /etc/pgadmin/config_system.py with server mode for web
  Run /usr/lib/python3.6/site-packages/pgadmin4-web/setup.py to create
  the admin user
- Remove config_local.py with outdated options</changelog>
  <changelog author="asn@cryptomilk.org" date="1599825600">- Create a pgadmin user and group
- Add uwsgi configuration (fast, user privileges and apparmor support)</changelog>
  <changelog author="mrueckert@suse.de" date="1600603200">- Update to 4.26:
  - Added SQL Formatter support in Query Tool.
  - Added a new button to the query tool toolbar to open a new
    query tool window.
  - Added shared server support for admin users.
  - Warn the user when connecting to a server that is older than
    pgAdmin supports.
  - Ensure that schema names starting with 'pg' should be visible
    in browser tree when standard_conforming_strings is set to off.
  - Fixed an issue where --load-server does not allow loading
    connections that use pg_services.
  - Fixed string indices must be integers issue for PostgreSQL &lt;
    9.3.
  - Fixed an issue where the application ignores the fixed port
    configuration value.
  - Remove illegal argument from trigger function in trigger DDL
    statement.
  - Ensure that 'setup-web.sh' should work in Debian 10.
  - Fixed excessive CPU usage by stopping the indefinite growth of
    the graph dataset.</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Specify path for pg_dump and pg_restore
- Disable update check (if you're on leap or other you wont be able
  to upgrade to a newer version anyway)</changelog>
  <changelog author="ecsos@opensuse.org" date="1602936000">- Update to 4.27:
  - Added Macro support.
  - Added support to view trigger function under the respective
    trigger node.
  - Allow user to change the database connection from an open query
    tool tab.
  - Added support to ignore the owner while comparing objects in
    the Schema Diff tool.
  - Merged the latest code of 'pgcli' used for the autocomplete
    feature.
  - Fixed invalid literal issue when fetching dependencies for
    Materialized View.
  - Fixed an issue where schema diff is showing identical table as
    different due to default vacuum settings.
  - Ensure that the user should be able to change the start value
    of the existing sequence.
  - Fixed an issue where the query tool is not fetching more than
    1000 rows for the table does not have any primary key.
  - Fixed an issue where 'Rows X' column values were not visible
    properly for Explain Analyze in Dark theme.
  - Fixed an issue where file extension is stripped on renaming a
    file.</changelog>
  <changelog author="mrueckert@suse.de" date="1605700800">- Update to 4.28:
  - Added support to download utility files at the client-side.
  - Added support to rename query tool and debugger tabs title.
  - Added support for dynamic tab size.
  - Added tab title placeholder for Query Tool, View/Edit Data, and
    Debugger.
  - Added support to compare schemas and databases in schema diff.
  - Ensure that non-superuser should be able to debug the function.
  - Ensure that query history should be listed by date/time in
    descending order.
  - Ensure that Grant Wizard should include foreign tables.
  - Ensure that search object functionality works with case
    insensitive string.</changelog>
  <changelog author="ecsos@opensuse.org" date="1607688000">- Update to 4.29:
  - Ensure that folder rename should work properly in Storage
    Manager
  - Fixed an issue where the debugger's custom tab title not
    applied when opened in the new browser tab
  - Fixed an issue where dynamic tab title has not applied the
    first time for debugger panel
  - Fixed an issue where schema diff doesn't show the result of
    compare if source schema has tables with RLS
  - Fixed an issue where the process watcher dialog throws an error
    for the database server which is already removed
  - Ensure that code coverage should cover class and function
    declarations
  - Ensure that dirty indicator (*) should not be visible when
    renaming the tabs
  - Fixed an issue where shared servers import is failing
  - Improve code coverage and API test cases for Foreign Tables,
    Debugger, Views and Materialized Views
- Fix some requirement versions.</changelog>
  <changelog author="asn@cryptomilk.org" date="1607688001">- Add BuildRequires for python modules</changelog>
  <changelog author="alarrosa@suse.com" date="1611748800">- Add BuildRequires for python-cryptography and replace dependency for
  python-Flask-Babel with python-Flask-BabelEx</changelog>
  <changelog author="alarrosa@suse.com" date="1611748801">- Fix the desktop application by removing the overriding of
  SERVER_MODE in config_system.py and config_distro.py which were
  forcing SERVER_MODE to always have a specific value instead
  of letting the runtime choose so there's no need to force it.
- Rename pgadmin4.conf to pgadmin4.conf.in,
  pgadmin4.uwsgi to pgadmin4.uwsgi.in and
  README.SUSE.uwsgi to README.SUSE.uwsgi.in and make them also
  replace PYTHONSITELIB  with the python version used at build time
- Replace all variables from config files in %prep instead of
  %install
- Include README.SUSE.uwsgi in the web-uwsgi subpackage</changelog>
  <changelog author="mrueckert@suse.de" date="1612008000">- Update to 4.30
  - Features:
  - ERD Tool (Beta): The Entity-Relationship Diagram (ERD) tool
    is a database design tool that provides a graphical
    representation of database tables, columns, and
    inter-relationships. You can use the ERD tool to design a new
    schema and generate the SQL required to create it, or to
    reverse engineer and diagram an existing database schema.
  - Kerberos support is added in pgAdmin 4 using SPNEGO for
    logging into pgAdmin, similar to the existing LDAP and
    "internal" options. Note that support for logging into
    database servers using Kerberos is not included in this
    release, but will be added in a future version.
  - Add a container option (PGADMIN_DISABLE_POSTFIX) to disable
    the Postfix server: Postfix (like other MTAs) must start as
    user 'root', and the pgAdmin container achieves this using
    'sudo'. Whilst that works well in most environments, it can
    cause problems in some. This option allows you to completely
    disable Postfix to avoid these issues, though you will need
    to configure an external mail server to be used to send
    password reset emails.
  - Bugs/Housekeeping:
  - Improve the explain plan details by showing a popup instead
    of a tooltip when clicking on plan nodes.
  - Ensure that verbose logs are visible for Utility (Backup,
    Maintenance etc.) jobs.
  - Added support for expressions in exclusion constraints.
  - Ensure that the 'template1' database is not visible after
    pg_upgrade.
  - Added appropriate help message and a placeholder for letting
    users know about the account password expiry for Login/Group
    Role.
  - Updated Flask-BabelEx to the latest version.
  - Fixed extra parentheses issue around joins for Views.
  - Ensure that the current value of sequences is ignored while
    comparing using Schema Diff.
  - Fixed an issue when the user tries to delete multiple records
    in the data grid.
  - Fixed TypeError exception in schema diff when selecting two
    identical objects.
  - Include PostgreSQL 13 utilities in the container
    distribution.
  https://www.pgadmin.org/docs/pgadmin4/4.30/release_notes_4_30.html</changelog>
  <changelog author="mrueckert@suse.de" date="1612180800">- the system wide service does not need to run as root. switch to
  user/group pgadmin</changelog>
  <changelog author="alarrosa@suse.com" date="1612267200">- Fix typos (chmod being used instead of chown in %postun web and
  pgadmin4 used in the service file for User/Group keys instead of
  pgadmin)</changelog>
  <changelog author="alarrosa@suse.com" date="1649419200">- Add patch from upstream to fix an issue throwing an error in
  when uploading a CSV Desktop mode:
  * 0001-Fixed-an-issue-when-uploading-a-CSV.patch
- Add patch from upstream to fix an unrestricted file upload in
  pgAdmin (boo#1197143, CVE-2022-0959):
  * 0002-Ensure-that-upload-paths-are-children-of-the-storage-directory.patch</changelog>
</package>
<package pkgid="187102799f293e5acc8820c5873a42c5a7db584a6fa44e4fe17f8aae5f073b52" name="pgadmin4" arch="s390x">
  <version epoch="0" ver="4.30" rel="150300.3.3.1"/>
  <changelog author="alarrosa@suse.com" date="1589371200">- Update to 4.21
  - New features
  * Added search object functionality.
  * Added LDAP authentication support.
  * Added support for parameter toast_tuple_target and parallel_workers
    of the table.
  * Added support of Packages, Sequences and Synonyms to the
    Schema Diff.
  * Added an option to prevent a browser tab being opened at startup.
  - Bug fixes
  * Ensure that the start and end date should be deleted when clear
    the selection for pgAgent Job.
  * Fixed calendar opening issue on the exception tab inside the
    schedules tab of pgAgent.
  * Fixed an issue where the autovacuum_enabled parameter is added
    automatically in the RE-SQL when the table has been created
    using the WITH clause.
  * Fixed generated SQL when any token in FTS Configuration or any
    option in FTS Dictionary is changed.
  * Fixed tab key navigation issue for parameters in table dialog.
  * Ensure that switch cell is in sync with switch control for
    accessibility.
  * Fixed compilation warnings while building pgAdmin.
- Update to 4.20
  - New features
  * Added support of Collation, FTS Configuration, FTS Dictionary,
    FTS Parser and FTS Template to the Schema Diff.
  * Added support of Domain, Domain Constraints and Types to the
    Schema Diff.
  - Housekeeping
  * Enhance the color of switch control for both light and dark theme.
  * Added and fixed gettext usage for better translation coverage.
  - Bug fixes
  * Fix an issue where the user can not change the value of DateTime
    picker control using keyboard.
  * Fixed some accessibility issues in the dialogs.
  * Fixed chrome driver download utility issue for Ubuntu.
  * Change some colors and opacity to comply with WCAG color
    contrast standards.
  * Fix an accessibility issue to maximize the panel for all
    alertify dialog.
  * Improve logic to get the DDL statements as a part of the
    comparison.
  * Fixed tab key navigation issue for Grant Wizard.
  * Fixed Unicode character issue causing error on Python2 environment.
  * Fixed focus color issue for Alertify dialog buttons.</changelog>
  <changelog author="alarrosa@suse.com" date="1589457600">- Decrease requirements to build in SLE/Leap:
  * Werkzeug from 0.15.0 to 0.14.1
  * passlib from 1.7.2 to 1.7.1
  * psycopg from 2.8 to 2.7.4
  * python-dateutil from 2.8.0 to 2.7.3
  * simplejson from 3.16.0 to 3.13.2
  * pytz from 2018.9 to 2018.3
  pgadmin has this tendency to just follow the latest versions
  instead of properly specify required versions.</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1592222400">- Update to 4.22
  - New features
  * Added connected pgAdmin user and connection name in the log file.
  * Show the startup log as well as the server log in the runtime's log
    viewer.
  - Bugfixes
  * Gracefully informed the user that the database is already connected when
  they click on "Connect Database...".
  * Fixed an issue where clicking on the cross button of the alert box on
  the login page is not working.
  * Fixed the SQL help issue for EDB Postgres Advanced Server.
  * Ensure that maintenance job should be worked properly for indexes under
  a materialized view.
  * Ensure that file browse "home" button should point to $HOME rather than /.
  * Ensure that 'With OID' option should be disabled while taking backup of
  database server version 12 and above.
  * Fixed invalid literal issue when removing the connection limit for the
  existing role.
  * Fixed internal server error when clicking on Triggers -&gt; 'Enable All'
  for partitions.
  * Fixed generated SQL issue for auto vacuum options.
  * Ensure that the dependencies tab shows correct information for Synonyms.
  * Fixed an issue where the newly added table is not alphabetically added
  to the tree.
  * Fixed list sorting issue in the schema diff tool.
  * Fixed an issue while comparing the two identical schemas using the
  schema diff tool.
  * Fixed an issue when renaming the column not added in the proper order.
  * Correct ipv4 "all interfaces" address in the container docs, per Frank
  Limpert.
  * Fixed an issue where select2 hover is inconsistent for the SSL field in
  create server dialog.
  * Fixed post-login redirect location when running in server mode under a
  non-default root.
  * Fixed an issue where the background job creation fails if there is only
  a version-specific python binary available in PATH.
  * Fixed data truncation issue when updating the data of type character
    with length.
  * Fixed an issue where if LDAP_SEARCH_BASE_DN is not set then, the value
    for LDAP_BASE_DN will be considered.
  * Fixed an issue where clicking on Select All button, not selecting all
    the options in pgAgent job scheduler.
  * Clarify and correct the docs on enabling the pl/debugger plugin on the
    server.
  * Fixed Unicode decode error 'utf-8' codec can't decode byte.
- Packaging:
  * refresh fix-python-lib.patch
  * add keyring e8697e2eef76c02d3a6332778881b2a8210976f2 enabling
    GPG source tarballs verification</changelog>
  <changelog author="mrueckert@suse.de" date="1594728000">- Update to 4.23
  - New features
  - Issue #5468 - Added option to ignore the whitespaces while
    comparing objects in schema diff.
  - Issue #5500 - Added server group name while selecting servers
    in schema diff.
  - Issue #5516 - Added support of Row Security Policies.
  - Issue #5576 - Improve error messaging if the storage and log
    directories cannot be created.
  - Housekeeping
  - Issue #5325 - Improve code coverage and API test cases for
    Collations.
  - Issue #5574 - Cleanup Windows build scripts and ensure
    Windows x64 builds will work.
  - Issue #5581 - Documentation of Row Level Security Policies.
  - Bug fixes
  - Issue #3591 - Ensure that the query tool should display the
    proper error message while terminating the active session.
  - Issue #3669 - Ensure that proper error should be displayed
    for the deleted node.
  - Issue #3787 - Disabled the Stop process button after clicking
    it and added a message ?Terminating the process?? to notify
    the user.
  - Issue #4226 - Fixed an issue where select all checkbox only
    selects the first 50 tables.
  - Issue #5416 - Ensure that the query tool panel gets closed
    when clicking on the ?Don?t Save? button.
  - Issue #5465 - Fixed an issue where the Edge browser version
    is showing wrong and warning message gets displayed.
  - Issue #5492 - Fixed an issue where the search object is
    unable to locate inherited tables and constraint filters are
    not working.
  - Issue #5507 - Fixed connection and version number detection
    issue when the database server is upgraded.
  - Issue #5521 - Fixed an issue when dumping servers from a
    desktop pgAdmin app by providing an option ??sqlite-path?.
  - Issue #5539 - Fixed typo in exception keyword.
  - Issue #5584 - Fixed an issue where two identical tables
    showing different by schema diff tool.
  - Issue #5592 - Ensure that pgadmin should be able to connect
    to the server which has password more than 1000 characters.</changelog>
  <changelog author="mrueckert@suse.de" date="1596542400">- Update to 4.24
  - New features
  - Issue #5235 - Support configuration files that are external
    to the application installation.
  - Issue #5484 - Added support for LDAP authentication with
    different DN by setting the dedicated user for the LDAP
    connection.
  - Issue #5583 - Added support for schema level restriction.
  - Issue #5601 - Added RLS Policy support in Schema Diff.
  - Issue #5622 - Added support for permissive/restricted policy
    type while creating RLS Policy.
  - Issue #5650 - Added support for LDAP anonymous binding.
  - Issue #5653 - Added High Contrast theme support.
  - Housekeeping
  - Issue #5323 - Improve code coverage and API test cases for
    Foreign Data Wrapper.
  - Issue #5326 - Improve code coverage and API test cases for
    Domain and Domain Constraints.
  - Issue #5329 - Improve code coverage and API test cases for
    FTS Configuration, FTS Parser, FTS Dictionaries, and FTS
    Template.
  - Bug fixes
  - Issue #3814 - Fixed issue of error message not getting
    displayed when filename is empty for backup, restore, and
    import/export.
  - Issue #3851 - Add proper indentation to the code while
    generating functions, procedures, and trigger functions.
  - Issue #4235 - Fixed tab indent issue on a selection of lines
    is deleting the content when ?use spaces == true? in the
    preferences.
  - Issue #5137 - Fixed save button enable issue when focusing in
    and out of numeric input field.
  - Issue #5287 - Fixed dark theme-related CSS and modify the
    color codes.
  - Issue #5414 - Use QStandardPaths::AppLocalDataLocation in the
    runtime to determine where to store runtime logs.
  - Issue #5463 - Fixed an issue where CSV download quotes
    numeric columns.
  - Issue #5470 - Fixed backgrid row hover issue where on hover
    background color is set for edit and delete cell only.
  - Issue #5530 - Ensure that the referenced table should be
    displayed on foreign key constraints.
  - Issue #5554 - Replace the runtime themes with ones that don?t
    have sizing issues.
  - Issue #5569 - Fixed reverse engineered SQL for partitions
    when storage parameters are specified.
  - Issue #5577 - Include LICENSE and DEPENDENCIES [inventory]
    files in official packages.
  - Issue #5621 - Remove extra brackets from reverse engineering
    SQL of RLS Policy.
  - Issue #5629 - Fixed an issue where the user is able to edit
    properties when some of the collection nodes are selected.
  - Issue #5630 - Fixed an issue where installation of pgadmin4
    not working on 32-bit Windows.
  - Issue #5631 - Fixed ?cant execute empty query? issue when
    remove the value of ?USING? or ?WITH CHECK? option of RLS
    Policy.
  - Issue #5633 - Ensure that create RLS Policy menu should not
    be visible for catalog objects.
  - Issue #5647 - Fixed an issue where difference DDL is showing
    the wrong SQL when changing the policy owner.
  - Issue #5662 - Fixed accessibility issue where few dialogs are
    not rendering properly when we zoomed in browser window 200%
    and screen resolution is low.
  - Issue #5666 - Added missing dependencies/dependent and
    corrected some wrongly identified.
  - Issue #5673 - Fixed an issue where fetching the schema throws
    an error if the database is not connected in Schema Diff.
  - Issue #5675 - Fixed CSRF errors when pgAdmin opened in an
    iframe on safari browser.
  - Issue #5677 - Fixed text color issue in explain analyze for
    the Dark theme.
  - Issue #5686 - Fixed issue where the user was not able to
    update policy if the policy is created with space.
- update requires to match requirements.txt</changelog>
  <changelog author="info@paolostivanin.com" date="1599480000">- Update to 4.25:
  - Modified schema diff tool to compare two databases instead of
    two schemas
  - Resolve schema diff dependencies by selecting the appropriate
    node automatically and maintain the order in the
    generated script.
  - Replace charting library Flotr2 with ChartJS using React.
  - Upgrade font-awesome from v4 to v5.
  - Fixed an issue where debugger doesn't work if the search path
    is set other than 'public'.
  - Fixed ssh tunnel hang issue when the user tries to disconnect
    the server.
  - Fixed an issue where conversion of bytea to the binary string
    results in an error.
  - Fixed an issue where the entire logs are in red text when the
    user runs backup and restore.
  - Ensure that the user will be able to modify the start value
    of the Identity column.
  - Fixed an issue where 'ALTER VIEW' statement is missing when
    the user sets the default value of a column for View.</changelog>
  <changelog author="asn@cryptomilk.org" date="1599739200">- Only activate the pgadmin4 apache config if the PGADMIN4 flag is set.
  For mod_wsgi you should use `a2enmod wsgi`
- Create /etc/pgadmin/config_system.py with server mode for web
  Run /usr/lib/python3.6/site-packages/pgadmin4-web/setup.py to create
  the admin user
- Remove config_local.py with outdated options</changelog>
  <changelog author="asn@cryptomilk.org" date="1599825600">- Create a pgadmin user and group
- Add uwsgi configuration (fast, user privileges and apparmor support)</changelog>
  <changelog author="mrueckert@suse.de" date="1600603200">- Update to 4.26:
  - Added SQL Formatter support in Query Tool.
  - Added a new button to the query tool toolbar to open a new
    query tool window.
  - Added shared server support for admin users.
  - Warn the user when connecting to a server that is older than
    pgAdmin supports.
  - Ensure that schema names starting with 'pg' should be visible
    in browser tree when standard_conforming_strings is set to off.
  - Fixed an issue where --load-server does not allow loading
    connections that use pg_services.
  - Fixed string indices must be integers issue for PostgreSQL &lt;
    9.3.
  - Fixed an issue where the application ignores the fixed port
    configuration value.
  - Remove illegal argument from trigger function in trigger DDL
    statement.
  - Ensure that 'setup-web.sh' should work in Debian 10.
  - Fixed excessive CPU usage by stopping the indefinite growth of
    the graph dataset.</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Specify path for pg_dump and pg_restore
- Disable update check (if you're on leap or other you wont be able
  to upgrade to a newer version anyway)</changelog>
  <changelog author="ecsos@opensuse.org" date="1602936000">- Update to 4.27:
  - Added Macro support.
  - Added support to view trigger function under the respective
    trigger node.
  - Allow user to change the database connection from an open query
    tool tab.
  - Added support to ignore the owner while comparing objects in
    the Schema Diff tool.
  - Merged the latest code of 'pgcli' used for the autocomplete
    feature.
  - Fixed invalid literal issue when fetching dependencies for
    Materialized View.
  - Fixed an issue where schema diff is showing identical table as
    different due to default vacuum settings.
  - Ensure that the user should be able to change the start value
    of the existing sequence.
  - Fixed an issue where the query tool is not fetching more than
    1000 rows for the table does not have any primary key.
  - Fixed an issue where 'Rows X' column values were not visible
    properly for Explain Analyze in Dark theme.
  - Fixed an issue where file extension is stripped on renaming a
    file.</changelog>
  <changelog author="mrueckert@suse.de" date="1605700800">- Update to 4.28:
  - Added support to download utility files at the client-side.
  - Added support to rename query tool and debugger tabs title.
  - Added support for dynamic tab size.
  - Added tab title placeholder for Query Tool, View/Edit Data, and
    Debugger.
  - Added support to compare schemas and databases in schema diff.
  - Ensure that non-superuser should be able to debug the function.
  - Ensure that query history should be listed by date/time in
    descending order.
  - Ensure that Grant Wizard should include foreign tables.
  - Ensure that search object functionality works with case
    insensitive string.</changelog>
  <changelog author="ecsos@opensuse.org" date="1607688000">- Update to 4.29:
  - Ensure that folder rename should work properly in Storage
    Manager
  - Fixed an issue where the debugger's custom tab title not
    applied when opened in the new browser tab
  - Fixed an issue where dynamic tab title has not applied the
    first time for debugger panel
  - Fixed an issue where schema diff doesn't show the result of
    compare if source schema has tables with RLS
  - Fixed an issue where the process watcher dialog throws an error
    for the database server which is already removed
  - Ensure that code coverage should cover class and function
    declarations
  - Ensure that dirty indicator (*) should not be visible when
    renaming the tabs
  - Fixed an issue where shared servers import is failing
  - Improve code coverage and API test cases for Foreign Tables,
    Debugger, Views and Materialized Views
- Fix some requirement versions.</changelog>
  <changelog author="asn@cryptomilk.org" date="1607688001">- Add BuildRequires for python modules</changelog>
  <changelog author="alarrosa@suse.com" date="1611748800">- Add BuildRequires for python-cryptography and replace dependency for
  python-Flask-Babel with python-Flask-BabelEx</changelog>
  <changelog author="alarrosa@suse.com" date="1611748801">- Fix the desktop application by removing the overriding of
  SERVER_MODE in config_system.py and config_distro.py which were
  forcing SERVER_MODE to always have a specific value instead
  of letting the runtime choose so there's no need to force it.
- Rename pgadmin4.conf to pgadmin4.conf.in,
  pgadmin4.uwsgi to pgadmin4.uwsgi.in and
  README.SUSE.uwsgi to README.SUSE.uwsgi.in and make them also
  replace PYTHONSITELIB  with the python version used at build time
- Replace all variables from config files in %prep instead of
  %install
- Include README.SUSE.uwsgi in the web-uwsgi subpackage</changelog>
  <changelog author="mrueckert@suse.de" date="1612008000">- Update to 4.30
  - Features:
  - ERD Tool (Beta): The Entity-Relationship Diagram (ERD) tool
    is a database design tool that provides a graphical
    representation of database tables, columns, and
    inter-relationships. You can use the ERD tool to design a new
    schema and generate the SQL required to create it, or to
    reverse engineer and diagram an existing database schema.
  - Kerberos support is added in pgAdmin 4 using SPNEGO for
    logging into pgAdmin, similar to the existing LDAP and
    "internal" options. Note that support for logging into
    database servers using Kerberos is not included in this
    release, but will be added in a future version.
  - Add a container option (PGADMIN_DISABLE_POSTFIX) to disable
    the Postfix server: Postfix (like other MTAs) must start as
    user 'root', and the pgAdmin container achieves this using
    'sudo'. Whilst that works well in most environments, it can
    cause problems in some. This option allows you to completely
    disable Postfix to avoid these issues, though you will need
    to configure an external mail server to be used to send
    password reset emails.
  - Bugs/Housekeeping:
  - Improve the explain plan details by showing a popup instead
    of a tooltip when clicking on plan nodes.
  - Ensure that verbose logs are visible for Utility (Backup,
    Maintenance etc.) jobs.
  - Added support for expressions in exclusion constraints.
  - Ensure that the 'template1' database is not visible after
    pg_upgrade.
  - Added appropriate help message and a placeholder for letting
    users know about the account password expiry for Login/Group
    Role.
  - Updated Flask-BabelEx to the latest version.
  - Fixed extra parentheses issue around joins for Views.
  - Ensure that the current value of sequences is ignored while
    comparing using Schema Diff.
  - Fixed an issue when the user tries to delete multiple records
    in the data grid.
  - Fixed TypeError exception in schema diff when selecting two
    identical objects.
  - Include PostgreSQL 13 utilities in the container
    distribution.
  https://www.pgadmin.org/docs/pgadmin4/4.30/release_notes_4_30.html</changelog>
  <changelog author="mrueckert@suse.de" date="1612180800">- the system wide service does not need to run as root. switch to
  user/group pgadmin</changelog>
  <changelog author="alarrosa@suse.com" date="1612267200">- Fix typos (chmod being used instead of chown in %postun web and
  pgadmin4 used in the service file for User/Group keys instead of
  pgadmin)</changelog>
  <changelog author="alarrosa@suse.com" date="1649419200">- Add patch from upstream to fix an issue throwing an error in
  when uploading a CSV Desktop mode:
  * 0001-Fixed-an-issue-when-uploading-a-CSV.patch
- Add patch from upstream to fix an unrestricted file upload in
  pgAdmin (boo#1197143, CVE-2022-0959):
  * 0002-Ensure-that-upload-paths-are-children-of-the-storage-directory.patch</changelog>
</package>
<package pkgid="b34d893e082fe86b00ea3c8da7dcdcf18db37958bc81edf0264de218db85775c" name="pgadmin4" arch="src">
  <version epoch="0" ver="4.30" rel="150300.3.3.1"/>
  <changelog author="alarrosa@suse.com" date="1589371200">- Update to 4.21
  - New features
  * Added search object functionality.
  * Added LDAP authentication support.
  * Added support for parameter toast_tuple_target and parallel_workers
    of the table.
  * Added support of Packages, Sequences and Synonyms to the
    Schema Diff.
  * Added an option to prevent a browser tab being opened at startup.
  - Bug fixes
  * Ensure that the start and end date should be deleted when clear
    the selection for pgAgent Job.
  * Fixed calendar opening issue on the exception tab inside the
    schedules tab of pgAgent.
  * Fixed an issue where the autovacuum_enabled parameter is added
    automatically in the RE-SQL when the table has been created
    using the WITH clause.
  * Fixed generated SQL when any token in FTS Configuration or any
    option in FTS Dictionary is changed.
  * Fixed tab key navigation issue for parameters in table dialog.
  * Ensure that switch cell is in sync with switch control for
    accessibility.
  * Fixed compilation warnings while building pgAdmin.
- Update to 4.20
  - New features
  * Added support of Collation, FTS Configuration, FTS Dictionary,
    FTS Parser and FTS Template to the Schema Diff.
  * Added support of Domain, Domain Constraints and Types to the
    Schema Diff.
  - Housekeeping
  * Enhance the color of switch control for both light and dark theme.
  * Added and fixed gettext usage for better translation coverage.
  - Bug fixes
  * Fix an issue where the user can not change the value of DateTime
    picker control using keyboard.
  * Fixed some accessibility issues in the dialogs.
  * Fixed chrome driver download utility issue for Ubuntu.
  * Change some colors and opacity to comply with WCAG color
    contrast standards.
  * Fix an accessibility issue to maximize the panel for all
    alertify dialog.
  * Improve logic to get the DDL statements as a part of the
    comparison.
  * Fixed tab key navigation issue for Grant Wizard.
  * Fixed Unicode character issue causing error on Python2 environment.
  * Fixed focus color issue for Alertify dialog buttons.</changelog>
  <changelog author="alarrosa@suse.com" date="1589457600">- Decrease requirements to build in SLE/Leap:
  * Werkzeug from 0.15.0 to 0.14.1
  * passlib from 1.7.2 to 1.7.1
  * psycopg from 2.8 to 2.7.4
  * python-dateutil from 2.8.0 to 2.7.3
  * simplejson from 3.16.0 to 3.13.2
  * pytz from 2018.9 to 2018.3
  pgadmin has this tendency to just follow the latest versions
  instead of properly specify required versions.</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1592222400">- Update to 4.22
  - New features
  * Added connected pgAdmin user and connection name in the log file.
  * Show the startup log as well as the server log in the runtime's log
    viewer.
  - Bugfixes
  * Gracefully informed the user that the database is already connected when
  they click on "Connect Database...".
  * Fixed an issue where clicking on the cross button of the alert box on
  the login page is not working.
  * Fixed the SQL help issue for EDB Postgres Advanced Server.
  * Ensure that maintenance job should be worked properly for indexes under
  a materialized view.
  * Ensure that file browse "home" button should point to $HOME rather than /.
  * Ensure that 'With OID' option should be disabled while taking backup of
  database server version 12 and above.
  * Fixed invalid literal issue when removing the connection limit for the
  existing role.
  * Fixed internal server error when clicking on Triggers -&gt; 'Enable All'
  for partitions.
  * Fixed generated SQL issue for auto vacuum options.
  * Ensure that the dependencies tab shows correct information for Synonyms.
  * Fixed an issue where the newly added table is not alphabetically added
  to the tree.
  * Fixed list sorting issue in the schema diff tool.
  * Fixed an issue while comparing the two identical schemas using the
  schema diff tool.
  * Fixed an issue when renaming the column not added in the proper order.
  * Correct ipv4 "all interfaces" address in the container docs, per Frank
  Limpert.
  * Fixed an issue where select2 hover is inconsistent for the SSL field in
  create server dialog.
  * Fixed post-login redirect location when running in server mode under a
  non-default root.
  * Fixed an issue where the background job creation fails if there is only
  a version-specific python binary available in PATH.
  * Fixed data truncation issue when updating the data of type character
    with length.
  * Fixed an issue where if LDAP_SEARCH_BASE_DN is not set then, the value
    for LDAP_BASE_DN will be considered.
  * Fixed an issue where clicking on Select All button, not selecting all
    the options in pgAgent job scheduler.
  * Clarify and correct the docs on enabling the pl/debugger plugin on the
    server.
  * Fixed Unicode decode error 'utf-8' codec can't decode byte.
- Packaging:
  * refresh fix-python-lib.patch
  * add keyring e8697e2eef76c02d3a6332778881b2a8210976f2 enabling
    GPG source tarballs verification</changelog>
  <changelog author="mrueckert@suse.de" date="1594728000">- Update to 4.23
  - New features
  - Issue #5468 - Added option to ignore the whitespaces while
    comparing objects in schema diff.
  - Issue #5500 - Added server group name while selecting servers
    in schema diff.
  - Issue #5516 - Added support of Row Security Policies.
  - Issue #5576 - Improve error messaging if the storage and log
    directories cannot be created.
  - Housekeeping
  - Issue #5325 - Improve code coverage and API test cases for
    Collations.
  - Issue #5574 - Cleanup Windows build scripts and ensure
    Windows x64 builds will work.
  - Issue #5581 - Documentation of Row Level Security Policies.
  - Bug fixes
  - Issue #3591 - Ensure that the query tool should display the
    proper error message while terminating the active session.
  - Issue #3669 - Ensure that proper error should be displayed
    for the deleted node.
  - Issue #3787 - Disabled the Stop process button after clicking
    it and added a message ?Terminating the process?? to notify
    the user.
  - Issue #4226 - Fixed an issue where select all checkbox only
    selects the first 50 tables.
  - Issue #5416 - Ensure that the query tool panel gets closed
    when clicking on the ?Don?t Save? button.
  - Issue #5465 - Fixed an issue where the Edge browser version
    is showing wrong and warning message gets displayed.
  - Issue #5492 - Fixed an issue where the search object is
    unable to locate inherited tables and constraint filters are
    not working.
  - Issue #5507 - Fixed connection and version number detection
    issue when the database server is upgraded.
  - Issue #5521 - Fixed an issue when dumping servers from a
    desktop pgAdmin app by providing an option ??sqlite-path?.
  - Issue #5539 - Fixed typo in exception keyword.
  - Issue #5584 - Fixed an issue where two identical tables
    showing different by schema diff tool.
  - Issue #5592 - Ensure that pgadmin should be able to connect
    to the server which has password more than 1000 characters.</changelog>
  <changelog author="mrueckert@suse.de" date="1596542400">- Update to 4.24
  - New features
  - Issue #5235 - Support configuration files that are external
    to the application installation.
  - Issue #5484 - Added support for LDAP authentication with
    different DN by setting the dedicated user for the LDAP
    connection.
  - Issue #5583 - Added support for schema level restriction.
  - Issue #5601 - Added RLS Policy support in Schema Diff.
  - Issue #5622 - Added support for permissive/restricted policy
    type while creating RLS Policy.
  - Issue #5650 - Added support for LDAP anonymous binding.
  - Issue #5653 - Added High Contrast theme support.
  - Housekeeping
  - Issue #5323 - Improve code coverage and API test cases for
    Foreign Data Wrapper.
  - Issue #5326 - Improve code coverage and API test cases for
    Domain and Domain Constraints.
  - Issue #5329 - Improve code coverage and API test cases for
    FTS Configuration, FTS Parser, FTS Dictionaries, and FTS
    Template.
  - Bug fixes
  - Issue #3814 - Fixed issue of error message not getting
    displayed when filename is empty for backup, restore, and
    import/export.
  - Issue #3851 - Add proper indentation to the code while
    generating functions, procedures, and trigger functions.
  - Issue #4235 - Fixed tab indent issue on a selection of lines
    is deleting the content when ?use spaces == true? in the
    preferences.
  - Issue #5137 - Fixed save button enable issue when focusing in
    and out of numeric input field.
  - Issue #5287 - Fixed dark theme-related CSS and modify the
    color codes.
  - Issue #5414 - Use QStandardPaths::AppLocalDataLocation in the
    runtime to determine where to store runtime logs.
  - Issue #5463 - Fixed an issue where CSV download quotes
    numeric columns.
  - Issue #5470 - Fixed backgrid row hover issue where on hover
    background color is set for edit and delete cell only.
  - Issue #5530 - Ensure that the referenced table should be
    displayed on foreign key constraints.
  - Issue #5554 - Replace the runtime themes with ones that don?t
    have sizing issues.
  - Issue #5569 - Fixed reverse engineered SQL for partitions
    when storage parameters are specified.
  - Issue #5577 - Include LICENSE and DEPENDENCIES [inventory]
    files in official packages.
  - Issue #5621 - Remove extra brackets from reverse engineering
    SQL of RLS Policy.
  - Issue #5629 - Fixed an issue where the user is able to edit
    properties when some of the collection nodes are selected.
  - Issue #5630 - Fixed an issue where installation of pgadmin4
    not working on 32-bit Windows.
  - Issue #5631 - Fixed ?cant execute empty query? issue when
    remove the value of ?USING? or ?WITH CHECK? option of RLS
    Policy.
  - Issue #5633 - Ensure that create RLS Policy menu should not
    be visible for catalog objects.
  - Issue #5647 - Fixed an issue where difference DDL is showing
    the wrong SQL when changing the policy owner.
  - Issue #5662 - Fixed accessibility issue where few dialogs are
    not rendering properly when we zoomed in browser window 200%
    and screen resolution is low.
  - Issue #5666 - Added missing dependencies/dependent and
    corrected some wrongly identified.
  - Issue #5673 - Fixed an issue where fetching the schema throws
    an error if the database is not connected in Schema Diff.
  - Issue #5675 - Fixed CSRF errors when pgAdmin opened in an
    iframe on safari browser.
  - Issue #5677 - Fixed text color issue in explain analyze for
    the Dark theme.
  - Issue #5686 - Fixed issue where the user was not able to
    update policy if the policy is created with space.
- update requires to match requirements.txt</changelog>
  <changelog author="info@paolostivanin.com" date="1599480000">- Update to 4.25:
  - Modified schema diff tool to compare two databases instead of
    two schemas
  - Resolve schema diff dependencies by selecting the appropriate
    node automatically and maintain the order in the
    generated script.
  - Replace charting library Flotr2 with ChartJS using React.
  - Upgrade font-awesome from v4 to v5.
  - Fixed an issue where debugger doesn't work if the search path
    is set other than 'public'.
  - Fixed ssh tunnel hang issue when the user tries to disconnect
    the server.
  - Fixed an issue where conversion of bytea to the binary string
    results in an error.
  - Fixed an issue where the entire logs are in red text when the
    user runs backup and restore.
  - Ensure that the user will be able to modify the start value
    of the Identity column.
  - Fixed an issue where 'ALTER VIEW' statement is missing when
    the user sets the default value of a column for View.</changelog>
  <changelog author="asn@cryptomilk.org" date="1599739200">- Only activate the pgadmin4 apache config if the PGADMIN4 flag is set.
  For mod_wsgi you should use `a2enmod wsgi`
- Create /etc/pgadmin/config_system.py with server mode for web
  Run /usr/lib/python3.6/site-packages/pgadmin4-web/setup.py to create
  the admin user
- Remove config_local.py with outdated options</changelog>
  <changelog author="asn@cryptomilk.org" date="1599825600">- Create a pgadmin user and group
- Add uwsgi configuration (fast, user privileges and apparmor support)</changelog>
  <changelog author="mrueckert@suse.de" date="1600603200">- Update to 4.26:
  - Added SQL Formatter support in Query Tool.
  - Added a new button to the query tool toolbar to open a new
    query tool window.
  - Added shared server support for admin users.
  - Warn the user when connecting to a server that is older than
    pgAdmin supports.
  - Ensure that schema names starting with 'pg' should be visible
    in browser tree when standard_conforming_strings is set to off.
  - Fixed an issue where --load-server does not allow loading
    connections that use pg_services.
  - Fixed string indices must be integers issue for PostgreSQL &lt;
    9.3.
  - Fixed an issue where the application ignores the fixed port
    configuration value.
  - Remove illegal argument from trigger function in trigger DDL
    statement.
  - Ensure that 'setup-web.sh' should work in Debian 10.
  - Fixed excessive CPU usage by stopping the indefinite growth of
    the graph dataset.</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Specify path for pg_dump and pg_restore
- Disable update check (if you're on leap or other you wont be able
  to upgrade to a newer version anyway)</changelog>
  <changelog author="ecsos@opensuse.org" date="1602936000">- Update to 4.27:
  - Added Macro support.
  - Added support to view trigger function under the respective
    trigger node.
  - Allow user to change the database connection from an open query
    tool tab.
  - Added support to ignore the owner while comparing objects in
    the Schema Diff tool.
  - Merged the latest code of 'pgcli' used for the autocomplete
    feature.
  - Fixed invalid literal issue when fetching dependencies for
    Materialized View.
  - Fixed an issue where schema diff is showing identical table as
    different due to default vacuum settings.
  - Ensure that the user should be able to change the start value
    of the existing sequence.
  - Fixed an issue where the query tool is not fetching more than
    1000 rows for the table does not have any primary key.
  - Fixed an issue where 'Rows X' column values were not visible
    properly for Explain Analyze in Dark theme.
  - Fixed an issue where file extension is stripped on renaming a
    file.</changelog>
  <changelog author="mrueckert@suse.de" date="1605700800">- Update to 4.28:
  - Added support to download utility files at the client-side.
  - Added support to rename query tool and debugger tabs title.
  - Added support for dynamic tab size.
  - Added tab title placeholder for Query Tool, View/Edit Data, and
    Debugger.
  - Added support to compare schemas and databases in schema diff.
  - Ensure that non-superuser should be able to debug the function.
  - Ensure that query history should be listed by date/time in
    descending order.
  - Ensure that Grant Wizard should include foreign tables.
  - Ensure that search object functionality works with case
    insensitive string.</changelog>
  <changelog author="ecsos@opensuse.org" date="1607688000">- Update to 4.29:
  - Ensure that folder rename should work properly in Storage
    Manager
  - Fixed an issue where the debugger's custom tab title not
    applied when opened in the new browser tab
  - Fixed an issue where dynamic tab title has not applied the
    first time for debugger panel
  - Fixed an issue where schema diff doesn't show the result of
    compare if source schema has tables with RLS
  - Fixed an issue where the process watcher dialog throws an error
    for the database server which is already removed
  - Ensure that code coverage should cover class and function
    declarations
  - Ensure that dirty indicator (*) should not be visible when
    renaming the tabs
  - Fixed an issue where shared servers import is failing
  - Improve code coverage and API test cases for Foreign Tables,
    Debugger, Views and Materialized Views
- Fix some requirement versions.</changelog>
  <changelog author="asn@cryptomilk.org" date="1607688001">- Add BuildRequires for python modules</changelog>
  <changelog author="alarrosa@suse.com" date="1611748800">- Add BuildRequires for python-cryptography and replace dependency for
  python-Flask-Babel with python-Flask-BabelEx</changelog>
  <changelog author="alarrosa@suse.com" date="1611748801">- Fix the desktop application by removing the overriding of
  SERVER_MODE in config_system.py and config_distro.py which were
  forcing SERVER_MODE to always have a specific value instead
  of letting the runtime choose so there's no need to force it.
- Rename pgadmin4.conf to pgadmin4.conf.in,
  pgadmin4.uwsgi to pgadmin4.uwsgi.in and
  README.SUSE.uwsgi to README.SUSE.uwsgi.in and make them also
  replace PYTHONSITELIB  with the python version used at build time
- Replace all variables from config files in %prep instead of
  %install
- Include README.SUSE.uwsgi in the web-uwsgi subpackage</changelog>
  <changelog author="mrueckert@suse.de" date="1612008000">- Update to 4.30
  - Features:
  - ERD Tool (Beta): The Entity-Relationship Diagram (ERD) tool
    is a database design tool that provides a graphical
    representation of database tables, columns, and
    inter-relationships. You can use the ERD tool to design a new
    schema and generate the SQL required to create it, or to
    reverse engineer and diagram an existing database schema.
  - Kerberos support is added in pgAdmin 4 using SPNEGO for
    logging into pgAdmin, similar to the existing LDAP and
    "internal" options. Note that support for logging into
    database servers using Kerberos is not included in this
    release, but will be added in a future version.
  - Add a container option (PGADMIN_DISABLE_POSTFIX) to disable
    the Postfix server: Postfix (like other MTAs) must start as
    user 'root', and the pgAdmin container achieves this using
    'sudo'. Whilst that works well in most environments, it can
    cause problems in some. This option allows you to completely
    disable Postfix to avoid these issues, though you will need
    to configure an external mail server to be used to send
    password reset emails.
  - Bugs/Housekeeping:
  - Improve the explain plan details by showing a popup instead
    of a tooltip when clicking on plan nodes.
  - Ensure that verbose logs are visible for Utility (Backup,
    Maintenance etc.) jobs.
  - Added support for expressions in exclusion constraints.
  - Ensure that the 'template1' database is not visible after
    pg_upgrade.
  - Added appropriate help message and a placeholder for letting
    users know about the account password expiry for Login/Group
    Role.
  - Updated Flask-BabelEx to the latest version.
  - Fixed extra parentheses issue around joins for Views.
  - Ensure that the current value of sequences is ignored while
    comparing using Schema Diff.
  - Fixed an issue when the user tries to delete multiple records
    in the data grid.
  - Fixed TypeError exception in schema diff when selecting two
    identical objects.
  - Include PostgreSQL 13 utilities in the container
    distribution.
  https://www.pgadmin.org/docs/pgadmin4/4.30/release_notes_4_30.html</changelog>
  <changelog author="mrueckert@suse.de" date="1612180800">- the system wide service does not need to run as root. switch to
  user/group pgadmin</changelog>
  <changelog author="alarrosa@suse.com" date="1612267200">- Fix typos (chmod being used instead of chown in %postun web and
  pgadmin4 used in the service file for User/Group keys instead of
  pgadmin)</changelog>
  <changelog author="alarrosa@suse.com" date="1649419200">- Add patch from upstream to fix an issue throwing an error in
  when uploading a CSV Desktop mode:
  * 0001-Fixed-an-issue-when-uploading-a-CSV.patch
- Add patch from upstream to fix an unrestricted file upload in
  pgAdmin (boo#1197143, CVE-2022-0959):
  * 0002-Ensure-that-upload-paths-are-children-of-the-storage-directory.patch</changelog>
</package>
<package pkgid="63e9c729c83ac6272643e55293498560ac00e60e8ab9135a88ede7163c1c421f" name="pgadmin4" arch="x86_64">
  <version epoch="0" ver="4.30" rel="150300.3.3.1"/>
  <changelog author="alarrosa@suse.com" date="1589371200">- Update to 4.21
  - New features
  * Added search object functionality.
  * Added LDAP authentication support.
  * Added support for parameter toast_tuple_target and parallel_workers
    of the table.
  * Added support of Packages, Sequences and Synonyms to the
    Schema Diff.
  * Added an option to prevent a browser tab being opened at startup.
  - Bug fixes
  * Ensure that the start and end date should be deleted when clear
    the selection for pgAgent Job.
  * Fixed calendar opening issue on the exception tab inside the
    schedules tab of pgAgent.
  * Fixed an issue where the autovacuum_enabled parameter is added
    automatically in the RE-SQL when the table has been created
    using the WITH clause.
  * Fixed generated SQL when any token in FTS Configuration or any
    option in FTS Dictionary is changed.
  * Fixed tab key navigation issue for parameters in table dialog.
  * Ensure that switch cell is in sync with switch control for
    accessibility.
  * Fixed compilation warnings while building pgAdmin.
- Update to 4.20
  - New features
  * Added support of Collation, FTS Configuration, FTS Dictionary,
    FTS Parser and FTS Template to the Schema Diff.
  * Added support of Domain, Domain Constraints and Types to the
    Schema Diff.
  - Housekeeping
  * Enhance the color of switch control for both light and dark theme.
  * Added and fixed gettext usage for better translation coverage.
  - Bug fixes
  * Fix an issue where the user can not change the value of DateTime
    picker control using keyboard.
  * Fixed some accessibility issues in the dialogs.
  * Fixed chrome driver download utility issue for Ubuntu.
  * Change some colors and opacity to comply with WCAG color
    contrast standards.
  * Fix an accessibility issue to maximize the panel for all
    alertify dialog.
  * Improve logic to get the DDL statements as a part of the
    comparison.
  * Fixed tab key navigation issue for Grant Wizard.
  * Fixed Unicode character issue causing error on Python2 environment.
  * Fixed focus color issue for Alertify dialog buttons.</changelog>
  <changelog author="alarrosa@suse.com" date="1589457600">- Decrease requirements to build in SLE/Leap:
  * Werkzeug from 0.15.0 to 0.14.1
  * passlib from 1.7.2 to 1.7.1
  * psycopg from 2.8 to 2.7.4
  * python-dateutil from 2.8.0 to 2.7.3
  * simplejson from 3.16.0 to 3.13.2
  * pytz from 2018.9 to 2018.3
  pgadmin has this tendency to just follow the latest versions
  instead of properly specify required versions.</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1592222400">- Update to 4.22
  - New features
  * Added connected pgAdmin user and connection name in the log file.
  * Show the startup log as well as the server log in the runtime's log
    viewer.
  - Bugfixes
  * Gracefully informed the user that the database is already connected when
  they click on "Connect Database...".
  * Fixed an issue where clicking on the cross button of the alert box on
  the login page is not working.
  * Fixed the SQL help issue for EDB Postgres Advanced Server.
  * Ensure that maintenance job should be worked properly for indexes under
  a materialized view.
  * Ensure that file browse "home" button should point to $HOME rather than /.
  * Ensure that 'With OID' option should be disabled while taking backup of
  database server version 12 and above.
  * Fixed invalid literal issue when removing the connection limit for the
  existing role.
  * Fixed internal server error when clicking on Triggers -&gt; 'Enable All'
  for partitions.
  * Fixed generated SQL issue for auto vacuum options.
  * Ensure that the dependencies tab shows correct information for Synonyms.
  * Fixed an issue where the newly added table is not alphabetically added
  to the tree.
  * Fixed list sorting issue in the schema diff tool.
  * Fixed an issue while comparing the two identical schemas using the
  schema diff tool.
  * Fixed an issue when renaming the column not added in the proper order.
  * Correct ipv4 "all interfaces" address in the container docs, per Frank
  Limpert.
  * Fixed an issue where select2 hover is inconsistent for the SSL field in
  create server dialog.
  * Fixed post-login redirect location when running in server mode under a
  non-default root.
  * Fixed an issue where the background job creation fails if there is only
  a version-specific python binary available in PATH.
  * Fixed data truncation issue when updating the data of type character
    with length.
  * Fixed an issue where if LDAP_SEARCH_BASE_DN is not set then, the value
    for LDAP_BASE_DN will be considered.
  * Fixed an issue where clicking on Select All button, not selecting all
    the options in pgAgent job scheduler.
  * Clarify and correct the docs on enabling the pl/debugger plugin on the
    server.
  * Fixed Unicode decode error 'utf-8' codec can't decode byte.
- Packaging:
  * refresh fix-python-lib.patch
  * add keyring e8697e2eef76c02d3a6332778881b2a8210976f2 enabling
    GPG source tarballs verification</changelog>
  <changelog author="mrueckert@suse.de" date="1594728000">- Update to 4.23
  - New features
  - Issue #5468 - Added option to ignore the whitespaces while
    comparing objects in schema diff.
  - Issue #5500 - Added server group name while selecting servers
    in schema diff.
  - Issue #5516 - Added support of Row Security Policies.
  - Issue #5576 - Improve error messaging if the storage and log
    directories cannot be created.
  - Housekeeping
  - Issue #5325 - Improve code coverage and API test cases for
    Collations.
  - Issue #5574 - Cleanup Windows build scripts and ensure
    Windows x64 builds will work.
  - Issue #5581 - Documentation of Row Level Security Policies.
  - Bug fixes
  - Issue #3591 - Ensure that the query tool should display the
    proper error message while terminating the active session.
  - Issue #3669 - Ensure that proper error should be displayed
    for the deleted node.
  - Issue #3787 - Disabled the Stop process button after clicking
    it and added a message ?Terminating the process?? to notify
    the user.
  - Issue #4226 - Fixed an issue where select all checkbox only
    selects the first 50 tables.
  - Issue #5416 - Ensure that the query tool panel gets closed
    when clicking on the ?Don?t Save? button.
  - Issue #5465 - Fixed an issue where the Edge browser version
    is showing wrong and warning message gets displayed.
  - Issue #5492 - Fixed an issue where the search object is
    unable to locate inherited tables and constraint filters are
    not working.
  - Issue #5507 - Fixed connection and version number detection
    issue when the database server is upgraded.
  - Issue #5521 - Fixed an issue when dumping servers from a
    desktop pgAdmin app by providing an option ??sqlite-path?.
  - Issue #5539 - Fixed typo in exception keyword.
  - Issue #5584 - Fixed an issue where two identical tables
    showing different by schema diff tool.
  - Issue #5592 - Ensure that pgadmin should be able to connect
    to the server which has password more than 1000 characters.</changelog>
  <changelog author="mrueckert@suse.de" date="1596542400">- Update to 4.24
  - New features
  - Issue #5235 - Support configuration files that are external
    to the application installation.
  - Issue #5484 - Added support for LDAP authentication with
    different DN by setting the dedicated user for the LDAP
    connection.
  - Issue #5583 - Added support for schema level restriction.
  - Issue #5601 - Added RLS Policy support in Schema Diff.
  - Issue #5622 - Added support for permissive/restricted policy
    type while creating RLS Policy.
  - Issue #5650 - Added support for LDAP anonymous binding.
  - Issue #5653 - Added High Contrast theme support.
  - Housekeeping
  - Issue #5323 - Improve code coverage and API test cases for
    Foreign Data Wrapper.
  - Issue #5326 - Improve code coverage and API test cases for
    Domain and Domain Constraints.
  - Issue #5329 - Improve code coverage and API test cases for
    FTS Configuration, FTS Parser, FTS Dictionaries, and FTS
    Template.
  - Bug fixes
  - Issue #3814 - Fixed issue of error message not getting
    displayed when filename is empty for backup, restore, and
    import/export.
  - Issue #3851 - Add proper indentation to the code while
    generating functions, procedures, and trigger functions.
  - Issue #4235 - Fixed tab indent issue on a selection of lines
    is deleting the content when ?use spaces == true? in the
    preferences.
  - Issue #5137 - Fixed save button enable issue when focusing in
    and out of numeric input field.
  - Issue #5287 - Fixed dark theme-related CSS and modify the
    color codes.
  - Issue #5414 - Use QStandardPaths::AppLocalDataLocation in the
    runtime to determine where to store runtime logs.
  - Issue #5463 - Fixed an issue where CSV download quotes
    numeric columns.
  - Issue #5470 - Fixed backgrid row hover issue where on hover
    background color is set for edit and delete cell only.
  - Issue #5530 - Ensure that the referenced table should be
    displayed on foreign key constraints.
  - Issue #5554 - Replace the runtime themes with ones that don?t
    have sizing issues.
  - Issue #5569 - Fixed reverse engineered SQL for partitions
    when storage parameters are specified.
  - Issue #5577 - Include LICENSE and DEPENDENCIES [inventory]
    files in official packages.
  - Issue #5621 - Remove extra brackets from reverse engineering
    SQL of RLS Policy.
  - Issue #5629 - Fixed an issue where the user is able to edit
    properties when some of the collection nodes are selected.
  - Issue #5630 - Fixed an issue where installation of pgadmin4
    not working on 32-bit Windows.
  - Issue #5631 - Fixed ?cant execute empty query? issue when
    remove the value of ?USING? or ?WITH CHECK? option of RLS
    Policy.
  - Issue #5633 - Ensure that create RLS Policy menu should not
    be visible for catalog objects.
  - Issue #5647 - Fixed an issue where difference DDL is showing
    the wrong SQL when changing the policy owner.
  - Issue #5662 - Fixed accessibility issue where few dialogs are
    not rendering properly when we zoomed in browser window 200%
    and screen resolution is low.
  - Issue #5666 - Added missing dependencies/dependent and
    corrected some wrongly identified.
  - Issue #5673 - Fixed an issue where fetching the schema throws
    an error if the database is not connected in Schema Diff.
  - Issue #5675 - Fixed CSRF errors when pgAdmin opened in an
    iframe on safari browser.
  - Issue #5677 - Fixed text color issue in explain analyze for
    the Dark theme.
  - Issue #5686 - Fixed issue where the user was not able to
    update policy if the policy is created with space.
- update requires to match requirements.txt</changelog>
  <changelog author="info@paolostivanin.com" date="1599480000">- Update to 4.25:
  - Modified schema diff tool to compare two databases instead of
    two schemas
  - Resolve schema diff dependencies by selecting the appropriate
    node automatically and maintain the order in the
    generated script.
  - Replace charting library Flotr2 with ChartJS using React.
  - Upgrade font-awesome from v4 to v5.
  - Fixed an issue where debugger doesn't work if the search path
    is set other than 'public'.
  - Fixed ssh tunnel hang issue when the user tries to disconnect
    the server.
  - Fixed an issue where conversion of bytea to the binary string
    results in an error.
  - Fixed an issue where the entire logs are in red text when the
    user runs backup and restore.
  - Ensure that the user will be able to modify the start value
    of the Identity column.
  - Fixed an issue where 'ALTER VIEW' statement is missing when
    the user sets the default value of a column for View.</changelog>
  <changelog author="asn@cryptomilk.org" date="1599739200">- Only activate the pgadmin4 apache config if the PGADMIN4 flag is set.
  For mod_wsgi you should use `a2enmod wsgi`
- Create /etc/pgadmin/config_system.py with server mode for web
  Run /usr/lib/python3.6/site-packages/pgadmin4-web/setup.py to create
  the admin user
- Remove config_local.py with outdated options</changelog>
  <changelog author="asn@cryptomilk.org" date="1599825600">- Create a pgadmin user and group
- Add uwsgi configuration (fast, user privileges and apparmor support)</changelog>
  <changelog author="mrueckert@suse.de" date="1600603200">- Update to 4.26:
  - Added SQL Formatter support in Query Tool.
  - Added a new button to the query tool toolbar to open a new
    query tool window.
  - Added shared server support for admin users.
  - Warn the user when connecting to a server that is older than
    pgAdmin supports.
  - Ensure that schema names starting with 'pg' should be visible
    in browser tree when standard_conforming_strings is set to off.
  - Fixed an issue where --load-server does not allow loading
    connections that use pg_services.
  - Fixed string indices must be integers issue for PostgreSQL &lt;
    9.3.
  - Fixed an issue where the application ignores the fixed port
    configuration value.
  - Remove illegal argument from trigger function in trigger DDL
    statement.
  - Ensure that 'setup-web.sh' should work in Debian 10.
  - Fixed excessive CPU usage by stopping the indefinite growth of
    the graph dataset.</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Specify path for pg_dump and pg_restore
- Disable update check (if you're on leap or other you wont be able
  to upgrade to a newer version anyway)</changelog>
  <changelog author="ecsos@opensuse.org" date="1602936000">- Update to 4.27:
  - Added Macro support.
  - Added support to view trigger function under the respective
    trigger node.
  - Allow user to change the database connection from an open query
    tool tab.
  - Added support to ignore the owner while comparing objects in
    the Schema Diff tool.
  - Merged the latest code of 'pgcli' used for the autocomplete
    feature.
  - Fixed invalid literal issue when fetching dependencies for
    Materialized View.
  - Fixed an issue where schema diff is showing identical table as
    different due to default vacuum settings.
  - Ensure that the user should be able to change the start value
    of the existing sequence.
  - Fixed an issue where the query tool is not fetching more than
    1000 rows for the table does not have any primary key.
  - Fixed an issue where 'Rows X' column values were not visible
    properly for Explain Analyze in Dark theme.
  - Fixed an issue where file extension is stripped on renaming a
    file.</changelog>
  <changelog author="mrueckert@suse.de" date="1605700800">- Update to 4.28:
  - Added support to download utility files at the client-side.
  - Added support to rename query tool and debugger tabs title.
  - Added support for dynamic tab size.
  - Added tab title placeholder for Query Tool, View/Edit Data, and
    Debugger.
  - Added support to compare schemas and databases in schema diff.
  - Ensure that non-superuser should be able to debug the function.
  - Ensure that query history should be listed by date/time in
    descending order.
  - Ensure that Grant Wizard should include foreign tables.
  - Ensure that search object functionality works with case
    insensitive string.</changelog>
  <changelog author="ecsos@opensuse.org" date="1607688000">- Update to 4.29:
  - Ensure that folder rename should work properly in Storage
    Manager
  - Fixed an issue where the debugger's custom tab title not
    applied when opened in the new browser tab
  - Fixed an issue where dynamic tab title has not applied the
    first time for debugger panel
  - Fixed an issue where schema diff doesn't show the result of
    compare if source schema has tables with RLS
  - Fixed an issue where the process watcher dialog throws an error
    for the database server which is already removed
  - Ensure that code coverage should cover class and function
    declarations
  - Ensure that dirty indicator (*) should not be visible when
    renaming the tabs
  - Fixed an issue where shared servers import is failing
  - Improve code coverage and API test cases for Foreign Tables,
    Debugger, Views and Materialized Views
- Fix some requirement versions.</changelog>
  <changelog author="asn@cryptomilk.org" date="1607688001">- Add BuildRequires for python modules</changelog>
  <changelog author="alarrosa@suse.com" date="1611748800">- Add BuildRequires for python-cryptography and replace dependency for
  python-Flask-Babel with python-Flask-BabelEx</changelog>
  <changelog author="alarrosa@suse.com" date="1611748801">- Fix the desktop application by removing the overriding of
  SERVER_MODE in config_system.py and config_distro.py which were
  forcing SERVER_MODE to always have a specific value instead
  of letting the runtime choose so there's no need to force it.
- Rename pgadmin4.conf to pgadmin4.conf.in,
  pgadmin4.uwsgi to pgadmin4.uwsgi.in and
  README.SUSE.uwsgi to README.SUSE.uwsgi.in and make them also
  replace PYTHONSITELIB  with the python version used at build time
- Replace all variables from config files in %prep instead of
  %install
- Include README.SUSE.uwsgi in the web-uwsgi subpackage</changelog>
  <changelog author="mrueckert@suse.de" date="1612008000">- Update to 4.30
  - Features:
  - ERD Tool (Beta): The Entity-Relationship Diagram (ERD) tool
    is a database design tool that provides a graphical
    representation of database tables, columns, and
    inter-relationships. You can use the ERD tool to design a new
    schema and generate the SQL required to create it, or to
    reverse engineer and diagram an existing database schema.
  - Kerberos support is added in pgAdmin 4 using SPNEGO for
    logging into pgAdmin, similar to the existing LDAP and
    "internal" options. Note that support for logging into
    database servers using Kerberos is not included in this
    release, but will be added in a future version.
  - Add a container option (PGADMIN_DISABLE_POSTFIX) to disable
    the Postfix server: Postfix (like other MTAs) must start as
    user 'root', and the pgAdmin container achieves this using
    'sudo'. Whilst that works well in most environments, it can
    cause problems in some. This option allows you to completely
    disable Postfix to avoid these issues, though you will need
    to configure an external mail server to be used to send
    password reset emails.
  - Bugs/Housekeeping:
  - Improve the explain plan details by showing a popup instead
    of a tooltip when clicking on plan nodes.
  - Ensure that verbose logs are visible for Utility (Backup,
    Maintenance etc.) jobs.
  - Added support for expressions in exclusion constraints.
  - Ensure that the 'template1' database is not visible after
    pg_upgrade.
  - Added appropriate help message and a placeholder for letting
    users know about the account password expiry for Login/Group
    Role.
  - Updated Flask-BabelEx to the latest version.
  - Fixed extra parentheses issue around joins for Views.
  - Ensure that the current value of sequences is ignored while
    comparing using Schema Diff.
  - Fixed an issue when the user tries to delete multiple records
    in the data grid.
  - Fixed TypeError exception in schema diff when selecting two
    identical objects.
  - Include PostgreSQL 13 utilities in the container
    distribution.
  https://www.pgadmin.org/docs/pgadmin4/4.30/release_notes_4_30.html</changelog>
  <changelog author="mrueckert@suse.de" date="1612180800">- the system wide service does not need to run as root. switch to
  user/group pgadmin</changelog>
  <changelog author="alarrosa@suse.com" date="1612267200">- Fix typos (chmod being used instead of chown in %postun web and
  pgadmin4 used in the service file for User/Group keys instead of
  pgadmin)</changelog>
  <changelog author="alarrosa@suse.com" date="1649419200">- Add patch from upstream to fix an issue throwing an error in
  when uploading a CSV Desktop mode:
  * 0001-Fixed-an-issue-when-uploading-a-CSV.patch
- Add patch from upstream to fix an unrestricted file upload in
  pgAdmin (boo#1197143, CVE-2022-0959):
  * 0002-Ensure-that-upload-paths-are-children-of-the-storage-directory.patch</changelog>
</package>
<package pkgid="e49eb369e659eebc714bf22f1eb6850ad748f0c904968469509ebbf3e9629f13" name="pgadmin4-doc" arch="noarch">
  <version epoch="0" ver="4.30" rel="150300.3.3.1"/>
  <changelog author="alarrosa@suse.com" date="1589371200">- Update to 4.21
  - New features
  * Added search object functionality.
  * Added LDAP authentication support.
  * Added support for parameter toast_tuple_target and parallel_workers
    of the table.
  * Added support of Packages, Sequences and Synonyms to the
    Schema Diff.
  * Added an option to prevent a browser tab being opened at startup.
  - Bug fixes
  * Ensure that the start and end date should be deleted when clear
    the selection for pgAgent Job.
  * Fixed calendar opening issue on the exception tab inside the
    schedules tab of pgAgent.
  * Fixed an issue where the autovacuum_enabled parameter is added
    automatically in the RE-SQL when the table has been created
    using the WITH clause.
  * Fixed generated SQL when any token in FTS Configuration or any
    option in FTS Dictionary is changed.
  * Fixed tab key navigation issue for parameters in table dialog.
  * Ensure that switch cell is in sync with switch control for
    accessibility.
  * Fixed compilation warnings while building pgAdmin.
- Update to 4.20
  - New features
  * Added support of Collation, FTS Configuration, FTS Dictionary,
    FTS Parser and FTS Template to the Schema Diff.
  * Added support of Domain, Domain Constraints and Types to the
    Schema Diff.
  - Housekeeping
  * Enhance the color of switch control for both light and dark theme.
  * Added and fixed gettext usage for better translation coverage.
  - Bug fixes
  * Fix an issue where the user can not change the value of DateTime
    picker control using keyboard.
  * Fixed some accessibility issues in the dialogs.
  * Fixed chrome driver download utility issue for Ubuntu.
  * Change some colors and opacity to comply with WCAG color
    contrast standards.
  * Fix an accessibility issue to maximize the panel for all
    alertify dialog.
  * Improve logic to get the DDL statements as a part of the
    comparison.
  * Fixed tab key navigation issue for Grant Wizard.
  * Fixed Unicode character issue causing error on Python2 environment.
  * Fixed focus color issue for Alertify dialog buttons.</changelog>
  <changelog author="alarrosa@suse.com" date="1589457600">- Decrease requirements to build in SLE/Leap:
  * Werkzeug from 0.15.0 to 0.14.1
  * passlib from 1.7.2 to 1.7.1
  * psycopg from 2.8 to 2.7.4
  * python-dateutil from 2.8.0 to 2.7.3
  * simplejson from 3.16.0 to 3.13.2
  * pytz from 2018.9 to 2018.3
  pgadmin has this tendency to just follow the latest versions
  instead of properly specify required versions.</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1592222400">- Update to 4.22
  - New features
  * Added connected pgAdmin user and connection name in the log file.
  * Show the startup log as well as the server log in the runtime's log
    viewer.
  - Bugfixes
  * Gracefully informed the user that the database is already connected when
  they click on "Connect Database...".
  * Fixed an issue where clicking on the cross button of the alert box on
  the login page is not working.
  * Fixed the SQL help issue for EDB Postgres Advanced Server.
  * Ensure that maintenance job should be worked properly for indexes under
  a materialized view.
  * Ensure that file browse "home" button should point to $HOME rather than /.
  * Ensure that 'With OID' option should be disabled while taking backup of
  database server version 12 and above.
  * Fixed invalid literal issue when removing the connection limit for the
  existing role.
  * Fixed internal server error when clicking on Triggers -&gt; 'Enable All'
  for partitions.
  * Fixed generated SQL issue for auto vacuum options.
  * Ensure that the dependencies tab shows correct information for Synonyms.
  * Fixed an issue where the newly added table is not alphabetically added
  to the tree.
  * Fixed list sorting issue in the schema diff tool.
  * Fixed an issue while comparing the two identical schemas using the
  schema diff tool.
  * Fixed an issue when renaming the column not added in the proper order.
  * Correct ipv4 "all interfaces" address in the container docs, per Frank
  Limpert.
  * Fixed an issue where select2 hover is inconsistent for the SSL field in
  create server dialog.
  * Fixed post-login redirect location when running in server mode under a
  non-default root.
  * Fixed an issue where the background job creation fails if there is only
  a version-specific python binary available in PATH.
  * Fixed data truncation issue when updating the data of type character
    with length.
  * Fixed an issue where if LDAP_SEARCH_BASE_DN is not set then, the value
    for LDAP_BASE_DN will be considered.
  * Fixed an issue where clicking on Select All button, not selecting all
    the options in pgAgent job scheduler.
  * Clarify and correct the docs on enabling the pl/debugger plugin on the
    server.
  * Fixed Unicode decode error 'utf-8' codec can't decode byte.
- Packaging:
  * refresh fix-python-lib.patch
  * add keyring e8697e2eef76c02d3a6332778881b2a8210976f2 enabling
    GPG source tarballs verification</changelog>
  <changelog author="mrueckert@suse.de" date="1594728000">- Update to 4.23
  - New features
  - Issue #5468 - Added option to ignore the whitespaces while
    comparing objects in schema diff.
  - Issue #5500 - Added server group name while selecting servers
    in schema diff.
  - Issue #5516 - Added support of Row Security Policies.
  - Issue #5576 - Improve error messaging if the storage and log
    directories cannot be created.
  - Housekeeping
  - Issue #5325 - Improve code coverage and API test cases for
    Collations.
  - Issue #5574 - Cleanup Windows build scripts and ensure
    Windows x64 builds will work.
  - Issue #5581 - Documentation of Row Level Security Policies.
  - Bug fixes
  - Issue #3591 - Ensure that the query tool should display the
    proper error message while terminating the active session.
  - Issue #3669 - Ensure that proper error should be displayed
    for the deleted node.
  - Issue #3787 - Disabled the Stop process button after clicking
    it and added a message ?Terminating the process?? to notify
    the user.
  - Issue #4226 - Fixed an issue where select all checkbox only
    selects the first 50 tables.
  - Issue #5416 - Ensure that the query tool panel gets closed
    when clicking on the ?Don?t Save? button.
  - Issue #5465 - Fixed an issue where the Edge browser version
    is showing wrong and warning message gets displayed.
  - Issue #5492 - Fixed an issue where the search object is
    unable to locate inherited tables and constraint filters are
    not working.
  - Issue #5507 - Fixed connection and version number detection
    issue when the database server is upgraded.
  - Issue #5521 - Fixed an issue when dumping servers from a
    desktop pgAdmin app by providing an option ??sqlite-path?.
  - Issue #5539 - Fixed typo in exception keyword.
  - Issue #5584 - Fixed an issue where two identical tables
    showing different by schema diff tool.
  - Issue #5592 - Ensure that pgadmin should be able to connect
    to the server which has password more than 1000 characters.</changelog>
  <changelog author="mrueckert@suse.de" date="1596542400">- Update to 4.24
  - New features
  - Issue #5235 - Support configuration files that are external
    to the application installation.
  - Issue #5484 - Added support for LDAP authentication with
    different DN by setting the dedicated user for the LDAP
    connection.
  - Issue #5583 - Added support for schema level restriction.
  - Issue #5601 - Added RLS Policy support in Schema Diff.
  - Issue #5622 - Added support for permissive/restricted policy
    type while creating RLS Policy.
  - Issue #5650 - Added support for LDAP anonymous binding.
  - Issue #5653 - Added High Contrast theme support.
  - Housekeeping
  - Issue #5323 - Improve code coverage and API test cases for
    Foreign Data Wrapper.
  - Issue #5326 - Improve code coverage and API test cases for
    Domain and Domain Constraints.
  - Issue #5329 - Improve code coverage and API test cases for
    FTS Configuration, FTS Parser, FTS Dictionaries, and FTS
    Template.
  - Bug fixes
  - Issue #3814 - Fixed issue of error message not getting
    displayed when filename is empty for backup, restore, and
    import/export.
  - Issue #3851 - Add proper indentation to the code while
    generating functions, procedures, and trigger functions.
  - Issue #4235 - Fixed tab indent issue on a selection of lines
    is deleting the content when ?use spaces == true? in the
    preferences.
  - Issue #5137 - Fixed save button enable issue when focusing in
    and out of numeric input field.
  - Issue #5287 - Fixed dark theme-related CSS and modify the
    color codes.
  - Issue #5414 - Use QStandardPaths::AppLocalDataLocation in the
    runtime to determine where to store runtime logs.
  - Issue #5463 - Fixed an issue where CSV download quotes
    numeric columns.
  - Issue #5470 - Fixed backgrid row hover issue where on hover
    background color is set for edit and delete cell only.
  - Issue #5530 - Ensure that the referenced table should be
    displayed on foreign key constraints.
  - Issue #5554 - Replace the runtime themes with ones that don?t
    have sizing issues.
  - Issue #5569 - Fixed reverse engineered SQL for partitions
    when storage parameters are specified.
  - Issue #5577 - Include LICENSE and DEPENDENCIES [inventory]
    files in official packages.
  - Issue #5621 - Remove extra brackets from reverse engineering
    SQL of RLS Policy.
  - Issue #5629 - Fixed an issue where the user is able to edit
    properties when some of the collection nodes are selected.
  - Issue #5630 - Fixed an issue where installation of pgadmin4
    not working on 32-bit Windows.
  - Issue #5631 - Fixed ?cant execute empty query? issue when
    remove the value of ?USING? or ?WITH CHECK? option of RLS
    Policy.
  - Issue #5633 - Ensure that create RLS Policy menu should not
    be visible for catalog objects.
  - Issue #5647 - Fixed an issue where difference DDL is showing
    the wrong SQL when changing the policy owner.
  - Issue #5662 - Fixed accessibility issue where few dialogs are
    not rendering properly when we zoomed in browser window 200%
    and screen resolution is low.
  - Issue #5666 - Added missing dependencies/dependent and
    corrected some wrongly identified.
  - Issue #5673 - Fixed an issue where fetching the schema throws
    an error if the database is not connected in Schema Diff.
  - Issue #5675 - Fixed CSRF errors when pgAdmin opened in an
    iframe on safari browser.
  - Issue #5677 - Fixed text color issue in explain analyze for
    the Dark theme.
  - Issue #5686 - Fixed issue where the user was not able to
    update policy if the policy is created with space.
- update requires to match requirements.txt</changelog>
  <changelog author="info@paolostivanin.com" date="1599480000">- Update to 4.25:
  - Modified schema diff tool to compare two databases instead of
    two schemas
  - Resolve schema diff dependencies by selecting the appropriate
    node automatically and maintain the order in the
    generated script.
  - Replace charting library Flotr2 with ChartJS using React.
  - Upgrade font-awesome from v4 to v5.
  - Fixed an issue where debugger doesn't work if the search path
    is set other than 'public'.
  - Fixed ssh tunnel hang issue when the user tries to disconnect
    the server.
  - Fixed an issue where conversion of bytea to the binary string
    results in an error.
  - Fixed an issue where the entire logs are in red text when the
    user runs backup and restore.
  - Ensure that the user will be able to modify the start value
    of the Identity column.
  - Fixed an issue where 'ALTER VIEW' statement is missing when
    the user sets the default value of a column for View.</changelog>
  <changelog author="asn@cryptomilk.org" date="1599739200">- Only activate the pgadmin4 apache config if the PGADMIN4 flag is set.
  For mod_wsgi you should use `a2enmod wsgi`
- Create /etc/pgadmin/config_system.py with server mode for web
  Run /usr/lib/python3.6/site-packages/pgadmin4-web/setup.py to create
  the admin user
- Remove config_local.py with outdated options</changelog>
  <changelog author="asn@cryptomilk.org" date="1599825600">- Create a pgadmin user and group
- Add uwsgi configuration (fast, user privileges and apparmor support)</changelog>
  <changelog author="mrueckert@suse.de" date="1600603200">- Update to 4.26:
  - Added SQL Formatter support in Query Tool.
  - Added a new button to the query tool toolbar to open a new
    query tool window.
  - Added shared server support for admin users.
  - Warn the user when connecting to a server that is older than
    pgAdmin supports.
  - Ensure that schema names starting with 'pg' should be visible
    in browser tree when standard_conforming_strings is set to off.
  - Fixed an issue where --load-server does not allow loading
    connections that use pg_services.
  - Fixed string indices must be integers issue for PostgreSQL &lt;
    9.3.
  - Fixed an issue where the application ignores the fixed port
    configuration value.
  - Remove illegal argument from trigger function in trigger DDL
    statement.
  - Ensure that 'setup-web.sh' should work in Debian 10.
  - Fixed excessive CPU usage by stopping the indefinite growth of
    the graph dataset.</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Specify path for pg_dump and pg_restore
- Disable update check (if you're on leap or other you wont be able
  to upgrade to a newer version anyway)</changelog>
  <changelog author="ecsos@opensuse.org" date="1602936000">- Update to 4.27:
  - Added Macro support.
  - Added support to view trigger function under the respective
    trigger node.
  - Allow user to change the database connection from an open query
    tool tab.
  - Added support to ignore the owner while comparing objects in
    the Schema Diff tool.
  - Merged the latest code of 'pgcli' used for the autocomplete
    feature.
  - Fixed invalid literal issue when fetching dependencies for
    Materialized View.
  - Fixed an issue where schema diff is showing identical table as
    different due to default vacuum settings.
  -